unt(./8729/file0) [1133716ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101217 #0 [1133741ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1133742ms] <- perf_event_open=0x3 errno=14 cover=6720 #0 [1133743ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) #0 [1133743ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=74 #0 [1133744ms] -> syz_mount_image$iso9660(0x20000000, 0x20000100, 0x0, 0x3, 0x20000200, 0x0, 0x20000140) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='iso9660' flags=1 opts='' #0 [1133766ms] <- syz_mount_image$iso9660=0x6 errno=0 cover=23145 #0 [1133769ms] -> dup2(0x6, 0x6) #0 [1133770ms] <- dup2=0x6 errno=14 cover=43 #0 [1133771ms] -> getdents64(0x6, 0x20000040, 0x81) #0 [1133771ms] <- getdents64=0x30 errno=14 cover=346 2021/11/11 13:06:07 result hanged=false: 2021/11/11 13:06:07 added new input for call #2 syz_mount_image$iso9660 to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a08020000010000010101", 0xaa, 0xb800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = dup2(r0, r0) getdents64(r1, &(0x7f0000000040)=""/129, 0x81) umount(./8730/file0) 13:06:07 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) lseek(r0, 0x8, 0x0) [1133864ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101219 #0 [1133883ms] -> openat$procfs(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [1133884ms] <- openat$procfs=0x3 errno=14 cover=1391 #0 [1133884ms] -> lseek(0x3, 0x8, 0x0) #0 [1133885ms] <- lseek=0x8 errno=14 cover=2826 enabling collider #0 [1133885ms] -> openat$procfs(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [1133886ms] <- openat$procfs=0x3 errno=14 cover=1467 2021/11/11 13:06:07 result hanged=false: 13:06:07 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) lseek(r0, 0x8, 0x0) 2021/11/11 13:06:07 #0: triaging type=7 2021/11/11 13:06:07 triaging input for call #1 lseek (new signal=4) [1133933ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101221 #0 [1133953ms] -> openat$procfs(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [1133955ms] <- openat$procfs=0x3 errno=14 cover=1402 #0 [1133956ms] -> lseek(0x3, 0x8, 0x0) #0 [1133956ms] <- lseek=0x8 errno=14 cover=3697 13:06:07 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) lseek(r0, 0x8, 0x0) 2021/11/11 13:06:07 result hanged=false: [1134005ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101223 #0 [1134025ms] -> openat$procfs(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [1134026ms] <- openat$procfs=0x3 errno=14 cover=1401 #0 [1134026ms] -> lseek(0x3, 0x8, 0x0) #0 [1134027ms] <- lseek=0x8 errno=14 cover=2105 2021/11/11 13:06:07 result hanged=false: 13:06:07 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) lseek(r0, 0x8, 0x0) [1134072ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101225 #0 [1134091ms] -> openat$procfs(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [1134092ms] <- openat$procfs=0x3 errno=14 cover=1412 #0 [1134093ms] -> lseek(0x3, 0x8, 0x0) #0 [1134093ms] <- lseek=0x8 errno=14 cover=2128 2021/11/11 13:06:07 result hanged=false: 2021/11/11 13:06:07 added new input for call #1 lseek to corpus: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) lseek(r0, 0x8, 0x0) 13:06:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000005a40)=[{{&(0x7f0000000240)=@in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) [1134139ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101227 #0 [1134159ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1134162ms] <- socket$inet6_udp=0x3 errno=14 cover=1695 #0 [1134163ms] -> sendmmsg$sock(0x3, 0x20005a40, 0x1, 0x0) #0 [1134164ms] <- sendmmsg$sock=0x1 errno=14 cover=1651 enabling collider #0 [1134165ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1134166ms] <- socket$inet6_udp=0x3 errno=14 cover=1755 13:06:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000005a40)=[{{&(0x7f0000000240)=@in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) 2021/11/11 13:06:07 result hanged=false: 2021/11/11 13:06:07 #0: triaging type=7 2021/11/11 13:06:07 triaging input for call #1 sendmmsg$sock (new signal=11) iptable filter/2: resetting iptable mangle/2: resetting [1134210ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101229 #0 [1134229ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1134230ms] <- socket$inet6_udp=0x3 errno=14 cover=1749 #0 [1134231ms] -> sendmmsg$sock(0x3, 0x20005a40, 0x1, 0x0) #0 [1134231ms] <- sendmmsg$sock=0x1 errno=14 cover=1637 13:06:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000005a40)=[{{&(0x7f0000000240)=@in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) 2021/11/11 13:06:07 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [1134277ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101231 #0 [1134298ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1134301ms] <- socket$inet6_udp=0x3 errno=14 cover=1662 #0 [1134303ms] -> sendmmsg$sock(0x3, 0x20005a40, 0x1, 0x0) #0 [1134306ms] <- sendmmsg$sock=0x1 errno=14 cover=1612 13:06:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000005a40)=[{{&(0x7f0000000240)=@in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) 2021/11/11 13:06:07 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [1134352ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101233 #0 [1134372ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1134373ms] <- socket$inet6_udp=0x3 errno=14 cover=1879 #0 [1134374ms] -> sendmmsg$sock(0x3, 0x20005a40, 0x1, 0x0) #0 [1134374ms] <- sendmmsg$sock=0x1 errno=14 cover=1637 2021/11/11 13:06:07 result hanged=false: 2021/11/11 13:06:07 added new input for call #1 sendmmsg$sock to corpus: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000005a40)=[{{&(0x7f0000000240)=@in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) 13:06:07 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(r0, 0xffffffffffffffff, 0x2) iptable filter/2: resetting iptable mangle/2: resetting [1134424ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101235 #0 [1134444ms] -> socketpair$nbd(0x1, 0x1, 0x0, 0x20000000) #0 [1134448ms] <- socketpair$nbd=0x0 errno=14 cover=3786 #0 [1134449ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [1134449ms] <- close_range=0x0 errno=14 cover=1308 #0 [1134449ms] -> close_range(0x3, 0xffffffffffffffff, 0x2) #0 [1134449ms] <- close_range=0x0 errno=14 cover=1912 enabling collider #0 [1134450ms] -> socketpair$nbd(0x1, 0x1, 0x0, 0x20000000) #0 [1134450ms] <- socketpair$nbd=0x0 errno=14 cover=3031 #0 [1134450ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [1134450ms] <- close_range=0x0 errno=14 cover=51 pthread_create failed (errno 11) 13:06:08 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(r0, 0xffffffffffffffff, 0x2) 2021/11/11 13:06:08 result hanged=false: 2021/11/11 13:06:08 #0: triaging type=7 2021/11/11 13:06:08 triaging input for call #2 close_range (new signal=1) [1134528ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101337 #0 [1134548ms] -> socketpair$nbd(0x1, 0x1, 0x0, 0x20000000) #0 [1134552ms] <- socketpair$nbd=0x0 errno=14 cover=3639 #0 [1134553ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [1134553ms] <- close_range=0x0 errno=14 cover=1297 #0 [1134553ms] -> close_range(0x3, 0xffffffffffffffff, 0x2) #0 [1134554ms] <- close_range=0x0 errno=14 cover=1912 2021/11/11 13:06:08 result hanged=false: 13:06:08 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(r0, 0xffffffffffffffff, 0x2) [1134597ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101339 #0 [1134617ms] -> socketpair$nbd(0x1, 0x1, 0x0, 0x20000000) #0 [1134623ms] <- socketpair$nbd=0x0 errno=14 cover=3571 #0 [1134625ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [1134625ms] <- close_range=0x0 errno=14 cover=1297 #0 [1134625ms] -> close_range(0x3, 0xffffffffffffffff, 0x2) #0 [1134626ms] <- close_range=0x0 errno=14 cover=1912 2021/11/11 13:06:08 result hanged=false: 13:06:08 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(r0, 0xffffffffffffffff, 0x2) [1134668ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101341 #0 [1134687ms] -> socketpair$nbd(0x1, 0x1, 0x0, 0x20000000) #0 [1134687ms] <- socketpair$nbd=0x0 errno=14 cover=3611 #0 [1134689ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [1134689ms] <- close_range=0x0 errno=14 cover=1319 #0 [1134691ms] -> close_range(0x3, 0xffffffffffffffff, 0x2) #0 [1134691ms] <- close_range=0x0 errno=14 cover=1912 2021/11/11 13:06:08 result hanged=false: 2021/11/11 13:06:08 added new input for call #2 close_range to corpus: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(r0, 0xffffffffffffffff, 0x2) 13:06:08 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x622, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "473d7fcc115d845089a8e3eefc4327c35d5f4c097347fb24dc13ef0e12d6bc7370068cf4ada46207f33a62ea0b5e364eee2b1dc94c1742ea96765c683f90df"}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="d9ce4b46bf0f2c16e534b8", 0xb}, {&(0x7f00000005c0)="0000a8", 0x3}], 0x2}, 0x0) recvmmsg(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/141, 0x8d}], 0x1) [1134735ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101343 #0 [1134755ms] -> socket$packet(0x11, 0x3, 0x300) #0 [1134758ms] <- socket$packet=0x3 errno=14 cover=1711 #0 [1134760ms] -> setsockopt$SO_TIMESTAMPING(0x3, 0x1, 0x25, 0x200001c0, 0x4) #0 [1134762ms] <- setsockopt$SO_TIMESTAMPING=0x0 errno=14 cover=139 #0 [1134762ms] -> sendmsg(0x3, 0x20000100, 0x0) #0 [1134762ms] <- sendmsg=0xffffffffffffffff errno=100 cover=228 #0 [1134763ms] -> recvmmsg(0x3, 0x200083c0, 0x1, 0x2000, 0x0) #0 [1134763ms] <- recvmmsg=0xffffffffffffffff errno=11 cover=147 #0 [1134763ms] -> readv(0x3, 0x20000440, 0x1) enabling collider pthread_create failed (errno 11) 13:06:09 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x622, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "473d7fcc115d845089a8e3eefc4327c35d5f4c097347fb24dc13ef0e12d6bc7370068cf4ada46207f33a62ea0b5e364eee2b1dc94c1742ea96765c683f90df"}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="d9ce4b46bf0f2c16e534b8", 0xb}, {&(0x7f00000005c0)="0000a8", 0x3}], 0x2}, 0x0) recvmmsg(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/141, 0x8d}], 0x1) 2021/11/11 13:06:09 result hanged=false: 2021/11/11 13:06:09 #0: triaging type=7 2021/11/11 13:06:09 triaging input for call #4 readv (new signal=1) [1135946ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101445 #0 [1135968ms] -> socket$packet(0x11, 0x3, 0x300) #0 [1135969ms] <- socket$packet=0x3 errno=14 cover=1783 #0 [1135970ms] -> setsockopt$SO_TIMESTAMPING(0x3, 0x1, 0x25, 0x200001c0, 0x4) #0 [1135971ms] <- setsockopt$SO_TIMESTAMPING=0x0 errno=14 cover=139 #0 [1135971ms] -> sendmsg(0x3, 0x20000100, 0x0) #0 [1135971ms] <- sendmsg=0xffffffffffffffff errno=100 cover=228 #0 [1135972ms] -> recvmmsg(0x3, 0x200083c0, 0x1, 0x2000, 0x0) #0 [1135972ms] <- recvmmsg=0xffffffffffffffff errno=11 cover=147 #0 [1135972ms] -> readv(0x3, 0x20000440, 0x1) 13:06:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x622, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "473d7fcc115d845089a8e3eefc4327c35d5f4c097347fb24dc13ef0e12d6bc7370068cf4ada46207f33a62ea0b5e364eee2b1dc94c1742ea96765c683f90df"}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="d9ce4b46bf0f2c16e534b8", 0xb}, {&(0x7f00000005c0)="0000a8", 0x3}], 0x2}, 0x0) recvmmsg(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/141, 0x8d}], 0x1) 2021/11/11 13:06:10 result hanged=false: [1137128ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101447 #0 [1137148ms] -> socket$packet(0x11, 0x3, 0x300) #0 [1137149ms] <- socket$packet=0x3 errno=14 cover=1765 #0 [1137150ms] -> setsockopt$SO_TIMESTAMPING(0x3, 0x1, 0x25, 0x200001c0, 0x4) #0 [1137151ms] <- setsockopt$SO_TIMESTAMPING=0x0 errno=14 cover=139 #0 [1137151ms] -> sendmsg(0x3, 0x20000100, 0x0) #0 [1137151ms] <- sendmsg=0xffffffffffffffff errno=100 cover=228 #0 [1137152ms] -> recvmmsg(0x3, 0x200083c0, 0x1, 0x2000, 0x0) #0 [1137152ms] <- recvmmsg=0xffffffffffffffff errno=11 cover=147 #0 [1137153ms] -> readv(0x3, 0x20000440, 0x1) 2021/11/11 13:06:11 result hanged=false: 13:06:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x622, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "473d7fcc115d845089a8e3eefc4327c35d5f4c097347fb24dc13ef0e12d6bc7370068cf4ada46207f33a62ea0b5e364eee2b1dc94c1742ea96765c683f90df"}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="d9ce4b46bf0f2c16e534b8", 0xb}, {&(0x7f00000005c0)="0000a8", 0x3}], 0x2}, 0x0) recvmmsg(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/141, 0x8d}], 0x1) [1138304ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101449 #0 [1138324ms] -> socket$packet(0x11, 0x3, 0x300) #0 [1138324ms] <- socket$packet=0x3 errno=14 cover=1737 #0 [1138326ms] -> setsockopt$SO_TIMESTAMPING(0x3, 0x1, 0x25, 0x200001c0, 0x4) #0 [1138326ms] <- setsockopt$SO_TIMESTAMPING=0x0 errno=14 cover=139 #0 [1138326ms] -> sendmsg(0x3, 0x20000100, 0x0) #0 [1138326ms] <- sendmsg=0xffffffffffffffff errno=100 cover=228 #0 [1138327ms] -> recvmmsg(0x3, 0x200083c0, 0x1, 0x2000, 0x0) #0 [1138327ms] <- recvmmsg=0xffffffffffffffff errno=11 cover=147 #0 [1138328ms] -> readv(0x3, 0x20000440, 0x1) 2021/11/11 13:06:12 result hanged=false: 2021/11/11 13:06:12 added new input for call #4 readv to corpus: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x622, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "473d7fcc115d845089a8e3eefc4327c35d5f4c097347fb24dc13ef0e12d6bc7370068cf4ada46207f33a62ea0b5e364eee2b1dc94c1742ea96765c683f90df"}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="d9ce4b46bf0f2c16e534b8", 0xb}, {&(0x7f00000005c0)="0000a8", 0x3}], 0x2}, 0x0) recvmmsg(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/141, 0x8d}], 0x1) 13:06:12 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x622, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "473d7fcc115d845089a8e3eefc4327c35d5f4c097347fb24dc13ef0e12d6bc7370068cf4ada46207f33a62ea0b5e364eee2b1dc94c1742ea96765c683f90df"}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="d9ce4b46bf0f2c16e534b8", 0xb}, {&(0x7f00000005c0)="0000a8", 0x3}], 0x2}, 0x0) recvmmsg(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/141, 0x8d}], 0x1) 2021/11/11 13:06:12 #0: triaging type=7 2021/11/11 13:06:12 triaging input for call #3 recvmmsg (new signal=5) [1139483ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101451 #0 [1139503ms] -> socket$packet(0x11, 0x3, 0x300) #0 [1139507ms] <- socket$packet=0x3 errno=14 cover=1755 #0 [1139508ms] -> setsockopt$SO_TIMESTAMPING(0x3, 0x1, 0x25, 0x200001c0, 0x4) #0 [1139508ms] <- setsockopt$SO_TIMESTAMPING=0x0 errno=14 cover=139 #0 [1139508ms] -> sendmsg(0x3, 0x20000100, 0x0) #0 [1139508ms] <- sendmsg=0xffffffffffffffff errno=100 cover=228 #0 [1139508ms] -> recvmmsg(0x3, 0x200083c0, 0x1, 0x2000, 0x0) #0 [1139508ms] <- recvmmsg=0xffffffffffffffff errno=11 cover=147 #0 [1139508ms] -> readv(0x3, 0x20000440, 0x1) 13:06:14 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x622, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "473d7fcc115d845089a8e3eefc4327c35d5f4c097347fb24dc13ef0e12d6bc7370068cf4ada46207f33a62ea0b5e364eee2b1dc94c1742ea96765c683f90df"}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="d9ce4b46bf0f2c16e534b8", 0xb}, {&(0x7f00000005c0)="0000a8", 0x3}], 0x2}, 0x0) recvmmsg(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/141, 0x8d}], 0x1) 2021/11/11 13:06:14 result hanged=false: [1140661ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101453 #0 [1140683ms] -> socket$packet(0x11, 0x3, 0x300) #0 [1140684ms] <- socket$packet=0x3 errno=14 cover=1801 #0 [1140685ms] -> setsockopt$SO_TIMESTAMPING(0x3, 0x1, 0x25, 0x200001c0, 0x4) #0 [1140685ms] <- setsockopt$SO_TIMESTAMPING=0x0 errno=14 cover=139 #0 [1140685ms] -> sendmsg(0x3, 0x20000100, 0x0) #0 [1140686ms] <- sendmsg=0xffffffffffffffff errno=100 cover=228 #0 [1140686ms] -> recvmmsg(0x3, 0x200083c0, 0x1, 0x2000, 0x0) #0 [1140687ms] <- recvmmsg=0xffffffffffffffff errno=11 cover=161 #0 [1140687ms] -> readv(0x3, 0x20000440, 0x1) 13:06:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x622, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "473d7fcc115d845089a8e3eefc4327c35d5f4c097347fb24dc13ef0e12d6bc7370068cf4ada46207f33a62ea0b5e364eee2b1dc94c1742ea96765c683f90df"}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="d9ce4b46bf0f2c16e534b8", 0xb}, {&(0x7f00000005c0)="0000a8", 0x3}], 0x2}, 0x0) recvmmsg(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/141, 0x8d}], 0x1) 2021/11/11 13:06:15 result hanged=false: [1141839ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101455 #0 [1141858ms] -> socket$packet(0x11, 0x3, 0x300) #0 [1141861ms] <- socket$packet=0x3 errno=14 cover=1726 #0 [1141863ms] -> setsockopt$SO_TIMESTAMPING(0x3, 0x1, 0x25, 0x200001c0, 0x4) #0 [1141866ms] <- setsockopt$SO_TIMESTAMPING=0x0 errno=14 cover=139 #0 [1141866ms] -> sendmsg(0x3, 0x20000100, 0x0) #0 [1141866ms] <- sendmsg=0xffffffffffffffff errno=100 cover=228 #0 [1141867ms] -> recvmmsg(0x3, 0x200083c0, 0x1, 0x2000, 0x0) #0 [1141867ms] <- recvmmsg=0xffffffffffffffff errno=11 cover=147 #0 [1141867ms] -> readv(0x3, 0x20000440, 0x1) 2021/11/11 13:06:16 result hanged=false: 2021/11/11 13:06:16 added new input for call #3 recvmmsg to corpus: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x622, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "473d7fcc115d845089a8e3eefc4327c35d5f4c097347fb24dc13ef0e12d6bc7370068cf4ada46207f33a62ea0b5e364eee2b1dc94c1742ea96765c683f90df"}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="d9ce4b46bf0f2c16e534b8", 0xb}, {&(0x7f00000005c0)="0000a8", 0x3}], 0x2}, 0x0) recvmmsg(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/141, 0x8d}], 0x1) 13:06:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x104e032, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x40000}}]}) 2021/11/11 13:06:16 poll: candidates=0 inputs=0 signal=0 2021/11/11 13:06:16 poll: candidates=8 inputs=0 signal=0 [1143024ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101457 #0 [1143045ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1143053ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13559 #0 [1143055ms] -> mount$9p_unix(0x20000180, 0x20002f00, 0x0, 0x1f3000, 0x0) #0 [1143055ms] <- mount$9p_unix=0x0 errno=14 cover=2789 #0 [1143056ms] -> syz_mount_image$ext4(0x20000000, 0x200002c0, 0x0, 0x0, 0x0, 0x104e032, 0x20000040) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='ext2' flags=17096754 opts='journal_ioprio=0x0000000000040000,,errors=continue' [ 1191.967307] EXT4-fs (sda): Invalid journal IO priority (must be 0-7) syz_mount_image > mount error: 22 #0 [1143093ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=171280 enabling collider #0 [1143096ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1143099ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1492 #0 [1143100ms] -> mount$9p_unix(0x20000180, 0x20002f00, 0x0, 0x1f3000, 0x0) #0 [1143101ms] <- mount$9p_unix=0x0 errno=14 cover=2661 pthread_create failed (errno 11) 13:06:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x104e032, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x40000}}]}) 2021/11/11 13:06:16 result hanged=false: 2021/11/11 13:06:16 #0: triaging type=7 2021/11/11 13:06:16 triaging input for call #2 syz_mount_image$ext4 (new signal=5) umount(./8750/file0) umount(./8750/file0) [1143182ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101559 #0 [1143202ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1143211ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13404 #0 [1143213ms] -> mount$9p_unix(0x20000180, 0x20002f00, 0x0, 0x1f3000, 0x0) #0 [1143214ms] <- mount$9p_unix=0x0 errno=14 cover=2829 #0 [1143215ms] -> syz_mount_image$ext4(0x20000000, 0x200002c0, 0x0, 0x0, 0x0, 0x104e032, 0x20000040) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='ext2' flags=17096754 opts='journal_ioprio=0x0000000000040000,,errors=continue' [ 1192.111241] EXT4-fs (sda): Invalid journal IO priority (must be 0-7) syz_mount_image > mount error: 22 #0 [1143223ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=6571 13:06:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x104e032, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x40000}}]}) 2021/11/11 13:06:16 result hanged=false: umount(./8751/file0) [1143273ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101561 #0 [1143293ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1143297ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13845 #0 [1143299ms] -> mount$9p_unix(0x20000180, 0x20002f00, 0x0, 0x1f3000, 0x0) #0 [1143300ms] <- mount$9p_unix=0x0 errno=14 cover=2815 #0 [1143301ms] -> syz_mount_image$ext4(0x20000000, 0x200002c0, 0x0, 0x0, 0x0, 0x104e032, 0x20000040) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='ext2' flags=17096754 opts='journal_ioprio=0x0000000000040000,,errors=continue' [ 1192.196500] EXT4-fs (sda): Invalid journal IO priority (must be 0-7) syz_mount_image > mount error: 22 #0 [1143306ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=6584 13:06:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x104e032, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x40000}}]}) 2021/11/11 13:06:16 result hanged=false: umount(./8752/file0) [1143364ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101563 #0 [1143384ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1143390ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13572 #0 [1143392ms] -> mount$9p_unix(0x20000180, 0x20002f00, 0x0, 0x1f3000, 0x0) #0 [1143392ms] <- mount$9p_unix=0x0 errno=14 cover=2818 #0 [1143393ms] -> syz_mount_image$ext4(0x20000000, 0x200002c0, 0x0, 0x0, 0x0, 0x104e032, 0x20000040) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='ext2' flags=17096754 opts='journal_ioprio=0x0000000000040000,,errors=continue' [ 1192.288567] EXT4-fs (sda): Invalid journal IO priority (must be 0-7) syz_mount_image > mount error: 22 #0 [1143398ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=6636 umount(./8753/file0) 2021/11/11 13:06:16 result hanged=false: 2021/11/11 13:06:16 added new input for call #2 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x104e032, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x40000}}]}) 13:06:16 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000000010000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x800}, {0x0, 0x0, 0x4000000001f00}], 0x0, &(0x7f0000012800)) [1143456ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101565 #0 [1143476ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x3, 0x20000200, 0x0, 0x20012800) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1192.385415] EXT4-fs error (device loop0): ext4_fill_super:4960: inode #2: comm syz-executor.0: iget: root inode unallocated [ 1192.388130] EXT4-fs (loop0): get root inode failed [ 1192.389296] EXT4-fs (loop0): mount failed syz_mount_image > mount error: 117 #0 [1143508ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=117 cover=54966 enabling collider #0 [1143510ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x3, 0x20000200, 0x0, 0x20012800) #0 [1143513ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=6105 13:06:17 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000000010000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x800}, {0x0, 0x0, 0x4000000001f00}], 0x0, &(0x7f0000012800)) 2021/11/11 13:06:17 result hanged=false: 2021/11/11 13:06:17 #0: triaging type=7 2021/11/11 13:06:17 triaging input for call #0 syz_mount_image$ext4 (new signal=10) [1143566ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101567 #0 [1143588ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x3, 0x20000200, 0x0, 0x20012800) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1192.504827] EXT4-fs error (device loop0): ext4_fill_super:4960: inode #2: comm syz-executor.0: iget: root inode unallocated [ 1192.509796] EXT4-fs (loop0): get root inode failed [ 1192.511238] EXT4-fs (loop0): mount failed syz_mount_image > mount error: 117 #0 [1143626ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=117 cover=55243 2021/11/11 13:06:17 result hanged=false: 13:06:17 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000000010000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x800}, {0x0, 0x0, 0x4000000001f00}], 0x0, &(0x7f0000012800)) [1143695ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101569 #0 [1143715ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x3, 0x20000200, 0x0, 0x20012800) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1192.624273] EXT4-fs error (device loop0): ext4_fill_super:4960: inode #2: comm syz-executor.0: iget: root inode unallocated [ 1192.627192] EXT4-fs (loop0): get root inode failed [ 1192.628328] EXT4-fs (loop0): mount failed syz_mount_image > mount error: 117 #0 [1143746ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=117 cover=58663 13:06:17 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000000010000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x800}, {0x0, 0x0, 0x4000000001f00}], 0x0, &(0x7f0000012800)) 2021/11/11 13:06:17 result hanged=false: [1143801ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101571 #0 [1143821ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x3, 0x20000200, 0x0, 0x20012800) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1192.730904] EXT4-fs error (device loop0): ext4_fill_super:4960: inode #2: comm syz-executor.0: iget: root inode unallocated [ 1192.734408] EXT4-fs (loop0): get root inode failed [ 1192.735713] EXT4-fs (loop0): mount failed syz_mount_image > mount error: 117 #0 [1143851ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=117 cover=55072 2021/11/11 13:06:17 result hanged=false: 2021/11/11 13:06:17 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000000010000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x800}, {0x0, 0x0, 0x4000000001f00}], 0x0, &(0x7f0000012800)) 13:06:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x4}}) [1143932ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101573 #0 [1143954ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [1143954ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3421 #0 [1143955ms] -> ioctl$TIOCSTI(0x3, 0x5412, 0x20000040) #0 [1143955ms] <- ioctl$TIOCSTI=0x0 errno=14 cover=476 #0 [1143955ms] -> ioctl$TIOCL_SETSEL(0x3, 0x541c, 0x20000000) #0 [1143956ms] <- ioctl$TIOCL_SETSEL=0x0 errno=14 cover=2225 enabling collider #0 [1143956ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [1143956ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3429 #0 [1143957ms] -> ioctl$TIOCSTI(0x3, 0x5412, 0x20000040) #0 [1143957ms] <- ioctl$TIOCSTI=0x0 errno=14 cover=573 pthread_create failed (errno 11) 13:06:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x4}}) 2021/11/11 13:06:17 result hanged=false: 2021/11/11 13:06:17 #0: triaging type=7 2021/11/11 13:06:17 triaging input for call #2 ioctl$TIOCL_SETSEL (new signal=1) [1144032ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101675 #0 [1144054ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [1144054ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3429 #0 [1144056ms] -> ioctl$TIOCSTI(0x3, 0x5412, 0x20000040) #0 [1144056ms] <- ioctl$TIOCSTI=0x0 errno=14 cover=559 #0 [1144058ms] -> ioctl$TIOCL_SETSEL(0x3, 0x541c, 0x20000000) #0 [1144058ms] <- ioctl$TIOCL_SETSEL=0x0 errno=14 cover=353 2021/11/11 13:06:17 result hanged=false: 13:06:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x4}}) [1144107ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101677 #0 [1144125ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [1144126ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3393 #0 [1144127ms] -> ioctl$TIOCSTI(0x3, 0x5412, 0x20000040) #0 [1144127ms] <- ioctl$TIOCSTI=0x0 errno=14 cover=590 #0 [1144127ms] -> ioctl$TIOCL_SETSEL(0x3, 0x541c, 0x20000000) #0 [1144127ms] <- ioctl$TIOCL_SETSEL=0x0 errno=14 cover=353 13:06:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x4}}) 2021/11/11 13:06:17 result hanged=false: [1144172ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101679 #0 [1144193ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [1144194ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3427 #0 [1144195ms] -> ioctl$TIOCSTI(0x3, 0x5412, 0x20000040) #0 [1144195ms] <- ioctl$TIOCSTI=0x0 errno=14 cover=559 #0 [1144196ms] -> ioctl$TIOCL_SETSEL(0x3, 0x541c, 0x20000000) #0 [1144196ms] <- ioctl$TIOCL_SETSEL=0x0 errno=14 cover=353 2021/11/11 13:06:17 result hanged=false: 2021/11/11 13:06:17 added new input for call #2 ioctl$TIOCL_SETSEL to corpus: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x4}}) 13:06:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x4}}) 2021/11/11 13:06:17 #0: triaging type=7 2021/11/11 13:06:17 triaging input for call #0 syz_open_dev$tty20 (new signal=1) [1144239ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101681 #0 [1144261ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [1144261ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3404 #0 [1144263ms] -> ioctl$TIOCSTI(0x3, 0x5412, 0x20000040) #0 [1144263ms] <- ioctl$TIOCSTI=0x0 errno=14 cover=559 #0 [1144263ms] -> ioctl$TIOCL_SETSEL(0x3, 0x541c, 0x20000000) #0 [1144263ms] <- ioctl$TIOCL_SETSEL=0x0 errno=14 cover=353 13:06:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x4}}) 2021/11/11 13:06:17 result hanged=false: [1144307ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101683 #0 [1144329ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [1144330ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3403 #0 [1144332ms] -> ioctl$TIOCSTI(0x3, 0x5412, 0x20000040) #0 [1144332ms] <- ioctl$TIOCSTI=0x0 errno=14 cover=559 #0 [1144333ms] -> ioctl$TIOCL_SETSEL(0x3, 0x541c, 0x20000000) #0 [1144333ms] <- ioctl$TIOCL_SETSEL=0x0 errno=14 cover=353 2021/11/11 13:06:17 result hanged=false: 13:06:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x4}}) [1144379ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101685 #0 [1144399ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [1144400ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3404 #0 [1144401ms] -> ioctl$TIOCSTI(0x3, 0x5412, 0x20000040) #0 [1144401ms] <- ioctl$TIOCSTI=0x0 errno=14 cover=559 #0 [1144402ms] -> ioctl$TIOCL_SETSEL(0x3, 0x541c, 0x20000000) #0 [1144402ms] <- ioctl$TIOCL_SETSEL=0x0 errno=14 cover=353 2021/11/11 13:06:17 result hanged=false: 2021/11/11 13:06:17 added new input for call #0 syz_open_dev$tty20 to corpus: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x4}}) 13:06:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) [1144453ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101687 #0 [1144475ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1144477ms] <- socket$inet6_tcp=0x3 errno=14 cover=1734 #0 [1144478ms] -> getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0x3, 0x6, 0x23, 0x20000080, 0x200000c0) #0 [1144478ms] <- getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE=0xffffffffffffffff errno=22 cover=206 enabling collider #0 [1144479ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1144479ms] <- socket$inet6_tcp=0x3 errno=14 cover=1711 13:06:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) 2021/11/11 13:06:18 result hanged=false: 2021/11/11 13:06:18 #0: triaging type=7 2021/11/11 13:06:18 triaging input for call #1 getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE (new signal=3) [1144524ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101689 #0 [1144549ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1144550ms] <- socket$inet6_tcp=0x3 errno=14 cover=6619 #0 [1144551ms] -> getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0x3, 0x6, 0x23, 0x20000080, 0x200000c0) #0 [1144551ms] <- getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE=0xffffffffffffffff errno=22 cover=206 13:06:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) 2021/11/11 13:06:18 result hanged=false: [1144594ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101691 #0 [1144613ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1144614ms] <- socket$inet6_tcp=0x3 errno=14 cover=1745 #0 [1144614ms] -> getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0x3, 0x6, 0x23, 0x20000080, 0x200000c0) #0 [1144615ms] <- getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE=0xffffffffffffffff errno=22 cover=206 13:06:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) 2021/11/11 13:06:18 result hanged=false: [1144661ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101693 #0 [1144680ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1144680ms] <- socket$inet6_tcp=0x3 errno=14 cover=1770 #0 [1144682ms] -> getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0x3, 0x6, 0x23, 0x20000080, 0x200000c0) #0 [1144683ms] <- getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE=0xffffffffffffffff errno=22 cover=206 2021/11/11 13:06:18 result hanged=false: 2021/11/11 13:06:18 added new input for call #1 getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE to corpus: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) 13:06:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, 0x2e, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x5}]}, 0x24}}, 0x0) [1144728ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101695 #0 [1144747ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [1144747ms] <- socket$netlink=0x3 errno=14 cover=1432 #0 [1144748ms] -> sendmsg$nl_generic(0x3, 0x20000000, 0x0) #0 [1144748ms] <- sendmsg$nl_generic=0x24 errno=14 cover=1483 enabling collider #0 [1144749ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [1144749ms] <- socket$netlink=0x3 errno=14 cover=1422 2021/11/11 13:06:18 result hanged=false: 2021/11/11 13:06:18 #0: triaging type=7 13:06:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, 0x2e, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x5}]}, 0x24}}, 0x0) 2021/11/11 13:06:18 triaging input for call #1 sendmsg$nl_generic (new signal=5) [1144796ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101697 #0 [1144816ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [1144817ms] <- socket$netlink=0x3 errno=14 cover=1421 #0 [1144817ms] -> sendmsg$nl_generic(0x3, 0x20000000, 0x0) #0 [1144818ms] <- sendmsg$nl_generic=0x24 errno=14 cover=1472 2021/11/11 13:06:18 result hanged=false: 13:06:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, 0x2e, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x5}]}, 0x24}}, 0x0) [1144863ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101699 #0 [1144884ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [1144885ms] <- socket$netlink=0x3 errno=14 cover=1410 #0 [1144886ms] -> sendmsg$nl_generic(0x3, 0x20000000, 0x0) #0 [1144887ms] <- sendmsg$nl_generic=0x24 errno=14 cover=1540 13:06:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, 0x2e, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x5}]}, 0x24}}, 0x0) 2021/11/11 13:06:18 result hanged=false: [1144930ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101701 #0 [1144949ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [1144950ms] <- socket$netlink=0x3 errno=14 cover=1410 #0 [1144950ms] -> sendmsg$nl_generic(0x3, 0x20000000, 0x0) #0 [1144951ms] <- sendmsg$nl_generic=0x24 errno=14 cover=1544 2021/11/11 13:06:18 result hanged=false: 2021/11/11 13:06:18 added new input for call #1 sendmsg$nl_generic to corpus: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, 0x2e, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x5}]}, 0x24}}, 0x0) 13:06:18 executing program 0: r0 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) r1 = dup2(r0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='tracefs\x00', &(0x7f0000000140)='NG\x89\x00\x00\x00\x00\x00\x00\x00\x00?\x02\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='\x00', &(0x7f0000000100)='tracefs\x00', 0x0) [1145000ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101703 #0 [1145019ms] -> fsopen(0x20000000, 0x0) #0 [1145019ms] <- fsopen=0x3 errno=14 cover=954 #0 [1145020ms] -> dup2(0x3, 0x3) #0 [1145020ms] <- dup2=0x3 errno=14 cover=43 #0 [1145020ms] -> fsconfig$FSCONFIG_SET_STRING(0x3, 0x1, 0x20000080, 0x20000140, 0x0) #0 [1145020ms] <- fsconfig$FSCONFIG_SET_STRING=0x0 errno=14 cover=730 #0 [1145023ms] -> fsconfig$FSCONFIG_SET_STRING(0x3, 0x1, 0x200000c0, 0x20000100, 0x0) #0 [1145023ms] <- fsconfig$FSCONFIG_SET_STRING=0x0 errno=14 cover=565 enabling collider #0 [1145023ms] -> fsopen(0x20000000, 0x0) #0 [1145023ms] <- fsopen=0x3 errno=14 cover=953 #0 [1145024ms] -> dup2(0x3, 0x3) #0 [1145024ms] <- dup2=0x3 errno=14 cover=43 pthread_create failed (errno 11) 13:06:18 executing program 0: r0 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) r1 = dup2(r0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='tracefs\x00', &(0x7f0000000140)='NG\x89\x00\x00\x00\x00\x00\x00\x00\x00?\x02\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='\x00', &(0x7f0000000100)='tracefs\x00', 0x0) 2021/11/11 13:06:18 result hanged=false: 2021/11/11 13:06:18 #0: triaging type=7 2021/11/11 13:06:18 triaging input for call #3 fsconfig$FSCONFIG_SET_STRING (new signal=1) [1145101ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101805 #0 [1145123ms] -> fsopen(0x20000000, 0x0) #0 [1145124ms] <- fsopen=0x3 errno=14 cover=976 #0 [1145124ms] -> dup2(0x3, 0x3) #0 [1145124ms] <- dup2=0x3 errno=14 cover=43 #0 [1145124ms] -> fsconfig$FSCONFIG_SET_STRING(0x3, 0x1, 0x20000080, 0x20000140, 0x0) #0 [1145124ms] <- fsconfig$FSCONFIG_SET_STRING=0x0 errno=14 cover=663 #0 [1145124ms] -> fsconfig$FSCONFIG_SET_STRING(0x3, 0x1, 0x200000c0, 0x20000100, 0x0) #0 [1145125ms] <- fsconfig$FSCONFIG_SET_STRING=0x0 errno=14 cover=576 13:06:18 executing program 0: r0 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) r1 = dup2(r0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='tracefs\x00', &(0x7f0000000140)='NG\x89\x00\x00\x00\x00\x00\x00\x00\x00?\x02\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='\x00', &(0x7f0000000100)='tracefs\x00', 0x0) 2021/11/11 13:06:18 result hanged=false: [1145169ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101807 #0 [1145190ms] -> fsopen(0x20000000, 0x0) #0 [1145190ms] <- fsopen=0x3 errno=14 cover=990 #0 [1145192ms] -> dup2(0x3, 0x3) #0 [1145192ms] <- dup2=0x3 errno=14 cover=43 #0 [1145193ms] -> fsconfig$FSCONFIG_SET_STRING(0x3, 0x1, 0x20000080, 0x20000140, 0x0) #0 [1145193ms] <- fsconfig$FSCONFIG_SET_STRING=0x0 errno=14 cover=652 #0 [1145195ms] -> fsconfig$FSCONFIG_SET_STRING(0x3, 0x1, 0x200000c0, 0x20000100, 0x0) #0 [1145195ms] <- fsconfig$FSCONFIG_SET_STRING=0x0 errno=14 cover=565 13:06:18 executing program 0: r0 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) r1 = dup2(r0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='tracefs\x00', &(0x7f0000000140)='NG\x89\x00\x00\x00\x00\x00\x00\x00\x00?\x02\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='\x00', &(0x7f0000000100)='tracefs\x00', 0x0) 2021/11/11 13:06:18 result hanged=false: [1145239ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101809 #0 [1145259ms] -> fsopen(0x20000000, 0x0) #0 [1145260ms] <- fsopen=0x3 errno=14 cover=998 #0 [1145261ms] -> dup2(0x3, 0x3) #0 [1145261ms] <- dup2=0x3 errno=14 cover=43 #0 [1145261ms] -> fsconfig$FSCONFIG_SET_STRING(0x3, 0x1, 0x20000080, 0x20000140, 0x0) #0 [1145261ms] <- fsconfig$FSCONFIG_SET_STRING=0x0 errno=14 cover=641 #0 [1145261ms] -> fsconfig$FSCONFIG_SET_STRING(0x3, 0x1, 0x200000c0, 0x20000100, 0x0) #0 [1145261ms] <- fsconfig$FSCONFIG_SET_STRING=0x0 errno=14 cover=565 2021/11/11 13:06:18 result hanged=false: 2021/11/11 13:06:18 added new input for call #3 fsconfig$FSCONFIG_SET_STRING to corpus: r0 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) r1 = dup2(r0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='tracefs\x00', &(0x7f0000000140)='NG\x89\x00\x00\x00\x00\x00\x00\x00\x00?\x02\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='\x00', &(0x7f0000000100)='tracefs\x00', 0x0) 13:06:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000200), 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) [1145306ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101811 #0 [1145326ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [1145349ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=174017 #0 [1145356ms] -> syz_mount_image$tmpfs(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1145361ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=13308 #0 [1145362ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [1145362ms] <- openat=0xffffffffffffffff errno=14 cover=654 #0 [1145362ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1145362ms] <- socket$inet6_tcp=0x3 errno=14 cover=1728 #0 [1145362ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x3, 0x20000200, 0x4) #0 [1145362ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=172 #0 [1145363ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [1145363ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=281 #0 [1145363ms] -> connect$inet6(0xffffffffffffffff, 0x0, 0x0) #0 [1145363ms] <- connect$inet6=0xffffffffffffffff errno=9 cover=73 enabling collider #0 [1145363ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [1145363ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=2393 #0 [1145364ms] -> syz_mount_image$tmpfs(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1145364ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=17 cover=1500 pthread_create failed (errno 11) 2021/11/11 13:06:18 result hanged=false: 13:06:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000200), 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 2021/11/11 13:06:18 #0: triaging type=7 2021/11/11 13:06:18 triaging input for call #4 setsockopt$inet6_tcp_int (new signal=8) [1145450ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101913 #0 [1145472ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [1145473ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=3489 #0 [1145473ms] -> syz_mount_image$tmpfs(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1145477ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=13323 #0 [1145479ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [1145479ms] <- openat=0xffffffffffffffff errno=14 cover=644 #0 [1145479ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1145479ms] <- socket$inet6_tcp=0x3 errno=14 cover=1761 #0 [1145479ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x3, 0x20000200, 0x4) #0 [1145480ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=172 #0 [1145480ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [1145480ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=281 #0 [1145480ms] -> connect$inet6(0xffffffffffffffff, 0x0, 0x0) #0 [1145480ms] <- connect$inet6=0xffffffffffffffff errno=9 cover=73 13:06:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000200), 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 2021/11/11 13:06:19 result hanged=false: [1145530ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101915 #0 [1145551ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [1145551ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=3567 #0 [1145552ms] -> syz_mount_image$tmpfs(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1145556ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=13987 #0 [1145565ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [1145565ms] <- openat=0xffffffffffffffff errno=14 cover=654 #0 [1145566ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1145566ms] <- socket$inet6_tcp=0x3 errno=14 cover=1815 #0 [1145566ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x3, 0x20000200, 0x4) #0 [1145567ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=172 #0 [1145567ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [1145567ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=281 #0 [1145567ms] -> connect$inet6(0xffffffffffffffff, 0x0, 0x0) #0 [1145567ms] <- connect$inet6=0xffffffffffffffff errno=9 cover=73 13:06:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000200), 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 2021/11/11 13:06:19 result hanged=false: [1145615ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101917 #0 [1145636ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [1145637ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=3494 #0 [1145637ms] -> syz_mount_image$tmpfs(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1145643ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=19138 #0 [1145645ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [1145646ms] <- openat=0xffffffffffffffff errno=14 cover=654 #0 [1145646ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1145646ms] <- socket$inet6_tcp=0x3 errno=14 cover=1808 #0 [1145647ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x3, 0x20000200, 0x4) #0 [1145647ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=172 #0 [1145648ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [1145648ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=281 #0 [1145649ms] -> connect$inet6(0xffffffffffffffff, 0x0, 0x0) #0 [1145649ms] <- connect$inet6=0xffffffffffffffff errno=9 cover=73 2021/11/11 13:06:19 result hanged=false: 2021/11/11 13:06:19 added new input for call #4 setsockopt$inet6_tcp_int to corpus: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000200), 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 13:06:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000200), 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 2021/11/11 13:06:19 #0: triaging type=7 2021/11/11 13:06:19 triaging input for call #0 seccomp$SECCOMP_SET_MODE_FILTER_LISTENER (new signal=2) [1145696ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101919 #0 [1145715ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [1145716ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=3683 #0 [1145717ms] -> syz_mount_image$tmpfs(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1145721ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=13993 #0 [1145726ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [1145726ms] <- openat=0xffffffffffffffff errno=14 cover=683 #0 [1145726ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1145726ms] <- socket$inet6_tcp=0x3 errno=14 cover=1772 #0 [1145727ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x3, 0x20000200, 0x4) #0 [1145727ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=172 #0 [1145727ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [1145727ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=331 #0 [1145727ms] -> connect$inet6(0xffffffffffffffff, 0x0, 0x0) #0 [1145727ms] <- connect$inet6=0xffffffffffffffff errno=9 cover=73 13:06:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000200), 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 2021/11/11 13:06:19 result hanged=false: [1145778ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101921 #0 [1145801ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [1145802ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=3611 #0 [1145807ms] -> syz_mount_image$tmpfs(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1145811ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=13480 #0 [1145813ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [1145813ms] <- openat=0xffffffffffffffff errno=14 cover=655 #0 [1145814ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1145814ms] <- socket$inet6_tcp=0x3 errno=14 cover=1750 #0 [1145816ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x3, 0x20000200, 0x4) #0 [1145816ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=172 #0 [1145816ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [1145817ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=281 #0 [1145817ms] -> connect$inet6(0xffffffffffffffff, 0x0, 0x0) #0 [1145817ms] <- connect$inet6=0xffffffffffffffff errno=9 cover=73 13:06:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000200), 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 2021/11/11 13:06:19 result hanged=false: [1145866ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101923 #0 [1145883ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [1145884ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=3527 #0 [1145885ms] -> syz_mount_image$tmpfs(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1145893ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=16790 #0 [1145897ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [1145897ms] <- openat=0xffffffffffffffff errno=14 cover=654 #0 [1145898ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1145898ms] <- socket$inet6_tcp=0x3 errno=14 cover=1922 #0 [1145898ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x3, 0x20000200, 0x4) #0 [1145898ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=172 #0 [1145898ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [1145899ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=281 #0 [1145899ms] -> connect$inet6(0xffffffffffffffff, 0x0, 0x0) #0 [1145899ms] <- connect$inet6=0xffffffffffffffff errno=9 cover=73 2021/11/11 13:06:19 result hanged=false: 2021/11/11 13:06:19 added new input for call #0 seccomp$SECCOMP_SET_MODE_FILTER_LISTENER to corpus: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000200), 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 13:06:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) bind$bt_hci(r0, &(0x7f0000000100), 0x6) [1145951ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 101925 #0 [1145969ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [1145973ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=6233 #0 [1145974ms] -> bind$bt_hci(0x4, 0x20000000, 0x6) #0 [1145974ms] <- bind$bt_hci=0x0 errno=14 cover=830 #0 [1145974ms] -> bind$bt_hci(0x4, 0x20000100, 0x6) #0 [1145974ms] <- bind$bt_hci=0xffffffffffffffff errno=114 cover=142 enabling collider #0 [1145975ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [1145975ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=5401 #0 [1145976ms] -> bind$bt_hci(0x4, 0x20000000, 0x6) #0 [1145976ms] <- bind$bt_hci=0x0 errno=14 cover=855 pthread_create failed (errno 11) 2021/11/11 13:06:19 result hanged=false: 2021/11/11 13:06:19 #0: triaging type=7 2021/11/11 13:06:19 triaging input for call #2 bind$bt_hci (new signal=3) 13:06:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) bind$bt_hci(r0, &(0x7f0000000100), 0x6) [1146054ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102027 #0 [1146074ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [1146078ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=6172 #0 [1146079ms] -> bind$bt_hci(0x4, 0x20000000, 0x6) #0 [1146079ms] <- bind$bt_hci=0x0 errno=14 cover=873 #0 [1146080ms] -> bind$bt_hci(0x4, 0x20000100, 0x6) #0 [1146080ms] <- bind$bt_hci=0xffffffffffffffff errno=114 cover=142 13:06:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) bind$bt_hci(r0, &(0x7f0000000100), 0x6) 2021/11/11 13:06:19 result hanged=false: [1146121ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102029 #0 [1146141ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [1146144ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=6209 #0 [1146147ms] -> bind$bt_hci(0x4, 0x20000000, 0x6) #0 [1146150ms] <- bind$bt_hci=0x0 errno=14 cover=830 #0 [1146151ms] -> bind$bt_hci(0x4, 0x20000100, 0x6) #0 [1146152ms] <- bind$bt_hci=0xffffffffffffffff errno=114 cover=142 13:06:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) bind$bt_hci(r0, &(0x7f0000000100), 0x6) 2021/11/11 13:06:19 result hanged=false: [1146196ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102031 #0 [1146216ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [1146220ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=6242 #0 [1146222ms] -> bind$bt_hci(0x4, 0x20000000, 0x6) #0 [1146225ms] <- bind$bt_hci=0x0 errno=14 cover=876 #0 [1146227ms] -> bind$bt_hci(0x4, 0x20000100, 0x6) #0 [1146227ms] <- bind$bt_hci=0xffffffffffffffff errno=114 cover=142 2021/11/11 13:06:19 result hanged=false: 2021/11/11 13:06:19 added new input for call #2 bind$bt_hci to corpus: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) bind$bt_hci(r0, &(0x7f0000000100), 0x6) 13:06:19 executing program 0: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x2f, 0x1d, 0xd, 0x7, 0x4, 0x8068a98b, 0x2, 0x126, 0x1}) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x14040, 0x29) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x66, 0x0, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x81, 0x3, &(0x7f0000000640)=[{&(0x7f0000000440)="edf8d3b91792bd336256e35fdc0534fdef3a82f08357b7aa4fae020f19971f9e4990f74dc27b25e1430bf03b7fa45255a7ae92e0be711eebf15b1cebceab3686ccaf6dd66d6a25134c81bc2e34f04c3caf5c5646d1ef7e0285a07b5a09625d88166b823c0f20deeef44c2bd629fc9eea1027540f53ea1a2103f25c64d057828828fe117f17f5b3d5f0e386460ce3166859436f499a2c107bcdb52bd48cb90aa75580b8a3e7dee3ab983ddad2e6a86bb8068b75827a4b", 0xb6}, {&(0x7f0000000500)="8dbf3b069988f8f7404551342a62d2f871df4f3f867cbcda4ab34bade7e7f88304cfd2a3bc74697fb67cc6dea7845e94676dda401d14de471726385cdb481da5fae523401f28ed3a2831c83e2acd59074d65c5844f9206167cf5b18b194780f2d7a75de5d613dbb47af9044f850656c10ad992bde1fcc975ba8dd31c218366fe2dde232cae5a611dbe42715220d3e98338babb701d7c8151eaa1545cd0", 0x9d, 0x9}, {&(0x7f00000005c0)="9969010da377fb7df2887de37770190739df9204e00cfdb743ef4bdf912abd9525414063e1efc1a9800359297ddf01229395c04ec1d142f1a7c607c257e83442f510143c577992db426b979a8b64cb3e0f0e3be04bce63142f105f3f489d8d8fee156797ce8e717143fe6a32b541c8", 0x6f, 0x2}], 0x3802, &(0x7f00000006c0)={[{}], [{@hash}, {@measure}, {@uid_eq}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, '/dev/rtc0\x00'}}]}) clock_gettime(0x0, 0x0) futimesat(r3, &(0x7f0000000740)='./file0\x00', &(0x7f00000007c0)={{}, {0x77359400}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x17, &(0x7f0000000900)=0x400, 0x4) 2021/11/11 13:06:19 poll: candidates=8 inputs=0 signal=0 [1146272ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102033 #0 [1146291ms] -> ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x20000000) #0 [1146291ms] <- ioctl$RTC_SET_TIME=0xffffffffffffffff errno=9 cover=45 #0 [1146293ms] -> openat$incfs(0xffffffffffffffff, 0x20000040, 0x14040, 0x29) #0 [1146293ms] <- openat$incfs=0xffffffffffffffff errno=9 cover=704 #0 [1146294ms] -> ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) #0 [1146294ms] <- ioctl$RTC_WIE_OFF=0xffffffffffffffff errno=9 cover=45 #0 [1146295ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1146295ms] <- socket$inet6_tcp=0x3 errno=14 cover=1736 #0 [1146296ms] -> setsockopt$inet6_IPV6_ADDRFORM(0x3, 0x29, 0x1, 0x0, 0x0) #0 [1146296ms] <- setsockopt$inet6_IPV6_ADDRFORM=0xffffffffffffffff errno=22 cover=142 #0 [1146297ms] -> getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x200000c0, 0x20000100) #0 [1146297ms] <- getsockopt$inet6_mtu=0xffffffffffffffff errno=9 cover=49 #0 [1146299ms] -> ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) #0 [1146299ms] <- ioctl$RTC_WIE_ON=0xffffffffffffffff errno=9 cover=45 #0 [1146300ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1146300ms] <- socket$inet6_tcp=0x4 errno=14 cover=1701 #0 [1146301ms] -> setsockopt$inet6_buf(0x4, 0x29, 0x66, 0x0, 0x0) #0 [1146302ms] <- setsockopt$inet6_buf=0xffffffffffffffff errno=92 cover=157 #0 [1146302ms] -> syz_mount_image$tmpfs(0x200003c0, 0x20000400, 0x81, 0x3, 0x20000640, 0x3802, 0x200006c0) syz_mount_image: size=129 segs=3 loop='/dev/loop0' dir='./file0' fs='tmpfs' flags=14338 opts='uid=0x0000000000000000,hash,measure,uid=00000000000000000000,subj_role=,smackfshat=/dev/rtc0' syz_mount_image > mount error: 20 #0 [1146309ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=20 cover=6464 #0 [1146309ms] -> clock_gettime(0x0, 0x0) #0 [1146309ms] <- clock_gettime=0xffffffffffffffff errno=14 cover=421 #0 [1146309ms] -> futimesat(0xffffffffffffffff, 0x20000740, 0x200007c0) #0 [1146309ms] <- futimesat=0xffffffffffffffff errno=9 cover=326 #0 [1146309ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1146310ms] <- socket$inet6_tcp=0x5 errno=14 cover=1783 #0 [1146310ms] -> setsockopt$inet6_int(0x5, 0x29, 0x17, 0x20000900, 0x4) #0 [1146310ms] <- setsockopt$inet6_int=0xffffffffffffffff errno=22 cover=152 enabling collider #0 [1146310ms] -> ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x20000000) #0 [1146310ms] <- ioctl$RTC_SET_TIME=0xffffffffffffffff errno=9 cover=45 #0 [1146311ms] -> openat$incfs(0xffffffffffffffff, 0x20000040, 0x14040, 0x29) #0 [1146311ms] <- openat$incfs=0xffffffffffffffff errno=9 cover=778 pthread_create failed (errno 11) 13:06:19 executing program 0: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x2f, 0x1d, 0xd, 0x7, 0x4, 0x8068a98b, 0x2, 0x126, 0x1}) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x14040, 0x29) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x66, 0x0, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x81, 0x3, &(0x7f0000000640)=[{&(0x7f0000000440)="edf8d3b91792bd336256e35fdc0534fdef3a82f08357b7aa4fae020f19971f9e4990f74dc27b25e1430bf03b7fa45255a7ae92e0be711eebf15b1cebceab3686ccaf6dd66d6a25134c81bc2e34f04c3caf5c5646d1ef7e0285a07b5a09625d88166b823c0f20deeef44c2bd629fc9eea1027540f53ea1a2103f25c64d057828828fe117f17f5b3d5f0e386460ce3166859436f499a2c107bcdb52bd48cb90aa75580b8a3e7dee3ab983ddad2e6a86bb8068b75827a4b", 0xb6}, {&(0x7f0000000500)="8dbf3b069988f8f7404551342a62d2f871df4f3f867cbcda4ab34bade7e7f88304cfd2a3bc74697fb67cc6dea7845e94676dda401d14de471726385cdb481da5fae523401f28ed3a2831c83e2acd59074d65c5844f9206167cf5b18b194780f2d7a75de5d613dbb47af9044f850656c10ad992bde1fcc975ba8dd31c218366fe2dde232cae5a611dbe42715220d3e98338babb701d7c8151eaa1545cd0", 0x9d, 0x9}, {&(0x7f00000005c0)="9969010da377fb7df2887de37770190739df9204e00cfdb743ef4bdf912abd9525414063e1efc1a9800359297ddf01229395c04ec1d142f1a7c607c257e83442f510143c577992db426b979a8b64cb3e0f0e3be04bce63142f105f3f489d8d8fee156797ce8e717143fe6a32b541c8", 0x6f, 0x2}], 0x3802, &(0x7f00000006c0)={[{}], [{@hash}, {@measure}, {@uid_eq}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, '/dev/rtc0\x00'}}]}) clock_gettime(0x0, 0x0) futimesat(r3, &(0x7f0000000740)='./file0\x00', &(0x7f00000007c0)={{}, {0x77359400}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x17, &(0x7f0000000900)=0x400, 0x4) 2021/11/11 13:06:19 result hanged=false: 2021/11/11 13:06:19 #0: triaging type=7 2021/11/11 13:06:19 triaging input for call #13 setsockopt$inet6_int (new signal=1) [1146396ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102135 #0 [1146417ms] -> ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x20000000) #0 [1146418ms] <- ioctl$RTC_SET_TIME=0xffffffffffffffff errno=9 cover=45 #0 [1146419ms] -> openat$incfs(0xffffffffffffffff, 0x20000040, 0x14040, 0x29) #0 [1146420ms] <- openat$incfs=0xffffffffffffffff errno=9 cover=727 #0 [1146420ms] -> ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) #0 [1146420ms] <- ioctl$RTC_WIE_OFF=0xffffffffffffffff errno=9 cover=45 #0 [1146420ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1146420ms] <- socket$inet6_tcp=0x3 errno=14 cover=1744 #0 [1146420ms] -> setsockopt$inet6_IPV6_ADDRFORM(0x3, 0x29, 0x1, 0x0, 0x0) #0 [1146421ms] <- setsockopt$inet6_IPV6_ADDRFORM=0xffffffffffffffff errno=22 cover=142 #0 [1146421ms] -> getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x200000c0, 0x20000100) #0 [1146422ms] <- getsockopt$inet6_mtu=0xffffffffffffffff errno=9 cover=49 #0 [1146422ms] -> ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) #0 [1146422ms] <- ioctl$RTC_WIE_ON=0xffffffffffffffff errno=9 cover=45 #0 [1146422ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1146422ms] <- socket$inet6_tcp=0x4 errno=14 cover=1690 #0 [1146422ms] -> setsockopt$inet6_buf(0x4, 0x29, 0x66, 0x0, 0x0) #0 [1146423ms] <- setsockopt$inet6_buf=0xffffffffffffffff errno=92 cover=157 #0 [1146423ms] -> syz_mount_image$tmpfs(0x200003c0, 0x20000400, 0x81, 0x3, 0x20000640, 0x3802, 0x200006c0) syz_mount_image: size=129 segs=3 loop='/dev/loop0' dir='./file0' fs='tmpfs' flags=14338 opts='uid=0x0000000000000000,hash,measure,uid=00000000000000000000,subj_role=,smackfshat=/dev/rtc0' syz_mount_image > mount error: 20 #0 [1146430ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=20 cover=4497 #0 [1146432ms] -> clock_gettime(0x0, 0x0) #0 [1146432ms] <- clock_gettime=0xffffffffffffffff errno=14 cover=421 #0 [1146433ms] -> futimesat(0xffffffffffffffff, 0x20000740, 0x200007c0) #0 [1146434ms] <- futimesat=0xffffffffffffffff errno=9 cover=317 #0 [1146434ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1146434ms] <- socket$inet6_tcp=0x5 errno=14 cover=1711 #0 [1146434ms] -> setsockopt$inet6_int(0x5, 0x29, 0x17, 0x20000900, 0x4) #0 [1146435ms] <- setsockopt$inet6_int=0xffffffffffffffff errno=22 cover=152 13:06:19 executing program 0: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x2f, 0x1d, 0xd, 0x7, 0x4, 0x8068a98b, 0x2, 0x126, 0x1}) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x14040, 0x29) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x66, 0x0, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x81, 0x3, &(0x7f0000000640)=[{&(0x7f0000000440)="edf8d3b91792bd336256e35fdc0534fdef3a82f08357b7aa4fae020f19971f9e4990f74dc27b25e1430bf03b7fa45255a7ae92e0be711eebf15b1cebceab3686ccaf6dd66d6a25134c81bc2e34f04c3caf5c5646d1ef7e0285a07b5a09625d88166b823c0f20deeef44c2bd629fc9eea1027540f53ea1a2103f25c64d057828828fe117f17f5b3d5f0e386460ce3166859436f499a2c107bcdb52bd48cb90aa75580b8a3e7dee3ab983ddad2e6a86bb8068b75827a4b", 0xb6}, {&(0x7f0000000500)="8dbf3b069988f8f7404551342a62d2f871df4f3f867cbcda4ab34bade7e7f88304cfd2a3bc74697fb67cc6dea7845e94676dda401d14de471726385cdb481da5fae523401f28ed3a2831c83e2acd59074d65c5844f9206167cf5b18b194780f2d7a75de5d613dbb47af9044f850656c10ad992bde1fcc975ba8dd31c218366fe2dde232cae5a611dbe42715220d3e98338babb701d7c8151eaa1545cd0", 0x9d, 0x9}, {&(0x7f00000005c0)="9969010da377fb7df2887de37770190739df9204e00cfdb743ef4bdf912abd9525414063e1efc1a9800359297ddf01229395c04ec1d142f1a7c607c257e83442f510143c577992db426b979a8b64cb3e0f0e3be04bce63142f105f3f489d8d8fee156797ce8e717143fe6a32b541c8", 0x6f, 0x2}], 0x3802, &(0x7f00000006c0)={[{}], [{@hash}, {@measure}, {@uid_eq}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, '/dev/rtc0\x00'}}]}) clock_gettime(0x0, 0x0) futimesat(r3, &(0x7f0000000740)='./file0\x00', &(0x7f00000007c0)={{}, {0x77359400}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x17, &(0x7f0000000900)=0x400, 0x4) 2021/11/11 13:06:19 result hanged=false: [1146493ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102137 #0 [1146514ms] -> ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x20000000) #0 [1146514ms] <- ioctl$RTC_SET_TIME=0xffffffffffffffff errno=9 cover=45 #0 [1146516ms] -> openat$incfs(0xffffffffffffffff, 0x20000040, 0x14040, 0x29) #0 [1146516ms] <- openat$incfs=0xffffffffffffffff errno=9 cover=727 #0 [1146517ms] -> ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) #0 [1146517ms] <- ioctl$RTC_WIE_OFF=0xffffffffffffffff errno=9 cover=45 #0 [1146517ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1146519ms] <- socket$inet6_tcp=0x3 errno=14 cover=1746 #0 [1146524ms] -> setsockopt$inet6_IPV6_ADDRFORM(0x3, 0x29, 0x1, 0x0, 0x0) #0 [1146524ms] <- setsockopt$inet6_IPV6_ADDRFORM=0xffffffffffffffff errno=22 cover=142 #0 [1146525ms] -> getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x200000c0, 0x20000100) #0 [1146525ms] <- getsockopt$inet6_mtu=0xffffffffffffffff errno=9 cover=49 #0 [1146526ms] -> ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) #0 [1146526ms] <- ioctl$RTC_WIE_ON=0xffffffffffffffff errno=9 cover=45 #0 [1146526ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1146527ms] <- socket$inet6_tcp=0x4 errno=14 cover=1805 #0 [1146528ms] -> setsockopt$inet6_buf(0x4, 0x29, 0x66, 0x0, 0x0) #0 [1146528ms] <- setsockopt$inet6_buf=0xffffffffffffffff errno=92 cover=157 #0 [1146529ms] -> syz_mount_image$tmpfs(0x200003c0, 0x20000400, 0x81, 0x3, 0x20000640, 0x3802, 0x200006c0) syz_mount_image: size=129 segs=3 loop='/dev/loop0' dir='./file0' fs='tmpfs' flags=14338 opts='uid=0x0000000000000000,hash,measure,uid=00000000000000000000,subj_role=,smackfshat=/dev/rtc0' syz_mount_image > mount error: 20 #0 [1146542ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=20 cover=12281 #0 [1146543ms] -> clock_gettime(0x0, 0x0) #0 [1146543ms] <- clock_gettime=0xffffffffffffffff errno=14 cover=421 #0 [1146544ms] -> futimesat(0xffffffffffffffff, 0x20000740, 0x200007c0) #0 [1146544ms] <- futimesat=0xffffffffffffffff errno=9 cover=316 #0 [1146544ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1146544ms] <- socket$inet6_tcp=0x5 errno=14 cover=1815 #0 [1146545ms] -> setsockopt$inet6_int(0x5, 0x29, 0x17, 0x20000900, 0x4) #0 [1146545ms] <- setsockopt$inet6_int=0xffffffffffffffff errno=22 cover=152 13:06:20 executing program 0: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x2f, 0x1d, 0xd, 0x7, 0x4, 0x8068a98b, 0x2, 0x126, 0x1}) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x14040, 0x29) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x66, 0x0, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x81, 0x3, &(0x7f0000000640)=[{&(0x7f0000000440)="edf8d3b91792bd336256e35fdc0534fdef3a82f08357b7aa4fae020f19971f9e4990f74dc27b25e1430bf03b7fa45255a7ae92e0be711eebf15b1cebceab3686ccaf6dd66d6a25134c81bc2e34f04c3caf5c5646d1ef7e0285a07b5a09625d88166b823c0f20deeef44c2bd629fc9eea1027540f53ea1a2103f25c64d057828828fe117f17f5b3d5f0e386460ce3166859436f499a2c107bcdb52bd48cb90aa75580b8a3e7dee3ab983ddad2e6a86bb8068b75827a4b", 0xb6}, {&(0x7f0000000500)="8dbf3b069988f8f7404551342a62d2f871df4f3f867cbcda4ab34bade7e7f88304cfd2a3bc74697fb67cc6dea7845e94676dda401d14de471726385cdb481da5fae523401f28ed3a2831c83e2acd59074d65c5844f9206167cf5b18b194780f2d7a75de5d613dbb47af9044f850656c10ad992bde1fcc975ba8dd31c218366fe2dde232cae5a611dbe42715220d3e98338babb701d7c8151eaa1545cd0", 0x9d, 0x9}, {&(0x7f00000005c0)="9969010da377fb7df2887de37770190739df9204e00cfdb743ef4bdf912abd9525414063e1efc1a9800359297ddf01229395c04ec1d142f1a7c607c257e83442f510143c577992db426b979a8b64cb3e0f0e3be04bce63142f105f3f489d8d8fee156797ce8e717143fe6a32b541c8", 0x6f, 0x2}], 0x3802, &(0x7f00000006c0)={[{}], [{@hash}, {@measure}, {@uid_eq}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, '/dev/rtc0\x00'}}]}) clock_gettime(0x0, 0x0) futimesat(r3, &(0x7f0000000740)='./file0\x00', &(0x7f00000007c0)={{}, {0x77359400}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x17, &(0x7f0000000900)=0x400, 0x4) 2021/11/11 13:06:20 result hanged=false: [1146605ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102139 #0 [1146625ms] -> ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x20000000) #0 [1146625ms] <- ioctl$RTC_SET_TIME=0xffffffffffffffff errno=9 cover=45 #0 [1146626ms] -> openat$incfs(0xffffffffffffffff, 0x20000040, 0x14040, 0x29) #0 [1146626ms] <- openat$incfs=0xffffffffffffffff errno=9 cover=693 #0 [1146626ms] -> ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) #0 [1146626ms] <- ioctl$RTC_WIE_OFF=0xffffffffffffffff errno=9 cover=45 #0 [1146626ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1146627ms] <- socket$inet6_tcp=0x3 errno=14 cover=1743 #0 [1146627ms] -> setsockopt$inet6_IPV6_ADDRFORM(0x3, 0x29, 0x1, 0x0, 0x0) #0 [1146627ms] <- setsockopt$inet6_IPV6_ADDRFORM=0xffffffffffffffff errno=22 cover=142 #0 [1146627ms] -> getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x200000c0, 0x20000100) #0 [1146627ms] <- getsockopt$inet6_mtu=0xffffffffffffffff errno=9 cover=49 #0 [1146627ms] -> ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) #0 [1146627ms] <- ioctl$RTC_WIE_ON=0xffffffffffffffff errno=9 cover=45 #0 [1146628ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1146628ms] <- socket$inet6_tcp=0x4 errno=14 cover=1745 #0 [1146628ms] -> setsockopt$inet6_buf(0x4, 0x29, 0x66, 0x0, 0x0) #0 [1146628ms] <- setsockopt$inet6_buf=0xffffffffffffffff errno=92 cover=157 #0 [1146629ms] -> syz_mount_image$tmpfs(0x200003c0, 0x20000400, 0x81, 0x3, 0x20000640, 0x3802, 0x200006c0) syz_mount_image: size=129 segs=3 loop='/dev/loop0' dir='./file0' fs='tmpfs' flags=14338 opts='uid=0x0000000000000000,hash,measure,uid=00000000000000000000,subj_role=,smackfshat=/dev/rtc0' syz_mount_image > mount error: 20 #0 [1146635ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=20 cover=6550 #0 [1146636ms] -> clock_gettime(0x0, 0x0) #0 [1146636ms] <- clock_gettime=0xffffffffffffffff errno=14 cover=421 #0 [1146636ms] -> futimesat(0xffffffffffffffff, 0x20000740, 0x200007c0) #0 [1146636ms] <- futimesat=0xffffffffffffffff errno=9 cover=316 #0 [1146636ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1146637ms] <- socket$inet6_tcp=0x5 errno=14 cover=1722 #0 [1146637ms] -> setsockopt$inet6_int(0x5, 0x29, 0x17, 0x20000900, 0x4) #0 [1146638ms] <- setsockopt$inet6_int=0xffffffffffffffff errno=22 cover=152 2021/11/11 13:06:20 result hanged=false: 2021/11/11 13:06:20 added new input for call #13 setsockopt$inet6_int to corpus: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x2f, 0x1d, 0xd, 0x7, 0x4, 0x8068a98b, 0x2, 0x126, 0x1}) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x14040, 0x29) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x66, 0x0, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x81, 0x3, &(0x7f0000000640)=[{&(0x7f0000000440)="edf8d3b91792bd336256e35fdc0534fdef3a82f08357b7aa4fae020f19971f9e4990f74dc27b25e1430bf03b7fa45255a7ae92e0be711eebf15b1cebceab3686ccaf6dd66d6a25134c81bc2e34f04c3caf5c5646d1ef7e0285a07b5a09625d88166b823c0f20deeef44c2bd629fc9eea1027540f53ea1a2103f25c64d057828828fe117f17f5b3d5f0e386460ce3166859436f499a2c107bcdb52bd48cb90aa75580b8a3e7dee3ab983ddad2e6a86bb8068b75827a4b", 0xb6}, {&(0x7f0000000500)="8dbf3b069988f8f7404551342a62d2f871df4f3f867cbcda4ab34bade7e7f88304cfd2a3bc74697fb67cc6dea7845e94676dda401d14de471726385cdb481da5fae523401f28ed3a2831c83e2acd59074d65c5844f9206167cf5b18b194780f2d7a75de5d613dbb47af9044f850656c10ad992bde1fcc975ba8dd31c218366fe2dde232cae5a611dbe42715220d3e98338babb701d7c8151eaa1545cd0", 0x9d, 0x9}, {&(0x7f00000005c0)="9969010da377fb7df2887de37770190739df9204e00cfdb743ef4bdf912abd9525414063e1efc1a9800359297ddf01229395c04ec1d142f1a7c607c257e83442f510143c577992db426b979a8b64cb3e0f0e3be04bce63142f105f3f489d8d8fee156797ce8e717143fe6a32b541c8", 0x6f, 0x2}], 0x3802, &(0x7f00000006c0)={[{}], [{@hash}, {@measure}, {@uid_eq}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, '/dev/rtc0\x00'}}]}) clock_gettime(0x0, 0x0) futimesat(r3, &(0x7f0000000740)='./file0\x00', &(0x7f00000007c0)={{}, {0x77359400}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x17, &(0x7f0000000900)=0x400, 0x4) 2021/11/11 13:06:20 #0: triaging type=7 2021/11/11 13:06:20 triaging input for call #4 setsockopt$inet6_IPV6_ADDRFORM (new signal=1) 13:06:20 executing program 0: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x2f, 0x1d, 0xd, 0x7, 0x4, 0x8068a98b, 0x2, 0x126, 0x1}) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x14040, 0x29) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x66, 0x0, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x81, 0x3, &(0x7f0000000640)=[{&(0x7f0000000440)="edf8d3b91792bd336256e35fdc0534fdef3a82f08357b7aa4fae020f19971f9e4990f74dc27b25e1430bf03b7fa45255a7ae92e0be711eebf15b1cebceab3686ccaf6dd66d6a25134c81bc2e34f04c3caf5c5646d1ef7e0285a07b5a09625d88166b823c0f20deeef44c2bd629fc9eea1027540f53ea1a2103f25c64d057828828fe117f17f5b3d5f0e386460ce3166859436f499a2c107bcdb52bd48cb90aa75580b8a3e7dee3ab983ddad2e6a86bb8068b75827a4b", 0xb6}, {&(0x7f0000000500)="8dbf3b069988f8f7404551342a62d2f871df4f3f867cbcda4ab34bade7e7f88304cfd2a3bc74697fb67cc6dea7845e94676dda401d14de471726385cdb481da5fae523401f28ed3a2831c83e2acd59074d65c5844f9206167cf5b18b194780f2d7a75de5d613dbb47af9044f850656c10ad992bde1fcc975ba8dd31c218366fe2dde232cae5a611dbe42715220d3e98338babb701d7c8151eaa1545cd0", 0x9d, 0x9}, {&(0x7f00000005c0)="9969010da377fb7df2887de37770190739df9204e00cfdb743ef4bdf912abd9525414063e1efc1a9800359297ddf01229395c04ec1d142f1a7c607c257e83442f510143c577992db426b979a8b64cb3e0f0e3be04bce63142f105f3f489d8d8fee156797ce8e717143fe6a32b541c8", 0x6f, 0x2}], 0x3802, &(0x7f00000006c0)={[{}], [{@hash}, {@measure}, {@uid_eq}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, '/dev/rtc0\x00'}}]}) clock_gettime(0x0, 0x0) futimesat(r3, &(0x7f0000000740)='./file0\x00', &(0x7f00000007c0)={{}, {0x77359400}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x17, &(0x7f0000000900)=0x400, 0x4) [1146696ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102141 #0 [1146716ms] -> ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x20000000) #0 [1146717ms] <- ioctl$RTC_SET_TIME=0xffffffffffffffff errno=9 cover=45 #0 [1146717ms] -> openat$incfs(0xffffffffffffffff, 0x20000040, 0x14040, 0x29) #0 [1146717ms] <- openat$incfs=0xffffffffffffffff errno=9 cover=716 #0 [1146722ms] -> ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) #0 [1146722ms] <- ioctl$RTC_WIE_OFF=0xffffffffffffffff errno=9 cover=45 #0 [1146722ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1146723ms] <- socket$inet6_tcp=0x3 errno=14 cover=1801 #0 [1146726ms] -> setsockopt$inet6_IPV6_ADDRFORM(0x3, 0x29, 0x1, 0x0, 0x0) #0 [1146726ms] <- setsockopt$inet6_IPV6_ADDRFORM=0xffffffffffffffff errno=22 cover=142 #0 [1146726ms] -> getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x200000c0, 0x20000100) #0 [1146726ms] <- getsockopt$inet6_mtu=0xffffffffffffffff errno=9 cover=49 #0 [1146727ms] -> ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) #0 [1146727ms] <- ioctl$RTC_WIE_ON=0xffffffffffffffff errno=9 cover=45 #0 [1146727ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1146728ms] <- socket$inet6_tcp=0x4 errno=14 cover=1766 #0 [1146728ms] -> setsockopt$inet6_buf(0x4, 0x29, 0x66, 0x0, 0x0) #0 [1146728ms] <- setsockopt$inet6_buf=0xffffffffffffffff errno=92 cover=157 #0 [1146729ms] -> syz_mount_image$tmpfs(0x200003c0, 0x20000400, 0x81, 0x3, 0x20000640, 0x3802, 0x200006c0) syz_mount_image: size=129 segs=3 loop='/dev/loop0' dir='./file0' fs='tmpfs' flags=14338 opts='uid=0x0000000000000000,hash,measure,uid=00000000000000000000,subj_role=,smackfshat=/dev/rtc0' syz_mount_image > mount error: 20 #0 [1146736ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=20 cover=4431 #0 [1146736ms] -> clock_gettime(0x0, 0x0) #0 [1146737ms] <- clock_gettime=0xffffffffffffffff errno=14 cover=421 #0 [1146737ms] -> futimesat(0xffffffffffffffff, 0x20000740, 0x200007c0) #0 [1146737ms] <- futimesat=0xffffffffffffffff errno=9 cover=327 #0 [1146738ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1146738ms] <- socket$inet6_tcp=0x5 errno=14 cover=1744 #0 [1146739ms] -> setsockopt$inet6_int(0x5, 0x29, 0x17, 0x20000900, 0x4) #0 [1146739ms] <- setsockopt$inet6_int=0xffffffffffffffff errno=22 cover=152 13:06:20 executing program 0: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x2f, 0x1d, 0xd, 0x7, 0x4, 0x8068a98b, 0x2, 0x126, 0x1}) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x14040, 0x29) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x66, 0x0, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x81, 0x3, &(0x7f0000000640)=[{&(0x7f0000000440)="edf8d3b91792bd336256e35fdc0534fdef3a82f08357b7aa4fae020f19971f9e4990f74dc27b25e1430bf03b7fa45255a7ae92e0be711eebf15b1cebceab3686ccaf6dd66d6a25134c81bc2e34f04c3caf5c5646d1ef7e0285a07b5a09625d88166b823c0f20deeef44c2bd629fc9eea1027540f53ea1a2103f25c64d057828828fe117f17f5b3d5f0e386460ce3166859436f499a2c107bcdb52bd48cb90aa75580b8a3e7dee3ab983ddad2e6a86bb8068b75827a4b", 0xb6}, {&(0x7f0000000500)="8dbf3b069988f8f7404551342a62d2f871df4f3f867cbcda4ab34bade7e7f88304cfd2a3bc74697fb67cc6dea7845e94676dda401d14de471726385cdb481da5fae523401f28ed3a2831c83e2acd59074d65c5844f9206167cf5b18b194780f2d7a75de5d613dbb47af9044f850656c10ad992bde1fcc975ba8dd31c218366fe2dde232cae5a611dbe42715220d3e98338babb701d7c8151eaa1545cd0", 0x9d, 0x9}, {&(0x7f00000005c0)="9969010da377fb7df2887de37770190739df9204e00cfdb743ef4bdf912abd9525414063e1efc1a9800359297ddf01229395c04ec1d142f1a7c607c257e83442f510143c577992db426b979a8b64cb3e0f0e3be04bce63142f105f3f489d8d8fee156797ce8e717143fe6a32b541c8", 0x6f, 0x2}], 0x3802, &(0x7f00000006c0)={[{}], [{@hash}, {@measure}, {@uid_eq}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, '/dev/rtc0\x00'}}]}) clock_gettime(0x0, 0x0) futimesat(r3, &(0x7f0000000740)='./file0\x00', &(0x7f00000007c0)={{}, {0x77359400}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x17, &(0x7f0000000900)=0x400, 0x4) 2021/11/11 13:06:20 result hanged=false: [1146792ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102143 #0 [1146811ms] -> ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x20000000) #0 [1146812ms] <- ioctl$RTC_SET_TIME=0xffffffffffffffff errno=9 cover=45 #0 [1146813ms] -> openat$incfs(0xffffffffffffffff, 0x20000040, 0x14040, 0x29) #0 [1146814ms] <- openat$incfs=0xffffffffffffffff errno=9 cover=693 #0 [1146815ms] -> ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) #0 [1146815ms] <- ioctl$RTC_WIE_OFF=0xffffffffffffffff errno=9 cover=45 #0 [1146815ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1146815ms] <- socket$inet6_tcp=0x3 errno=14 cover=1725 #0 [1146816ms] -> setsockopt$inet6_IPV6_ADDRFORM(0x3, 0x29, 0x1, 0x0, 0x0) #0 [1146816ms] <- setsockopt$inet6_IPV6_ADDRFORM=0xffffffffffffffff errno=22 cover=142 #0 [1146817ms] -> getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x200000c0, 0x20000100) #0 [1146817ms] <- getsockopt$inet6_mtu=0xffffffffffffffff errno=9 cover=49 #0 [1146818ms] -> ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) #0 [1146818ms] <- ioctl$RTC_WIE_ON=0xffffffffffffffff errno=9 cover=45 #0 [1146818ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1146819ms] <- socket$inet6_tcp=0x4 errno=14 cover=1734 #0 [1146819ms] -> setsockopt$inet6_buf(0x4, 0x29, 0x66, 0x0, 0x0) #0 [1146819ms] <- setsockopt$inet6_buf=0xffffffffffffffff errno=92 cover=157 #0 [1146820ms] -> syz_mount_image$tmpfs(0x200003c0, 0x20000400, 0x81, 0x3, 0x20000640, 0x3802, 0x200006c0) syz_mount_image: size=129 segs=3 loop='/dev/loop0' dir='./file0' fs='tmpfs' flags=14338 opts='uid=0x0000000000000000,hash,measure,uid=00000000000000000000,subj_role=,smackfshat=/dev/rtc0' syz_mount_image > mount error: 20 #0 [1146825ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=20 cover=6431 #0 [1146826ms] -> clock_gettime(0x0, 0x0) #0 [1146826ms] <- clock_gettime=0xffffffffffffffff errno=14 cover=421 #0 [1146826ms] -> futimesat(0xffffffffffffffff, 0x20000740, 0x200007c0) #0 [1146826ms] <- futimesat=0xffffffffffffffff errno=9 cover=316 #0 [1146826ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1146827ms] <- socket$inet6_tcp=0x5 errno=14 cover=1784 #0 [1146827ms] -> setsockopt$inet6_int(0x5, 0x29, 0x17, 0x20000900, 0x4) #0 [1146827ms] <- setsockopt$inet6_int=0xffffffffffffffff errno=22 cover=152 13:06:20 executing program 0: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x2f, 0x1d, 0xd, 0x7, 0x4, 0x8068a98b, 0x2, 0x126, 0x1}) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x14040, 0x29) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x66, 0x0, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x81, 0x3, &(0x7f0000000640)=[{&(0x7f0000000440)="edf8d3b91792bd336256e35fdc0534fdef3a82f08357b7aa4fae020f19971f9e4990f74dc27b25e1430bf03b7fa45255a7ae92e0be711eebf15b1cebceab3686ccaf6dd66d6a25134c81bc2e34f04c3caf5c5646d1ef7e0285a07b5a09625d88166b823c0f20deeef44c2bd629fc9eea1027540f53ea1a2103f25c64d057828828fe117f17f5b3d5f0e386460ce3166859436f499a2c107bcdb52bd48cb90aa75580b8a3e7dee3ab983ddad2e6a86bb8068b75827a4b", 0xb6}, {&(0x7f0000000500)="8dbf3b069988f8f7404551342a62d2f871df4f3f867cbcda4ab34bade7e7f88304cfd2a3bc74697fb67cc6dea7845e94676dda401d14de471726385cdb481da5fae523401f28ed3a2831c83e2acd59074d65c5844f9206167cf5b18b194780f2d7a75de5d613dbb47af9044f850656c10ad992bde1fcc975ba8dd31c218366fe2dde232cae5a611dbe42715220d3e98338babb701d7c8151eaa1545cd0", 0x9d, 0x9}, {&(0x7f00000005c0)="9969010da377fb7df2887de37770190739df9204e00cfdb743ef4bdf912abd9525414063e1efc1a9800359297ddf01229395c04ec1d142f1a7c607c257e83442f510143c577992db426b979a8b64cb3e0f0e3be04bce63142f105f3f489d8d8fee156797ce8e717143fe6a32b541c8", 0x6f, 0x2}], 0x3802, &(0x7f00000006c0)={[{}], [{@hash}, {@measure}, {@uid_eq}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, '/dev/rtc0\x00'}}]}) clock_gettime(0x0, 0x0) futimesat(r3, &(0x7f0000000740)='./file0\x00', &(0x7f00000007c0)={{}, {0x77359400}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x17, &(0x7f0000000900)=0x400, 0x4) 2021/11/11 13:06:20 result hanged=false: [1146887ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102145 #0 [1146908ms] -> ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x20000000) #0 [1146910ms] <- ioctl$RTC_SET_TIME=0xffffffffffffffff errno=9 cover=45 #0 [1146911ms] -> openat$incfs(0xffffffffffffffff, 0x20000040, 0x14040, 0x29) #0 [1146911ms] <- openat$incfs=0xffffffffffffffff errno=9 cover=705 #0 [1146911ms] -> ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) #0 [1146912ms] <- ioctl$RTC_WIE_OFF=0xffffffffffffffff errno=9 cover=45 #0 [1146912ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1146913ms] <- socket$inet6_tcp=0x3 errno=14 cover=1722 #0 [1146913ms] -> setsockopt$inet6_IPV6_ADDRFORM(0x3, 0x29, 0x1, 0x0, 0x0) #0 [1146913ms] <- setsockopt$inet6_IPV6_ADDRFORM=0xffffffffffffffff errno=22 cover=142 #0 [1146914ms] -> getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x200000c0, 0x20000100) #0 [1146914ms] <- getsockopt$inet6_mtu=0xffffffffffffffff errno=9 cover=49 #0 [1146915ms] -> ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) #0 [1146915ms] <- ioctl$RTC_WIE_ON=0xffffffffffffffff errno=9 cover=45 #0 [1146919ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1146920ms] <- socket$inet6_tcp=0x4 errno=14 cover=1799 #0 [1146920ms] -> setsockopt$inet6_buf(0x4, 0x29, 0x66, 0x0, 0x0) #0 [1146920ms] <- setsockopt$inet6_buf=0xffffffffffffffff errno=92 cover=157 #0 [1146921ms] -> syz_mount_image$tmpfs(0x200003c0, 0x20000400, 0x81, 0x3, 0x20000640, 0x3802, 0x200006c0) syz_mount_image: size=129 segs=3 loop='/dev/loop0' dir='./file0' fs='tmpfs' flags=14338 opts='uid=0x0000000000000000,hash,measure,uid=00000000000000000000,subj_role=,smackfshat=/dev/rtc0' syz_mount_image > mount error: 20 #0 [1146928ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=20 cover=4537 #0 [1146930ms] -> clock_gettime(0x0, 0x0) #0 [1146930ms] <- clock_gettime=0xffffffffffffffff errno=14 cover=421 #0 [1146932ms] -> futimesat(0xffffffffffffffff, 0x20000740, 0x200007c0) #0 [1146932ms] <- futimesat=0xffffffffffffffff errno=9 cover=317 #0 [1146932ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1146932ms] <- socket$inet6_tcp=0x5 errno=14 cover=1820 #0 [1146933ms] -> setsockopt$inet6_int(0x5, 0x29, 0x17, 0x20000900, 0x4) #0 [1146933ms] <- setsockopt$inet6_int=0xffffffffffffffff errno=22 cover=152 2021/11/11 13:06:20 result hanged=false: 2021/11/11 13:06:20 added new input for call #4 setsockopt$inet6_IPV6_ADDRFORM to corpus: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x2f, 0x1d, 0xd, 0x7, 0x4, 0x8068a98b, 0x2, 0x126, 0x1}) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x14040, 0x29) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x66, 0x0, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x81, 0x3, &(0x7f0000000640)=[{&(0x7f0000000440)="edf8d3b91792bd336256e35fdc0534fdef3a82f08357b7aa4fae020f19971f9e4990f74dc27b25e1430bf03b7fa45255a7ae92e0be711eebf15b1cebceab3686ccaf6dd66d6a25134c81bc2e34f04c3caf5c5646d1ef7e0285a07b5a09625d88166b823c0f20deeef44c2bd629fc9eea1027540f53ea1a2103f25c64d057828828fe117f17f5b3d5f0e386460ce3166859436f499a2c107bcdb52bd48cb90aa75580b8a3e7dee3ab983ddad2e6a86bb8068b75827a4b", 0xb6}, {&(0x7f0000000500)="8dbf3b069988f8f7404551342a62d2f871df4f3f867cbcda4ab34bade7e7f88304cfd2a3bc74697fb67cc6dea7845e94676dda401d14de471726385cdb481da5fae523401f28ed3a2831c83e2acd59074d65c5844f9206167cf5b18b194780f2d7a75de5d613dbb47af9044f850656c10ad992bde1fcc975ba8dd31c218366fe2dde232cae5a611dbe42715220d3e98338babb701d7c8151eaa1545cd0", 0x9d, 0x9}, {&(0x7f00000005c0)="9969010da377fb7df2887de37770190739df9204e00cfdb743ef4bdf912abd9525414063e1efc1a9800359297ddf01229395c04ec1d142f1a7c607c257e83442f510143c577992db426b979a8b64cb3e0f0e3be04bce63142f105f3f489d8d8fee156797ce8e717143fe6a32b541c8", 0x6f, 0x2}], 0x3802, &(0x7f00000006c0)={[{}], [{@hash}, {@measure}, {@uid_eq}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, '/dev/rtc0\x00'}}]}) clock_gettime(0x0, 0x0) futimesat(r3, &(0x7f0000000740)='./file0\x00', &(0x7f00000007c0)={{}, {0x77359400}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x17, &(0x7f0000000900)=0x400, 0x4) 13:06:20 executing program 0: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x2f, 0x1d, 0xd, 0x7, 0x4, 0x8068a98b, 0x2, 0x126, 0x1}) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x14040, 0x29) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x66, 0x0, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x81, 0x3, &(0x7f0000000640)=[{&(0x7f0000000440)="edf8d3b91792bd336256e35fdc0534fdef3a82f08357b7aa4fae020f19971f9e4990f74dc27b25e1430bf03b7fa45255a7ae92e0be711eebf15b1cebceab3686ccaf6dd66d6a25134c81bc2e34f04c3caf5c5646d1ef7e0285a07b5a09625d88166b823c0f20deeef44c2bd629fc9eea1027540f53ea1a2103f25c64d057828828fe117f17f5b3d5f0e386460ce3166859436f499a2c107bcdb52bd48cb90aa75580b8a3e7dee3ab983ddad2e6a86bb8068b75827a4b", 0xb6}, {&(0x7f0000000500)="8dbf3b069988f8f7404551342a62d2f871df4f3f867cbcda4ab34bade7e7f88304cfd2a3bc74697fb67cc6dea7845e94676dda401d14de471726385cdb481da5fae523401f28ed3a2831c83e2acd59074d65c5844f9206167cf5b18b194780f2d7a75de5d613dbb47af9044f850656c10ad992bde1fcc975ba8dd31c218366fe2dde232cae5a611dbe42715220d3e98338babb701d7c8151eaa1545cd0", 0x9d, 0x9}, {&(0x7f00000005c0)="9969010da377fb7df2887de37770190739df9204e00cfdb743ef4bdf912abd9525414063e1efc1a9800359297ddf01229395c04ec1d142f1a7c607c257e83442f510143c577992db426b979a8b64cb3e0f0e3be04bce63142f105f3f489d8d8fee156797ce8e717143fe6a32b541c8", 0x6f, 0x2}], 0x3802, &(0x7f00000006c0)={[{}], [{@hash}, {@measure}, {@uid_eq}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, '/dev/rtc0\x00'}}]}) clock_gettime(0x0, 0x0) futimesat(r3, &(0x7f0000000740)='./file0\x00', &(0x7f00000007c0)={{}, {0x77359400}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x17, &(0x7f0000000900)=0x400, 0x4) 2021/11/11 13:06:20 #0: triaging type=7 2021/11/11 13:06:20 triaging input for call #3 socket$inet6_tcp (new signal=2) [1146987ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102147 #0 [1147006ms] -> ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x20000000) #0 [1147007ms] <- ioctl$RTC_SET_TIME=0xffffffffffffffff errno=9 cover=45 #0 [1147008ms] -> openat$incfs(0xffffffffffffffff, 0x20000040, 0x14040, 0x29) #0 [1147008ms] <- openat$incfs=0xffffffffffffffff errno=9 cover=715 #0 [1147009ms] -> ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) #0 [1147009ms] <- ioctl$RTC_WIE_OFF=0xffffffffffffffff errno=9 cover=45 #0 [1147009ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1147010ms] <- socket$inet6_tcp=0x3 errno=14 cover=1722 #0 [1147010ms] -> setsockopt$inet6_IPV6_ADDRFORM(0x3, 0x29, 0x1, 0x0, 0x0) #0 [1147011ms] <- setsockopt$inet6_IPV6_ADDRFORM=0xffffffffffffffff errno=22 cover=142 #0 [1147011ms] -> getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x200000c0, 0x20000100) #0 [1147011ms] <- getsockopt$inet6_mtu=0xffffffffffffffff errno=9 cover=49 #0 [1147012ms] -> ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) #0 [1147012ms] <- ioctl$RTC_WIE_ON=0xffffffffffffffff errno=9 cover=45 #0 [1147013ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1147013ms] <- socket$inet6_tcp=0x4 errno=14 cover=1751 #0 [1147014ms] -> setsockopt$inet6_buf(0x4, 0x29, 0x66, 0x0, 0x0) #0 [1147014ms] <- setsockopt$inet6_buf=0xffffffffffffffff errno=92 cover=157 #0 [1147015ms] -> syz_mount_image$tmpfs(0x200003c0, 0x20000400, 0x81, 0x3, 0x20000640, 0x3802, 0x200006c0) syz_mount_image: size=129 segs=3 loop='/dev/loop0' dir='./file0' fs='tmpfs' flags=14338 opts='uid=0x0000000000000000,hash,measure,uid=00000000000000000000,subj_role=,smackfshat=/dev/rtc0' syz_mount_image > mount error: 20 #0 [1147021ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=20 cover=4421 #0 [1147022ms] -> clock_gettime(0x0, 0x0) #0 [1147022ms] <- clock_gettime=0xffffffffffffffff errno=14 cover=421 #0 [1147023ms] -> futimesat(0xffffffffffffffff, 0x20000740, 0x200007c0) #0 [1147023ms] <- futimesat=0xffffffffffffffff errno=9 cover=316 #0 [1147024ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1147024ms] <- socket$inet6_tcp=0x5 errno=14 cover=1733 #0 [1147025ms] -> setsockopt$inet6_int(0x5, 0x29, 0x17, 0x20000900, 0x4) #0 [1147025ms] <- setsockopt$inet6_int=0xffffffffffffffff errno=22 cover=152 13:06:20 executing program 0: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x2f, 0x1d, 0xd, 0x7, 0x4, 0x8068a98b, 0x2, 0x126, 0x1}) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x14040, 0x29) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x66, 0x0, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x81, 0x3, &(0x7f0000000640)=[{&(0x7f0000000440)="edf8d3b91792bd336256e35fdc0534fdef3a82f08357b7aa4fae020f19971f9e4990f74dc27b25e1430bf03b7fa45255a7ae92e0be711eebf15b1cebceab3686ccaf6dd66d6a25134c81bc2e34f04c3caf5c5646d1ef7e0285a07b5a09625d88166b823c0f20deeef44c2bd629fc9eea1027540f53ea1a2103f25c64d057828828fe117f17f5b3d5f0e386460ce3166859436f499a2c107bcdb52bd48cb90aa75580b8a3e7dee3ab983ddad2e6a86bb8068b75827a4b", 0xb6}, {&(0x7f0000000500)="8dbf3b069988f8f7404551342a62d2f871df4f3f867cbcda4ab34bade7e7f88304cfd2a3bc74697fb67cc6dea7845e94676dda401d14de471726385cdb481da5fae523401f28ed3a2831c83e2acd59074d65c5844f9206167cf5b18b194780f2d7a75de5d613dbb47af9044f850656c10ad992bde1fcc975ba8dd31c218366fe2dde232cae5a611dbe42715220d3e98338babb701d7c8151eaa1545cd0", 0x9d, 0x9}, {&(0x7f00000005c0)="9969010da377fb7df2887de37770190739df9204e00cfdb743ef4bdf912abd9525414063e1efc1a9800359297ddf01229395c04ec1d142f1a7c607c257e83442f510143c577992db426b979a8b64cb3e0f0e3be04bce63142f105f3f489d8d8fee156797ce8e717143fe6a32b541c8", 0x6f, 0x2}], 0x3802, &(0x7f00000006c0)={[{}], [{@hash}, {@measure}, {@uid_eq}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, '/dev/rtc0\x00'}}]}) clock_gettime(0x0, 0x0) futimesat(r3, &(0x7f0000000740)='./file0\x00', &(0x7f00000007c0)={{}, {0x77359400}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x17, &(0x7f0000000900)=0x400, 0x4) 2021/11/11 13:06:20 result hanged=false: [1147080ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102149 #0 [1147102ms] -> ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x20000000) #0 [1147102ms] <- ioctl$RTC_SET_TIME=0xffffffffffffffff errno=9 cover=45 #0 [1147103ms] -> openat$incfs(0xffffffffffffffff, 0x20000040, 0x14040, 0x29) #0 [1147103ms] <- openat$incfs=0xffffffffffffffff errno=9 cover=726 #0 [1147103ms] -> ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) #0 [1147103ms] <- ioctl$RTC_WIE_OFF=0xffffffffffffffff errno=9 cover=45 #0 [1147103ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1147103ms] <- socket$inet6_tcp=0x3 errno=14 cover=1747 #0 [1147104ms] -> setsockopt$inet6_IPV6_ADDRFORM(0x3, 0x29, 0x1, 0x0, 0x0) #0 [1147104ms] <- setsockopt$inet6_IPV6_ADDRFORM=0xffffffffffffffff errno=22 cover=142 #0 [1147104ms] -> getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x200000c0, 0x20000100) #0 [1147104ms] <- getsockopt$inet6_mtu=0xffffffffffffffff errno=9 cover=49 #0 [1147104ms] -> ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) #0 [1147104ms] <- ioctl$RTC_WIE_ON=0xffffffffffffffff errno=9 cover=45 #0 [1147104ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1147105ms] <- socket$inet6_tcp=0x4 errno=14 cover=1712 #0 [1147105ms] -> setsockopt$inet6_buf(0x4, 0x29, 0x66, 0x0, 0x0) #0 [1147105ms] <- setsockopt$inet6_buf=0xffffffffffffffff errno=92 cover=157 #0 [1147105ms] -> syz_mount_image$tmpfs(0x200003c0, 0x20000400, 0x81, 0x3, 0x20000640, 0x3802, 0x200006c0) syz_mount_image: size=129 segs=3 loop='/dev/loop0' dir='./file0' fs='tmpfs' flags=14338 opts='uid=0x0000000000000000,hash,measure,uid=00000000000000000000,subj_role=,smackfshat=/dev/rtc0' syz_mount_image > mount error: 20 #0 [1147119ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=20 cover=10931 #0 [1147121ms] -> clock_gettime(0x0, 0x0) #0 [1147121ms] <- clock_gettime=0xffffffffffffffff errno=14 cover=421 #0 [1147121ms] -> futimesat(0xffffffffffffffff, 0x20000740, 0x200007c0) #0 [1147121ms] <- futimesat=0xffffffffffffffff errno=9 cover=327 #0 [1147121ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1147121ms] <- socket$inet6_tcp=0x5 errno=14 cover=1836 #0 [1147122ms] -> setsockopt$inet6_int(0x5, 0x29, 0x17, 0x20000900, 0x4) #0 [1147122ms] <- setsockopt$inet6_int=0xffffffffffffffff errno=22 cover=152 2021/11/11 13:06:20 result hanged=false: 13:06:20 executing program 0: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x2f, 0x1d, 0xd, 0x7, 0x4, 0x8068a98b, 0x2, 0x126, 0x1}) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x14040, 0x29) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x66, 0x0, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x81, 0x3, &(0x7f0000000640)=[{&(0x7f0000000440)="edf8d3b91792bd336256e35fdc0534fdef3a82f08357b7aa4fae020f19971f9e4990f74dc27b25e1430bf03b7fa45255a7ae92e0be711eebf15b1cebceab3686ccaf6dd66d6a25134c81bc2e34f04c3caf5c5646d1ef7e0285a07b5a09625d88166b823c0f20deeef44c2bd629fc9eea1027540f53ea1a2103f25c64d057828828fe117f17f5b3d5f0e386460ce3166859436f499a2c107bcdb52bd48cb90aa75580b8a3e7dee3ab983ddad2e6a86bb8068b75827a4b", 0xb6}, {&(0x7f0000000500)="8dbf3b069988f8f7404551342a62d2f871df4f3f867cbcda4ab34bade7e7f88304cfd2a3bc74697fb67cc6dea7845e94676dda401d14de471726385cdb481da5fae523401f28ed3a2831c83e2acd59074d65c5844f9206167cf5b18b194780f2d7a75de5d613dbb47af9044f850656c10ad992bde1fcc975ba8dd31c218366fe2dde232cae5a611dbe42715220d3e98338babb701d7c8151eaa1545cd0", 0x9d, 0x9}, {&(0x7f00000005c0)="9969010da377fb7df2887de37770190739df9204e00cfdb743ef4bdf912abd9525414063e1efc1a9800359297ddf01229395c04ec1d142f1a7c607c257e83442f510143c577992db426b979a8b64cb3e0f0e3be04bce63142f105f3f489d8d8fee156797ce8e717143fe6a32b541c8", 0x6f, 0x2}], 0x3802, &(0x7f00000006c0)={[{}], [{@hash}, {@measure}, {@uid_eq}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, '/dev/rtc0\x00'}}]}) clock_gettime(0x0, 0x0) futimesat(r3, &(0x7f0000000740)='./file0\x00', &(0x7f00000007c0)={{}, {0x77359400}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x17, &(0x7f0000000900)=0x400, 0x4) [1147174ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102151 #0 [1147194ms] -> ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x20000000) #0 [1147194ms] <- ioctl$RTC_SET_TIME=0xffffffffffffffff errno=9 cover=45 #0 [1147196ms] -> openat$incfs(0xffffffffffffffff, 0x20000040, 0x14040, 0x29) #0 [1147196ms] <- openat$incfs=0xffffffffffffffff errno=9 cover=780 #0 [1147196ms] -> ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) #0 [1147196ms] <- ioctl$RTC_WIE_OFF=0xffffffffffffffff errno=9 cover=45 #0 [1147196ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1147197ms] <- socket$inet6_tcp=0x3 errno=14 cover=1776 #0 [1147197ms] -> setsockopt$inet6_IPV6_ADDRFORM(0x3, 0x29, 0x1, 0x0, 0x0) #0 [1147197ms] <- setsockopt$inet6_IPV6_ADDRFORM=0xffffffffffffffff errno=22 cover=146 #0 [1147198ms] -> getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x200000c0, 0x20000100) #0 [1147198ms] <- getsockopt$inet6_mtu=0xffffffffffffffff errno=9 cover=49 #0 [1147199ms] -> ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) #0 [1147199ms] <- ioctl$RTC_WIE_ON=0xffffffffffffffff errno=9 cover=45 #0 [1147200ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1147200ms] <- socket$inet6_tcp=0x4 errno=14 cover=1788 #0 [1147201ms] -> setsockopt$inet6_buf(0x4, 0x29, 0x66, 0x0, 0x0) #0 [1147201ms] <- setsockopt$inet6_buf=0xffffffffffffffff errno=92 cover=157 #0 [1147201ms] -> syz_mount_image$tmpfs(0x200003c0, 0x20000400, 0x81, 0x3, 0x20000640, 0x3802, 0x200006c0) syz_mount_image: size=129 segs=3 loop='/dev/loop0' dir='./file0' fs='tmpfs' flags=14338 opts='uid=0x0000000000000000,hash,measure,uid=00000000000000000000,subj_role=,smackfshat=/dev/rtc0' syz_mount_image > mount error: 20 #0 [1147208ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=20 cover=4446 #0 [1147209ms] -> clock_gettime(0x0, 0x0) #0 [1147209ms] <- clock_gettime=0xffffffffffffffff errno=14 cover=421 #0 [1147209ms] -> futimesat(0xffffffffffffffff, 0x20000740, 0x200007c0) #0 [1147210ms] <- futimesat=0xffffffffffffffff errno=9 cover=316 #0 [1147210ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1147211ms] <- socket$inet6_tcp=0x5 errno=14 cover=1812 #0 [1147214ms] -> setsockopt$inet6_int(0x5, 0x29, 0x17, 0x20000900, 0x4) #0 [1147214ms] <- setsockopt$inet6_int=0xffffffffffffffff errno=22 cover=152 2021/11/11 13:06:20 result hanged=false: 2021/11/11 13:06:20 added new input for call #3 socket$inet6_tcp to corpus: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x2f, 0x1d, 0xd, 0x7, 0x4, 0x8068a98b, 0x2, 0x126, 0x1}) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x14040, 0x29) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x66, 0x0, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x81, 0x3, &(0x7f0000000640)=[{&(0x7f0000000440)="edf8d3b91792bd336256e35fdc0534fdef3a82f08357b7aa4fae020f19971f9e4990f74dc27b25e1430bf03b7fa45255a7ae92e0be711eebf15b1cebceab3686ccaf6dd66d6a25134c81bc2e34f04c3caf5c5646d1ef7e0285a07b5a09625d88166b823c0f20deeef44c2bd629fc9eea1027540f53ea1a2103f25c64d057828828fe117f17f5b3d5f0e386460ce3166859436f499a2c107bcdb52bd48cb90aa75580b8a3e7dee3ab983ddad2e6a86bb8068b75827a4b", 0xb6}, {&(0x7f0000000500)="8dbf3b069988f8f7404551342a62d2f871df4f3f867cbcda4ab34bade7e7f88304cfd2a3bc74697fb67cc6dea7845e94676dda401d14de471726385cdb481da5fae523401f28ed3a2831c83e2acd59074d65c5844f9206167cf5b18b194780f2d7a75de5d613dbb47af9044f850656c10ad992bde1fcc975ba8dd31c218366fe2dde232cae5a611dbe42715220d3e98338babb701d7c8151eaa1545cd0", 0x9d, 0x9}, {&(0x7f00000005c0)="9969010da377fb7df2887de37770190739df9204e00cfdb743ef4bdf912abd9525414063e1efc1a9800359297ddf01229395c04ec1d142f1a7c607c257e83442f510143c577992db426b979a8b64cb3e0f0e3be04bce63142f105f3f489d8d8fee156797ce8e717143fe6a32b541c8", 0x6f, 0x2}], 0x3802, &(0x7f00000006c0)={[{}], [{@hash}, {@measure}, {@uid_eq}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, '/dev/rtc0\x00'}}]}) clock_gettime(0x0, 0x0) futimesat(r3, &(0x7f0000000740)='./file0\x00', &(0x7f00000007c0)={{}, {0x77359400}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x17, &(0x7f0000000900)=0x400, 0x4) 13:06:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80a04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x81d0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [1147267ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102153 #0 [1147285ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [1147286ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=692 enabling collider #0 [1147286ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [1147286ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=691 13:06:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80a04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x81d0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2021/11/11 13:06:20 result hanged=false: 2021/11/11 13:06:20 #0: triaging type=7 2021/11/11 13:06:20 triaging input for call #0 perf_event_open (new signal=2) [1147329ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102155 #0 [1147350ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [1147351ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=692 13:06:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80a04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x81d0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2021/11/11 13:06:20 result hanged=false: [1147401ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102157 #0 [1147422ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [1147422ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=703 13:06:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80a04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x81d0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2021/11/11 13:06:20 result hanged=false: [1147469ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102159 #0 [1147490ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [1147492ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=703 2021/11/11 13:06:21 result hanged=false: 2021/11/11 13:06:21 added new input for call #0 perf_event_open to corpus: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80a04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x81d0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:06:21 executing program 0: io_setup(0x4, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [1147540ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102161 #0 [1147564ms] -> io_setup(0x4, 0x20000000) #0 [1147565ms] <- io_setup=0x0 errno=14 cover=4278 #0 [1147566ms] -> io_pgetevents(0x7fdaa7a02000, 0x0, 0x0, 0x0, 0x0, 0x0) #0 [1147567ms] <- io_pgetevents=0x0 errno=14 cover=371 enabling collider #0 [1147568ms] -> io_setup(0x4, 0x20000000) #0 [1147568ms] <- io_setup=0xffffffffffffffff errno=22 cover=40 13:06:21 executing program 0: io_setup(0x4, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2021/11/11 13:06:21 result hanged=false: 2021/11/11 13:06:21 #0: triaging type=7 2021/11/11 13:06:21 triaging input for call #0 io_setup (new signal=2) [1147619ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102163 #0 [1147641ms] -> io_setup(0x4, 0x20000000) #0 [1147641ms] <- io_setup=0x0 errno=14 cover=3453 #0 [1147643ms] -> io_pgetevents(0x7fdaa7a02000, 0x0, 0x0, 0x0, 0x0, 0x0) #0 [1147643ms] <- io_pgetevents=0x0 errno=14 cover=371 13:06:21 executing program 0: io_setup(0x4, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2021/11/11 13:06:21 result hanged=false: [1147694ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102165 #0 [1147715ms] -> io_setup(0x4, 0x20000000) #0 [1147718ms] <- io_setup=0x0 errno=14 cover=3591 #0 [1147719ms] -> io_pgetevents(0x7fdaa7a02000, 0x0, 0x0, 0x0, 0x0, 0x0) #0 [1147720ms] <- io_pgetevents=0x0 errno=14 cover=371 13:06:21 executing program 0: io_setup(0x4, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2021/11/11 13:06:21 result hanged=false: [1147779ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102167 #0 [1147800ms] -> io_setup(0x4, 0x20000000) #0 [1147801ms] <- io_setup=0x0 errno=14 cover=3591 #0 [1147805ms] -> io_pgetevents(0x7fdaa7a02000, 0x0, 0x0, 0x0, 0x0, 0x0) #0 [1147805ms] <- io_pgetevents=0x0 errno=14 cover=371 2021/11/11 13:06:21 result hanged=false: 2021/11/11 13:06:21 added new input for call #0 io_setup to corpus: io_setup(0x4, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:06:21 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffffffff}]}) [1147872ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102169 #0 [1147893ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [1147894ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0xffffffffffffffff errno=22 cover=1827 enabling collider #0 [1147894ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [1147895ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0xffffffffffffffff errno=22 cover=1996 13:06:21 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffffffff}]}) 2021/11/11 13:06:21 result hanged=false: 2021/11/11 13:06:21 #0: triaging type=7 2021/11/11 13:06:21 triaging input for call #0 seccomp$SECCOMP_SET_MODE_FILTER_LISTENER (new signal=2) [1147936ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102171 #0 [1147955ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [1147956ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0xffffffffffffffff errno=22 cover=1809 13:06:21 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffffffff}]}) 2021/11/11 13:06:21 result hanged=false: [1148004ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102173 #0 [1148025ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [1148026ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0xffffffffffffffff errno=22 cover=1831 13:06:21 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffffffff}]}) 2021/11/11 13:06:21 result hanged=false: [1148073ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102175 #0 [1148093ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [1148093ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0xffffffffffffffff errno=22 cover=1831 2021/11/11 13:06:21 result hanged=false: 2021/11/11 13:06:21 added new input for call #0 seccomp$SECCOMP_SET_MODE_FILTER_LISTENER to corpus: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffffffff}]}) 13:06:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14}, 0x14}}, 0x0) [1148139ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102177 #0 [1148158ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1148159ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6298 #0 [1148160ms] -> syz_genetlink_get_family_id$ieee802154(0x20000940, 0xffffffffffffffff) syz_genetlink_get_family_id(802.15.4 MAC, -1) netlink: failed to get family id for 802.15.4 MAC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [1148161ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=2 cover=6393 #0 [1148163ms] -> sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0x4, 0x20000a00, 0x0) #0 [1148163ms] <- sendmsg$IEEE802154_LLSEC_DEL_DEVKEY=0x14 errno=14 cover=1165 enabling collider #0 [1148165ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1148165ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5546 #0 [1148167ms] -> syz_genetlink_get_family_id$ieee802154(0x20000940, 0xffffffffffffffff) syz_genetlink_get_family_id(802.15.4 MAC, -1) netlink: failed to get family id for 802.15.4 MAC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [1148168ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=2 cover=5896 pthread_create failed (errno 11) 2021/11/11 13:06:21 result hanged=false: 13:06:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)={[{@fat=@discard}]}) [1148247ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102279 #0 [1148267ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x200000c0) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='discard,' #0 [1148283ms] <- syz_mount_image$vfat=0x5 errno=0 cover=43647 enabling collider #0 [1148288ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x200000c0) #0 [1148290ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=16 cover=5549 2021/11/11 13:06:21 result hanged=false: 2021/11/11 13:06:21 #0: triaging type=7 13:06:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)={[{@fat=@discard}]}) 2021/11/11 13:06:21 triaging input for call #0 syz_mount_image$vfat (new signal=7) umount(./8811/file0) [1148349ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102281 #0 [1148369ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x200000c0) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='discard,' #0 [1148386ms] <- syz_mount_image$vfat=0x5 errno=0 cover=27610 2021/11/11 13:06:21 result hanged=false: 13:06:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)={[{@fat=@discard}]}) umount(./8812/file0) [1148449ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102283 #0 [1148471ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x200000c0) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='discard,' #0 [1148491ms] <- syz_mount_image$vfat=0x5 errno=0 cover=48664 2021/11/11 13:06:22 result hanged=false: 13:06:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)={[{@fat=@discard}]}) umount(./8813/file0) [1148556ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102285 #0 [1148576ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x200000c0) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='discard,' #0 [1148592ms] <- syz_mount_image$vfat=0x5 errno=0 cover=27136 2021/11/11 13:06:22 result hanged=false: 2021/11/11 13:06:22 added new input for call #0 syz_mount_image$vfat to corpus: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)={[{@fat=@discard}]}) umount(./8814/file0) 13:06:22 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) [1148677ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102287 #0 [1148696ms] -> perf_event_open(0x200000c0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1148696ms] <- perf_event_open=0x3 errno=14 cover=4213 #0 [1148697ms] -> pipe2(0x20000000, 0x0) #0 [1148698ms] <- pipe2=0x0 errno=14 cover=4881 #0 [1148698ms] -> fcntl$setpipe(0x5, 0x407, 0x0) #0 [1148698ms] <- fcntl$setpipe=0x1000 errno=14 cover=1005 enabling collider #0 [1148700ms] -> perf_event_open(0x200000c0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1148700ms] <- perf_event_open=0x3 errno=14 cover=4134 #0 [1148700ms] -> pipe2(0x20000000, 0x0) #0 [1148701ms] <- pipe2=0x0 errno=14 cover=4904 pthread_create failed (errno 11) 13:06:22 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 2021/11/11 13:06:22 result hanged=false: 2021/11/11 13:06:22 #0: triaging type=7 2021/11/11 13:06:22 triaging input for call #2 fcntl$setpipe (new signal=3) [1148779ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102389 #0 [1148804ms] -> perf_event_open(0x200000c0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1148804ms] <- perf_event_open=0x3 errno=14 cover=4260 #0 [1148808ms] -> pipe2(0x20000000, 0x0) #0 [1148808ms] <- pipe2=0x0 errno=14 cover=5556 #0 [1148809ms] -> fcntl$setpipe(0x5, 0x407, 0x0) #0 [1148809ms] <- fcntl$setpipe=0x1000 errno=14 cover=1016 13:06:22 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 2021/11/11 13:06:22 result hanged=false: [1148853ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102391 #0 [1148878ms] -> perf_event_open(0x200000c0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1148879ms] <- perf_event_open=0x3 errno=14 cover=4191 #0 [1148880ms] -> pipe2(0x20000000, 0x0) #0 [1148880ms] <- pipe2=0x0 errno=14 cover=6053 #0 [1148882ms] -> fcntl$setpipe(0x5, 0x407, 0x0) #0 [1148882ms] <- fcntl$setpipe=0x1000 errno=14 cover=1411 13:06:22 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 2021/11/11 13:06:22 result hanged=false: [1148927ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102393 #0 [1148946ms] -> perf_event_open(0x200000c0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1148947ms] <- perf_event_open=0x3 errno=14 cover=4246 #0 [1148948ms] -> pipe2(0x20000000, 0x0) #0 [1148948ms] <- pipe2=0x0 errno=14 cover=4921 #0 [1148949ms] -> fcntl$setpipe(0x5, 0x407, 0x0) #0 [1148949ms] <- fcntl$setpipe=0x1000 errno=14 cover=1005 2021/11/11 13:06:22 result hanged=false: 2021/11/11 13:06:22 added new input for call #2 fcntl$setpipe to corpus: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 13:06:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2], 0x24}}, 0x0) [1148996ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102395 #0 [1149015ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1149016ms] <- socket$nl_generic=0x3 errno=14 cover=1425 #0 [1149017ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [1149018ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12051 #0 [1149020ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x200000c0) #0 [1149020ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 [ 1197.917899] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [1149022ms] -> sendmsg$NL80211_CMD_SET_INTERFACE(0x3, 0x20000100, 0x0) #0 [1149027ms] <- sendmsg$NL80211_CMD_SET_INTERFACE=0x24 errno=14 cover=3663 enabling collider #0 [1149027ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1149029ms] <- socket$nl_generic=0x3 errno=14 cover=1566 #0 [1149033ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [1149035ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11403 pthread_create failed (errno 11) 2021/11/11 13:06:22 result hanged=false: 13:06:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2], 0x24}}, 0x0) 2021/11/11 13:06:22 #0: triaging type=7 2021/11/11 13:06:22 triaging input for call #3 sendmsg$NL80211_CMD_SET_INTERFACE (new signal=2) [1149119ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102497 #0 [1149142ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1149143ms] <- socket$nl_generic=0x3 errno=14 cover=1390 #0 [1149143ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [1149146ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11834 #0 [1149148ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x200000c0) #0 [1149148ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [1149148ms] -> sendmsg$NL80211_CMD_SET_INTERFACE(0x3, 0x20000100, 0x0) [ 1198.043376] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [1149150ms] <- sendmsg$NL80211_CMD_SET_INTERFACE=0x24 errno=14 cover=3644 13:06:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2], 0x24}}, 0x0) 2021/11/11 13:06:22 result hanged=false: [1149199ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102499 #0 [1149224ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1149225ms] <- socket$nl_generic=0x3 errno=14 cover=1456 #0 [1149226ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [1149227ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12002 #0 [1149229ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x200000c0) #0 [1149229ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [1149230ms] -> sendmsg$NL80211_CMD_SET_INTERFACE(0x3, 0x20000100, 0x0) [ 1198.125330] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [1149232ms] <- sendmsg$NL80211_CMD_SET_INTERFACE=0x24 errno=14 cover=3623 13:06:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2], 0x24}}, 0x0) 2021/11/11 13:06:22 result hanged=false: [1149280ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102501 #0 [1149302ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1149302ms] <- socket$nl_generic=0x3 errno=14 cover=1412 #0 [1149303ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [1149305ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11929 #0 [1149310ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x200000c0) #0 [1149310ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 [ 1198.207062] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [1149312ms] -> sendmsg$NL80211_CMD_SET_INTERFACE(0x3, 0x20000100, 0x0) #0 [1149315ms] <- sendmsg$NL80211_CMD_SET_INTERFACE=0x24 errno=14 cover=3617 2021/11/11 13:06:22 result hanged=false: 2021/11/11 13:06:22 added new input for call #3 sendmsg$NL80211_CMD_SET_INTERFACE to corpus: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2], 0x24}}, 0x0) 13:06:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2021/11/11 13:06:22 poll: candidates=8 inputs=0 signal=0 [1149367ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102503 #0 [1149386ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1149387ms] <- socket$inet6_tcp=0x3 errno=14 cover=1759 #0 [1149388ms] -> socket$netlink(0x10, 0x3, 0x9) #0 [1149388ms] <- socket$netlink=0x4 errno=14 cover=1681 #0 [1149390ms] -> setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0x4, 0x10e, 0x1, 0x20000000, 0x4) #0 [1149390ms] <- setsockopt$netlink_NETLINK_ADD_MEMBERSHIP=0x0 errno=14 cover=283 #0 [1149391ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [1149392ms] <- close_range=0x0 errno=14 cover=3767 enabling collider #0 [1149393ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1149393ms] <- socket$inet6_tcp=0x3 errno=14 cover=1837 #0 [1149394ms] -> socket$netlink(0x10, 0x3, 0x9) #0 [1149394ms] <- socket$netlink=0x4 errno=14 cover=1407 pthread_create failed (errno 11) 2021/11/11 13:06:22 result hanged=false: 2021/11/11 13:06:22 #0: triaging type=7 2021/11/11 13:06:22 triaging input for call #3 close_range (new signal=9) 13:06:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) [1149476ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102605 #0 [1149495ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1149496ms] <- socket$inet6_tcp=0x3 errno=14 cover=1734 #0 [1149496ms] -> socket$netlink(0x10, 0x3, 0x9) #0 [1149497ms] <- socket$netlink=0x4 errno=14 cover=1443 #0 [1149497ms] -> setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0x4, 0x10e, 0x1, 0x20000000, 0x4) #0 [1149497ms] <- setsockopt$netlink_NETLINK_ADD_MEMBERSHIP=0x0 errno=14 cover=283 #0 [1149498ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [1149499ms] <- close_range=0x0 errno=14 cover=3728 2021/11/11 13:06:23 result hanged=false: 13:06:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) [1149548ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102607 #0 [1149567ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1149567ms] <- socket$inet6_tcp=0x3 errno=14 cover=1745 #0 [1149568ms] -> socket$netlink(0x10, 0x3, 0x9) #0 [1149568ms] <- socket$netlink=0x4 errno=14 cover=1411 #0 [1149569ms] -> setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0x4, 0x10e, 0x1, 0x20000000, 0x4) #0 [1149569ms] <- setsockopt$netlink_NETLINK_ADD_MEMBERSHIP=0x0 errno=14 cover=283 #0 [1149572ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [1149572ms] <- close_range=0x0 errno=14 cover=3767 13:06:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2021/11/11 13:06:23 result hanged=false: [1149624ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102609 #0 [1149647ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1149647ms] <- socket$inet6_tcp=0x3 errno=14 cover=1712 #0 [1149648ms] -> socket$netlink(0x10, 0x3, 0x9) #0 [1149648ms] <- socket$netlink=0x4 errno=14 cover=1447 #0 [1149648ms] -> setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0x4, 0x10e, 0x1, 0x20000000, 0x4) #0 [1149648ms] <- setsockopt$netlink_NETLINK_ADD_MEMBERSHIP=0x0 errno=14 cover=283 #0 [1149648ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [1149649ms] <- close_range=0x0 errno=14 cover=3767 2021/11/11 13:06:23 result hanged=false: 2021/11/11 13:06:23 added new input for call #3 close_range to corpus: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 13:06:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2021/11/11 13:06:23 #0: triaging type=7 2021/11/11 13:06:23 triaging input for call #2 setsockopt$netlink_NETLINK_ADD_MEMBERSHIP (new signal=8) [1149698ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102611 #0 [1149718ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1149718ms] <- socket$inet6_tcp=0x3 errno=14 cover=1734 #0 [1149719ms] -> socket$netlink(0x10, 0x3, 0x9) #0 [1149719ms] <- socket$netlink=0x4 errno=14 cover=1386 #0 [1149720ms] -> setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0x4, 0x10e, 0x1, 0x20000000, 0x4) #0 [1149720ms] <- setsockopt$netlink_NETLINK_ADD_MEMBERSHIP=0x0 errno=14 cover=283 #0 [1149720ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [1149721ms] <- close_range=0x0 errno=14 cover=3742 2021/11/11 13:06:23 result hanged=false: 13:06:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) [1149764ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102613 #0 [1149783ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1149783ms] <- socket$inet6_tcp=0x3 errno=14 cover=1723 #0 [1149784ms] -> socket$netlink(0x10, 0x3, 0x9) #0 [1149784ms] <- socket$netlink=0x4 errno=14 cover=1419 #0 [1149785ms] -> setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0x4, 0x10e, 0x1, 0x20000000, 0x4) #0 [1149785ms] <- setsockopt$netlink_NETLINK_ADD_MEMBERSHIP=0x0 errno=14 cover=283 #0 [1149786ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [1149787ms] <- close_range=0x0 errno=14 cover=3728 13:06:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2021/11/11 13:06:23 result hanged=false: [1149830ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102615 #0 [1149849ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1149849ms] <- socket$inet6_tcp=0x3 errno=14 cover=1745 #0 [1149850ms] -> socket$netlink(0x10, 0x3, 0x9) #0 [1149850ms] <- socket$netlink=0x4 errno=14 cover=1430 #0 [1149851ms] -> setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0x4, 0x10e, 0x1, 0x20000000, 0x4) #0 [1149851ms] <- setsockopt$netlink_NETLINK_ADD_MEMBERSHIP=0x0 errno=14 cover=283 #0 [1149853ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [1149854ms] <- close_range=0x0 errno=14 cover=3770 2021/11/11 13:06:23 result hanged=false: 2021/11/11 13:06:23 added new input for call #2 setsockopt$netlink_NETLINK_ADD_MEMBERSHIP to corpus: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 13:06:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x28, 0x19, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x14, 0x23f, 0x0, 0x0, @ipv6=@empty}]}, 0x28}}, 0x0) [1149905ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102617 #0 [1149927ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [1149927ms] <- socket$netlink=0x3 errno=14 cover=1432 #0 [1149928ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) [ 1198.823324] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [1149931ms] <- sendmsg$nl_generic=0x28 errno=14 cover=3430 enabling collider #0 [1149933ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [1149933ms] <- socket$netlink=0x3 errno=14 cover=1423 13:06:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x28, 0x19, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x14, 0x23f, 0x0, 0x0, @ipv6=@empty}]}, 0x28}}, 0x0) 2021/11/11 13:06:23 result hanged=false: 2021/11/11 13:06:23 #0: triaging type=7 2021/11/11 13:06:23 triaging input for call #1 sendmsg$nl_generic (new signal=27) [1149980ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102619 #0 [1150000ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [1150000ms] <- socket$netlink=0x3 errno=14 cover=1592 #0 [1150002ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) [ 1198.899502] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [1150006ms] <- sendmsg$nl_generic=0x28 errno=14 cover=3395 13:06:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x28, 0x19, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x14, 0x23f, 0x0, 0x0, @ipv6=@empty}]}, 0x28}}, 0x0) 2021/11/11 13:06:23 result hanged=false: [1150054ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102621 #0 [1150074ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [1150076ms] <- socket$netlink=0x3 errno=14 cover=1421 #0 [1150077ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) [ 1198.972879] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [1150086ms] <- sendmsg$nl_generic=0x28 errno=14 cover=3481 13:06:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x28, 0x19, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x14, 0x23f, 0x0, 0x0, @ipv6=@empty}]}, 0x28}}, 0x0) 2021/11/11 13:06:23 result hanged=false: [1150132ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102623 #0 [1150152ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [1150153ms] <- socket$netlink=0x3 errno=14 cover=1435 [ 1199.048997] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [1150153ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [1150163ms] <- sendmsg$nl_generic=0x28 errno=14 cover=3402 2021/11/11 13:06:23 result hanged=false: 2021/11/11 13:06:23 added new input for call #1 sendmsg$nl_generic to corpus: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x28, 0x19, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x14, 0x23f, 0x0, 0x0, @ipv6=@empty}]}, 0x28}}, 0x0) 13:06:23 executing program 0: r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) [1150213ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102625 #0 [1150233ms] -> fsopen(0x20000040, 0x0) #0 [1150234ms] <- fsopen=0x3 errno=14 cover=876 #0 [1150235ms] -> fsconfig$FSCONFIG_CMD_CREATE(0x3, 0x6, 0x0, 0x0, 0x0) #0 [1150235ms] <- fsconfig$FSCONFIG_CMD_CREATE=0x0 errno=14 cover=6494 #0 [1150236ms] -> fsmount(0x3, 0x0, 0x0) #0 [1150236ms] <- fsmount=0x4 errno=14 cover=944 #0 [1150237ms] -> fsconfig$FSCONFIG_CMD_RECONFIGURE(0x3, 0x7, 0x0, 0x0, 0x0) #0 [1150237ms] <- fsconfig$FSCONFIG_CMD_RECONFIGURE=0x0 errno=14 cover=2529 enabling collider #0 [1150239ms] -> fsopen(0x20000040, 0x0) #0 [1150239ms] <- fsopen=0x3 errno=14 cover=951 #0 [1150240ms] -> fsconfig$FSCONFIG_CMD_CREATE(0x3, 0x6, 0x0, 0x0, 0x0) #0 [1150240ms] <- fsconfig$FSCONFIG_CMD_CREATE=0x0 errno=14 cover=199 pthread_create failed (errno 11) 13:06:23 executing program 0: r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2021/11/11 13:06:23 result hanged=false: 2021/11/11 13:06:23 #0: triaging type=7 2021/11/11 13:06:23 triaging input for call #3 fsconfig$FSCONFIG_CMD_RECONFIGURE (new signal=2) [1150317ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102727 #0 [1150339ms] -> fsopen(0x20000040, 0x0) #0 [1150339ms] <- fsopen=0x3 errno=14 cover=931 #0 [1150340ms] -> fsconfig$FSCONFIG_CMD_CREATE(0x3, 0x6, 0x0, 0x0, 0x0) #0 [1150340ms] <- fsconfig$FSCONFIG_CMD_CREATE=0x0 errno=14 cover=199 #0 [1150340ms] -> fsmount(0x3, 0x0, 0x0) #0 [1150340ms] <- fsmount=0x4 errno=14 cover=977 #0 [1150340ms] -> fsconfig$FSCONFIG_CMD_RECONFIGURE(0x3, 0x7, 0x0, 0x0, 0x0) #0 [1150341ms] <- fsconfig$FSCONFIG_CMD_RECONFIGURE=0x0 errno=14 cover=553 2021/11/11 13:06:23 result hanged=false: 13:06:23 executing program 0: r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) [1150387ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102729 #0 [1150407ms] -> fsopen(0x20000040, 0x0) #0 [1150407ms] <- fsopen=0x3 errno=14 cover=898 #0 [1150408ms] -> fsconfig$FSCONFIG_CMD_CREATE(0x3, 0x6, 0x0, 0x0, 0x0) #0 [1150408ms] <- fsconfig$FSCONFIG_CMD_CREATE=0x0 errno=14 cover=199 #0 [1150409ms] -> fsmount(0x3, 0x0, 0x0) #0 [1150409ms] <- fsmount=0x4 errno=14 cover=1031 #0 [1150409ms] -> fsconfig$FSCONFIG_CMD_RECONFIGURE(0x3, 0x7, 0x0, 0x0, 0x0) #0 [1150409ms] <- fsconfig$FSCONFIG_CMD_RECONFIGURE=0x0 errno=14 cover=553 13:06:23 executing program 0: r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2021/11/11 13:06:23 result hanged=false: [1150454ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102731 #0 [1150473ms] -> fsopen(0x20000040, 0x0) #0 [1150473ms] <- fsopen=0x3 errno=14 cover=945 #0 [1150475ms] -> fsconfig$FSCONFIG_CMD_CREATE(0x3, 0x6, 0x0, 0x0, 0x0) #0 [1150475ms] <- fsconfig$FSCONFIG_CMD_CREATE=0x0 errno=14 cover=199 #0 [1150476ms] -> fsmount(0x3, 0x0, 0x0) #0 [1150476ms] <- fsmount=0x4 errno=14 cover=1020 #0 [1150477ms] -> fsconfig$FSCONFIG_CMD_RECONFIGURE(0x3, 0x7, 0x0, 0x0, 0x0) #0 [1150477ms] <- fsconfig$FSCONFIG_CMD_RECONFIGURE=0x0 errno=14 cover=553 2021/11/11 13:06:24 result hanged=false: 2021/11/11 13:06:24 added new input for call #3 fsconfig$FSCONFIG_CMD_RECONFIGURE to corpus: r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 13:06:24 executing program 0: r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2021/11/11 13:06:24 #0: triaging type=7 2021/11/11 13:06:24 triaging input for call #1 fsconfig$FSCONFIG_CMD_CREATE (new signal=1) [1150528ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102733 #0 [1150551ms] -> fsopen(0x20000040, 0x0) #0 [1150551ms] <- fsopen=0x3 errno=14 cover=909 #0 [1150551ms] -> fsconfig$FSCONFIG_CMD_CREATE(0x3, 0x6, 0x0, 0x0, 0x0) #0 [1150551ms] <- fsconfig$FSCONFIG_CMD_CREATE=0x0 errno=14 cover=199 #0 [1150552ms] -> fsmount(0x3, 0x0, 0x0) #0 [1150552ms] <- fsmount=0x4 errno=14 cover=977 #0 [1150552ms] -> fsconfig$FSCONFIG_CMD_RECONFIGURE(0x3, 0x7, 0x0, 0x0, 0x0) #0 [1150553ms] <- fsconfig$FSCONFIG_CMD_RECONFIGURE=0x0 errno=14 cover=553 13:06:24 executing program 0: r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2021/11/11 13:06:24 result hanged=false: [1150602ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102735 #0 [1150641ms] -> fsopen(0x20000040, 0x0) #0 [1150641ms] <- fsopen=0x3 errno=14 cover=920 #0 [1150642ms] -> fsconfig$FSCONFIG_CMD_CREATE(0x3, 0x6, 0x0, 0x0, 0x0) #0 [1150642ms] <- fsconfig$FSCONFIG_CMD_CREATE=0x0 errno=14 cover=199 #0 [1150646ms] -> fsmount(0x3, 0x0, 0x0) #0 [1150647ms] <- fsmount=0x4 errno=14 cover=988 #0 [1150647ms] -> fsconfig$FSCONFIG_CMD_RECONFIGURE(0x3, 0x7, 0x0, 0x0, 0x0) #0 [1150647ms] <- fsconfig$FSCONFIG_CMD_RECONFIGURE=0x0 errno=14 cover=553 13:06:24 executing program 0: r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2021/11/11 13:06:24 result hanged=false: [1150697ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102737 #0 [1150717ms] -> fsopen(0x20000040, 0x0) #0 [1150717ms] <- fsopen=0x3 errno=14 cover=920 #0 [1150718ms] -> fsconfig$FSCONFIG_CMD_CREATE(0x3, 0x6, 0x0, 0x0, 0x0) #0 [1150721ms] <- fsconfig$FSCONFIG_CMD_CREATE=0x0 errno=14 cover=199 #0 [1150722ms] -> fsmount(0x3, 0x0, 0x0) #0 [1150722ms] <- fsmount=0x4 errno=14 cover=1031 #0 [1150723ms] -> fsconfig$FSCONFIG_CMD_RECONFIGURE(0x3, 0x7, 0x0, 0x0, 0x0) #0 [1150723ms] <- fsconfig$FSCONFIG_CMD_RECONFIGURE=0x0 errno=14 cover=553 2021/11/11 13:06:24 result hanged=false: 2021/11/11 13:06:24 added new input for call #1 fsconfig$FSCONFIG_CMD_CREATE to corpus: r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 13:06:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000140)={@link_local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) [1150773ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102739 #0 [1150791ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [1150792ms] <- socket$inet_udp=0x3 errno=14 cover=1684 #0 [1150792ms] -> bind$inet(0x3, 0x20000040, 0x10) #0 [1150793ms] <- bind$inet=0x0 errno=14 cover=337 #0 [1150793ms] -> syz_emit_ethernet(0x2e, 0x20000140, 0x0) 01 80 c2 00 00 00 31 f5 26 99 46 4f 08 00 45 00 00 20 00 00 00 00 00 11 ba ce 00 00 00 00 ff ff ff ff 00 00 4e 20 00 0c b0 b6 01 00 00 00 #0 [1150793ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=13539 #0 [1150795ms] -> ppoll(0x20000100, 0x1, 0x20000080, 0x0, 0x0) #0 [1150856ms] <- ppoll=0x0 errno=14 cover=475 enabling collider #0 [1150856ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [1150857ms] <- socket$inet_udp=0x3 errno=14 cover=1798 #0 [1150857ms] -> bind$inet(0x3, 0x20000040, 0x10) #0 [1150857ms] <- bind$inet=0x0 errno=14 cover=331 pthread_create failed (errno 11) 13:06:24 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x335e, &(0x7f0000000200)={0x0, 0xfade, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 2021/11/11 13:06:24 result hanged=false: [1150932ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102841 #0 [1150954ms] -> openat$vcsu(0xffffffffffffff9c, 0x20000180, 0x0, 0x0) #0 [1150955ms] <- openat$vcsu=0x3 errno=14 cover=1150 #0 [1150955ms] -> syz_io_uring_setup(0x335e, 0x20000200, 0x20ffd000, 0x20400000, 0x20000280, 0x200002c0) #0 [1150958ms] <- syz_io_uring_setup=0x4 errno=14 cover=14358 enabling collider #0 [1150959ms] -> openat$vcsu(0xffffffffffffff9c, 0x20000180, 0x0, 0x0) #0 [1150959ms] <- openat$vcsu=0x3 errno=14 cover=1138 13:06:24 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x335e, &(0x7f0000000200)={0x0, 0xfade, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 2021/11/11 13:06:24 result hanged=false: 2021/11/11 13:06:24 #0: triaging type=7 2021/11/11 13:06:24 triaging input for call #1 syz_io_uring_setup (new signal=1) [1151004ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102843 #0 [1151025ms] -> openat$vcsu(0xffffffffffffff9c, 0x20000180, 0x0, 0x0) #0 [1151026ms] <- openat$vcsu=0x3 errno=14 cover=1171 #0 [1151026ms] -> syz_io_uring_setup(0x335e, 0x20000200, 0x20ffd000, 0x20400000, 0x20000280, 0x200002c0) #0 [1151031ms] <- syz_io_uring_setup=0x4 errno=14 cover=14417 13:06:24 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x335e, &(0x7f0000000200)={0x0, 0xfade, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 2021/11/11 13:06:24 result hanged=false: [1151076ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102845 #0 [1151096ms] -> openat$vcsu(0xffffffffffffff9c, 0x20000180, 0x0, 0x0) #0 [1151096ms] <- openat$vcsu=0x3 errno=14 cover=1150 #0 [1151097ms] -> syz_io_uring_setup(0x335e, 0x20000200, 0x20ffd000, 0x20400000, 0x20000280, 0x200002c0) #0 [1151100ms] <- syz_io_uring_setup=0x4 errno=14 cover=14373 13:06:24 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x335e, &(0x7f0000000200)={0x0, 0xfade, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 2021/11/11 13:06:24 result hanged=false: [1151146ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102847 #0 [1151169ms] -> openat$vcsu(0xffffffffffffff9c, 0x20000180, 0x0, 0x0) #0 [1151169ms] <- openat$vcsu=0x3 errno=14 cover=1150 #0 [1151170ms] -> syz_io_uring_setup(0x335e, 0x20000200, 0x20ffd000, 0x20400000, 0x20000280, 0x200002c0) #0 [1151179ms] <- syz_io_uring_setup=0x4 errno=14 cover=14350 2021/11/11 13:06:24 result hanged=false: 2021/11/11 13:06:24 added new input for call #1 syz_io_uring_setup to corpus: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x335e, &(0x7f0000000200)={0x0, 0xfade, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 13:06:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002780)={0x18, 0x68, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x4}]}, 0x18}}, 0x0) [1151232ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102849 #0 [1151250ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [1151251ms] <- socket$netlink=0x3 errno=14 cover=1443 #0 [1151252ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [1151255ms] <- sendmsg$nl_generic=0x18 errno=14 cover=1705 enabling collider #0 [1151260ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [1151261ms] <- socket$netlink=0x3 errno=14 cover=1474 #0 [1151264ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [1151264ms] <- sendmsg$nl_generic=0xffffffffffffffff errno=9 cover=53 2021/11/11 13:06:24 result hanged=false: 2021/11/11 13:06:24 #0: triaging type=7 13:06:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002780)={0x18, 0x68, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x4}]}, 0x18}}, 0x0) 2021/11/11 13:06:24 triaging input for call #1 sendmsg$nl_generic (new signal=15) [1151307ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102851 #0 [1151329ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [1151330ms] <- socket$netlink=0x3 errno=14 cover=1421 #0 [1151334ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [1151335ms] <- sendmsg$nl_generic=0x18 errno=14 cover=1692 2021/11/11 13:06:24 result hanged=false: 13:06:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002780)={0x18, 0x68, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x4}]}, 0x18}}, 0x0) [1151380ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102853 #0 [1151401ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [1151402ms] <- socket$netlink=0x3 errno=14 cover=1432 #0 [1151403ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [1151403ms] <- sendmsg$nl_generic=0x18 errno=14 cover=1704 2021/11/11 13:06:24 result hanged=false: 13:06:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002780)={0x18, 0x68, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x4}]}, 0x18}}, 0x0) [1151449ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102855 #0 [1151470ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [1151470ms] <- socket$netlink=0x3 errno=14 cover=1432 #0 [1151472ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [1151473ms] <- sendmsg$nl_generic=0x18 errno=14 cover=1703 2021/11/11 13:06:25 result hanged=false: 2021/11/11 13:06:25 added new input for call #1 sendmsg$nl_generic to corpus: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002780)={0x18, 0x68, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x4}]}, 0x18}}, 0x0) 13:06:25 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = io_uring_setup(0x4, &(0x7f0000000040)) dup3(r1, r0, 0x0) [1151518ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102857 #0 [1151536ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [1151536ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [1151537ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [1151537ms] <- openat$tun=0x3 errno=14 cover=1404 #0 [1151538ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [1151542ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=44262 #0 [1151546ms] -> ioctl$TUNSETLINK(0x3, 0x400454cd, 0x20) #0 [1151546ms] <- ioctl$TUNSETLINK=0x0 errno=14 cover=132 #0 [1151547ms] -> io_uring_setup(0x4, 0x20000040) #0 [1151555ms] <- io_uring_setup=0x4 errno=14 cover=3911 #0 [1151555ms] -> dup3(0x4, 0x3, 0x0) #0 [1151566ms] <- dup3=0x3 errno=14 cover=45617 enabling collider #0 [1151567ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [1151567ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [1151567ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [1151568ms] <- openat$tun=0x3 errno=14 cover=1486 pthread_create failed (errno 11) 13:06:25 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = io_uring_setup(0x4, &(0x7f0000000040)) dup3(r1, r0, 0x0) 2021/11/11 13:06:25 result hanged=false: 2021/11/11 13:06:25 #0: triaging type=7 2021/11/11 13:06:25 triaging input for call #5 dup3 (new signal=6) [1151645ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102959 #0 [1151666ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [1151666ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [1151666ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [1151666ms] <- openat$tun=0x3 errno=14 cover=1405 #0 [1151667ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [1151673ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=44116 #0 [1151677ms] -> ioctl$TUNSETLINK(0x3, 0x400454cd, 0x20) #0 [1151677ms] <- ioctl$TUNSETLINK=0x0 errno=14 cover=132 #0 [1151677ms] -> io_uring_setup(0x4, 0x20000040) #0 [1151679ms] <- io_uring_setup=0x4 errno=14 cover=3797 #0 [1151680ms] -> dup3(0x4, 0x3, 0x0) #0 [1151690ms] <- dup3=0x3 errno=14 cover=44581 13:06:25 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = io_uring_setup(0x4, &(0x7f0000000040)) dup3(r1, r0, 0x0) 2021/11/11 13:06:25 result hanged=false: [1151741ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102961 #0 [1151762ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [1151762ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [1151764ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [1151764ms] <- openat$tun=0x3 errno=14 cover=1471 #0 [1151767ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [1151772ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=44262 #0 [1151776ms] -> ioctl$TUNSETLINK(0x3, 0x400454cd, 0x20) #0 [1151776ms] <- ioctl$TUNSETLINK=0x0 errno=14 cover=132 #0 [1151776ms] -> io_uring_setup(0x4, 0x20000040) #0 [1151778ms] <- io_uring_setup=0x4 errno=14 cover=3992 #0 [1151778ms] -> dup3(0x4, 0x3, 0x0) #0 [1151792ms] <- dup3=0x3 errno=14 cover=44306 13:06:25 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = io_uring_setup(0x4, &(0x7f0000000040)) dup3(r1, r0, 0x0) 2021/11/11 13:06:25 result hanged=false: [1151840ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102963 #0 [1151865ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [1151865ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [1151866ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [1151866ms] <- openat$tun=0x3 errno=14 cover=1383 #0 [1151866ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [1151871ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=44317 #0 [1151874ms] -> ioctl$TUNSETLINK(0x3, 0x400454cd, 0x20) #0 [1151874ms] <- ioctl$TUNSETLINK=0x0 errno=14 cover=132 #0 [1151874ms] -> io_uring_setup(0x4, 0x20000040) #0 [1151878ms] <- io_uring_setup=0x4 errno=14 cover=3802 #0 [1151878ms] -> dup3(0x4, 0x3, 0x0) #0 [1151887ms] <- dup3=0x3 errno=14 cover=43819 2021/11/11 13:06:25 result hanged=false: 2021/11/11 13:06:25 added new input for call #5 dup3 to corpus: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = io_uring_setup(0x4, &(0x7f0000000040)) dup3(r1, r0, 0x0) 13:06:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) [1151944ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 102965 #0 [1151963ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1151964ms] <- perf_event_open=0x3 errno=14 cover=6583 #0 [1151966ms] -> syz_open_procfs(0x0, 0x200005c0) #0 [1151967ms] <- syz_open_procfs=0x4 errno=14 cover=11696 #0 [1151968ms] -> pread64(0x4, 0x20000040, 0x37, 0x0) #0 [1151968ms] <- pread64=0x1c errno=14 cover=1546 enabling collider #0 [1151977ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1151977ms] <- perf_event_open=0x3 errno=14 cover=6533 #0 [1151983ms] -> syz_open_procfs(0x0, 0x200005c0) #0 [1151984ms] <- syz_open_procfs=0x4 errno=14 cover=6654 pthread_create failed (errno 11) 2021/11/11 13:06:25 result hanged=false: 13:06:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) 2021/11/11 13:06:25 #0: triaging type=7 2021/11/11 13:06:25 triaging input for call #2 pread64 (new signal=2) [1152084ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103067 #0 [1152103ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1152104ms] <- perf_event_open=0x3 errno=14 cover=6484 #0 [1152105ms] -> syz_open_procfs(0x0, 0x200005c0) #0 [1152105ms] <- syz_open_procfs=0x4 errno=14 cover=10535 #0 [1152106ms] -> pread64(0x4, 0x20000040, 0x37, 0x0) #0 [1152107ms] <- pread64=0x1c errno=14 cover=1558 13:06:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) 2021/11/11 13:06:25 result hanged=false: [1152160ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103069 #0 [1152179ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1152180ms] <- perf_event_open=0x3 errno=14 cover=6521 #0 [1152181ms] -> syz_open_procfs(0x0, 0x200005c0) #0 [1152182ms] <- syz_open_procfs=0x4 errno=14 cover=10535 #0 [1152184ms] -> pread64(0x4, 0x20000040, 0x37, 0x0) #0 [1152185ms] <- pread64=0x1c errno=14 cover=1688 13:06:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) 2021/11/11 13:06:25 result hanged=false: [1152239ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103071 #0 [1152259ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1152260ms] <- perf_event_open=0x3 errno=14 cover=6607 #0 [1152263ms] -> syz_open_procfs(0x0, 0x200005c0) #0 [1152265ms] <- syz_open_procfs=0x4 errno=14 cover=11752 #0 [1152266ms] -> pread64(0x4, 0x20000040, 0x37, 0x0) #0 [1152268ms] <- pread64=0x1c errno=14 cover=1818 2021/11/11 13:06:25 result hanged=false: 2021/11/11 13:06:25 added new input for call #2 pread64 to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) 13:06:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) 2021/11/11 13:06:25 #0: triaging type=7 2021/11/11 13:06:25 triaging input for call #1 syz_open_procfs (new signal=4) [1152324ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103073 #0 [1152350ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1152351ms] <- perf_event_open=0x3 errno=14 cover=7137 #0 [1152352ms] -> syz_open_procfs(0x0, 0x200005c0) #0 [1152353ms] <- syz_open_procfs=0x4 errno=14 cover=11226 #0 [1152354ms] -> pread64(0x4, 0x20000040, 0x37, 0x0) #0 [1152355ms] <- pread64=0x1c errno=14 cover=2452 2021/11/11 13:06:25 result hanged=false: 13:06:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) [1152408ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103075 #0 [1152428ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1152429ms] <- perf_event_open=0x3 errno=14 cover=6528 #0 [1152430ms] -> syz_open_procfs(0x0, 0x200005c0) #0 [1152431ms] <- syz_open_procfs=0x4 errno=14 cover=10516 #0 [1152432ms] -> pread64(0x4, 0x20000040, 0x37, 0x0) #0 [1152432ms] <- pread64=0x1c errno=14 cover=2010 2021/11/11 13:06:25 result hanged=false: 13:06:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) [1152488ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103077 #0 [1152508ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1152510ms] <- perf_event_open=0x3 errno=14 cover=6749 #0 [1152512ms] -> syz_open_procfs(0x0, 0x200005c0) #0 [1152513ms] <- syz_open_procfs=0x4 errno=14 cover=11672 #0 [1152516ms] -> pread64(0x4, 0x20000040, 0x37, 0x0) #0 [1152517ms] <- pread64=0x1c errno=14 cover=1676 2021/11/11 13:06:26 result hanged=false: 2021/11/11 13:06:26 added new input for call #1 syz_open_procfs to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) 13:06:26 executing program 0: openat$zero(0xffffffffffffff9c, 0x0, 0x408000, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) syz_io_uring_setup(0x23a5, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x2eb}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [1152576ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 13:06:26 poll: candidates=8 inputs=0 signal=0 spawned worker pid 103079 #0 [1152595ms] -> openat$zero(0xffffffffffffff9c, 0x0, 0x408000, 0x0) #0 [1152595ms] <- openat$zero=0xffffffffffffffff errno=22 cover=48 #0 [1152596ms] -> openat$hpet(0xffffffffffffff9c, 0x200007c0, 0x0, 0x0) #0 [1152596ms] <- openat$hpet=0x3 errno=14 cover=1156 #0 [1152596ms] -> syz_io_uring_setup(0x23a5, 0x20000a00, 0x20ffa000, 0x20ffd000, 0x20000a80, 0x20000ac0) #0 [1152602ms] <- syz_io_uring_setup=0x4 errno=14 cover=14544 enabling collider #0 [1152603ms] -> openat$zero(0xffffffffffffff9c, 0x0, 0x408000, 0x0) #0 [1152603ms] <- openat$zero=0xffffffffffffffff errno=22 cover=48 #0 [1152603ms] -> openat$hpet(0xffffffffffffff9c, 0x200007c0, 0x0, 0x0) #0 [1152604ms] <- openat$hpet=0x3 errno=14 cover=1203 pthread_create failed (errno 11) 2021/11/11 13:06:26 result hanged=false: 13:06:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0xffffffffffffffff, 0x106, 0x0, @buffer={0x300, 0x99, &(0x7f00000000c0)=""/153}, &(0x7f00000003c0)="8f7b2bdc77686f23157fabec65c734595c17dea298c0b55765d83becbf20926a3eef47303a4fb62fa07a92a1ca1db494000ddeb19d40b4afec29adc55389a9af8811f29d51622a3aa3fbb3d340d5cf1c411b506cf854966094a62b0fb577bfee3352e0360ec27d5badd7ee75f3f3c2254c605d824c8dd9cf6dae1456ead1f86a2e9926a1654a1c0ef2d0c15b7cbbb0dbd74f1f72ff05fcefa0b19759b91de9157b167fe381467f5d2183662100316b28373f17502e6af0af766ebf9829cebaab752620a926a70de890a039fa2f6d66230c2475b71d9161eff42eb600adda25b6128418719a95b441c7e3c761ed503ddc0b6d12611bc9e35b04bd29cdccb26186c81ee3bf7690", 0x0, 0x0, 0x0, 0x0, 0x0}) [1152689ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103181 #0 [1152709ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [1152709ms] <- syz_open_dev$sg=0x3 errno=14 cover=1402 #0 [1152711ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [1152711ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [1152713ms] -> ioctl$SG_IO(0x4, 0x2285, 0x20000340) #0 [1152713ms] <- ioctl$SG_IO=0x0 errno=14 cover=862 enabling collider #0 [1152714ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [1152715ms] <- syz_open_dev$sg=0x3 errno=14 cover=1480 #0 [1152716ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [1152716ms] <- fcntl$dupfd=0x4 errno=14 cover=110 pthread_create failed (errno 11) 13:06:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0xffffffffffffffff, 0x106, 0x0, @buffer={0x300, 0x99, &(0x7f00000000c0)=""/153}, &(0x7f00000003c0)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) 2021/11/11 13:06:26 result hanged=false: 2021/11/11 13:06:26 #0: triaging type=7 2021/11/11 13:06:26 triaging input for call #2 ioctl$SG_IO (new signal=10) [1152795ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103283 #0 [1152816ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [1152816ms] <- syz_open_dev$sg=0x3 errno=14 cover=1379 #0 [1152817ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [1152817ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [1152817ms] -> ioctl$SG_IO(0x4, 0x2285, 0x20000340) #0 [1152817ms] <- ioctl$SG_IO=0x0 errno=14 cover=834 13:06:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0xffffffffffffffff, 0x106, 0x0, @buffer={0x300, 0x99, &(0x7f00000000c0)=""/153}, &(0x7f00000003c0)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) 2021/11/11 13:06:26 result hanged=false: [1152862ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103285 #0 [1152882ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [1152882ms] <- syz_open_dev$sg=0x3 errno=14 cover=1456 #0 [1152884ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [1152884ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [1152885ms] -> ioctl$SG_IO(0x4, 0x2285, 0x20000340) #0 [1152886ms] <- ioctl$SG_IO=0x0 errno=14 cover=862 2021/11/11 13:06:26 result hanged=false: 13:06:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0xffffffffffffffff, 0x106, 0x0, @buffer={0x300, 0x99, &(0x7f00000000c0)=""/153}, &(0x7f00000003c0)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) [1152934ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103287 #0 [1152955ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [1152955ms] <- syz_open_dev$sg=0x3 errno=14 cover=1380 #0 [1152956ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [1152956ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [1152956ms] -> ioctl$SG_IO(0x4, 0x2285, 0x20000340) #0 [1152956ms] <- ioctl$SG_IO=0x0 errno=14 cover=836 2021/11/11 13:06:26 result hanged=false: 2021/11/11 13:06:26 added new input for call #2 ioctl$SG_IO to corpus: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0xffffffffffffffff, 0x106, 0x0, @buffer={0x300, 0x99, &(0x7f00000000c0)=""/153}, &(0x7f00000003c0)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) 13:06:26 executing program 0: ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001800), 0x20000, 0x0) [1153009ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103289 #0 [1153032ms] -> ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x200001c0) #0 [1153032ms] <- ioctl$FIDEDUPERANGE=0xffffffffffffffff errno=9 cover=45 #0 [1153034ms] -> openat$ptmx(0xffffffffffffff9c, 0x20001800, 0x20000, 0x0) #0 [1153035ms] <- openat$ptmx=0x3 errno=14 cover=8262 enabling collider #0 [1153037ms] -> ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x200001c0) #0 [1153037ms] <- ioctl$FIDEDUPERANGE=0xffffffffffffffff errno=9 cover=45 2021/11/11 13:06:26 result hanged=false: 13:06:26 executing program 0: r0 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000140)=""/204, 0xcc}, 0x0) io_uring_enter(r0, 0x5c33, 0x0, 0x0, 0x0, 0x0) [1153079ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103291 #0 [1153100ms] -> syz_io_uring_setup(0x5, 0x20000080, 0x20ffd000, 0x200b0000, 0x20000100, 0x20000540) #0 [1153102ms] <- syz_io_uring_setup=0x3 errno=14 cover=7457 #0 [1153110ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) #0 [1153111ms] <- syz_init_net_socket$bt_l2cap=0x5 errno=14 cover=6359 #0 [1153112ms] -> syz_io_uring_submit(0x20ffd000, 0x200b0000, 0x20000240, 0x0) #0 [1153113ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1153117ms] -> io_uring_enter(0x3, 0x5c33, 0x0, 0x0, 0x0, 0x0) #0 [1153118ms] <- io_uring_enter=0x1 errno=14 cover=6411 enabling collider #0 [1153119ms] -> syz_io_uring_setup(0x5, 0x20000080, 0x20ffd000, 0x200b0000, 0x20000100, 0x20000540) #0 [1153121ms] <- syz_io_uring_setup=0x3 errno=14 cover=5429 #0 [1153121ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) #0 [1153123ms] <- syz_init_net_socket$bt_l2cap=0x5 errno=14 cover=11336 pthread_create failed (errno 11) 2021/11/11 13:06:26 result hanged=false: 13:06:26 executing program 0: r0 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000140)=""/204, 0xcc}, 0x0) io_uring_enter(r0, 0x5c33, 0x0, 0x0, 0x0, 0x0) 2021/11/11 13:06:26 #0: triaging type=7 2021/11/11 13:06:26 triaging input for call #3 io_uring_enter (new signal=6) [1153200ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103393 #0 [1153222ms] -> syz_io_uring_setup(0x5, 0x20000080, 0x20ffd000, 0x200b0000, 0x20000100, 0x20000540) #0 [1153225ms] <- syz_io_uring_setup=0x3 errno=14 cover=13644 #0 [1153226ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) #0 [1153228ms] <- syz_init_net_socket$bt_l2cap=0x5 errno=14 cover=6374 #0 [1153229ms] -> syz_io_uring_submit(0x20ffd000, 0x200b0000, 0x20000240, 0x0) #0 [1153229ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1153229ms] -> io_uring_enter(0x3, 0x5c33, 0x0, 0x0, 0x0, 0x0) #0 [1153229ms] <- io_uring_enter=0x1 errno=14 cover=829 13:06:26 executing program 0: r0 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000140)=""/204, 0xcc}, 0x0) io_uring_enter(r0, 0x5c33, 0x0, 0x0, 0x0, 0x0) 2021/11/11 13:06:26 result hanged=false: [1153275ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103395 #0 [1153295ms] -> syz_io_uring_setup(0x5, 0x20000080, 0x20ffd000, 0x200b0000, 0x20000100, 0x20000540) #0 [1153301ms] <- syz_io_uring_setup=0x3 errno=14 cover=7673 #0 [1153303ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) #0 [1153304ms] <- syz_init_net_socket$bt_l2cap=0x5 errno=14 cover=6273 #0 [1153306ms] -> syz_io_uring_submit(0x20ffd000, 0x200b0000, 0x20000240, 0x0) #0 [1153306ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1153307ms] -> io_uring_enter(0x3, 0x5c33, 0x0, 0x0, 0x0, 0x0) #0 [1153307ms] <- io_uring_enter=0x1 errno=14 cover=804 13:06:26 executing program 0: r0 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000140)=""/204, 0xcc}, 0x0) io_uring_enter(r0, 0x5c33, 0x0, 0x0, 0x0, 0x0) 2021/11/11 13:06:26 result hanged=false: [1153352ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103397 #0 [1153373ms] -> syz_io_uring_setup(0x5, 0x20000080, 0x20ffd000, 0x200b0000, 0x20000100, 0x20000540) #0 [1153380ms] <- syz_io_uring_setup=0x3 errno=14 cover=7814 #0 [1153381ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) #0 [1153381ms] <- syz_init_net_socket$bt_l2cap=0x5 errno=14 cover=6305 #0 [1153382ms] -> syz_io_uring_submit(0x20ffd000, 0x200b0000, 0x20000240, 0x0) #0 [1153382ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1153383ms] -> io_uring_enter(0x3, 0x5c33, 0x0, 0x0, 0x0, 0x0) #0 [1153383ms] <- io_uring_enter=0x1 errno=14 cover=815 2021/11/11 13:06:26 result hanged=false: 2021/11/11 13:06:26 added new input for call #3 io_uring_enter to corpus: r0 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000140)=""/204, 0xcc}, 0x0) io_uring_enter(r0, 0x5c33, 0x0, 0x0, 0x0, 0x0) 13:06:26 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) [1153433ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103399 #0 [1153460ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) #0 [1153461ms] <- syz_init_net_socket$bt_l2cap=0xffffffffffffffff errno=94 cover=5593 enabling collider #0 [1153461ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) #0 [1153462ms] <- syz_init_net_socket$bt_l2cap=0xffffffffffffffff errno=94 cover=4738 13:06:27 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 'w\x00Jn;m\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) pread64(r0, &(0x7f00000000c0)=""/154, 0x9a, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) dup3(r1, r0, 0x0) 2021/11/11 13:06:27 result hanged=false: [1153506ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103401 #0 [1153531ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [1153531ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [1153532ms] -> ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) #0 [1153532ms] <- ioctl$KDADDIO=0xffffffffffffffff errno=9 cover=45 #0 [1153532ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [1153533ms] <- openat$tun=0x3 errno=14 cover=1463 #0 [1153534ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [1153539ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=47907 #0 [1153540ms] -> io_uring_setup(0x0, 0x200001c0) #0 [1153541ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=53 #0 [1153542ms] -> pread64(0x3, 0x200000c0, 0x9a, 0x0) pthread_create failed (errno 11) 2021/11/11 13:06:28 result hanged=false: 2021/11/11 13:06:28 #0: triaging type=7 2021/11/11 13:06:28 triaging input for call #3 ioctl$TUNSETQUEUE (new signal=2) 13:06:28 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 'w\x00Jn;m\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) pread64(r0, &(0x7f00000000c0)=""/154, 0x9a, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) dup3(r1, r0, 0x0) [1154627ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103503 #0 [1154653ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [1154653ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [1154653ms] -> ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) #0 [1154654ms] <- ioctl$KDADDIO=0xffffffffffffffff errno=9 cover=45 #0 [1154654ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [1154654ms] <- openat$tun=0x3 errno=14 cover=1384 #0 [1154654ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [1154659ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=48120 #0 [1154663ms] -> io_uring_setup(0x0, 0x200001c0) #0 [1154663ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=53 #0 [1154663ms] -> pread64(0x3, 0x200000c0, 0x9a, 0x0) 2021/11/11 13:06:28 poll: candidates=0 inputs=0 signal=0 pthread_create failed (errno 11) 2021/11/11 13:06:29 result hanged=false: 13:06:29 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 'w\x00Jn;m\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) pread64(r0, &(0x7f00000000c0)=""/154, 0x9a, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) dup3(r1, r0, 0x0) [1155744ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103605 #0 [1155760ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [1155760ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [1155760ms] -> ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) #0 [1155760ms] <- ioctl$KDADDIO=0xffffffffffffffff errno=9 cover=45 #0 [1155760ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [1155761ms] <- openat$tun=0x3 errno=14 cover=1394 #0 [1155761ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [1155765ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=48051 #0 [1155768ms] -> io_uring_setup(0x0, 0x200001c0) #0 [1155768ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=53 #0 [1155768ms] -> pread64(0x3, 0x200000c0, 0x9a, 0x0) pthread_create failed (errno 11) 2021/11/11 13:06:30 result hanged=false: 13:06:30 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 'w\x00Jn;m\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) pread64(r0, &(0x7f00000000c0)=""/154, 0x9a, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) dup3(r1, r0, 0x0) [1156842ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103707 #0 [1156858ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [1156858ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [1156858ms] -> ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) #0 [1156858ms] <- ioctl$KDADDIO=0xffffffffffffffff errno=9 cover=45 #0 [1156859ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [1156859ms] <- openat$tun=0x3 errno=14 cover=1405 #0 [1156859ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [1156862ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=47933 #0 [1156865ms] -> io_uring_setup(0x0, 0x200001c0) #0 [1156865ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=53 #0 [1156865ms] -> pread64(0x3, 0x200000c0, 0x9a, 0x0) pthread_create failed (errno 11) 2021/11/11 13:06:31 result hanged=false: 2021/11/11 13:06:31 added new input for call #3 ioctl$TUNSETQUEUE to corpus: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 'w\x00Jn;m\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) pread64(r0, &(0x7f00000000c0)=""/154, 0x9a, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) dup3(r1, r0, 0x0) 13:06:31 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00') [1157969ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103809 #0 [1157990ms] -> mknod$loop(0x20000400, 0x0, 0x700) #0 [1157995ms] <- mknod$loop=0x0 errno=14 cover=7379 #0 [1157997ms] -> lremovexattr(0x20000040, 0x20000080) #0 [1157997ms] <- lremovexattr=0xffffffffffffffff errno=13 cover=758 enabling collider #0 [1157998ms] -> mknod$loop(0x20000400, 0x0, 0x700) #0 [1157998ms] <- mknod$loop=0xffffffffffffffff errno=17 cover=639 #0 [1158000ms] -> lremovexattr(0x20000040, 2021/11/11 13:06:31 result hanged=false: 2021/11/11 13:06:31 #0: triaging type=7 2021/11/11 13:06:31 triaging input for call #1 lremovexattr (new signal=6) 13:06:31 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00') [1158045ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103811 #0 [1158065ms] -> mknod$loop(0x20000400, 0x0, 0x700) #0 [1158072ms] <- mknod$loop=0x0 errno=14 cover=7021 #0 [1158073ms] -> lremovexattr(0x20000040, 0x20000080) #0 [1158073ms] <- lremovexattr=0xffffffffffffffff errno=13 cover=631 13:06:31 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00') 2021/11/11 13:06:31 result hanged=false: [1158121ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103813 #0 [1158140ms] -> mknod$loop(0x20000400, 0x0, 0x700) #0 [1158145ms] <- mknod$loop=0x0 errno=14 cover=6910 #0 [1158146ms] -> lremovexattr(0x20000040, 0x20000080) #0 [1158146ms] <- lremovexattr=0xffffffffffffffff errno=13 cover=643 13:06:31 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00') 2021/11/11 13:06:31 result hanged=false: [1158197ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103815 #0 [1158216ms] -> mknod$loop(0x20000400, 0x0, 0x700) #0 [1158223ms] <- mknod$loop=0x0 errno=14 cover=6924 #0 [1158224ms] -> lremovexattr(0x20000040, 0x20000080) #0 [1158224ms] <- lremovexattr=0xffffffffffffffff errno=13 cover=631 2021/11/11 13:06:31 result hanged=false: 2021/11/11 13:06:31 added new input for call #1 lremovexattr to corpus: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00') 2021/11/11 13:06:31 #0: triaging type=7 13:06:31 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00') 2021/11/11 13:06:31 triaging input for call #0 mknod$loop (new signal=1) [1158273ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103817 #0 [1158291ms] -> mknod$loop(0x20000400, 0x0, 0x700) #0 [1158299ms] <- mknod$loop=0x0 errno=14 cover=6982 #0 [1158300ms] -> lremovexattr(0x20000040, 0x20000080) #0 [1158301ms] <- lremovexattr=0xffffffffffffffff errno=13 cover=643 2021/11/11 13:06:31 result hanged=false: 13:06:31 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00') [1158350ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103819 #0 [1158372ms] -> mknod$loop(0x20000400, 0x0, 0x700) #0 [1158376ms] <- mknod$loop=0x0 errno=14 cover=6887 #0 [1158378ms] -> lremovexattr(0x20000040, 0x20000080) #0 [1158379ms] <- lremovexattr=0xffffffffffffffff errno=13 cover=657 13:06:31 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00') 2021/11/11 13:06:31 result hanged=false: [1158427ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103821 #0 [1158450ms] -> mknod$loop(0x20000400, 0x0, 0x700) #0 [1158454ms] <- mknod$loop=0x0 errno=14 cover=6745 #0 [1158456ms] -> lremovexattr(0x20000040, 0x20000080) #0 [1158456ms] <- lremovexattr=0xffffffffffffffff errno=13 cover=632 2021/11/11 13:06:32 result hanged=false: 2021/11/11 13:06:32 added new input for call #0 mknod$loop to corpus: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00') 13:06:32 executing program 0: syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) open$dir(&(0x7f0000000580)='./file0\x00', 0x4541, 0x0) [1158509ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103823 #0 [1158530ms] -> syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [1158531ms] <- syz_genetlink_get_family_id$SEG6=0xffffffffffffffff errno=14 cover=4425 #0 [1158531ms] -> open$dir(0x20000580, 0x4541, 0x0) #0 [1158534ms] <- open$dir=0x4 errno=14 cover=7320 enabling collider #0 [1158535ms] -> syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [1158535ms] <- syz_genetlink_get_family_id$SEG6=0xffffffffffffffff errno=14 cover=2450 13:06:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() 2021/11/11 13:06:32 result hanged=false: 2021/11/11 13:06:32 poll: candidates=8 inputs=0 signal=0 [1158582ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103825 #0 [1158603ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1158604ms] <- perf_event_open=0x3 errno=14 cover=6841 #0 [1158605ms] -> inotify_init() #0 [1158605ms] <- inotify_init=0x4 errno=14 cover=622 enabling collider #0 [1158614ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1158614ms] <- perf_event_open=0x3 errno=14 cover=6683 #0 [1158614ms] -> inotify_init() #0 [1158615ms] <- inotify_init=0x3 errno=14 cover=592 13:06:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() 2021/11/11 13:06:32 result hanged=false: 2021/11/11 13:06:32 #0: triaging type=7 2021/11/11 13:06:32 triaging input for call #1 inotify_init (new signal=1) [1158670ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103827 #0 [1158691ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1158693ms] <- perf_event_open=0x3 errno=14 cover=6834 #0 [1158694ms] -> inotify_init() #0 [1158694ms] <- inotify_init=0x4 errno=14 cover=622 13:06:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() 2021/11/11 13:06:32 result hanged=false: [1158750ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103829 #0 [1158770ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1158771ms] <- perf_event_open=0x3 errno=14 cover=7217 #0 [1158772ms] -> inotify_init() #0 [1158773ms] <- inotify_init=0x4 errno=14 cover=709 13:06:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() 2021/11/11 13:06:32 result hanged=false: [1158826ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103831 #0 [1158852ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1158853ms] <- perf_event_open=0x3 errno=14 cover=6768 #0 [1158854ms] -> inotify_init() #0 [1158854ms] <- inotify_init=0x4 errno=14 cover=639 2021/11/11 13:06:32 result hanged=false: 2021/11/11 13:06:32 added new input for call #1 inotify_init to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() 13:06:32 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) [1158908ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103833 #0 [1158929ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1158929ms] <- openat$loop_ctrl=0x3 errno=14 cover=1103 #0 [1158931ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000300, 0x0, 0x0) #0 [1158932ms] <- openat$loop_ctrl=0x4 errno=14 cover=1145 #0 [1158933ms] -> ioctl$LOOP_CTL_REMOVE(0x3, 0x4c81, 0x0) #0 [1158961ms] <- ioctl$LOOP_CTL_REMOVE=0x0 errno=14 cover=174988 #0 [1158963ms] -> ioctl$LOOP_CTL_ADD(0x4, 0x4c80, 0x0) #0 [1158980ms] <- ioctl$LOOP_CTL_ADD=0x0 errno=14 cover=84297 enabling collider #0 [1158981ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1158981ms] <- openat$loop_ctrl=0x3 errno=14 cover=1090 #0 [1158982ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000300, 0x0, 0x0) #0 [1158982ms] <- openat$loop_ctrl=0x4 errno=14 cover=1068 pthread_create failed (errno 11) 2021/11/11 13:06:32 result hanged=false: 2021/11/11 13:06:32 #0: triaging type=7 2021/11/11 13:06:32 triaging input for call #3 ioctl$LOOP_CTL_ADD (new signal=4) 13:06:32 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) [1159064ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103935 #0 [1159085ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1159085ms] <- openat$loop_ctrl=0x3 errno=14 cover=1114 #0 [1159086ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000300, 0x0, 0x0) #0 [1159086ms] <- openat$loop_ctrl=0x4 errno=14 cover=1200 #0 [1159086ms] -> ioctl$LOOP_CTL_REMOVE(0x3, 0x4c81, 0x0) #0 [1159104ms] <- ioctl$LOOP_CTL_REMOVE=0x0 errno=14 cover=58017 #0 [1159109ms] -> ioctl$LOOP_CTL_ADD(0x4, 0x4c80, 0x0) #0 [1159132ms] <- ioctl$LOOP_CTL_ADD=0x0 errno=14 cover=91935 13:06:32 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2021/11/11 13:06:32 result hanged=false: [1159185ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103937 #0 [1159205ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1159208ms] <- openat$loop_ctrl=0x3 errno=14 cover=1070 #0 [1159209ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000300, 0x0, 0x0) #0 [1159210ms] <- openat$loop_ctrl=0x4 errno=14 cover=1190 #0 [1159210ms] -> ioctl$LOOP_CTL_REMOVE(0x3, 0x4c81, 0x0) #0 [1159210ms] <- ioctl$LOOP_CTL_REMOVE=0xffffffffffffffff errno=16 cover=121 #0 [1159210ms] -> ioctl$LOOP_CTL_ADD(0x4, 0x4c80, 0x0) #0 [1159210ms] <- ioctl$LOOP_CTL_ADD=0xffffffffffffffff errno=17 cover=119 13:06:32 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2021/11/11 13:06:32 result hanged=false: [1159255ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103939 #0 [1159276ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1159276ms] <- openat$loop_ctrl=0x3 errno=14 cover=1102 #0 [1159278ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000300, 0x0, 0x0) #0 [1159278ms] <- openat$loop_ctrl=0x4 errno=14 cover=1145 #0 [1159279ms] -> ioctl$LOOP_CTL_REMOVE(0x3, 0x4c81, 0x0) #0 [1159299ms] <- ioctl$LOOP_CTL_REMOVE=0x0 errno=14 cover=59747 #0 [1159304ms] -> ioctl$LOOP_CTL_ADD(0x4, 0x4c80, 0x0) #0 [1159328ms] <- ioctl$LOOP_CTL_ADD=0x0 errno=14 cover=84186 2021/11/11 13:06:32 result hanged=false: 2021/11/11 13:06:32 added new input for call #3 ioctl$LOOP_CTL_ADD to corpus: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2021/11/11 13:06:32 #0: triaging type=7 13:06:32 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2021/11/11 13:06:32 triaging input for call #2 ioctl$LOOP_CTL_REMOVE (new signal=8) [1159382ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103941 #0 [1159402ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1159402ms] <- openat$loop_ctrl=0x3 errno=14 cover=1114 #0 [1159406ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000300, 0x0, 0x0) #0 [1159407ms] <- openat$loop_ctrl=0x4 errno=14 cover=5457 #0 [1159409ms] -> ioctl$LOOP_CTL_REMOVE(0x3, 0x4c81, 0x0) #0 [1159419ms] <- ioctl$LOOP_CTL_REMOVE=0x0 errno=14 cover=46177 #0 [1159424ms] -> ioctl$LOOP_CTL_ADD(0x4, 0x4c80, 0x0) #0 [1159451ms] <- ioctl$LOOP_CTL_ADD=0x0 errno=14 cover=85343 13:06:33 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 2021/11/11 13:06:33 result hanged=false: [1159503ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103943 #0 [1159522ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1159523ms] <- openat$loop_ctrl=0x3 errno=14 cover=1102 #0 [1159523ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000300, 0x0, 0x0) #0 [1159523ms] <- openat$loop_ctrl=0x4 errno=14 cover=1091 #0 [1159524ms] -> ioctl$LOOP_CTL_REMOVE(0x3, 0x4c81, 0x0) #0 [1159548ms] <- ioctl$LOOP_CTL_REMOVE=0x0 errno=14 cover=61780 #0 [1159554ms] -> ioctl$LOOP_CTL_ADD(0x4, 0x4c80, 0x0) #0 [1159571ms] <- ioctl$LOOP_CTL_ADD=0x0 errno=14 cover=99191 2021/11/11 13:06:33 result hanged=false: 13:06:33 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) [1159620ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103945 #0 [1159641ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1159641ms] <- openat$loop_ctrl=0x3 errno=14 cover=1161 #0 [1159647ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000300, 0x0, 0x0) #0 [1159647ms] <- openat$loop_ctrl=0x4 errno=14 cover=1163 #0 [1159648ms] -> ioctl$LOOP_CTL_REMOVE(0x3, 0x4c81, 0x0) #0 [1159649ms] <- ioctl$LOOP_CTL_REMOVE=0xffffffffffffffff errno=16 cover=121 #0 [1159650ms] -> ioctl$LOOP_CTL_ADD(0x4, 0x4c80, 0x0) #0 [1159650ms] <- ioctl$LOOP_CTL_ADD=0xffffffffffffffff errno=17 cover=119 2021/11/11 13:06:33 result hanged=false: 2021/11/11 13:06:33 added new input for call #2 ioctl$LOOP_CTL_REMOVE to corpus: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 13:06:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r1, 0x1}, 0x14}}, 0x0) [1159705ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 103947 #0 [1159727ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1159729ms] <- socket$nl_generic=0x3 errno=14 cover=1448 #0 [1159730ms] -> syz_genetlink_get_family_id$ethtool(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [1159731ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=8016 #0 [1159732ms] -> sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0x3, 0x20000680, 0x0) #0 [1159733ms] <- sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET=0x14 errno=14 cover=1753 enabling collider #0 [1159734ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1159734ms] <- socket$nl_generic=0x3 errno=14 cover=1433 #0 [1159735ms] -> syz_genetlink_get_family_id$ethtool(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [1159736ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=7613 pthread_create failed (errno 11) 13:06:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r1, 0x1}, 0x14}}, 0x0) 2021/11/11 13:06:33 result hanged=false: 2021/11/11 13:06:33 #0: triaging type=7 2021/11/11 13:06:33 triaging input for call #2 sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET (new signal=3) [1159814ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104049 #0 [1159833ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1159834ms] <- socket$nl_generic=0x3 errno=14 cover=1532 #0 [1159836ms] -> syz_genetlink_get_family_id$ethtool(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [1159837ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=8139 #0 [1159839ms] -> sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0x3, 0x20000680, 0x0) #0 [1159840ms] <- sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET=0x14 errno=14 cover=1717 13:06:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r1, 0x1}, 0x14}}, 0x0) 2021/11/11 13:06:33 result hanged=false: [1159885ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104051 #0 [1159904ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1159904ms] <- socket$nl_generic=0x3 errno=14 cover=1436 #0 [1159905ms] -> syz_genetlink_get_family_id$ethtool(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [1159906ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=7992 #0 [1159908ms] -> sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0x3, 0x20000680, 0x0) #0 [1159909ms] <- sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET=0x14 errno=14 cover=1725 13:06:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r1, 0x1}, 0x14}}, 0x0) 2021/11/11 13:06:33 result hanged=false: [1159954ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104053 #0 [1159973ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1159974ms] <- socket$nl_generic=0x3 errno=14 cover=1489 #0 [1159975ms] -> syz_genetlink_get_family_id$ethtool(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [1159976ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=7990 #0 [1159979ms] -> sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0x3, 0x20000680, 0x0) #0 [1159979ms] <- sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET=0x14 errno=14 cover=1715 2021/11/11 13:06:33 result hanged=false: 2021/11/11 13:06:33 added new input for call #2 sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET to corpus: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r1, 0x1}, 0x14}}, 0x0) 13:06:33 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000700)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xc0}, 0x18) [1160025ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104055 #0 [1160044ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000140) #0 [1160054ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=65903 #0 [1160056ms] -> openat2(0xffffffffffffff9c, 0x20000000, 0x20000040, 0x18) #0 [1160063ms] <- openat2=0x3 errno=14 cover=7255 enabling collider #0 [1160064ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000140) #0 [1160065ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=5922 13:06:33 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000700)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xc0}, 0x18) 2021/11/11 13:06:33 result hanged=false: 2021/11/11 13:06:33 #0: triaging type=7 2021/11/11 13:06:33 triaging input for call #1 openat2 (new signal=1) [1160111ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104057 #0 [1160135ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000140) #0 [1160136ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=3510 #0 [1160137ms] -> openat2(0xffffffffffffff9c, 0x20000000, 0x20000040, 0x18) #0 [1160141ms] <- openat2=0x3 errno=14 cover=7748 2021/11/11 13:06:33 result hanged=false: 13:06:33 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000700)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xc0}, 0x18) [1160191ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104059 #0 [1160211ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000140) #0 [1160212ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=3487 #0 [1160216ms] -> openat2(0xffffffffffffff9c, 0x20000000, 0x20000040, 0x18) #0 [1160219ms] <- openat2=0x3 errno=14 cover=7635 13:06:33 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000700)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xc0}, 0x18) 2021/11/11 13:06:33 result hanged=false: [1160273ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104061 #0 [1160295ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000140) #0 [1160295ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=3850 #0 [1160297ms] -> openat2(0xffffffffffffff9c, 0x20000000, 0x20000040, 0x18) #0 [1160300ms] <- openat2=0x3 errno=14 cover=7358 2021/11/11 13:06:33 result hanged=false: 2021/11/11 13:06:33 added new input for call #1 openat2 to corpus: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000700)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xc0}, 0x18) 13:06:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) [1160356ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104063 #0 [1160378ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1160379ms] <- socket$nl_netfilter=0x3 errno=14 cover=1434 #0 [1160383ms] -> sendmsg$NFULNL_MSG_CONFIG(0x3, 0x200006c0, 0x0) #0 [1160383ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1536 enabling collider #0 [1160384ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1160384ms] <- socket$nl_netfilter=0x3 errno=14 cover=1455 2021/11/11 13:06:33 result hanged=false: 13:06:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) 2021/11/11 13:06:33 #0: triaging type=7 2021/11/11 13:06:33 triaging input for call #1 sendmsg$NFULNL_MSG_CONFIG (new signal=2) [1160429ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104065 #0 [1160447ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1160448ms] <- socket$nl_netfilter=0x3 errno=14 cover=1467 #0 [1160448ms] -> sendmsg$NFULNL_MSG_CONFIG(0x3, 0x200006c0, 0x0) #0 [1160449ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1559 13:06:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) 2021/11/11 13:06:33 result hanged=false: [1160495ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104067 #0 [1160517ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1160517ms] <- socket$nl_netfilter=0x3 errno=14 cover=1437 #0 [1160519ms] -> sendmsg$NFULNL_MSG_CONFIG(0x3, 0x200006c0, 0x0) #0 [1160519ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1559 2021/11/11 13:06:34 result hanged=false: 13:06:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) [1160571ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104069 #0 [1160591ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1160592ms] <- socket$nl_netfilter=0x3 errno=14 cover=1434 #0 [1160594ms] -> sendmsg$NFULNL_MSG_CONFIG(0x3, 0x200006c0, 0x0) #0 [1160594ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1548 2021/11/11 13:06:34 result hanged=false: 2021/11/11 13:06:34 added new input for call #1 sendmsg$NFULNL_MSG_CONFIG to corpus: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) 13:06:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000200)="7c1dc3c074c101") [1160640ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104071 #0 [1160659ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [1160660ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=6230 #0 [1160662ms] -> bind$bt_hci(0x4, 0x20000000, 0x6) #0 [1160663ms] <- bind$bt_hci=0x0 errno=14 cover=830 #0 [1160663ms] -> ioctl$sock_bt_hci(0x4, 0x800448d5, 0x20000200) #0 [1160663ms] <- ioctl$sock_bt_hci=0xffffffffffffffff errno=2 cover=205 enabling collider #0 [1160663ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [1160664ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=5456 #0 [1160664ms] -> bind$bt_hci(0x4, 0x20000000, 0x6) #0 [1160664ms] <- bind$bt_hci=0x0 errno=14 cover=841 pthread_create failed (errno 11) 2021/11/11 13:06:34 result hanged=false: 2021/11/11 13:06:34 #0: triaging type=7 2021/11/11 13:06:34 triaging input for call #2 ioctl$sock_bt_hci (new signal=12) 13:06:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000200)="7c1dc3c074c101") [1160742ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104173 #0 [1160761ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [1160763ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=6348 #0 [1160773ms] -> bind$bt_hci(0x4, 0x20000000, 0x6) #0 [1160773ms] <- bind$bt_hci=0x0 errno=14 cover=841 #0 [1160773ms] -> ioctl$sock_bt_hci(0x4, 0x800448d5, 0x20000200) #0 [1160774ms] <- ioctl$sock_bt_hci=0xffffffffffffffff errno=2 cover=205 13:06:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000200)="7c1dc3c074c101") 2021/11/11 13:06:34 result hanged=false: [1160818ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104175 #0 [1160837ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [1160839ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=6224 #0 [1160842ms] -> bind$bt_hci(0x4, 0x20000000, 0x6) #0 [1160842ms] <- bind$bt_hci=0x0 errno=14 cover=819 #0 [1160843ms] -> ioctl$sock_bt_hci(0x4, 0x800448d5, 0x20000200) #0 [1160843ms] <- ioctl$sock_bt_hci=0xffffffffffffffff errno=2 cover=205 2021/11/11 13:06:34 result hanged=false: 13:06:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000200)="7c1dc3c074c101") [1160890ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104177 #0 [1160914ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [1160916ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=6432 #0 [1160917ms] -> bind$bt_hci(0x4, 0x20000000, 0x6) #0 [1160917ms] <- bind$bt_hci=0x0 errno=14 cover=844 #0 [1160917ms] -> ioctl$sock_bt_hci(0x4, 0x800448d5, 0x20000200) #0 [1160918ms] <- ioctl$sock_bt_hci=0xffffffffffffffff errno=2 cover=205 2021/11/11 13:06:34 result hanged=false: 2021/11/11 13:06:34 added new input for call #2 ioctl$sock_bt_hci to corpus: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000200)="7c1dc3c074c101") 2021/11/11 13:06:34 #0: triaging type=7 13:06:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000200)="7c1dc3c074c101") 2021/11/11 13:06:34 triaging input for call #0 syz_init_net_socket$bt_hci (new signal=2) [1160961ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104179 #0 [1160983ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [1160983ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=6255 #0 [1160986ms] -> bind$bt_hci(0x4, 0x20000000, 0x6) #0 [1160986ms] <- bind$bt_hci=0x0 errno=14 cover=819 #0 [1160987ms] -> ioctl$sock_bt_hci(0x4, 0x800448d5, 0x20000200) #0 [1160987ms] <- ioctl$sock_bt_hci=0xffffffffffffffff errno=2 cover=205 2021/11/11 13:06:34 result hanged=false: 13:06:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000200)="7c1dc3c074c101") [1161032ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104181 #0 [1161058ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [1161059ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=6276 #0 [1161060ms] -> bind$bt_hci(0x4, 0x20000000, 0x6) #0 [1161060ms] <- bind$bt_hci=0x0 errno=14 cover=819 #0 [1161061ms] -> ioctl$sock_bt_hci(0x4, 0x800448d5, 0x20000200) #0 [1161061ms] <- ioctl$sock_bt_hci=0xffffffffffffffff errno=2 cover=205 2021/11/11 13:06:34 result hanged=false: 13:06:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000200)="7c1dc3c074c101") [1161107ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104183 #0 [1161127ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [1161128ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=6259 #0 [1161131ms] -> bind$bt_hci(0x4, 0x20000000, 0x6) #0 [1161131ms] <- bind$bt_hci=0x0 errno=14 cover=852 #0 [1161131ms] -> ioctl$sock_bt_hci(0x4, 0x800448d5, 0x20000200) #0 [1161131ms] <- ioctl$sock_bt_hci=0xffffffffffffffff errno=2 cover=205 2021/11/11 13:06:34 result hanged=false: 2021/11/11 13:06:34 added new input for call #0 syz_init_net_socket$bt_hci to corpus: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000200)="7c1dc3c074c101") 13:06:34 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x64f, 0x0) [1161181ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104185 #0 [1161201ms] -> openat$procfs(0xffffffffffffff9c, 0x20000280, 0x0, 0x0) #0 [1161202ms] <- openat$procfs=0x3 errno=14 cover=1302 #0 [1161203ms] -> preadv(0x3, 0x20001580, 0x1, 0x64f, 0x0) #0 [1161204ms] <- preadv=0x3a5 errno=14 cover=5766 enabling collider #0 [1161205ms] -> openat$procfs(0xffffffffffffff9c, 0x20000280, 0x0, 0x0) #0 [1161206ms] <- openat$procfs=0x3 errno=14 cover=1345 13:06:34 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x64f, 0x0) 2021/11/11 13:06:34 result hanged=false: 2021/11/11 13:06:34 #0: triaging type=7 2021/11/11 13:06:34 triaging input for call #1 preadv (new signal=9) [1161251ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104187 #0 [1161269ms] -> openat$procfs(0xffffffffffffff9c, 0x20000280, 0x0, 0x0) #0 [1161270ms] <- openat$procfs=0x3 errno=14 cover=1347 #0 [1161270ms] -> preadv(0x3, 0x20001580, 0x1, 0x64f, 0x0) #0 [1161271ms] <- preadv=0x3a5 errno=14 cover=5672 13:06:34 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x64f, 0x0) 2021/11/11 13:06:34 result hanged=false: [1161318ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104189 #0 [1161337ms] -> openat$procfs(0xffffffffffffff9c, 0x20000280, 0x0, 0x0) #0 [1161337ms] <- openat$procfs=0x3 errno=14 cover=1357 #0 [1161338ms] -> preadv(0x3, 0x20001580, 0x1, 0x64f, 0x0) #0 [1161338ms] <- preadv=0x3a5 errno=14 cover=5640 2021/11/11 13:06:34 result hanged=false: 13:06:34 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x64f, 0x0) [1161384ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104191 #0 [1161404ms] -> openat$procfs(0xffffffffffffff9c, 0x20000280, 0x0, 0x0) #0 [1161404ms] <- openat$procfs=0x3 errno=14 cover=1302 #0 [1161408ms] -> preadv(0x3, 0x20001580, 0x1, 0x64f, 0x0) #0 [1161408ms] <- preadv=0x3a5 errno=14 cover=5684 2021/11/11 13:06:34 result hanged=false: 2021/11/11 13:06:34 added new input for call #1 preadv to corpus: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x64f, 0x0) 13:06:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000080)='cpuset\x00', 0x0) [1161454ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104193 #0 [1161473ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1161474ms] <- perf_event_open=0x3 errno=14 cover=4245 #0 [1161474ms] -> fsopen(0x20000080, 0x0) #0 [1161475ms] <- fsopen=0x4 errno=14 cover=3972 enabling collider #0 [1161483ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1161484ms] <- perf_event_open=0x3 errno=14 cover=4100 2021/11/11 13:06:35 result hanged=false: 2021/11/11 13:06:35 #0: triaging type=7 2021/11/11 13:06:35 triaging input for call #1 fsopen (new signal=1) 13:06:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000080)='cpuset\x00', 0x0) [1161529ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104195 #0 [1161549ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1161550ms] <- perf_event_open=0x3 errno=14 cover=4201 #0 [1161551ms] -> fsopen(0x20000080, 0x0) #0 [1161553ms] <- fsopen=0x4 errno=14 cover=21403 13:06:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000080)='cpuset\x00', 0x0) 2021/11/11 13:06:35 result hanged=false: [1161599ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104197 #0 [1161619ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1161620ms] <- perf_event_open=0x3 errno=14 cover=4276 #0 [1161621ms] -> fsopen(0x20000080, 0x0) #0 [1161622ms] <- fsopen=0x4 errno=14 cover=4692 13:06:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000080)='cpuset\x00', 0x0) 2021/11/11 13:06:35 result hanged=false: [1161668ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104199 #0 [1161688ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1161690ms] <- perf_event_open=0x3 errno=14 cover=3942 #0 [1161691ms] -> fsopen(0x20000080, 0x0) #0 [1161692ms] <- fsopen=0x4 errno=14 cover=1033 2021/11/11 13:06:35 result hanged=false: 2021/11/11 13:06:35 added new input for call #1 fsopen to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000080)='cpuset\x00', 0x0) 13:06:35 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x1c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private}}}}}}, 0x0) 2021/11/11 13:06:35 poll: candidates=8 inputs=0 signal=0 [1161742ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104201 #0 [1161762ms] -> syz_emit_ethernet(0x3e, 0x20000080, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa aa 08 00 45 00 00 30 00 00 00 00 00 01 4d f0 ac 1e 00 01 ac 14 14 aa 03 1c 4b af ac 1e 00 01 45 00 00 00 00 00 00 00 00 00 00 00 ac 14 14 00 00 00 00 00 #0 [1161762ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=18325 enabling collider #0 [1161764ms] -> syz_emit_ethernet(0x3e, 0x20000080, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa aa 08 00 45 00 00 30 00 00 00 00 00 01 4d f0 ac 1e 00 01 ac 14 14 aa 03 1c 4b af ac 1e 00 01 45 00 00 00 00 00 00 00 00 00 00 00 ac 14 14 00 00 00 00 00 #0 [1161765ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=18315 13:06:35 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x1c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private}}}}}}, 0x0) 2021/11/11 13:06:35 result hanged=false: 2021/11/11 13:06:35 #0: triaging type=7 2021/11/11 13:06:35 triaging input for call #0 syz_emit_ethernet (new signal=1) [1161812ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104203 #0 [1161832ms] -> syz_emit_ethernet(0x3e, 0x20000080, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa aa 08 00 45 00 00 30 00 00 00 00 00 01 4d f0 ac 1e 00 01 ac 14 14 aa 03 1c 4b af ac 1e 00 01 45 00 00 00 00 00 00 00 00 00 00 00 ac 14 14 00 00 00 00 00 #0 [1161832ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=18312 13:06:35 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x1c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private}}}}}}, 0x0) 2021/11/11 13:06:35 result hanged=false: [1161879ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104205 #0 [1161899ms] -> syz_emit_ethernet(0x3e, 0x20000080, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa aa 08 00 45 00 00 30 00 00 00 00 00 01 4d f0 ac 1e 00 01 ac 14 14 aa 03 1c 4b af ac 1e 00 01 45 00 00 00 00 00 00 00 00 00 00 00 ac 14 14 00 00 00 00 00 #0 [1161900ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=18060 13:06:35 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x1c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private}}}}}}, 0x0) 2021/11/11 13:06:35 result hanged=false: [1161947ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104207 #0 [1161966ms] -> syz_emit_ethernet(0x3e, 0x20000080, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa aa 08 00 45 00 00 30 00 00 00 00 00 01 4d f0 ac 1e 00 01 ac 14 14 aa 03 1c 4b af ac 1e 00 01 45 00 00 00 00 00 00 00 00 00 00 00 ac 14 14 00 00 00 00 00 #0 [1161967ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=18255 2021/11/11 13:06:35 result hanged=false: 2021/11/11 13:06:35 added new input for call #0 syz_emit_ethernet to corpus: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x1c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private}}}}}}, 0x0) 13:06:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r0, 0x0, 0x200f5ef, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r4, r0, 0x0, 0x7ffffff9) [1162015ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104209 #0 [1162035ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1162039ms] <- openat=0x3 errno=14 cover=7437 #0 [1162040ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1162041ms] <- openat=0x4 errno=14 cover=1225 #0 [1162041ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1162041ms] <- openat=0x5 errno=14 cover=2695 #0 [1162041ms] -> copy_file_range(0x5, 0x0, 0x4, 0x0, 0x200f5ef, 0x0) #0 [1162141ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [1162145ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1162145ms] <- openat=0x6 errno=14 cover=2253 #0 [1162146ms] -> copy_file_range(0x6, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [1162220ms] <- copy_file_range=0x1d0000 errno=14 cover=201984 #0 [1162222ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1162223ms] <- openat=0x7 errno=14 cover=1209 #0 [1162224ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [1162224ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [1162225ms] -> sendfile(0x7, 0x3, 0x0, 0x7ffffff9) #0 [1162226ms] <- sendfile=0x0 errno=14 cover=1392 enabling collider #0 [1162226ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1162227ms] <- openat=0x3 errno=14 cover=1148 #0 [1162228ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1162228ms] <- openat=0x4 errno=14 cover=1145 pthread_create failed (errno 11) 2021/11/11 13:06:35 result hanged=false: 2021/11/11 13:06:35 #0: triaging type=7 13:06:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r0, 0x0, 0x200f5ef, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r4, r0, 0x0, 0x7ffffff9) 2021/11/11 13:06:35 triaging input for call #5 copy_file_range (new signal=8) [1162312ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104311 #0 [1162337ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1162342ms] <- openat=0x3 errno=14 cover=7452 #0 [1162343ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1162344ms] <- openat=0x4 errno=14 cover=1222 #0 [1162344ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1162345ms] <- openat=0x5 errno=14 cover=2759 #0 [1162346ms] -> copy_file_range(0x5, 0x0, 0x4, 0x0, 0x200f5ef, 0x0) #0 [1162439ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [1162460ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1162463ms] <- openat=0x6 errno=14 cover=2197 #0 [1162465ms] -> copy_file_range(0x6, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [1162543ms] <- copy_file_range=0x1d0000 errno=14 cover=201962 #0 [1162558ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1162558ms] <- openat=0x7 errno=14 cover=1183 #0 [1162558ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [1162558ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [1162559ms] -> sendfile(0x7, 0x3, 0x0, 0x7ffffff9) #0 [1162559ms] <- sendfile=0x0 errno=14 cover=1504 2021/11/11 13:06:36 result hanged=false: 13:06:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r0, 0x0, 0x200f5ef, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r4, r0, 0x0, 0x7ffffff9) [1162608ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104313 #0 [1162628ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1162633ms] <- openat=0x3 errno=14 cover=7728 #0 [1162639ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1162639ms] <- openat=0x4 errno=14 cover=1238 #0 [1162644ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1162645ms] <- openat=0x5 errno=14 cover=2871 #0 [1162645ms] -> copy_file_range(0x5, 0x0, 0x4, 0x0, 0x200f5ef, 0x0) #0 [1162740ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [1162760ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1162760ms] <- openat=0x6 errno=14 cover=2176 #0 [1162761ms] -> copy_file_range(0x6, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [1162836ms] <- copy_file_range=0x1d0000 errno=14 cover=202115 #0 [1162851ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1162851ms] <- openat=0x7 errno=14 cover=1211 #0 [1162852ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [1162852ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [1162852ms] -> sendfile(0x7, 0x3, 0x0, 0x7ffffff9) #0 [1162853ms] <- sendfile=0x0 errno=14 cover=1506 13:06:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r0, 0x0, 0x200f5ef, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r4, r0, 0x0, 0x7ffffff9) 2021/11/11 13:06:36 result hanged=false: [1162902ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104315 #0 [1162921ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1162925ms] <- openat=0x3 errno=14 cover=7852 #0 [1162927ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1162927ms] <- openat=0x4 errno=14 cover=1211 #0 [1162928ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1162929ms] <- openat=0x5 errno=14 cover=2833 #0 [1162930ms] -> copy_file_range(0x5, 0x0, 0x4, 0x0, 0x200f5ef, 0x0) #0 [1163027ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [1163048ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1163048ms] <- openat=0x6 errno=14 cover=2241 #0 [1163049ms] -> copy_file_range(0x6, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [1163121ms] <- copy_file_range=0x1d0000 errno=14 cover=201738 #0 [1163136ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1163139ms] <- openat=0x7 errno=14 cover=1224 #0 [1163141ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [1163141ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [1163142ms] -> sendfile(0x7, 0x3, 0x0, 0x7ffffff9) #0 [1163142ms] <- sendfile=0x0 errno=14 cover=1399 2021/11/11 13:06:36 result hanged=false: 2021/11/11 13:06:36 added new input for call #5 copy_file_range to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r0, 0x0, 0x200f5ef, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r4, r0, 0x0, 0x7ffffff9) 13:06:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r0, 0x0, 0x200f5ef, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r4, r0, 0x0, 0x7ffffff9) 2021/11/11 13:06:36 #0: triaging type=7 2021/11/11 13:06:36 triaging input for call #3 copy_file_range (new signal=10) [1163195ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104317 #0 [1163219ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1163223ms] <- openat=0x3 errno=14 cover=7297 #0 [1163225ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1163225ms] <- openat=0x4 errno=14 cover=1266 #0 [1163227ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1163227ms] <- openat=0x5 errno=14 cover=2794 #0 [1163229ms] -> copy_file_range(0x5, 0x0, 0x4, 0x0, 0x200f5ef, 0x0) #0 [1163328ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [1163349ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1163349ms] <- openat=0x6 errno=14 cover=2229 #0 [1163350ms] -> copy_file_range(0x6, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [1163422ms] <- copy_file_range=0x1d0000 errno=14 cover=202024 #0 [1163438ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1163441ms] <- openat=0x7 errno=14 cover=1167 #0 [1163441ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [1163441ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [1163441ms] -> sendfile(0x7, 0x3, 0x0, 0x7ffffff9) #0 [1163441ms] <- sendfile=0x0 errno=14 cover=1552 2021/11/11 13:06:36 result hanged=false: 13:06:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r0, 0x0, 0x200f5ef, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r4, r0, 0x0, 0x7ffffff9) [1163490ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104319 #0 [1163512ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1163517ms] <- openat=0x3 errno=14 cover=7421 #0 [1163519ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1163519ms] <- openat=0x4 errno=14 cover=1200 #0 [1163520ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1163521ms] <- openat=0x5 errno=14 cover=2830 #0 [1163521ms] -> copy_file_range(0x5, 0x0, 0x4, 0x0, 0x200f5ef, 0x0) #0 [1163622ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [1163642ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1163642ms] <- openat=0x6 errno=14 cover=2285 #0 [1163642ms] -> copy_file_range(0x6, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [1163715ms] <- copy_file_range=0x1d0000 errno=14 cover=202136 #0 [1163734ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1163737ms] <- openat=0x7 errno=14 cover=1124 #0 [1163737ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [1163737ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [1163737ms] -> sendfile(0x7, 0x3, 0x0, 0x7ffffff9) #0 [1163737ms] <- sendfile=0x0 errno=14 cover=1436 2021/11/11 13:06:37 result hanged=false: 13:06:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r0, 0x0, 0x200f5ef, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r4, r0, 0x0, 0x7ffffff9) [1163787ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104321 #0 [1163807ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1163812ms] <- openat=0x3 errno=14 cover=7462 #0 [1163814ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1163814ms] <- openat=0x4 errno=14 cover=1200 #0 [1163816ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1163816ms] <- openat=0x5 errno=14 cover=2802 #0 [1163818ms] -> copy_file_range(0x5, 0x0, 0x4, 0x0, 0x200f5ef, 0x0) #0 [1163917ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [1163937ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1163937ms] <- openat=0x6 errno=14 cover=2255 #0 [1163937ms] -> copy_file_range(0x6, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [1164011ms] <- copy_file_range=0x1d0000 errno=14 cover=208511 #0 [1164027ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1164029ms] <- openat=0x7 errno=14 cover=1146 #0 [1164030ms] -> copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [1164030ms] <- copy_file_range=0xffffffffffffffff errno=9 cover=46 #0 [1164030ms] -> sendfile(0x7, 0x3, 0x0, 0x7ffffff9) #0 [1164030ms] <- sendfile=0x0 errno=14 cover=1506 2021/11/11 13:06:37 result hanged=false: 2021/11/11 13:06:37 added new input for call #3 copy_file_range to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r0, 0x0, 0x200f5ef, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r4, r0, 0x0, 0x7ffffff9) 13:06:37 executing program 0: prctl$PR_GET_NAME(0x27, &(0x7f0000000700)=""/125) [1164086ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104323 #0 [1164107ms] -> prctl$PR_GET_NAME(0x27, 0x20000700) #0 [1164107ms] <- prctl$PR_GET_NAME=0xffffffffffffffff errno=22 cover=43 enabling collider #0 [1164108ms] -> prctl$PR_GET_NAME(0x27, 0x20000700) #0 [1164108ms] <- prctl$PR_GET_NAME=0xffffffffffffffff errno=22 cover=43 13:06:37 executing program 0: prctl$PR_GET_NAME(0x27, &(0x7f0000000700)=""/125) 2021/11/11 13:06:37 result hanged=false: 2021/11/11 13:06:37 #0: triaging type=7 2021/11/11 13:06:37 triaging input for call #0 prctl$PR_GET_NAME (new signal=1) [1164151ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104325 #0 [1164173ms] -> prctl$PR_GET_NAME(0x27, 0x20000700) #0 [1164173ms] <- prctl$PR_GET_NAME=0xffffffffffffffff errno=22 cover=43 13:06:37 executing program 0: prctl$PR_GET_NAME(0x27, &(0x7f0000000700)=""/125) 2021/11/11 13:06:37 result hanged=false: [1164216ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104327 #0 [1164236ms] -> prctl$PR_GET_NAME(0x27, 0x20000700) #0 [1164236ms] <- prctl$PR_GET_NAME=0xffffffffffffffff errno=22 cover=43 13:06:37 executing program 0: prctl$PR_GET_NAME(0x27, &(0x7f0000000700)=""/125) 2021/11/11 13:06:37 result hanged=false: [1164281ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104329 #0 [1164301ms] -> prctl$PR_GET_NAME(0x27, 0x20000700) #0 [1164301ms] <- prctl$PR_GET_NAME=0xffffffffffffffff errno=22 cover=43 2021/11/11 13:06:37 result hanged=false: 2021/11/11 13:06:37 added new input for call #0 prctl$PR_GET_NAME to corpus: prctl$PR_GET_NAME(0x27, &(0x7f0000000700)=""/125) 13:06:37 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x6e5b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x1e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [1164349ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104331 #0 [1164368ms] -> mmap$IORING_OFF_CQ_RING(0x20ffc000, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x8000000) #0 [1164369ms] <- mmap$IORING_OFF_CQ_RING=0xffffffffffffffff errno=9 cover=44 #0 [1164370ms] -> syz_io_uring_setup(0x6e5b, 0x20000000, 0x20ffd000, 0x20ffa000, 0x20000080, 0x200000c0) #0 [1164376ms] <- syz_io_uring_setup=0x3 errno=14 cover=25309 enabling collider #0 [1164381ms] -> mmap$IORING_OFF_CQ_RING(0x20ffc000, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x8000000) #0 [1164381ms] <- mmap$IORING_OFF_CQ_RING=0xffffffffffffffff errno=9 cover=44 13:06:37 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x6e5b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x1e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 2021/11/11 13:06:37 result hanged=false: 2021/11/11 13:06:37 #0: triaging type=7 2021/11/11 13:06:37 triaging input for call #1 syz_io_uring_setup (new signal=2) [1164426ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104333 #0 [1164447ms] -> mmap$IORING_OFF_CQ_RING(0x20ffc000, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x8000000) #0 [1164447ms] <- mmap$IORING_OFF_CQ_RING=0xffffffffffffffff errno=9 cover=44 #0 [1164448ms] -> syz_io_uring_setup(0x6e5b, 0x20000000, 0x20ffd000, 0x20ffa000, 0x20000080, 0x200000c0) #0 [1164453ms] <- syz_io_uring_setup=0x3 errno=14 cover=21777 13:06:37 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x6e5b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x1e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 2021/11/11 13:06:37 result hanged=false: [1164502ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104335 #0 [1164523ms] -> mmap$IORING_OFF_CQ_RING(0x20ffc000, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x8000000) #0 [1164523ms] <- mmap$IORING_OFF_CQ_RING=0xffffffffffffffff errno=9 cover=44 #0 [1164525ms] -> syz_io_uring_setup(0x6e5b, 0x20000000, 0x20ffd000, 0x20ffa000, 0x20000080, 0x200000c0) #0 [1164529ms] <- syz_io_uring_setup=0x3 errno=14 cover=21844 13:06:38 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x6e5b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x1e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 2021/11/11 13:06:38 result hanged=false: [1164586ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104337 #0 [1164608ms] -> mmap$IORING_OFF_CQ_RING(0x20ffc000, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x8000000) #0 [1164609ms] <- mmap$IORING_OFF_CQ_RING=0xffffffffffffffff errno=9 cover=44 #0 [1164609ms] -> syz_io_uring_setup(0x6e5b, 0x20000000, 0x20ffd000, 0x20ffa000, 0x20000080, 0x200000c0) #0 [1164614ms] <- syz_io_uring_setup=0x3 errno=14 cover=21793 2021/11/11 13:06:38 result hanged=false: 2021/11/11 13:06:38 added new input for call #1 syz_io_uring_setup to corpus: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x6e5b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x1e6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 13:06:38 executing program 0: pipe(&(0x7f0000000180)) [1164667ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104339 #0 [1164685ms] -> pipe(0x20000180) #0 [1164686ms] <- pipe=0x0 errno=14 cover=1864 enabling collider #0 [1164688ms] -> pipe(0x20000180) #0 [1164688ms] <- pipe=0x0 errno=14 cover=1200 2021/11/11 13:06:38 result hanged=false: 2021/11/11 13:06:38 #0: triaging type=7 13:06:38 executing program 0: pipe(&(0x7f0000000180)) 2021/11/11 13:06:38 triaging input for call #0 pipe (new signal=1) [1164738ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104341 #0 [1164757ms] -> pipe(0x20000180) #0 [1164757ms] <- pipe=0x0 errno=14 cover=1916 13:06:38 executing program 0: pipe(&(0x7f0000000180)) 2021/11/11 13:06:38 result hanged=false: [1164805ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104343 #0 [1164830ms] -> pipe(0x20000180) #0 [1164831ms] <- pipe=0x0 errno=14 cover=1861 13:06:38 executing program 0: pipe(&(0x7f0000000180)) 2021/11/11 13:06:38 result hanged=false: [1164877ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104345 #0 [1164899ms] -> pipe(0x20000180) #0 [1164900ms] <- pipe=0x0 errno=14 cover=1828 2021/11/11 13:06:38 result hanged=false: 2021/11/11 13:06:38 added new input for call #0 pipe to corpus: pipe(&(0x7f0000000180)) 13:06:38 executing program 0: setreuid(0x0, 0xee01) mlockall(0x1) [1164948ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104347 #0 [1164967ms] -> setreuid(0x0, 0xee01) #0 [1164967ms] <- setreuid=0x0 errno=14 cover=428 #0 [1164967ms] -> mlockall(0x1) #0 [1164968ms] <- mlockall=0xffffffffffffffff errno=12 cover=51 enabling collider #0 [1164974ms] -> setreuid(0x0, 0xee01) #0 [1164974ms] <- setreuid=0x0 errno=14 cover=357 #0 [1164978ms] -> mlockall(0x1) #0 [1164978ms] <- mlockall=0xffffffffffffffff errno=12 13:06:38 executing program 0: setreuid(0x0, 0xee01) mlockall(0x1) 2021/11/11 13:06:38 result hanged=false: 2021/11/11 13:06:38 #0: triaging type=7 2021/11/11 13:06:38 triaging input for call #1 mlockall (new signal=3) [1165023ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104349 #0 [1165044ms] -> setreuid(0x0, 0xee01) #0 [1165044ms] <- setreuid=0x0 errno=14 cover=411 #0 [1165046ms] -> mlockall(0x1) #0 [1165046ms] <- mlockall=0xffffffffffffffff errno=12 cover=51 13:06:38 executing program 0: setreuid(0x0, 0xee01) mlockall(0x1) 2021/11/11 13:06:38 result hanged=false: [1165091ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104351 #0 [1165115ms] -> setreuid(0x0, 0xee01) #0 [1165116ms] <- setreuid=0x0 errno=14 cover=428 #0 [1165117ms] -> mlockall(0x1) #0 [1165117ms] <- mlockall=0xffffffffffffffff errno=12 cover=51 13:06:38 executing program 0: setreuid(0x0, 0xee01) mlockall(0x1) 2021/11/11 13:06:38 result hanged=false: [1165161ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104353 #0 [1165188ms] -> setreuid(0x0, 0xee01) #0 [1165188ms] <- setreuid=0x0 errno=14 cover=395 #0 [1165193ms] -> mlockall(0x1) #0 [1165193ms] <- mlockall=0xffffffffffffffff errno=12 cover=51 2021/11/11 13:06:38 result hanged=false: 2021/11/11 13:06:38 added new input for call #1 mlockall to corpus: setreuid(0x0, 0xee01) mlockall(0x1) 13:06:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffe3) [1165237ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104355 #0 [1165258ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [1165259ms] <- socket$inet_udp=0x3 errno=14 cover=1706 #0 [1165259ms] -> connect$inet(0x3, 0x20000100, 0x10) #0 [1165260ms] <- connect$inet=0x0 errno=14 cover=970 #0 [1165260ms] -> openat$procfs(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [1165260ms] <- openat$procfs=0x4 errno=14 cover=1522 #0 [1165261ms] -> sendfile(0x3, 0x4, 0x0, 0xffe3) #0 [1165263ms] <- sendfile=0x1f44 errno=14 cover=91685 enabling collider #0 [1165267ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [1165268ms] <- socket$inet_udp=0x3 errno=14 cover=1828 #0 [1165272ms] -> connect$inet(0x3, 0x20000100, 0x10) #0 [1165272ms] <- connect$inet=0x0 errno=14 cover=972 pthread_create failed (errno 11) 13:06:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffe3) 2021/11/11 13:06:38 result hanged=false: 2021/11/11 13:06:38 #0: triaging type=7 2021/11/11 13:06:38 triaging input for call #3 sendfile (new signal=2) [1165351ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104457 #0 [1165370ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [1165371ms] <- socket$inet_udp=0x3 errno=14 cover=1662 #0 [1165372ms] -> connect$inet(0x3, 0x20000100, 0x10) #0 [1165372ms] <- connect$inet=0x0 errno=14 cover=950 #0 [1165373ms] -> openat$procfs(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [1165375ms] <- openat$procfs=0x4 errno=14 cover=1548 #0 [1165377ms] -> sendfile(0x3, 0x4, 0x0, 0xffe3) #0 [1165385ms] <- sendfile=0x1f44 errno=14 cover=91004 13:06:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffe3) 2021/11/11 13:06:38 result hanged=false: [1165436ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104459 #0 [1165456ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [1165457ms] <- socket$inet_udp=0x3 errno=14 cover=1706 #0 [1165458ms] -> connect$inet(0x3, 0x20000100, 0x10) #0 [1165458ms] <- connect$inet=0x0 errno=14 cover=950 #0 [1165459ms] -> openat$procfs(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [1165459ms] <- openat$procfs=0x4 errno=14 cover=1565 #0 [1165459ms] -> sendfile(0x3, 0x4, 0x0, 0xffe3) #0 [1165461ms] <- sendfile=0x1f46 errno=14 cover=91173 13:06:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffe3) 2021/11/11 13:06:39 result hanged=false: [1165515ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104461 #0 [1165540ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [1165541ms] <- socket$inet_udp=0x3 errno=14 cover=1684 #0 [1165542ms] -> connect$inet(0x3, 0x20000100, 0x10) #0 [1165542ms] <- connect$inet=0x0 errno=14 cover=950 #0 [1165543ms] -> openat$procfs(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [1165543ms] <- openat$procfs=0x4 errno=14 cover=1535 #0 [1165544ms] -> sendfile(0x3, 0x4, 0x0, 0xffe3) #0 [1165546ms] <- sendfile=0x1f42 errno=14 cover=91093 2021/11/11 13:06:39 result hanged=false: 2021/11/11 13:06:39 added new input for call #3 sendfile to corpus: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffe3) 13:06:39 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa, "00008100a62200"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) pread64(r0, &(0x7f0000000240)=""/161, 0xa1, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) [1165601ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104463 #0 [1165626ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [1165626ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [1165626ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [1165627ms] <- openat$tun=0x3 errno=14 cover=1406 #0 [1165627ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [1165639ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=43741 #0 [1165641ms] -> io_uring_setup(0x0, 0x200001c0) #0 [1165641ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=53 #0 [1165642ms] -> pread64(0x3, 0x20000240, 0xa1, 0x0) pthread_create failed (errno 11) 2021/11/11 13:06:40 result hanged=false: 2021/11/11 13:06:40 #0: triaging type=7 2021/11/11 13:06:40 triaging input for call #2 ioctl$TUNSETQUEUE (new signal=2) 13:06:40 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa, "00008100a62200"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) pread64(r0, &(0x7f0000000240)=""/161, 0xa1, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) [1166725ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104565 #0 [1166747ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [1166749ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [1166750ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [1166750ms] <- openat$tun=0x3 errno=14 cover=1398 #0 [1166751ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [1166755ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=44045 #0 [1166757ms] -> io_uring_setup(0x0, 0x200001c0) #0 [1166758ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=53 #0 [1166758ms] -> pread64(0x3, 0x20000240, 0xa1, 0x0) 2021/11/11 13:06:40 poll: candidates=0 inputs=0 signal=0 pthread_create failed (errno 11) 2021/11/11 13:06:41 result hanged=false: 13:06:41 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa, "00008100a62200"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) pread64(r0, &(0x7f0000000240)=""/161, 0xa1, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) [1167835ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104667 #0 [1167857ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [1167857ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [1167859ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [1167860ms] <- openat$tun=0x3 errno=14 cover=1462 #0 [1167861ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [1167865ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=44009 #0 [1167869ms] -> io_uring_setup(0x0, 0x200001c0) #0 [1167869ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=53 #0 [1167870ms] -> pread64(0x3, 0x20000240, 0xa1, 0x0) pthread_create failed (errno 11) 2021/11/11 13:06:42 result hanged=false: 13:06:42 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa, "00008100a62200"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) pread64(r0, &(0x7f0000000240)=""/161, 0xa1, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) [1168957ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104769 #0 [1168978ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [1168978ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [1168979ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [1168979ms] <- openat$tun=0x3 errno=14 cover=1394 #0 [1168980ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [1168985ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=43976 #0 [1168989ms] -> io_uring_setup(0x0, 0x200001c0) #0 [1168989ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=53 #0 [1168989ms] -> pread64(0x3, 0x20000240, 0xa1, 0x0) pthread_create failed (errno 11) 2021/11/11 13:06:43 result hanged=false: 2021/11/11 13:06:43 added new input for call #2 ioctl$TUNSETQUEUE to corpus: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa, "00008100a62200"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) pread64(r0, &(0x7f0000000240)=""/161, 0xa1, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) 13:06:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002540)) 2021/11/11 13:06:43 poll: candidates=8 inputs=0 signal=0 [1170087ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104871 #0 [1170106ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20002540) #0 [1170111ms] <- socketpair$unix=0x0 errno=14 cover=8172 enabling collider #0 [1170114ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20002540) #0 [1170115ms] <- socketpair$unix=0x0 errno=14 cover=2948 2021/11/11 13:06:43 result hanged=false: 13:06:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r0) [1170165ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104873 #0 [1170190ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1170191ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6358 #0 [1170192ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x20000680, 0x4) syz_genetlink_get_family_id(NLBL_MGMT, 4) #0 [1170194ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0x14 errno=14 cover=8704 enabling collider #0 [1170195ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1170196ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5658 #0 [1170196ms] -> syz_genetlink_get_family_id$netlbl_mgmt(0x20000680, 0x4) syz_genetlink_get_family_id(NLBL_MGMT, 4) netlink_send_ext: short netlink write: -1/36 errno=9 netlink: failed to get family id for NLBL_MGMT: Bad file descriptor syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [1170196ms] <- syz_genetlink_get_family_id$netlbl_mgmt=0xffffffffffffffff errno=9 cover=1123 13:06:43 executing program 0: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x1d012, r0, 0x0) r1 = eventfd2(0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 2021/11/11 13:06:43 result hanged=false: [1170240ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104875 #0 [1170262ms] -> memfd_create(0x20000340, 0x0) #0 [1170262ms] <- memfd_create=0x3 errno=14 cover=1109 #0 [1170264ms] -> mmap(0x20000000, 0x2000, 0x0, 0x1d012, 0x3, 0x0) #0 [1170266ms] <- mmap=0x20000000 errno=14 cover=1704 #0 [1170271ms] -> eventfd2(0x0, 0x0) #0 [1170271ms] <- eventfd2=0x4 errno=14 cover=630 SIGSEGV on 0x20000001, skipping SIGSEGV on 0x20000006, skipping SIGSEGV on 0x2000000a, skipping #0 [1170272ms] -> write$binfmt_script(0x4, 0x20000000, 0xb) #0 [1170272ms] <- write$binfmt_script=0xffffffffffffffff errno=14 cover=447 enabling collider SIGSEGV on 0x20000340, skipping #0 [1170273ms] -> memfd_create(0x20000340, 0x0) #0 [1170274ms] <- memfd_create=0xffffffffffffffff errno=14 cover=199 #0 [1170274ms] -> mmap(0x20000000, 0x2000, 0x0, 0x1d012, 0x3, 0x0) #0 [1170275ms] <- mmap=0xffffffffffffffff errno=9 cover=45 pthread_create failed (errno 11) 13:06:43 executing program 0: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x1d012, r0, 0x0) r1 = eventfd2(0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 2021/11/11 13:06:43 result hanged=false: 2021/11/11 13:06:43 #0: triaging type=7 2021/11/11 13:06:43 triaging input for call #3 write$binfmt_script (new signal=1) [1170351ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104977 #0 [1170369ms] -> memfd_create(0x20000340, 0x0) #0 [1170370ms] <- memfd_create=0x3 errno=14 cover=1134 #0 [1170372ms] -> mmap(0x20000000, 0x2000, 0x0, 0x1d012, 0x3, 0x0) #0 [1170372ms] <- mmap=0x20000000 errno=14 cover=1798 #0 [1170373ms] -> eventfd2(0x0, 0x0) #0 [1170373ms] <- eventfd2=0x4 errno=14 cover=565 SIGSEGV on 0x20000001, skipping SIGSEGV on 0x20000006, skipping SIGSEGV on 0x2000000a, skipping #0 [1170373ms] -> write$binfmt_script(0x4, 0x20000000, 0xb) #0 [1170373ms] <- write$binfmt_script=0xffffffffffffffff errno=14 cover=447 2021/11/11 13:06:43 result hanged=false: 13:06:43 executing program 0: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x1d012, r0, 0x0) r1 = eventfd2(0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb) [1170410ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104979 #0 [1170429ms] -> memfd_create(0x20000340, 0x0) #0 [1170433ms] <- memfd_create=0x3 errno=14 cover=1131 #0 [1170436ms] -> mmap(0x20000000, 0x2000, 0x0, 0x1d012, 0x3, 0x0) #0 [1170436ms] <- mmap=0x20000000 errno=14 cover=1536 #0 [1170436ms] -> eventfd2(0x0, 0x0) #0 [1170437ms] <- eventfd2=0x4 errno=14 cover=543 SIGSEGV on 0x20000001, skipping SIGSEGV on 0x20000006, skipping SIGSEGV on 0x2000000a, skipping #0 [1170438ms] -> write$binfmt_script(0x4, 0x20000000, 0xb) #0 [1170438ms] <- write$binfmt_script=0xffffffffffffffff errno=14 cover=447 2021/11/11 13:06:43 result hanged=false: 13:06:43 executing program 0: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x1d012, r0, 0x0) r1 = eventfd2(0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb) [1170481ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104981 #0 [1170500ms] -> memfd_create(0x20000340, 0x0) #0 [1170500ms] <- memfd_create=0x3 errno=14 cover=1166 #0 [1170501ms] -> mmap(0x20000000, 0x2000, 0x0, 0x1d012, 0x3, 0x0) #0 [1170502ms] <- mmap=0x20000000 errno=14 cover=1936 #0 [1170502ms] -> eventfd2(0x0, 0x0) #0 [1170503ms] <- eventfd2=0x4 errno=14 cover=619 SIGSEGV on 0x20000001, skipping SIGSEGV on 0x20000006, skipping SIGSEGV on 0x2000000a, skipping #0 [1170504ms] -> write$binfmt_script(0x4, 0x20000000, 0xb) #0 [1170504ms] <- write$binfmt_script=0xffffffffffffffff errno=14 cover=447 2021/11/11 13:06:44 result hanged=false: 2021/11/11 13:06:44 added new input for call #3 write$binfmt_script to corpus: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x1d012, r0, 0x0) r1 = eventfd2(0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 13:06:44 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x11, 0x3, 0x401, &(0x7f0000003980)) [1170548ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104983 #0 [1170569ms] -> openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [1170569ms] <- openat$tun=0xffffffffffffffff errno=14 cover=615 #0 [1170569ms] -> socketpair(0x11, 0x3, 0x401, 0x20003980) #0 [1170585ms] <- socketpair=0xffffffffffffffff errno=95 cover=5725 enabling collider #0 [1170586ms] -> openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [1170586ms] <- openat$tun=0xffffffffffffffff errno=14 cover=617 #0 [1170586ms] -> socketpair(0x11, 0x3, 0x401, 13:06:44 executing program 0: pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, 0x0) 2021/11/11 13:06:44 result hanged=false: [1170634ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104985 #0 [1170653ms] -> pipe2(0x20000380, 0x0) #0 [1170654ms] <- pipe2=0x0 errno=14 cover=1861 #0 [1170655ms] -> ioctl$SG_EMULATED_HOST(0x4, 0x2203, 0x0) #0 [1170655ms] <- ioctl$SG_EMULATED_HOST=0xffffffffffffffff errno=25 cover=100 enabling collider #0 [1170656ms] -> pipe2(0x20000380, 0x0) #0 [1170656ms] <- pipe2=0x0 errno=14 cover=1185 13:06:44 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000c00), 0xffffffffffffffff) 2021/11/11 13:06:44 result hanged=false: [1170697ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104987 #0 [1170711ms] -> syz_genetlink_get_family_id$batadv(0x200006c0, 0xffffffffffffffff) syz_genetlink_get_family_id(batadv, -1) netlink: failed to get family id for batadv: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [1170728ms] <- syz_genetlink_get_family_id$batadv=0xffffffffffffffff errno=2 cover=9579 #0 [1170730ms] -> syz_genetlink_get_family_id$l2tp(0x20000c00, 0xffffffffffffffff) syz_genetlink_get_family_id(l2tp, -1) netlink: failed to get family id for l2tp: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [1170742ms] <- syz_genetlink_get_family_id$l2tp=0xffffffffffffffff errno=2 cover=8034 enabling collider #0 [1170742ms] -> syz_genetlink_get_family_id$batadv(0x200006c0, 0xffffffffffffffff) syz_genetlink_get_family_id(batadv, -1) netlink: failed to get family id for batadv: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [1170756ms] <- syz_genetlink_get_family_id$batadv=0xffffffffffffffff errno=2 cover=7900 2021/11/11 13:06:44 result hanged=false: 13:06:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) [1170796ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 104989 #0 [1170812ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1170813ms] <- socket$nl_generic=0x3 errno=14 cover=1401 #0 [1170813ms] -> sendmsg$NL80211_CMD_JOIN_IBSS(0x3, 0x20000440, 0x0) #0 [1170813ms] <- sendmsg$NL80211_CMD_JOIN_IBSS=0x0 errno=14 cover=956 #0 [1170813ms] -> syz_genetlink_get_family_id$nl80211(0x20000800, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [1170814ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11970 enabling collider #0 [1170814ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1170814ms] <- socket$nl_generic=0x3 errno=14 cover=1425 #0 [1170815ms] -> sendmsg$NL80211_CMD_JOIN_IBSS(0x3, 0x20000440, 0x0) #0 [1170815ms] <- sendmsg$NL80211_CMD_JOIN_IBSS=0x0 errno=14 cover=995 pthread_create failed (errno 11) 2021/11/11 13:06:44 result hanged=false: 13:06:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x0) [1170890ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105091 #0 [1170910ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1170911ms] <- perf_event_open=0x3 errno=14 cover=8083 #0 [1170911ms] -> poll(0x0, 0x0, 0x0) #0 [1170911ms] <- poll=0x0 errno=14 cover=67 enabling collider #0 [1170920ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1170921ms] <- perf_event_open=0x3 errno=14 cover=12331 #0 [1170922ms] -> poll(0x0, 0x0, 0x0) #0 [1170922ms] <- poll=0x0 errno=14 cover=67 13:06:44 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='fd/4\x00') 2021/11/11 13:06:44 result hanged=false: 2021/11/11 13:06:44 poll: candidates=8 inputs=0 signal=0 [1170976ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105093 #0 [1170997ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000640) #0 [1170997ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=7013 enabling collider #0 [1170998ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000640) #0 [1170998ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=5500 13:06:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000004700)=0x6798, 0x4) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[], 0x4) 2021/11/11 13:06:44 result hanged=false: [1171039ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105095 #0 [1171061ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1171061ms] <- socket$inet6_tcp=0x3 errno=14 cover=1734 #0 [1171062ms] -> setsockopt$inet6_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000140, 0x4) #0 [1171062ms] <- setsockopt$inet6_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [1171063ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [1171063ms] <- connect$inet6=0x0 errno=14 cover=1716 #0 [1171066ms] -> setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0x3, 0x6, 0x14, 0x20000240, 0x4) #0 [1171066ms] <- setsockopt$inet6_tcp_TCP_REPAIR_QUEUE=0x0 errno=14 cover=142 #0 [1171067ms] -> setsockopt$SO_TIMESTAMPING(0x3, 0x1, 0x41, 0x20004700, 0x4) #0 [1171067ms] <- setsockopt$SO_TIMESTAMPING=0x0 errno=14 cover=258 #0 [1171067ms] -> write$binfmt_misc(0x3, 0x20000340, 0x4) #0 [1171067ms] <- write$binfmt_misc=0x4 errno=14 cover=919 enabling collider #0 [1171069ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1171070ms] <- socket$inet6_tcp=0x3 errno=14 cover=1790 #0 [1171074ms] -> setsockopt$inet6_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000140, 0x4) #0 [1171074ms] <- setsockopt$inet6_tcp_TCP_REPAIR=0x0 errno=14 cover=185 pthread_create failed (errno 11) 13:06:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000004700)=0x6798, 0x4) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[], 0x4) 2021/11/11 13:06:44 result hanged=false: 2021/11/11 13:06:44 #0: triaging type=7 2021/11/11 13:06:44 triaging input for call #5 write$binfmt_misc (new signal=4) [1171146ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105197 #0 [1171165ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1171165ms] <- socket$inet6_tcp=0x3 errno=14 cover=1756 #0 [1171167ms] -> setsockopt$inet6_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000140, 0x4) #0 [1171167ms] <- setsockopt$inet6_tcp_TCP_REPAIR=0x0 errno=14 cover=199 #0 [1171168ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [1171169ms] <- connect$inet6=0x0 errno=14 cover=1739 #0 [1171171ms] -> setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0x3, 0x6, 0x14, 0x20000240, 0x4) #0 [1171171ms] <- setsockopt$inet6_tcp_TCP_REPAIR_QUEUE=0x0 errno=14 cover=142 #0 [1171172ms] -> setsockopt$SO_TIMESTAMPING(0x3, 0x1, 0x41, 0x20004700, 0x4) #0 [1171173ms] <- setsockopt$SO_TIMESTAMPING=0x0 errno=14 cover=247 #0 [1171174ms] -> write$binfmt_misc(0x3, 0x20000340, 0x4) #0 [1171174ms] <- write$binfmt_misc=0x4 errno=14 cover=928 13:06:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000004700)=0x6798, 0x4) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[], 0x4) 2021/11/11 13:06:44 result hanged=false: [1171218ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105199 #0 [1171237ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1171238ms] <- socket$inet6_tcp=0x3 errno=14 cover=1734 #0 [1171241ms] -> setsockopt$inet6_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000140, 0x4) #0 [1171241ms] <- setsockopt$inet6_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [1171243ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [1171243ms] <- connect$inet6=0x0 errno=14 cover=1728 #0 [1171244ms] -> setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0x3, 0x6, 0x14, 0x20000240, 0x4) #0 [1171244ms] <- setsockopt$inet6_tcp_TCP_REPAIR_QUEUE=0x0 errno=14 cover=142 #0 [1171245ms] -> setsockopt$SO_TIMESTAMPING(0x3, 0x1, 0x41, 0x20004700, 0x4) #0 [1171245ms] <- setsockopt$SO_TIMESTAMPING=0x0 errno=14 cover=247 #0 [1171246ms] -> write$binfmt_misc(0x3, 0x20000340, 0x4) #0 [1171247ms] <- write$binfmt_misc=0x4 errno=14 cover=913 13:06:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000004700)=0x6798, 0x4) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[], 0x4) 2021/11/11 13:06:44 result hanged=false: [1171290ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105201 #0 [1171309ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1171310ms] <- socket$inet6_tcp=0x3 errno=14 cover=1759 #0 [1171312ms] -> setsockopt$inet6_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000140, 0x4) #0 [1171312ms] <- setsockopt$inet6_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [1171314ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [1171314ms] <- connect$inet6=0x0 errno=14 cover=1728 #0 [1171315ms] -> setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0x3, 0x6, 0x14, 0x20000240, 0x4) #0 [1171315ms] <- setsockopt$inet6_tcp_TCP_REPAIR_QUEUE=0x0 errno=14 cover=142 #0 [1171316ms] -> setsockopt$SO_TIMESTAMPING(0x3, 0x1, 0x41, 0x20004700, 0x4) #0 [1171316ms] <- setsockopt$SO_TIMESTAMPING=0x0 errno=14 cover=271 #0 [1171317ms] -> write$binfmt_misc(0x3, 0x20000340, 0x4) #0 [1171318ms] <- write$binfmt_misc=0x4 errno=14 cover=910 2021/11/11 13:06:44 result hanged=false: 2021/11/11 13:06:44 added new input for call #5 write$binfmt_misc to corpus: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000004700)=0x6798, 0x4) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[], 0x4) 13:06:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000004700)=0x6798, 0x4) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[], 0x4) 2021/11/11 13:06:44 #0: triaging type=7 2021/11/11 13:06:44 triaging input for call #4 setsockopt$SO_TIMESTAMPING (new signal=2) [1171363ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105203 #0 [1171382ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1171382ms] <- socket$inet6_tcp=0x3 errno=14 cover=1745 #0 [1171383ms] -> setsockopt$inet6_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000140, 0x4) #0 [1171383ms] <- setsockopt$inet6_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [1171383ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [1171384ms] <- connect$inet6=0x0 errno=14 cover=1716 #0 [1171384ms] -> setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0x3, 0x6, 0x14, 0x20000240, 0x4) #0 [1171384ms] <- setsockopt$inet6_tcp_TCP_REPAIR_QUEUE=0x0 errno=14 cover=142 #0 [1171386ms] -> setsockopt$SO_TIMESTAMPING(0x3, 0x1, 0x41, 0x20004700, 0x4) #0 [1171387ms] <- setsockopt$SO_TIMESTAMPING=0x0 errno=14 cover=273 #0 [1171387ms] -> write$binfmt_misc(0x3, 0x20000340, 0x4) #0 [1171388ms] <- write$binfmt_misc=0x4 errno=14 cover=3281 13:06:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000004700)=0x6798, 0x4) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[], 0x4) 2021/11/11 13:06:44 result hanged=false: [1171437ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105205 #0 [1171456ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1171456ms] <- socket$inet6_tcp=0x3 errno=14 cover=1773 #0 [1171457ms] -> setsockopt$inet6_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000140, 0x4) #0 [1171457ms] <- setsockopt$inet6_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [1171458ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [1171458ms] <- connect$inet6=0x0 errno=14 cover=1727 #0 [1171459ms] -> setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0x3, 0x6, 0x14, 0x20000240, 0x4) #0 [1171459ms] <- setsockopt$inet6_tcp_TCP_REPAIR_QUEUE=0x0 errno=14 cover=142 #0 [1171459ms] -> setsockopt$SO_TIMESTAMPING(0x3, 0x1, 0x41, 0x20004700, 0x4) #0 [1171459ms] <- setsockopt$SO_TIMESTAMPING=0x0 errno=14 cover=244 #0 [1171460ms] -> write$binfmt_misc(0x3, 0x20000340, 0x4) #0 [1171460ms] <- write$binfmt_misc=0x4 errno=14 cover=864 13:06:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000004700)=0x6798, 0x4) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[], 0x4) 2021/11/11 13:06:45 result hanged=false: [1171504ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105207 #0 [1171525ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1171525ms] <- socket$inet6_tcp=0x3 errno=14 cover=1726 #0 [1171527ms] -> setsockopt$inet6_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000140, 0x4) #0 [1171527ms] <- setsockopt$inet6_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [1171529ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [1171529ms] <- connect$inet6=0x0 errno=14 cover=1716 #0 [1171531ms] -> setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0x3, 0x6, 0x14, 0x20000240, 0x4) #0 [1171531ms] <- setsockopt$inet6_tcp_TCP_REPAIR_QUEUE=0x0 errno=14 cover=142 #0 [1171532ms] -> setsockopt$SO_TIMESTAMPING(0x3, 0x1, 0x41, 0x20004700, 0x4) #0 [1171532ms] <- setsockopt$SO_TIMESTAMPING=0x0 errno=14 cover=257 #0 [1171533ms] -> write$binfmt_misc(0x3, 0x20000340, 0x4) #0 [1171534ms] <- write$binfmt_misc=0x4 errno=14 cover=913 2021/11/11 13:06:45 result hanged=false: 2021/11/11 13:06:45 added new input for call #4 setsockopt$SO_TIMESTAMPING to corpus: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000004700)=0x6798, 0x4) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[], 0x4) 13:06:45 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x40044591, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) [1171582ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105209 #0 [1171605ms] -> syz_open_dev$evdev(0x20000000, 0x0, 0x0) #0 [1171606ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1352 #0 [1171612ms] -> ioctl$EVIOCGMTSLOTS(0x3, 0x40044591, 0x0) #0 [1171612ms] <- ioctl$EVIOCGMTSLOTS=0x0 errno=14 cover=1965 #0 [1171612ms] -> ioctl$EVIOCSCLOCKID(0x3, 0x400445a0, 0x0) #0 [1171612ms] <- ioctl$EVIOCSCLOCKID=0xffffffffffffffff errno=19 cover=116 enabling collider #0 [1171627ms] -> syz_open_dev$evdev(0x20000000, 0x0, 0x0) #0 [1171628ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1351 #0 [1171628ms] -> ioctl$EVIOCGMTSLOTS(0x3, 0x40044591, 0x0) #0 [1171628ms] <- ioctl$EVIOCGMTSLOTS=0x0 errno=14 cover=139 pthread_create failed (errno 11) 13:06:45 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x40044591, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) 2021/11/11 13:06:45 result hanged=false: 2021/11/11 13:06:45 #0: triaging type=7 2021/11/11 13:06:45 triaging input for call #2 ioctl$EVIOCSCLOCKID (new signal=1) [1171727ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105311 #0 [1171750ms] -> syz_open_dev$evdev(0x20000000, 0x0, 0x0) #0 [1171750ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1276 #0 [1171751ms] -> ioctl$EVIOCGMTSLOTS(0x3, 0x40044591, 0x0) #0 [1171751ms] <- ioctl$EVIOCGMTSLOTS=0x0 errno=14 cover=139 #0 [1171751ms] -> ioctl$EVIOCSCLOCKID(0x3, 0x400445a0, 0x0) #0 [1171751ms] <- ioctl$EVIOCSCLOCKID=0xffffffffffffffff errno=19 cover=116 13:06:45 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x40044591, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) 2021/11/11 13:06:45 result hanged=false: [1171805ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105313 #0 [1171828ms] -> syz_open_dev$evdev(0x20000000, 0x0, 0x0) #0 [1171828ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1309 #0 [1171828ms] -> ioctl$EVIOCGMTSLOTS(0x3, 0x40044591, 0x0) #0 [1171828ms] <- ioctl$EVIOCGMTSLOTS=0x0 errno=14 cover=139 #0 [1171828ms] -> ioctl$EVIOCSCLOCKID(0x3, 0x400445a0, 0x0) #0 [1171828ms] <- ioctl$EVIOCSCLOCKID=0xffffffffffffffff errno=19 cover=116 13:06:45 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x40044591, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) 2021/11/11 13:06:45 result hanged=false: [1171884ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105315 #0 [1171904ms] -> syz_open_dev$evdev(0x20000000, 0x0, 0x0) #0 [1171904ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1506 #0 [1171906ms] -> ioctl$EVIOCGMTSLOTS(0x3, 0x40044591, 0x0) #0 [1171906ms] <- ioctl$EVIOCGMTSLOTS=0x0 errno=14 cover=139 #0 [1171907ms] -> ioctl$EVIOCSCLOCKID(0x3, 0x400445a0, 0x0) #0 [1171907ms] <- ioctl$EVIOCSCLOCKID=0xffffffffffffffff errno=19 cover=116 2021/11/11 13:06:45 result hanged=false: 2021/11/11 13:06:45 added new input for call #2 ioctl$EVIOCSCLOCKID to corpus: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x40044591, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) 13:06:45 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x40044591, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) 2021/11/11 13:06:45 #0: triaging type=7 2021/11/11 13:06:45 triaging input for call #1 ioctl$EVIOCGMTSLOTS (new signal=9) [1171963ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105317 #0 [1171982ms] -> syz_open_dev$evdev(0x20000000, 0x0, 0x0) #0 [1171982ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1342 #0 [1171983ms] -> ioctl$EVIOCGMTSLOTS(0x3, 0x40044591, 0x0) #0 [1171983ms] <- ioctl$EVIOCGMTSLOTS=0x0 errno=14 cover=139 #0 [1171983ms] -> ioctl$EVIOCSCLOCKID(0x3, 0x400445a0, 0x0) #0 [1171983ms] <- ioctl$EVIOCSCLOCKID=0xffffffffffffffff errno=19 cover=116 13:06:45 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x40044591, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) 2021/11/11 13:06:45 result hanged=false: [1172038ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105319 #0 [1172057ms] -> syz_open_dev$evdev(0x20000000, 0x0, 0x0) #0 [1172058ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1298 #0 [1172059ms] -> ioctl$EVIOCGMTSLOTS(0x3, 0x40044591, 0x0) #0 [1172059ms] <- ioctl$EVIOCGMTSLOTS=0x0 errno=14 cover=139 #0 [1172059ms] -> ioctl$EVIOCSCLOCKID(0x3, 0x400445a0, 0x0) #0 [1172059ms] <- ioctl$EVIOCSCLOCKID=0xffffffffffffffff errno=19 cover=116 13:06:45 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x40044591, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) 2021/11/11 13:06:45 result hanged=false: [1172120ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105321 #0 [1172139ms] -> syz_open_dev$evdev(0x20000000, 0x0, 0x0) #0 [1172139ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1297 #0 [1172140ms] -> ioctl$EVIOCGMTSLOTS(0x3, 0x40044591, 0x0) #0 [1172140ms] <- ioctl$EVIOCGMTSLOTS=0x0 errno=14 cover=139 #0 [1172140ms] -> ioctl$EVIOCSCLOCKID(0x3, 0x400445a0, 0x0) #0 [1172140ms] <- ioctl$EVIOCSCLOCKID=0xffffffffffffffff errno=19 cover=116 2021/11/11 13:06:45 result hanged=false: 2021/11/11 13:06:45 added new input for call #1 ioctl$EVIOCGMTSLOTS to corpus: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x40044591, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) 13:06:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) [1172195ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105323 #0 [1172214ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [1172215ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=6198 #0 [1172218ms] -> bind$bt_hci(0x4, 0x20000000, 0x6) #0 [1172218ms] <- bind$bt_hci=0x0 errno=14 cover=841 #0 [1172220ms] -> stat(0x20001cc0, 0x20001c00) #0 [1172220ms] <- stat=0x0 errno=14 cover=542 #0 [1172221ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [1172221ms] <- setresuid=0x0 errno=14 cover=523 #0 [1172221ms] -> write$bt_hci(0x4, 0x20000080, 0x6) #0 [1172221ms] <- write$bt_hci=0xffffffffffffffff errno=100 cover=210 enabling collider #0 [1172222ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [1172222ms] <- syz_init_net_socket$bt_hci=0xffffffffffffffff errno=1 cover=3162 #0 [1172223ms] -> bind$bt_hci(0x4, 0x20000000, 0x6) #0 [1172223ms] <- bind$bt_hci=0xffffffffffffffff errno=9 cover=49 pthread_create failed (errno 11) 2021/11/11 13:06:45 result hanged=false: 2021/11/11 13:06:45 #0: triaging type=7 2021/11/11 13:06:45 triaging input for call #4 write$bt_hci (new signal=6) 13:06:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) [1172304ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105425 #0 [1172325ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [1172326ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=6215 #0 [1172328ms] -> bind$bt_hci(0x4, 0x20000000, 0x6) #0 [1172328ms] <- bind$bt_hci=0x0 errno=14 cover=819 #0 [1172329ms] -> stat(0x20001cc0, 0x20001c00) #0 [1172329ms] <- stat=0x0 errno=14 cover=543 #0 [1172330ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [1172330ms] <- setresuid=0x0 errno=14 cover=502 #0 [1172331ms] -> write$bt_hci(0x4, 0x20000080, 0x6) #0 [1172331ms] <- write$bt_hci=0xffffffffffffffff errno=100 cover=210 2021/11/11 13:06:45 result hanged=false: 13:06:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) [1172375ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105427 #0 [1172394ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [1172395ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=6234 #0 [1172396ms] -> bind$bt_hci(0x4, 0x20000000, 0x6) #0 [1172396ms] <- bind$bt_hci=0x0 errno=14 cover=823 #0 [1172398ms] -> stat(0x20001cc0, 0x20001c00) #0 [1172399ms] <- stat=0x0 errno=14 cover=5436 #0 [1172402ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [1172402ms] <- setresuid=0x0 errno=14 cover=469 #0 [1172403ms] -> write$bt_hci(0x4, 0x20000080, 0x6) #0 [1172403ms] <- write$bt_hci=0xffffffffffffffff errno=100 cover=210 2021/11/11 13:06:45 result hanged=false: 13:06:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) [1172449ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105429 #0 [1172470ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [1172471ms] <- syz_init_net_socket$bt_hci=0x4 errno=14 cover=6202 #0 [1172473ms] -> bind$bt_hci(0x4, 0x20000000, 0x6) #0 [1172473ms] <- bind$bt_hci=0x0 errno=14 cover=861 #0 [1172475ms] -> stat(0x20001cc0, 0x20001c00) #0 [1172475ms] <- stat=0x0 errno=14 cover=543 #0 [1172477ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [1172477ms] <- setresuid=0x0 errno=14 cover=469 #0 [1172478ms] -> write$bt_hci(0x4, 0x20000080, 0x6) #0 [1172478ms] <- write$bt_hci=0xffffffffffffffff errno=100 cover=210 2021/11/11 13:06:46 result hanged=false: 2021/11/11 13:06:46 added new input for call #4 write$bt_hci to corpus: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 13:06:46 executing program 0: mlockall(0x0) mlockall(0x90cb46420b38d0a6) mlockall(0x5) [1172527ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105431 #0 [1172552ms] -> mlockall(0x0) #0 [1172552ms] <- mlockall=0xffffffffffffffff errno=22 cover=35 #0 [1172554ms] -> mlockall(0x90cb46420b38d0a6) #0 [1172554ms] <- mlockall=0xffffffffffffffff errno=22 cover=36 #0 [1172554ms] -> mlockall(0x5) #0 [1172580ms] <- mlockall=0x0 errno=14 cover=262143 enabling collider #0 [1172581ms] -> mlockall(0x0) #0 [1172581ms] <- mlockall=0xffffffffffffffff errno=22 cover=35 #0 [1172581ms] -> mlockall(0x90cb46420b38d0a6) #0 [1172581ms] <- mlockall=0xffffffffffffffff errno=22 cover=36 pthread_create failed (errno 11) 2021/11/11 13:06:46 result hanged=false: 13:06:46 executing program 0: mlockall(0x0) mlockall(0x90cb46420b38d0a6) mlockall(0x5) 2021/11/11 13:06:46 #0: triaging type=7 2021/11/11 13:06:46 triaging input for call #2 mlockall (new signal=15) [1172668ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105533 #0 [1172688ms] -> mlockall(0x0) #0 [1172688ms] <- mlockall=0xffffffffffffffff errno=22 cover=35 #0 [1172688ms] -> mlockall(0x90cb46420b38d0a6) #0 [1172688ms] <- mlockall=0xffffffffffffffff errno=22 cover=36 #0 [1172688ms] -> mlockall(0x5) #0 [1172722ms] <- mlockall=0x0 errno=14 cover=262143 13:06:46 executing program 0: mlockall(0x0) mlockall(0x90cb46420b38d0a6) mlockall(0x5) 2021/11/11 13:06:46 result hanged=false: [1172797ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105535 #0 [1172816ms] -> mlockall(0x0) #0 [1172816ms] <- mlockall=0xffffffffffffffff errno=22 cover=35 #0 [1172817ms] -> mlockall(0x90cb46420b38d0a6) #0 [1172817ms] <- mlockall=0xffffffffffffffff errno=22 cover=36 #0 [1172817ms] -> mlockall(0x5) #0 [1172843ms] <- mlockall=0x0 errno=14 cover=262143 2021/11/11 13:06:46 result hanged=false: 13:06:46 executing program 0: mlockall(0x0) mlockall(0x90cb46420b38d0a6) mlockall(0x5) [1172916ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105537 #0 [1172936ms] -> mlockall(0x0) #0 [1172936ms] <- mlockall=0xffffffffffffffff errno=22 cover=35 #0 [1172936ms] -> mlockall(0x90cb46420b38d0a6) #0 [1172936ms] <- mlockall=0xffffffffffffffff errno=22 cover=36 #0 [1172936ms] -> mlockall(0x5) #0 [1172971ms] <- mlockall=0x0 errno=14 cover=262143 2021/11/11 13:06:46 result hanged=false: 2021/11/11 13:06:46 added new input for call #2 mlockall to corpus: mlockall(0x0) mlockall(0x90cb46420b38d0a6) mlockall(0x5) 2021/11/11 13:06:46 #0: triaging type=7 2021/11/11 13:06:46 triaging input for call #1 mlockall (new signal=1) 13:06:46 executing program 0: mlockall(0x0) mlockall(0x90cb46420b38d0a6) mlockall(0x5) [1173043ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105539 #0 [1173065ms] -> mlockall(0x0) #0 [1173065ms] <- mlockall=0xffffffffffffffff errno=22 cover=35 #0 [1173066ms] -> mlockall(0x90cb46420b38d0a6) #0 [1173066ms] <- mlockall=0xffffffffffffffff errno=22 cover=36 #0 [1173066ms] -> mlockall(0x5) #0 [1173102ms] <- mlockall=0x0 errno=14 cover=262143 13:06:46 executing program 0: mlockall(0x0) mlockall(0x90cb46420b38d0a6) mlockall(0x5) 2021/11/11 13:06:46 result hanged=false: [1173175ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105541 #0 [1173195ms] -> mlockall(0x0) #0 [1173196ms] <- mlockall=0xffffffffffffffff errno=22 cover=35 #0 [1173198ms] -> mlockall(0x90cb46420b38d0a6) #0 [1173198ms] <- mlockall=0xffffffffffffffff errno=22 cover=36 #0 [1173198ms] -> mlockall(0x5) #0 [1173232ms] <- mlockall=0x0 errno=14 cover=262143 13:06:46 executing program 0: mlockall(0x0) mlockall(0x90cb46420b38d0a6) mlockall(0x5) 2021/11/11 13:06:46 result hanged=false: [1173300ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105543 #0 [1173319ms] -> mlockall(0x0) #0 [1173319ms] <- mlockall=0xffffffffffffffff errno=22 cover=35 #0 [1173322ms] -> mlockall(0x90cb46420b38d0a6) #0 [1173322ms] <- mlockall=0xffffffffffffffff errno=22 cover=36 #0 [1173322ms] -> mlockall(0x5) #0 [1173352ms] <- mlockall=0x0 errno=14 cover=262143 2021/11/11 13:06:46 result hanged=false: 2021/11/11 13:06:46 added new input for call #1 mlockall to corpus: mlockall(0x0) mlockall(0x90cb46420b38d0a6) mlockall(0x5) 13:06:46 executing program 0: mlockall(0x0) mlockall(0x90cb46420b38d0a6) mlockall(0x5) 2021/11/11 13:06:46 #0: triaging type=7 2021/11/11 13:06:46 triaging input for call #0 mlockall (new signal=2) [1173425ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105545 #0 [1173447ms] -> mlockall(0x0) #0 [1173448ms] <- mlockall=0xffffffffffffffff errno=22 cover=35 #0 [1173448ms] -> mlockall(0x90cb46420b38d0a6) #0 [1173448ms] <- mlockall=0xffffffffffffffff errno=22 cover=36 #0 [1173449ms] -> mlockall(0x5) #0 [1173489ms] <- mlockall=0x0 errno=14 cover=262143 13:06:47 executing program 0: mlockall(0x0) mlockall(0x90cb46420b38d0a6) mlockall(0x5) 2021/11/11 13:06:47 result hanged=false: [1173559ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105547 #0 [1173580ms] -> mlockall(0x0) #0 [1173580ms] <- mlockall=0xffffffffffffffff errno=22 cover=35 #0 [1173581ms] -> mlockall(0x90cb46420b38d0a6) #0 [1173581ms] <- mlockall=0xffffffffffffffff errno=22 cover=36 #0 [1173581ms] -> mlockall(0x5) #0 [1173609ms] <- mlockall=0x0 errno=14 cover=262143 13:06:47 executing program 0: mlockall(0x0) mlockall(0x90cb46420b38d0a6) mlockall(0x5) 2021/11/11 13:06:47 result hanged=false: [1173682ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105549 #0 [1173704ms] -> mlockall(0x0) #0 [1173704ms] <- mlockall=0xffffffffffffffff errno=22 cover=35 #0 [1173704ms] -> mlockall(0x90cb46420b38d0a6) #0 [1173704ms] <- mlockall=0xffffffffffffffff errno=22 cover=36 #0 [1173705ms] -> mlockall(0x5) #0 [1173748ms] <- mlockall=0x0 errno=14 cover=262143 2021/11/11 13:06:47 result hanged=false: 2021/11/11 13:06:47 added new input for call #0 mlockall to corpus: mlockall(0x0) mlockall(0x90cb46420b38d0a6) mlockall(0x5) 13:06:47 executing program 0: syz_open_dev$sg(&(0x7f00000004c0), 0x10000000000008e3, 0xc81) [1173823ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105551 #0 [1173843ms] -> syz_open_dev$sg(0x200004c0, 0x10000000000008e3, 0xc81) #0 [1173846ms] <- syz_open_dev$sg=0x3 errno=14 cover=1367 enabling collider #0 [1173847ms] -> syz_open_dev$sg(0x200004c0, 0x10000000000008e3, 0xc81) #0 [1173847ms] <- syz_open_dev$sg=0x3 errno=14 cover=1344 2021/11/11 13:06:47 result hanged=false: 2021/11/11 13:06:47 #0: triaging type=7 13:06:47 executing program 0: syz_open_dev$sg(&(0x7f00000004c0), 0x10000000000008e3, 0xc81) 2021/11/11 13:06:47 triaging input for call #0 syz_open_dev$sg (new signal=4) [1173892ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105553 #0 [1173911ms] -> syz_open_dev$sg(0x200004c0, 0x10000000000008e3, 0xc81) #0 [1173912ms] <- syz_open_dev$sg=0x3 errno=14 cover=1388 13:06:47 executing program 0: syz_open_dev$sg(&(0x7f00000004c0), 0x10000000000008e3, 0xc81) 2021/11/11 13:06:47 result hanged=false: [1173957ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105555 #0 [1173977ms] -> syz_open_dev$sg(0x200004c0, 0x10000000000008e3, 0xc81) #0 [1173978ms] <- syz_open_dev$sg=0x3 errno=14 cover=1368 13:06:47 executing program 0: syz_open_dev$sg(&(0x7f00000004c0), 0x10000000000008e3, 0xc81) 2021/11/11 13:06:47 result hanged=false: [1174027ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105557 #0 [1174048ms] -> syz_open_dev$sg(0x200004c0, 0x10000000000008e3, 0xc81) #0 [1174048ms] <- syz_open_dev$sg=0x3 errno=14 cover=1379 2021/11/11 13:06:47 result hanged=false: 2021/11/11 13:06:47 added new input for call #0 syz_open_dev$sg to corpus: syz_open_dev$sg(&(0x7f00000004c0), 0x10000000000008e3, 0xc81) 13:06:47 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, &(0x7f0000002440), &(0x7f00000024c0)=0x6e) [1174097ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105559 #0 [1174122ms] -> socketpair$unix(0x1, 0x3, 0x0, 0x20002400) #0 [1174123ms] <- socketpair$unix=0x0 errno=14 cover=3642 #0 [1174124ms] -> getpeername$unix(0x4, 0x20002440, 0x200024c0) #0 [1174124ms] <- getpeername$unix=0x0 errno=14 cover=121 enabling collider #0 [1174124ms] -> socketpair$unix(0x1, 0x3, 0x0, 0x20002400) #0 [1174125ms] <- socketpair$unix=0x0 errno=14 cover=2941 #0 [1174125ms] -> getpeername$unix(0x4, 0x20002440, 0x200024c0) #0 [1174126ms] <- getpeername$unix=0xffffffffffffffff errno=9 cover=50 13:06:47 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, &(0x7f0000002440), &(0x7f00000024c0)=0x6e) 2021/11/11 13:06:47 result hanged=false: 2021/11/11 13:06:47 #0: triaging type=7 2021/11/11 13:06:47 triaging input for call #1 getpeername$unix (new signal=2) [1174169ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105561 #0 [1174189ms] -> socketpair$unix(0x1, 0x3, 0x0, 0x20002400) #0 [1174190ms] <- socketpair$unix=0x0 errno=14 cover=3641 #0 [1174192ms] -> getpeername$unix(0x4, 0x20002440, 0x200024c0) #0 [1174192ms] <- getpeername$unix=0x0 errno=14 cover=121 2021/11/11 13:06:47 result hanged=false: 13:06:47 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, &(0x7f0000002440), &(0x7f00000024c0)=0x6e) [1174238ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105563 #0 [1174257ms] -> socketpair$unix(0x1, 0x3, 0x0, 0x20002400) #0 [1174258ms] <- socketpair$unix=0x0 errno=14 cover=3713 #0 [1174260ms] -> getpeername$unix(0x4, 0x20002440, 0x200024c0) #0 [1174260ms] <- getpeername$unix=0x0 errno=14 cover=121 13:06:47 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, &(0x7f0000002440), &(0x7f00000024c0)=0x6e) 2021/11/11 13:06:47 result hanged=false: [1174305ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105565 #0 [1174325ms] -> socketpair$unix(0x1, 0x3, 0x0, 0x20002400) #0 [1174326ms] <- socketpair$unix=0x0 errno=14 cover=3612 #0 [1174327ms] -> getpeername$unix(0x4, 0x20002440, 0x200024c0) #0 [1174327ms] <- getpeername$unix=0x0 errno=14 cover=121 2021/11/11 13:06:47 result hanged=false: 2021/11/11 13:06:47 added new input for call #1 getpeername$unix to corpus: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, &(0x7f0000002440), &(0x7f00000024c0)=0x6e) 13:06:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) utime(&(0x7f00000003c0)='./file0\x00', 0x0) [1174378ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105567 #0 [1174404ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1174410ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13432 #0 [1174411ms] -> mount(0x0, 0x20000000, 0x20000140, 0x0, 0x0) #0 [1174412ms] <- mount=0x0 errno=14 cover=2136 #0 [1174412ms] -> utime(0x200003c0, 0x0) #0 [1174412ms] <- utime=0x0 errno=14 cover=770 enabling collider #0 [1174412ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1174413ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1369 #0 [1174413ms] -> mount(0x0, 0x20000000, 0x20000140, 0x0, 0x0) #0 [1174413ms] <- mount=0xffffffffffffffff errno=16 cover=2214 pthread_create failed (errno 11) 13:06:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) utime(&(0x7f00000003c0)='./file0\x00', 0x0) umount(./9005/file0) 2021/11/11 13:06:47 result hanged=false: 2021/11/11 13:06:47 #0: triaging type=7 2021/11/11 13:06:47 triaging input for call #2 utime (new signal=6) [1174496ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105669 #0 [1174517ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1174523ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13323 #0 [1174525ms] -> mount(0x0, 0x20000000, 0x20000140, 0x0, 0x0) #0 [1174525ms] <- mount=0x0 errno=14 cover=2146 #0 [1174526ms] -> utime(0x200003c0, 0x0) #0 [1174526ms] <- utime=0x0 errno=14 cover=824 umount(./9006/file0) 13:06:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) utime(&(0x7f00000003c0)='./file0\x00', 0x0) 2021/11/11 13:06:48 result hanged=false: [1174578ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105671 #0 [1174599ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1174603ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13250 #0 [1174605ms] -> mount(0x0, 0x20000000, 0x20000140, 0x0, 0x0) #0 [1174605ms] <- mount=0x0 errno=14 cover=2151 #0 [1174605ms] -> utime(0x200003c0, 0x0) #0 [1174605ms] <- utime=0x0 errno=14 cover=769 2021/11/11 13:06:48 result hanged=false: 13:06:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) utime(&(0x7f00000003c0)='./file0\x00', 0x0) umount(./9007/file0) [1174653ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105673 #0 [1174673ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1174681ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13573 #0 [1174683ms] -> mount(0x0, 0x20000000, 0x20000140, 0x0, 0x0) #0 [1174683ms] <- mount=0x0 errno=14 cover=2223 #0 [1174683ms] -> utime(0x200003c0, 0x0) #0 [1174684ms] <- utime=0x0 errno=14 cover=780 2021/11/11 13:06:48 result hanged=false: 2021/11/11 13:06:48 added new input for call #2 utime to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) utime(&(0x7f00000003c0)='./file0\x00', 0x0) umount(./9008/file0) 13:06:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x4c}}, 0x0) 2021/11/11 13:06:48 poll: candidates=8 inputs=0 signal=0 [1174735ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105675 #0 [1174756ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1174757ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6299 #0 [1174758ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000080, 0x4) syz_genetlink_get_family_id(NLBL_UNLBL, 4) #0 [1174760ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4680 #0 [1174765ms] -> sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0x4, 0x200001c0, 0x0) #0 [1174765ms] <- sendmsg$NLBL_UNLABEL_C_STATICREMOVE=0x4c errno=14 cover=1653 enabling collider #0 [1174765ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1174766ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5475 #0 [1174767ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000080, 0x4) syz_genetlink_get_family_id(NLBL_UNLBL, 4) #0 [1174767ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4198 pthread_create failed (errno 11) 13:06:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x4c}}, 0x0) 2021/11/11 13:06:48 result hanged=false: 2021/11/11 13:06:48 #0: triaging type=7 2021/11/11 13:06:48 triaging input for call #2 sendmsg$NLBL_UNLABEL_C_STATICREMOVE (new signal=1) [1174847ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105777 #0 [1174873ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1174873ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6394 #0 [1174875ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000080, 0x4) syz_genetlink_get_family_id(NLBL_UNLBL, 4) #0 [1174875ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4631 #0 [1174876ms] -> sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0x4, 0x200001c0, 0x0) #0 [1174876ms] <- sendmsg$NLBL_UNLABEL_C_STATICREMOVE=0x4c errno=14 cover=1643 13:06:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x4c}}, 0x0) 2021/11/11 13:06:48 result hanged=false: [1174921ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105779 #0 [1174944ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1174947ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6337 #0 [1174951ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000080, 0x4) syz_genetlink_get_family_id(NLBL_UNLBL, 4) #0 [1174952ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4669 #0 [1174953ms] -> sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0x4, 0x200001c0, 0x0) #0 [1174954ms] <- sendmsg$NLBL_UNLABEL_C_STATICREMOVE=0x4c errno=14 cover=1687 13:06:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x4c}}, 0x0) 2021/11/11 13:06:48 result hanged=false: [1174999ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105781 #0 [1175021ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1175022ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6332 #0 [1175024ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000080, 0x4) syz_genetlink_get_family_id(NLBL_UNLBL, 4) #0 [1175025ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4652 #0 [1175026ms] -> sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0x4, 0x200001c0, 0x0) #0 [1175026ms] <- sendmsg$NLBL_UNLABEL_C_STATICREMOVE=0x4c errno=14 cover=1665 2021/11/11 13:06:48 result hanged=false: 2021/11/11 13:06:48 added new input for call #2 sendmsg$NLBL_UNLABEL_C_STATICREMOVE to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x4c}}, 0x0) 13:06:48 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x1000000, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x2, 0x0, 0x0, 0x0, 0x0, "473d7fcc115d845089a8e3fefc4327c35d5f4c097347fb24dc1b3b1ba18171798bdc0062ea0b5e364eee2b3dc94c1742ea96765c683f90df0000000100"}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="48040000001389000000", 0xa}, {&(0x7f0000000180)="fa1ac810598383171418b8994a82534dfa080fd43a144fb4c7f5efffe2356640ed6f5dfc6046a51faea8633fc5d9a452bbff2f6f255218ebecfa91f6", 0x3c}], 0x2}, 0x0) [1175076ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105783 #0 [1175098ms] -> socket$packet(0x11, 0x3, 0x300) #0 [1175099ms] <- socket$packet=0x3 errno=14 cover=1724 #0 [1175102ms] -> setsockopt$packet_int(0x3, 0x107, 0xf, 0x20000000, 0x4) #0 [1175102ms] <- setsockopt$packet_int=0x0 errno=14 cover=138 #0 [1175103ms] -> sendmsg(0x3, 0x20000100, 0x0) #0 [1175103ms] <- sendmsg=0xffffffffffffffff errno=22 cover=981 enabling collider #0 [1175110ms] -> socket$packet(0x11, 0x3, 0x300) #0 [1175110ms] <- socket$packet=0x3 errno=14 cover=1843 #0 [1175110ms] -> setsockopt$packet_int(0x3, 0x107, 0xf, 0x20000000, 0x4) #0 [1175110ms] <- setsockopt$packet_int=0x0 errno=14 cover=138 pthread_create failed (errno 11) 13:06:48 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x1000000, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x2, 0x0, 0x0, 0x0, 0x0, "473d7fcc115d845089a8e3fefc4327c35d5f4c097347fb24dc1b3b1ba18171798bdc0062ea0b5e364eee2b3dc94c1742ea96765c683f90df0000000100"}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="48040000001389000000", 0xa}, {&(0x7f0000000180)="fa1ac810598383171418b8994a82534dfa080fd43a144fb4c7f5efffe2356640ed6f5dfc6046a51faea8633fc5d9a452bbff2f6f255218ebecfa91f6", 0x3c}], 0x2}, 0x0) 2021/11/11 13:06:48 result hanged=false: 2021/11/11 13:06:48 #0: triaging type=7 2021/11/11 13:06:48 triaging input for call #2 sendmsg (new signal=9) [1175193ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105885 #0 [1175213ms] -> socket$packet(0x11, 0x3, 0x300) #0 [1175213ms] <- socket$packet=0x3 errno=14 cover=1749 #0 [1175214ms] -> setsockopt$packet_int(0x3, 0x107, 0xf, 0x20000000, 0x4) #0 [1175215ms] <- setsockopt$packet_int=0x0 errno=14 cover=142 #0 [1175215ms] -> sendmsg(0x3, 0x20000100, 0x0) #0 [1175216ms] <- sendmsg=0xffffffffffffffff errno=22 cover=959 13:06:48 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x1000000, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x2, 0x0, 0x0, 0x0, 0x0, "473d7fcc115d845089a8e3fefc4327c35d5f4c097347fb24dc1b3b1ba18171798bdc0062ea0b5e364eee2b3dc94c1742ea96765c683f90df0000000100"}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="48040000001389000000", 0xa}, {&(0x7f0000000180)="fa1ac810598383171418b8994a82534dfa080fd43a144fb4c7f5efffe2356640ed6f5dfc6046a51faea8633fc5d9a452bbff2f6f255218ebecfa91f6", 0x3c}], 0x2}, 0x0) 2021/11/11 13:06:48 result hanged=false: [1175264ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105887 #0 [1175289ms] -> socket$packet(0x11, 0x3, 0x300) #0 [1175292ms] <- socket$packet=0x3 errno=14 cover=6866 #0 [1175296ms] -> setsockopt$packet_int(0x3, 0x107, 0xf, 0x20000000, 0x4) #0 [1175296ms] <- setsockopt$packet_int=0x0 errno=14 cover=138 #0 [1175297ms] -> sendmsg(0x3, 0x20000100, 0x0) #0 [1175298ms] <- sendmsg=0xffffffffffffffff errno=22 cover=973 13:06:48 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x1000000, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x2, 0x0, 0x0, 0x0, 0x0, "473d7fcc115d845089a8e3fefc4327c35d5f4c097347fb24dc1b3b1ba18171798bdc0062ea0b5e364eee2b3dc94c1742ea96765c683f90df0000000100"}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="48040000001389000000", 0xa}, {&(0x7f0000000180)="fa1ac810598383171418b8994a82534dfa080fd43a144fb4c7f5efffe2356640ed6f5dfc6046a51faea8633fc5d9a452bbff2f6f255218ebecfa91f6", 0x3c}], 0x2}, 0x0) 2021/11/11 13:06:48 result hanged=false: [1175343ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105889 #0 [1175362ms] -> socket$packet(0x11, 0x3, 0x300) #0 [1175363ms] <- socket$packet=0x3 errno=14 cover=1724 #0 [1175364ms] -> setsockopt$packet_int(0x3, 0x107, 0xf, 0x20000000, 0x4) #0 [1175364ms] <- setsockopt$packet_int=0x0 errno=14 cover=138 #0 [1175364ms] -> sendmsg(0x3, 0x20000100, 0x0) #0 [1175365ms] <- sendmsg=0xffffffffffffffff errno=22 cover=973 2021/11/11 13:06:48 result hanged=false: 2021/11/11 13:06:48 added new input for call #2 sendmsg to corpus: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x1000000, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x2, 0x0, 0x0, 0x0, 0x0, "473d7fcc115d845089a8e3fefc4327c35d5f4c097347fb24dc1b3b1ba18171798bdc0062ea0b5e364eee2b3dc94c1742ea96765c683f90df0000000100"}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="48040000001389000000", 0xa}, {&(0x7f0000000180)="fa1ac810598383171418b8994a82534dfa080fd43a144fb4c7f5efffe2356640ed6f5dfc6046a51faea8633fc5d9a452bbff2f6f255218ebecfa91f6", 0x3c}], 0x2}, 0x0) 13:06:48 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008035000000000000000000e1f4655fe1f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000013800)) [1175414ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105891 #0 [1175433ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20013800) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1224.341284] EXT4-fs (loop0): invalid inodes per group: 0 [ 1224.341284] syz_mount_image > mount error: 22 #0 [1175455ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=30484 enabling collider #0 [1175456ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20013800) #0 [1175460ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=6077 2021/11/11 13:06:49 result hanged=false: 2021/11/11 13:06:49 #0: triaging type=7 2021/11/11 13:06:49 triaging input for call #0 syz_mount_image$ext4 (new signal=2) 13:06:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008035000000000000000000e1f4655fe1f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000013800)) [1175518ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105893 #0 [1175539ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20013800) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1224.450712] EXT4-fs (loop0): invalid inodes per group: 0 [ 1224.450712] syz_mount_image > mount error: 22 #0 [1175559ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=31247 2021/11/11 13:06:49 result hanged=false: 13:06:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008035000000000000000000e1f4655fe1f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000013800)) [1175622ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105895 #0 [1175642ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20013800) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1224.556681] EXT4-fs (loop0): invalid inodes per group: 0 [ 1224.556681] syz_mount_image > mount error: 22 #0 [1175665ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=29121 13:06:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008035000000000000000000e1f4655fe1f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000013800)) 2021/11/11 13:06:49 result hanged=false: [1175725ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105897 #0 [1175745ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20013800) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1224.656995] EXT4-fs (loop0): invalid inodes per group: 0 [ 1224.656995] syz_mount_image > mount error: 22 #0 [1175767ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=30460 2021/11/11 13:06:49 result hanged=false: 2021/11/11 13:06:49 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008035000000000000000000e1f4655fe1f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000013800)) 13:06:49 executing program 0: stat(0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000780)='ns/user\x00') [1175846ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105899 #0 [1175865ms] -> stat(0x0, 0x0) #0 [1175865ms] <- stat=0xffffffffffffffff errno=14 cover=608 #0 [1175867ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000780) #0 [1175869ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8447 enabling collider #0 [1175870ms] -> stat(0x0, 0x0) #0 [1175870ms] <- stat=0xffffffffffffffff errno=14 cover=599 13:06:49 executing program 0: stat(0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000780)='ns/user\x00') 2021/11/11 13:06:49 result hanged=false: 2021/11/11 13:06:49 #0: triaging type=7 2021/11/11 13:06:49 triaging input for call #1 syz_open_procfs$namespace (new signal=2) [1175913ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105901 #0 [1175933ms] -> stat(0x0, 0x0) #0 [1175933ms] <- stat=0xffffffffffffffff errno=14 cover=598 #0 [1175934ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000780) #0 [1175935ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8599 13:06:49 executing program 0: stat(0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000780)='ns/user\x00') 2021/11/11 13:06:49 result hanged=false: [1175982ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105903 #0 [1176003ms] -> stat(0x0, 0x0) #0 [1176003ms] <- stat=0xffffffffffffffff errno=14 cover=598 #0 [1176005ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000780) #0 [1176006ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8549 2021/11/11 13:06:49 result hanged=false: 13:06:49 executing program 0: stat(0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000780)='ns/user\x00') [1176050ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105905 #0 [1176068ms] -> stat(0x0, 0x0) #0 [1176068ms] <- stat=0xffffffffffffffff errno=14 cover=598 #0 [1176069ms] -> syz_open_procfs$namespace(0xffffffffffffffff, 0x20000780) #0 [1176073ms] <- syz_open_procfs$namespace=0x3 errno=1 cover=8634 2021/11/11 13:06:49 result hanged=false: 2021/11/11 13:06:49 added new input for call #1 syz_open_procfs$namespace to corpus: stat(0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000780)='ns/user\x00') 13:06:49 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000880)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [1176123ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 105907 #0 [1176142ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffb000, 0x200b0000, 0x20000180, 0x20002a40) #0 [1176144ms] <- syz_io_uring_setup=0x3 errno=14 cover=7801 #0 [1176147ms] -> syz_io_uring_submit(0x20ffb000, 0x200b0000, 0x20000880, 0x6) #0 [1176147ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1176148ms] -> syz_io_uring_submit(0x20ffb000, 0x200b0000, 0x20000000, 0x0) #0 [1176148ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1176148ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [1176149ms] <- io_uring_enter=0x2 errno=14 cover=3953 enabling collider #0 [1176150ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffb000, 0x200b0000, 0x20000180, 0x20002a40) #0 [1176152ms] <- syz_io_uring_setup=0x3 errno=14 cover=5280 #0 [1176154ms] -> syz_io_uring_submit(0x20ffb000, 0x200b0000, 0x20000880, 0x6) #0 [1176154ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 pthread_create failed (errno 11) 2021/11/11 13:06:49 result hanged=false: 2021/11/11 13:06:49 #0: triaging type=7 13:06:49 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000880)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 2021/11/11 13:06:49 triaging input for call #3 io_uring_enter (new signal=15) [1176237ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106009 #0 [1176264ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffb000, 0x200b0000, 0x20000180, 0x20002a40) #0 [1176267ms] <- syz_io_uring_setup=0x3 errno=14 cover=7710 #0 [1176268ms] -> syz_io_uring_submit(0x20ffb000, 0x200b0000, 0x20000880, 0x6) #0 [1176268ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1176268ms] -> syz_io_uring_submit(0x20ffb000, 0x200b0000, 0x20000000, 0x0) #0 [1176268ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1176269ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [1176269ms] <- io_uring_enter=0x2 errno=14 cover=1324 2021/11/11 13:06:49 result hanged=false: 13:06:49 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000880)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [1176316ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106011 #0 [1176337ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffb000, 0x200b0000, 0x20000180, 0x20002a40) #0 [1176341ms] <- syz_io_uring_setup=0x3 errno=14 cover=7726 #0 [1176342ms] -> syz_io_uring_submit(0x20ffb000, 0x200b0000, 0x20000880, 0x6) #0 [1176342ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1176342ms] -> syz_io_uring_submit(0x20ffb000, 0x200b0000, 0x20000000, 0x0) #0 [1176343ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1176343ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [1176343ms] <- io_uring_enter=0x2 errno=14 cover=1324 13:06:49 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000880)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 2021/11/11 13:06:49 result hanged=false: [1176389ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106013 #0 [1176409ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffb000, 0x200b0000, 0x20000180, 0x20002a40) #0 [1176415ms] <- syz_io_uring_setup=0x3 errno=14 cover=7872 #0 [1176416ms] -> syz_io_uring_submit(0x20ffb000, 0x200b0000, 0x20000880, 0x6) #0 [1176416ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1176418ms] -> syz_io_uring_submit(0x20ffb000, 0x200b0000, 0x20000000, 0x0) #0 [1176418ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1176418ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [1176419ms] <- io_uring_enter=0x2 errno=14 cover=1313 2021/11/11 13:06:49 result hanged=false: 2021/11/11 13:06:49 added new input for call #3 io_uring_enter to corpus: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000880)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 13:06:49 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) [1176465ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106015 #0 [1176485ms] -> openat$null(0xffffffffffffff9c, 0x20000300, 0x1, 0x0) #0 [1176485ms] <- openat$null=0x3 errno=14 cover=1093 enabling collider #0 [1176486ms] -> openat$null(0xffffffffffffff9c, 0x20000300, 0x1, 0x0) #0 [1176486ms] <- openat$null=0x3 errno=14 cover=1078 13:06:50 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r0, 0x0, 0x200f5ef, 0x1081030000000000) 2021/11/11 13:06:50 result hanged=false: [1176527ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106017 #0 [1176547ms] -> chdir(0x0) #0 [1176547ms] <- chdir=0xffffffffffffffff errno=14 cover=648 #0 [1176548ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1176552ms] <- openat=0x3 errno=14 cover=7848 #0 [1176552ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1176553ms] <- openat=0x4 errno=14 cover=1200 #0 [1176553ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1176553ms] <- openat=0x5 errno=14 cover=2728 #0 [1176554ms] -> copy_file_range(0x5, 0x0, 0x4, 0x0, 0x200f5ef, 0x0) #0 [1176654ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [1176658ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1176659ms] <- openat=0x6 errno=14 cover=2251 #0 [1176660ms] -> copy_file_range(0x6, 0x0, 0x3, 0x0, 0x200f5ef, 0x1081030000000000) #0 [1176732ms] <- copy_file_range=0x1d0000 errno=14 cover=201878 enabling collider #0 [1176735ms] -> chdir(0x0) #0 [1176735ms] <- chdir=0xffffffffffffffff errno=14 cover=594 #0 [1176736ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1176737ms] <- openat=0x3 errno=14 cover=1134 pthread_create failed (errno 11) 13:06:50 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r0, 0x0, 0x200f5ef, 0x1081030000000000) 2021/11/11 13:06:50 result hanged=false: 2021/11/11 13:06:50 #0: triaging type=7 2021/11/11 13:06:50 triaging input for call #6 copy_file_range (new signal=8) [1176822ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106119 #0 [1176844ms] -> chdir(0x0) #0 [1176844ms] <- chdir=0xffffffffffffffff errno=14 cover=594 #0 [1176845ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1176848ms] <- openat=0x3 errno=14 cover=7322 #0 [1176849ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1176850ms] <- openat=0x4 errno=14 cover=1258 #0 [1176851ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1176851ms] <- openat=0x5 errno=14 cover=2720 #0 [1176852ms] -> copy_file_range(0x5, 0x0, 0x4, 0x0, 0x200f5ef, 0x0) #0 [1176946ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [1176966ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1176966ms] <- openat=0x6 errno=14 cover=2260 #0 [1176967ms] -> copy_file_range(0x6, 0x0, 0x3, 0x0, 0x200f5ef, 0x1081030000000000) #0 [1177038ms] <- copy_file_range=0x1d0000 errno=14 cover=201826 2021/11/11 13:06:50 result hanged=false: 13:06:50 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r0, 0x0, 0x200f5ef, 0x1081030000000000) [1177104ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106121 #0 [1177129ms] -> chdir(0x0) #0 [1177129ms] <- chdir=0xffffffffffffffff errno=14 cover=592 #0 [1177130ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1177134ms] <- openat=0x3 errno=14 cover=7514 #0 [1177135ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1177136ms] <- openat=0x4 errno=14 cover=1201 #0 [1177136ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1177136ms] <- openat=0x5 errno=14 cover=2738 #0 [1177137ms] -> copy_file_range(0x5, 0x0, 0x4, 0x0, 0x200f5ef, 0x0) #0 [1177227ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [1177248ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1177249ms] <- openat=0x6 errno=14 cover=2186 #0 [1177249ms] -> copy_file_range(0x6, 0x0, 0x3, 0x0, 0x200f5ef, 0x1081030000000000) #0 [1177320ms] <- copy_file_range=0x1d0000 errno=14 cover=202384 2021/11/11 13:06:50 result hanged=false: 13:06:50 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r0, 0x0, 0x200f5ef, 0x1081030000000000) [1177386ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106123 #0 [1177405ms] -> chdir(0x0) #0 [1177405ms] <- chdir=0xffffffffffffffff errno=14 cover=605 #0 [1177406ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1177409ms] <- openat=0x3 errno=14 cover=7925 #0 [1177410ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1177411ms] <- openat=0x4 errno=14 cover=1201 #0 [1177411ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1177412ms] <- openat=0x5 errno=14 cover=2729 #0 [1177412ms] -> copy_file_range(0x5, 0x0, 0x4, 0x0, 0x200f5ef, 0x0) #0 [1177507ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [1177525ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1177527ms] <- openat=0x6 errno=14 cover=2229 #0 [1177528ms] -> copy_file_range(0x6, 0x0, 0x3, 0x0, 0x200f5ef, 0x1081030000000000) #0 [1177601ms] <- copy_file_range=0x1d0000 errno=14 cover=202129 2021/11/11 13:06:51 result hanged=false: 2021/11/11 13:06:51 added new input for call #6 copy_file_range to corpus: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r0, 0x0, 0x200f5ef, 0x1081030000000000) 2021/11/11 13:06:51 #0: triaging type=7 2021/11/11 13:06:51 triaging input for call #4 copy_file_range (new signal=14) 13:06:51 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r0, 0x0, 0x200f5ef, 0x1081030000000000) [1177676ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106125 #0 [1177699ms] -> chdir(0x0) #0 [1177699ms] <- chdir=0xffffffffffffffff errno=14 cover=604 #0 [1177700ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1177704ms] <- openat=0x3 errno=14 cover=7334 #0 [1177705ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1177706ms] <- openat=0x4 errno=14 cover=1212 #0 [1177707ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1177707ms] <- openat=0x5 errno=14 cover=2794 #0 [1177708ms] -> copy_file_range(0x5, 0x0, 0x4, 0x0, 0x200f5ef, 0x0) #0 [1177804ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [1177825ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1177825ms] <- openat=0x6 errno=14 cover=2274 #0 [1177826ms] -> copy_file_range(0x6, 0x0, 0x3, 0x0, 0x200f5ef, 0x1081030000000000) #0 [1177899ms] <- copy_file_range=0x1d0000 errno=14 cover=202225 2021/11/11 13:06:51 result hanged=false: 13:06:51 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r0, 0x0, 0x200f5ef, 0x1081030000000000) [1177961ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106127 #0 [1177984ms] -> chdir(0x0) #0 [1177984ms] <- chdir=0xffffffffffffffff errno=14 cover=604 #0 [1177984ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1177988ms] <- openat=0x3 errno=14 cover=9738 #0 [1177990ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1177990ms] <- openat=0x4 errno=14 cover=1212 #0 [1177991ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1177992ms] <- openat=0x5 errno=14 cover=2808 #0 [1177993ms] -> copy_file_range(0x5, 0x0, 0x4, 0x0, 0x200f5ef, 0x0) #0 [1178090ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [1178109ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1178109ms] <- openat=0x6 errno=14 cover=2277 #0 [1178111ms] -> copy_file_range(0x6, 0x0, 0x3, 0x0, 0x200f5ef, 0x1081030000000000) #0 [1178185ms] <- copy_file_range=0x1d0000 errno=14 cover=207939 13:06:51 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r0, 0x0, 0x200f5ef, 0x1081030000000000) 2021/11/11 13:06:51 result hanged=false: [1178247ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106129 #0 [1178267ms] -> chdir(0x0) #0 [1178267ms] <- chdir=0xffffffffffffffff errno=14 cover=605 #0 [1178268ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1178271ms] <- openat=0x3 errno=14 cover=7674 #0 [1178273ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1178273ms] <- openat=0x4 errno=14 cover=1212 #0 [1178278ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1178278ms] <- openat=0x5 errno=14 cover=2794 #0 [1178284ms] -> copy_file_range(0x5, 0x0, 0x4, 0x0, 0x200f5ef, 0x0) #0 [1178379ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [1178400ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1178400ms] <- openat=0x6 errno=14 cover=2187 #0 [1178401ms] -> copy_file_range(0x6, 0x0, 0x3, 0x0, 0x200f5ef, 0x1081030000000000) #0 [1178473ms] <- copy_file_range=0x1d0000 errno=14 cover=202196 2021/11/11 13:06:52 result hanged=false: 2021/11/11 13:06:52 added new input for call #4 copy_file_range to corpus: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r0, 0x0, 0x200f5ef, 0x1081030000000000) 13:06:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736617e43c00088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010001fe870325132510000e870325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c453120202020202020001fe870325132510000e870325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c453220202020202020001fe870325132510000e870325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c20001fe870325132510000e8703251070064000000", 0x120, 0x11000}, {&(0x7f0000010800)="2e2020202020202020202010001fe870325132510000e87032510300000000002e2e20202020202020202010001fe870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020001fe870325132510000e870325104001a040000", 0x80, 0x51000}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x91000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0xd1000}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x151000}], 0x0, &(0x7f0000011000)) [1178559ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106131 #0 [1178581ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x200000, 0xb, 0x20000200, 0x0, 0x20011000) syz_mount_image: size=2097152 segs=11 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [1178618ms] <- syz_mount_image$vfat=0x5 errno=0 cover=233479 enabling collider #0 [1178621ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x200000, 0xb, 0x20000200, 0x0, 0x20011000) #0 [1178623ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=16 cover=17685 2021/11/11 13:06:52 result hanged=false: 2021/11/11 13:06:52 #0: triaging type=7 2021/11/11 13:06:52 triaging input for call #0 syz_mount_image$vfat (new signal=5) 13:06:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736617e43c00088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010001fe870325132510000e870325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c453120202020202020001fe870325132510000e870325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c453220202020202020001fe870325132510000e870325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c20001fe870325132510000e8703251070064000000", 0x120, 0x11000}, {&(0x7f0000010800)="2e2020202020202020202010001fe870325132510000e87032510300000000002e2e20202020202020202010001fe870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020001fe870325132510000e870325104001a040000", 0x80, 0x51000}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x91000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0xd1000}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x151000}], 0x0, &(0x7f0000011000)) umount(./9037/file0) [1178687ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106133 #0 [1178706ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x200000, 0xb, 0x20000200, 0x0, 0x20011000) syz_mount_image: size=2097152 segs=11 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [1178741ms] <- syz_mount_image$vfat=0x5 errno=0 cover=236863 2021/11/11 13:06:52 result hanged=false: 13:06:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736617e43c00088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="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", 0x120, 0x11000}, {&(0x7f0000010800)="2e2020202020202020202010001fe870325132510000e87032510300000000002e2e20202020202020202010001fe870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020001fe870325132510000e870325104001a040000", 0x80, 0x51000}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x91000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0xd1000}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x151000}], 0x0, &(0x7f0000011000)) umount(./9038/file0) [1178816ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106135 #0 [1178837ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x200000, 0xb, 0x20000200, 0x0, 0x20011000) syz_mount_image: size=2097152 segs=11 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [1178873ms] <- syz_mount_image$vfat=0x5 errno=0 cover=244394 13:06:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736617e43c00088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010001fe870325132510000e870325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c453120202020202020001fe870325132510000e870325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c453220202020202020001fe870325132510000e870325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c20001fe870325132510000e8703251070064000000", 0x120, 0x11000}, {&(0x7f0000010800)="2e2020202020202020202010001fe870325132510000e87032510300000000002e2e20202020202020202010001fe870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020001fe870325132510000e870325104001a040000", 0x80, 0x51000}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x91000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0xd1000}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x151000}], 0x0, &(0x7f0000011000)) 2021/11/11 13:06:52 result hanged=false: umount(./9039/file0) [1178956ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106137 #0 [1178976ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x200000, 0xb, 0x20000200, 0x0, 0x20011000) syz_mount_image: size=2097152 segs=11 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' 2021/11/11 13:06:52 poll: candidates=0 inputs=0 signal=0 #0 [1179010ms] <- syz_mount_image$vfat=0x5 errno=0 cover=247702 2021/11/11 13:06:52 result hanged=false: 2021/11/11 13:06:52 added new input for call #0 syz_mount_image$vfat to corpus: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736617e43c00088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="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", 0x120, 0x11000}, {&(0x7f0000010800)="2e2020202020202020202010001fe870325132510000e87032510300000000002e2e20202020202020202010001fe870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020001fe870325132510000e870325104001a040000", 0x80, 0x51000}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x91000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0xd1000}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x151000}], 0x0, &(0x7f0000011000)) umount(./9040/file0) 13:06:52 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000240)=""/4096) [1179121ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106139 2021/11/11 13:06:52 poll: candidates=8 inputs=0 signal=0 #0 [1179145ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1179147ms] <- perf_event_open=0x3 errno=14 cover=6729 #0 [1179147ms] -> mincore(0x20ffc000, 0x4000, 0x20000240) #0 [1179148ms] <- mincore=0x0 errno=14 cover=867 enabling collider #0 [1179160ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1179162ms] <- perf_event_open=0x3 errno=14 cover=6298 #0 [1179162ms] -> mincore(0x20ffc000, 0x4000, 0x20000240) #0 [1179162ms] <- mincore=0x0 errno=14 cover=235 2021/11/11 13:06:52 result hanged=false: 13:06:52 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000240)=""/4096) 2021/11/11 13:06:52 #0: triaging type=7 2021/11/11 13:06:52 triaging input for call #1 mincore (new signal=1) [1179221ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106141 #0 [1179241ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1179242ms] <- perf_event_open=0x3 errno=14 cover=6305 #0 [1179243ms] -> mincore(0x20ffc000, 0x4000, 0x20000240) #0 [1179244ms] <- mincore=0x0 errno=14 cover=533 13:06:52 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000240)=""/4096) 2021/11/11 13:06:52 result hanged=false: [1179298ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106143 #0 [1179318ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1179319ms] <- perf_event_open=0x3 errno=14 cover=7361 #0 [1179320ms] -> mincore(0x20ffc000, 0x4000, 0x20000240) #0 [1179321ms] <- mincore=0x0 errno=14 cover=573 2021/11/11 13:06:52 result hanged=false: 13:06:52 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000240)=""/4096) [1179377ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106145 #0 [1179398ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1179399ms] <- perf_event_open=0x3 errno=14 cover=7534 #0 [1179401ms] -> mincore(0x20ffc000, 0x4000, 0x20000240) #0 [1179402ms] <- mincore=0x0 errno=14 cover=573 2021/11/11 13:06:52 result hanged=false: 2021/11/11 13:06:52 added new input for call #1 mincore to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000240)=""/4096) 2021/11/11 13:06:52 #0: triaging type=7 2021/11/11 13:06:52 triaging input for call #0 perf_event_open (new signal=2) 13:06:52 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000240)=""/4096) [1179461ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106147 #0 [1179483ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1179483ms] <- perf_event_open=0x3 errno=14 cover=7089 #0 [1179484ms] -> mincore(0x20ffc000, 0x4000, 0x20000240) #0 [1179484ms] <- mincore=0x0 errno=14 cover=573 13:06:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000240)=""/4096) 2021/11/11 13:06:53 result hanged=false: [1179540ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106149 #0 [1179561ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1179563ms] <- perf_event_open=0x3 errno=14 cover=6640 #0 [1179568ms] -> mincore(0x20ffc000, 0x4000, 0x20000240) #0 [1179568ms] <- mincore=0x0 errno=14 cover=980 13:06:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000240)=""/4096) 2021/11/11 13:06:53 result hanged=false: [1179625ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106151 #0 [1179645ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1179646ms] <- perf_event_open=0x3 errno=14 cover=8254 #0 [1179648ms] -> mincore(0x20ffc000, 0x4000, 0x20000240) #0 [1179648ms] <- mincore=0x0 errno=14 cover=574 2021/11/11 13:06:53 result hanged=false: 2021/11/11 13:06:53 added new input for call #0 perf_event_open to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000240)=""/4096) 13:06:53 executing program 0: io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r0, 0x63, &(0x7f0000001400)) [1179703ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106153 #0 [1179724ms] -> io_setup(0x5, 0x20000000) #0 [1179725ms] <- io_setup=0x0 errno=14 cover=3403 #0 [1179725ms] -> io_submit(0x7fdaa7a02000, 0x63, 0x20001400) #0 [1179725ms] <- io_submit=0xffffffffffffffff errno=14 cover=902 enabling collider #0 [1179725ms] -> io_setup(0x5, 0x20000000) #0 [1179726ms] <- io_setup=0xffffffffffffffff errno=22 cover=40 2021/11/11 13:06:53 result hanged=false: 13:06:53 executing program 0: io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r0, 0x63, &(0x7f0000001400)) 2021/11/11 13:06:53 #0: triaging type=7 2021/11/11 13:06:53 triaging input for call #1 io_submit (new signal=2) [1179775ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106155 #0 [1179801ms] -> io_setup(0x5, 0x20000000) #0 [1179802ms] <- io_setup=0x0 errno=14 cover=3502 #0 [1179803ms] -> io_submit(0x7fdaa7a02000, 0x63, 0x20001400) #0 [1179803ms] <- io_submit=0xffffffffffffffff errno=14 cover=902 13:06:53 executing program 0: io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r0, 0x63, &(0x7f0000001400)) 2021/11/11 13:06:53 result hanged=false: [1179857ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106157 #0 [1179875ms] -> io_setup(0x5, 0x20000000) #0 [1179876ms] <- io_setup=0x0 errno=14 cover=3389 #0 [1179881ms] -> io_submit(0x7fdaa7a02000, 0x63, 0x20001400) #0 [1179881ms] <- io_submit=0xffffffffffffffff errno=14 cover=902 13:06:53 executing program 0: io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r0, 0x63, &(0x7f0000001400)) 2021/11/11 13:06:53 result hanged=false: [1179936ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106159 #0 [1179958ms] -> io_setup(0x5, 0x20000000) #0 [1179958ms] <- io_setup=0x0 errno=14 cover=3389 #0 [1179961ms] -> io_submit(0x7fdaa7a02000, 0x63, 0x20001400) #0 [1179961ms] <- io_submit=0xffffffffffffffff errno=14 cover=902 2021/11/11 13:06:53 result hanged=false: 2021/11/11 13:06:53 added new input for call #1 io_submit to corpus: io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r0, 0x63, &(0x7f0000001400)) 13:06:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{}]}) [1180017ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106161 #0 [1180037ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [1180037ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1658 #0 [1180038ms] -> ioctl$PIO_UNIMAP(0x3, 0x4b67, 0x20000480) #0 [1180038ms] <- ioctl$PIO_UNIMAP=0x0 errno=14 cover=17575 enabling collider #0 [1180040ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [1180040ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1722 #0 [1180040ms] -> ioctl$PIO_UNIMAP(0x3, 0x4b67, 0x20000480) #0 [1180040ms] <- ioctl$PIO_UNIMAP=0xffffffffffffffff errno=9 cover=46 13:06:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{}]}) 2021/11/11 13:06:53 result hanged=false: 2021/11/11 13:06:53 #0: triaging type=7 2021/11/11 13:06:53 triaging input for call #1 ioctl$PIO_UNIMAP (new signal=56) [1180083ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106163 #0 [1180104ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [1180104ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1682 #0 [1180106ms] -> ioctl$PIO_UNIMAP(0x3, 0x4b67, 0x20000480) #0 [1180107ms] <- ioctl$PIO_UNIMAP=0x0 errno=14 cover=17532 13:06:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{}]}) 2021/11/11 13:06:53 result hanged=false: [1180152ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106165 #0 [1180173ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [1180173ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1834 #0 [1180174ms] -> ioctl$PIO_UNIMAP(0x3, 0x4b67, 0x20000480) #0 [1180174ms] <- ioctl$PIO_UNIMAP=0x0 errno=14 cover=17516 13:06:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{}]}) 2021/11/11 13:06:53 result hanged=false: [1180218ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106167 #0 [1180236ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [1180237ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1680 #0 [1180238ms] -> ioctl$PIO_UNIMAP(0x3, 0x4b67, 0x20000480) #0 [1180238ms] <- ioctl$PIO_UNIMAP=0x0 errno=14 cover=17516 2021/11/11 13:06:53 result hanged=false: 2021/11/11 13:06:53 added new input for call #1 ioctl$PIO_UNIMAP to corpus: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{}]}) 13:06:53 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [1180288ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106169 #0 [1180307ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffd000, 0x20ffc000, 0x20000180, 0x20002a40) #0 [1180312ms] <- syz_io_uring_setup=0x3 errno=14 cover=7575 #0 [1180314ms] -> pipe(0x200001c0) #0 [1180314ms] <- pipe=0x0 errno=14 cover=1259 #0 [1180316ms] -> close_range(0x5, 0xffffffffffffffff, 0x2) #0 [1180316ms] <- close_range=0x0 errno=14 cover=1766 #0 [1180317ms] -> syz_io_uring_submit(0x20ffd000, 0x20ffc000, 0x20000140, 0x0) #0 [1180317ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1180318ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [1180318ms] <- io_uring_enter=0x1 errno=14 cover=468 enabling collider #0 [1180318ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffd000, 0x20ffc000, 0x20000180, 0x20002a40) #0 [1180323ms] <- syz_io_uring_setup=0x4 errno=14 cover=8667 #0 [1180325ms] -> pipe(0x200001c0) #0 [1180326ms] <- pipe=0x0 errno=14 cover=1211 pthread_create failed (errno 11) 2021/11/11 13:06:53 result hanged=false: 13:06:53 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 2021/11/11 13:06:53 #0: triaging type=7 2021/11/11 13:06:53 triaging input for call #4 io_uring_enter (new signal=3) [1180405ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106271 #0 [1180432ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffd000, 0x20ffc000, 0x20000180, 0x20002a40) #0 [1180436ms] <- syz_io_uring_setup=0x3 errno=14 cover=7291 #0 [1180437ms] -> pipe(0x200001c0) #0 [1180438ms] <- pipe=0x0 errno=14 cover=1213 #0 [1180439ms] -> close_range(0x5, 0xffffffffffffffff, 0x2) #0 [1180439ms] <- close_range=0x0 errno=14 cover=1750 #0 [1180441ms] -> syz_io_uring_submit(0x20ffd000, 0x20ffc000, 0x20000140, 0x0) #0 [1180441ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1180441ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [1180441ms] <- io_uring_enter=0x1 errno=14 cover=468 13:06:53 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 2021/11/11 13:06:53 result hanged=false: [1180487ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106273 #0 [1180508ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffd000, 0x20ffc000, 0x20000180, 0x20002a40) #0 [1180512ms] <- syz_io_uring_setup=0x3 errno=14 cover=7724 #0 [1180513ms] -> pipe(0x200001c0) #0 [1180513ms] <- pipe=0x0 errno=14 cover=1129 #0 [1180514ms] -> close_range(0x5, 0xffffffffffffffff, 0x2) #0 [1180515ms] <- close_range=0x0 errno=14 cover=1688 #0 [1180515ms] -> syz_io_uring_submit(0x20ffd000, 0x20ffc000, 0x20000140, 0x0) #0 [1180515ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1180516ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [1180516ms] <- io_uring_enter=0x1 errno=14 cover=482 13:06:54 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 2021/11/11 13:06:54 result hanged=false: [1180560ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106275 #0 [1180579ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffd000, 0x20ffc000, 0x20000180, 0x20002a40) #0 [1180581ms] <- syz_io_uring_setup=0x3 errno=14 cover=7509 #0 [1180582ms] -> pipe(0x200001c0) #0 [1180583ms] <- pipe=0x0 errno=14 cover=1126 #0 [1180583ms] -> close_range(0x5, 0xffffffffffffffff, 0x2) #0 [1180583ms] <- close_range=0x0 errno=14 cover=1707 #0 [1180585ms] -> syz_io_uring_submit(0x20ffd000, 0x20ffc000, 0x20000140, 0x0) #0 [1180585ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1180585ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [1180586ms] <- io_uring_enter=0x1 errno=14 cover=468 2021/11/11 13:06:54 result hanged=false: 2021/11/11 13:06:54 added new input for call #4 io_uring_enter to corpus: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 13:06:54 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 2021/11/11 13:06:54 #0: triaging type=7 2021/11/11 13:06:54 triaging input for call #0 syz_io_uring_setup (new signal=1) [1180631ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106277 #0 [1180658ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffd000, 0x20ffc000, 0x20000180, 0x20002a40) #0 [1180665ms] <- syz_io_uring_setup=0x3 errno=14 cover=7369 #0 [1180666ms] -> pipe(0x200001c0) #0 [1180667ms] <- pipe=0x0 errno=14 cover=1238 #0 [1180667ms] -> close_range(0x5, 0xffffffffffffffff, 0x2) #0 [1180668ms] <- close_range=0x0 errno=14 cover=1750 #0 [1180669ms] -> syz_io_uring_submit(0x20ffd000, 0x20ffc000, 0x20000140, 0x0) #0 [1180669ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1180669ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [1180670ms] <- io_uring_enter=0x1 errno=14 cover=468 13:06:54 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 2021/11/11 13:06:54 result hanged=false: [1180714ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106279 #0 [1180735ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffd000, 0x20ffc000, 0x20000180, 0x20002a40) #0 [1180737ms] <- syz_io_uring_setup=0x3 errno=14 cover=7557 #0 [1180739ms] -> pipe(0x200001c0) #0 [1180739ms] <- pipe=0x0 errno=14 cover=1137 #0 [1180739ms] -> close_range(0x5, 0xffffffffffffffff, 0x2) #0 [1180740ms] <- close_range=0x0 errno=14 cover=1685 #0 [1180744ms] -> syz_io_uring_submit(0x20ffd000, 0x20ffc000, 0x20000140, 0x0) #0 [1180744ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1180744ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [1180745ms] <- io_uring_enter=0x1 errno=14 cover=468 13:06:54 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 2021/11/11 13:06:54 result hanged=false: [1180793ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106281 #0 [1180815ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffd000, 0x20ffc000, 0x20000180, 0x20002a40) #0 [1180817ms] <- syz_io_uring_setup=0x3 errno=14 cover=7908 #0 [1180818ms] -> pipe(0x200001c0) #0 [1180818ms] <- pipe=0x0 errno=14 cover=1115 #0 [1180819ms] -> close_range(0x5, 0xffffffffffffffff, 0x2) #0 [1180820ms] <- close_range=0x0 errno=14 cover=1702 #0 [1180820ms] -> syz_io_uring_submit(0x20ffd000, 0x20ffc000, 0x20000140, 0x0) #0 [1180820ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1180821ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [1180821ms] <- io_uring_enter=0x1 errno=14 cover=482 2021/11/11 13:06:54 result hanged=false: 2021/11/11 13:06:54 added new input for call #0 syz_io_uring_setup to corpus: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 13:06:54 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4420c1, 0x12) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c616669643d3078303070303030303030303030303011d95f72d3985fedca1404cbdb9130302c63616368657461673d17114276e15d0750c1f898402c706f73697861636c2c", @ANYRESDEC=r0, @ANYBLOB=',posixacl,version=9p2000.u,access=user,\x00']) fork() [1180911ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106283 #0 [1180932ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [1180938ms] <- openat=0x3 errno=14 cover=7491 #0 [1180938ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x4420c1, 0x12) #0 [1180938ms] <- openat=0xffffffffffffffff errno=22 cover=48 #0 [1180940ms] -> clone3(0x200008c0, 0x58) #0 [1180941ms] <- clone3=0xffffffffffffffff errno=11 cover=4568 #0 [1180941ms] -> pipe(0x200001c0) #0 [1180942ms] <- pipe=0x0 errno=14 cover=1299 #0 [1180942ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x1000000, 0x200002c0) #0 [1180963ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=64817 #0 [1180964ms] -> fork() #0 [1180983ms] <- fork=0xffffffffffffffff errno=11 cover=262143 enabling collider #0 [1180988ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [1180989ms] <- openat=0x3 errno=14 cover=1132 #0 [1180991ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x4420c1, 0x12) #0 [1180991ms] <- openat=0xffffffffffffffff errno=22 cover=48 pthread_create failed (errno 11) 13:06:54 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4420c1, 0x12) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c616669643d3078303070303030303030303030303011d95f72d3985fedca1404cbdb9130302c63616368657461673d17114276e15d0750c1f898402c706f73697861636c2c", @ANYRESDEC=r0, @ANYBLOB=',posixacl,version=9p2000.u,access=user,\x00']) fork() 2021/11/11 13:06:54 result hanged=false: 2021/11/11 13:06:54 #0: triaging type=7 2021/11/11 13:06:54 triaging input for call #4 mount$9p_fd (new signal=1) [1181073ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106387 #0 [1181092ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [1181097ms] <- openat=0x3 errno=14 cover=7439 #0 [1181098ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x4420c1, 0x12) #0 [1181098ms] <- openat=0xffffffffffffffff errno=22 cover=48 #0 [1181099ms] -> clone3(0x200008c0, 0x58) #0 [1181099ms] <- clone3=0xffffffffffffffff errno=11 cover=4530 #0 [1181100ms] -> pipe(0x200001c0) #0 [1181100ms] <- pipe=0x0 errno=14 cover=1148 #0 [1181100ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x1000000, 0x200002c0) #0 [1181123ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=65092 #0 [1181128ms] -> fork() #0 [1181146ms] <- fork=0xffffffffffffffff errno=11 cover=262143 13:06:54 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4420c1, 0x12) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c616669643d3078303070303030303030303030303011d95f72d3985fedca1404cbdb9130302c63616368657461673d17114276e15d0750c1f898402c706f73697861636c2c", @ANYRESDEC=r0, @ANYBLOB=',posixacl,version=9p2000.u,access=user,\x00']) fork() 2021/11/11 13:06:54 result hanged=false: [1181208ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106391 #0 [1181226ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [1181232ms] <- openat=0x3 errno=14 cover=7518 #0 [1181234ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x4420c1, 0x12) #0 [1181234ms] <- openat=0xffffffffffffffff errno=22 cover=48 #0 [1181234ms] -> clone3(0x200008c0, 0x58) #0 [1181234ms] <- clone3=0xffffffffffffffff errno=11 cover=4479 #0 [1181235ms] -> pipe(0x200001c0) #0 [1181235ms] <- pipe=0x0 errno=14 cover=1170 #0 [1181235ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x1000000, 0x200002c0) #0 [1181264ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=72299 #0 [1181271ms] -> fork() #0 [1181291ms] <- fork=0xffffffffffffffff errno=11 cover=262143 2021/11/11 13:06:54 result hanged=false: 13:06:54 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4420c1, 0x12) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c616669643d3078303070303030303030303030303011d95f72d3985fedca1404cbdb9130302c63616368657461673d17114276e15d0750c1f898402c706f73697861636c2c", @ANYRESDEC=r0, @ANYBLOB=',posixacl,version=9p2000.u,access=user,\x00']) fork() [1181357ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106395 #0 [1181381ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [1181384ms] <- openat=0x3 errno=14 cover=7297 #0 [1181386ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x4420c1, 0x12) #0 [1181386ms] <- openat=0xffffffffffffffff errno=22 cover=48 #0 [1181386ms] -> clone3(0x200008c0, 0x58) #0 [1181388ms] <- clone3=0xffffffffffffffff errno=11 cover=4673 #0 [1181389ms] -> pipe(0x200001c0) #0 [1181389ms] <- pipe=0x0 errno=14 cover=1137 #0 [1181389ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x1000000, 0x200002c0) #0 [1181416ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=64755 #0 [1181422ms] -> fork() #0 [1181441ms] <- fork=0xffffffffffffffff errno=11 cover=262143 2021/11/11 13:06:54 result hanged=false: 2021/11/11 13:06:55 added new input for call #4 mount$9p_fd to corpus: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4420c1, 0x12) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c616669643d3078303070303030303030303030303011d95f72d3985fedca1404cbdb9130302c63616368657461673d17114276e15d0750c1f898402c706f73697861636c2c", @ANYRESDEC=r0, @ANYBLOB=',posixacl,version=9p2000.u,access=user,\x00']) fork() 13:06:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ba0000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000c77000/0x2000)=nil) [1181512ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106399 #0 [1181532ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1181534ms] <- perf_event_open=0x3 errno=14 cover=7072 #0 [1181537ms] -> mremap(0x20ba0000, 0x3000, 0x2000, 0x3, 0x20c77000) #0 [1181539ms] <- mremap=0x20c77000 errno=14 cover=13074 enabling collider #0 [1181555ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1181556ms] <- perf_event_open=0x3 errno=14 cover=6584 #0 [1181557ms] -> mremap(0x20ba0000, 0x3000, 0x2000, 0x3, 0x20c77000) #0 [1181558ms] <- mremap=0xffffffffffffffff errno=14 cover=607 13:06:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ba0000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000c77000/0x2000)=nil) 2021/11/11 13:06:55 result hanged=false: 2021/11/11 13:06:55 #0: triaging type=7 2021/11/11 13:06:55 triaging input for call #1 mremap (new signal=4) [1181609ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106401 #0 [1181630ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1181631ms] <- perf_event_open=0x3 errno=14 cover=7006 #0 [1181632ms] -> mremap(0x20ba0000, 0x3000, 0x2000, 0x3, 0x20c77000) #0 [1181637ms] <- mremap=0x20c77000 errno=14 cover=10060 13:06:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ba0000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000c77000/0x2000)=nil) 2021/11/11 13:06:55 result hanged=false: [1181695ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106403 #0 [1181715ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1181715ms] <- perf_event_open=0x3 errno=14 cover=6612 #0 [1181717ms] -> mremap(0x20ba0000, 0x3000, 0x2000, 0x3, 0x20c77000) #0 [1181717ms] <- mremap=0x20c77000 errno=14 cover=9818 13:06:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ba0000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000c77000/0x2000)=nil) 2021/11/11 13:06:55 result hanged=false: [1181771ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106405 #0 [1181794ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1181794ms] <- perf_event_open=0x3 errno=14 cover=7651 #0 [1181796ms] -> mremap(0x20ba0000, 0x3000, 0x2000, 0x3, 0x20c77000) #0 [1181796ms] <- mremap=0x20c77000 errno=14 cover=4239 2021/11/11 13:06:55 result hanged=false: 2021/11/11 13:06:55 added new input for call #1 mremap to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ba0000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000c77000/0x2000)=nil) 13:06:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x5385, 0xc04a01) [1181852ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106407 #0 [1181871ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [1181871ms] <- syz_open_dev$sg=0x3 errno=14 cover=1401 #0 [1181872ms] -> ioctl$BLKTRACETEARDOWN(0x3, 0x5385, 0xc04a01) #0 [1181872ms] <- ioctl$BLKTRACETEARDOWN=0xffffffffffffffff errno=14 cover=307 enabling collider #0 [1181874ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [1181874ms] <- syz_open_dev$sg=0x3 errno=14 cover=1455 #0 [1181875ms] -> ioctl$BLKTRACETEARDOWN(0x3, 0x5385, 0xc04a01) #0 [1181875ms] <- ioctl$BLKTRACETEARDOWN=0xffffffffffffffff errno=9 cover=46 13:06:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x5385, 0xc04a01) 2021/11/11 13:06:55 result hanged=false: 2021/11/11 13:06:55 #0: triaging type=7 2021/11/11 13:06:55 triaging input for call #1 ioctl$BLKTRACETEARDOWN (new signal=2) [1181918ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106409 #0 [1181938ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [1181939ms] <- syz_open_dev$sg=0x3 errno=14 cover=1383 #0 [1181940ms] -> ioctl$BLKTRACETEARDOWN(0x3, 0x5385, 0xc04a01) #0 [1181940ms] <- ioctl$BLKTRACETEARDOWN=0xffffffffffffffff errno=14 cover=307 13:06:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x5385, 0xc04a01) 2021/11/11 13:06:55 result hanged=false: [1181981ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106411 #0 [1182001ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [1182001ms] <- syz_open_dev$sg=0x3 errno=14 cover=1390 #0 [1182002ms] -> ioctl$BLKTRACETEARDOWN(0x3, 0x5385, 0xc04a01) #0 [1182002ms] <- ioctl$BLKTRACETEARDOWN=0xffffffffffffffff errno=14 cover=307 13:06:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x5385, 0xc04a01) 2021/11/11 13:06:55 result hanged=false: [1182044ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106413 #0 [1182063ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [1182064ms] <- syz_open_dev$sg=0x3 errno=14 cover=1390 #0 [1182064ms] -> ioctl$BLKTRACETEARDOWN(0x3, 0x5385, 0xc04a01) #0 [1182065ms] <- ioctl$BLKTRACETEARDOWN=0xffffffffffffffff errno=14 cover=307 2021/11/11 13:06:55 result hanged=false: 2021/11/11 13:06:55 added new input for call #1 ioctl$BLKTRACETEARDOWN to corpus: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x5385, 0xc04a01) 13:06:55 executing program 0: prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0xffffffffffffffff) [1182111ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106415 #0 [1182131ms] -> prlimit64(0x0, 0x2, 0x20000040, 0x0) #0 [1182131ms] <- prlimit64=0x0 errno=14 cover=126 #0 [1182131ms] -> mprotect(0x20ffc000, 0x1000, 0x0) #0 [1182131ms] <- mprotect=0x0 errno=14 cover=840 #0 [1182132ms] -> pkey_mprotect(0x20ffb000, 0x4000, 0xa, 0xffffffffffffffff) [ 1231.027400] mmap: syz-executor.0 (110205): VmData 37384192 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. #0 [1182139ms] <- pkey_mprotect=0xffffffffffffffff errno=12 cover=12807 enabling collider #0 [1182144ms] -> prlimit64(0x0, 0x2, 0x20000040, 0x0) #0 [1182144ms] <- prlimit64=0x0 errno=14 cover=87 #0 [1182145ms] -> mprotect(0x20ffc000, 0x1000, 0x0) pthread_create failed (errno 12) 2021/11/11 13:06:55 result hanged=false: 13:06:55 executing program 0: prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0xffffffffffffffff) 2021/11/11 13:06:55 #0: triaging type=7 2021/11/11 13:06:55 triaging input for call #2 pkey_mprotect (new signal=13) [1182191ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106417 #0 [1182211ms] -> prlimit64(0x0, 0x2, 0x20000040, 0x0) #0 [1182211ms] <- prlimit64=0x0 errno=14 cover=126 #0 [1182212ms] -> mprotect(0x20ffc000, 0x1000, 0x0) #0 [1182212ms] <- mprotect=0x0 errno=14 cover=815 #0 [1182213ms] -> pkey_mprotect(0x20ffb000, 0x4000, 0xa, 0xffffffffffffffff) #0 [1182214ms] <- pkey_mprotect=0xffffffffffffffff errno=12 cover=571 13:06:55 executing program 0: prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0xffffffffffffffff) 2021/11/11 13:06:55 result hanged=false: [1182263ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106419 #0 [1182285ms] -> prlimit64(0x0, 0x2, 0x20000040, 0x0) #0 [1182285ms] <- prlimit64=0x0 errno=14 cover=126 #0 [1182286ms] -> mprotect(0x20ffc000, 0x1000, 0x0) #0 [1182286ms] <- mprotect=0x0 errno=14 cover=881 #0 [1182287ms] -> pkey_mprotect(0x20ffb000, 0x4000, 0xa, 0xffffffffffffffff) #0 [1182288ms] <- pkey_mprotect=0xffffffffffffffff errno=12 cover=615 13:06:55 executing program 0: prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0xffffffffffffffff) 2021/11/11 13:06:55 result hanged=false: [1182336ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106421 #0 [1182358ms] -> prlimit64(0x0, 0x2, 0x20000040, 0x0) #0 [1182358ms] <- prlimit64=0x0 errno=14 cover=126 #0 [1182359ms] -> mprotect(0x20ffc000, 0x1000, 0x0) #0 [1182360ms] <- mprotect=0x0 errno=14 cover=793 #0 [1182360ms] -> pkey_mprotect(0x20ffb000, 0x4000, 0xa, 0xffffffffffffffff) #0 [1182362ms] <- pkey_mprotect=0xffffffffffffffff errno=12 cover=571 2021/11/11 13:06:55 result hanged=false: 2021/11/11 13:06:55 added new input for call #2 pkey_mprotect to corpus: prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0xffffffffffffffff) 13:06:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {0xd}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 2021/11/11 13:06:55 poll: candidates=8 inputs=0 signal=0 [1182410ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106423 #0 [1182428ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1182429ms] <- perf_event_open=0x3 errno=14 cover=6532 #0 [1182430ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1182430ms] <- socket$nl_generic=0x4 errno=14 cover=4214 #0 [1182432ms] -> syz_genetlink_get_family_id$ethtool(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [1182434ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=19430 #0 [1182435ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1182435ms] <- socket$inet6_udp=0x5 errno=14 cover=5246 #0 [1182441ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x200000c0) #0 [1182442ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=367 #0 [1182442ms] -> sendmsg$ETHTOOL_MSG_PAUSE_SET(0x4, 0x20000100, 0x0) #0 [1182443ms] <- sendmsg$ETHTOOL_MSG_PAUSE_SET=0x20 errno=14 cover=6274 enabling collider #0 [1182453ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1182455ms] <- perf_event_open=0x3 errno=14 cover=10179 #0 [1182456ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1182458ms] <- socket$nl_generic=0x4 errno=14 cover=4314 pthread_create failed (errno 11) 2021/11/11 13:06:56 result hanged=false: 2021/11/11 13:06:56 #0: triaging type=7 2021/11/11 13:06:56 triaging input for call #5 sendmsg$ETHTOOL_MSG_PAUSE_SET (new signal=4) 13:06:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {0xd}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) [1182552ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106525 #0 [1182572ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1182573ms] <- perf_event_open=0x3 errno=14 cover=6895 #0 [1182575ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1182576ms] <- socket$nl_generic=0x4 errno=14 cover=5103 #0 [1182578ms] -> syz_genetlink_get_family_id$ethtool(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [1182579ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=19774 #0 [1182582ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1182582ms] <- socket$inet6_udp=0x5 errno=14 cover=5575 #0 [1182583ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x200000c0) #0 [1182583ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=367 #0 [1182583ms] -> sendmsg$ETHTOOL_MSG_PAUSE_SET(0x4, 0x20000100, 0x0) #0 [1182584ms] <- sendmsg$ETHTOOL_MSG_PAUSE_SET=0x20 errno=14 cover=6328 13:06:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {0xd}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 2021/11/11 13:06:56 result hanged=false: [1182635ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106527 #0 [1182655ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1182656ms] <- perf_event_open=0x3 errno=14 cover=7500 #0 [1182660ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1182661ms] <- socket$nl_generic=0x4 errno=14 cover=4475 #0 [1182663ms] -> syz_genetlink_get_family_id$ethtool(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [1182664ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=20255 #0 [1182666ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1182667ms] <- socket$inet6_udp=0x5 errno=14 cover=6059 #0 [1182668ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x200000c0) #0 [1182668ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=367 #0 [1182670ms] -> sendmsg$ETHTOOL_MSG_PAUSE_SET(0x4, 0x20000100, 0x0) #0 [1182670ms] <- sendmsg$ETHTOOL_MSG_PAUSE_SET=0x20 errno=14 cover=6287 13:06:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {0xd}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 2021/11/11 13:06:56 result hanged=false: [1182726ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106529 #0 [1182745ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1182746ms] <- perf_event_open=0x3 errno=14 cover=6398 #0 [1182747ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1182748ms] <- socket$nl_generic=0x4 errno=14 cover=5070 #0 [1182749ms] -> syz_genetlink_get_family_id$ethtool(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [1182750ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=19753 #0 [1182752ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1182753ms] <- socket$inet6_udp=0x5 errno=14 cover=5536 #0 [1182755ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x200000c0) #0 [1182755ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=367 #0 [1182757ms] -> sendmsg$ETHTOOL_MSG_PAUSE_SET(0x4, 0x20000100, 0x0) #0 [1182757ms] <- sendmsg$ETHTOOL_MSG_PAUSE_SET=0x20 errno=14 cover=6282 2021/11/11 13:06:56 result hanged=false: 2021/11/11 13:06:56 added new input for call #5 sendmsg$ETHTOOL_MSG_PAUSE_SET to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {0xd}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 2021/11/11 13:06:56 #0: triaging type=7 2021/11/11 13:06:56 triaging input for call #2 syz_genetlink_get_family_id$ethtool (new signal=1) 13:06:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {0xd}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) [1182812ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106531 #0 [1182832ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1182832ms] <- perf_event_open=0x3 errno=14 cover=7225 #0 [1182834ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1182835ms] <- socket$nl_generic=0x4 errno=14 cover=5128 #0 [1182837ms] -> syz_genetlink_get_family_id$ethtool(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [1182838ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=19634 #0 [1182841ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1182841ms] <- socket$inet6_udp=0x5 errno=14 cover=5572 #0 [1182843ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x200000c0) #0 [1182843ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=381 #0 [1182845ms] -> sendmsg$ETHTOOL_MSG_PAUSE_SET(0x4, 0x20000100, 0x0) #0 [1182845ms] <- sendmsg$ETHTOOL_MSG_PAUSE_SET=0x20 errno=14 cover=6342 13:06:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {0xd}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 2021/11/11 13:06:56 result hanged=false: [1182899ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106533 #0 [1182920ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1182921ms] <- perf_event_open=0x3 errno=14 cover=6365 #0 [1182922ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1182923ms] <- socket$nl_generic=0x4 errno=14 cover=4884 #0 [1182924ms] -> syz_genetlink_get_family_id$ethtool(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [1182925ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=19474 #0 [1182929ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1182930ms] <- socket$inet6_udp=0x5 errno=14 cover=5569 #0 [1182931ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x200000c0) #0 [1182931ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=367 #0 [1182931ms] -> sendmsg$ETHTOOL_MSG_PAUSE_SET(0x4, 0x20000100, 0x0) #0 [1182932ms] <- sendmsg$ETHTOOL_MSG_PAUSE_SET=0x20 errno=14 cover=6358 13:06:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {0xd}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 2021/11/11 13:06:56 result hanged=false: [1182988ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106535 #0 [1183011ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1183011ms] <- perf_event_open=0x3 errno=14 cover=6624 #0 [1183013ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1183014ms] <- socket$nl_generic=0x4 errno=14 cover=5099 #0 [1183015ms] -> syz_genetlink_get_family_id$ethtool(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [1183016ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=19752 #0 [1183018ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1183019ms] <- socket$inet6_udp=0x5 errno=14 cover=5424 #0 [1183020ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x200000c0) #0 [1183020ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=381 #0 [1183021ms] -> sendmsg$ETHTOOL_MSG_PAUSE_SET(0x4, 0x20000100, 0x0) #0 [1183022ms] <- sendmsg$ETHTOOL_MSG_PAUSE_SET=0x20 errno=14 cover=6296 2021/11/11 13:06:56 result hanged=false: 2021/11/11 13:06:56 added new input for call #2 syz_genetlink_get_family_id$ethtool to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {0xd}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 13:06:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x108) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [1183078ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106537 #0 [1183098ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [1183099ms] <- socket$inet6_udplite=0x3 errno=14 cover=1649 #0 [1183101ms] -> setsockopt$inet6_IPV6_HOPOPTS(0x3, 0x29, 0x36, 0x200000c0, 0x108) #0 [1183102ms] <- setsockopt$inet6_IPV6_HOPOPTS=0x0 errno=14 cover=995 #0 [1183103ms] -> setsockopt$inet6_opts(0x3, 0x29, 0x6, 0x0, 0x0) #0 [1183103ms] <- setsockopt$inet6_opts=0x0 errno=14 cover=212 enabling collider #0 [1183104ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [1183106ms] <- socket$inet6_udplite=0x3 errno=14 cover=1721 #0 [1183107ms] -> setsockopt$inet6_IPV6_HOPOPTS(0x3, 0x29, 0x36, 0x200000c0, 0x108) #0 [1183107ms] <- setsockopt$inet6_IPV6_HOPOPTS=0x0 errno=14 cover=566 pthread_create failed (errno 11) 13:06:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x108) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 2021/11/11 13:06:56 result hanged=false: 2021/11/11 13:06:56 #0: triaging type=7 2021/11/11 13:06:56 triaging input for call #2 setsockopt$inet6_opts (new signal=6) [1183192ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106639 #0 [1183211ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [1183212ms] <- socket$inet6_udplite=0x3 errno=14 cover=1668 #0 [1183216ms] -> setsockopt$inet6_IPV6_HOPOPTS(0x3, 0x29, 0x36, 0x200000c0, 0x108) #0 [1183216ms] <- setsockopt$inet6_IPV6_HOPOPTS=0x0 errno=14 cover=1008 #0 [1183218ms] -> setsockopt$inet6_opts(0x3, 0x29, 0x6, 0x0, 0x0) #0 [1183218ms] <- setsockopt$inet6_opts=0x0 errno=14 cover=210 13:06:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x108) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 2021/11/11 13:06:56 result hanged=false: [1183263ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106641 #0 [1183282ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [1183282ms] <- socket$inet6_udplite=0x3 errno=14 cover=1682 #0 [1183284ms] -> setsockopt$inet6_IPV6_HOPOPTS(0x3, 0x29, 0x36, 0x200000c0, 0x108) #0 [1183284ms] <- setsockopt$inet6_IPV6_HOPOPTS=0x0 errno=14 cover=1004 #0 [1183286ms] -> setsockopt$inet6_opts(0x3, 0x29, 0x6, 0x0, 0x0) #0 [1183286ms] <- setsockopt$inet6_opts=0x0 errno=14 cover=210 13:06:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x108) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 2021/11/11 13:06:56 result hanged=false: [1183332ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106643 #0 [1183351ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [1183352ms] <- socket$inet6_udplite=0x3 errno=14 cover=1646 #0 [1183353ms] -> setsockopt$inet6_IPV6_HOPOPTS(0x3, 0x29, 0x36, 0x200000c0, 0x108) #0 [1183353ms] <- setsockopt$inet6_IPV6_HOPOPTS=0x0 errno=14 cover=996 #0 [1183355ms] -> setsockopt$inet6_opts(0x3, 0x29, 0x6, 0x0, 0x0) #0 [1183355ms] <- setsockopt$inet6_opts=0x0 errno=14 cover=213 2021/11/11 13:06:56 result hanged=false: 2021/11/11 13:06:56 added new input for call #2 setsockopt$inet6_opts to corpus: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x108) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 13:06:56 executing program 0: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)={0x0, "5b3d12f3e500eaff45ac3a6d0e6aca26b66460b9fa7c1a2f33596fadd775e56641e4cbaa424188fbde10c35c47b84953d954433ac2c36664f2fe5203d26de4d0"}, 0x48, r1) [1183404ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106645 #0 [1183423ms] -> add_key$keyring(0x20000100, 0x20000140, 0x0, 0x0, 0xfffffffffffffffd) #0 [1183424ms] <- add_key$keyring=0x2e0a77e9 errno=14 cover=1647 #0 [1183425ms] -> add_key$keyring(0x20000080, 0x200000c0, 0x0, 0x0, 0x2e0a77e9) #0 [1183425ms] <- add_key$keyring=0x2b7ad785 errno=14 cover=1390 #0 [1183426ms] -> add_key$fscrypt_v1(0x20000840, 0x20000880, 0x200008c0, 0x48, 0x2b7ad785) #0 [1183426ms] <- add_key$fscrypt_v1=0x1d3112b errno=14 cover=2703 enabling collider #0 [1183428ms] -> add_key$keyring(0x20000100, 0x20000140, 0x0, 0x0, 0xfffffffffffffffd) #0 [1183428ms] <- add_key$keyring=0x251b7db7 errno=14 cover=1192 #0 [1183428ms] -> add_key$keyring(0x20000080, 0x200000c0, 0x0, 0x0, 0x251b7db7) #0 [1183429ms] <- add_key$keyring=0x22fef3c6 errno=14 cover=1499 pthread_create failed (errno 11) 13:06:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x20}}, 0x0) 2021/11/11 13:06:57 result hanged=false: [1183504ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106747 #0 [1183524ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1183525ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6214 #0 [1183526ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1183527ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5422 #0 [1183528ms] -> syz_genetlink_get_family_id$ieee802154(0x20000180, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [1183529ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5444 #0 [1183533ms] -> sendmsg$IEEE802154_ADD_IFACE(0x4, 0x20000240, 0x0) #0 [1183534ms] <- sendmsg$IEEE802154_ADD_IFACE=0x20 errno=14 cover=1846 enabling collider #0 [1183535ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1183536ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5479 #0 [1183536ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1183537ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5455 pthread_create failed (errno 11) 2021/11/11 13:06:57 result hanged=false: 2021/11/11 13:06:57 #0: triaging type=7 2021/11/11 13:06:57 triaging input for call #3 sendmsg$IEEE802154_ADD_IFACE (new signal=2) 13:06:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x20}}, 0x0) [1183621ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106849 #0 [1183642ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1183643ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6292 #0 [1183647ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1183647ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5470 #0 [1183649ms] -> syz_genetlink_get_family_id$ieee802154(0x20000180, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [1183650ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5501 #0 [1183651ms] -> sendmsg$IEEE802154_ADD_IFACE(0x4, 0x20000240, 0x0) #0 [1183651ms] <- sendmsg$IEEE802154_ADD_IFACE=0x20 errno=14 cover=1851 13:06:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x20}}, 0x0) 2021/11/11 13:06:57 result hanged=false: [1183696ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106851 #0 [1183723ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1183724ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6283 #0 [1183725ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1183725ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5628 #0 [1183726ms] -> syz_genetlink_get_family_id$ieee802154(0x20000180, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [1183726ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5437 #0 [1183728ms] -> sendmsg$IEEE802154_ADD_IFACE(0x4, 0x20000240, 0x0) #0 [1183729ms] <- sendmsg$IEEE802154_ADD_IFACE=0x20 errno=14 cover=1827 13:06:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x20}}, 0x0) 2021/11/11 13:06:57 result hanged=false: [1183771ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106853 #0 [1183792ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1183793ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6268 #0 [1183803ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1183803ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5520 #0 [1183805ms] -> syz_genetlink_get_family_id$ieee802154(0x20000180, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [1183805ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5424 #0 [1183806ms] -> sendmsg$IEEE802154_ADD_IFACE(0x4, 0x20000240, 0x0) #0 [1183807ms] <- sendmsg$IEEE802154_ADD_IFACE=0x20 errno=14 cover=1816 2021/11/11 13:06:57 result hanged=false: 2021/11/11 13:06:57 added new input for call #3 sendmsg$IEEE802154_ADD_IFACE to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x20}}, 0x0) 2021/11/11 13:06:57 #0: triaging type=7 2021/11/11 13:06:57 triaging input for call #0 syz_init_net_socket$nl_generic (new signal=2) 13:06:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x20}}, 0x0) [1183854ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106855 #0 [1183879ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1183880ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6277 #0 [1183881ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1183882ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5493 #0 [1183884ms] -> syz_genetlink_get_family_id$ieee802154(0x20000180, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [1183885ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=6056 #0 [1183886ms] -> sendmsg$IEEE802154_ADD_IFACE(0x4, 0x20000240, 0x0) #0 [1183886ms] <- sendmsg$IEEE802154_ADD_IFACE=0x20 errno=14 cover=1866 13:06:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x20}}, 0x0) 2021/11/11 13:06:57 result hanged=false: [1183931ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106857 #0 [1183950ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1183951ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6269 #0 [1183952ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1183953ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5466 #0 [1183954ms] -> syz_genetlink_get_family_id$ieee802154(0x20000180, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [1183954ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5444 #0 [1183959ms] -> sendmsg$IEEE802154_ADD_IFACE(0x4, 0x20000240, 0x0) #0 [1183959ms] <- sendmsg$IEEE802154_ADD_IFACE=0x20 errno=14 cover=1859 13:06:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x20}}, 0x0) 2021/11/11 13:06:57 result hanged=false: [1184004ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106859 #0 [1184022ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1184023ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6211 #0 [1184024ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1184025ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5516 #0 [1184027ms] -> syz_genetlink_get_family_id$ieee802154(0x20000180, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [1184028ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=11096 #0 [1184036ms] -> sendmsg$IEEE802154_ADD_IFACE(0x4, 0x20000240, 0x0) #0 [1184036ms] <- sendmsg$IEEE802154_ADD_IFACE=0x20 errno=14 cover=1867 2021/11/11 13:06:57 result hanged=false: 2021/11/11 13:06:57 added new input for call #0 syz_init_net_socket$nl_generic to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x20}}, 0x0) 13:06:57 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @short}, 0x14) [1184088ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106861 #0 [1184109ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [1184111ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=6328 #0 [1184112ms] -> bind$802154_dgram(0x4, 0x20000140, 0x14) #0 [1184113ms] <- bind$802154_dgram=0xffffffffffffffff errno=19 cover=2070 enabling collider #0 [1184115ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [1184115ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=5522 13:06:57 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @short}, 0x14) 2021/11/11 13:06:57 result hanged=false: 2021/11/11 13:06:57 #0: triaging type=7 2021/11/11 13:06:57 triaging input for call #1 bind$802154_dgram (new signal=1) [1184162ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106863 #0 [1184183ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [1184183ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=6285 #0 [1184185ms] -> bind$802154_dgram(0x4, 0x20000140, 0x14) #0 [1184185ms] <- bind$802154_dgram=0xffffffffffffffff errno=19 cover=176 13:06:57 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @short}, 0x14) 2021/11/11 13:06:57 result hanged=false: [1184230ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106865 #0 [1184252ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [1184253ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=6304 #0 [1184255ms] -> bind$802154_dgram(0x4, 0x20000140, 0x14) #0 [1184255ms] <- bind$802154_dgram=0xffffffffffffffff errno=19 cover=176 13:06:57 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @short}, 0x14) 2021/11/11 13:06:57 result hanged=false: [1184300ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106867 #0 [1184319ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [1184320ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=6300 #0 [1184322ms] -> bind$802154_dgram(0x4, 0x20000140, 0x14) #0 [1184325ms] <- bind$802154_dgram=0xffffffffffffffff errno=19 cover=176 2021/11/11 13:06:57 result hanged=false: 2021/11/11 13:06:57 added new input for call #1 bind$802154_dgram to corpus: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @short}, 0x14) 13:06:57 executing program 0: ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'ipvlan0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001c80)) [1184375ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106869 #0 [1184400ms] -> ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x20000000) #0 [1184400ms] <- ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD=0xffffffffffffffff errno=9 cover=45 #0 [1184400ms] -> socketpair$nbd(0x1, 0x1, 0x0, 0x20001c80) #0 [1184402ms] <- socketpair$nbd=0x0 errno=14 cover=3943 enabling collider #0 [1184403ms] -> ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x20000000) #0 [1184403ms] <- ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD=0xffffffffffffffff errno=9 cover=45 #0 [1184404ms] -> socketpair$nbd(0x1, 13:06:57 executing program 0: r0 = syz_io_uring_setup(0x1081, &(0x7f0000000280), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) io_uring_enter(r0, 0x0, 0xa36b, 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 2021/11/11 13:06:57 result hanged=false: [1184445ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106871 #0 [1184467ms] -> syz_io_uring_setup(0x1081, 0x20000280, 0x20ffd000, 0x20800000, 0x20000180, 0x20000040) #0 [1184472ms] <- syz_io_uring_setup=0x3 errno=14 cover=10292 #0 [1184473ms] -> io_uring_enter(0x3, 0x0, 0xa36b, 0x1, 0x0, 0x0) pthread_create failed (errno 11) 13:06:59 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) 2021/11/11 13:06:59 result hanged=false: [1185555ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106973 #0 [1185581ms] -> syz_genetlink_get_family_id$nl80211(0x20000540, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [1185583ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=13077 enabling collider #0 [1185586ms] -> syz_genetlink_get_family_id$nl80211(0x20000540, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [1185587ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11366 13:06:59 executing program 0: perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2021/11/11 13:06:59 result hanged=false: 2021/11/11 13:06:59 poll: candidates=8 inputs=0 signal=0 [1185630ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106975 #0 [1185651ms] -> perf_event_open$cgroup(0x20000600, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [1185667ms] <- perf_event_open$cgroup=0x3 errno=14 cover=182362 enabling collider #0 [1185668ms] -> perf_event_open$cgroup(0x20000600, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [1185671ms] <- perf_event_open$cgroup=0x3 errno=14 cover=2278 13:06:59 executing program 0: perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2021/11/11 13:06:59 result hanged=false: 2021/11/11 13:06:59 #0: triaging type=7 2021/11/11 13:06:59 triaging input for call #0 perf_event_open$cgroup (new signal=2) [1185714ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106977 #0 [1185736ms] -> perf_event_open$cgroup(0x20000600, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [1185736ms] <- perf_event_open$cgroup=0x3 errno=14 cover=2289 2021/11/11 13:06:59 result hanged=false: 13:06:59 executing program 0: perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [1185781ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106979 #0 [1185800ms] -> perf_event_open$cgroup(0x20000600, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [1185801ms] <- perf_event_open$cgroup=0x3 errno=14 cover=2573 13:06:59 executing program 0: perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2021/11/11 13:06:59 result hanged=false: [1185846ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106981 #0 [1185871ms] -> perf_event_open$cgroup(0x20000600, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [1185874ms] <- perf_event_open$cgroup=0x3 errno=14 cover=1887 2021/11/11 13:06:59 result hanged=false: 2021/11/11 13:06:59 added new input for call #0 perf_event_open$cgroup to corpus: perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:06:59 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x6000003) [1185925ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106983 #0 [1185945ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1185945ms] <- perf_event_open=0x3 errno=14 cover=6658 #0 [1185946ms] -> inotify_init1(0x0) #0 [1185947ms] <- inotify_init1=0x4 errno=14 cover=669 #0 [1185947ms] -> inotify_add_watch(0x4, 0x20000040, 0x6000003) #0 [1185947ms] <- inotify_add_watch=0x1 errno=14 cover=1043 enabling collider #0 [1185957ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1185957ms] <- perf_event_open=0x3 errno=14 cover=6620 #0 [1185958ms] -> inotify_init1(0x0) #0 [1185959ms] <- inotify_init1=0x4 errno=14 cover=668 pthread_create failed (errno 11) 2021/11/11 13:06:59 result hanged=false: 13:06:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000000140)="99", 0x1) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) [1186051ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107085 #0 [1186071ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1186072ms] <- socket$inet6_tcp=0x3 errno=14 cover=1745 #0 [1186073ms] -> bind$inet6(0x3, 0x20000200, 0x1c) #0 [1186074ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=322 #0 [1186077ms] -> connect$inet6(0x3, 0x20000000, 0x1c) pthread_create failed (errno 11) 13:07:00 executing program 0: sigaltstack(&(0x7f0000ffd000/0x3000)=nil, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000100)=0x9, 0x80, 0x2) 2021/11/11 13:07:00 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [1187154ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107187 #0 [1187178ms] -> sigaltstack(0x20ffd000, 0x0) #0 [1187180ms] <- sigaltstack=0xffffffffffffffff errno=12 cover=465 #0 [1187181ms] -> inotify_add_watch(0xffffffffffffffff, 0x20000040, 0x200) #0 [1187181ms] <- inotify_add_watch=0xffffffffffffffff errno=9 cover=47 #0 [1187181ms] -> mprotect(0x20ffc000, 0x4000, 0x0) #0 [1187182ms] <- mprotect=0x0 errno=14 cover=514 #0 [1187182ms] -> mbind(0x20ffd000, 0x1000, 0x3, 0x20000100, 0x80, 0x2) #0 [1187183ms] <- mbind=0x0 errno=14 cover=1364 enabling collider #0 [1187183ms] -> sigaltstack(0x20ffd000, 0x0) #0 [1187183ms] <- sigaltstack=0xffffffffffffffff errno=14 cover=343 #0 [1187184ms] -> inotify_add_watch(0xffffffffffffffff, 0x20000040, 0x200) #0 [1187184ms] <- inotify_add_watch=0xffffffffffffffff errno=9 cover=47 pthread_create failed (errno 11) 2021/11/11 13:07:00 result hanged=false: 2021/11/11 13:07:00 #0: triaging type=7 13:07:00 executing program 0: sigaltstack(&(0x7f0000ffd000/0x3000)=nil, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000100)=0x9, 0x80, 0x2) 2021/11/11 13:07:00 triaging input for call #3 mbind (new signal=3) [1187267ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107289 #0 [1187288ms] -> sigaltstack(0x20ffd000, 0x0) #0 [1187289ms] <- sigaltstack=0xffffffffffffffff errno=12 cover=465 #0 [1187289ms] -> inotify_add_watch(0xffffffffffffffff, 0x20000040, 0x200) #0 [1187289ms] <- inotify_add_watch=0xffffffffffffffff errno=9 cover=47 #0 [1187289ms] -> mprotect(0x20ffc000, 0x4000, 0x0) #0 [1187289ms] <- mprotect=0x0 errno=14 cover=525 #0 [1187289ms] -> mbind(0x20ffd000, 0x1000, 0x3, 0x20000100, 0x80, 0x2) #0 [1187290ms] <- mbind=0x0 errno=14 cover=1558 13:07:00 executing program 0: sigaltstack(&(0x7f0000ffd000/0x3000)=nil, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000100)=0x9, 0x80, 0x2) 2021/11/11 13:07:00 result hanged=false: [1187335ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107291 #0 [1187354ms] -> sigaltstack(0x20ffd000, 0x0) #0 [1187354ms] <- sigaltstack=0xffffffffffffffff errno=12 cover=454 #0 [1187355ms] -> inotify_add_watch(0xffffffffffffffff, 0x20000040, 0x200) #0 [1187355ms] <- inotify_add_watch=0xffffffffffffffff errno=9 cover=47 #0 [1187355ms] -> mprotect(0x20ffc000, 0x4000, 0x0) #0 [1187355ms] <- mprotect=0x0 errno=14 cover=558 #0 [1187355ms] -> mbind(0x20ffd000, 0x1000, 0x3, 0x20000100, 0x80, 0x2) #0 [1187356ms] <- mbind=0x0 errno=14 cover=1514 13:07:00 executing program 0: sigaltstack(&(0x7f0000ffd000/0x3000)=nil, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000100)=0x9, 0x80, 0x2) 2021/11/11 13:07:00 result hanged=false: [1187401ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107293 #0 [1187421ms] -> sigaltstack(0x20ffd000, 0x0) #0 [1187421ms] <- sigaltstack=0xffffffffffffffff errno=12 cover=476 #0 [1187422ms] -> inotify_add_watch(0xffffffffffffffff, 0x20000040, 0x200) #0 [1187422ms] <- inotify_add_watch=0xffffffffffffffff errno=9 cover=47 #0 [1187422ms] -> mprotect(0x20ffc000, 0x4000, 0x0) #0 [1187422ms] <- mprotect=0x0 errno=14 cover=635 #0 [1187423ms] -> mbind(0x20ffd000, 0x1000, 0x3, 0x20000100, 0x80, 0x2) #0 [1187423ms] <- mbind=0x0 errno=14 cover=1558 2021/11/11 13:07:00 result hanged=false: 2021/11/11 13:07:00 added new input for call #3 mbind to corpus: sigaltstack(&(0x7f0000ffd000/0x3000)=nil, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000100)=0x9, 0x80, 0x2) 13:07:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x4000028) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xc2000258) [1187474ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107295 #0 [1187494ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1187500ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=14094 #0 [1187502ms] -> inotify_init1(0x0) #0 [1187502ms] <- inotify_init1=0x3 errno=14 cover=626 #0 [1187502ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1187502ms] <- perf_event_open=0x4 errno=14 cover=3931 #0 [1187503ms] -> inotify_add_watch(0x3, 0x20000140, 0x4000028) #0 [1187503ms] <- inotify_add_watch=0x1 errno=14 cover=1125 #0 [1187504ms] -> inotify_add_watch(0x3, 0x20000080, 0xc2000258) #0 [1187504ms] <- inotify_add_watch=0x1 errno=14 cover=762 enabling collider #0 [1187507ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1187507ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1433 #0 [1187507ms] -> inotify_init1(0x0) #0 [1187508ms] <- inotify_init1=0x3 errno=14 cover=668 pthread_create failed (errno 11) 2021/11/11 13:07:01 result hanged=false: 13:07:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x4000028) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xc2000258) 2021/11/11 13:07:01 #0: triaging type=7 2021/11/11 13:07:01 triaging input for call #4 inotify_add_watch (new signal=2) [1187595ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107397 #0 [1187617ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1187622ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13994 #0 [1187624ms] -> inotify_init1(0x0) #0 [1187624ms] <- inotify_init1=0x3 errno=14 cover=571 #0 [1187624ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1187624ms] <- perf_event_open=0x4 errno=14 cover=4212 #0 [1187625ms] -> inotify_add_watch(0x3, 0x20000140, 0x4000028) #0 [1187625ms] <- inotify_add_watch=0x1 errno=14 cover=3250 #0 [1187626ms] -> inotify_add_watch(0x3, 0x20000080, 0xc2000258) #0 [1187626ms] <- inotify_add_watch=0x1 errno=14 cover=1738 13:07:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x4000028) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xc2000258) 2021/11/11 13:07:01 result hanged=false: [1187677ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107399 #0 [1187700ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1187706ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13226 #0 [1187708ms] -> inotify_init1(0x0) #0 [1187708ms] <- inotify_init1=0x3 errno=14 cover=669 #0 [1187710ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1187710ms] <- perf_event_open=0x4 errno=14 cover=4029 #0 [1187711ms] -> inotify_add_watch(0x3, 0x20000140, 0x4000028) #0 [1187711ms] <- inotify_add_watch=0x1 errno=14 cover=1182 #0 [1187712ms] -> inotify_add_watch(0x3, 0x20000080, 0xc2000258) #0 [1187712ms] <- inotify_add_watch=0x1 errno=14 cover=750 13:07:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x4000028) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xc2000258) 2021/11/11 13:07:01 result hanged=false: [1187760ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107401 #0 [1187782ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1187788ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13063 #0 [1187790ms] -> inotify_init1(0x0) #0 [1187790ms] <- inotify_init1=0x3 errno=14 cover=593 #0 [1187790ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1187791ms] <- perf_event_open=0x4 errno=14 cover=3920 #0 [1187791ms] -> inotify_add_watch(0x3, 0x20000140, 0x4000028) #0 [1187791ms] <- inotify_add_watch=0x1 errno=14 cover=1139 #0 [1187792ms] -> inotify_add_watch(0x3, 0x20000080, 0xc2000258) #0 [1187792ms] <- inotify_add_watch=0x1 errno=14 cover=762 2021/11/11 13:07:01 result hanged=false: 2021/11/11 13:07:01 added new input for call #4 inotify_add_watch to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x4000028) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xc2000258) 13:07:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x4000028) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xc2000258) 2021/11/11 13:07:01 #0: triaging type=7 2021/11/11 13:07:01 triaging input for call #3 inotify_add_watch (new signal=1) [1187846ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107403 #0 [1187866ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1187870ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13394 #0 [1187872ms] -> inotify_init1(0x0) #0 [1187873ms] <- inotify_init1=0x3 errno=14 cover=604 #0 [1187873ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1187873ms] <- perf_event_open=0x4 errno=14 cover=3942 #0 [1187873ms] -> inotify_add_watch(0x3, 0x20000140, 0x4000028) #0 [1187874ms] <- inotify_add_watch=0x1 errno=14 cover=1143 #0 [1187874ms] -> inotify_add_watch(0x3, 0x20000080, 0xc2000258) #0 [1187874ms] <- inotify_add_watch=0x1 errno=14 cover=763 2021/11/11 13:07:01 result hanged=false: 13:07:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x4000028) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xc2000258) [1187926ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107405 #0 [1187948ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1187952ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13129 #0 [1187953ms] -> inotify_init1(0x0) #0 [1187954ms] <- inotify_init1=0x3 errno=14 cover=571 #0 [1187954ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1187954ms] <- perf_event_open=0x4 errno=14 cover=3898 #0 [1187954ms] -> inotify_add_watch(0x3, 0x20000140, 0x4000028) #0 [1187955ms] <- inotify_add_watch=0x1 errno=14 cover=1163 #0 [1187955ms] -> inotify_add_watch(0x3, 0x20000080, 0xc2000258) #0 [1187955ms] <- inotify_add_watch=0x1 errno=14 cover=751 2021/11/11 13:07:01 result hanged=false: 13:07:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x4000028) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xc2000258) [1188004ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107407 #0 [1188022ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1188028ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13571 #0 [1188030ms] -> inotify_init1(0x0) #0 [1188030ms] <- inotify_init1=0x3 errno=14 cover=629 #0 [1188031ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1188032ms] <- perf_event_open=0x4 errno=14 cover=4327 #0 [1188037ms] -> inotify_add_watch(0x3, 0x20000140, 0x4000028) #0 [1188038ms] <- inotify_add_watch=0x1 errno=14 cover=3515 #0 [1188039ms] -> inotify_add_watch(0x3, 0x20000080, 0xc2000258) #0 [1188040ms] <- inotify_add_watch=0x1 errno=14 cover=1762 2021/11/11 13:07:01 result hanged=false: 2021/11/11 13:07:01 added new input for call #3 inotify_add_watch to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x4000028) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xc2000258) 13:07:01 executing program 0: getpid() ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 'w\x00Jn;m\x00', 0x0, 0xfffffffe}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) pidfd_open(r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x27f7, 0x0, 0x0, 0x161}) pread64(r0, &(0x7f00000000c0)=""/154, 0x9a, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) r3 = dup3(r2, r0, 0x0) pidfd_send_signal(r3, 0x23, &(0x7f0000000240)={0x40, 0x4, 0x6}, 0x0) [1188090ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107409 #0 [1188109ms] -> getpid() #0 [1188109ms] <- getpid=0x1a391 errno=14 cover=48 #0 [1188109ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [1188109ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [1188110ms] -> ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) #0 [1188110ms] <- ioctl$KDADDIO=0xffffffffffffffff errno=9 cover=45 #0 [1188110ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [1188110ms] <- openat$tun=0x3 errno=14 cover=1406 #0 [1188110ms] -> ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x20000040) #0 [1188110ms] <- ioctl$sock_FIOGETOWN=0xffffffffffffffff errno=9 cover=45 #0 [1188110ms] -> pidfd_open(0x0, 0x0) #0 [1188110ms] <- pidfd_open=0xffffffffffffffff errno=22 cover=35 #0 [1188112ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [1188119ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=51691 #0 [1188128ms] -> io_uring_setup(0x0, 0x200001c0) #0 [1188130ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=53 #0 [1188131ms] -> pread64(0x3, 0x200000c0, 0x9a, 0x0) pthread_create failed (errno 11) 2021/11/11 13:07:02 result hanged=false: 2021/11/11 13:07:02 #0: triaging type=7 13:07:02 executing program 0: getpid() ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 'w\x00Jn;m\x00', 0x0, 0xfffffffe}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) pidfd_open(r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x27f7, 0x0, 0x0, 0x161}) pread64(r0, &(0x7f00000000c0)=""/154, 0x9a, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) r3 = dup3(r2, r0, 0x0) pidfd_send_signal(r3, 0x23, &(0x7f0000000240)={0x40, 0x4, 0x6}, 0x0) 2021/11/11 13:07:02 triaging input for call #6 ioctl$TUNSETQUEUE (new signal=1) [1189221ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107511 #0 [1189242ms] -> getpid() #0 [1189242ms] <- getpid=0x1a3f7 errno=14 cover=48 #0 [1189243ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [1189243ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [1189243ms] -> ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) #0 [1189243ms] <- ioctl$KDADDIO=0xffffffffffffffff errno=9 cover=45 #0 [1189243ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [1189244ms] <- openat$tun=0x3 errno=14 cover=1412 #0 [1189245ms] -> ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x20000040) #0 [1189245ms] <- ioctl$sock_FIOGETOWN=0xffffffffffffffff errno=9 cover=45 #0 [1189245ms] -> pidfd_open(0x0, 0x0) #0 [1189245ms] <- pidfd_open=0xffffffffffffffff errno=22 cover=35 #0 [1189246ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [1189252ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=52667 #0 [1189256ms] -> io_uring_setup(0x0, 0x200001c0) #0 [1189256ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=53 #0 [1189256ms] -> pread64(0x3, 0x200000c0, 0x9a, 0x0) pthread_create failed (errno 11) 2021/11/11 13:07:03 result hanged=false: 13:07:03 executing program 0: getpid() ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 'w\x00Jn;m\x00', 0x0, 0xfffffffe}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) pidfd_open(r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x27f7, 0x0, 0x0, 0x161}) pread64(r0, &(0x7f00000000c0)=""/154, 0x9a, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) r3 = dup3(r2, r0, 0x0) pidfd_send_signal(r3, 0x23, &(0x7f0000000240)={0x40, 0x4, 0x6}, 0x0) [1190333ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107613 #0 [1190351ms] -> getpid() #0 [1190351ms] <- getpid=0x1a45d errno=14 cover=48 #0 [1190352ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [1190352ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [1190352ms] -> ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) #0 [1190352ms] <- ioctl$KDADDIO=0xffffffffffffffff errno=9 cover=45 #0 [1190352ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [1190352ms] <- openat$tun=0x3 errno=14 cover=1404 #0 [1190353ms] -> ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x20000040) #0 [1190353ms] <- ioctl$sock_FIOGETOWN=0xffffffffffffffff errno=9 cover=45 #0 [1190353ms] -> pidfd_open(0x0, 0x0) #0 [1190353ms] <- pidfd_open=0xffffffffffffffff errno=22 cover=35 #0 [1190353ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [1190358ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=47823 #0 [1190361ms] -> io_uring_setup(0x0, 0x200001c0) #0 [1190361ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=53 #0 [1190361ms] -> pread64(0x3, 0x200000c0, 0x9a, 0x0) 2021/11/11 13:07:04 poll: candidates=0 inputs=0 signal=0 pthread_create failed (errno 11) 13:07:04 executing program 0: getpid() ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 'w\x00Jn;m\x00', 0x0, 0xfffffffe}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) pidfd_open(r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x27f7, 0x0, 0x0, 0x161}) pread64(r0, &(0x7f00000000c0)=""/154, 0x9a, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) r3 = dup3(r2, r0, 0x0) pidfd_send_signal(r3, 0x23, &(0x7f0000000240)={0x40, 0x4, 0x6}, 0x0) 2021/11/11 13:07:04 result hanged=false: [1191451ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107715 #0 [1191472ms] -> getpid() #0 [1191473ms] <- getpid=0x1a4c3 errno=14 cover=48 #0 [1191474ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [1191476ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [1191476ms] -> ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) #0 [1191476ms] <- ioctl$KDADDIO=0xffffffffffffffff errno=9 cover=45 #0 [1191476ms] -> openat$tun(0xffffffffffffff9c, 0x20000700, 0x0, 0x0) #0 [1191476ms] <- openat$tun=0x3 errno=14 cover=1393 #0 [1191477ms] -> ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x20000040) #0 [1191477ms] <- ioctl$sock_FIOGETOWN=0xffffffffffffffff errno=9 cover=45 #0 [1191477ms] -> pidfd_open(0x0, 0x0) #0 [1191477ms] <- pidfd_open=0xffffffffffffffff errno=22 cover=35 #0 [1191477ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [1191483ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=48016 #0 [1191488ms] -> io_uring_setup(0x0, 0x200001c0) #0 [1191488ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=53 #0 [1191488ms] -> pread64(0x3, 0x200000c0, 0x9a, 0x0) pthread_create failed (errno 11) 2021/11/11 13:07:06 result hanged=false: 2021/11/11 13:07:06 added new input for call #6 ioctl$TUNSETQUEUE to corpus: getpid() ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 'w\x00Jn;m\x00', 0x0, 0xfffffffe}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) pidfd_open(r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x27f7, 0x0, 0x0, 0x161}) pread64(r0, &(0x7f00000000c0)=""/154, 0x9a, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) r3 = dup3(r2, r0, 0x0) pidfd_send_signal(r3, 0x23, &(0x7f0000000240)={0x40, 0x4, 0x6}, 0x0) 13:07:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_GET_PACK_ID(r2, 0x1267, &(0x7f0000001c40)) [1192578ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107817 #0 [1192593ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [1192594ms] <- syz_open_dev$sg=0x3 errno=14 cover=1390 #0 [1192595ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1192596ms] <- socket$inet6_udp=0x4 errno=14 cover=1719 #0 [1192596ms] -> fcntl$dupfd(0x3, 0x0, 0x4) #0 [1192597ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [1192598ms] -> ioctl$SG_GET_PACK_ID(0x5, 0x1267, 0x20001c40) #0 [1192598ms] <- ioctl$SG_GET_PACK_ID=0x0 errno=14 cover=439 enabling collider #0 [1192599ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [1192600ms] <- syz_open_dev$sg=0x3 errno=14 cover=1421 #0 [1192600ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1192601ms] <- socket$inet6_udp=0x4 errno=14 cover=1751 pthread_create failed (errno 11) 2021/11/11 13:07:06 result hanged=false: 13:07:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_GET_PACK_ID(r2, 0x1267, &(0x7f0000001c40)) 2021/11/11 13:07:06 #0: triaging type=7 2021/11/11 13:07:06 triaging input for call #3 ioctl$SG_GET_PACK_ID (new signal=2) [1192687ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107919 #0 [1192709ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [1192710ms] <- syz_open_dev$sg=0x3 errno=14 cover=1401 #0 [1192712ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1192712ms] <- socket$inet6_udp=0x4 errno=14 cover=1737 #0 [1192712ms] -> fcntl$dupfd(0x3, 0x0, 0x4) #0 [1192712ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [1192712ms] -> ioctl$SG_GET_PACK_ID(0x5, 0x1267, 0x20001c40) #0 [1192713ms] <- ioctl$SG_GET_PACK_ID=0x0 errno=14 cover=385 13:07:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_GET_PACK_ID(r2, 0x1267, &(0x7f0000001c40)) 2021/11/11 13:07:06 result hanged=false: [1192762ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107921 #0 [1192785ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [1192786ms] <- syz_open_dev$sg=0x3 errno=14 cover=1357 #0 [1192786ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1192787ms] <- socket$inet6_udp=0x4 errno=14 cover=1749 #0 [1192787ms] -> fcntl$dupfd(0x3, 0x0, 0x4) #0 [1192787ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [1192787ms] -> ioctl$SG_GET_PACK_ID(0x5, 0x1267, 0x20001c40) #0 [1192787ms] <- ioctl$SG_GET_PACK_ID=0x0 errno=14 cover=385 13:07:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_GET_PACK_ID(r2, 0x1267, &(0x7f0000001c40)) 2021/11/11 13:07:06 result hanged=false: [1192834ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107923 #0 [1192858ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [1192858ms] <- syz_open_dev$sg=0x3 errno=14 cover=1412 #0 [1192859ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1192861ms] <- socket$inet6_udp=0x4 errno=14 cover=1752 #0 [1192866ms] -> fcntl$dupfd(0x3, 0x0, 0x4) #0 [1192866ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [1192867ms] -> ioctl$SG_GET_PACK_ID(0x5, 0x1267, 0x20001c40) #0 [1192867ms] <- ioctl$SG_GET_PACK_ID=0x0 errno=14 cover=439 2021/11/11 13:07:06 result hanged=false: 2021/11/11 13:07:06 added new input for call #3 ioctl$SG_GET_PACK_ID to corpus: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_GET_PACK_ID(r2, 0x1267, &(0x7f0000001c40)) 13:07:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [1192912ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107925 #0 [1192935ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1192935ms] <- perf_event_open=0x3 errno=14 cover=4219 #0 [1192936ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [1192936ms] <- syz_open_dev$tty20=0x4 errno=14 cover=8782 #0 [1192937ms] -> close_range(0x4, 0xffffffffffffffff, 0x0) #0 [1192937ms] <- close_range=0x0 errno=14 cover=12405 enabling collider #0 [1192938ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1192938ms] <- perf_event_open=0x3 errno=14 cover=4145 #0 [1192939ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [1192940ms] <- syz_open_dev$tty20=0x4 errno=14 cover=8841 pthread_create failed (errno 11) 2021/11/11 13:07:06 result hanged=false: 2021/11/11 13:07:06 #0: triaging type=7 13:07:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2021/11/11 13:07:06 triaging input for call #2 close_range (new signal=36) [1193020ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108027 #0 [1193040ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1193041ms] <- perf_event_open=0x3 errno=14 cover=4224 #0 [1193043ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [1193044ms] <- syz_open_dev$tty20=0x4 errno=14 cover=9141 #0 [1193046ms] -> close_range(0x4, 0xffffffffffffffff, 0x0) #0 [1193048ms] <- close_range=0x0 errno=14 cover=12433 13:07:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2021/11/11 13:07:06 result hanged=false: [1193096ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108029 #0 [1193116ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1193119ms] <- perf_event_open=0x3 errno=14 cover=4180 #0 [1193120ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [1193121ms] <- syz_open_dev$tty20=0x4 errno=14 cover=8832 #0 [1193123ms] -> close_range(0x4, 0xffffffffffffffff, 0x0) #0 [1193124ms] <- close_range=0x0 errno=14 cover=12416 13:07:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2021/11/11 13:07:06 result hanged=false: [1193171ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108031 #0 [1193194ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1193195ms] <- perf_event_open=0x3 errno=14 cover=4202 #0 [1193196ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [1193197ms] <- syz_open_dev$tty20=0x4 errno=14 cover=9189 #0 [1193198ms] -> close_range(0x4, 0xffffffffffffffff, 0x0) #0 [1193198ms] <- close_range=0x0 errno=14 cover=12419 2021/11/11 13:07:06 result hanged=false: 2021/11/11 13:07:06 added new input for call #2 close_range to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13:07:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2021/11/11 13:07:06 #0: triaging type=7 2021/11/11 13:07:06 triaging input for call #1 syz_open_dev$tty20 (new signal=4) [1193244ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108033 #0 [1193267ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1193268ms] <- perf_event_open=0x3 errno=14 cover=4241 #0 [1193269ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [1193269ms] <- syz_open_dev$tty20=0x4 errno=14 cover=8849 #0 [1193270ms] -> close_range(0x4, 0xffffffffffffffff, 0x0) #0 [1193272ms] <- close_range=0x0 errno=14 cover=12528 13:07:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2021/11/11 13:07:06 result hanged=false: [1193319ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108035 #0 [1193348ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1193349ms] <- perf_event_open=0x3 errno=14 cover=4205 #0 [1193350ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [1193351ms] <- syz_open_dev$tty20=0x4 errno=14 cover=8910 #0 [1193352ms] -> close_range(0x4, 0xffffffffffffffff, 0x0) #0 [1193353ms] <- close_range=0x0 errno=14 cover=12433 2021/11/11 13:07:06 result hanged=false: 13:07:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [1193398ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108037 #0 [1193423ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1193423ms] <- perf_event_open=0x3 errno=14 cover=4216 #0 [1193425ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [1193427ms] <- syz_open_dev$tty20=0x4 errno=14 cover=32950 #0 [1193429ms] -> close_range(0x4, 0xffffffffffffffff, 0x0) #0 [1193430ms] <- close_range=0x0 errno=14 cover=12405 2021/11/11 13:07:06 result hanged=false: 2021/11/11 13:07:06 added new input for call #1 syz_open_dev$tty20 to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13:07:06 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000340)) 2021/11/11 13:07:06 poll: candidates=8 inputs=0 signal=0 [1193480ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108039 #0 [1193498ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [1193499ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=5502 #0 [1193500ms] -> ioctl$sock_proto_private(0x3, 0x89e0, 0x20000340) #0 [1193500ms] <- ioctl$sock_proto_private=0xffffffffffffffff errno=22 cover=567 enabling collider #0 [1193502ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [1193502ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1788 13:07:07 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000340)) 2021/11/11 13:07:07 result hanged=false: 2021/11/11 13:07:07 #0: triaging type=7 2021/11/11 13:07:07 triaging input for call #1 ioctl$sock_proto_private (new signal=4) [1193546ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108041 #0 [1193568ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [1193569ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1688 #0 [1193570ms] -> ioctl$sock_proto_private(0x3, 0x89e0, 0x20000340) #0 [1193571ms] <- ioctl$sock_proto_private=0xffffffffffffffff errno=22 cover=578 2021/11/11 13:07:07 result hanged=false: 13:07:07 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000340)) [1193620ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108043 #0 [1193642ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [1193645ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1688 #0 [1193646ms] -> ioctl$sock_proto_private(0x3, 0x89e0, 0x20000340) #0 [1193646ms] <- ioctl$sock_proto_private=0xffffffffffffffff errno=22 cover=524 2021/11/11 13:07:07 result hanged=false: 13:07:07 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000340)) [1193693ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108045 #0 [1193714ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [1193715ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1677 #0 [1193716ms] -> ioctl$sock_proto_private(0x3, 0x89e0, 0x20000340) #0 [1193716ms] <- ioctl$sock_proto_private=0xffffffffffffffff errno=22 cover=567 2021/11/11 13:07:07 result hanged=false: 2021/11/11 13:07:07 added new input for call #1 ioctl$sock_proto_private to corpus: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000340)) 13:07:07 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1480}, {&(0x7f0000011000)="ed41000000040000def4655fdef4655fdef4655f00000000000002002000000000000800030000000af301000400000000000000000000000100000050", 0x3d, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x4000}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xe35297fdcfe32c6a) creat(&(0x7f0000000180)='./file0\x00', 0x11) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x200) [1193760ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108047 #0 [1193785ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x9, 0x20000200, 0x0, 0x20012b00) syz_mount_image: size=0 segs=9 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1242.705289] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1242.709664] ext4 filesystem being mounted at /syzkaller-testdir423095910/syzkaller.AcLvA1/9141/file0 supports timestamps until 2038 (0x7fffffff) #0 [1193819ms] <- syz_mount_image$ext4=0x5 errno=0 cover=72899 #0 [1193829ms] -> ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) #0 [1193829ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=9 cover=45 #0 [1193829ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1193830ms] <- openat=0x3 errno=14 cover=2792 #0 [1193830ms] -> renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x20000080, 0xe35297fdcfe32c6a) #0 [1193830ms] <- renameat2=0xffffffffffffffff errno=22 cover=35 #0 [1193831ms] -> creat(0x20000180, 0x11) #0 [1193831ms] <- creat=0xffffffffffffffff errno=21 cover=1091 #0 [1193834ms] -> unlinkat(0x5, 0x200001c0, 0x200) [ 1242.731514] EXT4-fs error (device loop0): ext4_empty_dir:2881: inode #12: block 80: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 1242.741247] EXT4-fs warning (device loop0): ext4_empty_dir:2884: inode #12: comm syz-executor.0: directory missing '.' [ 1242.748069] EXT4-fs error (device loop0): ext4_validate_block_bitmap:398: comm syz-executor.0: bg 0: block 3: invalid block bitmap [ 1242.752122] EXT4-fs error (device loop0) in ext4_free_blocks:5528: Corrupt filesystem [ 1242.754962] EXT4-fs error (device loop0): ext4_free_inode:353: comm syz-executor.0: bit already cleared for inode 12 #0 [1193864ms] <- unlinkat=0x0 errno=14 cover=116286 enabling collider #0 [1193866ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x9, 0x20000200, 0x0, 0x20012b00) #0 [1193872ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=11034 #0 [1193873ms] -> ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) #0 [1193873ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=9 cover=45 #0 [1193873ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1193873ms] <- openat=0x3 errno=14 cover=2251 #0 [1193874ms] -> renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x20000080, 0xe35297fdcfe32c6a) #0 [1193874ms] <- renameat2=0xffffffffffffffff errno=22 cover=35 pthread_create failed (errno 11) 13:07:07 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1480}, {&(0x7f0000011000)="ed41000000040000def4655fdef4655fdef4655f00000000000002002000000000000800030000000af301000400000000000000000000000100000050", 0x3d, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x4000}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xe35297fdcfe32c6a) creat(&(0x7f0000000180)='./file0\x00', 0x11) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x200) 2021/11/11 13:07:07 result hanged=false: 2021/11/11 13:07:07 #0: triaging type=7 2021/11/11 13:07:07 triaging input for call #5 unlinkat (new signal=121) umount(./9141/file0) [1193999ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108149 #0 [1194021ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x9, 0x20000200, 0x0, 0x20012b00) syz_mount_image: size=0 segs=9 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1242.941909] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1242.943956] ext4 filesystem being mounted at /syzkaller-testdir423095910/syzkaller.AcLvA1/9142/file0 supports timestamps until 2038 (0x7fffffff) #0 [1194055ms] <- syz_mount_image$ext4=0x5 errno=0 cover=81571 #0 [1194067ms] -> ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) #0 [1194068ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=9 cover=45 #0 [1194068ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1194068ms] <- openat=0x3 errno=14 cover=2686 #0 [1194069ms] -> renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x20000080, 0xe35297fdcfe32c6a) #0 [1194070ms] <- renameat2=0xffffffffffffffff errno=22 cover=35 #0 [1194070ms] -> creat(0x20000180, 0x11) #0 [1194070ms] <- creat=0xffffffffffffffff errno=21 cover=1117 #0 [1194070ms] -> unlinkat(0x5, 0x200001c0, 0x200) [ 1242.966938] EXT4-fs error (device loop0): ext4_empty_dir:2881: inode #12: block 80: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 1242.971295] EXT4-fs warning (device loop0): ext4_empty_dir:2884: inode #12: comm syz-executor.0: directory missing '.' [ 1242.974115] EXT4-fs error (device loop0): ext4_validate_block_bitmap:398: comm syz-executor.0: bg 0: block 3: invalid block bitmap [ 1242.979786] EXT4-fs error (device loop0) in ext4_free_blocks:5528: Corrupt filesystem [ 1242.982300] EXT4-fs error (device loop0): ext4_free_inode:353: comm syz-executor.0: bit already cleared for inode 12 #0 [1194091ms] <- unlinkat=0x0 errno=14 cover=31005 2021/11/11 13:07:07 result hanged=false: 13:07:07 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1480}, {&(0x7f0000011000)="ed41000000040000def4655fdef4655fdef4655f00000000000002002000000000000800030000000af301000400000000000000000000000100000050", 0x3d, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x4000}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xe35297fdcfe32c6a) creat(&(0x7f0000000180)='./file0\x00', 0x11) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x200) umount(./9142/file0) [1194187ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108151 #0 [1194207ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x9, 0x20000200, 0x0, 0x20012b00) syz_mount_image: size=0 segs=9 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1243.126748] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1243.137982] ext4 filesystem being mounted at /syzkaller-testdir423095910/syzkaller.AcLvA1/9143/file0 supports timestamps until 2038 (0x7fffffff) #0 [1194246ms] <- syz_mount_image$ext4=0x5 errno=0 cover=55982 #0 [1194265ms] -> ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) #0 [1194265ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=9 cover=45 #0 [1194270ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1194270ms] <- openat=0x3 errno=14 cover=2749 #0 [1194271ms] -> renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x20000080, 0xe35297fdcfe32c6a) #0 [1194271ms] <- renameat2=0xffffffffffffffff errno=22 cover=35 #0 [1194272ms] -> creat(0x20000180, 0x11) #0 [1194272ms] <- creat=0xffffffffffffffff errno=21 cover=1079 #0 [1194273ms] -> unlinkat(0x5, 0x200001c0, 0x200) [ 1243.169435] EXT4-fs error (device loop0): ext4_empty_dir:2881: inode #12: block 80: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 1243.174112] EXT4-fs warning (device loop0): ext4_empty_dir:2884: inode #12: comm syz-executor.0: directory missing '.' [ 1243.187522] EXT4-fs error (device loop0): ext4_validate_block_bitmap:398: comm syz-executor.0: bg 0: block 3: invalid block bitmap [ 1243.192704] EXT4-fs error (device loop0) in ext4_free_blocks:5528: Corrupt filesystem [ 1243.198730] EXT4-fs error (device loop0): ext4_free_inode:353: comm syz-executor.0: bit already cleared for inode 12 #0 [1194310ms] <- unlinkat=0x0 errno=14 cover=27775 13:07:07 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1480}, {&(0x7f0000011000)="ed41000000040000def4655fdef4655fdef4655f00000000000002002000000000000800030000000af301000400000000000000000000000100000050", 0x3d, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x4000}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xe35297fdcfe32c6a) creat(&(0x7f0000000180)='./file0\x00', 0x11) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x200) 2021/11/11 13:07:07 result hanged=false: umount(./9143/file0) [1194392ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108153 #0 [1194411ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x9, 0x20000200, 0x0, 0x20012b00) syz_mount_image: size=0 segs=9 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1243.327252] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1243.330822] ext4 filesystem being mounted at /syzkaller-testdir423095910/syzkaller.AcLvA1/9144/file0 supports timestamps until 2038 (0x7fffffff) #0 [1194439ms] <- syz_mount_image$ext4=0x5 errno=0 cover=53683 #0 [1194449ms] -> ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) #0 [1194450ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=9 cover=45 #0 [1194450ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1194450ms] <- openat=0x3 errno=14 cover=2785 #0 [1194451ms] -> renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x20000080, 0xe35297fdcfe32c6a) #0 [1194452ms] <- renameat2=0xffffffffffffffff errno=22 cover=35 #0 [1194452ms] -> creat(0x20000180, 0x11) #0 [1194452ms] <- creat=0xffffffffffffffff errno=21 cover=1068 #0 [1194453ms] -> unlinkat(0x5, 0x200001c0, 0x200) [ 1243.350026] EXT4-fs error (device loop0): ext4_empty_dir:2881: inode #12: block 80: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 1243.359672] EXT4-fs warning (device loop0): ext4_empty_dir:2884: inode #12: comm syz-executor.0: directory missing '.' [ 1243.364242] EXT4-fs error (device loop0): ext4_validate_block_bitmap:398: comm syz-executor.0: bg 0: block 3: invalid block bitmap [ 1243.371977] EXT4-fs error (device loop0) in ext4_free_blocks:5528: Corrupt filesystem [ 1243.374813] EXT4-fs error (device loop0): ext4_free_inode:353: comm syz-executor.0: bit already cleared for inode 12 #0 [1194486ms] <- unlinkat=0x0 errno=14 cover=33492 2021/11/11 13:07:08 result hanged=false: 2021/11/11 13:07:08 added new input for call #5 unlinkat to corpus: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1480}, {&(0x7f0000011000)="ed41000000040000def4655fdef4655fdef4655f00000000000002002000000000000800030000000af301000400000000000000000000000100000050", 0x3d, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x4000}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xe35297fdcfe32c6a) creat(&(0x7f0000000180)='./file0\x00', 0x11) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x200) umount(./9144/file0) 13:07:08 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1480}, {&(0x7f0000011000)="ed41000000040000def4655fdef4655fdef4655f00000000000002002000000000000800030000000af301000400000000000000000000000100000050", 0x3d, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x4000}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xe35297fdcfe32c6a) creat(&(0x7f0000000180)='./file0\x00', 0x11) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x200) 2021/11/11 13:07:08 #0: triaging type=7 2021/11/11 13:07:08 triaging input for call #3 renameat2 (new signal=1) [1194582ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108155 #0 [1194605ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x9, 0x20000200, 0x0, 0x20012b00) syz_mount_image: size=0 segs=9 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1243.516076] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1243.519264] ext4 filesystem being mounted at /syzkaller-testdir423095910/syzkaller.AcLvA1/9145/file0 supports timestamps until 2038 (0x7fffffff) #0 [1194627ms] <- syz_mount_image$ext4=0x5 errno=0 cover=57851 #0 [1194639ms] -> ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) #0 [1194640ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=9 cover=45 #0 [1194642ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1194644ms] <- openat=0x3 errno=14 cover=2832 #0 [1194645ms] -> renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x20000080, 0xe35297fdcfe32c6a) #0 [1194647ms] <- renameat2=0xffffffffffffffff errno=22 cover=35 #0 [1194648ms] -> creat(0x20000180, 0x11) #0 [1194648ms] <- creat=0xffffffffffffffff errno=21 cover=1079 #0 [1194648ms] -> unlinkat(0x5, 0x200001c0, 0x200) [ 1243.545794] EXT4-fs error (device loop0): ext4_empty_dir:2881: inode #12: block 80: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 1243.551840] EXT4-fs warning (device loop0): ext4_empty_dir:2884: inode #12: comm syz-executor.0: directory missing '.' [ 1243.555430] EXT4-fs error (device loop0): ext4_validate_block_bitmap:398: comm syz-executor.0: bg 0: block 3: invalid block bitmap [ 1243.560450] EXT4-fs error (device loop0) in ext4_free_blocks:5528: Corrupt filesystem [ 1243.563372] EXT4-fs error (device loop0): ext4_free_inode:353: comm syz-executor.0: bit already cleared for inode 12 #0 [1194672ms] <- unlinkat=0x0 errno=14 cover=28660 13:07:08 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1480}, {&(0x7f0000011000)="ed41000000040000def4655fdef4655fdef4655f00000000000002002000000000000800030000000af301000400000000000000000000000100000050", 0x3d, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x4000}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xe35297fdcfe32c6a) creat(&(0x7f0000000180)='./file0\x00', 0x11) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x200) 2021/11/11 13:07:08 result hanged=false: umount(./9145/file0) [1194764ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108157 #0 [1194785ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x9, 0x20000200, 0x0, 0x20012b00) syz_mount_image: size=0 segs=9 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1243.701037] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1243.703163] ext4 filesystem being mounted at /syzkaller-testdir423095910/syzkaller.AcLvA1/9146/file0 supports timestamps until 2038 (0x7fffffff) #0 [1194812ms] <- syz_mount_image$ext4=0x5 errno=0 cover=60232 #0 [1194828ms] -> ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) #0 [1194828ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=9 cover=45 #0 [1194829ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1194829ms] <- openat=0x3 errno=14 cover=2805 #0 [1194833ms] -> renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x20000080, 0xe35297fdcfe32c6a) #0 [1194833ms] <- renameat2=0xffffffffffffffff errno=22 cover=35 #0 [1194834ms] -> creat(0x20000180, 0x11) #0 [1194834ms] <- creat=0xffffffffffffffff errno=21 cover=1186 #0 [1194835ms] -> unlinkat(0x5, 0x200001c0, 0x200) [ 1243.731692] EXT4-fs error (device loop0): ext4_empty_dir:2881: inode #12: block 80: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 1243.736088] EXT4-fs warning (device loop0): ext4_empty_dir:2884: inode #12: comm syz-executor.0: directory missing '.' [ 1243.742766] EXT4-fs error (device loop0): ext4_validate_block_bitmap:398: comm syz-executor.0: bg 0: block 3: invalid block bitmap [ 1243.747512] EXT4-fs error (device loop0) in ext4_free_blocks:5528: Corrupt filesystem [ 1243.751146] EXT4-fs error (device loop0): ext4_free_inode:353: comm syz-executor.0: bit already cleared for inode 12 #0 [1194859ms] <- unlinkat=0x0 errno=14 cover=28238 13:07:08 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1480}, {&(0x7f0000011000)="ed41000000040000def4655fdef4655fdef4655f00000000000002002000000000000800030000000af301000400000000000000000000000100000050", 0x3d, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x4000}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xe35297fdcfe32c6a) creat(&(0x7f0000000180)='./file0\x00', 0x11) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x200) 2021/11/11 13:07:08 result hanged=false: umount(./9146/file0) [1194943ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108159 #0 [1194964ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x9, 0x20000200, 0x0, 0x20012b00) syz_mount_image: size=0 segs=9 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1243.877322] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1243.879322] ext4 filesystem being mounted at /syzkaller-testdir423095910/syzkaller.AcLvA1/9147/file0 supports timestamps until 2038 (0x7fffffff) #0 [1194988ms] <- syz_mount_image$ext4=0x5 errno=0 cover=58207 #0 [1195000ms] -> ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) #0 [1195000ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=9 cover=45 #0 [1195001ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1195001ms] <- openat=0x3 errno=14 cover=2759 #0 [1195002ms] -> renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x20000080, 0xe35297fdcfe32c6a) #0 [1195002ms] <- renameat2=0xffffffffffffffff errno=22 cover=35 #0 [1195004ms] -> creat(0x20000180, 0x11) #0 [1195004ms] <- creat=0xffffffffffffffff errno=21 cover=1155 #0 [1195005ms] -> unlinkat(0x5, 0x200001c0, 0x200) [ 1243.901209] EXT4-fs error (device loop0): ext4_empty_dir:2881: inode #12: block 80: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 1243.910714] EXT4-fs warning (device loop0): ext4_empty_dir:2884: inode #12: comm syz-executor.0: directory missing '.' [ 1243.914057] EXT4-fs error (device loop0): ext4_validate_block_bitmap:398: comm syz-executor.0: bg 0: block 3: invalid block bitmap [ 1243.917115] EXT4-fs error (device loop0) in ext4_free_blocks:5528: Corrupt filesystem [ 1243.919470] EXT4-fs error (device loop0): ext4_free_inode:353: comm syz-executor.0: bit already cleared for inode 12 #0 [1195027ms] <- unlinkat=0x0 errno=14 cover=27192 2021/11/11 13:07:08 result hanged=false: 2021/11/11 13:07:08 added new input for call #3 renameat2 to corpus: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1480}, {&(0x7f0000011000)="ed41000000040000def4655fdef4655fdef4655f00000000000002002000000000000800030000000af301000400000000000000000000000100000050", 0x3d, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x4000}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xe35297fdcfe32c6a) creat(&(0x7f0000000180)='./file0\x00', 0x11) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x200) 13:07:08 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1480}, {&(0x7f0000011000)="ed41000000040000def4655fdef4655fdef4655f00000000000002002000000000000800030000000af301000400000000000000000000000100000050", 0x3d, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x4000}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xe35297fdcfe32c6a) creat(&(0x7f0000000180)='./file0\x00', 0x11) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x200) 2021/11/11 13:07:08 #0: triaging type=7 2021/11/11 13:07:08 triaging input for call #0 syz_mount_image$ext4 (new signal=5) umount(./9147/file0) [1195117ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108161 #0 [1195147ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x9, 0x20000200, 0x0, 0x20012b00) syz_mount_image: size=0 segs=9 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1244.065766] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1244.067798] ext4 filesystem being mounted at /syzkaller-testdir423095910/syzkaller.AcLvA1/9148/file0 supports timestamps until 2038 (0x7fffffff) #0 [1195176ms] <- syz_mount_image$ext4=0x5 errno=0 cover=58404 #0 [1195193ms] -> ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) #0 [1195194ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=9 cover=45 #0 [1195195ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1195195ms] <- openat=0x3 errno=14 cover=2759 #0 [1195196ms] -> renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x20000080, 0xe35297fdcfe32c6a) #0 [1195196ms] <- renameat2=0xffffffffffffffff errno=22 cover=35 #0 [1195198ms] -> creat(0x20000180, 0x11) #0 [1195198ms] <- creat=0xffffffffffffffff errno=21 cover=1166 #0 [1195199ms] -> unlinkat(0x5, 0x200001c0, 0x200) [ 1244.095945] EXT4-fs error (device loop0): ext4_empty_dir:2881: inode #12: block 80: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 1244.100515] EXT4-fs warning (device loop0): ext4_empty_dir:2884: inode #12: comm syz-executor.0: directory missing '.' [ 1244.103964] EXT4-fs error (device loop0): ext4_validate_block_bitmap:398: comm syz-executor.0: bg 0: block 3: invalid block bitmap [ 1244.107965] EXT4-fs error (device loop0) in ext4_free_blocks:5528: Corrupt filesystem [ 1244.110556] EXT4-fs error (device loop0): ext4_free_inode:353: comm syz-executor.0: bit already cleared for inode 12 #0 [1195219ms] <- unlinkat=0x0 errno=14 cover=28068 2021/11/11 13:07:08 result hanged=false: 13:07:08 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1480}, {&(0x7f0000011000)="ed41000000040000def4655fdef4655fdef4655f00000000000002002000000000000800030000000af301000400000000000000000000000100000050", 0x3d, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x4000}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xe35297fdcfe32c6a) creat(&(0x7f0000000180)='./file0\x00', 0x11) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x200) umount(./9148/file0) [1195303ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108163 #0 [1195324ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x9, 0x20000200, 0x0, 0x20012b00) syz_mount_image: size=0 segs=9 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1244.243808] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1244.245954] ext4 filesystem being mounted at /syzkaller-testdir423095910/syzkaller.AcLvA1/9149/file0 supports timestamps until 2038 (0x7fffffff) #0 [1195357ms] <- syz_mount_image$ext4=0x5 errno=0 cover=58331 #0 [1195365ms] -> ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) #0 [1195366ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=9 cover=45 #0 [1195366ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1195367ms] <- openat=0x3 errno=14 cover=2804 #0 [1195368ms] -> renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x20000080, 0xe35297fdcfe32c6a) #0 [1195368ms] <- renameat2=0xffffffffffffffff errno=22 cover=35 #0 [1195368ms] -> creat(0x20000180, 0x11) #0 [1195368ms] <- creat=0xffffffffffffffff errno=21 cover=1079 #0 [1195369ms] -> unlinkat(0x5, 0x200001c0, 0x200) [ 1244.265523] EXT4-fs error (device loop0): ext4_empty_dir:2881: inode #12: block 80: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 1244.269915] EXT4-fs warning (device loop0): ext4_empty_dir:2884: inode #12: comm syz-executor.0: directory missing '.' [ 1244.273123] EXT4-fs error (device loop0): ext4_validate_block_bitmap:398: comm syz-executor.0: bg 0: block 3: invalid block bitmap [ 1244.276094] EXT4-fs error (device loop0) in ext4_free_blocks:5528: Corrupt filesystem [ 1244.278708] EXT4-fs error (device loop0): ext4_free_inode:353: comm syz-executor.0: bit already cleared for inode 12 #0 [1195387ms] <- unlinkat=0x0 errno=14 cover=27458 2021/11/11 13:07:08 result hanged=false: 13:07:08 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1480}, {&(0x7f0000011000)="ed41000000040000def4655fdef4655fdef4655f00000000000002002000000000000800030000000af301000400000000000000000000000100000050", 0x3d, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x4000}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xe35297fdcfe32c6a) creat(&(0x7f0000000180)='./file0\x00', 0x11) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x200) umount(./9149/file0) [1195483ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108165 #0 [1195503ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x9, 0x20000200, 0x0, 0x20012b00) syz_mount_image: size=0 segs=9 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1244.419123] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1244.421057] ext4 filesystem being mounted at /syzkaller-testdir423095910/syzkaller.AcLvA1/9150/file0 supports timestamps until 2038 (0x7fffffff) #0 [1195529ms] <- syz_mount_image$ext4=0x5 errno=0 cover=53671 #0 [1195543ms] -> ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) #0 [1195543ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=9 cover=45 #0 [1195544ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1195545ms] <- openat=0x3 errno=14 cover=2820 #0 [1195549ms] -> renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x20000080, 0xe35297fdcfe32c6a) #0 [1195549ms] <- renameat2=0xffffffffffffffff errno=22 cover=35 #0 [1195549ms] -> creat(0x20000180, 0x11) #0 [1195550ms] <- creat=0xffffffffffffffff errno=21 cover=1132 #0 [1195551ms] -> unlinkat(0x5, 0x200001c0, 0x200) [ 1244.447319] EXT4-fs error (device loop0): ext4_empty_dir:2881: inode #12: block 80: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 1244.455155] EXT4-fs warning (device loop0): ext4_empty_dir:2884: inode #12: comm syz-executor.0: directory missing '.' [ 1244.459858] EXT4-fs error (device loop0): ext4_validate_block_bitmap:398: comm syz-executor.0: bg 0: block 3: invalid block bitmap [ 1244.464276] EXT4-fs error (device loop0) in ext4_free_blocks:5528: Corrupt filesystem [ 1244.468201] EXT4-fs error (device loop0): ext4_free_inode:353: comm syz-executor.0: bit already cleared for inode 12 #0 [1195578ms] <- unlinkat=0x0 errno=14 cover=27413 2021/11/11 13:07:09 result hanged=false: 2021/11/11 13:07:09 added new input for call #0 syz_mount_image$ext4 to corpus: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1480}, {&(0x7f0000011000)="ed41000000040000def4655fdef4655fdef4655f00000000000002002000000000000800030000000af301000400000000000000000000000100000050", 0x3d, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x4000}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xe35297fdcfe32c6a) creat(&(0x7f0000000180)='./file0\x00', 0x11) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x200) umount(./9150/file0) 13:07:09 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="b22178ef8d035fd13afa95d806a1b883149ca0f1d8c7e938acf3dcd4fba96c424142815612c7b3df12963475864a3434f89ff51c494763e0f6", 0x39, 0x8}], 0x0, &(0x7f00000003c0)={[{@huge_advise}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@mode={'mode', 0x3d, 0x6}}, {@mode}, {@mode={'mode', 0x3d, 0x6}}], [{@subj_user={'subj_user', 0x3d, ' \x01\x00'}}, {@dont_hash}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@dont_hash}]}) [1195693ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108167 #0 [1195713ms] -> ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) #0 [1195713ms] <- ioctl$sock_ipv6_tunnel_SIOCGET6RD=0xffffffffffffffff errno=9 cover=45 #0 [1195714ms] -> syz_mount_image$tmpfs(0x0, 0x200002c0, 0x7, 0x1, 0x20000380, 0x0, 0x200003c0) SIGSEGV on (nil), skipping #0 [1195720ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=21263 enabling collider #0 [1195722ms] -> ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) #0 [1195722ms] <- ioctl$sock_ipv6_tunnel_SIOCGET6RD=0xffffffffffffffff errno=9 cover=45 #0 [1195725ms] -> syz_mount_image$tmpfs(0x0, 2021/11/11 13:07:09 result hanged=false: 2021/11/11 13:07:09 #0: triaging type=7 2021/11/11 13:07:09 triaging input for call #1 syz_mount_image$tmpfs (new signal=2) 13:07:09 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="b22178ef8d035fd13afa95d806a1b883149ca0f1d8c7e938acf3dcd4fba96c424142815612c7b3df12963475864a3434f89ff51c494763e0f6", 0x39, 0x8}], 0x0, &(0x7f00000003c0)={[{@huge_advise}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@mode={'mode', 0x3d, 0x6}}, {@mode}, {@mode={'mode', 0x3d, 0x6}}], [{@subj_user={'subj_user', 0x3d, ' \x01\x00'}}, {@dont_hash}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@dont_hash}]}) [1195785ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108169 #0 [1195805ms] -> ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) #0 [1195805ms] <- ioctl$sock_ipv6_tunnel_SIOCGET6RD=0xffffffffffffffff errno=9 cover=45 #0 [1195806ms] -> syz_mount_image$tmpfs(0x0, 0x200002c0, 0x7, 0x1, 0x20000380, 0x0, 0x200003c0) SIGSEGV on (nil), skipping #0 [1195814ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=21132 13:07:09 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="b22178ef8d035fd13afa95d806a1b883149ca0f1d8c7e938acf3dcd4fba96c424142815612c7b3df12963475864a3434f89ff51c494763e0f6", 0x39, 0x8}], 0x0, &(0x7f00000003c0)={[{@huge_advise}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@mode={'mode', 0x3d, 0x6}}, {@mode}, {@mode={'mode', 0x3d, 0x6}}], [{@subj_user={'subj_user', 0x3d, ' \x01\x00'}}, {@dont_hash}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@dont_hash}]}) 2021/11/11 13:07:09 result hanged=false: [1195879ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108171 #0 [1195905ms] -> ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) #0 [1195905ms] <- ioctl$sock_ipv6_tunnel_SIOCGET6RD=0xffffffffffffffff errno=9 cover=45 #0 [1195906ms] -> syz_mount_image$tmpfs(0x0, 0x200002c0, 0x7, 0x1, 0x20000380, 0x0, 0x200003c0) SIGSEGV on (nil), skipping #0 [1195912ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=22507 13:07:09 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="b22178ef8d035fd13afa95d806a1b883149ca0f1d8c7e938acf3dcd4fba96c424142815612c7b3df12963475864a3434f89ff51c494763e0f6", 0x39, 0x8}], 0x0, &(0x7f00000003c0)={[{@huge_advise}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@mode={'mode', 0x3d, 0x6}}, {@mode}, {@mode={'mode', 0x3d, 0x6}}], [{@subj_user={'subj_user', 0x3d, ' \x01\x00'}}, {@dont_hash}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@dont_hash}]}) 2021/11/11 13:07:09 result hanged=false: [1195977ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108173 #0 [1196003ms] -> ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) #0 [1196004ms] <- ioctl$sock_ipv6_tunnel_SIOCGET6RD=0xffffffffffffffff errno=9 cover=45 #0 [1196004ms] -> syz_mount_image$tmpfs(0x0, 0x200002c0, 0x7, 0x1, 0x20000380, 0x0, 0x200003c0) SIGSEGV on (nil), skipping #0 [1196009ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=21811 2021/11/11 13:07:09 result hanged=false: 2021/11/11 13:07:09 added new input for call #1 syz_mount_image$tmpfs to corpus: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="b22178ef8d035fd13afa95d806a1b883149ca0f1d8c7e938acf3dcd4fba96c424142815612c7b3df12963475864a3434f89ff51c494763e0f6", 0x39, 0x8}], 0x0, &(0x7f00000003c0)={[{@huge_advise}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@mode={'mode', 0x3d, 0x6}}, {@mode}, {@mode={'mode', 0x3d, 0x6}}], [{@subj_user={'subj_user', 0x3d, ' \x01\x00'}}, {@dont_hash}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@dont_hash}]}) 13:07:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0x3, 0x7, 0x0, 0x0, 0x0, {}, [@NFACCT_QUOTA={0xc}, @NFACCT_QUOTA={0xc}]}, 0x2c}}, 0x0) [1196100ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108175 #0 [1196121ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1196122ms] <- perf_event_open=0x3 errno=14 cover=6533 #0 [1196123ms] -> socket$netlink(0x10, 0x3, 0xa) #0 [1196124ms] <- socket$netlink=0x4 errno=14 cover=4422 #0 [1196124ms] -> sendmsg$NFNL_MSG_ACCT_DEL(0x4, 0x20000340, 0x0) #0 [1196124ms] <- sendmsg$NFNL_MSG_ACCT_DEL=0x2c errno=14 cover=3110 enabling collider #0 [1196135ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1196137ms] <- perf_event_open=0x3 errno=14 cover=15049 #0 [1196137ms] -> socket$netlink(0x10, 0x3, 0xa) #0 [1196138ms] <- socket$netlink=0x4 errno=14 cover=4157 pthread_create failed (errno 11) 13:07:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0x3, 0x7, 0x0, 0x0, 0x0, {}, [@NFACCT_QUOTA={0xc}, @NFACCT_QUOTA={0xc}]}, 0x2c}}, 0x0) 2021/11/11 13:07:09 result hanged=false: 2021/11/11 13:07:09 #0: triaging type=7 2021/11/11 13:07:09 triaging input for call #2 sendmsg$NFNL_MSG_ACCT_DEL (new signal=27) [1196233ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108277 #0 [1196260ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1196262ms] <- perf_event_open=0x3 errno=14 cover=7388 #0 [1196263ms] -> socket$netlink(0x10, 0x3, 0xa) #0 [1196264ms] <- socket$netlink=0x4 errno=14 cover=4949 #0 [1196264ms] -> sendmsg$NFNL_MSG_ACCT_DEL(0x4, 0x20000340, 0x0) #0 [1196265ms] <- sendmsg$NFNL_MSG_ACCT_DEL=0x2c errno=14 cover=2933 13:07:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0x3, 0x7, 0x0, 0x0, 0x0, {}, [@NFACCT_QUOTA={0xc}, @NFACCT_QUOTA={0xc}]}, 0x2c}}, 0x0) 2021/11/11 13:07:09 result hanged=false: [1196320ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108279 #0 [1196347ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1196349ms] <- perf_event_open=0x3 errno=14 cover=6419 #0 [1196350ms] -> socket$netlink(0x10, 0x3, 0xa) #0 [1196351ms] <- socket$netlink=0x4 errno=14 cover=4372 #0 [1196351ms] -> sendmsg$NFNL_MSG_ACCT_DEL(0x4, 0x20000340, 0x0) #0 [1196351ms] <- sendmsg$NFNL_MSG_ACCT_DEL=0x2c errno=14 cover=2944 13:07:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0x3, 0x7, 0x0, 0x0, 0x0, {}, [@NFACCT_QUOTA={0xc}, @NFACCT_QUOTA={0xc}]}, 0x2c}}, 0x0) 2021/11/11 13:07:09 result hanged=false: [1196403ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108281 #0 [1196425ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1196425ms] <- perf_event_open=0x3 errno=14 cover=6539 #0 [1196427ms] -> socket$netlink(0x10, 0x3, 0xa) #0 [1196427ms] <- socket$netlink=0x4 errno=14 cover=4916 #0 [1196428ms] -> sendmsg$NFNL_MSG_ACCT_DEL(0x4, 0x20000340, 0x0) #0 [1196429ms] <- sendmsg$NFNL_MSG_ACCT_DEL=0x2c errno=14 cover=2958 2021/11/11 13:07:09 result hanged=false: 2021/11/11 13:07:09 added new input for call #2 sendmsg$NFNL_MSG_ACCT_DEL to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0x3, 0x7, 0x0, 0x0, 0x0, {}, [@NFACCT_QUOTA={0xc}, @NFACCT_QUOTA={0xc}]}, 0x2c}}, 0x0) 13:07:09 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x2) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/71, 0x47}], 0x1, 0x0, 0x0) [1196489ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108283 #0 [1196508ms] -> openat$procfs(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [1196509ms] <- openat$procfs=0x3 errno=14 cover=2030 #0 [1196509ms] -> fcntl$F_SET_FILE_RW_HINT(0x3, 0x40e, 0x20000000) #0 [1196509ms] <- fcntl$F_SET_FILE_RW_HINT=0x0 errno=14 cover=86 #0 [1196509ms] -> preadv(0x3, 0x20000180, 0x1, 0x0, 0x0) #0 [1196510ms] <- preadv=0x47 errno=14 cover=4456 enabling collider #0 [1196510ms] -> openat$procfs(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [1196510ms] <- openat$procfs=0x3 errno=14 cover=1222 #0 [1196511ms] -> fcntl$F_SET_FILE_RW_HINT(0x3, 0x40e, 0x20000000) #0 [1196511ms] <- fcntl$F_SET_FILE_RW_HINT=0x0 errno=14 cover=86 pthread_create failed (errno 11) 13:07:10 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x2) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/71, 0x47}], 0x1, 0x0, 0x0) 2021/11/11 13:07:10 result hanged=false: 2021/11/11 13:07:10 #0: triaging type=7 2021/11/11 13:07:10 triaging input for call #2 preadv (new signal=4) [1196593ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108385 #0 [1196617ms] -> openat$procfs(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [1196618ms] <- openat$procfs=0x3 errno=14 cover=1223 #0 [1196619ms] -> fcntl$F_SET_FILE_RW_HINT(0x3, 0x40e, 0x20000000) #0 [1196619ms] <- fcntl$F_SET_FILE_RW_HINT=0x0 errno=14 cover=86 #0 [1196622ms] -> preadv(0x3, 0x20000180, 0x1, 0x0, 0x0) #0 [1196623ms] <- preadv=0x47 errno=14 cover=1563 2021/11/11 13:07:10 result hanged=false: 13:07:10 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x2) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/71, 0x47}], 0x1, 0x0, 0x0) [1196667ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108387 #0 [1196688ms] -> openat$procfs(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [1196689ms] <- openat$procfs=0x3 errno=14 cover=1289 #0 [1196694ms] -> fcntl$F_SET_FILE_RW_HINT(0x3, 0x40e, 0x20000000) #0 [1196694ms] <- fcntl$F_SET_FILE_RW_HINT=0x0 errno=14 cover=86 #0 [1196695ms] -> preadv(0x3, 0x20000180, 0x1, 0x0, 0x0) #0 [1196695ms] <- preadv=0x47 errno=14 cover=1573 13:07:10 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x2) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/71, 0x47}], 0x1, 0x0, 0x0) 2021/11/11 13:07:10 result hanged=false: [1196739ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108389 #0 [1196759ms] -> openat$procfs(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [1196759ms] <- openat$procfs=0x3 errno=14 cover=1226 #0 [1196760ms] -> fcntl$F_SET_FILE_RW_HINT(0x3, 0x40e, 0x20000000) #0 [1196760ms] <- fcntl$F_SET_FILE_RW_HINT=0x0 errno=14 cover=86 #0 [1196760ms] -> preadv(0x3, 0x20000180, 0x1, 0x0, 0x0) #0 [1196760ms] <- preadv=0x47 errno=14 cover=1548 2021/11/11 13:07:10 result hanged=false: 2021/11/11 13:07:10 added new input for call #2 preadv to corpus: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x2) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/71, 0x47}], 0x1, 0x0, 0x0) 13:07:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000008300), 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000008340)) [1196818ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108391 #0 [1196839ms] -> syz_open_dev$sg(0x20008300, 0x0, 0x0) #0 [1196839ms] <- syz_open_dev$sg=0x3 errno=14 cover=1379 #0 [1196841ms] -> ioctl$SG_GET_COMMAND_Q(0x3, 0x2270, 0x20008340) #0 [1196841ms] <- ioctl$SG_GET_COMMAND_Q=0x0 errno=14 cover=112 enabling collider #0 [1196841ms] -> syz_open_dev$sg(0x20008300, 0x0, 0x0) #0 [1196841ms] <- syz_open_dev$sg=0x3 errno=14 cover=1406 13:07:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000008300), 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000008340)) 2021/11/11 13:07:10 result hanged=false: 2021/11/11 13:07:10 #0: triaging type=7 2021/11/11 13:07:10 triaging input for call #1 ioctl$SG_GET_COMMAND_Q (new signal=4) [1196886ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108393 #0 [1196906ms] -> syz_open_dev$sg(0x20008300, 0x0, 0x0) #0 [1196906ms] <- syz_open_dev$sg=0x3 errno=14 cover=1368 #0 [1196907ms] -> ioctl$SG_GET_COMMAND_Q(0x3, 0x2270, 0x20008340) #0 [1196907ms] <- ioctl$SG_GET_COMMAND_Q=0x0 errno=14 cover=112 13:07:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000008300), 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000008340)) 2021/11/11 13:07:10 result hanged=false: [1196952ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108395 #0 [1196973ms] -> syz_open_dev$sg(0x20008300, 0x0, 0x0) #0 [1196973ms] <- syz_open_dev$sg=0x3 errno=14 cover=1412 #0 [1196975ms] -> ioctl$SG_GET_COMMAND_Q(0x3, 0x2270, 0x20008340) #0 [1196975ms] <- ioctl$SG_GET_COMMAND_Q=0x0 errno=14 cover=112 13:07:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000008300), 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000008340)) 2021/11/11 13:07:10 result hanged=false: [1197020ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108397 #0 [1197041ms] -> syz_open_dev$sg(0x20008300, 0x0, 0x0) #0 [1197041ms] <- syz_open_dev$sg=0x3 errno=14 cover=1401 #0 [1197043ms] -> ioctl$SG_GET_COMMAND_Q(0x3, 0x2270, 0x20008340) #0 [1197043ms] <- ioctl$SG_GET_COMMAND_Q=0x0 errno=14 cover=112 2021/11/11 13:07:10 result hanged=false: 2021/11/11 13:07:10 added new input for call #1 ioctl$SG_GET_COMMAND_Q to corpus: r0 = syz_open_dev$sg(&(0x7f0000008300), 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000008340)) 13:07:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x809c2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200081, 0x10a) write$P9_RWSTAT(r0, &(0x7f0000000240)={0x7}, 0x7) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) socket$packet(0x11, 0x2, 0x300) unshare(0x62040080) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "4c774fc207b2764cc639d766f1a8bf75fa858b606ad21530ecaf8b152bc099032178945d2ed02d555131e75488a37329ea68553a3c06f898b0415d06e9edb87c74d7bb428a4657b3929ce7c15f973a5f"}, 0xd8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x9bbb) [1197091ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108399 #0 [1197116ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x809c2, 0x0) #0 [1197123ms] <- openat=0x3 errno=14 cover=7535 #0 [1197124ms] -> openat(0xffffffffffffffff, 0x20000100, 0x200081, 0x10a) #0 [1197124ms] <- openat=0xffffffffffffffff errno=9 cover=763 #0 [1197124ms] -> write$P9_RWSTAT(0x3, 0x20000240, 0x7) #0 [1197128ms] <- write$P9_RWSTAT=0x7 errno=14 cover=9679 #0 [1197129ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000600) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='' #0 [1197134ms] <- syz_mount_image$tmpfs=0x4 errno=0 cover=14400 #0 [1197135ms] -> socket$packet(0x11, 0x2, 0x300) #0 [1197135ms] <- socket$packet=0x5 errno=14 cover=1759 #0 [1197135ms] -> unshare(0x62040080) #0 [1197153ms] <- unshare=0x0 errno=14 cover=156332 #0 [1197155ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [1197155ms] <- openat=0x6 errno=14 cover=2706 #0 [1197155ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1197155ms] <- socket$inet6_tcp=0x7 errno=14 cover=1725 #0 [1197156ms] -> symlinkat(0x20000200, 0xffffffffffffffff, 0x20000300) #0 [1197156ms] <- symlinkat=0xffffffffffffffff errno=9 cover=507 #0 [1197156ms] -> setsockopt$inet6_tcp_int(0x7, 0x6, 0x2, 0x20000040, 0x4) #0 [1197156ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=142 #0 [1197156ms] -> bind$inet6(0x7, 0x200000c0, 0x1c) #0 [1197156ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=318 #0 [1197156ms] -> setsockopt$inet6_tcp_TCP_MD5SIG(0x7, 0x6, 0xe, 0x20000400, 0xd8) #0 [1197157ms] <- setsockopt$inet6_tcp_TCP_MD5SIG=0x0 errno=14 cover=350 #0 [1197157ms] -> connect$inet6(0x7, 0x20000000, 0x1c) #0 [1197157ms] <- connect$inet6=0xffffffffffffffff errno=99 cover=451 #0 [1197157ms] -> sendfile(0x7, 0x6, 0x0, 0x9bbb) 2021/11/11 13:07:10 result hanged=false: 2021/11/11 13:07:10 #0: triaging type=7 2021/11/11 13:07:10 triaging input for call #5 unshare (new signal=8) 13:07:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x809c2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200081, 0x10a) write$P9_RWSTAT(r0, &(0x7f0000000240)={0x7}, 0x7) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) socket$packet(0x11, 0x2, 0x300) unshare(0x62040080) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "4c774fc207b2764cc639d766f1a8bf75fa858b606ad21530ecaf8b152bc099032178945d2ed02d555131e75488a37329ea68553a3c06f898b0415d06e9edb87c74d7bb428a4657b3929ce7c15f973a5f"}, 0xd8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x9bbb) umount(./9167/file0) [1197220ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108401 #0 [1197241ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x809c2, 0x0) #0 [1197252ms] <- openat=0x3 errno=14 cover=7475 #0 [1197254ms] -> openat(0xffffffffffffffff, 0x20000100, 0x200081, 0x10a) #0 [1197254ms] <- openat=0xffffffffffffffff errno=9 cover=713 #0 [1197254ms] -> write$P9_RWSTAT(0x3, 0x20000240, 0x7) #0 [1197258ms] <- write$P9_RWSTAT=0x7 errno=14 cover=9755 #0 [1197260ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000600) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='' #0 [1197267ms] <- syz_mount_image$tmpfs=0x4 errno=0 cover=14466 #0 [1197268ms] -> socket$packet(0x11, 0x2, 0x300) #0 [1197268ms] <- socket$packet=0x5 errno=14 cover=1780 #0 [1197269ms] -> unshare(0x62040080) #0 [1197289ms] <- unshare=0x0 errno=14 cover=160499 #0 [1197300ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [1197301ms] <- openat=0x6 errno=14 cover=2793 #0 [1197301ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1197301ms] <- socket$inet6_tcp=0x7 errno=14 cover=1736 #0 [1197302ms] -> symlinkat(0x20000200, 0xffffffffffffffff, 0x20000300) #0 [1197302ms] <- symlinkat=0xffffffffffffffff errno=9 cover=518 #0 [1197302ms] -> setsockopt$inet6_tcp_int(0x7, 0x6, 0x2, 0x20000040, 0x4) #0 [1197302ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=142 #0 [1197302ms] -> bind$inet6(0x7, 0x200000c0, 0x1c) #0 [1197302ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=318 #0 [1197302ms] -> setsockopt$inet6_tcp_TCP_MD5SIG(0x7, 0x6, 0xe, 0x20000400, 0xd8) #0 [1197302ms] <- setsockopt$inet6_tcp_TCP_MD5SIG=0x0 errno=14 cover=336 #0 [1197302ms] -> connect$inet6(0x7, 0x20000000, 0x1c) #0 [1197303ms] <- connect$inet6=0xffffffffffffffff errno=99 cover=451 #0 [1197303ms] -> sendfile(0x7, 0x6, 0x0, 0x9bbb) 13:07:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x809c2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200081, 0x10a) write$P9_RWSTAT(r0, &(0x7f0000000240)={0x7}, 0x7) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) socket$packet(0x11, 0x2, 0x300) unshare(0x62040080) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "4c774fc207b2764cc639d766f1a8bf75fa858b606ad21530ecaf8b152bc099032178945d2ed02d555131e75488a37329ea68553a3c06f898b0415d06e9edb87c74d7bb428a4657b3929ce7c15f973a5f"}, 0xd8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x9bbb) 2021/11/11 13:07:10 result hanged=false: umount(./9168/file0) [1197368ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108403 #0 [1197388ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x809c2, 0x0) #0 [1197393ms] <- openat=0x3 errno=14 cover=7412 #0 [1197394ms] -> openat(0xffffffffffffffff, 0x20000100, 0x200081, 0x10a) #0 [1197394ms] <- openat=0xffffffffffffffff errno=9 cover=702 #0 [1197394ms] -> write$P9_RWSTAT(0x3, 0x20000240, 0x7) #0 [1197408ms] <- write$P9_RWSTAT=0x7 errno=14 cover=9481 #0 [1197409ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000600) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='' #0 [1197417ms] <- syz_mount_image$tmpfs=0x4 errno=0 cover=18757 #0 [1197418ms] -> socket$packet(0x11, 0x2, 0x300) #0 [1197418ms] <- socket$packet=0x5 errno=14 cover=1747 #0 [1197419ms] -> unshare(0x62040080) #0 [1197438ms] <- unshare=0x0 errno=14 cover=157133 #0 [1197450ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [1197450ms] <- openat=0x6 errno=14 cover=2672 #0 [1197450ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1197451ms] <- socket$inet6_tcp=0x7 errno=14 cover=1744 #0 [1197451ms] -> symlinkat(0x20000200, 0xffffffffffffffff, 0x20000300) #0 [1197451ms] <- symlinkat=0xffffffffffffffff errno=9 cover=505 #0 [1197451ms] -> setsockopt$inet6_tcp_int(0x7, 0x6, 0x2, 0x20000040, 0x4) #0 [1197451ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=142 #0 [1197451ms] -> bind$inet6(0x7, 0x200000c0, 0x1c) #0 [1197452ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=318 #0 [1197452ms] -> setsockopt$inet6_tcp_TCP_MD5SIG(0x7, 0x6, 0xe, 0x20000400, 0xd8) #0 [1197452ms] <- setsockopt$inet6_tcp_TCP_MD5SIG=0x0 errno=14 cover=336 #0 [1197452ms] -> connect$inet6(0x7, 0x20000000, 0x1c) #0 [1197452ms] <- connect$inet6=0xffffffffffffffff errno=99 cover=451 #0 [1197452ms] -> sendfile(0x7, 0x6, 0x0, 0x9bbb) 13:07:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x809c2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200081, 0x10a) write$P9_RWSTAT(r0, &(0x7f0000000240)={0x7}, 0x7) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) socket$packet(0x11, 0x2, 0x300) unshare(0x62040080) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "4c774fc207b2764cc639d766f1a8bf75fa858b606ad21530ecaf8b152bc099032178945d2ed02d555131e75488a37329ea68553a3c06f898b0415d06e9edb87c74d7bb428a4657b3929ce7c15f973a5f"}, 0xd8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x9bbb) 2021/11/11 13:07:10 result hanged=false: umount(./9169/file0) [1197513ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108405 #0 [1197534ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x809c2, 0x0) #0 [1197540ms] <- openat=0x3 errno=14 cover=7467 #0 [1197541ms] -> openat(0xffffffffffffffff, 0x20000100, 0x200081, 0x10a) #0 [1197541ms] <- openat=0xffffffffffffffff errno=9 cover=724 #0 [1197541ms] -> write$P9_RWSTAT(0x3, 0x20000240, 0x7) #0 [1197544ms] <- write$P9_RWSTAT=0x7 errno=14 cover=9534 #0 [1197546ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000600) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='' #0 [1197551ms] <- syz_mount_image$tmpfs=0x4 errno=0 cover=14413 #0 [1197552ms] -> socket$packet(0x11, 0x2, 0x300) #0 [1197553ms] <- socket$packet=0x5 errno=14 cover=1737 #0 [1197553ms] -> unshare(0x62040080) #0 [1197574ms] <- unshare=0x0 errno=14 cover=160284 #0 [1197585ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [1197586ms] <- openat=0x6 errno=14 cover=2782 #0 [1197587ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1197588ms] <- socket$inet6_tcp=0x7 errno=14 cover=1728 #0 [1197588ms] -> symlinkat(0x20000200, 0xffffffffffffffff, 0x20000300) #0 [1197589ms] <- symlinkat=0xffffffffffffffff errno=9 cover=516 #0 [1197590ms] -> setsockopt$inet6_tcp_int(0x7, 0x6, 0x2, 0x20000040, 0x4) #0 [1197590ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=142 #0 [1197591ms] -> bind$inet6(0x7, 0x200000c0, 0x1c) #0 [1197591ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=318 #0 [1197592ms] -> setsockopt$inet6_tcp_TCP_MD5SIG(0x7, 0x6, 0xe, 0x20000400, 0xd8) #0 [1197592ms] <- setsockopt$inet6_tcp_TCP_MD5SIG=0x0 errno=14 cover=358 #0 [1197593ms] -> connect$inet6(0x7, 0x20000000, 0x1c) #0 [1197593ms] <- connect$inet6=0xffffffffffffffff errno=99 cover=465 #0 [1197594ms] -> sendfile(0x7, 0x6, 0x0, 0x9bbb) 2021/11/11 13:07:11 result hanged=false: 2021/11/11 13:07:11 added new input for call #5 unshare to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x809c2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200081, 0x10a) write$P9_RWSTAT(r0, &(0x7f0000000240)={0x7}, 0x7) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) socket$packet(0x11, 0x2, 0x300) unshare(0x62040080) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "4c774fc207b2764cc639d766f1a8bf75fa858b606ad21530ecaf8b152bc099032178945d2ed02d555131e75488a37329ea68553a3c06f898b0415d06e9edb87c74d7bb428a4657b3929ce7c15f973a5f"}, 0xd8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x9bbb) umount(./9170/file0) 13:07:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x809c2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200081, 0x10a) write$P9_RWSTAT(r0, &(0x7f0000000240)={0x7}, 0x7) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) socket$packet(0x11, 0x2, 0x300) unshare(0x62040080) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "4c774fc207b2764cc639d766f1a8bf75fa858b606ad21530ecaf8b152bc099032178945d2ed02d555131e75488a37329ea68553a3c06f898b0415d06e9edb87c74d7bb428a4657b3929ce7c15f973a5f"}, 0xd8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x9bbb) [1197693ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108407 2021/11/11 13:07:11 #0: triaging type=7 2021/11/11 13:07:11 triaging input for call #2 write$P9_RWSTAT (new signal=2) #0 [1197717ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x809c2, 0x0) #0 [1197722ms] <- openat=0x3 errno=14 cover=7658 #0 [1197724ms] -> openat(0xffffffffffffffff, 0x20000100, 0x200081, 0x10a) #0 [1197724ms] <- openat=0xffffffffffffffff errno=9 cover=790 #0 [1197725ms] -> write$P9_RWSTAT(0x3, 0x20000240, 0x7) #0 [1197729ms] <- write$P9_RWSTAT=0x7 errno=14 cover=9337 #0 [1197730ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000600) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='' #0 [1197737ms] <- syz_mount_image$tmpfs=0x4 errno=0 cover=14620 #0 [1197739ms] -> socket$packet(0x11, 0x2, 0x300) #0 [1197740ms] <- socket$packet=0x5 errno=14 cover=1723 #0 [1197741ms] -> unshare(0x62040080) #0 [1197760ms] <- unshare=0x0 errno=14 cover=157892 #0 [1197774ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [1197774ms] <- openat=0x6 errno=14 cover=2679 #0 [1197776ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1197776ms] <- socket$inet6_tcp=0x7 errno=14 cover=1797 #0 [1197778ms] -> symlinkat(0x20000200, 0xffffffffffffffff, 0x20000300) #0 [1197778ms] <- symlinkat=0xffffffffffffffff errno=9 cover=516 #0 [1197780ms] -> setsockopt$inet6_tcp_int(0x7, 0x6, 0x2, 0x20000040, 0x4) #0 [1197780ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=142 #0 [1197781ms] -> bind$inet6(0x7, 0x200000c0, 0x1c) #0 [1197781ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=332 #0 [1197782ms] -> setsockopt$inet6_tcp_TCP_MD5SIG(0x7, 0x6, 0xe, 0x20000400, 0xd8) #0 [1197782ms] <- setsockopt$inet6_tcp_TCP_MD5SIG=0x0 errno=14 cover=347 #0 [1197782ms] -> connect$inet6(0x7, 0x20000000, 0x1c) #0 [1197782ms] <- connect$inet6=0xffffffffffffffff errno=99 cover=451 #0 [1197783ms] -> sendfile(0x7, 0x6, 0x0, 0x9bbb) 2021/11/11 13:07:11 result hanged=false: 13:07:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x809c2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200081, 0x10a) write$P9_RWSTAT(r0, &(0x7f0000000240)={0x7}, 0x7) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) socket$packet(0x11, 0x2, 0x300) unshare(0x62040080) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "4c774fc207b2764cc639d766f1a8bf75fa858b606ad21530ecaf8b152bc099032178945d2ed02d555131e75488a37329ea68553a3c06f898b0415d06e9edb87c74d7bb428a4657b3929ce7c15f973a5f"}, 0xd8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x9bbb) umount(./9171/file0) [1197850ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108409 #0 [1197889ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x809c2, 0x0) #0 [1197895ms] <- openat=0x3 errno=14 cover=7420 #0 [1197896ms] -> openat(0xffffffffffffffff, 0x20000100, 0x200081, 0x10a) #0 [1197896ms] <- openat=0xffffffffffffffff errno=9 cover=735 #0 [1197897ms] -> write$P9_RWSTAT(0x3, 0x20000240, 0x7) #0 [1197902ms] <- write$P9_RWSTAT=0x7 errno=14 cover=9457 #0 [1197907ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000600) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='' #0 [1197914ms] <- syz_mount_image$tmpfs=0x4 errno=0 cover=14312 #0 [1197915ms] -> socket$packet(0x11, 0x2, 0x300) #0 [1197916ms] <- socket$packet=0x5 errno=14 cover=1704 #0 [1197917ms] -> unshare(0x62040080) #0 [1197935ms] <- unshare=0x0 errno=14 cover=156276 #0 [1197947ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [1197948ms] <- openat=0x6 errno=14 cover=2700 #0 [1197949ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1197950ms] <- socket$inet6_tcp=0x7 errno=14 cover=1802 #0 [1197951ms] -> symlinkat(0x20000200, 0xffffffffffffffff, 0x20000300) #0 [1197951ms] <- symlinkat=0xffffffffffffffff errno=9 cover=515 #0 [1197952ms] -> setsockopt$inet6_tcp_int(0x7, 0x6, 0x2, 0x20000040, 0x4) #0 [1197952ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=142 #0 [1197953ms] -> bind$inet6(0x7, 0x200000c0, 0x1c) #0 [1197953ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=318 #0 [1197955ms] -> setsockopt$inet6_tcp_TCP_MD5SIG(0x7, 0x6, 0xe, 0x20000400, 0xd8) #0 [1197955ms] <- setsockopt$inet6_tcp_TCP_MD5SIG=0x0 errno=14 cover=347 #0 [1197956ms] -> connect$inet6(0x7, 0x20000000, 0x1c) #0 [1197956ms] <- connect$inet6=0xffffffffffffffff errno=99 cover=451 #0 [1197957ms] -> sendfile(0x7, 0x6, 0x0, 0x9bbb) 13:07:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x809c2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200081, 0x10a) write$P9_RWSTAT(r0, &(0x7f0000000240)={0x7}, 0x7) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) socket$packet(0x11, 0x2, 0x300) unshare(0x62040080) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "4c774fc207b2764cc639d766f1a8bf75fa858b606ad21530ecaf8b152bc099032178945d2ed02d555131e75488a37329ea68553a3c06f898b0415d06e9edb87c74d7bb428a4657b3929ce7c15f973a5f"}, 0xd8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x9bbb) 2021/11/11 13:07:11 result hanged=false: umount(./9172/file0) [1198022ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108411 #0 [1198047ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x809c2, 0x0) #0 [1198052ms] <- openat=0x3 errno=14 cover=7342 #0 [1198054ms] -> openat(0xffffffffffffffff, 0x20000100, 0x200081, 0x10a) #0 [1198055ms] <- openat=0xffffffffffffffff errno=9 cover=690 #0 [1198055ms] -> write$P9_RWSTAT(0x3, 0x20000240, 0x7) #0 [1198066ms] <- write$P9_RWSTAT=0x7 errno=14 cover=9796 #0 [1198068ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000600) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='' #0 [1198077ms] <- syz_mount_image$tmpfs=0x4 errno=0 cover=14492 #0 [1198079ms] -> socket$packet(0x11, 0x2, 0x300) #0 [1198079ms] <- socket$packet=0x5 errno=14 cover=1853 #0 [1198079ms] -> unshare(0x62040080) #0 [1198103ms] <- unshare=0x0 errno=14 cover=161303 #0 [1198115ms] -> openat(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [1198115ms] <- openat=0x6 errno=14 cover=2791 #0 [1198116ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1198116ms] <- socket$inet6_tcp=0x7 errno=14 cover=1758 #0 [1198117ms] -> symlinkat(0x20000200, 0xffffffffffffffff, 0x20000300) #0 [1198117ms] <- symlinkat=0xffffffffffffffff errno=9 cover=529 #0 [1198117ms] -> setsockopt$inet6_tcp_int(0x7, 0x6, 0x2, 0x20000040, 0x4) #0 [1198117ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=142 #0 [1198117ms] -> bind$inet6(0x7, 0x200000c0, 0x1c) #0 [1198117ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=318 #0 [1198118ms] -> setsockopt$inet6_tcp_TCP_MD5SIG(0x7, 0x6, 0xe, 0x20000400, 0xd8) #0 [1198118ms] <- setsockopt$inet6_tcp_TCP_MD5SIG=0x0 errno=14 cover=336 #0 [1198118ms] -> connect$inet6(0x7, 0x20000000, 0x1c) #0 [1198118ms] <- connect$inet6=0xffffffffffffffff errno=99 cover=451 #0 [1198118ms] -> sendfile(0x7, 0x6, 0x0, 0x9bbb) 2021/11/11 13:07:11 result hanged=false: 2021/11/11 13:07:11 added new input for call #2 write$P9_RWSTAT to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x809c2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200081, 0x10a) write$P9_RWSTAT(r0, &(0x7f0000000240)={0x7}, 0x7) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) socket$packet(0x11, 0x2, 0x300) unshare(0x62040080) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "4c774fc207b2764cc639d766f1a8bf75fa858b606ad21530ecaf8b152bc099032178945d2ed02d555131e75488a37329ea68553a3c06f898b0415d06e9edb87c74d7bb428a4657b3929ce7c15f973a5f"}, 0xd8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x9bbb) umount(./9173/file0) 13:07:11 executing program 0: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200000000000000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) [1198203ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108413 #0 [1198235ms] -> ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200000000000000) #0 [1198236ms] <- ioctl$TIOCGPTPEER=0xffffffffffffffff errno=9 cover=45 #0 [1198237ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [1198237ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1669 #0 [1198238ms] -> syz_open_pts(0xffffffffffffffff, 0x0) #0 [1198239ms] <- syz_open_pts=0xffffffffffffffff errno=9 cover=45 #0 [1198239ms] -> ioctl$VT_ACTIVATE(0x3, 0x5606, 0x9) #0 [1198245ms] <- ioctl$VT_ACTIVATE=0x0 errno=14 cover=24278 #0 [1198245ms] -> ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) #0 [1198245ms] <- ioctl$KDSKBLED=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [1198245ms] -> ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200000000000000) #0 [1198245ms] <- ioctl$TIOCGPTPEER=0xffffffffffffffff errno=9 cover=45 #0 [1198246ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [1198246ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1684 pthread_create failed (errno 11) 13:07:11 executing program 0: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200000000000000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) 2021/11/11 13:07:11 result hanged=false: 2021/11/11 13:07:11 #0: triaging type=7 2021/11/11 13:07:11 triaging input for call #3 ioctl$VT_ACTIVATE (new signal=21) [1198341ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108515 #0 [1198361ms] -> ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200000000000000) #0 [1198364ms] <- ioctl$TIOCGPTPEER=0xffffffffffffffff errno=9 cover=45 #0 [1198365ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [1198365ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1720 #0 [1198366ms] -> syz_open_pts(0xffffffffffffffff, 0x0) #0 [1198366ms] <- syz_open_pts=0xffffffffffffffff errno=9 cover=45 #0 [1198367ms] -> ioctl$VT_ACTIVATE(0x3, 0x5606, 0x9) #0 [1198367ms] <- ioctl$VT_ACTIVATE=0x0 errno=14 cover=395 #0 [1198368ms] -> ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) #0 [1198368ms] <- ioctl$KDSKBLED=0xffffffffffffffff errno=9 cover=45 2021/11/11 13:07:11 result hanged=false: 13:07:11 executing program 0: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200000000000000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) [1198418ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108517 #0 [1198438ms] -> ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200000000000000) #0 [1198438ms] <- ioctl$TIOCGPTPEER=0xffffffffffffffff errno=9 cover=45 #0 [1198440ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [1198440ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1669 #0 [1198441ms] -> syz_open_pts(0xffffffffffffffff, 0x0) #0 [1198441ms] <- syz_open_pts=0xffffffffffffffff errno=9 cover=45 #0 [1198442ms] -> ioctl$VT_ACTIVATE(0x3, 0x5606, 0x9) #0 [1198444ms] <- ioctl$VT_ACTIVATE=0x0 errno=14 cover=383 #0 [1198448ms] -> ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) #0 [1198448ms] <- ioctl$KDSKBLED=0xffffffffffffffff errno=9 cover=45 13:07:11 executing program 0: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200000000000000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) 2021/11/11 13:07:11 result hanged=false: [1198492ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108519 #0 [1198510ms] -> ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200000000000000) #0 [1198510ms] <- ioctl$TIOCGPTPEER=0xffffffffffffffff errno=9 cover=45 #0 [1198511ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [1198512ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1750 #0 [1198513ms] -> syz_open_pts(0xffffffffffffffff, 0x0) #0 [1198513ms] <- syz_open_pts=0xffffffffffffffff errno=9 cover=45 #0 [1198514ms] -> ioctl$VT_ACTIVATE(0x3, 0x5606, 0x9) #0 [1198514ms] <- ioctl$VT_ACTIVATE=0x0 errno=14 cover=354 #0 [1198516ms] -> ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) #0 [1198516ms] <- ioctl$KDSKBLED=0xffffffffffffffff errno=9 cover=45 2021/11/11 13:07:12 result hanged=false: 2021/11/11 13:07:12 added new input for call #3 ioctl$VT_ACTIVATE to corpus: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200000000000000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) 13:07:12 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000004c480)={0x0, 0x0, "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", "053f1110869cb5dacee1cf2902c081737e27a23e2bc42f786744f1725321b94972a25c97caf2d91faa4356ffcedda3a5d5ffc0699e2e6e666465a2983277e382957533ed2a78503368a425e923d3cb97ceb472bc9de52ae6264b732e61940d4ba086c91170d67edaf2cbc65eb91154a397e34e6363ab6e438070e9b895c6310e09dd99bcd6934212f5e1b7ad0912378c7bf1dad50ddce020ca654430f5d6662552cd3fbefbaf553c468062d669807721e097116083130a15481f1857b64c0e39c2a8c49cfb993599018ad629a313d6efdd3c55eea6103b90968cba58ca3d68c8c33ac2a798396a8f9f4e8cd269ea1ee8cc70186300c2d24301134b8418c1a7bcad10c0c6159b495e4664918568f679a7a9f4f26029ff445b74c71274eab6ed63e73ecc5543f25a98141f0b1333759a6163e756c9e45c0e2d43f07bbcdf4a52be8bb0774876952188a305ae9daf942b27ec3519d14cb2a89b1750fe1b280d3625b8624055ac5a0aba213a36e6d0b8ff7bba41326e5e4073fd4d25ee3775adc67cd9f3d25fdd51fb2c461430d68bfd6c8df0b1ec85ce62562d98ea8bcf84b43b2cca11914053cfe3dcd26edf7f9552af02bf2622f380f8ebbb82793ef1b28eb50277da593ac093910cf242ceb7a742c104fe464e4e8249765bde6e88ae6202f8c56653a6a73f856577bc24990c370f90cb732b103e755dd66f577b6744e34eabdbb44442315a0af5cd14158c7a0c586f6c7f6781c966f34966274002cd5cf88e286a60d50f07ece37061bfd436f0d6ada6dbc074901e08c73661776f14785cdec4a02624a6e4531559b0663e7a969b4ebc411e40c053a852b1c007865985f3c03066fd469f6d018c777de67900dca981b44c5ba16c19dbd371ff13ad8a078902721e16d9fc6038601d40a325bc1418529c7c9a5d708d4cb75f92e8ac624e6f800102239e17fe1f96bfd2bdd3afa24f4b09e03dcd2e257db60a27459c4114a29e4f88893892cafed3dd8649d7f70206324de5c63ebce62fd6117ddcfa637ed951cbe2980325e2c45c6c3c951b91c09a8f73b64128b48420a62fdd00548fe39d34e298b3e90cedcb9a1defb951d0c55a708c72c6a5c544641f3ded2d6c42c61b92321444037d629c8c4af0fd6aa6e033e86b64c04e7c20427d7afc1c179f73599f71e09d670dca88986685ee49d9fe9744ab35b9892569b696166dfcea573b3d58fbcc01e4565c9d079916528cee50ff9a6a25595e709fb15c003f8f5a63b7c90d68f218b0e55f7373e7910b26e0ffa2eb655975e0bd586f65a40dbb60040767d7de4cf4e3d306afd45b6540865cf779976c371cf5eac9a7baad0fd1d9fbbcd875046c219279882f38d8455e2b6cf9131e5891bbf797d33dfc200274804ca5c9830b40b8251c0ee15b1d26adb28661ea66417cce1dd18739f2f456c764a046fbc65a8448817b8367fc789dbc7feae1929ff309baa66a04d9861c962daa045e7a5ce766cb006558d571127fbce5148588209178639385c7d9f86ab878abcca8d9f94ebf0b688e0185ba3a9f96294eae0324139cf1dbdd6aa0f7efe1ec332d27aa72f8ef77eae42f5e84ab2cfa76f7b0aaaad7634dcb4b49a5032eda191fe9e7de2705cafa68655d8222bebf13c54b3a656fe82867a9ceed26aad55e011f9f3cde678b8c7e1bc4116ec8160a4b35f7a0552318fc8db5367c59619562ec990b4fb8aafe6a7ebb62ec561e389389d1b6a53e8dc15f0d8dac555ca137ebf2e933f6fb863d6e6ab757cf345b3cc428309564f86500a69d28b368c640ed06d21001f6e2ec68651be61cf01df9c5b22a7706f09205a6975276a7f9397224bd3afe938d80e1287c414d7169d7b60c666d25ad0b90c741ada488e7942fe7efee7a1f63edd65302297c88764a234635ffd40a6c66384caf90e7bfecaea8b5983bf4250cece2e6bdc686fdc9a804bde7a833bcf8879836e4be943d2e484f9b72d9983d3c1342dcbf1c66cb2ee7d6eff32b44bf001ccf4a8bc5197789a8dafc1fdad7b239a5d9d6508690747356858d2fc3a8da1d3681899d4415a3857ba8843612f5a37134f851f01ae0e311d483f278e7efdaea0ae922cf57c8ee5a1448565dc8eeed897fb3a67fda0ff3ed20c843334312d3e8d6e261e0b34e2810c635d868f8252c38fd3cd6b1f58a712e623c21a52d8d2f077a8d4f23845a06b0c3abca08968c2533df659671c72accffd73111b782e8a6f7a7abd873e374d921ae65f8b981e7b9cb768f9c08f9d2c097c8f04c0d9ca101814e5318d0d1474d0faf3d179cfc637550672d92d1f811634354aa205355bade079e8cd6f0786df001a22f21531552371b73e47f9cb0bffa9504ba611b2ebeadc2c433d35522afec9207e040a86cd71168da151e09972da7790f63159cb60326603dc9ec7342616dde134e756f1bf6d502c7a97979152ff9d2e30053b03089ed531bded0b43ee52b2db7d8b1cc9107d9c2c832eeeccac02e4bdd370716708d3a27eeef9bcfe783dde113ca9ea23462b110c73d6ded5ece13397e8f4be3b42e1ccc8d2054d23eabc1ed87c4d28491c7987ebf258cb9a240bdf206e1e45e926842cb726c27f67f55d6215b7869fda96b1c9df32ee947dd9bcba8550aa1bce1b17c1ec3db9043a62285285d09de53e0ada2f7633abc7eebb7633e2da802c9c6746a65e26cd329246fb85c7cc6cedd8d534e6b8880b45332c5de59d9593c87c03a0043ac3b252c4139a68fc5eca94f954e229a991835fdd1aa2537b54d15407d764378a027c5aef057195621c4fc5090dc1012432487b3f93f2b16e3d1351da2d8ef5d9afe8e380e525e42227f722c496dc60095f89dec1a09131303a7cbdd115108f69212beb4064249d726da57e1ed23c7df01c540215f5bf73467a1fa614b0f7fe89150dab20302548fe103c55ed9579f51c5de106fb322bc95707a3cb9746cb1a368e2f5e382909bd23b5d3fac4d7ff1c27e19ec01057242f7ea9facac0f7d54f27f550e9c9605ac92dd2e7299e20dea795a998d85cd1751e8657faf0ce00fb41d85b25e41d8f16727eaf8b19855eca749cb79dd9b54f06f908d8e7e51c5344bf61761f398c70be78dbed112bd6e7a0576d248441fff01d06f8011fa45f197cf70edb1e807441fbad574cdea12a4f2c7aba533f8bdc0539a6e014118510b6ee4ae9e1914ff20e941ce4504244b70daf362411a9a3ef709e862fc839ba1ebf62f8a34694dc09c079b1bf3444f38b522bae20bb01b55e1aebb583b3b760de5138405a9ed388283cd3a0a83dc101558211247910bcaefe2fdd5378f35b4f5e8c6aaba3095934e55de4f736d2247cec04e2f7ad556cfc0a3b1dc780a4274b03a87a7dfb11ae8d385e35356c18842e10ec18d1b2fed436d6ba93f2b21291126c8feda779aaf6ccc308e05d9ad370441d3798e7443116c008296e46e09cf57440098b81ab6f26f5cf02a11cb09f68c28bde1d13f2500a8d13493b33c97608ef36fea98c952638cea42852a2e795e65daf2938e33aaaa2fd4bea75ee77e7697b1860e58a917795c1d2d79af1634d01ea5a45ad96c2f526c46c5fe431a27828be585701d9f9e6646dc789e99ad4fa6d331ef0d90c8a36a661f6ac13e51690884cdaef89a5b09d15f0bacfb04dd1d378b06eaf526c82930a032c2aee31ddbb9f9b2ed477ead451f43d942403ff7b70262fe63aec740b2ce82ad5769f2531a39ff5820c844c18c930ad502ed890253612361d30167a8a5f23b482e7c18baf7bbea8ef18ea91e6c0aa0476fbf38202fe788eb7e6750a056aa1e1feeed247653e9f179ae851cf65738f5ef911d691fcb487ba4c3f25a3733a2f474cf3322fc6ab5a39ba512d45194349d3ed7e025916b0afa70015964f362dfe85901936d8fae286a45eaa7b114e609eb08c626cf49e0300fec9e2e582323f514b10d9c093da5b321e4daf050f1cd23eb3451ac8c01ec3a3ff95f8be7f0e8e28646dd480d19bf49ebc4c8bf7d7e7a8b71aa3e2497b21e541a28bf75a3408e028f205f4669061e35889775cea4c4e13d30c11b037d282100046a8ce1aabfc7e05e3be32aa33c7b53a34df49239fbaa008e1eb4f384e5976a71b47bdbab4f72a7e9ec83be46c43ec96f097558071096dd75bf1568879b9707d142af04d53b2937f9824444f7c856e3dd71b129218035e9f973fe3e6191989bb8b2c7ddfff24c26f999a06d9673613ff8b52b6ad20c511c757a582389e384ad96b15c322e033ed7a109e8160c47bb7d31c26fdcd1fea2cfab19e8076d1ac7b3693ebf781cf426520a6d9faa94d8183774108457480e15925205dc1f67123431dbdfc6ab2f76f176f41fc705e824617a2eafe4f855395374ccc8cb087786772424de5857f32829aa6030529d0c1529b506a136171fbbb9eb1fbc990f5d9ed63ddb2df14e3ad3174e84f5c05e1ea4abace58adbaa8048260ebcd6d97cd7f2e24e84935b855bdc65101ff8e0f244eeee1b3820ad1536b421d2b396e8889c64fbcad059fe9c203041370f376ef985635590babf892db11b5b6d113bc2843bafcab8e1401f7869d44eb89751dcf0917ccb98f3d97a0b9f8c8657fbfc862970ead585a1ccb7931277fe8d64a4f771de819f6e3b884006519a0dde1e11c821363b2f4468af29bf7d28a9c1ef9a070c7dc104b82c17c3db6e732d1b419b8b08c9602093db3802df8e7bb00a072238fe1bd2c8d7cd80f19afdc3aa8fb4cbffed97532e5bea2f0949ebb8193ccece5c389826afe26a0e86096cd93114b2265621e6ec4538a2a4cf8f3b42b1cd9c2c58a34c0351f822b51d413f08f60283d5a14c600bdeeaa64516c29b692bad549a1fe795973bce134c53d804d667d6bb5e1d77a563420943f8965155c4b6b0f213dc528eba9983614527a260026e71f82b3beb22a76459fb47a034ed79fcbaa8f46665c0b6026d06d6d3587413d4dcd64c4461d628e73d4d6eb4265b12336f447fbacdedafb3448e1724bfa3a955734d7a0d7f0d758871b1eb8c16417ad207616355c0e98c1e0cb519d84b3fb311a335edd8689e165cbd6af4f5c3cebb9926b5e209227c2b9f194907a2d5ebe09726845f45c2e1a07f5f882ab3209e3c9b4c989de10b3552d15f1d5a0cda488d87c556b6d5c9535fd918202986a3fe922b3c8252d0ebfafe24b94927fc179d51d504d3784cc0b680352dd7e8614cb8317eeb224adb8a70c2850c9a8b3d6bfcefddf8751fa2976e0dbb5fad6ca446012d80c8060efb298cce1848aa7a10b60d0fb0d56d8c223af064f874b1529462767851f267b88a5a8fcd544ae3d6f2217d1488b99081703d58a3058601615b2f34d924f4d5b63f894fc5431f5dfb84ebda7de4e7052c075731e979849d8db345efe5e064abbb7393e2620643303b183e319ce8e34323"}) add_key(&(0x7f0000002680)='dns_resolver\x00', 0x0, &(0x7f0000000140)="4c03cdf1e949fc40b95081ec343264c283f2e057cd5759747195b8ba33e957d1ef32f5b19413d6f30b01816b75be29c1c24b1e59356a76d6ca617d7eb716b44ed2c1f7e7be8581a48c879e770beae22b0b9d9fa883ace5f366cbc6513ca9872d9099933423dcc058ff4592cdd0f9be8e8ae3a883e7a81d3298731f28764d5489c8bd831b00", 0xfffff, r0) 2021/11/11 13:07:12 poll: candidates=8 inputs=0 signal=0 [1198563ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108521 #0 [1198584ms] -> add_key$keyring(0x200000c0, 0x20000100, 0x0, 0x0, 0xfffffffffffffffc) #0 [1198585ms] <- add_key$keyring=0x2cf2a9 errno=14 cover=1678 #0 [1198585ms] -> ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) #0 [1198585ms] <- ioctl$BTRFS_IOC_INO_LOOKUP=0xffffffffffffffff errno=9 cover=45 #0 [1198585ms] -> ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x2004c480) #0 [1198586ms] <- ioctl$BTRFS_IOC_INO_LOOKUP_USER=0xffffffffffffffff errno=9 cover=45 #0 [1198586ms] -> add_key(0x20002680, 0x0, 0x20000140, 0xfffff, 0x2cf2a9) [ 1247.483628] Invalid option length (312280) for dns_resolver key #0 [1198590ms] <- add_key=0xffffffffffffffff errno=22 cover=38804 enabling collider #0 [1198593ms] -> add_key$keyring(0x200000c0, 0x20000100, 0x0, 0x0, 0xfffffffffffffffc) #0 [1198594ms] <- add_key$keyring=0x35aaaa8c errno=14 cover=1674 #0 [1198594ms] -> ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) #0 [1198594ms] <- ioctl$BTRFS_IOC_INO_LOOKUP=0xffffffffffffffff errno=9 cover=45 pthread_create failed (errno 11) 13:07:12 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000004c480)={0x0, 0x0, "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", "053f1110869cb5dacee1cf2902c081737e27a23e2bc42f786744f1725321b94972a25c97caf2d91faa4356ffcedda3a5d5ffc0699e2e6e666465a2983277e382957533ed2a78503368a425e923d3cb97ceb472bc9de52ae6264b732e61940d4ba086c91170d67edaf2cbc65eb91154a397e34e6363ab6e438070e9b895c6310e09dd99bcd6934212f5e1b7ad0912378c7bf1dad50ddce020ca654430f5d6662552cd3fbefbaf553c468062d669807721e097116083130a15481f1857b64c0e39c2a8c49cfb993599018ad629a313d6efdd3c55eea6103b90968cba58ca3d68c8c33ac2a798396a8f9f4e8cd269ea1ee8cc70186300c2d24301134b8418c1a7bcad10c0c6159b495e4664918568f679a7a9f4f26029ff445b74c71274eab6ed63e73ecc5543f25a98141f0b1333759a6163e756c9e45c0e2d43f07bbcdf4a52be8bb0774876952188a305ae9daf942b27ec3519d14cb2a89b1750fe1b280d3625b8624055ac5a0aba213a36e6d0b8ff7bba41326e5e4073fd4d25ee3775adc67cd9f3d25fdd51fb2c461430d68bfd6c8df0b1ec85ce62562d98ea8bcf84b43b2cca11914053cfe3dcd26edf7f9552af02bf2622f380f8ebbb82793ef1b28eb50277da593ac093910cf242ceb7a742c104fe464e4e8249765bde6e88ae6202f8c56653a6a73f856577bc24990c370f90cb732b103e755dd66f577b6744e34eabdbb44442315a0af5cd14158c7a0c586f6c7f6781c966f34966274002cd5cf88e286a60d50f07ece37061bfd436f0d6ada6dbc074901e08c73661776f14785cdec4a02624a6e4531559b0663e7a969b4ebc411e40c053a852b1c007865985f3c03066fd469f6d018c777de67900dca981b44c5ba16c19dbd371ff13ad8a078902721e16d9fc6038601d40a325bc1418529c7c9a5d708d4cb75f92e8ac624e6f800102239e17fe1f96bfd2bdd3afa24f4b09e03dcd2e257db60a27459c4114a29e4f88893892cafed3dd8649d7f70206324de5c63ebce62fd6117ddcfa637ed951cbe2980325e2c45c6c3c951b91c09a8f73b64128b48420a62fdd00548fe39d34e298b3e90cedcb9a1defb951d0c55a708c72c6a5c544641f3ded2d6c42c61b92321444037d629c8c4af0fd6aa6e033e86b64c04e7c20427d7afc1c179f73599f71e09d670dca88986685ee49d9fe9744ab35b9892569b696166dfcea573b3d58fbcc01e4565c9d079916528cee50ff9a6a25595e709fb15c003f8f5a63b7c90d68f218b0e55f7373e7910b26e0ffa2eb655975e0bd586f65a40dbb60040767d7de4cf4e3d306afd45b6540865cf779976c371cf5eac9a7baad0fd1d9fbbcd875046c219279882f38d8455e2b6cf9131e5891bbf797d33dfc200274804ca5c9830b40b8251c0ee15b1d26adb28661ea66417cce1dd18739f2f456c764a046fbc65a8448817b8367fc789dbc7feae1929ff309baa66a04d9861c962daa045e7a5ce766cb006558d571127fbce5148588209178639385c7d9f86ab878abcca8d9f94ebf0b688e0185ba3a9f96294eae0324139cf1dbdd6aa0f7efe1ec332d27aa72f8ef77eae42f5e84ab2cfa76f7b0aaaad7634dcb4b49a5032eda191fe9e7de2705cafa68655d8222bebf13c54b3a656fe82867a9ceed26aad55e011f9f3cde678b8c7e1bc4116ec8160a4b35f7a0552318fc8db5367c59619562ec990b4fb8aafe6a7ebb62ec561e389389d1b6a53e8dc15f0d8dac555ca137ebf2e933f6fb863d6e6ab757cf345b3cc428309564f86500a69d28b368c640ed06d21001f6e2ec68651be61cf01df9c5b22a7706f09205a6975276a7f9397224bd3afe938d80e1287c414d7169d7b60c666d25ad0b90c741ada488e7942fe7efee7a1f63edd65302297c88764a234635ffd40a6c66384caf90e7bfecaea8b5983bf4250cece2e6bdc686fdc9a804bde7a833bcf8879836e4be943d2e484f9b72d9983d3c1342dcbf1c66cb2ee7d6eff32b44bf001ccf4a8bc5197789a8dafc1fdad7b239a5d9d6508690747356858d2fc3a8da1d3681899d4415a3857ba8843612f5a37134f851f01ae0e311d483f278e7efdaea0ae922cf57c8ee5a1448565dc8eeed897fb3a67fda0ff3ed20c843334312d3e8d6e261e0b34e2810c635d868f8252c38fd3cd6b1f58a712e623c21a52d8d2f077a8d4f23845a06b0c3abca08968c2533df659671c72accffd73111b782e8a6f7a7abd873e374d921ae65f8b981e7b9cb768f9c08f9d2c097c8f04c0d9ca101814e5318d0d1474d0faf3d179cfc637550672d92d1f811634354aa205355bade079e8cd6f0786df001a22f21531552371b73e47f9cb0bffa9504ba611b2ebeadc2c433d35522afec9207e040a86cd71168da151e09972da7790f63159cb60326603dc9ec7342616dde134e756f1bf6d502c7a97979152ff9d2e30053b03089ed531bded0b43ee52b2db7d8b1cc9107d9c2c832eeeccac02e4bdd370716708d3a27eeef9bcfe783dde113ca9ea23462b110c73d6ded5ece13397e8f4be3b42e1ccc8d2054d23eabc1ed87c4d28491c7987ebf258cb9a240bdf206e1e45e926842cb726c27f67f55d6215b7869fda96b1c9df32ee947dd9bcba8550aa1bce1b17c1ec3db9043a62285285d09de53e0ada2f7633abc7eebb7633e2da802c9c6746a65e26cd329246fb85c7cc6cedd8d534e6b8880b45332c5de59d9593c87c03a0043ac3b252c4139a68fc5eca94f954e229a991835fdd1aa2537b54d15407d764378a027c5aef057195621c4fc5090dc1012432487b3f93f2b16e3d1351da2d8ef5d9afe8e380e525e42227f722c496dc60095f89dec1a09131303a7cbdd115108f69212beb4064249d726da57e1ed23c7df01c540215f5bf73467a1fa614b0f7fe89150dab20302548fe103c55ed9579f51c5de106fb322bc95707a3cb9746cb1a368e2f5e382909bd23b5d3fac4d7ff1c27e19ec01057242f7ea9facac0f7d54f27f550e9c9605ac92dd2e7299e20dea795a998d85cd1751e8657faf0ce00fb41d85b25e41d8f16727eaf8b19855eca749cb79dd9b54f06f908d8e7e51c5344bf61761f398c70be78dbed112bd6e7a0576d248441fff01d06f8011fa45f197cf70edb1e807441fbad574cdea12a4f2c7aba533f8bdc0539a6e014118510b6ee4ae9e1914ff20e941ce4504244b70daf362411a9a3ef709e862fc839ba1ebf62f8a34694dc09c079b1bf3444f38b522bae20bb01b55e1aebb583b3b760de5138405a9ed388283cd3a0a83dc101558211247910bcaefe2fdd5378f35b4f5e8c6aaba3095934e55de4f736d2247cec04e2f7ad556cfc0a3b1dc780a4274b03a87a7dfb11ae8d385e35356c18842e10ec18d1b2fed436d6ba93f2b21291126c8feda779aaf6ccc308e05d9ad370441d3798e7443116c008296e46e09cf57440098b81ab6f26f5cf02a11cb09f68c28bde1d13f2500a8d13493b33c97608ef36fea98c952638cea42852a2e795e65daf2938e33aaaa2fd4bea75ee77e7697b1860e58a917795c1d2d79af1634d01ea5a45ad96c2f526c46c5fe431a27828be585701d9f9e6646dc789e99ad4fa6d331ef0d90c8a36a661f6ac13e51690884cdaef89a5b09d15f0bacfb04dd1d378b06eaf526c82930a032c2aee31ddbb9f9b2ed477ead451f43d942403ff7b70262fe63aec740b2ce82ad5769f2531a39ff5820c844c18c930ad502ed890253612361d30167a8a5f23b482e7c18baf7bbea8ef18ea91e6c0aa0476fbf38202fe788eb7e6750a056aa1e1feeed247653e9f179ae851cf65738f5ef911d691fcb487ba4c3f25a3733a2f474cf3322fc6ab5a39ba512d45194349d3ed7e025916b0afa70015964f362dfe85901936d8fae286a45eaa7b114e609eb08c626cf49e0300fec9e2e582323f514b10d9c093da5b321e4daf050f1cd23eb3451ac8c01ec3a3ff95f8be7f0e8e28646dd480d19bf49ebc4c8bf7d7e7a8b71aa3e2497b21e541a28bf75a3408e028f205f4669061e35889775cea4c4e13d30c11b037d282100046a8ce1aabfc7e05e3be32aa33c7b53a34df49239fbaa008e1eb4f384e5976a71b47bdbab4f72a7e9ec83be46c43ec96f097558071096dd75bf1568879b9707d142af04d53b2937f9824444f7c856e3dd71b129218035e9f973fe3e6191989bb8b2c7ddfff24c26f999a06d9673613ff8b52b6ad20c511c757a582389e384ad96b15c322e033ed7a109e8160c47bb7d31c26fdcd1fea2cfab19e8076d1ac7b3693ebf781cf426520a6d9faa94d8183774108457480e15925205dc1f67123431dbdfc6ab2f76f176f41fc705e824617a2eafe4f855395374ccc8cb087786772424de5857f32829aa6030529d0c1529b506a136171fbbb9eb1fbc990f5d9ed63ddb2df14e3ad3174e84f5c05e1ea4abace58adbaa8048260ebcd6d97cd7f2e24e84935b855bdc65101ff8e0f244eeee1b3820ad1536b421d2b396e8889c64fbcad059fe9c203041370f376ef985635590babf892db11b5b6d113bc2843bafcab8e1401f7869d44eb89751dcf0917ccb98f3d97a0b9f8c8657fbfc862970ead585a1ccb7931277fe8d64a4f771de819f6e3b884006519a0dde1e11c821363b2f4468af29bf7d28a9c1ef9a070c7dc104b82c17c3db6e732d1b419b8b08c9602093db3802df8e7bb00a072238fe1bd2c8d7cd80f19afdc3aa8fb4cbffed97532e5bea2f0949ebb8193ccece5c389826afe26a0e86096cd93114b2265621e6ec4538a2a4cf8f3b42b1cd9c2c58a34c0351f822b51d413f08f60283d5a14c600bdeeaa64516c29b692bad549a1fe795973bce134c53d804d667d6bb5e1d77a563420943f8965155c4b6b0f213dc528eba9983614527a260026e71f82b3beb22a76459fb47a034ed79fcbaa8f46665c0b6026d06d6d3587413d4dcd64c4461d628e73d4d6eb4265b12336f447fbacdedafb3448e1724bfa3a955734d7a0d7f0d758871b1eb8c16417ad207616355c0e98c1e0cb519d84b3fb311a335edd8689e165cbd6af4f5c3cebb9926b5e209227c2b9f194907a2d5ebe09726845f45c2e1a07f5f882ab3209e3c9b4c989de10b3552d15f1d5a0cda488d87c556b6d5c9535fd918202986a3fe922b3c8252d0ebfafe24b94927fc179d51d504d3784cc0b680352dd7e8614cb8317eeb224adb8a70c2850c9a8b3d6bfcefddf8751fa2976e0dbb5fad6ca446012d80c8060efb298cce1848aa7a10b60d0fb0d56d8c223af064f874b1529462767851f267b88a5a8fcd544ae3d6f2217d1488b99081703d58a3058601615b2f34d924f4d5b63f894fc5431f5dfb84ebda7de4e7052c075731e979849d8db345efe5e064abbb7393e2620643303b183e319ce8e34323"}) add_key(&(0x7f0000002680)='dns_resolver\x00', 0x0, &(0x7f0000000140)="4c03cdf1e949fc40b95081ec343264c283f2e057cd5759747195b8ba33e957d1ef32f5b19413d6f30b01816b75be29c1c24b1e59356a76d6ca617d7eb716b44ed2c1f7e7be8581a48c879e770beae22b0b9d9fa883ace5f366cbc6513ca9872d9099933423dcc058ff4592cdd0f9be8e8ae3a883e7a81d3298731f28764d5489c8bd831b00", 0xfffff, r0) 2021/11/11 13:07:12 result hanged=false: 2021/11/11 13:07:12 #0: triaging type=7 2021/11/11 13:07:12 triaging input for call #3 add_key (new signal=4) [1198682ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108623 #0 [1198707ms] -> add_key$keyring(0x200000c0, 0x20000100, 0x0, 0x0, 0xfffffffffffffffc) #0 [1198707ms] <- add_key$keyring=0x19a55f3a errno=14 cover=1775 #0 [1198712ms] -> ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) #0 [1198712ms] <- ioctl$BTRFS_IOC_INO_LOOKUP=0xffffffffffffffff errno=9 cover=45 #0 [1198713ms] -> ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x2004c480) #0 [1198713ms] <- ioctl$BTRFS_IOC_INO_LOOKUP_USER=0xffffffffffffffff errno=9 cover=45 #0 [1198713ms] -> add_key(0x20002680, 0x0, 0x20000140, 0xfffff, 0x19a55f3a) [ 1247.611629] Invalid option length (312280) for dns_resolver key #0 [1198718ms] <- add_key=0xffffffffffffffff errno=22 cover=38830 2021/11/11 13:07:12 result hanged=false: 13:07:12 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000004c480)={0x0, 0x0, "3fe9635921948ce2f0bd24903b14eb73a2566a6e6ea1aba44dd09c7f7233227017f4b428365bef107aee4fbe0393bfecd368a55be1a70eec128bc3eb85f4aa18d7aa29f43e96a0657ec207fbb1a3793a655dd89c9ad455b3c2fc3b654532bd8fdc25348a55f9c228600f7e02dcfaae9f508c75f5c483a58ae64ddd25446cfdd7395fe5ef77756a5251de543c2b8d0d52df445263ab67d57bcec49c04c7db18b710e4c1bccb77d118f70932fbd113792e883faec5c3b97009a0ddad1cc8fa9d3cd79097aec3b6e11da7c3e42c064a0c247cecf7b878d836c3c8c4d4dcc8624f086528692a3ec23d4f1a6fb84a83234efed9bc0369839290480a32bd90376481ab", "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"}) add_key(&(0x7f0000002680)='dns_resolver\x00', 0x0, &(0x7f0000000140)="4c03cdf1e949fc40b95081ec343264c283f2e057cd5759747195b8ba33e957d1ef32f5b19413d6f30b01816b75be29c1c24b1e59356a76d6ca617d7eb716b44ed2c1f7e7be8581a48c879e770beae22b0b9d9fa883ace5f366cbc6513ca9872d9099933423dcc058ff4592cdd0f9be8e8ae3a883e7a81d3298731f28764d5489c8bd831b00", 0xfffff, r0) [1198773ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108625 #0 [1198794ms] -> add_key$keyring(0x200000c0, 0x20000100, 0x0, 0x0, 0xfffffffffffffffc) #0 [1198795ms] <- add_key$keyring=0x6869930 errno=14 cover=1719 #0 [1198796ms] -> ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) #0 [1198796ms] <- ioctl$BTRFS_IOC_INO_LOOKUP=0xffffffffffffffff errno=9 cover=45 #0 [1198796ms] -> ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x2004c480) #0 [1198797ms] <- ioctl$BTRFS_IOC_INO_LOOKUP_USER=0xffffffffffffffff errno=9 cover=45 #0 [1198797ms] -> add_key(0x20002680, 0x0, 0x20000140, 0xfffff, 0x6869930) [ 1247.696804] Invalid option length (312280) for dns_resolver key #0 [1198816ms] <- add_key=0xffffffffffffffff errno=22 cover=38779 2021/11/11 13:07:12 result hanged=false: 13:07:12 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000004c480)={0x0, 0x0, "3fe9635921948ce2f0bd24903b14eb73a2566a6e6ea1aba44dd09c7f7233227017f4b428365bef107aee4fbe0393bfecd368a55be1a70eec128bc3eb85f4aa18d7aa29f43e96a0657ec207fbb1a3793a655dd89c9ad455b3c2fc3b654532bd8fdc25348a55f9c228600f7e02dcfaae9f508c75f5c483a58ae64ddd25446cfdd7395fe5ef77756a5251de543c2b8d0d52df445263ab67d57bcec49c04c7db18b710e4c1bccb77d118f70932fbd113792e883faec5c3b97009a0ddad1cc8fa9d3cd79097aec3b6e11da7c3e42c064a0c247cecf7b878d836c3c8c4d4dcc8624f086528692a3ec23d4f1a6fb84a83234efed9bc0369839290480a32bd90376481ab", "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"}) add_key(&(0x7f0000002680)='dns_resolver\x00', 0x0, &(0x7f0000000140)="4c03cdf1e949fc40b95081ec343264c283f2e057cd5759747195b8ba33e957d1ef32f5b19413d6f30b01816b75be29c1c24b1e59356a76d6ca617d7eb716b44ed2c1f7e7be8581a48c879e770beae22b0b9d9fa883ace5f366cbc6513ca9872d9099933423dcc058ff4592cdd0f9be8e8ae3a883e7a81d3298731f28764d5489c8bd831b00", 0xfffff, r0) [1198862ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108627 #0 [1198881ms] -> add_key$keyring(0x200000c0, 0x20000100, 0x0, 0x0, 0xfffffffffffffffc) #0 [1198882ms] <- add_key$keyring=0x28e46e80 errno=14 cover=1676 #0 [1198882ms] -> ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) #0 [1198882ms] <- ioctl$BTRFS_IOC_INO_LOOKUP=0xffffffffffffffff errno=9 cover=45 #0 [1198882ms] -> ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x2004c480) #0 [1198883ms] <- ioctl$BTRFS_IOC_INO_LOOKUP_USER=0xffffffffffffffff errno=9 cover=45 #0 [1198884ms] -> add_key(0x20002680, 0x0, 0x20000140, 0xfffff, 0x28e46e80) [ 1247.783183] Invalid option length (312280) for dns_resolver key #0 [1198896ms] <- add_key=0xffffffffffffffff errno=22 cover=38794 2021/11/11 13:07:12 result hanged=false: 2021/11/11 13:07:12 added new input for call #3 add_key to corpus: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000004c480)={0x0, 0x0, "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", "053f1110869cb5dacee1cf2902c081737e27a23e2bc42f786744f1725321b94972a25c97caf2d91faa4356ffcedda3a5d5ffc0699e2e6e666465a2983277e382957533ed2a78503368a425e923d3cb97ceb472bc9de52ae6264b732e61940d4ba086c91170d67edaf2cbc65eb91154a397e34e6363ab6e438070e9b895c6310e09dd99bcd6934212f5e1b7ad0912378c7bf1dad50ddce020ca654430f5d6662552cd3fbefbaf553c468062d669807721e097116083130a15481f1857b64c0e39c2a8c49cfb993599018ad629a313d6efdd3c55eea6103b90968cba58ca3d68c8c33ac2a798396a8f9f4e8cd269ea1ee8cc70186300c2d24301134b8418c1a7bcad10c0c6159b495e4664918568f679a7a9f4f26029ff445b74c71274eab6ed63e73ecc5543f25a98141f0b1333759a6163e756c9e45c0e2d43f07bbcdf4a52be8bb0774876952188a305ae9daf942b27ec3519d14cb2a89b1750fe1b280d3625b8624055ac5a0aba213a36e6d0b8ff7bba41326e5e4073fd4d25ee3775adc67cd9f3d25fdd51fb2c461430d68bfd6c8df0b1ec85ce62562d98ea8bcf84b43b2cca11914053cfe3dcd26edf7f9552af02bf2622f380f8ebbb82793ef1b28eb50277da593ac093910cf242ceb7a742c104fe464e4e8249765bde6e88ae6202f8c56653a6a73f856577bc24990c370f90cb732b103e755dd66f577b6744e34eabdbb44442315a0af5cd14158c7a0c586f6c7f6781c966f34966274002cd5cf88e286a60d50f07ece37061bfd436f0d6ada6dbc074901e08c73661776f14785cdec4a02624a6e4531559b0663e7a969b4ebc411e40c053a852b1c007865985f3c03066fd469f6d018c777de67900dca981b44c5ba16c19dbd371ff13ad8a078902721e16d9fc6038601d40a325bc1418529c7c9a5d708d4cb75f92e8ac624e6f800102239e17fe1f96bfd2bdd3afa24f4b09e03dcd2e257db60a27459c4114a29e4f88893892cafed3dd8649d7f70206324de5c63ebce62fd6117ddcfa637ed951cbe2980325e2c45c6c3c951b91c09a8f73b64128b48420a62fdd00548fe39d34e298b3e90cedcb9a1defb951d0c55a708c72c6a5c544641f3ded2d6c42c61b92321444037d629c8c4af0fd6aa6e033e86b64c04e7c20427d7afc1c179f73599f71e09d670dca88986685ee49d9fe9744ab35b9892569b696166dfcea573b3d58fbcc01e4565c9d079916528cee50ff9a6a25595e709fb15c003f8f5a63b7c90d68f218b0e55f7373e7910b26e0ffa2eb655975e0bd586f65a40dbb60040767d7de4cf4e3d306afd45b6540865cf779976c371cf5eac9a7baad0fd1d9fbbcd875046c219279882f38d8455e2b6cf9131e5891bbf797d33dfc200274804ca5c9830b40b8251c0ee15b1d26adb28661ea66417cce1dd18739f2f456c764a046fbc65a8448817b8367fc789dbc7feae1929ff309baa66a04d9861c962daa045e7a5ce766cb006558d571127fbce5148588209178639385c7d9f86ab878abcca8d9f94ebf0b688e0185ba3a9f96294eae0324139cf1dbdd6aa0f7efe1ec332d27aa72f8ef77eae42f5e84ab2cfa76f7b0aaaad7634dcb4b49a5032eda191fe9e7de2705cafa68655d8222bebf13c54b3a656fe82867a9ceed26aad55e011f9f3cde678b8c7e1bc4116ec8160a4b35f7a0552318fc8db5367c59619562ec990b4fb8aafe6a7ebb62ec561e389389d1b6a53e8dc15f0d8dac555ca137ebf2e933f6fb863d6e6ab757cf345b3cc428309564f86500a69d28b368c640ed06d21001f6e2ec68651be61cf01df9c5b22a7706f09205a6975276a7f9397224bd3afe938d80e1287c414d7169d7b60c666d25ad0b90c741ada488e7942fe7efee7a1f63edd65302297c88764a234635ffd40a6c66384caf90e7bfecaea8b5983bf4250cece2e6bdc686fdc9a804bde7a833bcf8879836e4be943d2e484f9b72d9983d3c1342dcbf1c66cb2ee7d6eff32b44bf001ccf4a8bc5197789a8dafc1fdad7b239a5d9d6508690747356858d2fc3a8da1d3681899d4415a3857ba8843612f5a37134f851f01ae0e311d483f278e7efdaea0ae922cf57c8ee5a1448565dc8eeed897fb3a67fda0ff3ed20c843334312d3e8d6e261e0b34e2810c635d868f8252c38fd3cd6b1f58a712e623c21a52d8d2f077a8d4f23845a06b0c3abca08968c2533df659671c72accffd73111b782e8a6f7a7abd873e374d921ae65f8b981e7b9cb768f9c08f9d2c097c8f04c0d9ca101814e5318d0d1474d0faf3d179cfc637550672d92d1f811634354aa205355bade079e8cd6f0786df001a22f21531552371b73e47f9cb0bffa9504ba611b2ebeadc2c433d35522afec9207e040a86cd71168da151e09972da7790f63159cb60326603dc9ec7342616dde134e756f1bf6d502c7a97979152ff9d2e30053b03089ed531bded0b43ee52b2db7d8b1cc9107d9c2c832eeeccac02e4bdd370716708d3a27eeef9bcfe783dde113ca9ea23462b110c73d6ded5ece13397e8f4be3b42e1ccc8d2054d23eabc1ed87c4d28491c7987ebf258cb9a240bdf206e1e45e926842cb726c27f67f55d6215b7869fda96b1c9df32ee947dd9bcba8550aa1bce1b17c1ec3db9043a62285285d09de53e0ada2f7633abc7eebb7633e2da802c9c6746a65e26cd329246fb85c7cc6cedd8d534e6b8880b45332c5de59d9593c87c03a0043ac3b252c4139a68fc5eca94f954e229a991835fdd1aa2537b54d15407d764378a027c5aef057195621c4fc5090dc1012432487b3f93f2b16e3d1351da2d8ef5d9afe8e380e525e42227f722c496dc60095f89dec1a09131303a7cbdd115108f69212beb4064249d726da57e1ed23c7df01c540215f5bf73467a1fa614b0f7fe89150dab20302548fe103c55ed9579f51c5de106fb322bc95707a3cb9746cb1a368e2f5e382909bd23b5d3fac4d7ff1c27e19ec01057242f7ea9facac0f7d54f27f550e9c9605ac92dd2e7299e20dea795a998d85cd1751e8657faf0ce00fb41d85b25e41d8f16727eaf8b19855eca749cb79dd9b54f06f908d8e7e51c5344bf61761f398c70be78dbed112bd6e7a0576d248441fff01d06f8011fa45f197cf70edb1e807441fbad574cdea12a4f2c7aba533f8bdc0539a6e014118510b6ee4ae9e1914ff20e941ce4504244b70daf362411a9a3ef709e862fc839ba1ebf62f8a34694dc09c079b1bf3444f38b522bae20bb01b55e1aebb583b3b760de5138405a9ed388283cd3a0a83dc101558211247910bcaefe2fdd5378f35b4f5e8c6aaba3095934e55de4f736d2247cec04e2f7ad556cfc0a3b1dc780a4274b03a87a7dfb11ae8d385e35356c18842e10ec18d1b2fed436d6ba93f2b21291126c8feda779aaf6ccc308e05d9ad370441d3798e7443116c008296e46e09cf57440098b81ab6f26f5cf02a11cb09f68c28bde1d13f2500a8d13493b33c97608ef36fea98c952638cea42852a2e795e65daf2938e33aaaa2fd4bea75ee77e7697b1860e58a917795c1d2d79af1634d01ea5a45ad96c2f526c46c5fe431a27828be585701d9f9e6646dc789e99ad4fa6d331ef0d90c8a36a661f6ac13e51690884cdaef89a5b09d15f0bacfb04dd1d378b06eaf526c82930a032c2aee31ddbb9f9b2ed477ead451f43d942403ff7b70262fe63aec740b2ce82ad5769f2531a39ff5820c844c18c930ad502ed890253612361d30167a8a5f23b482e7c18baf7bbea8ef18ea91e6c0aa0476fbf38202fe788eb7e6750a056aa1e1feeed247653e9f179ae851cf65738f5ef911d691fcb487ba4c3f25a3733a2f474cf3322fc6ab5a39ba512d45194349d3ed7e025916b0afa70015964f362dfe85901936d8fae286a45eaa7b114e609eb08c626cf49e0300fec9e2e582323f514b10d9c093da5b321e4daf050f1cd23eb3451ac8c01ec3a3ff95f8be7f0e8e28646dd480d19bf49ebc4c8bf7d7e7a8b71aa3e2497b21e541a28bf75a3408e028f205f4669061e35889775cea4c4e13d30c11b037d282100046a8ce1aabfc7e05e3be32aa33c7b53a34df49239fbaa008e1eb4f384e5976a71b47bdbab4f72a7e9ec83be46c43ec96f097558071096dd75bf1568879b9707d142af04d53b2937f9824444f7c856e3dd71b129218035e9f973fe3e6191989bb8b2c7ddfff24c26f999a06d9673613ff8b52b6ad20c511c757a582389e384ad96b15c322e033ed7a109e8160c47bb7d31c26fdcd1fea2cfab19e8076d1ac7b3693ebf781cf426520a6d9faa94d8183774108457480e15925205dc1f67123431dbdfc6ab2f76f176f41fc705e824617a2eafe4f855395374ccc8cb087786772424de5857f32829aa6030529d0c1529b506a136171fbbb9eb1fbc990f5d9ed63ddb2df14e3ad3174e84f5c05e1ea4abace58adbaa8048260ebcd6d97cd7f2e24e84935b855bdc65101ff8e0f244eeee1b3820ad1536b421d2b396e8889c64fbcad059fe9c203041370f376ef985635590babf892db11b5b6d113bc2843bafcab8e1401f7869d44eb89751dcf0917ccb98f3d97a0b9f8c8657fbfc862970ead585a1ccb7931277fe8d64a4f771de819f6e3b884006519a0dde1e11c821363b2f4468af29bf7d28a9c1ef9a070c7dc104b82c17c3db6e732d1b419b8b08c9602093db3802df8e7bb00a072238fe1bd2c8d7cd80f19afdc3aa8fb4cbffed97532e5bea2f0949ebb8193ccece5c389826afe26a0e86096cd93114b2265621e6ec4538a2a4cf8f3b42b1cd9c2c58a34c0351f822b51d413f08f60283d5a14c600bdeeaa64516c29b692bad549a1fe795973bce134c53d804d667d6bb5e1d77a563420943f8965155c4b6b0f213dc528eba9983614527a260026e71f82b3beb22a76459fb47a034ed79fcbaa8f46665c0b6026d06d6d3587413d4dcd64c4461d628e73d4d6eb4265b12336f447fbacdedafb3448e1724bfa3a955734d7a0d7f0d758871b1eb8c16417ad207616355c0e98c1e0cb519d84b3fb311a335edd8689e165cbd6af4f5c3cebb9926b5e209227c2b9f194907a2d5ebe09726845f45c2e1a07f5f882ab3209e3c9b4c989de10b3552d15f1d5a0cda488d87c556b6d5c9535fd918202986a3fe922b3c8252d0ebfafe24b94927fc179d51d504d3784cc0b680352dd7e8614cb8317eeb224adb8a70c2850c9a8b3d6bfcefddf8751fa2976e0dbb5fad6ca446012d80c8060efb298cce1848aa7a10b60d0fb0d56d8c223af064f874b1529462767851f267b88a5a8fcd544ae3d6f2217d1488b99081703d58a3058601615b2f34d924f4d5b63f894fc5431f5dfb84ebda7de4e7052c075731e979849d8db345efe5e064abbb7393e2620643303b183e319ce8e34323"}) add_key(&(0x7f0000002680)='dns_resolver\x00', 0x0, &(0x7f0000000140)="4c03cdf1e949fc40b95081ec343264c283f2e057cd5759747195b8ba33e957d1ef32f5b19413d6f30b01816b75be29c1c24b1e59356a76d6ca617d7eb716b44ed2c1f7e7be8581a48c879e770beae22b0b9d9fa883ace5f366cbc6513ca9872d9099933423dcc058ff4592cdd0f9be8e8ae3a883e7a81d3298731f28764d5489c8bd831b00", 0xfffff, r0) 13:07:12 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) [1198950ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108629 #0 [1198969ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1198970ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6265 #0 [1198971ms] -> syz_genetlink_get_family_id$nl802154(0x20000480, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [1198972ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=7728 enabling collider #0 [1198973ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1198974ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5483 #0 [1198974ms] -> syz_genetlink_get_family_id$nl802154(0x20000480, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) 2021/11/11 13:07:12 result hanged=false: 13:07:12 executing program 0: mknod$loop(&(0x7f00000005c0)='./file1\x00', 0x800, 0x0) chown(&(0x7f00000007c0)='./file1\x00', 0xee00, 0xee00) [1199019ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108631 #0 [1199037ms] -> mknod$loop(0x200005c0, 0x800, 0x700) #0 [1199043ms] <- mknod$loop=0x0 errno=14 cover=6873 #0 [1199044ms] -> chown(0x200007c0, 0xee00, 0xee00) #0 [1199045ms] <- chown=0x0 errno=14 cover=2620 enabling collider #0 [1199045ms] -> mknod$loop(0x200005c0, 0x800, 0x700) #0 [1199045ms] <- mknod$loop=0xffffffffffffffff errno=17 cover=584 2021/11/11 13:07:12 result hanged=false: 2021/11/11 13:07:12 #0: triaging type=7 2021/11/11 13:07:12 triaging input for call #1 chown (new signal=13) 13:07:12 executing program 0: mknod$loop(&(0x7f00000005c0)='./file1\x00', 0x800, 0x0) chown(&(0x7f00000007c0)='./file1\x00', 0xee00, 0xee00) [1199097ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108633 #0 [1199123ms] -> mknod$loop(0x200005c0, 0x800, 0x700) #0 [1199129ms] <- mknod$loop=0x0 errno=14 cover=6939 #0 [1199130ms] -> chown(0x200007c0, 0xee00, 0xee00) #0 [1199130ms] <- chown=0x0 errno=14 cover=2638 13:07:12 executing program 0: mknod$loop(&(0x7f00000005c0)='./file1\x00', 0x800, 0x0) chown(&(0x7f00000007c0)='./file1\x00', 0xee00, 0xee00) 2021/11/11 13:07:12 result hanged=false: [1199177ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108635 #0 [1199197ms] -> mknod$loop(0x200005c0, 0x800, 0x700) #0 [1199205ms] <- mknod$loop=0x0 errno=14 cover=6966 #0 [1199208ms] -> chown(0x200007c0, 0xee00, 0xee00) #0 [1199208ms] <- chown=0x0 errno=14 cover=2630 13:07:12 executing program 0: mknod$loop(&(0x7f00000005c0)='./file1\x00', 0x800, 0x0) chown(&(0x7f00000007c0)='./file1\x00', 0xee00, 0xee00) 2021/11/11 13:07:12 result hanged=false: [1199260ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108637 #0 [1199280ms] -> mknod$loop(0x200005c0, 0x800, 0x700) #0 [1199285ms] <- mknod$loop=0x0 errno=14 cover=6953 #0 [1199286ms] -> chown(0x200007c0, 0xee00, 0xee00) #0 [1199286ms] <- chown=0x0 errno=14 cover=2606 2021/11/11 13:07:12 result hanged=false: 2021/11/11 13:07:12 added new input for call #1 chown to corpus: mknod$loop(&(0x7f00000005c0)='./file1\x00', 0x800, 0x0) chown(&(0x7f00000007c0)='./file1\x00', 0xee00, 0xee00) 13:07:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000010401080000000000000000000080"], 0x1c}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0) [1199336ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108639 #0 [1199357ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1199357ms] <- socket$nl_netfilter=0x3 errno=14 cover=1448 #0 [1199358ms] -> sendmsg$NFULNL_MSG_CONFIG(0x3, 0x20000200, 0x0) #0 [1199359ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1343 #0 [1199359ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1199359ms] <- socket$nl_netfilter=0x4 errno=14 cover=1401 #0 [1199360ms] -> sendmsg$NFULNL_MSG_CONFIG(0x4, 0x20000200, 0x0) #0 [1199361ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1416 #0 [1199366ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [1199366ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [1199367ms] -> sendmsg$NFULNL_MSG_CONFIG(0x5, 0x200000c0, 0x0) #0 [1199367ms] <- sendmsg$NFULNL_MSG_CONFIG=0x14 errno=14 cover=1059 enabling collider #0 [1199367ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1199367ms] <- socket$nl_netfilter=0x3 errno=14 cover=1578 #0 [1199368ms] -> sendmsg$NFULNL_MSG_CONFIG(0x3, 0x20000200, 0x0) #0 [1199368ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1343 pthread_create failed (errno 11) 13:07:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000010401080000000000000000000080"], 0x1c}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0) 2021/11/11 13:07:12 result hanged=false: 2021/11/11 13:07:12 #0: triaging type=7 2021/11/11 13:07:12 triaging input for call #5 sendmsg$NFULNL_MSG_CONFIG (new signal=4) [1199449ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108741 #0 [1199468ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1199468ms] <- socket$nl_netfilter=0x3 errno=14 cover=1423 #0 [1199469ms] -> sendmsg$NFULNL_MSG_CONFIG(0x3, 0x20000200, 0x0) #0 [1199470ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1318 #0 [1199471ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1199471ms] <- socket$nl_netfilter=0x4 errno=14 cover=1510 #0 [1199472ms] -> sendmsg$NFULNL_MSG_CONFIG(0x4, 0x20000200, 0x0) #0 [1199472ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1395 #0 [1199473ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [1199473ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [1199474ms] -> sendmsg$NFULNL_MSG_CONFIG(0x5, 0x200000c0, 0x0) #0 [1199474ms] <- sendmsg$NFULNL_MSG_CONFIG=0x14 errno=14 cover=1070 13:07:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000010401080000000000000000000080"], 0x1c}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0) 2021/11/11 13:07:13 result hanged=false: [1199516ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108743 #0 [1199538ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1199538ms] <- socket$nl_netfilter=0x3 errno=14 cover=1448 #0 [1199540ms] -> sendmsg$NFULNL_MSG_CONFIG(0x3, 0x20000200, 0x0) #0 [1199540ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1336 #0 [1199541ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1199541ms] <- socket$nl_netfilter=0x4 errno=14 cover=1521 #0 [1199542ms] -> sendmsg$NFULNL_MSG_CONFIG(0x4, 0x20000200, 0x0) #0 [1199543ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1388 #0 [1199543ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [1199543ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [1199544ms] -> sendmsg$NFULNL_MSG_CONFIG(0x5, 0x200000c0, 0x0) #0 [1199544ms] <- sendmsg$NFULNL_MSG_CONFIG=0x14 errno=14 cover=1069 13:07:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000010401080000000000000000000080"], 0x1c}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0) 2021/11/11 13:07:13 result hanged=false: [1199590ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108745 #0 [1199608ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1199609ms] <- socket$nl_netfilter=0x3 errno=14 cover=1423 #0 [1199609ms] -> sendmsg$NFULNL_MSG_CONFIG(0x3, 0x20000200, 0x0) #0 [1199610ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1329 #0 [1199610ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1199611ms] <- socket$nl_netfilter=0x4 errno=14 cover=1436 #0 [1199613ms] -> sendmsg$NFULNL_MSG_CONFIG(0x4, 0x20000200, 0x0) #0 [1199614ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=5552 #0 [1199617ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [1199617ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [1199618ms] -> sendmsg$NFULNL_MSG_CONFIG(0x5, 0x200000c0, 0x0) #0 [1199618ms] <- sendmsg$NFULNL_MSG_CONFIG=0x14 errno=14 cover=1073 2021/11/11 13:07:13 result hanged=false: 2021/11/11 13:07:13 added new input for call #5 sendmsg$NFULNL_MSG_CONFIG to corpus: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000010401080000000000000000000080"], 0x1c}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0) 13:07:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000010401080000000000000000000080"], 0x1c}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0) 2021/11/11 13:07:13 #0: triaging type=7 2021/11/11 13:07:13 triaging input for call #3 sendmsg$NFULNL_MSG_CONFIG (new signal=9) [1199664ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108747 #0 [1199685ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1199686ms] <- socket$nl_netfilter=0x3 errno=14 cover=1445 #0 [1199687ms] -> sendmsg$NFULNL_MSG_CONFIG(0x3, 0x20000200, 0x0) #0 [1199689ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1361 #0 [1199693ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1199694ms] <- socket$nl_netfilter=0x4 errno=14 cover=1510 #0 [1199694ms] -> sendmsg$NFULNL_MSG_CONFIG(0x4, 0x20000200, 0x0) #0 [1199694ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1395 #0 [1199695ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [1199695ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [1199695ms] -> sendmsg$NFULNL_MSG_CONFIG(0x5, 0x200000c0, 0x0) #0 [1199696ms] <- sendmsg$NFULNL_MSG_CONFIG=0x14 errno=14 cover=1070 13:07:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000010401080000000000000000000080"], 0x1c}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0) 2021/11/11 13:07:13 result hanged=false: [1199742ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108749 #0 [1199763ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1199763ms] <- socket$nl_netfilter=0x3 errno=14 cover=1425 #0 [1199764ms] -> sendmsg$NFULNL_MSG_CONFIG(0x3, 0x20000200, 0x0) #0 [1199764ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1350 #0 [1199765ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1199765ms] <- socket$nl_netfilter=0x4 errno=14 cover=1674 #0 [1199765ms] -> sendmsg$NFULNL_MSG_CONFIG(0x4, 0x20000200, 0x0) #0 [1199766ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1373 #0 [1199766ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [1199766ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [1199766ms] -> sendmsg$NFULNL_MSG_CONFIG(0x5, 0x200000c0, 0x0) #0 [1199767ms] <- sendmsg$NFULNL_MSG_CONFIG=0x14 errno=14 cover=1070 13:07:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000010401080000000000000000000080"], 0x1c}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0) 2021/11/11 13:07:13 result hanged=false: [1199811ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108751 #0 [1199830ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1199831ms] <- socket$nl_netfilter=0x3 errno=14 cover=1401 #0 [1199832ms] -> sendmsg$NFULNL_MSG_CONFIG(0x3, 0x20000200, 0x0) #0 [1199832ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1328 #0 [1199833ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1199833ms] <- socket$nl_netfilter=0x4 errno=14 cover=1437 #0 [1199834ms] -> sendmsg$NFULNL_MSG_CONFIG(0x4, 0x20000200, 0x0) #0 [1199834ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1363 #0 [1199838ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [1199838ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [1199839ms] -> sendmsg$NFULNL_MSG_CONFIG(0x5, 0x200000c0, 0x0) #0 [1199839ms] <- sendmsg$NFULNL_MSG_CONFIG=0x14 errno=14 cover=1073 2021/11/11 13:07:13 result hanged=false: 2021/11/11 13:07:13 added new input for call #3 sendmsg$NFULNL_MSG_CONFIG to corpus: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000010401080000000000000000000080"], 0x1c}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0) 13:07:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000010401080000000000000000000080"], 0x1c}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0) 2021/11/11 13:07:13 #0: triaging type=7 2021/11/11 13:07:13 triaging input for call #1 sendmsg$NFULNL_MSG_CONFIG (new signal=3) [1199885ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108753 #0 [1199908ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1199908ms] <- socket$nl_netfilter=0x3 errno=14 cover=1445 #0 [1199909ms] -> sendmsg$NFULNL_MSG_CONFIG(0x3, 0x20000200, 0x0) #0 [1199909ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1325 #0 [1199909ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1199910ms] <- socket$nl_netfilter=0x4 errno=14 cover=1456 #0 [1199910ms] -> sendmsg$NFULNL_MSG_CONFIG(0x4, 0x20000200, 0x0) #0 [1199910ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1385 #0 [1199910ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [1199910ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [1199910ms] -> sendmsg$NFULNL_MSG_CONFIG(0x5, 0x200000c0, 0x0) #0 [1199911ms] <- sendmsg$NFULNL_MSG_CONFIG=0x14 errno=14 cover=1058 13:07:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000010401080000000000000000000080"], 0x1c}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0) 2021/11/11 13:07:13 result hanged=false: [1199953ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108755 #0 [1199974ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1199975ms] <- socket$nl_netfilter=0x3 errno=14 cover=1492 #0 [1199977ms] -> sendmsg$NFULNL_MSG_CONFIG(0x3, 0x20000200, 0x0) #0 [1199978ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1340 #0 [1199979ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1199979ms] <- socket$nl_netfilter=0x4 errno=14 cover=1488 #0 [1199980ms] -> sendmsg$NFULNL_MSG_CONFIG(0x4, 0x20000200, 0x0) #0 [1199980ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1363 #0 [1199981ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [1199981ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [1199982ms] -> sendmsg$NFULNL_MSG_CONFIG(0x5, 0x200000c0, 0x0) #0 [1199982ms] <- sendmsg$NFULNL_MSG_CONFIG=0x14 errno=14 cover=1058 2021/11/11 13:07:13 result hanged=false: 13:07:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000010401080000000000000000000080"], 0x1c}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0) [1200027ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108757 #0 [1200046ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1200047ms] <- socket$nl_netfilter=0x3 errno=14 cover=1434 #0 [1200048ms] -> sendmsg$NFULNL_MSG_CONFIG(0x3, 0x20000200, 0x0) #0 [1200049ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1365 #0 [1200050ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [1200050ms] <- socket$nl_netfilter=0x4 errno=14 cover=1499 #0 [1200052ms] -> sendmsg$NFULNL_MSG_CONFIG(0x4, 0x20000200, 0x0) #0 [1200052ms] <- sendmsg$NFULNL_MSG_CONFIG=0x1c errno=14 cover=1371 #0 [1200053ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [1200054ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [1200054ms] -> sendmsg$NFULNL_MSG_CONFIG(0x5, 0x200000c0, 0x0) #0 [1200055ms] <- sendmsg$NFULNL_MSG_CONFIG=0x14 errno=14 cover=1070 2021/11/11 13:07:13 result hanged=false: 2021/11/11 13:07:13 added new input for call #1 sendmsg$NFULNL_MSG_CONFIG to corpus: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000010401080000000000000000000080"], 0x1c}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101}, 0x14}}, 0x0) 13:07:13 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)=@random={'security.', '&@\x00'}) [1200102ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108759 #0 [1200126ms] -> syz_mount_image$iso9660(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1200131ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=14 cover=13589 #0 [1200132ms] -> stat(0x20001cc0, 0x20001c00) #0 [1200132ms] <- stat=0x0 errno=14 cover=542 #0 [1200132ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [1200132ms] <- setresuid=0x0 errno=14 cover=440 #0 [1200133ms] -> removexattr(0x200001c0, 0x20000380) #0 [1200133ms] <- removexattr=0xffffffffffffffff errno=1 cover=673 enabling collider #0 [1200134ms] -> syz_mount_image$iso9660(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1200135ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=17 cover=1459 #0 [1200136ms] -> stat(0x20001cc0, 0x20001c00) #0 [1200136ms] <- stat=0x0 errno=14 cover=563 pthread_create failed (errno 11) 13:07:13 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)=@random={'security.', '&@\x00'}) 2021/11/11 13:07:13 result hanged=false: 2021/11/11 13:07:13 #0: triaging type=7 2021/11/11 13:07:13 triaging input for call #3 removexattr (new signal=7) [1200223ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108861 #0 [1200243ms] -> syz_mount_image$iso9660(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1200253ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=14 cover=13249 #0 [1200256ms] -> stat(0x20001cc0, 0x20001c00) #0 [1200256ms] <- stat=0x0 errno=14 cover=554 #0 [1200257ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [1200257ms] <- setresuid=0x0 errno=14 cover=480 #0 [1200258ms] -> removexattr(0x200001c0, 0x20000380) #0 [1200258ms] <- removexattr=0xffffffffffffffff errno=1 cover=681 2021/11/11 13:07:13 result hanged=false: 13:07:13 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)=@random={'security.', '&@\x00'}) [1200310ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108863 #0 [1200336ms] -> syz_mount_image$iso9660(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1200343ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=14 cover=13182 #0 [1200345ms] -> stat(0x20001cc0, 0x20001c00) #0 [1200345ms] <- stat=0x0 errno=14 cover=543 #0 [1200346ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [1200346ms] <- setresuid=0x0 errno=14 cover=437 #0 [1200346ms] -> removexattr(0x200001c0, 0x20000380) #0 [1200346ms] <- removexattr=0xffffffffffffffff errno=1 cover=660 2021/11/11 13:07:13 result hanged=false: 13:07:13 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)=@random={'security.', '&@\x00'}) [1200393ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108865 #0 [1200412ms] -> syz_mount_image$iso9660(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1200423ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=14 cover=13197 #0 [1200426ms] -> stat(0x20001cc0, 0x20001c00) #0 [1200426ms] <- stat=0x0 errno=14 cover=554 #0 [1200427ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [1200427ms] <- setresuid=0x0 errno=14 cover=480 #0 [1200428ms] -> removexattr(0x200001c0, 0x20000380) #0 [1200428ms] <- removexattr=0xffffffffffffffff errno=1 cover=660 2021/11/11 13:07:13 result hanged=false: 2021/11/11 13:07:13 added new input for call #3 removexattr to corpus: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)=@random={'security.', '&@\x00'}) 13:07:13 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)=@random={'security.', '&@\x00'}) 2021/11/11 13:07:13 #0: triaging type=7 2021/11/11 13:07:13 triaging input for call #0 syz_mount_image$iso9660 (new signal=4) [1200478ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108867 #0 [1200497ms] -> syz_mount_image$iso9660(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1200505ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=14 cover=13673 #0 [1200507ms] -> stat(0x20001cc0, 0x20001c00) #0 [1200508ms] <- stat=0x0 errno=14 cover=553 #0 [1200509ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [1200509ms] <- setresuid=0x0 errno=14 cover=502 #0 [1200511ms] -> removexattr(0x200001c0, 0x20000380) #0 [1200511ms] <- removexattr=0xffffffffffffffff errno=1 cover=659 2021/11/11 13:07:14 result hanged=false: 13:07:14 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)=@random={'security.', '&@\x00'}) [1200561ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108869 #0 [1200581ms] -> syz_mount_image$iso9660(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1200588ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=14 cover=13332 #0 [1200593ms] -> stat(0x20001cc0, 0x20001c00) #0 [1200593ms] <- stat=0x0 errno=14 cover=553 #0 [1200593ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [1200594ms] <- setresuid=0x0 errno=14 cover=393 #0 [1200594ms] -> removexattr(0x200001c0, 0x20000380) #0 [1200594ms] <- removexattr=0xffffffffffffffff errno=1 cover=659 13:07:14 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)=@random={'security.', '&@\x00'}) 2021/11/11 13:07:14 result hanged=false: [1200644ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108871 #0 [1200668ms] -> syz_mount_image$iso9660(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1200674ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=14 cover=13263 #0 [1200676ms] -> stat(0x20001cc0, 0x20001c00) #0 [1200676ms] <- stat=0x0 errno=14 cover=543 #0 [1200677ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [1200677ms] <- setresuid=0x0 errno=14 cover=526 #0 [1200678ms] -> removexattr(0x200001c0, 0x20000380) #0 [1200678ms] <- removexattr=0xffffffffffffffff errno=1 cover=660 2021/11/11 13:07:14 result hanged=false: 2021/11/11 13:07:14 added new input for call #0 syz_mount_image$iso9660 to corpus: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)=@random={'security.', '&@\x00'}) 13:07:14 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x127000) [1200734ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108873 #0 [1200754ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000600, 0x127000) #0 [1200757ms] <- openat$sndseq=0xffffffffffffffff errno=22 cover=4721 enabling collider #0 [1200758ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000600, 0x127000) #0 [1200758ms] <- openat$sndseq=0xffffffffffffffff errno=22 cover=4698 13:07:14 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x127000) 2021/11/11 13:07:14 result hanged=false: 2021/11/11 13:07:14 #0: triaging type=7 2021/11/11 13:07:14 triaging input for call #0 openat$sndseq (new signal=1) [1200803ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108875 #0 [1200823ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000600, 0x127000) #0 [1200823ms] <- openat$sndseq=0xffffffffffffffff errno=22 cover=4708 13:07:14 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x127000) 2021/11/11 13:07:14 result hanged=false: [1200870ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108877 #0 [1200889ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000600, 0x127000) #0 [1200890ms] <- openat$sndseq=0xffffffffffffffff errno=22 cover=4696 13:07:14 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x127000) 2021/11/11 13:07:14 result hanged=false: [1200942ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108879 #0 [1200965ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000600, 0x127000) #0 [1200965ms] <- openat$sndseq=0xffffffffffffffff errno=22 cover=4685 2021/11/11 13:07:14 result hanged=false: 2021/11/11 13:07:14 added new input for call #0 openat$sndseq to corpus: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x127000) 13:07:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4662, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000100), &(0x7f0000000140), 0x0) [1201015ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108881 #0 [1201035ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x4662, 0x0) #0 [1201039ms] <- openat=0x3 errno=14 cover=7491 #0 [1201040ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0x0, 0x13, 0x3, 0x0) #0 [1201040ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=2400 #0 [1201041ms] -> ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) #0 [1201041ms] <- ioctl$EXT4_IOC_SWAP_BOOT=0xffffffffffffffff errno=9 cover=45 #0 [1201041ms] -> move_pages(0x0, 0x1, 0x200000c0, 0x20000100, 0x20000140, 0x0) #0 [1201043ms] <- move_pages=0x0 errno=14 cover=422 enabling collider #0 [1201043ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x4662, 0x0) #0 [1201046ms] <- openat=0x3 errno=14 cover=5740 #0 [1201046ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0x0, 0x13, 0x3, 0x0) #0 [1201048ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=1927 pthread_create failed (errno 11) 2021/11/11 13:07:14 result hanged=false: 2021/11/11 13:07:14 #0: triaging type=7 2021/11/11 13:07:14 triaging input for call #3 move_pages (new signal=7) 13:07:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4662, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000100), &(0x7f0000000140), 0x0) [1201136ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108983 #0 [1201156ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x4662, 0x0) #0 [1201164ms] <- openat=0x3 errno=14 cover=7456 #0 [1201165ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0x0, 0x13, 0x3, 0x0) #0 [1201166ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=2441 #0 [1201167ms] -> ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) #0 [1201167ms] <- ioctl$EXT4_IOC_SWAP_BOOT=0xffffffffffffffff errno=9 cover=45 #0 [1201167ms] -> move_pages(0x0, 0x1, 0x200000c0, 0x20000100, 0x20000140, 0x0) #0 [1201167ms] <- move_pages=0x0 errno=14 cover=408 13:07:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4662, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000100), &(0x7f0000000140), 0x0) 2021/11/11 13:07:14 result hanged=false: [1201216ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108985 #0 [1201241ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x4662, 0x0) #0 [1201244ms] <- openat=0x3 errno=14 cover=7394 #0 [1201245ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0x0, 0x13, 0x3, 0x0) #0 [1201246ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=2325 #0 [1201246ms] -> ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) #0 [1201246ms] <- ioctl$EXT4_IOC_SWAP_BOOT=0xffffffffffffffff errno=9 cover=45 #0 [1201247ms] -> move_pages(0x0, 0x1, 0x200000c0, 0x20000100, 0x20000140, 0x0) #0 [1201248ms] <- move_pages=0x0 errno=14 cover=397 13:07:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4662, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000100), &(0x7f0000000140), 0x0) 2021/11/11 13:07:14 result hanged=false: [1201293ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108987 #0 [1201314ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x4662, 0x0) #0 [1201319ms] <- openat=0x3 errno=14 cover=8015 #0 [1201321ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0x0, 0x13, 0x3, 0x0) #0 [1201321ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=2327 #0 [1201322ms] -> ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) #0 [1201323ms] <- ioctl$EXT4_IOC_SWAP_BOOT=0xffffffffffffffff errno=9 cover=45 #0 [1201324ms] -> move_pages(0x0, 0x1, 0x200000c0, 0x20000100, 0x20000140, 0x0) #0 [1201324ms] <- move_pages=0x0 errno=14 cover=408 2021/11/11 13:07:14 result hanged=false: 2021/11/11 13:07:14 added new input for call #3 move_pages to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4662, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000100), &(0x7f0000000140), 0x0) 2021/11/11 13:07:14 #0: triaging type=7 13:07:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4662, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000100), &(0x7f0000000140), 0x0) 2021/11/11 13:07:14 triaging input for call #0 openat (new signal=2) [1201375ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108989 #0 [1201396ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x4662, 0x0) #0 [1201401ms] <- openat=0x3 errno=14 cover=8185 #0 [1201402ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0x0, 0x13, 0x3, 0x0) #0 [1201403ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=2631 #0 [1201403ms] -> ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) #0 [1201403ms] <- ioctl$EXT4_IOC_SWAP_BOOT=0xffffffffffffffff errno=9 cover=45 #0 [1201403ms] -> move_pages(0x0, 0x1, 0x200000c0, 0x20000100, 0x20000140, 0x0) #0 [1201404ms] <- move_pages=0x0 errno=14 cover=408 2021/11/11 13:07:14 result hanged=false: 13:07:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4662, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000100), &(0x7f0000000140), 0x0) [1201451ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108991 #0 [1201471ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x4662, 0x0) #0 [1201476ms] <- openat=0x3 errno=14 cover=7901 #0 [1201478ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0x0, 0x13, 0x3, 0x0) #0 [1201479ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=2292 #0 [1201479ms] -> ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) #0 [1201479ms] <- ioctl$EXT4_IOC_SWAP_BOOT=0xffffffffffffffff errno=9 cover=45 #0 [1201479ms] -> move_pages(0x0, 0x1, 0x200000c0, 0x20000100, 0x20000140, 0x0) #0 [1201480ms] <- move_pages=0x0 errno=14 cover=397 13:07:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4662, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000100), &(0x7f0000000140), 0x0) 2021/11/11 13:07:15 result hanged=false: [1201526ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108993 #0 [1201546ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x4662, 0x0) #0 [1201551ms] <- openat=0x3 errno=14 cover=7498 #0 [1201552ms] -> mmap$IORING_OFF_SQ_RING(0x20ffd000, 0x3000, 0x0, 0x13, 0x3, 0x0) #0 [1201553ms] <- mmap$IORING_OFF_SQ_RING=0x20ffd000 errno=14 cover=2590 #0 [1201553ms] -> ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) #0 [1201554ms] <- ioctl$EXT4_IOC_SWAP_BOOT=0xffffffffffffffff errno=9 cover=45 #0 [1201554ms] -> move_pages(0x0, 0x1, 0x200000c0, 0x20000100, 0x20000140, 0x0) #0 [1201554ms] <- move_pages=0x0 errno=14 cover=484 2021/11/11 13:07:15 result hanged=false: 2021/11/11 13:07:15 added new input for call #0 openat to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4662, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000100), &(0x7f0000000140), 0x0) 13:07:15 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x28, r3, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x28}}, 0x0) [1201604ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108995 #0 [1201633ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [1201634ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1687 #0 [1201638ms] -> ioctl$sock_SIOCGIFINDEX(0x3, 0x8933, 0x20000140) #0 [1201638ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [1201639ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1201639ms] <- socket$nl_generic=0x4 errno=14 cover=1527 #0 [1201640ms] -> syz_genetlink_get_family_id$ethtool(0x200004c0, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [1201643ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=8114 #0 [1201646ms] -> sendmsg$ETHTOOL_MSG_LINKINFO_SET(0x4, 0x200005c0, 0x0) #0 [1201647ms] <- sendmsg$ETHTOOL_MSG_LINKINFO_SET=0x28 errno=14 cover=1518 enabling collider #0 [1201648ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [1201649ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1795 #0 [1201649ms] -> ioctl$sock_SIOCGIFINDEX(0x3, 0x8933, 0x20000140) #0 [1201649ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=221 pthread_create failed (errno 11) 2021/11/11 13:07:15 result hanged=false: 13:07:15 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x28, r3, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x28}}, 0x0) 2021/11/11 13:07:15 #0: triaging type=7 2021/11/11 13:07:15 triaging input for call #4 sendmsg$ETHTOOL_MSG_LINKINFO_SET (new signal=23) [1201727ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109097 #0 [1201747ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [1201747ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1665 #0 [1201749ms] -> ioctl$sock_SIOCGIFINDEX(0x3, 0x8933, 0x20000140) #0 [1201749ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [1201750ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1201750ms] <- socket$nl_generic=0x4 errno=14 cover=1499 #0 [1201752ms] -> syz_genetlink_get_family_id$ethtool(0x200004c0, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [1201753ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=8112 #0 [1201758ms] -> sendmsg$ETHTOOL_MSG_LINKINFO_SET(0x4, 0x200005c0, 0x0) #0 [1201759ms] <- sendmsg$ETHTOOL_MSG_LINKINFO_SET=0x28 errno=14 cover=1485 2021/11/11 13:07:15 result hanged=false: 13:07:15 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x28, r3, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x28}}, 0x0) [1201805ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109099 #0 [1201828ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [1201829ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1687 #0 [1201830ms] -> ioctl$sock_SIOCGIFINDEX(0x3, 0x8933, 0x20000140) #0 [1201830ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [1201831ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1201831ms] <- socket$nl_generic=0x4 errno=14 cover=1532 #0 [1201832ms] -> syz_genetlink_get_family_id$ethtool(0x200004c0, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [1201832ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=8029 #0 [1201834ms] -> sendmsg$ETHTOOL_MSG_LINKINFO_SET(0x4, 0x200005c0, 0x0) #0 [1201834ms] <- sendmsg$ETHTOOL_MSG_LINKINFO_SET=0x28 errno=14 cover=1474 13:07:15 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x28, r3, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x28}}, 0x0) 2021/11/11 13:07:15 result hanged=false: [1201877ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109101 #0 [1201897ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [1201897ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1701 #0 [1201898ms] -> ioctl$sock_SIOCGIFINDEX(0x3, 0x8933, 0x20000140) #0 [1201898ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [1201898ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1201899ms] <- socket$nl_generic=0x4 errno=14 cover=1434 #0 [1201902ms] -> syz_genetlink_get_family_id$ethtool(0x200004c0, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [1201904ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=10062 #0 [1201906ms] -> sendmsg$ETHTOOL_MSG_LINKINFO_SET(0x4, 0x200005c0, 0x0) #0 [1201906ms] <- sendmsg$ETHTOOL_MSG_LINKINFO_SET=0x28 errno=14 cover=1485 2021/11/11 13:07:15 result hanged=false: 2021/11/11 13:07:15 added new input for call #4 sendmsg$ETHTOOL_MSG_LINKINFO_SET to corpus: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x28, r3, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x28}}, 0x0) 2021/11/11 13:07:15 #0: triaging type=7 13:07:15 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x28, r3, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x28}}, 0x0) 2021/11/11 13:07:15 triaging input for call #2 socket$nl_generic (new signal=2) [1201960ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109103 #0 [1201980ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [1201982ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1676 #0 [1201984ms] -> ioctl$sock_SIOCGIFINDEX(0x3, 0x8933, 0x20000140) #0 [1201984ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [1201986ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1201987ms] <- socket$nl_generic=0x4 errno=14 cover=1502 #0 [1201988ms] -> syz_genetlink_get_family_id$ethtool(0x200004c0, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [1201989ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=8102 #0 [1201990ms] -> sendmsg$ETHTOOL_MSG_LINKINFO_SET(0x4, 0x200005c0, 0x0) #0 [1201991ms] <- sendmsg$ETHTOOL_MSG_LINKINFO_SET=0x28 errno=14 cover=1474 13:07:15 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x28, r3, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x28}}, 0x0) 2021/11/11 13:07:15 result hanged=false: [1202041ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109105 #0 [1202061ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [1202062ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1690 #0 [1202063ms] -> ioctl$sock_SIOCGIFINDEX(0x3, 0x8933, 0x20000140) #0 [1202063ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [1202063ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1202063ms] <- socket$nl_generic=0x4 errno=14 cover=1455 #0 [1202064ms] -> syz_genetlink_get_family_id$ethtool(0x200004c0, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [1202066ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=8117 #0 [1202067ms] -> sendmsg$ETHTOOL_MSG_LINKINFO_SET(0x4, 0x200005c0, 0x0) #0 [1202068ms] <- sendmsg$ETHTOOL_MSG_LINKINFO_SET=0x28 errno=14 cover=1484 13:07:15 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x28, r3, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x28}}, 0x0) 2021/11/11 13:07:15 result hanged=false: [1202112ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109107 #0 [1202135ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [1202135ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1753 #0 [1202136ms] -> ioctl$sock_SIOCGIFINDEX(0x3, 0x8933, 0x20000140) #0 [1202136ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [1202136ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1202137ms] <- socket$nl_generic=0x4 errno=14 cover=1523 #0 [1202137ms] -> syz_genetlink_get_family_id$ethtool(0x200004c0, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [1202139ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=8003 #0 [1202140ms] -> sendmsg$ETHTOOL_MSG_LINKINFO_SET(0x4, 0x200005c0, 0x0) #0 [1202141ms] <- sendmsg$ETHTOOL_MSG_LINKINFO_SET=0x28 errno=14 cover=1499 2021/11/11 13:07:15 result hanged=false: 2021/11/11 13:07:15 added new input for call #2 socket$nl_generic to corpus: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x28, r3, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x28}}, 0x0) 13:07:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000), 0xe) 2021/11/11 13:07:15 poll: candidates=8 inputs=0 signal=0 [1202186ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109109 #0 [1202211ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1202213ms] <- perf_event_open=0x3 errno=14 cover=4266 #0 [1202217ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) #0 [1202219ms] <- syz_init_net_socket$bt_l2cap=0x5 errno=14 cover=20042 #0 [1202220ms] -> connect$bt_l2cap(0x5, 0x20000000, 0xe) #0 [1202220ms] <- connect$bt_l2cap=0xffffffffffffffff errno=113 cover=455 enabling collider #0 [1202220ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1202221ms] <- perf_event_open=0x3 errno=14 cover=4150 #0 [1202222ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) #0 [1202223ms] <- syz_init_net_socket$bt_l2cap=0x5 errno=14 cover=15258 pthread_create failed (errno 11) 13:07:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000), 0xe) 2021/11/11 13:07:15 result hanged=false: 2021/11/11 13:07:15 #0: triaging type=7 2021/11/11 13:07:15 triaging input for call #2 connect$bt_l2cap (new signal=2) [1202307ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109211 #0 [1202326ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1202328ms] <- perf_event_open=0x3 errno=14 cover=4215 #0 [1202332ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) #0 [1202333ms] <- syz_init_net_socket$bt_l2cap=0x5 errno=14 cover=20040 #0 [1202338ms] -> connect$bt_l2cap(0x5, 0x20000000, 0xe) #0 [1202338ms] <- connect$bt_l2cap=0xffffffffffffffff errno=113 cover=455 13:07:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000), 0xe) 2021/11/11 13:07:15 result hanged=false: [1202382ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109213 #0 [1202404ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1202404ms] <- perf_event_open=0x3 errno=14 cover=3953 #0 [1202405ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) #0 [1202406ms] <- syz_init_net_socket$bt_l2cap=0x5 errno=14 cover=6481 #0 [1202407ms] -> connect$bt_l2cap(0x5, 0x20000000, 0xe) #0 [1202407ms] <- connect$bt_l2cap=0xffffffffffffffff errno=113 cover=194 13:07:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000), 0xe) 2021/11/11 13:07:15 result hanged=false: [1202452ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109215 #0 [1202473ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1202473ms] <- perf_event_open=0x3 errno=14 cover=3975 #0 [1202474ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) #0 [1202475ms] <- syz_init_net_socket$bt_l2cap=0x5 errno=14 cover=6489 #0 [1202477ms] -> connect$bt_l2cap(0x5, 0x20000000, 0xe) #0 [1202477ms] <- connect$bt_l2cap=0xffffffffffffffff errno=113 cover=194 2021/11/11 13:07:16 result hanged=false: 2021/11/11 13:07:16 added new input for call #2 connect$bt_l2cap to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000), 0xe) 13:07:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000), 0xe) 2021/11/11 13:07:16 #0: triaging type=7 2021/11/11 13:07:16 triaging input for call #1 syz_init_net_socket$bt_l2cap (new signal=2) [1202534ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109217 #0 [1202556ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1202556ms] <- perf_event_open=0x3 errno=14 cover=3942 #0 [1202557ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) #0 [1202560ms] <- syz_init_net_socket$bt_l2cap=0x5 errno=14 cover=6514 #0 [1202564ms] -> connect$bt_l2cap(0x5, 0x20000000, 0xe) #0 [1202564ms] <- connect$bt_l2cap=0xffffffffffffffff errno=113 cover=194 13:07:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000), 0xe) 2021/11/11 13:07:16 result hanged=false: [1202611ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109219 #0 [1202632ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1202632ms] <- perf_event_open=0x3 errno=14 cover=3967 #0 [1202633ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) #0 [1202634ms] <- syz_init_net_socket$bt_l2cap=0x5 errno=14 cover=6523 #0 [1202640ms] -> connect$bt_l2cap(0x5, 0x20000000, 0xe) #0 [1202640ms] <- connect$bt_l2cap=0xffffffffffffffff errno=113 cover=194 13:07:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000), 0xe) 2021/11/11 13:07:16 result hanged=false: [1202683ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109221 #0 [1202704ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1202704ms] <- perf_event_open=0x3 errno=14 cover=3942 #0 [1202705ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) #0 [1202706ms] <- syz_init_net_socket$bt_l2cap=0x5 errno=14 cover=6498 #0 [1202708ms] -> connect$bt_l2cap(0x5, 0x20000000, 0xe) #0 [1202708ms] <- connect$bt_l2cap=0xffffffffffffffff errno=113 cover=194 2021/11/11 13:07:16 result hanged=false: 2021/11/11 13:07:16 added new input for call #1 syz_init_net_socket$bt_l2cap to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000), 0xe) 13:07:16 executing program 0: openat$hpet(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) [1202759ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109223 #0 [1202779ms] -> openat$hpet(0xffffffffffffff9c, 0x20000500, 0x0, 0x0) #0 [1202780ms] <- openat$hpet=0x3 errno=14 cover=1157 enabling collider #0 [1202781ms] -> openat$hpet(0xffffffffffffff9c, 0x20000500, 0x0, 0x0) #0 [1202781ms] <- openat$hpet=0x3 errno=14 cover=1220 13:07:16 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x4080, 0x0) 2021/11/11 13:07:16 result hanged=false: [1202826ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109225 #0 [1202852ms] -> openat$autofs(0xffffffffffffff9c, 0x20000200, 0x4080, 0x0) #0 [1202852ms] <- openat$autofs=0xffffffffffffffff errno=22 cover=1327 enabling collider #0 [1202853ms] -> openat$autofs(0xffffffffffffff9c, 0x20000200, 0x4080, 0x0) #0 [1202853ms] <- openat$autofs=0xffffffffffffffff errno=22 cover=1392 13:07:16 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @none}, 0xe) 2021/11/11 13:07:16 result hanged=false: [1202902ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109227 #0 [1202923ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [1202924ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6444 #0 [1202927ms] -> connect$bt_l2cap(0x4, 0x20000180, 0xe) #0 [1202927ms] <- connect$bt_l2cap=0xffffffffffffffff errno=113 cover=194 enabling collider #0 [1202929ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [1202930ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=5631 #0 [1202930ms] -> connect$bt_l2cap(0x4, 0x20000180, 0xe) #0 [1202930ms] <- connect$bt_l2cap=0xffffffffffffffff errno=9 cover=47 2021/11/11 13:07:16 result hanged=false: 2021/11/11 13:07:16 #0: triaging type=7 13:07:16 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @none}, 0xe) 2021/11/11 13:07:16 triaging input for call #0 syz_init_net_socket$bt_l2cap (new signal=2) [1202974ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109229 2021/11/11 13:07:16 poll: candidates=0 inputs=0 signal=0 #0 [1202994ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [1202995ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6352 #0 [1202997ms] -> connect$bt_l2cap(0x4, 0x20000180, 0xe) #0 [1202997ms] <- connect$bt_l2cap=0xffffffffffffffff errno=113 cover=194 2021/11/11 13:07:16 result hanged=false: 13:07:16 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @none}, 0xe) [1203042ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109231 #0 [1203063ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [1203064ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6306 #0 [1203066ms] -> connect$bt_l2cap(0x4, 0x20000180, 0xe) #0 [1203066ms] <- connect$bt_l2cap=0xffffffffffffffff errno=113 cover=194 2021/11/11 13:07:16 result hanged=false: 13:07:16 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @none}, 0xe) [1203114ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109233 #0 [1203135ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [1203136ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6349 #0 [1203138ms] -> connect$bt_l2cap(0x4, 0x20000180, 0xe) #0 [1203138ms] <- connect$bt_l2cap=0xffffffffffffffff errno=113 cover=194 2021/11/11 13:07:16 result hanged=false: 2021/11/11 13:07:16 added new input for call #0 syz_init_net_socket$bt_l2cap to corpus: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @none}, 0xe) 13:07:16 executing program 0: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [1203186ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109235 #0 [1203207ms] -> perf_event_open$cgroup(0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [1203223ms] <- perf_event_open$cgroup=0x3 errno=14 cover=193665 enabling collider #0 [1203229ms] -> perf_event_open$cgroup(0x20000000, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [1203230ms] <- perf_event_open$cgroup=0x3 errno=14 cover=3108 13:07:16 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x4}, 0x20) 2021/11/11 13:07:16 result hanged=false: [1203277ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109237 #0 [1203297ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1203297ms] <- socket$inet6_udp=0x3 errno=14 cover=1673 #0 [1203299ms] -> setsockopt$inet6_IPV6_FLOWLABEL_MGR(0x3, 0x29, 0x20, 0x20000380, 0x20) [ 1252.194263] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable #0 [1203301ms] <- setsockopt$inet6_IPV6_FLOWLABEL_MGR=0xffffffffffffffff errno=1 cover=1767 enabling collider #0 [1203302ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1203303ms] <- socket$inet6_udp=0x3 errno=14 cover=1715 2021/11/11 13:07:16 result hanged=false: 2021/11/11 13:07:16 #0: triaging type=7 13:07:16 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x4}, 0x20) 2021/11/11 13:07:16 triaging input for call #1 setsockopt$inet6_IPV6_FLOWLABEL_MGR (new signal=6) [1203353ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109239 #0 [1203373ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1203373ms] <- socket$inet6_udp=0x3 errno=14 cover=1717 #0 [1203374ms] -> setsockopt$inet6_IPV6_FLOWLABEL_MGR(0x3, 0x29, 0x20, 0x20000380, 0x20) [ 1252.269469] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable #0 [1203377ms] <- setsockopt$inet6_IPV6_FLOWLABEL_MGR=0xffffffffffffffff errno=1 cover=1757 13:07:16 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x4}, 0x20) 2021/11/11 13:07:16 result hanged=false: [1203434ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109241 #0 [1203454ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1203454ms] <- socket$inet6_udp=0x3 errno=14 cover=1706 #0 [1203455ms] -> setsockopt$inet6_IPV6_FLOWLABEL_MGR(0x3, 0x29, 0x20, 0x20000380, 0x20) [ 1252.350432] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable #0 [1203457ms] <- setsockopt$inet6_IPV6_FLOWLABEL_MGR=0xffffffffffffffff errno=1 cover=1757 2021/11/11 13:07:17 result hanged=false: 13:07:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x4}, 0x20) [1203510ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109243 #0 [1203530ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [1203530ms] <- socket$inet6_udp=0x3 errno=14 cover=1698 [ 1252.427458] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable #0 [1203532ms] -> setsockopt$inet6_IPV6_FLOWLABEL_MGR(0x3, 0x29, 0x20, 0x20000380, 0x20) #0 [1203539ms] <- setsockopt$inet6_IPV6_FLOWLABEL_MGR=0xffffffffffffffff errno=1 cover=1768 2021/11/11 13:07:17 result hanged=false: 2021/11/11 13:07:17 added new input for call #1 setsockopt$inet6_IPV6_FLOWLABEL_MGR to corpus: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x4}, 0x20) 13:07:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) [1203589ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109245 #0 [1203611ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1203612ms] <- perf_event_open=0x3 errno=14 cover=6753 #0 [1203613ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1203615ms] <- openat$ptp0=0x4 errno=14 cover=4096 #0 [1203615ms] -> ioctl$PTP_PEROUT_REQUEST(0x4, 0x40383d03, 0x0) #0 [1203617ms] <- ioctl$PTP_PEROUT_REQUEST=0xffffffffffffffff errno=14 cover=4876 enabling collider #0 [1203627ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1203628ms] <- perf_event_open=0x3 errno=14 cover=7085 #0 [1203629ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1203629ms] <- openat$ptp0=0x4 errno=14 cover=2703 pthread_create failed (errno 11) 13:07:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) 2021/11/11 13:07:17 result hanged=false: 2021/11/11 13:07:17 #0: triaging type=7 2021/11/11 13:07:17 triaging input for call #2 ioctl$PTP_PEROUT_REQUEST (new signal=2) [1203724ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109347 #0 [1203744ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1203745ms] <- perf_event_open=0x3 errno=14 cover=6370 #0 [1203746ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1203746ms] <- openat$ptp0=0x4 errno=14 cover=1068 #0 [1203746ms] -> ioctl$PTP_PEROUT_REQUEST(0x4, 0x40383d03, 0x0) #0 [1203746ms] <- ioctl$PTP_PEROUT_REQUEST=0xffffffffffffffff errno=14 cover=476 13:07:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) 2021/11/11 13:07:17 result hanged=false: [1203803ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109349 #0 [1203824ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1203824ms] <- perf_event_open=0x3 errno=14 cover=6448 #0 [1203826ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1203827ms] <- openat$ptp0=0x4 errno=14 cover=1144 #0 [1203831ms] -> ioctl$PTP_PEROUT_REQUEST(0x4, 0x40383d03, 0x0) #0 [1203831ms] <- ioctl$PTP_PEROUT_REQUEST=0xffffffffffffffff errno=14 cover=476 13:07:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) 2021/11/11 13:07:17 result hanged=false: [1203891ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109351 #0 [1203914ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1203915ms] <- perf_event_open=0x3 errno=14 cover=6320 #0 [1203916ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1203916ms] <- openat$ptp0=0x4 errno=14 cover=1119 #0 [1203916ms] -> ioctl$PTP_PEROUT_REQUEST(0x4, 0x40383d03, 0x0) #0 [1203916ms] <- ioctl$PTP_PEROUT_REQUEST=0xffffffffffffffff errno=14 cover=494 2021/11/11 13:07:17 result hanged=false: 2021/11/11 13:07:17 added new input for call #2 ioctl$PTP_PEROUT_REQUEST to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) 13:07:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) 2021/11/11 13:07:17 #0: triaging type=7 2021/11/11 13:07:17 triaging input for call #1 openat$ptp0 (new signal=7) [1203972ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109353 #0 [1203993ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1203994ms] <- perf_event_open=0x3 errno=14 cover=6659 #0 [1203996ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1203997ms] <- openat$ptp0=0x4 errno=14 cover=1124 #0 [1203997ms] -> ioctl$PTP_PEROUT_REQUEST(0x4, 0x40383d03, 0x0) #0 [1203997ms] <- ioctl$PTP_PEROUT_REQUEST=0xffffffffffffffff errno=14 cover=476 2021/11/11 13:07:17 result hanged=false: 13:07:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) [1204059ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109355 #0 [1204082ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1204083ms] <- perf_event_open=0x3 errno=14 cover=6678 #0 [1204084ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1204084ms] <- openat$ptp0=0x4 errno=14 cover=1118 #0 [1204085ms] -> ioctl$PTP_PEROUT_REQUEST(0x4, 0x40383d03, 0x0) #0 [1204085ms] <- ioctl$PTP_PEROUT_REQUEST=0xffffffffffffffff errno=14 cover=476 13:07:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) 2021/11/11 13:07:17 result hanged=false: [1204137ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109357 #0 [1204158ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1204159ms] <- perf_event_open=0x3 errno=14 cover=7321 #0 [1204160ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1204161ms] <- openat$ptp0=0x4 errno=14 cover=1166 #0 [1204162ms] -> ioctl$PTP_PEROUT_REQUEST(0x4, 0x40383d03, 0x0) #0 [1204163ms] <- ioctl$PTP_PEROUT_REQUEST=0xffffffffffffffff errno=14 cover=476 2021/11/11 13:07:17 result hanged=false: 2021/11/11 13:07:17 added new input for call #1 openat$ptp0 to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) 13:07:17 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_delete(0x0) [1204227ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109359 #0 [1204247ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [1204278ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=192454 #0 [1204281ms] -> timer_create(0x0, 0x0, 0x20000100) #0 [1204282ms] <- timer_create=0x0 errno=14 cover=270 #0 [1204283ms] -> timer_delete(0x0) #0 [1204283ms] <- timer_delete=0x0 errno=14 cover=268 enabling collider #0 [1204283ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [1204283ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=2511 #0 [1204285ms] -> timer_create(0x0, 0x0, 0x20000100) #0 [1204287ms] <- timer_create=0x0 errno=14 cover=335 pthread_create failed (errno 11) 13:07:17 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_delete(0x0) 2021/11/11 13:07:17 result hanged=false: 2021/11/11 13:07:17 #0: triaging type=7 2021/11/11 13:07:17 triaging input for call #2 timer_delete (new signal=3) [1204361ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109461 #0 [1204388ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [1204389ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=3239 #0 [1204390ms] -> timer_create(0x0, 0x0, 0x20000100) #0 [1204390ms] <- timer_create=0x0 errno=14 cover=270 #0 [1204392ms] -> timer_delete(0x0) #0 [1204392ms] <- timer_delete=0x0 errno=14 cover=268 13:07:17 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_delete(0x0) 2021/11/11 13:07:17 result hanged=false: [1204439ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109463 #0 [1204463ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [1204464ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=3530 #0 [1204465ms] -> timer_create(0x0, 0x0, 0x20000100) #0 [1204465ms] <- timer_create=0x0 errno=14 cover=259 #0 [1204466ms] -> timer_delete(0x0) #0 [1204466ms] <- timer_delete=0x0 errno=14 cover=268 13:07:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_delete(0x0) 2021/11/11 13:07:18 result hanged=false: [1204510ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109465 #0 [1204531ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [1204532ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=3126 #0 [1204536ms] -> timer_create(0x0, 0x0, 0x20000100) #0 [1204536ms] <- timer_create=0x0 errno=14 cover=259 #0 [1204537ms] -> timer_delete(0x0) #0 [1204537ms] <- timer_delete=0x0 errno=14 cover=268 2021/11/11 13:07:18 result hanged=false: 2021/11/11 13:07:18 added new input for call #2 timer_delete to corpus: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_delete(0x0) 13:07:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) 2021/11/11 13:07:18 poll: candidates=8 inputs=0 signal=0 [1204582ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109467 #0 [1204605ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [1204606ms] <- socket$inet_udp=0x3 errno=14 cover=1684 #0 [1204609ms] -> fcntl$lock(0x3, 0x6, 0x20000340) #0 [1204609ms] <- fcntl$lock=0x0 errno=14 cover=684 #0 [1204609ms] -> fcntl$lock(0x3, 0x25, 0x20000000) #0 [1204609ms] <- fcntl$lock=0xffffffffffffffff errno=11 cover=703 enabling collider #0 [1204610ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [1204610ms] <- socket$inet_udp=0x3 errno=14 cover=1759 #0 [1204611ms] -> fcntl$lock(0x3, 0x6, 0x20000340) #0 [1204611ms] <- fcntl$lock=0x0 errno=14 cover=673 pthread_create failed (errno 11) 2021/11/11 13:07:18 result hanged=false: 2021/11/11 13:07:18 #0: triaging type=7 2021/11/11 13:07:18 triaging input for call #2 fcntl$lock (new signal=12) 13:07:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) [1204691ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109569 #0 [1204711ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [1204712ms] <- socket$inet_udp=0x3 errno=14 cover=1712 #0 [1204715ms] -> fcntl$lock(0x3, 0x6, 0x20000340) #0 [1204715ms] <- fcntl$lock=0x0 errno=14 cover=729 #0 [1204716ms] -> fcntl$lock(0x3, 0x25, 0x20000000) #0 [1204717ms] <- fcntl$lock=0xffffffffffffffff errno=11 cover=703 13:07:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) 2021/11/11 13:07:18 result hanged=false: [1204765ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109571 #0 [1204785ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [1204787ms] <- socket$inet_udp=0x3 errno=14 cover=1687 #0 [1204789ms] -> fcntl$lock(0x3, 0x6, 0x20000340) #0 [1204789ms] <- fcntl$lock=0x0 errno=14 cover=673 #0 [1204789ms] -> fcntl$lock(0x3, 0x25, 0x20000000) #0 [1204790ms] <- fcntl$lock=0xffffffffffffffff errno=11 cover=692 13:07:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) 2021/11/11 13:07:18 result hanged=false: [1204837ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109573 #0 [1204861ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [1204861ms] <- socket$inet_udp=0x3 errno=14 cover=1684 #0 [1204863ms] -> fcntl$lock(0x3, 0x6, 0x20000340) #0 [1204863ms] <- fcntl$lock=0x0 errno=14 cover=712 #0 [1204865ms] -> fcntl$lock(0x3, 0x25, 0x20000000) #0 [1204865ms] <- fcntl$lock=0xffffffffffffffff errno=11 cover=714 2021/11/11 13:07:18 result hanged=false: 2021/11/11 13:07:18 added new input for call #2 fcntl$lock to corpus: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) 13:07:18 executing program 0: times(&(0x7f0000000000)) getrusage(0xffffffffffffffff, &(0x7f0000000040)) [1204910ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109575 #0 [1204936ms] -> times(0x20000000) #0 [1204936ms] <- times=0x199b0e07 errno=14 cover=835 #0 [1204936ms] -> getrusage(0xffffffffffffffff, 0x20000040) #0 [1204937ms] <- getrusage=0x0 errno=14 cover=82 enabling collider #0 [1204937ms] -> times(0x20000000) #0 [1204937ms] <- times=0x199b0e07 errno=14 cover=100 13:07:18 executing program 0: times(&(0x7f0000000000)) getrusage(0xffffffffffffffff, &(0x7f0000000040)) 2021/11/11 13:07:18 result hanged=false: 2021/11/11 13:07:18 #0: triaging type=7 2021/11/11 13:07:18 triaging input for call #1 getrusage (new signal=3) [1204985ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109577 #0 [1205005ms] -> times(0x20000000) #0 [1205005ms] <- times=0x199b0e0e errno=14 cover=824 #0 [1205006ms] -> getrusage(0xffffffffffffffff, 0x20000040) #0 [1205006ms] <- getrusage=0x0 errno=14 cover=82 2021/11/11 13:07:18 result hanged=false: 13:07:18 executing program 0: times(&(0x7f0000000000)) getrusage(0xffffffffffffffff, &(0x7f0000000040)) [1205052ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109579 #0 [1205077ms] -> times(0x20000000) #0 [1205077ms] <- times=0x199b0e15 errno=14 cover=835 #0 [1205078ms] -> getrusage(0xffffffffffffffff, 0x20000040) #0 [1205078ms] <- getrusage=0x0 errno=14 cover=82 13:07:18 executing program 0: times(&(0x7f0000000000)) getrusage(0xffffffffffffffff, &(0x7f0000000040)) 2021/11/11 13:07:18 result hanged=false: [1205120ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109581 #0 [1205139ms] -> times(0x20000000) #0 [1205139ms] <- times=0x199b0e1b errno=14 cover=802 #0 [1205140ms] -> getrusage(0xffffffffffffffff, 0x20000040) #0 [1205140ms] <- getrusage=0x0 errno=14 cover=82 2021/11/11 13:07:18 result hanged=false: 2021/11/11 13:07:18 added new input for call #1 getrusage to corpus: times(&(0x7f0000000000)) getrusage(0xffffffffffffffff, &(0x7f0000000040)) 13:07:18 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x14) [1205186ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109583 #0 [1205208ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000080, 0x1, 0x0) #0 [1205208ms] <- openat$tcp_mem=0x3 errno=14 cover=1686 #0 [1205208ms] -> write$binfmt_script(0x3, 0x200000c0, 0x14) #0 [1205209ms] <- write$binfmt_script=0xffffffffffffffff errno=22 cover=565 enabling collider #0 [1205209ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000080, 0x1, 0x0) #0 [1205209ms] <- openat$tcp_mem=0x3 errno=14 cover=1696 #0 [1205209ms] -> write$binfmt_script(0x3, 0x200000c02021/11/11 13:07:18 result hanged=false: 13:07:18 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x14) 2021/11/11 13:07:18 #0: triaging type=7 2021/11/11 13:07:18 triaging input for call #1 write$binfmt_script (new signal=11) [1205252ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109585 #0 [1205274ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000080, 0x1, 0x0) #0 [1205274ms] <- openat$tcp_mem=0x3 errno=14 cover=1686 #0 [1205275ms] -> write$binfmt_script(0x3, 0x200000c0, 0x14) #0 [1205275ms] <- write$binfmt_script=0xffffffffffffffff errno=22 cover=565 2021/11/11 13:07:18 result hanged=false: 13:07:18 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x14) [1205319ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109587 #0 [1205340ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000080, 0x1, 0x0) #0 [1205341ms] <- openat$tcp_mem=0x3 errno=14 cover=1695 #0 [1205343ms] -> write$binfmt_script(0x3, 0x200000c0, 0x14) #0 [1205343ms] <- write$binfmt_script=0xffffffffffffffff errno=22 cover=576 13:07:18 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x14) 2021/11/11 13:07:18 result hanged=false: [1205385ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109589 #0 [1205405ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000080, 0x1, 0x0) #0 [1205406ms] <- openat$tcp_mem=0x3 errno=14 cover=1686 #0 [1205407ms] -> write$binfmt_script(0x3, 0x200000c0, 0x14) #0 [1205407ms] <- write$binfmt_script=0xffffffffffffffff errno=22 cover=587 2021/11/11 13:07:18 result hanged=false: 2021/11/11 13:07:18 added new input for call #1 write$binfmt_script to corpus: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x14) 13:07:18 executing program 0: io_uring_setup(0x77bb, &(0x7f0000001400)={0x0, 0x0, 0x2, 0x0, 0xe2}) [1205452ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109591 #0 [1205472ms] -> io_uring_setup(0x77bb, 0x20001400) #0 [1205479ms] <- io_uring_setup=0x3 errno=14 cover=6722 enabling collider #0 [1205483ms] -> io_uring_setup(0x77bb, 0x20001400) #0 [1205486ms] <- io_uring_setup=0x3 errno=14 cover=5845 13:07:19 executing program 0: syz_io_uring_setup(0x4994, &(0x7f00000003c0)={0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 2021/11/11 13:07:19 result hanged=false: [1205543ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109593 #0 [1205565ms] -> syz_io_uring_setup(0x4994, 0x200003c0, 0x20ffe000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1205565ms] <- syz_io_uring_setup=0xffffffffffffffff errno=9 cover=1183 enabling collider #0 [1205566ms] -> syz_io_uring_setup(0x4994, 0x200003c0, 0x20ffe000, 0x20ffc000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [1205566ms] <- syz_io_uring_setup=0xffffffffffffffff errno=9 cover=886 2021/11/11 13:07:19 result hanged=false: 13:07:19 executing program 0: ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0) io_uring_setup(0x272b, &(0x7f0000000180)={0x0, 0x6360}) [1205611ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109595 #0 [1205636ms] -> ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0) #0 [1205636ms] <- ioctl$TIOCGLCKTRMIOS=0xffffffffffffffff errno=9 cover=45 #0 [1205637ms] -> io_uring_setup(0x272b, 0x20000180) #0 [1205645ms] <- io_uring_setup=0x3 errno=14 cover=4904 enabling collider #0 [1205646ms] -> ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0) #0 [1205646ms] <- ioctl$TIOCGLCKTRMIOS=0xffffffffffffffff errno=9 cover=45 13:07:19 executing program 0: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x8000000000000) 2021/11/11 13:07:19 result hanged=false: [1205692ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109597 #0 [1205712ms] -> futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) #0 [1205712ms] <- futex=0xffffffffffffffff errno=14 cover=325 #0 [1205713ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1205716ms] <- openat=0x3 errno=14 cover=7310 #0 [1205717ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1205717ms] <- openat=0x4 errno=14 cover=2792 #0 [1205719ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x8000000000000) #0 [1205819ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 enabling collider #0 [1205823ms] -> futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) #0 [1205823ms] <- futex=0xffffffffffffffff errno=14 cover=340 #0 [1205824ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1205824ms] <- openat=0x3 errno=14 cover=1213 pthread_create failed (errno 11) 13:07:19 executing program 0: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x8000000000000) 2021/11/11 13:07:19 result hanged=false: 2021/11/11 13:07:19 #0: triaging type=7 2021/11/11 13:07:19 triaging input for call #3 copy_file_range (new signal=33) [1205909ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109699 #0 [1205936ms] -> futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) #0 [1205936ms] <- futex=0xffffffffffffffff errno=14 cover=325 #0 [1205937ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1205941ms] <- openat=0x3 errno=14 cover=7379 #0 [1205942ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1205942ms] <- openat=0x4 errno=14 cover=2783 #0 [1205944ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x8000000000000) #0 [1206039ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 2021/11/11 13:07:19 result hanged=false: 13:07:19 executing program 0: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x8000000000000) [1206110ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109701 #0 [1206132ms] -> futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) #0 [1206132ms] <- futex=0xffffffffffffffff errno=14 cover=325 #0 [1206133ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1206138ms] <- openat=0x3 errno=14 cover=7662 #0 [1206145ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1206146ms] <- openat=0x4 errno=14 cover=2799 #0 [1206146ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x8000000000000) #0 [1206239ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 2021/11/11 13:07:19 result hanged=false: 13:07:19 executing program 0: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x8000000000000) [1206310ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109703 #0 [1206329ms] -> futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) #0 [1206329ms] <- futex=0xffffffffffffffff errno=14 cover=325 #0 [1206330ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [1206332ms] <- openat=0x3 errno=14 cover=7380 #0 [1206333ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [1206334ms] <- openat=0x4 errno=14 cover=2793 #0 [1206334ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x8000000000000) #0 [1206430ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 2021/11/11 13:07:19 result hanged=false: 2021/11/11 13:07:19 added new input for call #3 copy_file_range to corpus: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x8000000000000) 13:07:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000040)) [1206512ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109705 #0 [1206531ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1206532ms] <- socket$inet6_tcp=0x3 errno=14 cover=1770 #0 [1206533ms] -> getsockopt$inet6_tcp_buf(0x3, 0x6, 0xd, 0x0, 0x20000040) #0 [1206533ms] <- getsockopt$inet6_tcp_buf=0x0 errno=14 cover=115 enabling collider #0 [1206536ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1206537ms] <- socket$inet6_tcp=0x3 errno=14 cover=1700 13:07:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000040)) 2021/11/11 13:07:20 result hanged=false: 2021/11/11 13:07:20 #0: triaging type=7 2021/11/11 13:07:20 triaging input for call #1 getsockopt$inet6_tcp_buf (new signal=8) [1206582ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109707 #0 [1206600ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1206601ms] <- socket$inet6_tcp=0x3 errno=14 cover=1756 #0 [1206601ms] -> getsockopt$inet6_tcp_buf(0x3, 0x6, 0xd, 0x0, 0x20000040) #0 [1206602ms] <- getsockopt$inet6_tcp_buf=0x0 errno=14 cover=115 13:07:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000040)) 2021/11/11 13:07:20 result hanged=false: [1206648ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109709 #0 [1206669ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1206670ms] <- socket$inet6_tcp=0x3 errno=14 cover=1750 #0 [1206671ms] -> getsockopt$inet6_tcp_buf(0x3, 0x6, 0xd, 0x0, 0x20000040) #0 [1206671ms] <- getsockopt$inet6_tcp_buf=0x0 errno=14 cover=115 13:07:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000040)) 2021/11/11 13:07:20 result hanged=false: [1206717ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109711 #0 [1206740ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1206741ms] <- socket$inet6_tcp=0x3 errno=14 cover=1770 #0 [1206742ms] -> getsockopt$inet6_tcp_buf(0x3, 0x6, 0xd, 0x0, 0x20000040) #0 [1206742ms] <- getsockopt$inet6_tcp_buf=0x0 errno=14 cover=115 2021/11/11 13:07:20 result hanged=false: 2021/11/11 13:07:20 added new input for call #1 getsockopt$inet6_tcp_buf to corpus: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000040)) 13:07:20 executing program 0: syz_emit_ethernet(0x4c, &(0x7f00000002c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x16, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "844541f2"}]}}}}}}, 0x0) r0 = fork() tkill(r0, 0x36) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace(0x4207, r0) clone3(0x0, 0x0) 2021/11/11 13:07:20 poll: candidates=8 inputs=0 signal=0 [1206785ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109713 #0 [1206805ms] -> syz_emit_ethernet(0x4c, 0x200002c0, 0x0) bb bb bb bb bb bb aa aa aa aa aa 00 86 dd 60 96 15 3f 00 16 3a ff fe 88 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 86 00 b5 e9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 84 45 41 f2 #0 [1206806ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=22301 #0 [1206807ms] -> fork() #0 [1206833ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [1206836ms] -> tkill(0x0, 0x36) #0 [1206839ms] <- tkill=0xffffffffffffffff errno=22 cover=34 #0 [1206840ms] -> ptrace$setopts(0x4206, 0x0, 0x0, 0x0) #0 [1206840ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=64 #0 [1206840ms] -> ptrace(0x4207, 0x0) #0 [1206840ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [1206840ms] -> clone3(0x0, 0x0) #0 [1206840ms] <- clone3=0xffffffffffffffff errno=22 cover=39 enabling collider #0 [1206841ms] -> syz_emit_ethernet(0x4c, 0x200002c0, 0x0) bb bb bb bb bb bb aa aa aa aa aa 00 86 dd 60 96 15 3f 00 16 3a ff fe 88 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 86 00 b5 e9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 84 45 41 f2 #0 [1206844ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=22185 #0 [1206845ms] -> fork() #0 [1206882ms] <- fork=0xffffffffffffffff errno=11 cover=262143 pthread_create failed (errno 11) 2021/11/11 13:07:20 result hanged=false: 13:07:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000001740), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14}, 0x14}}, 0x0) [1206932ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109817 #0 [1206952ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1206952ms] <- socket$nl_generic=0x3 errno=14 cover=1434 #0 [1206953ms] -> syz_genetlink_get_family_id$batadv(0x20001740, 0x3) syz_genetlink_get_family_id(batadv, 3) netlink: failed to get family id for batadv: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [1206972ms] <- syz_genetlink_get_family_id$batadv=0xffffffffffffffff errno=2 cover=5903 #0 [1206973ms] -> sendmsg$BATADV_CMD_GET_NEIGHBORS(0x3, 0x20001800, 0x0) #0 [1206973ms] <- sendmsg$BATADV_CMD_GET_NEIGHBORS=0x14 errno=14 cover=1011 enabling collider #0 [1206973ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1206973ms] <- socket$nl_generic=0x3 errno=14 cover=1491 #0 [1206974ms] -> syz_genetlink_get_family_id$batadv(0x20001740, 0x3) syz_genetlink_get_family_id(batadv, 3) netlink: failed to get family id for batadv: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [1206990ms] <- syz_genetlink_get_family_id$batadv=0xffffffffffffffff errno=2 cover=5380 pthread_create failed (errno 11) 13:07:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x24, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}}, 0x0) 2021/11/11 13:07:20 result hanged=false: [1207057ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109919 #0 [1207077ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [1207080ms] <- socket$nl_xfrm=0x3 errno=14 cover=1430 #0 [1207081ms] -> sendmsg$nl_xfrm(0x3, 0x20000100, 0x0) #0 [1207082ms] <- sendmsg$nl_xfrm=0x24 errno=14 cover=1469 enabling collider #0 [1207083ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [1207083ms] <- socket$nl_xfrm=0x3 errno=14 cover=1396 #0 [1207085ms] -> sendmsg$nl_xfrm(0x3, 0x20000100, 0x0) #0 [1207085ms] <- sendmsg$nl_xfrm=0xffffffffffffffff errno=9 cover=53 13:07:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x24, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}}, 0x0) 2021/11/11 13:07:20 result hanged=false: 2021/11/11 13:07:20 #0: triaging type=7 2021/11/11 13:07:20 triaging input for call #1 sendmsg$nl_xfrm (new signal=8) [1207132ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109921 #0 [1207152ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [1207152ms] <- socket$nl_xfrm=0x3 errno=14 cover=1430 #0 [1207153ms] -> sendmsg$nl_xfrm(0x3, 0x20000100, 0x0) #0 [1207154ms] <- sendmsg$nl_xfrm=0x24 errno=14 cover=1394 13:07:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x24, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}}, 0x0) 2021/11/11 13:07:20 result hanged=false: [1207198ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109923 #0 [1207219ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [1207219ms] <- socket$nl_xfrm=0x3 errno=14 cover=1419 #0 [1207222ms] -> sendmsg$nl_xfrm(0x3, 0x20000100, 0x0) #0 [1207222ms] <- sendmsg$nl_xfrm=0x24 errno=14 cover=1367 13:07:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x24, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}}, 0x0) 2021/11/11 13:07:20 result hanged=false: [1207268ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109925 #0 [1207290ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [1207290ms] <- socket$nl_xfrm=0x3 errno=14 cover=1430 #0 [1207292ms] -> sendmsg$nl_xfrm(0x3, 0x20000100, 0x0) #0 [1207292ms] <- sendmsg$nl_xfrm=0x24 errno=14 cover=1355 2021/11/11 13:07:20 result hanged=false: 2021/11/11 13:07:20 added new input for call #1 sendmsg$nl_xfrm to corpus: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x24, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}}, 0x0) 13:07:20 executing program 0: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0]}) getrusage(0x0, &(0x7f0000000040)) read(0xffffffffffffffff, &(0x7f0000000100)=""/109, 0x6d) r0 = io_uring_setup(0x1577, &(0x7f0000000180)={0x0, 0x3ef2, 0x8, 0x1, 0xc8}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000200), 0x1) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000240)="535a58af0baac06e1c26ef0210a3b3181dbce5bdc2e2a15497f9b495acaebdf94c0c924c0becd1ffcb18395534678ab63ac665b2fabb5a44fdffdd7eb6ead25b1a383ba01720d00b35c66d109f7420ad4b931f5c63192793849febdea7cf4045e25bb676db72010b2bfb0175f0e6a1e9184fe1d54441c6d1dd88707720dc074e8c6cdba6b77d0bb980461a07d6d358d986328042ce37f09620ca7b14a3451a305c5c", 0xa2) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300), 0x1) pipe2$9p(&(0x7f0000000340), 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x200, 0x75) read$eventfd(r1, &(0x7f00000003c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x9a, 0x6, 0x15, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x4, 0x7}}) r2 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) write$eventfd(r2, &(0x7f0000000500)=0x5, 0x8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x492b02, 0x0) r4 = io_uring_setup(0x132a, &(0x7f0000000580)={0x0, 0x8458, 0x4, 0x0, 0x1bd, 0x0, r3}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000600)=""/143) r5 = signalfd(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000700)=r5, 0x1) socketpair(0x11, 0x2, 0xffffffff, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000007c0)={0x4, &(0x7f0000000780)=[{0x3, 0x0, 0x3, 0x3292}, {0xfffe, 0xc0, 0x0, 0xb0}, {0xa4ac, 0x3, 0x1, 0x1000}, {0x9, 0x6, 0x7, 0x1}]}, 0x10) [1207345ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109927 #0 [1207366ms] -> ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x20000000) #0 [1207367ms] <- ioctl$PERF_EVENT_IOC_QUERY_BPF=0xffffffffffffffff errno=9 cover=45 #0 [1207367ms] -> getrusage(0x0, 0x20000040) #0 [1207367ms] <- getrusage=0x0 errno=14 cover=102 #0 [1207367ms] -> read(0xffffffffffffffff, 0x20000100, 0x6d) #0 [1207368ms] <- read=0xffffffffffffffff errno=9 cover=47 #0 [1207368ms] -> io_uring_setup(0x1577, 0x20000180) #0 [1207370ms] <- io_uring_setup=0x3 errno=14 cover=4297 #0 [1207373ms] -> io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0x3, 0x7, 0x20000200, 0x1) #0 [1207376ms] <- io_uring_register$IORING_REGISTER_EVENTFD_ASYNC=0xffffffffffffffff errno=9 cover=284 #0 [1207377ms] -> setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x20000240, 0xa2) #0 [1207377ms] <- setsockopt$packet_buf=0xffffffffffffffff errno=9 cover=50 #0 [1207378ms] -> io_uring_register$IORING_REGISTER_EVENTFD(0x3, 0x4, 0x20000300, 0x1) #0 [1207380ms] <- io_uring_register$IORING_REGISTER_EVENTFD=0xffffffffffffffff errno=9 cover=284 #0 [1207381ms] -> pipe2$9p(0x20000340, 0x0) #0 [1207382ms] <- pipe2$9p=0x0 errno=14 cover=1219 #0 [1207382ms] -> openat(0xffffffffffffffff, 0x20000380, 0x200, 0x75) #0 [1207383ms] <- openat=0xffffffffffffffff errno=9 cover=776 #0 [1207383ms] -> read$eventfd(0xffffffffffffffff, 0x200003c0, 0x8) #0 [1207383ms] <- read$eventfd=0xffffffffffffffff errno=9 cover=47 #0 [1207387ms] -> ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x20000480) #0 [1207387ms] <- ioctl$sock_ipv6_tunnel_SIOCGETPRL=0xffffffffffffffff errno=9 cover=45 #0 [1207388ms] -> openat(0xffffffffffffffff, 0x200004c0, 0x0, 0x0) #0 [1207388ms] <- openat=0xffffffffffffffff errno=9 cover=787 #0 [1207388ms] -> write$eventfd(0xffffffffffffffff, 0x20000500, 0x8) #0 [1207388ms] <- write$eventfd=0xffffffffffffffff errno=9 cover=47 #0 [1207389ms] -> openat$bsg(0xffffffffffffff9c, 0x20000540, 0x492b02, 0x0) #0 [1207392ms] <- openat$bsg=0x6 errno=14 cover=12431 #0 [1207392ms] -> io_uring_setup(0x132a, 0x20000580) #0 [1207393ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=2639 #0 [1207394ms] -> semctl$IPC_STAT(0x0, 0x0, 0x2, 0x20000600) #0 [1207394ms] <- semctl$IPC_STAT=0x0 errno=22 cover=236 #0 [1207395ms] -> signalfd(0xffffffffffffffff, 0x0, 0x0) #0 [1207395ms] <- signalfd=0xffffffffffffffff errno=22 cover=34 #0 [1207396ms] -> io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x20000700, 0x1) #0 [1207396ms] <- io_uring_register$IORING_REGISTER_EVENTFD_ASYNC=0xffffffffffffffff errno=9 cover=46 #0 [1207396ms] -> socketpair(0x11, 0x2, 0xffffffff, 0x20000740) #0 [1207406ms] <- socketpair=0xffffffffffffffff errno=95 cover=4316 #0 [1207407ms] -> setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x200007c0, 0x10) #0 [1207407ms] <- setsockopt$packet_fanout_data=0xffffffffffffffff errno=9 cover=50 enabling collider #0 [1207407ms] -> ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x20000000) #0 [1207407ms] <- ioctl$PERF_EVENT_IOC_QUERY_BPF=0xffffffffffffffff errno=9 cover=45 #0 [1207408ms] -> getrusage(0x0, 0x20000040) #0 [1207408ms] <- getrusage=0x0 errno=14 cover=102 pthread_create failed (errno 11) 2021/11/11 13:07:20 result hanged=false: 2021/11/11 13:07:20 #0: triaging type=7 2021/11/11 13:07:20 triaging input for call #13 openat$bsg (new signal=2) 13:07:20 executing program 0: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0]}) getrusage(0x0, &(0x7f0000000040)) read(0xffffffffffffffff, &(0x7f0000000100)=""/109, 0x6d) r0 = io_uring_setup(0x1577, &(0x7f0000000180)={0x0, 0x3ef2, 0x8, 0x1, 0xc8}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000200), 0x1) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000240)="535a58af0baac06e1c26ef0210a3b3181dbce5bdc2e2a15497f9b495acaebdf94c0c924c0becd1ffcb18395534678ab63ac665b2fabb5a44fdffdd7eb6ead25b1a383ba01720d00b35c66d109f7420ad4b931f5c63192793849febdea7cf4045e25bb676db72010b2bfb0175f0e6a1e9184fe1d54441c6d1dd88707720dc074e8c6cdba6b77d0bb980461a07d6d358d986328042ce37f09620ca7b14a3451a305c5c", 0xa2) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300), 0x1) pipe2$9p(&(0x7f0000000340), 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x200, 0x75) read$eventfd(r1, &(0x7f00000003c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x9a, 0x6, 0x15, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x4, 0x7}}) r2 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) write$eventfd(r2, &(0x7f0000000500)=0x5, 0x8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x492b02, 0x0) r4 = io_uring_setup(0x132a, &(0x7f0000000580)={0x0, 0x8458, 0x4, 0x0, 0x1bd, 0x0, r3}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000600)=""/143) r5 = signalfd(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000700)=r5, 0x1) socketpair(0x11, 0x2, 0xffffffff, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000007c0)={0x4, &(0x7f0000000780)=[{0x3, 0x0, 0x3, 0x3292}, {0xfffe, 0xc0, 0x0, 0xb0}, {0xa4ac, 0x3, 0x1, 0x1000}, {0x9, 0x6, 0x7, 0x1}]}, 0x10) [1207491ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110029 #0 [1207510ms] -> ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x20000000) #0 [1207511ms] <- ioctl$PERF_EVENT_IOC_QUERY_BPF=0xffffffffffffffff errno=9 cover=45 #0 [1207512ms] -> getrusage(0x0, 0x20000040) #0 [1207512ms] <- getrusage=0x0 errno=14 cover=102 #0 [1207512ms] -> read(0xffffffffffffffff, 0x20000100, 0x6d) #0 [1207512ms] <- read=0xffffffffffffffff errno=9 cover=47 #0 [1207512ms] -> io_uring_setup(0x1577, 0x20000180) #0 [1207516ms] <- io_uring_setup=0x3 errno=14 cover=4411 #0 [1207517ms] -> io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0x3, 0x7, 0x20000200, 0x1) #0 [1207520ms] <- io_uring_register$IORING_REGISTER_EVENTFD_ASYNC=0xffffffffffffffff errno=9 cover=341 #0 [1207521ms] -> setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x20000240, 0xa2) #0 [1207521ms] <- setsockopt$packet_buf=0xffffffffffffffff errno=9 cover=50 #0 [1207521ms] -> io_uring_register$IORING_REGISTER_EVENTFD(0x3, 0x4, 0x20000300, 0x1) #0 [1207529ms] <- io_uring_register$IORING_REGISTER_EVENTFD=0xffffffffffffffff errno=9 cover=284 #0 [1207529ms] -> pipe2$9p(0x20000340, 0x0) #0 [1207530ms] <- pipe2$9p=0x0 errno=14 cover=1219 #0 [1207530ms] -> openat(0xffffffffffffffff, 0x20000380, 0x200, 0x75) #0 [1207530ms] <- openat=0xffffffffffffffff errno=9 cover=724 #0 [1207530ms] -> read$eventfd(0xffffffffffffffff, 0x200003c0, 0x8) #0 [1207530ms] <- read$eventfd=0xffffffffffffffff errno=9 cover=47 #0 [1207530ms] -> ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x20000480) #0 [1207531ms] <- ioctl$sock_ipv6_tunnel_SIOCGETPRL=0xffffffffffffffff errno=9 cover=45 #0 [1207531ms] -> openat(0xffffffffffffffff, 0x200004c0, 0x0, 0x0) #0 [1207531ms] <- openat=0xffffffffffffffff errno=9 cover=704 #0 [1207531ms] -> write$eventfd(0xffffffffffffffff, 0x20000500, 0x8) #0 [1207531ms] <- write$eventfd=0xffffffffffffffff errno=9 cover=47 #0 [1207532ms] -> openat$bsg(0xffffffffffffff9c, 0x20000540, 0x492b02, 0x0) #0 [1207532ms] <- openat$bsg=0x6 errno=14 cover=2283 #0 [1207533ms] -> io_uring_setup(0x132a, 0x20000580) #0 [1207534ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=2635 #0 [1207534ms] -> semctl$IPC_STAT(0x0, 0x0, 0x2, 0x20000600) #0 [1207534ms] <- semctl$IPC_STAT=0x0 errno=22 cover=236 #0 [1207535ms] -> signalfd(0xffffffffffffffff, 0x0, 0x0) #0 [1207535ms] <- signalfd=0xffffffffffffffff errno=22 cover=34 #0 [1207535ms] -> io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x20000700, 0x1) #0 [1207536ms] <- io_uring_register$IORING_REGISTER_EVENTFD_ASYNC=0xffffffffffffffff errno=9 cover=46 #0 [1207536ms] -> socketpair(0x11, 0x2, 0xffffffff, 0x20000740) #0 [1207548ms] <- socketpair=0xffffffffffffffff errno=95 cover=4428 #0 [1207549ms] -> setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x200007c0, 0x10) #0 [1207550ms] <- setsockopt$packet_fanout_data=0xffffffffffffffff errno=9 cover=50 13:07:21 executing program 0: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0]}) getrusage(0x0, &(0x7f0000000040)) read(0xffffffffffffffff, &(0x7f0000000100)=""/109, 0x6d) r0 = io_uring_setup(0x1577, &(0x7f0000000180)={0x0, 0x3ef2, 0x8, 0x1, 0xc8}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000200), 0x1) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000240)="535a58af0baac06e1c26ef0210a3b3181dbce5bdc2e2a15497f9b495acaebdf94c0c924c0becd1ffcb18395534678ab63ac665b2fabb5a44fdffdd7eb6ead25b1a383ba01720d00b35c66d109f7420ad4b931f5c63192793849febdea7cf4045e25bb676db72010b2bfb0175f0e6a1e9184fe1d54441c6d1dd88707720dc074e8c6cdba6b77d0bb980461a07d6d358d986328042ce37f09620ca7b14a3451a305c5c", 0xa2) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300), 0x1) pipe2$9p(&(0x7f0000000340), 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x200, 0x75) read$eventfd(r1, &(0x7f00000003c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x9a, 0x6, 0x15, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x4, 0x7}}) r2 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) write$eventfd(r2, &(0x7f0000000500)=0x5, 0x8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x492b02, 0x0) r4 = io_uring_setup(0x132a, &(0x7f0000000580)={0x0, 0x8458, 0x4, 0x0, 0x1bd, 0x0, r3}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000600)=""/143) r5 = signalfd(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000700)=r5, 0x1) socketpair(0x11, 0x2, 0xffffffff, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000007c0)={0x4, &(0x7f0000000780)=[{0x3, 0x0, 0x3, 0x3292}, {0xfffe, 0xc0, 0x0, 0xb0}, {0xa4ac, 0x3, 0x1, 0x1000}, {0x9, 0x6, 0x7, 0x1}]}, 0x10) 2021/11/11 13:07:21 result hanged=false: [1207598ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110031 #0 [1207621ms] -> ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x20000000) #0 [1207621ms] <- ioctl$PERF_EVENT_IOC_QUERY_BPF=0xffffffffffffffff errno=9 cover=45 #0 [1207621ms] -> getrusage(0x0, 0x20000040) #0 [1207621ms] <- getrusage=0x0 errno=14 cover=102 #0 [1207622ms] -> read(0xffffffffffffffff, 0x20000100, 0x6d) #0 [1207622ms] <- read=0xffffffffffffffff errno=9 cover=47 #0 [1207622ms] -> io_uring_setup(0x1577, 0x20000180) #0 [1207630ms] <- io_uring_setup=0x3 errno=14 cover=4380 #0 [1207631ms] -> io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0x3, 0x7, 0x20000200, 0x1) #0 [1207635ms] <- io_uring_register$IORING_REGISTER_EVENTFD_ASYNC=0xffffffffffffffff errno=9 cover=284 #0 [1207636ms] -> setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x20000240, 0xa2) #0 [1207636ms] <- setsockopt$packet_buf=0xffffffffffffffff errno=9 cover=50 #0 [1207636ms] -> io_uring_register$IORING_REGISTER_EVENTFD(0x3, 0x4, 0x20000300, 0x1) #0 [1207641ms] <- io_uring_register$IORING_REGISTER_EVENTFD=0xffffffffffffffff errno=9 cover=284 #0 [1207641ms] -> pipe2$9p(0x20000340, 0x0) #0 [1207642ms] <- pipe2$9p=0x0 errno=14 cover=1202 #0 [1207642ms] -> openat(0xffffffffffffffff, 0x20000380, 0x200, 0x75) #0 [1207642ms] <- openat=0xffffffffffffffff errno=9 cover=723 #0 [1207643ms] -> read$eventfd(0xffffffffffffffff, 0x200003c0, 0x8) #0 [1207643ms] <- read$eventfd=0xffffffffffffffff errno=9 cover=47 #0 [1207643ms] -> ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x20000480) #0 [1207643ms] <- ioctl$sock_ipv6_tunnel_SIOCGETPRL=0xffffffffffffffff errno=9 cover=45 #0 [1207644ms] -> openat(0xffffffffffffffff, 0x200004c0, 0x0, 0x0) #0 [1207644ms] <- openat=0xffffffffffffffff errno=9 cover=711 #0 [1207644ms] -> write$eventfd(0xffffffffffffffff, 0x20000500, 0x8) #0 [1207644ms] <- write$eventfd=0xffffffffffffffff errno=9 cover=47 #0 [1207645ms] -> openat$bsg(0xffffffffffffff9c, 0x20000540, 0x492b02, 0x0) #0 [1207645ms] <- openat$bsg=0x6 errno=14 cover=2249 #0 [1207646ms] -> io_uring_setup(0x132a, 0x20000580) #0 [1207646ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=2605 #0 [1207647ms] -> semctl$IPC_STAT(0x0, 0x0, 0x2, 0x20000600) #0 [1207647ms] <- semctl$IPC_STAT=0x0 errno=22 cover=236 #0 [1207647ms] -> signalfd(0xffffffffffffffff, 0x0, 0x0) #0 [1207647ms] <- signalfd=0xffffffffffffffff errno=22 cover=34 #0 [1207648ms] -> io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x20000700, 0x1) #0 [1207648ms] <- io_uring_register$IORING_REGISTER_EVENTFD_ASYNC=0xffffffffffffffff errno=9 cover=46 #0 [1207648ms] -> socketpair(0x11, 0x2, 0xffffffff, 0x20000740) #0 [1207659ms] <- socketpair=0xffffffffffffffff errno=95 cover=7607 #0 [1207660ms] -> setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x200007c0, 0x10) #0 [1207660ms] <- setsockopt$packet_fanout_data=0xffffffffffffffff errno=9 cover=50 2021/11/11 13:07:21 result hanged=false: 13:07:21 executing program 0: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0]}) getrusage(0x0, &(0x7f0000000040)) read(0xffffffffffffffff, &(0x7f0000000100)=""/109, 0x6d) r0 = io_uring_setup(0x1577, &(0x7f0000000180)={0x0, 0x3ef2, 0x8, 0x1, 0xc8}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000200), 0x1) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000240)="535a58af0baac06e1c26ef0210a3b3181dbce5bdc2e2a15497f9b495acaebdf94c0c924c0becd1ffcb18395534678ab63ac665b2fabb5a44fdffdd7eb6ead25b1a383ba01720d00b35c66d109f7420ad4b931f5c63192793849febdea7cf4045e25bb676db72010b2bfb0175f0e6a1e9184fe1d54441c6d1dd88707720dc074e8c6cdba6b77d0bb980461a07d6d358d986328042ce37f09620ca7b14a3451a305c5c", 0xa2) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300), 0x1) pipe2$9p(&(0x7f0000000340), 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x200, 0x75) read$eventfd(r1, &(0x7f00000003c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x9a, 0x6, 0x15, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x4, 0x7}}) r2 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) write$eventfd(r2, &(0x7f0000000500)=0x5, 0x8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x492b02, 0x0) r4 = io_uring_setup(0x132a, &(0x7f0000000580)={0x0, 0x8458, 0x4, 0x0, 0x1bd, 0x0, r3}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000600)=""/143) r5 = signalfd(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000700)=r5, 0x1) socketpair(0x11, 0x2, 0xffffffff, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000007c0)={0x4, &(0x7f0000000780)=[{0x3, 0x0, 0x3, 0x3292}, {0xfffe, 0xc0, 0x0, 0xb0}, {0xa4ac, 0x3, 0x1, 0x1000}, {0x9, 0x6, 0x7, 0x1}]}, 0x10) [1207709ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110033 #0 [1207730ms] -> ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x20000000) #0 [1207731ms] <- ioctl$PERF_EVENT_IOC_QUERY_BPF=0xffffffffffffffff errno=9 cover=45 #0 [1207734ms] -> getrusage(0x0, 0x20000040) #0 [1207734ms] <- getrusage=0x0 errno=14 cover=102 #0 [1207736ms] -> read(0xffffffffffffffff, 0x20000100, 0x6d) #0 [1207736ms] <- read=0xffffffffffffffff errno=9 cover=47 #0 [1207737ms] -> io_uring_setup(0x1577, 0x20000180) #0 [1207739ms] <- io_uring_setup=0x3 errno=14 cover=4321 #0 [1207740ms] -> io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0x3, 0x7, 0x20000200, 0x1) #0 [1207744ms] <- io_uring_register$IORING_REGISTER_EVENTFD_ASYNC=0xffffffffffffffff errno=9 cover=314 #0 [1207745ms] -> setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x20000240, 0xa2) #0 [1207745ms] <- setsockopt$packet_buf=0xffffffffffffffff errno=9 cover=50 #0 [1207745ms] -> io_uring_register$IORING_REGISTER_EVENTFD(0x3, 0x4, 0x20000300, 0x1) #0 [1207748ms] <- io_uring_register$IORING_REGISTER_EVENTFD=0xffffffffffffffff errno=9 cover=314 #0 [1207748ms] -> pipe2$9p(0x20000340, 0x0) #0 [1207749ms] <- pipe2$9p=0x0 errno=14 cover=1137 #0 [1207749ms] -> openat(0xffffffffffffffff, 0x20000380, 0x200, 0x75) #0 [1207749ms] <- openat=0xffffffffffffffff errno=9 cover=702 #0 [1207750ms] -> read$eventfd(0xffffffffffffffff, 0x200003c0, 0x8) #0 [1207750ms] <- read$eventfd=0xffffffffffffffff errno=9 cover=47 #0 [1207750ms] -> ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x20000480) #0 [1207750ms] <- ioctl$sock_ipv6_tunnel_SIOCGETPRL=0xffffffffffffffff errno=9 cover=45 #0 [1207751ms] -> openat(0xffffffffffffffff, 0x200004c0, 0x0, 0x0) #0 [1207751ms] <- openat=0xffffffffffffffff errno=9 cover=701 #0 [1207751ms] -> write$eventfd(0xffffffffffffffff, 0x20000500, 0x8) #0 [1207751ms] <- write$eventfd=0xffffffffffffffff errno=9 cover=47 #0 [1207752ms] -> openat$bsg(0xffffffffffffff9c, 0x20000540, 0x492b02, 0x0) #0 [1207752ms] <- openat$bsg=0x6 errno=14 cover=2283 #0 [1207753ms] -> io_uring_setup(0x132a, 0x20000580) #0 [1207753ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=2646 #0 [1207754ms] -> semctl$IPC_STAT(0x0, 0x0, 0x2, 0x20000600) #0 [1207754ms] <- semctl$IPC_STAT=0x0 errno=22 cover=236 #0 [1207754ms] -> signalfd(0xffffffffffffffff, 0x0, 0x0) #0 [1207754ms] <- signalfd=0xffffffffffffffff errno=22 cover=34 #0 [1207754ms] -> io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x20000700, 0x1) #0 [1207754ms] <- io_uring_register$IORING_REGISTER_EVENTFD_ASYNC=0xffffffffffffffff errno=9 cover=46 #0 [1207754ms] -> socketpair(0x11, 0x2, 0xffffffff, 0x20000740) #0 [1207764ms] <- socketpair=0xffffffffffffffff errno=95 cover=4286 #0 [1207765ms] -> setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x200007c0, 0x10) #0 [1207765ms] <- setsockopt$packet_fanout_data=0xffffffffffffffff errno=9 cover=50 2021/11/11 13:07:21 result hanged=false: 2021/11/11 13:07:21 added new input for call #13 openat$bsg to corpus: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0]}) getrusage(0x0, &(0x7f0000000040)) read(0xffffffffffffffff, &(0x7f0000000100)=""/109, 0x6d) r0 = io_uring_setup(0x1577, &(0x7f0000000180)={0x0, 0x3ef2, 0x8, 0x1, 0xc8}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000200), 0x1) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000240)="535a58af0baac06e1c26ef0210a3b3181dbce5bdc2e2a15497f9b495acaebdf94c0c924c0becd1ffcb18395534678ab63ac665b2fabb5a44fdffdd7eb6ead25b1a383ba01720d00b35c66d109f7420ad4b931f5c63192793849febdea7cf4045e25bb676db72010b2bfb0175f0e6a1e9184fe1d54441c6d1dd88707720dc074e8c6cdba6b77d0bb980461a07d6d358d986328042ce37f09620ca7b14a3451a305c5c", 0xa2) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300), 0x1) pipe2$9p(&(0x7f0000000340), 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x200, 0x75) read$eventfd(r1, &(0x7f00000003c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x9a, 0x6, 0x15, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x4, 0x7}}) r2 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) write$eventfd(r2, &(0x7f0000000500)=0x5, 0x8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x492b02, 0x0) r4 = io_uring_setup(0x132a, &(0x7f0000000580)={0x0, 0x8458, 0x4, 0x0, 0x1bd, 0x0, r3}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000600)=""/143) r5 = signalfd(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000700)=r5, 0x1) socketpair(0x11, 0x2, 0xffffffff, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000007c0)={0x4, &(0x7f0000000780)=[{0x3, 0x0, 0x3, 0x3292}, {0xfffe, 0xc0, 0x0, 0xb0}, {0xa4ac, 0x3, 0x1, 0x1000}, {0x9, 0x6, 0x7, 0x1}]}, 0x10) 2021/11/11 13:07:21 #0: triaging type=7 2021/11/11 13:07:21 triaging input for call #7 pipe2$9p (new signal=1) 13:07:21 executing program 0: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0]}) getrusage(0x0, &(0x7f0000000040)) read(0xffffffffffffffff, &(0x7f0000000100)=""/109, 0x6d) r0 = io_uring_setup(0x1577, &(0x7f0000000180)={0x0, 0x3ef2, 0x8, 0x1, 0xc8}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000200), 0x1) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000240)="535a58af0baac06e1c26ef0210a3b3181dbce5bdc2e2a15497f9b495acaebdf94c0c924c0becd1ffcb18395534678ab63ac665b2fabb5a44fdffdd7eb6ead25b1a383ba01720d00b35c66d109f7420ad4b931f5c63192793849febdea7cf4045e25bb676db72010b2bfb0175f0e6a1e9184fe1d54441c6d1dd88707720dc074e8c6cdba6b77d0bb980461a07d6d358d986328042ce37f09620ca7b14a3451a305c5c", 0xa2) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300), 0x1) pipe2$9p(&(0x7f0000000340), 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x200, 0x75) read$eventfd(r1, &(0x7f00000003c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x9a, 0x6, 0x15, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x4, 0x7}}) r2 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) write$eventfd(r2, &(0x7f0000000500)=0x5, 0x8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x492b02, 0x0) r4 = io_uring_setup(0x132a, &(0x7f0000000580)={0x0, 0x8458, 0x4, 0x0, 0x1bd, 0x0, r3}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000600)=""/143) r5 = signalfd(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000700)=r5, 0x1) socketpair(0x11, 0x2, 0xffffffff, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000007c0)={0x4, &(0x7f0000000780)=[{0x3, 0x0, 0x3, 0x3292}, {0xfffe, 0xc0, 0x0, 0xb0}, {0xa4ac, 0x3, 0x1, 0x1000}, {0x9, 0x6, 0x7, 0x1}]}, 0x10) [1207818ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110035 #0 [1207842ms] -> ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x20000000) #0 [1207843ms] <- ioctl$PERF_EVENT_IOC_QUERY_BPF=0xffffffffffffffff errno=9 cover=45 #0 [1207843ms] -> getrusage(0x0, 0x20000040) #0 [1207843ms] <- getrusage=0x0 errno=14 cover=102 #0 [1207844ms] -> read(0xffffffffffffffff, 0x20000100, 0x6d) #0 [1207844ms] <- read=0xffffffffffffffff errno=9 cover=47 #0 [1207844ms] -> io_uring_setup(0x1577, 0x20000180) #0 [1207846ms] <- io_uring_setup=0x3 errno=14 cover=4308 #0 [1207847ms] -> io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0x3, 0x7, 0x20000200, 0x1) #0 [1207850ms] <- io_uring_register$IORING_REGISTER_EVENTFD_ASYNC=0xffffffffffffffff errno=9 cover=284 #0 [1207851ms] -> setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x20000240, 0xa2) #0 [1207851ms] <- setsockopt$packet_buf=0xffffffffffffffff errno=9 cover=50 #0 [1207857ms] -> io_uring_register$IORING_REGISTER_EVENTFD(0x3, 0x4, 0x20000300, 0x1) #0 [1207861ms] <- io_uring_register$IORING_REGISTER_EVENTFD=0xffffffffffffffff errno=9 cover=284 #0 [1207862ms] -> pipe2$9p(0x20000340, 0x0) #0 [1207862ms] <- pipe2$9p=0x0 errno=14 cover=1332 #0 [1207862ms] -> openat(0xffffffffffffffff, 0x20000380, 0x200, 0x75) #0 [1207863ms] <- openat=0xffffffffffffffff errno=9 cover=691 #0 [1207863ms] -> read$eventfd(0xffffffffffffffff, 0x200003c0, 0x8) #0 [1207863ms] <- read$eventfd=0xffffffffffffffff errno=9 cover=47 #0 [1207863ms] -> ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x20000480) #0 [1207864ms] <- ioctl$sock_ipv6_tunnel_SIOCGETPRL=0xffffffffffffffff errno=9 cover=45 #0 [1207864ms] -> openat(0xffffffffffffffff, 0x200004c0, 0x0, 0x0) #0 [1207864ms] <- openat=0xffffffffffffffff errno=9 cover=690 #0 [1207864ms] -> write$eventfd(0xffffffffffffffff, 0x20000500, 0x8) #0 [1207864ms] <- write$eventfd=0xffffffffffffffff errno=9 cover=47 #0 [1207864ms] -> openat$bsg(0xffffffffffffff9c, 0x20000540, 0x492b02, 0x0) #0 [1207865ms] <- openat$bsg=0x6 errno=14 cover=2316 #0 [1207865ms] -> io_uring_setup(0x132a, 0x20000580) #0 [1207865ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=2631 #0 [1207866ms] -> semctl$IPC_STAT(0x0, 0x0, 0x2, 0x20000600) #0 [1207866ms] <- semctl$IPC_STAT=0x0 errno=22 cover=236 #0 [1207866ms] -> signalfd(0xffffffffffffffff, 0x0, 0x0) #0 [1207867ms] <- signalfd=0xffffffffffffffff errno=22 cover=34 #0 [1207867ms] -> io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x20000700, 0x1) #0 [1207867ms] <- io_uring_register$IORING_REGISTER_EVENTFD_ASYNC=0xffffffffffffffff errno=9 cover=46 #0 [1207867ms] -> socketpair(0x11, 0x2, 0xffffffff, 0x20000740) #0 [1207877ms] <- socketpair=0xffffffffffffffff errno=95 cover=4359 #0 [1207878ms] -> setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x200007c0, 0x10) #0 [1207878ms] <- setsockopt$packet_fanout_data=0xffffffffffffffff errno=9 cover=50 13:07:21 executing program 0: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0]}) getrusage(0x0, &(0x7f0000000040)) read(0xffffffffffffffff, &(0x7f0000000100)=""/109, 0x6d) r0 = io_uring_setup(0x1577, &(0x7f0000000180)={0x0, 0x3ef2, 0x8, 0x1, 0xc8}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000200), 0x1) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000240)="535a58af0baac06e1c26ef0210a3b3181dbce5bdc2e2a15497f9b495acaebdf94c0c924c0becd1ffcb18395534678ab63ac665b2fabb5a44fdffdd7eb6ead25b1a383ba01720d00b35c66d109f7420ad4b931f5c63192793849febdea7cf4045e25bb676db72010b2bfb0175f0e6a1e9184fe1d54441c6d1dd88707720dc074e8c6cdba6b77d0bb980461a07d6d358d986328042ce37f09620ca7b14a3451a305c5c", 0xa2) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300), 0x1) pipe2$9p(&(0x7f0000000340), 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x200, 0x75) read$eventfd(r1, &(0x7f00000003c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x9a, 0x6, 0x15, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x4, 0x7}}) r2 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) write$eventfd(r2, &(0x7f0000000500)=0x5, 0x8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x492b02, 0x0) r4 = io_uring_setup(0x132a, &(0x7f0000000580)={0x0, 0x8458, 0x4, 0x0, 0x1bd, 0x0, r3}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000600)=""/143) r5 = signalfd(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000700)=r5, 0x1) socketpair(0x11, 0x2, 0xffffffff, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000007c0)={0x4, &(0x7f0000000780)=[{0x3, 0x0, 0x3, 0x3292}, {0xfffe, 0xc0, 0x0, 0xb0}, {0xa4ac, 0x3, 0x1, 0x1000}, {0x9, 0x6, 0x7, 0x1}]}, 0x10) 2021/11/11 13:07:21 result hanged=false: [1207928ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110037 #0 [1207951ms] -> ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x20000000) #0 [1207951ms] <- ioctl$PERF_EVENT_IOC_QUERY_BPF=0xffffffffffffffff errno=9 cover=45 #0 [1207952ms] -> getrusage(0x0, 0x20000040) #0 [1207952ms] <- getrusage=0x0 errno=14 cover=102 #0 [1207953ms] -> read(0xffffffffffffffff, 0x20000100, 0x6d) #0 [1207953ms] <- read=0xffffffffffffffff errno=9 cover=47 #0 [1207953ms] -> io_uring_setup(0x1577, 0x20000180) #0 [1207961ms] <- io_uring_setup=0x3 errno=14 cover=4492 #0 [1207962ms] -> io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0x3, 0x7, 0x20000200, 0x1) #0 [1207966ms] <- io_uring_register$IORING_REGISTER_EVENTFD_ASYNC=0xffffffffffffffff errno=9 cover=287 #0 [1207967ms] -> setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x20000240, 0xa2) #0 [1207967ms] <- setsockopt$packet_buf=0xffffffffffffffff errno=9 cover=50 #0 [1207967ms] -> io_uring_register$IORING_REGISTER_EVENTFD(0x3, 0x4, 0x20000300, 0x1) #0 [1207972ms] <- io_uring_register$IORING_REGISTER_EVENTFD=0xffffffffffffffff errno=9 cover=328 #0 [1207972ms] -> pipe2$9p(0x20000340, 0x0) #0 [1207974ms] <- pipe2$9p=0x0 errno=14 cover=1335 #0 [1207974ms] -> openat(0xffffffffffffffff, 0x20000380, 0x200, 0x75) #0 [1207975ms] <- openat=0xffffffffffffffff errno=9 cover=756 #0 [1207975ms] -> read$eventfd(0xffffffffffffffff, 0x200003c0, 0x8) #0 [1207976ms] <- read$eventfd=0xffffffffffffffff errno=9 cover=47 #0 [1207976ms] -> ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x20000480) #0 [1207976ms] <- ioctl$sock_ipv6_tunnel_SIOCGETPRL=0xffffffffffffffff errno=9 cover=45 #0 [1207976ms] -> openat(0xffffffffffffffff, 0x200004c0, 0x0, 0x0) #0 [1207977ms] <- openat=0xffffffffffffffff errno=9 cover=700 #0 [1207977ms] -> write$eventfd(0xffffffffffffffff, 0x20000500, 0x8) #0 [1207978ms] <- write$eventfd=0xffffffffffffffff errno=9 cover=47 #0 [1207978ms] -> openat$bsg(0xffffffffffffff9c, 0x20000540, 0x492b02, 0x0) #0 [1207979ms] <- openat$bsg=0x6 errno=14 cover=2321 #0 [1207980ms] -> io_uring_setup(0x132a, 0x20000580) #0 [1207980ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=2594 #0 [1207982ms] -> semctl$IPC_STAT(0x0, 0x0, 0x2, 0x20000600) #0 [1207982ms] <- semctl$IPC_STAT=0x0 errno=22 cover=236 #0 [1207983ms] -> signalfd(0xffffffffffffffff, 0x0, 0x0) #0 [1207983ms] <- signalfd=0xffffffffffffffff errno=22 cover=34 #0 [1207983ms] -> io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x20000700, 0x1) #0 [1207983ms] <- io_uring_register$IORING_REGISTER_EVENTFD_ASYNC=0xffffffffffffffff errno=9 cover=46 #0 [1207983ms] -> socketpair(0x11, 0x2, 0xffffffff, 0x20000740) #0 [1207992ms] <- socketpair=0xffffffffffffffff errno=95 cover=4411 #0 [1207993ms] -> setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x200007c0, 0x10) #0 [1207993ms] <- setsockopt$packet_fanout_data=0xffffffffffffffff errno=9 cover=50 13:07:21 executing program 0: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0]}) getrusage(0x0, &(0x7f0000000040)) read(0xffffffffffffffff, &(0x7f0000000100)=""/109, 0x6d) r0 = io_uring_setup(0x1577, &(0x7f0000000180)={0x0, 0x3ef2, 0x8, 0x1, 0xc8}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000200), 0x1) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000240)="535a58af0baac06e1c26ef0210a3b3181dbce5bdc2e2a15497f9b495acaebdf94c0c924c0becd1ffcb18395534678ab63ac665b2fabb5a44fdffdd7eb6ead25b1a383ba01720d00b35c66d109f7420ad4b931f5c63192793849febdea7cf4045e25bb676db72010b2bfb0175f0e6a1e9184fe1d54441c6d1dd88707720dc074e8c6cdba6b77d0bb980461a07d6d358d986328042ce37f09620ca7b14a3451a305c5c", 0xa2) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300), 0x1) pipe2$9p(&(0x7f0000000340), 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x200, 0x75) read$eventfd(r1, &(0x7f00000003c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x9a, 0x6, 0x15, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x4, 0x7}}) r2 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) write$eventfd(r2, &(0x7f0000000500)=0x5, 0x8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x492b02, 0x0) r4 = io_uring_setup(0x132a, &(0x7f0000000580)={0x0, 0x8458, 0x4, 0x0, 0x1bd, 0x0, r3}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000600)=""/143) r5 = signalfd(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000700)=r5, 0x1) socketpair(0x11, 0x2, 0xffffffff, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000007c0)={0x4, &(0x7f0000000780)=[{0x3, 0x0, 0x3, 0x3292}, {0xfffe, 0xc0, 0x0, 0xb0}, {0xa4ac, 0x3, 0x1, 0x1000}, {0x9, 0x6, 0x7, 0x1}]}, 0x10) 2021/11/11 13:07:21 result hanged=false: [1208038ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110039 #0 [1208059ms] -> ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x20000000) #0 [1208059ms] <- ioctl$PERF_EVENT_IOC_QUERY_BPF=0xffffffffffffffff errno=9 cover=45 #0 [1208060ms] -> getrusage(0x0, 0x20000040) #0 [1208060ms] <- getrusage=0x0 errno=14 cover=102 #0 [1208060ms] -> read(0xffffffffffffffff, 0x20000100, 0x6d) #0 [1208060ms] <- read=0xffffffffffffffff errno=9 cover=47 #0 [1208060ms] -> io_uring_setup(0x1577, 0x20000180) #0 [1208069ms] <- io_uring_setup=0x3 errno=14 cover=4373 #0 [1208070ms] -> io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0x3, 0x7, 0x20000200, 0x1) #0 [1208073ms] <- io_uring_register$IORING_REGISTER_EVENTFD_ASYNC=0xffffffffffffffff errno=9 cover=287 #0 [1208074ms] -> setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x20000240, 0xa2) #0 [1208074ms] <- setsockopt$packet_buf=0xffffffffffffffff errno=9 cover=50 #0 [1208074ms] -> io_uring_register$IORING_REGISTER_EVENTFD(0x3, 0x4, 0x20000300, 0x1) #0 [1208079ms] <- io_uring_register$IORING_REGISTER_EVENTFD=0xffffffffffffffff errno=9 cover=374 #0 [1208080ms] -> pipe2$9p(0x20000340, 0x0) #0 [1208080ms] <- pipe2$9p=0x0 errno=14 cover=1191 #0 [1208080ms] -> openat(0xffffffffffffffff, 0x20000380, 0x200, 0x75) #0 [1208080ms] <- openat=0xffffffffffffffff errno=9 cover=771 #0 [1208081ms] -> read$eventfd(0xffffffffffffffff, 0x200003c0, 0x8) #0 [1208081ms] <- read$eventfd=0xffffffffffffffff errno=9 cover=47 #0 [1208081ms] -> ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x20000480) #0 [1208081ms] <- ioctl$sock_ipv6_tunnel_SIOCGETPRL=0xffffffffffffffff errno=9 cover=45 #0 [1208081ms] -> openat(0xffffffffffffffff, 0x200004c0, 0x0, 0x0) #0 [1208081ms] <- openat=0xffffffffffffffff errno=9 cover=701 #0 [1208081ms] -> write$eventfd(0xffffffffffffffff, 0x20000500, 0x8) #0 [1208081ms] <- write$eventfd=0xffffffffffffffff errno=9 cover=47 #0 [1208081ms] -> openat$bsg(0xffffffffffffff9c, 0x20000540, 0x492b02, 0x0) #0 [1208082ms] <- openat$bsg=0x6 errno=14 cover=2294 #0 [1208082ms] -> io_uring_setup(0x132a, 0x20000580) #0 [1208082ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=2605 #0 [1208083ms] -> semctl$IPC_STAT(0x0, 0x0, 0x2, 0x20000600) #0 [1208083ms] <- semctl$IPC_STAT=0x0 errno=22 cover=236 #0 [1208083ms] -> signalfd(0xffffffffffffffff, 0x0, 0x0) #0 [1208083ms] <- signalfd=0xffffffffffffffff errno=22 cover=34 #0 [1208083ms] -> io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x20000700, 0x1) #0 [1208083ms] <- io_uring_register$IORING_REGISTER_EVENTFD_ASYNC=0xffffffffffffffff errno=9 cover=46 #0 [1208083ms] -> socketpair(0x11, 0x2, 0xffffffff, 0x20000740) #0 [1208094ms] <- socketpair=0xffffffffffffffff errno=95 cover=4409 #0 [1208095ms] -> setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x200007c0, 0x10) #0 [1208095ms] <- setsockopt$packet_fanout_data=0xffffffffffffffff errno=9 cover=50 2021/11/11 13:07:21 result hanged=false: 2021/11/11 13:07:21 added new input for call #7 pipe2$9p to corpus: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0]}) getrusage(0x0, &(0x7f0000000040)) read(0xffffffffffffffff, &(0x7f0000000100)=""/109, 0x6d) r0 = io_uring_setup(0x1577, &(0x7f0000000180)={0x0, 0x3ef2, 0x8, 0x1, 0xc8}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000200), 0x1) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000240)="535a58af0baac06e1c26ef0210a3b3181dbce5bdc2e2a15497f9b495acaebdf94c0c924c0becd1ffcb18395534678ab63ac665b2fabb5a44fdffdd7eb6ead25b1a383ba01720d00b35c66d109f7420ad4b931f5c63192793849febdea7cf4045e25bb676db72010b2bfb0175f0e6a1e9184fe1d54441c6d1dd88707720dc074e8c6cdba6b77d0bb980461a07d6d358d986328042ce37f09620ca7b14a3451a305c5c", 0xa2) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300), 0x1) pipe2$9p(&(0x7f0000000340), 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x200, 0x75) read$eventfd(r1, &(0x7f00000003c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x9a, 0x6, 0x15, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x4, 0x7}}) r2 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) write$eventfd(r2, &(0x7f0000000500)=0x5, 0x8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x492b02, 0x0) r4 = io_uring_setup(0x132a, &(0x7f0000000580)={0x0, 0x8458, 0x4, 0x0, 0x1bd, 0x0, r3}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000600)=""/143) r5 = signalfd(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000700)=r5, 0x1) socketpair(0x11, 0x2, 0xffffffff, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000007c0)={0x4, &(0x7f0000000780)=[{0x3, 0x0, 0x3, 0x3292}, {0xfffe, 0xc0, 0x0, 0xb0}, {0xa4ac, 0x3, 0x1, 0x1000}, {0x9, 0x6, 0x7, 0x1}]}, 0x10) 13:07:21 executing program 0: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0]}) getrusage(0x0, &(0x7f0000000040)) read(0xffffffffffffffff, &(0x7f0000000100)=""/109, 0x6d) r0 = io_uring_setup(0x1577, &(0x7f0000000180)={0x0, 0x3ef2, 0x8, 0x1, 0xc8}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000200), 0x1) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000240)="535a58af0baac06e1c26ef0210a3b3181dbce5bdc2e2a15497f9b495acaebdf94c0c924c0becd1ffcb18395534678ab63ac665b2fabb5a44fdffdd7eb6ead25b1a383ba01720d00b35c66d109f7420ad4b931f5c63192793849febdea7cf4045e25bb676db72010b2bfb0175f0e6a1e9184fe1d54441c6d1dd88707720dc074e8c6cdba6b77d0bb980461a07d6d358d986328042ce37f09620ca7b14a3451a305c5c", 0xa2) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300), 0x1) pipe2$9p(&(0x7f0000000340), 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x200, 0x75) read$eventfd(r1, &(0x7f00000003c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x9a, 0x6, 0x15, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x4, 0x7}}) r2 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) write$eventfd(r2, &(0x7f0000000500)=0x5, 0x8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x492b02, 0x0) r4 = io_uring_setup(0x132a, &(0x7f0000000580)={0x0, 0x8458, 0x4, 0x0, 0x1bd, 0x0, r3}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000600)=""/143) r5 = signalfd(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000700)=r5, 0x1) socketpair(0x11, 0x2, 0xffffffff, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000007c0)={0x4, &(0x7f0000000780)=[{0x3, 0x0, 0x3, 0x3292}, {0xfffe, 0xc0, 0x0, 0xb0}, {0xa4ac, 0x3, 0x1, 0x1000}, {0x9, 0x6, 0x7, 0x1}]}, 0x10) 2021/11/11 13:07:21 #0: triaging type=7 2021/11/11 13:07:21 triaging input for call #3 io_uring_setup (new signal=2) [1208140ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110041 #0 [1208161ms] -> ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x20000000) #0 [1208161ms] <- ioctl$PERF_EVENT_IOC_QUERY_BPF=0xffffffffffffffff errno=9 cover=45 #0 [1208161ms] -> getrusage(0x0, 0x20000040) #0 [1208162ms] <- getrusage=0x0 errno=14 cover=102 #0 [1208162ms] -> read(0xffffffffffffffff, 0x20000100, 0x6d) #0 [1208162ms] <- read=0xffffffffffffffff errno=9 cover=47 #0 [1208162ms] -> io_uring_setup(0x1577, 0x20000180) #0 [1208170ms] <- io_uring_setup=0x3 errno=14 cover=4339 #0 [1208170ms] -> io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0x3, 0x7, 0x20000200, 0x1) #0 [1208180ms] <- io_uring_register$IORING_REGISTER_EVENTFD_ASYNC=0xffffffffffffffff errno=9 cover=284 #0 [1208181ms] -> setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x20000240, 0xa2) #0 [1208181ms] <- setsockopt$packet_buf=0xffffffffffffffff errno=9 cover=50 #0 [1208181ms] -> io_uring_register$IORING_REGISTER_EVENTFD(0x3, 0x4, 0x20000300, 0x1) #0 [1208185ms] <- io_uring_register$IORING_REGISTER_EVENTFD=0xffffffffffffffff errno=9 cover=284 #0 [1208185ms] -> pipe2$9p(0x20000340, 0x0) #0 [1208186ms] <- pipe2$9p=0x0 errno=14 cover=1295 #0 [1208186ms] -> openat(0xffffffffffffffff, 0x20000380, 0x200, 0x75) #0 [1208186ms] <- openat=0xffffffffffffffff errno=9 cover=701 #0 [1208186ms] -> read$eventfd(0xffffffffffffffff, 0x200003c0, 0x8) #0 [1208187ms] <- read$eventfd=0xffffffffffffffff errno=9 cover=47 #0 [1208187ms] -> ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x20000480) #0 [1208187ms] <- ioctl$sock_ipv6_tunnel_SIOCGETPRL=0xffffffffffffffff errno=9 cover=45 #0 [1208187ms] -> openat(0xffffffffffffffff, 0x200004c0, 0x0, 0x0) #0 [1208187ms] <- openat=0xffffffffffffffff errno=9 cover=711 #0 [1208187ms] -> write$eventfd(0xffffffffffffffff, 0x20000500, 0x8) #0 [1208187ms] <- write$eventfd=0xffffffffffffffff errno=9 cover=47 #0 [1208187ms] -> openat$bsg(0xffffffffffffff9c, 0x20000540, 0x492b02, 0x0) #0 [1208188ms] <- openat$bsg=0x6 errno=14 cover=2292 #0 [1208188ms] -> io_uring_setup(0x132a, 0x20000580) #0 [1208189ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=2605 #0 [1208189ms] -> semctl$IPC_STAT(0x0, 0x0, 0x2, 0x20000600) #0 [1208189ms] <- semctl$IPC_STAT=0x0 errno=22 cover=236 #0 [1208189ms] -> signalfd(0xffffffffffffffff, 0x0, 0x0) #0 [1208189ms] <- signalfd=0xffffffffffffffff errno=22 cover=34 #0 [1208189ms] -> io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x20000700, 0x1) #0 [1208189ms] <- io_uring_register$IORING_REGISTER_EVENTFD_ASYNC=0xffffffffffffffff errno=9 cover=46 #0 [1208189ms] -> socketpair(0x11, 0x2, 0xffffffff, 0x20000740) #0 [1208197ms] <- socketpair=0xffffffffffffffff errno=95 cover=4324 #0 [1208198ms] -> setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x200007c0, 0x10) #0 [1208198ms] <- setsockopt$packet_fanout_data=0xffffffffffffffff errno=9 cover=50 13:07:21 executing program 0: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0]}) getrusage(0x0, &(0x7f0000000040)) read(0xffffffffffffffff, &(0x7f0000000100)=""/109, 0x6d) r0 = io_uring_setup(0x1577, &(0x7f0000000180)={0x0, 0x3ef2, 0x8, 0x1, 0xc8}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000200), 0x1) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000240)="535a58af0baac06e1c26ef0210a3b3181dbce5bdc2e2a15497f9b495acaebdf94c0c924c0becd1ffcb18395534678ab63ac665b2fabb5a44fdffdd7eb6ead25b1a383ba01720d00b35c66d109f7420ad4b931f5c63192793849febdea7cf4045e25bb676db72010b2bfb0175f0e6a1e9184fe1d54441c6d1dd88707720dc074e8c6cdba6b77d0bb980461a07d6d358d986328042ce37f09620ca7b14a3451a305c5c", 0xa2) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300), 0x1) pipe2$9p(&(0x7f0000000340), 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x200, 0x75) read$eventfd(r1, &(0x7f00000003c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x9a, 0x6, 0x15, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x4, 0x7}}) r2 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) write$eventfd(r2, &(0x7f0000000500)=0x5, 0x8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x492b02, 0x0) r4 = io_uring_setup(0x132a, &(0x7f0000000580)={0x0, 0x8458, 0x4, 0x0, 0x1bd, 0x0, r3}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000600)=""/143) r5 = signalfd(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000700)=r5, 0x1) socketpair(0x11, 0x2, 0xffffffff, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000007c0)={0x4, &(0x7f0000000780)=[{0x3, 0x0, 0x3, 0x3292}, {0xfffe, 0xc0, 0x0, 0xb0}, {0xa4ac, 0x3, 0x1, 0x1000}, {0x9, 0x6, 0x7, 0x1}]}, 0x10) 2021/11/11 13:07:21 result hanged=false: [1208243ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110043 #0 [1208263ms] -> ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x20000000) #0 [1208263ms] <- ioctl$PERF_EVENT_IOC_QUERY_BPF=0xffffffffffffffff errno=9 cover=45 #0 [1208272ms] -> getrusage(0x0, 0x20000040) #0 [1208272ms] <- getrusage=0x0 errno=14 cover=102 #0 [1208272ms] -> read(0xffffffffffffffff, 0x20000100, 0x6d) #0 [1208273ms] <- read=0xffffffffffffffff errno=9 cover=47 #0 [1208273ms] -> io_uring_setup(0x1577, 0x20000180) #0 [1208275ms] <- io_uring_setup=0x3 errno=14 cover=4299 #0 [1208276ms] -> io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0x3, 0x7, 0x20000200, 0x1) #0 [1208278ms] <- io_uring_register$IORING_REGISTER_EVENTFD_ASYNC=0xffffffffffffffff errno=9 cover=284 #0 [1208278ms] -> setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x20000240, 0xa2) #0 [1208278ms] <- setsockopt$packet_buf=0xffffffffffffffff errno=9 cover=50 #0 [1208278ms] -> io_uring_register$IORING_REGISTER_EVENTFD(0x3, 0x4, 0x20000300, 0x1) #0 [1208282ms] <- io_uring_register$IORING_REGISTER_EVENTFD=0xffffffffffffffff errno=9 cover=325 #0 [1208282ms] -> pipe2$9p(0x20000340, 0x0) #0 [1208283ms] <- pipe2$9p=0x0 errno=14 cover=1169 #0 [1208283ms] -> openat(0xffffffffffffffff, 0x20000380, 0x200, 0x75) #0 [1208283ms] <- openat=0xffffffffffffffff errno=9 cover=723 #0 [1208283ms] -> read$eventfd(0xffffffffffffffff, 0x200003c0, 0x8) #0 [1208283ms] <- read$eventfd=0xffffffffffffffff errno=9 cover=47 #0 [1208283ms] -> ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x20000480) #0 [1208283ms] <- ioctl$sock_ipv6_tunnel_SIOCGETPRL=0xffffffffffffffff errno=9 cover=45 #0 [1208284ms] -> openat(0xffffffffffffffff, 0x200004c0, 0x0, 0x0) #0 [1208284ms] <- openat=0xffffffffffffffff errno=9 cover=711 #0 [1208284ms] -> write$eventfd(0xffffffffffffffff, 0x20000500, 0x8) #0 [1208284ms] <- write$eventfd=0xffffffffffffffff errno=9 cover=47 #0 [1208284ms] -> openat$bsg(0xffffffffffffff9c, 0x20000540, 0x492b02, 0x0) #0 [1208284ms] <- openat$bsg=0x6 errno=14 cover=3073 #0 [1208285ms] -> io_uring_setup(0x132a, 0x20000580) #0 [1208285ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=2580 #0 [1208285ms] -> semctl$IPC_STAT(0x0, 0x0, 0x2, 0x20000600) #0 [1208285ms] <- semctl$IPC_STAT=0x0 errno=22 cover=236 #0 [1208285ms] -> signalfd(0xffffffffffffffff, 0x0, 0x0) #0 [1208286ms] <- signalfd=0xffffffffffffffff errno=22 cover=34 #0 [1208286ms] -> io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x20000700, 0x1) #0 [1208286ms] <- io_uring_register$IORING_REGISTER_EVENTFD_ASYNC=0xffffffffffffffff errno=9 cover=46 #0 [1208286ms] -> socketpair(0x11, 0x2, 0xffffffff, 0x20000740) #0 [1208291ms] <- socketpair=0xffffffffffffffff errno=95 cover=4428 #0 [1208292ms] -> setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x200007c0, 0x10) #0 [1208292ms] <- setsockopt$packet_fanout_data=0xffffffffffffffff errno=9 cover=50 13:07:21 executing program 0: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0]}) getrusage(0x0, &(0x7f0000000040)) read(0xffffffffffffffff, &(0x7f0000000100)=""/109, 0x6d) r0 = io_uring_setup(0x1577, &(0x7f0000000180)={0x0, 0x3ef2, 0x8, 0x1, 0xc8}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000200), 0x1) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000240)="535a58af0baac06e1c26ef0210a3b3181dbce5bdc2e2a15497f9b495acaebdf94c0c924c0becd1ffcb18395534678ab63ac665b2fabb5a44fdffdd7eb6ead25b1a383ba01720d00b35c66d109f7420ad4b931f5c63192793849febdea7cf4045e25bb676db72010b2bfb0175f0e6a1e9184fe1d54441c6d1dd88707720dc074e8c6cdba6b77d0bb980461a07d6d358d986328042ce37f09620ca7b14a3451a305c5c", 0xa2) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300), 0x1) pipe2$9p(&(0x7f0000000340), 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x200, 0x75) read$eventfd(r1, &(0x7f00000003c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x9a, 0x6, 0x15, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x4, 0x7}}) r2 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) write$eventfd(r2, &(0x7f0000000500)=0x5, 0x8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x492b02, 0x0) r4 = io_uring_setup(0x132a, &(0x7f0000000580)={0x0, 0x8458, 0x4, 0x0, 0x1bd, 0x0, r3}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000600)=""/143) r5 = signalfd(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000700)=r5, 0x1) socketpair(0x11, 0x2, 0xffffffff, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000007c0)={0x4, &(0x7f0000000780)=[{0x3, 0x0, 0x3, 0x3292}, {0xfffe, 0xc0, 0x0, 0xb0}, {0xa4ac, 0x3, 0x1, 0x1000}, {0x9, 0x6, 0x7, 0x1}]}, 0x10) 2021/11/11 13:07:21 result hanged=false: [1208335ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110045 #0 [1208356ms] -> ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x20000000) #0 [1208356ms] <- ioctl$PERF_EVENT_IOC_QUERY_BPF=0xffffffffffffffff errno=9 cover=45 #0 [1208356ms] -> getrusage(0x0, 0x20000040) #0 [1208356ms] <- getrusage=0x0 errno=14 cover=102 #0 [1208356ms] -> read(0xffffffffffffffff, 0x20000100, 0x6d) #0 [1208356ms] <- read=0xffffffffffffffff errno=9 cover=47 #0 [1208356ms] -> io_uring_setup(0x1577, 0x20000180) #0 [1208365ms] <- io_uring_setup=0x3 errno=14 cover=4394 #0 [1208366ms] -> io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0x3, 0x7, 0x20000200, 0x1) #0 [1208368ms] <- io_uring_register$IORING_REGISTER_EVENTFD_ASYNC=0xffffffffffffffff errno=9 cover=284 #0 [1208369ms] -> setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x20000240, 0xa2) #0 [1208369ms] <- setsockopt$packet_buf=0xffffffffffffffff errno=9 cover=50 #0 [1208369ms] -> io_uring_register$IORING_REGISTER_EVENTFD(0x3, 0x4, 0x20000300, 0x1) #0 [1208372ms] <- io_uring_register$IORING_REGISTER_EVENTFD=0xffffffffffffffff errno=9 cover=284 #0 [1208372ms] -> pipe2$9p(0x20000340, 0x0) #0 [1208373ms] <- pipe2$9p=0x0 errno=14 cover=1299 #0 [1208373ms] -> openat(0xffffffffffffffff, 0x20000380, 0x200, 0x75) #0 [1208374ms] <- openat=0xffffffffffffffff errno=9 cover=740 #0 [1208374ms] -> read$eventfd(0xffffffffffffffff, 0x200003c0, 0x8) #0 [1208374ms] <- read$eventfd=0xffffffffffffffff errno=9 cover=47 #0 [1208375ms] -> ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x20000480) #0 [1208375ms] <- ioctl$sock_ipv6_tunnel_SIOCGETPRL=0xffffffffffffffff errno=9 cover=45 #0 [1208375ms] -> openat(0xffffffffffffffff, 0x200004c0, 0x0, 0x0) #0 [1208375ms] <- openat=0xffffffffffffffff errno=9 cover=725 #0 [1208376ms] -> write$eventfd(0xffffffffffffffff, 0x20000500, 0x8) #0 [1208376ms] <- write$eventfd=0xffffffffffffffff errno=9 cover=47 #0 [1208376ms] -> openat$bsg(0xffffffffffffff9c, 0x20000540, 0x492b02, 0x0) #0 [1208377ms] <- openat$bsg=0x6 errno=14 cover=2389 #0 [1208378ms] -> io_uring_setup(0x132a, 0x20000580) #0 [1208379ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=2696 #0 [1208380ms] -> semctl$IPC_STAT(0x0, 0x0, 0x2, 0x20000600) #0 [1208380ms] <- semctl$IPC_STAT=0x0 errno=22 cover=236 #0 [1208380ms] -> signalfd(0xffffffffffffffff, 0x0, 0x0) #0 [1208380ms] <- signalfd=0xffffffffffffffff errno=22 cover=34 #0 [1208380ms] -> io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x20000700, 0x1) #0 [1208380ms] <- io_uring_register$IORING_REGISTER_EVENTFD_ASYNC=0xffffffffffffffff errno=9 cover=46 #0 [1208381ms] -> socketpair(0x11, 0x2, 0xffffffff, 0x20000740) #0 [1208394ms] <- socketpair=0xffffffffffffffff errno=95 cover=4394 #0 [1208395ms] -> setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x200007c0, 0x10) #0 [1208395ms] <- setsockopt$packet_fanout_data=0xffffffffffffffff errno=9 cover=50 2021/11/11 13:07:21 result hanged=false: 2021/11/11 13:07:21 added new input for call #3 io_uring_setup to corpus: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0]}) getrusage(0x0, &(0x7f0000000040)) read(0xffffffffffffffff, &(0x7f0000000100)=""/109, 0x6d) r0 = io_uring_setup(0x1577, &(0x7f0000000180)={0x0, 0x3ef2, 0x8, 0x1, 0xc8}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000200), 0x1) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000240)="535a58af0baac06e1c26ef0210a3b3181dbce5bdc2e2a15497f9b495acaebdf94c0c924c0becd1ffcb18395534678ab63ac665b2fabb5a44fdffdd7eb6ead25b1a383ba01720d00b35c66d109f7420ad4b931f5c63192793849febdea7cf4045e25bb676db72010b2bfb0175f0e6a1e9184fe1d54441c6d1dd88707720dc074e8c6cdba6b77d0bb980461a07d6d358d986328042ce37f09620ca7b14a3451a305c5c", 0xa2) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300), 0x1) pipe2$9p(&(0x7f0000000340), 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x200, 0x75) read$eventfd(r1, &(0x7f00000003c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x9a, 0x6, 0x15, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x4, 0x7}}) r2 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) write$eventfd(r2, &(0x7f0000000500)=0x5, 0x8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x492b02, 0x0) r4 = io_uring_setup(0x132a, &(0x7f0000000580)={0x0, 0x8458, 0x4, 0x0, 0x1bd, 0x0, r3}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000600)=""/143) r5 = signalfd(r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000700)=r5, 0x1) socketpair(0x11, 0x2, 0xffffffff, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000007c0)={0x4, &(0x7f0000000780)=[{0x3, 0x0, 0x3, 0x3292}, {0xfffe, 0xc0, 0x0, 0xb0}, {0xa4ac, 0x3, 0x1, 0x1000}, {0x9, 0x6, 0x7, 0x1}]}, 0x10) 13:07:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) [1208440ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110047 #0 [1208459ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [1208460ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=6300 #0 [1208465ms] -> setsockopt$bt_BT_FLUSHABLE(0x4, 0x112, 0x8, 0x0, 0x0) #0 [1208465ms] <- setsockopt$bt_BT_FLUSHABLE=0xffffffffffffffff errno=92 cover=113 enabling collider #0 [1208467ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [1208467ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=5480 2021/11/11 13:07:22 result hanged=false: 13:07:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 2021/11/11 13:07:22 #0: triaging type=7 2021/11/11 13:07:22 triaging input for call #1 setsockopt$bt_BT_FLUSHABLE (new signal=1) [1208509ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110049 #0 [1208530ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [1208533ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=6228 #0 [1208535ms] -> setsockopt$bt_BT_FLUSHABLE(0x4, 0x112, 0x8, 0x0, 0x0) #0 [1208535ms] <- setsockopt$bt_BT_FLUSHABLE=0xffffffffffffffff errno=92 cover=113 13:07:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 2021/11/11 13:07:22 result hanged=false: [1208579ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110051 #0 [1208600ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [1208601ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=6245 #0 [1208603ms] -> setsockopt$bt_BT_FLUSHABLE(0x4, 0x112, 0x8, 0x0, 0x0) #0 [1208603ms] <- setsockopt$bt_BT_FLUSHABLE=0xffffffffffffffff errno=92 cover=113 13:07:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 2021/11/11 13:07:22 result hanged=false: [1208650ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110053 #0 [1208675ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [1208676ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=6296 #0 [1208678ms] -> setsockopt$bt_BT_FLUSHABLE(0x4, 0x112, 0x8, 0x0, 0x0) #0 [1208678ms] <- setsockopt$bt_BT_FLUSHABLE=0xffffffffffffffff errno=92 cover=113 2021/11/11 13:07:22 result hanged=false: 2021/11/11 13:07:22 added new input for call #1 setsockopt$bt_BT_FLUSHABLE to corpus: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 13:07:22 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000001600), 0x1e1000, 0x0) [1208725ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110055 #0 [1208748ms] -> openat$nvram(0xffffffffffffff9c, 0x20001600, 0x1e1000, 0x0) #0 [1208748ms] <- openat$nvram=0x3 errno=14 cover=1118 enabling collider #0 [1208750ms] -> openat$nvram(0xffffffffffffff9c, 0x20001600, 0x1e1000, 0x0) #0 [1208750ms] <- openat$nvram=0x3 errno=14 cover=1119 13:07:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x79a}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) 2021/11/11 13:07:22 result hanged=false: [1208796ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110057 #0 [1208816ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1208816ms] <- perf_event_open=0x3 errno=14 cover=4240 #0 [1208818ms] -> modify_ldt$write(0x1, 0x20000140, 0x10) #0 [1208822ms] <- modify_ldt$write=0x0 errno=14 cover=23608 #0 [1208829ms] -> modify_ldt$write(0x1, 0x20000080, 0x10) #0 [1208830ms] <- modify_ldt$write=0x0 errno=14 cover=7716 enabling collider #0 [1208831ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1208832ms] <- perf_event_open=0x3 errno=14 cover=4213 #0 [1208832ms] -> modify_ldt$write(0x1, 0x20000140, 0x10) #0 [1208833ms] <- modify_ldt$write=0x0 errno=14 cover=3571 pthread_create failed (errno 11) 2021/11/11 13:07:22 result hanged=false: 13:07:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x79a}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) 2021/11/11 13:07:22 #0: triaging type=7 2021/11/11 13:07:22 triaging input for call #2 modify_ldt$write (new signal=10) [1208917ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110159 #0 [1208940ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1208941ms] <- perf_event_open=0x3 errno=14 cover=4267 #0 [1208943ms] -> modify_ldt$write(0x1, 0x20000140, 0x10) #0 [1208943ms] <- modify_ldt$write=0x0 errno=14 cover=2778 #0 [1208943ms] -> modify_ldt$write(0x1, 0x20000080, 0x10) #0 [1208944ms] <- modify_ldt$write=0x0 errno=14 cover=3452 13:07:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x79a}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) 2021/11/11 13:07:22 result hanged=false: [1208988ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110161 #0 [1209008ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1209008ms] <- perf_event_open=0x3 errno=14 cover=4213 #0 [1209009ms] -> modify_ldt$write(0x1, 0x20000140, 0x10) #0 [1209009ms] <- modify_ldt$write=0x0 errno=14 cover=2950 #0 [1209010ms] -> modify_ldt$write(0x1, 0x20000080, 0x10) #0 [1209011ms] <- modify_ldt$write=0x0 errno=14 cover=3754 13:07:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x79a}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) 2021/11/11 13:07:22 result hanged=false: [1209055ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110163 #0 [1209074ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1209074ms] <- perf_event_open=0x3 errno=14 cover=4213 #0 [1209075ms] -> modify_ldt$write(0x1, 0x20000140, 0x10) #0 [1209075ms] <- modify_ldt$write=0x0 errno=14 cover=2749 #0 [1209075ms] -> modify_ldt$write(0x1, 0x20000080, 0x10) #0 [1209076ms] <- modify_ldt$write=0x0 errno=14 cover=3640 2021/11/11 13:07:22 result hanged=false: 2021/11/11 13:07:22 added new input for call #2 modify_ldt$write to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x79a}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) 13:07:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x79a}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) 2021/11/11 13:07:22 #0: triaging type=7 2021/11/11 13:07:22 triaging input for call #1 modify_ldt$write (new signal=3) [1209126ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110165 #0 [1209146ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1209148ms] <- perf_event_open=0x3 errno=14 cover=4249 #0 [1209150ms] -> modify_ldt$write(0x1, 0x20000140, 0x10) #0 [1209151ms] <- modify_ldt$write=0x0 errno=14 cover=2789 #0 [1209152ms] -> modify_ldt$write(0x1, 0x20000080, 0x10) #0 [1209153ms] <- modify_ldt$write=0x0 errno=14 cover=3464 13:07:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x79a}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) 2021/11/11 13:07:22 result hanged=false: [1209201ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110167 #0 [1209223ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1209224ms] <- perf_event_open=0x3 errno=14 cover=4224 #0 [1209224ms] -> modify_ldt$write(0x1, 0x20000140, 0x10) #0 [1209225ms] <- modify_ldt$write=0x0 errno=14 cover=2814 #0 [1209227ms] -> modify_ldt$write(0x1, 0x20000080, 0x10) #0 [1209228ms] <- modify_ldt$write=0x0 errno=14 cover=3526 2021/11/11 13:07:22 result hanged=false: 13:07:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x79a}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) [1209276ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110169 #0 [1209297ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1209298ms] <- perf_event_open=0x3 errno=14 cover=4277 #0 [1209300ms] -> modify_ldt$write(0x1, 0x20000140, 0x10) #0 [1209300ms] <- modify_ldt$write=0x0 errno=14 cover=2763 #0 [1209301ms] -> modify_ldt$write(0x1, 0x20000080, 0x10) #0 [1209302ms] <- modify_ldt$write=0x0 errno=14 cover=3554 2021/11/11 13:07:22 result hanged=false: 2021/11/11 13:07:22 added new input for call #1 modify_ldt$write to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x79a}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) 13:07:22 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x1c) [1209351ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110171 #0 [1209374ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [1209374ms] <- socket$inet6_udplite=0x3 errno=14 cover=1657 #0 [1209375ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [1209375ms] <- connect$inet6=0xffffffffffffffff errno=101 cover=1407 enabling collider #0 [1209376ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [1209376ms] <- socket$inet6_udplite=0x3 errno=14 cover=1754 #0 [1209376ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [1209376ms] <- connect$inet6=0xffffffffffffffff errno=9 cover=47 2021/11/11 13:07:22 result hanged=false: 2021/11/11 13:07:22 #0: triaging type=7 13:07:22 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x1c) 2021/11/11 13:07:22 triaging input for call #1 connect$inet6 (new signal=3) [1209422ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110173 #0 [1209443ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [1209444ms] <- socket$inet6_udplite=0x3 errno=14 cover=1657 #0 [1209446ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [1209446ms] <- connect$inet6=0xffffffffffffffff errno=101 cover=1407 13:07:22 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x1c) 2021/11/11 13:07:22 result hanged=false: [1209489ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110175 #0 [1209509ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [1209510ms] <- socket$inet6_udplite=0x3 errno=14 cover=1613 #0 [1209511ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [1209511ms] <- connect$inet6=0xffffffffffffffff errno=101 cover=1407 2021/11/11 13:07:23 result hanged=false: 13:07:23 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x1c) [1209558ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110177 #0 [1209581ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [1209581ms] <- socket$inet6_udplite=0x3 errno=14 cover=1668 #0 [1209582ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [1209582ms] <- connect$inet6=0xffffffffffffffff errno=101 cover=1407 2021/11/11 13:07:23 result hanged=false: 2021/11/11 13:07:23 added new input for call #1 connect$inet6 to corpus: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x1c) 13:07:23 executing program 0: syz_mount_image$iso9660(0x0, 0x0, 0x100000000, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)='\\', 0x1}], 0x0, &(0x7f0000000600)) 2021/11/11 13:07:23 poll: candidates=8 inputs=0 signal=0 [1209631ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110179 #0 [1209651ms] -> syz_mount_image$iso9660(0x0, 0x0, 0x100000000, 0x1, 0x20000440, 0x0, 0x20000600) SIGSEGV on (nil), skipping #0 [1209654ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=14 cover=9664 enabling collider #0 [1209663ms] -> syz_mount_image$iso9660(0x0, 0x0, 0x100000000, 0x1, 0x20000440, 0x0, 0x20000600) #0 [1209666ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=16 cover=6090 2021/11/11 13:07:23 result hanged=false: 2021/11/11 13:07:23 #0: triaging type=7 13:07:23 executing program 0: syz_mount_image$iso9660(0x0, 0x0, 0x100000000, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)='\\', 0x1}], 0x0, &(0x7f0000000600)) 2021/11/11 13:07:23 triaging input for call #0 syz_mount_image$iso9660 (new signal=2) [1209723ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110181 #0 [1209743ms] -> syz_mount_image$iso9660(0x0, 0x0, 0x100000000, 0x1, 0x20000440, 0x0, 0x20000600) SIGSEGV on (nil), skipping #0 [1209746ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=14 cover=14988 13:07:23 executing program 0: syz_mount_image$iso9660(0x0, 0x0, 0x100000000, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)='\\', 0x1}], 0x0, &(0x7f0000000600)) 2021/11/11 13:07:23 result hanged=false: [1209810ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110183 #0 [1209831ms] -> syz_mount_image$iso9660(0x0, 0x0, 0x100000000, 0x1, 0x20000440, 0x0, 0x20000600) SIGSEGV on (nil), skipping #0 [1209833ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=14 cover=9530 2021/11/11 13:07:23 result hanged=false: 13:07:23 executing program 0: syz_mount_image$iso9660(0x0, 0x0, 0x100000000, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)='\\', 0x1}], 0x0, &(0x7f0000000600)) [1209885ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110185 #0 [1209907ms] -> syz_mount_image$iso9660(0x0, 0x0, 0x100000000, 0x1, 0x20000440, 0x0, 0x20000600) SIGSEGV on (nil), skipping #0 [1209910ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=14 cover=9717 2021/11/11 13:07:23 result hanged=false: 2021/11/11 13:07:23 added new input for call #0 syz_mount_image$iso9660 to corpus: syz_mount_image$iso9660(0x0, 0x0, 0x100000000, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)='\\', 0x1}], 0x0, &(0x7f0000000600)) 13:07:23 executing program 0: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) [1209970ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110187 #0 [1209992ms] -> inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) #0 [1209992ms] <- inotify_add_watch=0xffffffffffffffff errno=22 cover=35 enabling collider #0 [1209992ms] -> inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) #0 [1209992ms] <- inotify_add_watch=0xffffffffffffffff errno=22 cover=35 13:07:23 executing program 0: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) 2021/11/11 13:07:23 result hanged=false: 2021/11/11 13:07:23 #0: triaging type=7 2021/11/11 13:07:23 triaging input for call #0 inotify_add_watch (new signal=1) [1210038ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110189 #0 [1210059ms] -> inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) #0 [1210060ms] <- inotify_add_watch=0xffffffffffffffff errno=22 cover=35 13:07:23 executing program 0: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) 2021/11/11 13:07:23 result hanged=false: [1210103ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110191 #0 [1210122ms] -> inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) #0 [1210124ms] <- inotify_add_watch=0xffffffffffffffff errno=22 cover=35 2021/11/11 13:07:23 result hanged=false: 13:07:23 executing program 0: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) [1210167ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110193 #0 [1210186ms] -> inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) #0 [1210186ms] <- inotify_add_watch=0xffffffffffffffff errno=22 cover=35 2021/11/11 13:07:23 result hanged=false: 2021/11/11 13:07:23 added new input for call #0 inotify_add_watch to corpus: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) 13:07:23 executing program 0: ustat(0x5, &(0x7f0000000000)) [1210239ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110195 #0 [1210264ms] -> ustat(0x5, 0x20000000) #0 [1210265ms] <- ustat=0x0 errno=14 cover=2879 enabling collider #0 [1210266ms] -> ustat(0x5, 0x20000000) #0 [1210266ms] <- ustat=0x0 errno=14 cover=148 13:07:23 executing program 0: ustat(0x5, &(0x7f0000000000)) 2021/11/11 13:07:23 result hanged=false: 2021/11/11 13:07:23 #0: triaging type=7 2021/11/11 13:07:23 triaging input for call #0 ustat (new signal=26) [1210309ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110197 #0 [1210330ms] -> ustat(0x5, 0x20000000) #0 [1210330ms] <- ustat=0x0 errno=14 cover=905 13:07:23 executing program 0: ustat(0x5, &(0x7f0000000000)) 2021/11/11 13:07:23 result hanged=false: [1210383ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110199 #0 [1210404ms] -> ustat(0x5, 0x20000000) #0 [1210405ms] <- ustat=0x0 errno=14 cover=919 13:07:23 executing program 0: ustat(0x5, &(0x7f0000000000)) 2021/11/11 13:07:23 result hanged=false: [1210451ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110201 #0 [1210470ms] -> ustat(0x5, 0x20000000) #0 [1210470ms] <- ustat=0x0 errno=14 cover=900 2021/11/11 13:07:24 result hanged=false: 2021/11/11 13:07:24 added new input for call #0 ustat to corpus: ustat(0x5, &(0x7f0000000000)) 13:07:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa43, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x84e00, 0x0) preadv2(r0, &(0x7f0000000400)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/229, 0xe5}], 0x3, 0x0, 0x0, 0x0) [1210528ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110203 #0 [1210553ms] -> openat(0xffffffffffffff9c, 0x20000100, 0xa43, 0x0) #0 [1210560ms] <- openat=0x3 errno=14 cover=7262 #0 [1210561ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [1210562ms] <- mount=0x0 errno=14 cover=2500 #0 [1210567ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x84e00, 0x0) #0 [1210587ms] <- openat=0x4 errno=14 cover=3661 #0 [1210588ms] -> preadv2(0x4, 0x20000400, 0x3, 0x0, 0x0, 0x0) #0 [1210588ms] <- preadv2=0xffffffffffffffff errno=22 cover=387 enabling collider #0 [1210590ms] -> openat(0xffffffffffffff9c, 0x20000100, 0xa43, 0x0) #0 [1210626ms] <- openat=0x3 errno=14 cover=3714 #0 [1210626ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [1210627ms] <- mount=0x0 errno=14 cover=2331 pthread_create failed (errno 11) 13:07:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa43, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x84e00, 0x0) preadv2(r0, &(0x7f0000000400)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/229, 0xe5}], 0x3, 0x0, 0x0, 0x0) 2021/11/11 13:07:24 result hanged=false: 2021/11/11 13:07:24 #0: triaging type=7 2021/11/11 13:07:24 triaging input for call #3 preadv2 (new signal=14) umount(./9318/file1) umount(./9318/file1) [1210734ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110305 #0 [1210759ms] -> openat(0xffffffffffffff9c, 0x20000100, 0xa43, 0x0) #0 [1210763ms] <- openat=0x3 errno=14 cover=7204 #0 [1210764ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [1210765ms] <- mount=0x0 errno=14 cover=2457 #0 [1210765ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x84e00, 0x0) #0 [1210784ms] <- openat=0x4 errno=14 cover=3462 #0 [1210785ms] -> preadv2(0x4, 0x20000400, 0x3, 0x0, 0x0, 0x0) #0 [1210785ms] <- preadv2=0xffffffffffffffff errno=22 cover=297 13:07:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa43, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x84e00, 0x0) preadv2(r0, &(0x7f0000000400)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/229, 0xe5}], 0x3, 0x0, 0x0, 0x0) 2021/11/11 13:07:24 result hanged=false: umount(./9319/file1) [1210851ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110307 #0 [1210870ms] -> openat(0xffffffffffffff9c, 0x20000100, 0xa43, 0x0) #0 [1210875ms] <- openat=0x3 errno=14 cover=7358 #0 [1210877ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [1210878ms] <- mount=0x0 errno=14 cover=2461 #0 [1210879ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x84e00, 0x0) #0 [1210896ms] <- openat=0x4 errno=14 cover=3432 #0 [1210897ms] -> preadv2(0x4, 0x20000400, 0x3, 0x0, 0x0, 0x0) #0 [1210897ms] <- preadv2=0xffffffffffffffff errno=22 cover=297 13:07:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa43, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x84e00, 0x0) preadv2(r0, &(0x7f0000000400)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/229, 0xe5}], 0x3, 0x0, 0x0, 0x0) 2021/11/11 13:07:24 result hanged=false: umount(./9320/file1) [1210947ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110309 #0 [1210967ms] -> openat(0xffffffffffffff9c, 0x20000100, 0xa43, 0x0) #0 [1210976ms] <- openat=0x3 errno=14 cover=7346 #0 [1210977ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [1210978ms] <- mount=0x0 errno=14 cover=2458 #0 [1210978ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x84e00, 0x0) #0 [1210994ms] <- openat=0x4 errno=14 cover=3337 #0 [1210995ms] -> preadv2(0x4, 0x20000400, 0x3, 0x0, 0x0, 0x0) #0 [1210995ms] <- preadv2=0xffffffffffffffff errno=22 cover=297 2021/11/11 13:07:24 result hanged=false: 2021/11/11 13:07:24 added new input for call #3 preadv2 to corpus: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa43, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x84e00, 0x0) preadv2(r0, &(0x7f0000000400)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/229, 0xe5}], 0x3, 0x0, 0x0, 0x0) 13:07:24 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="5c0b01fff83c", @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @remote}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) umount(./9321/file1) [1211045ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110311 #0 [1211064ms] -> syz_emit_ethernet(0x4a, 0x20000080, 0x0) aa aa aa aa aa aa 5c 0b 01 ff f8 3c 08 00 45 00 00 3c 00 00 00 00 00 33 39 ac ac 14 14 00 ac 14 14 bb 41 40 00 28 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 #0 [1211065ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=21709 enabling collider #0 [1211070ms] -> syz_emit_ethernet(0x4a, 0x20000080, 0x0) aa aa aa aa aa aa 5c 0b 01 ff f8 3c 08 00 45 00 00 3c 00 00 00 00 00 33 39 ac ac 14 14 00 ac 14 14 bb 41 40 00 28 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 #0 [1211071ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=21783 2021/11/11 13:07:24 result hanged=false: 13:07:24 executing program 0: clock_gettime(0xb, &(0x7f0000000900)) [1211122ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110313 #0 [1211152ms] -> clock_gettime(0xb, 0x20000900) #0 [1211152ms] <- clock_gettime=0x0 errno=14 cover=790 enabling collider #0 [1211153ms] -> clock_gettime(0xb, 0x20000900) #0 [1211153ms] <- clock_gettime=0x0 errno=14 cover=77 13:07:24 executing program 0: clock_gettime(0xb, &(0x7f0000000900)) 2021/11/11 13:07:24 result hanged=false: 2021/11/11 13:07:24 #0: triaging type=7 2021/11/11 13:07:24 triaging input for call #0 clock_gettime (new signal=4) [1211202ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110315 #0 [1211222ms] -> clock_gettime(0xb, 0x20000900) #0 [1211224ms] <- clock_gettime=0x0 errno=14 cover=790 2021/11/11 13:07:24 result hanged=false: 13:07:24 executing program 0: clock_gettime(0xb, &(0x7f0000000900)) [1211268ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110317 #0 [1211287ms] -> clock_gettime(0xb, 0x20000900) #0 [1211288ms] <- clock_gettime=0x0 errno=14 cover=790 13:07:24 executing program 0: clock_gettime(0xb, &(0x7f0000000900)) 2021/11/11 13:07:24 result hanged=false: [1211337ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110319 #0 [1211360ms] -> clock_gettime(0xb, 0x20000900) #0 [1211360ms] <- clock_gettime=0x0 errno=14 cover=779 2021/11/11 13:07:24 result hanged=false: 2021/11/11 13:07:24 added new input for call #0 clock_gettime to corpus: clock_gettime(0xb, &(0x7f0000000900)) 13:07:24 executing program 0: syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_mr_vif\x00') [1211404ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110321 #0 [1211429ms] -> syz_open_procfs(0x0, 0x200002c0) #0 [1211431ms] <- syz_open_procfs=0x3 errno=13 cover=7356 enabling collider #0 [1211433ms] -> syz_open_procfs(0x0, 0x200002c0) #0 [1211434ms] <- syz_open_procfs=0x3 errno=13 cover=6907 13:07:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) 2021/11/11 13:07:24 result hanged=false: [1211483ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110323 #0 [1211504ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1211505ms] <- perf_event_open=0x3 errno=14 cover=3975 #0 [1211505ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [1211506ms] <- socket$inet_tcp=0x4 errno=14 cover=1721 #0 [1211506ms] -> setsockopt$inet_tcp_TCP_ULP(0x4, 0x6, 0x1f, 0x20000100, 0x4) #0 [1211523ms] <- setsockopt$inet_tcp_TCP_ULP=0xffffffffffffffff errno=2 cover=10560 enabling collider #0 [1211524ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1211524ms] <- perf_event_open=0x3 errno=14 cover=3830 #0 [1211524ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [1211525ms] <- socket$inet_tcp=0x4 errno=14 cover=1712 pthread_create failed (errno 11) 13:07:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000180)) 2021/11/11 13:07:25 result hanged=false: 2021/11/11 13:07:25 poll: candidates=8 inputs=0 signal=0 [1211604ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110425 #0 [1211624ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x200000c0) #0 [1211627ms] <- socketpair$unix=0x0 errno=14 cover=3599 #0 [1211628ms] -> getpeername$unix(0x4, 0x0, 0x20000180) #0 [1211628ms] <- getpeername$unix=0x0 errno=14 cover=94 enabling collider #0 [1211629ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x200000c0) #0 [1211629ms] <- socketpair$unix=0x0 errno=14 cover=2910 2021/11/11 13:07:25 result hanged=false: 13:07:25 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x5e033, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) [1211673ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110427 #0 [1211691ms] -> mmap(0x20000000, 0x1000, 0x0, 0x5e033, 0xffffffffffffffff, 0x0) #0 [1211692ms] <- mmap=0x20000000 errno=14 cover=2181 #0 [1211692ms] -> mbind(0x20000000, 0x3000, 0x0, 0x0, 0x0, 0x2) #0 [1211693ms] <- mbind=0x0 errno=14 cover=425 enabling collider #0 [1211693ms] -> mmap(0x20000000, 0x1000, 0x0, 0x5e033, 0xffffffffffffffff, 0x0) #0 [1211696ms] <- mmap=0x20000000 errno=14 cover=2723 13:07:25 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x5e033, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 2021/11/11 13:07:25 result hanged=false: 2021/11/11 13:07:25 #0: triaging type=7 2021/11/11 13:07:25 triaging input for call #1 mbind (new signal=9) [1211740ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110429 #0 [1211759ms] -> mmap(0x20000000, 0x1000, 0x0, 0x5e033, 0xffffffffffffffff, 0x0) #0 [1211759ms] <- mmap=0x20000000 errno=14 cover=2287 #0 [1211760ms] -> mbind(0x20000000, 0x3000, 0x0, 0x0, 0x0, 0x2) #0 [1211760ms] <- mbind=0x0 errno=14 cover=425 13:07:25 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x5e033, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 2021/11/11 13:07:25 result hanged=false: [1211808ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110431 #0 [1211827ms] -> mmap(0x20000000, 0x1000, 0x0, 0x5e033, 0xffffffffffffffff, 0x0) #0 [1211828ms] <- mmap=0x20000000 errno=14 cover=2254 #0 [1211830ms] -> mbind(0x20000000, 0x3000, 0x0, 0x0, 0x0, 0x2) #0 [1211830ms] <- mbind=0x0 errno=14 cover=603 13:07:25 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x5e033, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 2021/11/11 13:07:25 result hanged=false: [1211876ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110433 #0 [1211895ms] -> mmap(0x20000000, 0x1000, 0x0, 0x5e033, 0xffffffffffffffff, 0x0) #0 [1211896ms] <- mmap=0x20000000 errno=14 cover=2170 #0 [1211897ms] -> mbind(0x20000000, 0x3000, 0x0, 0x0, 0x0, 0x2) #0 [1211897ms] <- mbind=0x0 errno=14 cover=414 2021/11/11 13:07:25 result hanged=false: 2021/11/11 13:07:25 added new input for call #1 mbind to corpus: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x5e033, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 13:07:25 executing program 0: getgroups(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, &(0x7f0000000380), &(0x7f00000003c0)={0x101}, &(0x7f0000000440)={0x0, r0+10000000}, &(0x7f00000004c0)={&(0x7f0000000480)={[0xfff]}, 0x8}) [1211953ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110435 #0 [1211973ms] -> getgroups(0x0, 0x0) #0 [1211973ms] <- getgroups=0x1 errno=14 cover=36 #0 [1211973ms] -> clock_gettime(0x0, 0x20000400) #0 [1211973ms] <- clock_gettime=0x0 errno=14 cover=811 #0 [1211973ms] -> pselect6(0x40, 0x20000340, 0x20000380, 0x200003c0, 0x20000440, 0x200004c0) #0 [1211974ms] <- pselect6=0xffffffffffffffff errno=9 cover=325 enabling collider #0 [1211974ms] -> getgroups(0x0, 0x0) #0 [1211974ms] <- getgroups=0x1 errno=14 cover=36 #0 [1211974ms] -> clock_gettime(0x0, 0x20000400) #0 [1211974ms] <- clock_gettime=0x0 errno=14 cover=75 pthread_create failed (errno 11) 13:07:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40010, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) 2021/11/11 13:07:25 result hanged=false: [1212058ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110537 #0 [1212079ms] -> syz_mount_image$ext4(0x20000040, 0x20000100, 0x40010, 0x4, 0x20000200, 0x0, 0x20012c00) syz_mount_image: size=262160 segs=4 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1260.989144] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [1212097ms] <- syz_mount_image$ext4=0x5 errno=0 cover=55589 #0 [1212098ms] -> chdir(0x20000040) #0 [1212098ms] <- chdir=0x0 errno=14 cover=675 #0 [1212099ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x882c2, 0x0) #0 [1212100ms] <- openat=0x3 errno=14 cover=11201 #0 [1212101ms] -> mkdir(0x200002c0, 0x0) #0 [1212101ms] <- mkdir=0x0 errno=14 cover=8323 enabling collider #0 [1212102ms] -> syz_mount_image$ext4(0x20000040, 0x20000100, 0x40010, 0x4, 0x20000200, 0x0, 0x20012c00) #0 [1212105ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=8540 #0 [1212105ms] -> chdir(0x20000040) #0 [1212105ms] <- chdir=0xffffffffffffffff errno=2 cover=945 pthread_create failed (errno 11) 2021/11/11 13:07:25 result hanged=false: 2021/11/11 13:07:25 #0: triaging type=7 13:07:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40010, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) 2021/11/11 13:07:25 triaging input for call #3 mkdir (new signal=5) umount(./9335/file0) [1212225ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110639 #0 [1212247ms] -> syz_mount_image$ext4(0x20000040, 0x20000100, 0x40010, 0x4, 0x20000200, 0x0, 0x20012c00) syz_mount_image: size=262160 segs=4 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1261.158175] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [1212265ms] <- syz_mount_image$ext4=0x5 errno=0 cover=52972 #0 [1212277ms] -> chdir(0x20000040) #0 [1212277ms] <- chdir=0x0 errno=14 cover=665 #0 [1212277ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x882c2, 0x0) #0 [1212278ms] <- openat=0x3 errno=14 cover=10140 #0 [1212279ms] -> mkdir(0x200002c0, 0x0) #0 [1212279ms] <- mkdir=0x0 errno=14 cover=5993 13:07:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40010, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) 2021/11/11 13:07:25 result hanged=false: umount(./9336/file0) [1212347ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110641 #0 [1212368ms] -> syz_mount_image$ext4(0x20000040, 0x20000100, 0x40010, 0x4, 0x20000200, 0x0, 0x20012c00) syz_mount_image: size=262160 segs=4 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1261.282180] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [1212389ms] <- syz_mount_image$ext4=0x5 errno=0 cover=51253 #0 [1212405ms] -> chdir(0x20000040) #0 [1212405ms] <- chdir=0x0 errno=14 cover=675 #0 [1212406ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x882c2, 0x0) #0 [1212407ms] <- openat=0x3 errno=14 cover=10285 #0 [1212409ms] -> mkdir(0x200002c0, 0x0) #0 [1212410ms] <- mkdir=0x0 errno=14 cover=6029 13:07:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40010, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) 2021/11/11 13:07:25 result hanged=false: umount(./9337/file0) [1212481ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110643 #0 [1212501ms] -> syz_mount_image$ext4(0x20000040, 0x20000100, 0x40010, 0x4, 0x20000200, 0x0, 0x20012c00) syz_mount_image: size=262160 segs=4 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1261.413183] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [1212520ms] <- syz_mount_image$ext4=0x5 errno=0 cover=54750 #0 [1212535ms] -> chdir(0x20000040) #0 [1212535ms] <- chdir=0x0 errno=14 cover=664 #0 [1212539ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x882c2, 0x0) #0 [1212540ms] <- openat=0x3 errno=14 cover=10391 #0 [1212542ms] -> mkdir(0x200002c0, 0x0) #0 [1212543ms] <- mkdir=0x0 errno=14 cover=6152 2021/11/11 13:07:26 result hanged=false: 2021/11/11 13:07:26 added new input for call #3 mkdir to corpus: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40010, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) 13:07:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x27, 0x0, &(0x7f0000000700)) umount(./9338/file0) [1212618ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110645 #0 [1212644ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1212645ms] <- socket$nl_generic=0x3 errno=14 cover=1423 #0 [1212646ms] -> getsockopt$IP_SET_OP_GET_BYNAME(0x3, 0x1, 0x27, 0x0, 0x20000700) #0 [1212647ms] <- getsockopt$IP_SET_OP_GET_BYNAME=0x0 errno=14 cover=107 enabling collider #0 [1212647ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1212648ms] <- socket$nl_generic=0x3 errno=14 cover=1422 2021/11/11 13:07:26 result hanged=false: 2021/11/11 13:07:26 #0: triaging type=7 2021/11/11 13:07:26 triaging input for call #1 getsockopt$IP_SET_OP_GET_BYNAME (new signal=2) 13:07:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x27, 0x0, &(0x7f0000000700)) [1212691ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110647 #0 [1212710ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1212711ms] <- socket$nl_generic=0x3 errno=14 cover=1423 #0 [1212713ms] -> getsockopt$IP_SET_OP_GET_BYNAME(0x3, 0x1, 0x27, 0x0, 0x20000700) #0 [1212713ms] <- getsockopt$IP_SET_OP_GET_BYNAME=0x0 errno=14 cover=107 2021/11/11 13:07:26 result hanged=false: 13:07:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x27, 0x0, &(0x7f0000000700)) [1212766ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110649 #0 [1212791ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1212791ms] <- socket$nl_generic=0x3 errno=14 cover=1434 #0 [1212793ms] -> getsockopt$IP_SET_OP_GET_BYNAME(0x3, 0x1, 0x27, 0x0, 0x20000700) #0 [1212793ms] <- getsockopt$IP_SET_OP_GET_BYNAME=0x0 errno=14 cover=107 13:07:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x27, 0x0, &(0x7f0000000700)) 2021/11/11 13:07:26 result hanged=false: [1212836ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110651 #0 [1212858ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1212859ms] <- socket$nl_generic=0x3 errno=14 cover=1412 #0 [1212860ms] -> getsockopt$IP_SET_OP_GET_BYNAME(0x3, 0x1, 0x27, 0x0, 0x20000700) #0 [1212860ms] <- getsockopt$IP_SET_OP_GET_BYNAME=0x0 errno=14 cover=107 2021/11/11 13:07:26 result hanged=false: 2021/11/11 13:07:26 added new input for call #1 getsockopt$IP_SET_OP_GET_BYNAME to corpus: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x27, 0x0, &(0x7f0000000700)) 13:07:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000600)="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", 0x200}], 0x1, 0x0, 0x0, 0x1) [1212911ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110653 #0 [1212935ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [1212942ms] <- openat=0x3 errno=14 cover=7329 #0 [1212943ms] -> pwritev2(0x3, 0x20000080, 0x1, 0x0, 0x0, 0x1) #0 [1212949ms] <- pwritev2=0x200 errno=14 cover=10628 enabling collider #0 [1212949ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [1212950ms] <- openat=0xffffffffffffffff errno=17 cover=1094 #0 [1212951ms] -> pwritev2(0x3, 0x2000008013:07:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000600)="90dc2690b6b38fe87768ab2b9549e559d7835af34ae2d5cac69b500606eddd872f23a952e0a570455f81937b6069800a99168d37ad22b4ba3c4baf883e02cfbc3455d644e6972cde3589f582dd201550bfeb9d13d4c7fdd65c5b364eaa90512f8aa782ca7475622f89df213cc057fe9d0afb79a17d6730845666609b38366edeb515e981cdec3f49a3a8f4530de3284a079b26b6de6b7f38167f38a1237bec3404434df92ddc9d78a33fb70c680042f1510581a234fd925395b4c85e33463371b897ed96507c4baa3f1d8645d853debe71bbee6725eeb0c7f0306729c36cd22d6372a7a7374af3136126844b57f3adedf9f5a4c0e7cc57e850e92c83c6c3120a4b4fc95e5d2b0e083e98cce0406997876574bbdcbde837bc6ce19f5152432de975e7928f2ef92bba2ce222190d160a7596f00b4ed87900b2a660950243509fad74db1f7f099601e506a81599ec49e123d2d4a9a9531ec985b66d645aadadd51c627cf04e418a2b8d71aa96b0cee7e52a29fb8fd38f077d503aec7fe8c9a168bc9d9143bff4f848aa395c8b18445a441e832f281df7c02a3cf5d389e7044f88dbb05714a996a4f3514ba105c4abda4e38bb011845f4d275240492ba4486d5d6bcf231bd6e82f08da883c986a3fa436e0fc1f8c404cd86e80ffe17b781ef7319e5998a2d004999bfe0323eaa5335502ff2b1389194cfae743eebec6a894a6e66ed", 0x200}], 0x1, 0x0, 0x0, 0x1) 2021/11/11 13:07:26 result hanged=false: 2021/11/11 13:07:26 #0: triaging type=7 2021/11/11 13:07:26 triaging input for call #1 pwritev2 (new signal=37) [1213001ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110655 #0 [1213022ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [1213029ms] <- openat=0x3 errno=14 cover=7417 #0 [1213031ms] -> pwritev2(0x3, 0x20000080, 0x1, 0x0, 0x0, 0x1) #0 [1213035ms] <- pwritev2=0x200 errno=14 cover=9313 2021/11/11 13:07:26 result hanged=false: 13:07:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000600)="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", 0x200}], 0x1, 0x0, 0x0, 0x1) [1213086ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110657 #0 [1213114ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [1213118ms] <- openat=0x3 errno=14 cover=7293 #0 [1213119ms] -> pwritev2(0x3, 0x20000080, 0x1, 0x0, 0x0, 0x1) #0 [1213124ms] <- pwritev2=0x200 errno=14 cover=9230 13:07:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000600)="90dc2690b6b38fe87768ab2b9549e559d7835af34ae2d5cac69b500606eddd872f23a952e0a570455f81937b6069800a99168d37ad22b4ba3c4baf883e02cfbc3455d644e6972cde3589f582dd201550bfeb9d13d4c7fdd65c5b364eaa90512f8aa782ca7475622f89df213cc057fe9d0afb79a17d6730845666609b38366edeb515e981cdec3f49a3a8f4530de3284a079b26b6de6b7f38167f38a1237bec3404434df92ddc9d78a33fb70c680042f1510581a234fd925395b4c85e33463371b897ed96507c4baa3f1d8645d853debe71bbee6725eeb0c7f0306729c36cd22d6372a7a7374af3136126844b57f3adedf9f5a4c0e7cc57e850e92c83c6c3120a4b4fc95e5d2b0e083e98cce0406997876574bbdcbde837bc6ce19f5152432de975e7928f2ef92bba2ce222190d160a7596f00b4ed87900b2a660950243509fad74db1f7f099601e506a81599ec49e123d2d4a9a9531ec985b66d645aadadd51c627cf04e418a2b8d71aa96b0cee7e52a29fb8fd38f077d503aec7fe8c9a168bc9d9143bff4f848aa395c8b18445a441e832f281df7c02a3cf5d389e7044f88dbb05714a996a4f3514ba105c4abda4e38bb011845f4d275240492ba4486d5d6bcf231bd6e82f08da883c986a3fa436e0fc1f8c404cd86e80ffe17b781ef7319e5998a2d004999bfe0323eaa5335502ff2b1389194cfae743eebec6a894a6e66ed", 0x200}], 0x1, 0x0, 0x0, 0x1) 2021/11/11 13:07:26 result hanged=false: [1213174ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110659 #0 [1213194ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [1213200ms] <- openat=0x3 errno=14 cover=7457 #0 [1213201ms] -> pwritev2(0x3, 0x20000080, 0x1, 0x0, 0x0, 0x1) #0 [1213205ms] <- pwritev2=0x200 errno=14 cover=9130 2021/11/11 13:07:26 result hanged=false: 2021/11/11 13:07:26 added new input for call #1 pwritev2 to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000600)="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", 0x200}], 0x1, 0x0, 0x0, 0x1) 13:07:26 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, r2) r3 = getuid() setresuid(r2, r0, r3) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)) r4 = fork() ptrace(0x4207, 0x0) getpgrp(0x0) fcntl$setown(r1, 0x8, r4) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x10044001) [1213259ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110661 #0 [1213284ms] -> stat(0x20001cc0, 0x20001c00) #0 [1213285ms] <- stat=0x0 errno=14 cover=554 #0 [1213285ms] -> setresuid(0x41ed, 0x41ed, 0x0) #0 [1213285ms] <- setresuid=0x0 errno=14 cover=515 #0 [1213287ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1213287ms] <- socket$inet6_tcp=0x3 errno=14 cover=1799 #0 [1213288ms] -> stat(0x20001cc0, 0x20001c00) #0 [1213289ms] <- stat=0x0 errno=14 cover=551 #0 [1213289ms] -> setresuid(0x0, 0x41ed, 0x41ed) #0 [1213290ms] <- setresuid=0x0 errno=14 cover=529 #0 [1213290ms] -> getuid() #0 [1213290ms] <- getuid=0x0 errno=14 cover=43 #0 [1213290ms] -> setresuid(0x41ed, 0x41ed, 0x0) #0 [1213290ms] <- setresuid=0x0 errno=14 cover=526 #0 [1213291ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [1213291ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=318 #0 [1213291ms] -> connect$inet6(0x3, 0x20000000, 0x1c) pthread_create failed (errno 11) 2021/11/11 13:07:27 result hanged=false: 13:07:27 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, r2) r3 = getuid() setresuid(r2, r0, r3) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)) r4 = fork() ptrace(0x4207, 0x0) getpgrp(0x0) fcntl$setown(r1, 0x8, r4) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x10044001) 2021/11/11 13:07:27 #0: triaging type=7 2021/11/11 13:07:27 triaging input for call #4 setresuid (new signal=4) iptable filter/10: resetting iptable mangle/10: resetting [1214363ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110763 #0 [1214383ms] -> stat(0x20001cc0, 0x20001c00) #0 [1214383ms] <- stat=0x0 errno=14 cover=553 #0 [1214384ms] -> setresuid(0x41ed, 0x41ed, 0x0) #0 [1214384ms] <- setresuid=0x0 errno=14 cover=537 #0 [1214384ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1214384ms] <- socket$inet6_tcp=0x3 errno=14 cover=1712 #0 [1214384ms] -> stat(0x20001cc0, 0x20001c00) #0 [1214384ms] <- stat=0x0 errno=14 cover=567 #0 [1214384ms] -> setresuid(0x0, 0x41ed, 0x41ed) #0 [1214384ms] <- setresuid=0x0 errno=14 cover=395 #0 [1214385ms] -> getuid() #0 [1214385ms] <- getuid=0x0 errno=14 cover=43 #0 [1214385ms] -> setresuid(0x41ed, 0x41ed, 0x0) #0 [1214385ms] <- setresuid=0x0 errno=14 cover=439 #0 [1214385ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [1214385ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=318 #0 [1214385ms] -> connect$inet6(0x3, 0x20000000, 0x1c) 2021/11/11 13:07:28 poll: candidates=0 inputs=0 signal=0 pthread_create failed (errno 11) 13:07:28 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, r2) r3 = getuid() setresuid(r2, r0, r3) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)) r4 = fork() ptrace(0x4207, 0x0) getpgrp(0x0) fcntl$setown(r1, 0x8, r4) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x10044001) 2021/11/11 13:07:28 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [1215472ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110865 #0 [1215492ms] -> stat(0x20001cc0, 0x20001c00) #0 [1215492ms] <- stat=0x0 errno=14 cover=552 #0 [1215492ms] -> setresuid(0x41ed, 0x41ed, 0x0) #0 [1215492ms] <- setresuid=0x0 errno=14 cover=562 #0 [1215493ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1215493ms] <- socket$inet6_tcp=0x3 errno=14 cover=1784 #0 [1215493ms] -> stat(0x20001cc0, 0x20001c00) #0 [1215493ms] <- stat=0x0 errno=14 cover=551 #0 [1215493ms] -> setresuid(0x0, 0x41ed, 0x41ed) #0 [1215493ms] <- setresuid=0x0 errno=14 cover=395 #0 [1215493ms] -> getuid() #0 [1215493ms] <- getuid=0x0 errno=14 cover=43 #0 [1215494ms] -> setresuid(0x41ed, 0x41ed, 0x0) #0 [1215494ms] <- setresuid=0x0 errno=14 cover=439 #0 [1215494ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [1215494ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=318 #0 [1215494ms] -> connect$inet6(0x3, 0x20000000, 0x1c) pthread_create failed (errno 11) 13:07:30 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, r2) r3 = getuid() setresuid(r2, r0, r3) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)) r4 = fork() ptrace(0x4207, 0x0) getpgrp(0x0) fcntl$setown(r1, 0x8, r4) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x10044001) 2021/11/11 13:07:30 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [1216563ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110967 #0 [1216579ms] -> stat(0x20001cc0, 0x20001c00) #0 [1216580ms] <- stat=0x0 errno=14 cover=543 #0 [1216582ms] -> setresuid(0x41ed, 0x41ed, 0x0) #0 [1216582ms] <- setresuid=0x0 errno=14 cover=515 #0 [1216582ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1216583ms] <- socket$inet6_tcp=0x3 errno=14 cover=1751 #0 [1216583ms] -> stat(0x20001cc0, 0x20001c00) #0 [1216583ms] <- stat=0x0 errno=14 cover=552 #0 [1216583ms] -> setresuid(0x0, 0x41ed, 0x41ed) #0 [1216584ms] <- setresuid=0x0 errno=14 cover=439 #0 [1216584ms] -> getuid() #0 [1216584ms] <- getuid=0x0 errno=14 cover=43 #0 [1216584ms] -> setresuid(0x41ed, 0x41ed, 0x0) #0 [1216584ms] <- setresuid=0x0 errno=14 cover=428 #0 [1216584ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [1216584ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=318 #0 [1216584ms] -> connect$inet6(0x3, 0x20000000, 0x1c) pthread_create failed (errno 11) 2021/11/11 13:07:31 result hanged=false: 2021/11/11 13:07:31 added new input for call #4 setresuid to corpus: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, r2) r3 = getuid() setresuid(r2, r0, r3) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)) r4 = fork() ptrace(0x4207, 0x0) getpgrp(0x0) fcntl$setown(r1, 0x8, r4) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x10044001) 13:07:31 executing program 0: setgroups(0xff4a, 0x0) iptable filter/10: resetting iptable mangle/10: resetting [1217657ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111069 #0 [1217672ms] -> setgroups(0xff4a, 0x0) #0 [1217672ms] <- setgroups=0xffffffffffffffff errno=14 cover=484 enabling collider #0 [1217673ms] -> setgroups(0xff4a, 0x0) #0 [1217673ms] <- setgroups=0xffffffffffffffff errno=14 cover=474 13:07:31 executing program 0: setgroups(0xff4a, 0x0) 2021/11/11 13:07:31 result hanged=false: 2021/11/11 13:07:31 #0: triaging type=7 2021/11/11 13:07:31 triaging input for call #0 setgroups (new signal=8) [1217711ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111071 #0 [1217726ms] -> setgroups(0xff4a, 0x0) #0 [1217726ms] <- setgroups=0xffffffffffffffff errno=14 cover=473 13:07:31 executing program 0: setgroups(0xff4a, 0x0) 2021/11/11 13:07:31 result hanged=false: [1217767ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111073 #0 [1217782ms] -> setgroups(0xff4a, 0x0) #0 [1217782ms] <- setgroups=0xffffffffffffffff errno=14 cover=484 2021/11/11 13:07:31 result hanged=false: 13:07:31 executing program 0: setgroups(0xff4a, 0x0) [1217823ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111075 #0 [1217842ms] -> setgroups(0xff4a, 0x0) #0 [1217843ms] <- setgroups=0xffffffffffffffff errno=14 cover=473 2021/11/11 13:07:31 result hanged=false: 2021/11/11 13:07:31 added new input for call #0 setgroups to corpus: setgroups(0xff4a, 0x0) 13:07:31 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000002480), r0) 2021/11/11 13:07:31 poll: candidates=8 inputs=0 signal=0 [1217882ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111077 #0 [1217898ms] -> openat$nvram(0xffffffffffffff9c, 0x200019c0, 0x0, 0x0) #0 [1217898ms] <- openat$nvram=0x3 errno=14 cover=1128 #0 [1217899ms] -> syz_genetlink_get_family_id$devlink(0x20002480, 0x3) syz_genetlink_get_family_id(devlink, 3) netlink_send_ext: short netlink write: -1/32 errno=88 netlink: failed to get family id for devlink: Socket operation on non-socket syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [1217899ms] <- syz_genetlink_get_family_id$devlink=0xffffffffffffffff errno=88 cover=1618 enabling collider #0 [1217905ms] -> openat$nvram(0xffffffffffffff9c, 0x200019c0, 0x0, 0x0) #0 [1217905ms] <- openat$nvram=0x3 errno=14 cover=1083 #0 [1217907ms] -> syz_genetlink_get_family_id$devlink(0x20002480, 13:07:31 executing program 0: munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) get_mempolicy(0x0, &(0x7f00000003c0), 0x2, &(0x7f0000ffb000/0x2000)=nil, 0x3) 2021/11/11 13:07:31 result hanged=false: [1217944ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111079 #0 [1217959ms] -> munmap(0x20ffa000, 0x4000) #0 [1217959ms] <- munmap=0x0 errno=14 cover=907 #0 [1217960ms] -> get_mempolicy(0x0, 0x200003c0, 0x2, 0x20ffb000, 0x3) #0 [1217960ms] <- get_mempolicy=0xffffffffffffffff errno=14 cover=84 enabling collider #0 [1217960ms] -> munmap(0x20ffa000, 0x4000) #0 [1217960ms] <- munmap=0x0 errno=14 cover=94 #0 [1217960ms] -> get_mempolicy(0x0, 13:07:31 executing program 0: munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) get_mempolicy(0x0, &(0x7f00000003c0), 0x2, &(0x7f0000ffb000/0x2000)=nil, 0x3) 2021/11/11 13:07:31 result hanged=false: 2021/11/11 13:07:31 #0: triaging type=7 2021/11/11 13:07:31 triaging input for call #1 get_mempolicy (new signal=4) [1217999ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111081 #0 [1218029ms] -> munmap(0x20ffa000, 0x4000) #0 [1218029ms] <- munmap=0x0 errno=14 cover=917 #0 [1218029ms] -> get_mempolicy(0x0, 0x200003c0, 0x2, 0x20ffb000, 0x3) #0 [1218029ms] <- get_mempolicy=0xffffffffffffffff errno=14 cover=84 13:07:31 executing program 0: munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) get_mempolicy(0x0, &(0x7f00000003c0), 0x2, &(0x7f0000ffb000/0x2000)=nil, 0x3) 2021/11/11 13:07:31 result hanged=false: [1218076ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111083 #0 [1218096ms] -> munmap(0x20ffa000, 0x4000) #0 [1218096ms] <- munmap=0x0 errno=14 cover=963 #0 [1218097ms] -> get_mempolicy(0x0, 0x200003c0, 0x2, 0x20ffb000, 0x3) #0 [1218097ms] <- get_mempolicy=0xffffffffffffffff errno=14 cover=84 13:07:31 executing program 0: munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) get_mempolicy(0x0, &(0x7f00000003c0), 0x2, &(0x7f0000ffb000/0x2000)=nil, 0x3) 2021/11/11 13:07:31 result hanged=false: [1218136ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111085 #0 [1218151ms] -> munmap(0x20ffa000, 0x4000) #0 [1218151ms] <- munmap=0x0 errno=14 cover=907 #0 [1218153ms] -> get_mempolicy(0x0, 0x200003c0, 0x2, 0x20ffb000, 0x3) #0 [1218153ms] <- get_mempolicy=0xffffffffffffffff errno=14 cover=84 2021/11/11 13:07:31 result hanged=false: 2021/11/11 13:07:31 added new input for call #1 get_mempolicy to corpus: munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) get_mempolicy(0x0, &(0x7f00000003c0), 0x2, &(0x7f0000ffb000/0x2000)=nil, 0x3) 13:07:31 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) [1218189ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111087 #0 [1218204ms] -> openat$vcs(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [1218205ms] <- openat$vcs=0x3 errno=14 cover=1221 enabling collider #0 [1218205ms] -> openat$vcs(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [1218206ms] <- openat$vcs=0x3 errno=14 cover=1220 13:07:31 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000040)) 2021/11/11 13:07:31 result hanged=false: [1218253ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111089 #0 [1218268ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [1218269ms] <- close_range=0x0 errno=14 cover=1344 #0 [1218273ms] -> pipe(0x20000000) #0 [1218274ms] <- pipe=0x0 errno=14 cover=1941 #0 [1218275ms] -> fstat(0x3, 0x20000040) #0 [1218275ms] <- fstat=0x0 errno=14 cover=129 enabling collider #0 [1218276ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [1218276ms] <- close_range=0x0 errno=14 cover=51 #0 [1218278ms] -> pipe(0x20000000) #0 [1218278ms] <- pipe=0x0 errno=14 cover=1201 pthread_create failed (errno 11) 13:07:31 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000040)) 2021/11/11 13:07:31 result hanged=false: 2021/11/11 13:07:31 #0: triaging type=7 2021/11/11 13:07:31 triaging input for call #2 fstat (new signal=2) [1218352ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111191 #0 [1218367ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [1218368ms] <- close_range=0x0 errno=14 cover=1319 #0 [1218372ms] -> pipe(0x20000000) #0 [1218373ms] <- pipe=0x0 errno=14 cover=1941 #0 [1218374ms] -> fstat(0x3, 0x20000040) #0 [1218374ms] <- fstat=0x0 errno=14 cover=129 2021/11/11 13:07:31 result hanged=false: 13:07:31 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000040)) [1218417ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111193 #0 [1218438ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [1218438ms] <- close_range=0x0 errno=14 cover=1319 #0 [1218439ms] -> pipe(0x20000000) #0 [1218439ms] <- pipe=0x0 errno=14 cover=1916 #0 [1218440ms] -> fstat(0x3, 0x20000040) #0 [1218440ms] <- fstat=0x0 errno=14 cover=129 13:07:31 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000040)) 2021/11/11 13:07:31 result hanged=false: [1218483ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111195 #0 [1218502ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [1218502ms] <- close_range=0x0 errno=14 cover=1319 #0 [1218506ms] -> pipe(0x20000000) #0 [1218507ms] <- pipe=0x0 errno=14 cover=6321 #0 [1218507ms] -> fstat(0x3, 0x20000040) #0 [1218508ms] <- fstat=0x0 errno=14 cover=129 2021/11/11 13:07:32 result hanged=false: 2021/11/11 13:07:32 added new input for call #2 fstat to corpus: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000040)) 13:07:32 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000040)) 2021/11/11 13:07:32 #0: triaging type=7 2021/11/11 13:07:32 triaging input for call #0 close_range (new signal=2) [1218546ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111197 #0 [1218568ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [1218568ms] <- close_range=0x0 errno=14 cover=1286 #0 [1218568ms] -> pipe(0x20000000) #0 [1218569ms] <- pipe=0x0 errno=14 cover=1977 #0 [1218569ms] -> fstat(0x3, 0x20000040) #0 [1218569ms] <- fstat=0x0 errno=14 cover=129 13:07:32 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000040)) 2021/11/11 13:07:32 result hanged=false: [1218609ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111199 #0 [1218634ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [1218634ms] <- close_range=0x0 errno=14 cover=1330 #0 [1218635ms] -> pipe(0x20000000) #0 [1218636ms] <- pipe=0x0 errno=14 cover=1865 #0 [1218637ms] -> fstat(0x3, 0x20000040) #0 [1218637ms] <- fstat=0x0 errno=14 cover=129 13:07:32 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000040)) 2021/11/11 13:07:32 result hanged=false: [1218679ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111201 #0 [1218696ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [1218696ms] <- close_range=0x0 errno=14 cover=1319 #0 [1218698ms] -> pipe(0x20000000) #0 [1218698ms] <- pipe=0x0 errno=14 cover=1894 #0 [1218702ms] -> fstat(0x3, 0x20000040) #0 [1218702ms] <- fstat=0x0 errno=14 cover=129 2021/11/11 13:07:32 result hanged=false: 2021/11/11 13:07:32 added new input for call #0 close_range to corpus: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000040)) 13:07:32 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x101001, 0x0) [1218757ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111203 #0 [1218779ms] -> openat$nvram(0xffffffffffffff9c, 0x20000280, 0x0, 0x0) #0 [1218779ms] <- openat$nvram=0x3 errno=14 cover=1144 #0 [1218782ms] -> openat$nvram(0xffffffffffffff9c, 0x20000680, 0x101001, 0x0) #0 [1218782ms] <- openat$nvram=0x4 errno=14 cover=1190 enabling collider #0 [1218783ms] -> openat$nvram(0xffffffffffffff9c, 0x20000280, 0x0, 0x0) #0 [1218784ms] <- openat$nvram=0x3 errno=14 cover=1158 13:07:32 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x101001, 0x0) 2021/11/11 13:07:32 result hanged=false: 2021/11/11 13:07:32 #0: triaging type=7 2021/11/11 13:07:32 triaging input for call #1 openat$nvram (new signal=6) [1218832ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111205 #0 [1218852ms] -> openat$nvram(0xffffffffffffff9c, 0x20000280, 0x0, 0x0) #0 [1218852ms] <- openat$nvram=0x3 errno=14 cover=1116 #0 [1218853ms] -> openat$nvram(0xffffffffffffff9c, 0x20000680, 0x101001, 0x0) #0 [1218853ms] <- openat$nvram=0x4 errno=14 cover=1190 2021/11/11 13:07:32 result hanged=false: 13:07:32 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x101001, 0x0) [1218903ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111207 #0 [1218927ms] -> openat$nvram(0xffffffffffffff9c, 0x20000280, 0x0, 0x0) #0 [1218927ms] <- openat$nvram=0x3 errno=14 cover=1119 #0 [1218928ms] -> openat$nvram(0xffffffffffffff9c, 0x20000680, 0x101001, 0x0) #0 [1218928ms] <- openat$nvram=0x4 errno=14 cover=1092 2021/11/11 13:07:32 result hanged=false: 13:07:32 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x101001, 0x0) [1218971ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111209 #0 [1218990ms] -> openat$nvram(0xffffffffffffff9c, 0x20000280, 0x0, 0x0) #0 [1218990ms] <- openat$nvram=0x3 errno=14 cover=1117 #0 [1218992ms] -> openat$nvram(0xffffffffffffff9c, 0x20000680, 0x101001, 0x0) #0 [1218992ms] <- openat$nvram=0x4 errno=14 cover=1190 2021/11/11 13:07:32 result hanged=false: 2021/11/11 13:07:32 added new input for call #1 openat$nvram to corpus: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x101001, 0x0) 2021/11/11 13:07:32 #0: triaging type=7 2021/11/11 13:07:32 triaging input for call #0 openat$nvram (new signal=2) 13:07:32 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x101001, 0x0) [1219041ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111211 #0 [1219059ms] -> openat$nvram(0xffffffffffffff9c, 0x20000280, 0x0, 0x0) #0 [1219060ms] <- openat$nvram=0x3 errno=14 cover=1105 #0 [1219060ms] -> openat$nvram(0xffffffffffffff9c, 0x20000680, 0x101001, 0x0) #0 [1219061ms] <- openat$nvram=0x4 errno=14 cover=1114 2021/11/11 13:07:32 result hanged=false: 13:07:32 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x101001, 0x0) [1219103ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111213 #0 [1219124ms] -> openat$nvram(0xffffffffffffff9c, 0x20000280, 0x0, 0x0) #0 [1219124ms] <- openat$nvram=0x3 errno=14 cover=1116 #0 [1219125ms] -> openat$nvram(0xffffffffffffff9c, 0x20000680, 0x101001, 0x0) #0 [1219125ms] <- openat$nvram=0x4 errno=14 cover=1114 13:07:32 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x101001, 0x0) 2021/11/11 13:07:32 result hanged=false: [1219174ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111215 #0 [1219198ms] -> openat$nvram(0xffffffffffffff9c, 0x20000280, 0x0, 0x0) #0 [1219198ms] <- openat$nvram=0x3 errno=14 cover=1116 #0 [1219199ms] -> openat$nvram(0xffffffffffffff9c, 0x20000680, 0x101001, 0x0) #0 [1219201ms] <- openat$nvram=0x4 errno=14 cover=1211 2021/11/11 13:07:32 result hanged=false: 2021/11/11 13:07:32 added new input for call #0 openat$nvram to corpus: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x101001, 0x0) 13:07:32 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x21, 0x0, 0x0) [1219248ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111217 #0 [1219272ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [1219272ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1677 #0 [1219272ms] -> setsockopt$IP_VS_SO_SET_STARTDAEMON(0x3, 0x0, 0x21, 0x0, 0x0) #0 [1219272ms] <- setsockopt$IP_VS_SO_SET_STARTDAEMON=0xffffffffffffffff errno=22 cover=137 enabling collider #0 [1219273ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [1219273ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1694 2021/11/11 13:07:32 result hanged=false: 13:07:32 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x21, 0x0, 0x0) 2021/11/11 13:07:32 #0: triaging type=7 2021/11/11 13:07:32 triaging input for call #1 setsockopt$IP_VS_SO_SET_STARTDAEMON (new signal=2) [1219319ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111219 #0 [1219338ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [1219339ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1724 #0 [1219339ms] -> setsockopt$IP_VS_SO_SET_STARTDAEMON(0x3, 0x0, 0x21, 0x0, 0x0) #0 [1219339ms] <- setsockopt$IP_VS_SO_SET_STARTDAEMON=0xffffffffffffffff errno=22 cover=137 13:07:32 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x21, 0x0, 0x0) 2021/11/11 13:07:32 result hanged=false: [1219388ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111221 #0 [1219409ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [1219410ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1943 #0 [1219411ms] -> setsockopt$IP_VS_SO_SET_STARTDAEMON(0x3, 0x0, 0x21, 0x0, 0x0) #0 [1219411ms] <- setsockopt$IP_VS_SO_SET_STARTDAEMON=0xffffffffffffffff errno=22 cover=137 13:07:32 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x21, 0x0, 0x0) 2021/11/11 13:07:32 result hanged=false: [1219458ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111223 #0 [1219478ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [1219479ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1746 #0 [1219480ms] -> setsockopt$IP_VS_SO_SET_STARTDAEMON(0x3, 0x0, 0x21, 0x0, 0x0) #0 [1219480ms] <- setsockopt$IP_VS_SO_SET_STARTDAEMON=0xffffffffffffffff errno=22 cover=137 2021/11/11 13:07:33 result hanged=false: 2021/11/11 13:07:33 added new input for call #1 setsockopt$IP_VS_SO_SET_STARTDAEMON to corpus: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x21, 0x0, 0x0) 13:07:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) [1219528ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111225 #0 [1219548ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1219551ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6363 #0 [1219557ms] -> sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0x4, 0x20000140, 0x0) #0 [1219558ms] <- sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF=0x0 errno=14 cover=967 #0 [1219559ms] -> syz_genetlink_get_family_id$nl802154(0x200001c0, 0x4) syz_genetlink_get_family_id(nl802154, 4) #0 [1219559ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=5026 enabling collider #0 [1219561ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [1219563ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=8964 #0 [1219566ms] -> sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0x4, 0x20000140, 0x0) #0 [1219567ms] <- sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF=0x0 errno=14 cover=967 pthread_create failed (errno 11) 13:07:33 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000200)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f00000002c0)={0x0, ""/129}, 0x89, 0x0, 0x0) msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="02"], 0xec, 0x0) msgsnd(r0, &(0x7f00000006c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/190}, 0xc6, 0x1, 0x0) 2021/11/11 13:07:33 result hanged=false: [1219643ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111327 #0 [1219671ms] -> msgget$private(0x0, 0x0) #0 [1219672ms] <- msgget$private=0x1f errno=14 cover=350 #0 [1219673ms] -> msgsnd(0x1f, 0x20000200, 0x8, 0x0) #0 [1219674ms] <- msgsnd=0x0 errno=14 cover=714 #0 [1219674ms] -> msgrcv(0x1f, 0x200002c0, 0x89, 0x0, 0x0) #0 [1219674ms] <- msgrcv=0x8 errno=14 cover=472 #0 [1219674ms] -> msgsnd(0x1f, 0x20000380, 0xec, 0x0) #0 [1219674ms] <- msgsnd=0x0 errno=14 cover=686 #0 [1219675ms] -> msgsnd(0x1f, 0x200006c0, 0x8, 0x0) #0 [1219675ms] <- msgsnd=0x0 errno=14 cover=663 #0 [1219675ms] -> msgrcv(0x1f, 0x20000000, 0xc6, 0x1, 0x0) #0 [1219675ms] <- msgrcv=0x8 errno=14 cover=462 enabling collider #0 [1219675ms] -> msgget$private(0x0, 0x0) #0 [1219676ms] <- msgget$private=0x20 errno=14 cover=339 #0 [1219677ms] -> msgsnd(0x20, 0x20000200, 0x8, 0x0) #0 [1219677ms] <- msgsnd=0x0 errno=14 cover=681 pthread_create failed (errno 11) 13:07:33 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000200)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f00000002c0)={0x0, ""/129}, 0x89, 0x0, 0x0) msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="02"], 0xec, 0x0) msgsnd(r0, &(0x7f00000006c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/190}, 0xc6, 0x1, 0x0) 2021/11/11 13:07:33 result hanged=false: 2021/11/11 13:07:33 #0: triaging type=7 2021/11/11 13:07:33 triaging input for call #5 msgrcv (new signal=12) [1219755ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111429 #0 [1219777ms] -> msgget$private(0x0, 0x0) #0 [1219777ms] <- msgget$private=0x21 errno=14 cover=350 #0 [1219778ms] -> msgsnd(0x21, 0x20000200, 0x8, 0x0) #0 [1219778ms] <- msgsnd=0x0 errno=14 cover=718 #0 [1219778ms] -> msgrcv(0x21, 0x200002c0, 0x89, 0x0, 0x0) #0 [1219779ms] <- msgrcv=0x8 errno=14 cover=451 #0 [1219779ms] -> msgsnd(0x21, 0x20000380, 0xec, 0x0) #0 [1219779ms] <- msgsnd=0x0 errno=14 cover=686 #0 [1219779ms] -> msgsnd(0x21, 0x200006c0, 0x8, 0x0) #0 [1219779ms] <- msgsnd=0x0 errno=14 cover=706 #0 [1219779ms] -> msgrcv(0x21, 0x20000000, 0xc6, 0x1, 0x0) #0 [1219780ms] <- msgrcv=0x8 errno=14 cover=448 13:07:33 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000200)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f00000002c0)={0x0, ""/129}, 0x89, 0x0, 0x0) msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="02"], 0xec, 0x0) msgsnd(r0, &(0x7f00000006c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/190}, 0xc6, 0x1, 0x0) 2021/11/11 13:07:33 result hanged=false: [1219822ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111431 #0 [1219841ms] -> msgget$private(0x0, 0x0) #0 [1219841ms] <- msgget$private=0x22 errno=14 cover=339 #0 [1219843ms] -> msgsnd(0x22, 0x20000200, 0x8, 0x0) #0 [1219843ms] <- msgsnd=0x0 errno=14 cover=692 #0 [1219844ms] -> msgrcv(0x22, 0x200002c0, 0x89, 0x0, 0x0) #0 [1219844ms] <- msgrcv=0x8 errno=14 cover=450 #0 [1219845ms] -> msgsnd(0x22, 0x20000380, 0xec, 0x0) #0 [1219845ms] <- msgsnd=0x0 errno=14 cover=754 #0 [1219846ms] -> msgsnd(0x22, 0x200006c0, 0x8, 0x0) #0 [1219846ms] <- msgsnd=0x0 errno=14 cover=739 #0 [1219848ms] -> msgrcv(0x22, 0x20000000, 0xc6, 0x1, 0x0) #0 [1219848ms] <- msgrcv=0x8 errno=14 cover=448 2021/11/11 13:07:33 result hanged=false: 13:07:33 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000200)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f00000002c0)={0x0, ""/129}, 0x89, 0x0, 0x0) msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="02"], 0xec, 0x0) msgsnd(r0, &(0x7f00000006c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/190}, 0xc6, 0x1, 0x0) [1219894ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111433 #0 [1219913ms] -> msgget$private(0x0, 0x0) #0 [1219913ms] <- msgget$private=0x23 errno=14 cover=364 #0 [1219914ms] -> msgsnd(0x23, 0x20000200, 0x8, 0x0) #0 [1219915ms] <- msgsnd=0x0 errno=14 cover=757 #0 [1219916ms] -> msgrcv(0x23, 0x200002c0, 0x89, 0x0, 0x0) #0 [1219916ms] <- msgrcv=0x8 errno=14 cover=450 #0 [1219917ms] -> msgsnd(0x23, 0x20000380, 0xec, 0x0) #0 [1219917ms] <- msgsnd=0x0 errno=14 cover=751 #0 [1219918ms] -> msgsnd(0x23, 0x200006c0, 0x8, 0x0) #0 [1219919ms] <- msgsnd=0x0 errno=14 cover=739 #0 [1219921ms] -> msgrcv(0x23, 0x20000000, 0xc6, 0x1, 0x0) #0 [1219921ms] <- msgrcv=0x8 errno=14 cover=448 2021/11/11 13:07:33 result hanged=false: 2021/11/11 13:07:33 added new input for call #5 msgrcv to corpus: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000200)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f00000002c0)={0x0, ""/129}, 0x89, 0x0, 0x0) msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="02"], 0xec, 0x0) msgsnd(r0, &(0x7f00000006c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/190}, 0xc6, 0x1, 0x0) 13:07:33 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000200)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f00000002c0)={0x0, ""/129}, 0x89, 0x0, 0x0) msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="02"], 0xec, 0x0) msgsnd(r0, &(0x7f00000006c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/190}, 0xc6, 0x1, 0x0) 2021/11/11 13:07:33 #0: triaging type=7 2021/11/11 13:07:33 triaging input for call #3 msgsnd (new signal=2) [1219965ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111435 #0 [1219984ms] -> msgget$private(0x0, 0x0) #0 [1219984ms] <- msgget$private=0x24 errno=14 cover=339 #0 [1219985ms] -> msgsnd(0x24, 0x20000200, 0x8, 0x0) #0 [1219985ms] <- msgsnd=0x0 errno=14 cover=692 #0 [1219985ms] -> msgrcv(0x24, 0x200002c0, 0x89, 0x0, 0x0) #0 [1219985ms] <- msgrcv=0x8 errno=14 cover=450 #0 [1219985ms] -> msgsnd(0x24, 0x20000380, 0xec, 0x0) #0 [1219985ms] <- msgsnd=0x0 errno=14 cover=674 #0 [1219986ms] -> msgsnd(0x24, 0x200006c0, 0x8, 0x0) #0 [1219986ms] <- msgsnd=0x0 errno=14 cover=663 #0 [1219987ms] -> msgrcv(0x24, 0x20000000, 0xc6, 0x1, 0x0) #0 [1219987ms] <- msgrcv=0x8 errno=14 cover=448 13:07:33 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000200)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f00000002c0)={0x0, ""/129}, 0x89, 0x0, 0x0) msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="02"], 0xec, 0x0) msgsnd(r0, &(0x7f00000006c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/190}, 0xc6, 0x1, 0x0) 2021/11/11 13:07:33 result hanged=false: [1220033ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111437 #0 [1220054ms] -> msgget$private(0x0, 0x0) #0 [1220054ms] <- msgget$private=0x25 errno=14 cover=350 #0 [1220055ms] -> msgsnd(0x25, 0x20000200, 0x8, 0x0) #0 [1220055ms] <- msgsnd=0x0 errno=14 cover=670 #0 [1220056ms] -> msgrcv(0x25, 0x200002c0, 0x89, 0x0, 0x0) #0 [1220056ms] <- msgrcv=0x8 errno=14 cover=450 #0 [1220056ms] -> msgsnd(0x25, 0x20000380, 0xec, 0x0) #0 [1220056ms] <- msgsnd=0x0 errno=14 cover=664 #0 [1220056ms] -> msgsnd(0x25, 0x200006c0, 0x8, 0x0) #0 [1220056ms] <- msgsnd=0x0 errno=14 cover=677 #0 [1220057ms] -> msgrcv(0x25, 0x20000000, 0xc6, 0x1, 0x0) #0 [1220057ms] <- msgrcv=0x8 errno=14 cover=448 2021/11/11 13:07:33 result hanged=false: 13:07:33 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000200)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f00000002c0)={0x0, ""/129}, 0x89, 0x0, 0x0) msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="02"], 0xec, 0x0) msgsnd(r0, &(0x7f00000006c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/190}, 0xc6, 0x1, 0x0) [1220106ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111439 #0 [1220128ms] -> msgget$private(0x0, 0x0) #0 [1220128ms] <- msgget$private=0x26 errno=14 cover=350 #0 [1220130ms] -> msgsnd(0x26, 0x20000200, 0x8, 0x0) #0 [1220130ms] <- msgsnd=0x0 errno=14 cover=692 #0 [1220132ms] -> msgrcv(0x26, 0x200002c0, 0x89, 0x0, 0x0) #0 [1220132ms] <- msgrcv=0x8 errno=14 cover=450 #0 [1220132ms] -> msgsnd(0x26, 0x20000380, 0xec, 0x0) #0 [1220133ms] <- msgsnd=0x0 errno=14 cover=699 #0 [1220133ms] -> msgsnd(0x26, 0x200006c0, 0x8, 0x0) #0 [1220133ms] <- msgsnd=0x0 errno=14 cover=775 #0 [1220134ms] -> msgrcv(0x26, 0x20000000, 0xc6, 0x1, 0x0) #0 [1220134ms] <- msgrcv=0x8 errno=14 cover=448 2021/11/11 13:07:33 result hanged=false: 2021/11/11 13:07:33 added new input for call #3 msgsnd to corpus: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000200)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f00000002c0)={0x0, ""/129}, 0x89, 0x0, 0x0) msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="02"], 0xec, 0x0) msgsnd(r0, &(0x7f00000006c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/190}, 0xc6, 0x1, 0x0) 2021/11/11 13:07:33 #0: triaging type=7 2021/11/11 13:07:33 triaging input for call #2 msgrcv (new signal=69) 13:07:33 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000200)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f00000002c0)={0x0, ""/129}, 0x89, 0x0, 0x0) msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="02"], 0xec, 0x0) msgsnd(r0, &(0x7f00000006c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/190}, 0xc6, 0x1, 0x0) [1220178ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111441 #0 [1220197ms] -> msgget$private(0x0, 0x0) #0 [1220197ms] <- msgget$private=0x27 errno=14 cover=353 #0 [1220198ms] -> msgsnd(0x27, 0x20000200, 0x8, 0x0) #0 [1220198ms] <- msgsnd=0x0 errno=14 cover=714 #0 [1220198ms] -> msgrcv(0x27, 0x200002c0, 0x89, 0x0, 0x0) #0 [1220199ms] <- msgrcv=0x8 errno=14 cover=450 #0 [1220199ms] -> msgsnd(0x27, 0x20000380, 0xec, 0x0) #0 [1220199ms] <- msgsnd=0x0 errno=14 cover=663 #0 [1220199ms] -> msgsnd(0x27, 0x200006c0, 0x8, 0x0) #0 [1220200ms] <- msgsnd=0x0 errno=14 cover=663 #0 [1220200ms] -> msgrcv(0x27, 0x20000000, 0xc6, 0x1, 0x0) #0 [1220200ms] <- msgrcv=0x8 errno=14 cover=462 2021/11/11 13:07:33 result hanged=false: 13:07:33 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000200)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f00000002c0)={0x0, ""/129}, 0x89, 0x0, 0x0) msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="02"], 0xec, 0x0) msgsnd(r0, &(0x7f00000006c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/190}, 0xc6, 0x1, 0x0) [1220253ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111443 #0 [1220272ms] -> msgget$private(0x0, 0x0) #0 [1220272ms] <- msgget$private=0x28 errno=14 cover=350 #0 [1220273ms] -> msgsnd(0x28, 0x20000200, 0x8, 0x0) #0 [1220274ms] <- msgsnd=0x0 errno=14 cover=692 #0 [1220277ms] -> msgrcv(0x28, 0x200002c0, 0x89, 0x0, 0x0) #0 [1220277ms] <- msgrcv=0x8 errno=14 cover=450 #0 [1220279ms] -> msgsnd(0x28, 0x20000380, 0xec, 0x0) #0 [1220279ms] <- msgsnd=0x0 errno=14 cover=767 #0 [1220280ms] -> msgsnd(0x28, 0x200006c0, 0x8, 0x0) #0 [1220280ms] <- msgsnd=0x0 errno=14 cover=761 #0 [1220282ms] -> msgrcv(0x28, 0x20000000, 0xc6, 0x1, 0x0) #0 [1220282ms] <- msgrcv=0x8 errno=14 cover=448 2021/11/11 13:07:33 result hanged=false: 13:07:33 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000200)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f00000002c0)={0x0, ""/129}, 0x89, 0x0, 0x0) msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="02"], 0xec, 0x0) msgsnd(r0, &(0x7f00000006c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/190}, 0xc6, 0x1, 0x0) [1220324ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111445 #0 [1220343ms] -> msgget$private(0x0, 0x0) #0 [1220343ms] <- msgget$private=0x29 errno=14 cover=350 #0 [1220344ms] -> msgsnd(0x29, 0x20000200, 0x8, 0x0) #0 [1220344ms] <- msgsnd=0x0 errno=14 cover=703 #0 [1220344ms] -> msgrcv(0x29, 0x200002c0, 0x89, 0x0, 0x0) #0 [1220344ms] <- msgrcv=0x8 errno=14 cover=450 #0 [1220346ms] -> msgsnd(0x29, 0x20000380, 0xec, 0x0) #0 [1220346ms] <- msgsnd=0x0 errno=14 cover=664 #0 [1220346ms] -> msgsnd(0x29, 0x200006c0, 0x8, 0x0) #0 [1220346ms] <- msgsnd=0x0 errno=14 cover=674 #0 [1220347ms] -> msgrcv(0x29, 0x20000000, 0xc6, 0x1, 0x0) #0 [1220347ms] <- msgrcv=0x8 errno=14 cover=448 2021/11/11 13:07:33 result hanged=false: 2021/11/11 13:07:33 added new input for call #2 msgrcv to corpus: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000200)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f00000002c0)={0x0, ""/129}, 0x89, 0x0, 0x0) msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="02"], 0xec, 0x0) msgsnd(r0, &(0x7f00000006c0)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/190}, 0xc6, 0x1, 0x0) 13:07:33 executing program 0: mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) 2021/11/11 13:07:33 poll: candidates=8 inputs=0 signal=0 [1220391ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111447 #0 [1220411ms] -> mount$9p_fd(0x0, 0x200000c0, 0x0, 0x0, 0x0) #0 [1220411ms] <- mount$9p_fd=0xffffffffffffffff errno=2 cover=968 enabling collider #0 [1220412ms] -> mount$9p_fd(0x0, 0x200000c0, 0x0, 0x0, 0x0) #0 [1220412ms] <- mount$9p_fd=0xffffffffffffffff errno=2 cover=485 13:07:33 executing program 0: setresuid(0xee00, 0x0, 0x0) r0 = fork() prlimit64(r0, 0x0, 0x0, 0x0) 2021/11/11 13:07:33 result hanged=false: [1220459ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111449 #0 [1220478ms] -> setresuid(0xee00, 0x0, 0x0) #0 [1220478ms] <- setresuid=0x0 errno=14 cover=544 #0 [1220480ms] -> fork() #0 [1220503ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [1220506ms] -> prlimit64(0x0, 0x0, 0x0, 0x0) #0 [1220509ms] <- prlimit64=0x0 errno=14 cover=60 enabling collider #0 [1220510ms] -> setresuid(0xee00, 0x0, 0x0) #0 [1220510ms] <- setresuid=0x0 errno=14 cover=434 #0 [1220511ms] -> fork() #0 [1220532ms] <- fork=0xffffffffffffffff errno=11 cover=262143 pthread_create failed (errno 11) 2021/11/11 13:07:34 result hanged=false: 2021/11/11 13:07:34 #0: triaging type=7 13:07:34 executing program 0: setresuid(0xee00, 0x0, 0x0) r0 = fork() prlimit64(r0, 0x0, 0x0, 0x0) 2021/11/11 13:07:34 triaging input for call #1 fork (new signal=3) [1220599ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111553 #0 [1220620ms] -> setresuid(0xee00, 0x0, 0x0) #0 [1220622ms] <- setresuid=0x0 errno=14 cover=552 #0 [1220622ms] -> fork() #0 [1220641ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [1220656ms] -> prlimit64(0x0, 0x0, 0x0, 0x0) #0 [1220657ms] <- prlimit64=0x0 errno=14 cover=60 2021/11/11 13:07:34 result hanged=false: 13:07:34 executing program 0: setresuid(0xee00, 0x0, 0x0) r0 = fork() prlimit64(r0, 0x0, 0x0, 0x0) [1220702ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111556 #0 [1220723ms] -> setresuid(0xee00, 0x0, 0x0) #0 [1220723ms] <- setresuid=0x0 errno=14 cover=489 #0 [1220724ms] -> fork() #0 [1220746ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [1220761ms] -> prlimit64(0x0, 0x0, 0x0, 0x0) #0 [1220761ms] <- prlimit64=0x0 errno=14 cover=60 2021/11/11 13:07:34 result hanged=false: 13:07:34 executing program 0: setresuid(0xee00, 0x0, 0x0) r0 = fork() prlimit64(r0, 0x0, 0x0, 0x0) [1220809ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111559 #0 [1220830ms] -> setresuid(0xee00, 0x0, 0x0) #0 [1220830ms] <- setresuid=0x0 errno=14 cover=511 #0 [1220831ms] -> fork() #0 [1220849ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [1220864ms] -> prlimit64(0x0, 0x0, 0x0, 0x0) #0 [1220866ms] <- prlimit64=0x0 errno=14 cover=60 2021/11/11 13:07:34 result hanged=false: 2021/11/11 13:07:34 added new input for call #1 fork to corpus: setresuid(0xee00, 0x0, 0x0) r0 = fork() prlimit64(r0, 0x0, 0x0, 0x0) 13:07:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000008580)=[{}], 0x1, 0x0) [1220918ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111562 #0 [1220938ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20000280) #0 [1220938ms] <- socketpair$unix=0x0 errno=14 cover=3697 #0 [1220939ms] -> sendmmsg$unix(0x3, 0x20008580, 0x1, 0x0) #0 [1220939ms] <- sendmmsg$unix=0x1 errno=14 cover=599 enabling collider #0 [1220941ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20000280) #0 [1220941ms] <- socketpair$unix=0x0 errno=14 cover=2858 2021/11/11 13:07:34 result hanged=false: 13:07:34 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) [1220986ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111564 #0 [1221006ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000280, 0x0) #0 [1221006ms] <- openat$sndseq=0x3 errno=14 cover=2202 #0 [1221007ms] -> dup(0x3) #0 [1221007ms] <- dup=0x4 errno=14 cover=87 #0 [1221007ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1221008ms] <- perf_event_open=0x5 errno=14 cover=6600 #0 [1221011ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0x3, 0xc08c5332, 0x20000000) #0 [1221011ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0x0 errno=14 cover=3499 #0 [1221011ms] -> ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0x4, 0x408c5333, 0x200000c0) #0 [1221013ms] <- ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE=0x0 errno=14 cover=15334 enabling collider #0 [1221032ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000280, 0x0) #0 [1221032ms] <- openat$sndseq=0x3 errno=14 cover=2242 #0 [1221033ms] -> dup(0x3) #0 [1221033ms] <- dup=0x4 errno=14 cover=86 pthread_create failed (errno 11) 2021/11/11 13:07:34 result hanged=false: 13:07:34 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 2021/11/11 13:07:34 #0: triaging type=7 2021/11/11 13:07:34 triaging input for call #4 ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE (new signal=72) [1221108ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111666 #0 [1221129ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000280, 0x0) #0 [1221132ms] <- openat$sndseq=0x3 errno=14 cover=2222 #0 [1221133ms] -> dup(0x3) #0 [1221133ms] <- dup=0x4 errno=14 cover=87 #0 [1221133ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1221136ms] <- perf_event_open=0x5 errno=14 cover=6755 #0 [1221137ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0x3, 0xc08c5332, 0x20000000) #0 [1221138ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0x0 errno=14 cover=3510 #0 [1221140ms] -> ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0x4, 0x408c5333, 0x200000c0) #0 [1221140ms] <- ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE=0x0 errno=14 cover=2695 2021/11/11 13:07:34 result hanged=false: 13:07:34 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) [1221194ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111668 #0 [1221217ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000280, 0x0) #0 [1221218ms] <- openat$sndseq=0x3 errno=14 cover=2177 #0 [1221219ms] -> dup(0x3) #0 [1221219ms] <- dup=0x4 errno=14 cover=87 #0 [1221220ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1221220ms] <- perf_event_open=0x5 errno=14 cover=6798 #0 [1221222ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0x3, 0xc08c5332, 0x20000000) #0 [1221223ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0x0 errno=14 cover=3448 #0 [1221224ms] -> ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0x4, 0x408c5333, 0x200000c0) #0 [1221224ms] <- ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE=0x0 errno=14 cover=2695 13:07:34 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 2021/11/11 13:07:34 result hanged=false: [1221277ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111670 #0 [1221297ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000280, 0x0) #0 [1221297ms] <- openat$sndseq=0x3 errno=14 cover=2187 #0 [1221298ms] -> dup(0x3) #0 [1221298ms] <- dup=0x4 errno=14 cover=87 #0 [1221298ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1221299ms] <- perf_event_open=0x5 errno=14 cover=6444 #0 [1221299ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0x3, 0xc08c5332, 0x20000000) #0 [1221300ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0x0 errno=14 cover=3521 #0 [1221301ms] -> ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0x4, 0x408c5333, 0x200000c0) #0 [1221301ms] <- ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE=0x0 errno=14 cover=2695 2021/11/11 13:07:34 result hanged=false: 2021/11/11 13:07:34 added new input for call #4 ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE to corpus: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 13:07:34 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 2021/11/11 13:07:34 #0: triaging type=7 2021/11/11 13:07:34 triaging input for call #3 ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE (new signal=10) [1221358ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111672 #0 [1221377ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000280, 0x0) #0 [1221378ms] <- openat$sndseq=0x3 errno=14 cover=2214 #0 [1221383ms] -> dup(0x3) #0 [1221383ms] <- dup=0x4 errno=14 cover=87 #0 [1221384ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1221385ms] <- perf_event_open=0x5 errno=14 cover=6705 #0 [1221389ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0x3, 0xc08c5332, 0x20000000) #0 [1221389ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0x0 errno=14 cover=3499 #0 [1221390ms] -> ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0x4, 0x408c5333, 0x200000c0) #0 [1221390ms] <- ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE=0x0 errno=14 cover=2709 13:07:34 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 2021/11/11 13:07:34 result hanged=false: [1221443ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111674 #0 [1221462ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000280, 0x0) #0 [1221463ms] <- openat$sndseq=0x3 errno=14 cover=2211 #0 [1221464ms] -> dup(0x3) #0 [1221464ms] <- dup=0x4 errno=14 cover=87 #0 [1221464ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1221465ms] <- perf_event_open=0x5 errno=14 cover=6918 #0 [1221468ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0x3, 0xc08c5332, 0x20000000) #0 [1221469ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0x0 errno=14 cover=3470 #0 [1221470ms] -> ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0x4, 0x408c5333, 0x200000c0) #0 [1221471ms] <- ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE=0x0 errno=14 cover=2695 2021/11/11 13:07:35 result hanged=false: 13:07:35 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) [1221523ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111676 #0 [1221546ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000280, 0x0) #0 [1221547ms] <- openat$sndseq=0x3 errno=14 cover=2238 #0 [1221551ms] -> dup(0x3) #0 [1221551ms] <- dup=0x4 errno=14 cover=87 #0 [1221552ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [1221553ms] <- perf_event_open=0x5 errno=14 cover=6580 #0 [1221557ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0x3, 0xc08c5332, 0x20000000) #0 [1221558ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0x0 errno=14 cover=3495 #0 [1221559ms] -> ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0x4, 0x408c5333, 0x200000c0) #0 [1221560ms] <- ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE=0x0 errno=14 cover=2709 2021/11/11 13:07:35 result hanged=false: 2021/11/11 13:07:35 added new input for call #3 ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE to corpus: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 13:07:35 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @random="1c9b09c8430a", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private}}}}}}, 0x0) [1221612ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111678 #0 [1221630ms] -> syz_emit_ethernet(0x3e, 0x200000c0, 0x0) 01 80 c2 00 00 00 1c 9b 09 c8 43 0a 08 00 45 00 00 14 00 00 00 00 00 04 39 59 ac 14 14 bb ac 14 14 aa 03 00 b7 ff 00 00 00 00 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 #0 [1221632ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=18194 enabling collider #0 [1221636ms] -> syz_emit_ethernet(0x3e, 0x200000c0, 0x0) 01 80 c2 00 00 00 1c 9b 09 c8 43 0a 08 00 45 00 00 14 00 00 00 00 00 04 39 59 ac 14 14 bb ac 14 14 aa 03 00 b7 ff 00 00 00 00 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 #0 [1221639ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=18188 13:07:35 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @random="1c9b09c8430a", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private}}}}}}, 0x0) 2021/11/11 13:07:35 result hanged=false: 2021/11/11 13:07:35 #0: triaging type=7 2021/11/11 13:07:35 triaging input for call #0 syz_emit_ethernet (new signal=7) [1221689ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111680 #0 [1221714ms] -> syz_emit_ethernet(0x3e, 0x200000c0, 0x0) 01 80 c2 00 00 00 1c 9b 09 c8 43 0a 08 00 45 00 00 14 00 00 00 00 00 04 39 59 ac 14 14 bb ac 14 14 aa 03 00 b7 ff 00 00 00 00 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 #0 [1221715ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=18258 2021/11/11 13:07:35 result hanged=false: 13:07:35 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @random="1c9b09c8430a", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private}}}}}}, 0x0) [1221763ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111682 #0 [1221787ms] -> syz_emit_ethernet(0x3e, 0x200000c0, 0x0) 01 80 c2 00 00 00 1c 9b 09 c8 43 0a 08 00 45 00 00 14 00 00 00 00 00 04 39 59 ac 14 14 bb ac 14 14 aa 03 00 b7 ff 00 00 00 00 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 #0 [1221788ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=18136 13:07:35 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @random="1c9b09c8430a", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private}}}}}}, 0x0) 2021/11/11 13:07:35 result hanged=false: [1221833ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111684 #0 [1221854ms] -> syz_emit_ethernet(0x3e, 0x200000c0, 0x0) 01 80 c2 00 00 00 1c 9b 09 c8 43 0a 08 00 45 00 00 14 00 00 00 00 00 04 39 59 ac 14 14 bb ac 14 14 aa 03 00 b7 ff 00 00 00 00 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 #0 [1221855ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=18247 2021/11/11 13:07:35 result hanged=false: 2021/11/11 13:07:35 added new input for call #0 syz_emit_ethernet to corpus: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @random="1c9b09c8430a", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private}}}}}}, 0x0) 13:07:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) [1221901ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111686 #0 [1221920ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [1221921ms] <- socket$nl_xfrm=0x3 errno=14 cover=1485 #0 [1221921ms] -> setsockopt$SO_ATTACH_FILTER(0x3, 0x1, 0x1a, 0x20000080, 0x10) #0 [1221941ms] <- setsockopt$SO_ATTACH_FILTER=0x0 errno=14 cover=91659 enabling collider #0 [1221943ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [1221943ms] <- socket$nl_xfrm=0x3 errno=14 cover=1483 #0 [1221944ms] -> setsockopt$SO_ATTACH_FILTER(0x3, 0x1, 0x1a, 0x20000080, 0x102021/11/11 13:07:35 result hanged=false: 2021/11/11 13:07:35 #0: triaging type=7 2021/11/11 13:07:35 triaging input for call #1 setsockopt$SO_ATTACH_FILTER (new signal=3) 13:07:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) [1221990ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111688 #0 [1222010ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [1222010ms] <- socket$nl_xfrm=0x3 errno=14 cover=1421 #0 [1222011ms] -> setsockopt$SO_ATTACH_FILTER(0x3, 0x1, 0x1a, 0x20000080, 0x10) #0 [1222012ms] <- setsockopt$SO_ATTACH_FILTER=0x0 errno=14 cover=3298 13:07:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 2021/11/11 13:07:35 result hanged=false: [1222054ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111690 #0 [1222073ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [1222073ms] <- socket$nl_xfrm=0x3 errno=14 cover=1477 #0 [1222074ms] -> setsockopt$SO_ATTACH_FILTER(0x3, 0x1, 0x1a, 0x20000080, 0x10) #0 [1222077ms] <- setsockopt$SO_ATTACH_FILTER=0x0 errno=14 cover=3440 13:07:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 2021/11/11 13:07:35 result hanged=false: [1222125ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111692 #0 [1222147ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [1222147ms] <- socket$nl_xfrm=0x3 errno=14 cover=1485 #0 [1222149ms] -> setsockopt$SO_ATTACH_FILTER(0x3, 0x1, 0x1a, 0x20000080, 0x10) #0 [1222150ms] <- setsockopt$SO_ATTACH_FILTER=0x0 errno=14 cover=3312 2021/11/11 13:07:35 result hanged=false: 2021/11/11 13:07:35 added new input for call #1 setsockopt$SO_ATTACH_FILTER to corpus: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 13:07:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1, 0x79, 0x0) [1222195ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111694 #0 [1222213ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1222214ms] <- perf_event_open=0x3 errno=14 cover=6704 #0 [1222216ms] -> syz_open_procfs(0x0, 0x20000040) #0 [1222217ms] <- syz_open_procfs=0x4 errno=13 cover=7394 #0 [1222222ms] -> preadv(0x4, 0x200002c0, 0x1, 0x79, 0x0) #0 [1222222ms] <- preadv=0xf errno=14 cover=4536 enabling collider #0 [1222237ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1222237ms] <- perf_event_open=0x3 errno=14 cover=6329 #0 [1222238ms] -> syz_open_procfs(0x0, 0x20000040) #0 [1222238ms] <- syz_open_procfs=0x4 errno=13 cover=6769 pthread_create failed (errno 11) 2021/11/11 13:07:35 result hanged=false: 2021/11/11 13:07:35 #0: triaging type=7 2021/11/11 13:07:35 triaging input for call #2 preadv (new signal=9) 13:07:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1, 0x79, 0x0) [1222332ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111796 #0 [1222351ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1222352ms] <- perf_event_open=0x3 errno=14 cover=6977 #0 [1222352ms] -> syz_open_procfs(0x0, 0x20000040) #0 [1222353ms] <- syz_open_procfs=0x4 errno=13 cover=7220 #0 [1222354ms] -> preadv(0x4, 0x200002c0, 0x1, 0x79, 0x0) #0 [1222354ms] <- preadv=0xf errno=14 cover=2540 13:07:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1, 0x79, 0x0) 2021/11/11 13:07:35 result hanged=false: [1222410ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111798 #0 [1222432ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1222433ms] <- perf_event_open=0x3 errno=14 cover=6574 #0 [1222437ms] -> syz_open_procfs(0x0, 0x20000040) #0 [1222438ms] <- syz_open_procfs=0x4 errno=13 cover=22112 #0 [1222440ms] -> preadv(0x4, 0x200002c0, 0x1, 0x79, 0x0) #0 [1222440ms] <- preadv=0xf errno=14 cover=3551 13:07:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1, 0x79, 0x0) 2021/11/11 13:07:35 result hanged=false: [1222495ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111800 #0 [1222518ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1222519ms] <- perf_event_open=0x3 errno=14 cover=7349 #0 [1222520ms] -> syz_open_procfs(0x0, 0x20000040) #0 [1222520ms] <- syz_open_procfs=0x4 errno=13 cover=7295 #0 [1222521ms] -> preadv(0x4, 0x200002c0, 0x1, 0x79, 0x0) #0 [1222522ms] <- preadv=0xf errno=14 cover=2541 2021/11/11 13:07:36 result hanged=false: 2021/11/11 13:07:36 added new input for call #2 preadv to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1, 0x79, 0x0) 13:07:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) [1222575ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111802 #0 [1222597ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1222598ms] <- perf_event_open=0x3 errno=14 cover=4212 #0 [1222598ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [1222599ms] <- socket$nl_xfrm=0x4 errno=14 cover=4176 #0 [1222600ms] -> sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) #0 [1222600ms] <- sendmsg$NL80211_CMD_STOP_P2P_DEVICE=0xffffffffffffffff errno=9 cover=81 #0 [1222601ms] -> sendmsg$nl_xfrm(0x4, 0x20002e00, 0x0) #0 [1222633ms] <- sendmsg$nl_xfrm=0x13c errno=14 cover=12623 enabling collider #0 [1222634ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1222634ms] <- perf_event_open=0x3 errno=14 cover=4010 #0 [1222635ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [1222635ms] <- socket$nl_xfrm=0x4 errno=14 cover=1396 pthread_create failed (errno 11) 13:07:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) 2021/11/11 13:07:36 result hanged=false: 2021/11/11 13:07:36 #0: triaging type=7 2021/11/11 13:07:36 triaging input for call #3 sendmsg$nl_xfrm (new signal=37) [1222720ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111904 #0 [1222739ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1222739ms] <- perf_event_open=0x3 errno=14 cover=3912 #0 [1222740ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [1222740ms] <- socket$nl_xfrm=0x4 errno=14 cover=1441 #0 [1222740ms] -> sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) #0 [1222741ms] <- sendmsg$NL80211_CMD_STOP_P2P_DEVICE=0xffffffffffffffff errno=9 cover=52 #0 [1222741ms] -> sendmsg$nl_xfrm(0x4, 0x20002e00, 0x0) #0 [1222741ms] <- sendmsg$nl_xfrm=0x13c errno=14 cover=2851 13:07:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) 2021/11/11 13:07:36 result hanged=false: [1222786ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111906 #0 [1222806ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1222806ms] <- perf_event_open=0x3 errno=14 cover=4212 #0 [1222807ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [1222807ms] <- socket$nl_xfrm=0x4 errno=14 cover=4181 #0 [1222808ms] -> sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) #0 [1222808ms] <- sendmsg$NL80211_CMD_STOP_P2P_DEVICE=0xffffffffffffffff errno=9 cover=81 #0 [1222809ms] -> sendmsg$nl_xfrm(0x4, 0x20002e00, 0x0) #0 [1222811ms] <- sendmsg$nl_xfrm=0x13c errno=14 cover=34525 13:07:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) 2021/11/11 13:07:36 result hanged=false: [1222859ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111908 #0 [1222879ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [1222879ms] <- perf_event_open=0x3 errno=14 cover=4267 #0 [1222880ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [1222880ms] <- socket$nl_xfrm=0x4 errno=14 cover=4326 #0 [1222882ms] -> sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) #0 [1222882ms] <- sendmsg$NL80211_CMD_STOP_P2P_DEVICE=0xffffffffffffffff errno=9 cover=81 #0 [1222883ms] -> sendmsg$nl_xfrm(0x4, 0x20002e00, 0x0) #0 [1222883ms] <- sendmsg$nl_xfrm=0x13c errno=14 cover=8094 2021/11/11 13:07:36 result hanged=false: 2021/11/11 13:07:36 added new input for call #3 sendmsg$nl_xfrm to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) 13:07:36 executing program 0: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2021/11/11 13:07:36 poll: candidates=8 inputs=0 signal=0 [1222934ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111910 #0 [1222953ms] -> timer_create(0x3, 0x20000000, 0x20000040) #0 [1222954ms] <- timer_create=0x0 errno=14 cover=259 #0 [1222954ms] -> timer_settime(0x0, 0x0, 0x20000080, 0x0) #0 [1222955ms] <- timer_settime=0x0 errno=14 cover=177 #0 [1222955ms] -> timer_create(0x0, 0x0, 0x0) #0 [1222955ms] <- timer_create=0xffffffffffffffff errno=14 cover=717 #0 [1222956ms] -> timer_create(0x3, 0x20000000, 0x20000040) #0 [1222956ms] <- timer_create=0x0 errno=14 cover=256 #0 [1222957ms] -> timer_settime(0x2, 0x0, 0x20000080, 0x0) #0 [1222957ms] <- timer_settime=0x0 errno=14 cover=178 #0 [1222960ms] -> clone3(0x200005c0, 0x58) #0 [1222982ms] <- clone3=0xffffffffffffffff errno=11 cover=159312 enabling collider #0 [1222987ms] -> timer_create(0x3, 0x20000000, 0x20000040) #0 [1222989ms] <- timer_create=0x0 errno=14 cover=267 #0 [1222990ms] -> timer_settime(0x0, 0x0, 0x20000080, 0x0) #0 [1222990ms] <- timer_settime=0x0 errno=14 cover=186 pthread_create failed (errno 11) 13:07:36 executing program 0: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2021/11/11 13:07:36 result hanged=false: 2021/11/11 13:07:36 #0: triaging type=7 2021/11/11 13:07:36 triaging input for call #5 clone3 (new signal=10) [1223080ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112013 #0 [1223102ms] -> timer_create(0x3, 0x20000000, 0x20000040) #0 [1223104ms] <- timer_create=0x0 errno=14 cover=259 #0 [1223105ms] -> timer_settime(0x0, 0x0, 0x20000080, 0x0) #0 [1223105ms] <- timer_settime=0x0 errno=14 cover=177 #0 [1223108ms] -> timer_create(0x0, 0x0, 0x0) #0 [1223108ms] <- timer_create=0xffffffffffffffff errno=14 cover=717 #0 [1223110ms] -> timer_create(0x3, 0x20000000, 0x20000040) #0 [1223110ms] <- timer_create=0x0 errno=14 cover=256 #0 [1223110ms] -> timer_settime(0x2, 0x0, 0x20000080, 0x0) #0 [1223110ms] <- timer_settime=0x0 errno=14 cover=178 #0 [1223112ms] -> clone3(0x200005c0, 0x58) #0 [1223135ms] <- clone3=0xffffffffffffffff errno=11 cover=159111 2021/11/11 13:07:36 result hanged=false: 13:07:36 executing program 0: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [1223195ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112016 #0 [1223238ms] -> timer_create(0x3, 0x20000000, 0x20000040) #0 [1223239ms] <- timer_create=0x0 errno=14 cover=259 #0 [1223240ms] -> timer_settime(0x0, 0x0, 0x20000080, 0x0) #0 [1223240ms] <- timer_settime=0x0 errno=14 cover=177 #0 [1223241ms] -> timer_create(0x0, 0x0, 0x0) #0 [1223241ms] <- timer_create=0xffffffffffffffff errno=14 cover=728 #0 [1223243ms] -> timer_create(0x3, 0x20000000, 0x20000040) #0 [1223243ms] <- timer_create=0x0 errno=14 cover=256 #0 [1223244ms] -> timer_settime(0x2, 0x0, 0x20000080, 0x0) #0 [1223245ms] <- timer_settime=0x0 errno=14 cover=178 #0 [1223245ms] -> clone3(0x200005c0, 0x58) #0 [1223267ms] <- clone3=0xffffffffffffffff errno=11 cover=166294 2021/11/11 13:07:36 result hanged=false: 13:07:36 executing program 0: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [1223326ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112019 #0 [1223369ms] -> timer_create(0x3, 0x20000000, 0x20000040) #0 [1223370ms] <- timer_create=0x0 errno=14 cover=259 #0 [1223371ms] -> timer_settime(0x0, 0x0, 0x20000080, 0x0) #0 [1223371ms] <- timer_settime=0x0 errno=14 cover=177 #0 [1223372ms] -> timer_create(0x0, 0x0, 0x0) #0 [1223372ms] <- timer_create=0xffffffffffffffff errno=14 cover=728 #0 [1223372ms] -> timer_create(0x3, 0x20000000, 0x20000040) #0 [1223372ms] <- timer_create=0x0 errno=14 cover=256 #0 [1223373ms] -> timer_settime(0x2, 0x0, 0x20000080, 0x0) #0 [1223373ms] <- timer_settime=0x0 errno=14 cover=178 #0 [1223373ms] -> clone3(0x200005c0, 0x58) #0 [1223395ms] <- clone3=0xffffffffffffffff errno=11 cover=162316 2021/11/11 13:07:36 result hanged=false: 2021/11/11 13:07:36 added new input for call #5 clone3 to corpus: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2021/11/11 13:07:36 #0: triaging type=7 2021/11/11 13:07:36 triaging input for call #4 timer_settime (new signal=1) 13:07:36 executing program 0: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [1223471ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112022 #0 [1223492ms] -> timer_create(0x3, 0x20000000, 0x20000040) #0 [1223492ms] <- timer_create=0x0 errno=14 cover=259 #0 [1223493ms] -> timer_settime(0x0, 0x0, 0x20000080, 0x0) #0 [1223493ms] <- timer_settime=0x0 errno=14 cover=177 #0 [1223493ms] -> timer_create(0x0, 0x0, 0x0) #0 [1223494ms] <- timer_create=0xffffffffffffffff errno=14 cover=717 #0 [1223494ms] -> timer_create(0x3, 0x20000000, 0x20000040) #0 [1223494ms] <- timer_create=0x0 errno=14 cover=306 #0 [1223494ms] -> timer_settime(0x2, 0x0, 0x20000080, 0x0) #0 [1223494ms] <- timer_settime=0x0 errno=14 cover=178 #0 [1223494ms] -> clone3(0x200005c0, 0x58) #0 [1223516ms] <- clone3=0xffffffffffffffff errno=11 cover=160786 13:07:37 executing program 0: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2021/11/11 13:07:37 result hanged=false: [1223581ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112025 #0 [1223626ms] -> timer_create(0x3, 0x20000000, 0x20000040) #0 [1223626ms] <- timer_create=0x0 errno=14 cover=259 #0 [1223627ms] -> timer_settime(0x0, 0x0, 0x20000080, 0x0) #0 [1223627ms] <- timer_settime=0x0 errno=14 cover=177 #0 [1223627ms] -> timer_create(0x0, 0x0, 0x0) #0 [1223627ms] <- timer_create=0xffffffffffffffff errno=14 cover=728 #0 [1223627ms] -> timer_create(0x3, 0x20000000, 0x20000040) #0 [1223627ms] <- timer_create=0x0 errno=14 cover=256 #0 [1223628ms] -> timer_settime(0x2, 0x0, 0x20000080, 0x0) #0 [1223628ms] <- timer_settime=0x0 errno=14 cover=178 #0 [1223628ms] -> clone3(0x200005c0, 0x58) #0 [1223653ms] <- clone3=0xffffffffffffffff errno=11 cover=160290 13:07:37 executing program 0: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2021/11/11 13:07:37 result hanged=false: [1223711ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112028 #0 [1223752ms] -> timer_create(0x3, 0x20000000, 0x20000040) #0 [1223752ms] <- timer_create=0x0 errno=14 cover=259 #0 [1223754ms] -> timer_settime(0x0, 0x0, 0x20000080, 0x0) #0 [1223754ms] <- timer_settime=0x0 errno=14 cover=177 #0 [1223756ms] -> timer_create(0x0, 0x0, 0x0) #0 [1223756ms] <- timer_create=0xffffffffffffffff errno=14 cover=778 #0 [1223757ms] -> timer_create(0x3, 0x20000000, 0x20000040) #0 [1223757ms] <- timer_create=0x0 errno=14 cover=256 #0 [1223757ms] -> timer_settime(0x2, 0x0, 0x20000080, 0x0) #0 [1223757ms] <- timer_settime=0x0 errno=14 cover=178 #0 [1223757ms] -> clone3(0x200005c0, 0x58) #0 [1223781ms] <- clone3=0xffffffffffffffff errno=11 cover=163825 2021/11/11 13:07:37 result hanged=false: 2021/11/11 13:07:37 added new input for call #4 timer_settime to corpus: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:07:37 executing program 0: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2021/11/11 13:07:37 #0: triaging type=7 2021/11/11 13:07:37 triaging input for call #2 timer_create (new signal=1) [1223846ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112031 #0 [1223874ms] -> timer_create(0x3, 0x20000000, 0x20000040) #0 [1223875ms] <- timer_create=0x0 errno=14 cover=292 #0 [1223875ms] -> timer_settime(0x0, 0x0, 0x20000080, 0x0) #0 [1223875ms] <- timer_settime=0x0 errno=14 cover=177 #0 [1223876ms] -> timer_create(0x0, 0x0, 0x0) #0 [1223876ms] <- timer_create=0xffffffffffffffff errno=14 cover=717 #0 [1223876ms] -> timer_create(0x3, 0x20000000, 0x20000040) #0 [1223876ms] <- timer_create=0x0 errno=14 cover=256 #0 [1223877ms] -> timer_settime(0x2, 0x0, 0x20000080, 0x0) #0 [1223877ms] <- timer_settime=0x0 errno=14 cover=178 #0 [1223877ms] -> clone3(0x200005c0, 0x58) #0 [1223901ms] <- clone3=0xffffffffffffffff errno=11 cover=167490 2021/11/11 13:07:37 result hanged=false: 13:07:37 executing program 0: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [1223965ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112034 #0 [1223986ms] -> timer_create(0x3, 0x20000000, 0x20000040) #0 [1223986ms] <- timer_create=0x0 errno=14 cover=259 #0 [1223987ms] -> timer_settime(0x0, 0x0, 0x20000080, 0x0) #0 [1223987ms] <- timer_settime=0x0 errno=14 cover=177 #0 [1223988ms] -> timer_create(0x0, 0x0, 0x0) #0 [1223989ms] <- timer_create=0xffffffffffffffff errno=14 cover=717 #0 [1223989ms] -> timer_create(0x3, 0x20000000, 0x20000040) #0 [1223989ms] <- timer_create=0x0 errno=14 cover=256 #0 [1223991ms] -> timer_settime(0x2, 0x0, 0x20000080, 0x0) #0 [1223991ms] <- timer_settime=0x0 errno=14 cover=178 #0 [1223992ms] -> clone3(0x200005c0, 0x58) #0 [1224023ms] <- clone3=0xffffffffffffffff errno=11 cover=161106 2021/11/11 13:07:37 result hanged=false: 13:07:37 executing program 0: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [1224082ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112037 #0 [1224121ms] -> timer_create(0x3, 0x20000000, 0x20000040) #0 [1224121ms] <- timer_create=0x0 errno=14 cover=259 #0 [1224122ms] -> timer_settime(0x0, 0x0, 0x20000080, 0x0) #0 [1224122ms] <- timer_settime=0x0 errno=14 cover=177 #0 [1224122ms] -> timer_create(0x0, 0x0, 0x0) #0 [1224123ms] <- timer_create=0xffffffffffffffff errno=14 cover=731 #0 [1224123ms] -> timer_create(0x3, 0x20000000, 0x20000040) #0 [1224124ms] <- timer_create=0x0 errno=14 cover=326 #0 [1224125ms] -> timer_settime(0x2, 0x0, 0x20000080, 0x0) #0 [1224125ms] <- timer_settime=0x0 errno=14 cover=178 #0 [1224125ms] -> clone3(0x200005c0, 0x58) #0 [1224145ms] <- clone3=0xffffffffffffffff errno=11 cover=160690 2021/11/11 13:07:37 result hanged=false: 2021/11/11 13:07:37 added new input for call #2 timer_create to corpus: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:07:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) [1224202ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112040 #0 [1224229ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1224232ms] <- socket$inet6_tcp=0x3 errno=14 cover=1766 #0 [1224232ms] -> getsockopt$inet6_int(0x3, 0x29, 0x50, 0x0, 0x20000080) #0 [1224232ms] <- getsockopt$inet6_int=0xffffffffffffffff errno=22 cover=158 enabling collider #0 [1224233ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1224238ms] <- socket$inet6_tcp=0x3 errno=14 cover=1852 2021/11/11 13:07:37 result hanged=false: 13:07:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) 2021/11/11 13:07:37 #0: triaging type=7 2021/11/11 13:07:37 triaging input for call #1 getsockopt$inet6_int (new signal=7) [1224292ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112042 #0 [1224313ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1224314ms] <- socket$inet6_tcp=0x3 errno=14 cover=1734 #0 [1224315ms] -> getsockopt$inet6_int(0x3, 0x29, 0x50, 0x0, 0x20000080) #0 [1224315ms] <- getsockopt$inet6_int=0xffffffffffffffff errno=22 cover=158 13:07:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) 2021/11/11 13:07:37 result hanged=false: [1224359ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112044 #0 [1224378ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1224380ms] <- socket$inet6_tcp=0x3 errno=14 cover=1770 #0 [1224383ms] -> getsockopt$inet6_int(0x3, 0x29, 0x50, 0x0, 0x20000080) #0 [1224383ms] <- getsockopt$inet6_int=0xffffffffffffffff errno=22 cover=158 13:07:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) 2021/11/11 13:07:37 result hanged=false: [1224432ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112046 #0 [1224453ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [1224453ms] <- socket$inet6_tcp=0x3 errno=14 cover=1756 #0 [1224454ms] -> getsockopt$inet6_int(0x3, 0x29, 0x50, 0x0, 0x20000080) #0 [1224454ms] <- getsockopt$inet6_int=0xffffffffffffffff errno=22 cover=158 2021/11/11 13:07:37 result hanged=false: 2021/11/11 13:07:37 added new input for call #1 getsockopt$inet6_int to corpus: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) 13:07:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x14, 0x0, 0x4}, 0x14}}, 0x0) [1224501ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112048 #0 [1224526ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1224526ms] <- socket$nl_generic=0x3 errno=14 cover=1434 #0 [1224527ms] -> sendmsg$SMC_PNETID_DEL(0x3, 0x20000b40, 0x0) #0 [1224527ms] <- sendmsg$SMC_PNETID_DEL=0x14 errno=14 cover=1509 enabling collider #0 [1224528ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [1224528ms] <- socket$nl_generic=0x3 errno=14 cover=1433 13:07:38 executing program 0: mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)) pipe2$9p(&(0x7f0000001340), 0x0) 2021/11/11 13:07:38 result hanged=false: [1224575ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112050 #0 [1224602ms] -> mount$9p_fd(0x0, 0x20000000, 0x0, 0x0, 0x20000080) #0 [1224603ms] <- mount$9p_fd=0xffffffffffffffff errno=2 cover=1331 #0 [1224604ms] -> pipe2$9p(0x20001340, 0x0) #0 [1224606ms] <- pipe2$9p=0x0 errno=14 cover=1473 enabling collider #0 [1224607ms] -> mount$9p_fd(0x0, 0x20000000, 0x0, 0x0, 0x20000080) #0 [1224608ms] <- mount$9p_fd=0xffffffffffffffff errno=2 cover=674 2021/11/11 13:07:38 result hanged=false: 13:07:38 executing program 0: io_uring_setup(0x7f9, &(0x7f00000018c0)) [1224652ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112052 #0 [1224675ms] -> io_uring_setup(0x7f9, 0x200018c0) #0 [1224676ms] <- io_uring_setup=0x3 errno=14 cover=3923 enabling collider #0 [1224677ms] -> io_uring_setup(0x7f9, 0x200018c0) #0 [1224679ms] <- io_uring_setup=0x3 errno=14 cover=2849 13:07:38 executing program 0: io_uring_setup(0x302e, &(0x7f0000000000)={0x0, 0x0, 0x20}) 2021/11/11 13:07:38 result hanged=false: [1224727ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112054 #0 [1224748ms] -> io_uring_setup(0x302e, 0x20000000) #0 [1224749ms] <- io_uring_setup=0xffffffffffffffff errno=9 cover=4219 enabling collider #0 [1224751ms] -> io_uring_setup(0x302e, 0x20000000) #0 [1224751ms] <- io_uring_setup=0xffffffffffffffff errno=9 cover=4166 13:07:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000640)) 2021/11/11 13:07:38 result hanged=false: [1224797ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112056 #0 [1224817ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [1224818ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3447 #0 [1224820ms] -> ioctl$TIOCL_SETSEL(0x3, 0x541c, 0x20000640) #0 [1224820ms] <- ioctl$TIOCL_SETSEL=0x0 errno=14 cover=704 enabling collider #0 [1224820ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [1224821ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3432 13:07:38 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_SPLICE, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 2021/11/11 13:07:38 result hanged=false: [1224868ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112058 #0 [1224890ms] -> syz_io_uring_setup(0x4d4f, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000200, 0x20000140) #0 [1224893ms] <- syz_io_uring_setup=0x3 errno=14 cover=17782 #0 [1224894ms] -> syz_io_uring_submit(0x200a0000, 0x20ffc000, 0x20000000, 0x0) #0 [1224894ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1224894ms] -> mmap$IORING_OFF_SQ_RING(0x20ffc000, 0x4000, 0x100000e, 0x13, 0x3, 0x0) #0 [1224894ms] <- mmap$IORING_OFF_SQ_RING=0x20ffc000 errno=14 cover=1946 #0 [1224894ms] -> syz_io_uring_submit(0x20ffc000, 0x20ffc000, 0x20000100, 0x4) #0 [1224894ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1224894ms] -> io_uring_enter(0x3, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [1224895ms] <- io_uring_enter=0x2 errno=14 cover=2864 #0 [1224895ms] -> execveat(0xffffffffffffffff, 0x20000040, 0x0, 0x0, 0x0) #0 [1224898ms] <- execveat=0xffffffffffffffff errno=9 cover=25554 enabling collider #0 [1224899ms] -> syz_io_uring_setup(0x4d4f, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000200, 0x20000140) #0 [1224902ms] <- syz_io_uring_setup=0x3 errno=14 cover=33299 #0 [1224903ms] -> syz_io_uring_submit(0x200a0000, 0x20ffc000, 0x20000000, 0x0) #0 [1224903ms] <- syz_io_uring_submit=0x0 errno=14 cover=57 pthread_create failed (errno 11) 2021/11/11 13:07:38 result hanged=false: 2021/11/11 13:07:38 #0: triaging type=7 13:07:38 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_SPLICE, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 2021/11/11 13:07:38 triaging input for call #5 execveat (new signal=21) [1224979ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112160 #0 [1225002ms] -> syz_io_uring_setup(0x4d4f, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000200, 0x20000140) #0 [1225007ms] <- syz_io_uring_setup=0x3 errno=14 cover=18024 #0 [1225009ms] -> syz_io_uring_submit(0x200a0000, 0x20ffc000, 0x20000000, 0x0) #0 [1225009ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1225009ms] -> mmap$IORING_OFF_SQ_RING(0x20ffc000, 0x4000, 0x100000e, 0x13, 0x3, 0x0) #0 [1225009ms] <- mmap$IORING_OFF_SQ_RING=0x20ffc000 errno=14 cover=1665 #0 [1225014ms] -> syz_io_uring_submit(0x20ffc000, 0x20ffc000, 0x20000100, 0x4) #0 [1225014ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [1225014ms] -> io_uring_enter(0x3, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [1225015ms] <- io_uring_enter=0x2 errno=14 cover=842 #0 [1225016ms] -> execveat(0xffffffffffffffff, 0x20000040, 0x0, 0x0, 0x0) 2021/11/11 13:07:40 poll: candidates=0 inputs=0 signal=0 killing hanging pid 112160 kill is not working failed to open /sys/fs/fuse/connections: 2 2021/11/11 13:07:52 poll: candidates=0 inputs=0 signal=0 2021/11/11 13:08:04 poll: candidates=0 inputs=0 signal=0 2021/11/11 13:08:16 poll: candidates=0 inputs=0 signal=0 [ 1321.323329] kmemleak: 761 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2021/11/11 13:08:28 result hanged=true: signal: killed 13:08:28 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_SPLICE, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 2021/11/11 13:08:28 poll: candidates=0 inputs=0 signal=0 2021/11/11 13:08:28 fuzzer detected executor failure='executor 0: failed to write control pipe: write |1: broken pipe', retrying #1 bitmap is not found, coverage filter disabled spawned loop pid 116090 mount(fusectl) failed: 2 hci dev id: 1 01 03 0c 00 01 03 10 00 01 01 10 00 01 09 10 00 01 05 10 00 01 23 0c 00 01 14 0c 00 01 25 0c 00 01 38 0c 00 01 39 0c 00 01 05 0c 01 00 01 16 0c 02 00 7d 01 03 0c 00 01 03 10 00 01 01 10 00 01 09 10 00 01 05 10 00 01 23 0c 00 01 14 0c 00 01 25 0c 00 01 38 0c 00 01 39 0c 00 01 05 0c 01 00 01 16 0c 02 00 7d 01 1a 0c 01 02 netlink: add addr 172.30.0.1 dev nr0: No such device netlink: device nr0 up master NULL: No such device netlink: add addr 172.30.1.1 dev rose0: No such device netlink: device rose0 up master NULL: No such device netlink: adding device ip6gretap0 type ip6gretap: Operation not supported netlink: adding device bridge0 type bridge: Operation not supported netlink: adding device vcan0 type vcan: Operation not supported netlink: adding device bond0 type bond: Operation not supported netlink: adding device team0 type team: Operation not supported netlink: adding device dummy0 type dummy: Operation not supported netlink: adding device nlmon0 type nlmon: Operation not supported netlink: adding device caif0 type caif: Operation not supported netlink: adding device batadv0 type batadv: Operation not supported netlink: adding device vxcan1 type vxcan: Operation not supported netlink: adding device netdevsim0 type netdevsim: Operation not supported netlink: adding device (null) type veth: Operation not supported netlink: adding device xfrm0 type xfrm: Operation not supported netlink: adding device wg0 type wireguard: Operation not supported netlink: adding device wg1 type wireguard: Operation not supported netlink: adding device wg2 type wireguard: Operation not supported netlink: adding device bridge_slave_0 type veth peer veth0_to_bridge: Operation not supported netlink: adding device bridge_slave_1 type veth peer veth1_to_bridge: Operation not supported netlink: device bridge_slave_0 up master bridge0: No such device netlink: device bridge_slave_1 up master bridge0: No such device netlink: adding device bond_slave_0 type veth peer veth0_to_bond: Operation not supported netlink: adding device bond_slave_1 type veth peer veth1_to_bond: Operation not supported netlink: device bond_slave_0 up master bond0: No such device netlink: device bond_slave_1 up master bond0: No such device netlink: adding device team_slave_0 type veth peer veth0_to_team: Operation not supported netlink: adding device team_slave_1 type veth peer veth1_to_team: Operation not supported netlink: device team_slave_0 up master team0: No such device netlink: device team_slave_1 up master team0: No such device netlink: adding device batadv_slave_0 type veth peer veth0_to_batadv: Operation not supported netlink: adding device batadv_slave_1 type veth peer veth1_to_batadv: Operation not supported netlink: device batadv_slave_0 up master batadv0: No such device netlink: device batadv_slave_1 up master batadv0: No such device netlink: device bridge_slave_0 up master NULL: No such device netlink: device bridge_slave_1 up master NULL: No such device netlink: adding device hsr_slave_0 type veth peer veth0_to_hsr: Operation not supported netlink: adding device hsr_slave_1 type veth peer veth1_to_hsr: Operation not supported netlink: adding device hsr0 type hsr slave1 hsr_slave_0 slave2 hsr_slave_1: Unknown error -95 netlink: device hsr_slave_0 up master NULL: No such device netlink: device hsr_slave_1 up master NULL: No such device netlink: adding device veth0_virt_wifi type veth peer veth1_virt_wifi: Operation not supported netlink: adding device virt_wifi0 type virt_wifi link veth1_virt_wifi: Operation not supported netlink: adding device veth0_vlan type veth peer veth1_vlan: Operation not supported netlink: add vlan0 type vlan link veth0_vlan id 0: Operation not supported netlink: add vlan1 type vlan link veth0_vlan id 1: Operation not supported netlink: add macvlan0 type macvlan link veth1_vlan mode 4: Operation not supported netlink: add macvlan1 type macvlan link veth1_vlan mode 4: Operation not supported netlink: add ipvlan0 type ipvlan link veth0_vlan mode 0: Operation not supported netlink: add ipvlan1 type ipvlan link veth0_vlan mode 2: Operation not supported netlink: adding device veth0_macvtap type veth peer veth1_macvtap: Operation not supported netlink: adding device macvtap0 type macvtap link veth0_macvtap: Operation not supported netlink: adding device macsec0 type macsec link veth1_macvtap: Operation not supported netlink: add geneve0 type geneve vni 0: Operation not supported netlink: add geneve1 type geneve vni 1: Operation not supported netlink: failed to get family id for wireguard: No such file or directory netlink: add addr 172.20.20.12 dev bridge0: No such device netlink: add addr fe80::0c dev bridge0: No such device netlink: device bridge0 up master NULL: No such device netlink: add addr 172.20.20.13 dev vcan0: No such device netlink: device vcan0 up master NULL: No such device netlink: add addr 172.20.20.14 dev tunl0: No such device netlink: add addr fe80::0e dev tunl0: No such device netlink: device tunl0 up master NULL: No such device netlink: add addr 172.20.20.15 dev gre0: No such device netlink: add addr fe80::0f dev gre0: No such device netlink: device gre0 up master NULL: No such device netlink: add addr 172.20.20.16 dev gretap0: No such device netlink: add addr fe80::10 dev gretap0: No such device netlink: device gretap0 up master NULL: No such device netlink: add addr 172.20.20.17 dev ip_vti0: No such device netlink: add addr fe80::11 dev ip_vti0: No such device netlink: device ip_vti0 up master NULL: No such device netlink: add addr 172.20.20.18 dev ip6_vti0: No such device netlink: add addr fe80::12 dev ip6_vti0: No such device netlink: device ip6_vti0 up master NULL: No such device netlink: add addr 172.20.20.19 dev ip6tnl0: No such device netlink: add addr fe80::13 dev ip6tnl0: No such device netlink: device ip6tnl0 up master NULL: No such device netlink: add addr 172.20.20.20 dev ip6gre0: No such device netlink: add addr fe80::14 dev ip6gre0: No such device netlink: device ip6gre0 up master NULL: No such device netlink: add addr 172.20.20.21 dev ip6gretap0: No such device netlink: add addr fe80::15 dev ip6gretap0: No such device netlink: device ip6gretap0 up master NULL: No such device netlink: add addr 172.20.20.22 dev erspan0: No such device netlink: add addr fe80::16 dev erspan0: No such device netlink: device erspan0 up master NULL: No such device netlink: add addr 172.20.20.23 dev bond0: No such device netlink: add addr fe80::17 dev bond0: No such device netlink: device bond0 up master NULL: No such device netlink: add addr 172.20.20.24 dev veth0: No such device netlink: add addr fe80::18 dev veth0: No such device netlink: device veth0 up master NULL: No such device netlink: add addr 172.20.20.25 dev veth1: No such device netlink: add addr fe80::19 dev veth1: No such device netlink: device veth1 up master NULL: No such device netlink: add addr 172.20.20.26 dev team0: No such device netlink: add addr fe80::1a dev team0: No such device netlink: device team0 up master NULL: No such device netlink: add addr 172.20.20.27 dev veth0_to_bridge: No such device netlink: add addr fe80::1b dev veth0_to_bridge: No such device netlink: device veth0_to_bridge up master NULL: No such device netlink: add addr 172.20.20.28 dev veth1_to_bridge: No such device netlink: add addr fe80::1c dev veth1_to_bridge: No such device netlink: device veth1_to_bridge up master NULL: No such device netlink: add addr 172.20.20.29 dev veth0_to_bond: No such device netlink: add addr fe80::1d dev veth0_to_bond: No such device netlink: device veth0_to_bond up master NULL: No such device netlink: add addr 172.20.20.30 dev veth1_to_bond: No such device netlink: add addr fe80::1e dev veth1_to_bond: No such device netlink: device veth1_to_bond up master NULL: No such device netlink: add addr 172.20.20.31 dev veth0_to_team: No such device netlink: add addr fe80::1f dev veth0_to_team: No such device netlink: device veth0_to_team up master NULL: No such device netlink: add addr 172.20.20.32 dev veth1_to_team: No such device netlink: add addr fe80::20 dev veth1_to_team: No such device netlink: device veth1_to_team up master NULL: No such device netlink: add addr 172.20.20.33 dev veth0_to_hsr: No such device netlink: add addr fe80::21 dev veth0_to_hsr: No such device netlink: device veth0_to_hsr up master NULL: No such device netlink: add addr 172.20.20.34 dev veth1_to_hsr: No such device netlink: add addr fe80::22 dev veth1_to_hsr: No such device netlink: device veth1_to_hsr up master NULL: No such device netlink: add addr 172.20.20.35 dev hsr0: No such device netlink: add addr fe80::23 dev hsr0: No such device netlink: device hsr0 up master NULL: No such device netlink: add addr 172.20.20.36 dev dummy0: No such device netlink: add addr fe80::24 dev dummy0: No such device netlink: device dummy0 up master NULL: No such device netlink: add addr 172.20.20.37 dev nlmon0: No such device netlink: add addr fe80::25 dev nlmon0: No such device netlink: device nlmon0 up master NULL: No such device netlink: add addr 172.20.20.38 dev vxcan0: No such device netlink: device vxcan0 up master NULL: No such device netlink: add addr 172.20.20.39 dev vxcan1: No such device netlink: device vxcan1 up master NULL: No such device netlink: add addr 172.20.20.40 dev caif0: No such device netlink: add addr fe80::28 dev caif0: No such device netlink: device caif0 up master NULL: No such device netlink: add addr 172.20.20.41 dev batadv0: No such device netlink: add addr fe80::29 dev batadv0: No such device netlink: device batadv0 up master NULL: No such device netlink: add addr 172.20.20.42 dev netdevsim0: No such device netlink: add addr fe80::2a dev netdevsim0: No such device netlink: device netdevsim0 up master NULL: No such device netlink: add addr 172.20.20.43 dev xfrm0: No such device netlink: add addr fe80::2b dev xfrm0: No such device netlink: device xfrm0 up master NULL: No such device netlink: add addr 172.20.20.44 dev veth0_virt_wifi: No such device netlink: add addr fe80::2c dev veth0_virt_wifi: No such device netlink: device veth0_virt_wifi up master NULL: No such device netlink: add addr 172.20.20.45 dev veth1_virt_wifi: No such device netlink: add addr fe80::2d dev veth1_virt_wifi: No such device netlink: device veth1_virt_wifi up master NULL: No such device netlink: add addr 172.20.20.46 dev virt_wifi0: No such device netlink: add addr fe80::2e dev virt_wifi0: No such device netlink: device virt_wifi0 up master NULL: No such device netlink: add addr 172.20.20.47 dev veth0_vlan: No such device netlink: add addr fe80::2f dev veth0_vlan: No such device netlink: device veth0_vlan up master NULL: No such device netlink: add addr 172.20.20.48 dev veth1_vlan: No such device netlink: add addr fe80::30 dev veth1_vlan: No such device netlink: device veth1_vlan up master NULL: No such device netlink: add addr 172.20.20.49 dev vlan0: No such device netlink: add addr fe80::31 dev vlan0: No such device netlink: device vlan0 up master NULL: No such device netlink: add addr 172.20.20.50 dev vlan1: No such device netlink: add addr fe80::32 dev vlan1: No such device netlink: device vlan1 up master NULL: No such device netlink: add addr 172.20.20.51 dev macvlan0: No such device netlink: add addr fe80::33 dev macvlan0: No such device netlink: device macvlan0 up master NULL: No such device netlink: add addr 172.20.20.52 dev macvlan1: No such device netlink: add addr fe80::34 dev macvlan1: No such device netlink: device macvlan1 up master NULL: No such device netlink: add addr 172.20.20.53 dev ipvlan0: No such device netlink: add addr fe80::35 dev ipvlan0: No such device netlink: device ipvlan0 up master NULL: No such device netlink: add addr 172.20.20.54 dev ipvlan1: No such device netlink: add addr fe80::36 dev ipvlan1: No such device netlink: device ipvlan1 up master NULL: No such device netlink: add addr 172.20.20.55 dev veth0_macvtap: No such device netlink: add addr fe80::37 dev veth0_macvtap: No such device netlink: device veth0_macvtap up master NULL: No such device netlink: add addr 172.20.20.56 dev veth1_macvtap: No such device netlink: add addr fe80::38 dev veth1_macvtap: No such device netlink: device veth1_macvtap up master NULL: No such device netlink: add addr 172.20.20.57 dev macvtap0: No such device netlink: add addr fe80::39 dev macvtap0: No such device netlink: device macvtap0 up master NULL: No such device netlink: add addr 172.20.20.58 dev macsec0: No such device netlink: add addr fe80::3a dev macsec0: No such device netlink: device macsec0 up master NULL: No such device netlink: add addr 172.20.20.59 dev veth0_to_batadv: No such device netlink: add addr fe80::3b dev veth0_to_batadv: No such device netlink: device veth0_to_batadv up master NULL: No such device netlink: add addr 172.20.20.60 dev veth1_to_batadv: No such device netlink: add addr fe80::3c dev veth1_to_batadv: No such device netlink: device veth1_to_batadv up master NULL: No such device netlink: add addr 172.20.20.61 dev batadv_slave_0: No such device netlink: add addr fe80::3d dev batadv_slave_0: No such device netlink: device batadv_slave_0 up master NULL: No such device netlink: add addr 172.20.20.62 dev batadv_slave_1: No such device netlink: add addr fe80::3e dev batadv_slave_1: No such device netlink: device batadv_slave_1 up master NULL: No such device netlink: add addr 172.20.20.63 dev geneve0: No such device netlink: add addr fe80::3f dev geneve0: No such device netlink: device geneve0 up master NULL: No such device netlink: add addr 172.20.20.64 dev geneve1: No such device netlink: add addr fe80::40 dev geneve1: No such device netlink: device geneve1 up master NULL: No such device netlink: add addr 172.20.20.65 dev wg0: No such device netlink: add addr fe80::41 dev wg0: No such device netlink: device wg0 up master NULL: No such device netlink: add addr 172.20.20.66 dev wg1: No such device netlink: add addr fe80::42 dev wg1: No such device netlink: device wg1 up master NULL: No such device netlink: add addr 172.20.20.67 dev wg2: No such device netlink: add addr fe80::43 dev wg2: No such device netlink: device wg2 up master NULL: No such device [ 1332.525940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.527930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.530903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1332.573413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.575458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.577873] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready mkdir(/dev/binderfs) failed: 17 mount of binder at /dev/binderfs failed: 19 mkdir(/syzcgroup/unified/syz0) failed: 17 mkdir(/syzcgroup/cpu/syz0) failed: 17 mkdir(/syzcgroup/net/syz0) failed: 17 iptable checkpoint filter/2: checkpoint entries=4 hooks=e size=632 iptable checkpoint mangle/2: checkpoint entries=6 hooks=1f size=936 iptable checkpoint filter/10: checkpoint entries=4 hooks=e size=856 iptable checkpoint mangle/10: checkpoint entries=6 hooks=1f size=1272 [7678ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3 #0 [7700ms] -> syz_io_uring_setup(0x4d4f, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000200, 0x20000140) #0 [7709ms] <- syz_io_uring_setup=0x3 errno=14 cover=17856 #0 [7711ms] -> syz_io_uring_submit(0x200a0000, 0x20ffc000, 0x20000000, 0x0) #0 [7711ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [7711ms] -> mmap$IORING_OFF_SQ_RING(0x20ffc000, 0x4000, 0x100000e, 0x13, 0x3, 0x0) #0 [7712ms] <- mmap$IORING_OFF_SQ_RING=0x20ffc000 errno=14 cover=1883 #0 [7713ms] -> syz_io_uring_submit(0x20ffc000, 0x20ffc000, 0x20000100, 0x4) #0 [7713ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [7713ms] -> io_uring_enter(0x3, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [7713ms] <- io_uring_enter=0x2 errno=14 cover=805 #0 [7714ms] -> execveat(0xffffffffffffffff, 0x20000040, 0x0, 0x0, 0x0) #0 [7715ms] <- execveat=0xffffffffffffffff errno=9 cover=25597 2021/11/11 13:08:37 result hanged=false: 13:08:37 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_SPLICE, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) [7765ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5 #0 [7785ms] -> syz_io_uring_setup(0x4d4f, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000200, 0x20000140) #0 [7793ms] <- syz_io_uring_setup=0x3 errno=14 cover=17823 #0 [7795ms] -> syz_io_uring_submit(0x200a0000, 0x20ffc000, 0x20000000, 0x0) #0 [7796ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [7796ms] -> mmap$IORING_OFF_SQ_RING(0x20ffc000, 0x4000, 0x100000e, 0x13, 0x3, 0x0) #0 [7797ms] <- mmap$IORING_OFF_SQ_RING=0x20ffc000 errno=14 cover=1589 #0 [7797ms] -> syz_io_uring_submit(0x20ffc000, 0x20ffc000, 0x20000100, 0x4) #0 [7797ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [7797ms] -> io_uring_enter(0x3, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [7797ms] <- io_uring_enter=0x2 errno=14 cover=842 #0 [7798ms] -> execveat(0xffffffffffffffff, 0x20000040, 0x0, 0x0, 0x0) #0 [7799ms] <- execveat=0xffffffffffffffff errno=9 cover=24955 2021/11/11 13:08:37 result hanged=false: 2021/11/11 13:08:37 added new input for call #5 execveat to corpus: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_SPLICE, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 13:08:37 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_SPLICE, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 2021/11/11 13:08:37 #0: triaging type=7 2021/11/11 13:08:37 triaging input for call #4 io_uring_enter (new signal=11) [7847ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 7 #0 [7869ms] -> syz_io_uring_setup(0x4d4f, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000200, 0x20000140) #0 [7873ms] <- syz_io_uring_setup=0x3 errno=14 cover=18084 #0 [7875ms] -> syz_io_uring_submit(0x200a0000, 0x20ffc000, 0x20000000, 0x0) #0 [7875ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [7876ms] -> mmap$IORING_OFF_SQ_RING(0x20ffc000, 0x4000, 0x100000e, 0x13, 0x3, 0x0) #0 [7877ms] <- mmap$IORING_OFF_SQ_RING=0x20ffc000 errno=14 cover=1611 #0 [7878ms] -> syz_io_uring_submit(0x20ffc000, 0x20ffc000, 0x20000100, 0x4) #0 [7878ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [7879ms] -> io_uring_enter(0x3, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [7879ms] <- io_uring_enter=0x2 errno=14 cover=810 #0 [7880ms] -> execveat(0xffffffffffffffff, 0x20000040, 0x0, 0x0, 0x0) killing hanging pid 7 2021/11/11 13:08:40 poll: candidates=0 inputs=0 signal=0 kill is not working failed to open /sys/fs/fuse/connections: 2 2021/11/11 13:08:52 poll: candidates=0 inputs=0 signal=0 2021/11/11 13:09:04 poll: candidates=0 inputs=0 signal=0 2021/11/11 13:09:16 poll: candidates=0 inputs=0 signal=0 2021/11/11 13:09:27 result hanged=true: signal: killed 13:09:27 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_SPLICE, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 2021/11/11 13:09:27 fuzzer detected executor failure='executor 0: failed to write control pipe: write |1: broken pipe', retrying #1 2021/11/11 13:09:28 poll: candidates=0 inputs=0 signal=0 bitmap is not found, coverage filter disabled spawned loop pid 116565 mount(fusectl) failed: 2 hci dev id: 2 01 03 0c 00 01 03 10 00 01 01 10 00 01 09 10 00 01 05 10 00 01 23 0c 00 01 14 0c 00 01 25 0c 00 01 38 0c 00 01 39 0c 00 01 05 0c 01 00 01 16 0c 02 00 7d 01 1a 0c 01 02 netlink: add addr 172.30.0.1 dev nr0: No such device netlink: device nr0 up master NULL: No such device netlink: add addr 172.30.1.1 dev rose0: No such device netlink: device rose0 up master NULL: No such device netlink: adding device ip6gretap0 type ip6gretap: Operation not supported netlink: adding device bridge0 type bridge: Operation not supported netlink: adding device vcan0 type vcan: Operation not supported netlink: adding device bond0 type bond: Operation not supported netlink: adding device team0 type team: Operation not supported netlink: adding device dummy0 type dummy: Operation not supported netlink: adding device nlmon0 type nlmon: Operation not supported netlink: adding device caif0 type caif: Operation not supported netlink: adding device batadv0 type batadv: Operation not supported netlink: adding device vxcan1 type vxcan: Operation not supported netlink: adding device netdevsim0 type netdevsim: Operation not supported netlink: adding device (null) type veth: Operation not supported netlink: adding device xfrm0 type xfrm: Operation not supported netlink: adding device wg0 type wireguard: Operation not supported netlink: adding device wg1 type wireguard: Operation not supported netlink: adding device wg2 type wireguard: Operation not supported netlink: adding device bridge_slave_0 type veth peer veth0_to_bridge: Operation not supported netlink: adding device bridge_slave_1 type veth peer veth1_to_bridge: Operation not supported netlink: device bridge_slave_0 up master bridge0: No such device netlink: device bridge_slave_1 up master bridge0: No such device netlink: adding device bond_slave_0 type veth peer veth0_to_bond: Operation not supported netlink: adding device bond_slave_1 type veth peer veth1_to_bond: Operation not supported netlink: device bond_slave_0 up master bond0: No such device netlink: device bond_slave_1 up master bond0: No such device netlink: adding device team_slave_0 type veth peer veth0_to_team: Operation not supported netlink: adding device team_slave_1 type veth peer veth1_to_team: Operation not supported netlink: device team_slave_0 up master team0: No such device netlink: device team_slave_1 up master team0: No such device netlink: adding device batadv_slave_0 type veth peer veth0_to_batadv: Operation not supported netlink: adding device batadv_slave_1 type veth peer veth1_to_batadv: Operation not supported netlink: device batadv_slave_0 up master batadv0: No such device netlink: device batadv_slave_1 up master batadv0: No such device netlink: device bridge_slave_0 up master NULL: No such device netlink: device bridge_slave_1 up master NULL: No such device netlink: adding device hsr_slave_0 type veth peer veth0_to_hsr: Operation not supported netlink: adding device hsr_slave_1 type veth peer veth1_to_hsr: Operation not supported netlink: adding device hsr0 type hsr slave1 hsr_slave_0 slave2 hsr_slave_1: Unknown error -95 netlink: device hsr_slave_0 up master NULL: No such device netlink: device hsr_slave_1 up master NULL: No such device netlink: adding device veth0_virt_wifi type veth peer veth1_virt_wifi: Operation not supported netlink: adding device virt_wifi0 type virt_wifi link veth1_virt_wifi: Operation not supported netlink: adding device veth0_vlan type veth peer veth1_vlan: Operation not supported netlink: add vlan0 type vlan link veth0_vlan id 0: Operation not supported netlink: add vlan1 type vlan link veth0_vlan id 1: Operation not supported netlink: add macvlan0 type macvlan link veth1_vlan mode 4: Operation not supported netlink: add macvlan1 type macvlan link veth1_vlan mode 4: Operation not supported netlink: add ipvlan0 type ipvlan link veth0_vlan mode 0: Operation not supported netlink: add ipvlan1 type ipvlan link veth0_vlan mode 2: Operation not supported netlink: adding device veth0_macvtap type veth peer veth1_macvtap: Operation not supported netlink: adding device macvtap0 type macvtap link veth0_macvtap: Operation not supported netlink: adding device macsec0 type macsec link veth1_macvtap: Operation not supported netlink: add geneve0 type geneve vni 0: Operation not supported netlink: add geneve1 type geneve vni 1: Operation not supported netlink: failed to get family id for wireguard: No such file or directory netlink: add addr 172.20.20.12 dev bridge0: No such device netlink: add addr fe80::0c dev bridge0: No such device netlink: device bridge0 up master NULL: No such device netlink: add addr 172.20.20.13 dev vcan0: No such device netlink: device vcan0 up master NULL: No such device netlink: add addr 172.20.20.14 dev tunl0: No such device netlink: add addr fe80::0e dev tunl0: No such device netlink: device tunl0 up master NULL: No such device netlink: add addr 172.20.20.15 dev gre0: No such device netlink: add addr fe80::0f dev gre0: No such device netlink: device gre0 up master NULL: No such device netlink: add addr 172.20.20.16 dev gretap0: No such device netlink: add addr fe80::10 dev gretap0: No such device netlink: device gretap0 up master NULL: No such device [ 1387.132569] Bluetooth: hci2: command 0x0409 tx timeout netlink: add addr 172.20.20.17 dev ip_vti0: No such device netlink: add addr fe80::11 dev ip_vti0: No such device netlink: device ip_vti0 up master NULL: No such device netlink: add addr 172.20.20.18 dev ip6_vti0: No such device netlink: add addr fe80::12 dev ip6_vti0: No such device netlink: device ip6_vti0 up master NULL: No such device netlink: add addr 172.20.20.19 dev ip6tnl0: No such device netlink: add addr fe80::13 dev ip6tnl0: No such device netlink: device ip6tnl0 up master NULL: No such device netlink: add addr 172.20.20.20 dev ip6gre0: No such device netlink: add addr fe80::14 dev ip6gre0: No such device netlink: device ip6gre0 up master NULL: No such device netlink: add addr 172.20.20.21 dev ip6gretap0: No such device netlink: add addr fe80::15 dev ip6gretap0: No such device netlink: device ip6gretap0 up master NULL: No such device netlink: add addr 172.20.20.22 dev erspan0: No such device netlink: add addr fe80::16 dev erspan0: No such device netlink: device erspan0 up master NULL: No such device netlink: add addr 172.20.20.23 dev bond0: No such device netlink: add addr fe80::17 dev bond0: No such device netlink: device bond0 up master NULL: No such device netlink: add addr 172.20.20.24 dev veth0: No such device netlink: add addr fe80::18 dev veth0: No such device netlink: device veth0 up master NULL: No such device netlink: add addr 172.20.20.25 dev veth1: No such device netlink: add addr fe80::19 dev veth1: No such device netlink: device veth1 up master NULL: No such device netlink: add addr 172.20.20.26 dev team0: No such device netlink: add addr fe80::1a dev team0: No such device netlink: device team0 up master NULL: No such device netlink: add addr 172.20.20.27 dev veth0_to_bridge: No such device netlink: add addr fe80::1b dev veth0_to_bridge: No such device netlink: device veth0_to_bridge up master NULL: No such device netlink: add addr 172.20.20.28 dev veth1_to_bridge: No such device netlink: add addr fe80::1c dev veth1_to_bridge: No such device netlink: device veth1_to_bridge up master NULL: No such device netlink: add addr 172.20.20.29 dev veth0_to_bond: No such device netlink: add addr fe80::1d dev veth0_to_bond: No such device netlink: device veth0_to_bond up master NULL: No such device netlink: add addr 172.20.20.30 dev veth1_to_bond: No such device netlink: add addr fe80::1e dev veth1_to_bond: No such device netlink: device veth1_to_bond up master NULL: No such device netlink: add addr 172.20.20.31 dev veth0_to_team: No such device netlink: add addr fe80::1f dev veth0_to_team: No such device netlink: device veth0_to_team up master NULL: No such device netlink: add addr 172.20.20.32 dev veth1_to_team: No such device netlink: add addr fe80::20 dev veth1_to_team: No such device netlink: device veth1_to_team up master NULL: No such device netlink: add addr 172.20.20.33 dev veth0_to_hsr: No such device netlink: add addr fe80::21 dev veth0_to_hsr: No such device netlink: device veth0_to_hsr up master NULL: No such device netlink: add addr 172.20.20.34 dev veth1_to_hsr: No such device netlink: add addr fe80::22 dev veth1_to_hsr: No such device netlink: device veth1_to_hsr up master NULL: No such device netlink: add addr 172.20.20.35 dev hsr0: No such device netlink: add addr fe80::23 dev hsr0: No such device netlink: device hsr0 up master NULL: No such device netlink: add addr 172.20.20.36 dev dummy0: No such device netlink: add addr fe80::24 dev dummy0: No such device netlink: device dummy0 up master NULL: No such device netlink: add addr 172.20.20.37 dev nlmon0: No such device netlink: add addr fe80::25 dev nlmon0: No such device netlink: device nlmon0 up master NULL: No such device netlink: add addr 172.20.20.38 dev vxcan0: No such device netlink: device vxcan0 up master NULL: No such device netlink: add addr 172.20.20.39 dev vxcan1: No such device netlink: device vxcan1 up master NULL: No such device netlink: add addr 172.20.20.40 dev caif0: No such device netlink: add addr fe80::28 dev caif0: No such device netlink: device caif0 up master NULL: No such device netlink: add addr 172.20.20.41 dev batadv0: No such device netlink: add addr fe80::29 dev batadv0: No such device netlink: device batadv0 up master NULL: No such device [ 1389.180568] Bluetooth: hci2: command 0x041b tx timeout netlink: add addr 172.20.20.42 dev netdevsim0: No such device netlink: add addr fe80::2a dev netdevsim0: No such device netlink: device netdevsim0 up master NULL: No such device netlink: add addr 172.20.20.43 dev xfrm0: No such device netlink: add addr fe80::2b dev xfrm0: No such device netlink: device xfrm0 up master NULL: No such device netlink: add addr 172.20.20.44 dev veth0_virt_wifi: No such device netlink: add addr fe80::2c dev veth0_virt_wifi: No such device netlink: device veth0_virt_wifi up master NULL: No such device netlink: add addr 172.20.20.45 dev veth1_virt_wifi: No such device netlink: add addr fe80::2d dev veth1_virt_wifi: No such device netlink: device veth1_virt_wifi up master NULL: No such device netlink: add addr 172.20.20.46 dev virt_wifi0: No such device netlink: add addr fe80::2e dev virt_wifi0: No such device netlink: device virt_wifi0 up master NULL: No such device netlink: add addr 172.20.20.47 dev veth0_vlan: No such device netlink: add addr fe80::2f dev veth0_vlan: No such device netlink: device veth0_vlan up master NULL: No such device netlink: add addr 172.20.20.48 dev veth1_vlan: No such device netlink: add addr fe80::30 dev veth1_vlan: No such device netlink: device veth1_vlan up master NULL: No such device netlink: add addr 172.20.20.49 dev vlan0: No such device netlink: add addr fe80::31 dev vlan0: No such device netlink: device vlan0 up master NULL: No such device netlink: add addr 172.20.20.50 dev vlan1: No such device netlink: add addr fe80::32 dev vlan1: No such device netlink: device vlan1 up master NULL: No such device netlink: add addr 172.20.20.51 dev macvlan0: No such device netlink: add addr fe80::33 dev macvlan0: No such device netlink: device macvlan0 up master NULL: No such device netlink: add addr 172.20.20.52 dev macvlan1: No such device netlink: add addr fe80::34 dev macvlan1: No such device netlink: device macvlan1 up master NULL: No such device netlink: add addr 172.20.20.53 dev ipvlan0: No such device netlink: add addr fe80::35 dev ipvlan0: No such device netlink: device ipvlan0 up master NULL: No such device netlink: add addr 172.20.20.54 dev ipvlan1: No such device netlink: add addr fe80::36 dev ipvlan1: No such device netlink: device ipvlan1 up master NULL: No such device netlink: add addr 172.20.20.55 dev veth0_macvtap: No such device netlink: add addr fe80::37 dev veth0_macvtap: No such device netlink: device veth0_macvtap up master NULL: No such device netlink: add addr 172.20.20.56 dev veth1_macvtap: No such device netlink: add addr fe80::38 dev veth1_macvtap: No such device netlink: device veth1_macvtap up master NULL: No such device netlink: add addr 172.20.20.57 dev macvtap0: No such device netlink: add addr fe80::39 dev macvtap0: No such device netlink: device macvtap0 up master NULL: No such device netlink: add addr 172.20.20.58 dev macsec0: No such device netlink: add addr fe80::3a dev macsec0: No such device netlink: device macsec0 up master NULL: No such device netlink: add addr 172.20.20.59 dev veth0_to_batadv: No such device netlink: add addr fe80::3b dev veth0_to_batadv: No such device netlink: device veth0_to_batadv up master NULL: No such device netlink: add addr 172.20.20.60 dev veth1_to_batadv: No such device netlink: add addr fe80::3c dev veth1_to_batadv: No such device netlink: device veth1_to_batadv up master NULL: No such device netlink: add addr 172.20.20.61 dev batadv_slave_0: No such device netlink: add addr fe80::3d dev batadv_slave_0: No such device netlink: device batadv_slave_0 up master NULL: No such device netlink: add addr 172.20.20.62 dev batadv_slave_1: No such device netlink: add addr fe80::3e dev batadv_slave_1: No such device netlink: device batadv_slave_1 up master NULL: No such device netlink: add addr 172.20.20.63 dev geneve0: No such device netlink: add addr fe80::3f dev geneve0: No such device netlink: device geneve0 up master NULL: No such device netlink: add addr 172.20.20.64 dev geneve1: No such device netlink: add addr fe80::40 dev geneve1: No such device netlink: device geneve1 up master NULL: No such device netlink: add addr 172.20.20.65 dev wg0: No such device netlink: add addr fe80::41 dev wg0: No such device netlink: device wg0 up master NULL: No such device netlink: add addr 172.20.20.66 dev wg1: No such device netlink: add addr fe80::42 dev wg1: No such device [ 1391.229543] Bluetooth: hci2: command 0x040f tx timeout netlink: device wg1 up master NULL: No such device netlink: add addr 172.20.20.67 dev wg2: No such device netlink: add addr fe80::43 dev wg2: No such device netlink: device wg2 up master NULL: No such device [ 1391.366123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.367853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.382055] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1391.419855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.421709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.424225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready mkdir(/dev/binderfs) failed: 17 mount of binder at /dev/binderfs failed: 19 mkdir(/syzcgroup/unified/syz0) failed: 17 mkdir(/syzcgroup/cpu/syz0) failed: 17 mkdir(/syzcgroup/net/syz0) failed: 17 iptable checkpoint filter/2: checkpoint entries=4 hooks=e size=632 iptable checkpoint mangle/2: checkpoint entries=6 hooks=1f size=936 iptable checkpoint filter/10: checkpoint entries=4 hooks=e size=856 iptable checkpoint mangle/10: checkpoint entries=6 hooks=1f size=1272 [7611ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3 #0 [7633ms] -> syz_io_uring_setup(0x4d4f, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000200, 0x20000140) #0 [7636ms] <- syz_io_uring_setup=0x3 errno=14 cover=18169 #0 [7638ms] -> syz_io_uring_submit(0x200a0000, 0x20ffc000, 0x20000000, 0x0) #0 [7638ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [7638ms] -> mmap$IORING_OFF_SQ_RING(0x20ffc000, 0x4000, 0x100000e, 0x13, 0x3, 0x0) #0 [7638ms] <- mmap$IORING_OFF_SQ_RING=0x20ffc000 errno=14 cover=1898 #0 [7639ms] -> syz_io_uring_submit(0x20ffc000, 0x20ffc000, 0x20000100, 0x4) #0 [7639ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [7640ms] -> io_uring_enter(0x3, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [7640ms] <- io_uring_enter=0x2 errno=14 cover=800 #0 [7640ms] -> execveat(0xffffffffffffffff, 0x20000040, 0x0, 0x0, 0x0) #0 [7642ms] <- execveat=0xffffffffffffffff errno=9 cover=25296 13:09:36 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_SPLICE, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 2021/11/11 13:09:36 result hanged=false: [7692ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5 #0 [7715ms] -> syz_io_uring_setup(0x4d4f, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000200, 0x20000140) #0 [7719ms] <- syz_io_uring_setup=0x3 errno=14 cover=18568 #0 [7721ms] -> syz_io_uring_submit(0x200a0000, 0x20ffc000, 0x20000000, 0x0) #0 [7721ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [7722ms] -> mmap$IORING_OFF_SQ_RING(0x20ffc000, 0x4000, 0x100000e, 0x13, 0x3, 0x0) #0 [7722ms] <- mmap$IORING_OFF_SQ_RING=0x20ffc000 errno=14 cover=1506 #0 [7723ms] -> syz_io_uring_submit(0x20ffc000, 0x20ffc000, 0x20000100, 0x4) #0 [7723ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [7724ms] -> io_uring_enter(0x3, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [7724ms] <- io_uring_enter=0x2 errno=14 cover=820 #0 [7725ms] -> execveat(0xffffffffffffffff, 0x20000040, 0x0, 0x0, 0x0) [ 1393.276567] Bluetooth: hci2: command 0x0419 tx timeout killing hanging pid 5 kill is not working failed to open /sys/fs/fuse/connections: 2 2021/11/11 13:09:40 poll: candidates=0 inputs=0 signal=0 2021/11/11 13:09:52 poll: candidates=0 inputs=0 signal=0 2021/11/11 13:10:04 poll: candidates=0 inputs=0 signal=0 [ 1420.668810] INFO: task syz-executor.0:116086 blocked for more than 143 seconds. [ 1420.671045] Not tainted 5.10.78 #1 [ 1420.672099] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1420.674544] task:syz-executor.0 state:D stack:28736 pid:116086 ppid: 276 flags:0x00000004 [ 1420.676912] Call Trace: [ 1420.677640] __schedule+0x84b/0x1e90 [ 1420.678644] ? io_schedule_timeout+0x150/0x150 [ 1420.679781] ? tctx_inflight+0xb9/0x230 [ 1420.680841] ? io_recvmsg_copy_hdr+0x680/0x680 [ 1420.682014] schedule+0xcb/0x270 [ 1420.682884] __io_uring_task_cancel+0x1ae/0x250 [ 1420.684047] ? __io_uring_files_cancel+0x1b0/0x1b0 [ 1420.685222] ? __get_user_pages_remote+0xc2/0x860 [ 1420.686869] ? wait_woken+0x250/0x250 [ 1420.688461] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1420.689651] ? trace_rss_stat+0x174/0x210 [ 1420.690728] bprm_execve+0x114/0x1b00 [ 1420.691707] ? get_arg_page+0x153/0x200 [ 1420.692781] ? acct_arg_size+0xe0/0xe0 [ 1420.693831] ? open_exec+0x70/0x70 [ 1420.694755] ? memcpy+0x39/0x60 [ 1420.695656] ? copy_strings.isra.0+0x492/0x690 [ 1420.696806] ? copy_string_kernel+0x3ad/0x440 [ 1420.697965] do_execveat_common.isra.0+0x524/0x670 [ 1420.699207] __x64_sys_execveat+0xe7/0x130 [ 1420.700248] do_syscall_64+0x33/0x40 [ 1420.701293] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1420.702554] RIP: 0033:0x7fdaa790bb19 [ 1420.703557] RSP: 002b:00007fdaa4e81188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1420.705374] RAX: ffffffffffffffda RBX: 00007fdaa7a1ef60 RCX: 00007fdaa790bb19 [ 1420.707042] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffffff [ 1420.708793] RBP: 00007fdaa7965f6d R08: 0000000000000000 R09: 0000000000000000 [ 1420.710460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1420.712195] R13: 00007fff8e92a01f R14: 00007fdaa4e81300 R15: 0000000000022000 [ 1420.713952] [ 1420.713952] Showing all locks held in the system: [ 1420.715428] 1 lock held by khungtaskd/22: [ 1420.716560] #0: ffffffff84df6720 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x269 [ 1420.718650] 1 lock held by systemd-journal/104: [ 1420.719665] 1 lock held by in:imklog/179: [ 1420.720776] #0: ffff88800af9dc70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 1420.722620] 2 locks held by rs:main Q:Reg/180: [ 1420.723633] [ 1420.724045] ============================================= [ 1420.724045] VM DIAGNOSIS: 13:10:05 Registers: info registers vcpu 0 RAX=0000000000000004 RBX=0000000000000004 RCX=ffffffff81efbbf3 RDX=000000000000c062 RSI=ffffffff81efbc01 RDI=0000000000000007 RBP=000000000001c062 RSP=ffff88806ce09d60 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000010000 R11=0000000000000001 R12=ffff88800f2c0180 R13=ffffffff829e9bb0 R14=ffff88800f2c4338 R15=ffff88800f2c0008 RIP=ffffffff81efbc07 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 ffffc90000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005650d655852c CR3=000000001ba92000 CR4=00350ef0 DR0=fffffffffffffff7 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 6e67697320303d73 7475706e6920303d YMM02=0000000000000000 0000000000000000 6920303d73657461 6469646e6163203a YMM03=0000000000000000 0000000000000000 303d6c616e676973 20303d737475706e YMM04=0000000000000000 0000000000000000 6578650a00736465 657320636578650a YMM05=0000000000000000 0000000000000000 6f74756365786511 026c61746f742063 YMM06=0000000000000000 0000000000000000 6365786508017374 7261747365722072 YMM07=0000000000000000 0000000000000000 007a7a7566206365 786509006e656720 YMM08=0000000000000000 0000000000000000 696d20636578650d 0265676169727420 YMM09=0000000000000000 0000000000000000 6565732063657865 0a00657a696d696e YMM10=0000000000000000 0000000000000000 11026c61746f7420 636578650a007364 YMM11=0000000000000000 0000000000000000 7472617473657220 726f747563657865 YMM12=0000000000000000 0000000000000000 65786509006e6567 2063657865080173 YMM13=0000000000000000 0000000000000000 6e61632063657865 0e007a7a75662063 YMM14=0000000000000000 0000000000000000 616d732063657865 0a00657461646964 YMM15=0000000000000000 0000000000000000 000073746e696820 636578650a006873 info registers vcpu 1 RAX=ffffffff814b4dbe RBX=dffffc0000000000 RCX=ffffffff814b61ab RDX=0000000000000000 RSI=ffffffff814b26ee RDI=ffffffff849d7b48 RBP=ffff88801811fcd0 RSP=ffff88801811fc00 R8 =0000000000000001 R9 =0000000000000001 R10=00000000c000003e R11=0000000000000001 R12=00000000000000a5 R13=ffffed1003023f9c R14=ffff88801811fcd0 R15=ffffc90000691070 RIP=ffffffff813f6310 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9e6c5ec900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9e6bd08000 CR3=000000000df52000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 c4b8b3308b10b0a8 384dd03b1b7da7c3 YMM02=0000000000000000 0000000000000000 6b1e99b806172e3b 00000000000aea08 YMM03=0000000000000000 0000000000000000 80f09f19808d26a3 00000000000aec48 YMM04=0000000000000000 0000000000000000 22a9f3a6d320034f 0000000000336ee0 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aeab0 YMM06=0000000000000000 0000000000000000 98cbe2f916d4a407 00000000000ae968 YMM07=0000000000000000 0000000000000000 a1fcdcf819d7e1e5 00000000000ae728 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 2000000000000000 2000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000