696c653000000000000000000000000000000000000000000000543a54af00000000000000000000000000000000000000000000000020000000dc5271addc5271addc5271ade1f4655fdc5271ad0000000000000000", 0xa0, 0x4d00}, {&(0x7f0000012c00)="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", 0x1a0, 0x4e00}, {&(0x7f0000012e00)="ed81000064000000e1f4655fe1f4655fe1f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c2e2d9eb500000000000000000000000000000000000000000000000020000000dc5271addc5271addc5271ade1f4655fdc5271ad0000000000000000000002ea040734000000000028000000000000006461746100000000000000000000000000000000000000000000000000000000000000006c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273", 0x100, 0x5000}, {&(0x7f0000012f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x6000}, {&(0x7f0000013000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x7000}, {&(0x7f0000013100)="00000000001000"/32, 0x20, 0x8000}, {&(0x7f0000013200)="00000000001000"/32, 0x20, 0x9000}, {&(0x7f0000013300)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xa000}], 0x0, &(0x7f0000013800)) [542019ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73104 #0 [542037ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x13, 0x20000200, 0x0, 0x20013800) syz_mount_image: size=262144 segs=19 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1789.557418] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [542057ms] <- syz_mount_image$ext4=0x5 errno=0 cover=50441 enabling collider #0 [542058ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x13, 0x20000200, 0x0, 0x20013800) #0 [542061ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=19568 2021/11/11 16:01:24 result hanged=false: 16:01:24 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setpriority(0x0, 0x0, 0x8) umount(./3845/file0) [542118ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73106 #0 [542137ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [542159ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=106282 #0 [542160ms] -> setpriority(0x0, 0x0, 0x8) #0 [542160ms] <- setpriority=0x0 errno=14 cover=159 enabling collider #0 [542163ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [542165ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=11276 16:01:24 executing program 0: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) finit_module(r0, 0x0, 0x0) 2021/11/11 16:01:24 result hanged=false: [542201ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73108 #0 [542218ms] -> memfd_create(0x20000340, 0x6) #0 [542221ms] <- memfd_create=0x3 errno=14 cover=1337 #0 [542221ms] -> mmap(0x20000000, 0xc00000, 0xa, 0x1d012, 0x3, 0x0) #0 [542223ms] <- mmap=0x20000000 errno=14 cover=3778 #0 [542223ms] -> ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) #0 [542223ms] <- ioctl$BTRFS_IOC_GET_SUBVOL_INFO=0xffffffffffffffff errno=9 cover=45 #0 [542223ms] -> ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) #0 [542223ms] <- ioctl$BTRFS_IOC_GET_SUBVOL_INFO=0xffffffffffffffff errno=9 cover=45 #0 [542224ms] -> ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0x3, 0xd000943d, 0x0) #0 [542224ms] <- ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF=0xffffffffffffffff errno=25 cover=102 #0 [542225ms] -> finit_module(0x3, 0x0, 0x0) [ 1789.728850] audit: type=1400 audit(1636646484.793:1068): avc: denied { module_load } for pid=306042 comm="syz-executor.0" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=99015 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:hugetlbfs_t:s0 tclass=system permissive=1 [ 1789.742367] Module has invalid ELF structures #0 [542243ms] <- finit_module=0xffffffffffffffff errno=8 cover=176835 enabling collider SIGSEGV on 0x20000340, skipping #0 [542245ms] -> memfd_create(0x20000340, 0x6) #0 [542245ms] <- memfd_create=0xffffffffffffffff errno=14 cover=375 #0 [542246ms] -> mmap(0x20000000, 0xc00000, 0xa, 0x1d012, 0x3, 0x0) #0 [542246ms] <- mmap=0xffffffffffffffff errno=9 cover=45 pthread_create failed (errno 11) 16:01:24 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x1000004, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x2, 0x0, 0x0, 0x0, 0x0, "473d7fcc115d845089a8e3fefc4327c35d5f4c097347fb24dc1b3b1ba18171798bdc0062ea0b5e364eee2b3dc94c1742ea96765c683f90df0000000100"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)=' \x00\x00\x00\x00\x00\x00\x00 \x00', 0xa}], 0x1}, 0x0) 2021/11/11 16:01:24 result hanged=false: 2021/11/11 16:01:24 poll: candidates=8 inputs=0 signal=0 [542321ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73210 #0 [542342ms] -> socket$packet(0x11, 0x3, 0x300) #0 [542343ms] <- socket$packet=0x3 errno=14 cover=1715 #0 [542345ms] -> setsockopt$packet_int(0x3, 0x107, 0xf, 0x20000000, 0x4) #0 [542345ms] <- setsockopt$packet_int=0x0 errno=14 cover=138 #0 [542347ms] -> sendmsg(0x3, 0x20000100, 0x0) #0 [542347ms] <- sendmsg=0xa errno=14 cover=1020 enabling collider #0 [542353ms] -> socket$packet(0x11, 0x3, 0x300) #0 [542354ms] <- socket$packet=0x3 errno=14 cover=1867 #0 [542354ms] -> setsockopt$packet_int(0x3, 0x107, 0xf, 0x20000000, 0x4) #0 [542354ms] <- setsockopt$packet_int=0x0 errno=14 cover=138 pthread_create failed (errno 11) 16:01:24 executing program 0: syz_io_uring_setup(0x2cd5, &(0x7f00000013c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000f3c000/0x2000)=nil, &(0x7f0000001440), &(0x7f0000001480)) 2021/11/11 16:01:24 result hanged=false: [542437ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73312 #0 [542454ms] -> syz_io_uring_setup(0x2cd5, 0x200013c0, 0x20ffd000, 0x20f3c000, 0x20001440, 0x20001480) #0 [542463ms] <- syz_io_uring_setup=0x3 errno=14 cover=14061 enabling collider #0 [542463ms] -> syz_io_uring_setup(0x2cd5, 0x200013c0, 0x20ffd000, 0x20f3c000, 0x20001440, 0x20001480) #0 [542466ms] <- syz_io_uring_setup=0x3 errno=14 cover=17976 2021/11/11 16:01:25 result hanged=false: 2021/11/11 16:01:25 #0: triaging type=7 2021/11/11 16:01:25 triaging input for call #0 syz_io_uring_setup (new signal=2) 16:01:25 executing program 0: syz_io_uring_setup(0x2cd5, &(0x7f00000013c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000f3c000/0x2000)=nil, &(0x7f0000001440), &(0x7f0000001480)) [542508ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73314 #0 [542528ms] -> syz_io_uring_setup(0x2cd5, 0x200013c0, 0x20ffd000, 0x20f3c000, 0x20001440, 0x20001480) #0 [542532ms] <- syz_io_uring_setup=0x3 errno=14 cover=14277 16:01:25 executing program 0: syz_io_uring_setup(0x2cd5, &(0x7f00000013c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000f3c000/0x2000)=nil, &(0x7f0000001440), &(0x7f0000001480)) 2021/11/11 16:01:25 result hanged=false: [542575ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73316 #0 [542592ms] -> syz_io_uring_setup(0x2cd5, 0x200013c0, 0x20ffd000, 0x20f3c000, 0x20001440, 0x20001480) #0 [542595ms] <- syz_io_uring_setup=0x3 errno=14 cover=13962 16:01:25 executing program 0: syz_io_uring_setup(0x2cd5, &(0x7f00000013c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000f3c000/0x2000)=nil, &(0x7f0000001440), &(0x7f0000001480)) 2021/11/11 16:01:25 result hanged=false: [542635ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73318 #0 [542652ms] -> syz_io_uring_setup(0x2cd5, 0x200013c0, 0x20ffd000, 0x20f3c000, 0x20001440, 0x20001480) #0 [542655ms] <- syz_io_uring_setup=0x3 errno=14 cover=13950 2021/11/11 16:01:25 result hanged=false: 2021/11/11 16:01:25 added new input for call #0 syz_io_uring_setup to corpus: syz_io_uring_setup(0x2cd5, &(0x7f00000013c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000f3c000/0x2000)=nil, &(0x7f0000001440), &(0x7f0000001480)) 16:01:25 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffffffd3c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) [542700ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73320 #0 [542719ms] -> syz_mount_image$ext4(0x0, 0x20000340, 0x0, 0xfffffffffffffd3c, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [542723ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13539 #0 [542725ms] -> mount(0x0, 0x200004c0, 0x200000c0, 0x0, 0x0) #0 [542728ms] <- mount=0x0 errno=14 cover=11920 #0 [542737ms] -> syz_mount_image$vfat(0x20000380, 0x20000100, 0x0, 0x0, 0x0, 0x100020, 0x20000900) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='vfat' flags=1048608 opts='' #0 [542737ms] <- syz_mount_image$vfat=0x3 errno=0 cover=3700 #0 [542737ms] -> mkdirat(0x3, 0x200000c0, 0x0) #0 [542738ms] <- mkdirat=0x0 errno=14 cover=1523 #0 [542738ms] -> unlinkat(0x3, 0x200004c0, 0x200) #0 [542739ms] <- unlinkat=0x0 errno=14 cover=1109 enabling collider #0 [542740ms] -> syz_mount_image$ext4(0x0, 0x20000340, 0x0, 0xfffffffffffffd3c, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [542740ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1399 #0 [542740ms] -> mount(0x0, 0x200004c0, 0x200000c0, 0x0, 0x0) #0 [542743ms] <- mount=0x0 errno=14 cover=11982 pthread_create failed (errno 11) 16:01:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newsa={0xf0, 0x10, 0x827fcc95029ea48f, 0x0, 0x0, {{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 2021/11/11 16:01:25 result hanged=false: umount(./3853/file0) umount(./3853/file0) [542822ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73422 #0 [542839ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [542840ms] <- socket$nl_xfrm=0x3 errno=14 cover=1445 #0 [542840ms] -> sendmsg$nl_xfrm(0x3, 0x20000380, 0x0) #0 [542841ms] <- sendmsg$nl_xfrm=0xf0 errno=14 cover=1543 enabling collider #0 [542841ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [542842ms] <- socket$nl_xfrm=0x3 errno=14 cover=1444 2021/11/11 16:01:25 result hanged=false: 16:01:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x18, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @fd}]}]}, 0x28}}, 0x0) [542886ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73424 #0 [542903ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [542903ms] <- socket$netlink=0x3 errno=14 cover=1487 #0 [542904ms] -> sendmsg$nl_generic(0x3, 0x20000100, 0x0) #0 [542904ms] <- sendmsg$nl_generic=0x28 errno=14 cover=1831 enabling collider #0 [542907ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [542908ms] <- socket$netlink=0x3 errno=14 cover=1507 #0 [542908ms] -> sendmsg$nl_generic(2021/11/11 16:01:25 result hanged=false: 16:01:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x40, &(0x7f0000012c00)) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f00000003c0)='./file0\x00', 0x0) [542947ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73426 #0 [542964ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [542968ms] <- perf_event_open=0x3 errno=14 cover=9037 #0 [542969ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000200, 0x40, 0x20012c00) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=64 opts=',errors=continue' [ 1790.489865] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [542996ms] <- syz_mount_image$ext4=0x6 errno=0 cover=59915 #0 [542998ms] -> shmat(0x0, 0x20ffa000, 0x0) #0 [542998ms] <- shmat=0xffffffffffffffff errno=22 cover=950 #0 [542999ms] -> chroot(0x20000180) #0 [542999ms] <- chroot=0x0 errno=14 cover=722 #0 [542999ms] -> umount2(0x200003c0, 0x0) [ 1790.505567] EXT4-fs (loop0): re-mounted. Opts: (null) #0 [543004ms] <- umount2=0x0 errno=14 cover=12035 enabling collider #0 [543014ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [543014ms] <- perf_event_open=0x3 errno=14 cover=8213 #0 [543015ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000200, 0x40, 0x20012c00) #0 [543016ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=2 cover=6414 pthread_create failed (errno 11) 16:01:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x40, &(0x7f0000012c00)) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f00000003c0)='./file0\x00', 0x0) 2021/11/11 16:01:25 result hanged=false: 2021/11/11 16:01:25 #0: triaging type=7 2021/11/11 16:01:25 triaging input for call #4 umount2 (new signal=3) umount(./3856/file0) [543125ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73528 #0 [543142ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [543143ms] <- perf_event_open=0x3 errno=14 cover=8284 #0 [543144ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000200, 0x40, 0x20012c00) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=64 opts=',errors=continue' [ 1790.675856] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [543180ms] <- syz_mount_image$ext4=0x6 errno=0 cover=156913 #0 [543194ms] -> shmat(0x0, 0x20ffa000, 0x0) #0 [543194ms] <- shmat=0xffffffffffffffff errno=22 cover=3141 #0 [543195ms] -> chroot(0x20000180) #0 [543195ms] <- chroot=0x0 errno=14 cover=1668 #0 [543196ms] -> umount2(0x200003c0, 0x0) [ 1790.703574] EXT4-fs (loop0): re-mounted. Opts: (null) #0 [543202ms] <- umount2=0x0 errno=14 cover=23797 16:01:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x40, &(0x7f0000012c00)) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f00000003c0)='./file0\x00', 0x0) 2021/11/11 16:01:25 result hanged=false: umount(./3857/file0) [543276ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73530 #0 [543295ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [543296ms] <- perf_event_open=0x3 errno=14 cover=8284 #0 [543297ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000200, 0x40, 0x20012c00) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=64 opts=',errors=continue' [ 1790.820234] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [543323ms] <- syz_mount_image$ext4=0x6 errno=0 cover=180509 #0 [543338ms] -> shmat(0x0, 0x20ffa000, 0x0) #0 [543338ms] <- shmat=0xffffffffffffffff errno=22 cover=2672 #0 [543339ms] -> chroot(0x20000180) #0 [543340ms] <- chroot=0x0 errno=14 cover=1679 #0 [543340ms] -> umount2(0x200003c0, 0x0) [ 1790.845186] EXT4-fs (loop0): re-mounted. Opts: (null) #0 [543345ms] <- umount2=0x0 errno=14 cover=23951 16:01:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x40, &(0x7f0000012c00)) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f00000003c0)='./file0\x00', 0x0) 2021/11/11 16:01:25 result hanged=false: umount(./3858/file0) [543419ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73532 #0 [543438ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [543439ms] <- perf_event_open=0x3 errno=14 cover=8644 #0 [543440ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000200, 0x40, 0x20012c00) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=64 opts=',errors=continue' [ 1790.959671] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [543468ms] <- syz_mount_image$ext4=0x6 errno=0 cover=59230 #0 [543476ms] -> shmat(0x0, 0x20ffa000, 0x0) #0 [543476ms] <- shmat=0xffffffffffffffff errno=22 cover=1018 #0 [543477ms] -> chroot(0x20000180) #0 [543477ms] <- chroot=0x0 errno=14 cover=721 #0 [543477ms] -> umount2(0x200003c0, 0x0) [ 1790.981658] EXT4-fs (loop0): re-mounted. Opts: (null) #0 [543481ms] <- umount2=0x0 errno=14 cover=14753 2021/11/11 16:01:26 result hanged=false: 2021/11/11 16:01:26 added new input for call #4 umount2 to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x40, &(0x7f0000012c00)) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f00000003c0)='./file0\x00', 0x0) umount(./3859/file0) 16:01:26 executing program 0: getuid() syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f00000012c0)=[{&(0x7f0000000080)="03", 0x1}, {&(0x7f00000000c0)="7f", 0x1, 0x6a9c04da}], 0x80000, &(0x7f0000001380)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001480), 0x2002) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000001900)='ext2\x00', &(0x7f0000001940)='./file0\x00', 0x0, 0x1, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)="b3", 0x1, 0x12000}], 0x40012, &(0x7f0000001c40)) [543558ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73534 #0 [543575ms] -> getuid() #0 [543575ms] <- getuid=0x0 errno=14 cover=43 #0 [543576ms] -> syz_mount_image$ext4(0x20000000, 0x20000040, 0x0, 0x2, 0x200012c0, 0x80000, 0x20001380) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='ext2' flags=524288 opts=',errors=continue' syz_mount_image > mount error: 22 #0 [543583ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=2577 #0 [543585ms] -> openat$sndseq(0xffffffffffffff9c, 0x20001480, 0x2002) #0 [543585ms] <- openat$sndseq=0x3 errno=14 cover=2194 #0 [543586ms] -> pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [543586ms] <- pidfd_getfd=0xffffffffffffffff errno=9 cover=46 #0 [543588ms] -> syz_mount_image$ext4(0x20001900, 0x20001940, 0x0, 0x1, 0x20001bc0, 0x40012, 0x20001c40) #0 [543591ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=6529 enabling collider #0 [543592ms] -> getuid() #0 [543592ms] <- getuid=0x0 errno=14 cover=43 #0 [543592ms] -> syz_mount_image$ext4(0x20000000, 0x20000040, 0x0, 0x2, 0x200012c0, 0x80000, 0x20001380) #0 [543594ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=9534 pthread_create failed (errno 11) 2021/11/11 16:01:26 result hanged=false: 16:01:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) getsockname$inet(r0, 0x0, &(0x7f00000001c0)) [543678ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73636 #0 [543696ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [543698ms] <- socket$inet_udp=0x3 errno=14 cover=1673 #0 [543699ms] -> connect$inet(0x3, 0x20000040, 0x10) #0 [543699ms] <- connect$inet=0x0 errno=14 cover=858 #0 [543699ms] -> getsockname$inet(0x3, 0x0, 0x200001c0) #0 [543699ms] <- getsockname$inet=0x0 errno=14 cover=86 enabling collider #0 [543700ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [543700ms] <- socket$inet_udp=0x3 errno=14 cover=1683 #0 [543701ms] -> connect$inet(0x3, 0x20000040, 0x10) #0 [543701ms] <- connect$inet=0x0 errno=14 cover=761 pthread_create failed (errno 11) 16:01:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x2, 0x301}, 0x14}}, 0x0) 2021/11/11 16:01:26 result hanged=false: 2021/11/11 16:01:26 poll: candidates=8 inputs=0 signal=0 [543775ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73738 #0 [543793ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [543794ms] <- perf_event_open=0x3 errno=14 cover=8391 #0 [543795ms] -> openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [543795ms] <- openat$procfs=0xffffffffffffffff errno=14 cover=1138 #0 [543806ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [543807ms] <- socket$nl_netfilter=0x4 errno=14 cover=5221 #0 [543808ms] -> sendmsg$IPCTNL_MSG_EXP_GET(0x4, 0x20000380, 0x0) #0 [543809ms] <- sendmsg$IPCTNL_MSG_EXP_GET=0x14 errno=14 cover=5822 enabling collider #0 [543818ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [543819ms] <- perf_event_open=0x3 errno=14 cover=8275 #0 [543820ms] -> openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [543820ms] <- openat$procfs=0xffffffffffffffff errno=14 cover=1179 pthread_create failed (errno 11) 2021/11/11 16:01:26 result hanged=false: 16:01:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="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", 0x5ad}], 0x1}, 0x0) [543905ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73840 #0 [543923ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [543923ms] <- socket$inet6_udp=0x3 errno=14 cover=1731 #0 [543924ms] -> connect$inet6(0x3, 0x20000100, 0x1c) #0 [543924ms] <- connect$inet6=0x0 errno=14 cover=1423 #0 [543928ms] -> sendmsg$inet(0x3, 0x200000c0, 0x404c008) #0 [543928ms] <- sendmsg$inet=0x0 errno=14 cover=754 #0 [543933ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [543933ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [543935ms] -> setsockopt$inet_mtu(0x4, 0x0, 0xa, 0x20000040, 0x4) #0 [543935ms] <- setsockopt$inet_mtu=0x0 errno=14 cover=183 #0 [543936ms] -> sendmsg$inet6(0x4, 0x20000400, 0x0) #0 [543937ms] <- sendmsg$inet6=0x5ad errno=14 cover=2677 enabling collider #0 [543937ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [543938ms] <- socket$inet6_udp=0x3 errno=14 cover=1817 #0 [543938ms] -> connect$inet6(0x3, 0x20000100, 0x1c) #0 [543938ms] <- connect$inet6=0x0 errno=14 cover=1423 pthread_create failed (errno 11) 16:01:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="dbc0e8d30ad9bbac58e0bed3518dceaf39b5202aecbafa6ed4afd31e2ca3638a4e6c229629f15a0d247f7d1814b4730e8f19f0049b9b38c7a5631244d97b1521fcb4906908875c15d62764d175b9f0c69d8b46c7e11c8afb825ebd1321bb9d4c4b9b5daf06d841382db263ac5c2da2141eec8ae5d20af3c44943dc275e5a7ea97ae4ebb639b9ac34303fd1acff6e0af567e61d0573da9cd906ff97288853d591dc757583ba797b03c0cc1dd9b2d122491805d61f7fd5d6d8b3e47d10304af1ad172d219c16652816f4d88015533fd458136dcd1172a6fca9e5c853aa13ed38ab6d3c75d184cfced7f4eb8b6dcb7c489549ec8b0be4ac286c7affdb76f73f9fa900be94e5eee71dd4524009c905b7e8821ab7a9f521b3bf868df42f28b9f3006ef42ef6c3383c14d812e1240dc50222927a066fcfcdc3084acae5423ad16a57ae779105802e5571320b8648636e101c5e9cfbc42f6e08110ebf533c35b34b8530c6c6e1c854b4c7c2fc52450222be57d426c049c489b151a7963f5ada7d43b0507571481626749347e081a84e24f378df3817e2d472cb755dc62286ffd6224e4f53ffa377406911f547b45902a86bac2ebeab606800eb8cee02f39ebd524ef8cd99222985ec7c77670d2e6164a631f94b95ad5861557f8af4dbe1aa508ddff3ae49b2b1ad257c5d60d2264a474f60e46d4bc07abd0afe93a5865fb982736b823047b48ff5a6505706fccebfda13e5e04a843fe379c2df34495c5999bfdd43333132ffd36d0a6bf20a0d84b497862986a7362743cf6912cf416a87395ce7d02dacbaadcd74260deb3d7eda22889f04c48b1d22620d4f32bec2f844ebf459727bf71f85cfce0829b569ef7d268ec281fbbfe6e6f1ce824e229c72d07071a68548a541485673b5e3bf752613576f8ef0523f696675e4b25f3c38aaf2c581c939147494c881eb5ccfe14c842bf4fbb9c6e9ebda99c68594ca65945404c87abd46b8f7ca1b5b66414123b9a065a0fbebf46217b92407fb8fe040c1aae956c0bf25db732f8063911a02b4ba33ac8da9bf98d45b9467b82487c15663606a4fd39b24f1c1e3c144343785025372a3396c5495b49a361ed30fca7c280aeb7adfef250592f878a5dbf9deebf62922dd6fecffb19b469f001045130715d8d3602fc784bfd5f3e4abf8c79e38eac32df6f404d92f66769946b9b2214f7a663d59511ac83fadc44ab10850f46c061102010ef0ab41f595afc87bf082c7b0425d1ea6e082c3f0efeedcaa2a0b9727357d96de3674c818c2acb0182336be2e895a694d28d9e59fcad06fe6a339239247bff3553492e697b17058f7eff36ddda09fc161a7473ff6afb2bc621b395c8d61e69907ea38151adeb714dfe41892e8b9f9fb401d3f9b44d789023b2d702328204252387ab33704138b1255d55c90607bddb9ac63cc0de7275a38dff88e99b79d18b96df73e4753b06d43294420c374054710618bba4d624ebd5fa3bf8b42e336394cdf86211e5027a5d106317969dfd10acc2dfdcbf25fe5f950ad36c27068e7fe1ea87f27692c20b45e6903c632de7023e77868705c60ae2b293b5f0278557635fc3365ffa88931042e2bcb3028b6636b9bc1eb33de7328948235855c75d2bec611b62c0a086a261731ac133cdad992bdb7f2c506a175d36f7a253f3022fcac647cf2ed2c9d71bdec327c36d5f8e58a8baae7afa70ddeb63640270019a8d7cd1ec650232842fedd96a38ae46a5cf8ff32560aae7081bb5b270d8795c8d7080fcd516ace0e91daae3effe7ed8dad5bd21307d402b4c8ac98db0cfeb1a53edde5a6d1b56629b6f9c2c121bd74c3f42d0ba2e0342a3df73e1eccc8aa6b85447c156be80c4c801c641c73c45b33a0cc038d1f8f0d9eabfc9280a8086221332d23137e9776ed95a04df44cb27534f819d4c9524df143a3192b0fe1f993a089c88650145c53cdfd24f796ccfe3806db2b8340f114ec586a91a002d6e0280ab62651d840da88c09dcf251328a5c7498d724da51ef6d93bebdffc4ed210f84a4b269e0688b1bcccf5", 0x5ad}], 0x1}, 0x0) 2021/11/11 16:01:26 result hanged=false: 2021/11/11 16:01:26 #0: triaging type=7 2021/11/11 16:01:26 triaging input for call #5 sendmsg$inet6 (new signal=2) iptable filter/2: resetting iptable mangle/2: resetting [544018ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73942 #0 [544035ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [544035ms] <- socket$inet6_udp=0x3 errno=14 cover=1695 #0 [544045ms] -> connect$inet6(0x3, 0x20000100, 0x1c) #0 [544045ms] <- connect$inet6=0x0 errno=14 cover=1423 #0 [544046ms] -> sendmsg$inet(0x3, 0x200000c0, 0x404c008) #0 [544046ms] <- sendmsg$inet=0x0 errno=14 cover=754 #0 [544047ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [544047ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [544047ms] -> setsockopt$inet_mtu(0x4, 0x0, 0xa, 0x20000040, 0x4) #0 [544047ms] <- setsockopt$inet_mtu=0x0 errno=14 cover=183 #0 [544048ms] -> sendmsg$inet6(0x4, 0x20000400, 0x0) #0 [544049ms] <- sendmsg$inet6=0x5ad errno=14 cover=2662 2021/11/11 16:01:26 result hanged=false: 16:01:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="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", 0x5ad}], 0x1}, 0x0) iptable filter/2: resetting iptable mangle/2: resetting [544087ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73944 #0 [544103ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [544104ms] <- socket$inet6_udp=0x3 errno=14 cover=1695 #0 [544104ms] -> connect$inet6(0x3, 0x20000100, 0x1c) #0 [544105ms] <- connect$inet6=0x0 errno=14 cover=1423 #0 [544105ms] -> sendmsg$inet(0x3, 0x200000c0, 0x404c008) #0 [544105ms] <- sendmsg$inet=0x0 errno=14 cover=762 #0 [544106ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [544106ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [544106ms] -> setsockopt$inet_mtu(0x4, 0x0, 0xa, 0x20000040, 0x4) #0 [544106ms] <- setsockopt$inet_mtu=0x0 errno=14 cover=183 #0 [544107ms] -> sendmsg$inet6(0x4, 0x20000400, 0x0) #0 [544107ms] <- sendmsg$inet6=0x5ad errno=14 cover=2649 16:01:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="dbc0e8d30ad9bbac58e0bed3518dceaf39b5202aecbafa6ed4afd31e2ca3638a4e6c229629f15a0d247f7d1814b4730e8f19f0049b9b38c7a5631244d97b1521fcb4906908875c15d62764d175b9f0c69d8b46c7e11c8afb825ebd1321bb9d4c4b9b5daf06d841382db263ac5c2da2141eec8ae5d20af3c44943dc275e5a7ea97ae4ebb639b9ac34303fd1acff6e0af567e61d0573da9cd906ff97288853d591dc757583ba797b03c0cc1dd9b2d122491805d61f7fd5d6d8b3e47d10304af1ad172d219c16652816f4d88015533fd458136dcd1172a6fca9e5c853aa13ed38ab6d3c75d184cfced7f4eb8b6dcb7c489549ec8b0be4ac286c7affdb76f73f9fa900be94e5eee71dd4524009c905b7e8821ab7a9f521b3bf868df42f28b9f3006ef42ef6c3383c14d812e1240dc50222927a066fcfcdc3084acae5423ad16a57ae779105802e5571320b8648636e101c5e9cfbc42f6e08110ebf533c35b34b8530c6c6e1c854b4c7c2fc52450222be57d426c049c489b151a7963f5ada7d43b0507571481626749347e081a84e24f378df3817e2d472cb755dc62286ffd6224e4f53ffa377406911f547b45902a86bac2ebeab606800eb8cee02f39ebd524ef8cd99222985ec7c77670d2e6164a631f94b95ad5861557f8af4dbe1aa508ddff3ae49b2b1ad257c5d60d2264a474f60e46d4bc07abd0afe93a5865fb982736b823047b48ff5a6505706fccebfda13e5e04a843fe379c2df34495c5999bfdd43333132ffd36d0a6bf20a0d84b497862986a7362743cf6912cf416a87395ce7d02dacbaadcd74260deb3d7eda22889f04c48b1d22620d4f32bec2f844ebf459727bf71f85cfce0829b569ef7d268ec281fbbfe6e6f1ce824e229c72d07071a68548a541485673b5e3bf752613576f8ef0523f696675e4b25f3c38aaf2c581c939147494c881eb5ccfe14c842bf4fbb9c6e9ebda99c68594ca65945404c87abd46b8f7ca1b5b66414123b9a065a0fbebf46217b92407fb8fe040c1aae956c0bf25db732f8063911a02b4ba33ac8da9bf98d45b9467b82487c15663606a4fd39b24f1c1e3c144343785025372a3396c5495b49a361ed30fca7c280aeb7adfef250592f878a5dbf9deebf62922dd6fecffb19b469f001045130715d8d3602fc784bfd5f3e4abf8c79e38eac32df6f404d92f66769946b9b2214f7a663d59511ac83fadc44ab10850f46c061102010ef0ab41f595afc87bf082c7b0425d1ea6e082c3f0efeedcaa2a0b9727357d96de3674c818c2acb0182336be2e895a694d28d9e59fcad06fe6a339239247bff3553492e697b17058f7eff36ddda09fc161a7473ff6afb2bc621b395c8d61e69907ea38151adeb714dfe41892e8b9f9fb401d3f9b44d789023b2d702328204252387ab33704138b1255d55c90607bddb9ac63cc0de7275a38dff88e99b79d18b96df73e4753b06d43294420c374054710618bba4d624ebd5fa3bf8b42e336394cdf86211e5027a5d106317969dfd10acc2dfdcbf25fe5f950ad36c27068e7fe1ea87f27692c20b45e6903c632de7023e77868705c60ae2b293b5f0278557635fc3365ffa88931042e2bcb3028b6636b9bc1eb33de7328948235855c75d2bec611b62c0a086a261731ac133cdad992bdb7f2c506a175d36f7a253f3022fcac647cf2ed2c9d71bdec327c36d5f8e58a8baae7afa70ddeb63640270019a8d7cd1ec650232842fedd96a38ae46a5cf8ff32560aae7081bb5b270d8795c8d7080fcd516ace0e91daae3effe7ed8dad5bd21307d402b4c8ac98db0cfeb1a53edde5a6d1b56629b6f9c2c121bd74c3f42d0ba2e0342a3df73e1eccc8aa6b85447c156be80c4c801c641c73c45b33a0cc038d1f8f0d9eabfc9280a8086221332d23137e9776ed95a04df44cb27534f819d4c9524df143a3192b0fe1f993a089c88650145c53cdfd24f796ccfe3806db2b8340f114ec586a91a002d6e0280ab62651d840da88c09dcf251328a5c7498d724da51ef6d93bebdffc4ed210f84a4b269e0688b1bcccf5", 0x5ad}], 0x1}, 0x0) 2021/11/11 16:01:26 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [544149ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73946 #0 [544166ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [544166ms] <- socket$inet6_udp=0x3 errno=14 cover=1695 #0 [544167ms] -> connect$inet6(0x3, 0x20000100, 0x1c) #0 [544168ms] <- connect$inet6=0x0 errno=14 cover=1423 #0 [544170ms] -> sendmsg$inet(0x3, 0x200000c0, 0x404c008) #0 [544170ms] <- sendmsg$inet=0x0 errno=14 cover=743 #0 [544171ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [544171ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [544172ms] -> setsockopt$inet_mtu(0x4, 0x0, 0xa, 0x20000040, 0x4) #0 [544172ms] <- setsockopt$inet_mtu=0x0 errno=14 cover=183 #0 [544173ms] -> sendmsg$inet6(0x4, 0x20000400, 0x0) #0 [544174ms] <- sendmsg$inet6=0x5ad errno=14 cover=2669 2021/11/11 16:01:26 result hanged=false: 2021/11/11 16:01:26 added new input for call #5 sendmsg$inet6 to corpus: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="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", 0x5ad}], 0x1}, 0x0) 16:01:26 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x1e, 0xe21}, 0x14}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000080), 0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff, 0x81}) getsockname$netlink(r2, &(0x7f0000000100), &(0x7f0000000180)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x10044041) r4 = fork() setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000000140)=0x400, 0x4) ptrace$setopts(0x4200, r4, 0x9, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r4) recvfrom$inet6(r3, &(0x7f0000000700)=""/4096, 0x20001700, 0xcd00, 0x0, 0x0) iptable filter/2: resetting iptable mangle/2: resetting [544216ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 73948 #0 [544234ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [544237ms] <- perf_event_open=0x3 errno=14 cover=9419 #0 [544237ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [544238ms] <- socket$netlink=0x4 errno=14 cover=4365 #0 [544238ms] -> sendmsg$nl_generic(0x4, 0x20000280, 0x0) #0 [544239ms] <- sendmsg$nl_generic=0x14 errno=14 cover=6201 #0 [544240ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [544241ms] <- openat=0xffffffffffffffff errno=2 cover=4468 #0 [544242ms] -> setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x20000080, 0x4) #0 [544242ms] <- setsockopt$inet6_tcp_int=0xffffffffffffffff errno=9 cover=79 #0 [544246ms] -> ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x20000180) #0 [544246ms] <- ioctl$FS_IOC_RESVSP=0xffffffffffffffff errno=9 cover=74 #0 [544246ms] -> getsockname$netlink(0xffffffffffffffff, 0x20000100, 0x20000180) #0 [544246ms] <- getsockname$netlink=0xffffffffffffffff errno=9 cover=77 #0 [544247ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [544249ms] <- socket$inet6_tcp=0x5 errno=14 cover=5723 #0 [544250ms] -> fcntl$setstatus(0x5, 0x4, 0x2000) #0 [544250ms] <- fcntl$setstatus=0x0 errno=14 cover=649 #0 [544251ms] -> bind$inet6(0x5, 0x200000c0, 0x1c) #0 [544252ms] <- bind$inet6=0x0 errno=14 cover=1087 #0 [544253ms] -> ioctl$BTRFS_IOC_QGROUP_ASSIGN(0x3, 0x40189429, 0x20000080) #0 [544253ms] <- ioctl$BTRFS_IOC_QGROUP_ASSIGN=0xffffffffffffffff errno=25 cover=244 #0 [544254ms] -> connect$inet6(0x5, 0x20000000, 0x1c) #0 [544256ms] <- connect$inet6=0x0 errno=14 cover=4130 #0 [544256ms] -> sendmsg$inet6(0x5, 0x20000200, 0x10044041) #0 [544258ms] <- sendmsg$inet6=0x1 errno=14 cover=7041 #0 [544258ms] -> fork() #0 [544287ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [544289ms] -> setsockopt$inet6_tcp_int(0x5, 0x6, 0xc, 0x20000140, 0x4) #0 [544291ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=287 #0 [544292ms] -> ptrace$setopts(0x4200, 0x0, 0x9, 0x0) #0 [544292ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=93 #0 [544293ms] -> ioctl$sock_SIOCSPGRP(0x5, 0x8902, 0x20000040) #0 [544293ms] <- ioctl$sock_SIOCSPGRP=0x0 errno=14 cover=289 #0 [544294ms] -> recvfrom$inet6(0x5, 0x20000700, 0x20001700, 0xcd00, 0x0, 0x0) 2021/11/11 16:01:27 poll: candidates=0 inputs=0 signal=0 enabling collider pthread_create failed (errno 11) 2021/11/11 16:01:28 result hanged=false: 16:01:28 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x1e, 0xe21}, 0x14}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000080), 0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff, 0x81}) getsockname$netlink(r2, &(0x7f0000000100), &(0x7f0000000180)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x10044041) r4 = fork() setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000000140)=0x400, 0x4) ptrace$setopts(0x4200, r4, 0x9, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r4) recvfrom$inet6(r3, &(0x7f0000000700)=""/4096, 0x20001700, 0xcd00, 0x0, 0x0) 2021/11/11 16:01:28 #0: triaging type=7 2021/11/11 16:01:28 triaging input for call #17 recvfrom$inet6 (new signal=17) iptable filter/10: resetting iptable mangle/10: resetting [545475ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74051 #0 [545495ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [545498ms] <- perf_event_open=0x3 errno=14 cover=8243 #0 [545500ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [545500ms] <- socket$netlink=0x4 errno=14 cover=4157 #0 [545501ms] -> sendmsg$nl_generic(0x4, 0x20000280, 0x0) #0 [545502ms] <- sendmsg$nl_generic=0x14 errno=14 cover=6138 #0 [545503ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [545503ms] <- openat=0xffffffffffffffff errno=2 cover=3979 #0 [545505ms] -> setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x20000080, 0x4) #0 [545505ms] <- setsockopt$inet6_tcp_int=0xffffffffffffffff errno=9 cover=79 #0 [545505ms] -> ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x20000180) #0 [545505ms] <- ioctl$FS_IOC_RESVSP=0xffffffffffffffff errno=9 cover=74 #0 [545505ms] -> getsockname$netlink(0xffffffffffffffff, 0x20000100, 0x20000180) #0 [545506ms] <- getsockname$netlink=0xffffffffffffffff errno=9 cover=77 #0 [545506ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [545507ms] <- socket$inet6_tcp=0x5 errno=14 cover=5324 #0 [545508ms] -> fcntl$setstatus(0x5, 0x4, 0x2000) #0 [545508ms] <- fcntl$setstatus=0x0 errno=14 cover=660 #0 [545509ms] -> bind$inet6(0x5, 0x200000c0, 0x1c) #0 [545509ms] <- bind$inet6=0xffffffffffffffff errno=98 cover=898 #0 [545510ms] -> ioctl$BTRFS_IOC_QGROUP_ASSIGN(0x3, 0x40189429, 0x20000080) #0 [545510ms] <- ioctl$BTRFS_IOC_QGROUP_ASSIGN=0xffffffffffffffff errno=25 cover=244 #0 [545510ms] -> connect$inet6(0x5, 0x20000000, 0x1c) #0 [545512ms] <- connect$inet6=0xffffffffffffffff errno=111 cover=7295 #0 [545513ms] -> sendmsg$inet6(0x5, 0x20000200, 0x10044041) #0 [545513ms] <- sendmsg$inet6=0xffffffffffffffff errno=32 cover=413 #0 [545513ms] -> fork() #0 [545537ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [545554ms] -> setsockopt$inet6_tcp_int(0x5, 0x6, 0xc, 0x20000140, 0x4) #0 [545554ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=286 #0 [545555ms] -> ptrace$setopts(0x4200, 0x0, 0x9, 0x0) #0 [545555ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=93 #0 [545556ms] -> ioctl$sock_SIOCSPGRP(0x5, 0x8902, 0x20000040) #0 [545557ms] <- ioctl$sock_SIOCSPGRP=0x0 errno=14 cover=303 #0 [545558ms] -> recvfrom$inet6(0x5, 0x20000700, 0x20001700, 0xcd00, 0x0, 0x0) #0 [545559ms] <- recvfrom$inet6=0xffffffffffffffff errno=107 cover=268 2021/11/11 16:01:28 result hanged=false: 16:01:28 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x1e, 0xe21}, 0x14}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000080), 0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff, 0x81}) getsockname$netlink(r2, &(0x7f0000000100), &(0x7f0000000180)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x10044041) r4 = fork() setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000000140)=0x400, 0x4) ptrace$setopts(0x4200, r4, 0x9, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r4) recvfrom$inet6(r3, &(0x7f0000000700)=""/4096, 0x20001700, 0xcd00, 0x0, 0x0) iptable filter/10: resetting iptable mangle/10: resetting [545610ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74054 #0 [545628ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [545630ms] <- perf_event_open=0x3 errno=14 cover=11248 #0 [545631ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [545633ms] <- socket$netlink=0x4 errno=14 cover=4375 #0 [545633ms] -> sendmsg$nl_generic(0x4, 0x20000280, 0x0) #0 [545634ms] <- sendmsg$nl_generic=0x14 errno=14 cover=6207 #0 [545634ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [545635ms] <- openat=0xffffffffffffffff errno=2 cover=3839 #0 [545635ms] -> setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x20000080, 0x4) #0 [545635ms] <- setsockopt$inet6_tcp_int=0xffffffffffffffff errno=9 cover=79 #0 [545636ms] -> ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x20000180) #0 [545636ms] <- ioctl$FS_IOC_RESVSP=0xffffffffffffffff errno=9 cover=74 #0 [545636ms] -> getsockname$netlink(0xffffffffffffffff, 0x20000100, 0x20000180) #0 [545636ms] <- getsockname$netlink=0xffffffffffffffff errno=9 cover=77 #0 [545636ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [545636ms] <- socket$inet6_tcp=0x5 errno=14 cover=5484 #0 [545637ms] -> fcntl$setstatus(0x5, 0x4, 0x2000) #0 [545638ms] <- fcntl$setstatus=0x0 errno=14 cover=689 #0 [545638ms] -> bind$inet6(0x5, 0x200000c0, 0x1c) #0 [545638ms] <- bind$inet6=0xffffffffffffffff errno=98 cover=898 #0 [545639ms] -> ioctl$BTRFS_IOC_QGROUP_ASSIGN(0x3, 0x40189429, 0x20000080) #0 [545640ms] <- ioctl$BTRFS_IOC_QGROUP_ASSIGN=0xffffffffffffffff errno=25 cover=244 #0 [545640ms] -> connect$inet6(0x5, 0x20000000, 0x1c) #0 [545642ms] <- connect$inet6=0xffffffffffffffff errno=111 cover=7446 #0 [545643ms] -> sendmsg$inet6(0x5, 0x20000200, 0x10044041) #0 [545643ms] <- sendmsg$inet6=0xffffffffffffffff errno=32 cover=413 #0 [545643ms] -> fork() #0 [545671ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [545685ms] -> setsockopt$inet6_tcp_int(0x5, 0x6, 0xc, 0x20000140, 0x4) #0 [545685ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=286 #0 [545685ms] -> ptrace$setopts(0x4200, 0x0, 0x9, 0x0) #0 [545686ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=93 #0 [545686ms] -> ioctl$sock_SIOCSPGRP(0x5, 0x8902, 0x20000040) #0 [545687ms] <- ioctl$sock_SIOCSPGRP=0x0 errno=14 cover=289 #0 [545687ms] -> recvfrom$inet6(0x5, 0x20000700, 0x20001700, 0xcd00, 0x0, 0x0) #0 [545688ms] <- recvfrom$inet6=0xffffffffffffffff errno=107 cover=268 16:01:28 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x1e, 0xe21}, 0x14}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000080), 0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff, 0x81}) getsockname$netlink(r2, &(0x7f0000000100), &(0x7f0000000180)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x10044041) r4 = fork() setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000000140)=0x400, 0x4) ptrace$setopts(0x4200, r4, 0x9, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r4) recvfrom$inet6(r3, &(0x7f0000000700)=""/4096, 0x20001700, 0xcd00, 0x0, 0x0) 2021/11/11 16:01:28 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [545737ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74057 #0 [545755ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [545757ms] <- perf_event_open=0x3 errno=14 cover=8130 #0 [545758ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [545759ms] <- socket$netlink=0x4 errno=14 cover=5078 #0 [545761ms] -> sendmsg$nl_generic(0x4, 0x20000280, 0x0) #0 [545761ms] <- sendmsg$nl_generic=0x14 errno=14 cover=6135 #0 [545763ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [545764ms] <- openat=0xffffffffffffffff errno=2 cover=4515 #0 [545764ms] -> setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x20000080, 0x4) #0 [545764ms] <- setsockopt$inet6_tcp_int=0xffffffffffffffff errno=9 cover=79 #0 [545765ms] -> ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x20000180) #0 [545765ms] <- ioctl$FS_IOC_RESVSP=0xffffffffffffffff errno=9 cover=74 #0 [545765ms] -> getsockname$netlink(0xffffffffffffffff, 0x20000100, 0x20000180) #0 [545765ms] <- getsockname$netlink=0xffffffffffffffff errno=9 cover=77 #0 [545765ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [545765ms] <- socket$inet6_tcp=0x5 errno=14 cover=5343 #0 [545766ms] -> fcntl$setstatus(0x5, 0x4, 0x2000) #0 [545766ms] <- fcntl$setstatus=0x0 errno=14 cover=663 #0 [545766ms] -> bind$inet6(0x5, 0x200000c0, 0x1c) #0 [545766ms] <- bind$inet6=0xffffffffffffffff errno=98 cover=898 #0 [545767ms] -> ioctl$BTRFS_IOC_QGROUP_ASSIGN(0x3, 0x40189429, 0x20000080) #0 [545767ms] <- ioctl$BTRFS_IOC_QGROUP_ASSIGN=0xffffffffffffffff errno=25 cover=244 #0 [545767ms] -> connect$inet6(0x5, 0x20000000, 0x1c) #0 [545768ms] <- connect$inet6=0xffffffffffffffff errno=111 cover=7348 #0 [545769ms] -> sendmsg$inet6(0x5, 0x20000200, 0x10044041) #0 [545769ms] <- sendmsg$inet6=0xffffffffffffffff errno=32 cover=413 #0 [545770ms] -> fork() #0 [545795ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [545811ms] -> setsockopt$inet6_tcp_int(0x5, 0x6, 0xc, 0x20000140, 0x4) #0 [545811ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=286 #0 [545811ms] -> ptrace$setopts(0x4200, 0x0, 0x9, 0x0) #0 [545812ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=93 #0 [545812ms] -> ioctl$sock_SIOCSPGRP(0x5, 0x8902, 0x20000040) #0 [545812ms] <- ioctl$sock_SIOCSPGRP=0x0 errno=14 cover=289 #0 [545812ms] -> recvfrom$inet6(0x5, 0x20000700, 0x20001700, 0xcd00, 0x0, 0x0) #0 [545813ms] <- recvfrom$inet6=0xffffffffffffffff errno=107 cover=268 2021/11/11 16:01:28 result hanged=false: 2021/11/11 16:01:28 added new input for call #17 recvfrom$inet6 to corpus: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x1e, 0xe21}, 0x14}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000080), 0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff, 0x81}) getsockname$netlink(r2, &(0x7f0000000100), &(0x7f0000000180)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x10044041) r4 = fork() setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000000140)=0x400, 0x4) ptrace$setopts(0x4200, r4, 0x9, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r4) recvfrom$inet6(r3, &(0x7f0000000700)=""/4096, 0x20001700, 0xcd00, 0x0, 0x0) 2021/11/11 16:01:28 #0: triaging type=7 2021/11/11 16:01:28 triaging input for call #12 sendmsg$inet6 (new signal=5) 16:01:28 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x1e, 0xe21}, 0x14}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000080), 0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff, 0x81}) getsockname$netlink(r2, &(0x7f0000000100), &(0x7f0000000180)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x10044041) r4 = fork() setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000000140)=0x400, 0x4) ptrace$setopts(0x4200, r4, 0x9, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r4) recvfrom$inet6(r3, &(0x7f0000000700)=""/4096, 0x20001700, 0xcd00, 0x0, 0x0) iptable filter/10: resetting iptable mangle/10: resetting [545872ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74060 #0 [545893ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [545895ms] <- perf_event_open=0x3 errno=14 cover=8587 #0 [545896ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [545897ms] <- socket$netlink=0x4 errno=14 cover=5068 #0 [545899ms] -> sendmsg$nl_generic(0x4, 0x20000280, 0x0) #0 [545899ms] <- sendmsg$nl_generic=0x14 errno=14 cover=6142 #0 [545901ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [545901ms] <- openat=0xffffffffffffffff errno=2 cover=4393 #0 [545903ms] -> setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x20000080, 0x4) #0 [545904ms] <- setsockopt$inet6_tcp_int=0xffffffffffffffff errno=9 cover=79 #0 [545904ms] -> ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x20000180) #0 [545904ms] <- ioctl$FS_IOC_RESVSP=0xffffffffffffffff errno=9 cover=74 #0 [545905ms] -> getsockname$netlink(0xffffffffffffffff, 0x20000100, 0x20000180) #0 [545906ms] <- getsockname$netlink=0xffffffffffffffff errno=9 cover=77 #0 [545906ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [545907ms] <- socket$inet6_tcp=0x5 errno=14 cover=5792 #0 [545908ms] -> fcntl$setstatus(0x5, 0x4, 0x2000) #0 [545908ms] <- fcntl$setstatus=0x0 errno=14 cover=660 #0 [545908ms] -> bind$inet6(0x5, 0x200000c0, 0x1c) #0 [545909ms] <- bind$inet6=0xffffffffffffffff errno=98 cover=898 #0 [545910ms] -> ioctl$BTRFS_IOC_QGROUP_ASSIGN(0x3, 0x40189429, 0x20000080) #0 [545910ms] <- ioctl$BTRFS_IOC_QGROUP_ASSIGN=0xffffffffffffffff errno=25 cover=244 #0 [545910ms] -> connect$inet6(0x5, 0x20000000, 0x1c) #0 [545911ms] <- connect$inet6=0xffffffffffffffff errno=111 cover=7321 #0 [545913ms] -> sendmsg$inet6(0x5, 0x20000200, 0x10044041) #0 [545913ms] <- sendmsg$inet6=0xffffffffffffffff errno=32 cover=413 #0 [545913ms] -> fork() #0 [545940ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [545956ms] -> setsockopt$inet6_tcp_int(0x5, 0x6, 0xc, 0x20000140, 0x4) #0 [545960ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=286 #0 [545960ms] -> ptrace$setopts(0x4200, 0x0, 0x9, 0x0) #0 [545961ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=93 #0 [545961ms] -> ioctl$sock_SIOCSPGRP(0x5, 0x8902, 0x20000040) #0 [545961ms] <- ioctl$sock_SIOCSPGRP=0x0 errno=14 cover=289 #0 [545962ms] -> recvfrom$inet6(0x5, 0x20000700, 0x20001700, 0xcd00, 0x0, 0x0) #0 [545962ms] <- recvfrom$inet6=0xffffffffffffffff errno=107 cover=268 16:01:28 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x1e, 0xe21}, 0x14}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000080), 0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff, 0x81}) getsockname$netlink(r2, &(0x7f0000000100), &(0x7f0000000180)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x10044041) r4 = fork() setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000000140)=0x400, 0x4) ptrace$setopts(0x4200, r4, 0x9, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r4) recvfrom$inet6(r3, &(0x7f0000000700)=""/4096, 0x20001700, 0xcd00, 0x0, 0x0) 2021/11/11 16:01:28 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [546012ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74063 #0 [546032ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [546034ms] <- perf_event_open=0x3 errno=14 cover=10809 #0 [546036ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [546036ms] <- socket$netlink=0x4 errno=14 cover=4361 #0 [546037ms] -> sendmsg$nl_generic(0x4, 0x20000280, 0x0) #0 [546037ms] <- sendmsg$nl_generic=0x14 errno=14 cover=6191 #0 [546039ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [546039ms] <- openat=0xffffffffffffffff errno=2 cover=4003 #0 [546040ms] -> setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x20000080, 0x4) #0 [546040ms] <- setsockopt$inet6_tcp_int=0xffffffffffffffff errno=9 cover=79 #0 [546040ms] -> ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x20000180) #0 [546040ms] <- ioctl$FS_IOC_RESVSP=0xffffffffffffffff errno=9 cover=74 #0 [546040ms] -> getsockname$netlink(0xffffffffffffffff, 0x20000100, 0x20000180) #0 [546040ms] <- getsockname$netlink=0xffffffffffffffff errno=9 cover=77 #0 [546041ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [546041ms] <- socket$inet6_tcp=0x5 errno=14 cover=5180 #0 [546041ms] -> fcntl$setstatus(0x5, 0x4, 0x2000) #0 [546041ms] <- fcntl$setstatus=0x0 errno=14 cover=649 #0 [546042ms] -> bind$inet6(0x5, 0x200000c0, 0x1c) #0 [546042ms] <- bind$inet6=0xffffffffffffffff errno=98 cover=898 #0 [546042ms] -> ioctl$BTRFS_IOC_QGROUP_ASSIGN(0x3, 0x40189429, 0x20000080) #0 [546042ms] <- ioctl$BTRFS_IOC_QGROUP_ASSIGN=0xffffffffffffffff errno=25 cover=244 #0 [546042ms] -> connect$inet6(0x5, 0x20000000, 0x1c) #0 [546044ms] <- connect$inet6=0xffffffffffffffff errno=111 cover=4877 #0 [546045ms] -> sendmsg$inet6(0x5, 0x20000200, 0x10044041) #0 [546045ms] <- sendmsg$inet6=0xffffffffffffffff errno=32 cover=413 #0 [546045ms] -> fork() #0 [546071ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [546086ms] -> setsockopt$inet6_tcp_int(0x5, 0x6, 0xc, 0x20000140, 0x4) #0 [546086ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=286 #0 [546086ms] -> ptrace$setopts(0x4200, 0x0, 0x9, 0x0) #0 [546087ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=93 #0 [546087ms] -> ioctl$sock_SIOCSPGRP(0x5, 0x8902, 0x20000040) #0 [546087ms] <- ioctl$sock_SIOCSPGRP=0x0 errno=14 cover=289 #0 [546088ms] -> recvfrom$inet6(0x5, 0x20000700, 0x20001700, 0xcd00, 0x0, 0x0) #0 [546088ms] <- recvfrom$inet6=0xffffffffffffffff errno=107 cover=268 16:01:28 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x1e, 0xe21}, 0x14}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000080), 0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff, 0x81}) getsockname$netlink(r2, &(0x7f0000000100), &(0x7f0000000180)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x10044041) r4 = fork() setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000000140)=0x400, 0x4) ptrace$setopts(0x4200, r4, 0x9, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r4) recvfrom$inet6(r3, &(0x7f0000000700)=""/4096, 0x20001700, 0xcd00, 0x0, 0x0) 2021/11/11 16:01:28 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [546139ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74066 #0 [546157ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [546158ms] <- perf_event_open=0x3 errno=14 cover=8368 #0 [546159ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [546159ms] <- socket$netlink=0x4 errno=14 cover=4241 #0 [546160ms] -> sendmsg$nl_generic(0x4, 0x20000280, 0x0) #0 [546161ms] <- sendmsg$nl_generic=0x14 errno=14 cover=6189 #0 [546162ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [546162ms] <- openat=0xffffffffffffffff errno=2 cover=3977 #0 [546163ms] -> setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x20000080, 0x4) #0 [546163ms] <- setsockopt$inet6_tcp_int=0xffffffffffffffff errno=9 cover=79 #0 [546163ms] -> ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x20000180) #0 [546163ms] <- ioctl$FS_IOC_RESVSP=0xffffffffffffffff errno=9 cover=74 #0 [546163ms] -> getsockname$netlink(0xffffffffffffffff, 0x20000100, 0x20000180) #0 [546163ms] <- getsockname$netlink=0xffffffffffffffff errno=9 cover=77 #0 [546163ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [546164ms] <- socket$inet6_tcp=0x5 errno=14 cover=5259 #0 [546164ms] -> fcntl$setstatus(0x5, 0x4, 0x2000) #0 [546165ms] <- fcntl$setstatus=0x0 errno=14 cover=660 #0 [546165ms] -> bind$inet6(0x5, 0x200000c0, 0x1c) #0 [546165ms] <- bind$inet6=0xffffffffffffffff errno=98 cover=898 #0 [546165ms] -> ioctl$BTRFS_IOC_QGROUP_ASSIGN(0x3, 0x40189429, 0x20000080) #0 [546165ms] <- ioctl$BTRFS_IOC_QGROUP_ASSIGN=0xffffffffffffffff errno=25 cover=244 #0 [546165ms] -> connect$inet6(0x5, 0x20000000, 0x1c) #0 [546166ms] <- connect$inet6=0xffffffffffffffff errno=111 cover=7307 #0 [546167ms] -> sendmsg$inet6(0x5, 0x20000200, 0x10044041) #0 [546167ms] <- sendmsg$inet6=0xffffffffffffffff errno=32 cover=413 #0 [546167ms] -> fork() #0 [546194ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [546211ms] -> setsockopt$inet6_tcp_int(0x5, 0x6, 0xc, 0x20000140, 0x4) #0 [546211ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=286 #0 [546212ms] -> ptrace$setopts(0x4200, 0x0, 0x9, 0x0) #0 [546213ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=93 #0 [546213ms] -> ioctl$sock_SIOCSPGRP(0x5, 0x8902, 0x20000040) #0 [546214ms] <- ioctl$sock_SIOCSPGRP=0x0 errno=14 cover=289 #0 [546214ms] -> recvfrom$inet6(0x5, 0x20000700, 0x20001700, 0xcd00, 0x0, 0x0) #0 [546215ms] <- recvfrom$inet6=0xffffffffffffffff errno=107 cover=282 16:01:28 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), 0xffffffffffffffff) 2021/11/11 16:01:28 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [546270ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74069 #0 [546289ms] -> ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) #0 [546289ms] <- ioctl$ifreq_SIOCGIFINDEX_batadv_mesh=0xffffffffffffffff errno=9 cover=45 #0 [546291ms] -> ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) #0 [546291ms] <- ioctl$ifreq_SIOCGIFINDEX_wireguard=0xffffffffffffffff errno=9 cover=45 #0 [546292ms] -> ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) #0 [546293ms] <- ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL=0xffffffffffffffff errno=9 cover=45 #0 [546294ms] -> syz_genetlink_get_family_id$ethtool(0x20000e00, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [546295ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=7951 enabling collider #0 [546296ms] -> ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) #0 [546296ms] <- ioctl$ifreq_SIOCGIFINDEX_batadv_mesh=0xffffffffffffffff errno=9 cover=45 #0 [546297ms] -> ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) #0 [546297ms] <- ioctl$ifreq_SIOCGIFINDEX_wireguard=0xffffffffffffffff errno=9 cover=45 pthread_create failed (errno 11) 16:01:28 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) r1 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) sendfile(r4, r2, 0x0, 0x7ffffffc) r5 = timerfd_create(0x7, 0x0) timerfd_settime(r5, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000480)={'U+', 0x4}, 0x16, 0x1) 2021/11/11 16:01:28 result hanged=false: [546368ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74171 #0 [546386ms] -> syz_open_dev$loop(0x20000040, 0x0, 0x60002) #0 [546386ms] <- syz_open_dev$loop=0x3 errno=14 cover=1231 #0 [546387ms] -> openat$hwrng(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [546387ms] <- openat$hwrng=0x4 errno=14 cover=1176 #0 [546388ms] -> ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0x3) #0 [546388ms] <- ioctl$LOOP_CHANGE_FD=0xffffffffffffffff errno=9 cover=45 #0 [546390ms] -> socket$unix(0x1, 0x0, 0x0) #0 [546390ms] <- socket$unix=0xffffffffffffffff errno=94 cover=754 #0 [546391ms] -> ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x20000040) #0 [546391ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=9 cover=45 #0 [546393ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [546396ms] <- openat=0x5 errno=14 cover=7880 #0 [546397ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [546398ms] <- openat=0x6 errno=14 cover=2769 #0 [546399ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x0) #0 [546481ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [546486ms] -> socket$netlink(0x10, 0x3, 0xa) #0 [546486ms] <- socket$netlink=0x7 errno=14 cover=1513 #0 [546487ms] -> sendfile(0x7, 0x5, 0x0, 0x7ffffffc) #0 [546487ms] <- sendfile=0x0 errno=14 cover=1413 #0 [546488ms] -> timerfd_create(0x7, 0x0) #0 [546488ms] <- timerfd_create=0x8 errno=14 cover=525 #0 [546489ms] -> timerfd_settime(0x8, 0x0, 0x0, 0x0) #0 [546489ms] <- timerfd_settime=0xffffffffffffffff errno=14 cover=397 #0 [546490ms] -> fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x20000080, 0x20000480, 0x16, 0x1) #0 [546490ms] <- fsetxattr$trusted_overlay_nlink=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [546496ms] -> syz_open_dev$loop(0x20000040, 0x0, 0x60002) #0 [546496ms] <- syz_open_dev$loop=0x3 errno=14 cover=1318 #0 [546497ms] -> openat$hwrng(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [546498ms] <- openat$hwrng=0x4 errno=14 cover=1153 pthread_create failed (errno 11) 16:01:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0xa) close_range(r1, 0xffffffffffffffff, 0x2) 2021/11/11 16:01:29 result hanged=false: [546579ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74273 #0 [546597ms] -> syz_open_procfs(0x0, 0x20000080) #0 [546598ms] <- syz_open_procfs=0x3 errno=21 cover=4312 #0 [546599ms] -> fcntl$notify(0x3, 0x402, 0xa) #0 [546599ms] <- fcntl$notify=0x0 errno=14 cover=495 #0 [546599ms] -> syz_open_procfs(0x0, 0x20000080) #0 [546599ms] <- syz_open_procfs=0x4 errno=21 cover=3790 #0 [546600ms] -> fcntl$notify(0x4, 0x402, 0xa) #0 [546600ms] <- fcntl$notify=0x0 errno=14 cover=489 #0 [546601ms] -> close_range(0x4, 0xffffffffffffffff, 0x2) #0 [546601ms] <- close_range=0x0 errno=14 cover=1731 enabling collider #0 [546601ms] -> syz_open_procfs(0x0, 0x20000080) #0 [546602ms] <- syz_open_procfs=0x4 errno=21 cover=3776 #0 [546602ms] -> fcntl$notify(0x4, 0x402, 0xa) #0 [546603ms] <- fcntl$notify=0x0 errno=14 cover=485 pthread_create failed (errno 11) 2021/11/11 16:01:29 result hanged=false: 16:01:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0xa) close_range(r1, 0xffffffffffffffff, 0x2) 2021/11/11 16:01:29 #0: triaging type=7 2021/11/11 16:01:29 triaging input for call #4 close_range (new signal=4) [546676ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74375 #0 [546692ms] -> syz_open_procfs(0x0, 0x20000080) #0 [546693ms] <- syz_open_procfs=0x3 errno=21 cover=4356 #0 [546694ms] -> fcntl$notify(0x3, 0x402, 0xa) #0 [546694ms] <- fcntl$notify=0x0 errno=14 cover=801 #0 [546695ms] -> syz_open_procfs(0x0, 0x20000080) #0 [546695ms] <- syz_open_procfs=0x4 errno=21 cover=3769 #0 [546695ms] -> fcntl$notify(0x4, 0x402, 0xa) #0 [546696ms] <- fcntl$notify=0x0 errno=14 cover=478 #0 [546696ms] -> close_range(0x4, 0xffffffffffffffff, 0x2) #0 [546696ms] <- close_range=0x0 errno=14 cover=1731 2021/11/11 16:01:29 result hanged=false: 16:01:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0xa) close_range(r1, 0xffffffffffffffff, 0x2) [546736ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74377 #0 [546753ms] -> syz_open_procfs(0x0, 0x20000080) #0 [546754ms] <- syz_open_procfs=0x3 errno=21 cover=4354 #0 [546755ms] -> fcntl$notify(0x3, 0x402, 0xa) #0 [546755ms] <- fcntl$notify=0x0 errno=14 cover=495 #0 [546757ms] -> syz_open_procfs(0x0, 0x20000080) #0 [546757ms] <- syz_open_procfs=0x4 errno=21 cover=3743 #0 [546758ms] -> fcntl$notify(0x4, 0x402, 0xa) #0 [546758ms] <- fcntl$notify=0x0 errno=14 cover=489 #0 [546758ms] -> close_range(0x4, 0xffffffffffffffff, 0x2) #0 [546759ms] <- close_range=0x0 errno=14 cover=1720 16:01:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0xa) close_range(r1, 0xffffffffffffffff, 0x2) 2021/11/11 16:01:29 result hanged=false: [546797ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74379 #0 [546814ms] -> syz_open_procfs(0x0, 0x20000080) #0 [546815ms] <- syz_open_procfs=0x3 errno=21 cover=4320 #0 [546816ms] -> fcntl$notify(0x3, 0x402, 0xa) #0 [546816ms] <- fcntl$notify=0x0 errno=14 cover=495 #0 [546817ms] -> syz_open_procfs(0x0, 0x20000080) #0 [546817ms] <- syz_open_procfs=0x4 errno=21 cover=3776 #0 [546820ms] -> fcntl$notify(0x4, 0x402, 0xa) #0 [546820ms] <- fcntl$notify=0x0 errno=14 cover=587 #0 [546820ms] -> close_range(0x4, 0xffffffffffffffff, 0x2) #0 [546820ms] <- close_range=0x0 errno=14 cover=1767 2021/11/11 16:01:29 result hanged=false: 2021/11/11 16:01:29 added new input for call #4 close_range to corpus: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0xa) close_range(r1, 0xffffffffffffffff, 0x2) 16:01:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0xa) close_range(r1, 0xffffffffffffffff, 0x2) 2021/11/11 16:01:29 #0: triaging type=7 2021/11/11 16:01:29 triaging input for call #3 fcntl$notify (new signal=4) [546860ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74381 #0 [546877ms] -> syz_open_procfs(0x0, 0x20000080) #0 [546877ms] <- syz_open_procfs=0x3 errno=21 cover=4365 #0 [546878ms] -> fcntl$notify(0x3, 0x402, 0xa) #0 [546879ms] <- fcntl$notify=0x0 errno=14 cover=582 #0 [546879ms] -> syz_open_procfs(0x0, 0x20000080) #0 [546880ms] <- syz_open_procfs=0x4 errno=21 cover=3786 #0 [546880ms] -> fcntl$notify(0x4, 0x402, 0xa) #0 [546881ms] <- fcntl$notify=0x0 errno=14 cover=478 #0 [546882ms] -> close_range(0x4, 0xffffffffffffffff, 0x2) #0 [546882ms] <- close_range=0x0 errno=14 cover=1807 16:01:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0xa) close_range(r1, 0xffffffffffffffff, 0x2) 2021/11/11 16:01:29 result hanged=false: [546923ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74383 #0 [546940ms] -> syz_open_procfs(0x0, 0x20000080) #0 [546941ms] <- syz_open_procfs=0x3 errno=21 cover=4348 #0 [546941ms] -> fcntl$notify(0x3, 0x402, 0xa) #0 [546942ms] <- fcntl$notify=0x0 errno=14 cover=484 #0 [546943ms] -> syz_open_procfs(0x0, 0x20000080) #0 [546944ms] <- syz_open_procfs=0x4 errno=21 cover=3812 #0 [546949ms] -> fcntl$notify(0x4, 0x402, 0xa) #0 [546950ms] <- fcntl$notify=0x0 errno=14 cover=576 #0 [546950ms] -> close_range(0x4, 0xffffffffffffffff, 0x2) #0 [546951ms] <- close_range=0x0 errno=14 cover=1796 16:01:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0xa) close_range(r1, 0xffffffffffffffff, 0x2) 2021/11/11 16:01:29 result hanged=false: [546990ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74385 #0 [547007ms] -> syz_open_procfs(0x0, 0x20000080) #0 [547008ms] <- syz_open_procfs=0x3 errno=21 cover=4324 #0 [547009ms] -> fcntl$notify(0x3, 0x402, 0xa) #0 [547012ms] <- fcntl$notify=0x0 errno=14 cover=571 #0 [547015ms] -> syz_open_procfs(0x0, 0x20000080) #0 [547015ms] <- syz_open_procfs=0x4 errno=21 cover=3752 #0 [547017ms] -> fcntl$notify(0x4, 0x402, 0xa) #0 [547017ms] <- fcntl$notify=0x0 errno=14 cover=622 #0 [547018ms] -> close_range(0x4, 0xffffffffffffffff, 0x2) #0 [547018ms] <- close_range=0x0 errno=14 cover=1742 2021/11/11 16:01:29 result hanged=false: 2021/11/11 16:01:29 added new input for call #3 fcntl$notify to corpus: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0xa) close_range(r1, 0xffffffffffffffff, 0x2) 16:01:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0xa) close_range(r1, 0xffffffffffffffff, 0x2) 2021/11/11 16:01:29 #0: triaging type=7 2021/11/11 16:01:29 triaging input for call #2 syz_open_procfs (new signal=4) [547056ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74387 #0 [547072ms] -> syz_open_procfs(0x0, 0x20000080) #0 [547073ms] <- syz_open_procfs=0x3 errno=21 cover=4364 #0 [547075ms] -> fcntl$notify(0x3, 0x402, 0xa) #0 [547075ms] <- fcntl$notify=0x0 errno=14 cover=593 #0 [547076ms] -> syz_open_procfs(0x0, 0x20000080) #0 [547076ms] <- syz_open_procfs=0x4 errno=21 cover=3765 #0 [547076ms] -> fcntl$notify(0x4, 0x402, 0xa) #0 [547077ms] <- fcntl$notify=0x0 errno=14 cover=500 #0 [547077ms] -> close_range(0x4, 0xffffffffffffffff, 0x2) #0 [547077ms] <- close_range=0x0 errno=14 cover=1720 16:01:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0xa) close_range(r1, 0xffffffffffffffff, 0x2) 2021/11/11 16:01:29 result hanged=false: [547120ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74389 #0 [547139ms] -> syz_open_procfs(0x0, 0x20000080) #0 [547140ms] <- syz_open_procfs=0x3 errno=21 cover=4361 #0 [547141ms] -> fcntl$notify(0x3, 0x402, 0xa) #0 [547141ms] <- fcntl$notify=0x0 errno=14 cover=484 #0 [547141ms] -> syz_open_procfs(0x0, 0x20000080) #0 [547141ms] <- syz_open_procfs=0x4 errno=21 cover=3832 #0 [547142ms] -> fcntl$notify(0x4, 0x402, 0xa) #0 [547142ms] <- fcntl$notify=0x0 errno=14 cover=489 #0 [547143ms] -> close_range(0x4, 0xffffffffffffffff, 0x2) #0 [547143ms] <- close_range=0x0 errno=14 cover=1731 16:01:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0xa) close_range(r1, 0xffffffffffffffff, 0x2) 2021/11/11 16:01:29 result hanged=false: [547181ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74391 #0 [547199ms] -> syz_open_procfs(0x0, 0x20000080) #0 [547202ms] <- syz_open_procfs=0x3 errno=21 cover=4347 #0 [547203ms] -> fcntl$notify(0x3, 0x402, 0xa) #0 [547203ms] <- fcntl$notify=0x0 errno=14 cover=484 #0 [547204ms] -> syz_open_procfs(0x0, 0x20000080) #0 [547205ms] <- syz_open_procfs=0x4 errno=21 cover=3765 #0 [547205ms] -> fcntl$notify(0x4, 0x402, 0xa) #0 [547205ms] <- fcntl$notify=0x0 errno=14 cover=500 #0 [547205ms] -> close_range(0x4, 0xffffffffffffffff, 0x2) #0 [547206ms] <- close_range=0x0 errno=14 cover=1731 2021/11/11 16:01:29 result hanged=false: 2021/11/11 16:01:29 added new input for call #2 syz_open_procfs to corpus: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0xa) close_range(r1, 0xffffffffffffffff, 0x2) 16:01:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hoplimit={{0x14, 0x29, 0x34, 0xfc00}}], 0x18}}], 0x2, 0x0) [547250ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74393 #0 [547272ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [547273ms] <- socket$inet6_udplite=0x3 errno=14 cover=1650 #0 [547276ms] -> sendmmsg$inet6(0x3, 0x20000b00, 0x2, 0x0) #0 [547277ms] <- sendmmsg$inet6=0x1 errno=14 cover=1740 enabling collider #0 [547278ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [547278ms] <- socket$inet6_udplite=0x3 errno=14 cover=1703 16:01:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hoplimit={{0x14, 0x29, 0x34, 0xfc00}}], 0x18}}], 0x2, 0x0) 2021/11/11 16:01:29 result hanged=false: 2021/11/11 16:01:29 #0: triaging type=7 2021/11/11 16:01:29 triaging input for call #1 sendmmsg$inet6 (new signal=1) iptable filter/2: resetting iptable mangle/2: resetting [547316ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74395 #0 [547337ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [547338ms] <- socket$inet6_udplite=0x3 errno=14 cover=1672 #0 [547344ms] -> sendmmsg$inet6(0x3, 0x20000b00, 0x2, 0x0) #0 [547345ms] <- sendmmsg$inet6=0x1 errno=14 cover=1615 16:01:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hoplimit={{0x14, 0x29, 0x34, 0xfc00}}], 0x18}}], 0x2, 0x0) 2021/11/11 16:01:29 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [547386ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74397 #0 [547406ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [547407ms] <- socket$inet6_udplite=0x3 errno=14 cover=1722 #0 [547407ms] -> sendmmsg$inet6(0x3, 0x20000b00, 0x2, 0x0) #0 [547409ms] <- sendmmsg$inet6=0x1 errno=14 cover=1582 2021/11/11 16:01:29 result hanged=false: 16:01:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hoplimit={{0x14, 0x29, 0x34, 0xfc00}}], 0x18}}], 0x2, 0x0) iptable filter/2: resetting iptable mangle/2: resetting [547456ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74399 #0 [547484ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [547484ms] <- socket$inet6_udplite=0x3 errno=14 cover=1664 #0 [547486ms] -> sendmmsg$inet6(0x3, 0x20000b00, 0x2, 0x0) #0 [547487ms] <- sendmmsg$inet6=0x1 errno=14 cover=1604 2021/11/11 16:01:30 result hanged=false: 2021/11/11 16:01:30 added new input for call #1 sendmmsg$inet6 to corpus: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hoplimit={{0x14, 0x29, 0x34, 0xfc00}}], 0x18}}], 0x2, 0x0) 16:01:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x6c}, 0x0, @in=@empty}}, 0xe8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) iptable filter/2: resetting iptable mangle/2: resetting [547529ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74401 #0 [547547ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [547548ms] <- socket$inet_udp=0x3 errno=14 cover=1684 #0 [547549ms] -> setsockopt$inet_IP_XFRM_POLICY(0x3, 0x0, 0x11, 0x20000040, 0xe8) #0 [547549ms] <- setsockopt$inet_IP_XFRM_POLICY=0x0 errno=14 cover=558 #0 [547549ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [547549ms] <- connect$inet=0x0 errno=14 cover=735 enabling collider #0 [547550ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [547550ms] <- socket$inet_udp=0x3 errno=14 cover=1683 #0 [547551ms] -> setsockopt$inet_IP_XFRM_POLICY(0x3, 0x0, 0x11, 0x20000040, 0xe8) #0 [547551ms] <- setsockopt$inet_IP_XFRM_POLICY=0x0 errno=14 cover=552 pthread_create failed (errno 11) 16:01:30 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000040)=0xace, 0x4) setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x0) 2021/11/11 16:01:30 result hanged=false: 2021/11/11 16:01:30 poll: candidates=8 inputs=0 signal=0 [547623ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74503 #0 [547642ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [547647ms] <- perf_event_open=0x3 errno=14 cover=9186 #0 [547649ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [547649ms] <- socket$inet_icmp_raw=0x4 errno=14 cover=1806 #0 [547650ms] -> setsockopt$inet_int(0x4, 0x0, 0x5, 0x20000040, 0x4) #0 [547651ms] <- setsockopt$inet_int=0x0 errno=14 cover=198 #0 [547651ms] -> setsockopt$inet_int(0x4, 0x0, 0x5, 0x0, 0x0) #0 [547652ms] <- setsockopt$inet_int=0x0 errno=14 cover=131 enabling collider #0 [547663ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [547663ms] <- perf_event_open=0x3 errno=14 cover=8066 #0 [547664ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [547664ms] <- socket$inet_icmp_raw=0x4 errno=14 cover=1699 pthread_create failed (errno 11) 16:01:30 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) getuid() 2021/11/11 16:01:30 result hanged=false: [547747ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74605 #0 [547765ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [547771ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=33103 #0 [547771ms] -> getuid() #0 [547771ms] <- getuid=0x0 errno=14 cover=70 enabling collider #0 [547771ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [547773ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=2490 16:01:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, 0x0) statfs(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 2021/11/11 16:01:30 result hanged=false: [547811ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74607 #0 [547831ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [547845ms] <- syz_mount_image$vfat=0x5 errno=0 cover=31826 #0 [547846ms] -> chdir(0x20000040) #0 [547846ms] <- chdir=0x0 errno=14 cover=658 #0 [547846ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [547848ms] <- openat=0x3 errno=14 cover=5776 #0 [547848ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [547848ms] <- openat=0xffffffffffffffff errno=14 cover=636 #0 [547849ms] -> stat(0x0, 0x0) #0 [547849ms] <- stat=0xffffffffffffffff errno=14 cover=599 #0 [547850ms] -> statfs(0x200000c0, 0x0) #0 [547850ms] <- statfs=0xffffffffffffffff errno=14 cover=3878 #0 [547851ms] -> creat(0x20000080, 0x0) #0 [547852ms] <- creat=0x4 errno=14 cover=6171 #0 [547852ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [547922ms] <- pwrite64=0xfe000 errno=14 cover=262143 enabling collider #0 [547927ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) #0 [547929ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=16 cover=5967 #0 [547931ms] -> chdir(0x20000040) #0 [547932ms] <- chdir=0xffffffffffffffff errno=20 cover=627 pthread_create failed (errno 11) 16:01:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, 0x0) statfs(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 2021/11/11 16:01:30 result hanged=false: 2021/11/11 16:01:30 #0: triaging type=7 2021/11/11 16:01:30 triaging input for call #7 pwrite64 (new signal=2) umount(./3893/file0) [548076ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74709 #0 [548095ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [548105ms] <- syz_mount_image$vfat=0x5 errno=0 cover=27235 #0 [548107ms] -> chdir(0x20000040) #0 [548108ms] <- chdir=0x0 errno=14 cover=658 #0 [548108ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [548108ms] <- openat=0x3 errno=14 cover=5741 #0 [548109ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [548109ms] <- openat=0xffffffffffffffff errno=14 cover=616 #0 [548109ms] -> stat(0x0, 0x0) #0 [548109ms] <- stat=0xffffffffffffffff errno=14 cover=653 #0 [548109ms] -> statfs(0x200000c0, 0x0) #0 [548109ms] <- statfs=0xffffffffffffffff errno=14 cover=3923 #0 [548110ms] -> creat(0x20000080, 0x0) #0 [548110ms] <- creat=0x4 errno=14 cover=6130 #0 [548111ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [548182ms] <- pwrite64=0xfe000 errno=14 cover=262143 2021/11/11 16:01:30 result hanged=false: 16:01:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, 0x0) statfs(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) umount(./3894/file0) [548303ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74711 #0 [548321ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [548340ms] <- syz_mount_image$vfat=0x5 errno=0 cover=37716 #0 [548345ms] -> chdir(0x20000040) #0 [548345ms] <- chdir=0x0 errno=14 cover=669 #0 [548346ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [548348ms] <- openat=0x3 errno=14 cover=5689 #0 [548349ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [548350ms] <- openat=0xffffffffffffffff errno=14 cover=626 #0 [548352ms] -> stat(0x0, 0x0) #0 [548352ms] <- stat=0xffffffffffffffff errno=14 cover=599 #0 [548354ms] -> statfs(0x200000c0, 0x0) #0 [548354ms] <- statfs=0xffffffffffffffff errno=14 cover=3867 #0 [548363ms] -> creat(0x20000080, 0x0) #0 [548364ms] <- creat=0x4 errno=14 cover=6073 #0 [548365ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [548432ms] <- pwrite64=0xfe000 errno=14 cover=262143 2021/11/11 16:01:31 result hanged=false: 16:01:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, 0x0) statfs(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) umount(./3895/file0) [548561ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74713 #0 [548579ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [548596ms] <- syz_mount_image$vfat=0x5 errno=0 cover=29372 #0 [548599ms] -> chdir(0x20000040) #0 [548600ms] <- chdir=0x0 errno=14 cover=658 #0 [548601ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [548601ms] <- openat=0x3 errno=14 cover=5534 #0 [548602ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [548602ms] <- openat=0xffffffffffffffff errno=14 cover=626 #0 [548603ms] -> stat(0x0, 0x0) #0 [548603ms] <- stat=0xffffffffffffffff errno=14 cover=610 #0 [548603ms] -> statfs(0x200000c0, 0x0) #0 [548603ms] <- statfs=0xffffffffffffffff errno=14 cover=3868 #0 [548604ms] -> creat(0x20000080, 0x0) #0 [548605ms] <- creat=0x4 errno=14 cover=5977 #0 [548606ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [548676ms] <- pwrite64=0xfe000 errno=14 cover=262143 2021/11/11 16:01:31 result hanged=false: 2021/11/11 16:01:31 added new input for call #7 pwrite64 to corpus: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, 0x0) statfs(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 16:01:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, 0x0) statfs(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 2021/11/11 16:01:31 #0: triaging type=7 2021/11/11 16:01:31 triaging input for call #6 creat (new signal=2) umount(./3896/file0) [548808ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74715 #0 [548830ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [548845ms] <- syz_mount_image$vfat=0x5 errno=0 cover=31593 #0 [548848ms] -> chdir(0x20000040) #0 [548848ms] <- chdir=0x0 errno=14 cover=668 #0 [548848ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [548849ms] <- openat=0x3 errno=14 cover=5602 #0 [548850ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [548850ms] <- openat=0xffffffffffffffff errno=14 cover=615 #0 [548850ms] -> stat(0x0, 0x0) #0 [548851ms] <- stat=0xffffffffffffffff errno=14 cover=631 #0 [548851ms] -> statfs(0x200000c0, 0x0) #0 [548852ms] <- statfs=0xffffffffffffffff errno=14 cover=3890 #0 [548853ms] -> creat(0x20000080, 0x0) #0 [548853ms] <- creat=0x4 errno=14 cover=5950 #0 [548854ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [548921ms] <- pwrite64=0xfe000 errno=14 cover=262143 16:01:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, 0x0) statfs(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 2021/11/11 16:01:31 result hanged=false: umount(./3897/file0) [549048ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74717 #0 [549069ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [549081ms] <- syz_mount_image$vfat=0x5 errno=0 cover=27952 #0 [549085ms] -> chdir(0x20000040) #0 [549085ms] <- chdir=0x0 errno=14 cover=659 #0 [549087ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [549087ms] <- openat=0x3 errno=14 cover=5748 #0 [549090ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [549090ms] <- openat=0xffffffffffffffff errno=14 cover=616 #0 [549091ms] -> stat(0x0, 0x0) #0 [549091ms] <- stat=0xffffffffffffffff errno=14 cover=650 #0 [549092ms] -> statfs(0x200000c0, 0x0) #0 [549093ms] <- statfs=0xffffffffffffffff errno=14 cover=5585 #0 [549094ms] -> creat(0x20000080, 0x0) #0 [549095ms] <- creat=0x4 errno=14 cover=6211 #0 [549096ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [549166ms] <- pwrite64=0xfe000 errno=14 cover=262143 16:01:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, 0x0) statfs(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 2021/11/11 16:01:31 result hanged=false: umount(./3898/file0) [549286ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74719 #0 [549305ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [549329ms] <- syz_mount_image$vfat=0x5 errno=0 cover=26949 #0 [549333ms] -> chdir(0x20000040) #0 [549333ms] <- chdir=0x0 errno=14 cover=673 #0 [549334ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [549335ms] <- openat=0x3 errno=14 cover=5583 #0 [549336ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [549336ms] <- openat=0xffffffffffffffff errno=14 cover=616 #0 [549336ms] -> stat(0x0, 0x0) #0 [549336ms] <- stat=0xffffffffffffffff errno=14 cover=643 #0 [549336ms] -> statfs(0x200000c0, 0x0) #0 [549337ms] <- statfs=0xffffffffffffffff errno=14 cover=3874 #0 [549337ms] -> creat(0x20000080, 0x0) #0 [549337ms] <- creat=0x4 errno=14 cover=6025 #0 [549338ms] -> pwrite64(0x4, 0x20000300, 0xfffffeb2, 0x0) #0 [549407ms] <- pwrite64=0xfe000 errno=14 cover=262143 2021/11/11 16:01:32 result hanged=false: 2021/11/11 16:01:32 added new input for call #6 creat to corpus: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, 0x0) statfs(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 16:01:32 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) umount(./3899/file0) [549530ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74721 #0 [549552ms] -> syz_mount_image$vfat(0x200001c0, 0x20000240, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [549574ms] <- syz_mount_image$vfat=0x5 errno=0 cover=51842 #0 [549583ms] -> chdir(0x20000040) #0 [549583ms] <- chdir=0x0 errno=14 cover=659 #0 [549585ms] -> creat(0x20000080, 0x0) #0 [549585ms] <- creat=0x3 errno=14 cover=5679 #0 [549586ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [549590ms] <- perf_event_open=0x4 errno=14 cover=9419 #0 [549591ms] -> creat(0x20000100, 0x0) #0 [549592ms] <- creat=0x6 errno=14 cover=3604 enabling collider #0 [549606ms] -> syz_mount_image$vfat(0x200001c0, 0x20000240, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) #0 [549608ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=16 cover=6124 #0 [549608ms] -> chdir(0x20000040) #0 [549608ms] <- chdir=0xffffffffffffffff errno=20 cover=627 pthread_create failed (errno 11) 2021/11/11 16:01:32 result hanged=false: 16:01:32 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 2021/11/11 16:01:32 #0: triaging type=7 2021/11/11 16:01:32 triaging input for call #4 creat (new signal=1) umount(./3900/file0) [549700ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74823 #0 [549720ms] -> syz_mount_image$vfat(0x200001c0, 0x20000240, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [549735ms] <- syz_mount_image$vfat=0x5 errno=0 cover=27084 #0 [549740ms] -> chdir(0x20000040) #0 [549740ms] <- chdir=0x0 errno=14 cover=658 #0 [549740ms] -> creat(0x20000080, 0x0) #0 [549741ms] <- creat=0x3 errno=14 cover=5646 #0 [549742ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [549745ms] <- perf_event_open=0x4 errno=14 cover=8153 #0 [549746ms] -> creat(0x20000100, 0x0) #0 [549746ms] <- creat=0x6 errno=14 cover=1413 16:01:32 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 2021/11/11 16:01:32 result hanged=false: umount(./3901/file0) [549806ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74825 #0 [549830ms] -> syz_mount_image$vfat(0x200001c0, 0x20000240, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [549842ms] <- syz_mount_image$vfat=0x5 errno=0 cover=26794 #0 [549845ms] -> chdir(0x20000040) #0 [549845ms] <- chdir=0x0 errno=14 cover=659 #0 [549845ms] -> creat(0x20000080, 0x0) #0 [549847ms] <- creat=0x3 errno=14 cover=6067 #0 [549848ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [549849ms] <- perf_event_open=0x4 errno=14 cover=8671 #0 [549850ms] -> creat(0x20000100, 0x0) #0 [549851ms] <- creat=0x6 errno=14 cover=3379 16:01:32 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 2021/11/11 16:01:32 result hanged=false: umount(./3902/file0) [549916ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74827 #0 [549934ms] -> syz_mount_image$vfat(0x200001c0, 0x20000240, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [549945ms] <- syz_mount_image$vfat=0x5 errno=0 cover=23471 #0 [549947ms] -> chdir(0x20000040) #0 [549948ms] <- chdir=0x0 errno=14 cover=669 #0 [549948ms] -> creat(0x20000080, 0x0) #0 [549949ms] <- creat=0x3 errno=14 cover=6611 #0 [549949ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [549950ms] <- perf_event_open=0x4 errno=14 cover=8893 #0 [549951ms] -> creat(0x20000100, 0x0) #0 [549951ms] <- creat=0x6 errno=14 cover=1388 umount(./3903/file0) 2021/11/11 16:01:32 result hanged=false: 2021/11/11 16:01:32 added new input for call #4 creat to corpus: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 16:01:32 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 2021/11/11 16:01:32 #0: triaging type=7 2021/11/11 16:01:32 triaging input for call #0 syz_mount_image$vfat (new signal=8) [550015ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74829 #0 [550042ms] -> syz_mount_image$vfat(0x200001c0, 0x20000240, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [550056ms] <- syz_mount_image$vfat=0x5 errno=0 cover=27294 #0 [550059ms] -> chdir(0x20000040) #0 [550059ms] <- chdir=0x0 errno=14 cover=659 #0 [550059ms] -> creat(0x20000080, 0x0) #0 [550061ms] <- creat=0x3 errno=14 cover=5601 #0 [550062ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [550063ms] <- perf_event_open=0x4 errno=14 cover=8247 #0 [550066ms] -> creat(0x20000100, 0x0) #0 [550068ms] <- creat=0x6 errno=14 cover=3978 umount(./3904/file0) 16:01:32 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 2021/11/11 16:01:32 result hanged=false: [550131ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74831 #0 [550151ms] -> syz_mount_image$vfat(0x200001c0, 0x20000240, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [550166ms] <- syz_mount_image$vfat=0x5 errno=0 cover=27037 #0 [550169ms] -> chdir(0x20000040) #0 [550170ms] <- chdir=0x0 errno=14 cover=658 #0 [550171ms] -> creat(0x20000080, 0x0) #0 [550172ms] <- creat=0x3 errno=14 cover=5653 #0 [550173ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [550174ms] <- perf_event_open=0x4 errno=14 cover=8761 #0 [550175ms] -> creat(0x20000100, 0x0) #0 [550176ms] <- creat=0x6 errno=14 cover=1518 2021/11/11 16:01:32 result hanged=false: 16:01:32 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) umount(./3905/file0) [550245ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74833 #0 [550263ms] -> syz_mount_image$vfat(0x200001c0, 0x20000240, 0x0, 0x2, 0x20000200, 0x0, 0x20000340) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [550281ms] <- syz_mount_image$vfat=0x5 errno=0 cover=35733 #0 [550286ms] -> chdir(0x20000040) #0 [550286ms] <- chdir=0x0 errno=14 cover=673 #0 [550287ms] -> creat(0x20000080, 0x0) #0 [550289ms] <- creat=0x3 errno=14 cover=17947 #0 [550291ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [550293ms] <- perf_event_open=0x4 errno=14 cover=8218 #0 [550294ms] -> creat(0x20000100, 0x0) #0 [550295ms] <- creat=0x6 errno=14 cover=3339 2021/11/11 16:01:32 result hanged=false: 2021/11/11 16:01:32 added new input for call #0 syz_mount_image$vfat to corpus: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) umount(./3906/file0) 16:01:32 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000340), 0x8) [550357ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74835 #0 [550374ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [550375ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=6478 #0 [550376ms] -> connect$bt_sco(0x4, 0x20000340, 0x8) #0 [550376ms] <- connect$bt_sco=0xffffffffffffffff errno=113 cover=154 enabling collider #0 [550377ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [550378ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=5514 16:01:32 executing program 0: syz_open_dev$vcsn(&(0x7f0000000100), 0x0, 0x20000) 2021/11/11 16:01:32 result hanged=false: [550417ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74837 #0 [550433ms] -> syz_open_dev$vcsn(0x20000100, 0x0, 0x20000) #0 [550433ms] <- syz_open_dev$vcsn=0x3 errno=14 cover=1115 enabling collider #0 [550434ms] -> syz_open_dev$vcsn(0x20000100, 0x0, 0x20000) #0 [550434ms] <- syz_open_dev$vcsn=0x3 errno=14 cover=1117 2021/11/11 16:01:33 result hanged=false: 16:01:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001280)=[{0x0}], 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) renameat2(r1, 0x0, r2, &(0x7f0000001400)='./file0\x00', 0x0) ftruncate(r0, 0x1000003) [550480ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74839 #0 [550502ms] -> perf_event_open(0x20001d80, 0x0, 0x9, 0xffffffffffffffff, 0x0) #0 [550502ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=138 #0 [550503ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [550506ms] <- openat=0x3 errno=14 cover=7362 #0 [550507ms] -> syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, 0x20001280, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [550511ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=14 cover=9237 #0 [550512ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x12d842, 0x0) #0 [550512ms] <- openat=0x6 errno=14 cover=1161 #0 [550514ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [550515ms] <- openat=0x7 errno=14 cover=2895 #0 [550516ms] -> copy_file_range(0x7, 0x0, 0x6, 0x0, 0x200f5ef, 0x0) #0 [550601ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [550605ms] -> renameat2(0xffffffffffffffff, 0x0, 0x6, 0x20001400, 0x0) #0 [550605ms] <- renameat2=0xffffffffffffffff errno=14 cover=596 #0 [550607ms] -> ftruncate(0x3, 0x1000003) #0 [550607ms] <- ftruncate=0x0 errno=14 cover=1827 enabling collider #0 [550615ms] -> perf_event_open(0x20001d80, 0x0, 0x9, 0xffffffffffffffff, 0x0) #0 [550616ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=138 #0 [550616ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [550616ms] <- openat=0xffffffffffffffff errno=17 cover=1091 pthread_create failed (errno 11) 2021/11/11 16:01:33 result hanged=false: 2021/11/11 16:01:33 #0: triaging type=7 2021/11/11 16:01:33 triaging input for call #5 copy_file_range (new signal=5) 16:01:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001280)=[{0x0}], 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) renameat2(r1, 0x0, r2, &(0x7f0000001400)='./file0\x00', 0x0) ftruncate(r0, 0x1000003) [550705ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74941 #0 [550727ms] -> perf_event_open(0x20001d80, 0x0, 0x9, 0xffffffffffffffff, 0x0) #0 [550729ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=138 #0 [550730ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [550734ms] <- openat=0x3 errno=14 cover=18146 #0 [550737ms] -> syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, 0x20001280, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [550741ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=14 cover=9145 #0 [550751ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x12d842, 0x0) #0 [550751ms] <- openat=0x6 errno=14 cover=1221 #0 [550753ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [550753ms] <- openat=0x7 errno=14 cover=2775 #0 [550755ms] -> copy_file_range(0x7, 0x0, 0x6, 0x0, 0x200f5ef, 0x0) #0 [550832ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [550852ms] -> renameat2(0xffffffffffffffff, 0x0, 0x6, 0x20001400, 0x0) #0 [550853ms] <- renameat2=0xffffffffffffffff errno=14 cover=596 #0 [550853ms] -> ftruncate(0x3, 0x1000003) #0 [550854ms] <- ftruncate=0x0 errno=14 cover=1650 2021/11/11 16:01:33 result hanged=false: 16:01:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001280)=[{0x0}], 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) renameat2(r1, 0x0, r2, &(0x7f0000001400)='./file0\x00', 0x0) ftruncate(r0, 0x1000003) [550903ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74943 #0 [550924ms] -> perf_event_open(0x20001d80, 0x0, 0x9, 0xffffffffffffffff, 0x0) #0 [550924ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=138 #0 [550924ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [550933ms] <- openat=0x3 errno=14 cover=7298 #0 [550933ms] -> syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, 0x20001280, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [550936ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=14 cover=9195 #0 [550947ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x12d842, 0x0) #0 [550948ms] <- openat=0x6 errno=14 cover=1206 #0 [550948ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [550949ms] <- openat=0x7 errno=14 cover=2888 #0 [550949ms] -> copy_file_range(0x7, 0x0, 0x6, 0x0, 0x200f5ef, 0x0) #0 [551033ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [551055ms] -> renameat2(0xffffffffffffffff, 0x0, 0x6, 0x20001400, 0x0) #0 [551057ms] <- renameat2=0xffffffffffffffff errno=14 cover=618 #0 [551057ms] -> ftruncate(0x3, 0x1000003) #0 [551058ms] <- ftruncate=0x0 errno=14 cover=1650 2021/11/11 16:01:33 result hanged=false: 16:01:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001280)=[{0x0}], 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) renameat2(r1, 0x0, r2, &(0x7f0000001400)='./file0\x00', 0x0) ftruncate(r0, 0x1000003) [551103ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74945 #0 [551125ms] -> perf_event_open(0x20001d80, 0x0, 0x9, 0xffffffffffffffff, 0x0) #0 [551126ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=138 #0 [551127ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [551130ms] <- openat=0x3 errno=14 cover=7539 #0 [551131ms] -> syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, 0x20001280, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [551133ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=14 cover=9063 #0 [551134ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x12d842, 0x0) #0 [551134ms] <- openat=0x6 errno=14 cover=1152 #0 [551135ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [551135ms] <- openat=0x7 errno=14 cover=2706 #0 [551140ms] -> copy_file_range(0x7, 0x0, 0x6, 0x0, 0x200f5ef, 0x0) #0 [551226ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [551245ms] -> renameat2(0xffffffffffffffff, 0x0, 0x6, 0x20001400, 0x0) #0 [551245ms] <- renameat2=0xffffffffffffffff errno=14 cover=608 #0 [551246ms] -> ftruncate(0x3, 0x1000003) #0 [551246ms] <- ftruncate=0x0 errno=14 cover=1788 2021/11/11 16:01:33 result hanged=false: 2021/11/11 16:01:33 added new input for call #5 copy_file_range to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001280)=[{0x0}], 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) renameat2(r1, 0x0, r2, &(0x7f0000001400)='./file0\x00', 0x0) ftruncate(r0, 0x1000003) 16:01:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001280)=[{0x0}], 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) renameat2(r1, 0x0, r2, &(0x7f0000001400)='./file0\x00', 0x0) ftruncate(r0, 0x1000003) [551345ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74947 2021/11/11 16:01:33 #0: triaging type=7 2021/11/11 16:01:33 triaging input for call #1 openat (new signal=2) #0 [551365ms] -> perf_event_open(0x20001d80, 0x0, 0x9, 0xffffffffffffffff, 0x0) #0 [551365ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=138 #0 [551366ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [551368ms] <- openat=0x3 errno=14 cover=7387 #0 [551370ms] -> syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, 0x20001280, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [551372ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=14 cover=9253 #0 [551373ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x12d842, 0x0) #0 [551373ms] <- openat=0x6 errno=14 cover=1203 #0 [551374ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [551374ms] <- openat=0x7 errno=14 cover=2691 #0 [551375ms] -> copy_file_range(0x7, 0x0, 0x6, 0x0, 0x200f5ef, 0x0) #0 [551472ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [551492ms] -> renameat2(0xffffffffffffffff, 0x0, 0x6, 0x20001400, 0x0) #0 [551496ms] <- renameat2=0xffffffffffffffff errno=14 cover=597 #0 [551496ms] -> ftruncate(0x3, 0x1000003) #0 [551497ms] <- ftruncate=0x0 errno=14 cover=1802 2021/11/11 16:01:34 result hanged=false: 16:01:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001280)=[{0x0}], 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) renameat2(r1, 0x0, r2, &(0x7f0000001400)='./file0\x00', 0x0) ftruncate(r0, 0x1000003) [551551ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74949 #0 [551575ms] -> perf_event_open(0x20001d80, 0x0, 0x9, 0xffffffffffffffff, 0x0) #0 [551575ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=138 #0 [551577ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [551581ms] <- openat=0x3 errno=14 cover=7354 #0 [551583ms] -> syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, 0x20001280, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [551584ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=14 cover=9083 #0 [551585ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x12d842, 0x0) #0 [551586ms] <- openat=0x6 errno=14 cover=1192 #0 [551586ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [551587ms] <- openat=0x7 errno=14 cover=2736 #0 [551592ms] -> copy_file_range(0x7, 0x0, 0x6, 0x0, 0x200f5ef, 0x0) #0 [551686ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [551705ms] -> renameat2(0xffffffffffffffff, 0x0, 0x6, 0x20001400, 0x0) #0 [551705ms] <- renameat2=0xffffffffffffffff errno=14 cover=597 #0 [551705ms] -> ftruncate(0x3, 0x1000003) #0 [551706ms] <- ftruncate=0x0 errno=14 cover=1642 2021/11/11 16:01:34 result hanged=false: 16:01:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001280)=[{0x0}], 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) renameat2(r1, 0x0, r2, &(0x7f0000001400)='./file0\x00', 0x0) ftruncate(r0, 0x1000003) [551759ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74951 #0 [551783ms] -> perf_event_open(0x20001d80, 0x0, 0x9, 0xffffffffffffffff, 0x0) #0 [551783ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=138 #0 [551785ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [551787ms] <- openat=0x3 errno=14 cover=7375 #0 [551789ms] -> syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, 0x20001280, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [551791ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=14 cover=9217 #0 [551793ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x12d842, 0x0) #0 [551793ms] <- openat=0x6 errno=14 cover=1193 #0 [551794ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [551795ms] <- openat=0x7 errno=14 cover=2819 #0 [551795ms] -> copy_file_range(0x7, 0x0, 0x6, 0x0, 0x200f5ef, 0x0) #0 [551887ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [551906ms] -> renameat2(0xffffffffffffffff, 0x0, 0x6, 0x20001400, 0x0) #0 [551907ms] <- renameat2=0xffffffffffffffff errno=14 cover=646 #0 [551907ms] -> ftruncate(0x3, 0x1000003) #0 [551908ms] <- ftruncate=0x0 errno=14 cover=1626 2021/11/11 16:01:34 result hanged=false: 2021/11/11 16:01:34 added new input for call #1 openat to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001280)=[{0x0}], 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) renameat2(r1, 0x0, r2, &(0x7f0000001400)='./file0\x00', 0x0) ftruncate(r0, 0x1000003) 16:01:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = getpgid(0x0) r2 = epoll_create(0x1) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000040)={r2}) [551976ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 74953 #0 [551997ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [551999ms] <- perf_event_open=0x3 errno=14 cover=9607 #0 [552000ms] -> getpid() #0 [552001ms] <- getpid=0x124c9 errno=14 cover=77 #0 [552001ms] -> getpgid(0x0) #0 [552001ms] <- getpgid=0x124c9 errno=14 cover=77 #0 [552001ms] -> epoll_create(0x1) #0 [552002ms] <- epoll_create=0x4 errno=14 cover=2004 #0 [552002ms] -> kcmp$KCMP_EPOLL_TFD(0x124c9, 0x124c9, 0x7, 0x4, 0x20000040) #0 [552002ms] <- kcmp$KCMP_EPOLL_TFD=0xffffffffffffffff errno=2 cover=462 enabling collider #0 [552012ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [552012ms] <- perf_event_open=0x3 errno=14 cover=8193 #0 [552013ms] -> getpid() #0 [552013ms] <- getpid=0x124c9 errno=14 cover=77 pthread_create failed (errno 11) 2021/11/11 16:01:34 result hanged=false: 16:01:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000ac0), 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xf5, &(0x7f0000000000)=""/245}, &(0x7f0000000100)="b95c4b37ba04", 0x0, 0x0, 0x0, 0x0, 0x0}) 2021/11/11 16:01:34 poll: candidates=8 inputs=0 signal=0 [552106ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75055 #0 [552126ms] -> syz_open_dev$sg(0x20000ac0, 0x1, 0x0) #0 [552127ms] <- syz_open_dev$sg=0x3 errno=14 cover=1419 #0 [552128ms] -> ioctl$SG_IO(0x3, 0x2285, 0x20000300) #0 [552128ms] <- ioctl$SG_IO=0x0 errno=14 cover=1466 enabling collider #0 [552131ms] -> syz_open_dev$sg(0x20000ac0, 0x1, 0x0) #0 [552131ms] <- syz_open_dev$sg=0x3 errno=14 cover=1472 #0 [552132ms] -> ioctl$SG_IO(0x3, 0x2285, 0x20000300) #0 [552133ms] <- ioctl$SG_IO=0xffffffffffffffff errno=9 2021/11/11 16:01:34 result hanged=false: 2021/11/11 16:01:34 #0: triaging type=7 16:01:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000ac0), 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xf5, &(0x7f0000000000)=""/245}, &(0x7f0000000100)="b95c4b37ba04", 0x0, 0x0, 0x0, 0x0, 0x0}) 2021/11/11 16:01:34 triaging input for call #1 ioctl$SG_IO (new signal=3) [552172ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75057 #0 [552190ms] -> syz_open_dev$sg(0x20000ac0, 0x1, 0x0) #0 [552191ms] <- syz_open_dev$sg=0x3 errno=14 cover=1408 #0 [552191ms] -> ioctl$SG_IO(0x3, 0x2285, 0x20000300) #0 [552192ms] <- ioctl$SG_IO=0x0 errno=14 cover=1360 16:01:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000ac0), 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xf5, &(0x7f0000000000)=""/245}, &(0x7f0000000100)="b95c4b37ba04", 0x0, 0x0, 0x0, 0x0, 0x0}) 2021/11/11 16:01:34 result hanged=false: [552229ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75059 #0 [552247ms] -> syz_open_dev$sg(0x20000ac0, 0x1, 0x0) #0 [552247ms] <- syz_open_dev$sg=0x3 errno=14 cover=1386 #0 [552248ms] -> ioctl$SG_IO(0x3, 0x2285, 0x20000300) #0 [552249ms] <- ioctl$SG_IO=0x0 errno=14 cover=1354 16:01:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000ac0), 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xf5, &(0x7f0000000000)=""/245}, &(0x7f0000000100)="b95c4b37ba04", 0x0, 0x0, 0x0, 0x0, 0x0}) 2021/11/11 16:01:34 result hanged=false: [552293ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75061 #0 [552311ms] -> syz_open_dev$sg(0x20000ac0, 0x1, 0x0) #0 [552311ms] <- syz_open_dev$sg=0x3 errno=14 cover=1396 #0 [552312ms] -> ioctl$SG_IO(0x3, 0x2285, 0x20000300) #0 [552312ms] <- ioctl$SG_IO=0x0 errno=14 cover=1413 2021/11/11 16:01:34 result hanged=false: 2021/11/11 16:01:34 added new input for call #1 ioctl$SG_IO to corpus: r0 = syz_open_dev$sg(&(0x7f0000000ac0), 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xf5, &(0x7f0000000000)=""/245}, &(0x7f0000000100)="b95c4b37ba04", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:01:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)='9', 0xfffffe61}], 0x1}, 0x24000855) [552363ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75063 #0 [552381ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [552382ms] <- socket$inet6_tcp=0x3 errno=14 cover=1756 #0 [552382ms] -> setsockopt$sock_int(0x3, 0x1, 0x3c, 0x20000000, 0x4) #0 [552382ms] <- setsockopt$sock_int=0x0 errno=14 cover=140 #0 [552382ms] -> sendmsg$inet6(0x3, 0x20000400, 0x24000855) #0 [552383ms] <- sendmsg$inet6=0xffffffffffffffff errno=22 cover=994 enabling collider #0 [552383ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [552383ms] <- socket$inet6_tcp=0x3 errno=14 cover=1744 #0 [552384ms] -> setsockopt$sock_int(0x3, 0x1, 0x3c, 0x20000000, 0x4) #0 [552384ms] <- setsockopt$sock_int=0x0 errno=14 cover=140 pthread_create failed (errno 11) 16:01:35 executing program 0: futimesat(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001900), 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$nfs(&(0x7f0000004240), 0x0, 0x0, 0x5, &(0x7f00000058c0)=[{&(0x7f00000042c0)='O', 0x1, 0x200}, {0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x1}, {&(0x7f00000045c0), 0x0, 0x2}], 0x0, &(0x7f00000059c0)={[{}], [{@dont_measure}, {@context={'context', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfstransmute}, {@obj_role={'obj_role', 0x3d, '}[@}\xb8+[!%(-@\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}) 2021/11/11 16:01:35 result hanged=false: [552461ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75165 #0 [552481ms] -> futimesat(0xffffffffffffffff, 0x0, 0x0) #0 [552481ms] <- futimesat=0xffffffffffffffff errno=9 cover=52 #0 [552485ms] -> openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x20001900, 0x2, 0x0) #0 [552485ms] <- openat$cgroup_netprio_ifpriomap=0xffffffffffffffff errno=9 cover=740 #0 [552485ms] -> sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) #0 [552485ms] <- sendmsg$netlink=0xffffffffffffffff errno=9 cover=52 #0 [552486ms] -> syz_mount_image$nfs(0x20004240, 0x0, 0x0, 0x5, 0x200058c0, 0x0, 0x200059c0) syz_mount_image: size=0 segs=5 loop='/dev/loop0' dir='(null)' fs='nfs' flags=0 opts=',dont_measure,context=unconfined_u,rootcontext=staff_u,smackfstransmute=,obj_role=}[@}¸+[!%(-@' syz_mount_image > mount error: 14 #0 [552489ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=14 cover=2542 enabling collider #0 [552489ms] -> futimesat(0xffffffffffffffff, 0x0, 0x0) #0 [552489ms] <- futimesat=0xffffffffffffffff errno=9 cover=52 #0 [552490ms] -> openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x20001900, 0x2, 0x0) #0 [552490ms] <- openat$cgroup_netprio_ifpriomap=0xffffffffffffffff errno=9 cover=732 pthread_create failed (errno 11) 16:01:35 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) prctl$PR_SET_MM_MAP(0x1c, 0xe, 0x0, 0x0) 2021/11/11 16:01:35 result hanged=false: [552570ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75267 #0 [552591ms] -> stat(0x20001cc0, 0x20001c00) #0 [552591ms] <- stat=0x0 errno=14 cover=532 #0 [552593ms] -> setresuid(0xffffffffffffffff, 0x41ed, 0x0) #0 [552593ms] <- setresuid=0x0 errno=14 cover=402 #0 [552594ms] -> prctl$PR_SET_MM_MAP(0x1c, 0xe, 0x0, 0x0) #0 [552594ms] <- prctl$PR_SET_MM_MAP=0xffffffffffffffff errno=22 cover=44 enabling collider #0 [552594ms] -> stat(0x20001cc0, 0x20001c00) #0 [552594ms] <- stat=0x0 errno=14 cover=555 #0 [552597ms] -> setresuid(0xffffffffffffffff, 0x41ed, 0x0) #0 [552597ms] <- setresuid=0x0 errno=14 cover=465 pthread_create failed (errno 11) 16:01:35 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, 0x0, 0x0) r1 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r1, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 2021/11/11 16:01:35 result hanged=false: [552669ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75369 #0 [552687ms] -> stat(0x20001cc0, 0x20001640) #0 [552687ms] <- stat=0x0 errno=14 cover=533 #0 [552688ms] -> setresuid(0x41ed, 0x0, 0x0) #0 [552691ms] <- setresuid=0x0 errno=14 cover=569 #0 [552696ms] -> clone3(0x20000140, 0x58) #0 [552699ms] <- clone3=0xffffffffffffffff errno=11 cover=24108 #0 [552702ms] -> kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) #0 [552702ms] <- kcmp=0xffffffffffffffff errno=3 cover=88 enabling collider #0 [552703ms] -> stat(0x20001cc0, 0x20001640) #0 [552703ms] <- stat=0x0 errno=14 cover=544 #0 [552705ms] -> setresuid(0x41ed, 0x0, 0x0) #0 [552705ms] <- setresuid=0x0 errno=14 cover=430 pthread_create failed (errno 11) 16:01:35 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, 0x0, 0x0) r1 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r1, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 2021/11/11 16:01:35 result hanged=false: 2021/11/11 16:01:35 #0: triaging type=7 2021/11/11 16:01:35 triaging input for call #1 setresuid (new signal=1) [552781ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75472 #0 [552798ms] -> stat(0x20001cc0, 0x20001640) #0 [552798ms] <- stat=0x0 errno=14 cover=544 #0 [552799ms] -> setresuid(0x41ed, 0x0, 0x0) #0 [552800ms] <- setresuid=0x0 errno=14 cover=493 #0 [552800ms] -> clone3(0x20000140, 0x58) #0 [552805ms] <- clone3=0xffffffffffffffff errno=11 cover=27799 #0 [552807ms] -> kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) #0 [552807ms] <- kcmp=0xffffffffffffffff errno=3 cover=88 16:01:35 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, 0x0, 0x0) r1 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r1, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 2021/11/11 16:01:35 result hanged=false: [552847ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75475 #0 [552865ms] -> stat(0x20001cc0, 0x20001640) #0 [552865ms] <- stat=0x0 errno=14 cover=544 #0 [552866ms] -> setresuid(0x41ed, 0x0, 0x0) #0 [552866ms] <- setresuid=0x0 errno=14 cover=548 #0 [552868ms] -> clone3(0x20000140, 0x58) #0 [552875ms] <- clone3=0xffffffffffffffff errno=11 cover=24004 #0 [552883ms] -> kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) #0 [552883ms] <- kcmp=0xffffffffffffffff errno=3 cover=88 16:01:35 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, 0x0, 0x0) r1 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r1, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 2021/11/11 16:01:35 result hanged=false: [552923ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75478 #0 [552941ms] -> stat(0x20001cc0, 0x20001640) #0 [552941ms] <- stat=0x0 errno=14 cover=533 #0 [552942ms] -> setresuid(0x41ed, 0x0, 0x0) #0 [552942ms] <- setresuid=0x0 errno=14 cover=570 #0 [552943ms] -> clone3(0x20000140, 0x58) #0 [552946ms] <- clone3=0xffffffffffffffff errno=11 cover=23940 #0 [552949ms] -> kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) #0 [552949ms] <- kcmp=0xffffffffffffffff errno=3 cover=88 2021/11/11 16:01:35 result hanged=false: 2021/11/11 16:01:35 added new input for call #1 setresuid to corpus: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, 0x0, 0x0) r1 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r1, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 16:01:35 executing program 0: eventfd2(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/219, 0xdb}], 0x1, 0x0, 0x0) [552990ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75481 #0 [553008ms] -> eventfd2(0x0, 0x0) #0 [553008ms] <- eventfd2=0x3 errno=14 cover=554 #0 [553009ms] -> syz_open_procfs(0x0, 0x20000000) #0 [553010ms] <- syz_open_procfs=0x4 errno=14 cover=3386 #0 [553011ms] -> preadv(0x4, 0x20000580, 0x1, 0x0, 0x0) #0 [553011ms] <- preadv=0x4a errno=14 cover=3240 enabling collider #0 [553012ms] -> eventfd2(0x0, 0x0) #0 [553013ms] <- eventfd2=0x3 errno=14 cover=608 #0 [553015ms] -> syz_open_procfs(0x0, 0x20000000) #0 [553015ms] <- syz_open_procfs=0x4 errno=14 cover=2409 pthread_create failed (errno 11) 16:01:35 executing program 0: eventfd2(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/219, 0xdb}], 0x1, 0x0, 0x0) 2021/11/11 16:01:35 result hanged=false: 2021/11/11 16:01:35 #0: triaging type=7 2021/11/11 16:01:35 triaging input for call #2 preadv (new signal=4) [553085ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75583 #0 [553103ms] -> eventfd2(0x0, 0x0) #0 [553104ms] <- eventfd2=0x3 errno=14 cover=565 #0 [553104ms] -> syz_open_procfs(0x0, 0x20000000) #0 [553105ms] <- syz_open_procfs=0x4 errno=14 cover=3375 #0 [553106ms] -> preadv(0x4, 0x20000580, 0x1, 0x0, 0x0) #0 [553106ms] <- preadv=0x4a errno=14 cover=1023 16:01:35 executing program 0: eventfd2(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/219, 0xdb}], 0x1, 0x0, 0x0) 2021/11/11 16:01:35 result hanged=false: [553145ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75585 #0 [553166ms] -> eventfd2(0x0, 0x0) #0 [553166ms] <- eventfd2=0x3 errno=14 cover=598 #0 [553166ms] -> syz_open_procfs(0x0, 0x20000000) #0 [553168ms] <- syz_open_procfs=0x4 errno=14 cover=3431 #0 [553170ms] -> preadv(0x4, 0x20000580, 0x1, 0x0, 0x0) #0 [553170ms] <- preadv=0x4a errno=14 cover=1077 16:01:35 executing program 0: eventfd2(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/219, 0xdb}], 0x1, 0x0, 0x0) 2021/11/11 16:01:35 result hanged=false: [553207ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75587 #0 [553225ms] -> eventfd2(0x0, 0x0) #0 [553225ms] <- eventfd2=0x3 errno=14 cover=576 #0 [553225ms] -> syz_open_procfs(0x0, 0x20000000) #0 [553226ms] <- syz_open_procfs=0x4 errno=14 cover=3352 #0 [553227ms] -> preadv(0x4, 0x20000580, 0x1, 0x0, 0x0) #0 [553227ms] <- preadv=0x4a errno=14 cover=1023 2021/11/11 16:01:35 result hanged=false: 2021/11/11 16:01:35 added new input for call #2 preadv to corpus: eventfd2(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/219, 0xdb}], 0x1, 0x0, 0x0) 16:01:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [553270ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75589 #0 [553287ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [553312ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=14915 enabling collider #0 [553315ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [553325ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=14028 16:01:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000001780)=[{&(0x7f0000000640)="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", 0x810}], 0x1) 2021/11/11 16:01:35 result hanged=false: [553362ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75591 #0 [553380ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [553381ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3439 #0 [553383ms] -> writev(0x3, 0x20001780, 0x1) #0 [553392ms] <- writev=0x810 errno=14 cover=159971 enabling collider #0 [553395ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [553396ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3586 #0 [553396ms] -> writev(0x3, 0x20001780, 0x1) #0 [553396ms] <- writev=0xffffffffffffffff errno=9 cover=48 16:01:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000001780)=[{&(0x7f0000000640)="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", 0x810}], 0x1) 2021/11/11 16:01:35 result hanged=false: 2021/11/11 16:01:35 #0: triaging type=7 2021/11/11 16:01:35 triaging input for call #1 writev (new signal=6) [553436ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75593 #0 [553453ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [553454ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3429 #0 [553455ms] -> writev(0x3, 0x20001780, 0x1) #0 [553463ms] <- writev=0x810 errno=14 cover=159887 16:01:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000001780)=[{&(0x7f0000000640)="d60aa62df344abda0c27a976af5f410971a4a2e76ec3863d126a90ea302d62a0bf23ff321826774312f963afbf605c09569b92588a4c2d9def033fd0a6ebe3b0551eef0764e1079e0d328ea560bcfff58b8bb0be081c82a08519943ccae70b1c1be910a1bf5cbb9ba10b1f86170fc75c812de12bb54afa8af81ee712da6796bc38f0ff55373b49c5f336eebdb8df8c83d93a55ce42eeaef004f08ee87c0b9722ecc0b992104f3e33044ab00b40b1d79ee4b1f4ff31754ade8a7a45b419c3966f41bc70c1b573df3eb64aad7dc040e7a4a95aadc0e102b98e58abf82cd52128b71b2906c387344777bd46e87fa972ead552f7a9db32fa74a0e755a5bf2dc50229607a4d37620ae589b459c33475a2b95871bfbbb8b1e19ae5ac24c474a501b9fcf3c930247bef3fae6043170f64e419a06cb66a9ebc4edb2b5b688f83453f48415e260027e87d12fc13ae3bc24b52d4f7042fcbb3bc8621cd82812b63358f94927949d856c19fef26a8b80bfc5e7781caae32aa57f891dccb0a4d425a152c8e44e3d6404641cb1fb35e5c59771e1bed48ecab9d5fe73dc261d69d970c24ab565723033a19d818f9c029dca69b020cfb528c39a451fa590882faa20e2b4e1605708b82620448d5cd63af736de8cebc926fba8fee5ef752127680718b187284cfabc6b20e149c64171bfcf5bdd475d1efda258e6e391ed6bf5340bdc21e5cf1459879505d04c52fd6b4a841c815868ec6d7ca8fac74c2c19a65747ac42dce617627fcee6feaa7b671e1f433e81f659fcb1084b4e3c3ac290a13ba85eb9656e2de256d2c73278e154d4cd5d18e84a9061a1ddf1118a565beaf4db3fe2a221223a8ab02ab5dbef768602df52bf7dbc2769906371b31461948dd019038a23b2ac01740eead64c27e70d5eec46dfd02ba7135e5e0752fcb936f690fb79e2c006301cb4367dcb20141efdbcf936442f7c923a1e2e2d3c143355bb87fdabd1871830d28173c9dda64aeb6f4aa8d1929263a1673869e6dae174f4260c5829786474f6579ca60bae42699401706ac6e2e43f8fe08a9e51b8051034a541b0c8add3ae00cf3db9ade207f895d09c39df1c903cf348f29496e508f790f0d612eeef6e2d81cfd07943b5161e8a1ff51af21f7846eb5051f82aaae51ec6144ca8ded60be408d56e63a8a776af7f4a1c85aa305940840b7301c1707a62202b534a17a91bc4aac307a982d487baf4a4763a67633a0c4cc7c196abd630fa0924d0d52baa09ddc7c738dd0683fac3659f63d44a848061f446083f7594b2010599b315654f1424203b2940be09d1848a56b7cbdf360785337f8cf73328f6f8762bc5e51bfc777875db61a2cbb2983e225816037e5ba77e805d8d649e6f4d3f68a81fef7d0733e53c95a565ddeb4efe36ef6be22db0fa4623dae6576fd1acc635ba1eda3437b52ef4f562bac20355969fc0b7ef8b226e046db5f80153f2f1bd891df0466ac1c1819d4a51babab7398644673bdd49cd6c59e6b8cb897829948b3fb187fc23b3a6a093e60ccd291bf4ab5037c41c04bc1d58f30677c74a8c49640b647e2861cc262864ed931807a1bcdd5f8b65e766a90174a1184fb0944a10a3c4ab0bcdd6ba401013bf47908daa70bc6127442413ad9053da88cf741b32becd6416cb1c3303e9ee9fe6aceaf6a80d9355ea57002e5d89a495c2092a5248602d6f7f31f7be715739cfbe2fb7ad1f187d7e890b28a489a8aee2063ed365d0243cbc0261299da21e537ff46c684ada97243cb78466cf5d22daf89af3bcc8ca9475f4c7dad5d4fdb72a52e80164228ff5bbb3f2b3552e53b4476903138ff6d636bb5217be53c1024a9ed6ef39b1defa4ddd2cd3b6c1d8fd3572e8c5b43885ac3c2dbc50cf5555ae4262b1836ec727ca93289cb01c4eef07f326911e746e753e2c2950a1f88cc9e85a1e2830b025a95284df44a7ae5d34f1f9296167722a0d10995dde25ae54c6d4c6934481918365aa589ac3c9b60ddd4f012b7075a7723b62c936c0add022fa1f91993948ec681b91d22e17709c655c8c547dfa12e86e5b711a3dceb9247eb93a1234779d6b8bfee9f354d1d5a9995af88da4018154db8dee0921a25f6e26c2be6770661ad3356760a389cc2fe6bbae2e0402a98833d20cfcebaccdffccf9a5e381431621dbb1b69a4f2eccbc93aa1bdc82ea99efdf448d19887be789d7cf41a5dc3a22cab5df429f146903682b3cbf6870dafc5453c8212c39a6853cc333c91ce272189e2b8223c49a730d2832ed064ff4763d97eacea8d480c8e2ab9a5086a436f81bf3c93661dac4cbfa088173bf27ecc7d420421418ab100ded34ee091f06739673b3123ce13696edb50a02e822332ebd4c101b09bd0a35984c4bb5d9c183ef95018d32c09e301e297e94b9d4df0778949fb10036f45505ed9285990e3172b4c95b8d2af010184e69c924909b27babec34cb75dffd60f9db80fdda38053ab08a1534911d2860e9a6a48f67371d4531231f9258efe78163e0790973c19cf981ca3e946732a8a1a90418724fffb573f9817051f4c3dfa16c7be9dfea4422b631642a8c9978c53a596f6f4e2a28c58fa44ce3061ae1baf66cbc07b6491c8decdcbf0df58cc9ea2b850765e09a39280fbe7eb0d0c4af45cc83a9f3ae80e07eacd6a475e4efc0d5e9e8044bb9600b8a44afb9ffb2f83c01ca88616e3b86c427609c6b3b70dd2211e56883cd1a406c70654895c5c27fba7d92d54533e845f58966495d030aae732d44032c258589aa4e1b4aa80a385ebb7feba696ecb672183bd3925a0c55fd6b98979344a8530d2ddf03a9c1620ddb72800b9661c9f6789676fee4e0354ee3ac3aa3eaa5171b5eb70df54d689170abb5d354f456b1819196d9165fc4b7ad59daa805a4445883cfc88a6241616b6d1b4d", 0x810}], 0x1) 2021/11/11 16:01:36 result hanged=false: [553516ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75595 #0 [553533ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [553533ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3422 #0 [553534ms] -> writev(0x3, 0x20001780, 0x1) #0 [553543ms] <- writev=0x810 errno=14 cover=159906 2021/11/11 16:01:36 result hanged=false: 16:01:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000001780)=[{&(0x7f0000000640)="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", 0x810}], 0x1) [553595ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75597 #0 [553612ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [553613ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3445 #0 [553614ms] -> writev(0x3, 0x20001780, 0x1) #0 [553621ms] <- writev=0x810 errno=14 cover=159999 2021/11/11 16:01:36 result hanged=false: 2021/11/11 16:01:36 added new input for call #1 writev to corpus: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000001780)=[{&(0x7f0000000640)="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", 0x810}], 0x1) 16:01:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000000}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = gettid() fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x2, r3}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_none}]}}) clone3(&(0x7f0000000280)={0x400, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x3f}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/175, &(0x7f0000000240)=[r3], 0x1, {r5}}, 0x58) 2021/11/11 16:01:36 poll: candidates=8 inputs=0 signal=0 [553676ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75599 #0 [553692ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [553693ms] <- perf_event_open=0x3 errno=14 cover=8151 #0 [553694ms] -> epoll_create(0x1) #0 [553694ms] <- epoll_create=0x4 errno=14 cover=496 #0 [553695ms] -> clone3(0x200008c0, 0x58) #0 [553696ms] <- clone3=0xffffffffffffffff errno=11 cover=4787 #0 [553697ms] -> clone3(0x0, 0x0) #0 [553697ms] <- clone3=0xffffffffffffffff errno=22 cover=39 #0 [553698ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [553702ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=13363 #0 [553703ms] -> mmap$IORING_OFF_SQ_RING(0x20ffc000, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) #0 [553703ms] <- mmap$IORING_OFF_SQ_RING=0xffffffffffffffff errno=9 cover=44 #0 [553705ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0x3, 0x20000000) #0 [553707ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=13428 #0 [553711ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [553712ms] <- socket$inet6_tcp=0x5 errno=14 cover=1810 #0 [553713ms] -> gettid() #0 [553713ms] <- gettid=0x12750 errno=14 cover=48 #0 [553714ms] -> fcntl$setownex(0x5, 0xf, 0x20000040) #0 [553715ms] <- fcntl$setownex=0x0 errno=14 cover=137 #0 [553716ms] -> pipe(0x200001c0) #0 [553716ms] <- pipe=0x0 errno=14 cover=1308 #0 [553717ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x20000200) #0 [553745ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=64455 #0 [553746ms] -> clone3(0x20000280, 0x58) #0 [553764ms] <- clone3=0xffffffffffffffff errno=17 cover=262143 enabling collider #0 [553778ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [553779ms] <- perf_event_open=0x3 errno=14 cover=8144 #0 [553780ms] -> epoll_create(0x1) #0 [553780ms] <- epoll_create=0x4 errno=14 cover=495 pthread_create failed (errno 11) 2021/11/11 16:01:36 result hanged=false: 2021/11/11 16:01:36 #0: triaging type=7 16:01:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000000}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = gettid() fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x2, r3}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_none}]}}) clone3(&(0x7f0000000280)={0x400, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x3f}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/175, &(0x7f0000000240)=[r3], 0x1, {r5}}, 0x58) 2021/11/11 16:01:36 triaging input for call #11 mount$9p_fd (new signal=12) [553870ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75702 #0 [553889ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [553890ms] <- perf_event_open=0x3 errno=14 cover=8254 #0 [553894ms] -> epoll_create(0x1) #0 [553894ms] <- epoll_create=0x4 errno=14 cover=540 #0 [553894ms] -> clone3(0x200008c0, 0x58) #0 [553895ms] <- clone3=0xffffffffffffffff errno=11 cover=4679 #0 [553896ms] -> clone3(0x0, 0x0) #0 [553896ms] <- clone3=0xffffffffffffffff errno=22 cover=39 #0 [553896ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [553900ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=13354 #0 [553902ms] -> mmap$IORING_OFF_SQ_RING(0x20ffc000, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) #0 [553902ms] <- mmap$IORING_OFF_SQ_RING=0xffffffffffffffff errno=9 cover=44 #0 [553902ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0x3, 0x20000000) #0 [553904ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=13097 #0 [553906ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [553906ms] <- socket$inet6_tcp=0x5 errno=14 cover=1834 #0 [553906ms] -> gettid() #0 [553906ms] <- gettid=0x127b7 errno=14 cover=48 #0 [553910ms] -> fcntl$setownex(0x5, 0xf, 0x20000040) #0 [553910ms] <- fcntl$setownex=0x0 errno=14 cover=137 #0 [553910ms] -> pipe(0x200001c0) #0 [553910ms] <- pipe=0x0 errno=14 cover=1250 #0 [553910ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x20000200) #0 [553935ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=62509 #0 [553941ms] -> clone3(0x20000280, 0x58) #0 [553960ms] <- clone3=0xffffffffffffffff errno=17 cover=262143 2021/11/11 16:01:36 result hanged=false: 16:01:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000000}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = gettid() fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x2, r3}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_none}]}}) clone3(&(0x7f0000000280)={0x400, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x3f}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/175, &(0x7f0000000240)=[r3], 0x1, {r5}}, 0x58) [554050ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75705 #0 [554077ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [554078ms] <- perf_event_open=0x3 errno=14 cover=8122 #0 [554083ms] -> epoll_create(0x1) #0 [554083ms] <- epoll_create=0x4 errno=14 cover=485 #0 [554084ms] -> clone3(0x200008c0, 0x58) #0 [554084ms] <- clone3=0xffffffffffffffff errno=11 cover=4671 #0 [554085ms] -> clone3(0x0, 0x0) #0 [554085ms] <- clone3=0xffffffffffffffff errno=22 cover=39 #0 [554085ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [554088ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=13391 #0 [554090ms] -> mmap$IORING_OFF_SQ_RING(0x20ffc000, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) #0 [554090ms] <- mmap$IORING_OFF_SQ_RING=0xffffffffffffffff errno=9 cover=44 #0 [554090ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0x3, 0x20000000) #0 [554093ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=13319 #0 [554094ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [554095ms] <- socket$inet6_tcp=0x5 errno=14 cover=1813 #0 [554096ms] -> gettid() #0 [554096ms] <- gettid=0x127ba errno=14 cover=48 #0 [554096ms] -> fcntl$setownex(0x5, 0xf, 0x20000040) #0 [554096ms] <- fcntl$setownex=0x0 errno=14 cover=137 #0 [554097ms] -> pipe(0x200001c0) #0 [554101ms] <- pipe=0x0 errno=14 cover=1376 #0 [554101ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x20000200) #0 [554124ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=63509 #0 [554130ms] -> clone3(0x20000280, 0x58) #0 [554147ms] <- clone3=0xffffffffffffffff errno=17 cover=262143 16:01:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000000}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = gettid() fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x2, r3}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_none}]}}) clone3(&(0x7f0000000280)={0x400, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x3f}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/175, &(0x7f0000000240)=[r3], 0x1, {r5}}, 0x58) 2021/11/11 16:01:36 result hanged=false: [554215ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75708 #0 [554234ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [554236ms] <- perf_event_open=0x3 errno=14 cover=8201 #0 [554237ms] -> epoll_create(0x1) #0 [554238ms] <- epoll_create=0x4 errno=14 cover=546 #0 [554238ms] -> clone3(0x200008c0, 0x58) #0 [554239ms] <- clone3=0xffffffffffffffff errno=11 cover=4703 #0 [554240ms] -> clone3(0x0, 0x0) #0 [554240ms] <- clone3=0xffffffffffffffff errno=22 cover=39 #0 [554240ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [554244ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=13594 #0 [554246ms] -> mmap$IORING_OFF_SQ_RING(0x20ffc000, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) #0 [554246ms] <- mmap$IORING_OFF_SQ_RING=0xffffffffffffffff errno=9 cover=44 #0 [554246ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0x3, 0x20000000) #0 [554254ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=14409 #0 [554257ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [554257ms] <- socket$inet6_tcp=0x5 errno=14 cover=1799 #0 [554257ms] -> gettid() #0 [554257ms] <- gettid=0x127bd errno=14 cover=48 #0 [554257ms] -> fcntl$setownex(0x5, 0xf, 0x20000040) #0 [554258ms] <- fcntl$setownex=0x0 errno=14 cover=137 #0 [554258ms] -> pipe(0x200001c0) #0 [554258ms] <- pipe=0x0 errno=14 cover=1135 #0 [554258ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x20000200) #0 [554281ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=63422 #0 [554288ms] -> clone3(0x20000280, 0x58) #0 [554307ms] <- clone3=0xffffffffffffffff errno=17 cover=262143 2021/11/11 16:01:36 result hanged=false: 2021/11/11 16:01:36 added new input for call #11 mount$9p_fd to corpus: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000000}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = gettid() fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x2, r3}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_none}]}}) clone3(&(0x7f0000000280)={0x400, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x3f}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/175, &(0x7f0000000240)=[r3], 0x1, {r5}}, 0x58) 16:01:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000000}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = gettid() fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x2, r3}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_none}]}}) clone3(&(0x7f0000000280)={0x400, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x3f}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/175, &(0x7f0000000240)=[r3], 0x1, {r5}}, 0x58) [554398ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 16:01:36 #0: triaging type=7 2021/11/11 16:01:36 triaging input for call #6 epoll_ctl$EPOLL_CTL_ADD (new signal=1) spawned worker pid 75711 #0 [554416ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [554422ms] <- perf_event_open=0x3 errno=14 cover=9191 #0 [554424ms] -> epoll_create(0x1) #0 [554424ms] <- epoll_create=0x4 errno=14 cover=605 #0 [554426ms] -> clone3(0x200008c0, 0x58) #0 [554426ms] <- clone3=0xffffffffffffffff errno=11 cover=4712 #0 [554427ms] -> clone3(0x0, 0x0) #0 [554427ms] <- clone3=0xffffffffffffffff errno=22 cover=39 #0 [554427ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [554430ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=13326 #0 [554432ms] -> mmap$IORING_OFF_SQ_RING(0x20ffc000, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) #0 [554432ms] <- mmap$IORING_OFF_SQ_RING=0xffffffffffffffff errno=9 cover=44 #0 [554432ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0x3, 0x20000000) #0 [554435ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=13385 #0 [554436ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [554436ms] <- socket$inet6_tcp=0x5 errno=14 cover=1813 #0 [554436ms] -> gettid() #0 [554437ms] <- gettid=0x127c0 errno=14 cover=48 #0 [554437ms] -> fcntl$setownex(0x5, 0xf, 0x20000040) #0 [554437ms] <- fcntl$setownex=0x0 errno=14 cover=137 #0 [554437ms] -> pipe(0x200001c0) #0 [554438ms] <- pipe=0x0 errno=14 cover=1174 #0 [554438ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x20000200) #0 [554465ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=70451 #0 [554471ms] -> clone3(0x20000280, 0x58) #0 [554489ms] <- clone3=0xffffffffffffffff errno=17 cover=262143 2021/11/11 16:01:37 result hanged=false: 16:01:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000000}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = gettid() fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x2, r3}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_none}]}}) clone3(&(0x7f0000000280)={0x400, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x3f}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/175, &(0x7f0000000240)=[r3], 0x1, {r5}}, 0x58) [554560ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75714 #0 [554578ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [554581ms] <- perf_event_open=0x3 errno=14 cover=8112 #0 [554582ms] -> epoll_create(0x1) #0 [554583ms] <- epoll_create=0x4 errno=14 cover=507 #0 [554584ms] -> clone3(0x200008c0, 0x58) #0 [554585ms] <- clone3=0xffffffffffffffff errno=11 cover=4689 #0 [554585ms] -> clone3(0x0, 0x0) #0 [554586ms] <- clone3=0xffffffffffffffff errno=22 cover=89 #0 [554586ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [554589ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=13447 #0 [554591ms] -> mmap$IORING_OFF_SQ_RING(0x20ffc000, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) #0 [554592ms] <- mmap$IORING_OFF_SQ_RING=0xffffffffffffffff errno=9 cover=44 #0 [554592ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0x3, 0x20000000) #0 [554595ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=13160 #0 [554597ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [554597ms] <- socket$inet6_tcp=0x5 errno=14 cover=1726 #0 [554598ms] -> gettid() #0 [554598ms] <- gettid=0x127c3 errno=14 cover=48 #0 [554598ms] -> fcntl$setownex(0x5, 0xf, 0x20000040) #0 [554598ms] <- fcntl$setownex=0x0 errno=14 cover=137 #0 [554599ms] -> pipe(0x200001c0) #0 [554599ms] <- pipe=0x0 errno=14 cover=1146 #0 [554599ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x20000200) #0 [554632ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=63017 #0 [554638ms] -> clone3(0x20000280, 0x58) #0 [554656ms] <- clone3=0xffffffffffffffff errno=17 cover=262143 2021/11/11 16:01:37 result hanged=false: 16:01:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000000}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = gettid() fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x2, r3}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_none}]}}) clone3(&(0x7f0000000280)={0x400, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x3f}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/175, &(0x7f0000000240)=[r3], 0x1, {r5}}, 0x58) [554727ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75717 #0 [554747ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [554750ms] <- perf_event_open=0x3 errno=14 cover=8022 #0 [554752ms] -> epoll_create(0x1) #0 [554752ms] <- epoll_create=0x4 errno=14 cover=507 #0 [554752ms] -> clone3(0x200008c0, 0x58) #0 [554753ms] <- clone3=0xffffffffffffffff errno=11 cover=4587 #0 [554754ms] -> clone3(0x0, 0x0) #0 [554754ms] <- clone3=0xffffffffffffffff errno=22 cover=39 #0 [554754ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [554760ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=13092 #0 [554762ms] -> mmap$IORING_OFF_SQ_RING(0x20ffc000, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) #0 [554762ms] <- mmap$IORING_OFF_SQ_RING=0xffffffffffffffff errno=9 cover=44 #0 [554762ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0x3, 0x20000000) #0 [554765ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=13089 #0 [554770ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [554770ms] <- socket$inet6_tcp=0x5 errno=14 cover=1788 #0 [554770ms] -> gettid() #0 [554770ms] <- gettid=0x127c6 errno=14 cover=48 #0 [554770ms] -> fcntl$setownex(0x5, 0xf, 0x20000040) #0 [554770ms] <- fcntl$setownex=0x0 errno=14 cover=137 #0 [554770ms] -> pipe(0x200001c0) #0 [554770ms] <- pipe=0x0 errno=14 cover=1113 #0 [554772ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x20000200) #0 [554798ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=62969 #0 [554804ms] -> clone3(0x20000280, 0x58) #0 [554825ms] <- clone3=0xffffffffffffffff errno=17 cover=262143 2021/11/11 16:01:37 result hanged=false: 2021/11/11 16:01:37 added new input for call #6 epoll_ctl$EPOLL_CTL_ADD to corpus: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000000}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = gettid() fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x2, r3}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_none}]}}) clone3(&(0x7f0000000280)={0x400, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x3f}, &(0x7f0000000140)=""/28, 0x1c, &(0x7f0000000180)=""/175, &(0x7f0000000240)=[r3], 0x1, {r5}}, 0x58) 16:01:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x40042408, 0x0) [554897ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75720 #0 [554915ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [554922ms] <- perf_event_open=0x3 errno=14 cover=107959 #0 [554928ms] -> ioctl$PERF_EVENT_IOC_DISABLE(0x3, 0x40042408, 0x0) #0 [554928ms] <- ioctl$PERF_EVENT_IOC_DISABLE=0xffffffffffffffff errno=95 cover=131 enabling collider #0 [554943ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [554948ms] <- perf_event_open=0x3 errno=14 cover=107891 #0 [554948ms] -> ioctl$PERF_EVENT_IOC_DISABLE(0x3, 0x40042408, 0x0) #0 [554948ms] <- ioctl$PERF_EVENT_IOC_DISABLE=0xffffffffffffffff errno=9 cover=46 2021/11/11 16:01:37 result hanged=false: 16:01:37 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$inet(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @private1}}, 0x0) io_uring_enter(r0, 0x18e3, 0x0, 0x0, 0x0, 0x0) [554998ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75722 #0 [555017ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20feb000, 0x20ff6000, 0x20000000, 0x20002a40) #0 [555023ms] <- syz_io_uring_setup=0x3 errno=14 cover=7986 #0 [555024ms] -> socket$inet(0x2, 0x1, 0x0) #0 [555025ms] <- socket$inet=0x4 errno=14 cover=1797 #0 [555026ms] -> syz_io_uring_submit(0x20feb000, 0x20ff6000, 0x20000580, 0x0) #0 [555026ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [555027ms] -> io_uring_enter(0x3, 0x18e3, 0x0, 0x0, 0x0, 0x0) #0 [555027ms] <- io_uring_enter=0x1 errno=14 cover=565 enabling collider #0 [555028ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20feb000, 0x20ff6000, 0x20000000, 0x20002a40) #0 [555032ms] <- syz_io_uring_setup=0x3 errno=14 cover=5407 #0 [555032ms] -> socket$inet(0x2, 0x1, 0x0) #0 [555033ms] <- socket$inet=0x4 errno=14 cover=1898 pthread_create failed (errno 11) 2021/11/11 16:01:37 result hanged=false: 16:01:37 executing program 0: syz_emit_ethernet(0x6f, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"541fbd5868abb927e092a9f6ab7f81c2ba1003434ff012a6a9b76938cbd759e2319025038acadb8921919bdee51e989f48954cb4051e05a3b5"}}}}}}, 0x0) [555108ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75824 #0 [555127ms] -> syz_emit_ethernet(0x6f, 0x200000c0, 0x0) aa aa aa aa aa aa aa aa aa aa aa bb 08 00 45 00 00 61 00 00 00 00 00 06 39 b4 ac 14 14 00 ac 14 14 bb 00 00 00 00 44 43 42 41 44 43 42 41 50 00 00 00 90 f2 00 00 54 1f bd 58 68 ab b9 27 e0 92 a9 f6 ab 7f 81 c2 ba 10 03 43 4f f0 12 a6 a9 b7 69 38 cb d7 59 e2 31 90 25 03 8a ca db 89 21 91 9b de e5 1e 98 9f 48 95 4c b4 05 1e 05 a3 b5 #0 [555129ms] <- syz_emit_ethernet=0x6f errno=14 cover=46286 enabling collider #0 [555134ms] -> syz_emit_ethernet(0x6f, 0x200000c0, 0x0) aa aa aa aa aa aa aa aa aa aa aa bb 08 00 45 00 00 61 00 00 00 00 00 06 39 b4 ac 14 14 00 ac 14 14 bb 00 00 00 00 44 43 42 41 44 43 42 41 50 00 00 00 90 f2 00 00 54 1f bd 58 68 ab b9 27 e0 92 a9 f6 ab 7f 81 c2 ba 10 03 43 4f f0 12 a6 a9 b7 69 38 cb d7 59 e2 31 90 25 03 8a ca db 89 21 91 9b de e5 1e 98 9f 48 95 4c b4 05 1e 05 a3 b5 #0 [555136ms] <- syz_emit_ethernet=0x6f errno=14 cover=34756 2021/11/11 16:01:37 result hanged=false: 2021/11/11 16:01:37 #0: triaging type=7 2021/11/11 16:01:37 triaging input for call #0 syz_emit_ethernet (new signal=6) 16:01:37 executing program 0: syz_emit_ethernet(0x6f, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"541fbd5868abb927e092a9f6ab7f81c2ba1003434ff012a6a9b76938cbd759e2319025038acadb8921919bdee51e989f48954cb4051e05a3b5"}}}}}}, 0x0) iptable filter/2: resetting iptable mangle/2: resetting [555177ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75826 #0 [555198ms] -> syz_emit_ethernet(0x6f, 0x200000c0, 0x0) aa aa aa aa aa aa aa aa aa aa aa bb 08 00 45 00 00 61 00 00 00 00 00 06 39 b4 ac 14 14 00 ac 14 14 bb 00 00 00 00 44 43 42 41 44 43 42 41 50 00 00 00 90 f2 00 00 54 1f bd 58 68 ab b9 27 e0 92 a9 f6 ab 7f 81 c2 ba 10 03 43 4f f0 12 a6 a9 b7 69 38 cb d7 59 e2 31 90 25 03 8a ca db 89 21 91 9b de e5 1e 98 9f 48 95 4c b4 05 1e 05 a3 b5 #0 [555200ms] <- syz_emit_ethernet=0x6f errno=14 cover=34813 2021/11/11 16:01:37 result hanged=false: 16:01:37 executing program 0: syz_emit_ethernet(0x6f, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"541fbd5868abb927e092a9f6ab7f81c2ba1003434ff012a6a9b76938cbd759e2319025038acadb8921919bdee51e989f48954cb4051e05a3b5"}}}}}}, 0x0) iptable filter/2: resetting iptable mangle/2: resetting [555244ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75828 #0 [555262ms] -> syz_emit_ethernet(0x6f, 0x200000c0, 0x0) aa aa aa aa aa aa aa aa aa aa aa bb 08 00 45 00 00 61 00 00 00 00 00 06 39 b4 ac 14 14 00 ac 14 14 bb 00 00 00 00 44 43 42 41 44 43 42 41 50 00 00 00 90 f2 00 00 54 1f bd 58 68 ab b9 27 e0 92 a9 f6 ab 7f 81 c2 ba 10 03 43 4f f0 12 a6 a9 b7 69 38 cb d7 59 e2 31 90 25 03 8a ca db 89 21 91 9b de e5 1e 98 9f 48 95 4c b4 05 1e 05 a3 b5 #0 [555268ms] <- syz_emit_ethernet=0x6f errno=14 cover=35359 16:01:37 executing program 0: syz_emit_ethernet(0x6f, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"541fbd5868abb927e092a9f6ab7f81c2ba1003434ff012a6a9b76938cbd759e2319025038acadb8921919bdee51e989f48954cb4051e05a3b5"}}}}}}, 0x0) 2021/11/11 16:01:37 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [555316ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75830 #0 [555333ms] -> syz_emit_ethernet(0x6f, 0x200000c0, 0x0) aa aa aa aa aa aa aa aa aa aa aa bb 08 00 45 00 00 61 00 00 00 00 00 06 39 b4 ac 14 14 00 ac 14 14 bb 00 00 00 00 44 43 42 41 44 43 42 41 50 00 00 00 90 f2 00 00 54 1f bd 58 68 ab b9 27 e0 92 a9 f6 ab 7f 81 c2 ba 10 03 43 4f f0 12 a6 a9 b7 69 38 cb d7 59 e2 31 90 25 03 8a ca db 89 21 91 9b de e5 1e 98 9f 48 95 4c b4 05 1e 05 a3 b5 #0 [555341ms] <- syz_emit_ethernet=0x6f errno=14 cover=35001 2021/11/11 16:01:37 result hanged=false: 2021/11/11 16:01:37 added new input for call #0 syz_emit_ethernet to corpus: syz_emit_ethernet(0x6f, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"541fbd5868abb927e092a9f6ab7f81c2ba1003434ff012a6a9b76938cbd759e2319025038acadb8921919bdee51e989f48954cb4051e05a3b5"}}}}}}, 0x0) 16:01:37 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) rt_sigqueueinfo(0x0, 0x0, 0x0) iptable filter/2: resetting iptable mangle/2: resetting [555388ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75832 #0 [555405ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000100) #0 [555409ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=35771 #0 [555414ms] -> rt_sigqueueinfo(0x0, 0x0, 0x0) #0 [555414ms] <- rt_sigqueueinfo=0xffffffffffffffff errno=14 cover=423 enabling collider #0 [555415ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000100) #0 [555415ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=2471 16:01:38 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0) 2021/11/11 16:01:38 result hanged=false: [555457ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75834 #0 [555479ms] -> syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x200007c0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [555481ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=8820 enabling collider #0 [555482ms] -> syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x200007c0, 0x0, 0x0) #0 [555487ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=9718 2021/11/11 16:01:38 result hanged=false: 2021/11/11 16:01:38 #0: triaging type=7 16:01:38 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0) 2021/11/11 16:01:38 triaging input for call #0 syz_mount_image$ext4 (new signal=2) [555531ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75836 #0 [555549ms] -> syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x200007c0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [555552ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=8816 2021/11/11 16:01:38 result hanged=false: 16:01:38 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0) [555598ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75838 #0 [555623ms] -> syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x200007c0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [555625ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=8991 16:01:38 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0) 2021/11/11 16:01:38 result hanged=false: [555676ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75840 #0 [555694ms] -> syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x200007c0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [555696ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=8864 2021/11/11 16:01:38 result hanged=false: 2021/11/11 16:01:38 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0) 16:01:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) [555766ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75842 #0 [555783ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [555783ms] <- socket$inet_udp=0x3 errno=14 cover=1712 #0 [555784ms] -> bind$inet(0x3, 0x20000040, 0x10) #0 [555784ms] <- bind$inet=0x0 errno=14 cover=347 #0 [555785ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [555785ms] <- socket$inet_udp=0x4 errno=14 cover=1687 #0 [555786ms] -> sendto$inet(0x4, 0x20000080, 0xa, 0x0, 0x200000c0, 0x10) #0 [555787ms] <- sendto$inet=0xa errno=14 cover=1482 #0 [555787ms] -> recvfrom(0x3, 0x20000100, 0xa, 0x0, 0x0, 0x0) #0 [555787ms] <- recvfrom=0xa errno=14 cover=426 enabling collider #0 [555787ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [555787ms] <- socket$inet_udp=0x3 errno=14 cover=1727 #0 [555788ms] -> bind$inet(0x3, 0x20000040, 0x10) #0 [555788ms] <- bind$inet=0x0 errno=14 cover=347 pthread_create failed (errno 11) 16:01:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) 2021/11/11 16:01:38 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [555869ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75944 #0 [555886ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [555891ms] <- perf_event_open=0x3 errno=14 cover=9456 #0 [555891ms] -> epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [555891ms] <- epoll_wait=0xffffffffffffffff errno=22 cover=64 enabling collider #0 [555902ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [555902ms] <- perf_event_open=0x3 errno=14 cover=8791 #0 [555903ms] -> epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [555904ms] <- epoll_wait=0xffffffffffffffff errno=22 cover=35 2021/11/11 16:01:38 result hanged=false: 2021/11/11 16:01:38 #0: triaging type=7 16:01:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) 2021/11/11 16:01:38 triaging input for call #0 perf_event_open (new signal=1) [555948ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75946 #0 [555968ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [555968ms] <- perf_event_open=0x3 errno=14 cover=8390 #0 [555970ms] -> epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [555970ms] <- epoll_wait=0xffffffffffffffff errno=22 cover=64 2021/11/11 16:01:38 result hanged=false: 16:01:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) [556018ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75948 #0 [556036ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [556037ms] <- perf_event_open=0x3 errno=14 cover=8229 #0 [556039ms] -> epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [556039ms] <- epoll_wait=0xffffffffffffffff errno=22 cover=64 16:01:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) 2021/11/11 16:01:38 result hanged=false: [556094ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75950 #0 [556112ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [556113ms] <- perf_event_open=0x3 errno=14 cover=8242 #0 [556122ms] -> epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [556122ms] <- epoll_wait=0xffffffffffffffff errno=22 cover=64 2021/11/11 16:01:38 result hanged=false: 2021/11/11 16:01:38 added new input for call #0 perf_event_open to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:01:38 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) r1 = clone3(&(0x7f00000003c0)={0x5141100, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x56) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r2, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) clone3(&(0x7f0000000280)={0x2100400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/70, 0x46, &(0x7f0000000300)=""/149, &(0x7f0000000240)=[0x0, r1, r1, 0xffffffffffffffff, r1, r1, r0, r1, 0x0, 0x0], 0xa, {r2}}, 0x58) 2021/11/11 16:01:38 poll: candidates=8 inputs=0 signal=0 [556178ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 75952 #0 [556197ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [556201ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=13412 #0 [556203ms] -> pivot_root(0x20000140, 0x20000180) #0 [556204ms] <- pivot_root=0xffffffffffffffff errno=16 cover=1377 #0 [556205ms] -> clone3(0x200008c0, 0x58) #0 [556206ms] <- clone3=0xffffffffffffffff errno=11 cover=4570 [ 1803.712884] 9pnet: p9_fd_create_tcp (308937): problem connecting socket to 127.0.0.1 #0 [556207ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x0, 0x200001c0) #0 [556212ms] <- mount$9p_tcp=0xffffffffffffffff errno=111 cover=53301 #0 [556212ms] -> clone3(0x200003c0, 0x56) #0 [556212ms] <- clone3=0xffffffffffffffff errno=22 cover=84 #0 [556212ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001300) #0 [556213ms] <- syz_open_procfs=0x3 errno=14 cover=4442 #0 [556213ms] -> readv(0x3, 0x20001500, 0x1) #0 [556222ms] <- readv=0xd7 errno=14 cover=262143 #0 [556225ms] -> clone3(0x20000280, 0x58) #0 [556243ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 enabling collider #0 [556247ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [556249ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=17 cover=1526 #0 [556249ms] -> pivot_root(0x20000140, 0x20000180) #0 [556250ms] <- pivot_root=0xffffffffffffffff errno=16 cover=1387 pthread_create failed (errno 11) 16:01:38 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) r1 = clone3(&(0x7f00000003c0)={0x5141100, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x56) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r2, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) clone3(&(0x7f0000000280)={0x2100400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/70, 0x46, &(0x7f0000000300)=""/149, &(0x7f0000000240)=[0x0, r1, r1, 0xffffffffffffffff, r1, r1, r0, r1, 0x0, 0x0], 0xa, {r2}}, 0x58) 2021/11/11 16:01:38 result hanged=false: 2021/11/11 16:01:38 #0: triaging type=7 2021/11/11 16:01:38 triaging input for call #6 readv (new signal=6) iptable filter/2: resetting iptable mangle/2: resetting [556326ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76055 #0 [556344ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [556350ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=13278 #0 [556352ms] -> pivot_root(0x20000140, 0x20000180) #0 [556353ms] <- pivot_root=0xffffffffffffffff errno=16 cover=1386 #0 [556354ms] -> clone3(0x200008c0, 0x58) #0 [556354ms] <- clone3=0xffffffffffffffff errno=11 cover=4450 #0 [556358ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x0, 0x200001c0) [ 1803.862728] 9pnet: p9_fd_create_tcp (309040): problem connecting socket to 127.0.0.1 #0 [556362ms] <- mount$9p_tcp=0xffffffffffffffff errno=111 cover=12540 #0 [556363ms] -> clone3(0x200003c0, 0x56) #0 [556363ms] <- clone3=0xffffffffffffffff errno=22 cover=84 #0 [556364ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001300) #0 [556365ms] <- syz_open_procfs=0x3 errno=14 cover=4552 #0 [556367ms] -> readv(0x3, 0x20001500, 0x1) #0 [556372ms] <- readv=0xd7 errno=14 cover=262143 #0 [556387ms] -> clone3(0x20000280, 0x58) #0 [556410ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 2021/11/11 16:01:39 result hanged=false: 16:01:39 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) r1 = clone3(&(0x7f00000003c0)={0x5141100, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x56) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r2, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) clone3(&(0x7f0000000280)={0x2100400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/70, 0x46, &(0x7f0000000300)=""/149, &(0x7f0000000240)=[0x0, r1, r1, 0xffffffffffffffff, r1, r1, r0, r1, 0x0, 0x0], 0xa, {r2}}, 0x58) iptable filter/2: resetting iptable mangle/2: resetting [556475ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76058 #0 [556495ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [556498ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=13085 #0 [556499ms] -> pivot_root(0x20000140, 0x20000180) #0 [556500ms] <- pivot_root=0xffffffffffffffff errno=16 cover=1397 #0 [556500ms] -> clone3(0x200008c0, 0x58) #0 [556500ms] <- clone3=0xffffffffffffffff errno=11 cover=4507 #0 [556501ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x0, 0x200001c0) [ 1804.005396] 9pnet: p9_fd_create_tcp (309043): problem connecting socket to 127.0.0.1 #0 [556506ms] <- mount$9p_tcp=0xffffffffffffffff errno=111 cover=10422 #0 [556509ms] -> clone3(0x200003c0, 0x56) #0 [556509ms] <- clone3=0xffffffffffffffff errno=22 cover=84 #0 [556509ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001300) #0 [556509ms] <- syz_open_procfs=0x3 errno=14 cover=4556 #0 [556511ms] -> readv(0x3, 0x20001500, 0x1) #0 [556518ms] <- readv=0xd7 errno=14 cover=262143 #0 [556531ms] -> clone3(0x20000280, 0x58) #0 [556553ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 16:01:39 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) r1 = clone3(&(0x7f00000003c0)={0x5141100, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x56) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r2, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) clone3(&(0x7f0000000280)={0x2100400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/70, 0x46, &(0x7f0000000300)=""/149, &(0x7f0000000240)=[0x0, r1, r1, 0xffffffffffffffff, r1, r1, r0, r1, 0x0, 0x0], 0xa, {r2}}, 0x58) 2021/11/11 16:01:39 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [556612ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76061 #0 [556630ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [556636ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=13422 #0 [556638ms] -> pivot_root(0x20000140, 0x20000180) #0 [556639ms] <- pivot_root=0xffffffffffffffff errno=16 cover=1377 #0 [556640ms] -> clone3(0x200008c0, 0x58) #0 [556640ms] <- clone3=0xffffffffffffffff errno=11 cover=4472 #0 [556641ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x0, 0x200001c0) [ 1804.146947] 9pnet: p9_fd_create_tcp (309046): problem connecting socket to 127.0.0.1 #0 [556646ms] <- mount$9p_tcp=0xffffffffffffffff errno=111 cover=11374 #0 [556651ms] -> clone3(0x200003c0, 0x56) #0 [556651ms] <- clone3=0xffffffffffffffff errno=22 cover=84 #0 [556652ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001300) #0 [556653ms] <- syz_open_procfs=0x3 errno=14 cover=4555 #0 [556654ms] -> readv(0x3, 0x20001500, 0x1) #0 [556661ms] <- readv=0xd7 errno=14 cover=262143 #0 [556675ms] -> clone3(0x20000280, 0x58) #0 [556692ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 2021/11/11 16:01:39 result hanged=false: 2021/11/11 16:01:39 added new input for call #6 readv to corpus: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) r1 = clone3(&(0x7f00000003c0)={0x5141100, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x56) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r2, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) clone3(&(0x7f0000000280)={0x2100400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/70, 0x46, &(0x7f0000000300)=""/149, &(0x7f0000000240)=[0x0, r1, r1, 0xffffffffffffffff, r1, r1, r0, r1, 0x0, 0x0], 0xa, {r2}}, 0x58) 2021/11/11 16:01:39 #0: triaging type=7 16:01:39 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) r1 = clone3(&(0x7f00000003c0)={0x5141100, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x56) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r2, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) clone3(&(0x7f0000000280)={0x2100400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/70, 0x46, &(0x7f0000000300)=""/149, &(0x7f0000000240)=[0x0, r1, r1, 0xffffffffffffffff, r1, r1, r0, r1, 0x0, 0x0], 0xa, {r2}}, 0x58) 2021/11/11 16:01:39 triaging input for call #3 mount$9p_tcp (new signal=2) iptable filter/2: resetting iptable mangle/2: resetting [556756ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76064 #0 [556775ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [556778ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=13019 #0 [556782ms] -> pivot_root(0x20000140, 0x20000180) #0 [556782ms] <- pivot_root=0xffffffffffffffff errno=16 cover=1396 #0 [556783ms] -> clone3(0x200008c0, 0x58) #0 [556783ms] <- clone3=0xffffffffffffffff errno=11 cover=4580 [ 1804.288351] 9pnet: p9_fd_create_tcp (309049): problem connecting socket to 127.0.0.1 #0 [556784ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x0, 0x200001c0) #0 [556787ms] <- mount$9p_tcp=0xffffffffffffffff errno=111 cover=10273 #0 [556790ms] -> clone3(0x200003c0, 0x56) #0 [556791ms] <- clone3=0xffffffffffffffff errno=22 cover=84 #0 [556792ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001300) #0 [556792ms] <- syz_open_procfs=0x3 errno=14 cover=4512 #0 [556794ms] -> readv(0x3, 0x20001500, 0x1) #0 [556801ms] <- readv=0xd7 errno=14 cover=262143 #0 [556817ms] -> clone3(0x20000280, 0x58) #0 [556839ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 2021/11/11 16:01:39 result hanged=false: 16:01:39 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) r1 = clone3(&(0x7f00000003c0)={0x5141100, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x56) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r2, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) clone3(&(0x7f0000000280)={0x2100400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/70, 0x46, &(0x7f0000000300)=""/149, &(0x7f0000000240)=[0x0, r1, r1, 0xffffffffffffffff, r1, r1, r0, r1, 0x0, 0x0], 0xa, {r2}}, 0x58) iptable filter/2: resetting iptable mangle/2: resetting [556899ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76067 #0 [556917ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [556923ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=13146 #0 [556926ms] -> pivot_root(0x20000140, 0x20000180) #0 [556926ms] <- pivot_root=0xffffffffffffffff errno=16 cover=1375 #0 [556927ms] -> clone3(0x200008c0, 0x58) #0 [556928ms] <- clone3=0xffffffffffffffff errno=11 cover=4550 #0 [556930ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x0, 0x200001c0) [ 1804.434223] 9pnet: p9_fd_create_tcp (309052): problem connecting socket to 127.0.0.1 #0 [556933ms] <- mount$9p_tcp=0xffffffffffffffff errno=111 cover=10354 #0 [556937ms] -> clone3(0x200003c0, 0x56) #0 [556938ms] <- clone3=0xffffffffffffffff errno=22 cover=84 #0 [556940ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001300) #0 [556941ms] <- syz_open_procfs=0x3 errno=14 cover=4517 #0 [556943ms] -> readv(0x3, 0x20001500, 0x1) #0 [556950ms] <- readv=0xd7 errno=14 cover=262143 #0 [556964ms] -> clone3(0x20000280, 0x58) #0 [556980ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 2021/11/11 16:01:39 result hanged=false: 16:01:39 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) r1 = clone3(&(0x7f00000003c0)={0x5141100, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x56) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r2, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) clone3(&(0x7f0000000280)={0x2100400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/70, 0x46, &(0x7f0000000300)=""/149, &(0x7f0000000240)=[0x0, r1, r1, 0xffffffffffffffff, r1, r1, r0, r1, 0x0, 0x0], 0xa, {r2}}, 0x58) iptable filter/2: resetting iptable mangle/2: resetting [557039ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76070 #0 [557062ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [557066ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=13120 #0 [557068ms] -> pivot_root(0x20000140, 0x20000180) #0 [557068ms] <- pivot_root=0xffffffffffffffff errno=16 cover=1388 #0 [557069ms] -> clone3(0x200008c0, 0x58) #0 [557070ms] <- clone3=0xffffffffffffffff errno=11 cover=4671 #0 [557071ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x0, 0x200001c0) [ 1804.575840] 9pnet: p9_fd_create_tcp (309055): problem connecting socket to 127.0.0.1 #0 [557074ms] <- mount$9p_tcp=0xffffffffffffffff errno=111 cover=10256 #0 [557078ms] -> clone3(0x200003c0, 0x56) #0 [557078ms] <- clone3=0xffffffffffffffff errno=22 cover=84 #0 [557078ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001300) #0 [557080ms] <- syz_open_procfs=0x3 errno=14 cover=4660 #0 [557082ms] -> readv(0x3, 0x20001500, 0x1) #0 [557090ms] <- readv=0xd7 errno=14 cover=262143 #0 [557103ms] -> clone3(0x20000280, 0x58) #0 [557126ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 2021/11/11 16:01:39 result hanged=false: 2021/11/11 16:01:39 added new input for call #3 mount$9p_tcp to corpus: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) r1 = clone3(&(0x7f00000003c0)={0x5141100, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x56) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r2, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) clone3(&(0x7f0000000280)={0x2100400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/70, 0x46, &(0x7f0000000300)=""/149, &(0x7f0000000240)=[0x0, r1, r1, 0xffffffffffffffff, r1, r1, r0, r1, 0x0, 0x0], 0xa, {r2}}, 0x58) 16:01:39 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) r1 = clone3(&(0x7f00000003c0)={0x5141100, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x56) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r2, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) clone3(&(0x7f0000000280)={0x2100400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/70, 0x46, &(0x7f0000000300)=""/149, &(0x7f0000000240)=[0x0, r1, r1, 0xffffffffffffffff, r1, r1, r0, r1, 0x0, 0x0], 0xa, {r2}}, 0x58) 2021/11/11 16:01:39 #0: triaging type=7 2021/11/11 16:01:39 triaging input for call #1 pivot_root (new signal=1) iptable filter/2: resetting iptable mangle/2: resetting [557195ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76073 #0 [557212ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [557215ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=13220 #0 [557217ms] -> pivot_root(0x20000140, 0x20000180) #0 [557217ms] <- pivot_root=0xffffffffffffffff errno=16 cover=1399 #0 [557217ms] -> clone3(0x200008c0, 0x58) #0 [557218ms] <- clone3=0xffffffffffffffff errno=11 cover=4494 #0 [557218ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x0, 0x200001c0) [ 1804.722632] 9pnet: p9_fd_create_tcp (309058): problem connecting socket to 127.0.0.1 #0 [557227ms] <- mount$9p_tcp=0xffffffffffffffff errno=111 cover=10357 #0 [557228ms] -> clone3(0x200003c0, 0x56) #0 [557228ms] <- clone3=0xffffffffffffffff errno=22 cover=84 #0 [557228ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001300) #0 [557229ms] <- syz_open_procfs=0x3 errno=14 cover=4403 #0 [557229ms] -> readv(0x3, 0x20001500, 0x1) #0 [557234ms] <- readv=0xd7 errno=14 cover=262143 #0 [557250ms] -> clone3(0x20000280, 0x58) 2021/11/11 16:01:39 poll: candidates=0 inputs=0 signal=0 #0 [557274ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 2021/11/11 16:01:39 result hanged=false: 16:01:39 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) r1 = clone3(&(0x7f00000003c0)={0x5141100, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x56) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r2, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) clone3(&(0x7f0000000280)={0x2100400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/70, 0x46, &(0x7f0000000300)=""/149, &(0x7f0000000240)=[0x0, r1, r1, 0xffffffffffffffff, r1, r1, r0, r1, 0x0, 0x0], 0xa, {r2}}, 0x58) iptable filter/2: resetting iptable mangle/2: resetting [557334ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76076 #0 [557351ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [557356ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=13106 #0 [557359ms] -> pivot_root(0x20000140, 0x20000180) #0 [557359ms] <- pivot_root=0xffffffffffffffff errno=16 cover=1441 #0 [557360ms] -> clone3(0x200008c0, 0x58) #0 [557361ms] <- clone3=0xffffffffffffffff errno=11 cover=4475 #0 [557361ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x0, 0x200001c0) [ 1804.866904] 9pnet: p9_fd_create_tcp (309061): problem connecting socket to 127.0.0.1 #0 [557370ms] <- mount$9p_tcp=0xffffffffffffffff errno=111 cover=10448 #0 [557371ms] -> clone3(0x200003c0, 0x56) #0 [557371ms] <- clone3=0xffffffffffffffff errno=22 cover=84 #0 [557373ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001300) #0 [557373ms] <- syz_open_procfs=0x3 errno=14 cover=4489 #0 [557374ms] -> readv(0x3, 0x20001500, 0x1) #0 [557382ms] <- readv=0xd7 errno=14 cover=262143 #0 [557396ms] -> clone3(0x20000280, 0x58) #0 [557418ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 16:01:40 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) r1 = clone3(&(0x7f00000003c0)={0x5141100, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x56) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r2, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) clone3(&(0x7f0000000280)={0x2100400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/70, 0x46, &(0x7f0000000300)=""/149, &(0x7f0000000240)=[0x0, r1, r1, 0xffffffffffffffff, r1, r1, r0, r1, 0x0, 0x0], 0xa, {r2}}, 0x58) 2021/11/11 16:01:40 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [557477ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76079 #0 [557496ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [557500ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=13296 #0 [557502ms] -> pivot_root(0x20000140, 0x20000180) #0 [557502ms] <- pivot_root=0xffffffffffffffff errno=16 cover=1408 #0 [557503ms] -> clone3(0x200008c0, 0x58) #0 [557504ms] <- clone3=0xffffffffffffffff errno=11 cover=4482 #0 [557504ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x0, 0x200001c0) [ 1805.009182] 9pnet: p9_fd_create_tcp (309064): problem connecting socket to 127.0.0.1 #0 [557508ms] <- mount$9p_tcp=0xffffffffffffffff errno=111 cover=10345 #0 [557515ms] -> clone3(0x200003c0, 0x56) #0 [557515ms] <- clone3=0xffffffffffffffff errno=22 cover=84 #0 [557515ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001300) #0 [557515ms] <- syz_open_procfs=0x3 errno=14 cover=4377 #0 [557516ms] -> readv(0x3, 0x20001500, 0x1) #0 [557522ms] <- readv=0xd7 errno=14 cover=262143 #0 [557536ms] -> clone3(0x20000280, 0x58) #0 [557558ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 2021/11/11 16:01:40 result hanged=false: 2021/11/11 16:01:40 added new input for call #1 pivot_root to corpus: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) r1 = clone3(&(0x7f00000003c0)={0x5141100, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x56) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r2, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) clone3(&(0x7f0000000280)={0x2100400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/70, 0x46, &(0x7f0000000300)=""/149, &(0x7f0000000240)=[0x0, r1, r1, 0xffffffffffffffff, r1, r1, r0, r1, 0x0, 0x0], 0xa, {r2}}, 0x58) 2021/11/11 16:01:40 #0: triaging type=7 2021/11/11 16:01:40 triaging input for call #0 syz_mount_image$vfat (new signal=2) 16:01:40 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) r1 = clone3(&(0x7f00000003c0)={0x5141100, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x56) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r2, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) clone3(&(0x7f0000000280)={0x2100400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/70, 0x46, &(0x7f0000000300)=""/149, &(0x7f0000000240)=[0x0, r1, r1, 0xffffffffffffffff, r1, r1, r0, r1, 0x0, 0x0], 0xa, {r2}}, 0x58) iptable filter/2: resetting iptable mangle/2: resetting [557624ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76082 #0 [557643ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [557647ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=13145 #0 [557649ms] -> pivot_root(0x20000140, 0x20000180) #0 [557649ms] <- pivot_root=0xffffffffffffffff errno=16 cover=1386 #0 [557652ms] -> clone3(0x200008c0, 0x58) #0 [557652ms] <- clone3=0xffffffffffffffff errno=11 cover=4594 [ 1805.158337] 9pnet: p9_fd_create_tcp (309067): problem connecting socket to 127.0.0.1 #0 [557654ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x0, 0x200001c0) #0 [557657ms] <- mount$9p_tcp=0xffffffffffffffff errno=111 cover=10416 #0 [557659ms] -> clone3(0x200003c0, 0x56) #0 [557659ms] <- clone3=0xffffffffffffffff errno=22 cover=84 #0 [557659ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001300) #0 [557659ms] <- syz_open_procfs=0x3 errno=14 cover=4432 #0 [557660ms] -> readv(0x3, 0x20001500, 0x1) #0 [557667ms] <- readv=0xd7 errno=14 cover=262143 #0 [557681ms] -> clone3(0x20000280, 0x58) #0 [557697ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 2021/11/11 16:01:40 result hanged=false: 16:01:40 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) r1 = clone3(&(0x7f00000003c0)={0x5141100, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x56) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r2, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) clone3(&(0x7f0000000280)={0x2100400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/70, 0x46, &(0x7f0000000300)=""/149, &(0x7f0000000240)=[0x0, r1, r1, 0xffffffffffffffff, r1, r1, r0, r1, 0x0, 0x0], 0xa, {r2}}, 0x58) iptable filter/2: resetting iptable mangle/2: resetting [557759ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76085 #0 [557780ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [557786ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=13410 #0 [557788ms] -> pivot_root(0x20000140, 0x20000180) #0 [557789ms] <- pivot_root=0xffffffffffffffff errno=16 cover=1443 #0 [557790ms] -> clone3(0x200008c0, 0x58) #0 [557791ms] <- clone3=0xffffffffffffffff errno=11 cover=4717 #0 [557791ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x0, 0x200001c0) [ 1805.296066] 9pnet: p9_fd_create_tcp (309070): problem connecting socket to 127.0.0.1 #0 [557795ms] <- mount$9p_tcp=0xffffffffffffffff errno=111 cover=10295 #0 [557796ms] -> clone3(0x200003c0, 0x56) #0 [557796ms] <- clone3=0xffffffffffffffff errno=22 cover=84 #0 [557796ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001300) #0 [557797ms] <- syz_open_procfs=0x3 errno=14 cover=4430 #0 [557797ms] -> readv(0x3, 0x20001500, 0x1) #0 [557806ms] <- readv=0xd7 errno=14 cover=262143 #0 [557820ms] -> clone3(0x20000280, 0x58) #0 [557841ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 16:01:40 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) r1 = clone3(&(0x7f00000003c0)={0x5141100, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x56) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r2, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) clone3(&(0x7f0000000280)={0x2100400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/70, 0x46, &(0x7f0000000300)=""/149, &(0x7f0000000240)=[0x0, r1, r1, 0xffffffffffffffff, r1, r1, r0, r1, 0x0, 0x0], 0xa, {r2}}, 0x58) 2021/11/11 16:01:40 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [557902ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76088 #0 [557920ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [557924ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=13480 #0 [557928ms] -> pivot_root(0x20000140, 0x20000180) #0 [557928ms] <- pivot_root=0xffffffffffffffff errno=16 cover=1399 #0 [557929ms] -> clone3(0x200008c0, 0x58) #0 [557930ms] <- clone3=0xffffffffffffffff errno=11 cover=4475 #0 [557931ms] -> mount$9p_tcp(0x20000000, 0x20000080, 0x200000c0, 0x0, 0x200001c0) [ 1805.436045] 9pnet: p9_fd_create_tcp (309073): problem connecting socket to 127.0.0.1 #0 [557935ms] <- mount$9p_tcp=0xffffffffffffffff errno=111 cover=10334 #0 [557936ms] -> clone3(0x200003c0, 0x56) #0 [557936ms] <- clone3=0xffffffffffffffff errno=22 cover=84 #0 [557937ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001300) #0 [557939ms] <- syz_open_procfs=0x3 errno=14 cover=4552 #0 [557940ms] -> readv(0x3, 0x20001500, 0x1) #0 [557946ms] <- readv=0xd7 errno=14 cover=262143 #0 [557959ms] -> clone3(0x20000280, 0x58) #0 [557980ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 2021/11/11 16:01:40 result hanged=false: 2021/11/11 16:01:40 added new input for call #0 syz_mount_image$vfat to corpus: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) r1 = clone3(&(0x7f00000003c0)={0x5141100, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x56) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r2, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) clone3(&(0x7f0000000280)={0x2100400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/70, 0x46, &(0x7f0000000300)=""/149, &(0x7f0000000240)=[0x0, r1, r1, 0xffffffffffffffff, r1, r1, r0, r1, 0x0, 0x0], 0xa, {r2}}, 0x58) 16:01:40 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x10000006, 0x4) iptable filter/2: resetting iptable mangle/2: resetting [558051ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76091 #0 [558068ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [558069ms] <- socket$inet6_udplite=0x3 errno=14 cover=1639 #0 [558069ms] -> dup(0x3) #0 [558069ms] <- dup=0x4 errno=14 cover=87 #0 [558069ms] -> setsockopt$inet6_udp_int(0x4, 0x11, 0xa, 0x20000040, 0x4) #0 [558069ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=110 enabling collider #0 [558070ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [558070ms] <- socket$inet6_udplite=0x3 errno=14 cover=1638 #0 [558070ms] -> dup(0x3) #0 [558070ms] <- dup=0x4 errno=14 cover=86 pthread_create failed (errno 11) 2021/11/11 16:01:40 result hanged=false: 16:01:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000700), 0x0, &(0x7f0000000780)='\r', 0x1, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001e00)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}]}, 0x28}}, 0x0) [558145ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76193 #0 [558167ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [558171ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=10588 #0 [558172ms] -> sendmsg$NLBL_CIPSOV4_C_LISTALL(0x4, 0x20000240, 0x0) #0 [558172ms] <- sendmsg$NLBL_CIPSOV4_C_LISTALL=0xffffffffffffffff errno=14 cover=510 #0 [558174ms] -> syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [558175ms] <- syz_genetlink_get_family_id$netlbl_cipso=0xffffffffffffffff errno=14 cover=3896 #0 [558175ms] -> add_key$user(0x20000700, 0x0, 0x20000780, 0x1, 0xffffffffffffffff) #0 [558175ms] <- add_key$user=0xffffffffffffffff errno=22 cover=1247 #0 [558175ms] -> keyctl$assume_authority(0x10, 0x0) #0 [558175ms] <- keyctl$assume_authority=0x0 errno=14 cover=363 #0 [558175ms] -> syz_genetlink_get_family_id$netlbl_cipso(0x200007c0, 0x4) syz_genetlink_get_family_id(NLBL_CIPSOv4, 4) #0 [558176ms] <- syz_genetlink_get_family_id$netlbl_cipso=0x15 errno=14 cover=3921 #0 [558176ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [558177ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5471 #0 [558177ms] -> sendmsg$NLBL_CIPSOV4_C_LIST(0x6, 0x20001ec0, 0x0) #0 [558177ms] <- sendmsg$NLBL_CIPSOV4_C_LIST=0x28 errno=14 cover=1717 enabling collider #0 [558178ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [558178ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5459 #0 [558179ms] -> sendmsg$NLBL_CIPSOV4_C_LISTALL(0x4, 0x20000240, 0x0) #0 [558179ms] <- sendmsg$NLBL_CIPSOV4_C_LISTALL=0xffffffffffffffff errno=14 cover=511 pthread_create failed (errno 11) 2021/11/11 16:01:40 result hanged=false: 2021/11/11 16:01:40 #0: triaging type=7 2021/11/11 16:01:40 triaging input for call #7 sendmsg$NLBL_CIPSOV4_C_LIST (new signal=2) 16:01:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000700), 0x0, &(0x7f0000000780)='\r', 0x1, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001e00)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}]}, 0x28}}, 0x0) [558255ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76295 #0 [558273ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [558274ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6252 #0 [558276ms] -> sendmsg$NLBL_CIPSOV4_C_LISTALL(0x4, 0x20000240, 0x0) #0 [558276ms] <- sendmsg$NLBL_CIPSOV4_C_LISTALL=0xffffffffffffffff errno=14 cover=510 #0 [558277ms] -> syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [558277ms] <- syz_genetlink_get_family_id$netlbl_cipso=0xffffffffffffffff errno=14 cover=3350 #0 [558279ms] -> add_key$user(0x20000700, 0x0, 0x20000780, 0x1, 0xffffffffffffffff) #0 [558279ms] <- add_key$user=0xffffffffffffffff errno=22 cover=1338 #0 [558280ms] -> keyctl$assume_authority(0x10, 0x0) #0 [558281ms] <- keyctl$assume_authority=0x0 errno=14 cover=422 #0 [558281ms] -> syz_genetlink_get_family_id$netlbl_cipso(0x200007c0, 0x4) syz_genetlink_get_family_id(NLBL_CIPSOv4, 4) #0 [558282ms] <- syz_genetlink_get_family_id$netlbl_cipso=0x15 errno=14 cover=3831 #0 [558283ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [558284ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5569 #0 [558286ms] -> sendmsg$NLBL_CIPSOV4_C_LIST(0x6, 0x20001ec0, 0x0) #0 [558286ms] <- sendmsg$NLBL_CIPSOV4_C_LIST=0x28 errno=14 cover=1694 16:01:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000700), 0x0, &(0x7f0000000780)='\r', 0x1, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001e00)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}]}, 0x28}}, 0x0) 2021/11/11 16:01:40 result hanged=false: [558324ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76297 #0 [558337ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [558338ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6368 #0 [558339ms] -> sendmsg$NLBL_CIPSOV4_C_LISTALL(0x4, 0x20000240, 0x0) #0 [558339ms] <- sendmsg$NLBL_CIPSOV4_C_LISTALL=0xffffffffffffffff errno=14 cover=510 #0 [558339ms] -> syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [558339ms] <- syz_genetlink_get_family_id$netlbl_cipso=0xffffffffffffffff errno=14 cover=3281 #0 [558339ms] -> add_key$user(0x20000700, 0x0, 0x20000780, 0x1, 0xffffffffffffffff) #0 [558340ms] <- add_key$user=0xffffffffffffffff errno=22 cover=1239 #0 [558340ms] -> keyctl$assume_authority(0x10, 0x0) #0 [558340ms] <- keyctl$assume_authority=0x0 errno=14 cover=330 #0 [558340ms] -> syz_genetlink_get_family_id$netlbl_cipso(0x200007c0, 0x4) syz_genetlink_get_family_id(NLBL_CIPSOv4, 4) #0 [558341ms] <- syz_genetlink_get_family_id$netlbl_cipso=0x15 errno=14 cover=10147 #0 [558342ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [558342ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5542 #0 [558343ms] -> sendmsg$NLBL_CIPSOV4_C_LIST(0x6, 0x20001ec0, 0x0) #0 [558343ms] <- sendmsg$NLBL_CIPSOV4_C_LIST=0x28 errno=14 cover=1696 2021/11/11 16:01:40 result hanged=false: 16:01:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000700), 0x0, &(0x7f0000000780)='\r', 0x1, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001e00)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}]}, 0x28}}, 0x0) [558374ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76299 #0 [558391ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [558392ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6326 #0 [558393ms] -> sendmsg$NLBL_CIPSOV4_C_LISTALL(0x4, 0x20000240, 0x0) #0 [558393ms] <- sendmsg$NLBL_CIPSOV4_C_LISTALL=0xffffffffffffffff errno=14 cover=510 #0 [558395ms] -> syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [558395ms] <- syz_genetlink_get_family_id$netlbl_cipso=0xffffffffffffffff errno=14 cover=3214 #0 [558396ms] -> add_key$user(0x20000700, 0x0, 0x20000780, 0x1, 0xffffffffffffffff) #0 [558397ms] <- add_key$user=0xffffffffffffffff errno=22 cover=1290 #0 [558398ms] -> keyctl$assume_authority(0x10, 0x0) #0 [558398ms] <- keyctl$assume_authority=0x0 errno=14 cover=319 #0 [558399ms] -> syz_genetlink_get_family_id$netlbl_cipso(0x200007c0, 0x4) syz_genetlink_get_family_id(NLBL_CIPSOv4, 4) #0 [558399ms] <- syz_genetlink_get_family_id$netlbl_cipso=0x15 errno=14 cover=3910 #0 [558400ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [558402ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5574 #0 [558403ms] -> sendmsg$NLBL_CIPSOV4_C_LIST(0x6, 0x20001ec0, 0x0) #0 [558404ms] <- sendmsg$NLBL_CIPSOV4_C_LIST=0x28 errno=14 cover=1762 2021/11/11 16:01:40 result hanged=false: 2021/11/11 16:01:40 added new input for call #7 sendmsg$NLBL_CIPSOV4_C_LIST to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000700), 0x0, &(0x7f0000000780)='\r', 0x1, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001e00)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}]}, 0x28}}, 0x0) 16:01:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000700), 0x0, &(0x7f0000000780)='\r', 0x1, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001e00)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}]}, 0x28}}, 0x0) 2021/11/11 16:01:40 #0: triaging type=7 2021/11/11 16:01:40 triaging input for call #5 syz_genetlink_get_family_id$netlbl_cipso (new signal=2) [558444ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76301 #0 [558461ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [558461ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6288 #0 [558463ms] -> sendmsg$NLBL_CIPSOV4_C_LISTALL(0x4, 0x20000240, 0x0) #0 [558463ms] <- sendmsg$NLBL_CIPSOV4_C_LISTALL=0xffffffffffffffff errno=14 cover=510 #0 [558463ms] -> syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [558464ms] <- syz_genetlink_get_family_id$netlbl_cipso=0xffffffffffffffff errno=14 cover=3898 #0 [558465ms] -> add_key$user(0x20000700, 0x0, 0x20000780, 0x1, 0xffffffffffffffff) #0 [558465ms] <- add_key$user=0xffffffffffffffff errno=22 cover=1433 #0 [558466ms] -> keyctl$assume_authority(0x10, 0x0) #0 [558466ms] <- keyctl$assume_authority=0x0 errno=14 cover=352 #0 [558466ms] -> syz_genetlink_get_family_id$netlbl_cipso(0x200007c0, 0x4) syz_genetlink_get_family_id(NLBL_CIPSOv4, 4) #0 [558467ms] <- syz_genetlink_get_family_id$netlbl_cipso=0x15 errno=14 cover=3898 #0 [558469ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [558470ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5610 #0 [558471ms] -> sendmsg$NLBL_CIPSOV4_C_LIST(0x6, 0x20001ec0, 0x0) #0 [558471ms] <- sendmsg$NLBL_CIPSOV4_C_LIST=0x28 errno=14 cover=1707 16:01:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000700), 0x0, &(0x7f0000000780)='\r', 0x1, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001e00)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}]}, 0x28}}, 0x0) 2021/11/11 16:01:41 result hanged=false: [558508ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76303 #0 [558526ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [558526ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6450 #0 [558528ms] -> sendmsg$NLBL_CIPSOV4_C_LISTALL(0x4, 0x20000240, 0x0) #0 [558528ms] <- sendmsg$NLBL_CIPSOV4_C_LISTALL=0xffffffffffffffff errno=14 cover=510 #0 [558529ms] -> syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [558529ms] <- syz_genetlink_get_family_id$netlbl_cipso=0xffffffffffffffff errno=14 cover=3301 #0 [558530ms] -> add_key$user(0x20000700, 0x0, 0x20000780, 0x1, 0xffffffffffffffff) #0 [558530ms] <- add_key$user=0xffffffffffffffff errno=22 cover=1372 #0 [558530ms] -> keyctl$assume_authority(0x10, 0x0) #0 [558530ms] <- keyctl$assume_authority=0x0 errno=14 cover=352 #0 [558530ms] -> syz_genetlink_get_family_id$netlbl_cipso(0x200007c0, 0x4) syz_genetlink_get_family_id(NLBL_CIPSOv4, 4) #0 [558531ms] <- syz_genetlink_get_family_id$netlbl_cipso=0x15 errno=14 cover=3849 #0 [558532ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [558532ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5521 #0 [558533ms] -> sendmsg$NLBL_CIPSOV4_C_LIST(0x6, 0x20001ec0, 0x0) #0 [558534ms] <- sendmsg$NLBL_CIPSOV4_C_LIST=0x28 errno=14 cover=1698 16:01:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000700), 0x0, &(0x7f0000000780)='\r', 0x1, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001e00)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}]}, 0x28}}, 0x0) 2021/11/11 16:01:41 result hanged=false: [558571ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76305 #0 [558585ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [558587ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6288 #0 [558589ms] -> sendmsg$NLBL_CIPSOV4_C_LISTALL(0x4, 0x20000240, 0x0) #0 [558589ms] <- sendmsg$NLBL_CIPSOV4_C_LISTALL=0xffffffffffffffff errno=14 cover=510 #0 [558591ms] -> syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [558591ms] <- syz_genetlink_get_family_id$netlbl_cipso=0xffffffffffffffff errno=14 cover=3407 #0 [558592ms] -> add_key$user(0x20000700, 0x0, 0x20000780, 0x1, 0xffffffffffffffff) #0 [558593ms] <- add_key$user=0xffffffffffffffff errno=22 cover=1453 #0 [558597ms] -> keyctl$assume_authority(0x10, 0x0) #0 [558597ms] <- keyctl$assume_authority=0x0 errno=14 cover=406 #0 [558597ms] -> syz_genetlink_get_family_id$netlbl_cipso(0x200007c0, 0x4) syz_genetlink_get_family_id(NLBL_CIPSOv4, 4) #0 [558598ms] <- syz_genetlink_get_family_id$netlbl_cipso=0x15 errno=14 cover=3853 #0 [558598ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [558599ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5547 #0 [558599ms] -> sendmsg$NLBL_CIPSOV4_C_LIST(0x6, 0x20001ec0, 0x0) #0 [558600ms] <- sendmsg$NLBL_CIPSOV4_C_LIST=0x28 errno=14 cover=1782 2021/11/11 16:01:41 result hanged=false: 2021/11/11 16:01:41 added new input for call #5 syz_genetlink_get_family_id$netlbl_cipso to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000700), 0x0, &(0x7f0000000780)='\r', 0x1, 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001e00)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}]}, 0x28}}, 0x0) 16:01:41 executing program 0: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f0000001340)={[{@fat=@umask}]}) [558639ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76307 #0 [558657ms] -> syz_mount_image$msdos(0x20000080, 0x200000c0, 0x0, 0x0, 0x200012c0, 0x0, 0x20001340) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file0' fs='msdos' flags=0 opts='umask=00000000000000000000000,' [ 1806.173191] FAT-fs (loop0): bogus number of reserved sectors [ 1806.174501] FAT-fs (loop0): Can't find a valid FAT filesystem syz_mount_image > mount error: 22 #0 [558681ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=22 cover=28051 enabling collider #0 [558683ms] -> syz_mount_image$msdos(0x20000080, 0x200000c0, 0x0, 0x0, 0x200012c0, 0x0, 0x20001340) #0 [558684ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=16 cover=4376 2021/11/11 16:01:41 result hanged=false: 2021/11/11 16:01:41 #0: triaging type=7 2021/11/11 16:01:41 triaging input for call #0 syz_mount_image$msdos (new signal=4) 16:01:41 executing program 0: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f0000001340)={[{@fat=@umask}]}) [558721ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76309 #0 [558735ms] -> syz_mount_image$msdos(0x20000080, 0x200000c0, 0x0, 0x0, 0x200012c0, 0x0, 0x20001340) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file0' fs='msdos' flags=0 opts='umask=00000000000000000000000,' [ 1806.252580] FAT-fs (loop0): bogus number of reserved sectors [ 1806.253545] FAT-fs (loop0): Can't find a valid FAT filesystem syz_mount_image > mount error: 22 #0 [558754ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=22 cover=27976 16:01:41 executing program 0: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f0000001340)={[{@fat=@umask}]}) 2021/11/11 16:01:41 result hanged=false: [558795ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76311 #0 [558812ms] -> syz_mount_image$msdos(0x20000080, 0x200000c0, 0x0, 0x0, 0x200012c0, 0x0, 0x20001340) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file0' fs='msdos' flags=0 opts='umask=00000000000000000000000,' [ 1806.325168] FAT-fs (loop0): bogus number of reserved sectors [ 1806.326145] FAT-fs (loop0): Can't find a valid FAT filesystem syz_mount_image > mount error: 22 #0 [558828ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=22 cover=30213 2021/11/11 16:01:41 result hanged=false: 16:01:41 executing program 0: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f0000001340)={[{@fat=@umask}]}) [558880ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76313 #0 [558900ms] -> syz_mount_image$msdos(0x20000080, 0x200000c0, 0x0, 0x0, 0x200012c0, 0x0, 0x20001340) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file0' fs='msdos' flags=0 opts='umask=00000000000000000000000,' [ 1806.418589] FAT-fs (loop0): bogus number of reserved sectors [ 1806.419886] FAT-fs (loop0): Can't find a valid FAT filesystem syz_mount_image > mount error: 22 #0 [558926ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=22 cover=34746 2021/11/11 16:01:41 result hanged=false: 2021/11/11 16:01:41 added new input for call #0 syz_mount_image$msdos to corpus: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f0000001340)={[{@fat=@umask}]}) 16:01:41 executing program 0: socket(0x0, 0x0, 0x0) [558995ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76315 #0 [559012ms] -> socket(0x0, 0x0, 0x0) #0 [559022ms] <- socket=0xffffffffffffffff errno=97 cover=1509 enabling collider #0 [559023ms] -> socket(0x0, 0x0, 0x0) #0 [559038ms] <- socket=0xffffffffffffffff errno=97 cover=1673 16:01:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5608, 0x2) 2021/11/11 16:01:41 result hanged=false: [559081ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76317 #0 [559100ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [559101ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1710 #0 [559102ms] -> ioctl$TCXONC(0x3, 0x5608, 0x2) #0 [559102ms] <- ioctl$TCXONC=0xffffffffffffffff errno=16 cover=260 enabling collider #0 [559105ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [559105ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1698 #0 [559106ms] -> ioctl$TCXONC(0x3, 0x5608, 0x2) 16:01:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5608, 0x2) 2021/11/11 16:01:41 result hanged=false: 2021/11/11 16:01:41 #0: triaging type=7 2021/11/11 16:01:41 triaging input for call #1 ioctl$TCXONC (new signal=9) [559144ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76319 #0 [559168ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [559168ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1660 #0 [559169ms] -> ioctl$TCXONC(0x3, 0x5608, 0x2) #0 [559169ms] <- ioctl$TCXONC=0xffffffffffffffff errno=16 cover=260 16:01:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5608, 0x2) 2021/11/11 16:01:41 result hanged=false: [559210ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76321 #0 [559230ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [559231ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1694 #0 [559232ms] -> ioctl$TCXONC(0x3, 0x5608, 0x2) #0 [559232ms] <- ioctl$TCXONC=0xffffffffffffffff errno=16 cover=260 2021/11/11 16:01:41 result hanged=false: 16:01:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5608, 0x2) [559274ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76323 #0 [559291ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [559292ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1715 #0 [559293ms] -> ioctl$TCXONC(0x3, 0x5608, 0x2) #0 [559293ms] <- ioctl$TCXONC=0xffffffffffffffff errno=16 cover=260 2021/11/11 16:01:41 result hanged=false: 2021/11/11 16:01:41 added new input for call #1 ioctl$TCXONC to corpus: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5608, 0x2) 16:01:41 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) lseek(r0, 0x0, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) [559335ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76325 #0 [559353ms] -> creat(0x20000040, 0x0) #0 [559357ms] <- creat=0x3 errno=14 cover=7348 #0 [559358ms] -> ioctl$FS_IOC_RESVSP(0x3, 0x40305828, 0x20000080) #0 [559419ms] <- ioctl$FS_IOC_RESVSP=0xffffffffffffffff errno=28 cover=262143 #0 [559421ms] -> lseek(0x3, 0x0, 0x4) #0 [559426ms] <- lseek=0xffffffffffffffff errno=6 cover=76 #0 [559427ms] -> creat(0x20000000, 0x0) #0 [559436ms] <- creat=0x4 errno=14 cover=130819 enabling collider #0 [559437ms] -> creat(0x20000040, 0x0) #0 [559439ms] <- creat=0x3 errno=14 cover=5515 #0 [559440ms] -> ioctl$FS_IOC_RESVSP(0x3, 0x40305828, 0x20000080) pthread_create failed (errno 11) 2021/11/11 16:01:42 result hanged=false: 2021/11/11 16:01:42 #0: triaging type=7 16:01:42 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) lseek(r0, 0x0, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) 2021/11/11 16:01:42 triaging input for call #3 creat (new signal=3) [559550ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76427 #0 [559574ms] -> creat(0x20000040, 0x0) #0 [559579ms] <- creat=0x3 errno=14 cover=7444 #0 [559580ms] -> ioctl$FS_IOC_RESVSP(0x3, 0x40305828, 0x20000080) #0 [559633ms] <- ioctl$FS_IOC_RESVSP=0xffffffffffffffff errno=28 cover=262143 #0 [559649ms] -> lseek(0x3, 0x0, 0x4) #0 [559649ms] <- lseek=0xffffffffffffffff errno=6 cover=76 #0 [559649ms] -> creat(0x20000000, 0x0) #0 [559659ms] <- creat=0x4 errno=14 cover=130808 2021/11/11 16:01:42 result hanged=false: 16:01:42 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) lseek(r0, 0x0, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) [559715ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76429 #0 [559735ms] -> creat(0x20000040, 0x0) #0 [559739ms] <- creat=0x3 errno=14 cover=7453 #0 [559740ms] -> ioctl$FS_IOC_RESVSP(0x3, 0x40305828, 0x20000080) #0 [559794ms] <- ioctl$FS_IOC_RESVSP=0xffffffffffffffff errno=28 cover=262143 #0 [559810ms] -> lseek(0x3, 0x0, 0x4) #0 [559810ms] <- lseek=0xffffffffffffffff errno=6 cover=76 #0 [559811ms] -> creat(0x20000000, 0x0) #0 [559821ms] <- creat=0x4 errno=14 cover=132745 2021/11/11 16:01:42 result hanged=false: 16:01:42 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) lseek(r0, 0x0, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) [559870ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76431 #0 [559888ms] -> creat(0x20000040, 0x0) #0 [559894ms] <- creat=0x3 errno=14 cover=7427 #0 [559896ms] -> ioctl$FS_IOC_RESVSP(0x3, 0x40305828, 0x20000080) #0 [559951ms] <- ioctl$FS_IOC_RESVSP=0xffffffffffffffff errno=28 cover=262143 #0 [559967ms] -> lseek(0x3, 0x0, 0x4) #0 [559967ms] <- lseek=0xffffffffffffffff errno=6 cover=76 #0 [559967ms] -> creat(0x20000000, 0x0) #0 [559978ms] <- creat=0x4 errno=14 cover=132170 2021/11/11 16:01:42 result hanged=false: 2021/11/11 16:01:42 added new input for call #3 creat to corpus: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) lseek(r0, 0x0, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) 16:01:42 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) lseek(r0, 0x0, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) 2021/11/11 16:01:42 #0: triaging type=7 2021/11/11 16:01:42 triaging input for call #1 ioctl$FS_IOC_RESVSP (new signal=4) [560032ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76433 #0 [560049ms] -> creat(0x20000040, 0x0) #0 [560053ms] <- creat=0x3 errno=14 cover=7452 #0 [560055ms] -> ioctl$FS_IOC_RESVSP(0x3, 0x40305828, 0x20000080) #0 [560111ms] <- ioctl$FS_IOC_RESVSP=0xffffffffffffffff errno=28 cover=262143 #0 [560127ms] -> lseek(0x3, 0x0, 0x4) #0 [560128ms] <- lseek=0xffffffffffffffff errno=6 cover=76 #0 [560128ms] -> creat(0x20000000, 0x0) #0 [560138ms] <- creat=0x4 errno=14 cover=131043 16:01:42 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) lseek(r0, 0x0, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) 2021/11/11 16:01:42 result hanged=false: [560193ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76435 #0 [560213ms] -> creat(0x20000040, 0x0) #0 [560215ms] <- creat=0x3 errno=14 cover=7343 #0 [560216ms] -> ioctl$FS_IOC_RESVSP(0x3, 0x40305828, 0x20000080) #0 [560270ms] <- ioctl$FS_IOC_RESVSP=0xffffffffffffffff errno=28 cover=262143 #0 [560286ms] -> lseek(0x3, 0x0, 0x4) #0 [560286ms] <- lseek=0xffffffffffffffff errno=6 cover=76 #0 [560286ms] -> creat(0x20000000, 0x0) #0 [560296ms] <- creat=0x4 errno=14 cover=132081 2021/11/11 16:01:42 result hanged=false: 16:01:42 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) lseek(r0, 0x0, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) [560346ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76437 #0 [560363ms] -> creat(0x20000040, 0x0) #0 [560368ms] <- creat=0x3 errno=14 cover=7431 #0 [560370ms] -> ioctl$FS_IOC_RESVSP(0x3, 0x40305828, 0x20000080) #0 [560426ms] <- ioctl$FS_IOC_RESVSP=0xffffffffffffffff errno=28 cover=262143 #0 [560443ms] -> lseek(0x3, 0x0, 0x4) #0 [560443ms] <- lseek=0xffffffffffffffff errno=6 cover=76 #0 [560444ms] -> creat(0x20000000, 0x0) #0 [560454ms] <- creat=0x4 errno=14 cover=132199 2021/11/11 16:01:43 result hanged=false: 2021/11/11 16:01:43 added new input for call #1 ioctl$FS_IOC_RESVSP to corpus: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) lseek(r0, 0x0, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) 16:01:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = inotify_init() splice(r0, 0x0, r1, 0x0, 0x5, 0x0) [560510ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76439 #0 [560527ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [560528ms] <- socket$inet6_tcp=0x3 errno=14 cover=1745 #0 [560528ms] -> inotify_init() #0 [560528ms] <- inotify_init=0x4 errno=14 cover=582 #0 [560528ms] -> splice(0x3, 0x0, 0x4, 0x0, 0x5, 0x0) #0 [560528ms] <- splice=0xffffffffffffffff errno=9 cover=92 enabling collider #0 [560529ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [560529ms] <- socket$inet6_tcp=0x3 errno=14 cover=1744 #0 [560529ms] -> inotify_init() #0 [560530ms] <- inotify_init=0x4 errno=14 cover=631 pthread_create failed (errno 11) 16:01:43 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000001180), &(0x7f0000001300)={'fscrypt:', @desc2}, &(0x7f0000001340)={0x0, "9efd48cf39d5722d2525343efebd8efe723aed05f0ffafa2734185fda322e061c85fc337d6a171a22ac50d831b4ecc5b3e0ece1c147db224728e0107261333ce"}, 0x48, r0) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='syz', r1) 2021/11/11 16:01:43 result hanged=false: 2021/11/11 16:01:43 poll: candidates=8 inputs=0 signal=0 [560604ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76541 #0 [560619ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [560624ms] <- perf_event_open=0x3 errno=14 cover=14239 #0 [560625ms] -> add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) #0 [560625ms] <- add_key$keyring=0xffffffffffffffff errno=14 cover=505 #0 [560626ms] -> add_key(0x0, 0x0, 0x0, 0x0, 0x0) #0 [560627ms] <- add_key=0xffffffffffffffff errno=14 cover=506 #0 [560631ms] -> add_key$keyring(0x20000240, 0x20000080, 0x0, 0x0, 0xfffffffffffffffe) #0 [560633ms] <- add_key$keyring=0x8d8678a errno=14 cover=7038 #0 [560635ms] -> add_key$fscrypt_v1(0x20001180, 0x20001300, 0x20001340, 0x48, 0x8d8678a) #0 [560637ms] <- add_key$fscrypt_v1=0x37bef253 errno=14 cover=6807 #0 [560640ms] -> request_key(0x20000000, 0x20000180, 0x200001c0, 0x37bef253) #0 [560642ms] <- request_key=0xffffffffffffffff errno=20 cover=10068 enabling collider #0 [560656ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [560657ms] <- perf_event_open=0x3 errno=14 cover=8768 #0 [560657ms] -> add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) #0 [560657ms] <- add_key$keyring=0xffffffffffffffff errno=14 cover=506 pthread_create failed (errno 11) 2021/11/11 16:01:43 result hanged=false: 16:01:43 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x80000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000100)=0x966c268054e78dad, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000140)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x3, 0x8001, 0x20, @remote, @private0, 0x8, 0x1, 0x80000001, 0x4}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000380)={@dev={0xfe, 0x80, '\x00', 0x11}, r2}, 0x14) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0x1c, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@private2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0xe3, 0x4e22, 0x81, 0x2, 0xa0, 0x0, 0x19, r2, r4}, {0x0, 0x8, 0x7fff, 0x4b, 0x8, 0x9a, 0xfffffffffffffffd, 0x4}, {0x800, 0xffff, 0xfffffffffffffffb, 0x100000000}, 0x7d1, 0x6e6bb9, 0x0, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d4, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x4, 0x0, 0x0, 0x3ff, 0x6, 0x6}}, 0xe8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000680)={{0x2, 0x4e20, @private=0xa010100}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x20, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team_slave_0\x00'}) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000700)={{0x2, 0x4e21, @broadcast}, {0x1, @random="69911858fde1"}, 0x4c, {0x2, 0x4e20, @rand_addr=0x64010102}, 'macvlan0\x00'}) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000780)={{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}, 0x7}, {0xa, 0x4e24, 0x400, @remote, 0x1}, 0x6, [0x9, 0x7, 0x6, 0x8e, 0x9, 0xfde5, 0x200, 0xbce0]}, 0x5c) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000800)={0x5, {{0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}}, 0x88) r6 = accept4$inet6(r3, &(0x7f00000008c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000900)=0x1c, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000940)={0x1000, {{0xa, 0x4e23, 0x2b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff8}}}, 0x88) [560746ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76643 #0 [560765ms] -> accept4$inet(0xffffffffffffffff, 0x20000000, 0x20000040, 0x80000) #0 [560765ms] <- accept4$inet=0xffffffffffffffff errno=9 cover=46 #0 [560765ms] -> setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x20000080, 0x48) #0 [560765ms] <- setsockopt$IPT_SO_SET_ADD_COUNTERS=0xffffffffffffffff errno=9 cover=50 #0 [560765ms] -> setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x20000100, 0x4) #0 [560765ms] <- setsockopt$inet6_mtu=0xffffffffffffffff errno=9 cover=50 #0 [560765ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [560766ms] <- socket$inet_udp=0x3 errno=14 cover=1684 #0 [560766ms] -> setsockopt$IPT_SO_SET_ADD_COUNTERS(0x3, 0x0, 0x41, 0x20000140, 0x58) #0 [560766ms] <- setsockopt$IPT_SO_SET_ADD_COUNTERS=0xffffffffffffffff errno=2 cover=1321 #0 [560766ms] -> getsockopt$inet_udp_int(0x3, 0x11, 0xa, 0x200001c0, 0x20000200) #0 [560766ms] <- getsockopt$inet_udp_int=0x0 errno=14 cover=118 #0 [560766ms] -> getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x20000240, 0x20000280) #0 [560767ms] <- getsockopt$inet_mtu=0xffffffffffffffff errno=9 cover=49 #0 [560767ms] -> ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x20000340) #0 [560767ms] <- ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL=0xffffffffffffffff errno=9 cover=45 #0 [560767ms] -> setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x20000380, 0x14) #0 [560767ms] <- setsockopt$inet6_IPV6_PKTINFO=0xffffffffffffffff errno=9 cover=50 #0 [560767ms] -> accept4$inet6(0xffffffffffffffff, 0x200003c0, 0x20000400, 0x800) #0 [560767ms] <- accept4$inet6=0xffffffffffffffff errno=9 cover=46 #0 [560767ms] -> getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x20000440, 0x20000540) #0 [560767ms] <- getsockopt$inet6_IPV6_XFRM_POLICY=0xffffffffffffffff errno=9 cover=49 #0 [560767ms] -> setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x20000580, 0xe8) #0 [560768ms] <- setsockopt$inet6_IPV6_XFRM_POLICY=0xffffffffffffffff errno=9 cover=50 #0 [560768ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [560768ms] <- socket$inet_udplite=0x4 errno=14 cover=1661 #0 [560768ms] -> ioctl$sock_inet_SIOCGARP(0x4, 0x8954, 0x20000680) #0 [560768ms] <- ioctl$sock_inet_SIOCGARP=0xffffffffffffffff errno=22 cover=138 #0 [560768ms] -> ioctl$sock_inet_SIOCGARP(0x4, 0x8954, 0x20000700) #0 [560769ms] <- ioctl$sock_inet_SIOCGARP=0xffffffffffffffff errno=19 cover=199 #0 [560769ms] -> setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x20000780, 0x5c) #0 [560769ms] <- setsockopt$inet6_MRT6_DEL_MFC=0xffffffffffffffff errno=9 cover=50 #0 [560769ms] -> setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x20000800, 0x88) #0 [560769ms] <- setsockopt$inet6_MCAST_JOIN_GROUP=0xffffffffffffffff errno=9 cover=50 #0 [560769ms] -> accept4$inet6(0xffffffffffffffff, 0x200008c0, 0x20000900, 0x0) #0 [560769ms] <- accept4$inet6=0xffffffffffffffff errno=9 cover=46 #0 [560769ms] -> setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x20000940, 0x88) #0 [560770ms] <- setsockopt$inet6_MCAST_JOIN_GROUP=0xffffffffffffffff errno=9 cover=50 enabling collider #0 [560770ms] -> accept4$inet(0xffffffffffffffff, 0x20000000, 0x20000040, 0x80000) #0 [560770ms] <- accept4$inet=0xffffffffffffffff errno=9 cover=46 #0 [560771ms] -> setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x20000080, 0x48) #0 [560771ms] <- setsockopt$IPT_SO_SET_ADD_COUNTERS=0xffffffffffffffff errno=9 cover=50 pthread_create failed (errno 11) 2021/11/11 16:01:43 result hanged=false: 16:01:43 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x80000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000100)=0x966c268054e78dad, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000140)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x3, 0x8001, 0x20, @remote, @private0, 0x8, 0x1, 0x80000001, 0x4}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000380)={@dev={0xfe, 0x80, '\x00', 0x11}, r2}, 0x14) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0x1c, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@private2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0xe3, 0x4e22, 0x81, 0x2, 0xa0, 0x0, 0x19, r2, r4}, {0x0, 0x8, 0x7fff, 0x4b, 0x8, 0x9a, 0xfffffffffffffffd, 0x4}, {0x800, 0xffff, 0xfffffffffffffffb, 0x100000000}, 0x7d1, 0x6e6bb9, 0x0, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d4, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x4, 0x0, 0x0, 0x3ff, 0x6, 0x6}}, 0xe8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000680)={{0x2, 0x4e20, @private=0xa010100}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x20, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team_slave_0\x00'}) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000700)={{0x2, 0x4e21, @broadcast}, {0x1, @random="69911858fde1"}, 0x4c, {0x2, 0x4e20, @rand_addr=0x64010102}, 'macvlan0\x00'}) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000780)={{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}, 0x7}, {0xa, 0x4e24, 0x400, @remote, 0x1}, 0x6, [0x9, 0x7, 0x6, 0x8e, 0x9, 0xfde5, 0x200, 0xbce0]}, 0x5c) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000800)={0x5, {{0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}}, 0x88) r6 = accept4$inet6(r3, &(0x7f00000008c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000900)=0x1c, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000940)={0x1000, {{0xa, 0x4e23, 0x2b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff8}}}, 0x88) 2021/11/11 16:01:43 #0: triaging type=7 2021/11/11 16:01:43 triaging input for call #14 ioctl$sock_inet_SIOCGARP (new signal=1) [560844ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76745 #0 [560862ms] -> accept4$inet(0xffffffffffffffff, 0x20000000, 0x20000040, 0x80000) #0 [560862ms] <- accept4$inet=0xffffffffffffffff errno=9 cover=46 #0 [560864ms] -> setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x20000080, 0x48) #0 [560864ms] <- setsockopt$IPT_SO_SET_ADD_COUNTERS=0xffffffffffffffff errno=9 cover=50 #0 [560865ms] -> setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x20000100, 0x4) #0 [560866ms] <- setsockopt$inet6_mtu=0xffffffffffffffff errno=9 cover=50 #0 [560867ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [560867ms] <- socket$inet_udp=0x3 errno=14 cover=1695 #0 [560868ms] -> setsockopt$IPT_SO_SET_ADD_COUNTERS(0x3, 0x0, 0x41, 0x20000140, 0x58) #0 [560868ms] <- setsockopt$IPT_SO_SET_ADD_COUNTERS=0xffffffffffffffff errno=2 cover=1178 #0 [560869ms] -> getsockopt$inet_udp_int(0x3, 0x11, 0xa, 0x200001c0, 0x20000200) #0 [560870ms] <- getsockopt$inet_udp_int=0x0 errno=14 cover=118 #0 [560871ms] -> getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x20000240, 0x20000280) #0 [560871ms] <- getsockopt$inet_mtu=0xffffffffffffffff errno=9 cover=49 #0 [560872ms] -> ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x20000340) #0 [560872ms] <- ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL=0xffffffffffffffff errno=9 cover=45 #0 [560872ms] -> setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x20000380, 0x14) #0 [560873ms] <- setsockopt$inet6_IPV6_PKTINFO=0xffffffffffffffff errno=9 cover=50 #0 [560874ms] -> accept4$inet6(0xffffffffffffffff, 0x200003c0, 0x20000400, 0x800) #0 [560874ms] <- accept4$inet6=0xffffffffffffffff errno=9 cover=46 #0 [560874ms] -> getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x20000440, 0x20000540) #0 [560874ms] <- getsockopt$inet6_IPV6_XFRM_POLICY=0xffffffffffffffff errno=9 cover=49 #0 [560874ms] -> setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x20000580, 0xe8) #0 [560874ms] <- setsockopt$inet6_IPV6_XFRM_POLICY=0xffffffffffffffff errno=9 cover=50 #0 [560875ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [560876ms] <- socket$inet_udplite=0x4 errno=14 cover=1762 #0 [560881ms] -> ioctl$sock_inet_SIOCGARP(0x4, 0x8954, 0x20000680) #0 [560881ms] <- ioctl$sock_inet_SIOCGARP=0xffffffffffffffff errno=22 cover=138 #0 [560881ms] -> ioctl$sock_inet_SIOCGARP(0x4, 0x8954, 0x20000700) #0 [560881ms] <- ioctl$sock_inet_SIOCGARP=0xffffffffffffffff errno=19 cover=160 #0 [560882ms] -> setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x20000780, 0x5c) #0 [560882ms] <- setsockopt$inet6_MRT6_DEL_MFC=0xffffffffffffffff errno=9 cover=50 #0 [560884ms] -> setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x20000800, 0x88) #0 [560885ms] <- setsockopt$inet6_MCAST_JOIN_GROUP=0xffffffffffffffff errno=9 cover=50 #0 [560885ms] -> accept4$inet6(0xffffffffffffffff, 0x200008c0, 0x20000900, 0x0) #0 [560885ms] <- accept4$inet6=0xffffffffffffffff errno=9 cover=46 #0 [560885ms] -> setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x20000940, 0x88) #0 [560885ms] <- setsockopt$inet6_MCAST_JOIN_GROUP=0xffffffffffffffff errno=9 cover=50 16:01:43 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x80000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000100)=0x966c268054e78dad, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000140)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x3, 0x8001, 0x20, @remote, @private0, 0x8, 0x1, 0x80000001, 0x4}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000380)={@dev={0xfe, 0x80, '\x00', 0x11}, r2}, 0x14) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0x1c, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@private2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0xe3, 0x4e22, 0x81, 0x2, 0xa0, 0x0, 0x19, r2, r4}, {0x0, 0x8, 0x7fff, 0x4b, 0x8, 0x9a, 0xfffffffffffffffd, 0x4}, {0x800, 0xffff, 0xfffffffffffffffb, 0x100000000}, 0x7d1, 0x6e6bb9, 0x0, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d4, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x4, 0x0, 0x0, 0x3ff, 0x6, 0x6}}, 0xe8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000680)={{0x2, 0x4e20, @private=0xa010100}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x20, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team_slave_0\x00'}) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000700)={{0x2, 0x4e21, @broadcast}, {0x1, @random="69911858fde1"}, 0x4c, {0x2, 0x4e20, @rand_addr=0x64010102}, 'macvlan0\x00'}) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000780)={{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}, 0x7}, {0xa, 0x4e24, 0x400, @remote, 0x1}, 0x6, [0x9, 0x7, 0x6, 0x8e, 0x9, 0xfde5, 0x200, 0xbce0]}, 0x5c) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000800)={0x5, {{0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}}, 0x88) r6 = accept4$inet6(r3, &(0x7f00000008c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000900)=0x1c, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000940)={0x1000, {{0xa, 0x4e23, 0x2b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff8}}}, 0x88) 2021/11/11 16:01:43 result hanged=false: [560922ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76747 #0 [560940ms] -> accept4$inet(0xffffffffffffffff, 0x20000000, 0x20000040, 0x80000) #0 [560940ms] <- accept4$inet=0xffffffffffffffff errno=9 cover=46 #0 [560941ms] -> setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x20000080, 0x48) #0 [560941ms] <- setsockopt$IPT_SO_SET_ADD_COUNTERS=0xffffffffffffffff errno=9 cover=50 #0 [560941ms] -> setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x20000100, 0x4) #0 [560941ms] <- setsockopt$inet6_mtu=0xffffffffffffffff errno=9 cover=50 #0 [560941ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [560941ms] <- socket$inet_udp=0x3 errno=14 cover=1673 #0 [560942ms] -> setsockopt$IPT_SO_SET_ADD_COUNTERS(0x3, 0x0, 0x41, 0x20000140, 0x58) #0 [560943ms] <- setsockopt$IPT_SO_SET_ADD_COUNTERS=0xffffffffffffffff errno=2 cover=1199 #0 [560944ms] -> getsockopt$inet_udp_int(0x3, 0x11, 0xa, 0x200001c0, 0x20000200) #0 [560944ms] <- getsockopt$inet_udp_int=0x0 errno=14 cover=118 #0 [560944ms] -> getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x20000240, 0x20000280) #0 [560945ms] <- getsockopt$inet_mtu=0xffffffffffffffff errno=9 cover=49 #0 [560946ms] -> ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x20000340) #0 [560946ms] <- ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL=0xffffffffffffffff errno=9 cover=45 #0 [560946ms] -> setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x20000380, 0x14) #0 [560946ms] <- setsockopt$inet6_IPV6_PKTINFO=0xffffffffffffffff errno=9 cover=50 #0 [560946ms] -> accept4$inet6(0xffffffffffffffff, 0x200003c0, 0x20000400, 0x800) #0 [560946ms] <- accept4$inet6=0xffffffffffffffff errno=9 cover=46 #0 [560946ms] -> getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x20000440, 0x20000540) #0 [560946ms] <- getsockopt$inet6_IPV6_XFRM_POLICY=0xffffffffffffffff errno=9 cover=49 #0 [560948ms] -> setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x20000580, 0xe8) #0 [560948ms] <- setsockopt$inet6_IPV6_XFRM_POLICY=0xffffffffffffffff errno=9 cover=50 #0 [560948ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [560948ms] <- socket$inet_udplite=0x4 errno=14 cover=1704 #0 [560949ms] -> ioctl$sock_inet_SIOCGARP(0x4, 0x8954, 0x20000680) #0 [560949ms] <- ioctl$sock_inet_SIOCGARP=0xffffffffffffffff errno=22 cover=138 #0 [560950ms] -> ioctl$sock_inet_SIOCGARP(0x4, 0x8954, 0x20000700) #0 [560950ms] <- ioctl$sock_inet_SIOCGARP=0xffffffffffffffff errno=19 cover=160 #0 [560950ms] -> setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x20000780, 0x5c) #0 [560950ms] <- setsockopt$inet6_MRT6_DEL_MFC=0xffffffffffffffff errno=9 cover=50 #0 [560950ms] -> setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x20000800, 0x88) #0 [560950ms] <- setsockopt$inet6_MCAST_JOIN_GROUP=0xffffffffffffffff errno=9 cover=50 #0 [560951ms] -> accept4$inet6(0xffffffffffffffff, 0x200008c0, 0x20000900, 0x0) #0 [560951ms] <- accept4$inet6=0xffffffffffffffff errno=9 cover=46 #0 [560952ms] -> setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x20000940, 0x88) #0 [560952ms] <- setsockopt$inet6_MCAST_JOIN_GROUP=0xffffffffffffffff errno=9 cover=50 16:01:43 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x80000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000100)=0x966c268054e78dad, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000140)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x3, 0x8001, 0x20, @remote, @private0, 0x8, 0x1, 0x80000001, 0x4}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000380)={@dev={0xfe, 0x80, '\x00', 0x11}, r2}, 0x14) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0x1c, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@private2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0xe3, 0x4e22, 0x81, 0x2, 0xa0, 0x0, 0x19, r2, r4}, {0x0, 0x8, 0x7fff, 0x4b, 0x8, 0x9a, 0xfffffffffffffffd, 0x4}, {0x800, 0xffff, 0xfffffffffffffffb, 0x100000000}, 0x7d1, 0x6e6bb9, 0x0, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d4, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x4, 0x0, 0x0, 0x3ff, 0x6, 0x6}}, 0xe8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000680)={{0x2, 0x4e20, @private=0xa010100}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x20, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team_slave_0\x00'}) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000700)={{0x2, 0x4e21, @broadcast}, {0x1, @random="69911858fde1"}, 0x4c, {0x2, 0x4e20, @rand_addr=0x64010102}, 'macvlan0\x00'}) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000780)={{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}, 0x7}, {0xa, 0x4e24, 0x400, @remote, 0x1}, 0x6, [0x9, 0x7, 0x6, 0x8e, 0x9, 0xfde5, 0x200, 0xbce0]}, 0x5c) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000800)={0x5, {{0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}}, 0x88) r6 = accept4$inet6(r3, &(0x7f00000008c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000900)=0x1c, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000940)={0x1000, {{0xa, 0x4e23, 0x2b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff8}}}, 0x88) 2021/11/11 16:01:43 result hanged=false: [560993ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76749 #0 [561010ms] -> accept4$inet(0xffffffffffffffff, 0x20000000, 0x20000040, 0x80000) #0 [561010ms] <- accept4$inet=0xffffffffffffffff errno=9 cover=46 #0 [561011ms] -> setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x20000080, 0x48) #0 [561011ms] <- setsockopt$IPT_SO_SET_ADD_COUNTERS=0xffffffffffffffff errno=9 cover=50 #0 [561012ms] -> setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x20000100, 0x4) #0 [561012ms] <- setsockopt$inet6_mtu=0xffffffffffffffff errno=9 cover=50 #0 [561012ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [561015ms] <- socket$inet_udp=0x3 errno=14 cover=1766 #0 [561018ms] -> setsockopt$IPT_SO_SET_ADD_COUNTERS(0x3, 0x0, 0x41, 0x20000140, 0x58) #0 [561019ms] <- setsockopt$IPT_SO_SET_ADD_COUNTERS=0xffffffffffffffff errno=2 cover=1181 #0 [561024ms] -> getsockopt$inet_udp_int(0x3, 0x11, 0xa, 0x200001c0, 0x20000200) #0 [561024ms] <- getsockopt$inet_udp_int=0x0 errno=14 cover=118 #0 [561026ms] -> getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x20000240, 0x20000280) #0 [561026ms] <- getsockopt$inet_mtu=0xffffffffffffffff errno=9 cover=49 #0 [561027ms] -> ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x20000340) #0 [561027ms] <- ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL=0xffffffffffffffff errno=9 cover=45 #0 [561028ms] -> setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x20000380, 0x14) #0 [561028ms] <- setsockopt$inet6_IPV6_PKTINFO=0xffffffffffffffff errno=9 cover=50 #0 [561029ms] -> accept4$inet6(0xffffffffffffffff, 0x200003c0, 0x20000400, 0x800) #0 [561029ms] <- accept4$inet6=0xffffffffffffffff errno=9 cover=46 #0 [561030ms] -> getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x20000440, 0x20000540) #0 [561030ms] <- getsockopt$inet6_IPV6_XFRM_POLICY=0xffffffffffffffff errno=9 cover=49 #0 [561031ms] -> setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x20000580, 0xe8) #0 [561031ms] <- setsockopt$inet6_IPV6_XFRM_POLICY=0xffffffffffffffff errno=9 cover=50 #0 [561031ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [561032ms] <- socket$inet_udplite=0x4 errno=14 cover=1773 #0 [561032ms] -> ioctl$sock_inet_SIOCGARP(0x4, 0x8954, 0x20000680) #0 [561032ms] <- ioctl$sock_inet_SIOCGARP=0xffffffffffffffff errno=22 cover=138 #0 [561033ms] -> ioctl$sock_inet_SIOCGARP(0x4, 0x8954, 0x20000700) #0 [561033ms] <- ioctl$sock_inet_SIOCGARP=0xffffffffffffffff errno=19 cover=160 #0 [561033ms] -> setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x20000780, 0x5c) #0 [561033ms] <- setsockopt$inet6_MRT6_DEL_MFC=0xffffffffffffffff errno=9 cover=50 #0 [561034ms] -> setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x20000800, 0x88) #0 [561034ms] <- setsockopt$inet6_MCAST_JOIN_GROUP=0xffffffffffffffff errno=9 cover=50 #0 [561034ms] -> accept4$inet6(0xffffffffffffffff, 0x200008c0, 0x20000900, 0x0) #0 [561034ms] <- accept4$inet6=0xffffffffffffffff errno=9 cover=46 #0 [561035ms] -> setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x20000940, 0x88) #0 [561035ms] <- setsockopt$inet6_MCAST_JOIN_GROUP=0xffffffffffffffff errno=9 cover=50 2021/11/11 16:01:43 result hanged=false: 2021/11/11 16:01:43 added new input for call #14 ioctl$sock_inet_SIOCGARP to corpus: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x80000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000100)=0x966c268054e78dad, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000140)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x3, 0x8001, 0x20, @remote, @private0, 0x8, 0x1, 0x80000001, 0x4}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000380)={@dev={0xfe, 0x80, '\x00', 0x11}, r2}, 0x14) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0x1c, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@private2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0xe3, 0x4e22, 0x81, 0x2, 0xa0, 0x0, 0x19, r2, r4}, {0x0, 0x8, 0x7fff, 0x4b, 0x8, 0x9a, 0xfffffffffffffffd, 0x4}, {0x800, 0xffff, 0xfffffffffffffffb, 0x100000000}, 0x7d1, 0x6e6bb9, 0x0, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d4, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x4, 0x0, 0x0, 0x3ff, 0x6, 0x6}}, 0xe8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000680)={{0x2, 0x4e20, @private=0xa010100}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x20, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team_slave_0\x00'}) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000700)={{0x2, 0x4e21, @broadcast}, {0x1, @random="69911858fde1"}, 0x4c, {0x2, 0x4e20, @rand_addr=0x64010102}, 'macvlan0\x00'}) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000780)={{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}, 0x7}, {0xa, 0x4e24, 0x400, @remote, 0x1}, 0x6, [0x9, 0x7, 0x6, 0x8e, 0x9, 0xfde5, 0x200, 0xbce0]}, 0x5c) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000800)={0x5, {{0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}}, 0x88) r6 = accept4$inet6(r3, &(0x7f00000008c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000900)=0x1c, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000940)={0x1000, {{0xa, 0x4e23, 0x2b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff8}}}, 0x88) 16:01:43 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "779b1e7567d62f09a2d166d436fc9990c772b9"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000190c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000019200)={0x0, 0x0}) [561072ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76751 #0 [561089ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [561089ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [561090ms] -> openat$tun(0xffffffffffffff9c, 0x200190c0, 0x0, 0x0) #0 [561090ms] <- openat$tun=0x3 errno=14 cover=1455 #0 [561091ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [561099ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=51377 #0 [561102ms] -> ioctl$TUNATTACHFILTER(0x3, 0x401054d5, 0x20019200) #0 [561102ms] <- ioctl$TUNATTACHFILTER=0xffffffffffffffff errno=22 cover=6960 enabling collider #0 [561117ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [561117ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [561119ms] -> openat$tun(0xffffffffffffff9c, 0x200190c0, 0x0, 0x0) #0 [561119ms] <- openat$tun=0x3 errno=14 cover=1476 pthread_create failed (errno 11) 2021/11/11 16:01:43 result hanged=false: 2021/11/11 16:01:43 #0: triaging type=7 2021/11/11 16:01:43 triaging input for call #3 ioctl$TUNATTACHFILTER (new signal=15) 16:01:43 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "779b1e7567d62f09a2d166d436fc9990c772b9"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000190c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000019200)={0x0, 0x0}) [561191ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76853 #0 [561209ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [561209ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [561210ms] -> openat$tun(0xffffffffffffff9c, 0x200190c0, 0x0, 0x0) #0 [561210ms] <- openat$tun=0x3 errno=14 cover=1401 #0 [561211ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [561221ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=47654 #0 [561226ms] -> ioctl$TUNATTACHFILTER(0x3, 0x401054d5, 0x20019200) #0 [561226ms] <- ioctl$TUNATTACHFILTER=0xffffffffffffffff errno=22 cover=194 16:01:43 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "779b1e7567d62f09a2d166d436fc9990c772b9"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000190c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000019200)={0x0, 0x0}) 2021/11/11 16:01:43 result hanged=false: [561278ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76855 #0 [561298ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [561298ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [561299ms] -> openat$tun(0xffffffffffffff9c, 0x200190c0, 0x0, 0x0) #0 [561300ms] <- openat$tun=0x3 errno=14 cover=1498 #0 [561301ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [561310ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=47529 #0 [561314ms] -> ioctl$TUNATTACHFILTER(0x3, 0x401054d5, 0x20019200) #0 [561315ms] <- ioctl$TUNATTACHFILTER=0xffffffffffffffff errno=22 cover=194 16:01:43 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "779b1e7567d62f09a2d166d436fc9990c772b9"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000190c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000019200)={0x0, 0x0}) 2021/11/11 16:01:43 result hanged=false: [561369ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76857 #0 [561388ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [561388ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [561390ms] -> openat$tun(0xffffffffffffff9c, 0x200190c0, 0x0, 0x0) #0 [561390ms] <- openat$tun=0x3 errno=14 cover=1477 #0 [561395ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [561399ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=47612 #0 [561403ms] -> ioctl$TUNATTACHFILTER(0x3, 0x401054d5, 0x20019200) #0 [561403ms] <- ioctl$TUNATTACHFILTER=0xffffffffffffffff errno=22 cover=194 2021/11/11 16:01:43 result hanged=false: 2021/11/11 16:01:43 added new input for call #3 ioctl$TUNATTACHFILTER to corpus: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "779b1e7567d62f09a2d166d436fc9990c772b9"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000190c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000019200)={0x0, 0x0}) 2021/11/11 16:01:43 #0: triaging type=7 2021/11/11 16:01:43 triaging input for call #2 ioctl$TUNSETQUEUE (new signal=2) 16:01:43 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "779b1e7567d62f09a2d166d436fc9990c772b9"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000190c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000019200)={0x0, 0x0}) [561452ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76859 #0 [561468ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [561468ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [561472ms] -> openat$tun(0xffffffffffffff9c, 0x200190c0, 0x0, 0x0) #0 [561472ms] <- openat$tun=0x3 errno=14 cover=1456 #0 [561473ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [561478ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=47629 #0 [561483ms] -> ioctl$TUNATTACHFILTER(0x3, 0x401054d5, 0x20019200) #0 [561483ms] <- ioctl$TUNATTACHFILTER=0xffffffffffffffff errno=22 cover=194 2021/11/11 16:01:44 result hanged=false: 16:01:44 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "779b1e7567d62f09a2d166d436fc9990c772b9"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000190c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000019200)={0x0, 0x0}) [561531ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76861 #0 [561549ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [561549ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [561550ms] -> openat$tun(0xffffffffffffff9c, 0x200190c0, 0x0, 0x0) #0 [561550ms] <- openat$tun=0x3 errno=14 cover=1433 #0 [561550ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [561559ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=47623 #0 [561565ms] -> ioctl$TUNATTACHFILTER(0x3, 0x401054d5, 0x20019200) #0 [561565ms] <- ioctl$TUNATTACHFILTER=0xffffffffffffffff errno=22 cover=194 2021/11/11 16:01:44 result hanged=false: 16:01:44 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "779b1e7567d62f09a2d166d436fc9990c772b9"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000190c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000019200)={0x0, 0x0}) [561615ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76863 #0 [561633ms] -> ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x20000000) #0 [561633ms] <- ioctl$TCSETSF2=0xffffffffffffffff errno=9 cover=45 #0 [561634ms] -> openat$tun(0xffffffffffffff9c, 0x200190c0, 0x0, 0x0) #0 [561637ms] <- openat$tun=0x3 errno=14 cover=6260 #0 [561638ms] -> ioctl$TUNSETQUEUE(0x3, 0x400454ca, 0x20000000) #0 [561648ms] <- ioctl$TUNSETQUEUE=0x0 errno=14 cover=47724 #0 [561652ms] -> ioctl$TUNATTACHFILTER(0x3, 0x401054d5, 0x20019200) #0 [561656ms] <- ioctl$TUNATTACHFILTER=0xffffffffffffffff errno=22 cover=194 2021/11/11 16:01:44 result hanged=false: 2021/11/11 16:01:44 added new input for call #2 ioctl$TUNSETQUEUE to corpus: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "779b1e7567d62f09a2d166d436fc9990c772b9"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000190c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000019200)={0x0, 0x0}) 16:01:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000700)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) pkey_free(0xffffffffffffffff) [561725ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76865 #0 [561742ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000140) #0 [561747ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=39452 #0 [561750ms] -> pkey_free(0xffffffffffffffff) #0 [561750ms] <- pkey_free=0xffffffffffffffff errno=22 cover=61 enabling collider #0 [561752ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000140) #0 [561752ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=2479 2021/11/11 16:01:44 result hanged=false: 16:01:44 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000077c0), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x10000000) [561790ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76867 #0 [561807ms] -> openat$vcsu(0xffffffffffffff9c, 0x200077c0, 0x0, 0x0) #0 [561807ms] <- openat$vcsu=0x3 errno=14 cover=1160 #0 [561808ms] -> mmap$IORING_OFF_SQES(0x20ffc000, 0x2000, 0x0, 0x100010, 0x3, 0x10000000) #0 [561808ms] <- mmap$IORING_OFF_SQES=0xffffffffffffffff errno=17 cover=213 enabling collider #0 [561809ms] -> openat$vcsu(0xffffffffffffff9c, 0x200077c0, 0x0, 0x0) #0 [561809ms] <- openat$vcsu=0x3 errno=14 cover=1159 2021/11/11 16:01:44 result hanged=false: 16:01:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004200010d"], 0x14}}, 0x0) read(r0, &(0x7f0000000100)=""/132, 0x84) [561851ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76869 #0 [561869ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [561869ms] <- socket$netlink=0x3 errno=14 cover=1421 #0 [561871ms] -> sendmsg$nl_generic(0x3, 0x20000000, 0x0) #0 [561872ms] <- sendmsg$nl_generic=0x14 errno=14 cover=4415 #0 [561873ms] -> read(0x3, 0x20000100, 0x84) #0 [561873ms] <- read=0x84 errno=14 cover=1288 enabling collider #0 [561875ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [561876ms] <- socket$netlink=0x3 errno=14 cover=1529 #0 [561877ms] -> sendmsg$nl_generic(0x3, 0x20000000, 0x0) #0 [561878ms] <- sendmsg$nl_generic=0x14 errno=14 cover=4396 pthread_create failed (errno 11) 2021/11/11 16:01:44 result hanged=false: 2021/11/11 16:01:44 #0: triaging type=7 2021/11/11 16:01:44 triaging input for call #2 read (new signal=1) 16:01:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004200010d"], 0x14}}, 0x0) read(r0, &(0x7f0000000100)=""/132, 0x84) [561950ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76971 #0 [561970ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [561971ms] <- socket$netlink=0x3 errno=14 cover=1410 #0 [561974ms] -> sendmsg$nl_generic(0x3, 0x20000000, 0x0) #0 [561974ms] <- sendmsg$nl_generic=0x14 errno=14 cover=4374 #0 [561975ms] -> read(0x3, 0x20000100, 0x84) #0 [561975ms] <- read=0x84 errno=14 cover=1310 16:01:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004200010d"], 0x14}}, 0x0) read(r0, &(0x7f0000000100)=""/132, 0x84) 2021/11/11 16:01:44 result hanged=false: [562021ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76973 #0 [562038ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [562038ms] <- socket$netlink=0x3 errno=14 cover=1421 #0 [562040ms] -> sendmsg$nl_generic(0x3, 0x20000000, 0x0) #0 [562041ms] <- sendmsg$nl_generic=0x14 errno=14 cover=4385 #0 [562043ms] -> read(0x3, 0x20000100, 0x84) #0 [562044ms] <- read=0x84 errno=14 cover=1253 16:01:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004200010d"], 0x14}}, 0x0) read(r0, &(0x7f0000000100)=""/132, 0x84) 2021/11/11 16:01:44 result hanged=false: [562084ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76975 #0 [562102ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [562102ms] <- socket$netlink=0x3 errno=14 cover=1432 #0 [562103ms] -> sendmsg$nl_generic(0x3, 0x20000000, 0x0) #0 [562104ms] <- sendmsg$nl_generic=0x14 errno=14 cover=4392 #0 [562105ms] -> read(0x3, 0x20000100, 0x84) #0 [562106ms] <- read=0x84 errno=14 cover=1277 2021/11/11 16:01:44 result hanged=false: 2021/11/11 16:01:44 added new input for call #2 read to corpus: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004200010d"], 0x14}}, 0x0) read(r0, &(0x7f0000000100)=""/132, 0x84) 2021/11/11 16:01:44 #0: triaging type=7 2021/11/11 16:01:44 triaging input for call #1 sendmsg$nl_generic (new signal=1) 16:01:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004200010d"], 0x14}}, 0x0) read(r0, &(0x7f0000000100)=""/132, 0x84) [562147ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76977 #0 [562169ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [562170ms] <- socket$netlink=0x3 errno=14 cover=1421 #0 [562173ms] -> sendmsg$nl_generic(0x3, 0x20000000, 0x0) #0 [562173ms] <- sendmsg$nl_generic=0x14 errno=14 cover=4363 #0 [562174ms] -> read(0x3, 0x20000100, 0x84) #0 [562174ms] <- read=0x84 errno=14 cover=1243 16:01:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004200010d"], 0x14}}, 0x0) read(r0, &(0x7f0000000100)=""/132, 0x84) 2021/11/11 16:01:44 result hanged=false: [562212ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76979 #0 [562230ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [562230ms] <- socket$netlink=0x3 errno=14 cover=1410 #0 [562232ms] -> sendmsg$nl_generic(0x3, 0x20000000, 0x0) #0 [562233ms] <- sendmsg$nl_generic=0x14 errno=14 cover=4399 #0 [562235ms] -> read(0x3, 0x20000100, 0x84) #0 [562235ms] <- read=0x84 errno=14 cover=1254 16:01:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004200010d"], 0x14}}, 0x0) read(r0, &(0x7f0000000100)=""/132, 0x84) 2021/11/11 16:01:44 result hanged=false: [562273ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76981 #0 [562289ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [562290ms] <- socket$netlink=0x3 errno=14 cover=1474 #0 [562293ms] -> sendmsg$nl_generic(0x3, 0x20000000, 0x0) #0 [562293ms] <- sendmsg$nl_generic=0x14 errno=14 cover=4374 #0 [562296ms] -> read(0x3, 0x20000100, 0x84) #0 [562296ms] <- read=0x84 errno=14 cover=1266 2021/11/11 16:01:44 result hanged=false: 2021/11/11 16:01:44 added new input for call #1 sendmsg$nl_generic to corpus: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004200010d"], 0x14}}, 0x0) read(r0, &(0x7f0000000100)=""/132, 0x84) 16:01:44 executing program 0: set_mempolicy(0x2, &(0x7f0000000040)=0x5, 0x5) r0 = memfd_create(&(0x7f0000000100)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\xb5\xc6#w\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87\x8d\x8d\x82|\x94\x10\xdaU', 0x4) fallocate(r0, 0x0, 0x0, 0x10001) [562345ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 76983 #0 [562363ms] -> set_mempolicy(0x2, 0x20000040, 0x5) #0 [562363ms] <- set_mempolicy=0x0 errno=14 cover=157 #0 [562364ms] -> memfd_create(0x20000100, 0x4) #0 [562364ms] <- memfd_create=0x3 errno=14 cover=1339 #0 [562365ms] -> fallocate(0x3, 0x0, 0x0, 0x10001) #0 [562365ms] <- fallocate=0xffffffffffffffff errno=28 cover=261 enabling collider #0 [562366ms] -> set_mempolicy(0x2, 0x20000040, 0x5) #0 [562366ms] <- set_mempolicy=0x0 errno=14 cover=248 #0 [562366ms] -> memfd_create(0x20000100, 0x4) #0 [562367ms] <- memfd_create=0x3 errno=14 cover=1326 pthread_create failed (errno 11) 16:01:44 executing program 0: sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000400)) 2021/11/11 16:01:44 result hanged=false: [562446ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77085 #0 [562468ms] -> sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x20000180, 0x0) #0 [562468ms] <- sendmsg$IPSET_CMD_RENAME=0xffffffffffffffff errno=9 cover=52 #0 [562472ms] -> clock_gettime(0x0, 0x20000400) #0 [562472ms] <- clock_gettime=0x0 errno=14 cover=75 enabling collider #0 [562472ms] -> sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x20000180, 0x0) #0 [562472ms] <- sendmsg$IPSET_CMD_RENAME=0xffffffffffffffff errno=9 cover=52 16:01:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1e, 0x0, &(0x7f0000003200)) 2021/11/11 16:01:45 result hanged=false: 2021/11/11 16:01:45 poll: candidates=8 inputs=0 signal=0 [562509ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77087 #0 [562530ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [562536ms] <- perf_event_open=0x3 errno=14 cover=9520 #0 [562537ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [562537ms] <- socket$inet_tcp=0x4 errno=14 cover=5190 #0 [562538ms] -> getsockopt$inet_tcp_int(0x4, 0x6, 0x1e, 0x0, 0x20003200) #0 [562538ms] <- getsockopt$inet_tcp_int=0x0 errno=14 cover=226 enabling collider #0 [562547ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [562548ms] <- perf_event_open=0x3 errno=14 cover=8854 #0 [562548ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [562548ms] <- socket$inet_tcp=0x4 errno=14 cover=5366 pthread_create failed (errno 11) 16:01:45 executing program 0: execveat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0) 2021/11/11 16:01:45 result hanged=false: [562640ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77189 #0 [562658ms] -> execveat(0xffffffffffffff9c, 0x20000840, 0x0, 0x0, 0x0) #0 [562659ms] <- execveat=0xffffffffffffffff errno=2 cover=6371 enabling collider #0 [562659ms] -> execveat(0xffffffffffffff9c, 0x20000840, 0x0, 0x0, 0x0) #0 [562660ms] <- execveat=0xffffffffffffffff errno=2 cover=6008 16:01:45 executing program 0: syz_io_uring_setup(0x5078, &(0x7f00000002c0)={0x0, 0xc1c1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fed000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) 2021/11/11 16:01:45 result hanged=false: [562698ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77191 #0 [562716ms] -> syz_io_uring_setup(0x5078, 0x200002c0, 0x20ffa000, 0x20fed000, 0x20000340, 0x20000380) #0 [562724ms] <- syz_io_uring_setup=0x3 errno=14 cover=21708 enabling collider #0 [562725ms] -> syz_io_uring_setup(0x5078, 0x200002c0, 0x20ffa000, 0x20fed000, 0x20000340, 0x20000380) #0 [562728ms] <- syz_io_uring_setup=0x3 errno=14 cover=28715 16:01:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000080000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="00000000004933c904000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000012b00)=ANY=[]) 2021/11/11 16:01:45 result hanged=false: [562768ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77193 #0 [562784ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20012b00) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1810.300713] EXT4-fs (loop0): blocks per group (8388608) and clusters per group (8192) inconsistent syz_mount_image > mount error: 22 #0 [562802ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=27070 enabling collider #0 [562811ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20012b00) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1810.326409] EXT4-fs (loop0): blocks per group (8388608) and clusters per group (8192) inconsistent syz_mount_image > mount error: 22 #0 [562827ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=27508 16:01:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000080000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="00000000004933c904000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000012b00)=ANY=[]) 2021/11/11 16:01:45 result hanged=false: 2021/11/11 16:01:45 #0: triaging type=7 2021/11/11 16:01:45 triaging input for call #0 syz_mount_image$ext4 (new signal=2) [562874ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77195 #0 [562891ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20012b00) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1810.402096] EXT4-fs (loop0): blocks per group (8388608) and clusters per group (8192) inconsistent syz_mount_image > mount error: 22 #0 [562908ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=34130 2021/11/11 16:01:45 result hanged=false: 16:01:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000080000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="00000000004933c904000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000012b00)=ANY=[]) [562959ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77197 #0 [562978ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20012b00) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1810.489595] EXT4-fs (loop0): blocks per group (8388608) and clusters per group (8192) inconsistent syz_mount_image > mount error: 22 #0 [562991ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=28228 16:01:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000080000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="00000000004933c904000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000012b00)=ANY=[]) 2021/11/11 16:01:45 result hanged=false: [563038ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77199 #0 [563055ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20012b00) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1810.567604] EXT4-fs (loop0): blocks per group (8388608) and clusters per group (8192) inconsistent syz_mount_image > mount error: 22 #0 [563069ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=27288 2021/11/11 16:01:45 result hanged=false: 2021/11/11 16:01:45 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000080000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="00000000004933c904000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000012b00)=ANY=[]) 16:01:45 executing program 0: mlockall(0x1) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) [563166ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77201 #0 [563183ms] -> mlockall(0x1) #0 [563383ms] <- mlockall=0x0 errno=14 cover=262143 #0 [563386ms] -> ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) #0 [563386ms] <- ioctl$MON_IOCH_MFLUSH=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [563386ms] -> mlockall(0x1) #0 [563434ms] <- mlockall=0x0 errno=14 cover=262143 2021/11/11 16:01:46 result hanged=false: 16:01:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000003f00)={0x77359400}) [563559ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77203 #0 [563576ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [563576ms] <- socket$nl_generic=0x3 errno=14 cover=1445 #0 [563577ms] -> recvmmsg(0x3, 0x0, 0x0, 0x0, 0x20003f00) #0 [563577ms] <- recvmmsg=0x0 errno=14 cover=122 enabling collider #0 [563578ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [563578ms] <- socket$nl_generic=0x3 errno=14 cover=1422 16:01:46 executing program 0: syz_open_dev$mouse(&(0x7f0000000500), 0x0, 0x200) 2021/11/11 16:01:46 result hanged=false: [563618ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77205 #0 [563642ms] -> syz_open_dev$mouse(0x20000500, 0x0, 0x200) #0 [563642ms] <- syz_open_dev$mouse=0x3 errno=14 cover=1492 enabling collider #0 [563645ms] -> syz_open_dev$mouse(0x20000500, 0x0, 0x200) #0 [563645ms] <- syz_open_dev$mouse=0x3 errno=14 cover=1533 2021/11/11 16:01:46 result hanged=false: 16:01:46 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0045878, 0x0) [563686ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77207 #0 [563704ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [563721ms] <- perf_event_open=0x3 errno=14 cover=12639 #0 [563722ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [563726ms] <- openat=0x4 errno=14 cover=15208 #0 [563726ms] -> ioctl$FS_IOC_RESVSP(0x4, 0xc0045878, 0x0) #0 [563726ms] <- ioctl$FS_IOC_RESVSP=0xffffffffffffffff errno=22 cover=265 enabling collider #0 [563738ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [563739ms] <- perf_event_open=0x3 errno=14 cover=8571 #0 [563739ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [563740ms] <- openat=0x4 errno=14 cover=3067 pthread_create failed (errno 11) 16:01:46 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000c40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 2021/11/11 16:01:46 result hanged=false: 2021/11/11 16:01:46 poll: candidates=8 inputs=0 signal=0 [563837ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77309 #0 [563857ms] -> syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x20000c40, 0x0) syz_usb_connect: dev: 0x20000c40 syz_usb_connect: device data: 12 01 00 00 02 00 00 00 25 05 a1 a4 40 00 01 02 [ 1811.362583] udc-core: couldn't find an available UDC or it's busy [ 1811.363922] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 03 01 09 02 3b 00 01 01 00 00 00 09 04 00 00 00 02 06 00 00 05 24 06 00 00 05 24 00 00 00 0d 24 0f 01 00 00 00 00 00 00 00 00 00 09 05 82 02 00 00 00 00 00 09 05 03 02 00 00 00 00 00 syz_usb_connect: usb_raw_open success parse_usb_descriptor: found interface #0 (0, 0) at 0x20000c5b parse_usb_descriptor: found endpoint #0 at 0x20000c7b parse_usb_descriptor: found endpoint #1 at 0x20000c84 syz_usb_connect: add_usb_index success syz_usb_connect: usb_raw_init success syz_usb_connect: usb_raw_run failed with -1 #0 [563862ms] <- syz_usb_connect$cdc_ecm=0xffffffffffffffff errno=19 cover=31483 enabling collider #0 [564364ms] -> syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x20000c40, 0x0) syz_usb_connect: dev: 0x20000c40 syz_usb_connect: device data: 12 01 00 00 02 00 00 00 25 05 a1 a4 40 00 01 02 03 01 09 02 3b 00 01 01 00 00 00 09 04 00 00 00 02 06 00 00 05 24 06 00 00 05 24 00 00 00 0d 24 0f 01 00 00 00 00 00 00 00 00 00 09 05 82 02 00 00 00 00 00 09 05 03 02 00 00 00 00 00 syz_usb_connect: usb_raw_open success parse_usb_descriptor: found interface #0 (0, 0) at 0x20000c5b parse_usb_descriptor: found endpoint #0 at 0x20000c7b parse_usb_descriptor: found endpoint #1 at 0x20000c84 syz_usb_connect: add_usb_index success syz_usb_connect: usb_raw_init success [ 1811.869193] udc-core: couldn't find an available UDC or it's busy [ 1811.871081] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 syz_usb_connect: usb_raw_run failed with -1 #0 [564370ms] <- syz_usb_connect$cdc_ecm=0xffffffffffffffff errno=19 cover=29604 2021/11/11 16:01:46 result hanged=false: 16:01:46 executing program 0: pselect6(0x40, &(0x7f0000000000)={0x7}, 0x0, 0x0, 0x0, 0x0) [564411ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77311 #0 [564428ms] -> pselect6(0x40, 0x20000000, 0x0, 0x0, 0x0, 0x0) #0 [564428ms] <- pselect6=0x1 errno=14 cover=276 enabling collider #0 [564428ms] -> pselect6(0x40, 0x20000000, 0x0, 0x0, 0x0, 0x0) #0 [564428ms] <- pselect6=0x1 errno=14 cover=276 16:01:47 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 2021/11/11 16:01:47 result hanged=false: [564464ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77313 #0 [564480ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [564481ms] <- socket$inet6_udplite=0x3 errno=14 cover=1683 #0 [564482ms] -> ioctl$sock_SIOCETHTOOL(0x3, 0x8946, 0x200001c0) #0 [564482ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=22 cover=290 enabling collider #0 [564483ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [564483ms] <- socket$inet6_udplite=0x3 errno=14 cover=1638 #0 [564484ms] -> ioctl$sock_SIOCETHTOOL(0x3, 0x8946, 0x200001c0) #0 [564484ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=9 cover=46 2021/11/11 16:01:47 result hanged=false: 16:01:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in=@remote}}, 0xe8) [564525ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77315 #0 [564546ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [564546ms] <- socket$inet_udp=0x3 errno=14 cover=1717 #0 [564548ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [564549ms] <- connect$inet=0x0 errno=14 cover=869 #0 [564553ms] -> setsockopt$inet_IP_XFRM_POLICY(0x3, 0x0, 0x11, 0x20000040, 0xe8) #0 [564553ms] <- setsockopt$inet_IP_XFRM_POLICY=0x0 errno=14 cover=554 enabling collider #0 [564554ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [564555ms] <- socket$inet_udp=0x3 errno=14 cover=1776 #0 [564559ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [564559ms] <- connect$inet=0x0 errno=14 cover=722 pthread_create failed (errno 11) 16:01:47 executing program 0: r0 = syz_io_uring_setup(0x970, &(0x7f0000000200), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x9, &(0x7f0000004280), 0x0) 2021/11/11 16:01:47 result hanged=false: [564627ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77417 #0 [564646ms] -> syz_io_uring_setup(0x970, 0x20000200, 0x20ffe000, 0x20ffc000, 0x20000080, 0x200001c0) #0 [564654ms] <- syz_io_uring_setup=0x3 errno=14 cover=9391 #0 [564655ms] -> io_uring_register$IORING_REGISTER_FILES(0x3, 0x9, 0x20004280, 0x0) #0 [564655ms] <- io_uring_register$IORING_REGISTER_FILES=0xffffffffffffffff errno=22 cover=67 enabling collider #0 [564656ms] -> syz_io_uring_setup(0x970, 0x20000200, 0x20ffe000, 0x20ffc000, 0x20000080, 0x200001c0) #0 [564659ms] <- syz_io_uring_setup=0x3 errno=14 cover=9389 16:01:47 executing program 0: set_mempolicy(0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r0, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) 2021/11/11 16:01:47 result hanged=false: [564700ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77419 #0 [564717ms] -> set_mempolicy(0x4, 0x0, 0x0) #0 [564717ms] <- set_mempolicy=0x0 errno=14 cover=123 #0 [564718ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001300) #0 [564718ms] <- syz_open_procfs=0x3 errno=14 cover=4411 #0 [564719ms] -> readv(0x3, 0x20001500, 0x1) #0 [564727ms] <- readv=0xd7 errno=14 cover=262143 enabling collider #0 [564735ms] -> set_mempolicy(0x4, 0x0, 0x0) #0 [564735ms] <- set_mempolicy=0x0 errno=14 cover=225 #0 [564736ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001300) #0 [564736ms] <- syz_open_procfs=0x3 errno=14 cover=2836 pthread_create failed (errno 11) 16:01:47 executing program 0: set_mempolicy(0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r0, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) 2021/11/11 16:01:47 result hanged=false: 2021/11/11 16:01:47 #0: triaging type=7 2021/11/11 16:01:47 triaging input for call #2 readv (new signal=2) [564808ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77521 #0 [564825ms] -> set_mempolicy(0x4, 0x0, 0x0) #0 [564825ms] <- set_mempolicy=0x0 errno=14 cover=134 #0 [564826ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001300) #0 [564827ms] <- syz_open_procfs=0x3 errno=14 cover=4464 #0 [564828ms] -> readv(0x3, 0x20001500, 0x1) #0 [564838ms] <- readv=0xd7 errno=14 cover=262143 2021/11/11 16:01:47 result hanged=false: 16:01:47 executing program 0: set_mempolicy(0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r0, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) [564897ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77523 #0 [564915ms] -> set_mempolicy(0x4, 0x0, 0x0) #0 [564915ms] <- set_mempolicy=0x0 errno=14 cover=123 #0 [564916ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001300) #0 [564918ms] <- syz_open_procfs=0x3 errno=14 cover=4489 #0 [564925ms] -> readv(0x3, 0x20001500, 0x1) #0 [564933ms] <- readv=0xd7 errno=14 cover=262143 16:01:47 executing program 0: set_mempolicy(0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r0, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) 2021/11/11 16:01:47 result hanged=false: [564982ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77525 #0 [565000ms] -> set_mempolicy(0x4, 0x0, 0x0) #0 [565000ms] <- set_mempolicy=0x0 errno=14 cover=123 #0 [565001ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001300) #0 [565002ms] <- syz_open_procfs=0x3 errno=14 cover=4378 #0 [565004ms] -> readv(0x3, 0x20001500, 0x1) #0 [565012ms] <- readv=0xd7 errno=14 cover=262143 2021/11/11 16:01:47 result hanged=false: 2021/11/11 16:01:47 added new input for call #2 readv to corpus: set_mempolicy(0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r0, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) 16:01:47 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockname(r0, &(0x7f0000000080)=@caif=@rfm, &(0x7f0000000100)=0x80) [565071ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77527 #0 [565091ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [565092ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6531 #0 [565094ms] -> getsockname(0x4, 0x20000080, 0x20000100) #0 [565095ms] <- getsockname=0x0 errno=14 cover=111 enabling collider #0 [565096ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [565097ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=5644 2021/11/11 16:01:47 result hanged=false: 16:01:47 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockname(r0, &(0x7f0000000080)=@caif=@rfm, &(0x7f0000000100)=0x80) 2021/11/11 16:01:47 #0: triaging type=7 2021/11/11 16:01:47 triaging input for call #1 getsockname (new signal=4) [565137ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77529 #0 [565155ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [565157ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6427 #0 [565159ms] -> getsockname(0x4, 0x20000080, 0x20000100) #0 [565159ms] <- getsockname=0x0 errno=14 cover=111 16:01:47 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockname(r0, &(0x7f0000000080)=@caif=@rfm, &(0x7f0000000100)=0x80) 2021/11/11 16:01:47 result hanged=false: [565202ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77531 #0 [565220ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [565222ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6522 #0 [565223ms] -> getsockname(0x4, 0x20000080, 0x20000100) #0 [565223ms] <- getsockname=0x0 errno=14 cover=111 16:01:47 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockname(r0, &(0x7f0000000080)=@caif=@rfm, &(0x7f0000000100)=0x80) 2021/11/11 16:01:47 result hanged=false: [565264ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77533 #0 [565281ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [565282ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6468 #0 [565285ms] -> getsockname(0x4, 0x20000080, 0x20000100) #0 [565285ms] <- getsockname=0x0 errno=14 cover=111 2021/11/11 16:01:47 result hanged=false: 2021/11/11 16:01:47 added new input for call #1 getsockname to corpus: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockname(r0, &(0x7f0000000080)=@caif=@rfm, &(0x7f0000000100)=0x80) 16:01:47 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$FIONREAD(r0, 0x7041, 0x0) [565326ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77535 #0 [565343ms] -> perf_event_open(0x20000200, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [565349ms] <- perf_event_open=0x3 errno=14 cover=9110 #0 [565350ms] -> openat$nvram(0xffffffffffffff9c, 0x20000400, 0x0, 0x0) #0 [565351ms] <- openat$nvram=0x4 errno=14 cover=3116 #0 [565352ms] -> ioctl$FIONREAD(0x4, 0x7041, 0x0) #0 [565354ms] <- ioctl$FIONREAD=0x0 errno=14 cover=3933 enabling collider #0 [565366ms] -> perf_event_open(0x20000200, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [565366ms] <- perf_event_open=0x3 errno=14 cover=8236 #0 [565367ms] -> openat$nvram(0xffffffffffffff9c, 0x20000400, 0x0, 0x0) #0 [565368ms] <- openat$nvram=0x4 errno=14 cover=2989 pthread_create failed (errno 11) 2021/11/11 16:01:48 result hanged=false: 16:01:48 executing program 0: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000400), 0x0, 0x0, 0x0, &(0x7f0000003600), 0x0, &(0x7f0000000040)=ANY=[]) 2021/11/11 16:01:48 poll: candidates=8 inputs=0 signal=0 [565456ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77637 #0 [565475ms] -> rseq(0x20000000, 0x20, 0x0, 0x0) #0 [565475ms] <- rseq=0x0 errno=14 cover=112 #0 [565476ms] -> syz_mount_image$msdos(0x20000400, 0x0, 0x0, 0x0, 0x20003600, 0x0, 0x20000040) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='(null)' fs='msdos' flags=0 opts='' syz_mount_image > mount error: 14 #0 [565490ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=14 cover=13351 enabling collider #0 [565491ms] -> rseq(0x20000000, 0x20, 0x0, 0x0) #0 [565491ms] <- rseq=0xffffffffffffffff errno=16 cover=40 2021/11/11 16:01:48 result hanged=false: 16:01:48 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x224, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0xc5d, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x0) r3 = fork() ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r5, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) fcntl$setown(r2, 0x8, r5) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) kcmp(r4, r6, 0x1, r7, 0xffffffffffffffff) [565539ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77639 #0 [565558ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [565558ms] <- perf_event_open=0x3 errno=14 cover=8011 #0 [565560ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [565562ms] <- perf_event_open=0x4 errno=14 cover=69540 #0 [565563ms] -> dup3(0x3, 0x4, 0x0) #0 [565575ms] <- dup3=0x4 errno=14 cover=2421 #0 [565576ms] -> fork() #0 [565595ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [565597ms] -> ptrace$setopts(0x4206, 0x0, 0x0, 0x0) #0 [565597ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=64 #0 [565597ms] -> ptrace(0x4207, 0x0) #0 [565597ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [565598ms] -> clone3(0x20000140, 0x58) #0 [565601ms] <- clone3=0xffffffffffffffff errno=11 cover=24260 #0 [565601ms] -> clone3(0x20000140, 0x58) #0 [565604ms] <- clone3=0xffffffffffffffff errno=11 cover=24202 #0 [565604ms] -> clone3(0x20000140, 0x58) #0 [565609ms] <- clone3=0xffffffffffffffff errno=11 cover=24355 #0 [565609ms] -> kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) #0 [565609ms] <- kcmp=0xffffffffffffffff errno=3 cover=88 #0 [565609ms] -> fcntl$getownex(0x3, 0x10, 0x200001c0) #0 [565609ms] <- fcntl$getownex=0x0 errno=14 cover=88 #0 [565610ms] -> fcntl$setown(0x4, 0x8, 0x0) #0 [565610ms] <- fcntl$setown=0x0 errno=14 cover=102 #0 [565610ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [565611ms] <- syz_init_net_socket$bt_sco=0x6 errno=14 cover=6278 #0 [565611ms] -> kcmp(0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff) #0 [565611ms] <- kcmp=0xffffffffffffffff errno=3 cover=88 enabling collider #0 [565623ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [565623ms] <- perf_event_open=0x3 errno=14 cover=7936 #0 [565624ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [565628ms] <- perf_event_open=0x4 errno=14 cover=72504 pthread_create failed (errno 11) 2021/11/11 16:01:48 result hanged=false: 2021/11/11 16:01:48 #0: triaging type=7 16:01:48 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x224, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0xc5d, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x0) r3 = fork() ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r5, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) fcntl$setown(r2, 0x8, r5) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) kcmp(r4, r6, 0x1, r7, 0xffffffffffffffff) 2021/11/11 16:01:48 triaging input for call #12 syz_init_net_socket$bt_sco (new signal=1) [565729ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77745 #0 [565746ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [565747ms] <- perf_event_open=0x3 errno=14 cover=8111 #0 [565748ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [565750ms] <- perf_event_open=0x4 errno=14 cover=69451 #0 [565753ms] -> dup3(0x3, 0x4, 0x0) #0 [565766ms] <- dup3=0x4 errno=14 cover=2496 #0 [565767ms] -> fork() #0 [565787ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [565801ms] -> ptrace$setopts(0x4206, 0x0, 0x0, 0x0) #0 [565802ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=93 #0 [565802ms] -> ptrace(0x4207, 0x0) #0 [565802ms] <- ptrace=0xffffffffffffffff errno=3 cover=93 #0 [565803ms] -> clone3(0x20000140, 0x58) #0 [565807ms] <- clone3=0xffffffffffffffff errno=11 cover=67290 #0 [565813ms] -> clone3(0x20000140, 0x58) #0 [565817ms] <- clone3=0xffffffffffffffff errno=11 cover=66427 #0 [565823ms] -> clone3(0x20000140, 0x58) #0 [565828ms] <- clone3=0xffffffffffffffff errno=11 cover=68700 #0 [565833ms] -> kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) #0 [565834ms] <- kcmp=0xffffffffffffffff errno=3 cover=117 #0 [565834ms] -> fcntl$getownex(0x3, 0x10, 0x200001c0) #0 [565835ms] <- fcntl$getownex=0x0 errno=14 cover=175 #0 [565835ms] -> fcntl$setown(0x4, 0x8, 0x0) #0 [565836ms] <- fcntl$setown=0x0 errno=14 cover=189 #0 [565836ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [565839ms] <- syz_init_net_socket$bt_sco=0x6 errno=14 cover=19160 #0 [565841ms] -> kcmp(0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff) #0 [565841ms] <- kcmp=0xffffffffffffffff errno=3 cover=117 2021/11/11 16:01:48 result hanged=false: 16:01:48 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x224, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0xc5d, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x0) r3 = fork() ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r5, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) fcntl$setown(r2, 0x8, r5) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) kcmp(r4, r6, 0x1, r7, 0xffffffffffffffff) [565898ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77751 #0 [565917ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [565921ms] <- perf_event_open=0x3 errno=14 cover=8414 #0 [565923ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [565926ms] <- perf_event_open=0x4 errno=14 cover=76912 #0 [565930ms] -> dup3(0x3, 0x4, 0x0) #0 [565951ms] <- dup3=0x4 errno=14 cover=2930 #0 [565952ms] -> fork() #0 [565971ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [565986ms] -> ptrace$setopts(0x4206, 0x0, 0x0, 0x0) #0 [565987ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=93 #0 [565987ms] -> ptrace(0x4207, 0x0) #0 [565988ms] <- ptrace=0xffffffffffffffff errno=3 cover=93 #0 [565988ms] -> clone3(0x20000140, 0x58) #0 [565991ms] <- clone3=0xffffffffffffffff errno=11 cover=24151 #0 [565993ms] -> clone3(0x20000140, 0x58) #0 [565997ms] <- clone3=0xffffffffffffffff errno=11 cover=66682 #0 [566004ms] -> clone3(0x20000140, 0x58) #0 [566009ms] <- clone3=0xffffffffffffffff errno=11 cover=84314 #0 [566016ms] -> kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) #0 [566016ms] <- kcmp=0xffffffffffffffff errno=3 cover=117 #0 [566016ms] -> fcntl$getownex(0x3, 0x10, 0x200001c0) #0 [566017ms] <- fcntl$getownex=0x0 errno=14 cover=189 #0 [566018ms] -> fcntl$setown(0x4, 0x8, 0x0) #0 [566018ms] <- fcntl$setown=0x0 errno=14 cover=189 #0 [566019ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [566021ms] <- syz_init_net_socket$bt_sco=0x6 errno=14 cover=19582 #0 [566023ms] -> kcmp(0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff) #0 [566023ms] <- kcmp=0xffffffffffffffff errno=3 cover=117 2021/11/11 16:01:48 result hanged=false: 16:01:48 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x224, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0xc5d, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x0) r3 = fork() ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r5, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) fcntl$setown(r2, 0x8, r5) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) kcmp(r4, r6, 0x1, r7, 0xffffffffffffffff) [566073ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77757 #0 [566092ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [566094ms] <- perf_event_open=0x3 errno=14 cover=8306 #0 [566095ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [566099ms] <- perf_event_open=0x4 errno=14 cover=76907 #0 [566104ms] -> dup3(0x3, 0x4, 0x0) #0 [566121ms] <- dup3=0x4 errno=14 cover=5841 #0 [566122ms] -> fork() #0 [566143ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [566158ms] -> ptrace$setopts(0x4206, 0x0, 0x0, 0x0) #0 [566158ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=64 #0 [566158ms] -> ptrace(0x4207, 0x0) #0 [566158ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [566158ms] -> clone3(0x20000140, 0x58) #0 [566161ms] <- clone3=0xffffffffffffffff errno=11 cover=24125 #0 [566163ms] -> clone3(0x20000140, 0x58) #0 [566166ms] <- clone3=0xffffffffffffffff errno=11 cover=24367 #0 [566168ms] -> clone3(0x20000140, 0x58) #0 [566172ms] <- clone3=0xffffffffffffffff errno=11 cover=24287 #0 [566174ms] -> kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) #0 [566174ms] <- kcmp=0xffffffffffffffff errno=3 cover=88 #0 [566175ms] -> fcntl$getownex(0x3, 0x10, 0x200001c0) #0 [566175ms] <- fcntl$getownex=0x0 errno=14 cover=88 #0 [566175ms] -> fcntl$setown(0x4, 0x8, 0x0) #0 [566175ms] <- fcntl$setown=0x0 errno=14 cover=102 #0 [566175ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [566177ms] <- syz_init_net_socket$bt_sco=0x6 errno=14 cover=6389 #0 [566178ms] -> kcmp(0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff) #0 [566178ms] <- kcmp=0xffffffffffffffff errno=3 cover=88 2021/11/11 16:01:48 result hanged=false: 2021/11/11 16:01:48 added new input for call #12 syz_init_net_socket$bt_sco to corpus: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x224, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0xc5d, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x0) r3 = fork() ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r5, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) fcntl$setown(r2, 0x8, r5) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) kcmp(r4, r6, 0x1, r7, 0xffffffffffffffff) 16:01:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) [566250ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77763 #0 [566268ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [566269ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6411 #0 [566270ms] -> sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0x4, 0x20000200, 0x0) #0 [566270ms] <- sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT=0x0 errno=14 cover=978 #0 [566271ms] -> syz_genetlink_get_family_id$nl802154(0x200003c0, 0x4) syz_genetlink_get_family_id(nl802154, 4) #0 [566271ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=5054 enabling collider #0 [566273ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [566274ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5520 #0 [566274ms] -> sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0x4, 0x20000200, 0x0) #0 [566274ms] <- sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT=0x0 errno=14 cover=1017 pthread_create failed (errno 11) 2021/11/11 16:01:48 result hanged=false: 16:01:48 executing program 0: recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [566348ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77865 #0 [566369ms] -> recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) #0 [566369ms] <- recvfrom$unix=0xffffffffffffffff errno=9 cover=58 enabling collider #0 [566372ms] -> recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) #0 [566372ms] <- recvfrom$unix=0xffffffffffffffff errno=9 cover=58 16:01:48 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x21, 0x0, &(0x7f0000000280)) 2021/11/11 16:01:48 result hanged=false: [566408ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77867 #0 [566426ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [566426ms] <- socket$inet6_udplite=0x3 errno=14 cover=1716 #0 [566427ms] -> getsockopt$inet6_mreq(0x3, 0x29, 0x21, 0x0, 0x20000280) #0 [566427ms] <- getsockopt$inet6_mreq=0x0 errno=14 cover=117 enabling collider #0 [566428ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [566428ms] <- socket$inet6_udplite=0x3 errno=14 cover=1736 #0 [566428ms] -> getsockopt$inet6_mreq(0x3, 0x29, 0x21, 0x0, 0x20000280) #0 [566428ms] <- getsockopt$inet6_mreq=0xffffffffffffffff errno=9 cover=50 16:01:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r1, 0x27c42b3e46142bef}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) 2021/11/11 16:01:49 result hanged=false: [566468ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77869 #0 [566486ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [566487ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6290 #0 [566491ms] -> syz_genetlink_get_family_id$ieee802154(0x20000640, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) #0 [566492ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5531 #0 [566494ms] -> sendmsg$IEEE802154_LIST_IFACE(0x4, 0x20000740, 0x0) #0 [566494ms] <- sendmsg$IEEE802154_LIST_IFACE=0x14 errno=14 cover=1570 #0 [566496ms] -> syz_genetlink_get_family_id$ieee802154(0x20000040, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) netlink_send_ext: short netlink ack: 24 netlink: failed to get family id for 802.15.4 MAC: Invalid argument syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [566502ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=22 cover=7281 enabling collider #0 [566502ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [566503ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5674 #0 [566504ms] -> syz_genetlink_get_family_id$ieee802154(0x20000640, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) #0 [566504ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=4945 pthread_create failed (errno 11) 16:01:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r1, 0x27c42b3e46142bef}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) 2021/11/11 16:01:49 result hanged=false: 2021/11/11 16:01:49 #0: triaging type=7 2021/11/11 16:01:49 triaging input for call #2 sendmsg$IEEE802154_LIST_IFACE (new signal=1) [566578ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77971 #0 [566595ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [566596ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6299 #0 [566599ms] -> syz_genetlink_get_family_id$ieee802154(0x20000640, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) #0 [566599ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5472 #0 [566600ms] -> sendmsg$IEEE802154_LIST_IFACE(0x4, 0x20000740, 0x0) #0 [566601ms] <- sendmsg$IEEE802154_LIST_IFACE=0x14 errno=14 cover=1581 #0 [566605ms] -> syz_genetlink_get_family_id$ieee802154(0x20000040, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) netlink_send_ext: short netlink ack: 24 netlink: failed to get family id for 802.15.4 MAC: Invalid argument syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [566606ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=22 cover=7049 16:01:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r1, 0x27c42b3e46142bef}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) 2021/11/11 16:01:49 result hanged=false: [566645ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77973 #0 [566665ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [566666ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6253 #0 [566672ms] -> syz_genetlink_get_family_id$ieee802154(0x20000640, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) #0 [566673ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=9611 #0 [566674ms] -> sendmsg$IEEE802154_LIST_IFACE(0x4, 0x20000740, 0x0) #0 [566674ms] <- sendmsg$IEEE802154_LIST_IFACE=0x14 errno=14 cover=1570 #0 [566675ms] -> syz_genetlink_get_family_id$ieee802154(0x20000040, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) netlink_send_ext: short netlink ack: 24 netlink: failed to get family id for 802.15.4 MAC: Invalid argument syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [566676ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=22 cover=7090 16:01:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r1, 0x27c42b3e46142bef}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) 2021/11/11 16:01:49 result hanged=false: [566715ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77975 #0 [566734ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [566738ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6415 #0 [566740ms] -> syz_genetlink_get_family_id$ieee802154(0x20000640, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) #0 [566741ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5515 #0 [566742ms] -> sendmsg$IEEE802154_LIST_IFACE(0x4, 0x20000740, 0x0) #0 [566743ms] <- sendmsg$IEEE802154_LIST_IFACE=0x14 errno=14 cover=1583 #0 [566744ms] -> syz_genetlink_get_family_id$ieee802154(0x20000040, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) netlink_send_ext: short netlink ack: 24 netlink: failed to get family id for 802.15.4 MAC: Invalid argument syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [566744ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=22 cover=7142 2021/11/11 16:01:49 result hanged=false: 2021/11/11 16:01:49 added new input for call #2 sendmsg$IEEE802154_LIST_IFACE to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r1, 0x27c42b3e46142bef}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) 16:01:49 executing program 0: io_setup(0x4, &(0x7f0000000000)) io_setup(0xc52b, &(0x7f0000000340)) [566789ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77977 #0 [566807ms] -> io_setup(0x4, 0x20000000) #0 [566807ms] <- io_setup=0x0 errno=14 cover=3336 #0 [566808ms] -> io_setup(0xc52b, 0x20000340) #0 [566825ms] <- io_setup=0x0 errno=14 cover=220225 enabling collider #0 [566830ms] -> io_setup(0x4, 0x20000000) #0 [566830ms] <- io_setup=0xffffffffffffffff errno=22 cover=40 #0 [566830ms] -> io_setup(2021/11/11 16:01:49 result hanged=false: 16:01:49 executing program 0: fork() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[], 0x98a) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000000c0)) [566877ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 77979 #0 [566894ms] -> fork() #0 [566920ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [566923ms] -> openat$ptmx(0xffffffffffffff9c, 0x20000000, 0xc02, 0x0) #0 [566927ms] <- openat$ptmx=0x3 errno=14 cover=8157 #0 [566928ms] -> write$binfmt_elf64(0x3, 0x20000a00, 0x98a) #0 [566935ms] <- write$binfmt_elf64=0x98a errno=14 cover=998 #0 [566935ms] -> ioctl$TIOCSLCKTRMIOS(0x3, 0x5457, 0x200000c0) #0 [566943ms] <- ioctl$TIOCSLCKTRMIOS=0x0 errno=14 cover=2076 enabling collider #0 [566950ms] -> fork() #0 [566970ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [566970ms] -> openat$ptmx(0xffffffffffffff9c, 0x20000000, 0xc02, 0x0) #0 [566973ms] <- openat$ptmx=0x3 errno=14 cover=8361 pthread_create failed (errno 11) 16:01:49 executing program 0: fork() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[], 0x98a) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000000c0)) 2021/11/11 16:01:49 result hanged=false: 2021/11/11 16:01:49 #0: triaging type=7 2021/11/11 16:01:49 triaging input for call #2 write$binfmt_elf64 (new signal=1) [567042ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78083 #0 [567058ms] -> fork() #0 [567084ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [567100ms] -> openat$ptmx(0xffffffffffffff9c, 0x20000000, 0xc02, 0x0) #0 [567106ms] <- openat$ptmx=0x3 errno=14 cover=8260 #0 [567107ms] -> write$binfmt_elf64(0x3, 0x20000a00, 0x98a) #0 [567107ms] <- write$binfmt_elf64=0x98a errno=14 cover=889 #0 [567108ms] -> ioctl$TIOCSLCKTRMIOS(0x3, 0x5457, 0x200000c0) #0 [567108ms] <- ioctl$TIOCSLCKTRMIOS=0x0 errno=14 cover=220 16:01:49 executing program 0: fork() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[], 0x98a) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000000c0)) 2021/11/11 16:01:49 result hanged=false: [567165ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78086 #0 [567183ms] -> fork() #0 [567205ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [567221ms] -> openat$ptmx(0xffffffffffffff9c, 0x20000000, 0xc02, 0x0) #0 [567222ms] <- openat$ptmx=0x3 errno=14 cover=8244 #0 [567224ms] -> write$binfmt_elf64(0x3, 0x20000a00, 0x98a) #0 [567230ms] <- write$binfmt_elf64=0x98a errno=14 cover=961 #0 [567232ms] -> ioctl$TIOCSLCKTRMIOS(0x3, 0x5457, 0x200000c0) #0 [567241ms] <- ioctl$TIOCSLCKTRMIOS=0x0 errno=14 cover=2141 16:01:49 executing program 0: fork() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[], 0x98a) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000000c0)) 2021/11/11 16:01:49 result hanged=false: [567283ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78089 #0 [567300ms] -> fork() #0 [567325ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [567342ms] -> openat$ptmx(0xffffffffffffff9c, 0x20000000, 0xc02, 0x0) #0 [567345ms] <- openat$ptmx=0x3 errno=14 cover=8166 #0 [567346ms] -> write$binfmt_elf64(0x3, 0x20000a00, 0x98a) #0 [567346ms] <- write$binfmt_elf64=0x98a errno=14 cover=891 #0 [567346ms] -> ioctl$TIOCSLCKTRMIOS(0x3, 0x5457, 0x200000c0) #0 [567365ms] <- ioctl$TIOCSLCKTRMIOS=0x0 errno=14 cover=1255 2021/11/11 16:01:49 result hanged=false: 2021/11/11 16:01:49 added new input for call #2 write$binfmt_elf64 to corpus: fork() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[], 0x98a) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000000c0)) 16:01:49 executing program 0: pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000400), 0x0) 2021/11/11 16:01:49 poll: candidates=8 inputs=0 signal=0 [567409ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78092 #0 [567428ms] -> pkey_mprotect(0x20000000, 0x4000, 0x1, 0xffffffffffffffff) #0 [567428ms] <- pkey_mprotect=0x0 errno=14 cover=378 SIGSEGV on 0x20000400, skipping #0 [567429ms] -> sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x20000400, 0x0) #0 [567429ms] <- sendfile=0xffffffffffffffff errno=14 cover=643 enabling collider #0 [567430ms] -> pkey_mprotect(0x20000000, 0x4000, 0x1, 0xffffffffffffffff) #0 [567430ms] <- pkey_mprotect=0x0 errno=14 cover=83 SIGSEGV on 0x20000400, skipping 16:01:50 executing program 0: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{'\x06\x00\x00\x00l'}]}) 2021/11/11 16:01:50 result hanged=false: [567469ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78094 #0 [567486ms] -> syz_mount_image$nfs(0x20000000, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x20000200) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='nfs' flags=0 opts='' syz_mount_image > mount error: 22 #0 [567489ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=22 cover=2511 enabling collider #0 [567490ms] -> syz_mount_image$nfs(0x20000000, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x20000200) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='nfs' flags=0 opts='' syz_mount_image > mount error: 22 #0 [567491ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=22 cover=2423 16:01:50 executing program 0: syz_io_uring_setup(0x5f80, &(0x7f0000000440), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) 2021/11/11 16:01:50 result hanged=false: [567536ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78096 #0 [567557ms] -> syz_io_uring_setup(0x5f80, 0x20000440, 0x20ffc000, 0x20fed000, 0x200004c0, 0x20000500) #0 [567571ms] <- syz_io_uring_setup=0x3 errno=14 cover=21714 enabling collider #0 [567573ms] -> syz_io_uring_setup(0x5f80, 0x20000440, 0x20ffc000, 0x20fed000, 0x200004c0, 0x20000500) #0 [567577ms] <- syz_io_uring_setup=0x3 errno=14 cover=28690 16:01:50 executing program 0: r0 = syz_io_uring_setup(0x2, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x0, 0x0, 0x5, &(0x7f00000001c0), 0x8) 2021/11/11 16:01:50 result hanged=false: [567619ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78098 #0 [567644ms] -> syz_io_uring_setup(0x2, 0x20000000, 0x20000000, 0x20000000, 0x20000080, 0x200000c0) #0 [567648ms] <- syz_io_uring_setup=0x3 errno=22 cover=6210 #0 [567651ms] -> io_uring_enter(0x3, 0x0, 0x0, 0x5, 0x200001c0, 0x8) #0 [567651ms] <- io_uring_enter=0x0 errno=14 cover=91 enabling collider #0 [567652ms] -> syz_io_uring_setup(0x2, 0x20000000, 0x20000000, 0x20000000, 0x20000080, 0x200000c0) #0 [567661ms] <- syz_io_uring_setup=0x3 errno=22 cover=5706 16:01:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_setup(0x8001, &(0x7f00000190c0)=0x0) io_submit(r1, 0x3, &(0x7f0000019380)=[&(0x7f0000019140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000019100)='a', 0x1}, 0x0, 0x0]) io_submit(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) close(0xffffffffffffffff) 2021/11/11 16:01:50 result hanged=false: [567714ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78100 #0 [567732ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000400) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [567747ms] <- syz_mount_image$vfat=0x5 errno=0 cover=26060 #0 [567748ms] -> chdir(0x20000040) #0 [567748ms] <- chdir=0x0 errno=14 cover=659 #0 [567749ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [567750ms] <- openat=0x3 errno=14 cover=5599 #0 [567750ms] -> io_setup(0x8001, 0x200190c0) #0 [567757ms] <- io_setup=0x0 errno=14 cover=143855 #0 [567758ms] -> io_submit(0x7f7b9a148000, 0x3, 0x20019380) #0 [567765ms] <- io_submit=0x1 errno=14 cover=24024 #0 [567767ms] -> io_submit(0x0, 0x0, 0x0) #0 [567770ms] <- io_submit=0xffffffffffffffff errno=22 cover=220 #0 [567771ms] -> dup2(0xffffffffffffffff, 0xffffffffffffffff) #0 [567771ms] <- dup2=0xffffffffffffffff errno=9 cover=41 #0 [567772ms] -> close(0xffffffffffffffff) #0 [567772ms] <- close=0xffffffffffffffff errno=9 cover=41 enabling collider #0 [567773ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x20000400) #0 [567775ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=16 cover=5578 #0 [567775ms] -> chdir(0x20000040) #0 [567776ms] <- chdir=0xffffffffffffffff errno=2 cover=2905 pthread_create failed (errno 11) 16:01:50 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 2021/11/11 16:01:50 result hanged=false: umount(./4067/file0) [567885ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78202 #0 [567902ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x200a0000, 0x200b0000, 0x20000180, 0x20000340) #0 [567904ms] <- syz_io_uring_setup=0x3 errno=14 cover=7410 #0 [567906ms] -> syz_io_uring_submit(0x200a0000, 0x200b0000, 0x20000540, 0x0) #0 [567906ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [567908ms] -> syz_io_uring_submit(0x200a0000, 0x200b0000, 0x20000300, 0x0) #0 [567908ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [567908ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [567909ms] <- io_uring_enter=0x2 errno=14 cover=783 #0 [567909ms] -> execveat(0xffffffffffffffff, 0x20000000, 0x0, 0x0, 0x0) #0 [567911ms] <- execveat=0xffffffffffffffff errno=9 cover=17433 enabling collider #0 [567913ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x200a0000, 0x200b0000, 0x20000180, 0x20000340) #0 [567915ms] <- syz_io_uring_setup=0x3 errno=14 cover=6501 #0 [567916ms] -> syz_io_uring_submit(0x200a0000, 0x200b0000, 0x20000540, 0x0) #0 [567916ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 pthread_create failed (errno 11) 16:01:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[]) io_setup(0x5, &(0x7f0000000700)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1e, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2}]) rmdir(&(0x7f0000000080)='./file0\x00') 2021/11/11 16:01:50 result hanged=false: [567997ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78304 #0 [568020ms] -> syz_mount_image$ext4(0x20000000, 0x20000040, 0x40000, 0x3, 0x20000200, 0x0, 0x20000080) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1815.537853] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [568046ms] <- syz_mount_image$ext4=0x5 errno=0 cover=56373 #0 [568047ms] -> io_setup(0x5, 0x20000700) #0 [568048ms] <- io_setup=0x0 errno=14 cover=2904 #0 [568048ms] -> sendmsg$nl_generic(0xffffffffffffffff, 0x20000040, 0x0) #0 [568048ms] <- sendmsg$nl_generic=0xffffffffffffffff errno=9 cover=52 #0 [568048ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [568049ms] <- syz_open_procfs=0x3 errno=14 cover=4321 #0 [568049ms] -> io_submit(0x7f7b9ceea000, 0x1, 0x200006c0) #0 [568049ms] <- io_submit=0x1 errno=14 cover=2847 #0 [568049ms] -> rmdir(0x20000080) #0 [568049ms] <- rmdir=0xffffffffffffffff errno=16 cover=2559 enabling collider #0 [568050ms] -> syz_mount_image$ext4(0x20000000, 0x20000040, 0x40000, 0x3, 0x20000200, 0x0, 0x20000080) #0 [568052ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=8092 #0 [568052ms] -> io_setup(0x5, 0x20000700) #0 [568052ms] <- io_setup=0xffffffffffffffff errno=22 cover=40 pthread_create failed (errno 11) 2021/11/11 16:01:50 result hanged=false: 2021/11/11 16:01:50 #0: triaging type=7 2021/11/11 16:01:50 triaging input for call #0 syz_mount_image$ext4 (new signal=1) 16:01:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[]) io_setup(0x5, &(0x7f0000000700)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1e, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2}]) rmdir(&(0x7f0000000080)='./file0\x00') umount(./4069/file0) [568155ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78406 #0 [568174ms] -> syz_mount_image$ext4(0x20000000, 0x20000040, 0x40000, 0x3, 0x20000200, 0x0, 0x20000080) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1815.695253] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [568195ms] <- syz_mount_image$ext4=0x5 errno=0 cover=55628 #0 [568204ms] -> io_setup(0x5, 0x20000700) #0 [568205ms] <- io_setup=0x0 errno=14 cover=2754 #0 [568206ms] -> sendmsg$nl_generic(0xffffffffffffffff, 0x20000040, 0x0) #0 [568207ms] <- sendmsg$nl_generic=0xffffffffffffffff errno=9 cover=52 #0 [568207ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [568208ms] <- syz_open_procfs=0x3 errno=14 cover=4412 #0 [568209ms] -> io_submit(0x7f7b9ceea000, 0x1, 0x200006c0) #0 [568209ms] <- io_submit=0x1 errno=14 cover=2790 #0 [568210ms] -> rmdir(0x20000080) #0 [568210ms] <- rmdir=0xffffffffffffffff errno=16 cover=742 2021/11/11 16:01:50 result hanged=false: 16:01:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[]) io_setup(0x5, &(0x7f0000000700)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1e, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2}]) rmdir(&(0x7f0000000080)='./file0\x00') umount(./4070/file0) [568286ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78408 #0 [568308ms] -> syz_mount_image$ext4(0x20000000, 0x20000040, 0x40000, 0x3, 0x20000200, 0x0, 0x20000080) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1815.834593] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [568335ms] <- syz_mount_image$ext4=0x5 errno=0 cover=51753 #0 [568343ms] -> io_setup(0x5, 0x20000700) #0 [568345ms] <- io_setup=0x0 errno=14 cover=2762 #0 [568345ms] -> sendmsg$nl_generic(0xffffffffffffffff, 0x20000040, 0x0) #0 [568345ms] <- sendmsg$nl_generic=0xffffffffffffffff errno=9 cover=52 #0 [568346ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [568346ms] <- syz_open_procfs=0x3 errno=14 cover=4281 #0 [568347ms] -> io_submit(0x7f7b9ceea000, 0x1, 0x200006c0) #0 [568348ms] <- io_submit=0x1 errno=14 cover=2801 #0 [568348ms] -> rmdir(0x20000080) #0 [568348ms] <- rmdir=0xffffffffffffffff errno=16 cover=744 2021/11/11 16:01:50 result hanged=false: 16:01:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[]) io_setup(0x5, &(0x7f0000000700)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1e, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2}]) rmdir(&(0x7f0000000080)='./file0\x00') umount(./4071/file0) [568415ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78410 #0 [568437ms] -> syz_mount_image$ext4(0x20000000, 0x20000040, 0x40000, 0x3, 0x20000200, 0x0, 0x20000080) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1815.956181] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [568455ms] <- syz_mount_image$ext4=0x5 errno=0 cover=52537 #0 [568465ms] -> io_setup(0x5, 0x20000700) #0 [568466ms] <- io_setup=0x0 errno=14 cover=2696 #0 [568471ms] -> sendmsg$nl_generic(0xffffffffffffffff, 0x20000040, 0x0) #0 [568471ms] <- sendmsg$nl_generic=0xffffffffffffffff errno=9 cover=52 #0 [568473ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [568474ms] <- syz_open_procfs=0x3 errno=14 cover=4368 #0 [568475ms] -> io_submit(0x7f7b9ceea000, 0x1, 0x200006c0) #0 [568475ms] <- io_submit=0x1 errno=14 cover=3060 #0 [568476ms] -> rmdir(0x20000080) #0 [568477ms] <- rmdir=0xffffffffffffffff errno=16 cover=744 2021/11/11 16:01:51 result hanged=false: 2021/11/11 16:01:51 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[]) io_setup(0x5, &(0x7f0000000700)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1e, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2}]) rmdir(&(0x7f0000000080)='./file0\x00') umount(./4072/file0) 16:01:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001d00210c00ebffffffffffff04"], 0x14}}, 0x0) [568548ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78412 #0 [568564ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [568565ms] <- socket$nl_generic=0x3 errno=14 cover=1522 #0 [568565ms] -> sendmsg$nl_generic(0x3, 0x20000080, 0x0) #0 [568609ms] <- sendmsg$nl_generic=0x14 errno=14 cover=220534 enabling collider #0 [568613ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [568613ms] <- socket$nl_generic=0x3 errno=14 cover=1531 2021/11/11 16:01:51 result hanged=false: 2021/11/11 16:01:51 #0: triaging type=7 2021/11/11 16:01:51 triaging input for call #1 sendmsg$nl_generic (new signal=1) 16:01:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001d00210c00ebffffffffffff04"], 0x14}}, 0x0) [568663ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78414 #0 [568685ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [568685ms] <- socket$nl_generic=0x3 errno=14 cover=1445 #0 [568686ms] -> sendmsg$nl_generic(0x3, 0x20000080, 0x0) #0 [568706ms] <- sendmsg$nl_generic=0x14 errno=14 cover=239622 2021/11/11 16:01:51 result hanged=false: 16:01:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001d00210c00ebffffffffffff04"], 0x14}}, 0x0) [568781ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78416 #0 [568800ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [568801ms] <- socket$nl_generic=0x3 errno=14 cover=1434 #0 [568802ms] -> sendmsg$nl_generic(0x3, 0x20000080, 0x0) #0 [568827ms] <- sendmsg$nl_generic=0x14 errno=14 cover=242687 2021/11/11 16:01:51 result hanged=false: 16:01:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001d00210c00ebffffffffffff04"], 0x14}}, 0x0) [568892ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78418 #0 [568909ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [568909ms] <- socket$nl_generic=0x3 errno=14 cover=1481 #0 [568911ms] -> sendmsg$nl_generic(0x3, 0x20000080, 0x0) #0 [568944ms] <- sendmsg$nl_generic=0x14 errno=14 cover=257128 2021/11/11 16:01:51 result hanged=false: 2021/11/11 16:01:51 added new input for call #1 sendmsg$nl_generic to corpus: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001d00210c00ebffffffffffff04"], 0x14}}, 0x0) 16:01:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) [569042ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78420 2021/11/11 16:01:51 poll: candidates=8 inputs=0 signal=0 #0 [569058ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [569058ms] <- socket$inet_tcp=0x3 errno=14 cover=1743 #0 [569059ms] -> getsockopt$inet_tcp_int(0x3, 0x6, 0x6, 0x20000d00, 0x20000d40) #0 [569060ms] <- getsockopt$inet_tcp_int=0x0 errno=14 cover=120 enabling collider #0 [569060ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [569061ms] <- socket$inet_tcp=0x3 errno=14 cover=1802 2021/11/11 16:01:51 result hanged=false: 16:01:51 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002400)) [569100ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78422 #0 [569119ms] -> socketpair$unix(0x1, 0x3, 0x0, 0x20002400) #0 [569119ms] <- socketpair$unix=0x0 errno=14 cover=3663 enabling collider #0 [569120ms] -> socketpair$unix(0x1, 0x3, 0x0, 0x20002400) #0 [569121ms] <- socketpair$unix=0x0 errno=14 cover=2967 2021/11/11 16:01:51 result hanged=false: 16:01:51 executing program 0: r0 = syz_io_uring_setup(0x1f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffffc, 0x60}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0xffffffffffffffda) [569165ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78424 #0 [569183ms] -> syz_io_uring_setup(0x1f, 0x20000080, 0x200a0000, 0x20ffd000, 0x20000180, 0x20002a40) #0 [569186ms] <- syz_io_uring_setup=0x3 errno=14 cover=7828 #0 [569188ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000100, 0x0) #0 [569188ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [569188ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0xffffffffffffffda) #0 [569189ms] <- io_uring_enter=0x1 errno=14 cover=630 enabling collider #0 [569189ms] -> syz_io_uring_setup(0x1f, 0x20000080, 0x200a0000, 0x20ffd000, 0x20000180, 0x20002a40) #0 [569191ms] <- syz_io_uring_setup=0x3 errno=14 cover=5388 #0 [569191ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000100, 0x0) #0 [569191ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 pthread_create failed (errno 11) 16:01:51 executing program 0: r0 = syz_io_uring_setup(0x1f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffffc, 0x60}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0xffffffffffffffda) 2021/11/11 16:01:51 result hanged=false: 2021/11/11 16:01:51 #0: triaging type=7 2021/11/11 16:01:51 triaging input for call #0 syz_io_uring_setup (new signal=2) [569264ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 16:01:51 poll: candidates=0 inputs=0 signal=0 spawned worker pid 78526 #0 [569285ms] -> syz_io_uring_setup(0x1f, 0x20000080, 0x200a0000, 0x20ffd000, 0x20000180, 0x20002a40) #0 [569291ms] <- syz_io_uring_setup=0x3 errno=14 cover=8028 #0 [569292ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000100, 0x0) #0 [569292ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [569293ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0xffffffffffffffda) #0 [569293ms] <- io_uring_enter=0x1 errno=14 cover=608 2021/11/11 16:01:51 result hanged=false: 16:01:51 executing program 0: r0 = syz_io_uring_setup(0x1f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffffc, 0x60}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0xffffffffffffffda) [569332ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78528 #0 [569355ms] -> syz_io_uring_setup(0x1f, 0x20000080, 0x200a0000, 0x20ffd000, 0x20000180, 0x20002a40) #0 [569357ms] <- syz_io_uring_setup=0x3 errno=14 cover=8138 #0 [569358ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000100, 0x0) #0 [569358ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [569358ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0xffffffffffffffda) #0 [569359ms] <- io_uring_enter=0x1 errno=14 cover=619 2021/11/11 16:01:51 result hanged=false: 16:01:51 executing program 0: r0 = syz_io_uring_setup(0x1f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffffc, 0x60}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0xffffffffffffffda) [569399ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78530 #0 [569418ms] -> syz_io_uring_setup(0x1f, 0x20000080, 0x200a0000, 0x20ffd000, 0x20000180, 0x20002a40) #0 [569420ms] <- syz_io_uring_setup=0x3 errno=14 cover=7779 #0 [569422ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000100, 0x0) #0 [569422ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [569422ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0xffffffffffffffda) #0 [569422ms] <- io_uring_enter=0x1 errno=14 cover=608 2021/11/11 16:01:52 result hanged=false: 2021/11/11 16:01:52 added new input for call #0 syz_io_uring_setup to corpus: r0 = syz_io_uring_setup(0x1f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffffc, 0x60}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0xffffffffffffffda) 16:01:52 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000200)={0x0, 0x0}) [569471ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78532 #0 [569488ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [569502ms] <- perf_event_open=0x3 errno=14 cover=9082 #0 [569503ms] -> syz_open_dev$usbmon(0x20000040, 0x0, 0x0) #0 [569504ms] <- syz_open_dev$usbmon=0x4 errno=14 cover=8223 #0 [569504ms] -> ioctl$MON_IOCX_GETX(0x4, 0x4018920a, 0x20000200) enabling collider pthread_create failed (errno 11) 2021/11/11 16:01:53 result hanged=false: 16:01:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000200)={0x0, 0x0}) 2021/11/11 16:01:53 #0: triaging type=7 2021/11/11 16:01:53 triaging input for call #2 ioctl$MON_IOCX_GETX (new signal=1) [570686ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78634 #0 [570708ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [570709ms] <- perf_event_open=0x3 errno=14 cover=8461 #0 [570710ms] -> syz_open_dev$usbmon(0x20000040, 0x0, 0x0) #0 [570711ms] <- syz_open_dev$usbmon=0x4 errno=14 cover=7981 #0 [570712ms] -> ioctl$MON_IOCX_GETX(0x4, 0x4018920a, 0x20000200) 16:01:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000200)={0x0, 0x0}) 2021/11/11 16:01:54 result hanged=false: [571864ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78636 #0 [571881ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [571885ms] <- perf_event_open=0x3 errno=14 cover=8282 #0 [571887ms] -> syz_open_dev$usbmon(0x20000040, 0x0, 0x0) #0 [571888ms] <- syz_open_dev$usbmon=0x4 errno=14 cover=8169 #0 [571889ms] -> ioctl$MON_IOCX_GETX(0x4, 0x4018920a, 0x20000200) 16:01:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000200)={0x0, 0x0}) 2021/11/11 16:01:55 result hanged=false: [573040ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78638 #0 [573058ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [573061ms] <- perf_event_open=0x3 errno=14 cover=14689 #0 [573063ms] -> syz_open_dev$usbmon(0x20000040, 0x0, 0x0) #0 [573064ms] <- syz_open_dev$usbmon=0x4 errno=14 cover=8177 #0 [573065ms] -> ioctl$MON_IOCX_GETX(0x4, 0x4018920a, 0x20000200) 2021/11/11 16:01:56 result hanged=false: 2021/11/11 16:01:56 added new input for call #2 ioctl$MON_IOCX_GETX to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000200)={0x0, 0x0}) 16:01:56 executing program 0: request_key(&(0x7f0000000200)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x3}, 0xfffffffffffffffe, 0x0) [574225ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78640 #0 [574243ms] -> request_key(0x20000200, 0x20000240, 0x9999999999999999, 0x0) #0 [574246ms] <- request_key=0xffffffffffffffff errno=14 cover=296 enabling collider #0 [574246ms] -> request_key(0x20000200, 0x20000240, 0x9999999999999999, 0x0) #0 [574247ms] <- request_key=0xffffffffffffffff errno=14 cover=296 2021/11/11 16:01:56 result hanged=false: 16:01:56 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '\xd1\x05\xa4f)\xc2?\xb1\x04\x95\xfe\x97s\xd5\xe5U&_RD\xe4\x05\xb3[\xfc\n\xa8\xa4{\xbf\xf8\x98K\xf3\x9d\xc1\xd8\x92\xae\x9d\xa3\xd6=K5\xd2\x84\xd2\x13\xfdj\xa3\xac\xfa0\x18v[\xd9\xbdI8k[\bT\x9e\xa2\xd3\xc5JY\x1d\x91\xa4[\xa3N\x17Nv=\x97\xde{Y\r8\x83U\xc4\xc6\xd6\xf0\xce\x11\x1c\xa9\xc0\xf6\xb9\xbft\xaa\xa6zL\x95u\xb5z\x15\x1aj\x8f\xc0\xdf\xd2\xae\xce\x88\x93%\xc3\xd5\x87I\'\xc8\xeb\x8dy\xc4\x11\xc2\x8e\xab\x831\xa2\x99\x17_\xdd\x83\x853\xe9\xeeU\xa09\xc9Ni\xd6\xbc\x14\xb9\x0f:\x9a\xf0\xdb\xfc\x99\'+\xab\x04\x81/@e\xa4@\xec\x9e\x96\x8d\xb7)\xf7\xff\xff\xff\xff\xff\xff\xff\\J\xaa'}}]}}) [574287ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78642 #0 [574304ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [574308ms] <- openat=0x3 errno=14 cover=7465 #0 [574309ms] -> pipe(0x200001c0) #0 [574310ms] <- pipe=0x0 errno=14 cover=1216 #0 [574310ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x20000200) #0 [574343ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=67761 enabling collider #0 [574344ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [574345ms] <- openat=0x3 errno=14 cover=1202 #0 [574346ms] -> pipe(0x200001c0) #0 [574346ms] <- pipe=0x0 errno=14 cover=1229 pthread_create failed (errno 11) 2021/11/11 16:01:56 result hanged=false: 16:01:56 executing program 0: setreuid(0xffffffffffffffff, 0xee01) [574424ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78744 #0 [574444ms] -> setreuid(0xffffffffffffffff, 0xee01) #0 [574444ms] <- setreuid=0x0 errno=14 cover=384 enabling collider #0 [574444ms] -> setreuid(0xffffffffffffffff, 0xee01) #0 [574444ms] <- setreuid=0x0 errno=14 cover=407 16:01:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000640)={[{@journal_dev}]}) 2021/11/11 16:01:57 result hanged=false: [574486ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78746 #0 [574504ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000200, 0x0, 0x20000640) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts='journal_dev=0x0000000000000000,,errors=continue' [ 1822.023018] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,,errors=continue #0 [574530ms] <- syz_mount_image$ext4=0x5 errno=0 cover=68149 enabling collider #0 [574532ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000200, 0x0, 0x20000640) #0 [574534ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=8020 2021/11/11 16:01:57 result hanged=false: 2021/11/11 16:01:57 #0: triaging type=7 2021/11/11 16:01:57 triaging input for call #0 syz_mount_image$ext4 (new signal=3) 16:01:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000640)={[{@journal_dev}]}) umount(./4090/file0) [574595ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78748 #0 [574613ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000200, 0x0, 0x20000640) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts='journal_dev=0x0000000000000000,,errors=continue' [ 1822.128426] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,,errors=continue #0 [574629ms] <- syz_mount_image$ext4=0x5 errno=0 cover=60999 2021/11/11 16:01:57 result hanged=false: 16:01:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000640)={[{@journal_dev}]}) umount(./4091/file0) [574709ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78750 #0 [574724ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000200, 0x0, 0x20000640) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts='journal_dev=0x0000000000000000,,errors=continue' [ 1822.238432] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,,errors=continue #0 [574740ms] <- syz_mount_image$ext4=0x5 errno=0 cover=63784 2021/11/11 16:01:57 result hanged=false: 16:01:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000640)={[{@journal_dev}]}) umount(./4092/file0) [574791ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78752 #0 [574807ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000200, 0x0, 0x20000640) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts='journal_dev=0x0000000000000000,,errors=continue' [ 1822.327286] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,,errors=continue #0 [574826ms] <- syz_mount_image$ext4=0x5 errno=0 cover=48113 2021/11/11 16:01:57 result hanged=false: 2021/11/11 16:01:57 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000640)={[{@journal_dev}]}) umount(./4093/file0) 16:01:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2272, &(0x7f0000000000)) [574909ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/11 16:01:57 poll: candidates=8 inputs=0 signal=0 spawned worker pid 78754 #0 [574922ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [574923ms] <- perf_event_open=0x3 errno=14 cover=8137 #0 [574923ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [574925ms] <- openat=0x4 errno=14 cover=14462 #0 [574926ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [574927ms] <- mount=0x0 errno=14 cover=7174 #0 [574928ms] -> openat(0xffffffffffffff9c, 0x20004c40, 0x84e00, 0x0) #0 [574947ms] <- openat=0x5 errno=14 cover=7434 #0 [574948ms] -> ioctl$SG_SET_TIMEOUT(0x5, 0x2272, 0x20000000) #0 [574948ms] <- ioctl$SG_SET_TIMEOUT=0x0 errno=14 cover=330 enabling collider #0 [574979ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [574981ms] <- perf_event_open=0x3 errno=14 cover=8915 #0 [574982ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) pthread_create failed (errno 11) 16:01:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2272, &(0x7f0000000000)) 2021/11/11 16:01:57 result hanged=false: 2021/11/11 16:01:57 #0: triaging type=7 2021/11/11 16:01:57 triaging input for call #4 ioctl$SG_SET_TIMEOUT (new signal=4) umount(./4094/file1) [575083ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78856 #0 [575096ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [575097ms] <- perf_event_open=0x3 errno=14 cover=8433 #0 [575098ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [575100ms] <- openat=0x4 errno=14 cover=7289 #0 [575101ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [575101ms] <- mount=0x0 errno=14 cover=2428 #0 [575101ms] -> openat(0xffffffffffffff9c, 0x20004c40, 0x84e00, 0x0) #0 [575124ms] <- openat=0x5 errno=14 cover=3335 #0 [575125ms] -> ioctl$SG_SET_TIMEOUT(0x5, 0x2272, 0x20000000) #0 [575125ms] <- ioctl$SG_SET_TIMEOUT=0x0 errno=14 cover=185 16:01:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2272, &(0x7f0000000000)) 2021/11/11 16:01:57 result hanged=false: umount(./4095/file1) [575190ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78858 #0 [575209ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [575218ms] <- perf_event_open=0x3 errno=14 cover=10148 #0 [575219ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [575221ms] <- openat=0x4 errno=14 cover=7293 #0 [575222ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [575222ms] <- mount=0x0 errno=14 cover=2395 #0 [575222ms] -> openat(0xffffffffffffff9c, 0x20004c40, 0x84e00, 0x0) #0 [575241ms] <- openat=0x5 errno=14 cover=3317 #0 [575242ms] -> ioctl$SG_SET_TIMEOUT(0x5, 0x2272, 0x20000000) #0 [575242ms] <- ioctl$SG_SET_TIMEOUT=0x0 errno=14 cover=330 16:01:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2272, &(0x7f0000000000)) 2021/11/11 16:01:57 result hanged=false: umount(./4096/file1) [575310ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78860 #0 [575328ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [575329ms] <- perf_event_open=0x3 errno=14 cover=8076 #0 [575332ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [575334ms] <- openat=0x4 errno=14 cover=7811 #0 [575336ms] -> mount(0x20000080, 0x200000c0, 0x0, 0x209000, 0x0) #0 [575337ms] <- mount=0x0 errno=14 cover=2417 #0 [575338ms] -> openat(0xffffffffffffff9c, 0x20004c40, 0x84e00, 0x0) #0 [575354ms] <- openat=0x5 errno=14 cover=3524 #0 [575355ms] -> ioctl$SG_SET_TIMEOUT(0x5, 0x2272, 0x20000000) #0 [575355ms] <- ioctl$SG_SET_TIMEOUT=0x0 errno=14 cover=185 2021/11/11 16:01:57 result hanged=false: 2021/11/11 16:01:57 added new input for call #4 ioctl$SG_SET_TIMEOUT to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2272, &(0x7f0000000000)) 16:01:57 executing program 0: prctl$PR_SET_DUMPABLE(0x4, 0x0) umount(./4097/file1) [575411ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78862 #0 [575429ms] -> prctl$PR_SET_DUMPABLE(0x4, 0x0) #0 [575429ms] <- prctl$PR_SET_DUMPABLE=0x0 errno=22 cover=48 enabling collider #0 [575431ms] -> prctl$PR_SET_DUMPABLE(0x4, 0x0) #0 [575431ms] <- prctl$PR_SET_DUMPABLE=0x0 errno=22 cover=48 16:01:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @short}, 0x14) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) 2021/11/11 16:01:58 result hanged=false: [575473ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78864 #0 [575491ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [575492ms] <- perf_event_open=0x3 errno=14 cover=7938 #0 [575494ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [575496ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1815 #0 [575500ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [575501ms] <- syz_init_net_socket$802154_dgram=0x6 errno=14 cover=6402 #0 [575502ms] -> bind$802154_dgram(0x6, 0x20000000, 0x14) #0 [575502ms] <- bind$802154_dgram=0x0 errno=14 cover=170 #0 [575504ms] -> connect$802154_dgram(0x6, 0x20000180, 0x14) #0 [575504ms] <- connect$802154_dgram=0x0 errno=14 cover=187 #0 [575506ms] -> sendmmsg$sock(0x6, 0x200021c0, 0x324, 0x0) #0 [575711ms] <- sendmmsg$sock=0x324 errno=14 cover=262143 enabling collider #0 [575733ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [575737ms] <- perf_event_open=0x3 errno=14 cover=8773 #0 [575738ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [575738ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1716 pthread_create failed (errno 11) 2021/11/11 16:01:58 result hanged=false: 2021/11/11 16:01:58 #0: triaging type=7 2021/11/11 16:01:58 triaging input for call #5 sendmmsg$sock (new signal=19) 16:01:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @short}, 0x14) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) [575828ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78966 #0 [575846ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [575851ms] <- perf_event_open=0x3 errno=14 cover=8502 #0 [575852ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [575854ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=5243 #0 [575855ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [575856ms] <- syz_init_net_socket$802154_dgram=0x6 errno=14 cover=18766 #0 [575859ms] -> bind$802154_dgram(0x6, 0x20000000, 0x14) #0 [575860ms] <- bind$802154_dgram=0x0 errno=14 cover=344 #0 [575860ms] -> connect$802154_dgram(0x6, 0x20000180, 0x14) #0 [575860ms] <- connect$802154_dgram=0x0 errno=14 cover=419 #0 [575861ms] -> sendmmsg$sock(0x6, 0x200021c0, 0x324, 0x0) #0 [576076ms] <- sendmmsg$sock=0x324 errno=14 cover=262143 16:01:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @short}, 0x14) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) 2021/11/11 16:01:58 result hanged=false: [576154ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78968 #0 [576176ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [576177ms] <- perf_event_open=0x3 errno=14 cover=8041 #0 [576178ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [576178ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1673 #0 [576178ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [576180ms] <- syz_init_net_socket$802154_dgram=0x6 errno=14 cover=6389 #0 [576181ms] -> bind$802154_dgram(0x6, 0x20000000, 0x14) #0 [576181ms] <- bind$802154_dgram=0x0 errno=14 cover=170 #0 [576181ms] -> connect$802154_dgram(0x6, 0x20000180, 0x14) #0 [576181ms] <- connect$802154_dgram=0x0 errno=14 cover=187 #0 [576181ms] -> sendmmsg$sock(0x6, 0x200021c0, 0x324, 0x0) #0 [576362ms] <- sendmmsg$sock=0x324 errno=14 cover=262143 16:01:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @short}, 0x14) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) 2021/11/11 16:01:58 result hanged=false: [576433ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78970 #0 [576451ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [576456ms] <- perf_event_open=0x3 errno=14 cover=8208 #0 [576457ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [576458ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1750 #0 [576459ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [576460ms] <- syz_init_net_socket$802154_dgram=0x6 errno=14 cover=6282 #0 [576461ms] -> bind$802154_dgram(0x6, 0x20000000, 0x14) #0 [576461ms] <- bind$802154_dgram=0x0 errno=14 cover=170 #0 [576462ms] -> connect$802154_dgram(0x6, 0x20000180, 0x14) #0 [576462ms] <- connect$802154_dgram=0x0 errno=14 cover=187 #0 [576462ms] -> sendmmsg$sock(0x6, 0x200021c0, 0x324, 0x0) #0 [576632ms] <- sendmmsg$sock=0x324 errno=14 cover=262143 2021/11/11 16:01:59 result hanged=false: 2021/11/11 16:01:59 added new input for call #5 sendmmsg$sock to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @short}, 0x14) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) 16:01:59 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}]}) [576711ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78972 #0 [576728ms] -> syz_mount_image$tmpfs(0x20000800, 0x20000840, 0x0, 0x0, 0x0, 0x0, 0x20001c80) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='mpol=default,' #0 [576736ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=14591 enabling collider #0 [576741ms] -> syz_mount_image$tmpfs(0x20000800, 0x20000840, 0x0, 0x0, 0x0, 0x0, 0x20001c80) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='mpol=default,' #0 [576744ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=14736 16:01:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x20, 0x21, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xa}]}, 0x20}}, 0x0) 2021/11/11 16:01:59 result hanged=false: umount(./4103/file0) umount(./4103/file0) [576793ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78974 #0 [576810ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [576810ms] <- socket$netlink=0x3 errno=14 cover=1465 [ 1824.314930] netlink: 'syz-executor.0': attribute type 10 has an invalid length. #0 [576811ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [576814ms] <- sendmsg$nl_generic=0x20 errno=14 cover=3281 enabling collider #0 [576818ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [576819ms] <- socket$netlink=0x3 errno=14 cover=1554 #0 [576821ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [576821ms] <- sendmsg$nl_generic=0xffffffffffffffff errno=9 2021/11/11 16:01:59 result hanged=false: 16:01:59 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2044034, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x800}}]}) [576860ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 78976 #0 [576878ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [576881ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13136 #0 [576884ms] -> mount$9p_unix(0x20000140, 0x20002f00, 0x0, 0x21000, 0x0) #0 [576884ms] <- mount$9p_unix=0x0 errno=14 cover=2709 #0 [576885ms] -> syz_mount_image$ext4(0x20000280, 0x200002c0, 0x0, 0x0, 0x0, 0x2044034, 0x20000080) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='ext3' flags=33833012 opts='commit=0x0000000000000800,,errors=continue' [ 1824.404034] EXT4-fs (sda): re-mounted. Opts: commit=0x0000000000000800,,errors=continue #0 [576903ms] <- syz_mount_image$ext4=0x3 errno=0 cover=172732 enabling collider #0 [576905ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [576906ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=5261 #0 [576907ms] -> mount$9p_unix(0x20000140, 0x20002f00, 0x0, 0x21000, 0x0) #0 [576907ms] <- mount$9p_unix=0x0 errno=14 cover=2619 pthread_create failed (errno 11) umount(./4105/file0) umount(./4105/file0) 16:01:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req3, 0x1c) 2021/11/11 16:01:59 result hanged=false: [576990ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79078 #0 [577006ms] -> socket$packet(0x11, 0x3, 0x300) #0 [577006ms] <- socket$packet=0x3 errno=14 cover=1774 #0 [577008ms] -> setsockopt$packet_tx_ring(0x3, 0x107, 0xd, 0x200001c0, 0x1c) #0 [577011ms] <- setsockopt$packet_tx_ring=0x0 errno=14 cover=315 enabling collider #0 [577016ms] -> socket$packet(0x11, 0x3, 0x300) #0 [577017ms] <- socket$packet=0x3 errno=14 cover=1855 #0 [577017ms] -> setsockopt$packet_tx_ring(0x3, 0x107, 0xd, 0x200001c0, 0x1c) #0 [577017ms] <- setsockopt$packet_tx_ring=0xffffffffffffffff errno=9 cover=51 16:01:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000dffff42c00000008000300", @ANYRES32=r2], 0x30}}, 0x0) 2021/11/11 16:01:59 result hanged=false: [577056ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79080 #0 [577073ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [577073ms] <- socket$nl_generic=0x3 errno=14 cover=1445 #0 [577074ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [577075ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11908 #0 [577076ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x200000c0) #0 [577076ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 [ 1824.581785] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [577078ms] -> sendmsg$NL80211_CMD_CONNECT(0x3, 0x200001c0, 0x0) #0 [577084ms] <- sendmsg$NL80211_CMD_CONNECT=0x30 errno=14 cover=3705 enabling collider #0 [577088ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [577089ms] <- socket$nl_generic=0x3 errno=14 cover=1542 #0 [577090ms] -> syz_genetlink_get_family_id$nl80211(0x20000080, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [577091ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11436 pthread_create failed (errno 11) 2021/11/11 16:01:59 result hanged=false: 16:01:59 executing program 0: syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) write$tun(0xffffffffffffffff, 0x0, 0x0) mlockall(0x1) 2021/11/11 16:01:59 poll: candidates=8 inputs=0 signal=0 [577164ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79182 #0 [577185ms] -> syz_open_dev$mouse(0x20000000, 0x0, 0x0) #0 [577186ms] <- syz_open_dev$mouse=0x3 errno=14 cover=1236 #0 [577186ms] -> syz_genetlink_get_family_id$devlink(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(devlink, -1) netlink: failed to get family id for devlink: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [577203ms] <- syz_genetlink_get_family_id$devlink=0xffffffffffffffff errno=2 cover=10429 #0 [577203ms] -> write$tun(0xffffffffffffffff, 0x0, 0x0) #0 [577203ms] <- write$tun=0xffffffffffffffff errno=9 cover=47 #0 [577204ms] -> mlockall(0x1) #0 [577406ms] <- mlockall=0x0 errno=14 cover=262143 enabling collider #0 [577408ms] -> syz_open_dev$mouse(0x20000000, 0x0, 0x0) #0 [577408ms] <- syz_open_dev$mouse=0x3 errno=14 cover=1213 #0 [577408ms] -> syz_genetlink_get_family_id$devlink(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(devlink, -1) netlink: failed to get family id for devlink: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [577433ms] <- syz_genetlink_get_family_id$devlink=0xffffffffffffffff errno=2 cover=7878 pthread_create failed (errno 11) 16:02:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 2021/11/11 16:02:00 result hanged=false: [577570ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79284 #0 [577589ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [577601ms] <- perf_event_open=0x3 errno=14 cover=9274 #0 [577601ms] -> preadv2(0xffffffffffffffff, 0x20000000, 0x0, 0x0, 0x0, 0x0) #0 [577601ms] <- preadv2=0xffffffffffffffff errno=9 cover=50 enabling collider #0 [577613ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [577614ms] <- perf_event_open=0x3 errno=14 cover=8267 #0 [577614ms] -> preadv2(0xffffffffffffffff, 0x20000000, 0x0, 0x0, 0x0, 0x0) #0 [577614ms] <- preadv2=0xffffffffffffffff errno=9 cover=50 16:02:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000e1f4655fe1f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000e0f4655fe1f4655fe1f4655f000000000000040008", 0x1d, 0x4100}], 0x0, &(0x7f0000013800)) 2021/11/11 16:02:00 result hanged=false: [577665ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79286 #0 [577686ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [577687ms] <- perf_event_open=0x3 errno=14 cover=8120 #0 [577687ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000200, 0x0, 0x20013800) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 1825.210959] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [577710ms] <- syz_mount_image$ext4=0x6 errno=0 cover=48136 enabling collider #0 [577726ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [577727ms] <- perf_event_open=0x3 errno=14 cover=8059 #0 [577727ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000200, 0x0, 0x20013800) #0 [577729ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=8206 2021/11/11 16:02:00 result hanged=false: 16:02:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_GET_PACK_ID(r2, 0x1267, &(0x7f0000001c40)) umount(./4110/file0) [577815ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79288 #0 [577833ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [577833ms] <- syz_open_dev$sg=0x3 errno=14 cover=1429 #0 [577834ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [577834ms] <- socket$inet6_udp=0x4 errno=14 cover=1695 #0 [577835ms] -> fcntl$dupfd(0x3, 0x0, 0x4) #0 [577835ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [577835ms] -> ioctl$SG_GET_PACK_ID(0x5, 0x1267, 0x20001c40) #0 [577835ms] <- ioctl$SG_GET_PACK_ID=0x0 errno=14 cover=388 enabling collider #0 [577836ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [577836ms] <- syz_open_dev$sg=0x3 errno=14 cover=1485 #0 [577838ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [577839ms] <- socket$inet6_udp=0x4 errno=14 cover=1825 pthread_create failed (errno 11) 2021/11/11 16:02:00 result hanged=false: 16:02:00 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) [577921ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79390 #0 [577939ms] -> openat$ttyS3(0xffffffffffffff9c, 0x20000b40, 0x0, 0x0) #0 [577941ms] <- openat$ttyS3=0x3 errno=14 cover=4285 enabling collider #0 [577942ms] -> openat$ttyS3(0xffffffffffffff9c, 0x20000b40, 0x0, 0x0) #0 [577943ms] <- openat$ttyS3=0x3 errno=14 cover=4253 16:02:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@polexpire={0xc0, 0x1b, 0x403, 0x0, 0x0, {{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x6e6bbd}}}, 0xc0}}, 0x0) 2021/11/11 16:02:00 result hanged=false: [577982ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79392 #0 [578001ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [578001ms] <- socket$nl_xfrm=0x3 errno=14 cover=1481 #0 [578003ms] -> sendmsg$nl_xfrm(0x3, 0x20000080, 0x0) #0 [578006ms] <- sendmsg$nl_xfrm=0xc0 errno=14 cover=1599 enabling collider #0 [578007ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [578008ms] <- socket$nl_xfrm=0x3 errno=14 cover=1545 16:02:00 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) 2021/11/11 16:02:00 result hanged=false: [578050ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79394 #0 [578073ms] -> syz_genetlink_get_family_id$ethtool(0x20000b40, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [578074ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=9158 enabling collider #0 [578076ms] -> syz_genetlink_get_family_id$ethtool(0x20000b40, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [578077ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=7497 2021/11/11 16:02:00 result hanged=false: 2021/11/11 16:02:00 #0: triaging type=7 16:02:00 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) 2021/11/11 16:02:00 triaging input for call #0 syz_genetlink_get_family_id$ethtool (new signal=1) [578121ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79396 #0 [578138ms] -> syz_genetlink_get_family_id$ethtool(0x20000b40, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [578139ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=9156 16:02:00 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) 2021/11/11 16:02:00 result hanged=false: [578181ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79398 #0 [578199ms] -> syz_genetlink_get_family_id$ethtool(0x20000b40, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [578200ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=9116 16:02:00 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) 2021/11/11 16:02:00 result hanged=false: [578242ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79400 #0 [578261ms] -> syz_genetlink_get_family_id$ethtool(0x20000b40, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [578262ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=9138 2021/11/11 16:02:00 result hanged=false: 2021/11/11 16:02:00 added new input for call #0 syz_genetlink_get_family_id$ethtool to corpus: syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) 16:02:00 executing program 0: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [578310ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79402 #0 [578327ms] -> perf_event_open$cgroup(0x200003c0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [578364ms] <- perf_event_open$cgroup=0x3 errno=14 cover=262143 enabling collider #0 [578368ms] -> perf_event_open$cgroup(0x200003c0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [578368ms] <- perf_event_open$cgroup=0x3 errno=14 cover=2291 2021/11/11 16:02:00 result hanged=false: 16:02:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='#! .j'], 0xb8) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 2021/11/11 16:02:00 poll: candidates=8 inputs=0 signal=0 [578409ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79404 #0 [578429ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [578433ms] <- openat=0x3 errno=14 cover=8973 #0 [578438ms] -> close(0x3) #0 [578438ms] <- close=0x0 errno=14 cover=326 #0 [578442ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x802, 0x0) #0 [578442ms] <- openat=0x3 errno=14 cover=1005 #0 [578442ms] -> write$binfmt_script(0x3, 0x20000000, 0xb8) #0 [578446ms] <- write$binfmt_script=0xb8 errno=14 cover=9661 #0 [578446ms] -> close(0x3) #0 [578447ms] <- close=0x0 errno=14 cover=311 #0 [578447ms] -> execveat(0xffffffffffffff9c, 0x20000280, 0x0, 0x0, 0x0) #0 [578449ms] <- execveat=0xffffffffffffffff errno=2 cover=8422 enabling collider #0 [578450ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [578450ms] <- openat=0x3 errno=14 cover=1046 #0 [578450ms] -> close(0x3) #0 [578450ms] <- close=0x0 errno=14 cover=310 pthread_create failed (errno 11) 16:02:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='#! .j'], 0xb8) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 2021/11/11 16:02:01 result hanged=false: 2021/11/11 16:02:01 #0: triaging type=7 2021/11/11 16:02:01 triaging input for call #3 write$binfmt_script (new signal=2) [578529ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79506 #0 [578547ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [578551ms] <- openat=0x3 errno=14 cover=8901 #0 [578554ms] -> close(0x3) #0 [578554ms] <- close=0x0 errno=14 cover=326 #0 [578555ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x802, 0x0) #0 [578555ms] <- openat=0x3 errno=14 cover=1070 #0 [578557ms] -> write$binfmt_script(0x3, 0x20000000, 0xb8) #0 [578560ms] <- write$binfmt_script=0xb8 errno=14 cover=9562 #0 [578562ms] -> close(0x3) #0 [578562ms] <- close=0x0 errno=14 cover=311 #0 [578564ms] -> execveat(0xffffffffffffff9c, 0x20000280, 0x0, 0x0, 0x0) #0 [578565ms] <- execveat=0xffffffffffffffff errno=2 cover=8372 16:02:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='#! .j'], 0xb8) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 2021/11/11 16:02:01 result hanged=false: [578610ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79508 #0 [578628ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [578632ms] <- openat=0x3 errno=14 cover=8554 #0 [578640ms] -> close(0x3) #0 [578640ms] <- close=0x0 errno=14 cover=326 #0 [578640ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x802, 0x0) #0 [578641ms] <- openat=0x3 errno=14 cover=1069 #0 [578641ms] -> write$binfmt_script(0x3, 0x20000000, 0xb8) #0 [578644ms] <- write$binfmt_script=0xb8 errno=14 cover=9636 #0 [578645ms] -> close(0x3) #0 [578646ms] <- close=0x0 errno=14 cover=311 #0 [578646ms] -> execveat(0xffffffffffffff9c, 0x20000280, 0x0, 0x0, 0x0) #0 [578647ms] <- execveat=0xffffffffffffffff errno=2 cover=8409 16:02:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='#! .j'], 0xb8) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 2021/11/11 16:02:01 result hanged=false: [578692ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79510 #0 [578713ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x1ff) #0 [578717ms] <- openat=0x3 errno=14 cover=8649 #0 [578718ms] -> close(0x3) #0 [578718ms] <- close=0x0 errno=14 cover=326 #0 [578718ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x802, 0x0) #0 [578719ms] <- openat=0x3 errno=14 cover=1191 #0 [578719ms] -> write$binfmt_script(0x3, 0x20000000, 0xb8) #0 [578722ms] <- write$binfmt_script=0xb8 errno=14 cover=9724 #0 [578723ms] -> close(0x3) #0 [578723ms] <- close=0x0 errno=14 cover=311 #0 [578723ms] -> execveat(0xffffffffffffff9c, 0x20000280, 0x0, 0x0, 0x0) #0 [578725ms] <- execveat=0xffffffffffffffff errno=2 cover=8543 2021/11/11 16:02:01 result hanged=false: 2021/11/11 16:02:01 added new input for call #3 write$binfmt_script to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='#! .j'], 0xb8) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 16:02:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x6}) [578806ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79512 #0 [578822ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [578823ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3456 #0 [578823ms] -> ioctl$TIOCL_SCROLLCONSOLE(0x3, 0x541c, 0x20000000) #0 [578823ms] <- ioctl$TIOCL_SCROLLCONSOLE=0x0 errno=14 cover=435 enabling collider #0 [578824ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [578824ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3408 16:02:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x6}) 2021/11/11 16:02:01 result hanged=false: 2021/11/11 16:02:01 #0: triaging type=7 2021/11/11 16:02:01 triaging input for call #1 ioctl$TIOCL_SCROLLCONSOLE (new signal=1) [578858ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79514 #0 [578874ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [578877ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3431 #0 [578878ms] -> ioctl$TIOCL_SCROLLCONSOLE(0x3, 0x541c, 0x20000000) #0 [578879ms] <- ioctl$TIOCL_SCROLLCONSOLE=0x0 errno=14 cover=446 16:02:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x6}) 2021/11/11 16:02:01 result hanged=false: [578917ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79516 #0 [578933ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [578934ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3421 #0 [578935ms] -> ioctl$TIOCL_SCROLLCONSOLE(0x3, 0x541c, 0x20000000) #0 [578935ms] <- ioctl$TIOCL_SCROLLCONSOLE=0x0 errno=14 cover=407 16:02:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x6}) 2021/11/11 16:02:01 result hanged=false: [578970ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79518 #0 [578985ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [578986ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3423 #0 [578987ms] -> ioctl$TIOCL_SCROLLCONSOLE(0x3, 0x541c, 0x20000000) #0 [578987ms] <- ioctl$TIOCL_SCROLLCONSOLE=0x0 errno=14 cover=447 2021/11/11 16:02:01 result hanged=false: 2021/11/11 16:02:01 added new input for call #1 ioctl$TIOCL_SCROLLCONSOLE to corpus: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x6}) 16:02:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x4aafe7d, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [579023ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79520 #0 [579042ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [579042ms] <- socket$inet_udp=0x3 errno=14 cover=1695 #0 [579043ms] -> bind$inet(0x3, 0x20000040, 0x10) #0 [579043ms] <- bind$inet=0x0 errno=14 cover=347 #0 [579043ms] -> setsockopt$inet_int(0x3, 0x0, 0x6, 0x20000000, 0x4) #0 [579043ms] <- setsockopt$inet_int=0x0 errno=14 cover=153 #0 [579043ms] -> syz_emit_ethernet(0x2a, 0x20000140, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa aa 08 00 45 00 00 1c 00 00 00 00 00 11 da d0 00 00 00 00 e0 00 00 01 00 00 4e 20 00 08 d1 bc #0 [579043ms] <- syz_emit_ethernet=0x2a errno=14 cover=13427 #0 [579044ms] -> recvfrom(0x3, 0x0, 0x0, 0x0, 0x0, 0x0) #0 [579044ms] <- recvfrom=0x0 errno=14 cover=299 enabling collider #0 [579044ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [579044ms] <- socket$inet_udp=0x3 errno=14 cover=1697 #0 [579045ms] -> bind$inet(0x3, 0x20000040, 0x10) #0 [579045ms] <- bind$inet=0x0 errno=14 cover=386 pthread_create failed (errno 11) 16:02:01 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x5, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="3e3fc2db0956", 0x6}], 0x1}, 0x0) 2021/11/11 16:02:01 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [579110ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79622 #0 [579123ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [579123ms] <- socket$inet6_udp=0x3 errno=14 cover=1720 #0 [579125ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [579125ms] <- connect$inet6=0x0 errno=14 cover=1423 #0 [579126ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x67, 0x20000080, 0x4) #0 [579126ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=106 #0 [579127ms] -> sendmsg$inet(0x3, 0x20000180, 0x0) #0 [579128ms] <- sendmsg$inet=0x6 errno=14 cover=2791 enabling collider #0 [579129ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [579129ms] <- socket$inet6_udp=0x3 errno=14 cover=1784 #0 [579130ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [579131ms] <- connect$inet6=0x0 errno=14 cover=1423 pthread_create failed (errno 11) 2021/11/11 16:02:01 result hanged=false: 16:02:01 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) iptable filter/10: resetting iptable mangle/10: resetting [579199ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79724 #0 [579220ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) #0 [579221ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6442 enabling collider #0 [579223ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) #0 [579224ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=5631 16:02:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x5) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 2021/11/11 16:02:01 result hanged=false: [579268ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79726 #0 [579290ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [579294ms] <- perf_event_open=0x3 errno=14 cover=11659 #0 [579295ms] -> epoll_create(0x5) #0 [579295ms] <- epoll_create=0x4 errno=14 cover=2120 #0 [579295ms] -> openat$procfs(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [579296ms] <- openat$procfs=0x5 errno=14 cover=5924 #0 [579297ms] -> dup3(0x4, 0x5, 0x0) #0 [579297ms] <- dup3=0x5 errno=14 cover=2058 enabling collider #0 [579306ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [579307ms] <- perf_event_open=0x3 errno=14 cover=14241 #0 [579307ms] -> epoll_create(0x5) #0 [579307ms] <- epoll_create=0x4 errno=14 cover=2028 pthread_create failed (errno 11) 16:02:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x5) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 2021/11/11 16:02:01 result hanged=false: 2021/11/11 16:02:01 #0: triaging type=7 2021/11/11 16:02:01 triaging input for call #3 dup3 (new signal=5) [579388ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79828 #0 [579405ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [579407ms] <- perf_event_open=0x3 errno=14 cover=10934 #0 [579408ms] -> epoll_create(0x5) #0 [579408ms] <- epoll_create=0x4 errno=14 cover=506 #0 [579408ms] -> openat$procfs(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [579408ms] <- openat$procfs=0x5 errno=14 cover=1852 #0 [579409ms] -> dup3(0x4, 0x5, 0x0) #0 [579409ms] <- dup3=0x5 errno=14 cover=753 16:02:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x5) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 2021/11/11 16:02:02 result hanged=false: [579455ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79830 #0 [579469ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [579470ms] <- perf_event_open=0x3 errno=14 cover=10596 #0 [579472ms] -> epoll_create(0x5) #0 [579472ms] <- epoll_create=0x4 errno=14 cover=583 #0 [579473ms] -> openat$procfs(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [579473ms] <- openat$procfs=0x5 errno=14 cover=2020 #0 [579475ms] -> dup3(0x4, 0x5, 0x0) #0 [579475ms] <- dup3=0x5 errno=14 cover=753 16:02:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x5) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 2021/11/11 16:02:02 result hanged=false: [579518ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79832 #0 [579533ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [579534ms] <- perf_event_open=0x3 errno=14 cover=10504 #0 [579535ms] -> epoll_create(0x5) #0 [579535ms] <- epoll_create=0x4 errno=14 cover=572 #0 [579536ms] -> openat$procfs(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [579537ms] <- openat$procfs=0x5 errno=14 cover=1985 #0 [579538ms] -> dup3(0x4, 0x5, 0x0) #0 [579538ms] <- dup3=0x5 errno=14 cover=753 2021/11/11 16:02:02 result hanged=false: 2021/11/11 16:02:02 added new input for call #3 dup3 to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x5) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 16:02:02 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x2e, 0x0, 0x0) [579582ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79834 #0 [579597ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [579597ms] <- socket$inet6_udplite=0x3 errno=14 cover=1639 #0 [579597ms] -> setsockopt$inet6_buf(0x3, 0x29, 0x2e, 0x0, 0x0) #0 [579597ms] <- setsockopt$inet6_buf=0xffffffffffffffff errno=22 cover=145 enabling collider #0 [579598ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [579598ms] <- socket$inet6_udplite=0x3 errno=14 cover=1627 2021/11/11 16:02:02 result hanged=false: 16:02:02 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x5000) [579632ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79836 #0 [579646ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [579647ms] <- socket$inet6_udplite=0x3 errno=14 cover=1858 #0 [579648ms] -> setsockopt$inet6_MCAST_MSFILTER(0x3, 0x29, 0x30, 0x0, 0x5000) #0 [579648ms] <- setsockopt$inet6_MCAST_MSFILTER=0xffffffffffffffff errno=14 cover=1620 enabling collider #0 [579650ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [579651ms] <- socket$inet6_udplite=0x3 errno=14 cover=1813 #0 [579651ms] -> setsockopt$inet6_MCAST_MSFILTER(0x3, 0x29, 0x30, 0x0, 0x5000) #0 [579651ms] <- setsockopt$inet6_MCAST_MSFILTER=0xffffffffffffffff errno=9 cover=51 16:02:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/softnet_stat\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/205, 0xcd}], 0x1, 0xcd, 0x0) 2021/11/11 16:02:02 result hanged=false: 2021/11/11 16:02:02 poll: candidates=8 inputs=0 signal=0 [579684ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79838 #0 [579698ms] -> syz_open_procfs(0x0, 0x20000180) #0 [579699ms] <- syz_open_procfs=0x3 errno=14 cover=3642 #0 [579699ms] -> preadv(0x3, 0x20000000, 0x1, 0xcd, 0x0) #0 [579701ms] <- preadv=0x1d errno=14 cover=2979 enabling collider #0 [579705ms] -> syz_open_procfs(0x0, 0x20000180) #0 [579705ms] <- syz_open_procfs=0x3 errno=14 cover=2439 16:02:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000021c0), &(0x7f0000002200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0xb, r0, 0xee01, 0xee01) 2021/11/11 16:02:02 result hanged=false: [579744ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79840 #0 [579763ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [579765ms] <- perf_event_open=0x3 errno=14 cover=10595 #0 [579766ms] -> add_key$keyring(0x200021c0, 0x20002200, 0x0, 0x0, 0xfffffffffffffffd) #0 [579768ms] <- add_key$keyring=0x76f0310 errno=14 cover=1321 #0 [579768ms] -> keyctl$chown(0xb, 0x76f0310, 0xee01, 0xee01) #0 [579768ms] <- keyctl$chown=0x0 errno=14 cover=451 enabling collider #0 [579777ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [579777ms] <- perf_event_open=0x3 errno=14 cover=10463 #0 [579778ms] -> add_key$keyring(0x200021c0, 0x20002200, 0x0, 0x0, 0xfffffffffffffffd) #0 [579781ms] <- add_key$keyring=0x35263329 errno=14 cover=2202 pthread_create failed (errno 11) 16:02:02 executing program 0: removexattr(&(0x7f00000018c0)='./file0\x00', 0x0) mkdir(&(0x7f00000034c0)='./file0\x00', 0x0) 2021/11/11 16:02:02 result hanged=false: [579862ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79942 #0 [579882ms] -> removexattr(0x200018c0, 0x0) #0 [579882ms] <- removexattr=0xffffffffffffffff errno=2 cover=953 #0 [579883ms] -> mkdir(0x200034c0, 0x0) #0 [579888ms] <- mkdir=0x0 errno=14 cover=13497 enabling collider #0 [579889ms] -> removexattr(0x200018c0, 0x0) #0 [579889ms] <- removexattr=0xffffffffffffffff errno=14 cover=943 16:02:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10, 0x0, 0x8}}], 0x10}}], 0x2, 0x0) 2021/11/11 16:02:02 result hanged=false: [579935ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 79944 #0 [579957ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [579958ms] <- socket$inet_udp=0x3 errno=14 cover=1742 #0 [579963ms] -> connect$inet(0x3, 0x20000040, 0x10) #0 [579963ms] <- connect$inet=0x0 errno=14 cover=722 #0 [579963ms] -> sendmmsg$inet(0x3, 0x20000d80, 0x2, 0x0) #0 [579965ms] <- sendmmsg$inet=0x1 errno=14 cover=1229 enabling collider #0 [579966ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [579966ms] <- socket$inet_udp=0x3 errno=14 cover=1825 #0 [579967ms] -> connect$inet(0x3, 0x20000040, 0x10) #0 [579967ms] <- connect$inet=0x0 errno=14 cover=722 pthread_create failed (errno 11) 2021/11/11 16:02:02 result hanged=false: 2021/11/11 16:02:02 #0: triaging type=7 16:02:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10, 0x0, 0x8}}], 0x10}}], 0x2, 0x0) 2021/11/11 16:02:02 triaging input for call #2 sendmmsg$inet (new signal=2) iptable filter/2: resetting iptable mangle/2: resetting [580038ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80046 #0 [580053ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [580053ms] <- socket$inet_udp=0x3 errno=14 cover=1717 #0 [580054ms] -> connect$inet(0x3, 0x20000040, 0x10) #0 [580054ms] <- connect$inet=0x0 errno=14 cover=858 #0 [580055ms] -> sendmmsg$inet(0x3, 0x20000d80, 0x2, 0x0) #0 [580056ms] <- sendmmsg$inet=0x1 errno=14 cover=1193 16:02:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10, 0x0, 0x8}}], 0x10}}], 0x2, 0x0) 2021/11/11 16:02:02 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [580093ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80048 #0 [580107ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [580107ms] <- socket$inet_udp=0x3 errno=14 cover=1695 #0 [580109ms] -> connect$inet(0x3, 0x20000040, 0x10) #0 [580109ms] <- connect$inet=0x0 errno=14 cover=722 #0 [580110ms] -> sendmmsg$inet(0x3, 0x20000d80, 0x2, 0x0) #0 [580113ms] <- sendmmsg$inet=0x1 errno=14 cover=1193 16:02:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10, 0x0, 0x8}}], 0x10}}], 0x2, 0x0) 2021/11/11 16:02:02 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [580147ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80050 #0 [580161ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [580162ms] <- socket$inet_udp=0x3 errno=14 cover=1706 #0 [580163ms] -> connect$inet(0x3, 0x20000040, 0x10) #0 [580163ms] <- connect$inet=0x0 errno=14 cover=722 #0 [580165ms] -> sendmmsg$inet(0x3, 0x20000d80, 0x2, 0x0) #0 [580165ms] <- sendmmsg$inet=0x1 errno=14 cover=1212 2021/11/11 16:02:02 result hanged=false: 2021/11/11 16:02:02 added new input for call #2 sendmmsg$inet to corpus: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10, 0x0, 0x8}}], 0x10}}], 0x2, 0x0) 16:02:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000140)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000010900)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103", 0x5b, 0x4800}], 0x0, &(0x7f00000005c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00') iptable filter/2: resetting iptable mangle/2: resetting [580209ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80052 #0 [580225ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x0, 0x3, 0x20000080, 0x0, 0x200005c0) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 1827.742432] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) #0 [580249ms] <- syz_mount_image$vfat=0x5 errno=0 cover=39734 #0 [580250ms] -> chdir(0x20000040) #0 [580250ms] <- chdir=0x0 errno=14 cover=659 #0 [580250ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [580251ms] <- openat=0x3 errno=14 cover=7001 #0 [580251ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [580251ms] <- openat=0x4 errno=14 cover=2775 #0 [580251ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [580257ms] <- copy_file_range=0xa000 errno=14 cover=53902 #0 [580257ms] -> rename(0x20000180, 0x20000200) [ 1827.765228] FAT-fs (loop0): Directory bread(block 72) failed [ 1827.767019] FAT-fs (loop0): Directory bread(block 73) failed [ 1827.768990] FAT-fs (loop0): Directory bread(block 74) failed [ 1827.770972] FAT-fs (loop0): Directory bread(block 75) failed [ 1827.775167] FAT-fs (loop0): Directory bread(block 76) failed [ 1827.777098] FAT-fs (loop0): Directory bread(block 77) failed [ 1827.779011] FAT-fs (loop0): Directory bread(block 78) failed [ 1827.781018] FAT-fs (loop0): Directory bread(block 79) failed [ 1827.782941] FAT-fs (loop0): Directory bread(block 80) failed [ 1827.785905] FAT-fs (loop0): Directory bread(block 81) failed [ 1827.792029] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 1827.793479] FAT-fs (loop0): Filesystem has been set read-only #0 [580293ms] <- rename=0xffffffffffffffff errno=5 cover=121860 enabling collider #0 [580294ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x0, 0x3, 0x20000080, 0x0, 0x200005c0) #0 [580296ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=16 cover=7889 #0 [580297ms] -> chdir(0x20000040) #0 [580297ms] <- chdir=0xffffffffffffffff errno=5 cover=2061 pthread_create failed (errno 11) 2021/11/11 16:02:02 result hanged=false: 2021/11/11 16:02:02 #0: triaging type=7 2021/11/11 16:02:02 triaging input for call #5 rename (new signal=5) 16:02:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000140)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000010900)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103", 0x5b, 0x4800}], 0x0, &(0x7f00000005c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00') [ 1827.850146] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) umount(./4143/file0) [580396ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80154 #0 [580415ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x0, 0x3, 0x20000080, 0x0, 0x200005c0) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 1827.933541] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) #0 [580439ms] <- syz_mount_image$vfat=0x5 errno=0 cover=31644 #0 [580446ms] -> chdir(0x20000040) #0 [580446ms] <- chdir=0x0 errno=14 cover=668 #0 [580446ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [580447ms] <- openat=0x3 errno=14 cover=7955 #0 [580448ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [580448ms] <- openat=0x4 errno=14 cover=2692 #0 [580449ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [580455ms] <- copy_file_range=0xa000 errno=14 cover=56313 #0 [580462ms] -> rename(0x20000180, 0x20000200) [ 1827.970804] FAT-fs (loop0): Directory bread(block 72) failed [ 1827.972297] FAT-fs (loop0): Directory bread(block 73) failed [ 1827.978561] FAT-fs (loop0): Directory bread(block 74) failed [ 1827.979973] FAT-fs (loop0): Directory bread(block 75) failed [ 1827.981919] FAT-fs (loop0): Directory bread(block 76) failed [ 1827.983550] FAT-fs (loop0): Directory bread(block 77) failed [ 1827.985109] FAT-fs (loop0): Directory bread(block 78) failed [ 1827.986712] FAT-fs (loop0): Directory bread(block 79) failed [ 1827.988259] FAT-fs (loop0): Directory bread(block 80) failed [ 1827.989829] FAT-fs (loop0): Directory bread(block 81) failed [ 1827.993702] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 1827.995486] FAT-fs (loop0): Filesystem has been set read-only #0 [580494ms] <- rename=0xffffffffffffffff errno=5 cover=102478 2021/11/11 16:02:03 result hanged=false: 16:02:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000140)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000010900)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103", 0x5b, 0x4800}], 0x0, &(0x7f00000005c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00') [ 1828.025035] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) umount(./4144/file0) [580556ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80156 #0 [580572ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x0, 0x3, 0x20000080, 0x0, 0x200005c0) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 1828.094180] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) #0 [580596ms] <- syz_mount_image$vfat=0x5 errno=0 cover=35809 #0 [580600ms] -> chdir(0x20000040) #0 [580600ms] <- chdir=0x0 errno=14 cover=670 #0 [580601ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [580602ms] <- openat=0x3 errno=14 cover=7154 #0 [580603ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [580603ms] <- openat=0x4 errno=14 cover=2724 #0 [580604ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [580609ms] <- copy_file_range=0xa000 errno=14 cover=54427 #0 [580613ms] -> rename(0x20000180, 0x20000200) [ 1828.118774] FAT-fs (loop0): Directory bread(block 72) failed [ 1828.119747] FAT-fs (loop0): Directory bread(block 73) failed [ 1828.120691] FAT-fs (loop0): Directory bread(block 74) failed [ 1828.121600] FAT-fs (loop0): Directory bread(block 75) failed [ 1828.122895] FAT-fs (loop0): Directory bread(block 76) failed [ 1828.124145] FAT-fs (loop0): Directory bread(block 77) failed [ 1828.125454] FAT-fs (loop0): Directory bread(block 78) failed [ 1828.126649] FAT-fs (loop0): Directory bread(block 79) failed [ 1828.127756] FAT-fs (loop0): Directory bread(block 80) failed [ 1828.128975] FAT-fs (loop0): Directory bread(block 81) failed [ 1828.132842] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 1828.134102] FAT-fs (loop0): Filesystem has been set read-only #0 [580632ms] <- rename=0xffffffffffffffff errno=5 cover=102671 16:02:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000140)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000010900)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103", 0x5b, 0x4800}], 0x0, &(0x7f00000005c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00') 2021/11/11 16:02:03 result hanged=false: [ 1828.155156] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) umount(./4145/file0) [580692ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80158 #0 [580710ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x0, 0x3, 0x20000080, 0x0, 0x200005c0) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 1828.224009] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) #0 [580733ms] <- syz_mount_image$vfat=0x5 errno=0 cover=32549 #0 [580736ms] -> chdir(0x20000040) #0 [580736ms] <- chdir=0x0 errno=14 cover=658 #0 [580737ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [580738ms] <- openat=0x3 errno=14 cover=7031 #0 [580739ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [580739ms] <- openat=0x4 errno=14 cover=2778 #0 [580740ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [580745ms] <- copy_file_range=0xa000 errno=14 cover=54290 #0 [580749ms] -> rename(0x20000180, 0x20000200) [ 1828.256255] FAT-fs (loop0): Directory bread(block 72) failed [ 1828.257274] FAT-fs (loop0): Directory bread(block 73) failed [ 1828.258427] FAT-fs (loop0): Directory bread(block 74) failed [ 1828.260278] FAT-fs (loop0): Directory bread(block 75) failed [ 1828.261755] FAT-fs (loop0): Directory bread(block 76) failed [ 1828.262892] FAT-fs (loop0): Directory bread(block 77) failed [ 1828.264099] FAT-fs (loop0): Directory bread(block 78) failed [ 1828.265247] FAT-fs (loop0): Directory bread(block 79) failed [ 1828.266258] FAT-fs (loop0): Directory bread(block 80) failed [ 1828.267306] FAT-fs (loop0): Directory bread(block 81) failed [ 1828.269859] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 1828.271110] FAT-fs (loop0): Filesystem has been set read-only #0 [580769ms] <- rename=0xffffffffffffffff errno=5 cover=102698 2021/11/11 16:02:03 result hanged=false: [ 1828.300023] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 2021/11/11 16:02:03 added new input for call #5 rename to corpus: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000140)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000010900)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103", 0x5b, 0x4800}], 0x0, &(0x7f00000005c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00') 16:02:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000140)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000010900)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103", 0x5b, 0x4800}], 0x0, &(0x7f00000005c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00') 2021/11/11 16:02:03 #0: triaging type=7 2021/11/11 16:02:03 triaging input for call #4 copy_file_range (new signal=1) umount(./4146/file0) [580838ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80160 #0 [580854ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x0, 0x3, 0x20000080, 0x0, 0x200005c0) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 1828.366192] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) #0 [580866ms] <- syz_mount_image$vfat=0x5 errno=0 cover=33685 #0 [580872ms] -> chdir(0x20000040) #0 [580872ms] <- chdir=0x0 errno=14 cover=658 #0 [580872ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [580873ms] <- openat=0x3 errno=14 cover=7467 #0 [580873ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [580874ms] <- openat=0x4 errno=14 cover=2680 #0 [580874ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [580881ms] <- copy_file_range=0xa000 errno=14 cover=54779 #0 [580885ms] -> rename(0x20000180, 0x20000200) [ 1828.391613] FAT-fs (loop0): Directory bread(block 72) failed [ 1828.392928] FAT-fs (loop0): Directory bread(block 73) failed [ 1828.394974] FAT-fs (loop0): Directory bread(block 74) failed [ 1828.396867] FAT-fs (loop0): Directory bread(block 75) failed [ 1828.398980] FAT-fs (loop0): Directory bread(block 76) failed [ 1828.400853] FAT-fs (loop0): Directory bread(block 77) failed [ 1828.402580] FAT-fs (loop0): Directory bread(block 78) failed [ 1828.403952] FAT-fs (loop0): Directory bread(block 79) failed [ 1828.405767] FAT-fs (loop0): Directory bread(block 80) failed [ 1828.407164] FAT-fs (loop0): Directory bread(block 81) failed [ 1828.410342] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 1828.411856] FAT-fs (loop0): Filesystem has been set read-only #0 [580910ms] <- rename=0xffffffffffffffff errno=5 cover=102511 16:02:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000140)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000010900)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103", 0x5b, 0x4800}], 0x0, &(0x7f00000005c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00') 2021/11/11 16:02:03 result hanged=false: [ 1828.434022] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) umount(./4147/file0) [580974ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80162 #0 [580994ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x0, 0x3, 0x20000080, 0x0, 0x200005c0) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 1828.517554] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) #0 [581022ms] <- syz_mount_image$vfat=0x5 errno=0 cover=36048 #0 [581030ms] -> chdir(0x20000040) #0 [581030ms] <- chdir=0x0 errno=14 cover=727 #0 [581033ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [581034ms] <- openat=0x3 errno=14 cover=7148 #0 [581035ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [581036ms] <- openat=0x4 errno=14 cover=2896 #0 [581036ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [581044ms] <- copy_file_range=0xa000 errno=14 cover=54156 #0 [581048ms] -> rename(0x20000180, 0x20000200) [ 1828.553752] FAT-fs (loop0): Directory bread(block 72) failed [ 1828.554698] FAT-fs (loop0): Directory bread(block 73) failed [ 1828.556824] FAT-fs (loop0): Directory bread(block 74) failed [ 1828.559044] FAT-fs (loop0): Directory bread(block 75) failed [ 1828.563302] FAT-fs (loop0): Directory bread(block 76) failed [ 1828.564385] FAT-fs (loop0): Directory bread(block 77) failed [ 1828.566544] FAT-fs (loop0): Directory bread(block 78) failed [ 1828.568228] FAT-fs (loop0): Directory bread(block 79) failed [ 1828.570052] FAT-fs (loop0): Directory bread(block 80) failed [ 1828.571555] FAT-fs (loop0): Directory bread(block 81) failed [ 1828.577645] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 1828.579203] FAT-fs (loop0): Filesystem has been set read-only #0 [581077ms] <- rename=0xffffffffffffffff errno=5 cover=103898 2021/11/11 16:02:03 result hanged=false: 16:02:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000140)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000010900)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103", 0x5b, 0x4800}], 0x0, &(0x7f00000005c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00') [ 1828.602292] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) umount(./4148/file0) [581139ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80164 #0 [581156ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x0, 0x3, 0x20000080, 0x0, 0x200005c0) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 1828.679522] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) #0 [581182ms] <- syz_mount_image$vfat=0x5 errno=0 cover=33484 #0 [581185ms] -> chdir(0x20000040) #0 [581186ms] <- chdir=0x0 errno=14 cover=658 #0 [581186ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [581187ms] <- openat=0x3 errno=14 cover=6972 #0 [581188ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [581189ms] <- openat=0x4 errno=14 cover=2703 #0 [581189ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [581196ms] <- copy_file_range=0xa000 errno=14 cover=54546 #0 [581202ms] -> rename(0x20000180, 0x20000200) [ 1828.710005] FAT-fs (loop0): Directory bread(block 72) failed [ 1828.711302] FAT-fs (loop0): Directory bread(block 73) failed [ 1828.712516] FAT-fs (loop0): Directory bread(block 74) failed [ 1828.714861] FAT-fs (loop0): Directory bread(block 75) failed [ 1828.716912] FAT-fs (loop0): Directory bread(block 76) failed [ 1828.718925] FAT-fs (loop0): Directory bread(block 77) failed [ 1828.720576] FAT-fs (loop0): Directory bread(block 78) failed [ 1828.722540] FAT-fs (loop0): Directory bread(block 79) failed [ 1828.723939] FAT-fs (loop0): Directory bread(block 80) failed [ 1828.726021] FAT-fs (loop0): Directory bread(block 81) failed [ 1828.730144] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 1828.731678] FAT-fs (loop0): Filesystem has been set read-only #0 [581230ms] <- rename=0xffffffffffffffff errno=5 cover=102768 [ 1828.757371] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 2021/11/11 16:02:03 result hanged=false: 2021/11/11 16:02:03 added new input for call #4 copy_file_range to corpus: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000140)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000010900)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103", 0x5b, 0x4800}], 0x0, &(0x7f00000005c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00') umount(./4149/file0) 2021/11/11 16:02:03 poll: candidates=0 inputs=0 signal=0 16:02:03 executing program 0: keyctl$join(0x1, &(0x7f0000001dc0)={'syz', 0x1}) [581289ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80166 #0 [581304ms] -> keyctl$join(0x1, 0x20001dc0) #0 [581304ms] <- keyctl$join=0x1169d263 errno=14 cover=1351 enabling collider #0 [581305ms] -> keyctl$join(0x1, 0x20001dc0) #0 [581305ms] <- keyctl$join=0x1a4f4311 errno=14 cover=1514 2021/11/11 16:02:03 result hanged=false: 16:02:03 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000c40)='./file0\x00', 0x200000, 0x0) [581340ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80168 #0 [581353ms] -> syz_mount_image$msdos(0x20000000, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [581356ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=14 cover=14902 #0 [581357ms] -> open(0x20000c40, 0x200000, 0x0) #0 [581357ms] <- open=0x3 errno=14 cover=834 enabling collider #0 [581357ms] -> syz_mount_image$msdos(0x20000000, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [581357ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=17 cover=1373 #0 [581358ms] -> open(0x20000c40, 0x2000002021/11/11 16:02:03 result hanged=false: 16:02:03 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x0) [581397ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80170 #0 [581415ms] -> keyctl$set_reqkey_keyring(0xe, 0x0) #0 [581415ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=291 enabling collider #0 [581416ms] -> keyctl$set_reqkey_keyring(0xe, 0x0) #0 [581416ms] <- keyctl$set_reqkey_keyring=0x0 errno=14 cover=401 2021/11/11 16:02:04 result hanged=false: 16:02:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000140)) 2021/11/11 16:02:04 poll: candidates=8 inputs=0 signal=0 [581465ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80172 #0 [581486ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [581490ms] <- perf_event_open=0x3 errno=14 cover=9336 #0 [581490ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [581495ms] <- openat=0x4 errno=14 cover=8586 #0 [581496ms] -> lstat(0x200001c0, 0x20000140) #0 [581496ms] <- lstat=0x0 errno=14 cover=666 enabling collider #0 [581506ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [581507ms] <- perf_event_open=0x3 errno=14 cover=8360 #0 [581507ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [581508ms] <- openat=0x4 errno=14 cover=1213 pthread_create failed (errno 11) 2021/11/11 16:02:04 result hanged=false: 16:02:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a00), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r2, 0x1}, 0x14}}, 0x0) [581583ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80274 #0 [581601ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [581603ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6425 #0 [581605ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [581606ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5456 #0 [581606ms] -> syz_genetlink_get_family_id$netlbl_calipso(0x20000a00, 0x4) syz_genetlink_get_family_id(NLBL_CALIPSO, 4) #0 [581608ms] <- syz_genetlink_get_family_id$netlbl_calipso=0x16 errno=14 cover=4372 #0 [581608ms] -> sendmsg$NLBL_CALIPSO_C_ADD(0x5, 0x20000b00, 0x0) #0 [581610ms] <- sendmsg$NLBL_CALIPSO_C_ADD=0x14 errno=14 cover=1740 enabling collider #0 [581611ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [581611ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5389 #0 [581612ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [581613ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5387 pthread_create failed (errno 11) 2021/11/11 16:02:04 result hanged=false: 2021/11/11 16:02:04 #0: triaging type=7 2021/11/11 16:02:04 triaging input for call #3 sendmsg$NLBL_CALIPSO_C_ADD (new signal=1) 16:02:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a00), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r2, 0x1}, 0x14}}, 0x0) [581682ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80376 #0 [581696ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [581697ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6342 #0 [581698ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [581699ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5466 #0 [581699ms] -> syz_genetlink_get_family_id$netlbl_calipso(0x20000a00, 0x4) syz_genetlink_get_family_id(NLBL_CALIPSO, 4) #0 [581700ms] <- syz_genetlink_get_family_id$netlbl_calipso=0x16 errno=14 cover=4395 #0 [581701ms] -> sendmsg$NLBL_CALIPSO_C_ADD(0x5, 0x20000b00, 0x0) #0 [581701ms] <- sendmsg$NLBL_CALIPSO_C_ADD=0x14 errno=14 cover=1730 2021/11/11 16:02:04 result hanged=false: 16:02:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a00), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r2, 0x1}, 0x14}}, 0x0) [581735ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80378 #0 [581750ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [581751ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6252 #0 [581753ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [581754ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5487 #0 [581755ms] -> syz_genetlink_get_family_id$netlbl_calipso(0x20000a00, 0x4) syz_genetlink_get_family_id(NLBL_CALIPSO, 4) #0 [581755ms] <- syz_genetlink_get_family_id$netlbl_calipso=0x16 errno=14 cover=4437 #0 [581757ms] -> sendmsg$NLBL_CALIPSO_C_ADD(0x5, 0x20000b00, 0x0) #0 [581758ms] <- sendmsg$NLBL_CALIPSO_C_ADD=0x14 errno=14 cover=1771 16:02:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a00), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r2, 0x1}, 0x14}}, 0x0) 2021/11/11 16:02:04 result hanged=false: [581792ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80380 #0 [581807ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [581808ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6310 #0 [581809ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [581809ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5524 #0 [581811ms] -> syz_genetlink_get_family_id$netlbl_calipso(0x20000a00, 0x4) syz_genetlink_get_family_id(NLBL_CALIPSO, 4) #0 [581812ms] <- syz_genetlink_get_family_id$netlbl_calipso=0x16 errno=14 cover=4456 #0 [581813ms] -> sendmsg$NLBL_CALIPSO_C_ADD(0x5, 0x20000b00, 0x0) #0 [581813ms] <- sendmsg$NLBL_CALIPSO_C_ADD=0x14 errno=14 cover=1727 2021/11/11 16:02:04 result hanged=false: 2021/11/11 16:02:04 added new input for call #3 sendmsg$NLBL_CALIPSO_C_ADD to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a00), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r2, 0x1}, 0x14}}, 0x0) 16:02:04 executing program 0: r0 = syz_io_uring_setup(0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$inet(0x2, 0xa, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [581854ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80382 #0 [581868ms] -> syz_io_uring_setup(0x22, 0x20000080, 0x200a0000, 0x200b0000, 0x20000180, 0x20002a40) #0 [581870ms] <- syz_io_uring_setup=0x3 errno=14 cover=7698 #0 [581875ms] -> socket$inet(0x2, 0xa, 0x0) #0 [581875ms] <- socket$inet=0x4 errno=14 cover=1837 #0 [581876ms] -> syz_io_uring_submit(0x200a0000, 0x200b0000, 0x20000240, 0x0) #0 [581876ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [581876ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [581877ms] <- io_uring_enter=0x1 errno=14 cover=455 enabling collider #0 [581884ms] -> syz_io_uring_setup(0x22, 0x20000080, 0x200a0000, 0x200b0000, 0x20000180, 0x20002a40) #0 [581886ms] <- syz_io_uring_setup=0x3 errno=14 cover=5428 #0 [581886ms] -> socket$inet(0x2, 0xa, 0x0) #0 [581887ms] <- socket$inet=0x4 errno=14 cover=1746 pthread_create failed (errno 11) 2021/11/11 16:02:04 result hanged=false: 16:02:04 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) [581966ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80484 #0 [581980ms] -> syz_mount_image$msdos(0x0, 0x20000280, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [581987ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=14 cover=15006 #0 [581988ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [581989ms] <- perf_event_open=0x3 errno=14 cover=7929 #0 [581989ms] -> mount(0x0, 0x20000180, 0x200001c0, 0x0, 0x0) #0 [581990ms] <- mount=0x0 errno=14 cover=2861 enabling collider #0 [581998ms] -> syz_mount_image$msdos(0x0, 0x20000280, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [581999ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=17 cover=1354 #0 [581999ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [582000ms] <- perf_event_open=0x3 errno=14 cover=8152 pthread_create failed (errno 11) umount(./4159/file0) 2021/11/11 16:02:04 result hanged=false: 2021/11/11 16:02:04 #0: triaging type=7 2021/11/11 16:02:04 triaging input for call #0 syz_mount_image$msdos (new signal=4) 16:02:04 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) [582083ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80586 #0 [582101ms] -> syz_mount_image$msdos(0x0, 0x20000280, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [582108ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=14 cover=14948 #0 [582110ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [582111ms] <- perf_event_open=0x3 errno=14 cover=8969 #0 [582113ms] -> mount(0x0, 0x20000180, 0x200001c0, 0x0, 0x0) #0 [582114ms] <- mount=0x0 errno=14 cover=8793 16:02:04 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) 2021/11/11 16:02:04 result hanged=false: umount(./4160/file0) [582165ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80588 #0 [582182ms] -> syz_mount_image$msdos(0x0, 0x20000280, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [582187ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=14 cover=14754 #0 [582189ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [582189ms] <- perf_event_open=0x3 errno=14 cover=8337 #0 [582190ms] -> mount(0x0, 0x20000180, 0x200001c0, 0x0, 0x0) #0 [582191ms] <- mount=0x0 errno=14 cover=8862 umount(./4161/file0) 2021/11/11 16:02:04 result hanged=false: 16:02:04 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) [582237ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80590 #0 [582252ms] -> syz_mount_image$msdos(0x0, 0x20000280, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [582256ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=14 cover=15133 #0 [582258ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [582258ms] <- perf_event_open=0x3 errno=14 cover=8072 #0 [582259ms] -> mount(0x0, 0x20000180, 0x200001c0, 0x0, 0x0) #0 [582260ms] <- mount=0x0 errno=14 cover=2882 2021/11/11 16:02:04 result hanged=false: 2021/11/11 16:02:04 added new input for call #0 syz_mount_image$msdos to corpus: syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) umount(./4162/file0) 16:02:04 executing program 0: syz_io_uring_setup(0x30b1, &(0x7f0000000300), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [582333ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80592 #0 [582349ms] -> syz_io_uring_setup(0x30b1, 0x20000300, 0x20ff7000, 0x20ffd000, 0x20000380, 0x200003c0) #0 [582351ms] <- syz_io_uring_setup=0x3 errno=14 cover=14509 enabling collider #0 [582353ms] -> syz_io_uring_setup(0x30b1, 0x20000300, 0x20ff7000, 0x20ffd000, 0x20000380, 0x200003c0) #0 [582354ms] <- syz_io_uring_setup=0x3 errno=14 cover=17633 2021/11/11 16:02:04 result hanged=false: 16:02:04 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f00000028c0), 0x4000, 0x0) [582396ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80594 #0 [582414ms] -> openat$snapshot(0xffffffffffffff9c, 0x200028c0, 0x4000, 0x0) #0 [582415ms] <- openat$snapshot=0xffffffffffffffff errno=22 cover=7991 enabling collider #0 [582417ms] -> openat$snapshot(0xffffffffffffff9c, 0x200028c0, 0x4000, 0x0) #0 [582418ms] <- openat$snapshot=0xffffffffffffffff errno=22 cover=7995 2021/11/11 16:02:05 result hanged=false: 16:02:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x2, 0x1, 0x301, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x0) [582459ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80596 #0 [582477ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [582477ms] <- socket$nl_netfilter=0x3 errno=14 cover=1430 #0 [582477ms] -> sendmsg$IPCTNL_MSG_CT_NEW(0x3, 0x20000140, 0x0) #0 [582477ms] <- sendmsg$IPCTNL_MSG_CT_NEW=0x14 errno=14 cover=1173 enabling collider #0 [582478ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [582478ms] <- socket$nl_netfilter=0x3 errno=14 cover=1468 16:02:05 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) 2021/11/11 16:02:05 result hanged=false: [582512ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80598 #0 [582529ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [582539ms] <- perf_event_open=0x3 errno=14 cover=9574 #0 [582539ms] -> mbind(0x20ffa000, 0x3000, 0x0, 0x0, 0x0, 0x0) #0 [582539ms] <- mbind=0x0 errno=14 cover=172 enabling collider #0 [582549ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [582550ms] <- perf_event_open=0x3 errno=14 cover=9331 #0 [582550ms] -> mbind(0x20ffa000, 0x3000, 0x0, 0x0, 0x0, 0x0) #0 [582550ms] <- mbind=0x0 errno=14 cover=115 2021/11/11 16:02:05 result hanged=false: 16:02:05 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}, 0x22}, {@mpol={'mpol', 0x3d, {'default', '=static'}}}]}) 2021/11/11 16:02:05 poll: candidates=8 inputs=0 signal=0 [582595ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80600 #0 [582612ms] -> syz_mount_image$tmpfs(0x20000080, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x20000000) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='mpol=interleave=relative"mpol=default=static:,' [ 1830.121140] tmpfs: Bad value for 'mpol' syz_mount_image > mount error: 22 #0 [582619ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=22 cover=12589 enabling collider #0 [582619ms] -> syz_mount_image$tmpfs(0x20000080, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x20000000) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='mpol=interleave=relative"mpol=default=static:,' [ 1830.123659] tmpfs: Bad value for 'mpol' syz_mount_image > mount error: 22 #0 [582621ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=22 cover=4016 2021/11/11 16:02:05 result hanged=false: 16:02:05 executing program 0: syz_mount_image$nfs4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000190c0)='net/fib_triestat\x00') close_range(r0, 0xffffffffffffffff, 0x0) [582663ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80602 #0 [582680ms] -> syz_mount_image$nfs4(0x0, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [582689ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=18466 #0 [582691ms] -> syz_mount_image$nfs4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [582695ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=14580 #0 [582695ms] -> open(0x200000c0, 0x0, 0x0) #0 [582696ms] <- open=0x3 errno=14 cover=1140 #0 [582697ms] -> syz_open_procfs(0xffffffffffffffff, 0x200190c0) #0 [582698ms] <- syz_open_procfs=0x4 errno=14 cover=5411 #0 [582698ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [582699ms] <- close_range=0x0 errno=14 cover=2929 enabling collider #0 [582699ms] -> syz_mount_image$nfs4(0x0, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [582700ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=17 cover=1385 #0 [582701ms] -> syz_mount_image$nfs4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [582703ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=17 cover=1597 pthread_create failed (errno 11) 2021/11/11 16:02:05 result hanged=false: 16:02:05 executing program 0: syz_mount_image$nfs4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000190c0)='net/fib_triestat\x00') close_range(r0, 0xffffffffffffffff, 0x0) 2021/11/11 16:02:05 #0: triaging type=7 2021/11/11 16:02:05 triaging input for call #4 close_range (new signal=1) [582787ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80704 #0 [582804ms] -> syz_mount_image$nfs4(0x0, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [582808ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=14871 #0 [582810ms] -> syz_mount_image$nfs4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [582813ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=14879 #0 [582815ms] -> open(0x200000c0, 0x0, 0x0) #0 [582815ms] <- open=0x3 errno=14 cover=1075 #0 [582815ms] -> syz_open_procfs(0xffffffffffffffff, 0x200190c0) #0 [582816ms] <- syz_open_procfs=0x4 errno=14 cover=5291 #0 [582817ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [582818ms] <- close_range=0x0 errno=14 cover=2928 16:02:05 executing program 0: syz_mount_image$nfs4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000190c0)='net/fib_triestat\x00') close_range(r0, 0xffffffffffffffff, 0x0) 2021/11/11 16:02:05 result hanged=false: [582864ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80706 #0 [582885ms] -> syz_mount_image$nfs4(0x0, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [582894ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=14774 #0 [582896ms] -> syz_mount_image$nfs4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [582900ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=14385 #0 [582902ms] -> open(0x200000c0, 0x0, 0x0) #0 [582902ms] <- open=0x3 errno=14 cover=1152 #0 [582902ms] -> syz_open_procfs(0xffffffffffffffff, 0x200190c0) #0 [582903ms] <- syz_open_procfs=0x4 errno=14 cover=5325 #0 [582904ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [582904ms] <- close_range=0x0 errno=14 cover=2903 16:02:05 executing program 0: syz_mount_image$nfs4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000190c0)='net/fib_triestat\x00') close_range(r0, 0xffffffffffffffff, 0x0) 2021/11/11 16:02:05 result hanged=false: [582959ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80708 #0 [582978ms] -> syz_mount_image$nfs4(0x0, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [582983ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=14739 #0 [582986ms] -> syz_mount_image$nfs4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [582990ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=14440 #0 [582992ms] -> open(0x200000c0, 0x0, 0x0) #0 [582992ms] <- open=0x3 errno=14 cover=1152 #0 [582993ms] -> syz_open_procfs(0xffffffffffffffff, 0x200190c0) #0 [582994ms] <- syz_open_procfs=0x4 errno=14 cover=5413 #0 [582995ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [582996ms] <- close_range=0x0 errno=14 cover=2889 2021/11/11 16:02:05 result hanged=false: 2021/11/11 16:02:05 added new input for call #4 close_range to corpus: syz_mount_image$nfs4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000190c0)='net/fib_triestat\x00') close_range(r0, 0xffffffffffffffff, 0x0) 16:02:05 executing program 0: syz_mount_image$nfs4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000190c0)='net/fib_triestat\x00') close_range(r0, 0xffffffffffffffff, 0x0) 2021/11/11 16:02:05 #0: triaging type=7 2021/11/11 16:02:05 triaging input for call #3 syz_open_procfs (new signal=1) [583050ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80710 #0 [583069ms] -> syz_mount_image$nfs4(0x0, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [583074ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=14751 #0 [583076ms] -> syz_mount_image$nfs4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [583079ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=14451 #0 [583080ms] -> open(0x200000c0, 0x0, 0x0) #0 [583081ms] <- open=0x3 errno=14 cover=1140 #0 [583082ms] -> syz_open_procfs(0xffffffffffffffff, 0x200190c0) #0 [583083ms] <- syz_open_procfs=0x4 errno=14 cover=5407 #0 [583084ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [583084ms] <- close_range=0x0 errno=14 cover=2889 2021/11/11 16:02:05 result hanged=false: 16:02:05 executing program 0: syz_mount_image$nfs4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000190c0)='net/fib_triestat\x00') close_range(r0, 0xffffffffffffffff, 0x0) [583134ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80712 #0 [583151ms] -> syz_mount_image$nfs4(0x0, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [583157ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=15504 #0 [583159ms] -> syz_mount_image$nfs4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [583163ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=14563 #0 [583164ms] -> open(0x200000c0, 0x0, 0x0) #0 [583165ms] <- open=0x3 errno=14 cover=1141 #0 [583166ms] -> syz_open_procfs(0xffffffffffffffff, 0x200190c0) #0 [583167ms] <- syz_open_procfs=0x4 errno=14 cover=5350 #0 [583168ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [583168ms] <- close_range=0x0 errno=14 cover=2921 16:02:05 executing program 0: syz_mount_image$nfs4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000190c0)='net/fib_triestat\x00') close_range(r0, 0xffffffffffffffff, 0x0) 2021/11/11 16:02:05 result hanged=false: [583217ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80714 #0 [583234ms] -> syz_mount_image$nfs4(0x0, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [583239ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=15528 #0 [583242ms] -> syz_mount_image$nfs4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [583245ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=14567 #0 [583247ms] -> open(0x200000c0, 0x0, 0x0) #0 [583247ms] <- open=0x3 errno=14 cover=1141 #0 [583249ms] -> syz_open_procfs(0xffffffffffffffff, 0x200190c0) #0 [583250ms] <- syz_open_procfs=0x4 errno=14 cover=5415 #0 [583251ms] -> close_range(0x3, 0xffffffffffffffff, 0x0) #0 [583252ms] <- close_range=0x0 errno=14 cover=2889 2021/11/11 16:02:05 result hanged=false: 2021/11/11 16:02:05 added new input for call #3 syz_open_procfs to corpus: syz_mount_image$nfs4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000190c0)='net/fib_triestat\x00') close_range(r0, 0xffffffffffffffff, 0x0) 16:02:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0xf, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) sendmsg$inet6(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="06", 0xff5d}], 0x1}, 0x0) [583303ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80716 #0 [583322ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [583323ms] <- socket$inet6_tcp=0x3 errno=14 cover=1778 #0 [583326ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x2, 0x20000080, 0x4) #0 [583326ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=142 #0 [583326ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [583326ms] <- bind$inet6=0xffffffffffffffff errno=98 cover=463 #0 [583326ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [583327ms] <- connect$inet6=0xffffffffffffffff errno=111 cover=3263 #0 [583329ms] -> sendmsg$inet6(0x3, 0x200006c0, 0x10044001) #0 [583329ms] <- sendmsg$inet6=0xffffffffffffffff errno=32 cover=240 #0 [583333ms] -> sendmsg$inet6(0x3, 0x20000300, 0x0) 2021/11/11 16:02:05 result hanged=false: 16:02:05 executing program 0: syz_emit_ethernet(0x19, &(0x7f0000000680)={@broadcast, @multicast, @val, {@x25}}, 0x0) iptable filter/10: resetting iptable mangle/10: resetting [583373ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80718 #0 [583391ms] -> syz_emit_ethernet(0x19, 0x20000680, 0x0) ff ff ff ff ff ff bb bb bb bb bb bb 91 00 00 00 81 00 00 00 08 05 00 00 00 #0 [583392ms] <- syz_emit_ethernet=0x19 errno=14 cover=8034 enabling collider #0 [583394ms] -> syz_emit_ethernet(0x19, 0x20000680, 0x0) ff ff ff ff ff ff bb bb bb bb bb bb 91 00 00 00 81 00 00 00 08 05 00 00 00 #0 [583396ms] <- syz_emit_ethernet=0x19 errno=14 cover=8069 16:02:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000006f0000be1be89f290c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 2021/11/11 16:02:05 result hanged=false: [583438ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80720 #0 [583454ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [583455ms] <- socket$nl_generic=0x3 errno=14 cover=1587 #0 [583456ms] -> syz_genetlink_get_family_id$ethtool(0x20002740, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [583457ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=8070 #0 [583458ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [583459ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1762 #0 [583461ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8933, 0x20000140) #0 [583461ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=197 #0 [583462ms] -> sendmsg$ETHTOOL_MSG_EEE_SET(0x3, 0x20002800, 0x0) #0 [583463ms] <- sendmsg$ETHTOOL_MSG_EEE_SET=0x20 errno=14 cover=1874 enabling collider #0 [583464ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [583464ms] <- socket$nl_generic=0x3 errno=14 cover=1512 #0 [583465ms] -> syz_genetlink_get_family_id$ethtool(0x20002740, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [583467ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=7697 pthread_create failed (errno 11) 2021/11/11 16:02:06 result hanged=false: 16:02:06 executing program 0: setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = dup(0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000200)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(r0, &(0x7f0000000700)=""/4096, 0xe34e, 0xcd08, 0x0, 0x6b4) [583539ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80822 #0 [583560ms] -> setxattr$trusted_overlay_opaque(0x20000040, 0x20000100, 0x20000180, 0x2, 0x1) #0 [583561ms] <- setxattr$trusted_overlay_opaque=0xffffffffffffffff errno=2 cover=924 #0 [583561ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [583561ms] <- socket$inet6_tcp=0x3 errno=14 cover=1737 #0 [583562ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x2, 0x20000080, 0x4) #0 [583562ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=142 #0 [583564ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [583564ms] <- bind$inet6=0xffffffffffffffff errno=98 cover=463 #0 [583564ms] -> dup(0xffffffffffffffff) #0 [583564ms] <- dup=0xffffffffffffffff errno=9 cover=41 #0 [583565ms] -> ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, 0x20000200) #0 [583565ms] <- ioctl$FS_IOC_GET_ENCRYPTION_NONCE=0xffffffffffffffff errno=9 cover=45 #0 [583566ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [583566ms] <- connect$inet6=0xffffffffffffffff errno=111 cover=3249 #0 [583567ms] -> setsockopt$sock_int(0x3, 0x1, 0x8, 0x20002ec0, 0x4) #0 [583567ms] <- setsockopt$sock_int=0x0 errno=14 cover=136 #0 [583567ms] -> sendmsg$inet6(0x3, 0x200006c0, 0x10044001) #0 [583567ms] <- sendmsg$inet6=0xffffffffffffffff errno=32 cover=240 #0 [583568ms] -> recvfrom$inet6(0x3, 0x20000700, 0xe34e, 0xcd08, 0x0, 0x6b4) #0 [583568ms] <- recvfrom$inet6=0xffffffffffffffff errno=107 cover=152 enabling collider #0 [583569ms] -> setxattr$trusted_overlay_opaque(0x20000040, 0x20000100, 0x20000180, 0x2, 0x1) #0 [583569ms] <- setxattr$trusted_overlay_opaque=0xffffffffffffffff errno=2 cover=467 #0 [583570ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [583570ms] <- socket$inet6_tcp=0x3 errno=14 cover=1758 pthread_create failed (errno 11) 16:02:06 executing program 0: syz_mount_image$nfs4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001540)=[{0x0}], 0x0, &(0x7f00000015c0)={[{'/dev/vcs#\x00'}]}) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000001ac0)=[{&(0x7f00000018c0)="beb9", 0x2, 0x7fff}, {&(0x7f0000001900)="dd", 0x1}, {&(0x7f0000001a00)="eb", 0x1}], 0x0, 0x0) 2021/11/11 16:02:06 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [583650ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80924 #0 [583669ms] -> syz_mount_image$nfs4(0x0, 0x200002c0, 0x0, 0x1, 0x20001540, 0x0, 0x200015c0) SIGSEGV on (nil), skipping #0 [583675ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=22541 #0 [583676ms] -> syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, 0x20001ac0, 0x0, 0x0) #0 [583682ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=16 cover=14256 enabling collider #0 [583690ms] -> syz_mount_image$nfs4(0x0, 0x200002c0, 0x0, 0x1, 0x20001540, 0x0, 0x200015c0) SIGSEGV on (nil), skipping #0 [583692ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=17 cover=8726 #0 [583692ms] -> syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, 0x20001ac0, 0x0, 0x0) 2021/11/11 16:02:06 result hanged=false: 2021/11/11 16:02:06 #0: triaging type=7 16:02:06 executing program 0: syz_mount_image$nfs4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001540)=[{0x0}], 0x0, &(0x7f00000015c0)={[{'/dev/vcs#\x00'}]}) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000001ac0)=[{&(0x7f00000018c0)="beb9", 0x2, 0x7fff}, {&(0x7f0000001900)="dd", 0x1}, {&(0x7f0000001a00)="eb", 0x1}], 0x0, 0x0) 2021/11/11 16:02:06 triaging input for call #0 syz_mount_image$nfs4 (new signal=1) [583753ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80926 #0 [583773ms] -> syz_mount_image$nfs4(0x0, 0x200002c0, 0x0, 0x1, 0x20001540, 0x0, 0x200015c0) SIGSEGV on (nil), skipping #0 [583784ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=22440 #0 [583787ms] -> syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, 0x20001ac0, 0x0, 0x0) #0 [583790ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=16 cover=8570 2021/11/11 16:02:06 result hanged=false: 16:02:06 executing program 0: syz_mount_image$nfs4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001540)=[{0x0}], 0x0, &(0x7f00000015c0)={[{'/dev/vcs#\x00'}]}) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000001ac0)=[{&(0x7f00000018c0)="beb9", 0x2, 0x7fff}, {&(0x7f0000001900)="dd", 0x1}, {&(0x7f0000001a00)="eb", 0x1}], 0x0, 0x0) [583840ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80928 #0 [583862ms] -> syz_mount_image$nfs4(0x0, 0x200002c0, 0x0, 0x1, 0x20001540, 0x0, 0x200015c0) SIGSEGV on (nil), skipping #0 [583870ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=22152 #0 [583873ms] -> syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, 0x20001ac0, 0x0, 0x0) #0 [583875ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=16 cover=8243 16:02:06 executing program 0: syz_mount_image$nfs4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001540)=[{0x0}], 0x0, &(0x7f00000015c0)={[{'/dev/vcs#\x00'}]}) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000001ac0)=[{&(0x7f00000018c0)="beb9", 0x2, 0x7fff}, {&(0x7f0000001900)="dd", 0x1}, {&(0x7f0000001a00)="eb", 0x1}], 0x0, 0x0) 2021/11/11 16:02:06 result hanged=false: [583928ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80930 #0 [583948ms] -> syz_mount_image$nfs4(0x0, 0x200002c0, 0x0, 0x1, 0x20001540, 0x0, 0x200015c0) SIGSEGV on (nil), skipping #0 [583960ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=14 cover=22293 #0 [583963ms] -> syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, 0x20001ac0, 0x0, 0x0) #0 [583966ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=16 cover=8420 2021/11/11 16:02:06 result hanged=false: 2021/11/11 16:02:06 added new input for call #0 syz_mount_image$nfs4 to corpus: syz_mount_image$nfs4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001540)=[{0x0}], 0x0, &(0x7f00000015c0)={[{'/dev/vcs#\x00'}]}) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000001ac0)=[{&(0x7f00000018c0)="beb9", 0x2, 0x7fff}, {&(0x7f0000001900)="dd", 0x1}, {&(0x7f0000001a00)="eb", 0x1}], 0x0, 0x0) 16:02:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) [584019ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80932 #0 [584037ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [584037ms] <- socket$nl_xfrm=0x3 errno=14 cover=1454 #0 [584038ms] -> sendmsg$nl_xfrm(0x3, 0x20000580, 0x0) #0 [584039ms] <- sendmsg$nl_xfrm=0x5c errno=14 cover=1567 enabling collider #0 [584040ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [584040ms] <- socket$nl_xfrm=0x3 errno=14 cover=1506 16:02:06 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='auxv\x00') lseek(r0, 0x0, 0x4) 2021/11/11 16:02:06 result hanged=false: 2021/11/11 16:02:06 poll: candidates=8 inputs=0 signal=0 [584080ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80934 #0 [584098ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [584098ms] <- syz_open_procfs=0x3 errno=14 cover=4036 #0 [584103ms] -> lseek(0x3, 0x0, 0x4) #0 [584103ms] <- lseek=0xffffffffffffffff errno=6 cover=71 enabling collider #0 [584103ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [584103ms] <- syz_open_procfs=0x3 errno=14 cover=2569 16:02:06 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='auxv\x00') lseek(r0, 0x0, 0x4) 2021/11/11 16:02:06 result hanged=false: 2021/11/11 16:02:06 #0: triaging type=7 2021/11/11 16:02:06 triaging input for call #1 lseek (new signal=1) [584150ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80936 #0 [584167ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [584168ms] <- syz_open_procfs=0x3 errno=14 cover=4136 #0 [584169ms] -> lseek(0x3, 0x0, 0x4) #0 [584169ms] <- lseek=0xffffffffffffffff errno=6 cover=71 16:02:06 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='auxv\x00') lseek(r0, 0x0, 0x4) 2021/11/11 16:02:06 result hanged=false: [584215ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80938 #0 [584233ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [584234ms] <- syz_open_procfs=0x3 errno=14 cover=4158 #0 [584237ms] -> lseek(0x3, 0x0, 0x4) #0 [584237ms] <- lseek=0xffffffffffffffff errno=6 cover=71 16:02:06 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='auxv\x00') lseek(r0, 0x0, 0x4) 2021/11/11 16:02:06 result hanged=false: [584277ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80940 #0 [584295ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [584295ms] <- syz_open_procfs=0x3 errno=14 cover=4083 #0 [584297ms] -> lseek(0x3, 0x0, 0x4) #0 [584297ms] <- lseek=0xffffffffffffffff errno=6 cover=71 2021/11/11 16:02:06 result hanged=false: 2021/11/11 16:02:06 added new input for call #1 lseek to corpus: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='auxv\x00') lseek(r0, 0x0, 0x4) 16:02:06 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2044034, &(0x7f0000000040)={[{@journal_checksum}]}) [584339ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 80942 #0 [584356ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [584361ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=15489 [ 1831.868182] EXT4-fs (sda): re-mounted. Opts: journal_checksum,,errors=continue #0 [584363ms] -> mount$9p_unix(0x20000140, 0x20002f00, 0x0, 0x1f3000, 0x0) #0 [584363ms] <- mount$9p_unix=0x0 errno=14 cover=2700 #0 [584363ms] -> syz_mount_image$ext4(0x20000280, 0x200002c0, 0x0, 0x0, 0x0, 0x2044034, 0x20000040) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='ext3' flags=33833012 opts='journal_checksum,,errors=continue' #0 [584367ms] <- syz_mount_image$ext4=0x3 errno=0 cover=20237 enabling collider #0 [584367ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [584367ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1346 #0 [584369ms] -> mount$9p_unix(0x20000140, 0x20002f00, 0x0, 0x1f3000, 0x0) #0 [584370ms] <- mount$9p_unix=0x0 errno=14 cover=2652 pthread_create failed (errno 11) 16:02:06 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2044034, &(0x7f0000000040)={[{@journal_checksum}]}) 2021/11/11 16:02:06 result hanged=false: 2021/11/11 16:02:06 #0: triaging type=7 2021/11/11 16:02:06 triaging input for call #2 syz_mount_image$ext4 (new signal=3) umount(./4188/file0) umount(./4188/file0) [584451ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81044 #0 [584469ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [584474ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=14741 #0 [584476ms] -> mount$9p_unix(0x20000140, 0x20002f00, 0x0, 0x1f3000, 0x0) #0 [584477ms] <- mount$9p_unix=0x0 errno=14 cover=2712 [ 1831.982386] EXT4-fs (sda): re-mounted. Opts: journal_checksum,,errors=continue #0 [584479ms] -> syz_mount_image$ext4(0x20000280, 0x200002c0, 0x0, 0x0, 0x0, 0x2044034, 0x20000040) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='ext3' flags=33833012 opts='journal_checksum,,errors=continue' #0 [584481ms] <- syz_mount_image$ext4=0x3 errno=0 cover=7360 umount(./4189/file0) 16:02:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2044034, &(0x7f0000000040)={[{@journal_checksum}]}) 2021/11/11 16:02:07 result hanged=false: [584536ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81046 #0 [584557ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [584562ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=14949 #0 [584566ms] -> mount$9p_unix(0x20000140, 0x20002f00, 0x0, 0x1f3000, 0x0) #0 [584566ms] <- mount$9p_unix=0x0 errno=14 cover=2711 [ 1832.070949] EXT4-fs (sda): re-mounted. Opts: journal_checksum,,errors=continue #0 [584567ms] -> syz_mount_image$ext4(0x20000280, 0x200002c0, 0x0, 0x0, 0x0, 0x2044034, 0x20000040) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='ext3' flags=33833012 opts='journal_checksum,,errors=continue' #0 [584569ms] <- syz_mount_image$ext4=0x3 errno=0 cover=7305 16:02:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2044034, &(0x7f0000000040)={[{@journal_checksum}]}) 2021/11/11 16:02:07 result hanged=false: umount(./4190/file0) [584619ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81048 #0 [584637ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [584645ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=15479 #0 [584652ms] -> mount$9p_unix(0x20000140, 0x20002f00, 0x0, 0x1f3000, 0x0) #0 [584652ms] <- mount$9p_unix=0x0 errno=14 cover=2780 #0 [584656ms] -> syz_mount_image$ext4(0x20000280, 0x200002c0, 0x0, 0x0, 0x0, 0x2044034, 0x20000040) syz_mount_image: size=0 segs=0 loop='' dir='./file0/../file0' fs='ext3' flags=33833012 opts='journal_checksum,,errors=continue' [ 1832.159344] EXT4-fs (sda): re-mounted. Opts: journal_checksum,,errors=continue #0 [584658ms] <- syz_mount_image$ext4=0x3 errno=0 cover=7389 umount(./4191/file0) 2021/11/11 16:02:07 result hanged=false: 2021/11/11 16:02:07 added new input for call #2 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2044034, &(0x7f0000000040)={[{@journal_checksum}]}) 16:02:07 executing program 0: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) [584707ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81050 #0 [584727ms] -> getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) #0 [584727ms] <- getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE=0xffffffffffffffff errno=9 cover=49 enabling collider #0 [584728ms] -> getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) #0 [584728ms] <- getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE=0xffffffffffffffff errno=9 cover=49 16:02:07 executing program 0: syz_io_uring_setup(0x27ff, &(0x7f0000000080), &(0x7f0000000000/0x3000)=nil, &(0x7f0000002000/0x3000)=nil, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 2021/11/11 16:02:07 result hanged=false: [584777ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81052 #0 [584796ms] -> syz_io_uring_setup(0x27ff, 0x20000080, 0x20000000, 0x20002000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [584798ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=9621 #0 [584799ms] -> execveat(0xffffffffffffffff, 0x20000540, 0x0, 0x0, 0x0) #0 [584800ms] <- execveat=0xffffffffffffffff errno=9 cover=9375 #0 [584801ms] -> execveat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0, 0x0) #0 [584802ms] <- execveat=0xffffffffffffffff errno=2 cover=6104 enabling collider #0 [584802ms] -> syz_io_uring_setup(0x27ff, 0x20000080, 0x20000000, 0x20002000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [584804ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=12650 #0 [584805ms] -> execveat(0xffffffffffffffff, 0x20000540, 0x0, 0x0, 0x0) #0 [584807ms] <- execveat=0xffffffffffffffff errno=9 cover=9197 pthread_create failed (errno 11) 2021/11/11 16:02:07 result hanged=false: 16:02:07 executing program 0: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x10}, &(0x7f0000000100)=""/92, 0x5c, &(0x7f0000000180)=""/76, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0x58) clone3(&(0x7f0000000500)={0x20021100, 0x0, 0x0, &(0x7f0000000340), {}, &(0x7f0000000380)=""/61, 0x3d, 0x0, &(0x7f00000004c0)=[0x0, r0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x8}, 0x58) process_madvise(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000580)}], 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='cpuacct.usage_user\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000cc0)={0x0, 0x0}) recvmmsg(r1, 0x0, 0x0, 0x10000, &(0x7f0000000d00)={r2, r3+10000000}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x10, r1, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x200, 0x1}, 0x2) syz_io_uring_setup(0x6084, 0x0, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f0000000f00)) socket$inet_icmp(0x2, 0x2, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) [584882ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81154 #0 [584900ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000000, 0x80000, 0x0) #0 [584901ms] <- openat$ptp0=0x3 errno=14 cover=1077 #0 [584902ms] -> clone3(0x20000240, 0x58) #0 [584920ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 #0 [584922ms] -> clone3(0x20000500, 0x58) #0 [584925ms] <- clone3=0xffffffffffffffff errno=22 cover=21332 #0 [584925ms] -> process_madvise(0xffffffffffffffff, 0x20000680, 0x1, 0x0, 0x0) #0 [584926ms] <- process_madvise=0xffffffffffffffff errno=9 cover=102 #0 [584926ms] -> openat$cgroup_ro(0xffffffffffffffff, 0x20000780, 0x0, 0x0) #0 [584926ms] <- openat$cgroup_ro=0xffffffffffffffff errno=9 cover=707 #0 [584927ms] -> clock_gettime(0x0, 0x20000cc0) #0 [584927ms] <- clock_gettime=0x0 errno=14 cover=89 #0 [584927ms] -> recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x20000d00) #0 [584927ms] <- recvmmsg=0xffffffffffffffff errno=9 cover=106 #0 [584927ms] -> mmap$IORING_OFF_SQES(0x20ffa000, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10000000) #0 [584927ms] <- mmap$IORING_OFF_SQES=0xffffffffffffffff errno=9 cover=44 #0 [584927ms] -> syz_io_uring_submit(0x0, 0x0, 0x20000e00, 0x2) SIGSEGV on 0x10c, skipping #0 [584928ms] <- syz_io_uring_submit=0xffffffffffffffff errno=14 cover=1000 #0 [584929ms] -> syz_io_uring_setup(0x6084, 0x0, 0x20ffa000, 0x20ffa000, 0x0, 0x20000f00) SIGSEGV on (nil), skipping #0 [584930ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=1158 #0 [584930ms] -> socket$inet_icmp(0x2, 0x2, 0x1) #0 [584930ms] <- socket$inet_icmp=0xffffffffffffffff errno=13 cover=1228 #0 [584931ms] -> openat$cgroup_root(0xffffffffffffff9c, 0x20001200, 0x200002, 0x0) #0 [584932ms] <- openat$cgroup_root=0xffffffffffffffff errno=2 cover=2213 enabling collider #0 [584932ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000000, 0x80000, 0x0) #0 [584933ms] <- openat$ptp0=0x3 errno=14 cover=1104 #0 [584934ms] -> clone3(0x20000240, 0x58) #0 [584964ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 pthread_create failed (errno 11) 16:02:07 executing program 0: syz_io_uring_setup(0xf14, &(0x7f0000000640), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000006c0), 0x0) 2021/11/11 16:02:07 result hanged=false: [585013ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81256 #0 [585031ms] -> syz_io_uring_setup(0xf14, 0x20000640, 0x20ffc000, 0x20ffa000, 0x200006c0, 0x0) SIGSEGV on (nil), skipping #0 [585036ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=10655 enabling collider #0 [585037ms] -> syz_io_uring_setup(0xf14, 0x20000640, 0x20ffc000, 0x20ffa000, 0x200006c0, 0x0) SIGSEGV on (nil), skipping #0 [585041ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=10639 2021/11/11 16:02:07 result hanged=false: 16:02:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x4, 0x0, 0xd2f, "acd91120"}) [585082ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81258 #0 [585101ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [585101ms] <- syz_open_dev$sg=0x3 errno=14 cover=1408 #0 [585101ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x3, 0x1, 0x20000140) #0 [585102ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0x0 errno=14 cover=1460 enabling collider #0 [585103ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [585103ms] <- syz_open_dev$sg=0x3 errno=14 cover=1460 16:02:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x4, 0x0, 0xd2f, "acd91120"}) 2021/11/11 16:02:07 result hanged=false: 2021/11/11 16:02:07 #0: triaging type=7 2021/11/11 16:02:07 triaging input for call #1 ioctl$SCSI_IOCTL_SEND_COMMAND (new signal=11) [585143ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81260 #0 [585167ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [585168ms] <- syz_open_dev$sg=0x3 errno=14 cover=1408 #0 [585169ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x3, 0x1, 0x20000140) #0 [585170ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0x0 errno=14 cover=1358 2021/11/11 16:02:07 result hanged=false: 16:02:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x4, 0x0, 0xd2f, "acd91120"}) [585211ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81262 #0 [585229ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [585230ms] <- syz_open_dev$sg=0x3 errno=14 cover=1395 #0 [585230ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x3, 0x1, 0x20000140) #0 [585231ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0x0 errno=14 cover=1305 16:02:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x4, 0x0, 0xd2f, "acd91120"}) 2021/11/11 16:02:07 result hanged=false: [585272ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81264 #0 [585295ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [585295ms] <- syz_open_dev$sg=0x3 errno=14 cover=1407 #0 [585296ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x3, 0x1, 0x20000140) #0 [585297ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0x0 errno=14 cover=1329 2021/11/11 16:02:07 result hanged=false: 2021/11/11 16:02:07 added new input for call #1 ioctl$SCSI_IOCTL_SEND_COMMAND to corpus: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x4, 0x0, 0xd2f, "acd91120"}) 16:02:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e00)={&(0x7f0000000d00), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="2e6db3cca8ac"}]}, 0x2c}}, 0x0) [585343ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81266 #0 [585360ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [585361ms] <- socket$nl_generic=0x3 errno=14 cover=1480 #0 [585362ms] -> sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0x3, 0x20000740, 0x0) #0 [585362ms] <- sendmsg$BATADV_CMD_GET_MCAST_FLAGS=0x0 errno=14 cover=975 #0 [585362ms] -> syz_genetlink_get_family_id$nl80211(0x20000d40, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [585365ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=18353 #0 [585365ms] -> sendmsg$NL80211_CMD_TRIGGER_SCAN(0x3, 0x20000e00, 0x0) #0 [585366ms] <- sendmsg$NL80211_CMD_TRIGGER_SCAN=0x2c errno=14 cover=1738 enabling collider #0 [585367ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [585368ms] <- socket$nl_generic=0x3 errno=14 cover=1509 #0 [585369ms] -> sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0x3, 0x20000740, 0x0) #0 [585369ms] <- sendmsg$BATADV_CMD_GET_MCAST_FLAGS=0x0 errno=14 cover=975 pthread_create failed (errno 11) 16:02:07 executing program 0: io_setup(0x3, &(0x7f0000000380)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000600)) 2021/11/11 16:02:07 result hanged=false: 2021/11/11 16:02:07 poll: candidates=8 inputs=0 signal=0 [585444ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81368 #0 [585463ms] -> io_setup(0x3, 0x20000380) #0 [585464ms] <- io_setup=0x0 errno=14 cover=3349 #0 [585467ms] -> io_getevents(0x7f7b9ceea000, 0x0, 0x0, 0x0, 0x20000600) #0 [585467ms] <- io_getevents=0x0 errno=14 cover=388 enabling collider #0 [585468ms] -> io_setup(0x3, 0x20000380) #0 [585468ms] <- io_setup=0xffffffffffffffff errno=22 cover=40 #0 [585468ms] -> io_getevents(0x7f7b9ceea000, 2021/11/11 16:02:08 result hanged=false: 16:02:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002d40)={0x14}, 0x14}}, 0x0) [585524ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81370 #0 [585541ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [585541ms] <- socket$netlink=0x3 errno=14 cover=1465 #0 [585543ms] -> sendmsg$FOU_CMD_DEL(0x3, 0x20002dc0, 0x0) [ 1833.046319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=314451 comm=syz-executor.0 #0 [585546ms] <- sendmsg$FOU_CMD_DEL=0x14 errno=14 cover=3682 enabling collider #0 [585549ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [585550ms] <- socket$netlink=0x3 errno=14 cover=1466 16:02:08 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 2021/11/11 16:02:08 result hanged=false: [585592ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81372 #0 [585612ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [585612ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6369 #0 [585613ms] -> setsockopt$bt_BT_SNDMTU(0x4, 0x112, 0xc, 0x0, 0x0) #0 [585613ms] <- setsockopt$bt_BT_SNDMTU=0xffffffffffffffff errno=22 cover=117 enabling collider #0 [585613ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [585614ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=5553 16:02:08 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 2021/11/11 16:02:08 result hanged=false: 2021/11/11 16:02:08 #0: triaging type=7 2021/11/11 16:02:08 triaging input for call #1 setsockopt$bt_BT_SNDMTU (new signal=2) [585657ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81374 #0 [585679ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [585680ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6399 #0 [585685ms] -> setsockopt$bt_BT_SNDMTU(0x4, 0x112, 0xc, 0x0, 0x0) #0 [585685ms] <- setsockopt$bt_BT_SNDMTU=0xffffffffffffffff errno=22 cover=117 16:02:08 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 2021/11/11 16:02:08 result hanged=false: [585725ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81376 #0 [585744ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [585745ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6360 #0 [585746ms] -> setsockopt$bt_BT_SNDMTU(0x4, 0x112, 0xc, 0x0, 0x0) #0 [585746ms] <- setsockopt$bt_BT_SNDMTU=0xffffffffffffffff errno=22 cover=117 16:02:08 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 2021/11/11 16:02:08 result hanged=false: [585786ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81378 #0 [585804ms] -> syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) #0 [585804ms] <- syz_init_net_socket$bt_l2cap=0x4 errno=14 cover=6481 #0 [585807ms] -> setsockopt$bt_BT_SNDMTU(0x4, 0x112, 0xc, 0x0, 0x0) #0 [585807ms] <- setsockopt$bt_BT_SNDMTU=0xffffffffffffffff errno=22 cover=117 2021/11/11 16:02:08 result hanged=false: 2021/11/11 16:02:08 added new input for call #1 setsockopt$bt_BT_SNDMTU to corpus: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 16:02:08 executing program 0: perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [585847ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81380 #0 [585866ms] -> perf_event_open(0x20000280, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [585887ms] <- perf_event_open=0x3 errno=14 cover=206481 enabling collider #0 [585891ms] -> perf_event_open(0x20000280, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [585895ms] <- perf_event_open=0x3 errno=14 cover=2075 16:02:08 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x14, 0x0) 2021/11/11 16:02:08 result hanged=false: [585935ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81382 #0 [585952ms] -> getpid() #0 [585953ms] <- getpid=0x13de6 errno=14 cover=48 #0 [585953ms] -> pidfd_open(0x13de6, 0x0) #0 [585953ms] <- pidfd_open=0x3 errno=14 cover=481 #0 [585954ms] -> process_madvise(0x3, 0x0, 0x0, 0x14, 0x0) #0 [585954ms] <- process_madvise=0xffffffffffffffff errno=1 cover=129 enabling collider #0 [585954ms] -> getpid() #0 [585954ms] <- getpid=0x13de6 errno=14 cover=48 #0 [585955ms] -> pidfd_open(0x13de6, 0x0) #0 [585955ms] <- pidfd_open=0x3 errno=14 cover=448 pthread_create failed (errno 11) 16:02:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4bfa, &(0x7f0000000000)=""/16) 2021/11/11 16:02:08 result hanged=false: [586040ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81484 #0 [586059ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [586059ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3477 #0 [586060ms] -> ioctl$KDGKBDIACR(0x3, 0x4bfa, 0x20000000) #0 [586060ms] <- ioctl$KDGKBDIACR=0x0 errno=14 cover=1106 enabling collider #0 [586061ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [586062ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3444 16:02:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4bfa, &(0x7f0000000000)=""/16) 2021/11/11 16:02:08 result hanged=false: 2021/11/11 16:02:08 #0: triaging type=7 2021/11/11 16:02:08 triaging input for call #1 ioctl$KDGKBDIACR (new signal=5) [586102ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81486 #0 [586119ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [586120ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3424 #0 [586121ms] -> ioctl$KDGKBDIACR(0x3, 0x4bfa, 0x20000000) #0 [586122ms] <- ioctl$KDGKBDIACR=0x0 errno=14 cover=1200 16:02:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4bfa, &(0x7f0000000000)=""/16) 2021/11/11 16:02:08 result hanged=false: [586164ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81488 #0 [586185ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [586185ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3480 #0 [586186ms] -> ioctl$KDGKBDIACR(0x3, 0x4bfa, 0x20000000) #0 [586186ms] <- ioctl$KDGKBDIACR=0x0 errno=14 cover=1098 2021/11/11 16:02:08 result hanged=false: 16:02:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4bfa, &(0x7f0000000000)=""/16) [586225ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81490 #0 [586242ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [586243ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3470 #0 [586247ms] -> ioctl$KDGKBDIACR(0x3, 0x4bfa, 0x20000000) #0 [586247ms] <- ioctl$KDGKBDIACR=0x0 errno=14 cover=1229 2021/11/11 16:02:08 result hanged=false: 2021/11/11 16:02:08 added new input for call #1 ioctl$KDGKBDIACR to corpus: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4bfa, &(0x7f0000000000)=""/16) 16:02:08 executing program 0: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) [586294ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81492 #0 [586311ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(NLBL_UNLBL, -1) netlink: failed to get family id for NLBL_UNLBL: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [586312ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0xffffffffffffffff errno=2 cover=8723 enabling collider #0 [586314ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(NLBL_UNLBL, -1) netlink: failed to get family id for NLBL_UNLBL: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [586315ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0xffffffffffffffff errno=2 cover=5853 16:02:08 executing program 0: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) 2021/11/11 16:02:08 result hanged=false: 2021/11/11 16:02:08 #0: triaging type=7 2021/11/11 16:02:08 triaging input for call #0 syz_genetlink_get_family_id$netlbl_unlabel (new signal=2) [586355ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81494 #0 [586373ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(NLBL_UNLBL, -1) netlink: failed to get family id for NLBL_UNLBL: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [586374ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0xffffffffffffffff errno=2 cover=8724 16:02:08 executing program 0: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) 2021/11/11 16:02:08 result hanged=false: [586417ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81496 #0 [586434ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(NLBL_UNLBL, -1) netlink: failed to get family id for NLBL_UNLBL: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [586438ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0xffffffffffffffff errno=2 cover=8774 2021/11/11 16:02:09 result hanged=false: 16:02:09 executing program 0: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) [586479ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81498 #0 [586496ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000140, 0xffffffffffffffff) syz_genetlink_get_family_id(NLBL_UNLBL, -1) netlink: failed to get family id for NLBL_UNLBL: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [586497ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0xffffffffffffffff errno=2 cover=8713 2021/11/11 16:02:09 result hanged=false: 2021/11/11 16:02:09 added new input for call #0 syz_genetlink_get_family_id$netlbl_unlabel to corpus: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) 16:02:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') read$hidraw(r0, &(0x7f0000000140)=""/161, 0xa1) [586548ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81500 #0 [586566ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [586572ms] <- perf_event_open=0x3 errno=14 cover=9747 #0 [586573ms] -> syz_open_procfs(0x0, 0x20000000) #0 [586575ms] <- syz_open_procfs=0x4 errno=13 cover=21540 #0 [586580ms] -> read$hidraw(0x4, 0x20000140, 0xa1) #0 [586580ms] <- read$hidraw=0xa1 errno=14 cover=7965 enabling collider #0 [586593ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [586594ms] <- perf_event_open=0x3 errno=14 cover=8391 #0 [586595ms] -> syz_open_procfs(0x0, 0x20000000) #0 [586596ms] <- syz_open_procfs=0x4 errno=13 cover=19306 pthread_create failed (errno 11) 2021/11/11 16:02:09 result hanged=false: 2021/11/11 16:02:09 #0: triaging type=7 2021/11/11 16:02:09 triaging input for call #2 read$hidraw (new signal=2) 16:02:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') read$hidraw(r0, &(0x7f0000000140)=""/161, 0xa1) [586692ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81602 #0 [586710ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [586714ms] <- perf_event_open=0x3 errno=14 cover=8208 #0 [586716ms] -> syz_open_procfs(0x0, 0x20000000) #0 [586717ms] <- syz_open_procfs=0x4 errno=13 cover=7488 #0 [586718ms] -> read$hidraw(0x4, 0x20000140, 0xa1) #0 [586719ms] <- read$hidraw=0xa1 errno=14 cover=2150 2021/11/11 16:02:09 result hanged=false: 16:02:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') read$hidraw(r0, &(0x7f0000000140)=""/161, 0xa1) [586770ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81604 #0 [586789ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [586790ms] <- perf_event_open=0x3 errno=14 cover=8068 #0 [586791ms] -> syz_open_procfs(0x0, 0x20000000) #0 [586792ms] <- syz_open_procfs=0x4 errno=13 cover=7331 #0 [586792ms] -> read$hidraw(0x4, 0x20000140, 0xa1) #0 [586793ms] <- read$hidraw=0xa1 errno=14 cover=2161 16:02:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') read$hidraw(r0, &(0x7f0000000140)=""/161, 0xa1) 2021/11/11 16:02:09 result hanged=false: [586841ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81606 #0 [586860ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [586861ms] <- perf_event_open=0x3 errno=14 cover=8052 #0 [586863ms] -> syz_open_procfs(0x0, 0x20000000) #0 [586864ms] <- syz_open_procfs=0x4 errno=13 cover=7468 #0 [586865ms] -> read$hidraw(0x4, 0x20000140, 0xa1) #0 [586865ms] <- read$hidraw=0xa1 errno=14 cover=2203 2021/11/11 16:02:09 result hanged=false: 2021/11/11 16:02:09 added new input for call #2 read$hidraw to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') read$hidraw(r0, &(0x7f0000000140)=""/161, 0xa1) 2021/11/11 16:02:09 #0: triaging type=7 16:02:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') read$hidraw(r0, &(0x7f0000000140)=""/161, 0xa1) 2021/11/11 16:02:09 triaging input for call #1 syz_open_procfs (new signal=2) [586921ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81608 #0 [586942ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [586944ms] <- perf_event_open=0x3 errno=14 cover=8357 #0 [586945ms] -> syz_open_procfs(0x0, 0x20000000) #0 [586947ms] <- syz_open_procfs=0x4 errno=13 cover=21759 #0 [586949ms] -> read$hidraw(0x4, 0x20000140, 0xa1) #0 [586950ms] <- read$hidraw=0xa1 errno=14 cover=3759 16:02:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') read$hidraw(r0, &(0x7f0000000140)=""/161, 0xa1) 2021/11/11 16:02:09 result hanged=false: [586998ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81610 #0 [587015ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [587016ms] <- perf_event_open=0x3 errno=14 cover=8227 #0 [587017ms] -> syz_open_procfs(0x0, 0x20000000) #0 [587018ms] <- syz_open_procfs=0x4 errno=13 cover=21175 #0 [587022ms] -> read$hidraw(0x4, 0x20000140, 0xa1) #0 [587022ms] <- read$hidraw=0xa1 errno=14 cover=3287 16:02:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') read$hidraw(r0, &(0x7f0000000140)=""/161, 0xa1) 2021/11/11 16:02:09 result hanged=false: [587078ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81612 #0 [587096ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [587097ms] <- perf_event_open=0x3 errno=14 cover=9105 #0 [587099ms] -> syz_open_procfs(0x0, 0x20000000) #0 [587101ms] <- syz_open_procfs=0x4 errno=13 cover=22765 #0 [587105ms] -> read$hidraw(0x4, 0x20000140, 0xa1) #0 [587105ms] <- read$hidraw=0xa1 errno=14 cover=3267 2021/11/11 16:02:09 result hanged=false: 2021/11/11 16:02:09 added new input for call #1 syz_open_procfs to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') read$hidraw(r0, &(0x7f0000000140)=""/161, 0xa1) 16:02:09 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000030c0)='schedstat\x00') pread64(r0, &(0x7f0000000000)=""/225, 0xe1, 0xff) [587162ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81614 2021/11/11 16:02:09 poll: candidates=8 inputs=0 signal=0 #0 [587181ms] -> syz_open_procfs(0xffffffffffffffff, 0x200030c0) #0 [587182ms] <- syz_open_procfs=0x3 errno=14 cover=4412 #0 [587182ms] -> pread64(0x3, 0x20000000, 0xe1, 0xff) #0 [587182ms] <- pread64=0x0 errno=14 cover=549 enabling collider #0 [587182ms] -> syz_open_procfs(0xffffffffffffffff, 0x200030c0) #0 [587183ms] <- syz_open_procfs=0x3 errno=14 cover=2717 16:02:09 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net\x00') 2021/11/11 16:02:09 result hanged=false: [587224ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81616 #0 [587242ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000640) #0 [587244ms] <- syz_open_procfs=0x3 errno=21 cover=6332 enabling collider #0 [587245ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000640) #0 [587246ms] <- syz_open_procfs=0x3 errno=21 cover=4824 2021/11/11 16:02:09 result hanged=false: 16:02:09 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x8001, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1}, 0x8) [587285ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81618 #0 [587304ms] -> openat$rfkill(0xffffffffffffff9c, 0x200001c0, 0x8001, 0x0) #0 [587305ms] <- openat$rfkill=0x3 errno=14 cover=2069 #0 [587305ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [587306ms] <- perf_event_open=0x4 errno=14 cover=8095 #0 [587308ms] -> write$rfkill(0x3, 0x20000200, 0x8) #0 [587310ms] <- write$rfkill=0x8 errno=14 cover=1669 enabling collider #0 [587321ms] -> openat$rfkill(0xffffffffffffff9c, 0x200001c0, 0x8001, 0x0) #0 [587322ms] <- openat$rfkill=0x3 errno=14 cover=2111 #0 [587323ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [587324ms] <- perf_event_open=0x4 errno=14 cover=8424 pthread_create failed (errno 11) 16:02:09 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 2021/11/11 16:02:09 result hanged=false: [587409ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81720 #0 [587427ms] -> mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000c0) #0 [587427ms] <- mq_timedsend=0xffffffffffffffff errno=9 cover=76 enabling collider #0 [587428ms] -> mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000c0) #0 [587428ms] <- mq_timedsend=0xffffffffffffffff errno=9 cover=76 16:02:10 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, 0x0) 2021/11/11 16:02:10 result hanged=false: [587466ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81722 #0 [587484ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [587485ms] <- perf_event_open=0x3 errno=14 cover=8560 #0 [587485ms] -> mq_notify(0xffffffffffffffff, 0x0) #0 [587485ms] <- mq_notify=0xffffffffffffffff errno=9 cover=82 enabling collider #0 [587497ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [587498ms] <- perf_event_open=0x3 errno=14 cover=8572 #0 [587498ms] -> mq_notify(0xffffffffffffffff, 0x0) #0 [587498ms] <- mq_notify=0xffffffffffffffff errno=9 cover=53 2021/11/11 16:02:10 result hanged=false: 16:02:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x80045300, &(0x7f0000000440)={{}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [587545ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81724 #0 [587562ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [587562ms] <- perf_event_open=0x3 errno=14 cover=8394 #0 [587564ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [587567ms] <- openat$sndseq=0x4 errno=14 cover=5902 #0 [587569ms] -> ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0x4, 0x80045300, 0x20000440) #0 [587569ms] <- ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO=0x0 errno=14 cover=256 enabling collider #0 [587585ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [587586ms] <- perf_event_open=0x3 errno=14 cover=8907 #0 [587587ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [587587ms] <- openat$sndseq=0x4 errno=14 cover=5789 pthread_create failed (errno 11) 2021/11/11 16:02:10 result hanged=false: 16:02:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x80045300, &(0x7f0000000440)={{}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 2021/11/11 16:02:10 #0: triaging type=7 2021/11/11 16:02:10 triaging input for call #2 ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO (new signal=2) [587681ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81826 #0 [587700ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [587701ms] <- perf_event_open=0x3 errno=14 cover=9496 #0 [587702ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [587702ms] <- openat$sndseq=0x4 errno=14 cover=2267 #0 [587703ms] -> ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0x4, 0x80045300, 0x20000440) #0 [587703ms] <- ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO=0x0 errno=14 cover=140 2021/11/11 16:02:10 result hanged=false: 16:02:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x80045300, &(0x7f0000000440)={{}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [587757ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81828 #0 [587776ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [587778ms] <- perf_event_open=0x3 errno=14 cover=8417 #0 [587780ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [587781ms] <- openat$sndseq=0x4 errno=14 cover=5553 #0 [587781ms] -> ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0x4, 0x80045300, 0x20000440) #0 [587782ms] <- ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO=0x0 errno=14 cover=256 16:02:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x80045300, &(0x7f0000000440)={{}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 2021/11/11 16:02:10 result hanged=false: [587828ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81830 #0 [587847ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [587848ms] <- perf_event_open=0x3 errno=14 cover=8244 #0 [587853ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [587854ms] <- openat$sndseq=0x4 errno=14 cover=5076 #0 [587855ms] -> ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0x4, 0x80045300, 0x20000440) #0 [587855ms] <- ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO=0x0 errno=14 cover=140 2021/11/11 16:02:10 result hanged=false: 2021/11/11 16:02:10 added new input for call #2 ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x80045300, &(0x7f0000000440)={{}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 16:02:10 executing program 0: syz_mount_image$iso9660(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, 0x2, &(0x7f00000013c0)=[{&(0x7f0000000f40)='&', 0x1}, {0x0, 0x0, 0x7fff}], 0x0, &(0x7f0000001480)) [587908ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81832 #0 [587927ms] -> syz_mount_image$iso9660(0x20000ec0, 0x20000f00, 0x0, 0x2, 0x200013c0, 0x0, 0x20001480) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='iso9660' flags=1 opts='' [ 1835.450110] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 syz_mount_image > mount error: 22 #0 [587953ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=22 cover=44647 enabling collider #0 [587954ms] -> syz_mount_image$iso9660(0x20000ec0, 0x20000f00, 0x0, 0x2, 0x200013c0, 0x0, 0x20001480) #0 [587957ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=16 cover=5713 16:02:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b66, &(0x7f0000000280)=""/77) 2021/11/11 16:02:10 result hanged=false: [588006ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81834 #0 [588023ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [588023ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3453 #0 [588025ms] -> ioctl$GIO_SCRNMAP(0x3, 0x4b66, 0x20000280) #0 [588025ms] <- ioctl$GIO_SCRNMAP=0xffffffffffffffff errno=12 cover=5266 enabling collider #0 [588030ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [588030ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3506 #0 [588031ms] -> ioctl$GIO_SCRNMAP(0x3, 0x4b66, 0x20000280) #0 [588031ms] <- ioctl$GIO_SCRNMAP=0xffffffffffffffff errno=9 cover=46 16:02:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b66, &(0x7f0000000280)=""/77) 2021/11/11 16:02:10 result hanged=false: 2021/11/11 16:02:10 #0: triaging type=7 2021/11/11 16:02:10 triaging input for call #1 ioctl$GIO_SCRNMAP (new signal=9) [588073ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81836 #0 [588091ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [588094ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3406 #0 [588094ms] -> ioctl$GIO_SCRNMAP(0x3, 0x4b66, 0x20000280) #0 [588095ms] <- ioctl$GIO_SCRNMAP=0xffffffffffffffff errno=12 cover=5201 2021/11/11 16:02:10 result hanged=false: 16:02:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b66, &(0x7f0000000280)=""/77) [588139ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81838 #0 [588159ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [588159ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3410 #0 [588161ms] -> ioctl$GIO_SCRNMAP(0x3, 0x4b66, 0x20000280) #0 [588162ms] <- ioctl$GIO_SCRNMAP=0xffffffffffffffff errno=12 cover=5277 16:02:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b66, &(0x7f0000000280)=""/77) 2021/11/11 16:02:10 result hanged=false: [588201ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81840 #0 [588219ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [588219ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3422 #0 [588222ms] -> ioctl$GIO_SCRNMAP(0x3, 0x4b66, 0x20000280) #0 [588224ms] <- ioctl$GIO_SCRNMAP=0xffffffffffffffff errno=12 cover=5157 2021/11/11 16:02:10 result hanged=false: 2021/11/11 16:02:10 added new input for call #1 ioctl$GIO_SCRNMAP to corpus: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b66, &(0x7f0000000280)=""/77) 16:02:10 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa43, 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB='/dev/sr0'], &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x5393, &(0x7f0000000000)=0xb9d) 2021/11/11 16:02:10 poll: candidates=8 inputs=0 signal=0 [588270ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81842 #0 [588291ms] -> openat(0xffffffffffffff9c, 0x20000100, 0xa43, 0x0) #0 [588299ms] <- openat=0x3 errno=14 cover=10363 #0 [588301ms] -> mount(0x20000140, 0x200000c0, 0x0, 0x209000, 0x0) #0 [588302ms] <- mount=0x0 errno=14 cover=2437 #0 [588302ms] -> openat(0xffffffffffffff9c, 0x20004c40, 0x84e00, 0x0) #0 [588321ms] <- openat=0x4 errno=14 cover=3404 #0 [588321ms] -> ioctl$SG_SET_TIMEOUT(0x4, 0x5393, 0x20000000) [ 1835.825796] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1835.828395] sr 1:0:0:0: [sr0] tag#0 CDB: Service action bidirectional, sa=0xb 9d 0b 00 00 00 00 00 00 00 00 00 00 #0 [588328ms] <- ioctl$SG_SET_TIMEOUT=0x0 errno=14 cover=2889 enabling collider #0 [588329ms] -> openat(0xffffffffffffff9c, 0x20000100, 0xa43, 0x0) #0 [588364ms] <- openat=0x3 errno=14 cover=3648 #0 [588364ms] -> mount(0x20000140, 0x200000c0, 0x0, 0x209000, 0x0) #0 [588366ms] <- mount=0x0 errno=14 cover=2294 pthread_create failed (errno 11) 16:02:10 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) connect(r0, 0x0, 0x0) 2021/11/11 16:02:10 result hanged=false: umount(./4238/file1) umount(./4238/file1) [588462ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81944 #0 [588481ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [588482ms] <- socket$nl_audit=0x3 errno=14 cover=1434 #0 [588483ms] -> connect(0x3, 0x0, 0x0) #0 [588483ms] <- connect=0xffffffffffffffff errno=22 cover=74 enabling collider #0 [588484ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [588484ms] <- socket$nl_audit=0x3 errno=14 cover=1531 #0 [588485ms] -> connect(0x3, 0x0, 0x0) #0 [588485ms] <- connect=0xffffffffffffffff errno=9 cover=47 16:02:11 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) 2021/11/11 16:02:11 result hanged=false: [588531ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 81946 #0 [588561ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [588562ms] <- perf_event_open=0x3 errno=14 cover=8422 #0 [588562ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [588563ms] <- socket$nl_netfilter=0x4 errno=14 cover=1408 #0 [588563ms] -> sendmsg$IPCTNL_MSG_CT_GET(0x4, 0x20000e80, 0x0) #0 [588578ms] <- sendmsg$IPCTNL_MSG_CT_GET=0x14 errno=14 cover=118517 enabling collider #0 [588594ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [588595ms] <- perf_event_open=0x3 errno=14 cover=8592 #0 [588596ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [588597ms] <- socket$nl_netfilter=0x4 errno=14 cover=1521 pthread_create failed (errno 11) 16:02:11 executing program 0: add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='M', 0x1, 0xfffffffffffffff8) 2021/11/11 16:02:11 result hanged=false: [588687ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82048 #0 [588706ms] -> add_key$user(0x20000040, 0x20000080, 0x200000c0, 0x1, 0xfffffffffffffff8) #0 [588706ms] <- add_key$user=0xffffffffffffffff errno=126 cover=530 enabling collider #0 [588706ms] -> add_key$user(0x20000040, 0x20000080, 0x200000c0, 0x1, 0xfffffffffffffff8) #0 [588706ms] <- add_key$user=0xffffffffffffffff errno=126 cover=530 16:02:11 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x0) 2021/11/11 16:02:11 result hanged=false: [588746ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82050 #0 [588763ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [588767ms] <- perf_event_open=0x3 errno=14 cover=9409 #0 [588767ms] -> openat$procfs(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [588768ms] <- openat$procfs=0x4 errno=14 cover=5492 #0 [588768ms] -> pread64(0x4, 0x20000200, 0xa9, 0x0) #0 [588769ms] <- pread64=0xa9 errno=14 cover=4410 enabling collider #0 [588777ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [588778ms] <- perf_event_open=0x3 errno=14 cover=8456 #0 [588779ms] -> openat$procfs(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [588779ms] <- openat$procfs=0x4 errno=14 cover=4459 pthread_create failed (errno 11) 16:02:11 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x0) 2021/11/11 16:02:11 result hanged=false: 2021/11/11 16:02:11 #0: triaging type=7 2021/11/11 16:02:11 triaging input for call #2 pread64 (new signal=4) [588867ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82152 #0 [588883ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [588884ms] <- perf_event_open=0x3 errno=14 cover=8728 #0 [588885ms] -> openat$procfs(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [588886ms] <- openat$procfs=0x4 errno=14 cover=4507 #0 [588886ms] -> pread64(0x4, 0x20000200, 0xa9, 0x0) #0 [588888ms] <- pread64=0xa9 errno=14 cover=21801 2021/11/11 16:02:11 result hanged=false: 16:02:11 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x0) [588944ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82154 #0 [588961ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [588963ms] <- perf_event_open=0x3 errno=14 cover=8295 #0 [588966ms] -> openat$procfs(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [588968ms] <- openat$procfs=0x4 errno=14 cover=5695 #0 [588975ms] -> pread64(0x4, 0x20000200, 0xa9, 0x0) #0 [588975ms] <- pread64=0xa9 errno=14 cover=4532 2021/11/11 16:02:11 result hanged=false: 16:02:11 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x0) [589022ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82156 #0 [589039ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [589040ms] <- perf_event_open=0x3 errno=14 cover=8579 #0 [589041ms] -> openat$procfs(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [589041ms] <- openat$procfs=0x4 errno=14 cover=4449 #0 [589043ms] -> pread64(0x4, 0x20000200, 0xa9, 0x0) #0 [589043ms] <- pread64=0xa9 errno=14 cover=4533 2021/11/11 16:02:11 result hanged=false: 2021/11/11 16:02:11 added new input for call #2 pread64 to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x0) 16:02:11 executing program 0: capset(&(0x7f0000001c40)={0x19980330}, &(0x7f0000001c80)) socket$packet(0x11, 0x0, 0x300) [589093ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82158 #0 [589116ms] -> capset(0x20001c40, 0x20001c80) #0 [589116ms] <- capset=0x0 errno=14 cover=416 #0 [589117ms] -> socket$packet(0x11, 0x0, 0x300) #0 [589117ms] <- socket$packet=0xffffffffffffffff errno=1 cover=681 enabling collider #0 [589119ms] -> capset(0x20001c40, 0x20001c80) #0 [589120ms] <- capset=0x0 errno=14 cover=408 16:02:11 executing program 0: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 2021/11/11 16:02:11 result hanged=false: [589163ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82160 #0 [589180ms] -> add_key$keyring(0x20000000, 0x20000040, 0x0, 0x0, 0xfffffffffffffffd) #0 [589180ms] <- add_key$keyring=0x1e2bb512 errno=14 cover=1342 enabling collider #0 [589181ms] -> add_key$keyring(0x20000000, 0x20000040, 0x0, 0x0, 0xfffffffffffffffd) #0 [589181ms] <- add_key$keyring=0x29e90931 errno=14 cover=1160 16:02:11 executing program 0: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x74, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2021/11/11 16:02:11 result hanged=false: [589223ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82162 #0 [589240ms] -> syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [589240ms] <- syz_genetlink_get_family_id$nl802154=0xffffffffffffffff errno=14 cover=4371 #0 [589241ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [589257ms] <- perf_event_open=0x4 errno=14 cover=67052 enabling collider #0 [589275ms] -> syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [589275ms] <- syz_genetlink_get_family_id$nl802154=0xffffffffffffffff errno=14 cover=2578 #0 [589276ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:02:11 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_getevents(r0, 0x1, 0x0, 0x0, &(0x7f0000000200)={0x77359400}) getpgrp(0x0) 2021/11/11 16:02:11 result hanged=false: 2021/11/11 16:02:11 poll: candidates=8 inputs=0 signal=0 [589337ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82164 #0 [589354ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [589354ms] <- socket$inet6_udp=0x3 errno=14 cover=1695 #0 [589355ms] -> io_setup(0x4, 0x20000180) #0 [589355ms] <- io_setup=0x0 errno=14 cover=3389 #0 [589355ms] -> io_getevents(0x7f7b9ceea000, 0x1, 0x0, 0x0, 0x20000200) #0 [589355ms] <- io_getevents=0xffffffffffffffff errno=22 cover=375 #0 [589356ms] -> getpgrp(0x0) #0 [589356ms] <- getpgrp=0x140f4 errno=14 cover=48 enabling collider #0 [589356ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [589356ms] <- socket$inet6_udp=0x3 errno=14 cover=1661 #0 [589356ms] -> io_setup(0x4, 0x20000180) #0 [589357ms] <- io_setup=0xffffffffffffffff errno=22 cover=40 pthread_create failed (errno 11) 16:02:11 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_getevents(r0, 0x1, 0x0, 0x0, &(0x7f0000000200)={0x77359400}) getpgrp(0x0) 2021/11/11 16:02:11 result hanged=false: 2021/11/11 16:02:11 #0: triaging type=7 2021/11/11 16:02:11 triaging input for call #1 io_setup (new signal=1) [589441ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82266 #0 [589460ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [589461ms] <- socket$inet6_udp=0x3 errno=14 cover=1717 #0 [589463ms] -> io_setup(0x4, 0x20000180) #0 [589465ms] <- io_setup=0x0 errno=14 cover=8062 #0 [589470ms] -> io_getevents(0x7f7b9ceea000, 0x1, 0x0, 0x0, 0x20000200) #0 [589470ms] <- io_getevents=0xffffffffffffffff errno=22 cover=375 #0 [589471ms] -> getpgrp(0x0) #0 [589471ms] <- getpgrp=0x1415a errno=14 cover=48 16:02:12 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_getevents(r0, 0x1, 0x0, 0x0, &(0x7f0000000200)={0x77359400}) getpgrp(0x0) 2021/11/11 16:02:12 result hanged=false: [589521ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82268 #0 [589540ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [589540ms] <- socket$inet6_udp=0x3 errno=14 cover=1709 #0 [589543ms] -> io_setup(0x4, 0x20000180) #0 [589544ms] <- io_setup=0x0 errno=14 cover=3538 #0 [589545ms] -> io_getevents(0x7f7b9ceea000, 0x1, 0x0, 0x0, 0x20000200) #0 [589545ms] <- io_getevents=0xffffffffffffffff errno=22 cover=375 #0 [589547ms] -> getpgrp(0x0) #0 [589547ms] <- getpgrp=0x1415c errno=14 cover=48 16:02:12 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_getevents(r0, 0x1, 0x0, 0x0, &(0x7f0000000200)={0x77359400}) getpgrp(0x0) 2021/11/11 16:02:12 result hanged=false: [589598ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82270 #0 [589619ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [589621ms] <- socket$inet6_udp=0x3 errno=14 cover=1789 #0 [589622ms] -> io_setup(0x4, 0x20000180) #0 [589623ms] <- io_setup=0x0 errno=14 cover=3520 #0 [589624ms] -> io_getevents(0x7f7b9ceea000, 0x1, 0x0, 0x0, 0x20000200) #0 [589624ms] <- io_getevents=0xffffffffffffffff errno=22 cover=375 #0 [589628ms] -> getpgrp(0x0) #0 [589628ms] <- getpgrp=0x1415e errno=14 cover=48 2021/11/11 16:02:12 result hanged=false: 2021/11/11 16:02:12 added new input for call #1 io_setup to corpus: socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_getevents(r0, 0x1, 0x0, 0x0, &(0x7f0000000200)={0x77359400}) getpgrp(0x0) 16:02:12 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, r3+60000000}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0, 0x0) [589681ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82272 #0 [589699ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x200a0000, 0x20ffd000, 0x20000180, 0x20002a40) #0 [589703ms] <- syz_io_uring_setup=0x3 errno=14 cover=7769 #0 [589705ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000540, 0x0) #0 [589705ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [589707ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000100, 0x4) #0 [589707ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [589708ms] -> clock_gettime(0x0, 0x20000140) #0 [589708ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [589708ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000300, 0x0) #0 [589709ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [589709ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [589709ms] <- io_uring_enter=0x3 errno=14 cover=884 #0 [589710ms] -> execveat(0xffffffffffffffff, 0x20000000, 0x0, 0x0, 0x0) #0 [589712ms] <- execveat=0xffffffffffffffff errno=9 cover=19834 enabling collider #0 [589713ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x200a0000, 0x20ffd000, 0x20000180, 0x20002a40) #0 [589717ms] <- syz_io_uring_setup=0x3 errno=14 cover=6541 #0 [589717ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000540, 0x0) #0 [589717ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 pthread_create failed (errno 11) 2021/11/11 16:02:12 result hanged=false: 2021/11/11 16:02:12 #0: triaging type=7 2021/11/11 16:02:12 triaging input for call #6 execveat (new signal=2) 16:02:12 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, r3+60000000}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0, 0x0) [589795ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82374 #0 [589815ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x200a0000, 0x20ffd000, 0x20000180, 0x20002a40) #0 [589819ms] <- syz_io_uring_setup=0x3 errno=14 cover=8153 #0 [589823ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000540, 0x0) #0 [589823ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [589824ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000100, 0x4) #0 [589825ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [589825ms] -> clock_gettime(0x0, 0x20000140) #0 [589825ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [589826ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000300, 0x0) #0 [589826ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [589827ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [589827ms] <- io_uring_enter=0x3 errno=14 cover=903 #0 [589828ms] -> execveat(0xffffffffffffffff, 0x20000000, 0x0, 0x0, 0x0) #0 [589831ms] <- execveat=0xffffffffffffffff errno=9 cover=17311 2021/11/11 16:02:12 result hanged=false: 16:02:12 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, r3+60000000}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0, 0x0) [589885ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82376 #0 [589926ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x200a0000, 0x20ffd000, 0x20000180, 0x20002a40) #0 [589929ms] <- syz_io_uring_setup=0x3 errno=14 cover=7732 #0 [589930ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000540, 0x0) #0 [589930ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [589930ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000100, 0x4) #0 [589930ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [589931ms] -> clock_gettime(0x0, 0x20000140) #0 [589931ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [589932ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000300, 0x0) #0 [589932ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [589933ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [589933ms] <- io_uring_enter=0x3 errno=14 cover=928 #0 [589934ms] -> execveat(0xffffffffffffffff, 0x20000000, 0x0, 0x0, 0x0) #0 [589936ms] <- execveat=0xffffffffffffffff errno=9 cover=17328 2021/11/11 16:02:12 result hanged=false: 16:02:12 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, r3+60000000}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0, 0x0) [589981ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82378 #0 [590001ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x200a0000, 0x20ffd000, 0x20000180, 0x20002a40) #0 [590003ms] <- syz_io_uring_setup=0x3 errno=14 cover=8158 #0 [590006ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000540, 0x0) #0 [590006ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [590013ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000100, 0x4) #0 [590013ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [590013ms] -> clock_gettime(0x0, 0x20000140) #0 [590013ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [590014ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000300, 0x0) #0 [590014ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [590014ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [590015ms] <- io_uring_enter=0x3 errno=14 cover=938 #0 [590015ms] -> execveat(0xffffffffffffffff, 0x20000000, 0x0, 0x0, 0x0) #0 [590018ms] <- execveat=0xffffffffffffffff errno=9 cover=17769 2021/11/11 16:02:12 result hanged=false: 2021/11/11 16:02:12 added new input for call #6 execveat to corpus: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, r3+60000000}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0, 0x0) 16:02:12 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000180)}}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000c40)='ext4\x00', &(0x7f0000000c80)='./file0\x00', 0x6, 0x3, &(0x7f0000001040)=[{0x0}, {0x0}, {0x0}], 0x0, &(0x7f0000001100)={[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}) [590067ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82380 #0 [590084ms] -> recvmmsg(0xffffffffffffffff, 0x20000640, 0x1, 0x0, 0x0) #0 [590084ms] <- recvmmsg=0xffffffffffffffff errno=9 cover=54 #0 [590085ms] -> syz_mount_image$ext4(0x20000c40, 0x20000c80, 0x6, 0x3, 0x20001040, 0x0, 0x20001100) syz_mount_image: size=6 segs=3 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts='rootcontext=root,,errors=continue' [ 1837.603624] EXT4-fs (loop0): VFS: Can't find ext4 filesystem syz_mount_image > mount error: 22 #0 [590103ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=26451 enabling collider #0 [590107ms] -> recvmmsg(0xffffffffffffffff, 0x20000640, 0x1, 0x0, 0x0) #0 [590107ms] <- recvmmsg=0xffffffffffffffff errno=9 cover=54 #0 [590108ms] -> syz_mount_image$ext4(16:02:12 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xae, 0x34, 0xef, 0x0, 0x90c, 0x6000, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0x94, 0x32}}]}}]}}, 0x0) 2021/11/11 16:02:12 result hanged=false: [590154ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82382 [ 1837.676741] udc-core: couldn't find an available UDC or it's busy [ 1837.678455] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 #0 [590172ms] -> syz_usb_connect(0x0, 0x24, 0x20000000, 0x0) syz_usb_connect: dev: 0x20000000 syz_usb_connect: device data: 12 01 00 00 ae 34 ef 00 0c 09 00 60 00 01 01 02 03 01 09 02 12 00 01 00 00 00 00 09 04 00 00 00 db 94 32 00 syz_usb_connect: usb_raw_open success parse_usb_descriptor: found interface #0 (0, 0) at 0x2000001b syz_usb_connect: add_usb_index success syz_usb_connect: usb_raw_init success syz_usb_connect: usb_raw_run failed with -1 #0 [590181ms] <- syz_usb_connect=0xffffffffffffffff errno=19 cover=19259 enabling collider #0 [590684ms] -> syz_usb_connect(0x0, 0x24, 0x20000000, 0x0) syz_usb_connect: dev: 0x20000000 syz_usb_connect: device data: 12 01 00 00 ae 34 ef 00 0c 09 00 60 00 01 01 02 03 01 09 02 12 00 01 00 00 00 00 09 04 00 00 00 db 94 32 00 syz_usb_connect: usb_raw_open success parse_usb_descriptor: found interface #0 (0, 0) at 0x2000001b syz_usb_connect: add_usb_index success syz_usb_connect: usb_raw_init success [ 1838.188156] udc-core: couldn't find an available UDC or it's busy [ 1838.190015] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 syz_usb_connect: usb_raw_run failed with -1 #0 [590688ms] <- syz_usb_connect=0xffffffffffffffff errno=19 cover=17439 16:02:13 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640), &(0x7f0000000680)=0x4) 2021/11/11 16:02:13 result hanged=false: [590728ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82384 #0 [590746ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [590746ms] <- socket$inet6_udplite=0x3 errno=14 cover=1683 #0 [590748ms] -> getsockopt$inet6_mtu(0x3, 0x29, 0x17, 0x20000640, 0x20000680) #0 [590748ms] <- getsockopt$inet6_mtu=0x0 errno=14 cover=125 enabling collider #0 [590751ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [590752ms] <- socket$inet6_udplite=0x3 errno=14 cover=1703 #0 [590753ms] -> getsockopt$inet6_mtu(0x3, 0x29, 0x17, 0x20000640, 0x20000680) #0 [590753ms] <- getsockopt$inet6_mtu=0xffffffffffffffff errno=9 cover=50 2021/11/11 16:02:13 result hanged=false: 16:02:13 executing program 0: socketpair(0x11, 0x2, 0xa69, &(0x7f0000001240)) [590794ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82386 #0 [590814ms] -> socketpair(0x11, 0x2, 0xa69, 0x20001240) #0 [590824ms] <- socketpair=0xffffffffffffffff errno=95 cover=4942 enabling collider #0 [590824ms] -> socketpair(0x11, 0x2, 0xa69, 0x20001240) #0 [590833ms] <- socketpair=0xffffffffffffffff errno=95 cover=4345 16:02:13 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000480)) 2021/11/11 16:02:13 result hanged=false: [590873ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82388 #0 [590893ms] -> openat$bsg(0xffffffffffffff9c, 0x20000240, 0x0, 0x0) #0 [590893ms] <- openat$bsg=0x3 errno=14 cover=1205 #0 [590895ms] -> socketpair(0x0, 0x0, 0x0, 0x20000480) #0 [590913ms] <- socketpair=0xffffffffffffffff errno=97 cover=1639 enabling collider #0 [590913ms] -> openat$bsg(0xffffffffffffff9c, 0x20000240, 0x0, 0x0) #0 [590913ms] <- openat$bsg=0x3 errno=14 cover=1269 16:02:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 2021/11/11 16:02:13 result hanged=false: [590952ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82390 #0 [590970ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [590975ms] <- perf_event_open=0x3 errno=14 cover=9259 #0 [590976ms] -> socket$unix(0x1, 0x3, 0x0) #0 [590976ms] <- socket$unix=0x4 errno=14 cover=1516 #0 [590976ms] -> connect$unix(0xffffffffffffffff, 0x0, 0x0) #0 [590976ms] <- connect$unix=0xffffffffffffffff errno=9 cover=46 #0 [590977ms] -> ioctl$sock_SIOCINQ(0x4, 0x541b, 0x200000c0) #0 [590977ms] <- ioctl$sock_SIOCINQ=0x0 errno=14 cover=455 enabling collider #0 [590988ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [590988ms] <- perf_event_open=0x3 errno=14 cover=8301 #0 [590989ms] -> socket$unix(0x1, 0x3, 0x0) #0 [590989ms] <- socket$unix=0x4 errno=14 cover=1450 pthread_create failed (errno 11) 2021/11/11 16:02:13 result hanged=false: 16:02:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x1e, 0xe21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 2021/11/11 16:02:13 poll: candidates=8 inputs=0 signal=0 [591075ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82492 #0 [591093ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [591094ms] <- socket$netlink=0x3 errno=14 cover=1516 #0 [591095ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [591095ms] <- sendmsg$nl_generic=0x14 errno=14 cover=1490 enabling collider #0 [591095ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [591096ms] <- socket$netlink=0x3 errno=14 cover=1529 #0 [591096ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [591096ms] <- sendmsg$nl_generic=0xffffffffffffffff errno=9 cover=53 2021/11/11 16:02:13 result hanged=false: 16:02:13 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x1000}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) [591134ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82494 #0 [591152ms] -> socket$packet(0x11, 0x3, 0x300) #0 [591153ms] <- socket$packet=0x3 errno=14 cover=1785 #0 [591153ms] -> setsockopt$packet_fanout(0x3, 0x107, 0x12, 0x20000300, 0x4) #0 [591154ms] <- setsockopt$packet_fanout=0x0 errno=14 cover=300 #0 [591154ms] -> socket$packet(0x11, 0x3, 0x300) #0 [591155ms] <- socket$packet=0x4 errno=14 cover=1754 #0 [591155ms] -> setsockopt$packet_fanout(0x4, 0x107, 0x12, 0x20000300, 0x4) #0 [591156ms] <- setsockopt$packet_fanout=0x0 errno=14 cover=216 #0 [591159ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [591160ms] <- socket$inet6_tcp=0x5 errno=14 cover=1799 #0 [591161ms] -> setsockopt$inet6_tcp_int(0x5, 0x6, 0x2, 0x20000080, 0x4) #0 [591161ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=142 #0 [591162ms] -> bind$inet6(0x5, 0x200000c0, 0x1c) #0 [591162ms] <- bind$inet6=0xffffffffffffffff errno=98 cover=469 #0 [591164ms] -> connect$inet6(0x5, 0x20000000, 0x1c) #0 [591165ms] <- connect$inet6=0xffffffffffffffff errno=111 cover=3102 #0 [591166ms] -> sendmsg$inet6(0x5, 0x200006c0, 0x10044001) #0 [591166ms] <- sendmsg$inet6=0xffffffffffffffff errno=32 cover=240 enabling collider #0 [591177ms] -> socket$packet(0x11, 0x3, 0x300) #0 [591177ms] <- socket$packet=0x3 errno=14 cover=1707 #0 [591177ms] -> setsockopt$packet_fanout(0x3, 0x107, 0x12, 0x20000300, 0x4) #0 [591178ms] <- setsockopt$packet_fanout=0x0 errno=14 cover=300 pthread_create failed (errno 11) 2021/11/11 16:02:13 result hanged=false: 16:02:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./mnt\x00', 0x0, 0x0, &(0x7f0000000340), 0x100000, &(0x7f0000000380)) iptable filter/10: resetting iptable mangle/10: resetting [591260ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82596 #0 [591278ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [591283ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=15040 #0 [591284ms] -> mount(0x0, 0x20000080, 0x200000c0, 0x0, 0x0) #0 [591287ms] <- mount=0x0 errno=14 cover=13006 #0 [591287ms] -> perf_event_open(0x200001c0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [591288ms] <- perf_event_open=0x3 errno=14 cover=9623 #0 [591288ms] -> syz_mount_image$tmpfs(0x20000140, 0x20000180, 0x0, 0x0, 0x20000340, 0x100000, 0x20000380) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./mnt' fs='tmpfs' flags=1048576 opts='' #0 [591292ms] <- syz_mount_image$tmpfs=0x6 errno=0 cover=9391 enabling collider #0 [591306ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [591306ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1346 #0 [591306ms] -> mount(0x0, 0x20000080, 0x200000c0, 0x0, 0x0) #0 [591315ms] <- mount=0x0 errno=14 cover=14468 pthread_create failed (errno 11) 2021/11/11 16:02:13 result hanged=false: 16:02:13 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000180)) umount(./4265/mnt) umount(./4265/mnt) [591391ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82698 #0 [591414ms] -> mmap(0x20000000, 0x1000, 0x9, 0x32, 0xffffffffffffffff, 0x0) #0 [591415ms] <- mmap=0x20000000 errno=14 cover=1352 #0 [591415ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [591416ms] <- socket$inet_tcp=0x3 errno=14 cover=1721 SIGSEGV on 0x20000180, skipping #0 [591416ms] -> getsockopt$inet_opts(0x3, 0x0, 0x9, 0x0, 0x20000180) #0 [591417ms] <- getsockopt$inet_opts=0xffffffffffffffff errno=14 cover=697 enabling collider #0 [591421ms] -> mmap(0x20000000, 0x1000, 0x9, 0x32, 0xffffffffffffffff, 0x0) #0 [591421ms] <- mmap=0x20000000 errno=14 cover=1311 SIGSEGV on 0x20000180, skipping #0 [591422ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [591422ms] <- socket$inet_tcp=0x3 errno=14 cover=1766 pthread_create failed (errno 11) 2021/11/11 16:02:14 result hanged=false: 16:02:14 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f0000000000)=[{}, {0x0, 0x8000}], 0x2, &(0x7f00000001c0)={0x0, 0x3938700}) [591499ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82800 #0 [591515ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [591516ms] <- perf_event_open=0x3 errno=14 cover=8296 #0 [591517ms] -> semget$private(0x0, 0x3, 0x0) #0 [591519ms] <- semget$private=0xb errno=14 cover=24637 #0 [591519ms] -> semtimedop(0xb, 0x20000000, 0x2, 0x200001c0) #0 [591579ms] <- semtimedop=0xffffffffffffffff errno=11 cover=897 enabling collider #0 [591590ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [591591ms] <- perf_event_open=0x3 errno=14 cover=8351 #0 [591592ms] -> semget$private(0x0, 0x3, 0x0) #0 [591592ms] <- semget$private=0xc errno=14 cover=1256 pthread_create failed (errno 11) 16:02:14 executing program 0: syz_open_dev$loop(&(0x7f00000001c0), 0x66, 0x80001) 2021/11/11 16:02:14 result hanged=false: [591680ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82902 #0 [591698ms] -> syz_open_dev$loop(0x200001c0, 0x66, 0x80001) #0 [591699ms] <- syz_open_dev$loop=0xffffffffffffffff errno=2 cover=1367 enabling collider #0 [591700ms] -> syz_open_dev$loop(0x200001c0, 0x66, 0x80001) #0 [591700ms] <- syz_open_dev$loop=0xffffffffffffffff errno=2 cover=1370 16:02:14 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000b540)) 2021/11/11 16:02:14 result hanged=false: [591741ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82904 #0 [591760ms] -> syz_genetlink_get_family_id$nl80211(0x20000580, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [591761ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12977 #0 [591762ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x2000b540) #0 [591762ms] <- socketpair$unix=0x0 errno=14 cover=3263 enabling collider #0 [591764ms] -> syz_genetlink_get_family_id$nl80211(0x20000580, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [591765ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11484 16:02:14 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/71, 0x47}], 0x1, 0x5ade, 0x0) 2021/11/11 16:02:14 result hanged=false: [591805ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82906 #0 [591823ms] -> openat$procfs(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [591824ms] <- openat$procfs=0x3 errno=14 cover=1225 #0 [591826ms] -> preadv(0x3, 0x20000180, 0x1, 0x5ade, 0x0) #0 [591836ms] <- preadv=0x47 errno=14 cover=241857 enabling collider #0 [591839ms] -> openat$procfs(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [591839ms] <- openat$procfs=0x3 errno=14 cover=1257 2021/11/11 16:02:14 result hanged=false: 16:02:14 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/71, 0x47}], 0x1, 0x5ade, 0x0) 2021/11/11 16:02:14 #0: triaging type=7 2021/11/11 16:02:14 triaging input for call #1 preadv (new signal=2) [591881ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82908 #0 [591898ms] -> openat$procfs(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [591899ms] <- openat$procfs=0x3 errno=14 cover=1259 #0 [591899ms] -> preadv(0x3, 0x20000180, 0x1, 0x5ade, 0x0) #0 [591908ms] <- preadv=0x47 errno=14 cover=241802 16:02:14 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/71, 0x47}], 0x1, 0x5ade, 0x0) 2021/11/11 16:02:14 result hanged=false: [591961ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82910 #0 [591979ms] -> openat$procfs(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [591980ms] <- openat$procfs=0x3 errno=14 cover=1270 #0 [591981ms] -> preadv(0x3, 0x20000180, 0x1, 0x5ade, 0x0) #0 [591988ms] <- preadv=0x47 errno=14 cover=241852 16:02:14 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/71, 0x47}], 0x1, 0x5ade, 0x0) 2021/11/11 16:02:14 result hanged=false: [592047ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82912 #0 [592066ms] -> openat$procfs(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [592066ms] <- openat$procfs=0x3 errno=14 cover=1225 #0 [592068ms] -> preadv(0x3, 0x20000180, 0x1, 0x5ade, 0x0) #0 [592074ms] <- preadv=0x47 errno=14 cover=241945 2021/11/11 16:02:14 result hanged=false: 2021/11/11 16:02:14 added new input for call #1 preadv to corpus: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/71, 0x47}], 0x1, 0x5ade, 0x0) 16:02:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000440)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040002", 0x1d, 0x1500}], 0x0, &(0x7f0000012800)) 2021/11/11 16:02:14 poll: candidates=8 inputs=0 signal=0 [592136ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82914 #0 [592153ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000440, 0x0, 0x20012800) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext2' flags=0 opts=',errors=continue' [ 1839.669064] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1839.689647] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [592190ms] <- syz_mount_image$ext4=0x5 errno=0 cover=144111 enabling collider #0 [592197ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000440, 0x0, 0x20012800) #0 [592199ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=7638 2021/11/11 16:02:14 result hanged=false: 2021/11/11 16:02:14 #0: triaging type=7 2021/11/11 16:02:14 triaging input for call #0 syz_mount_image$ext4 (new signal=29) 16:02:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000440)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040002", 0x1d, 0x1500}], 0x0, &(0x7f0000012800)) umount(./4274/file0) [592269ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82916 #0 [592286ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000440, 0x0, 0x20012800) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext2' flags=0 opts=',errors=continue' [ 1839.805674] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1839.817668] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [592318ms] <- syz_mount_image$ext4=0x5 errno=0 cover=50306 2021/11/11 16:02:14 result hanged=false: 16:02:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000440)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040002", 0x1d, 0x1500}], 0x0, &(0x7f0000012800)) umount(./4275/file0) [592388ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82918 #0 [592408ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000440, 0x0, 0x20012800) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext2' flags=0 opts=',errors=continue' [ 1839.923030] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1839.929392] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [592428ms] <- syz_mount_image$ext4=0x5 errno=0 cover=49811 2021/11/11 16:02:15 result hanged=false: 16:02:15 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000440)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040002", 0x1d, 0x1500}], 0x0, &(0x7f0000012800)) umount(./4276/file0) [592497ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82920 #0 [592513ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x3, 0x20000440, 0x0, 0x20012800) syz_mount_image: size=262144 segs=3 loop='/dev/loop0' dir='./file0' fs='ext2' flags=0 opts=',errors=continue' [ 1840.030411] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1840.040753] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue #0 [592540ms] <- syz_mount_image$ext4=0x5 errno=0 cover=45708 2021/11/11 16:02:15 result hanged=false: 2021/11/11 16:02:15 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000440)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040002", 0x1d, 0x1500}], 0x0, &(0x7f0000012800)) umount(./4277/file0) 16:02:15 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x4, &(0x7f0000000000)=""/202, 0xca) [592642ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82922 #0 [592661ms] -> perf_event_open(0x20000200, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [592673ms] <- perf_event_open=0x3 errno=14 cover=9061 #0 [592674ms] -> syslog(0x4, 0x20000000, 0xca) #0 [592697ms] <- syslog=0xb4 errno=14 cover=262143 enabling collider #0 [592711ms] -> perf_event_open(0x20000200, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [592712ms] <- perf_event_open=0x3 errno=14 cover=7961 #0 [592712ms] -> syslog(0x4, 0x20000000, 0xca) #0 [592712ms] <- syslog=0x0 errno=14 cover=397 16:02:15 executing program 0: ptrace$setopts(0x4206, 0xffffffffffffffff, 0x5, 0x24) prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x5}, &(0x7f0000000040)) clock_getres(0x1, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000005, 0x20010, 0xffffffffffffffff, 0x8000000) epoll_create(0x7d) syz_open_procfs$namespace(0x0, &(0x7f0000001900)='ns/user\x00') fork() 2021/11/11 16:02:15 result hanged=false: [592763ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 82924 #0 [592784ms] -> ptrace$setopts(0x4206, 0xffffffffffffffff, 0x5, 0x24) #0 [592784ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=53 #0 [592785ms] -> prlimit64(0xffffffffffffffff, 0x0, 0x20000000, 0x20000040) #0 [592785ms] <- prlimit64=0xffffffffffffffff errno=3 cover=73 #0 [592785ms] -> clock_getres(0x1, 0x20000080) #0 [592785ms] <- clock_getres=0x0 errno=14 cover=57 #0 [592785ms] -> mmap$IORING_OFF_CQ_RING(0x20ffb000, 0x2000, 0x2000005, 0x20010, 0xffffffffffffffff, 0x8000000) #0 [592786ms] <- mmap$IORING_OFF_CQ_RING=0xffffffffffffffff errno=9 cover=44 #0 [592786ms] -> epoll_create(0x7d) #0 [592786ms] <- epoll_create=0x3 errno=14 cover=499 #0 [592786ms] -> syz_open_procfs$namespace(0x0, 0x20001900) #0 [592788ms] <- syz_open_procfs$namespace=0x4 errno=1 cover=6525 #0 [592788ms] -> fork() #0 [592810ms] <- fork=0xffffffffffffffff errno=11 cover=262143 enabling collider #0 [592812ms] -> ptrace$setopts(0x4206, 0xffffffffffffffff, 0x5, 0x24) #0 [592812ms] <- ptrace$setopts=0xffffffffffffffff errno=3 cover=53 #0 [592813ms] -> prlimit64(0xffffffffffffffff, 0x0, 0x20000000, 0x20000040) #0 [592815ms] <- prlimit64=0xffffffffffffffff errno=3 cover=123 pthread_create failed (errno 11) 16:02:15 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000e00)=[{&(0x7f0000000cc0)="04", 0x1}, {&(0x7f0000000dc0)="d6", 0x1}], 0x0, 0x0) 2021/11/11 16:02:15 result hanged=false: [592888ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83027 #0 [592907ms] -> syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, 0x20000e00, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [592909ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=10321 enabling collider #0 [592909ms] -> syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, 0x20000e00, 0x0, 0x0) #0 [592917ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=6439 2021/11/11 16:02:15 result hanged=false: 2021/11/11 16:02:15 #0: triaging type=7 16:02:15 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000e00)=[{&(0x7f0000000cc0)="04", 0x1}, {&(0x7f0000000dc0)="d6", 0x1}], 0x0, 0x0) 2021/11/11 16:02:15 triaging input for call #0 syz_mount_image$ext4 (new signal=2) [592965ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83029 #0 [592984ms] -> syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, 0x20000e00, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [592987ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=9999 2021/11/11 16:02:15 result hanged=false: 16:02:15 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000e00)=[{&(0x7f0000000cc0)="04", 0x1}, {&(0x7f0000000dc0)="d6", 0x1}], 0x0, 0x0) [593031ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83031 #0 [593049ms] -> syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, 0x20000e00, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [593052ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=10007 2021/11/11 16:02:15 result hanged=false: 16:02:15 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000e00)=[{&(0x7f0000000cc0)="04", 0x1}, {&(0x7f0000000dc0)="d6", 0x1}], 0x0, 0x0) [593098ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83033 #0 [593118ms] -> syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, 0x20000e00, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [593121ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=10152 2021/11/11 16:02:15 result hanged=false: 2021/11/11 16:02:15 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000e00)=[{&(0x7f0000000cc0)="04", 0x1}, {&(0x7f0000000dc0)="d6", 0x1}], 0x0, 0x0) 16:02:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) [593210ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83035 #0 [593230ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [593231ms] <- socket$nl_xfrm=0x3 errno=14 cover=1401 #0 [593231ms] -> setsockopt$SO_ATTACH_FILTER(0x3, 0x1, 0x1a, 0x20000080, 0x10) #0 [593251ms] <- setsockopt$SO_ATTACH_FILTER=0x0 errno=14 cover=153789 enabling collider #0 [593259ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [593260ms] <- socket$nl_xfrm=0x3 errno=14 cover=5569 2021/11/11 16:02:15 poll: candidates=0 inputs=0 signal=0 16:02:15 executing program 0: semop(0xffffffffffffffff, 0x0, 0x0) 2021/11/11 16:02:15 result hanged=false: [593301ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83037 #0 [593319ms] -> semop(0xffffffffffffffff, 0x0, 0x0) #0 [593319ms] <- semop=0xffffffffffffffff errno=22 cover=35 enabling collider #0 [593320ms] -> semop(0xffffffffffffffff, 0x0, 0x0) #0 [593320ms] <- semop=0xffffffffffffffff errno=22 cover=35 2021/11/11 16:02:15 result hanged=false: 16:02:15 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0x3ff, 0x4) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x1b) recvmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=""/16, 0x10}}], 0x1, 0x0, 0x0) [593361ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83039 #0 [593378ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [593381ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1728 #0 [593381ms] -> setsockopt$inet6_int(0x3, 0x29, 0x42, 0x20000000, 0x4) #0 [593381ms] <- setsockopt$inet6_int=0x0 errno=14 cover=151 #0 [593381ms] -> sendto(0x3, 0x20000040, 0x4, 0x0, 0x200000c0, 0x1b) #0 [593383ms] <- sendto=0xffffffffffffffff errno=101 cover=1589 #0 [593383ms] -> recvmmsg(0x3, 0x20001880, 0x1, 0x0, 0x0) enabling collider pthread_create failed (errno 11) 16:02:17 executing program 0: r0 = semget$private(0x0, 0x6, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000000000)=""/5) 2021/11/11 16:02:17 result hanged=false: [594554ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83141 #0 [594571ms] -> semget$private(0x0, 0x6, 0x0) #0 [594575ms] <- semget$private=0xd errno=14 cover=368 #0 [594575ms] -> semctl$SEM_STAT_ANY(0xd, 0x0, 0x14, 0x20000000) #0 [594575ms] <- semctl$SEM_STAT_ANY=0xd errno=22 cover=903 enabling collider #0 [594575ms] -> semget$private(0x0, 0x6, 0x0) #0 [594576ms] <- semget$private=0xe errno=14 cover=368 16:02:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="b7", 0x1}], 0x1) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 2021/11/11 16:02:17 result hanged=false: 2021/11/11 16:02:17 poll: candidates=8 inputs=0 signal=0 [594613ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83143 #0 [594627ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [594631ms] <- openat=0x3 errno=14 cover=9081 #0 [594632ms] -> ftruncate(0x3, 0x1000004) #0 [594632ms] <- ftruncate=0x0 errno=14 cover=2311 #0 [594633ms] -> ioctl$FS_IOC_FSSETXATTR(0x3, 0x40086602, 0x20000000) #0 [594643ms] <- ioctl$FS_IOC_FSSETXATTR=0x0 errno=14 cover=2387 #0 [594644ms] -> writev(0x3, 0x20000280, 0x1) #0 [594647ms] <- writev=0x1 errno=14 cover=19845 #0 [594648ms] -> write$binfmt_elf64(0x3, 0x200002c0, 0x78) #0 [594652ms] <- write$binfmt_elf64=0xffffffffffffffff errno=22 cover=20018 enabling collider #0 [594653ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [594653ms] <- openat=0xffffffffffffffff errno=17 cover=1037 #0 [594653ms] -> ftruncate(0x3, 0x1000004) #0 [594653ms] <- ftruncate=0xffffffffffffffff errno=9 cover=48 pthread_create failed (errno 11) 16:02:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="b7", 0x1}], 0x1) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 2021/11/11 16:02:17 result hanged=false: 2021/11/11 16:02:17 #0: triaging type=7 2021/11/11 16:02:17 triaging input for call #4 write$binfmt_elf64 (new signal=1) [594721ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83245 #0 [594735ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [594739ms] <- openat=0x3 errno=14 cover=8674 #0 [594743ms] -> ftruncate(0x3, 0x1000004) #0 [594744ms] <- ftruncate=0x0 errno=14 cover=2313 #0 [594745ms] -> ioctl$FS_IOC_FSSETXATTR(0x3, 0x40086602, 0x20000000) #0 [594751ms] <- ioctl$FS_IOC_FSSETXATTR=0x0 errno=14 cover=2439 #0 [594752ms] -> writev(0x3, 0x20000280, 0x1) #0 [594756ms] <- writev=0x1 errno=14 cover=18769 #0 [594759ms] -> write$binfmt_elf64(0x3, 0x200002c0, 0x78) #0 [594762ms] <- write$binfmt_elf64=0xffffffffffffffff errno=22 cover=11761 2021/11/11 16:02:17 result hanged=false: 16:02:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="b7", 0x1}], 0x1) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [594811ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83247 #0 [594832ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [594836ms] <- openat=0x3 errno=14 cover=8657 #0 [594838ms] -> ftruncate(0x3, 0x1000004) #0 [594839ms] <- ftruncate=0x0 errno=14 cover=2303 #0 [594840ms] -> ioctl$FS_IOC_FSSETXATTR(0x3, 0x40086602, 0x20000000) #0 [594845ms] <- ioctl$FS_IOC_FSSETXATTR=0x0 errno=14 cover=2396 #0 [594846ms] -> writev(0x3, 0x20000280, 0x1) #0 [594850ms] <- writev=0x1 errno=14 cover=18666 #0 [594852ms] -> write$binfmt_elf64(0x3, 0x200002c0, 0x78) #0 [594855ms] <- write$binfmt_elf64=0xffffffffffffffff errno=22 cover=11709 2021/11/11 16:02:17 result hanged=false: 16:02:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="b7", 0x1}], 0x1) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [594893ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83249 #0 [594906ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [594909ms] <- openat=0x3 errno=14 cover=8586 #0 [594912ms] -> ftruncate(0x3, 0x1000004) #0 [594912ms] <- ftruncate=0x0 errno=14 cover=2313 #0 [594913ms] -> ioctl$FS_IOC_FSSETXATTR(0x3, 0x40086602, 0x20000000) #0 [594924ms] <- ioctl$FS_IOC_FSSETXATTR=0x0 errno=14 cover=2387 #0 [594925ms] -> writev(0x3, 0x20000280, 0x1) #0 [594928ms] <- writev=0x1 errno=14 cover=18613 #0 [594930ms] -> write$binfmt_elf64(0x3, 0x200002c0, 0x78) #0 [594932ms] <- write$binfmt_elf64=0xffffffffffffffff errno=22 cover=10762 2021/11/11 16:02:17 result hanged=false: 2021/11/11 16:02:17 added new input for call #4 write$binfmt_elf64 to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="b7", 0x1}], 0x1) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 2021/11/11 16:02:17 #0: triaging type=7 16:02:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="b7", 0x1}], 0x1) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 2021/11/11 16:02:17 triaging input for call #3 writev (new signal=1) [594974ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83251 #0 [594988ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [594992ms] <- openat=0x3 errno=14 cover=9073 #0 [594993ms] -> ftruncate(0x3, 0x1000004) #0 [594994ms] <- ftruncate=0x0 errno=14 cover=2324 #0 [594994ms] -> ioctl$FS_IOC_FSSETXATTR(0x3, 0x40086602, 0x20000000) #0 [594999ms] <- ioctl$FS_IOC_FSSETXATTR=0x0 errno=14 cover=2398 #0 [595001ms] -> writev(0x3, 0x20000280, 0x1) #0 [595004ms] <- writev=0x1 errno=14 cover=19055 #0 [595006ms] -> write$binfmt_elf64(0x3, 0x200002c0, 0x78) #0 [595009ms] <- write$binfmt_elf64=0xffffffffffffffff errno=22 cover=11710 2021/11/11 16:02:17 result hanged=false: 16:02:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="b7", 0x1}], 0x1) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [595052ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83253 #0 [595074ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [595080ms] <- openat=0x3 errno=14 cover=12916 #0 [595085ms] -> ftruncate(0x3, 0x1000004) #0 [595085ms] <- ftruncate=0x0 errno=14 cover=2302 #0 [595087ms] -> ioctl$FS_IOC_FSSETXATTR(0x3, 0x40086602, 0x20000000) #0 [595091ms] <- ioctl$FS_IOC_FSSETXATTR=0x0 errno=14 cover=2387 #0 [595091ms] -> writev(0x3, 0x20000280, 0x1) #0 [595097ms] <- writev=0x1 errno=14 cover=19247 #0 [595099ms] -> write$binfmt_elf64(0x3, 0x200002c0, 0x78) #0 [595102ms] <- write$binfmt_elf64=0xffffffffffffffff errno=22 cover=12238 2021/11/11 16:02:17 result hanged=false: 16:02:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="b7", 0x1}], 0x1) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [595149ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83255 #0 [595166ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [595171ms] <- openat=0x3 errno=14 cover=8660 #0 [595172ms] -> ftruncate(0x3, 0x1000004) #0 [595173ms] <- ftruncate=0x0 errno=14 cover=2300 #0 [595174ms] -> ioctl$FS_IOC_FSSETXATTR(0x3, 0x40086602, 0x20000000) #0 [595179ms] <- ioctl$FS_IOC_FSSETXATTR=0x0 errno=14 cover=2385 #0 [595180ms] -> writev(0x3, 0x20000280, 0x1) #0 [595186ms] <- writev=0x1 errno=14 cover=19233 #0 [595189ms] -> write$binfmt_elf64(0x3, 0x200002c0, 0x78) #0 [595193ms] <- write$binfmt_elf64=0xffffffffffffffff errno=22 cover=11298 2021/11/11 16:02:17 result hanged=false: 2021/11/11 16:02:17 added new input for call #3 writev to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="b7", 0x1}], 0x1) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 16:02:17 executing program 0: kexec_load(0x0, 0x10, &(0x7f00000027c0)=[{0x0}], 0x0) [595261ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83257 #0 [595278ms] -> kexec_load(0x0, 0x10, 0x200027c0, 0x0) #0 [595306ms] <- kexec_load=0x0 errno=14 cover=262143 enabling collider #0 [595309ms] -> kexec_load(0x0, 0x10, 0x200027c0, 0x0) #0 [595310ms] <- kexec_load=0x0 errno=14 cover=2194 2021/11/11 16:02:17 result hanged=false: 2021/11/11 16:02:17 #0: triaging type=7 16:02:17 executing program 0: kexec_load(0x0, 0x10, &(0x7f00000027c0)=[{0x0}], 0x0) 2021/11/11 16:02:17 triaging input for call #0 kexec_load (new signal=1) [595350ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83259 #0 [595370ms] -> kexec_load(0x0, 0x10, 0x200027c0, 0x0) #0 [595370ms] <- kexec_load=0x0 errno=14 cover=2196 2021/11/11 16:02:17 result hanged=false: 16:02:17 executing program 0: kexec_load(0x0, 0x10, &(0x7f00000027c0)=[{0x0}], 0x0) [595410ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83261 #0 [595428ms] -> kexec_load(0x0, 0x10, 0x200027c0, 0x0) #0 [595428ms] <- kexec_load=0x0 errno=14 cover=2183 16:02:18 executing program 0: kexec_load(0x0, 0x10, &(0x7f00000027c0)=[{0x0}], 0x0) 2021/11/11 16:02:18 result hanged=false: [595468ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83263 #0 [595485ms] -> kexec_load(0x0, 0x10, 0x200027c0, 0x0) #0 [595485ms] <- kexec_load=0x0 errno=14 cover=2183 2021/11/11 16:02:18 result hanged=false: 2021/11/11 16:02:18 added new input for call #0 kexec_load to corpus: kexec_load(0x0, 0x10, &(0x7f00000027c0)=[{0x0}], 0x0) 16:02:18 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x800) fallocate(r1, 0x0, 0x0, 0x8800000) fallocate(r1, 0x3, 0x0, 0x8000) [595532ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83265 #0 [595552ms] -> creat(0x20000040, 0x0) #0 [595557ms] <- creat=0x3 errno=14 cover=8579 #0 [595557ms] -> creat(0x20000080, 0x0) #0 [595560ms] <- creat=0x4 errno=14 cover=6710 #0 [595560ms] -> fallocate(0x3, 0x0, 0x0, 0x800) #0 [595561ms] <- fallocate=0x0 errno=14 cover=4458 #0 [595565ms] -> fallocate(0x4, 0x0, 0x0, 0x8800000) #0 [595570ms] <- fallocate=0x0 errno=14 cover=104697 #0 [595573ms] -> fallocate(0x4, 0x3, 0x0, 0x8000) #0 [595575ms] <- fallocate=0x0 errno=14 cover=7253 enabling collider #0 [595576ms] -> creat(0x20000040, 0x0) #0 [595580ms] <- creat=0x3 errno=14 cover=17381 #0 [595580ms] -> creat(0x20000080, 0x0) #0 [595582ms] <- creat=0x4 errno=14 cover=6363 pthread_create failed (errno 11) 16:02:18 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x800) fallocate(r1, 0x0, 0x0, 0x8800000) fallocate(r1, 0x3, 0x0, 0x8000) 2021/11/11 16:02:18 result hanged=false: 2021/11/11 16:02:18 #0: triaging type=7 2021/11/11 16:02:18 triaging input for call #2 fallocate (new signal=2) [595653ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83367 #0 [595670ms] -> creat(0x20000040, 0x0) #0 [595677ms] <- creat=0x3 errno=14 cover=8614 #0 [595679ms] -> creat(0x20000080, 0x0) #0 [595682ms] <- creat=0x4 errno=14 cover=6669 #0 [595682ms] -> fallocate(0x3, 0x0, 0x0, 0x800) #0 [595683ms] <- fallocate=0x0 errno=14 cover=4337 #0 [595683ms] -> fallocate(0x4, 0x0, 0x0, 0x8800000) #0 [595689ms] <- fallocate=0x0 errno=14 cover=104355 #0 [595696ms] -> fallocate(0x4, 0x3, 0x0, 0x8000) #0 [595698ms] <- fallocate=0x0 errno=14 cover=7636 2021/11/11 16:02:18 result hanged=false: 16:02:18 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x800) fallocate(r1, 0x0, 0x0, 0x8800000) fallocate(r1, 0x3, 0x0, 0x8000) [595744ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83369 #0 [595763ms] -> creat(0x20000040, 0x0) #0 [595769ms] <- creat=0x3 errno=14 cover=8667 #0 [595770ms] -> creat(0x20000080, 0x0) #0 [595772ms] <- creat=0x4 errno=14 cover=6649 #0 [595773ms] -> fallocate(0x3, 0x0, 0x0, 0x800) #0 [595773ms] <- fallocate=0x0 errno=14 cover=4396 #0 [595773ms] -> fallocate(0x4, 0x0, 0x0, 0x8800000) #0 [595779ms] <- fallocate=0x0 errno=14 cover=104349 #0 [595786ms] -> fallocate(0x4, 0x3, 0x0, 0x8000) #0 [595788ms] <- fallocate=0x0 errno=14 cover=7688 2021/11/11 16:02:18 result hanged=false: 16:02:18 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x800) fallocate(r1, 0x0, 0x0, 0x8800000) fallocate(r1, 0x3, 0x0, 0x8000) [595830ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83371 #0 [595851ms] -> creat(0x20000040, 0x0) #0 [595857ms] <- creat=0x3 errno=14 cover=8609 #0 [595858ms] -> creat(0x20000080, 0x0) #0 [595861ms] <- creat=0x4 errno=14 cover=6716 #0 [595862ms] -> fallocate(0x3, 0x0, 0x0, 0x800) #0 [595863ms] <- fallocate=0x0 errno=14 cover=4312 #0 [595864ms] -> fallocate(0x4, 0x0, 0x0, 0x8800000) #0 [595871ms] <- fallocate=0x0 errno=14 cover=108978 #0 [595881ms] -> fallocate(0x4, 0x3, 0x0, 0x8000) #0 [595885ms] <- fallocate=0x0 errno=14 cover=7286 2021/11/11 16:02:18 result hanged=false: 2021/11/11 16:02:18 added new input for call #2 fallocate to corpus: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x800) fallocate(r1, 0x0, 0x0, 0x8800000) fallocate(r1, 0x3, 0x0, 0x8000) 16:02:18 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYRESOCT]) [595932ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83373 #0 [595949ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [595954ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=15616 #0 [595956ms] -> mount(0x0, 0x20000080, 0x200000c0, 0x0, 0x0) #0 [595959ms] <- mount=0x0 errno=14 cover=12227 #0 [595963ms] -> syz_mount_image$tmpfs(0x20000040, 0x20000140, 0x0, 0x0, 0x0, 0x0, 0x20000180) syz_mount_image: size=0 segs=0 loop='' dir='./mnt' fs='tmpfs' flags=0 opts='gid=0x000000000000000001777777777777777777777' [ 1843.466899] tmpfs: Bad value for 'gid' syz_mount_image > mount error: 22 #0 [595965ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=22 cover=4100 enabling collider #0 [595968ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [595968ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1387 #0 [595968ms] -> mount(0x0, 0x20000080, 0x200000c0, 0x0, 0x0) #0 [595971ms] <- mount=0x0 errno=14 cover=12156 pthread_create failed (errno 11) 16:02:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="4103f9050000000000000100000006000400d823"], 0x1c}}, 0x0) 2021/11/11 16:02:18 result hanged=false: umount(./4303/mnt) umount(./4303/mnt) [596053ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83475 #0 [596071ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [596071ms] <- socket$nl_generic=0x3 errno=14 cover=1434 #0 [596073ms] -> syz_genetlink_get_family_id$nl80211(0x20001540, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [596075ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12027 #0 [596076ms] -> sendmsg$NL80211_CMD_GET_SCAN(0x3, 0x20001600, 0x0) #0 [596077ms] <- sendmsg$NL80211_CMD_GET_SCAN=0x1c errno=14 cover=7403 enabling collider #0 [596078ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [596079ms] <- socket$nl_generic=0x3 errno=14 cover=1553 #0 [596080ms] -> syz_genetlink_get_family_id$nl80211(0x20001540, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [596081ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11532 pthread_create failed (errno 11) 16:02:18 executing program 0: signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xdcf]}, 0x8) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/219, 0xdb}], 0x1, 0x0, 0x0) 2021/11/11 16:02:18 result hanged=false: [596156ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83577 #0 [596178ms] -> signalfd(0xffffffffffffffff, 0x20000000, 0x8) #0 [596178ms] <- signalfd=0x3 errno=14 cover=525 #0 [596179ms] -> syz_open_procfs(0x0, 0x200005c0) #0 [596179ms] <- syz_open_procfs=0x4 errno=14 cover=3480 #0 [596182ms] -> preadv(0x4, 0x20000580, 0x1, 0x0, 0x0) #0 [596182ms] <- preadv=0x36 errno=14 cover=857 enabling collider #0 [596182ms] -> signalfd(0xffffffffffffffff, 0x20000000, 0x8) #0 [596182ms] <- signalfd=0x3 errno=14 cover=565 #0 [596182ms] -> syz_open_procfs(0x0, 0x200005c0) #0 [596184ms] <- syz_open_procfs=0x4 errno=14 cover=2481 pthread_create failed (errno 11) 16:02:18 executing program 0: signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xdcf]}, 0x8) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/219, 0xdb}], 0x1, 0x0, 0x0) 2021/11/11 16:02:18 result hanged=false: 2021/11/11 16:02:18 #0: triaging type=7 2021/11/11 16:02:18 triaging input for call #2 preadv (new signal=6) [596257ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83679 #0 [596278ms] -> signalfd(0xffffffffffffffff, 0x20000000, 0x8) #0 [596279ms] <- signalfd=0x3 errno=14 cover=555 #0 [596281ms] -> syz_open_procfs(0x0, 0x200005c0) #0 [596281ms] <- syz_open_procfs=0x4 errno=14 cover=3510 #0 [596282ms] -> preadv(0x4, 0x20000580, 0x1, 0x0, 0x0) #0 [596283ms] <- preadv=0x36 errno=14 cover=912 2021/11/11 16:02:18 result hanged=false: 16:02:18 executing program 0: signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xdcf]}, 0x8) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/219, 0xdb}], 0x1, 0x0, 0x0) [596320ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83681 #0 [596337ms] -> signalfd(0xffffffffffffffff, 0x20000000, 0x8) #0 [596337ms] <- signalfd=0x3 errno=14 cover=511 #0 [596338ms] -> syz_open_procfs(0x0, 0x200005c0) #0 [596339ms] <- syz_open_procfs=0x4 errno=14 cover=3416 #0 [596340ms] -> preadv(0x4, 0x20000580, 0x1, 0x0, 0x0) #0 [596340ms] <- preadv=0x36 errno=14 cover=848 16:02:18 executing program 0: signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xdcf]}, 0x8) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/219, 0xdb}], 0x1, 0x0, 0x0) 2021/11/11 16:02:18 result hanged=false: [596381ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83683 #0 [596399ms] -> signalfd(0xffffffffffffffff, 0x20000000, 0x8) #0 [596399ms] <- signalfd=0x3 errno=14 cover=549 #0 [596401ms] -> syz_open_procfs(0x0, 0x200005c0) #0 [596403ms] <- syz_open_procfs=0x4 errno=14 cover=3618 #0 [596408ms] -> preadv(0x4, 0x20000580, 0x1, 0x0, 0x0) #0 [596408ms] <- preadv=0x36 errno=14 cover=901 2021/11/11 16:02:18 result hanged=false: 2021/11/11 16:02:18 added new input for call #2 preadv to corpus: signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xdcf]}, 0x8) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/219, 0xdb}], 0x1, 0x0, 0x0) 16:02:19 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000001940), 0x4) [596449ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83685 #0 [596471ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [596471ms] <- socket$nl_audit=0x3 errno=14 cover=1456 #0 [596473ms] -> setsockopt$sock_int(0x3, 0x1, 0x2e, 0x20001940, 0x4) #0 [596473ms] <- setsockopt$sock_int=0x0 errno=14 cover=135 enabling collider #0 [596473ms] -> socket$nl_audit(0x10, 0x3, 0x9) #0 [596474ms] <- socket$nl_audit=0x3 errno=14 cover=1505 2021/11/11 16:02:19 result hanged=false: 16:02:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), 0x14) [596513ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83687 #0 [596534ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [596535ms] <- socket$inet6_tcp=0x3 errno=14 cover=1789 #0 [596535ms] -> setsockopt$inet6_tcp_TCP_ULP(0x3, 0x6, 0x1f, 0x20000000, 0x4) #0 [596551ms] <- setsockopt$inet6_tcp_TCP_ULP=0xffffffffffffffff errno=2 cover=1009 #0 [596551ms] -> setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0x3, 0x6, 0x1d, 0x20000040, 0x14) #0 [596551ms] <- setsockopt$inet6_tcp_TCP_REPAIR_WINDOW=0xffffffffffffffff errno=1 cover=141 enabling collider #0 [596552ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [596553ms] <- socket$inet6_tcp=0x3 errno=14 cover=1804 #0 [596554ms] -> setsockopt$inet6_tcp_TCP_ULP(0x3, 0x6, 0x1f, 0x20000000, 0x4) #0 [596569ms] <- setsockopt$inet6_tcp_TCP_ULP=0xffffffffffffffff errno=2 cover=1115 pthread_create failed (errno 11) 16:02:19 executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000003500), 0x504, 0x0) 2021/11/11 16:02:19 result hanged=false: 2021/11/11 16:02:19 poll: candidates=8 inputs=0 signal=0 [596631ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83789 #0 [596648ms] -> ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) #0 [596648ms] <- ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL=0xffffffffffffffff errno=9 cover=45 #0 [596649ms] -> openat$vcsa(0xffffffffffffff9c, 0x20003500, 0x504, 0x0) #0 [596649ms] <- openat$vcsa=0x3 errno=14 cover=1213 enabling collider #0 [596654ms] -> ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) #0 [596655ms] <- ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL=0xffffffffffffffff errno=9 cover=45 #0 [596658ms] -> openat$vcsa(0xffffffffffffff9c, 2021/11/11 16:02:19 result hanged=false: 16:02:19 executing program 0: syz_mount_image$nfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) [596696ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83791 #0 [596714ms] -> syz_mount_image$nfs(0x0, 0x20000280, 0x0, 0x0, 0x0, 0x0, 0x20000400) SIGSEGV on (nil), skipping #0 [596722ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=14 cover=15508 enabling collider #0 [596725ms] -> syz_mount_image$nfs(0x0, 0x20000280, 0x0, 0x0, 0x0, 0x0, 0x20000400) SIGSEGV on (nil), skipping #0 [596725ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=17 cover=1344 2021/11/11 16:02:19 result hanged=false: 16:02:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000003200)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) [596771ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83793 #0 [596787ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [596792ms] <- perf_event_open=0x3 errno=14 cover=9118 #0 [596793ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [596794ms] <- perf_event_open=0x4 errno=14 cover=11508 #0 [596797ms] -> epoll_create(0x7) #0 [596797ms] <- epoll_create=0x5 errno=14 cover=2624 #0 [596799ms] -> epoll_ctl$EPOLL_CTL_ADD(0x5, 0x1, 0x4, 0x20003200) #0 [596799ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=2040 #0 [596800ms] -> epoll_ctl$EPOLL_CTL_MOD(0x5, 0x3, 0x4, 0x20000000) #0 [596801ms] <- epoll_ctl$EPOLL_CTL_MOD=0x0 errno=14 cover=321 enabling collider #0 [596824ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [596824ms] <- perf_event_open=0x3 errno=14 cover=8610 #0 [596825ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [596825ms] <- perf_event_open=0x4 errno=14 cover=10118 pthread_create failed (errno 11) 2021/11/11 16:02:19 result hanged=false: 16:02:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000000)={'syz_tun\x00', 0x0}) [596932ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83895 #0 [596950ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) [ 1844.458048] syz_tun: mtu less than device minimum #0 [596954ms] <- socket$inet6_udplite=0x3 errno=14 cover=4807 #0 [596955ms] -> ioctl$sock_SIOCETHTOOL(0x3, 0x8922, 0x20000000) #0 [596959ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=22 cover=1609 enabling collider #0 [596959ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [596960ms] <- socket$inet6_udplite=0x3 errno=14 cover=1714 16:02:19 executing program 0: syz_io_uring_setup(0x61b7, &(0x7f00000018c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001940), &(0x7f0000001980)) 2021/11/11 16:02:19 result hanged=false: [597002ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83897 #0 [597020ms] -> syz_io_uring_setup(0x61b7, 0x200018c0, 0x20ffc000, 0x20ffd000, 0x20001940, 0x20001980) #0 [597027ms] <- syz_io_uring_setup=0x3 errno=14 cover=21041 enabling collider #0 [597028ms] -> syz_io_uring_setup(0x61b7, 0x200018c0, 0x20ffc000, 0x20ffd000, 0x20001940, 0x20001980) #0 [597033ms] <- syz_io_uring_setup=0x3 errno=14 cover=28732 2021/11/11 16:02:19 result hanged=false: 16:02:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) syz_mount_image$msdos(0x0, &(0x7f0000006fc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xee01) [597072ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 83899 #0 [597094ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [597098ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=23542 #0 [597099ms] -> syz_mount_image$msdos(0x0, 0x20006fc0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [597106ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=14 cover=15240 #0 [597107ms] -> chown(0x200000c0, 0x0, 0xee01) #0 [597108ms] <- chown=0x0 errno=14 cover=2660 enabling collider #0 [597109ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [597110ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=2411 #0 [597110ms] -> syz_mount_image$msdos(0x0, 0x20006fc0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [597111ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=17 cover=1437 pthread_create failed (errno 11) 2021/11/11 16:02:19 result hanged=false: 16:02:19 executing program 0: add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "75c490fcbb1365fc192b67bf7644340200c178d15e2d82f89b25ab81eafbaf7bb646430c53c223371f55d3c28a409657cc4894726062d69ef0b4cab7b52c3855"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "f1ca5ccdd9eb4818cee7375a3bb7ba60f922d50ef5d123c77f5998ceaa198a6ea9cfe54555efdfe848db692e1a9b6fe16606993b0c5dd81ff90fb511918fbc47"}, 0x48, 0xffffffffffffffff) [597181ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84001 #0 [597198ms] -> add_key$fscrypt_v1(0x20000080, 0x200000c0, 0x20000100, 0x48, 0xffffffffffffffff) #0 [597198ms] <- add_key$fscrypt_v1=0x39b49586 errno=14 cover=2677 #0 [597199ms] -> add_key$fscrypt_v1(0x20000280, 0x200002c0, 0x20000300, 0x48, 0xffffffffffffffff) #0 [597202ms] <- add_key$fscrypt_v1=0x39b49586 errno=14 cover=2098 enabling collider #0 [597209ms] -> add_key$fscrypt_v1(0x20000080, 0x200000c0, 0x20000100, 0x48, 0xffffffffffffffff) #0 [597210ms] <- add_key$fscrypt_v1=0x39b49586 errno=14 cover=1146 16:02:19 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') 2021/11/11 16:02:19 result hanged=false: [597251ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84003 #0 [597272ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000000) #0 [597273ms] <- syz_open_procfs=0x3 errno=14 cover=4053 enabling collider #0 [597274ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000000) #0 [597275ms] <- syz_open_procfs=0x3 errno=14 cover=2517 2021/11/11 16:02:19 result hanged=false: 16:02:19 executing program 0: futex(&(0x7f0000000040), 0x4, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) 2021/11/11 16:02:19 poll: candidates=8 inputs=0 signal=0 [597315ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84005 #0 [597335ms] -> futex(0x20000040, 0x4, 0x0, 0x20000080, 0x200000c0, 0x0) #0 [597335ms] <- futex=0x0 errno=14 cover=304 enabling collider #0 [597336ms] -> futex(0x20000040, 0x4, 0x0, 0x20000080, 0x200000c0, 0x0) #0 [597336ms] <- futex=0x0 errno=14 cover=304 16:02:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x7, 0x0}}], 0x2, 0x0) 2021/11/11 16:02:19 result hanged=false: [597374ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84007 #0 [597392ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [597392ms] <- socket$nl_xfrm=0x3 errno=14 cover=1434 #0 [597393ms] -> sendmmsg(0x3, 0x20001f40, 0x2, 0x0) #0 [597393ms] <- sendmmsg=0x1 errno=14 cover=1079 enabling collider #0 [597394ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [597394ms] <- socket$nl_xfrm=0x3 errno=14 cover=1413 #0 [597394ms] -> sendmmsg(0x3, 0x20001f40, 0x2, 0x0) #0 [597394ms] <- sendmmsg=0xffffffffffffffff errno=9 16:02:19 executing program 0: pipe2(&(0x7f0000000d80), 0x80000) 2021/11/11 16:02:19 result hanged=false: [597437ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84009 #0 [597454ms] -> pipe2(0x20000d80, 0x80000) #0 [597455ms] <- pipe2=0x0 errno=14 cover=2011 enabling collider #0 [597455ms] -> pipe2(0x20000d80, 0x80000) #0 [597456ms] <- pipe2=0x0 errno=14 cover=1146 16:02:20 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000001300)) syz_io_uring_setup(0x498b, &(0x7f0000000400), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001940)=ANY=[@ANYBLOB="0100000004000000000000000600000000000000060000000000000006000000000000007f000002"]) syz_io_uring_setup(0x25, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x200002dc) 2021/11/11 16:02:20 result hanged=false: [597496ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84011 #0 [597513ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x2) #0 [597513ms] <- openat$sndseq=0x3 errno=14 cover=2216 #0 [597514ms] -> ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) #0 [597514ms] <- ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT=0xffffffffffffffff errno=9 cover=45 #0 [597517ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [597517ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [597517ms] -> ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, 0x20001300) #0 [597517ms] <- ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO=0xffffffffffffffff errno=9 cover=45 #0 [597517ms] -> syz_io_uring_setup(0x498b, 0x20000400, 0x200a0000, 0x20ffa000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [597527ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=12288 #0 [597527ms] -> ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x20001940) #0 [597527ms] <- ioctl$BTRFS_IOC_TREE_SEARCH_V2=0xffffffffffffffff errno=9 cover=45 #0 [597527ms] -> syz_io_uring_setup(0x25, 0x20000940, 0x20ffe000, 0x200b0000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [597530ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=5513 #0 [597530ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0x4, 0xc08c5332, 0x20000200) #0 [597531ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0x0 errno=14 cover=1012 #0 [597535ms] -> write$sndseq(0x3, 0x200002c0, 0x200002dc) #0 [597539ms] <- write$sndseq=0x16a4 errno=14 cover=77370 enabling collider #0 [597540ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x2) #0 [597541ms] <- openat$sndseq=0x3 errno=14 cover=2269 #0 [597541ms] -> ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) #0 [597541ms] <- ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT=0xffffffffffffffff errno=9 cover=45 pthread_create failed (errno 11) 16:02:20 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000001300)) syz_io_uring_setup(0x498b, &(0x7f0000000400), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001940)=ANY=[@ANYBLOB="0100000004000000000000000600000000000000060000000000000006000000000000007f000002"]) syz_io_uring_setup(0x25, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x200002dc) 2021/11/11 16:02:20 result hanged=false: 2021/11/11 16:02:20 #0: triaging type=7 2021/11/11 16:02:20 triaging input for call #7 ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE (new signal=1) [597616ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84113 #0 [597638ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x2) #0 [597639ms] <- openat$sndseq=0x3 errno=14 cover=2216 #0 [597639ms] -> ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) #0 [597639ms] <- ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT=0xffffffffffffffff errno=9 cover=45 #0 [597639ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [597639ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [597639ms] -> ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, 0x20001300) #0 [597639ms] <- ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO=0xffffffffffffffff errno=9 cover=45 #0 [597640ms] -> syz_io_uring_setup(0x498b, 0x20000400, 0x200a0000, 0x20ffa000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [597643ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=12246 #0 [597643ms] -> ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x20001940) #0 [597644ms] <- ioctl$BTRFS_IOC_TREE_SEARCH_V2=0xffffffffffffffff errno=9 cover=45 #0 [597644ms] -> syz_io_uring_setup(0x25, 0x20000940, 0x20ffe000, 0x200b0000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [597646ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=5448 #0 [597646ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0x4, 0xc08c5332, 0x20000200) #0 [597646ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0x0 errno=14 cover=979 #0 [597646ms] -> write$sndseq(0x3, 0x200002c0, 0x200002dc) #0 [597650ms] <- write$sndseq=0x16a4 errno=14 cover=77278 2021/11/11 16:02:20 result hanged=false: 16:02:20 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000001300)) syz_io_uring_setup(0x498b, &(0x7f0000000400), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001940)=ANY=[@ANYBLOB="0100000004000000000000000600000000000000060000000000000006000000000000007f000002"]) syz_io_uring_setup(0x25, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x200002dc) [597696ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84115 #0 [597713ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x2) #0 [597714ms] <- openat$sndseq=0x3 errno=14 cover=2248 #0 [597716ms] -> ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) #0 [597716ms] <- ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT=0xffffffffffffffff errno=9 cover=45 #0 [597718ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [597718ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [597718ms] -> ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, 0x20001300) #0 [597718ms] <- ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO=0xffffffffffffffff errno=9 cover=45 #0 [597720ms] -> syz_io_uring_setup(0x498b, 0x20000400, 0x200a0000, 0x20ffa000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [597723ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=12353 #0 [597725ms] -> ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x20001940) #0 [597725ms] <- ioctl$BTRFS_IOC_TREE_SEARCH_V2=0xffffffffffffffff errno=9 cover=45 #0 [597727ms] -> syz_io_uring_setup(0x25, 0x20000940, 0x20ffe000, 0x200b0000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [597730ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=5616 #0 [597735ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0x4, 0xc08c5332, 0x20000200) #0 [597735ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0x0 errno=14 cover=1026 #0 [597736ms] -> write$sndseq(0x3, 0x200002c0, 0x200002dc) #0 [597739ms] <- write$sndseq=0x16a4 errno=14 cover=77371 2021/11/11 16:02:20 result hanged=false: 16:02:20 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000001300)) syz_io_uring_setup(0x498b, &(0x7f0000000400), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001940)=ANY=[@ANYBLOB="0100000004000000000000000600000000000000060000000000000006000000000000007f000002"]) syz_io_uring_setup(0x25, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x200002dc) [597786ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84117 #0 [597808ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x2) #0 [597808ms] <- openat$sndseq=0x3 errno=14 cover=2230 #0 [597810ms] -> ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) #0 [597810ms] <- ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT=0xffffffffffffffff errno=9 cover=45 #0 [597810ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [597811ms] <- fcntl$dupfd=0x4 errno=14 cover=111 #0 [597811ms] -> ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, 0x20001300) #0 [597811ms] <- ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO=0xffffffffffffffff errno=9 cover=45 #0 [597817ms] -> syz_io_uring_setup(0x498b, 0x20000400, 0x200a0000, 0x20ffa000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [597821ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=12160 #0 [597823ms] -> ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x20001940) #0 [597823ms] <- ioctl$BTRFS_IOC_TREE_SEARCH_V2=0xffffffffffffffff errno=9 cover=45 #0 [597823ms] -> syz_io_uring_setup(0x25, 0x20000940, 0x20ffe000, 0x200b0000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [597825ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=5672 #0 [597826ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0x4, 0xc08c5332, 0x20000200) #0 [597826ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0x0 errno=14 cover=990 #0 [597827ms] -> write$sndseq(0x3, 0x200002c0, 0x200002dc) #0 [597831ms] <- write$sndseq=0x16a4 errno=14 cover=77360 2021/11/11 16:02:20 result hanged=false: 2021/11/11 16:02:20 added new input for call #7 ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE to corpus: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000001300)) syz_io_uring_setup(0x498b, &(0x7f0000000400), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001940)=ANY=[@ANYBLOB="0100000004000000000000000600000000000000060000000000000006000000000000007f000002"]) syz_io_uring_setup(0x25, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x200002dc) 16:02:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x0) io_setup(0x81, &(0x7f0000000480)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x1, &(0x7f0000002b40)=[&(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) [597878ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84119 #0 [597897ms] -> syz_open_dev$loop(0x20000380, 0x0, 0x0) #0 [597897ms] <- syz_open_dev$loop=0x3 errno=14 cover=1243 #0 [597898ms] -> io_setup(0x81, 0x20000480) #0 [597898ms] <- io_setup=0x0 errno=14 cover=3737 #0 [597899ms] -> eventfd(0x0) #0 [597899ms] <- eventfd=0x4 errno=14 cover=554 #0 [597899ms] -> io_submit(0x7f7b9cee8000, 0x1, 0x20002b40) #0 [597899ms] <- io_submit=0x1 errno=14 cover=919 enabling collider #0 [597899ms] -> syz_open_dev$loop(0x20000380, 0x0, 0x0) #0 [597900ms] <- syz_open_dev$loop=0x3 errno=14 cover=1180 #0 [597900ms] -> io_setup(0x81, 0x20000480) #0 [597900ms] <- io_setup=0xffffffffffffffff errno=22 cover=40 pthread_create failed (errno 11) 2021/11/11 16:02:20 result hanged=false: 2021/11/11 16:02:20 #0: triaging type=7 2021/11/11 16:02:20 triaging input for call #3 io_submit (new signal=2) 16:02:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x0) io_setup(0x81, &(0x7f0000000480)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x1, &(0x7f0000002b40)=[&(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) [597989ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84221 #0 [598007ms] -> syz_open_dev$loop(0x20000380, 0x0, 0x0) #0 [598008ms] <- syz_open_dev$loop=0x3 errno=14 cover=1145 #0 [598008ms] -> io_setup(0x81, 0x20000480) #0 [598008ms] <- io_setup=0x0 errno=14 cover=3043 #0 [598008ms] -> eventfd(0x0) #0 [598009ms] <- eventfd=0x4 errno=14 cover=554 #0 [598009ms] -> io_submit(0x7f7b9cee8000, 0x1, 0x20002b40) #0 [598009ms] <- io_submit=0x1 errno=14 cover=895 2021/11/11 16:02:20 result hanged=false: 16:02:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x0) io_setup(0x81, &(0x7f0000000480)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x1, &(0x7f0000002b40)=[&(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) [598060ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84223 #0 [598079ms] -> syz_open_dev$loop(0x20000380, 0x0, 0x0) #0 [598079ms] <- syz_open_dev$loop=0x3 errno=14 cover=1134 #0 [598079ms] -> io_setup(0x81, 0x20000480) #0 [598080ms] <- io_setup=0x0 errno=14 cover=3040 #0 [598080ms] -> eventfd(0x0) #0 [598080ms] <- eventfd=0x4 errno=14 cover=554 #0 [598080ms] -> io_submit(0x7f7b9cee8000, 0x1, 0x20002b40) #0 [598081ms] <- io_submit=0x1 errno=14 cover=909 16:02:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x0) io_setup(0x81, &(0x7f0000000480)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x1, &(0x7f0000002b40)=[&(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 2021/11/11 16:02:20 result hanged=false: [598120ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84225 #0 [598133ms] -> syz_open_dev$loop(0x20000380, 0x0, 0x0) #0 [598134ms] <- syz_open_dev$loop=0x3 errno=14 cover=1232 #0 [598134ms] -> io_setup(0x81, 0x20000480) #0 [598135ms] <- io_setup=0x0 errno=14 cover=3707 #0 [598136ms] -> eventfd(0x0) #0 [598136ms] <- eventfd=0x4 errno=14 cover=565 #0 [598138ms] -> io_submit(0x7f7b9cee8000, 0x1, 0x20002b40) #0 [598138ms] <- io_submit=0x1 errno=14 cover=919 2021/11/11 16:02:20 result hanged=false: 2021/11/11 16:02:20 added new input for call #3 io_submit to corpus: r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x0) io_setup(0x81, &(0x7f0000000480)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x1, &(0x7f0000002b40)=[&(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 16:02:20 executing program 0: execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000001640)=[{0x0}], 0x0, 0x0) timer_create(0x0, 0x0, 0x0) [598189ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84227 #0 [598203ms] -> execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) #0 [598203ms] <- execveat=0xffffffffffffffff errno=14 cover=602 #0 [598204ms] -> syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, 0x20001640, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [598207ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=9265 #0 [598207ms] -> timer_create(0x0, 0x0, 0x0) #0 [598208ms] <- timer_create=0xffffffffffffffff errno=14 cover=717 enabling collider #0 [598211ms] -> execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) #0 [598212ms] <- execveat=0xffffffffffffffff errno=14 cover=592 #0 [598212ms] -> syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, 0x20001640, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [598220ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=14299 pthread_create failed (errno 11) 2021/11/11 16:02:20 result hanged=false: 16:02:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [598315ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84329 #0 [598328ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [598332ms] <- perf_event_open=0x3 errno=14 cover=9088 #0 [598333ms] -> syz_io_uring_setup(0x1, 0x20000080, 0x20ffd000, 0x20ffc000, 0x20000100, 0x20000140) #0 [598339ms] <- syz_io_uring_setup=0x4 errno=14 cover=22680 #0 [598340ms] -> io_uring_register$IORING_REGISTER_PERSONALITY(0x4, 0x9, 0x0, 0x0) #0 [598341ms] <- io_uring_register$IORING_REGISTER_PERSONALITY=0x1 errno=14 cover=968 enabling collider #0 [598355ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [598357ms] <- perf_event_open=0x3 errno=14 cover=8058 #0 [598358ms] -> syz_io_uring_setup(0x1, 0x20000080, 0x20ffd000, 0x20ffc000, 0x20000100, 0x20000140) #0 [598361ms] <- syz_io_uring_setup=0x4 errno=14 cover=15313 pthread_create failed (errno 11) 2021/11/11 16:02:20 result hanged=false: 16:02:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 2021/11/11 16:02:20 #0: triaging type=7 2021/11/11 16:02:20 triaging input for call #2 io_uring_register$IORING_REGISTER_PERSONALITY (new signal=4) [598441ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84431 #0 [598455ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [598456ms] <- perf_event_open=0x3 errno=14 cover=9107 #0 [598460ms] -> syz_io_uring_setup(0x1, 0x20000080, 0x20ffd000, 0x20ffc000, 0x20000100, 0x20000140) #0 [598466ms] <- syz_io_uring_setup=0x4 errno=14 cover=23009 #0 [598469ms] -> io_uring_register$IORING_REGISTER_PERSONALITY(0x4, 0x9, 0x0, 0x0) #0 [598471ms] <- io_uring_register$IORING_REGISTER_PERSONALITY=0x1 errno=14 cover=928 2021/11/11 16:02:21 result hanged=false: 16:02:21 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [598520ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84433 #0 [598534ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [598535ms] <- perf_event_open=0x3 errno=14 cover=8239 #0 [598536ms] -> syz_io_uring_setup(0x1, 0x20000080, 0x20ffd000, 0x20ffc000, 0x20000100, 0x20000140) #0 [598540ms] <- syz_io_uring_setup=0x4 errno=14 cover=22453 #0 [598543ms] -> io_uring_register$IORING_REGISTER_PERSONALITY(0x4, 0x9, 0x0, 0x0) #0 [598543ms] <- io_uring_register$IORING_REGISTER_PERSONALITY=0x1 errno=14 cover=928 16:02:21 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 2021/11/11 16:02:21 result hanged=false: [598588ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84435 #0 [598601ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [598602ms] <- perf_event_open=0x3 errno=14 cover=8043 #0 [598603ms] -> syz_io_uring_setup(0x1, 0x20000080, 0x20ffd000, 0x20ffc000, 0x20000100, 0x20000140) #0 [598606ms] <- syz_io_uring_setup=0x4 errno=14 cover=22495 #0 [598609ms] -> io_uring_register$IORING_REGISTER_PERSONALITY(0x4, 0x9, 0x0, 0x0) #0 [598609ms] <- io_uring_register$IORING_REGISTER_PERSONALITY=0x1 errno=14 cover=950 2021/11/11 16:02:21 result hanged=false: 2021/11/11 16:02:21 added new input for call #2 io_uring_register$IORING_REGISTER_PERSONALITY to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 16:02:21 executing program 0: capset(&(0x7f0000000400)={0x20080522}, 0x0) [598655ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84437 #0 [598670ms] -> capset(0x20000400, 0x0) #0 [598670ms] <- capset=0xffffffffffffffff errno=14 cover=423 enabling collider #0 [598671ms] -> capset(0x20000400, 0x0) #0 [598671ms] <- capset=0xffffffffffffffff errno=14 cover=424 2021/11/11 16:02:21 result hanged=false: 16:02:21 executing program 0: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd6, 0xbb, 0x5, 0x0, 0x499, 0x150c, 0xd340, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x90, 0xc3, 0xa8}}]}}]}}, 0x0) 2021/11/11 16:02:21 poll: candidates=8 inputs=0 signal=0 [598708ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84439 #0 [598723ms] -> syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write: endpoint not found #0 [598726ms] <- syz_usb_ep_write$ath9k_ep2=0xffffffffffffffff errno=14 cover=2518 #0 [598727ms] -> syz_usb_connect(0x6, 0x24, 0x20000080, 0x0) syz_usb_connect: dev: 0x20000080 syz_usb_connect: device data: 12 01 00 00 d6 bb 05 00 99 04 0c 15 40 d3 01 02 03 01 09 02 12 00 01 00 00 00 00 09 04 00 00 00 90 c3 a8 00 syz_usb_connect: usb_raw_open success parse_usb_descriptor: found interface #0 (0, 0) at 0x2000009b syz_usb_connect: add_usb_index success syz_usb_connect: usb_raw_init failed with -1 #0 [598729ms] <- syz_usb_connect=0xffffffffffffffff errno=22 cover=14272 enabling collider #0 [599230ms] -> syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write: endpoint not found #0 [599230ms] <- syz_usb_ep_write$ath9k_ep2=0xffffffffffffffff errno=14 cover=266 2021/11/11 16:02:21 result hanged=false: 16:02:21 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) recvfrom(r0, &(0x7f0000000200)=""/135, 0x87, 0x0, 0x0, 0x0) shutdown(r0, 0x1) [599273ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84441 #0 [599292ms] -> socket$inet(0x2, 0x1, 0x0) #0 [599292ms] <- socket$inet=0x3 errno=14 cover=1800 #0 [599294ms] -> bind$inet(0x3, 0x20000000, 0x10) #0 [599294ms] <- bind$inet=0x0 errno=14 cover=400 #0 [599295ms] -> connect$inet(0x3, 0x20000140, 0x10) #0 [599296ms] <- connect$inet=0xffffffffffffffff errno=111 cover=2833 #0 [599297ms] -> recvfrom(0x3, 0x20000200, 0x87, 0x0, 0x0, 0x0) #0 [599297ms] <- recvfrom=0xffffffffffffffff errno=107 cover=154 #0 [599298ms] -> shutdown(0x3, 0x1) #0 [599298ms] <- shutdown=0xffffffffffffffff errno=107 cover=122 enabling collider #0 [599299ms] -> socket$inet(0x2, 0x1, 0x0) #0 [599299ms] <- socket$inet=0x3 errno=14 cover=1742 #0 [599299ms] -> bind$inet(0x3, 0x20000000, 0x10) #0 [599299ms] <- bind$inet=0x0 errno=14 cover=400 pthread_create failed (errno 11) 16:02:21 executing program 0: syz_io_uring_setup(0x1d71, &(0x7f0000001340), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000013c0), &(0x7f0000001400)) 2021/11/11 16:02:21 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [599366ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84543 #0 [599382ms] -> syz_io_uring_setup(0x1d71, 0x20001340, 0x20ffc000, 0x20ffc000, 0x200013c0, 0x20001400) #0 [599384ms] <- syz_io_uring_setup=0x3 errno=14 cover=10860 enabling collider #0 [599385ms] -> syz_io_uring_setup(0x1d71, 0x20001340, 0x20ffc000, 0x20ffc000, 0x200013c0, 0x20001400) #0 [599386ms] <- syz_io_uring_setup=0x3 errno=14 cover=11856 16:02:21 executing program 0: times(&(0x7f0000000000)) capset(0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000380)={{}, {0x77359400}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) times(&(0x7f0000001a00)) syz_read_part_table(0x7, 0x1, &(0x7f0000001b00)=[{&(0x7f0000001a80)="36bf25273824fb781bdfccb7", 0xc, 0x8}]) 2021/11/11 16:02:21 result hanged=false: [599419ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84545 #0 [599437ms] -> times(0x20000000) #0 [599439ms] <- times=0x199bf58a errno=14 cover=780 #0 [599441ms] -> capset(0x0, 0x0) #0 [599443ms] <- capset=0xffffffffffffffff errno=14 cover=221 #0 [599443ms] -> io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) #0 [599443ms] <- io_uring_register$IORING_REGISTER_BUFFERS=0xffffffffffffffff errno=9 cover=46 #0 [599444ms] -> openat$vcsa(0xffffffffffffff9c, 0x20000300, 0x0, 0x0) #0 [599444ms] <- openat$vcsa=0x3 errno=14 cover=1138 #0 [599445ms] -> timerfd_settime(0x3, 0x0, 0x20000380, 0x0) #0 [599445ms] <- timerfd_settime=0xffffffffffffffff errno=22 cover=106 #0 [599445ms] -> syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io: usb_raw_ep0_read failed with -1 #0 [599445ms] <- syz_usb_control_io$uac1=0xffffffffffffffff errno=9 cover=823 #0 [599445ms] -> times(0x20001a00) #0 [599446ms] <- times=0x199bf58b errno=14 cover=374 #0 [599446ms] -> syz_read_part_table(0x7, 0x1, 0x20001b00) #0 [599454ms] <- syz_read_part_table=0x0 errno=0 cover=7638 enabling collider #0 [599956ms] -> times(0x20000000) #0 [599956ms] <- times=0x199bf5be errno=14 cover=100 #0 [599956ms] -> capset(0x0, 0x0) #0 [599956ms] <- capset=0xffffffffffffffff errno=14 cover=221 pthread_create failed (errno 11) 2021/11/11 16:02:22 result hanged=false: 16:02:22 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x80, 0x0, 0x0, 0xfffffffbfffffffc, 0x1040, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0}, 0x0, 0x4000000000000000, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000300)=@rc={0x1f, @none}, &(0x7f0000000000)=0x80) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) migrate_pages(0x0, 0x4, &(0x7f0000000200)=0x7a5299a7, &(0x7f0000000240)=0x1) r2 = fork() ptrace(0x10, r2) ptrace(0xf, r2) ptrace$cont(0x9, r2, 0x6, 0x5) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000400)={'\x00', 0x5, 0x7, 0x1, 0x8, 0xffffffff, r2}) r3 = fork() ptrace(0x4207, r3) r4 = gettid() capget(&(0x7f0000000080)={0x20071026, r4}, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) fcntl$getown(0xffffffffffffffff, 0x9) getpgrp(r3) r5 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x800, 0x400000) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000380)={'\x00', 0x200, 0x2, 0x6, 0x0, 0x4, r4}) kcmp(r4, r3, 0x6, 0xffffffffffffffff, r5) [600023ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84647 #0 [600043ms] -> perf_event_open(0x20000040, 0x0, 0x1, 0xffffffffffffffff, 0x0) #0 [600043ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=233 #0 [600044ms] -> accept(0xffffffffffffffff, 0x20000300, 0x20000000) #0 [600044ms] <- accept=0xffffffffffffffff errno=9 cover=46 #0 [600044ms] -> connect$unix(0xffffffffffffffff, 0x20000140, 0x6e) #0 [600044ms] <- connect$unix=0xffffffffffffffff errno=9 cover=46 #0 [600044ms] -> migrate_pages(0x0, 0x4, 0x20000200, 0x20000240) #0 [600048ms] <- migrate_pages=0x0 errno=14 cover=217020 #0 [600049ms] -> fork() #0 [600063ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [600065ms] -> ptrace(0x10, 0x0) #0 [600067ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [600067ms] -> ptrace(0xf, 0x0) #0 [600067ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [600067ms] -> ptrace$cont(0x9, 0x0, 0x6, 0x5) #0 [600067ms] <- ptrace$cont=0xffffffffffffffff errno=3 cover=64 #0 [600067ms] -> ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x20000400) #0 [600067ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=9 cover=45 #0 [600067ms] -> fork() #0 [600088ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [600090ms] -> ptrace(0x4207, 0x0) #0 [600090ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [600090ms] -> gettid() #0 [600090ms] <- gettid=0x14aa8 errno=14 cover=48 #0 [600091ms] -> capget(0x20000080, 0x20000100) #0 [600091ms] <- capget=0x0 errno=14 cover=160 #0 [600092ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [600092ms] <- socket$nl_generic=0x3 errno=14 cover=1437 #0 [600093ms] -> fcntl$getown(0xffffffffffffffff, 0x9) #0 [600093ms] <- fcntl$getown=0xffffffffffffffff errno=9 cover=45 #0 [600094ms] -> getpgrp(0x0) #0 [600094ms] <- getpgrp=0x14aa7 errno=14 cover=48 #0 [600095ms] -> syz_open_dev$vcsn(0x200001c0, 0x800, 0x400000) #0 [600095ms] <- syz_open_dev$vcsn=0xffffffffffffffff errno=22 cover=48 #0 [600096ms] -> ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x20000380) #0 [600096ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=9 cover=45 #0 [600096ms] -> kcmp(0x14aa8, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) #0 [600096ms] <- kcmp=0xffffffffffffffff errno=3 cover=94 enabling collider #0 [600096ms] -> perf_event_open(0x20000040, 0x0, 0x1, 0xffffffffffffffff, 0x0) #0 [600096ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=233 #0 [600097ms] -> accept(0xffffffffffffffff, 0x20000300, 0x20000000) #0 [600097ms] <- accept=0xffffffffffffffff errno=9 cover=46 pthread_create failed (errno 11) 2021/11/11 16:02:22 result hanged=false: 2021/11/11 16:02:22 #0: triaging type=7 2021/11/11 16:02:22 triaging input for call #4 fork (new signal=2) 16:02:22 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x80, 0x0, 0x0, 0xfffffffbfffffffc, 0x1040, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0}, 0x0, 0x4000000000000000, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000300)=@rc={0x1f, @none}, &(0x7f0000000000)=0x80) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) migrate_pages(0x0, 0x4, &(0x7f0000000200)=0x7a5299a7, &(0x7f0000000240)=0x1) r2 = fork() ptrace(0x10, r2) ptrace(0xf, r2) ptrace$cont(0x9, r2, 0x6, 0x5) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000400)={'\x00', 0x5, 0x7, 0x1, 0x8, 0xffffffff, r2}) r3 = fork() ptrace(0x4207, r3) r4 = gettid() capget(&(0x7f0000000080)={0x20071026, r4}, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) fcntl$getown(0xffffffffffffffff, 0x9) getpgrp(r3) r5 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x800, 0x400000) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000380)={'\x00', 0x200, 0x2, 0x6, 0x0, 0x4, r4}) kcmp(r4, r3, 0x6, 0xffffffffffffffff, r5) [600159ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84751 #0 [600175ms] -> perf_event_open(0x20000040, 0x0, 0x1, 0xffffffffffffffff, 0x0) #0 [600175ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=247 #0 [600175ms] -> accept(0xffffffffffffffff, 0x20000300, 0x20000000) #0 [600175ms] <- accept=0xffffffffffffffff errno=9 cover=46 #0 [600176ms] -> connect$unix(0xffffffffffffffff, 0x20000140, 0x6e) #0 [600176ms] <- connect$unix=0xffffffffffffffff errno=9 cover=46 #0 [600176ms] -> migrate_pages(0x0, 0x4, 0x20000200, 0x20000240) #0 [600181ms] <- migrate_pages=0x0 errno=14 cover=216955 #0 [600188ms] -> fork() #0 [600201ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [600212ms] -> ptrace(0x10, 0x0) #0 [600212ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [600212ms] -> ptrace(0xf, 0x0) #0 [600212ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [600212ms] -> ptrace$cont(0x9, 0x0, 0x6, 0x5) #0 [600212ms] <- ptrace$cont=0xffffffffffffffff errno=3 cover=64 #0 [600213ms] -> ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x20000400) #0 [600213ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=9 cover=45 #0 [600213ms] -> fork() #0 [600234ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [600249ms] -> ptrace(0x4207, 0x0) #0 [600249ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [600249ms] -> gettid() #0 [600249ms] <- gettid=0x14b10 errno=14 cover=48 #0 [600250ms] -> capget(0x20000080, 0x20000100) #0 [600250ms] <- capget=0x0 errno=14 cover=160 #0 [600250ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [600250ms] <- socket$nl_generic=0x3 errno=14 cover=1445 #0 [600250ms] -> fcntl$getown(0xffffffffffffffff, 0x9) #0 [600250ms] <- fcntl$getown=0xffffffffffffffff errno=9 cover=45 #0 [600250ms] -> getpgrp(0x0) #0 [600250ms] <- getpgrp=0x14b0f errno=14 cover=48 #0 [600250ms] -> syz_open_dev$vcsn(0x200001c0, 0x800, 0x400000) #0 [600250ms] <- syz_open_dev$vcsn=0xffffffffffffffff errno=22 cover=48 #0 [600250ms] -> ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x20000380) #0 [600250ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=9 cover=45 #0 [600251ms] -> kcmp(0x14b10, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) #0 [600251ms] <- kcmp=0xffffffffffffffff errno=3 cover=94 2021/11/11 16:02:22 result hanged=false: 16:02:22 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x80, 0x0, 0x0, 0xfffffffbfffffffc, 0x1040, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0}, 0x0, 0x4000000000000000, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000300)=@rc={0x1f, @none}, &(0x7f0000000000)=0x80) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) migrate_pages(0x0, 0x4, &(0x7f0000000200)=0x7a5299a7, &(0x7f0000000240)=0x1) r2 = fork() ptrace(0x10, r2) ptrace(0xf, r2) ptrace$cont(0x9, r2, 0x6, 0x5) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000400)={'\x00', 0x5, 0x7, 0x1, 0x8, 0xffffffff, r2}) r3 = fork() ptrace(0x4207, r3) r4 = gettid() capget(&(0x7f0000000080)={0x20071026, r4}, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) fcntl$getown(0xffffffffffffffff, 0x9) getpgrp(r3) r5 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x800, 0x400000) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000380)={'\x00', 0x200, 0x2, 0x6, 0x0, 0x4, r4}) kcmp(r4, r3, 0x6, 0xffffffffffffffff, r5) [600293ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84755 #0 [600316ms] -> perf_event_open(0x20000040, 0x0, 0x1, 0xffffffffffffffff, 0x0) #0 [600316ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=233 #0 [600316ms] -> accept(0xffffffffffffffff, 0x20000300, 0x20000000) #0 [600316ms] <- accept=0xffffffffffffffff errno=9 cover=46 #0 [600316ms] -> connect$unix(0xffffffffffffffff, 0x20000140, 0x6e) #0 [600316ms] <- connect$unix=0xffffffffffffffff errno=9 cover=46 #0 [600316ms] -> migrate_pages(0x0, 0x4, 0x20000200, 0x20000240) #0 [600320ms] <- migrate_pages=0x0 errno=14 cover=216882 #0 [600330ms] -> fork() #0 [600347ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [600358ms] -> ptrace(0x10, 0x0) #0 [600358ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [600358ms] -> ptrace(0xf, 0x0) #0 [600358ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [600358ms] -> ptrace$cont(0x9, 0x0, 0x6, 0x5) #0 [600358ms] <- ptrace$cont=0xffffffffffffffff errno=3 cover=64 #0 [600358ms] -> ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x20000400) #0 [600358ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=9 cover=45 #0 [600358ms] -> fork() #0 [600371ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [600387ms] -> ptrace(0x4207, 0x0) #0 [600387ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [600387ms] -> gettid() #0 [600387ms] <- gettid=0x14b14 errno=14 cover=48 #0 [600387ms] -> capget(0x20000080, 0x20000100) #0 [600387ms] <- capget=0x0 errno=14 cover=160 #0 [600388ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [600388ms] <- socket$nl_generic=0x3 errno=14 cover=1426 #0 [600388ms] -> fcntl$getown(0xffffffffffffffff, 0x9) #0 [600388ms] <- fcntl$getown=0xffffffffffffffff errno=9 cover=45 #0 [600389ms] -> getpgrp(0x0) #0 [600389ms] <- getpgrp=0x14b13 errno=14 cover=48 #0 [600389ms] -> syz_open_dev$vcsn(0x200001c0, 0x800, 0x400000) #0 [600389ms] <- syz_open_dev$vcsn=0xffffffffffffffff errno=22 cover=69 #0 [600389ms] -> ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x20000380) #0 [600389ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=9 cover=45 #0 [600389ms] -> kcmp(0x14b14, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) #0 [600389ms] <- kcmp=0xffffffffffffffff errno=3 cover=94 2021/11/11 16:02:22 result hanged=false: 16:02:22 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x80, 0x0, 0x0, 0xfffffffbfffffffc, 0x1040, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0}, 0x0, 0x4000000000000000, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000300)=@rc={0x1f, @none}, &(0x7f0000000000)=0x80) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) migrate_pages(0x0, 0x4, &(0x7f0000000200)=0x7a5299a7, &(0x7f0000000240)=0x1) r2 = fork() ptrace(0x10, r2) ptrace(0xf, r2) ptrace$cont(0x9, r2, 0x6, 0x5) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000400)={'\x00', 0x5, 0x7, 0x1, 0x8, 0xffffffff, r2}) r3 = fork() ptrace(0x4207, r3) r4 = gettid() capget(&(0x7f0000000080)={0x20071026, r4}, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) fcntl$getown(0xffffffffffffffff, 0x9) getpgrp(r3) r5 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x800, 0x400000) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000380)={'\x00', 0x200, 0x2, 0x6, 0x0, 0x4, r4}) kcmp(r4, r3, 0x6, 0xffffffffffffffff, r5) [600425ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84759 #0 [600442ms] -> perf_event_open(0x20000040, 0x0, 0x1, 0xffffffffffffffff, 0x0) #0 [600443ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=233 #0 [600444ms] -> accept(0xffffffffffffffff, 0x20000300, 0x20000000) #0 [600444ms] <- accept=0xffffffffffffffff errno=9 cover=46 #0 [600445ms] -> connect$unix(0xffffffffffffffff, 0x20000140, 0x6e) #0 [600445ms] <- connect$unix=0xffffffffffffffff errno=9 cover=46 #0 [600445ms] -> migrate_pages(0x0, 0x4, 0x20000200, 0x20000240) #0 [600455ms] <- migrate_pages=0x0 errno=14 cover=216966 #0 [600462ms] -> fork() #0 [600475ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [600490ms] -> ptrace(0x10, 0x0) #0 [600490ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [600491ms] -> ptrace(0xf, 0x0) #0 [600491ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [600492ms] -> ptrace$cont(0x9, 0x0, 0x6, 0x5) #0 [600492ms] <- ptrace$cont=0xffffffffffffffff errno=3 cover=64 #0 [600493ms] -> ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x20000400) #0 [600493ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=9 cover=45 #0 [600493ms] -> fork() #0 [600509ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [600519ms] -> ptrace(0x4207, 0x0) #0 [600521ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [600521ms] -> gettid() #0 [600521ms] <- gettid=0x14b18 errno=14 cover=48 #0 [600522ms] -> capget(0x20000080, 0x20000100) #0 [600522ms] <- capget=0x0 errno=14 cover=160 #0 [600522ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [600522ms] <- socket$nl_generic=0x3 errno=14 cover=1478 #0 [600523ms] -> fcntl$getown(0xffffffffffffffff, 0x9) #0 [600523ms] <- fcntl$getown=0xffffffffffffffff errno=9 cover=45 #0 [600523ms] -> getpgrp(0x0) #0 [600523ms] <- getpgrp=0x14b17 errno=14 cover=48 #0 [600523ms] -> syz_open_dev$vcsn(0x200001c0, 0x800, 0x400000) #0 [600523ms] <- syz_open_dev$vcsn=0xffffffffffffffff errno=22 cover=48 #0 [600523ms] -> ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x20000380) #0 [600523ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=9 cover=45 #0 [600523ms] -> kcmp(0x14b18, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) #0 [600523ms] <- kcmp=0xffffffffffffffff errno=3 cover=94 2021/11/11 16:02:23 result hanged=false: 2021/11/11 16:02:23 added new input for call #4 fork to corpus: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x80, 0x0, 0x0, 0xfffffffbfffffffc, 0x1040, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0}, 0x0, 0x4000000000000000, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000300)=@rc={0x1f, @none}, &(0x7f0000000000)=0x80) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) migrate_pages(0x0, 0x4, &(0x7f0000000200)=0x7a5299a7, &(0x7f0000000240)=0x1) r2 = fork() ptrace(0x10, r2) ptrace(0xf, r2) ptrace$cont(0x9, r2, 0x6, 0x5) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000400)={'\x00', 0x5, 0x7, 0x1, 0x8, 0xffffffff, r2}) r3 = fork() ptrace(0x4207, r3) r4 = gettid() capget(&(0x7f0000000080)={0x20071026, r4}, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) fcntl$getown(0xffffffffffffffff, 0x9) getpgrp(r3) r5 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x800, 0x400000) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000380)={'\x00', 0x200, 0x2, 0x6, 0x0, 0x4, r4}) kcmp(r4, r3, 0x6, 0xffffffffffffffff, r5) 16:02:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002600)={0x24, 0x11, 0x1, 0x0, 0x0, {0x7}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xa, 0x0, 0x0, 0x0, @str=']#[\\-\x00'}]}]}, 0x24}}, 0x0) [600569ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84763 #0 [600586ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [600586ms] <- socket$netlink=0x3 errno=14 cover=1424 #0 [600587ms] -> sendmsg$nl_generic(0x3, 0x20000100, 0x0) #0 [600587ms] <- sendmsg$nl_generic=0x24 errno=14 cover=1601 enabling collider #0 [600587ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [600588ms] <- socket$netlink=0x3 errno=14 cover=1431 #0 [600588ms] -> sendmsg$nl_generic(0x3, 0x20000100, 0x0) #0 [600588ms] <- sendmsg$nl_generic=0xffffffffffffffff errno=9 cover=53 2021/11/11 16:02:23 result hanged=false: 16:02:23 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x80202, 0x0) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) [600639ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84765 #0 [600660ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x20000100, 0x80202, 0x0) #0 [600660ms] <- openat$vga_arbiter=0x3 errno=14 cover=1251 #0 [600661ms] -> write$vga_arbiter(0x3, 0x20000000, 0xf) #0 [600661ms] <- write$vga_arbiter=0xf errno=14 cover=184 enabling collider #0 [600661ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x20000100, 0x80202, 0x0) #0 [600663ms] <- openat$vga_arbiter=0x3 errno=14 cover=8829 #0 [600663ms] -> write$vga_arbiter(0x3, 0x20000000, 16:02:23 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x80202, 0x0) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) 2021/11/11 16:02:23 result hanged=false: 2021/11/11 16:02:23 #0: triaging type=7 2021/11/11 16:02:23 triaging input for call #1 write$vga_arbiter (new signal=18) [600703ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84767 #0 [600718ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x20000100, 0x80202, 0x0) #0 [600719ms] <- openat$vga_arbiter=0x3 errno=14 cover=1252 #0 [600719ms] -> write$vga_arbiter(0x3, 0x20000000, 0xf) #0 [600719ms] <- write$vga_arbiter=0xf errno=14 cover=184 16:02:23 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x80202, 0x0) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) 2021/11/11 16:02:23 result hanged=false: [600761ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84769 #0 [600777ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x20000100, 0x80202, 0x0) #0 [600777ms] <- openat$vga_arbiter=0x3 errno=14 cover=1262 #0 [600778ms] -> write$vga_arbiter(0x3, 0x20000000, 0xf) #0 [600778ms] <- write$vga_arbiter=0xf errno=14 cover=184 16:02:23 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x80202, 0x0) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) 2021/11/11 16:02:23 result hanged=false: [600813ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84771 #0 [600831ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x20000100, 0x80202, 0x0) #0 [600831ms] <- openat$vga_arbiter=0x3 errno=14 cover=1269 #0 [600831ms] -> write$vga_arbiter(0x3, 0x20000000, 0xf) #0 [600831ms] <- write$vga_arbiter=0xf errno=14 cover=184 2021/11/11 16:02:23 result hanged=false: 2021/11/11 16:02:23 added new input for call #1 write$vga_arbiter to corpus: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x80202, 0x0) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) 16:02:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="9c3d8986dd518f004240afa025fcc8d877269e7f4134d89c4f79a3cfab3af6d8b2b73e3bb5e2fb4ada9dab0dd5bf6d514a44ac160adf020f2479e62bb4d832822ab97bb1fd9b00b9cfdf602df6c7e86eff5edd9ea07d8ce2c946fdac08dabb1811e7fb80252530e4ca602775ce94b663f75efe60aefbf00e397101033ef7e6bde339e2460afadca8ad9b178c341186db6902aa2b88d61a282ef5587ccda4ea81d13d8593492536158eac2564babafed58b5dd28e850cd2b0b549fc70b0bbdbf493117dac78d057fcf5f1df46dd6cc3cb80856fb72f45032e2fae124d1bf14fd9445b786f0ed044a4c66d3787a686", 0xee}, {&(0x7f0000001700)="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", 0xde0}, {0x0}], 0x3}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) socket$inet6_udplite(0xa, 0x2, 0x88) [600868ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84773 #0 [600883ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [600883ms] <- socket$inet6_tcp=0x3 errno=14 cover=1803 #0 [600885ms] -> setsockopt$inet6_tcp_int(0x3, 0x6, 0x2, 0x20000080, 0x4) #0 [600885ms] <- setsockopt$inet6_tcp_int=0x0 errno=14 cover=146 #0 [600886ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [600886ms] <- bind$inet6=0xffffffffffffffff errno=98 cover=463 #0 [600887ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [600888ms] <- connect$inet6=0xffffffffffffffff errno=111 cover=3227 #0 [600889ms] -> sendmsg$inet6(0x3, 0x200004c0, 0x0) 16:02:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)) lsetxattr(&(0x7f00000021c0)='./file0\x00', &(0x7f0000002200)=@random={'osx.', '\x00'}, &(0x7f0000002240)='\x00', 0x1, 0x0) 2021/11/11 16:02:23 result hanged=false: 2021/11/11 16:02:23 poll: candidates=8 inputs=0 signal=0 iptable filter/10: resetting iptable mangle/10: resetting [600922ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84775 #0 [600936ms] -> syz_mount_image$msdos(0x20000400, 0x20000440, 0x0, 0x0, 0x0, 0x0, 0x20000940) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='msdos' flags=0 opts='' syz_mount_image > mount error: 22 #0 [600940ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=22 cover=2360 #0 [600943ms] -> lsetxattr(0x200021c0, 0x20002200, 0x20002240, 0x1, 0x0) #0 [600943ms] <- lsetxattr=0xffffffffffffffff errno=95 cover=976 enabling collider #0 [600944ms] -> syz_mount_image$msdos(0x20000400, 0x20000440, 0x0, 0x0, 0x0, 0x0, 0x20000940) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='msdos' flags=0 opts='' syz_mount_image > mount error: 22 #0 [600945ms] <- syz_mount_image$msdos=0xffffffffffffffff errno=22 cover=2323 #0 [600945ms] -> lsetxattr(2021/11/11 16:02:23 result hanged=false: 16:02:23 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8914, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40801, 0x0) write$vga_arbiter(r1, &(0x7f0000000940)=ANY=[@ANYBLOB='target PCI:1'], 0x15) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) dup2(r3, r1) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0, 0x20}, {r1, 0x2000}, {r0, 0x3120}, {r0, 0x8484}, {0xffffffffffffffff, 0x4}, {r0, 0x8004}, {r2, 0x600}], 0x7, &(0x7f0000000100)={r4, r5+10000000}, &(0x7f0000000140)={[0x198]}, 0x8) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4037b}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40801, 0x0) write$vga_arbiter(r6, &(0x7f0000000940)=ANY=[@ANYBLOB='target PCI:1'], 0x15) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000000240)) fcntl$setpipe(r0, 0x407, 0x9) socket$inet(0x2, 0xa, 0x0) [600978ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84777 #0 [600991ms] -> socket$inet(0x2, 0xa, 0x0) #0 [600992ms] <- socket$inet=0x3 errno=14 cover=1731 #0 [600992ms] -> ioctl$sock_inet_SIOCGIFNETMASK(0x3, 0x8914, 0x200001c0) #0 [601003ms] <- ioctl$sock_inet_SIOCGIFNETMASK=0x0 errno=14 cover=26250 #0 [601004ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x20000000, 0x40801, 0x0) #0 [601004ms] <- openat$vga_arbiter=0x4 errno=14 cover=1283 #0 [601005ms] -> write$vga_arbiter(0x4, 0x20000940, 0x15) #0 [601005ms] <- write$vga_arbiter=0xffffffffffffffff errno=71 cover=211 #0 [601005ms] -> openat$zero(0xffffffffffffff9c, 0x20000040, 0x40000, 0x0) #0 [601005ms] <- openat$zero=0x5 errno=14 cover=1139 #0 [601005ms] -> openat$cgroup_procs(0x5, 0x20000180, 0x2, 0x0) #0 [601005ms] <- openat$cgroup_procs=0xffffffffffffffff errno=20 cover=737 #0 [601005ms] -> dup2(0xffffffffffffffff, 0x4) #0 [601005ms] <- dup2=0xffffffffffffffff errno=9 cover=47 #0 [601005ms] -> clock_gettime(0x0, 0x200000c0) #0 [601005ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [601005ms] -> ppoll(0x20000080, 0x7, 0x20000100, 0x20000140, 0x8) #0 [601005ms] <- ppoll=0x3 errno=14 cover=645 #0 [601006ms] -> io_uring_setup(0x0, 0x200001c0) #0 [601006ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=53 #0 [601006ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x20000000, 0x40801, 0x0) #0 [601006ms] <- openat$vga_arbiter=0x6 errno=14 cover=1206 #0 [601006ms] -> write$vga_arbiter(0x6, 0x20000940, 0x15) #0 [601006ms] <- write$vga_arbiter=0xffffffffffffffff errno=71 cover=211 #0 [601008ms] -> ioctl$BTRFS_IOC_INO_LOOKUP(0x6, 0xd0009412, 0x20000240) #0 [601008ms] <- ioctl$BTRFS_IOC_INO_LOOKUP=0xffffffffffffffff errno=25 cover=101 #0 [601008ms] -> fcntl$setpipe(0x3, 0x407, 0x9) #0 [601008ms] <- fcntl$setpipe=0xffffffffffffffff errno=9 cover=69 #0 [601008ms] -> socket$inet(0x2, 0xa, 0x0) #0 [601008ms] <- socket$inet=0x7 errno=14 cover=1707 enabling collider #0 [601019ms] -> socket$inet(0x2, 0xa, 0x0) #0 [601019ms] <- socket$inet=0x3 errno=14 cover=1834 #0 [601019ms] -> ioctl$sock_inet_SIOCGIFNETMASK(0x3, 0x8914, 0x200001c0) [ 1848.522410] device sit0 entered promiscuous mode #0 [601024ms] <- ioctl$sock_inet_SIOCGIFNETMASK=0x0 errno=14 cover=24824 pthread_create failed (errno 11) 2021/11/11 16:02:23 result hanged=false: 2021/11/11 16:02:23 #0: triaging type=7 2021/11/11 16:02:23 triaging input for call #1 ioctl$sock_inet_SIOCGIFNETMASK (new signal=3) 16:02:23 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8914, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40801, 0x0) write$vga_arbiter(r1, &(0x7f0000000940)=ANY=[@ANYBLOB='target PCI:1'], 0x15) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) dup2(r3, r1) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0, 0x20}, {r1, 0x2000}, {r0, 0x3120}, {r0, 0x8484}, {0xffffffffffffffff, 0x4}, {r0, 0x8004}, {r2, 0x600}], 0x7, &(0x7f0000000100)={r4, r5+10000000}, &(0x7f0000000140)={[0x198]}, 0x8) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4037b}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40801, 0x0) write$vga_arbiter(r6, &(0x7f0000000940)=ANY=[@ANYBLOB='target PCI:1'], 0x15) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000000240)) fcntl$setpipe(r0, 0x407, 0x9) socket$inet(0x2, 0xa, 0x0) [601091ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84879 #0 [601106ms] -> socket$inet(0x2, 0xa, 0x0) #0 [601107ms] <- socket$inet=0x3 errno=14 cover=1744 #0 [601108ms] -> ioctl$sock_inet_SIOCGIFNETMASK(0x3, 0x8914, 0x200001c0) [ 1848.612033] device sit0 left promiscuous mode #0 [601114ms] <- ioctl$sock_inet_SIOCGIFNETMASK=0x0 errno=14 cover=18013 #0 [601121ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x20000000, 0x40801, 0x0) #0 [601122ms] <- openat$vga_arbiter=0x4 errno=14 cover=1283 #0 [601122ms] -> write$vga_arbiter(0x4, 0x20000940, 0x15) #0 [601122ms] <- write$vga_arbiter=0xffffffffffffffff errno=71 cover=211 #0 [601123ms] -> openat$zero(0xffffffffffffff9c, 0x20000040, 0x40000, 0x0) #0 [601123ms] <- openat$zero=0x5 errno=14 cover=1085 #0 [601123ms] -> openat$cgroup_procs(0x5, 0x20000180, 0x2, 0x0) #0 [601123ms] <- openat$cgroup_procs=0xffffffffffffffff errno=20 cover=737 #0 [601124ms] -> dup2(0xffffffffffffffff, 0x4) #0 [601124ms] <- dup2=0xffffffffffffffff errno=9 cover=47 #0 [601124ms] -> clock_gettime(0x0, 0x200000c0) #0 [601124ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [601125ms] -> ppoll(0x20000080, 0x7, 0x20000100, 0x20000140, 0x8) #0 [601125ms] <- ppoll=0x3 errno=14 cover=648 #0 [601125ms] -> io_uring_setup(0x0, 0x200001c0) #0 [601125ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=53 #0 [601126ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x20000000, 0x40801, 0x0) #0 [601126ms] <- openat$vga_arbiter=0x6 errno=14 cover=1239 #0 [601126ms] -> write$vga_arbiter(0x6, 0x20000940, 0x15) #0 [601126ms] <- write$vga_arbiter=0xffffffffffffffff errno=71 cover=232 #0 [601127ms] -> ioctl$BTRFS_IOC_INO_LOOKUP(0x6, 0xd0009412, 0x20000240) #0 [601127ms] <- ioctl$BTRFS_IOC_INO_LOOKUP=0xffffffffffffffff errno=25 cover=101 #0 [601127ms] -> fcntl$setpipe(0x3, 0x407, 0x9) #0 [601127ms] <- fcntl$setpipe=0xffffffffffffffff errno=9 cover=69 #0 [601127ms] -> socket$inet(0x2, 0xa, 0x0) #0 [601128ms] <- socket$inet=0x7 errno=14 cover=1718 2021/11/11 16:02:23 result hanged=false: 16:02:23 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8914, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40801, 0x0) write$vga_arbiter(r1, &(0x7f0000000940)=ANY=[@ANYBLOB='target PCI:1'], 0x15) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) dup2(r3, r1) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0, 0x20}, {r1, 0x2000}, {r0, 0x3120}, {r0, 0x8484}, {0xffffffffffffffff, 0x4}, {r0, 0x8004}, {r2, 0x600}], 0x7, &(0x7f0000000100)={r4, r5+10000000}, &(0x7f0000000140)={[0x198]}, 0x8) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4037b}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40801, 0x0) write$vga_arbiter(r6, &(0x7f0000000940)=ANY=[@ANYBLOB='target PCI:1'], 0x15) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000000240)) fcntl$setpipe(r0, 0x407, 0x9) socket$inet(0x2, 0xa, 0x0) [601169ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84881 #0 [601183ms] -> socket$inet(0x2, 0xa, 0x0) #0 [601184ms] <- socket$inet=0x3 errno=14 cover=1731 #0 [601184ms] -> ioctl$sock_inet_SIOCGIFNETMASK(0x3, 0x8914, 0x200001c0) #0 [601185ms] <- ioctl$sock_inet_SIOCGIFNETMASK=0x0 errno=14 cover=264 #0 [601185ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x20000000, 0x40801, 0x0) #0 [601185ms] <- openat$vga_arbiter=0x4 errno=14 cover=1284 #0 [601185ms] -> write$vga_arbiter(0x4, 0x20000940, 0x15) #0 [601185ms] <- write$vga_arbiter=0xffffffffffffffff errno=71 cover=211 #0 [601186ms] -> openat$zero(0xffffffffffffff9c, 0x20000040, 0x40000, 0x0) #0 [601186ms] <- openat$zero=0x5 errno=14 cover=4099 #0 [601188ms] -> openat$cgroup_procs(0x5, 0x20000180, 0x2, 0x0) #0 [601188ms] <- openat$cgroup_procs=0xffffffffffffffff errno=20 cover=825 #0 [601189ms] -> dup2(0xffffffffffffffff, 0x4) #0 [601189ms] <- dup2=0xffffffffffffffff errno=9 cover=47 #0 [601189ms] -> clock_gettime(0x0, 0x200000c0) #0 [601189ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [601189ms] -> ppoll(0x20000080, 0x7, 0x20000100, 0x20000140, 0x8) #0 [601190ms] <- ppoll=0x3 errno=14 cover=648 #0 [601190ms] -> io_uring_setup(0x0, 0x200001c0) #0 [601190ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=53 #0 [601190ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x20000000, 0x40801, 0x0) #0 [601191ms] <- openat$vga_arbiter=0x6 errno=14 cover=1218 #0 [601191ms] -> write$vga_arbiter(0x6, 0x20000940, 0x15) #0 [601191ms] <- write$vga_arbiter=0xffffffffffffffff errno=71 cover=211 #0 [601192ms] -> ioctl$BTRFS_IOC_INO_LOOKUP(0x6, 0xd0009412, 0x20000240) #0 [601192ms] <- ioctl$BTRFS_IOC_INO_LOOKUP=0xffffffffffffffff errno=25 cover=101 #0 [601193ms] -> fcntl$setpipe(0x3, 0x407, 0x9) #0 [601194ms] <- fcntl$setpipe=0xffffffffffffffff errno=9 cover=69 #0 [601195ms] -> socket$inet(0x2, 0xa, 0x0) #0 [601195ms] <- socket$inet=0x7 errno=14 cover=1893 16:02:23 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8914, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40801, 0x0) write$vga_arbiter(r1, &(0x7f0000000940)=ANY=[@ANYBLOB='target PCI:1'], 0x15) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) dup2(r3, r1) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0, 0x20}, {r1, 0x2000}, {r0, 0x3120}, {r0, 0x8484}, {0xffffffffffffffff, 0x4}, {r0, 0x8004}, {r2, 0x600}], 0x7, &(0x7f0000000100)={r4, r5+10000000}, &(0x7f0000000140)={[0x198]}, 0x8) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4037b}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40801, 0x0) write$vga_arbiter(r6, &(0x7f0000000940)=ANY=[@ANYBLOB='target PCI:1'], 0x15) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000000240)) fcntl$setpipe(r0, 0x407, 0x9) socket$inet(0x2, 0xa, 0x0) 2021/11/11 16:02:23 result hanged=false: [601240ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84883 #0 [601253ms] -> socket$inet(0x2, 0xa, 0x0) #0 [601254ms] <- socket$inet=0x3 errno=14 cover=1747 #0 [601256ms] -> ioctl$sock_inet_SIOCGIFNETMASK(0x3, 0x8914, 0x200001c0) #0 [601256ms] <- ioctl$sock_inet_SIOCGIFNETMASK=0x0 errno=14 cover=266 #0 [601257ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x20000000, 0x40801, 0x0) #0 [601258ms] <- openat$vga_arbiter=0x4 errno=14 cover=1297 #0 [601259ms] -> write$vga_arbiter(0x4, 0x20000940, 0x15) #0 [601259ms] <- write$vga_arbiter=0xffffffffffffffff errno=71 cover=211 #0 [601260ms] -> openat$zero(0xffffffffffffff9c, 0x20000040, 0x40000, 0x0) #0 [601260ms] <- openat$zero=0x5 errno=14 cover=1175 #0 [601261ms] -> openat$cgroup_procs(0x5, 0x20000180, 0x2, 0x0) #0 [601261ms] <- openat$cgroup_procs=0xffffffffffffffff errno=20 cover=759 #0 [601262ms] -> dup2(0xffffffffffffffff, 0x4) #0 [601262ms] <- dup2=0xffffffffffffffff errno=9 cover=47 #0 [601262ms] -> clock_gettime(0x0, 0x200000c0) #0 [601262ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [601263ms] -> ppoll(0x20000080, 0x7, 0x20000100, 0x20000140, 0x8) #0 [601263ms] <- ppoll=0x3 errno=14 cover=648 #0 [601263ms] -> io_uring_setup(0x0, 0x200001c0) #0 [601263ms] <- io_uring_setup=0xffffffffffffffff errno=22 cover=53 #0 [601263ms] -> openat$vga_arbiter(0xffffffffffffff9c, 0x20000000, 0x40801, 0x0) #0 [601264ms] <- openat$vga_arbiter=0x6 errno=14 cover=1299 #0 [601264ms] -> write$vga_arbiter(0x6, 0x20000940, 0x15) #0 [601264ms] <- write$vga_arbiter=0xffffffffffffffff errno=71 cover=211 #0 [601264ms] -> ioctl$BTRFS_IOC_INO_LOOKUP(0x6, 0xd0009412, 0x20000240) #0 [601264ms] <- ioctl$BTRFS_IOC_INO_LOOKUP=0xffffffffffffffff errno=25 cover=101 #0 [601264ms] -> fcntl$setpipe(0x3, 0x407, 0x9) #0 [601264ms] <- fcntl$setpipe=0xffffffffffffffff errno=9 cover=69 #0 [601264ms] -> socket$inet(0x2, 0xa, 0x0) #0 [601264ms] <- socket$inet=0x7 errno=14 cover=1813 2021/11/11 16:02:23 result hanged=false: 2021/11/11 16:02:23 added new input for call #1 ioctl$sock_inet_SIOCGIFNETMASK to corpus: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8914, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40801, 0x0) write$vga_arbiter(r1, &(0x7f0000000940)=ANY=[@ANYBLOB='target PCI:1'], 0x15) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) dup2(r3, r1) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0, 0x20}, {r1, 0x2000}, {r0, 0x3120}, {r0, 0x8484}, {0xffffffffffffffff, 0x4}, {r0, 0x8004}, {r2, 0x600}], 0x7, &(0x7f0000000100)={r4, r5+10000000}, &(0x7f0000000140)={[0x198]}, 0x8) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4037b}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40801, 0x0) write$vga_arbiter(r6, &(0x7f0000000940)=ANY=[@ANYBLOB='target PCI:1'], 0x15) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000000240)) fcntl$setpipe(r0, 0x407, 0x9) socket$inet(0x2, 0xa, 0x0) 16:02:23 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) [601308ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84885 #0 [601325ms] -> syz_genetlink_get_family_id$nl80211(0x20001880, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [601326ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=13042 enabling collider #0 [601326ms] -> syz_genetlink_get_family_id$nl80211(0x20001880, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [601327ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11346 16:02:23 executing program 0: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x200}) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000023c0)='net/sockstat\x00') r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xffffffffffffff94, 0x0}}], 0x200002dc) 2021/11/11 16:02:23 result hanged=false: [601365ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84887 #0 [601381ms] -> ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x20000380) #0 [601381ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=9 cover=45 #0 [601382ms] -> kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) #0 [601382ms] <- kcmp=0xffffffffffffffff errno=3 cover=88 #0 [601382ms] -> syz_open_procfs(0x0, 0x200023c0) #0 [601382ms] <- syz_open_procfs=0x3 errno=14 cover=3817 #0 [601383ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x2) #0 [601383ms] <- openat$sndseq=0x4 errno=14 cover=2162 #0 [601384ms] -> fcntl$dupfd(0x4, 0x0, 0x4) #0 [601384ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [601385ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0x5, 0xc08c5332, 0x20000200) #0 [601385ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0x0 errno=14 cover=1020 #0 [601386ms] -> write$sndseq(0x4, 0x200002c0, 0x200002dc) #0 [601391ms] <- write$sndseq=0x2108 errno=14 cover=110832 enabling collider #0 [601393ms] -> ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x20000380) #0 [601393ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=9 cover=45 #0 [601395ms] -> kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) #0 [601395ms] <- kcmp=0xffffffffffffffff errno=3 cover=88 pthread_create failed (errno 11) 2021/11/11 16:02:24 result hanged=false: 16:02:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r2, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4}, 0x0) [601459ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 84989 #0 [601474ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [601475ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6321 #0 [601476ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [601477ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5609 #0 [601479ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000480, 0x4) syz_genetlink_get_family_id(NLBL_UNLBL, 4) #0 [601480ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4667 #0 [601481ms] -> sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0x5, 0x20000600, 0x0) #0 [601481ms] <- sendmsg$NLBL_UNLABEL_C_STATICADDDEF=0x14 errno=14 cover=1729 enabling collider #0 [601482ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [601483ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5474 #0 [601485ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [601485ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5543 pthread_create failed (errno 11) 2021/11/11 16:02:24 result hanged=false: 2021/11/11 16:02:24 #0: triaging type=7 2021/11/11 16:02:24 triaging input for call #1 syz_init_net_socket$nl_generic (new signal=1) 16:02:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r2, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4}, 0x0) [601555ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85091 #0 [601567ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [601568ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6307 #0 [601570ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [601570ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5584 #0 [601572ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000480, 0x4) syz_genetlink_get_family_id(NLBL_UNLBL, 4) #0 [601572ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4654 #0 [601573ms] -> sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0x5, 0x20000600, 0x0) #0 [601574ms] <- sendmsg$NLBL_UNLABEL_C_STATICADDDEF=0x14 errno=14 cover=1782 2021/11/11 16:02:24 result hanged=false: 16:02:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r2, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4}, 0x0) [601606ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85093 #0 [601620ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [601621ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6373 #0 [601622ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [601623ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5565 #0 [601624ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000480, 0x4) syz_genetlink_get_family_id(NLBL_UNLBL, 4) #0 [601624ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4669 #0 [601626ms] -> sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0x5, 0x20000600, 0x0) #0 [601626ms] <- sendmsg$NLBL_UNLABEL_C_STATICADDDEF=0x14 errno=14 cover=1748 16:02:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r2, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4}, 0x0) 2021/11/11 16:02:24 result hanged=false: [601663ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85095 #0 [601676ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [601677ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6365 #0 [601678ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [601678ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5569 #0 [601680ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000480, 0x4) syz_genetlink_get_family_id(NLBL_UNLBL, 4) #0 [601683ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4645 #0 [601686ms] -> sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0x5, 0x20000600, 0x0) #0 [601686ms] <- sendmsg$NLBL_UNLABEL_C_STATICADDDEF=0x14 errno=14 cover=1761 2021/11/11 16:02:24 result hanged=false: 2021/11/11 16:02:24 added new input for call #1 syz_init_net_socket$nl_generic to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r2, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x4}, 0x0) 16:02:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_hci(r0, 0x88, 0x68, 0x0, &(0x7f0000000040)) [601726ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85097 #0 [601746ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [601747ms] <- socket$inet6_udp=0x3 errno=14 cover=1673 #0 [601748ms] -> getsockopt$bt_hci(0x3, 0x88, 0x68, 0x0, 0x20000040) #0 [601749ms] <- getsockopt$bt_hci=0x0 errno=14 cover=111 enabling collider #0 [601750ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [601751ms] <- socket$inet6_udp=0x3 errno=14 cover=1672 16:02:24 executing program 0: syz_io_uring_setup(0x44af, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 2021/11/11 16:02:24 result hanged=false: [601793ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85099 #0 [601811ms] -> syz_io_uring_setup(0x44af, 0x20000000, 0x20ffb000, 0x20ff9000, 0x20000080, 0x200000c0) #0 [601814ms] <- syz_io_uring_setup=0x3 errno=14 cover=21661 enabling collider #0 [601815ms] -> syz_io_uring_setup(0x44af, 0x20000000, 0x20ffb000, 0x20ff9000, 0x20000080, 0x200000c0) #0 [601823ms] <- syz_io_uring_setup=0x3 errno=14 cover=29027 2021/11/11 16:02:24 result hanged=false: 16:02:24 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000000)={0x8d, 0x80000001}, 0x0) fork() [601857ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85101 #0 [601871ms] -> prlimit64(0x0, 0x0, 0x20000000, 0x0) #0 [601871ms] <- prlimit64=0x0 errno=14 cover=170 #0 [601872ms] -> fork() #0 [601891ms] <- fork=0xffffffffffffffff errno=11 cover=262143 enabling collider #0 [601894ms] -> prlimit64(0x0, 0x0, 0x20000000, 0x0) #0 [601894ms] <- prlimit64=0x0 errno=14 cover=105 #0 [601895ms] -> fork() 2021/11/11 16:02:24 result hanged=false: 16:02:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="91", 0x1}], 0x0, 0x0) 2021/11/11 16:02:24 poll: candidates=8 inputs=0 signal=0 [601929ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85104 #0 [601950ms] -> syz_mount_image$vfat(0x20000000, 0x0, 0x0, 0x1, 0x20000380, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [601952ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=9616 enabling collider #0 [601953ms] -> syz_mount_image$vfat(0x20000000, 0x0, 0x0, 0x1, 0x20000380, 0x0, 0x0) #0 [601954ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=16 cover=5543 16:02:24 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x10, 0x2, 0x6) 2021/11/11 16:02:24 result hanged=false: [601989ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85106 #0 [602007ms] -> creat(0x20000040, 0x0) #0 [602011ms] <- creat=0x3 errno=14 cover=8681 #0 [602012ms] -> fallocate(0x3, 0x10, 0x2, 0x6) #0 [602013ms] <- fallocate=0x0 errno=14 cover=8150 enabling collider #0 [602013ms] -> creat(0x20000040, 0x0) #0 [602016ms] <- creat=0x3 errno=14 cover=10339 16:02:24 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x10, 0x2, 0x6) 2021/11/11 16:02:24 result hanged=false: 2021/11/11 16:02:24 #0: triaging type=7 2021/11/11 16:02:24 triaging input for call #1 fallocate (new signal=2) [602053ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85108 #0 [602070ms] -> creat(0x20000040, 0x0) #0 [602074ms] <- creat=0x3 errno=14 cover=8682 #0 [602075ms] -> fallocate(0x3, 0x10, 0x2, 0x6) #0 [602076ms] <- fallocate=0x0 errno=14 cover=6006 16:02:24 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x10, 0x2, 0x6) 2021/11/11 16:02:24 result hanged=false: [602114ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85110 #0 [602133ms] -> creat(0x20000040, 0x0) #0 [602137ms] <- creat=0x3 errno=14 cover=8618 #0 [602138ms] -> fallocate(0x3, 0x10, 0x2, 0x6) #0 [602139ms] <- fallocate=0x0 errno=14 cover=5881 16:02:24 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x10, 0x2, 0x6) 2021/11/11 16:02:24 result hanged=false: [602173ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85112 #0 [602188ms] -> creat(0x20000040, 0x0) #0 [602191ms] <- creat=0x3 errno=14 cover=8742 #0 [602193ms] -> fallocate(0x3, 0x10, 0x2, 0x6) #0 [602194ms] <- fallocate=0x0 errno=14 cover=6025 2021/11/11 16:02:24 result hanged=false: 2021/11/11 16:02:24 added new input for call #1 fallocate to corpus: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x10, 0x2, 0x6) 16:02:24 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x10, 0x2, 0x6) 2021/11/11 16:02:24 #0: triaging type=7 2021/11/11 16:02:24 triaging input for call #0 creat (new signal=2) [602237ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85114 #0 [602251ms] -> creat(0x20000040, 0x0) #0 [602254ms] <- creat=0x3 errno=14 cover=8621 #0 [602255ms] -> fallocate(0x3, 0x10, 0x2, 0x6) #0 [602256ms] <- fallocate=0x0 errno=14 cover=5836 2021/11/11 16:02:24 result hanged=false: 16:02:24 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x10, 0x2, 0x6) [602297ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85116 #0 [602311ms] -> creat(0x20000040, 0x0) #0 [602315ms] <- creat=0x3 errno=14 cover=8671 #0 [602316ms] -> fallocate(0x3, 0x10, 0x2, 0x6) #0 [602316ms] <- fallocate=0x0 errno=14 cover=5917 16:02:24 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x10, 0x2, 0x6) 2021/11/11 16:02:24 result hanged=false: [602364ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85118 #0 [602387ms] -> creat(0x20000040, 0x0) #0 [602393ms] <- creat=0x3 errno=14 cover=8769 #0 [602394ms] -> fallocate(0x3, 0x10, 0x2, 0x6) #0 [602395ms] <- fallocate=0x0 errno=14 cover=6002 2021/11/11 16:02:24 result hanged=false: 2021/11/11 16:02:24 added new input for call #0 creat to corpus: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x10, 0x2, 0x6) 16:02:25 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000007c0)={0x1, &(0x7f0000000780)=[{}]}) [602437ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85120 #0 [602451ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x200007c0) #0 [602451ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0xffffffffffffffff errno=22 cover=1345 enabling collider #0 [602452ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x200007c0) #0 [602453ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0xffffffffffffffff errno=22 cover=1323 2021/11/11 16:02:25 result hanged=false: 16:02:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000680)) [602490ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85122 #0 [602502ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [602503ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1671 #0 [602504ms] -> ioctl$KDSKBMODE(0x3, 0x4b45, 0x20000680) #0 [602504ms] <- ioctl$KDSKBMODE=0xffffffffffffffff errno=22 cover=179 enabling collider #0 [602506ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [602506ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1734 #0 [602506ms] -> ioctl$KDSKBMODE(0x3, 0x4b45, 0x200006802021/11/11 16:02:25 result hanged=false: 16:02:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) flock(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getdents64(r6, &(0x7f0000000580)=""/253, 0xfd) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private}, 0x0, r10}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="08010000", @ANYRES16=r7, @ANYBLOB="00042dbd7000fddbdf250a0000003f000300f43dd4b3700d7ac99af1fbc29c18d1f90b34da78e65a120a29a47ee844c79674aa5dea1f70b42040f99c536aab7a7bbd3decae160f0846124cfce80040000300c097dc970e9663ba10c75a17f32404ce618b8692483a43fcc735eb14ac81d8c437efb0f0860ae11c07c2afa04f39031e789679026aaba826d9bf18e4c40b4dd9d17f7eb4", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r10, @ANYBLOB="08000300010000000800030001000000080003000300000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="30000300e8b2c93478351554e85f55b5874725121933b41d5ba1b9c2e8547b2e6e82e8f092206c7286aa6a82dc0ee36a"], 0x108}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, r2}) [602539ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85124 #0 [602556ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [602557ms] <- socket$inet6_udplite=0x3 errno=14 cover=1705 #0 [602557ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [602557ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1716 #0 [602558ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8933, 0x20000140) #0 [602558ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=197 #0 [602558ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [602558ms] <- socket$netlink=0x5 errno=14 cover=1410 #0 [602558ms] -> flock(0x5, 0x0) #0 [602558ms] <- flock=0xffffffffffffffff errno=22 cover=63 #0 [602558ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [602558ms] <- socket$nl_generic=0x6 errno=14 cover=1464 #0 [602558ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [602559ms] <- socket$inet6_udplite=0x7 errno=14 cover=1660 #0 [602559ms] -> dup(0x7) #0 [602559ms] <- dup=0x8 errno=14 cover=86 #0 [602559ms] -> bind$inet(0x8, 0x20000040, 0x10) #0 [602559ms] <- bind$inet=0xffffffffffffffff errno=22 cover=323 #0 [602559ms] -> getdents64(0x8, 0x20000580, 0xfd) #0 [602559ms] <- getdents64=0xffffffffffffffff errno=20 cover=64 #0 [602559ms] -> syz_genetlink_get_family_id$ethtool(0x20000040, 0x6) syz_genetlink_get_family_id(ethtool, 6) #0 [602560ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=5455 #0 [602560ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [602560ms] <- socket$inet6_udplite=0x9 errno=14 cover=1685 #0 [602560ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [602561ms] <- socket$inet6_icmp_raw=0xa errno=14 cover=1756 #0 [602561ms] -> ioctl$sock_SIOCGIFINDEX(0xa, 0x8933, 0x20000140) #0 [602561ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=197 #0 [602561ms] -> ioctl$sock_inet6_SIOCSIFADDR(0x9, 0x8916, 0x20000000) #0 [602562ms] <- ioctl$sock_inet6_SIOCSIFADDR=0x0 errno=14 cover=6486 #0 [602562ms] -> getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x20000080, 0x200000c0) #0 [602562ms] <- getsockopt$inet6_mreq=0xffffffffffffffff errno=9 cover=49 #0 [602562ms] -> sendmsg$ETHTOOL_MSG_WOL_SET(0x8, 0x20000280, 0x8000) #0 [602562ms] <- sendmsg$ETHTOOL_MSG_WOL_SET=0xffffffffffffffff errno=22 cover=332 #0 [602562ms] -> ioctl$sock_inet6_SIOCSIFADDR(0x3, 0x8916, 0x20000000) #0 [602563ms] <- ioctl$sock_inet6_SIOCSIFADDR=0x0 errno=14 cover=4982 enabling collider #0 [602564ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [602564ms] <- socket$inet6_udplite=0x3 errno=14 cover=1677 #0 [602568ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [602569ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1762 pthread_create failed (errno 11) 16:02:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 2021/11/11 16:02:25 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [602637ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85226 #0 [602650ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [602650ms] <- socket$inet_tcp=0x3 errno=14 cover=1732 #0 [602652ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x0) #0 [602652ms] <- ioctl$sock_SIOCGIFINDEX_80211=0xffffffffffffffff errno=14 cover=478 enabling collider #0 [602654ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [602654ms] <- socket$inet_tcp=0x3 errno=14 cover=1818 2021/11/11 16:02:25 result hanged=false: 16:02:25 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x14, 0x0, 0x0, @private, "10d4a5eae71c3c76c8f0847bad306b568ec53a1e"}}}}}, 0x0) [602692ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85228 #0 [602707ms] -> syz_emit_ethernet(0x3e, 0x200000c0, 0x0) bb bb bb bb bb bb ff ff ff ff ff ff 08 00 45 00 00 30 00 00 00 00 00 02 4d de ac 1e 00 01 ac 14 14 bb 14 00 e2 d6 00 00 00 00 10 d4 a5 ea e7 1c 3c 76 c8 f0 84 7b ad 30 6b 56 8e c5 3a 1e #0 [602708ms] <- syz_emit_ethernet=0x3e errno=14 cover=19092 enabling collider #0 [602711ms] -> syz_emit_ethernet(0x3e, 0x200000c0, 0x0) bb bb bb bb bb bb ff ff ff ff ff ff 08 00 45 00 00 30 00 00 00 00 00 02 4d de ac 1e 00 01 ac 14 14 bb 14 00 e2 d6 00 00 00 00 10 d4 a5 ea e7 1c 3c 76 c8 f0 84 7b ad 30 6b 56 8e c5 3a 1e #0 [602713ms] <- syz_emit_ethernet=0x3e errno=14 cover=18933 16:02:25 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xaa68b22012ea217b, 0xffffffffffffffff, 0x8000000) 2021/11/11 16:02:25 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [602757ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85230 #0 [602778ms] -> mmap$IORING_OFF_CQ_RING(0x20ffe000, 0x1000, 0x0, 0xaa68b22012ea217b, 0xffffffffffffffff, 0x8000000) #0 [602778ms] <- mmap$IORING_OFF_CQ_RING=0xffffffffffffffff errno=22 cover=105 enabling collider #0 [602780ms] -> mmap$IORING_OFF_CQ_RING(0x20ffe000, 0x1000, 0x0, 0xaa68b22012ea217b, 0xffffffffffffffff, 0x8000000) #0 [602780ms] <- mmap$IORING_OFF_CQ_RING=0xffffffffffffffff errno=22 cover=105 16:02:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1236e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f00000036c0)={0x10}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}) 2021/11/11 16:02:25 result hanged=false: 2021/11/11 16:02:25 poll: candidates=8 inputs=0 signal=0 [602818ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85232 #0 [602836ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x1236e2, 0x0) #0 [602839ms] <- openat=0x3 errno=14 cover=8668 #0 [602839ms] -> ioctl$FS_IOC_FSSETXATTR(0x3, 0x40086602, 0x200036c0) #0 [602844ms] <- ioctl$FS_IOC_FSSETXATTR=0x0 errno=14 cover=2750 #0 [602845ms] -> ioctl$FS_IOC_RESVSP(0x3, 0x40305828, 0x20000000) #0 [602845ms] <- ioctl$FS_IOC_RESVSP=0xffffffffffffffff errno=1 cover=131 enabling collider #0 [602845ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x1236e2, 0x0) #0 [602845ms] <- openat=0xffffffffffffffff errno=17 cover=1005 #0 [602845ms] -> ioctl$FS_IOC_FSSETXATTR(0x3, 0x40086602, 0x200036c0) #0 [602845ms] <- ioctl$FS_IOC_FSSETXATTR=0xffffffffffffffff errno=9 cover=46 pthread_create failed (errno 11) 16:02:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000027c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000002880)={0x30, r1, 0xa03da55dba33ba2f, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x30}}, 0x0) 2021/11/11 16:02:25 result hanged=false: reset FS_XFLAG_IMMUTABLE [602907ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85334 #0 [602926ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [602927ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6381 #0 [602928ms] -> syz_genetlink_get_family_id$nl802154(0x200027c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [602929ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=8436 #0 [602929ms] -> sendmsg$NL802154_CMD_GET_WPAN_PHY(0x4, 0x20002940, 0x0) #0 [602930ms] <- sendmsg$NL802154_CMD_GET_WPAN_PHY=0x30 errno=14 cover=1704 enabling collider #0 [602931ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [602931ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5444 #0 [602931ms] -> syz_genetlink_get_family_id$nl802154(0x200027c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [602933ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=7501 pthread_create failed (errno 11) 2021/11/11 16:02:25 result hanged=false: 16:02:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x20, 0x6, "ea938d85d044"}}) [602997ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85436 #0 [603014ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [603014ms] <- socket$inet_tcp=0x3 errno=14 cover=1757 #0 [603015ms] -> ioctl$sock_SIOCETHTOOL(0x3, 0x8946, 0x20000280) #0 [603015ms] <- ioctl$sock_SIOCETHTOOL=0x0 errno=14 cover=298 enabling collider #0 [603015ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [603015ms] <- socket$inet_tcp=0x3 errno=14 cover=1745 2021/11/11 16:02:25 result hanged=false: 16:02:25 executing program 0: mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x2000000, 0x110, 0xffffffffffffffff, 0x10000000) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="15d10a0464c770bda3328f89947b19999650d3ae746a5b7f16e59bc421d2c6b9f31d2aebed07ca811a26cf714766dab8d1acc253f828597149bd9e6c59c5eb3ab9f580f527cd65c7645c73f60f2a728c5f", 0x51, 0x9}], 0x2000000, &(0x7f0000000200)={[{@stripe={'stripe', 0x3d, 0x2a23}}, {@data_journal}], [{@audit}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@uid_lt}, {@dont_measure}, {@smackfsroot={'smackfsroot', 0x3d, '*'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x80) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x54, 0x0, 0x510, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xaad}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x2492e168e91957ab}, 0x20040040) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000002980)=""/238) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48890}, 0x10) [603053ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85438 #0 [603072ms] -> mmap$IORING_OFF_SQES(0x20ff2000, 0xc000, 0x2000000, 0x110, 0xffffffffffffffff, 0x10000000) #0 [603072ms] <- mmap$IORING_OFF_SQES=0xffffffffffffffff errno=9 cover=44 #0 [603075ms] -> openat$pidfd(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [603075ms] <- openat$pidfd=0x3 errno=14 cover=1796 #0 [603080ms] -> syz_mount_image$ext4(0x200000c0, 0x20000100, 0x9, 0x1, 0x200001c0, 0x2000000, 0x20000200) syz_mount_image: size=9 segs=1 loop='/dev/loop0' dir='./file0' fs='ext3' flags=33554432 opts='stripe=0x0000000000002a23,data=journal,audit,uid=00000000000000060928,uid<00000000000000000000,dont_measure,smackfsroot=*,euid>18446744073709551615,,errors=continue' [ 1850.598620] EXT4-fs (loop0): VFS: Can't find ext4 filesystem syz_mount_image > mount error: 22 #0 [603104ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=45751 #0 [603105ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [603105ms] <- socket$nl_generic=0x4 errno=14 cover=1520 #0 [603105ms] -> sendmsg$BATADV_CMD_GET_DAT_CACHE(0x4, 0x20002680, 0x80) #0 [603105ms] <- sendmsg$BATADV_CMD_GET_DAT_CACHE=0x28 errno=14 cover=1180 #0 [603106ms] -> sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x20002940, 0x20040040) #0 [603106ms] <- sendmsg$BATADV_CMD_GET_ROUTING_ALGOS=0xffffffffffffffff errno=9 cover=52 #0 [603106ms] -> ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x20002980) #0 [603106ms] <- ioctl$EVIOCGNAME=0xffffffffffffffff errno=9 cover=45 #0 [603106ms] -> sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0x4, 0x20002b40, 0x10) #0 [603106ms] <- sendmsg$BATADV_CMD_GET_ROUTING_ALGOS=0x34 errno=14 cover=1064 enabling collider #0 [603106ms] -> mmap$IORING_OFF_SQES(0x20ff2000, 0xc000, 0x2000000, 0x110, 0xffffffffffffffff, 0x10000000) #0 [603107ms] <- mmap$IORING_OFF_SQES=0xffffffffffffffff errno=9 cover=44 #0 [603108ms] -> openat$pidfd(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [603109ms] <- openat$pidfd=0x3 errno=14 cover=1734 pthread_create failed (errno 11) 16:02:25 executing program 0: pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000040)='s', 0x1}], 0x1, 0x0) write(r1, &(0x7f0000000000)="e7cc61ee26c2e5ecd8e8", 0xfe6c) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) 2021/11/11 16:02:25 result hanged=false: [603191ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85540 #0 [603212ms] -> pipe(0x200014c0) #0 [603212ms] <- pipe=0x0 errno=14 cover=1872 #0 [603212ms] -> vmsplice(0x4, 0x20000180, 0x1, 0x0) #0 [603213ms] <- vmsplice=0x1 errno=14 cover=268 #0 [603213ms] -> write(0x4, 0x20000000, 0xfe6c) pthread_create failed (errno 11) 16:02:26 executing program 0: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d020000000000000200000000df6300000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08", 0xef, 0xb800}], 0x0, &(0x7f0000011700)) getdents(r0, &(0x7f00000000c0)=""/56, 0x38) 2021/11/11 16:02:26 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [604283ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85642 #0 [604300ms] -> syz_mount_image$iso9660(0x20000000, 0x20000100, 0x0, 0x3, 0x20000200, 0x0, 0x20011700) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='iso9660' flags=1 opts='' #0 [604318ms] <- syz_mount_image$iso9660=0x5 errno=0 cover=26113 [ 1851.825231] iso9660: Corrupted directory entry in block 0 of inode 1472 #0 [604319ms] -> getdents(0x5, 0x200000c0, 0x38) #0 [604324ms] <- getdents=0x30 errno=14 cover=13647 enabling collider #0 [604326ms] -> syz_mount_image$iso9660(0x20000000, 0x20000100, 0x0, 0x3, 0x20000200, 0x0, 0x20011700) #0 [604328ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=16 cover=7131 #0 [604332ms] -> getdents(16:02:26 executing program 0: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d020000000000000200000000df6300000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08", 0xef, 0xb800}], 0x0, &(0x7f0000011700)) getdents(r0, &(0x7f00000000c0)=""/56, 0x38) 2021/11/11 16:02:26 result hanged=false: 2021/11/11 16:02:26 #0: triaging type=7 2021/11/11 16:02:26 triaging input for call #1 getdents (new signal=8) umount(./4383/file0) [604393ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85644 #0 [604416ms] -> syz_mount_image$iso9660(0x20000000, 0x20000100, 0x0, 0x3, 0x20000200, 0x0, 0x20011700) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='iso9660' flags=1 opts='' #0 [604426ms] <- syz_mount_image$iso9660=0x5 errno=0 cover=23743 [ 1851.934969] iso9660: Corrupted directory entry in block 0 of inode 1472 #0 [604430ms] -> getdents(0x5, 0x200000c0, 0x38) #0 [604434ms] <- getdents=0x30 errno=14 cover=1893 16:02:27 executing program 0: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d020000000000000200000000df6300000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08", 0xef, 0xb800}], 0x0, &(0x7f0000011700)) getdents(r0, &(0x7f00000000c0)=""/56, 0x38) 2021/11/11 16:02:27 result hanged=false: umount(./4384/file0) [604484ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85646 #0 [604498ms] -> syz_mount_image$iso9660(0x20000000, 0x20000100, 0x0, 0x3, 0x20000200, 0x0, 0x20011700) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='iso9660' flags=1 opts='' #0 [604512ms] <- syz_mount_image$iso9660=0x5 errno=0 cover=23743 #0 [604515ms] -> getdents(0x5, 0x200000c0, 0x38) [ 1852.018148] iso9660: Corrupted directory entry in block 0 of inode 1472 #0 [604516ms] <- getdents=0x30 errno=14 cover=1893 2021/11/11 16:02:27 result hanged=false: 16:02:27 executing program 0: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d020000000000000200000000df6300000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08", 0xef, 0xb800}], 0x0, &(0x7f0000011700)) getdents(r0, &(0x7f00000000c0)=""/56, 0x38) umount(./4385/file0) [604567ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85648 #0 [604583ms] -> syz_mount_image$iso9660(0x20000000, 0x20000100, 0x0, 0x3, 0x20000200, 0x0, 0x20011700) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='iso9660' flags=1 opts='' #0 [604593ms] <- syz_mount_image$iso9660=0x5 errno=0 cover=25657 #0 [604596ms] -> getdents(0x5, 0x200000c0, 0x38) [ 1852.099219] iso9660: Corrupted directory entry in block 0 of inode 1472 #0 [604598ms] <- getdents=0x30 errno=14 cover=4229 umount(./4386/file0) 2021/11/11 16:02:27 result hanged=false: 2021/11/11 16:02:27 added new input for call #1 getdents to corpus: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d020000000000000200000000df6300000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08", 0xef, 0xb800}], 0x0, &(0x7f0000011700)) getdents(r0, &(0x7f00000000c0)=""/56, 0x38) 16:02:27 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x2, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) [604647ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85650 #0 [604664ms] -> syz_open_dev$vcsu(0x20000080, 0x2, 0x0) #0 [604665ms] <- syz_open_dev$vcsu=0x3 errno=14 cover=1191 #0 [604665ms] -> ioctl$FICLONERANGE(0x3, 0x4020940d, 0x0) #0 [604665ms] <- ioctl$FICLONERANGE=0xffffffffffffffff errno=14 cover=457 enabling collider #0 [604665ms] -> syz_open_dev$vcsu(0x20000080, 0x2, 0x0) #0 [604665ms] <- syz_open_dev$vcsu=0x3 errno=14 cover=1163 16:02:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2282, 0xc04a01) 2021/11/11 16:02:27 result hanged=false: [604703ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85652 #0 [604717ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [604717ms] <- syz_open_dev$sg=0x3 errno=14 cover=1396 #0 [604718ms] -> ioctl$BLKTRACETEARDOWN(0x3, 0x2282, 0xc04a01) #0 [604718ms] <- ioctl$BLKTRACETEARDOWN=0xffffffffffffffff errno=14 cover=294 enabling collider #0 [604719ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [604719ms] <- syz_open_dev$sg=0x3 errno=14 cover=1461 #0 [604720ms] -> ioctl$BLKTRACETEARDOWN(0x3, 0x2282, 0xc04a01) #0 [604721ms] <- ioctl$BLKTRACETEARDOWN=0xffffffffffffffff errno=9 cover=46 16:02:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2282, 0xc04a01) 2021/11/11 16:02:27 result hanged=false: 2021/11/11 16:02:27 #0: triaging type=7 2021/11/11 16:02:27 triaging input for call #1 ioctl$BLKTRACETEARDOWN (new signal=2) [604759ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85654 #0 [604780ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [604780ms] <- syz_open_dev$sg=0x3 errno=14 cover=1419 #0 [604782ms] -> ioctl$BLKTRACETEARDOWN(0x3, 0x2282, 0xc04a01) #0 [604782ms] <- ioctl$BLKTRACETEARDOWN=0xffffffffffffffff errno=14 cover=294 2021/11/11 16:02:27 result hanged=false: 16:02:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2282, 0xc04a01) [604827ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85656 #0 [604845ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [604846ms] <- syz_open_dev$sg=0x3 errno=14 cover=1432 #0 [604847ms] -> ioctl$BLKTRACETEARDOWN(0x3, 0x2282, 0xc04a01) #0 [604849ms] <- ioctl$BLKTRACETEARDOWN=0xffffffffffffffff errno=14 cover=294 16:02:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2282, 0xc04a01) 2021/11/11 16:02:27 result hanged=false: [604895ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85658 #0 [604911ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [604911ms] <- syz_open_dev$sg=0x3 errno=14 cover=1433 #0 [604913ms] -> ioctl$BLKTRACETEARDOWN(0x3, 0x2282, 0xc04a01) #0 [604913ms] <- ioctl$BLKTRACETEARDOWN=0xffffffffffffffff errno=14 cover=294 2021/11/11 16:02:27 result hanged=false: 2021/11/11 16:02:27 added new input for call #1 ioctl$BLKTRACETEARDOWN to corpus: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2282, 0xc04a01) 16:02:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x14, 0x101}, 0x14}}, 0x0) 2021/11/11 16:02:27 poll: candidates=8 inputs=0 signal=0 [604956ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85660 #0 [604975ms] -> socket$netlink(0x10, 0x3, 0x4) #0 [604976ms] <- socket$netlink=0x3 errno=14 cover=1462 #0 [604977ms] -> sendmsg$nl_generic(0x3, 0x20000100, 0x0) #0 [604977ms] <- sendmsg$nl_generic=0x14 errno=14 cover=1437 enabling collider #0 [604978ms] -> socket$netlink(0x10, 0x3, 0x4) #0 [604979ms] <- socket$netlink=0x3 errno=14 cover=1428 2021/11/11 16:02:27 result hanged=false: 2021/11/11 16:02:27 #0: triaging type=7 16:02:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x14, 0x101}, 0x14}}, 0x0) 2021/11/11 16:02:27 triaging input for call #1 sendmsg$nl_generic (new signal=1) [605020ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85662 #0 [605036ms] -> socket$netlink(0x10, 0x3, 0x4) #0 [605036ms] <- socket$netlink=0x3 errno=14 cover=1451 #0 [605038ms] -> sendmsg$nl_generic(0x3, 0x20000100, 0x0) #0 [605038ms] <- sendmsg$nl_generic=0x14 errno=14 cover=1451 16:02:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x14, 0x101}, 0x14}}, 0x0) 2021/11/11 16:02:27 result hanged=false: [605081ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85664 #0 [605099ms] -> socket$netlink(0x10, 0x3, 0x4) #0 [605102ms] <- socket$netlink=0x3 errno=14 cover=1451 #0 [605103ms] -> sendmsg$nl_generic(0x3, 0x20000100, 0x0) #0 [605103ms] <- sendmsg$nl_generic=0x14 errno=14 cover=1428 2021/11/11 16:02:27 result hanged=false: 16:02:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x14, 0x101}, 0x14}}, 0x0) [605142ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85666 #0 [605159ms] -> socket$netlink(0x10, 0x3, 0x4) #0 [605160ms] <- socket$netlink=0x3 errno=14 cover=1429 #0 [605162ms] -> sendmsg$nl_generic(0x3, 0x20000100, 0x0) #0 [605162ms] <- sendmsg$nl_generic=0x14 errno=14 cover=1415 2021/11/11 16:02:27 result hanged=false: 2021/11/11 16:02:27 added new input for call #1 sendmsg$nl_generic to corpus: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x14, 0x101}, 0x14}}, 0x0) 16:02:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x2) [605203ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85668 #0 [605222ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [605223ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1694 #0 [605224ms] -> ioctl$TCFLSH(0x3, 0x540b, 0x2) #0 [605224ms] <- ioctl$TCFLSH=0x0 errno=14 cover=202 enabling collider #0 [605225ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [605225ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1760 #0 [605227ms] -> ioctl$TCFLSH(0x3, 0x540b, 0x2) #0 [605227ms] <- ioctl$TCFLSH=0xffffffffffffffff errno=9 16:02:27 executing program 0: clone3(&(0x7f0000000600)={0x1000, 0x0, 0x0, 0x0, {}, &(0x7f00000003c0)=""/193, 0xc1, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) 2021/11/11 16:02:27 result hanged=false: 2021/11/11 16:02:27 poll: candidates=0 inputs=0 signal=0 [605268ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85670 #0 [605288ms] -> clone3(0x20000600, 0x58) #0 [605315ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 enabling collider #0 [605317ms] -> clone3(0x20000600, 0x58) #0 [605334ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 2021/11/11 16:02:27 result hanged=false: 16:02:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x1a30c1, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="7f", 0x1}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$binfmt_elf64(r1, &(0x7f0000002180)=ANY=[], 0x78) write$binfmt_elf64(r2, 0x0, 0xffd4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) [605373ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85672 #0 [605393ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [605398ms] <- openat=0x3 errno=14 cover=8665 #0 [605398ms] -> open(0x20000380, 0x1a30c1, 0x0) #0 [605401ms] <- open=0x4 errno=14 cover=8521 #0 [605402ms] -> writev(0x3, 0x20000480, 0x1) #0 [605407ms] <- writev=0x1 errno=14 cover=10088 #0 [605407ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [605407ms] <- openat=0x5 errno=14 cover=1185 #0 [605408ms] -> write$binfmt_elf64(0x4, 0x20002180, 0x78) #0 [605411ms] <- write$binfmt_elf64=0x78 errno=14 cover=9631 #0 [605411ms] -> write$binfmt_elf64(0x5, 0x0, 0xffd4) #0 [605414ms] <- write$binfmt_elf64=0xffffffffffffffff errno=22 cover=7511 #0 [605414ms] -> ioctl$EXT4_IOC_MOVE_EXT(0x3, 0xc028660f, 0x20000040) #0 [605415ms] <- ioctl$EXT4_IOC_MOVE_EXT=0x0 errno=14 cover=5034 enabling collider #0 [605416ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [605416ms] <- openat=0xffffffffffffffff errno=17 cover=1004 #0 [605416ms] -> open(0x20000380, 0x1a30c1, 0x0) #0 [605417ms] <- open=0xffffffffffffffff errno=17 cover=1065 pthread_create failed (errno 11) 16:02:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x1a30c1, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="7f", 0x1}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$binfmt_elf64(r1, &(0x7f0000002180)=ANY=[], 0x78) write$binfmt_elf64(r2, 0x0, 0xffd4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 2021/11/11 16:02:28 result hanged=false: 2021/11/11 16:02:28 #0: triaging type=7 2021/11/11 16:02:28 triaging input for call #5 write$binfmt_elf64 (new signal=1) [605496ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85774 #0 [605512ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [605517ms] <- openat=0x3 errno=14 cover=13856 #0 [605519ms] -> open(0x20000380, 0x1a30c1, 0x0) #0 [605521ms] <- open=0x4 errno=14 cover=8568 #0 [605522ms] -> writev(0x3, 0x20000480, 0x1) #0 [605525ms] <- writev=0x1 errno=14 cover=9664 #0 [605527ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [605527ms] <- openat=0x5 errno=14 cover=1205 #0 [605528ms] -> write$binfmt_elf64(0x4, 0x20002180, 0x78) #0 [605532ms] <- write$binfmt_elf64=0x78 errno=14 cover=9581 #0 [605533ms] -> write$binfmt_elf64(0x5, 0x0, 0xffd4) #0 [605537ms] <- write$binfmt_elf64=0xffffffffffffffff errno=22 cover=6616 #0 [605538ms] -> ioctl$EXT4_IOC_MOVE_EXT(0x3, 0xc028660f, 0x20000040) #0 [605539ms] <- ioctl$EXT4_IOC_MOVE_EXT=0x0 errno=14 cover=4166 2021/11/11 16:02:28 result hanged=false: 16:02:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x1a30c1, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="7f", 0x1}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$binfmt_elf64(r1, &(0x7f0000002180)=ANY=[], 0x78) write$binfmt_elf64(r2, 0x0, 0xffd4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) [605584ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85776 #0 [605603ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [605607ms] <- openat=0x3 errno=14 cover=9074 #0 [605610ms] -> open(0x20000380, 0x1a30c1, 0x0) #0 [605613ms] <- open=0x4 errno=14 cover=8596 #0 [605614ms] -> writev(0x3, 0x20000480, 0x1) #0 [605617ms] <- writev=0x1 errno=14 cover=9614 #0 [605619ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [605620ms] <- openat=0x5 errno=14 cover=1216 #0 [605621ms] -> write$binfmt_elf64(0x4, 0x20002180, 0x78) #0 [605624ms] <- write$binfmt_elf64=0x78 errno=14 cover=9456 #0 [605625ms] -> write$binfmt_elf64(0x5, 0x0, 0xffd4) #0 [605628ms] <- write$binfmt_elf64=0xffffffffffffffff errno=22 cover=7651 #0 [605629ms] -> ioctl$EXT4_IOC_MOVE_EXT(0x3, 0xc028660f, 0x20000040) #0 [605630ms] <- ioctl$EXT4_IOC_MOVE_EXT=0x0 errno=14 cover=4109 16:02:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x1a30c1, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="7f", 0x1}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$binfmt_elf64(r1, &(0x7f0000002180)=ANY=[], 0x78) write$binfmt_elf64(r2, 0x0, 0xffd4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 2021/11/11 16:02:28 result hanged=false: [605676ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85778 #0 [605696ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x802c2, 0x0) #0 [605701ms] <- openat=0x3 errno=14 cover=8704 #0 [605702ms] -> open(0x20000380, 0x1a30c1, 0x0) #0 [605705ms] <- open=0x4 errno=14 cover=8626 #0 [605706ms] -> writev(0x3, 0x20000480, 0x1) #0 [605710ms] <- writev=0x1 errno=14 cover=9885 #0 [605711ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [605711ms] <- openat=0x5 errno=14 cover=1151 #0 [605712ms] -> write$binfmt_elf64(0x4, 0x20002180, 0x78) #0 [605715ms] <- write$binfmt_elf64=0x78 errno=14 cover=9604 #0 [605716ms] -> write$binfmt_elf64(0x5, 0x0, 0xffd4) #0 [605719ms] <- write$binfmt_elf64=0xffffffffffffffff errno=22 cover=7576 #0 [605720ms] -> ioctl$EXT4_IOC_MOVE_EXT(0x3, 0xc028660f, 0x20000040) #0 [605721ms] <- ioctl$EXT4_IOC_MOVE_EXT=0x0 errno=14 cover=4179 2021/11/11 16:02:28 result hanged=false: 2021/11/11 16:02:28 added new input for call #5 write$binfmt_elf64 to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x1a30c1, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="7f", 0x1}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$binfmt_elf64(r1, &(0x7f0000002180)=ANY=[], 0x78) write$binfmt_elf64(r2, 0x0, 0xffd4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 16:02:28 executing program 0: fork() [605769ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85780 #0 [605786ms] -> fork() #0 [605806ms] <- fork=0xffffffffffffffff errno=11 cover=262143 enabling collider #0 [605809ms] -> fork() #0 [605828ms] <- fork=0xffffffffffffffff errno=11 cover=262143 2021/11/11 16:02:28 result hanged=false: 16:02:28 executing program 0: inotify_init() io_uring_setup(0x4552, &(0x7f0000000200)={0x0, 0x4b63, 0x0, 0x2}) [605871ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85784 #0 [605888ms] -> inotify_init() #0 [605888ms] <- inotify_init=0x3 errno=14 cover=593 #0 [605889ms] -> io_uring_setup(0x4552, 0x20000200) #0 [605892ms] <- io_uring_setup=0x4 errno=14 cover=5823 enabling collider #0 [605892ms] -> inotify_init() #0 [605892ms] <- inotify_init=0x3 errno=14 cover=603 #0 [605892ms] -> io_uring_setup(0x4552, 0x20000200) 16:02:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010000000000000000000000000003000000", @ANYRES32, @ANYBLOB="0c000080080018"], 0x28}}, 0x0) 2021/11/11 16:02:28 result hanged=false: [605936ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85786 #0 [605955ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [605955ms] <- socket$netlink=0x3 errno=14 cover=1410 #0 [605955ms] -> sendmsg$nl_generic(0x3, 0x20000140, 0x0) #0 [605956ms] <- sendmsg$nl_generic=0x28 errno=14 cover=1851 enabling collider #0 [605956ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [605956ms] <- socket$netlink=0x3 errno=14 cover=1398 16:02:28 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f00000003c0)={0x0, ""/158}, 0xa6, 0x0, 0x0) msgsnd(r0, &(0x7f0000000180)={0x2}, 0x8, 0x0) 2021/11/11 16:02:28 result hanged=false: [605995ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85788 #0 [606017ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [606022ms] <- perf_event_open=0x3 errno=14 cover=16685 #0 [606027ms] -> msgget$private(0x0, 0x0) #0 [606027ms] <- msgget$private=0x1e errno=14 cover=379 #0 [606028ms] -> msgrcv(0x1e, 0x200003c0, 0xa6, 0x0, 0x0) pthread_create failed (errno 11) 2021/11/11 16:02:29 result hanged=false: 16:02:29 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x10}], 0x10}}], 0x1, 0x845) 2021/11/11 16:02:29 poll: candidates=8 inputs=0 signal=0 [607111ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85890 #0 [607129ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [607133ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=6421 #0 [607134ms] -> sendmmsg(0x4, 0x20003f00, 0x1, 0x845) #0 [607135ms] <- sendmmsg=0xffffffffffffffff errno=95 cover=161 enabling collider #0 [607135ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [607135ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=5438 2021/11/11 16:02:29 result hanged=false: 16:02:29 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x10}], 0x10}}], 0x1, 0x845) 2021/11/11 16:02:29 #0: triaging type=7 2021/11/11 16:02:29 triaging input for call #1 sendmmsg (new signal=4) [607176ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85892 #0 [607195ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [607196ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=6276 #0 [607198ms] -> sendmmsg(0x4, 0x20003f00, 0x1, 0x845) #0 [607198ms] <- sendmmsg=0xffffffffffffffff errno=95 cover=161 16:02:29 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x10}], 0x10}}], 0x1, 0x845) 2021/11/11 16:02:29 result hanged=false: [607243ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85894 #0 [607263ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [607264ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=6306 #0 [607265ms] -> sendmmsg(0x4, 0x20003f00, 0x1, 0x845) #0 [607265ms] <- sendmmsg=0xffffffffffffffff errno=95 cover=161 16:02:29 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x10}], 0x10}}], 0x1, 0x845) 2021/11/11 16:02:29 result hanged=false: [607308ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85896 #0 [607328ms] -> syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) #0 [607329ms] <- syz_init_net_socket$bt_sco=0x4 errno=14 cover=6263 #0 [607330ms] -> sendmmsg(0x4, 0x20003f00, 0x1, 0x845) #0 [607330ms] <- sendmmsg=0xffffffffffffffff errno=95 cover=161 2021/11/11 16:02:29 result hanged=false: 2021/11/11 16:02:29 added new input for call #1 sendmmsg to corpus: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x10}], 0x10}}], 0x1, 0x845) 16:02:29 executing program 0: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000290000004899ffe80000030000000000c34023"], 0x18}}], 0x1, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}], [{@obj_role={'obj_role', 0x3d, '\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'*{'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@seclabel}, {@smackfshat={'smackfshat', 0x3d, ' \x01\x00'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, 0xee01}}]}}) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000002680)='dns_resolver\x00', 0x0, &(0x7f0000000140)="4c03cdf1e949fc40b95081ec343264c283f2e057cd5759747195b8ba33e957d1ef32f5b19413d6f30b01816b75be29c1c24b1e59356a76d6ca617d7eb716b44ed2c1f7e7be8581a48c879e770beae22b0b9d9fa883ace5f366cbc6513ca9872d9099933423dcc058ff4592cdd0f9be8e8ae3a883e7a81d3298731f28764d5489c8bd831b00", 0xfffff, r0) [607371ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 85898 #0 [607388ms] -> sendmmsg$inet6(0xffffffffffffffff, 0x20001cc0, 0x1, 0x0) #0 [607388ms] <- sendmmsg$inet6=0xffffffffffffffff errno=9 cover=51 #0 [607389ms] -> mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x20000100) #0 [607389ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=805 #0 [607390ms] -> add_key$keyring(0x200000c0, 0x20000100, 0x0, 0x0, 0xfffffffffffffffc) #0 [607391ms] <- add_key$keyring=0x1b03aea3 errno=14 cover=1754 #0 [607393ms] -> add_key(0x20002680, 0x0, 0x20000140, 0xfffff, 0x1b03aea3) [ 1854.898120] Option ' ÜÀXÿE’ÍÐù¾ŽŠã¨ƒç¨2˜s(vMT‰È½ƒ' to dns_resolver key: bad/missing value #0 [607402ms] <- add_key=0xffffffffffffffff errno=22 cover=39371 enabling collider #0 [607404ms] -> sendmmsg$inet6(0xffffffffffffffff, 0x20001cc0, 0x1, 0x0) #0 [607404ms] <- sendmmsg$inet6=0xffffffffffffffff errno=9 cover=51 #0 [607406ms] -> mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x20000100) #0 [607406ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=803 pthread_create failed (errno 11) 2021/11/11 16:02:30 result hanged=false: 16:02:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) [607488ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86000 #0 [607506ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20000480) #0 [607508ms] <- socketpair$unix=0x0 errno=14 cover=3661 #0 [607511ms] -> sendmsg$unix(0x3, 0x20000100, 0x0) #0 [607511ms] <- sendmsg$unix=0x0 errno=14 cover=998 #0 [607512ms] -> recvmmsg(0x4, 0x20000400, 0x1, 0x2, 0x0) #0 [607513ms] <- recvmmsg=0x1 errno=14 cover=1379 enabling collider #0 [607518ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20000480) #0 [607519ms] <- socketpair$unix=0x0 errno=14 cover=3232 #0 [607520ms] -> sendmsg$unix(0x3, 0x20000100, 0x0) #0 [607520ms] <- sendmsg$unix=0x0 errno=14 cover=1051 pthread_create failed (errno 11) 16:02:30 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x6, 0x0, &(0x7f00000003c0)) 2021/11/11 16:02:30 result hanged=false: [607598ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86102 #0 [607621ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [607622ms] <- perf_event_open=0x3 errno=14 cover=8008 #0 [607622ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [607623ms] <- socket$inet6_tcp=0x4 errno=14 cover=1723 #0 [607623ms] -> getsockopt$inet6_mreq(0x4, 0x29, 0x6, 0x0, 0x200003c0) #0 [607623ms] <- getsockopt$inet6_mreq=0x0 errno=14 cover=140 enabling collider #0 [607632ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [607633ms] <- perf_event_open=0x3 errno=14 cover=12519 #0 [607634ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [607635ms] <- socket$inet6_tcp=0x4 errno=14 cover=1804 pthread_create failed (errno 11) 2021/11/11 16:02:30 result hanged=false: 16:02:30 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0xc8084, 0x0) [607720ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86204 #0 [607739ms] -> openat$bsg(0xffffffffffffff9c, 0x20000280, 0xc8084, 0x0) #0 [607740ms] <- openat$bsg=0x3 errno=14 cover=1164 enabling collider #0 [607740ms] -> openat$bsg(0xffffffffffffff9c, 0x20000280, 0xc8084, 0x0) #0 [607740ms] <- openat$bsg=0x3 errno=14 cover=1175 16:02:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x5, 0x4) sendmsg$inet(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000001c0)="be76a0382ef9a05da8596c7162322eb7e68d37ac0cb7388fdff2a8e7a47f8e37147c60a5448c1de3d09b7324ff0b25bd99f48128a0f412597fced0af91f9e6c6d7377bd07a45d5d8c2ed1e923ab415655b6a1106", 0x54}, {&(0x7f0000000240)="e4fa717ad76cfd5bf32211a075146a4ba315f936e58f3492c22c51555a218c045227e8c6dd640a3b833cab5f0931d9d2169e5ec66291e3c57354740d52fc08973ad544e0a102b59841798ec7c3c73c1fc1f6c84c65ce876658665b9cd7d677c61d06a7ac2b9a06cec77eaa28a56a5b16b52ed9fc82b6ef37f65bfc7795023deaabb5e9be0f935094dc2a1916892f0f902706460d12da49b0133831b71195cfd428d590a3d96baa4fdc16da5cf0ba69c1b05131f7714f136f9d6cce983e", 0xbd}], 0x2}, 0x0) 2021/11/11 16:02:30 result hanged=false: [607784ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86206 #0 [607802ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [607802ms] <- socket$inet6_udp=0x3 errno=14 cover=1709 #0 [607804ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [607804ms] <- connect$inet6=0xffffffffffffffff errno=101 cover=1862 #0 [607805ms] -> setsockopt$inet6_udp_int(0x3, 0x11, 0x67, 0x20000080, 0x4) #0 [607806ms] <- setsockopt$inet6_udp_int=0x0 errno=14 cover=106 #0 [607807ms] -> sendmsg$inet(0x3, 0x20002940, 0x0) #0 [607807ms] <- sendmsg$inet=0xffffffffffffffff errno=89 cover=191 enabling collider #0 [607808ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [607809ms] <- socket$inet6_udp=0x3 errno=14 cover=1803 #0 [607812ms] -> connect$inet6(0x3, 0x20000000, 0x1c) #0 [607812ms] <- connect$inet6=0xffffffffffffffff errno=101 cover=1862 pthread_create failed (errno 11) 2021/11/11 16:02:30 result hanged=false: 16:02:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x403, 0x8002}) [607885ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86308 #0 [607899ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [607900ms] <- syz_open_dev$sg=0x3 errno=14 cover=1418 #0 [607901ms] -> ioctl$BLKTRACESETUP(0x3, 0xc0481273, 0x20000080) #0 [607940ms] <- ioctl$BLKTRACESETUP=0x0 errno=14 cover=262143 enabling collider #0 [607943ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [607945ms] <- syz_open_dev$sg=0x3 errno=14 cover=1395 16:02:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x403, 0x8002}) 2021/11/11 16:02:30 result hanged=false: 2021/11/11 16:02:30 #0: triaging type=7 2021/11/11 16:02:30 triaging input for call #1 ioctl$BLKTRACESETUP (new signal=1) [607980ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86310 #0 [607997ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [607997ms] <- syz_open_dev$sg=0x3 errno=14 cover=1445 [ 1855.501326] blktrace: Concurrent blktraces are not allowed on sg0 #0 [607997ms] -> ioctl$BLKTRACESETUP(0x3, 0xc0481273, 0x20000080) #0 [607999ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=16 cover=13311 16:02:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x403, 0x8002}) 2021/11/11 16:02:30 result hanged=false: [608040ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86312 #0 [608058ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [608059ms] <- syz_open_dev$sg=0x3 errno=14 cover=1440 [ 1855.562533] blktrace: Concurrent blktraces are not allowed on sg0 #0 [608059ms] -> ioctl$BLKTRACESETUP(0x3, 0xc0481273, 0x20000080) #0 [608060ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=16 cover=1507 16:02:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x403, 0x8002}) 2021/11/11 16:02:30 result hanged=false: [608103ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86314 #0 [608126ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [608126ms] <- syz_open_dev$sg=0x3 errno=14 cover=1429 [ 1855.630700] blktrace: Concurrent blktraces are not allowed on sg0 #0 [608127ms] -> ioctl$BLKTRACESETUP(0x3, 0xc0481273, 0x20000080) #0 [608137ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=16 cover=1547 16:02:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x6) lseek(r0, 0x8, 0x4) 2021/11/11 16:02:30 result hanged=false: [608180ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86316 #0 [608200ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [608204ms] <- perf_event_open=0x3 errno=14 cover=8928 #0 [608205ms] -> memfd_create(0x20000340, 0x6) #0 [608206ms] <- memfd_create=0x4 errno=14 cover=1413 #0 [608206ms] -> lseek(0x4, 0x8, 0x4) #0 [608206ms] <- lseek=0xffffffffffffffff errno=6 cover=66 enabling collider #0 [608218ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [608219ms] <- perf_event_open=0x3 errno=14 cover=8045 #0 [608220ms] -> memfd_create(0x20000340, 0x6) #0 [608220ms] <- memfd_create=0x4 errno=14 cover=1372 pthread_create failed (errno 11) 16:02:30 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 2021/11/11 16:02:30 result hanged=false: 2021/11/11 16:02:30 poll: candidates=8 inputs=0 signal=0 [608308ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86418 #0 [608328ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [608335ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=65665 [ 1855.839941] audit: type=1326 audit(1636646550.904:1069): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=319576 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=1 compat=0 ip=0x7f7b9cda65ff code=0x0 #0 [608336ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) killing hanging pid 86418 2021/11/11 16:02:34 result hanged=false: 2021/11/11 16:02:34 #0: triaging type=7 16:02:34 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 2021/11/11 16:02:34 triaging input for call #2 ioctl$SECCOMP_IOCTL_NOTIF_RECV (new signal=33) [611482ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86421 #0 [611500ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [611503ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=6517 [ 1859.009521] audit: type=1326 audit(1636646554.073:1070): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=319580 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=1 compat=0 ip=0x7f7b9cda65ff code=0x0 #0 [611506ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) 2021/11/11 16:02:36 result hanged=false: 16:02:36 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) [613651ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86424 #0 [613676ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [613677ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=2975 [ 1861.182363] audit: type=1326 audit(1636646556.246:1071): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=319583 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=1 compat=0 ip=0x7f7b9cda65ff code=0x0 #0 [613678ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) 2021/11/11 16:02:38 result hanged=false: 16:02:38 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) [615825ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86427 #0 [615843ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [615847ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=6421 [ 1863.351976] audit: type=1326 audit(1636646558.416:1072): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=319586 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=1 compat=0 ip=0x7f7b9cda65ff code=0x0 #0 [615848ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) 2021/11/11 16:02:39 poll: candidates=0 inputs=0 signal=0 2021/11/11 16:02:40 result hanged=false: 2021/11/11 16:02:40 added new input for call #2 ioctl$SECCOMP_IOCTL_NOTIF_RECV to corpus: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 16:02:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) fsync(r0) [617995ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86430 #0 [618012ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [618016ms] <- openat=0x3 errno=14 cover=8819 #0 [618018ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) [ 1865.521832] audit: type=1326 audit(1636646560.586:1073): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=319589 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7b9cda65ff code=0x7ffc0000 [ 1865.526384] audit: type=1326 audit(1636646560.586:1074): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=319589 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7b9cda65ff code=0x7ffc0000 #0 [618018ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=3057 [ 1865.534996] audit: type=1326 audit(1636646560.586:1075): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=319589 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7b9cda65ff code=0x7ffc0000 #0 [618031ms] -> fsync(0x3) #0 [618034ms] <- fsync=0x0 errno=14 cover=2988 enabling collider #0 [618039ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x46e2, 0x0) #0 [618042ms] <- openat=0xffffffffffffffff errno=17 cover=4019 [ 1865.544074] audit: type=1326 audit(1636646560.586:1076): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=319589 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9cdf3b19 code=0x7ffc0000 #0 [618046ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x20000000) #0 [618051ms] <- seccomp$SECCOMP_SET_MODE_FILTER_LISTENER=0x0 errno=14 cover=5115 [ 1865.557937] audit: type=1326 audit(1636646560.586:1077): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=319589 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9cdf3b19 code=0x7ffc0000 [ 1865.563236] audit: type=1326 audit(1636646560.598:1078): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=319589 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7b9cda65ff code=0x7ffc0000 [ 1865.568102] audit: type=1326 audit(1636646560.599:1079): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=319589 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7b9cda65ff code=0x7ffc0000 [ 1865.572881] audit: type=1326 audit(1636646560.599:1080): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=319589 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7b9cda65ff code=0x7ffc0000 pthread_create failed (errno 11) 16:02:40 executing program 0: add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) 2021/11/11 16:02:40 result hanged=false: [618144ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86532 #0 [618162ms] -> add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) #0 [618162ms] <- add_key$user=0xffffffffffffffff errno=14 cover=418 enabling collider #0 [618163ms] -> add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) #0 [618165ms] <- add_key$user=0xffffffffffffffff errno=14 cover=419 16:02:40 executing program 0: syz_emit_ethernet(0x52, &(0x7f00000005c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ffcb54", 0x1c, 0x6, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@hopopts], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2021/11/11 16:02:40 result hanged=false: [618206ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86534 #0 [618225ms] -> syz_emit_ethernet(0x52, 0x200005c0, 0x0) aa aa aa aa aa aa ff ff ff ff ff ff 86 dd 60 ff cb 54 00 1c 06 00 fc 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe 88 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 44 43 42 41 44 43 42 41 50 00 00 00 a8 50 00 00 #0 [618226ms] <- syz_emit_ethernet=0x52 errno=14 cover=24993 enabling collider #0 [618228ms] -> syz_emit_ethernet(0x52, 0x200005c0, 0x0) aa aa aa aa aa aa ff ff ff ff ff ff 86 dd 60 ff cb 54 00 1c 06 00 fc 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe 88 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 44 43 42 41 44 43 42 41 50 00 00 00 a8 50 00 00 #0 [618229ms] <- syz_emit_ethernet=0x52 errno=14 cover=24848 16:02:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xb, &(0x7f0000000000)=0xba, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x48, r1, 0x201, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x48}}, 0x0) 2021/11/11 16:02:40 result hanged=false: iptable mangle/10: resetting [618271ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86536 #0 [618291ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [618293ms] <- socket$netlink=0x3 errno=14 cover=1421 #0 [618294ms] -> setsockopt$netlink_NETLINK_BROADCAST_ERROR(0x3, 0x10e, 0xb, 0x20000000, 0x4) #0 [618294ms] <- setsockopt$netlink_NETLINK_BROADCAST_ERROR=0x0 errno=14 cover=103 #0 [618294ms] -> syz_genetlink_get_family_id$ethtool(0x20000640, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [618295ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=8093 #0 [618296ms] -> sendmsg$ETHTOOL_MSG_EEE_SET(0x3, 0x20000880, 0x0) #0 [618297ms] <- sendmsg$ETHTOOL_MSG_EEE_SET=0x48 errno=14 cover=1753 enabling collider #0 [618299ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [618300ms] <- socket$netlink=0x3 errno=14 cover=1564 #0 [618300ms] -> setsockopt$netlink_NETLINK_BROADCAST_ERROR(0x3, 0x10e, 0xb, 0x20000000, 0x4) #0 [618301ms] <- setsockopt$netlink_NETLINK_BROADCAST_ERROR=0x0 errno=14 cover=103 pthread_create failed (errno 11) 16:02:40 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_destroy(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1000}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x11, &(0x7f0000000000), 0x4) 2021/11/11 16:02:40 result hanged=false: [618371ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86638 #0 [618389ms] -> perf_event_open(0x200000c0, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [618394ms] <- perf_event_open=0x3 errno=14 cover=9251 #0 [618399ms] -> io_destroy(0x0) #0 [618399ms] <- io_destroy=0xffffffffffffffff errno=22 cover=218 #0 [618399ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [618399ms] <- socket$inet6_udp=0x4 errno=14 cover=1760 #0 [618399ms] -> connect$inet6(0x4, 0x200000c0, 0x1c) #0 [618400ms] <- connect$inet6=0xffffffffffffffff errno=101 cover=1507 #0 [618401ms] -> setsockopt$inet6_IPV6_ADDRFORM(0x4, 0x29, 0x11, 0x20000000, 0x4) #0 [618401ms] <- setsockopt$inet6_IPV6_ADDRFORM=0xffffffffffffffff errno=22 cover=172 enabling collider #0 [618410ms] -> perf_event_open(0x200000c0, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [618410ms] <- perf_event_open=0x3 errno=14 cover=7972 #0 [618411ms] -> io_destroy(0x0) #0 [618411ms] <- io_destroy=0xffffffffffffffff errno=22 cover=219 pthread_create failed (errno 11) 16:02:41 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1a, &(0x7f0000000080), 0x4) 2021/11/11 16:02:41 result hanged=false: [618506ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86740 #0 [618526ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [618526ms] <- socket$inet6_udplite=0x3 errno=14 cover=1617 #0 [618527ms] -> sendmmsg$inet6(0x3, 0x200003c0, 0x1, 0x0) #0 [618527ms] <- sendmmsg$inet6=0xffffffffffffffff errno=89 cover=262 #0 [618527ms] -> setsockopt$inet6_IPV6_ADDRFORM(0x3, 0x29, 0x1a, 0x20000080, 0x4) #0 [618527ms] <- setsockopt$inet6_IPV6_ADDRFORM=0xffffffffffffffff errno=22 cover=150 enabling collider #0 [618527ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [618527ms] <- socket$inet6_udplite=0x3 errno=14 cover=1685 #0 [618528ms] -> sendmmsg$inet6(0x3, 0x200003c0, 0x1, 0x0) #0 [618528ms] <- sendmmsg$inet6=0xffffffffffffffff errno=89 cover=312 pthread_create failed (errno 11) 16:02:41 executing program 0: io_setup(0x5, &(0x7f0000002080)) 2021/11/11 16:02:41 result hanged=false: [618603ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86842 #0 [618623ms] -> io_setup(0x5, 0x20002080) #0 [618623ms] <- io_setup=0x0 errno=14 cover=3485 enabling collider #0 [618625ms] -> io_setup(0x5, 0x20002080) #0 [618625ms] <- io_setup=0xffffffffffffffff errno=22 cover=40 16:02:41 executing program 0: syz_io_uring_setup(0x1af6, &(0x7f0000000500)={0x0, 0x0, 0x12, 0x0, 0x1a3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) 2021/11/11 16:02:41 result hanged=false: 2021/11/11 16:02:41 poll: candidates=8 inputs=0 signal=0 [618671ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86844 #0 [618691ms] -> syz_io_uring_setup(0x1af6, 0x20000500, 0x20ffc000, 0x20ffd000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [618696ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=9288 enabling collider #0 [618696ms] -> syz_io_uring_setup(0x1af6, 0x20000500, 0x20ffc000, 0x20ffd000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [618703ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=8784 16:02:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "8985624f1bfee8d1c4447dc16616fcb52d2897"}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/170, 0xaa}], 0x1) 2021/11/11 16:02:41 result hanged=false: [618748ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86846 #0 [618766ms] -> openat$ptmx(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [618767ms] <- openat$ptmx=0x3 errno=14 cover=8218 #0 [618767ms] -> openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [618769ms] <- openat$null=0xffffffffffffffff errno=14 cover=615 #0 [618769ms] -> ioctl$TIOCPKT(0x3, 0x5420, 0x20000040) #0 [618769ms] <- ioctl$TIOCPKT=0x0 errno=14 cover=140 #0 [618769ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [618770ms] <- perf_event_open=0x4 errno=14 cover=8597 #0 [618770ms] -> ioctl$TCSETSF(0x3, 0x5404, 0x200000c0) #0 [618771ms] <- ioctl$TCSETSF=0x0 errno=14 cover=13781 #0 [618771ms] -> readv(0x3, 0x20000340, 0x1) #0 [618771ms] <- readv=0x1 errno=14 cover=1474 enabling collider #0 [618784ms] -> openat$ptmx(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [618784ms] <- openat$ptmx=0x3 errno=14 cover=8325 #0 [618785ms] -> openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [618786ms] <- openat$null=0xffffffffffffffff errno=14 cover=628 pthread_create failed (errno 11) 2021/11/11 16:02:41 result hanged=false: 2021/11/11 16:02:41 #0: triaging type=7 2021/11/11 16:02:41 triaging input for call #5 readv (new signal=7) 16:02:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "8985624f1bfee8d1c4447dc16616fcb52d2897"}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/170, 0xaa}], 0x1) [618869ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86948 #0 [618887ms] -> openat$ptmx(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [618889ms] <- openat$ptmx=0x3 errno=14 cover=8230 #0 [618893ms] -> openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [618893ms] <- openat$null=0xffffffffffffffff errno=14 cover=627 #0 [618894ms] -> ioctl$TIOCPKT(0x3, 0x5420, 0x20000040) #0 [618894ms] <- ioctl$TIOCPKT=0x0 errno=14 cover=140 #0 [618895ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [618896ms] <- perf_event_open=0x4 errno=14 cover=8450 #0 [618900ms] -> ioctl$TCSETSF(0x3, 0x5404, 0x200000c0) #0 [618900ms] <- ioctl$TCSETSF=0x0 errno=14 cover=865 #0 [618900ms] -> readv(0x3, 0x20000340, 0x1) #0 [618901ms] <- readv=0x1 errno=14 cover=555 2021/11/11 16:02:41 result hanged=false: 16:02:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "8985624f1bfee8d1c4447dc16616fcb52d2897"}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/170, 0xaa}], 0x1) [618952ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86950 #0 [618969ms] -> openat$ptmx(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [618970ms] <- openat$ptmx=0x3 errno=14 cover=8230 #0 [618971ms] -> openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [618971ms] <- openat$null=0xffffffffffffffff errno=14 cover=632 #0 [618973ms] -> ioctl$TIOCPKT(0x3, 0x5420, 0x20000040) #0 [618973ms] <- ioctl$TIOCPKT=0x0 errno=14 cover=140 #0 [618976ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [618977ms] <- perf_event_open=0x4 errno=14 cover=8698 #0 [618982ms] -> ioctl$TCSETSF(0x3, 0x5404, 0x200000c0) #0 [618982ms] <- ioctl$TCSETSF=0x0 errno=14 cover=865 #0 [618984ms] -> readv(0x3, 0x20000340, 0x1) #0 [618985ms] <- readv=0x1 errno=14 cover=555 16:02:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "8985624f1bfee8d1c4447dc16616fcb52d2897"}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/170, 0xaa}], 0x1) 2021/11/11 16:02:41 result hanged=false: [619034ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86952 #0 [619050ms] -> openat$ptmx(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [619051ms] <- openat$ptmx=0x3 errno=14 cover=8195 #0 [619054ms] -> openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [619054ms] <- openat$null=0xffffffffffffffff errno=14 cover=626 #0 [619054ms] -> ioctl$TIOCPKT(0x3, 0x5420, 0x20000040) #0 [619055ms] <- ioctl$TIOCPKT=0x0 errno=14 cover=140 #0 [619055ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [619056ms] <- perf_event_open=0x4 errno=14 cover=8419 #0 [619059ms] -> ioctl$TCSETSF(0x3, 0x5404, 0x200000c0) #0 [619059ms] <- ioctl$TCSETSF=0x0 errno=14 cover=865 #0 [619060ms] -> readv(0x3, 0x20000340, 0x1) #0 [619060ms] <- readv=0x1 errno=14 cover=555 2021/11/11 16:02:41 result hanged=false: 2021/11/11 16:02:41 added new input for call #5 readv to corpus: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "8985624f1bfee8d1c4447dc16616fcb52d2897"}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/170, 0xaa}], 0x1) 16:02:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "8985624f1bfee8d1c4447dc16616fcb52d2897"}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/170, 0xaa}], 0x1) 2021/11/11 16:02:41 #0: triaging type=7 2021/11/11 16:02:41 triaging input for call #4 ioctl$TCSETSF (new signal=3) [619117ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86954 #0 [619139ms] -> openat$ptmx(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [619140ms] <- openat$ptmx=0x3 errno=14 cover=8261 #0 [619145ms] -> openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [619145ms] <- openat$null=0xffffffffffffffff errno=14 cover=627 #0 [619146ms] -> ioctl$TIOCPKT(0x3, 0x5420, 0x20000040) #0 [619146ms] <- ioctl$TIOCPKT=0x0 errno=14 cover=140 #0 [619148ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [619150ms] <- perf_event_open=0x4 errno=14 cover=8974 #0 [619151ms] -> ioctl$TCSETSF(0x3, 0x5404, 0x200000c0) #0 [619151ms] <- ioctl$TCSETSF=0x0 errno=14 cover=865 #0 [619152ms] -> readv(0x3, 0x20000340, 0x1) #0 [619152ms] <- readv=0x1 errno=14 cover=555 2021/11/11 16:02:41 result hanged=false: 16:02:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "8985624f1bfee8d1c4447dc16616fcb52d2897"}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/170, 0xaa}], 0x1) [619211ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86956 #0 [619230ms] -> openat$ptmx(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [619231ms] <- openat$ptmx=0x3 errno=14 cover=8260 #0 [619235ms] -> openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [619235ms] <- openat$null=0xffffffffffffffff errno=14 cover=626 #0 [619236ms] -> ioctl$TIOCPKT(0x3, 0x5420, 0x20000040) #0 [619236ms] <- ioctl$TIOCPKT=0x0 errno=14 cover=140 #0 [619236ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [619238ms] <- perf_event_open=0x4 errno=14 cover=13574 #0 [619241ms] -> ioctl$TCSETSF(0x3, 0x5404, 0x200000c0) #0 [619241ms] <- ioctl$TCSETSF=0x0 errno=14 cover=401 #0 [619241ms] -> readv(0x3, 0x20000340, 0x1) #0 [619242ms] <- readv=0x1 errno=14 cover=294 2021/11/11 16:02:41 result hanged=false: 16:02:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "8985624f1bfee8d1c4447dc16616fcb52d2897"}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/170, 0xaa}], 0x1) [619295ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86958 #0 [619312ms] -> openat$ptmx(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [619313ms] <- openat$ptmx=0x3 errno=14 cover=8134 #0 [619315ms] -> openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [619315ms] <- openat$null=0xffffffffffffffff errno=14 cover=615 #0 [619316ms] -> ioctl$TIOCPKT(0x3, 0x5420, 0x20000040) #0 [619317ms] <- ioctl$TIOCPKT=0x0 errno=14 cover=140 #0 [619318ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [619319ms] <- perf_event_open=0x4 errno=14 cover=8692 #0 [619322ms] -> ioctl$TCSETSF(0x3, 0x5404, 0x200000c0) #0 [619322ms] <- ioctl$TCSETSF=0x0 errno=14 cover=865 #0 [619325ms] -> readv(0x3, 0x20000340, 0x1) #0 [619326ms] <- readv=0x1 errno=14 cover=555 2021/11/11 16:02:41 result hanged=false: 2021/11/11 16:02:41 added new input for call #4 ioctl$TCSETSF to corpus: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "8985624f1bfee8d1c4447dc16616fcb52d2897"}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/170, 0xaa}], 0x1) 16:02:41 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000002f80), 0x3f, 0x0) [619379ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86960 #0 [619397ms] -> mkdir(0x20000000, 0x0) #0 [619402ms] <- mkdir=0x0 errno=14 cover=14495 #0 [619403ms] -> syz_open_dev$sg(0x20002f80, 0x3f, 0x0) #0 [619403ms] <- syz_open_dev$sg=0xffffffffffffffff errno=2 cover=1462 enabling collider #0 [619404ms] -> mkdir(0x20000000, 0x0) #0 [619404ms] <- mkdir=0xffffffffffffffff errno=17 cover=627 16:02:41 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000002f80), 0x3f, 0x0) 2021/11/11 16:02:41 result hanged=false: 2021/11/11 16:02:41 #0: triaging type=7 2021/11/11 16:02:41 triaging input for call #0 mkdir (new signal=2) [619449ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86962 #0 [619467ms] -> mkdir(0x20000000, 0x0) #0 [619472ms] <- mkdir=0x0 errno=14 cover=13767 #0 [619475ms] -> syz_open_dev$sg(0x20002f80, 0x3f, 0x0) #0 [619475ms] <- syz_open_dev$sg=0xffffffffffffffff errno=2 cover=1422 16:02:42 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000002f80), 0x3f, 0x0) 2021/11/11 16:02:42 result hanged=false: [619519ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86964 #0 [619538ms] -> mkdir(0x20000000, 0x0) #0 [619545ms] <- mkdir=0x0 errno=14 cover=13735 #0 [619548ms] -> syz_open_dev$sg(0x20002f80, 0x3f, 0x0) #0 [619548ms] <- syz_open_dev$sg=0xffffffffffffffff errno=2 cover=1434 16:02:42 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000002f80), 0x3f, 0x0) 2021/11/11 16:02:42 result hanged=false: [619593ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86966 #0 [619611ms] -> mkdir(0x20000000, 0x0) #0 [619616ms] <- mkdir=0x0 errno=14 cover=13809 #0 [619626ms] -> syz_open_dev$sg(0x20002f80, 0x3f, 0x0) #0 [619626ms] <- syz_open_dev$sg=0xffffffffffffffff errno=2 cover=1452 2021/11/11 16:02:42 result hanged=false: 2021/11/11 16:02:42 added new input for call #0 mkdir to corpus: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000002f80), 0x3f, 0x0) 16:02:42 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{}]}) [619679ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86968 #0 [619697ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [619697ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3506 #0 [619698ms] -> ioctl$PIO_UNIMAP(0x3, 0x4b67, 0x20000140) #0 [619699ms] <- ioctl$PIO_UNIMAP=0x0 errno=14 cover=17572 enabling collider #0 [619706ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [619707ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3550 #0 [619707ms] -> ioctl$PIO_UNIMAP(0x3, 0x4b67, 0x20000140) #0 [619707ms] <- ioctl$PIO_UNIMAP=0xffffffffffffffff errno=9 cover=46 2021/11/11 16:02:42 result hanged=false: 16:02:42 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) [619748ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86970 #0 [619765ms] -> openat$thread_pidfd(0xffffffffffffff9c, 0x20000300, 0x0, 0x0) #0 [619766ms] <- openat$thread_pidfd=0x3 errno=14 cover=3309 enabling collider #0 [619767ms] -> openat$thread_pidfd(0xffffffffffffff9c, 0x20000300, 0x0, 0x0) #0 [619768ms] <- openat$thread_pidfd=0x3 errno=14 cover=2172 2021/11/11 16:02:42 result hanged=false: 16:02:42 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x40802) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={0x0}) [619812ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86972 #0 [619829ms] -> syz_open_dev$usbmon(0x200000c0, 0x0, 0x40802) #0 [619830ms] <- syz_open_dev$usbmon=0x3 errno=14 cover=3479 #0 [619831ms] -> ioctl$MON_IOCX_MFETCH(0x3, 0xc0109207, 0x20000040) #0 [619831ms] <- ioctl$MON_IOCX_MFETCH=0xffffffffffffffff errno=11 cover=166 enabling collider #0 [619832ms] -> syz_open_dev$usbmon(0x200000c0, 0x0, 0x40802) #0 [619833ms] <- syz_open_dev$usbmon=0x3 errno=14 cover=3535 2021/11/11 16:02:42 result hanged=false: 16:02:42 executing program 0: keyctl$join(0x1, &(0x7f00000005c0)={'syz', 0x0}) [619878ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86974 #0 [619895ms] -> keyctl$join(0x1, 0x200005c0) #0 [619895ms] <- keyctl$join=0x150f427e errno=14 cover=1372 enabling collider #0 [619897ms] -> keyctl$join(0x1, 0x200005c0) #0 [619897ms] <- keyctl$join=0xf84065c errno=14 cover=1506 2021/11/11 16:02:42 result hanged=false: 16:02:42 executing program 0: syz_open_procfs(0x0, &(0x7f00000009c0)='limits\x00') [619938ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86976 #0 [619957ms] -> syz_open_procfs(0x0, 0x200009c0) #0 [619957ms] <- syz_open_procfs=0x3 errno=14 cover=2746 enabling collider #0 [619958ms] -> syz_open_procfs(0x0, 0x200009c0) #0 [619958ms] <- syz_open_procfs=0x3 errno=14 cover=2166 16:02:42 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x1, "bc5fbe55aaa5d5f32851325dd09d4241355f72fc43456a06508707b9cf9631e9f5469326c72d1c17e3"}, 0x31, 0x800) fork() 2021/11/11 16:02:42 result hanged=false: 2021/11/11 16:02:42 poll: candidates=8 inputs=0 signal=0 [620003ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86978 #0 [620020ms] -> msgsnd(0x0, 0x20000000, 0x31, 0x800) #0 [620020ms] <- msgsnd=0x0 errno=14 cover=814 #0 [620021ms] -> fork() #0 [620049ms] <- fork=0xffffffffffffffff errno=11 cover=262143 enabling collider #0 [620052ms] -> msgsnd(0x0, 0x20000000, 0x31, 0x800) #0 [620052ms] <- msgsnd=0x0 errno=14 cover=873 #0 [620052ms] -> fork() 2021/11/11 16:02:42 result hanged=false: 16:02:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r1, 0x70d, 0x0, 0x0, {0x29}}, 0x14}}, 0x0) [620091ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 86981 #0 [620109ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [620110ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6280 #0 [620115ms] -> syz_genetlink_get_family_id$ieee802154(0x200017c0, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) #0 [620116ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5565 #0 [620120ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0x4, 0x20001880, 0x0) #0 [620121ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEVKEY=0x14 errno=14 cover=1678 enabling collider #0 [620122ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [620123ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5581 #0 [620124ms] -> syz_genetlink_get_family_id$ieee802154(0x200017c0, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) #0 [620124ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=4931 pthread_create failed (errno 11) 16:02:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r1, 0x70d, 0x0, 0x0, {0x29}}, 0x14}}, 0x0) 2021/11/11 16:02:42 result hanged=false: 2021/11/11 16:02:42 #0: triaging type=7 2021/11/11 16:02:42 triaging input for call #2 sendmsg$IEEE802154_LLSEC_LIST_DEVKEY (new signal=5) [620199ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87083 #0 [620220ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [620221ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6296 #0 [620223ms] -> syz_genetlink_get_family_id$ieee802154(0x200017c0, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) #0 [620223ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5482 #0 [620225ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0x4, 0x20001880, 0x0) #0 [620225ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEVKEY=0x14 errno=14 cover=1704 16:02:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r1, 0x70d, 0x0, 0x0, {0x29}}, 0x14}}, 0x0) 2021/11/11 16:02:42 result hanged=false: [620267ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87085 #0 [620286ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [620287ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6252 #0 [620288ms] -> syz_genetlink_get_family_id$ieee802154(0x200017c0, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) #0 [620289ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5501 #0 [620291ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0x4, 0x20001880, 0x0) #0 [620291ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEVKEY=0x14 errno=14 cover=1688 16:02:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r1, 0x70d, 0x0, 0x0, {0x29}}, 0x14}}, 0x0) 2021/11/11 16:02:42 result hanged=false: [620331ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87087 #0 [620351ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [620353ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6347 #0 [620356ms] -> syz_genetlink_get_family_id$ieee802154(0x200017c0, 0x4) syz_genetlink_get_family_id(802.15.4 MAC, 4) #0 [620357ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5499 #0 [620362ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0x4, 0x20001880, 0x0) #0 [620363ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEVKEY=0x14 errno=14 cover=1753 2021/11/11 16:02:42 result hanged=false: 2021/11/11 16:02:42 added new input for call #2 sendmsg$IEEE802154_LLSEC_LIST_DEVKEY to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r1, 0x70d, 0x0, 0x0, {0x29}}, 0x14}}, 0x0) 16:02:42 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) [620407ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87089 #0 [620428ms] -> syz_io_uring_setup(0x0, 0x20000100, 0x20ffc000, 0x20ffe000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [620428ms] <- syz_io_uring_setup=0xffffffffffffffff errno=9 cover=1153 enabling collider #0 [620429ms] -> syz_io_uring_setup(0x0, 0x20000100, 0x20ffc000, 0x20ffe000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [620429ms] <- syz_io_uring_setup=0xffffffffffffffff errno=9 cover=858 16:02:43 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) mount$9p_fd(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}}) 2021/11/11 16:02:43 result hanged=false: [620470ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87091 #0 [620490ms] -> syz_mount_image$vfat(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [620498ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=15050 #0 [620500ms] -> syz_open_procfs(0xffffffffffffffff, 0x0) #0 [620501ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=6507 #0 [620507ms] -> clone3(0x20001200, 0x58) #0 [620511ms] <- clone3=0xffffffffffffffff errno=11 cover=12080 #0 [620511ms] -> socketpair$unix(0x1, 0x1, 0x0, 0x20000080) #0 [620512ms] <- socketpair$unix=0x0 errno=14 cover=2910 #0 [620512ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [620512ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [620513ms] -> mount$9p_fd(0x0, 0x20000d80, 0x20000dc0, 0x0, 0x20000300) [ 1868.018750] 9pnet: Insufficient options for proto=fd #0 [620517ms] <- mount$9p_fd=0xffffffffffffffff errno=92 cover=5136 enabling collider #0 [620518ms] -> syz_mount_image$vfat(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [620518ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=17 cover=1391 #0 [620519ms] -> syz_open_procfs(0xffffffffffffffff, 0x0) #0 [620521ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=5307 pthread_create failed (errno 11) 2021/11/11 16:02:43 result hanged=false: 2021/11/11 16:02:43 #0: triaging type=7 2021/11/11 16:02:43 triaging input for call #0 syz_mount_image$vfat (new signal=1) 16:02:43 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) mount$9p_fd(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}}) [620620ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87194 #0 [620670ms] -> syz_mount_image$vfat(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [620676ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=15193 #0 [620678ms] -> syz_open_procfs(0xffffffffffffffff, 0x0) #0 [620679ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=6372 #0 [620680ms] -> clone3(0x20001200, 0x58) #0 [620684ms] <- clone3=0xffffffffffffffff errno=11 cover=12083 #0 [620686ms] -> socketpair$unix(0x1, 0x1, 0x0, 0x20000080) #0 [620687ms] <- socketpair$unix=0x0 errno=14 cover=2893 #0 [620689ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [620689ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [620689ms] -> mount$9p_fd(0x0, 0x20000d80, 0x20000dc0, 0x0, 0x20000300) [ 1868.193354] 9pnet: Insufficient options for proto=fd #0 [620691ms] <- mount$9p_fd=0xffffffffffffffff errno=92 cover=5095 2021/11/11 16:02:43 result hanged=false: 16:02:43 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) mount$9p_fd(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}}) [620738ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87197 #0 [620757ms] -> syz_mount_image$vfat(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [620762ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=15607 #0 [620763ms] -> syz_open_procfs(0xffffffffffffffff, 0x0) #0 [620764ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=6429 #0 [620765ms] -> clone3(0x20001200, 0x58) #0 [620774ms] <- clone3=0xffffffffffffffff errno=11 cover=12243 #0 [620776ms] -> socketpair$unix(0x1, 0x1, 0x0, 0x20000080) #0 [620776ms] <- socketpair$unix=0x0 errno=14 cover=2912 #0 [620779ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [620779ms] <- fcntl$dupfd=0x5 errno=14 cover=111 [ 1868.283418] 9pnet: Insufficient options for proto=fd #0 [620780ms] -> mount$9p_fd(0x0, 0x20000d80, 0x20000dc0, 0x0, 0x20000300) #0 [620784ms] <- mount$9p_fd=0xffffffffffffffff errno=92 cover=5049 16:02:43 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) mount$9p_fd(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}}) 2021/11/11 16:02:43 result hanged=false: [620830ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87200 #0 [620849ms] -> syz_mount_image$vfat(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [620857ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=15008 #0 [620864ms] -> syz_open_procfs(0xffffffffffffffff, 0x0) #0 [620865ms] <- syz_open_procfs=0xffffffffffffffff errno=2 cover=6438 #0 [620866ms] -> clone3(0x20001200, 0x58) #0 [620869ms] <- clone3=0xffffffffffffffff errno=11 cover=12184 #0 [620871ms] -> socketpair$unix(0x1, 0x1, 0x0, 0x20000080) #0 [620871ms] <- socketpair$unix=0x0 errno=14 cover=2940 #0 [620873ms] -> fcntl$dupfd(0x3, 0x0, 0x3) #0 [620873ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [620873ms] -> mount$9p_fd(0x0, 0x20000d80, 0x20000dc0, 0x0, 0x20000300) [ 1868.378702] 9pnet: Insufficient options for proto=fd #0 [620877ms] <- mount$9p_fd=0xffffffffffffffff errno=92 cover=5114 2021/11/11 16:02:43 result hanged=false: 2021/11/11 16:02:43 added new input for call #0 syz_mount_image$vfat to corpus: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) mount$9p_fd(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}}) 16:02:43 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x1b, &(0x7f00000010c0)={@dev}, 0x14) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@loopback, r2}, 0x14) [620924ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87203 #0 [620942ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [620942ms] <- socket$inet6_udplite=0x3 errno=14 cover=1678 #0 [620943ms] -> setsockopt$inet6_IPV6_PKTINFO(0x3, 0x29, 0x1b, 0x200010c0, 0x14) #0 [620944ms] <- setsockopt$inet6_IPV6_PKTINFO=0x0 errno=14 cover=2400 #0 [620946ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [620947ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1826 #0 [620947ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8933, 0x20000140) #0 [620947ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=197 #0 [620948ms] -> setsockopt$inet6_mreq(0x3, 0x29, 0x1c, 0x20000000, 0x14) #0 [620948ms] <- setsockopt$inet6_mreq=0xffffffffffffffff errno=2 cover=187 enabling collider #0 [620949ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [620949ms] <- socket$inet6_udplite=0x3 errno=14 cover=1736 #0 [620949ms] -> setsockopt$inet6_IPV6_PKTINFO(0x3, 0x29, 0x1b, 0x200010c0, 0x14) #0 [620950ms] <- setsockopt$inet6_IPV6_PKTINFO=0x0 errno=14 cover=2361 pthread_create failed (errno 11) 16:02:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 2021/11/11 16:02:43 result hanged=false: [621024ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87305 #0 [621041ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [621042ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6365 #0 [621044ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [621045ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5499 #0 [621046ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000240, 0x5) syz_genetlink_get_family_id(NLBL_UNLBL, 5) #0 [621046ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4651 #0 [621050ms] -> sendmsg$NLBL_UNLABEL_C_STATICADD(0x4, 0x20000140, 0x0) #0 [621050ms] <- sendmsg$NLBL_UNLABEL_C_STATICADD=0x14 errno=14 cover=1935 enabling collider #0 [621052ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [621052ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5490 #0 [621053ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [621053ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5469 pthread_create failed (errno 11) 16:02:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 2021/11/11 16:02:43 result hanged=false: 2021/11/11 16:02:43 #0: triaging type=7 2021/11/11 16:02:43 triaging input for call #3 sendmsg$NLBL_UNLABEL_C_STATICADD (new signal=10) [621122ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87407 #0 [621140ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [621141ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6314 #0 [621143ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [621145ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5533 #0 [621146ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000240, 0x5) syz_genetlink_get_family_id(NLBL_UNLBL, 5) #0 [621147ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4713 #0 [621151ms] -> sendmsg$NLBL_UNLABEL_C_STATICADD(0x4, 0x20000140, 0x0) #0 [621152ms] <- sendmsg$NLBL_UNLABEL_C_STATICADD=0x14 errno=14 cover=1858 2021/11/11 16:02:43 result hanged=false: 16:02:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [621197ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87409 #0 [621214ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [621215ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6405 #0 [621217ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [621217ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5537 #0 [621220ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000240, 0x5) syz_genetlink_get_family_id(NLBL_UNLBL, 5) #0 [621222ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4706 #0 [621224ms] -> sendmsg$NLBL_UNLABEL_C_STATICADD(0x4, 0x20000140, 0x0) #0 [621225ms] <- sendmsg$NLBL_UNLABEL_C_STATICADD=0x14 errno=14 cover=1853 16:02:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 2021/11/11 16:02:43 result hanged=false: [621265ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87411 #0 [621283ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [621284ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6338 #0 [621285ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [621286ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5457 #0 [621287ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000240, 0x5) syz_genetlink_get_family_id(NLBL_UNLBL, 5) #0 [621288ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4631 #0 [621289ms] -> sendmsg$NLBL_UNLABEL_C_STATICADD(0x4, 0x20000140, 0x0) #0 [621289ms] <- sendmsg$NLBL_UNLABEL_C_STATICADD=0x14 errno=14 cover=1828 2021/11/11 16:02:43 result hanged=false: 2021/11/11 16:02:43 added new input for call #3 sendmsg$NLBL_UNLABEL_C_STATICADD to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 16:02:43 executing program 0: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) [621330ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87413 #0 [621348ms] -> add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) #0 [621348ms] <- add_key$keyring=0xffffffffffffffff errno=14 cover=418 enabling collider #0 [621348ms] -> add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) #0 [621349ms] <- add_key$keyring=0xffffffffffffffff errno=14 cover=419 16:02:43 executing program 0: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='reno\x00', 0x5) 2021/11/11 16:02:43 result hanged=false: [621393ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87415 #0 [621410ms] -> openat$tcp_congestion(0xffffffffffffff9c, 0x20000000, 0x1, 0x0) #0 [621410ms] <- openat$tcp_congestion=0x3 errno=14 cover=1716 #0 [621411ms] -> write$tcp_congestion(0x3, 0x20000040, 0x5) #0 [621411ms] <- write$tcp_congestion=0x5 errno=14 cover=525 enabling collider #0 [621411ms] -> openat$tcp_congestion(0xffffffffffffff9c, 0x20000000, 0x1, 0x0) #0 [621412ms] <- openat$tcp_congestion=0x3 errno=14 cover=1705 2021/11/11 16:02:43 result hanged=false: 16:02:43 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x81, 0x1000}, {0x0, 0xfff8}], 0x2, 0x0) unshare(0x40000) 2021/11/11 16:02:44 poll: candidates=8 inputs=0 signal=0 [621454ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87417 #0 [621479ms] -> unshare(0x8000000) #0 [621485ms] <- unshare=0x0 errno=14 cover=11741 #0 [621486ms] -> semget$private(0x0, 0x4000, 0x0) #0 [621488ms] <- semget$private=0x0 errno=14 cover=16849 #0 [621488ms] -> semtimedop(0x0, 0x20000100, 0x2, 0x0) #0 [621489ms] <- semtimedop=0x0 errno=14 cover=501 #0 [621489ms] -> unshare(0x40000) #0 [621493ms] <- unshare=0x0 errno=14 cover=229712 enabling collider #0 [621494ms] -> unshare(0x8000000) #0 [621498ms] <- unshare=0x0 errno=14 cover=12017 #0 [621498ms] -> semget$private(0x0, 0x4000, 0x0) #0 [621500ms] <- semget$private=0x0 errno=14 cover=16899 pthread_create failed (errno 11) 16:02:44 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x81, 0x1000}, {0x0, 0xfff8}], 0x2, 0x0) unshare(0x40000) 2021/11/11 16:02:44 result hanged=false: 2021/11/11 16:02:44 #0: triaging type=7 2021/11/11 16:02:44 triaging input for call #3 unshare (new signal=1) [621573ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87519 #0 [621592ms] -> unshare(0x8000000) #0 [621595ms] <- unshare=0x0 errno=14 cover=11811 #0 [621598ms] -> semget$private(0x0, 0x4000, 0x0) #0 [621600ms] <- semget$private=0x0 errno=14 cover=16810 #0 [621602ms] -> semtimedop(0x0, 0x20000100, 0x2, 0x0) #0 [621602ms] <- semtimedop=0x0 errno=14 cover=501 #0 [621606ms] -> unshare(0x40000) #0 [621612ms] <- unshare=0x0 errno=14 cover=229705 2021/11/11 16:02:44 result hanged=false: 16:02:44 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x81, 0x1000}, {0x0, 0xfff8}], 0x2, 0x0) unshare(0x40000) [621660ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87521 #0 [621678ms] -> unshare(0x8000000) #0 [621683ms] <- unshare=0x0 errno=14 cover=11816 #0 [621686ms] -> semget$private(0x0, 0x4000, 0x0) #0 [621688ms] <- semget$private=0x0 errno=14 cover=16821 #0 [621693ms] -> semtimedop(0x0, 0x20000100, 0x2, 0x0) #0 [621693ms] <- semtimedop=0x0 errno=14 cover=490 #0 [621696ms] -> unshare(0x40000) #0 [621701ms] <- unshare=0x0 errno=14 cover=229735 2021/11/11 16:02:44 result hanged=false: 16:02:44 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x81, 0x1000}, {0x0, 0xfff8}], 0x2, 0x0) unshare(0x40000) [621750ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87523 #0 [621768ms] -> unshare(0x8000000) #0 [621772ms] <- unshare=0x0 errno=14 cover=11668 #0 [621774ms] -> semget$private(0x0, 0x4000, 0x0) #0 [621776ms] <- semget$private=0x0 errno=14 cover=16824 #0 [621778ms] -> semtimedop(0x0, 0x20000100, 0x2, 0x0) #0 [621778ms] <- semtimedop=0x0 errno=14 cover=490 #0 [621781ms] -> unshare(0x40000) #0 [621786ms] <- unshare=0x0 errno=14 cover=229690 2021/11/11 16:02:44 result hanged=false: 2021/11/11 16:02:44 added new input for call #3 unshare to corpus: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x81, 0x1000}, {0x0, 0xfff8}], 0x2, 0x0) unshare(0x40000) 16:02:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001140)={0xfffffffa}, 0x4) [621844ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87525 #0 [621862ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [621863ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1697 #0 [621866ms] -> setsockopt$inet_icmp_ICMP_FILTER(0x3, 0x1, 0x1, 0x20001140, 0x4) #0 [621866ms] <- setsockopt$inet_icmp_ICMP_FILTER=0x0 errno=14 cover=191 enabling collider #0 [621867ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [621867ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1761 #0 [621868ms] -> setsockopt$inet_icmp_ICMP_FILTER(0x3, 0x1, 0x1, 0x20001140, 0x4) #0 [621868ms] <- setsockopt$inet_icmp_ICMP_FILTER=0xffffffffffffffff errno=9 cover=51 2021/11/11 16:02:44 result hanged=false: 16:02:44 executing program 0: sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)) rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x13, 0x3, 0x1}) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x60300, 0x0) r1 = gettid() sched_setparam(r1, &(0x7f00000002c0)=0x1) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000300)={0x3f}) rt_tgsigqueueinfo(r1, 0x0, 0x2d, &(0x7f0000000340)={0x0, 0x10000, 0x3f}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f00000008c0)={0x0, 0xb}) fork() gettid() [621910ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87527 #0 [621930ms] -> sched_getaffinity(0xffffffffffffffff, 0x8, 0x20000000) #0 [621930ms] <- sched_getaffinity=0xffffffffffffffff errno=3 cover=45 #0 [621931ms] -> rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x0, 0x20000040) #0 [621931ms] <- rt_tgsigqueueinfo=0xffffffffffffffff errno=22 cover=60 #0 [621931ms] -> ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) #0 [621931ms] <- ioctl$PTP_PIN_GETFUNC2=0xffffffffffffffff errno=9 cover=45 #0 [621931ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000280, 0x60300, 0x0) #0 [621932ms] <- openat$ptp0=0x3 errno=14 cover=1100 #0 [621932ms] -> gettid() #0 [621932ms] <- gettid=0x155e8 errno=14 cover=48 #0 [621932ms] -> sched_setparam(0x155e8, 0x200002c0) #0 [621932ms] <- sched_setparam=0xffffffffffffffff errno=22 cover=76 #0 [621932ms] -> ioctl$PTP_EXTTS_REQUEST2(0x3, 0x40103d0b, 0x20000300) #0 [621933ms] <- ioctl$PTP_EXTTS_REQUEST2=0xffffffffffffffff errno=22 cover=2444 #0 [621933ms] -> rt_tgsigqueueinfo(0x155e8, 0x0, 0x2d, 0x20000340) #0 [621933ms] <- rt_tgsigqueueinfo=0xffffffffffffffff errno=22 cover=237 #0 [621933ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000880, 0x0, 0x0) #0 [621933ms] <- openat$ptp0=0x4 errno=14 cover=1089 #0 [621933ms] -> ioctl$PTP_EXTTS_REQUEST(0x4, 0x40103d02, 0x200008c0) #0 [621933ms] <- ioctl$PTP_EXTTS_REQUEST=0xffffffffffffffff errno=22 cover=134 #0 [621933ms] -> fork() #0 [621952ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [621955ms] -> gettid() #0 [621956ms] <- gettid=0x155e8 errno=14 cover=48 enabling collider #0 [621956ms] -> sched_getaffinity(0xffffffffffffffff, 0x8, 0x20000000) #0 [621956ms] <- sched_getaffinity=0xffffffffffffffff errno=3 cover=45 #0 [621957ms] -> rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x0, 0x20000040) #0 [621957ms] <- rt_tgsigqueueinfo=0xffffffffffffffff errno=22 cover=60 pthread_create failed (errno 11) 16:02:44 executing program 0: sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)) rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x13, 0x3, 0x1}) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x60300, 0x0) r1 = gettid() sched_setparam(r1, &(0x7f00000002c0)=0x1) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000300)={0x3f}) rt_tgsigqueueinfo(r1, 0x0, 0x2d, &(0x7f0000000340)={0x0, 0x10000, 0x3f}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f00000008c0)={0x0, 0xb}) fork() gettid() 2021/11/11 16:02:44 result hanged=false: 2021/11/11 16:02:44 #0: triaging type=7 2021/11/11 16:02:44 triaging input for call #9 ioctl$PTP_EXTTS_REQUEST (new signal=5) [622033ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87630 #0 [622052ms] -> sched_getaffinity(0xffffffffffffffff, 0x8, 0x20000000) #0 [622052ms] <- sched_getaffinity=0xffffffffffffffff errno=3 cover=45 #0 [622053ms] -> rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x0, 0x20000040) #0 [622053ms] <- rt_tgsigqueueinfo=0xffffffffffffffff errno=22 cover=60 #0 [622053ms] -> ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) #0 [622053ms] <- ioctl$PTP_PIN_GETFUNC2=0xffffffffffffffff errno=9 cover=45 #0 [622053ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000280, 0x60300, 0x0) #0 [622053ms] <- openat$ptp0=0x3 errno=14 cover=1180 #0 [622053ms] -> gettid() #0 [622053ms] <- gettid=0x1564f errno=14 cover=48 #0 [622053ms] -> sched_setparam(0x1564f, 0x200002c0) #0 [622054ms] <- sched_setparam=0xffffffffffffffff errno=22 cover=76 #0 [622054ms] -> ioctl$PTP_EXTTS_REQUEST2(0x3, 0x40103d0b, 0x20000300) #0 [622054ms] <- ioctl$PTP_EXTTS_REQUEST2=0xffffffffffffffff errno=22 cover=136 #0 [622054ms] -> rt_tgsigqueueinfo(0x1564f, 0x0, 0x2d, 0x20000340) #0 [622054ms] <- rt_tgsigqueueinfo=0xffffffffffffffff errno=22 cover=237 #0 [622054ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000880, 0x0, 0x0) #0 [622054ms] <- openat$ptp0=0x4 errno=14 cover=1077 #0 [622054ms] -> ioctl$PTP_EXTTS_REQUEST(0x4, 0x40103d02, 0x200008c0) #0 [622054ms] <- ioctl$PTP_EXTTS_REQUEST=0xffffffffffffffff errno=22 cover=134 #0 [622054ms] -> fork() #0 [622075ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [622089ms] -> gettid() #0 [622089ms] <- gettid=0x1564f errno=14 cover=48 16:02:44 executing program 0: sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)) rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x13, 0x3, 0x1}) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x60300, 0x0) r1 = gettid() sched_setparam(r1, &(0x7f00000002c0)=0x1) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000300)={0x3f}) rt_tgsigqueueinfo(r1, 0x0, 0x2d, &(0x7f0000000340)={0x0, 0x10000, 0x3f}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f00000008c0)={0x0, 0xb}) fork() gettid() 2021/11/11 16:02:44 result hanged=false: [622129ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87633 #0 [622148ms] -> sched_getaffinity(0xffffffffffffffff, 0x8, 0x20000000) #0 [622151ms] <- sched_getaffinity=0xffffffffffffffff errno=3 cover=45 #0 [622151ms] -> rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x0, 0x20000040) #0 [622151ms] <- rt_tgsigqueueinfo=0xffffffffffffffff errno=22 cover=60 #0 [622151ms] -> ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) #0 [622151ms] <- ioctl$PTP_PIN_GETFUNC2=0xffffffffffffffff errno=9 cover=45 #0 [622152ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000280, 0x60300, 0x0) #0 [622152ms] <- openat$ptp0=0x3 errno=14 cover=1097 #0 [622152ms] -> gettid() #0 [622152ms] <- gettid=0x15652 errno=14 cover=48 #0 [622152ms] -> sched_setparam(0x15652, 0x200002c0) #0 [622152ms] <- sched_setparam=0xffffffffffffffff errno=22 cover=76 #0 [622153ms] -> ioctl$PTP_EXTTS_REQUEST2(0x3, 0x40103d0b, 0x20000300) #0 [622153ms] <- ioctl$PTP_EXTTS_REQUEST2=0xffffffffffffffff errno=22 cover=136 #0 [622153ms] -> rt_tgsigqueueinfo(0x15652, 0x0, 0x2d, 0x20000340) #0 [622153ms] <- rt_tgsigqueueinfo=0xffffffffffffffff errno=22 cover=237 #0 [622153ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000880, 0x0, 0x0) #0 [622153ms] <- openat$ptp0=0x4 errno=14 cover=1089 #0 [622153ms] -> ioctl$PTP_EXTTS_REQUEST(0x4, 0x40103d02, 0x200008c0) #0 [622154ms] <- ioctl$PTP_EXTTS_REQUEST=0xffffffffffffffff errno=22 cover=134 #0 [622154ms] -> fork() #0 [622171ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [622187ms] -> gettid() #0 [622187ms] <- gettid=0x15652 errno=14 cover=48 16:02:44 executing program 0: sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)) rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x13, 0x3, 0x1}) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x60300, 0x0) r1 = gettid() sched_setparam(r1, &(0x7f00000002c0)=0x1) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000300)={0x3f}) rt_tgsigqueueinfo(r1, 0x0, 0x2d, &(0x7f0000000340)={0x0, 0x10000, 0x3f}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f00000008c0)={0x0, 0xb}) fork() gettid() 2021/11/11 16:02:44 result hanged=false: [622229ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87636 #0 [622248ms] -> sched_getaffinity(0xffffffffffffffff, 0x8, 0x20000000) #0 [622248ms] <- sched_getaffinity=0xffffffffffffffff errno=3 cover=45 #0 [622249ms] -> rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x0, 0x20000040) #0 [622249ms] <- rt_tgsigqueueinfo=0xffffffffffffffff errno=22 cover=60 #0 [622251ms] -> ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) #0 [622251ms] <- ioctl$PTP_PIN_GETFUNC2=0xffffffffffffffff errno=9 cover=45 #0 [622252ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000280, 0x60300, 0x0) #0 [622252ms] <- openat$ptp0=0x3 errno=14 cover=1118 #0 [622253ms] -> gettid() #0 [622253ms] <- gettid=0x15655 errno=14 cover=48 #0 [622254ms] -> sched_setparam(0x15655, 0x200002c0) #0 [622254ms] <- sched_setparam=0xffffffffffffffff errno=22 cover=76 #0 [622255ms] -> ioctl$PTP_EXTTS_REQUEST2(0x3, 0x40103d0b, 0x20000300) #0 [622255ms] <- ioctl$PTP_EXTTS_REQUEST2=0xffffffffffffffff errno=22 cover=136 #0 [622255ms] -> rt_tgsigqueueinfo(0x15655, 0x0, 0x2d, 0x20000340) #0 [622255ms] <- rt_tgsigqueueinfo=0xffffffffffffffff errno=22 cover=237 #0 [622256ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000880, 0x0, 0x0) #0 [622256ms] <- openat$ptp0=0x4 errno=14 cover=1121 #0 [622256ms] -> ioctl$PTP_EXTTS_REQUEST(0x4, 0x40103d02, 0x200008c0) #0 [622256ms] <- ioctl$PTP_EXTTS_REQUEST=0xffffffffffffffff errno=22 cover=134 #0 [622257ms] -> fork() #0 [622274ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [622289ms] -> gettid() #0 [622290ms] <- gettid=0x15655 errno=14 cover=48 2021/11/11 16:02:44 result hanged=false: 2021/11/11 16:02:44 added new input for call #9 ioctl$PTP_EXTTS_REQUEST to corpus: sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)) rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x13, 0x3, 0x1}) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x60300, 0x0) r1 = gettid() sched_setparam(r1, &(0x7f00000002c0)=0x1) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000300)={0x3f}) rt_tgsigqueueinfo(r1, 0x0, 0x2d, &(0x7f0000000340)={0x0, 0x10000, 0x3f}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f00000008c0)={0x0, 0xb}) fork() gettid() 16:02:44 executing program 0: sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)) rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x13, 0x3, 0x1}) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x60300, 0x0) r1 = gettid() sched_setparam(r1, &(0x7f00000002c0)=0x1) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000300)={0x3f}) rt_tgsigqueueinfo(r1, 0x0, 0x2d, &(0x7f0000000340)={0x0, 0x10000, 0x3f}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f00000008c0)={0x0, 0xb}) fork() gettid() 2021/11/11 16:02:44 #0: triaging type=7 2021/11/11 16:02:44 triaging input for call #6 ioctl$PTP_EXTTS_REQUEST2 (new signal=4) [622331ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87639 #0 [622351ms] -> sched_getaffinity(0xffffffffffffffff, 0x8, 0x20000000) #0 [622351ms] <- sched_getaffinity=0xffffffffffffffff errno=3 cover=45 #0 [622351ms] -> rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x0, 0x20000040) #0 [622351ms] <- rt_tgsigqueueinfo=0xffffffffffffffff errno=22 cover=60 #0 [622351ms] -> ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) #0 [622352ms] <- ioctl$PTP_PIN_GETFUNC2=0xffffffffffffffff errno=9 cover=45 #0 [622352ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000280, 0x60300, 0x0) #0 [622352ms] <- openat$ptp0=0x3 errno=14 cover=1118 #0 [622352ms] -> gettid() #0 [622352ms] <- gettid=0x15658 errno=14 cover=48 #0 [622352ms] -> sched_setparam(0x15658, 0x200002c0) #0 [622352ms] <- sched_setparam=0xffffffffffffffff errno=22 cover=76 #0 [622354ms] -> ioctl$PTP_EXTTS_REQUEST2(0x3, 0x40103d0b, 0x20000300) #0 [622354ms] <- ioctl$PTP_EXTTS_REQUEST2=0xffffffffffffffff errno=22 cover=136 #0 [622354ms] -> rt_tgsigqueueinfo(0x15658, 0x0, 0x2d, 0x20000340) #0 [622354ms] <- rt_tgsigqueueinfo=0xffffffffffffffff errno=22 cover=237 #0 [622354ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000880, 0x0, 0x0) #0 [622354ms] <- openat$ptp0=0x4 errno=14 cover=1121 #0 [622354ms] -> ioctl$PTP_EXTTS_REQUEST(0x4, 0x40103d02, 0x200008c0) #0 [622354ms] <- ioctl$PTP_EXTTS_REQUEST=0xffffffffffffffff errno=22 cover=134 #0 [622354ms] -> fork() #0 [622375ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [622391ms] -> gettid() #0 [622391ms] <- gettid=0x15658 errno=14 cover=48 2021/11/11 16:02:44 result hanged=false: 16:02:44 executing program 0: sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)) rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x13, 0x3, 0x1}) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x60300, 0x0) r1 = gettid() sched_setparam(r1, &(0x7f00000002c0)=0x1) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000300)={0x3f}) rt_tgsigqueueinfo(r1, 0x0, 0x2d, &(0x7f0000000340)={0x0, 0x10000, 0x3f}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f00000008c0)={0x0, 0xb}) fork() gettid() [622432ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87642 #0 [622449ms] -> sched_getaffinity(0xffffffffffffffff, 0x8, 0x20000000) #0 [622449ms] <- sched_getaffinity=0xffffffffffffffff errno=3 cover=45 #0 [622450ms] -> rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x0, 0x20000040) #0 [622450ms] <- rt_tgsigqueueinfo=0xffffffffffffffff errno=22 cover=60 #0 [622450ms] -> ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) #0 [622450ms] <- ioctl$PTP_PIN_GETFUNC2=0xffffffffffffffff errno=9 cover=45 #0 [622452ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000280, 0x60300, 0x0) #0 [622452ms] <- openat$ptp0=0x3 errno=14 cover=1118 #0 [622452ms] -> gettid() #0 [622452ms] <- gettid=0x1565b errno=14 cover=48 #0 [622453ms] -> sched_setparam(0x1565b, 0x200002c0) #0 [622453ms] <- sched_setparam=0xffffffffffffffff errno=22 cover=76 #0 [622453ms] -> ioctl$PTP_EXTTS_REQUEST2(0x3, 0x40103d0b, 0x20000300) #0 [622453ms] <- ioctl$PTP_EXTTS_REQUEST2=0xffffffffffffffff errno=22 cover=136 #0 [622453ms] -> rt_tgsigqueueinfo(0x1565b, 0x0, 0x2d, 0x20000340) #0 [622453ms] <- rt_tgsigqueueinfo=0xffffffffffffffff errno=22 cover=237 #0 [622453ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000880, 0x0, 0x0) #0 [622453ms] <- openat$ptp0=0x4 errno=14 cover=1088 #0 [622454ms] -> ioctl$PTP_EXTTS_REQUEST(0x4, 0x40103d02, 0x200008c0) #0 [622454ms] <- ioctl$PTP_EXTTS_REQUEST=0xffffffffffffffff errno=22 cover=134 #0 [622454ms] -> fork() #0 [622472ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [622486ms] -> gettid() #0 [622486ms] <- gettid=0x1565b errno=14 cover=48 16:02:45 executing program 0: sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)) rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x13, 0x3, 0x1}) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x60300, 0x0) r1 = gettid() sched_setparam(r1, &(0x7f00000002c0)=0x1) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000300)={0x3f}) rt_tgsigqueueinfo(r1, 0x0, 0x2d, &(0x7f0000000340)={0x0, 0x10000, 0x3f}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f00000008c0)={0x0, 0xb}) fork() gettid() 2021/11/11 16:02:45 result hanged=false: [622527ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87645 #0 [622543ms] -> sched_getaffinity(0xffffffffffffffff, 0x8, 0x20000000) #0 [622543ms] <- sched_getaffinity=0xffffffffffffffff errno=3 cover=45 #0 [622544ms] -> rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x0, 0x20000040) #0 [622544ms] <- rt_tgsigqueueinfo=0xffffffffffffffff errno=22 cover=60 #0 [622544ms] -> ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) #0 [622544ms] <- ioctl$PTP_PIN_GETFUNC2=0xffffffffffffffff errno=9 cover=45 #0 [622544ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000280, 0x60300, 0x0) #0 [622546ms] <- openat$ptp0=0x3 errno=14 cover=1118 #0 [622550ms] -> gettid() #0 [622550ms] <- gettid=0x1565e errno=14 cover=48 #0 [622551ms] -> sched_setparam(0x1565e, 0x200002c0) #0 [622551ms] <- sched_setparam=0xffffffffffffffff errno=22 cover=76 #0 [622552ms] -> ioctl$PTP_EXTTS_REQUEST2(0x3, 0x40103d0b, 0x20000300) #0 [622552ms] <- ioctl$PTP_EXTTS_REQUEST2=0xffffffffffffffff errno=22 cover=136 #0 [622553ms] -> rt_tgsigqueueinfo(0x1565e, 0x0, 0x2d, 0x20000340) #0 [622553ms] <- rt_tgsigqueueinfo=0xffffffffffffffff errno=22 cover=237 #0 [622554ms] -> openat$ptp0(0xffffffffffffff9c, 0x20000880, 0x0, 0x0) #0 [622554ms] <- openat$ptp0=0x4 errno=14 cover=1153 #0 [622555ms] -> ioctl$PTP_EXTTS_REQUEST(0x4, 0x40103d02, 0x200008c0) #0 [622556ms] <- ioctl$PTP_EXTTS_REQUEST=0xffffffffffffffff errno=22 cover=134 #0 [622556ms] -> fork() #0 [622576ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [622591ms] -> gettid() #0 [622593ms] <- gettid=0x1565e errno=14 cover=48 2021/11/11 16:02:45 result hanged=false: 2021/11/11 16:02:45 added new input for call #6 ioctl$PTP_EXTTS_REQUEST2 to corpus: sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)) rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x13, 0x3, 0x1}) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x60300, 0x0) r1 = gettid() sched_setparam(r1, &(0x7f00000002c0)=0x1) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000300)={0x3f}) rt_tgsigqueueinfo(r1, 0x0, 0x2d, &(0x7f0000000340)={0x0, 0x10000, 0x3f}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f00000008c0)={0x0, 0xb}) fork() gettid() 16:02:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x731}, 0x14}}, 0x0) [622635ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87648 #0 [622660ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [622661ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6355 #0 [622662ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [622663ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5479 #0 [622664ms] -> syz_genetlink_get_family_id$ieee802154(0x200002c0, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [622664ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5477 #0 [622665ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [622666ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5423 #0 [622666ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [622667ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0xffffffffffffffff errno=14 cover=3373 #0 [622668ms] -> sendmsg$IEEE802154_LIST_PHY(0x4, 0x20000180, 0x0) #0 [622668ms] <- sendmsg$IEEE802154_LIST_PHY=0x14 errno=14 cover=1996 enabling collider #0 [622669ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [622671ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=10475 #0 [622672ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [622675ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5644 pthread_create failed (errno 11) 16:02:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x731}, 0x14}}, 0x0) 2021/11/11 16:02:45 result hanged=false: 2021/11/11 16:02:45 #0: triaging type=7 2021/11/11 16:02:45 triaging input for call #5 sendmsg$IEEE802154_LIST_PHY (new signal=1) [622744ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87750 #0 [622763ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [622764ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6407 #0 [622765ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [622765ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5546 #0 [622766ms] -> syz_genetlink_get_family_id$ieee802154(0x200002c0, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [622766ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5456 #0 [622767ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [622768ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5392 #0 [622769ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [622770ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0xffffffffffffffff errno=14 cover=3473 #0 [622770ms] -> sendmsg$IEEE802154_LIST_PHY(0x4, 0x20000180, 0x0) #0 [622771ms] <- sendmsg$IEEE802154_LIST_PHY=0x14 errno=14 cover=2007 16:02:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x731}, 0x14}}, 0x0) 2021/11/11 16:02:45 result hanged=false: [622810ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87752 #0 [622828ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [622829ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6343 #0 [622831ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [622832ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5521 #0 [622833ms] -> syz_genetlink_get_family_id$ieee802154(0x200002c0, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [622834ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5492 #0 [622835ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [622836ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5432 #0 [622837ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [622837ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0xffffffffffffffff errno=14 cover=2915 #0 [622839ms] -> sendmsg$IEEE802154_LIST_PHY(0x4, 0x20000180, 0x0) #0 [622839ms] <- sendmsg$IEEE802154_LIST_PHY=0x14 errno=14 cover=2021 16:02:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x731}, 0x14}}, 0x0) 2021/11/11 16:02:45 result hanged=false: [622880ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87754 #0 [622898ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [622900ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6292 #0 [622901ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [622902ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5490 #0 [622903ms] -> syz_genetlink_get_family_id$ieee802154(0x200002c0, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [622906ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5479 #0 [622907ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [622910ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5676 #0 [622911ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [622912ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0xffffffffffffffff errno=14 cover=2800 #0 [622913ms] -> sendmsg$IEEE802154_LIST_PHY(0x4, 0x20000180, 0x0) #0 [622914ms] <- sendmsg$IEEE802154_LIST_PHY=0x14 errno=14 cover=2013 2021/11/11 16:02:45 result hanged=false: 2021/11/11 16:02:45 added new input for call #5 sendmsg$IEEE802154_LIST_PHY to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x731}, 0x14}}, 0x0) 16:02:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000ec0)='./file0\x00', 0x4000, 0x0) [622955ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87756 #0 [622973ms] -> syz_mount_image$ext4(0x0, 0x20000680, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [622977ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=15226 #0 [622978ms] -> open$dir(0x20000ec0, 0x4000, 0x0) #0 [622978ms] <- open$dir=0xffffffffffffffff errno=22 cover=1192 enabling collider #0 [622978ms] -> syz_mount_image$ext4(0x0, 0x20000680, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [622979ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1397 #0 [622979ms] -> open$dir(0x20000ec0, 2021/11/11 16:02:45 result hanged=false: 2021/11/11 16:02:45 #0: triaging type=7 16:02:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000ec0)='./file0\x00', 0x4000, 0x0) 2021/11/11 16:02:45 triaging input for call #0 syz_mount_image$ext4 (new signal=2) [623022ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87758 #0 [623038ms] -> syz_mount_image$ext4(0x0, 0x20000680, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [623043ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=14941 #0 [623045ms] -> open$dir(0x20000ec0, 0x4000, 0x0) #0 [623045ms] <- open$dir=0xffffffffffffffff errno=22 cover=1301 16:02:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000ec0)='./file0\x00', 0x4000, 0x0) 2021/11/11 16:02:45 result hanged=false: [623089ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87760 #0 [623106ms] -> syz_mount_image$ext4(0x0, 0x20000680, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [623113ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=14975 #0 [623115ms] -> open$dir(0x20000ec0, 0x4000, 0x0) #0 [623116ms] <- open$dir=0xffffffffffffffff errno=22 cover=1267 16:02:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000ec0)='./file0\x00', 0x4000, 0x0) 2021/11/11 16:02:45 result hanged=false: [623159ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87762 #0 [623178ms] -> syz_mount_image$ext4(0x0, 0x20000680, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [623184ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=14883 #0 [623186ms] -> open$dir(0x20000ec0, 0x4000, 0x0) #0 [623186ms] <- open$dir=0xffffffffffffffff errno=22 cover=1192 2021/11/11 16:02:45 result hanged=false: 2021/11/11 16:02:45 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000ec0)='./file0\x00', 0x4000, 0x0) 16:02:45 executing program 0: syz_open_dev$mouse(&(0x7f00000002c0), 0x0, 0x58002) [623247ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87764 #0 [623267ms] -> syz_open_dev$mouse(0x200002c0, 0x0, 0x58002) #0 [623267ms] <- syz_open_dev$mouse=0xffffffffffffffff errno=20 cover=1175 enabling collider #0 [623268ms] -> syz_open_dev$mouse(0x200002c0, 0x0, 0x58002) #0 [623268ms] <- syz_open_dev$mouse=0xffffffffffffffff errno=20 cover=1206 16:02:45 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)=0x101) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0x101) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0x101) 2021/11/11 16:02:45 result hanged=false: [623308ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87766 #0 [623331ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623331ms] <- openat$random=0x3 errno=14 cover=1091 #0 [623332ms] -> ioctl$int_in(0x3, 0x5452, 0x20000500) #0 [623332ms] <- ioctl$int_in=0x0 errno=14 cover=146 #0 [623332ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623333ms] <- openat$random=0x4 errno=14 cover=1156 #0 [623333ms] -> ioctl$int_in(0x4, 0x5452, 0x20000500) #0 [623334ms] <- ioctl$int_in=0x0 errno=14 cover=148 #0 [623335ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623335ms] <- openat$random=0x5 errno=14 cover=1148 #0 [623339ms] -> ioctl$int_in(0x5, 0x5452, 0x20000500) #0 [623339ms] <- ioctl$int_in=0x0 errno=14 cover=150 enabling collider #0 [623340ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623340ms] <- openat$random=0x3 errno=14 cover=1159 #0 [623341ms] -> ioctl$int_in(0x3, 0x5452, 0x20000500) #0 [623341ms] <- ioctl$int_in=0x0 errno=14 cover=146 pthread_create failed (errno 11) 2021/11/11 16:02:45 result hanged=false: 16:02:45 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)=0x101) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0x101) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0x101) 2021/11/11 16:02:45 #0: triaging type=7 2021/11/11 16:02:45 triaging input for call #5 ioctl$int_in (new signal=1) [623413ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87868 #0 [623431ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623431ms] <- openat$random=0x3 errno=14 cover=1101 #0 [623435ms] -> ioctl$int_in(0x3, 0x5452, 0x20000500) #0 [623435ms] <- ioctl$int_in=0x0 errno=14 cover=146 #0 [623437ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623437ms] <- openat$random=0x4 errno=14 cover=1160 #0 [623439ms] -> ioctl$int_in(0x4, 0x5452, 0x20000500) #0 [623439ms] <- ioctl$int_in=0x0 errno=14 cover=148 #0 [623440ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623440ms] <- openat$random=0x5 errno=14 cover=1135 #0 [623441ms] -> ioctl$int_in(0x5, 0x5452, 0x20000500) #0 [623441ms] <- ioctl$int_in=0x0 errno=14 cover=150 16:02:46 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)=0x101) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0x101) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0x101) 2021/11/11 16:02:46 result hanged=false: [623480ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87870 #0 [623498ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623499ms] <- openat$random=0x3 errno=14 cover=1113 #0 [623500ms] -> ioctl$int_in(0x3, 0x5452, 0x20000500) #0 [623500ms] <- ioctl$int_in=0x0 errno=14 cover=146 #0 [623500ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623500ms] <- openat$random=0x4 errno=14 cover=1134 #0 [623500ms] -> ioctl$int_in(0x4, 0x5452, 0x20000500) #0 [623500ms] <- ioctl$int_in=0x0 errno=14 cover=148 #0 [623501ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623501ms] <- openat$random=0x5 errno=14 cover=1091 #0 [623501ms] -> ioctl$int_in(0x5, 0x5452, 0x20000500) #0 [623501ms] <- ioctl$int_in=0x0 errno=14 cover=150 16:02:46 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)=0x101) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0x101) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0x101) 2021/11/11 16:02:46 result hanged=false: [623541ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87872 #0 [623559ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623559ms] <- openat$random=0x3 errno=14 cover=1080 #0 [623560ms] -> ioctl$int_in(0x3, 0x5452, 0x20000500) #0 [623560ms] <- ioctl$int_in=0x0 errno=14 cover=157 #0 [623560ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623560ms] <- openat$random=0x4 errno=14 cover=1167 #0 [623561ms] -> ioctl$int_in(0x4, 0x5452, 0x20000500) #0 [623561ms] <- ioctl$int_in=0x0 errno=14 cover=148 #0 [623561ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623561ms] <- openat$random=0x5 errno=14 cover=1091 #0 [623562ms] -> ioctl$int_in(0x5, 0x5452, 0x20000500) #0 [623562ms] <- ioctl$int_in=0x0 errno=14 cover=150 2021/11/11 16:02:46 result hanged=false: 2021/11/11 16:02:46 added new input for call #5 ioctl$int_in to corpus: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)=0x101) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0x101) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0x101) 16:02:46 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)=0x101) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0x101) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0x101) 2021/11/11 16:02:46 #0: triaging type=7 2021/11/11 16:02:46 triaging input for call #3 ioctl$int_in (new signal=2) [623605ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87874 #0 [623629ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623630ms] <- openat$random=0x3 errno=14 cover=1102 #0 [623631ms] -> ioctl$int_in(0x3, 0x5452, 0x20000500) #0 [623631ms] <- ioctl$int_in=0x0 errno=14 cover=146 #0 [623634ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623635ms] <- openat$random=0x4 errno=14 cover=1145 #0 [623635ms] -> ioctl$int_in(0x4, 0x5452, 0x20000500) #0 [623635ms] <- ioctl$int_in=0x0 errno=14 cover=148 #0 [623635ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623636ms] <- openat$random=0x5 errno=14 cover=1145 #0 [623636ms] -> ioctl$int_in(0x5, 0x5452, 0x20000500) #0 [623636ms] <- ioctl$int_in=0x0 errno=14 cover=161 16:02:46 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)=0x101) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0x101) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0x101) 2021/11/11 16:02:46 result hanged=false: [623677ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87876 #0 [623694ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623694ms] <- openat$random=0x3 errno=14 cover=1094 #0 [623696ms] -> ioctl$int_in(0x3, 0x5452, 0x20000500) #0 [623696ms] <- ioctl$int_in=0x0 errno=14 cover=146 #0 [623697ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623697ms] <- openat$random=0x4 errno=14 cover=1144 #0 [623700ms] -> ioctl$int_in(0x4, 0x5452, 0x20000500) #0 [623700ms] <- ioctl$int_in=0x0 errno=14 cover=148 #0 [623701ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623702ms] <- openat$random=0x5 errno=14 cover=1092 #0 [623702ms] -> ioctl$int_in(0x5, 0x5452, 0x20000500) #0 [623702ms] <- ioctl$int_in=0x0 errno=14 cover=150 2021/11/11 16:02:46 result hanged=false: 16:02:46 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)=0x101) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0x101) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0x101) [623744ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87878 #0 [623765ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623766ms] <- openat$random=0x3 errno=14 cover=1092 #0 [623766ms] -> ioctl$int_in(0x3, 0x5452, 0x20000500) #0 [623766ms] <- ioctl$int_in=0x0 errno=14 cover=157 #0 [623767ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623768ms] <- openat$random=0x4 errno=14 cover=1095 #0 [623769ms] -> ioctl$int_in(0x4, 0x5452, 0x20000500) #0 [623769ms] <- ioctl$int_in=0x0 errno=14 cover=148 #0 [623770ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623770ms] <- openat$random=0x5 errno=14 cover=1157 #0 [623770ms] -> ioctl$int_in(0x5, 0x5452, 0x20000500) #0 [623771ms] <- ioctl$int_in=0x0 errno=14 cover=150 2021/11/11 16:02:46 result hanged=false: 2021/11/11 16:02:46 added new input for call #3 ioctl$int_in to corpus: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)=0x101) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0x101) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0x101) 16:02:46 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)=0x101) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0x101) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0x101) 2021/11/11 16:02:46 #0: triaging type=7 2021/11/11 16:02:46 triaging input for call #1 ioctl$int_in (new signal=1) [623809ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87880 #0 [623827ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623827ms] <- openat$random=0x3 errno=14 cover=1081 #0 [623831ms] -> ioctl$int_in(0x3, 0x5452, 0x20000500) #0 [623831ms] <- ioctl$int_in=0x0 errno=14 cover=146 #0 [623831ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623831ms] <- openat$random=0x4 errno=14 cover=1160 #0 [623832ms] -> ioctl$int_in(0x4, 0x5452, 0x20000500) #0 [623832ms] <- ioctl$int_in=0x0 errno=14 cover=148 #0 [623832ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623832ms] <- openat$random=0x5 errno=14 cover=1146 #0 [623834ms] -> ioctl$int_in(0x5, 0x5452, 0x20000500) #0 [623834ms] <- ioctl$int_in=0x0 errno=14 cover=150 16:02:46 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)=0x101) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0x101) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0x101) 2021/11/11 16:02:46 result hanged=false: [623872ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87882 #0 [623891ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623891ms] <- openat$random=0x3 errno=14 cover=1091 #0 [623892ms] -> ioctl$int_in(0x3, 0x5452, 0x20000500) #0 [623892ms] <- ioctl$int_in=0x0 errno=14 cover=146 #0 [623892ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623892ms] <- openat$random=0x4 errno=14 cover=1145 #0 [623892ms] -> ioctl$int_in(0x4, 0x5452, 0x20000500) #0 [623892ms] <- ioctl$int_in=0x0 errno=14 cover=159 #0 [623893ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623893ms] <- openat$random=0x5 errno=14 cover=1112 #0 [623893ms] -> ioctl$int_in(0x5, 0x5452, 0x20000500) #0 [623893ms] <- ioctl$int_in=0x0 errno=14 cover=175 16:02:46 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)=0x101) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0x101) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0x101) 2021/11/11 16:02:46 result hanged=false: [623934ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87884 #0 [623952ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623952ms] <- openat$random=0x3 errno=14 cover=1105 #0 [623953ms] -> ioctl$int_in(0x3, 0x5452, 0x20000500) #0 [623953ms] <- ioctl$int_in=0x0 errno=14 cover=146 #0 [623955ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623955ms] <- openat$random=0x4 errno=14 cover=1135 #0 [623960ms] -> ioctl$int_in(0x4, 0x5452, 0x20000500) #0 [623960ms] <- ioctl$int_in=0x0 errno=14 cover=148 #0 [623960ms] -> openat$random(0xffffffffffffff9c, 0x200004c0, 0x0, 0x0) #0 [623961ms] <- openat$random=0x5 errno=14 cover=1190 #0 [623961ms] -> ioctl$int_in(0x5, 0x5452, 0x20000500) #0 [623961ms] <- ioctl$int_in=0x0 errno=14 cover=161 2021/11/11 16:02:46 result hanged=false: 2021/11/11 16:02:46 added new input for call #1 ioctl$int_in to corpus: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)=0x101) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0x101) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0x101) 16:02:46 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x40, 0x0) [624001ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87886 #0 [624025ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [624030ms] <- perf_event_open=0x3 errno=14 cover=9275 #0 [624031ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [624036ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=27630 #0 [624037ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #0 [624042ms] <- mount=0x0 errno=14 cover=51896 #0 [624043ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x40, 0x0) #0 [624044ms] <- openat$dir=0x4 errno=14 cover=5661 enabling collider #0 [624056ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [624058ms] <- perf_event_open=0x3 errno=14 cover=8242 #0 [624059ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [624060ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=3161 pthread_create failed (errno 11) 2021/11/11 16:02:46 result hanged=false: 16:02:46 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) 2021/11/11 16:02:46 poll: candidates=8 inputs=0 signal=0 umount(./4496/file0) [624158ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87988 #0 [624177ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000040) #0 [624178ms] <- syz_open_procfs=0x3 errno=14 cover=4399 #0 [624179ms] -> readv(0x3, 0x20000280, 0x1) #0 [624181ms] <- readv=0x75f errno=14 cover=28279 enabling collider #0 [624181ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000040) #0 [624182ms] <- syz_open_procfs=0x3 errno=14 cover=2736 16:02:46 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) 2021/11/11 16:02:46 result hanged=false: 2021/11/11 16:02:46 #0: triaging type=7 2021/11/11 16:02:46 triaging input for call #1 readv (new signal=7) [624223ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87990 #0 [624245ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000040) #0 [624246ms] <- syz_open_procfs=0x3 errno=14 cover=4397 #0 [624248ms] -> readv(0x3, 0x20000280, 0x1) #0 [624249ms] <- readv=0x75f errno=14 cover=20840 16:02:46 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) 2021/11/11 16:02:46 result hanged=false: [624293ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87992 #0 [624311ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000040) #0 [624312ms] <- syz_open_procfs=0x3 errno=14 cover=4414 #0 [624313ms] -> readv(0x3, 0x20000280, 0x1) #0 [624314ms] <- readv=0x75f errno=14 cover=20803 16:02:46 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) 2021/11/11 16:02:46 result hanged=false: [624355ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87994 #0 [624378ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000040) #0 [624379ms] <- syz_open_procfs=0x3 errno=14 cover=4370 #0 [624381ms] -> readv(0x3, 0x20000280, 0x1) #0 [624381ms] <- readv=0x75f errno=14 cover=22667 2021/11/11 16:02:46 result hanged=false: 2021/11/11 16:02:46 added new input for call #1 readv to corpus: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) 16:02:46 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000340), 0xffffffff, 0x30040) clone3(&(0x7f0000000380)={0x40000200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x25}, &(0x7f0000000100)=""/174, 0xae, &(0x7f00000001c0)=""/181, &(0x7f0000000300)=[0xffffffffffffffff, r0], 0x2, {r1}}, 0x58) [624430ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 87996 #0 [624451ms] -> getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x20000280, 0x0) #0 [624451ms] <- getsockopt$sock_cred=0xffffffffffffffff errno=9 cover=49 #0 [624457ms] -> syz_open_dev$vcsn(0x20000340, 0xffffffff, 0x30040) #0 [624457ms] <- syz_open_dev$vcsn=0xffffffffffffffff errno=20 cover=1201 #0 [624458ms] -> clone3(0x20000380, 0x58) #0 [624494ms] <- clone3=0xffffffffffffffff errno=22 cover=262143 enabling collider #0 [624497ms] -> getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x20000280, 0x0) #0 [624497ms] <- getsockopt$sock_cred=0xffffffffffffffff errno=9 cover=49 #0 [624500ms] -> syz_open_dev$vcsn(0x20000340, 0xffffffff, 0x30040) #0 [624500ms] <- syz_open_dev$vcsn=0xffffffffffffffff errno=20 cover=1124 pthread_create failed (errno 11) 2021/11/11 16:02:47 result hanged=false: 16:02:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) [624585ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88098 #0 [624614ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [624614ms] <- socket$inet_udplite=0x3 errno=14 cover=1650 #0 [624614ms] -> ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0x3, 0x89f1, 0x0) #0 [624614ms] <- ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL=0xffffffffffffffff errno=14 cover=470 enabling collider #0 [624615ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [624615ms] <- socket$inet_udplite=0x3 errno=14 cover=1627 16:02:47 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000640)={{0x77359400}, {r0, r1+10000000}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)) 2021/11/11 16:02:47 result hanged=false: [624653ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88100 #0 [624675ms] -> timer_create(0x0, 0x0, 0x20000280) #0 [624676ms] <- timer_create=0x0 errno=14 cover=931 #0 [624676ms] -> clock_gettime(0x0, 0x20000600) #0 [624676ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [624676ms] -> timer_settime(0x0, 0x1, 0x20000640, 0x0) #0 [624676ms] <- timer_settime=0x0 errno=14 cover=2445 #0 [624676ms] -> timer_settime(0x0, 0x0, 0x20000340, 0x20000380) #0 [624676ms] <- timer_settime=0x0 errno=14 cover=202 enabling collider #0 [624677ms] -> timer_create(0x0, 0x0, 0x20000280) #0 [624677ms] <- timer_create=0x0 errno=14 cover=229 #0 [624677ms] -> clock_gettime(0x0, 0x20000600) #0 [624677ms] <- clock_gettime=0x0 errno=14 cover=75 pthread_create failed (errno 11) 16:02:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 2021/11/11 16:02:47 result hanged=false: [624749ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88202 #0 [624765ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [624766ms] <- perf_event_open=0x3 errno=14 cover=9544 #0 [624768ms] -> syz_open_procfs$userns(0xffffffffffffffff, 0x20000140) #0 [624771ms] <- syz_open_procfs$userns=0x4 errno=1 cover=26742 #0 [624772ms] -> ioctl$FS_IOC_READ_VERITY_METADATA(0x4, 0xc0286687, 0x0) #0 [624772ms] <- ioctl$FS_IOC_READ_VERITY_METADATA=0xffffffffffffffff errno=25 cover=160 #0 [624774ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [624775ms] <- openat$loop_ctrl=0x5 errno=14 cover=2952 #0 [624779ms] -> ioctl$LOOP_CTL_REMOVE(0x5, 0x4c81, 0x0) #0 [624779ms] <- ioctl$LOOP_CTL_REMOVE=0xffffffffffffffff errno=16 cover=121 #0 [624779ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [624779ms] <- socket$inet_tcp=0x6 errno=14 cover=1821 #0 [624779ms] -> ioctl$LOOP_CTL_ADD(0x5, 0x4c80, 0x0) #0 [624779ms] <- ioctl$LOOP_CTL_ADD=0xffffffffffffffff errno=17 cover=119 #0 [624780ms] -> ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) #0 [624780ms] <- ioctl$BTRFS_IOC_SNAP_DESTROY=0xffffffffffffffff errno=9 cover=45 #0 [624780ms] -> setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) #0 [624781ms] <- setsockopt$inet_tcp_TCP_REPAIR=0xffffffffffffffff errno=9 cover=50 enabling collider #0 [624789ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [624789ms] <- perf_event_open=0x3 errno=14 cover=8243 #0 [624790ms] -> syz_open_procfs$userns(0xffffffffffffffff, 0x20000140) #0 [624791ms] <- syz_open_procfs$userns=0x4 errno=1 cover=6441 pthread_create failed (errno 11) 16:02:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 2021/11/11 16:02:47 result hanged=false: 2021/11/11 16:02:47 #0: triaging type=7 2021/11/11 16:02:47 triaging input for call #5 socket$inet_tcp (new signal=1) [624882ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88304 #0 [624901ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [624903ms] <- perf_event_open=0x3 errno=14 cover=8218 #0 [624904ms] -> syz_open_procfs$userns(0xffffffffffffffff, 0x20000140) #0 [624906ms] <- syz_open_procfs$userns=0x4 errno=1 cover=13966 #0 [624907ms] -> ioctl$FS_IOC_READ_VERITY_METADATA(0x4, 0xc0286687, 0x0) #0 [624907ms] <- ioctl$FS_IOC_READ_VERITY_METADATA=0xffffffffffffffff errno=25 cover=102 #0 [624907ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [624907ms] <- openat$loop_ctrl=0x5 errno=14 cover=1099 #0 [624908ms] -> ioctl$LOOP_CTL_REMOVE(0x5, 0x4c81, 0x0) #0 [624908ms] <- ioctl$LOOP_CTL_REMOVE=0xffffffffffffffff errno=16 cover=121 #0 [624908ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [624908ms] <- socket$inet_tcp=0x6 errno=14 cover=1731 #0 [624908ms] -> ioctl$LOOP_CTL_ADD(0x5, 0x4c80, 0x0) #0 [624908ms] <- ioctl$LOOP_CTL_ADD=0xffffffffffffffff errno=17 cover=119 #0 [624909ms] -> ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) #0 [624909ms] <- ioctl$BTRFS_IOC_SNAP_DESTROY=0xffffffffffffffff errno=9 cover=45 #0 [624909ms] -> setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) #0 [624909ms] <- setsockopt$inet_tcp_TCP_REPAIR=0xffffffffffffffff errno=9 cover=50 16:02:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 2021/11/11 16:02:47 result hanged=false: [624959ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88306 #0 [624978ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [624980ms] <- perf_event_open=0x3 errno=14 cover=8133 #0 [624985ms] -> syz_open_procfs$userns(0xffffffffffffffff, 0x20000140) #0 [624987ms] <- syz_open_procfs$userns=0x4 errno=1 cover=26326 #0 [624990ms] -> ioctl$FS_IOC_READ_VERITY_METADATA(0x4, 0xc0286687, 0x0) #0 [624990ms] <- ioctl$FS_IOC_READ_VERITY_METADATA=0xffffffffffffffff errno=25 cover=160 #0 [624995ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [624995ms] <- openat$loop_ctrl=0x5 errno=14 cover=3109 #0 [624997ms] -> ioctl$LOOP_CTL_REMOVE(0x5, 0x4c81, 0x0) #0 [624997ms] <- ioctl$LOOP_CTL_REMOVE=0xffffffffffffffff errno=16 cover=208 #0 [624997ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [624999ms] <- socket$inet_tcp=0x6 errno=14 cover=5627 #0 [625001ms] -> ioctl$LOOP_CTL_ADD(0x5, 0x4c80, 0x0) #0 [625001ms] <- ioctl$LOOP_CTL_ADD=0xffffffffffffffff errno=17 cover=206 #0 [625001ms] -> ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) #0 [625002ms] <- ioctl$BTRFS_IOC_SNAP_DESTROY=0xffffffffffffffff errno=9 cover=74 #0 [625002ms] -> setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) #0 [625002ms] <- setsockopt$inet_tcp_TCP_REPAIR=0xffffffffffffffff errno=9 cover=79 16:02:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 2021/11/11 16:02:47 result hanged=false: [625053ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88308 #0 [625071ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [625076ms] <- perf_event_open=0x3 errno=14 cover=9421 #0 [625077ms] -> syz_open_procfs$userns(0xffffffffffffffff, 0x20000140) #0 [625079ms] <- syz_open_procfs$userns=0x4 errno=1 cover=25848 #0 [625088ms] -> ioctl$FS_IOC_READ_VERITY_METADATA(0x4, 0xc0286687, 0x0) #0 [625088ms] <- ioctl$FS_IOC_READ_VERITY_METADATA=0xffffffffffffffff errno=25 cover=160 #0 [625088ms] -> openat$loop_ctrl(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [625090ms] <- openat$loop_ctrl=0x5 errno=14 cover=2978 #0 [625090ms] -> ioctl$LOOP_CTL_REMOVE(0x5, 0x4c81, 0x0) #0 [625091ms] <- ioctl$LOOP_CTL_REMOVE=0xffffffffffffffff errno=16 cover=208 #0 [625092ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [625092ms] <- socket$inet_tcp=0x6 errno=14 cover=5290 #0 [625093ms] -> ioctl$LOOP_CTL_ADD(0x5, 0x4c80, 0x0) #0 [625093ms] <- ioctl$LOOP_CTL_ADD=0xffffffffffffffff errno=17 cover=206 #0 [625094ms] -> ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) #0 [625094ms] <- ioctl$BTRFS_IOC_SNAP_DESTROY=0xffffffffffffffff errno=9 cover=74 #0 [625095ms] -> setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) #0 [625095ms] <- setsockopt$inet_tcp_TCP_REPAIR=0xffffffffffffffff errno=9 cover=79 2021/11/11 16:02:47 result hanged=false: 2021/11/11 16:02:47 added new input for call #5 socket$inet_tcp to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 16:02:47 executing program 0: setrlimit(0x4, &(0x7f0000000000)={0x0, 0x401}) [625142ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88310 #0 [625160ms] -> setrlimit(0x4, 0x20000000) #0 [625161ms] <- setrlimit=0x0 errno=14 cover=157 enabling collider #0 [625161ms] -> setrlimit(0x4, 0x20000000) #0 [625161ms] <- setrlimit=0x0 errno=14 cover=67 2021/11/11 16:02:47 result hanged=false: 16:02:47 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), 0xffffffffffffffff) [625202ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88312 #0 [625219ms] -> syz_genetlink_get_family_id$ethtool(0x20000c80, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [625220ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=9233 enabling collider #0 [625223ms] -> syz_genetlink_get_family_id$ethtool(0x20000c80, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [625224ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=7633 2021/11/11 16:02:47 result hanged=false: 16:02:47 executing program 0: r0 = gettid() ioprio_set$pid(0x2, r0, 0x0) [625264ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88314 #0 [625283ms] -> gettid() #0 [625284ms] <- gettid=0x158fb errno=14 cover=48 #0 [625284ms] -> ioprio_set$pid(0x2, 0x158fb, 0x0) #0 [625284ms] <- ioprio_set$pid=0xffffffffffffffff errno=3 cover=68 enabling collider #0 [625285ms] -> gettid() #0 [625285ms] <- gettid=0x158fb errno=14 cover=48 #0 [625285ms] -> ioprio_set$pid(0x2, 0x158fb, 0x016:02:47 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) 2021/11/11 16:02:47 result hanged=false: 2021/11/11 16:02:47 poll: candidates=8 inputs=0 signal=0 [625326ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88316 #0 [625347ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [625352ms] <- openat=0x3 errno=14 cover=9018 #0 [625352ms] -> clone3(0x200008c0, 0x58) #0 [625353ms] <- clone3=0xffffffffffffffff errno=11 cover=5174 #0 [625353ms] -> pipe(0x200001c0) #0 [625353ms] <- pipe=0x0 errno=14 cover=1148 #0 [625354ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x20000280) #0 [625378ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=63688 enabling collider #0 [625380ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [625380ms] <- openat=0x3 errno=14 cover=1205 #0 [625381ms] -> clone3(0x200008c0, 0x58) #0 [625383ms] <- clone3=0xffffffffffffffff errno=11 cover=5234 pthread_create failed (errno 11) 2021/11/11 16:02:47 result hanged=false: 2021/11/11 16:02:47 #0: triaging type=7 16:02:47 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) 2021/11/11 16:02:47 triaging input for call #3 mount$9p_fd (new signal=2) [625459ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88420 #0 [625478ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [625487ms] <- openat=0x3 errno=14 cover=8635 #0 [625489ms] -> clone3(0x200008c0, 0x58) #0 [625490ms] <- clone3=0xffffffffffffffff errno=11 cover=5113 #0 [625491ms] -> pipe(0x200001c0) #0 [625492ms] <- pipe=0x0 errno=14 cover=1268 #0 [625493ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x20000280) #0 [625516ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=67532 2021/11/11 16:02:48 result hanged=false: 16:02:48 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) [625568ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88423 #0 [625586ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [625594ms] <- openat=0x3 errno=14 cover=8626 #0 [625595ms] -> clone3(0x200008c0, 0x58) #0 [625596ms] <- clone3=0xffffffffffffffff errno=11 cover=5174 #0 [625597ms] -> pipe(0x200001c0) #0 [625597ms] <- pipe=0x0 errno=14 cover=1173 #0 [625598ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x20000280) #0 [625630ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=62963 2021/11/11 16:02:48 result hanged=false: 16:02:48 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) [625676ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88426 #0 [625693ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [625698ms] <- openat=0x3 errno=14 cover=8653 #0 [625701ms] -> clone3(0x200008c0, 0x58) #0 [625702ms] <- clone3=0xffffffffffffffff errno=11 cover=5183 #0 [625703ms] -> pipe(0x200001c0) #0 [625703ms] <- pipe=0x0 errno=14 cover=1224 #0 [625704ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x20000280) #0 [625733ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=63687 2021/11/11 16:02:48 result hanged=false: 2021/11/11 16:02:48 added new input for call #3 mount$9p_fd to corpus: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) clone3(&(0x7f00000008c0)={0x5040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) 16:02:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, r2, 0x1, 0x0, 0x0, {0x22}}, 0x14}}, 0x0) [625807ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88429 #0 [625827ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [625828ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6385 #0 [625829ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [625830ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5495 #0 [625830ms] -> syz_genetlink_get_family_id$ieee802154(0x20000c00, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [625831ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5486 #0 [625832ms] -> sendmsg$IEEE802154_LLSEC_SETPARAMS(0x4, 0x20000200, 0x0) #0 [625833ms] <- sendmsg$IEEE802154_LLSEC_SETPARAMS=0x14 errno=14 cover=1799 enabling collider #0 [625833ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [625835ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5393 #0 [625836ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [625838ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5561 pthread_create failed (errno 11) 2021/11/11 16:02:48 result hanged=false: 2021/11/11 16:02:48 #0: triaging type=7 2021/11/11 16:02:48 triaging input for call #3 sendmsg$IEEE802154_LLSEC_SETPARAMS (new signal=3) 16:02:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, r2, 0x1, 0x0, 0x0, {0x22}}, 0x14}}, 0x0) [625913ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88531 #0 [625931ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [625933ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6338 #0 [625933ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [625934ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5456 #0 [625935ms] -> syz_genetlink_get_family_id$ieee802154(0x20000c00, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [625936ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5429 #0 [625936ms] -> sendmsg$IEEE802154_LLSEC_SETPARAMS(0x4, 0x20000200, 0x0) #0 [625936ms] <- sendmsg$IEEE802154_LLSEC_SETPARAMS=0x14 errno=14 cover=1734 16:02:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, r2, 0x1, 0x0, 0x0, {0x22}}, 0x14}}, 0x0) 2021/11/11 16:02:48 result hanged=false: [625975ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88533 #0 [625994ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [625995ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6379 #0 [625996ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [625996ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5580 #0 [625999ms] -> syz_genetlink_get_family_id$ieee802154(0x20000c00, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [626000ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5558 #0 [626000ms] -> sendmsg$IEEE802154_LLSEC_SETPARAMS(0x4, 0x20000200, 0x0) #0 [626001ms] <- sendmsg$IEEE802154_LLSEC_SETPARAMS=0x14 errno=14 cover=1773 16:02:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, r2, 0x1, 0x0, 0x0, {0x22}}, 0x14}}, 0x0) 2021/11/11 16:02:48 result hanged=false: [626043ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88535 #0 [626065ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [626066ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6298 #0 [626071ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [626072ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5565 #0 [626073ms] -> syz_genetlink_get_family_id$ieee802154(0x20000c00, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [626073ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5479 #0 [626074ms] -> sendmsg$IEEE802154_LLSEC_SETPARAMS(0x4, 0x20000200, 0x0) #0 [626074ms] <- sendmsg$IEEE802154_LLSEC_SETPARAMS=0x14 errno=14 cover=1744 2021/11/11 16:02:48 result hanged=false: 2021/11/11 16:02:48 added new input for call #3 sendmsg$IEEE802154_LLSEC_SETPARAMS to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, r2, 0x1, 0x0, 0x0, {0x22}}, 0x14}}, 0x0) 16:02:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000100)=""/213) [626113ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88537 #0 [626132ms] -> syz_open_dev$evdev(0x200000c0, 0x0, 0x0) #0 [626132ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1318 #0 [626133ms] -> ioctl$EVIOCGBITSND(0x3, 0x80404532, 0x20000100) #0 [626133ms] <- ioctl$EVIOCGBITSND=0x8 errno=14 cover=177 enabling collider #0 [626138ms] -> syz_open_dev$evdev(0x200000c0, 0x0, 0x0) #0 [626139ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1359 #0 [626139ms] -> ioctl$EVIOCGBITSND(0x3, 0x80404532, 0x20000100) #0 [626139ms] <- ioctl$EVIOCGBITSND=0xffffffffffffffff errno=9 cover=46 16:02:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000100)=""/213) 2021/11/11 16:02:48 result hanged=false: 2021/11/11 16:02:48 #0: triaging type=7 2021/11/11 16:02:48 triaging input for call #1 ioctl$EVIOCGBITSND (new signal=2) [626189ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88539 #0 [626207ms] -> syz_open_dev$evdev(0x200000c0, 0x0, 0x0) #0 [626207ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1317 #0 [626209ms] -> ioctl$EVIOCGBITSND(0x3, 0x80404532, 0x20000100) #0 [626209ms] <- ioctl$EVIOCGBITSND=0x8 errno=14 cover=177 16:02:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000100)=""/213) 2021/11/11 16:02:48 result hanged=false: [626260ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88541 #0 [626277ms] -> syz_open_dev$evdev(0x200000c0, 0x0, 0x0) #0 [626278ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1320 #0 [626280ms] -> ioctl$EVIOCGBITSND(0x3, 0x80404532, 0x20000100) #0 [626280ms] <- ioctl$EVIOCGBITSND=0x8 errno=14 cover=177 16:02:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000100)=""/213) 2021/11/11 16:02:48 result hanged=false: [626329ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88543 #0 [626348ms] -> syz_open_dev$evdev(0x200000c0, 0x0, 0x0) #0 [626349ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1340 #0 [626350ms] -> ioctl$EVIOCGBITSND(0x3, 0x80404532, 0x20000100) #0 [626350ms] <- ioctl$EVIOCGBITSND=0x8 errno=14 cover=177 2021/11/11 16:02:48 result hanged=false: 2021/11/11 16:02:48 added new input for call #1 ioctl$EVIOCGBITSND to corpus: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000100)=""/213) 16:02:48 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9736) syz_open_dev$vcsu(0x0, 0x3, 0x280000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000a80)={0x8, 0x0, 0x7fff}) unshare(0x48020200) [626401ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88545 #0 [626421ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [626432ms] <- perf_event_open=0x3 errno=14 cover=10269 #0 [626432ms] -> ioctl$int_in(0x3, 0x5452, 0x20000040) #0 [626434ms] <- ioctl$int_in=0x0 errno=14 cover=2736 #0 [626434ms] -> syz_open_dev$vcsu(0x0, 0x3, 0x280000) SIGSEGV on (nil), skipping #0 [626435ms] <- syz_open_dev$vcsu=0xffffffffffffffff errno=14 cover=2777 #0 [626435ms] -> ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x20000a80) #0 [626436ms] <- ioctl$PIO_UNIMAPCLR=0xffffffffffffffff errno=9 cover=78 #0 [626436ms] -> unshare(0x48020200) #0 [626485ms] <- unshare=0x0 errno=14 cover=262143 enabling collider #0 [626499ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [626501ms] <- perf_event_open=0x3 errno=14 cover=8725 #0 [626502ms] -> ioctl$int_in(0x3, 0x5452, 0x20000040) #0 [626503ms] <- ioctl$int_in=0x0 errno=14 cover=804 pthread_create failed (errno 11) 2021/11/11 16:02:49 result hanged=false: 2021/11/11 16:02:49 #0: triaging type=7 2021/11/11 16:02:49 triaging input for call #1 ioctl$int_in (new signal=1) 16:02:49 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9736) syz_open_dev$vcsu(0x0, 0x3, 0x280000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000a80)={0x8, 0x0, 0x7fff}) unshare(0x48020200) [626596ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88647 #0 [626621ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [626622ms] <- perf_event_open=0x3 errno=14 cover=8055 #0 [626625ms] -> ioctl$int_in(0x3, 0x5452, 0x20000040) #0 [626625ms] <- ioctl$int_in=0x0 errno=14 cover=157 #0 [626626ms] -> syz_open_dev$vcsu(0x0, 0x3, 0x280000) SIGSEGV on (nil), skipping #0 [626626ms] <- syz_open_dev$vcsu=0xffffffffffffffff errno=14 cover=1014 #0 [626627ms] -> ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x20000a80) #0 [626627ms] <- ioctl$PIO_UNIMAPCLR=0xffffffffffffffff errno=9 cover=45 #0 [626628ms] -> unshare(0x48020200) #0 [626657ms] <- unshare=0x0 errno=14 cover=186652 16:02:49 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9736) syz_open_dev$vcsu(0x0, 0x3, 0x280000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000a80)={0x8, 0x0, 0x7fff}) unshare(0x48020200) 2021/11/11 16:02:49 result hanged=false: [626726ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88649 #0 [626752ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [626753ms] <- perf_event_open=0x3 errno=14 cover=8559 #0 [626755ms] -> ioctl$int_in(0x3, 0x5452, 0x20000040) #0 [626755ms] <- ioctl$int_in=0x0 errno=14 cover=732 #0 [626755ms] -> syz_open_dev$vcsu(0x0, 0x3, 0x280000) SIGSEGV on (nil), skipping #0 [626756ms] <- syz_open_dev$vcsu=0xffffffffffffffff errno=14 cover=2603 #0 [626756ms] -> ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x20000a80) #0 [626756ms] <- ioctl$PIO_UNIMAPCLR=0xffffffffffffffff errno=9 cover=78 #0 [626757ms] -> unshare(0x48020200) #0 [626808ms] <- unshare=0x0 errno=14 cover=262143 16:02:49 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9736) syz_open_dev$vcsu(0x0, 0x3, 0x280000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000a80)={0x8, 0x0, 0x7fff}) unshare(0x48020200) 2021/11/11 16:02:49 result hanged=false: [626878ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88651 #0 [626907ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [626908ms] <- perf_event_open=0x3 errno=14 cover=8247 #0 [626910ms] -> ioctl$int_in(0x3, 0x5452, 0x20000040) #0 [626910ms] <- ioctl$int_in=0x0 errno=14 cover=670 #0 [626911ms] -> syz_open_dev$vcsu(0x0, 0x3, 0x280000) SIGSEGV on (nil), skipping #0 [626913ms] <- syz_open_dev$vcsu=0xffffffffffffffff errno=14 cover=2743 #0 [626914ms] -> ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x20000a80) #0 [626914ms] <- ioctl$PIO_UNIMAPCLR=0xffffffffffffffff errno=9 cover=78 #0 [626916ms] -> unshare(0x48020200) #0 [626944ms] <- unshare=0x0 errno=14 cover=186874 2021/11/11 16:02:49 result hanged=false: 2021/11/11 16:02:49 added new input for call #1 ioctl$int_in to corpus: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9736) syz_open_dev$vcsu(0x0, 0x3, 0x280000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000a80)={0x8, 0x0, 0x7fff}) unshare(0x48020200) 16:02:49 executing program 0: execve(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [627022ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88653 #0 [627042ms] -> execve(0x0, 0x0, 0x0) #0 [627042ms] <- execve=0xffffffffffffffff errno=14 cover=601 #0 [627043ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [627044ms] <- socket$nl_xfrm=0x3 errno=14 cover=1512 enabling collider #0 [627045ms] -> execve(0x0, 0x0, 0x0) #0 [627045ms] <- execve=0xffffffffffffffff errno=14 cover=603 2021/11/11 16:02:49 result hanged=false: 16:02:49 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200000) [627105ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88655 #0 [627124ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000000, 0x200000) #0 [627126ms] <- openat$sndseq=0x3 errno=14 cover=1002 enabling collider #0 [627127ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000000, 0x200000) #0 [627127ms] <- openat$sndseq=0x3 errno=14 cover=1026 16:02:49 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000001800)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file0\x00', 0x2) 2021/11/11 16:02:49 result hanged=false: [627166ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88657 #0 [627183ms] -> syz_mount_image$vfat(0x0, 0x20001800, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [627188ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=15390 #0 [627189ms] -> syz_mount_image$vfat(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [627193ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=18667 #0 [627194ms] -> openat$dir(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [627194ms] <- openat$dir=0x3 errno=14 cover=954 #0 [627196ms] -> renameat2(0xffffffffffffff9c, 0x20000040, 0x3, 0x20000080, 0x2) #0 [627199ms] <- renameat2=0x0 errno=14 cover=8221 enabling collider #0 [627200ms] -> syz_mount_image$vfat(0x0, 0x20001800, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [627200ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=17 cover=1337 #0 [627201ms] -> syz_mount_image$vfat(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [627202ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=17 cover=1341 pthread_create failed (errno 11) 2021/11/11 16:02:49 result hanged=false: 2021/11/11 16:02:49 #0: triaging type=7 16:02:49 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000001800)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file0\x00', 0x2) 2021/11/11 16:02:49 triaging input for call #3 renameat2 (new signal=1) [627290ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88759 #0 [627314ms] -> syz_mount_image$vfat(0x0, 0x20001800, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [627319ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=14896 #0 [627322ms] -> syz_mount_image$vfat(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [627325ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=14670 #0 [627328ms] -> openat$dir(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [627328ms] <- openat$dir=0x3 errno=14 cover=845 #0 [627328ms] -> renameat2(0xffffffffffffff9c, 0x20000040, 0x3, 0x20000080, 0x2) #0 [627330ms] <- renameat2=0x0 errno=14 cover=8188 16:02:49 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000001800)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file0\x00', 0x2) 2021/11/11 16:02:49 result hanged=false: [627378ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88761 #0 [627395ms] -> syz_mount_image$vfat(0x0, 0x20001800, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [627400ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=15191 #0 [627401ms] -> syz_mount_image$vfat(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [627404ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=14874 #0 [627406ms] -> openat$dir(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [627406ms] <- openat$dir=0x3 errno=14 cover=972 #0 [627407ms] -> renameat2(0xffffffffffffff9c, 0x20000040, 0x3, 0x20000080, 0x2) #0 [627410ms] <- renameat2=0x0 errno=14 cover=8183 2021/11/11 16:02:49 result hanged=false: 16:02:49 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000001800)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file0\x00', 0x2) [627458ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88763 #0 [627476ms] -> syz_mount_image$vfat(0x0, 0x20001800, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [627482ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=15620 #0 [627486ms] -> syz_mount_image$vfat(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [627490ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=14813 #0 [627491ms] -> openat$dir(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [627492ms] <- openat$dir=0x3 errno=14 cover=921 #0 [627493ms] -> renameat2(0xffffffffffffff9c, 0x20000040, 0x3, 0x20000080, 0x2) #0 [627495ms] <- renameat2=0x0 errno=14 cover=8167 2021/11/11 16:02:50 result hanged=false: 2021/11/11 16:02:50 added new input for call #3 renameat2 to corpus: syz_mount_image$vfat(0x0, &(0x7f0000001800)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file0\x00', 0x2) 16:02:50 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000540)={0x0, 0x0, 0x2, 0x0, 0x0, &(0x7f0000000140)="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"}) [627547ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88765 #0 [627565ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [627565ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3426 #0 [627566ms] -> ioctl$KDFONTOP_SET(0x3, 0x4b72, 0x20000540) #0 [627566ms] <- ioctl$KDFONTOP_SET=0xffffffffffffffff errno=22 cover=218 enabling collider #0 [627567ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [627568ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3478 2021/11/11 16:02:50 result hanged=false: 16:02:50 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_SPLICE, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 2021/11/11 16:02:50 poll: candidates=8 inputs=0 signal=0 [627608ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 88767 #0 [627626ms] -> syz_io_uring_setup(0x4d4f, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000200, 0x20000140) #0 [627632ms] <- syz_io_uring_setup=0x3 errno=14 cover=17672 #0 [627633ms] -> syz_io_uring_submit(0x200a0000, 0x20ffc000, 0x20000000, 0x0) #0 [627633ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [627634ms] -> mmap$IORING_OFF_SQ_RING(0x20ffc000, 0x4000, 0x100000e, 0x13, 0x3, 0x0) #0 [627634ms] <- mmap$IORING_OFF_SQ_RING=0x20ffc000 errno=14 cover=1691 #0 [627635ms] -> syz_io_uring_submit(0x20ffc000, 0x20ffc000, 0x20000100, 0x4) #0 [627635ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [627635ms] -> io_uring_enter(0x3, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [627636ms] <- io_uring_enter=0x2 errno=14 cover=885 #0 [627640ms] -> execveat(0xffffffffffffffff, 0x20000040, 0x0, 0x0, 0x0) enabling collider pthread_create failed (errno 11) 2021/11/11 16:02:51 poll: candidates=0 inputs=0 signal=0 killing hanging pid 88767 kill is not working failed to open /sys/fs/fuse/connections: 2 2021/11/11 16:03:03 poll: candidates=0 inputs=0 signal=0 2021/11/11 16:03:15 poll: candidates=0 inputs=0 signal=0 2021/11/11 16:03:27 poll: candidates=0 inputs=0 signal=0 2021/11/11 16:03:39 poll: candidates=0 inputs=0 signal=0 16:03:40 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_SPLICE, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 2021/11/11 16:03:40 result hanged=true: signal: killed 2021/11/11 16:03:40 #0: triaging type=7 2021/11/11 16:03:40 triaging input for call #5 execveat (new signal=2) 2021/11/11 16:03:40 fuzzer detected executor failure='executor 0: failed to write control pipe: write |1: broken pipe', retrying #1 bitmap is not found, coverage filter disabled spawned loop pid 322038 mount(fusectl) failed: 2 hci dev id: 1 01 03 0c 00 01 03 10 00 01 01 10 00 01 09 10 00 01 05 10 00 01 23 0c 00 01 14 0c 00 01 25 0c 00 01 38 0c 00 01 39 0c 00 01 05 0c 01 00 01 16 0c 02 00 7d 01 03 0c 00 01 03 10 00 01 01 10 00 01 09 10 00 01 05 10 00 01 23 0c 00 01 14 0c 00 01 25 0c 00 01 38 0c 00 01 39 0c 00 01 05 0c 01 00 01 16 0c 02 00 7d 01 1a 0c 01 02 netlink: add addr 172.30.0.1 dev nr0: No such device netlink: device nr0 up master NULL: No such device netlink: add addr 172.30.1.1 dev rose0: No such device netlink: device rose0 up master NULL: No such device netlink: adding device ip6gretap0 type ip6gretap: Operation not supported netlink: adding device bridge0 type bridge: Operation not supported netlink: adding device vcan0 type vcan: Operation not supported netlink: adding device bond0 type bond: Operation not supported netlink: adding device team0 type team: Operation not supported netlink: adding device dummy0 type dummy: Operation not supported netlink: adding device nlmon0 type nlmon: Operation not supported netlink: adding device caif0 type caif: Operation not supported netlink: adding device batadv0 type batadv: Operation not supported netlink: adding device vxcan1 type vxcan: Operation not supported netlink: adding device netdevsim0 type netdevsim: Operation not supported netlink: adding device (null) type veth: Operation not supported netlink: adding device xfrm0 type xfrm: Operation not supported netlink: adding device wg0 type wireguard: Operation not supported netlink: adding device wg1 type wireguard: Operation not supported netlink: adding device wg2 type wireguard: Operation not supported netlink: adding device bridge_slave_0 type veth peer veth0_to_bridge: Operation not supported netlink: adding device bridge_slave_1 type veth peer veth1_to_bridge: Operation not supported netlink: device bridge_slave_0 up master bridge0: No such device netlink: device bridge_slave_1 up master bridge0: No such device netlink: adding device bond_slave_0 type veth peer veth0_to_bond: Operation not supported netlink: adding device bond_slave_1 type veth peer veth1_to_bond: Operation not supported netlink: device bond_slave_0 up master bond0: No such device netlink: device bond_slave_1 up master bond0: No such device netlink: adding device team_slave_0 type veth peer veth0_to_team: Operation not supported netlink: adding device team_slave_1 type veth peer veth1_to_team: Operation not supported netlink: device team_slave_0 up master team0: No such device netlink: device team_slave_1 up master team0: No such device netlink: adding device batadv_slave_0 type veth peer veth0_to_batadv: Operation not supported netlink: adding device batadv_slave_1 type veth peer veth1_to_batadv: Operation not supported netlink: device batadv_slave_0 up master batadv0: No such device netlink: device batadv_slave_1 up master batadv0: No such device netlink: device bridge_slave_0 up master NULL: No such device netlink: device bridge_slave_1 up master NULL: No such device netlink: adding device hsr_slave_0 type veth peer veth0_to_hsr: Operation not supported netlink: adding device hsr_slave_1 type veth peer veth1_to_hsr: Operation not supported netlink: adding device hsr0 type hsr slave1 hsr_slave_0 slave2 hsr_slave_1: Unknown error -95 netlink: device hsr_slave_0 up master NULL: No such device netlink: device hsr_slave_1 up master NULL: No such device netlink: adding device veth0_virt_wifi type veth peer veth1_virt_wifi: Operation not supported netlink: adding device virt_wifi0 type virt_wifi link veth1_virt_wifi: Operation not supported netlink: adding device veth0_vlan type veth peer veth1_vlan: Operation not supported netlink: add vlan0 type vlan link veth0_vlan id 0: Operation not supported netlink: add vlan1 type vlan link veth0_vlan id 1: Operation not supported netlink: add macvlan0 type macvlan link veth1_vlan mode 4: Operation not supported netlink: add macvlan1 type macvlan link veth1_vlan mode 4: Operation not supported netlink: add ipvlan0 type ipvlan link veth0_vlan mode 0: Operation not supported netlink: add ipvlan1 type ipvlan link veth0_vlan mode 2: Operation not supported netlink: adding device veth0_macvtap type veth peer veth1_macvtap: Operation not supported netlink: adding device macvtap0 type macvtap link veth0_macvtap: Operation not supported netlink: adding device macsec0 type macsec link veth1_macvtap: Operation not supported netlink: add geneve0 type geneve vni 0: Operation not supported netlink: add geneve1 type geneve vni 1: Operation not supported netlink: failed to get family id for wireguard: No such file or directory netlink: add addr 172.20.20.12 dev bridge0: No such device netlink: add addr fe80::0c dev bridge0: No such device netlink: device bridge0 up master NULL: No such device netlink: add addr 172.20.20.13 dev vcan0: No such device netlink: device vcan0 up master NULL: No such device netlink: add addr 172.20.20.14 dev tunl0: No such device netlink: add addr fe80::0e dev tunl0: No such device netlink: device tunl0 up master NULL: No such device netlink: add addr 172.20.20.15 dev gre0: No such device netlink: add addr fe80::0f dev gre0: No such device netlink: device gre0 up master NULL: No such device netlink: add addr 172.20.20.16 dev gretap0: No such device netlink: add addr fe80::10 dev gretap0: No such device netlink: device gretap0 up master NULL: No such device netlink: add addr 172.20.20.17 dev ip_vti0: No such device netlink: add addr fe80::11 dev ip_vti0: No such device netlink: device ip_vti0 up master NULL: No such device netlink: add addr 172.20.20.18 dev ip6_vti0: No such device netlink: add addr fe80::12 dev ip6_vti0: No such device netlink: device ip6_vti0 up master NULL: No such device netlink: add addr 172.20.20.19 dev ip6tnl0: No such device netlink: add addr fe80::13 dev ip6tnl0: No such device netlink: device ip6tnl0 up master NULL: No such device netlink: add addr 172.20.20.20 dev ip6gre0: No such device netlink: add addr fe80::14 dev ip6gre0: No such device netlink: device ip6gre0 up master NULL: No such device netlink: add addr 172.20.20.21 dev ip6gretap0: No such device netlink: add addr fe80::15 dev ip6gretap0: No such device netlink: device ip6gretap0 up master NULL: No such device netlink: add addr 172.20.20.22 dev erspan0: No such device netlink: add addr fe80::16 dev erspan0: No such device netlink: device erspan0 up master NULL: No such device netlink: add addr 172.20.20.23 dev bond0: No such device netlink: add addr fe80::17 dev bond0: No such device netlink: device bond0 up master NULL: No such device netlink: add addr 172.20.20.24 dev veth0: No such device netlink: add addr fe80::18 dev veth0: No such device netlink: device veth0 up master NULL: No such device netlink: add addr 172.20.20.25 dev veth1: No such device netlink: add addr fe80::19 dev veth1: No such device netlink: device veth1 up master NULL: No such device netlink: add addr 172.20.20.26 dev team0: No such device netlink: add addr fe80::1a dev team0: No such device netlink: device team0 up master NULL: No such device netlink: add addr 172.20.20.27 dev veth0_to_bridge: No such device netlink: add addr fe80::1b dev veth0_to_bridge: No such device netlink: device veth0_to_bridge up master NULL: No such device netlink: add addr 172.20.20.28 dev veth1_to_bridge: No such device netlink: add addr fe80::1c dev veth1_to_bridge: No such device netlink: device veth1_to_bridge up master NULL: No such device netlink: add addr 172.20.20.29 dev veth0_to_bond: No such device netlink: add addr fe80::1d dev veth0_to_bond: No such device netlink: device veth0_to_bond up master NULL: No such device netlink: add addr 172.20.20.30 dev veth1_to_bond: No such device netlink: add addr fe80::1e dev veth1_to_bond: No such device netlink: device veth1_to_bond up master NULL: No such device netlink: add addr 172.20.20.31 dev veth0_to_team: No such device netlink: add addr fe80::1f dev veth0_to_team: No such device netlink: device veth0_to_team up master NULL: No such device netlink: add addr 172.20.20.32 dev veth1_to_team: No such device netlink: add addr fe80::20 dev veth1_to_team: No such device netlink: device veth1_to_team up master NULL: No such device netlink: add addr 172.20.20.33 dev veth0_to_hsr: No such device netlink: add addr fe80::21 dev veth0_to_hsr: No such device netlink: device veth0_to_hsr up master NULL: No such device netlink: add addr 172.20.20.34 dev veth1_to_hsr: No such device netlink: add addr fe80::22 dev veth1_to_hsr: No such device netlink: device veth1_to_hsr up master NULL: No such device netlink: add addr 172.20.20.35 dev hsr0: No such device netlink: add addr fe80::23 dev hsr0: No such device netlink: device hsr0 up master NULL: No such device netlink: add addr 172.20.20.36 dev dummy0: No such device netlink: add addr fe80::24 dev dummy0: No such device netlink: device dummy0 up master NULL: No such device netlink: add addr 172.20.20.37 dev nlmon0: No such device netlink: add addr fe80::25 dev nlmon0: No such device netlink: device nlmon0 up master NULL: No such device netlink: add addr 172.20.20.38 dev vxcan0: No such device netlink: device vxcan0 up master NULL: No such device netlink: add addr 172.20.20.39 dev vxcan1: No such device netlink: device vxcan1 up master NULL: No such device netlink: add addr 172.20.20.40 dev caif0: No such device netlink: add addr fe80::28 dev caif0: No such device netlink: device caif0 up master NULL: No such device netlink: add addr 172.20.20.41 dev batadv0: No such device netlink: add addr fe80::29 dev batadv0: No such device netlink: device batadv0 up master NULL: No such device netlink: add addr 172.20.20.42 dev netdevsim0: No such device netlink: add addr fe80::2a dev netdevsim0: No such device netlink: device netdevsim0 up master NULL: No such device netlink: add addr 172.20.20.43 dev xfrm0: No such device netlink: add addr fe80::2b dev xfrm0: No such device netlink: device xfrm0 up master NULL: No such device netlink: add addr 172.20.20.44 dev veth0_virt_wifi: No such device netlink: add addr fe80::2c dev veth0_virt_wifi: No such device netlink: device veth0_virt_wifi up master NULL: No such device netlink: add addr 172.20.20.45 dev veth1_virt_wifi: No such device netlink: add addr fe80::2d dev veth1_virt_wifi: No such device netlink: device veth1_virt_wifi up master NULL: No such device netlink: add addr 172.20.20.46 dev virt_wifi0: No such device netlink: add addr fe80::2e dev virt_wifi0: No such device netlink: device virt_wifi0 up master NULL: No such device netlink: add addr 172.20.20.47 dev veth0_vlan: No such device netlink: add addr fe80::2f dev veth0_vlan: No such device netlink: device veth0_vlan up master NULL: No such device netlink: add addr 172.20.20.48 dev veth1_vlan: No such device netlink: add addr fe80::30 dev veth1_vlan: No such device netlink: device veth1_vlan up master NULL: No such device netlink: add addr 172.20.20.49 dev vlan0: No such device netlink: add addr fe80::31 dev vlan0: No such device netlink: device vlan0 up master NULL: No such device netlink: add addr 172.20.20.50 dev vlan1: No such device netlink: add addr fe80::32 dev vlan1: No such device netlink: device vlan1 up master NULL: No such device netlink: add addr 172.20.20.51 dev macvlan0: No such device netlink: add addr fe80::33 dev macvlan0: No such device netlink: device macvlan0 up master NULL: No such device netlink: add addr 172.20.20.52 dev macvlan1: No such device netlink: add addr fe80::34 dev macvlan1: No such device netlink: device macvlan1 up master NULL: No such device netlink: add addr 172.20.20.53 dev ipvlan0: No such device netlink: add addr fe80::35 dev ipvlan0: No such device netlink: device ipvlan0 up master NULL: No such device netlink: add addr 172.20.20.54 dev ipvlan1: No such device netlink: add addr fe80::36 dev ipvlan1: No such device netlink: device ipvlan1 up master NULL: No such device netlink: add addr 172.20.20.55 dev veth0_macvtap: No such device netlink: add addr fe80::37 dev veth0_macvtap: No such device netlink: device veth0_macvtap up master NULL: No such device netlink: add addr 172.20.20.56 dev veth1_macvtap: No such device netlink: add addr fe80::38 dev veth1_macvtap: No such device netlink: device veth1_macvtap up master NULL: No such device netlink: add addr 172.20.20.57 dev macvtap0: No such device netlink: add addr fe80::39 dev macvtap0: No such device netlink: device macvtap0 up master NULL: No such device netlink: add addr 172.20.20.58 dev macsec0: No such device netlink: add addr fe80::3a dev macsec0: No such device netlink: device macsec0 up master NULL: No such device netlink: add addr 172.20.20.59 dev veth0_to_batadv: No such device netlink: add addr fe80::3b dev veth0_to_batadv: No such device netlink: device veth0_to_batadv up master NULL: No such device netlink: add addr 172.20.20.60 dev veth1_to_batadv: No such device netlink: add addr fe80::3c dev veth1_to_batadv: No such device netlink: device veth1_to_batadv up master NULL: No such device netlink: add addr 172.20.20.61 dev batadv_slave_0: No such device netlink: add addr fe80::3d dev batadv_slave_0: No such device netlink: device batadv_slave_0 up master NULL: No such device netlink: add addr 172.20.20.62 dev batadv_slave_1: No such device netlink: add addr fe80::3e dev batadv_slave_1: No such device netlink: device batadv_slave_1 up master NULL: No such device netlink: add addr 172.20.20.63 dev geneve0: No such device netlink: add addr fe80::3f dev geneve0: No such device netlink: device geneve0 up master NULL: No such device netlink: add addr 172.20.20.64 dev geneve1: No such device netlink: add addr fe80::40 dev geneve1: No such device netlink: device geneve1 up master NULL: No such device netlink: add addr 172.20.20.65 dev wg0: No such device netlink: add addr fe80::41 dev wg0: No such device netlink: device wg0 up master NULL: No such device netlink: add addr 172.20.20.66 dev wg1: No such device netlink: add addr fe80::42 dev wg1: No such device netlink: device wg1 up master NULL: No such device netlink: add addr 172.20.20.67 dev wg2: No such device netlink: add addr fe80::43 dev wg2: No such device netlink: device wg2 up master NULL: No such device [ 1933.811835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1933.813623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1933.816074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1933.851293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1933.853092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1933.855480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready mkdir(/dev/binderfs) failed: 17 mount of binder at /dev/binderfs failed: 19 mkdir(/syzcgroup/unified/syz0) failed: 17 mkdir(/syzcgroup/cpu/syz0) failed: 17 mkdir(/syzcgroup/net/syz0) failed: 17 iptable checkpoint filter/2: checkpoint entries=4 hooks=e size=632 iptable checkpoint mangle/2: checkpoint entries=6 hooks=1f size=936 iptable checkpoint filter/10: checkpoint entries=4 hooks=e size=856 iptable checkpoint mangle/10: checkpoint entries=6 hooks=1f size=1272 [7690ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3 #0 [7706ms] -> syz_io_uring_setup(0x4d4f, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000200, 0x20000140) #0 [7710ms] <- syz_io_uring_setup=0x3 errno=14 cover=18054 #0 [7713ms] -> syz_io_uring_submit(0x200a0000, 0x20ffc000, 0x20000000, 0x0) #0 [7715ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [7716ms] -> mmap$IORING_OFF_SQ_RING(0x20ffc000, 0x4000, 0x100000e, 0x13, 0x3, 0x0) #0 [7717ms] <- mmap$IORING_OFF_SQ_RING=0x20ffc000 errno=14 cover=1767 #0 [7718ms] -> syz_io_uring_submit(0x20ffc000, 0x20ffc000, 0x20000100, 0x4) #0 [7719ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [7719ms] -> io_uring_enter(0x3, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [7719ms] <- io_uring_enter=0x2 errno=14 cover=820 #0 [7720ms] -> execveat(0xffffffffffffffff, 0x20000040, 0x0, 0x0, 0x0) 2021/11/11 16:03:51 poll: candidates=0 inputs=0 signal=0 killing hanging pid 3 kill is not working failed to open /sys/fs/fuse/connections: 2 [ 1944.175948] kmemleak: 2084 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2021/11/11 16:04:03 poll: candidates=0 inputs=0 signal=0 2021/11/11 16:04:15 poll: candidates=0 inputs=0 signal=0 2021/11/11 16:04:27 poll: candidates=0 inputs=0 signal=0 2021/11/11 16:04:39 result hanged=true: signal: killed 16:04:39 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_SPLICE, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 2021/11/11 16:04:39 fuzzer detected executor failure='executor 0: failed to write control pipe: write |1: broken pipe', retrying #1 2021/11/11 16:04:39 poll: candidates=0 inputs=0 signal=0 bitmap is not found, coverage filter disabled spawned loop pid 322507 mount(fusectl) failed: 2 hci dev id: 2 01 03 0c 00 01 03 10 00 01 01 10 00 01 09 10 00 01 05 10 00 01 23 0c 00 01 14 0c 00 01 25 0c 00 01 38 0c 00 01 39 0c 00 01 05 0c 01 00 01 16 0c 02 00 7d 01 1a 0c 01 02 netlink: add addr 172.30.0.1 dev nr0: No such device netlink: device nr0 up master NULL: No such device netlink: add addr 172.30.1.1 dev rose0: No such device netlink: device rose0 up master NULL: No such device netlink: adding device ip6gretap0 type ip6gretap: Operation not supported netlink: adding device bridge0 type bridge: Operation not supported netlink: adding device vcan0 type vcan: Operation not supported netlink: adding device bond0 type bond: Operation not supported netlink: adding device team0 type team: Operation not supported netlink: adding device dummy0 type dummy: Operation not supported netlink: adding device nlmon0 type nlmon: Operation not supported netlink: adding device caif0 type caif: Operation not supported netlink: adding device batadv0 type batadv: Operation not supported netlink: adding device vxcan1 type vxcan: Operation not supported netlink: adding device netdevsim0 type netdevsim: Operation not supported netlink: adding device (null) type veth: Operation not supported netlink: adding device xfrm0 type xfrm: Operation not supported netlink: adding device wg0 type wireguard: Operation not supported netlink: adding device wg1 type wireguard: Operation not supported netlink: adding device wg2 type wireguard: Operation not supported netlink: adding device bridge_slave_0 type veth peer veth0_to_bridge: Operation not supported netlink: adding device bridge_slave_1 type veth peer veth1_to_bridge: Operation not supported netlink: device bridge_slave_0 up master bridge0: No such device netlink: device bridge_slave_1 up master bridge0: No such device netlink: adding device bond_slave_0 type veth peer veth0_to_bond: Operation not supported netlink: adding device bond_slave_1 type veth peer veth1_to_bond: Operation not supported netlink: device bond_slave_0 up master bond0: No such device netlink: device bond_slave_1 up master bond0: No such device netlink: adding device team_slave_0 type veth peer veth0_to_team: Operation not supported netlink: adding device team_slave_1 type veth peer veth1_to_team: Operation not supported netlink: device team_slave_0 up master team0: No such device netlink: device team_slave_1 up master team0: No such device netlink: adding device batadv_slave_0 type veth peer veth0_to_batadv: Operation not supported netlink: adding device batadv_slave_1 type veth peer veth1_to_batadv: Operation not supported netlink: device batadv_slave_0 up master batadv0: No such device netlink: device batadv_slave_1 up master batadv0: No such device netlink: device bridge_slave_0 up master NULL: No such device netlink: device bridge_slave_1 up master NULL: No such device netlink: adding device hsr_slave_0 type veth peer veth0_to_hsr: Operation not supported netlink: adding device hsr_slave_1 type veth peer veth1_to_hsr: Operation not supported netlink: adding device hsr0 type hsr slave1 hsr_slave_0 slave2 hsr_slave_1: Unknown error -95 netlink: device hsr_slave_0 up master NULL: No such device netlink: device hsr_slave_1 up master NULL: No such device netlink: adding device veth0_virt_wifi type veth peer veth1_virt_wifi: Operation not supported netlink: adding device virt_wifi0 type virt_wifi link veth1_virt_wifi: Operation not supported netlink: adding device veth0_vlan type veth peer veth1_vlan: Operation not supported netlink: add vlan0 type vlan link veth0_vlan id 0: Operation not supported netlink: add vlan1 type vlan link veth0_vlan id 1: Operation not supported netlink: add macvlan0 type macvlan link veth1_vlan mode 4: Operation not supported netlink: add macvlan1 type macvlan link veth1_vlan mode 4: Operation not supported netlink: add ipvlan0 type ipvlan link veth0_vlan mode 0: Operation not supported netlink: add ipvlan1 type ipvlan link veth0_vlan mode 2: Operation not supported netlink: adding device veth0_macvtap type veth peer veth1_macvtap: Operation not supported netlink: adding device macvtap0 type macvtap link veth0_macvtap: Operation not supported netlink: adding device macsec0 type macsec link veth1_macvtap: Operation not supported netlink: add geneve0 type geneve vni 0: Operation not supported netlink: add geneve1 type geneve vni 1: Operation not supported netlink: failed to get family id for wireguard: No such file or directory netlink: add addr 172.20.20.12 dev bridge0: No such device netlink: add addr fe80::0c dev bridge0: No such device netlink: device bridge0 up master NULL: No such device netlink: add addr 172.20.20.13 dev vcan0: No such device netlink: device vcan0 up master NULL: No such device netlink: add addr 172.20.20.14 dev tunl0: No such device netlink: add addr fe80::0e dev tunl0: No such device netlink: device tunl0 up master NULL: No such device netlink: add addr 172.20.20.15 dev gre0: No such device netlink: add addr fe80::0f dev gre0: No such device netlink: device gre0 up master NULL: No such device netlink: add addr 172.20.20.16 dev gretap0: No such device netlink: add addr fe80::10 dev gretap0: No such device [ 1988.211456] Bluetooth: hci2: command 0x0409 tx timeout netlink: device gretap0 up master NULL: No such device netlink: add addr 172.20.20.17 dev ip_vti0: No such device netlink: add addr fe80::11 dev ip_vti0: No such device netlink: device ip_vti0 up master NULL: No such device netlink: add addr 172.20.20.18 dev ip6_vti0: No such device netlink: add addr fe80::12 dev ip6_vti0: No such device netlink: device ip6_vti0 up master NULL: No such device netlink: add addr 172.20.20.19 dev ip6tnl0: No such device netlink: add addr fe80::13 dev ip6tnl0: No such device netlink: device ip6tnl0 up master NULL: No such device netlink: add addr 172.20.20.20 dev ip6gre0: No such device netlink: add addr fe80::14 dev ip6gre0: No such device netlink: device ip6gre0 up master NULL: No such device netlink: add addr 172.20.20.21 dev ip6gretap0: No such device netlink: add addr fe80::15 dev ip6gretap0: No such device netlink: device ip6gretap0 up master NULL: No such device netlink: add addr 172.20.20.22 dev erspan0: No such device netlink: add addr fe80::16 dev erspan0: No such device netlink: device erspan0 up master NULL: No such device netlink: add addr 172.20.20.23 dev bond0: No such device netlink: add addr fe80::17 dev bond0: No such device netlink: device bond0 up master NULL: No such device netlink: add addr 172.20.20.24 dev veth0: No such device netlink: add addr fe80::18 dev veth0: No such device netlink: device veth0 up master NULL: No such device netlink: add addr 172.20.20.25 dev veth1: No such device netlink: add addr fe80::19 dev veth1: No such device netlink: device veth1 up master NULL: No such device netlink: add addr 172.20.20.26 dev team0: No such device netlink: add addr fe80::1a dev team0: No such device netlink: device team0 up master NULL: No such device netlink: add addr 172.20.20.27 dev veth0_to_bridge: No such device netlink: add addr fe80::1b dev veth0_to_bridge: No such device netlink: device veth0_to_bridge up master NULL: No such device netlink: add addr 172.20.20.28 dev veth1_to_bridge: No such device netlink: add addr fe80::1c dev veth1_to_bridge: No such device netlink: device veth1_to_bridge up master NULL: No such device netlink: add addr 172.20.20.29 dev veth0_to_bond: No such device netlink: add addr fe80::1d dev veth0_to_bond: No such device netlink: device veth0_to_bond up master NULL: No such device netlink: add addr 172.20.20.30 dev veth1_to_bond: No such device netlink: add addr fe80::1e dev veth1_to_bond: No such device netlink: device veth1_to_bond up master NULL: No such device netlink: add addr 172.20.20.31 dev veth0_to_team: No such device netlink: add addr fe80::1f dev veth0_to_team: No such device netlink: device veth0_to_team up master NULL: No such device netlink: add addr 172.20.20.32 dev veth1_to_team: No such device netlink: add addr fe80::20 dev veth1_to_team: No such device netlink: device veth1_to_team up master NULL: No such device netlink: add addr 172.20.20.33 dev veth0_to_hsr: No such device netlink: add addr fe80::21 dev veth0_to_hsr: No such device netlink: device veth0_to_hsr up master NULL: No such device netlink: add addr 172.20.20.34 dev veth1_to_hsr: No such device netlink: add addr fe80::22 dev veth1_to_hsr: No such device netlink: device veth1_to_hsr up master NULL: No such device netlink: add addr 172.20.20.35 dev hsr0: No such device netlink: add addr fe80::23 dev hsr0: No such device netlink: device hsr0 up master NULL: No such device netlink: add addr 172.20.20.36 dev dummy0: No such device netlink: add addr fe80::24 dev dummy0: No such device netlink: device dummy0 up master NULL: No such device netlink: add addr 172.20.20.37 dev nlmon0: No such device netlink: add addr fe80::25 dev nlmon0: No such device netlink: device nlmon0 up master NULL: No such device netlink: add addr 172.20.20.38 dev vxcan0: No such device netlink: device vxcan0 up master NULL: No such device netlink: add addr 172.20.20.39 dev vxcan1: No such device netlink: device vxcan1 up master NULL: No such device netlink: add addr 172.20.20.40 dev caif0: No such device netlink: add addr fe80::28 dev caif0: No such device netlink: device caif0 up master NULL: No such device netlink: add addr 172.20.20.41 dev batadv0: No such device netlink: add addr fe80::29 dev batadv0: No such device [ 1990.258486] Bluetooth: hci2: command 0x041b tx timeout netlink: device batadv0 up master NULL: No such device netlink: add addr 172.20.20.42 dev netdevsim0: No such device netlink: add addr fe80::2a dev netdevsim0: No such device netlink: device netdevsim0 up master NULL: No such device netlink: add addr 172.20.20.43 dev xfrm0: No such device netlink: add addr fe80::2b dev xfrm0: No such device netlink: device xfrm0 up master NULL: No such device netlink: add addr 172.20.20.44 dev veth0_virt_wifi: No such device netlink: add addr fe80::2c dev veth0_virt_wifi: No such device netlink: device veth0_virt_wifi up master NULL: No such device netlink: add addr 172.20.20.45 dev veth1_virt_wifi: No such device netlink: add addr fe80::2d dev veth1_virt_wifi: No such device netlink: device veth1_virt_wifi up master NULL: No such device netlink: add addr 172.20.20.46 dev virt_wifi0: No such device netlink: add addr fe80::2e dev virt_wifi0: No such device netlink: device virt_wifi0 up master NULL: No such device netlink: add addr 172.20.20.47 dev veth0_vlan: No such device netlink: add addr fe80::2f dev veth0_vlan: No such device netlink: device veth0_vlan up master NULL: No such device netlink: add addr 172.20.20.48 dev veth1_vlan: No such device netlink: add addr fe80::30 dev veth1_vlan: No such device netlink: device veth1_vlan up master NULL: No such device netlink: add addr 172.20.20.49 dev vlan0: No such device netlink: add addr fe80::31 dev vlan0: No such device netlink: device vlan0 up master NULL: No such device netlink: add addr 172.20.20.50 dev vlan1: No such device netlink: add addr fe80::32 dev vlan1: No such device netlink: device vlan1 up master NULL: No such device netlink: add addr 172.20.20.51 dev macvlan0: No such device netlink: add addr fe80::33 dev macvlan0: No such device netlink: device macvlan0 up master NULL: No such device netlink: add addr 172.20.20.52 dev macvlan1: No such device netlink: add addr fe80::34 dev macvlan1: No such device netlink: device macvlan1 up master NULL: No such device netlink: add addr 172.20.20.53 dev ipvlan0: No such device netlink: add addr fe80::35 dev ipvlan0: No such device netlink: device ipvlan0 up master NULL: No such device netlink: add addr 172.20.20.54 dev ipvlan1: No such device netlink: add addr fe80::36 dev ipvlan1: No such device netlink: device ipvlan1 up master NULL: No such device netlink: add addr 172.20.20.55 dev veth0_macvtap: No such device netlink: add addr fe80::37 dev veth0_macvtap: No such device netlink: device veth0_macvtap up master NULL: No such device netlink: add addr 172.20.20.56 dev veth1_macvtap: No such device netlink: add addr fe80::38 dev veth1_macvtap: No such device netlink: device veth1_macvtap up master NULL: No such device netlink: add addr 172.20.20.57 dev macvtap0: No such device netlink: add addr fe80::39 dev macvtap0: No such device netlink: device macvtap0 up master NULL: No such device netlink: add addr 172.20.20.58 dev macsec0: No such device netlink: add addr fe80::3a dev macsec0: No such device netlink: device macsec0 up master NULL: No such device netlink: add addr 172.20.20.59 dev veth0_to_batadv: No such device netlink: add addr fe80::3b dev veth0_to_batadv: No such device netlink: device veth0_to_batadv up master NULL: No such device netlink: add addr 172.20.20.60 dev veth1_to_batadv: No such device netlink: add addr fe80::3c dev veth1_to_batadv: No such device netlink: device veth1_to_batadv up master NULL: No such device netlink: add addr 172.20.20.61 dev batadv_slave_0: No such device netlink: add addr fe80::3d dev batadv_slave_0: No such device netlink: device batadv_slave_0 up master NULL: No such device netlink: add addr 172.20.20.62 dev batadv_slave_1: No such device netlink: add addr fe80::3e dev batadv_slave_1: No such device netlink: device batadv_slave_1 up master NULL: No such device netlink: add addr 172.20.20.63 dev geneve0: No such device netlink: add addr fe80::3f dev geneve0: No such device netlink: device geneve0 up master NULL: No such device netlink: add addr 172.20.20.64 dev geneve1: No such device netlink: add addr fe80::40 dev geneve1: No such device netlink: device geneve1 up master NULL: No such device netlink: add addr 172.20.20.65 dev wg0: No such device netlink: add addr fe80::41 dev wg0: No such device netlink: device wg0 up master NULL: No such device [ 1992.306451] Bluetooth: hci2: command 0x040f tx timeout netlink: add addr 172.20.20.66 dev wg1: No such device netlink: add addr fe80::42 dev wg1: No such device netlink: device wg1 up master NULL: No such device netlink: add addr 172.20.20.67 dev wg2: No such device netlink: add addr fe80::43 dev wg2: No such device netlink: device wg2 up master NULL: No such device [ 1992.498314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1992.500528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1992.506364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1992.526046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1992.528044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1992.530848] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready mkdir(/dev/binderfs) failed: 17 mount of binder at /dev/binderfs failed: 19 mkdir(/syzcgroup/unified/syz0) failed: 17 mkdir(/syzcgroup/cpu/syz0) failed: 17 mkdir(/syzcgroup/net/syz0) failed: 17 iptable checkpoint filter/2: checkpoint entries=4 hooks=e size=632 iptable checkpoint mangle/2: checkpoint entries=6 hooks=1f size=936 iptable checkpoint filter/10: checkpoint entries=4 hooks=e size=856 iptable checkpoint mangle/10: checkpoint entries=6 hooks=1f size=1272 [7567ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3 #0 [7585ms] -> syz_io_uring_setup(0x4d4f, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000200, 0x20000140) #0 [7591ms] <- syz_io_uring_setup=0x3 errno=14 cover=17922 #0 [7592ms] -> syz_io_uring_submit(0x200a0000, 0x20ffc000, 0x20000000, 0x0) #0 [7593ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [7593ms] -> mmap$IORING_OFF_SQ_RING(0x20ffc000, 0x4000, 0x100000e, 0x13, 0x3, 0x0) #0 [7593ms] <- mmap$IORING_OFF_SQ_RING=0x20ffc000 errno=14 cover=1923 #0 [7593ms] -> syz_io_uring_submit(0x20ffc000, 0x20ffc000, 0x20000100, 0x4) #0 [7593ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [7593ms] -> io_uring_enter(0x3, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [7594ms] <- io_uring_enter=0x2 errno=14 cover=814 #0 [7594ms] -> execveat(0xffffffffffffffff, 0x20000040, 0x0, 0x0, 0x0) #0 [7596ms] <- execveat=0xffffffffffffffff errno=9 cover=25651 16:04:47 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_SPLICE, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 2021/11/11 16:04:47 result hanged=false: [7640ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 5 #0 [7657ms] -> syz_io_uring_setup(0x4d4f, 0x20000080, 0x200a0000, 0x20ffc000, 0x20000200, 0x20000140) #0 [7666ms] <- syz_io_uring_setup=0x3 errno=14 cover=17978 #0 [7668ms] -> syz_io_uring_submit(0x200a0000, 0x20ffc000, 0x20000000, 0x0) #0 [7668ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [7670ms] -> mmap$IORING_OFF_SQ_RING(0x20ffc000, 0x4000, 0x100000e, 0x13, 0x3, 0x0) #0 [7670ms] <- mmap$IORING_OFF_SQ_RING=0x20ffc000 errno=14 cover=1650 #0 [7671ms] -> syz_io_uring_submit(0x20ffc000, 0x20ffc000, 0x20000100, 0x4) #0 [7672ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [7672ms] -> io_uring_enter(0x3, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [7673ms] <- io_uring_enter=0x2 errno=14 cover=817 #0 [7673ms] -> execveat(0xffffffffffffffff, 0x20000040, 0x0, 0x0, 0x0) [ 1994.354525] Bluetooth: hci2: command 0x0419 tx timeout killing hanging pid 5 kill is not working failed to open /sys/fs/fuse/connections: 2 2021/11/11 16:04:51 poll: candidates=0 inputs=0 signal=0 2021/11/11 16:05:03 poll: candidates=0 inputs=0 signal=0 2021/11/11 16:05:15 poll: candidates=0 inputs=0 signal=0 2021/11/11 16:05:27 poll: candidates=0 inputs=0 signal=0 [ 2037.555499] INFO: task syz-executor.0:321934 blocked for more than 143 seconds. [ 2037.557408] Not tainted 5.10.78 #1 [ 2037.558461] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2037.560462] task:syz-executor.0 state:D stack:28736 pid:321934 ppid:231099 flags:0x00000004 [ 2037.562339] Call Trace: [ 2037.562911] __schedule+0x84b/0x1e90 [ 2037.563675] ? io_schedule_timeout+0x150/0x150 [ 2037.565017] ? tctx_inflight+0xb9/0x230 [ 2037.565857] ? io_recvmsg_copy_hdr+0x680/0x680 [ 2037.566808] schedule+0xcb/0x270 [ 2037.567545] __io_uring_task_cancel+0x1ae/0x250 [ 2037.568539] ? __io_uring_files_cancel+0x1b0/0x1b0 [ 2037.569702] ? __get_user_pages_remote+0xc2/0x860 [ 2037.571533] ? wait_woken+0x250/0x250 [ 2037.572531] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2037.573704] ? trace_rss_stat+0x174/0x210 [ 2037.574747] bprm_execve+0x114/0x1b00 [ 2037.575717] ? get_arg_page+0x153/0x200 [ 2037.576719] ? acct_arg_size+0xe0/0xe0 [ 2037.577753] ? open_exec+0x70/0x70 [ 2037.578684] ? memcpy+0x39/0x60 [ 2037.579542] ? copy_strings.isra.0+0x492/0x690 [ 2037.580677] ? copy_string_kernel+0x3ad/0x440 [ 2037.581807] do_execveat_common.isra.0+0x524/0x670 [ 2037.583004] __x64_sys_execveat+0xe7/0x130 [ 2037.584087] do_syscall_64+0x33/0x40 [ 2037.585041] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2037.586266] RIP: 0033:0x7f7b9cdf3b19 [ 2037.587488] RSP: 002b:00007f7b9a369188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2037.589690] RAX: ffffffffffffffda RBX: 00007f7b9cf06f60 RCX: 00007f7b9cdf3b19 [ 2037.591750] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffffff [ 2037.593846] RBP: 00007f7b9ce4df6d R08: 0000000000000000 R09: 0000000000000000 [ 2037.595913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2037.597786] R13: 00007fffeed1896f R14: 00007f7b9a369300 R15: 0000000000022000 [ 2037.599200] [ 2037.599200] Showing all locks held in the system: [ 2037.600458] 1 lock held by khungtaskd/22: [ 2037.601152] #0: ffffffff84df6720 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x269 [ 2037.602902] 1 lock held by systemd-journal/103: [ 2037.603724] 1 lock held by in:imklog/179: [ 2037.604548] #0: ffff88800db620f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 2037.606187] 2 locks held by rs:main Q:Reg/180: [ 2037.607140] #0: ffff88800d8694f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 2037.608740] #1: ffff88800f8ae438 (sb_writers#3){.+.+}-{0:0}, at: ksys_write+0x12d/0x250 [ 2037.610355] [ 2037.610666] ============================================= [ 2037.610666] 2021/11/11 16:05:37 result hanged=true: signal: killed 2021/11/11 16:05:37 added new input for call #5 execveat to corpus: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_SPLICE, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 2021/11/11 16:05:37 #0: triaging type=7 2021/11/11 16:05:37 triaging input for call #0 syz_io_uring_setup (new signal=2) 16:05:37 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_SPLICE, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 2021/11/11 16:05:37 fuzzer detected executor failure='executor 0: failed to write control pipe: write |1: broken pipe', retrying #1 bitmap is not found, coverage filter disabled spawned loop pid 322975 mount(fusectl) failed: 2 2021/11/11 16:05:39 poll: candidates=0 inputs=0 signal=0 hci dev id: 3 01 03 0c 00 01 03 10 00 01 01 10 00 01 09 10 00 01 05 10 00 01 23 0c 00 01 14 0c 00 01 25 0c 00 01 38 0c 00 01 39 0c 00 01 05 0c 01 00 01 16 0c 02 00 7d 01 1a 0c 01 02 netlink: add addr 172.30.0.1 dev nr0: No such device netlink: device nr0 up master NULL: No such device netlink: add addr 172.30.1.1 dev rose0: No such device netlink: device rose0 up master NULL: No such device netlink: adding device ip6gretap0 type ip6gretap: Operation not supported netlink: adding device bridge0 type bridge: Operation not supported netlink: adding device vcan0 type vcan: Operation not supported netlink: adding device bond0 type bond: Operation not supported netlink: adding device team0 type team: Operation not supported netlink: adding device dummy0 type dummy: Operation not supported netlink: adding device nlmon0 type nlmon: Operation not supported netlink: adding device caif0 type caif: Operation not supported netlink: adding device batadv0 type batadv: Operation not supported netlink: adding device vxcan1 type vxcan: Operation not supported netlink: adding device netdevsim0 type netdevsim: Operation not supported netlink: adding device (null) type veth: Operation not supported netlink: adding device xfrm0 type xfrm: Operation not supported netlink: adding device wg0 type wireguard: Operation not supported netlink: adding device wg1 type wireguard: Operation not supported netlink: adding device wg2 type wireguard: Operation not supported netlink: adding device bridge_slave_0 type veth peer veth0_to_bridge: Operation not supported netlink: adding device bridge_slave_1 type veth peer veth1_to_bridge: Operation not supported netlink: device bridge_slave_0 up master bridge0: No such device netlink: device bridge_slave_1 up master bridge0: No such device netlink: adding device bond_slave_0 type veth peer veth0_to_bond: Operation not supported netlink: adding device bond_slave_1 type veth peer veth1_to_bond: Operation not supported netlink: device bond_slave_0 up master bond0: No such device netlink: device bond_slave_1 up master bond0: No such device netlink: adding device team_slave_0 type veth peer veth0_to_team: Operation not supported netlink: adding device team_slave_1 type veth peer veth1_to_team: Operation not supported netlink: device team_slave_0 up master team0: No such device netlink: device team_slave_1 up master team0: No such device netlink: adding device batadv_slave_0 type veth peer veth0_to_batadv: Operation not supported netlink: adding device batadv_slave_1 type veth peer veth1_to_batadv: Operation not supported netlink: device batadv_slave_0 up master batadv0: No such device netlink: device batadv_slave_1 up master batadv0: No such device netlink: device bridge_slave_0 up master NULL: No such device netlink: device bridge_slave_1 up master NULL: No such device netlink: adding device hsr_slave_0 type veth peer veth0_to_hsr: Operation not supported netlink: adding device hsr_slave_1 type veth peer veth1_to_hsr: Operation not supported netlink: adding device hsr0 type hsr slave1 hsr_slave_0 slave2 hsr_slave_1: Unknown error -95 netlink: device hsr_slave_0 up master NULL: No such device netlink: device hsr_slave_1 up master NULL: No such device netlink: adding device veth0_virt_wifi type veth peer veth1_virt_wifi: Operation not supported netlink: adding device virt_wifi0 type virt_wifi link veth1_virt_wifi: Operation not supported netlink: adding device veth0_vlan type veth peer veth1_vlan: Operation not supported netlink: add vlan0 type vlan link veth0_vlan id 0: Operation not supported netlink: add vlan1 type vlan link veth0_vlan id 1: Operation not supported netlink: add macvlan0 type macvlan link veth1_vlan mode 4: Operation not supported netlink: add macvlan1 type macvlan link veth1_vlan mode 4: Operation not supported netlink: add ipvlan0 type ipvlan link veth0_vlan mode 0: Operation not supported netlink: add ipvlan1 type ipvlan link veth0_vlan mode 2: Operation not supported netlink: adding device veth0_macvtap type veth peer veth1_macvtap: Operation not supported netlink: adding device macvtap0 type macvtap link veth0_macvtap: Operation not supported netlink: adding device macsec0 type macsec link veth1_macvtap: Operation not supported netlink: add geneve0 type geneve vni 0: Operation not supported netlink: add geneve1 type geneve vni 1: Operation not supported netlink: failed to get family id for wireguard: No such file or directory netlink: add addr 172.20.20.12 dev bridge0: No such device netlink: add addr fe80::0c dev bridge0: No such device netlink: device bridge0 up master NULL: No such device netlink: add addr 172.20.20.13 dev vcan0: No such device netlink: device vcan0 up master NULL: No such device netlink: add addr 172.20.20.14 dev tunl0: No such device netlink: add addr fe80::0e dev tunl0: No such device netlink: device tunl0 up master NULL: No such device netlink: add addr 172.20.20.15 dev gre0: No such device netlink: add addr fe80::0f dev gre0: No such device netlink: device gre0 up master NULL: No such device netlink: add addr 172.20.20.16 dev gretap0: No such device [ 2047.026444] Bluetooth: hci3: command 0x0409 tx timeout netlink: add addr fe80::10 dev gretap0: No such device netlink: device gretap0 up master NULL: No such device netlink: add addr 172.20.20.17 dev ip_vti0: No such device netlink: add addr fe80::11 dev ip_vti0: No such device netlink: device ip_vti0 up master NULL: No such device netlink: add addr 172.20.20.18 dev ip6_vti0: No such device netlink: add addr fe80::12 dev ip6_vti0: No such device netlink: device ip6_vti0 up master NULL: No such device netlink: add addr 172.20.20.19 dev ip6tnl0: No such device netlink: add addr fe80::13 dev ip6tnl0: No such device netlink: device ip6tnl0 up master NULL: No such device netlink: add addr 172.20.20.20 dev ip6gre0: No such device netlink: add addr fe80::14 dev ip6gre0: No such device netlink: device ip6gre0 up master NULL: No such device netlink: add addr 172.20.20.21 dev ip6gretap0: No such device netlink: add addr fe80::15 dev ip6gretap0: No such device netlink: device ip6gretap0 up master NULL: No such device netlink: add addr 172.20.20.22 dev erspan0: No such device netlink: add addr fe80::16 dev erspan0: No such device VM DIAGNOSIS: 16:05:33 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8226d24c RDI=ffffffff876c9080 RBP=ffffffff876c9040 RSP=ffff888008e178b8 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0ed925b R14=fffffbfff0ed9212 R15=dffffc0000000000 RIP=ffffffff8226d2a0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555bec39452c CR3=000000001b9e8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 412e7b1000000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffffffff83da28b0 RBX=ffff888008533280 RCX=ffffffff83d8ab68 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83da2c6f RBP=ffffed10010a6650 RSP=ffff88800857fe78 R8 =0000000000000001 R9 =ffff88806cf3406b R10=ffffed100d9e680d R11=0000000000000001 R12=0000000000000001 R13=ffffffff85473288 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83da28be RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f22f68ce018 CR3=000000000cd94000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 a3cb7f7b3b6cbd98 51444e771591c696 YMM02=0000000000000000 0000000000000000 6b1e99b806172e3b 00000000000aea08 YMM03=0000000000000000 0000000000000000 80f09f19808d26a3 00000000000aec48 YMM04=0000000000000000 0000000000000000 72378592601d2e56 000000000035ef00 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aeab0 YMM06=0000000000000000 0000000000000000 1c35822c2613593c 00000000000ae968 YMM07=0000000000000000 0000000000000000 a1fcdcf819d7e1e5 00000000000ae728 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 2000000000000000 2000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000