y_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xc2000258) [857480ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106171 #0 [857506ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [857510ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12747 #0 [857512ms] -> inotify_init1(0x0) #0 [857512ms] <- inotify_init1=0x3 errno=14 cover=637 #0 [857512ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [857513ms] <- perf_event_open=0x4 errno=14 cover=9592 #0 [857514ms] -> inotify_add_watch(0x3, 0x20000140, 0x4000028) #0 [857514ms] <- inotify_add_watch=0x1 errno=14 cover=1071 #0 [857515ms] -> inotify_add_watch(0x3, 0x20000080, 0xc2000258) #0 [857515ms] <- inotify_add_watch=0x1 errno=14 cover=797 2021/11/10 22:34:16 result hanged=false: 22:34:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x4000028) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xc2000258) [857579ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106173 #0 [857598ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [857604ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13292 #0 [857607ms] -> inotify_init1(0x0) #0 [857607ms] <- inotify_init1=0x3 errno=14 cover=680 #0 [857608ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [857609ms] <- perf_event_open=0x4 errno=14 cover=9827 #0 [857610ms] -> inotify_add_watch(0x3, 0x20000140, 0x4000028) #0 [857612ms] <- inotify_add_watch=0x1 errno=14 cover=3568 #0 [857613ms] -> inotify_add_watch(0x3, 0x20000080, 0xc2000258) #0 [857614ms] <- inotify_add_watch=0x1 errno=14 cover=1717 2021/11/10 22:34:16 result hanged=false: 2021/11/10 22:34:16 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x4000028) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xc2000258) 22:34:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000080)={0x1}, 0x8, 0x0) [857681ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106175 #0 [857701ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [857702ms] <- perf_event_open=0x3 errno=14 cover=9879 #0 [857703ms] -> msgsnd(0x0, 0x20000080, 0x8, 0x0) #0 [857703ms] <- msgsnd=0xffffffffffffffff errno=22 cover=504 enabling collider #0 [857718ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [857723ms] <- perf_event_open=0x3 errno=14 cover=10679 #0 [857723ms] -> msgsnd(0x0, 0x20000080, 0x8, 0x0) #0 [857723ms] <- msgsnd=0xffffffffffffffff errno=22 cover=637 2021/11/10 22:34:16 result hanged=false: 2021/11/10 22:34:16 #0: triaging type=7 22:34:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000080)={0x1}, 0x8, 0x0) 2021/11/10 22:34:16 triaging input for call #1 msgsnd (new signal=1) [857775ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106177 #0 [857794ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [857795ms] <- perf_event_open=0x3 errno=14 cover=9996 #0 [857796ms] -> msgsnd(0x0, 0x20000080, 0x8, 0x0) #0 [857796ms] <- msgsnd=0xffffffffffffffff errno=22 cover=537 22:34:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000080)={0x1}, 0x8, 0x0) 2021/11/10 22:34:16 result hanged=false: [857846ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106179 #0 [857864ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [857865ms] <- perf_event_open=0x3 errno=14 cover=9774 #0 [857866ms] -> msgsnd(0x0, 0x20000080, 0x8, 0x0) #0 [857866ms] <- msgsnd=0xffffffffffffffff errno=22 cover=580 22:34:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000080)={0x1}, 0x8, 0x0) 2021/11/10 22:34:16 result hanged=false: [857915ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106181 #0 [857934ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [857935ms] <- perf_event_open=0x3 errno=14 cover=10676 #0 [857939ms] -> msgsnd(0x0, 0x20000080, 0x8, 0x0) #0 [857939ms] <- msgsnd=0xffffffffffffffff errno=22 cover=591 2021/11/10 22:34:16 result hanged=false: 2021/11/10 22:34:16 added new input for call #1 msgsnd to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000080)={0x1}, 0x8, 0x0) 22:34:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=@updsa={0x104, 0x1a, 0x9, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x3f}, [@coaddr={0x14, 0xe, @in=@empty}]}, 0x104}}, 0x0) [857994ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106183 #0 [858016ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [858016ms] <- socket$nl_xfrm=0x3 errno=14 cover=1430 #0 [858019ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [858020ms] <- sendmsg$nl_xfrm=0x104 errno=14 cover=1946 enabling collider #0 [858021ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [858021ms] <- socket$nl_xfrm=0x3 errno=14 cover=1516 22:34:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=@updsa={0x104, 0x1a, 0x9, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x3f}, [@coaddr={0x14, 0xe, @in=@empty}]}, 0x104}}, 0x0) 2021/11/10 22:34:16 result hanged=false: 2021/11/10 22:34:16 #0: triaging type=7 2021/11/10 22:34:16 triaging input for call #1 sendmsg$nl_xfrm (new signal=1) [858067ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106185 #0 [858091ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [858091ms] <- socket$nl_xfrm=0x3 errno=14 cover=1529 #0 [858092ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [858093ms] <- sendmsg$nl_xfrm=0x104 errno=14 cover=1878 22:34:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=@updsa={0x104, 0x1a, 0x9, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x3f}, [@coaddr={0x14, 0xe, @in=@empty}]}, 0x104}}, 0x0) 2021/11/10 22:34:16 result hanged=false: [858135ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106187 #0 [858153ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [858154ms] <- socket$nl_xfrm=0x3 errno=14 cover=1496 #0 [858155ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [858155ms] <- sendmsg$nl_xfrm=0x104 errno=14 cover=1847 2021/11/10 22:34:16 result hanged=false: 22:34:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=@updsa={0x104, 0x1a, 0x9, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x3f}, [@coaddr={0x14, 0xe, @in=@empty}]}, 0x104}}, 0x0) [858198ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106189 #0 [858218ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [858219ms] <- socket$nl_xfrm=0x3 errno=14 cover=1397 #0 [858220ms] -> sendmsg$nl_xfrm(0x3, 0x20002e00, 0x0) #0 [858221ms] <- sendmsg$nl_xfrm=0x104 errno=14 cover=1913 2021/11/10 22:34:16 result hanged=false: 2021/11/10 22:34:16 added new input for call #1 sendmsg$nl_xfrm to corpus: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=@updsa={0x104, 0x1a, 0x9, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x3f}, [@coaddr={0x14, 0xe, @in=@empty}]}, 0x104}}, 0x0) 22:34:16 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ptype\x00') dup3(r1, r0, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f00000011c0)=""/116, 0x74}], 0x1, 0x33, 0x0) [858269ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106191 #0 [858291ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [858293ms] <- perf_event_open=0x3 errno=14 cover=72172 #0 [858294ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001180) #0 [858295ms] <- syz_open_procfs=0x4 errno=13 cover=9451 #0 [858296ms] -> dup3(0x4, 0x3, 0x0) #0 [858313ms] <- dup3=0x3 errno=14 cover=7521 #0 [858313ms] -> preadv(0x3, 0x200010c0, 0x1, 0x33, 0x0) #0 [858313ms] <- preadv=0x46 errno=14 cover=2732 enabling collider #0 [858314ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [858316ms] <- perf_event_open=0x3 errno=14 cover=72199 #0 [858317ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001180) #0 [858318ms] <- syz_open_procfs=0x4 errno=13 cover=7728 pthread_create failed (errno 11) 22:34:16 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ptype\x00') dup3(r1, r0, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f00000011c0)=""/116, 0x74}], 0x1, 0x33, 0x0) 2021/11/10 22:34:16 result hanged=false: 2021/11/10 22:34:16 #0: triaging type=7 2021/11/10 22:34:16 triaging input for call #3 preadv (new signal=21) [858411ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106293 #0 [858435ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [858437ms] <- perf_event_open=0x3 errno=14 cover=72254 #0 [858440ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001180) #0 [858442ms] <- syz_open_procfs=0x4 errno=13 cover=9397 #0 [858445ms] -> dup3(0x4, 0x3, 0x0) #0 [858453ms] <- dup3=0x3 errno=14 cover=7145 #0 [858454ms] -> preadv(0x3, 0x200010c0, 0x1, 0x33, 0x0) #0 [858455ms] <- preadv=0x46 errno=14 cover=2755 22:34:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ptype\x00') dup3(r1, r0, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f00000011c0)=""/116, 0x74}], 0x1, 0x33, 0x0) 2021/11/10 22:34:17 result hanged=false: [858497ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106295 #0 [858517ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [858518ms] <- perf_event_open=0x3 errno=14 cover=72278 #0 [858523ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001180) #0 [858524ms] <- syz_open_procfs=0x4 errno=13 cover=9415 #0 [858525ms] -> dup3(0x4, 0x3, 0x0) #0 [858544ms] <- dup3=0x3 errno=14 cover=7237 #0 [858545ms] -> preadv(0x3, 0x200010c0, 0x1, 0x33, 0x0) #0 [858545ms] <- preadv=0x46 errno=14 cover=2746 22:34:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ptype\x00') dup3(r1, r0, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f00000011c0)=""/116, 0x74}], 0x1, 0x33, 0x0) 2021/11/10 22:34:17 result hanged=false: [858590ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106297 #0 [858610ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [858612ms] <- perf_event_open=0x3 errno=14 cover=72202 #0 [858617ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001180) #0 [858618ms] <- syz_open_procfs=0x4 errno=13 cover=9323 #0 [858623ms] -> dup3(0x4, 0x3, 0x0) #0 [858643ms] <- dup3=0x3 errno=14 cover=7239 #0 [858645ms] -> preadv(0x3, 0x200010c0, 0x1, 0x33, 0x0) #0 [858645ms] <- preadv=0x46 errno=14 cover=2748 2021/11/10 22:34:17 result hanged=false: 2021/11/10 22:34:17 added new input for call #3 preadv to corpus: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ptype\x00') dup3(r1, r0, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f00000011c0)=""/116, 0x74}], 0x1, 0x33, 0x0) 22:34:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ptype\x00') dup3(r1, r0, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f00000011c0)=""/116, 0x74}], 0x1, 0x33, 0x0) 2021/11/10 22:34:17 #0: triaging type=7 2021/11/10 22:34:17 triaging input for call #2 dup3 (new signal=1) [858693ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106299 #0 [858712ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [858714ms] <- perf_event_open=0x3 errno=14 cover=72252 #0 [858719ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001180) #0 [858721ms] <- syz_open_procfs=0x4 errno=13 cover=15876 #0 [858725ms] -> dup3(0x4, 0x3, 0x0) #0 [858750ms] <- dup3=0x3 errno=14 cover=7218 #0 [858752ms] -> preadv(0x3, 0x200010c0, 0x1, 0x33, 0x0) #0 [858752ms] <- preadv=0x46 errno=14 cover=2757 2021/11/10 22:34:17 result hanged=false: 22:34:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ptype\x00') dup3(r1, r0, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f00000011c0)=""/116, 0x74}], 0x1, 0x33, 0x0) [858798ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106301 #0 [858819ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [858825ms] <- perf_event_open=0x3 errno=14 cover=73184 #0 [858830ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001180) #0 [858831ms] <- syz_open_procfs=0x4 errno=13 cover=9383 #0 [858832ms] -> dup3(0x4, 0x3, 0x0) #0 [858843ms] <- dup3=0x3 errno=14 cover=7154 #0 [858845ms] -> preadv(0x3, 0x200010c0, 0x1, 0x33, 0x0) #0 [858845ms] <- preadv=0x46 errno=14 cover=2737 2021/11/10 22:34:17 result hanged=false: 22:34:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ptype\x00') dup3(r1, r0, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f00000011c0)=""/116, 0x74}], 0x1, 0x33, 0x0) [858890ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106303 #0 [858913ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [858916ms] <- perf_event_open=0x3 errno=14 cover=72295 #0 [858922ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001180) #0 [858923ms] <- syz_open_procfs=0x4 errno=13 cover=9433 #0 [858927ms] -> dup3(0x4, 0x3, 0x0) #0 [858943ms] <- dup3=0x3 errno=14 cover=7325 #0 [858944ms] -> preadv(0x3, 0x200010c0, 0x1, 0x33, 0x0) #0 [858944ms] <- preadv=0x46 errno=14 cover=2757 2021/11/10 22:34:17 result hanged=false: 2021/11/10 22:34:17 added new input for call #2 dup3 to corpus: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ptype\x00') dup3(r1, r0, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f00000011c0)=""/116, 0x74}], 0x1, 0x33, 0x0) 22:34:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ptype\x00') dup3(r1, r0, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f00000011c0)=""/116, 0x74}], 0x1, 0x33, 0x0) 2021/11/10 22:34:17 #0: triaging type=7 2021/11/10 22:34:17 triaging input for call #0 perf_event_open (new signal=1) [858993ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106305 #0 [859013ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [859014ms] <- perf_event_open=0x3 errno=14 cover=72294 #0 [859018ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001180) #0 [859019ms] <- syz_open_procfs=0x4 errno=13 cover=9399 #0 [859020ms] -> dup3(0x4, 0x3, 0x0) #0 [859044ms] <- dup3=0x3 errno=14 cover=7346 #0 [859045ms] -> preadv(0x3, 0x200010c0, 0x1, 0x33, 0x0) #0 [859045ms] <- preadv=0x46 errno=14 cover=2757 22:34:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ptype\x00') dup3(r1, r0, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f00000011c0)=""/116, 0x74}], 0x1, 0x33, 0x0) 2021/11/10 22:34:17 result hanged=false: [859096ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106307 #0 [859121ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [859122ms] <- perf_event_open=0x3 errno=14 cover=72150 #0 [859125ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001180) #0 [859126ms] <- syz_open_procfs=0x4 errno=13 cover=9375 #0 [859127ms] -> dup3(0x4, 0x3, 0x0) #0 [859137ms] <- dup3=0x3 errno=14 cover=7478 #0 [859138ms] -> preadv(0x3, 0x200010c0, 0x1, 0x33, 0x0) #0 [859138ms] <- preadv=0x46 errno=14 cover=2681 22:34:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ptype\x00') dup3(r1, r0, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f00000011c0)=""/116, 0x74}], 0x1, 0x33, 0x0) 2021/11/10 22:34:17 result hanged=false: [859180ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106309 #0 [859198ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [859200ms] <- perf_event_open=0x3 errno=14 cover=72196 #0 [859203ms] -> syz_open_procfs(0xffffffffffffffff, 0x20001180) #0 [859204ms] <- syz_open_procfs=0x4 errno=13 cover=9250 #0 [859205ms] -> dup3(0x4, 0x3, 0x0) #0 [859214ms] <- dup3=0x3 errno=14 cover=7408 #0 [859215ms] -> preadv(0x3, 0x200010c0, 0x1, 0x33, 0x0) #0 [859215ms] <- preadv=0x46 errno=14 cover=2771 2021/11/10 22:34:17 result hanged=false: 2021/11/10 22:34:17 added new input for call #0 perf_event_open to corpus: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ptype\x00') dup3(r1, r0, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f00000011c0)=""/116, 0x74}], 0x1, 0x33, 0x0) 22:34:17 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f0000000040)={'wlan1\x00'}) [859266ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106311 2021/11/10 22:34:17 poll: candidates=8 inputs=0 signal=0 #0 [859287ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [859288ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=6279 #0 [859289ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x4, 0x8943, 0x20000040) #0 [859290ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=2189 enabling collider #0 [859291ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [859292ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=5573 2021/11/10 22:34:17 result hanged=false: 22:34:17 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f0000000040)={'wlan1\x00'}) 2021/11/10 22:34:17 #0: triaging type=7 2021/11/10 22:34:17 triaging input for call #1 ioctl$sock_SIOCGIFINDEX_80211 (new signal=6) [859336ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106313 #0 [859356ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [859358ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=6247 #0 [859360ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x4, 0x8943, 0x20000040) #0 [859361ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=270 2021/11/10 22:34:17 result hanged=false: 22:34:17 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f0000000040)={'wlan1\x00'}) [859401ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106315 #0 [859421ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [859422ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=6272 #0 [859423ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x4, 0x8943, 0x20000040) #0 [859423ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=270 22:34:18 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f0000000040)={'wlan1\x00'}) 2021/11/10 22:34:18 result hanged=false: [859470ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106317 #0 [859494ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [859495ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=6239 #0 [859496ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x4, 0x8943, 0x20000040) #0 [859496ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=270 2021/11/10 22:34:18 result hanged=false: 2021/11/10 22:34:18 added new input for call #1 ioctl$sock_SIOCGIFINDEX_80211 to corpus: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f0000000040)={'wlan1\x00'}) 22:34:18 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r0, 0x0, 0x3) [859540ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106319 #0 [859560ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000000, 0x1, 0x0) #0 [859560ms] <- openat$tcp_mem=0x3 errno=14 cover=1699 #0 [859560ms] -> lseek(0x3, 0x0, 0x3) #0 [859561ms] <- lseek=0xffffffffffffffff errno=6 cover=808 enabling collider #0 [859561ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000000, 0x1, 0x0) #0 [859562ms] <- openat$tcp_mem=0x3 errno=14 cover=1654 22:34:18 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r0, 0x0, 0x3) 2021/11/10 22:34:18 result hanged=false: 2021/11/10 22:34:18 #0: triaging type=7 2021/11/10 22:34:18 triaging input for call #1 lseek (new signal=2) [859603ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106321 #0 [859623ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000000, 0x1, 0x0) #0 [859624ms] <- openat$tcp_mem=0x3 errno=14 cover=1844 #0 [859625ms] -> lseek(0x3, 0x0, 0x3) #0 [859625ms] <- lseek=0xffffffffffffffff errno=6 cover=70 22:34:18 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r0, 0x0, 0x3) 2021/11/10 22:34:18 result hanged=false: [859672ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106323 #0 [859691ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000000, 0x1, 0x0) #0 [859692ms] <- openat$tcp_mem=0x3 errno=14 cover=1700 #0 [859694ms] -> lseek(0x3, 0x0, 0x3) #0 [859694ms] <- lseek=0xffffffffffffffff errno=6 cover=70 2021/11/10 22:34:18 result hanged=false: 22:34:18 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r0, 0x0, 0x3) [859736ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106325 #0 [859756ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000000, 0x1, 0x0) #0 [859756ms] <- openat$tcp_mem=0x3 errno=14 cover=1666 #0 [859757ms] -> lseek(0x3, 0x0, 0x3) #0 [859757ms] <- lseek=0xffffffffffffffff errno=6 cover=70 2021/11/10 22:34:18 result hanged=false: 2021/11/10 22:34:18 added new input for call #1 lseek to corpus: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r0, 0x0, 0x3) 22:34:18 executing program 0: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000240)=""/219, 0xdb}], 0x1, 0x0, 0x0) [859802ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106327 #0 [859823ms] -> inotify_init1(0x0) #0 [859824ms] <- inotify_init1=0x3 errno=14 cover=629 #0 [859825ms] -> inotify_add_watch(0x3, 0x20000040, 0x2000003) #0 [859825ms] <- inotify_add_watch=0x1 errno=14 cover=1017 #0 [859826ms] -> syz_open_procfs(0x0, 0x200005c0) #0 [859826ms] <- syz_open_procfs=0x4 errno=14 cover=3417 #0 [859827ms] -> preadv(0x4, 0x20000580, 0x1, 0x0, 0x0) #0 [859827ms] <- preadv=0x8d errno=14 cover=6670 enabling collider #0 [859830ms] -> inotify_init1(0x0) #0 [859830ms] <- inotify_init1=0x3 errno=14 cover=701 #0 [859830ms] -> inotify_add_watch(0x3, 0x20000040, 0x2000003) #0 [859830ms] <- inotify_add_watch=0x1 errno=14 cover=1017 pthread_create failed (errno 11) 22:34:18 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000240)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000400)={0x114, 0x0, 0x55, "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"}) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000280)=0x80000001) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="000000ebff00000055000000", @ANYRES64, @ANYRES16=r0, @ANYRESHEX]) fgetxattr(r4, &(0x7f0000000180)=@random={'os2.', 'fou\x00'}, &(0x7f00000001c0)=""/69, 0x45) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, @private1, @ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65026c, r6}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="34010010", @ANYRES16=r1, @ANYBLOB="00012bbd7000fbdbdf2503000000040005001400070000000000000000000000ffffe000000108000b00", @ANYRES32=r6, @ANYBLOB="ecbf4380b7f35ff68ac5fca447be61025b0649b8b6fdefb57861a758f05c30f70709505fca96006053258c"], 0x34}, 0x1, 0x0, 0x0, 0x88d0}, 0x410) unshare(0x8000000) unshare(0x8000600) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x0]) unshare(0x40040000) unshare(0x40100) 2021/11/10 22:34:18 result hanged=false: [859908ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106429 #0 [859927ms] -> openat$procfs(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [859927ms] <- openat$procfs=0x3 errno=14 cover=1416 #0 [859929ms] -> syz_genetlink_get_family_id$fou(0x20000340, 0x3) syz_genetlink_get_family_id(fou, 3) netlink_send_ext: short netlink write: -1/28 errno=88 netlink: failed to get family id for fou: Socket operation on non-socket syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [859929ms] <- syz_genetlink_get_family_id$fou=0xffffffffffffffff errno=88 cover=2859 #0 [859929ms] -> ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x20000240) #0 [859930ms] <- ioctl$SIOCGSTAMP=0xffffffffffffffff errno=9 cover=45 #0 [859931ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [859932ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1755 #0 [859933ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [859933ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=1778 #0 [859934ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [859935ms] <- syz_open_dev$sg=0x6 errno=14 cover=1443 #0 [859936ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [859937ms] <- syz_open_dev$sg=0x7 errno=14 cover=1432 #0 [859938ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x7, 0x1, 0x20000400) #0 [859939ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0x2 errno=14 cover=1434 #0 [859939ms] -> ioctl$FIBMAP(0x7, 0x1, 0x20000280) #0 [859939ms] <- ioctl$FIBMAP=0xffffffffffffffff errno=22 cover=124 #0 [859940ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x6, 0x1, 0x20000300) #0 [859940ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0xffffffffffffffff errno=22 cover=124 #0 [859940ms] -> fgetxattr(0x6, 0x20000180, 0x200001c0, 0x45) #0 [859941ms] <- fgetxattr=0xffffffffffffffff errno=95 cover=408 #0 [859942ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x20000080) #0 [859942ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [859944ms] -> ioctl$sock_inet6_SIOCADDRT(0x4, 0x890b, 0x20000080) #0 [859944ms] <- ioctl$sock_inet6_SIOCADDRT=0xffffffffffffffff errno=100 cover=372 #0 [859945ms] -> sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x20000140, 0x410) #0 [859945ms] <- sendmsg$FOU_CMD_GET=0xffffffffffffffff errno=9 cover=52 #0 [859946ms] -> unshare(0x8000000) #0 [859949ms] <- unshare=0x0 errno=14 cover=11864 #0 [859951ms] -> unshare(0x8000600) #0 [859955ms] <- unshare=0x0 errno=14 cover=13771 #0 [859955ms] -> semctl$SETALL(0x0, 0x0, 0x11, 0x20000040) #0 [859957ms] <- semctl$SETALL=0xffffffffffffffff errno=22 cover=54 #0 [859957ms] -> unshare(0x40040000) #0 [859977ms] <- unshare=0x0 errno=14 cover=159316 #0 [859981ms] -> unshare(0x40100) #0 [859983ms] <- unshare=0xffffffffffffffff errno=22 cover=42 enabling collider #0 [859984ms] -> openat$procfs(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [859985ms] <- openat$procfs=0x8 errno=14 cover=1382 #0 [859986ms] -> syz_genetlink_get_family_id$fou(0x20000340, 0x8) syz_genetlink_get_family_id(fou, 8) netlink_send_ext: short netlink write: -1/28 errno=88 netlink: failed to get family id for fou: Socket operation on non-socket syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [859986ms] <- syz_genetlink_get_family_id$fou=0xffffffffffffffff errno=88 cover=1069 pthread_create failed (errno 11) 2021/11/10 22:34:18 result hanged=false: 2021/11/10 22:34:18 #0: triaging type=7 2021/11/10 22:34:18 triaging input for call #17 unshare (new signal=1) 22:34:18 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000240)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000400)={0x114, 0x0, 0x55, "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"}) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000280)=0x80000001) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="000000ebff00000055000000", @ANYRES64, @ANYRES16=r0, @ANYRESHEX]) fgetxattr(r4, &(0x7f0000000180)=@random={'os2.', 'fou\x00'}, &(0x7f00000001c0)=""/69, 0x45) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, @private1, @ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65026c, r6}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="34010010", @ANYRES16=r1, @ANYBLOB="00012bbd7000fbdbdf2503000000040005001400070000000000000000000000ffffe000000108000b00", @ANYRES32=r6, @ANYBLOB="ecbf4380b7f35ff68ac5fca447be61025b0649b8b6fdefb57861a758f05c30f70709505fca96006053258c"], 0x34}, 0x1, 0x0, 0x0, 0x88d0}, 0x410) unshare(0x8000000) unshare(0x8000600) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x0]) unshare(0x40040000) unshare(0x40100) [860067ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106531 #0 [860089ms] -> openat$procfs(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [860089ms] <- openat$procfs=0x3 errno=14 cover=1405 #0 [860090ms] -> syz_genetlink_get_family_id$fou(0x20000340, 0x3) syz_genetlink_get_family_id(fou, 3) netlink_send_ext: short netlink write: -1/28 errno=88 netlink: failed to get family id for fou: Socket operation on non-socket syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [860090ms] <- syz_genetlink_get_family_id$fou=0xffffffffffffffff errno=88 cover=2863 #0 [860091ms] -> ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x20000240) #0 [860091ms] <- ioctl$SIOCGSTAMP=0xffffffffffffffff errno=9 cover=45 #0 [860091ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [860092ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1723 #0 [860093ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [860095ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=1723 #0 [860095ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [860096ms] <- syz_open_dev$sg=0x6 errno=14 cover=1390 #0 [860096ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [860096ms] <- syz_open_dev$sg=0x7 errno=14 cover=1403 #0 [860096ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x7, 0x1, 0x20000400) #0 [860097ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0x2 errno=14 cover=1266 #0 [860097ms] -> ioctl$FIBMAP(0x7, 0x1, 0x20000280) #0 [860097ms] <- ioctl$FIBMAP=0xffffffffffffffff errno=22 cover=124 #0 [860097ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x6, 0x1, 0x20000300) #0 [860098ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0xffffffffffffffff errno=22 cover=124 #0 [860098ms] -> fgetxattr(0x6, 0x20000180, 0x200001c0, 0x45) #0 [860098ms] <- fgetxattr=0xffffffffffffffff errno=95 cover=419 #0 [860098ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x20000080) #0 [860099ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [860099ms] -> ioctl$sock_inet6_SIOCADDRT(0x4, 0x890b, 0x20000080) #0 [860099ms] <- ioctl$sock_inet6_SIOCADDRT=0xffffffffffffffff errno=100 cover=361 #0 [860099ms] -> sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x20000140, 0x410) #0 [860100ms] <- sendmsg$FOU_CMD_GET=0xffffffffffffffff errno=9 cover=52 #0 [860100ms] -> unshare(0x8000000) #0 [860103ms] <- unshare=0x0 errno=14 cover=12256 #0 [860105ms] -> unshare(0x8000600) #0 [860109ms] <- unshare=0x0 errno=14 cover=19147 #0 [860111ms] -> semctl$SETALL(0x0, 0x0, 0x11, 0x20000040) #0 [860111ms] <- semctl$SETALL=0xffffffffffffffff errno=22 cover=54 #0 [860111ms] -> unshare(0x40040000) #0 [860131ms] <- unshare=0x0 errno=14 cover=159069 #0 [860142ms] -> unshare(0x40100) #0 [860142ms] <- unshare=0xffffffffffffffff errno=22 cover=42 22:34:18 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000240)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000400)={0x114, 0x0, 0x55, "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"}) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000280)=0x80000001) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="000000ebff00000055000000", @ANYRES64, @ANYRES16=r0, @ANYRESHEX]) fgetxattr(r4, &(0x7f0000000180)=@random={'os2.', 'fou\x00'}, &(0x7f00000001c0)=""/69, 0x45) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, @private1, @ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65026c, r6}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="34010010", @ANYRES16=r1, @ANYBLOB="00012bbd7000fbdbdf2503000000040005001400070000000000000000000000ffffe000000108000b00", @ANYRES32=r6, @ANYBLOB="ecbf4380b7f35ff68ac5fca447be61025b0649b8b6fdefb57861a758f05c30f70709505fca96006053258c"], 0x34}, 0x1, 0x0, 0x0, 0x88d0}, 0x410) unshare(0x8000000) unshare(0x8000600) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x0]) unshare(0x40040000) unshare(0x40100) 2021/11/10 22:34:18 result hanged=false: [860186ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106533 #0 [860212ms] -> openat$procfs(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [860213ms] <- openat$procfs=0x3 errno=14 cover=1416 #0 [860214ms] -> syz_genetlink_get_family_id$fou(0x20000340, 0x3) syz_genetlink_get_family_id(fou, 3) netlink_send_ext: short netlink write: -1/28 errno=88 netlink: failed to get family id for fou: Socket operation on non-socket syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [860214ms] <- syz_genetlink_get_family_id$fou=0xffffffffffffffff errno=88 cover=2931 #0 [860216ms] -> ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x20000240) #0 [860216ms] <- ioctl$SIOCGSTAMP=0xffffffffffffffff errno=9 cover=45 #0 [860216ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [860217ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1676 #0 [860217ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [860217ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=1735 #0 [860218ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [860218ms] <- syz_open_dev$sg=0x6 errno=14 cover=1401 #0 [860219ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [860219ms] <- syz_open_dev$sg=0x7 errno=14 cover=1367 #0 [860219ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x7, 0x1, 0x20000400) #0 [860219ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0x2 errno=14 cover=1411 #0 [860220ms] -> ioctl$FIBMAP(0x7, 0x1, 0x20000280) #0 [860220ms] <- ioctl$FIBMAP=0xffffffffffffffff errno=22 cover=124 #0 [860220ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x6, 0x1, 0x20000300) #0 [860220ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0xffffffffffffffff errno=22 cover=124 #0 [860221ms] -> fgetxattr(0x6, 0x20000180, 0x200001c0, 0x45) #0 [860221ms] <- fgetxattr=0xffffffffffffffff errno=95 cover=408 #0 [860221ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x20000080) #0 [860221ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [860221ms] -> ioctl$sock_inet6_SIOCADDRT(0x4, 0x890b, 0x20000080) #0 [860221ms] <- ioctl$sock_inet6_SIOCADDRT=0xffffffffffffffff errno=100 cover=375 #0 [860222ms] -> sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x20000140, 0x410) #0 [860222ms] <- sendmsg$FOU_CMD_GET=0xffffffffffffffff errno=9 cover=52 #0 [860223ms] -> unshare(0x8000000) #0 [860226ms] <- unshare=0x0 errno=14 cover=11997 #0 [860231ms] -> unshare(0x8000600) #0 [860234ms] <- unshare=0x0 errno=14 cover=13619 #0 [860237ms] -> semctl$SETALL(0x0, 0x0, 0x11, 0x20000040) #0 [860237ms] <- semctl$SETALL=0xffffffffffffffff errno=22 cover=54 #0 [860237ms] -> unshare(0x40040000) #0 [860275ms] <- unshare=0x0 errno=14 cover=159548 #0 [860286ms] -> unshare(0x40100) #0 [860286ms] <- unshare=0xffffffffffffffff errno=22 cover=42 22:34:18 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000240)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000400)={0x114, 0x0, 0x55, "0405367f4e6a2ad296ac22e46abef0f12dab22d3db8ddfda904ab10a964426ef74f756495b06b36259e5882d82e300b4b20087854c1e249bcaa95a6f43f5541ef1dd77a440f961605faa32812049aa48aff0c5f3d01f1fc5bd0d0c602a6be8751ab54ccc23f1be8f3fb83afa0d7a5b805da63e2183077be2638fda08071d6088850223d11c55d232f529cecd72623bf1c3e84078504335fe3f2f48f965419d1928d35bfd4aff493261bb7ccb1a7a3aafdb97ed0291ea61b13da58d14ef1fed967a37d249b498c7fba7daf13eaeac39ef233de3983ece93599d3d107e9f28309f57e6e0656c8a4f88fd15fe7b9b064344dedd7a658a6d3dd5e8d77d01bd29261e32af0103dc7f9bed2f7bea77e7b16a5273972c92"}) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000280)=0x80000001) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="000000ebff00000055000000", @ANYRES64, @ANYRES16=r0, @ANYRESHEX]) fgetxattr(r4, &(0x7f0000000180)=@random={'os2.', 'fou\x00'}, &(0x7f00000001c0)=""/69, 0x45) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, @private1, @ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65026c, r6}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="34010010", @ANYRES16=r1, @ANYBLOB="00012bbd7000fbdbdf2503000000040005001400070000000000000000000000ffffe000000108000b00", @ANYRES32=r6, @ANYBLOB="ecbf4380b7f35ff68ac5fca447be61025b0649b8b6fdefb57861a758f05c30f70709505fca96006053258c"], 0x34}, 0x1, 0x0, 0x0, 0x88d0}, 0x410) unshare(0x8000000) unshare(0x8000600) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x0]) unshare(0x40040000) unshare(0x40100) 2021/11/10 22:34:18 result hanged=false: [860333ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106535 #0 [860356ms] -> openat$procfs(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [860357ms] <- openat$procfs=0x3 errno=14 cover=1460 #0 [860359ms] -> syz_genetlink_get_family_id$fou(0x20000340, 0x3) syz_genetlink_get_family_id(fou, 3) netlink_send_ext: short netlink write: -1/28 errno=88 netlink: failed to get family id for fou: Socket operation on non-socket syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [860359ms] <- syz_genetlink_get_family_id$fou=0xffffffffffffffff errno=88 cover=3746 #0 [860361ms] -> ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x20000240) #0 [860361ms] <- ioctl$SIOCGSTAMP=0xffffffffffffffff errno=9 cover=45 #0 [860362ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [860362ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1698 #0 [860364ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [860364ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=1789 #0 [860366ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [860367ms] <- syz_open_dev$sg=0x6 errno=14 cover=1443 #0 [860368ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [860368ms] <- syz_open_dev$sg=0x7 errno=14 cover=1442 #0 [860369ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x7, 0x1, 0x20000400) #0 [860370ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0x2 errno=14 cover=1398 #0 [860371ms] -> ioctl$FIBMAP(0x7, 0x1, 0x20000280) #0 [860371ms] <- ioctl$FIBMAP=0xffffffffffffffff errno=22 cover=124 #0 [860371ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x6, 0x1, 0x20000300) #0 [860372ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0xffffffffffffffff errno=22 cover=124 #0 [860372ms] -> fgetxattr(0x6, 0x20000180, 0x200001c0, 0x45) #0 [860373ms] <- fgetxattr=0xffffffffffffffff errno=95 cover=408 #0 [860373ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x20000080) #0 [860373ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [860375ms] -> ioctl$sock_inet6_SIOCADDRT(0x4, 0x890b, 0x20000080) #0 [860375ms] <- ioctl$sock_inet6_SIOCADDRT=0xffffffffffffffff errno=100 cover=372 #0 [860376ms] -> sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x20000140, 0x410) #0 [860376ms] <- sendmsg$FOU_CMD_GET=0xffffffffffffffff errno=9 cover=52 #0 [860376ms] -> unshare(0x8000000) #0 [860381ms] <- unshare=0x0 errno=14 cover=12358 #0 [860404ms] -> unshare(0x8000600) #0 [860407ms] <- unshare=0x0 errno=14 cover=13590 #0 [860410ms] -> semctl$SETALL(0x0, 0x0, 0x11, 0x20000040) #0 [860410ms] <- semctl$SETALL=0xffffffffffffffff errno=22 cover=54 #0 [860410ms] -> unshare(0x40040000) #0 [860430ms] <- unshare=0x0 errno=14 cover=159783 #0 [860445ms] -> unshare(0x40100) #0 [860447ms] <- unshare=0xffffffffffffffff errno=22 cover=42 2021/11/10 22:34:19 result hanged=false: 2021/11/10 22:34:19 added new input for call #17 unshare to corpus: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000240)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000400)={0x114, 0x0, 0x55, "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"}) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000280)=0x80000001) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="000000ebff00000055000000", @ANYRES64, @ANYRES16=r0, @ANYRESHEX]) fgetxattr(r4, &(0x7f0000000180)=@random={'os2.', 'fou\x00'}, &(0x7f00000001c0)=""/69, 0x45) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, @private1, @ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65026c, r6}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="34010010", @ANYRES16=r1, @ANYBLOB="00012bbd7000fbdbdf2503000000040005001400070000000000000000000000ffffe000000108000b00", @ANYRES32=r6, @ANYBLOB="ecbf4380b7f35ff68ac5fca447be61025b0649b8b6fdefb57861a758f05c30f70709505fca96006053258c"], 0x34}, 0x1, 0x0, 0x0, 0x88d0}, 0x410) unshare(0x8000000) unshare(0x8000600) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x0]) unshare(0x40040000) unshare(0x40100) 22:34:19 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000240)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000400)={0x114, 0x0, 0x55, "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"}) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000280)=0x80000001) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="000000ebff00000055000000", @ANYRES64, @ANYRES16=r0, @ANYRESHEX]) fgetxattr(r4, &(0x7f0000000180)=@random={'os2.', 'fou\x00'}, &(0x7f00000001c0)=""/69, 0x45) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, @private1, @ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65026c, r6}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="34010010", @ANYRES16=r1, @ANYBLOB="00012bbd7000fbdbdf2503000000040005001400070000000000000000000000ffffe000000108000b00", @ANYRES32=r6, @ANYBLOB="ecbf4380b7f35ff68ac5fca447be61025b0649b8b6fdefb57861a758f05c30f70709505fca96006053258c"], 0x34}, 0x1, 0x0, 0x0, 0x88d0}, 0x410) unshare(0x8000000) unshare(0x8000600) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x0]) unshare(0x40040000) unshare(0x40100) [860512ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 2021/11/10 22:34:19 #0: triaging type=7 2021/11/10 22:34:19 triaging input for call #7 ioctl$SCSI_IOCTL_SEND_COMMAND (new signal=5) spawned worker pid 106537 #0 [860531ms] -> openat$procfs(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [860531ms] <- openat$procfs=0x3 errno=14 cover=1396 #0 [860531ms] -> syz_genetlink_get_family_id$fou(0x20000340, 0x3) syz_genetlink_get_family_id(fou, 3) netlink_send_ext: short netlink write: -1/28 errno=88 netlink: failed to get family id for fou: Socket operation on non-socket syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [860532ms] <- syz_genetlink_get_family_id$fou=0xffffffffffffffff errno=88 cover=2863 #0 [860532ms] -> ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x20000240) #0 [860532ms] <- ioctl$SIOCGSTAMP=0xffffffffffffffff errno=9 cover=45 #0 [860532ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [860532ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1737 #0 [860533ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [860533ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=1742 #0 [860533ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [860533ms] <- syz_open_dev$sg=0x6 errno=14 cover=1381 #0 [860534ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [860534ms] <- syz_open_dev$sg=0x7 errno=14 cover=1412 #0 [860534ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x7, 0x1, 0x20000400) #0 [860534ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0x2 errno=14 cover=1290 #0 [860534ms] -> ioctl$FIBMAP(0x7, 0x1, 0x20000280) #0 [860535ms] <- ioctl$FIBMAP=0xffffffffffffffff errno=22 cover=124 #0 [860535ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x6, 0x1, 0x20000300) #0 [860535ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0xffffffffffffffff errno=22 cover=124 #0 [860535ms] -> fgetxattr(0x6, 0x20000180, 0x200001c0, 0x45) #0 [860535ms] <- fgetxattr=0xffffffffffffffff errno=95 cover=408 #0 [860535ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x20000080) #0 [860535ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [860535ms] -> ioctl$sock_inet6_SIOCADDRT(0x4, 0x890b, 0x20000080) #0 [860535ms] <- ioctl$sock_inet6_SIOCADDRT=0xffffffffffffffff errno=100 cover=372 #0 [860535ms] -> sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x20000140, 0x410) #0 [860535ms] <- sendmsg$FOU_CMD_GET=0xffffffffffffffff errno=9 cover=52 #0 [860535ms] -> unshare(0x8000000) #0 [860538ms] <- unshare=0x0 errno=14 cover=11913 #0 [860539ms] -> unshare(0x8000600) #0 [860542ms] <- unshare=0x0 errno=14 cover=13504 #0 [860543ms] -> semctl$SETALL(0x0, 0x0, 0x11, 0x20000040) #0 [860543ms] <- semctl$SETALL=0xffffffffffffffff errno=22 cover=54 #0 [860543ms] -> unshare(0x40040000) #0 [860579ms] <- unshare=0x0 errno=14 cover=167563 #0 [860594ms] -> unshare(0x40100) #0 [860595ms] <- unshare=0xffffffffffffffff errno=22 cover=42 22:34:19 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000240)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000400)={0x114, 0x0, 0x55, "0405367f4e6a2ad296ac22e46abef0f12dab22d3db8ddfda904ab10a964426ef74f756495b06b36259e5882d82e300b4b20087854c1e249bcaa95a6f43f5541ef1dd77a440f961605faa32812049aa48aff0c5f3d01f1fc5bd0d0c602a6be8751ab54ccc23f1be8f3fb83afa0d7a5b805da63e2183077be2638fda08071d6088850223d11c55d232f529cecd72623bf1c3e84078504335fe3f2f48f965419d1928d35bfd4aff493261bb7ccb1a7a3aafdb97ed0291ea61b13da58d14ef1fed967a37d249b498c7fba7daf13eaeac39ef233de3983ece93599d3d107e9f28309f57e6e0656c8a4f88fd15fe7b9b064344dedd7a658a6d3dd5e8d77d01bd29261e32af0103dc7f9bed2f7bea77e7b16a5273972c92"}) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000280)=0x80000001) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="000000ebff00000055000000", @ANYRES64, @ANYRES16=r0, @ANYRESHEX]) fgetxattr(r4, &(0x7f0000000180)=@random={'os2.', 'fou\x00'}, &(0x7f00000001c0)=""/69, 0x45) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, @private1, @ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65026c, r6}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="34010010", @ANYRES16=r1, @ANYBLOB="00012bbd7000fbdbdf2503000000040005001400070000000000000000000000ffffe000000108000b00", @ANYRES32=r6, @ANYBLOB="ecbf4380b7f35ff68ac5fca447be61025b0649b8b6fdefb57861a758f05c30f70709505fca96006053258c"], 0x34}, 0x1, 0x0, 0x0, 0x88d0}, 0x410) unshare(0x8000000) unshare(0x8000600) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x0]) unshare(0x40040000) unshare(0x40100) 2021/11/10 22:34:19 result hanged=false: [860644ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106539 #0 [860664ms] -> openat$procfs(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [860664ms] <- openat$procfs=0x3 errno=14 cover=1416 #0 [860666ms] -> syz_genetlink_get_family_id$fou(0x20000340, 0x3) syz_genetlink_get_family_id(fou, 3) netlink_send_ext: short netlink write: -1/28 errno=88 netlink: failed to get family id for fou: Socket operation on non-socket syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [860666ms] <- syz_genetlink_get_family_id$fou=0xffffffffffffffff errno=88 cover=2892 #0 [860666ms] -> ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x20000240) #0 [860666ms] <- ioctl$SIOCGSTAMP=0xffffffffffffffff errno=9 cover=45 #0 [860666ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [860667ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1726 #0 [860668ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [860668ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=1710 #0 [860668ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [860669ms] <- syz_open_dev$sg=0x6 errno=14 cover=1404 #0 [860670ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [860670ms] <- syz_open_dev$sg=0x7 errno=14 cover=1434 #0 [860670ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x7, 0x1, 0x20000400) #0 [860670ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0x2 errno=14 cover=1256 #0 [860671ms] -> ioctl$FIBMAP(0x7, 0x1, 0x20000280) #0 [860671ms] <- ioctl$FIBMAP=0xffffffffffffffff errno=22 cover=124 #0 [860671ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x6, 0x1, 0x20000300) #0 [860671ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0xffffffffffffffff errno=22 cover=124 #0 [860671ms] -> fgetxattr(0x6, 0x20000180, 0x200001c0, 0x45) #0 [860671ms] <- fgetxattr=0xffffffffffffffff errno=95 cover=408 #0 [860671ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x20000080) #0 [860671ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [860671ms] -> ioctl$sock_inet6_SIOCADDRT(0x4, 0x890b, 0x20000080) #0 [860671ms] <- ioctl$sock_inet6_SIOCADDRT=0xffffffffffffffff errno=100 cover=361 #0 [860671ms] -> sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x20000140, 0x410) #0 [860672ms] <- sendmsg$FOU_CMD_GET=0xffffffffffffffff errno=9 cover=52 #0 [860672ms] -> unshare(0x8000000) #0 [860674ms] <- unshare=0x0 errno=14 cover=12260 #0 [860675ms] -> unshare(0x8000600) #0 [860678ms] <- unshare=0x0 errno=14 cover=13529 #0 [860679ms] -> semctl$SETALL(0x0, 0x0, 0x11, 0x20000040) #0 [860679ms] <- semctl$SETALL=0xffffffffffffffff errno=22 cover=54 #0 [860679ms] -> unshare(0x40040000) #0 [860700ms] <- unshare=0x0 errno=14 cover=159593 #0 [860711ms] -> unshare(0x40100) #0 [860711ms] <- unshare=0xffffffffffffffff errno=22 cover=42 22:34:19 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000240)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000400)={0x114, 0x0, 0x55, "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"}) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000280)=0x80000001) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="000000ebff00000055000000", @ANYRES64, @ANYRES16=r0, @ANYRESHEX]) fgetxattr(r4, &(0x7f0000000180)=@random={'os2.', 'fou\x00'}, &(0x7f00000001c0)=""/69, 0x45) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, @private1, @ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65026c, r6}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="34010010", @ANYRES16=r1, @ANYBLOB="00012bbd7000fbdbdf2503000000040005001400070000000000000000000000ffffe000000108000b00", @ANYRES32=r6, @ANYBLOB="ecbf4380b7f35ff68ac5fca447be61025b0649b8b6fdefb57861a758f05c30f70709505fca96006053258c"], 0x34}, 0x1, 0x0, 0x0, 0x88d0}, 0x410) unshare(0x8000000) unshare(0x8000600) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x0]) unshare(0x40040000) unshare(0x40100) 2021/11/10 22:34:19 result hanged=false: [860756ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106541 #0 [860778ms] -> openat$procfs(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [860778ms] <- openat$procfs=0x3 errno=14 cover=1405 #0 [860779ms] -> syz_genetlink_get_family_id$fou(0x20000340, 0x3) syz_genetlink_get_family_id(fou, 3) netlink_send_ext: short netlink write: -1/28 errno=88 netlink: failed to get family id for fou: Socket operation on non-socket syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [860780ms] <- syz_genetlink_get_family_id$fou=0xffffffffffffffff errno=88 cover=2871 #0 [860780ms] -> ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x20000240) #0 [860781ms] <- ioctl$SIOCGSTAMP=0xffffffffffffffff errno=9 cover=45 #0 [860781ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [860782ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1726 #0 [860782ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [860783ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=1702 #0 [860783ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [860784ms] <- syz_open_dev$sg=0x6 errno=14 cover=1438 #0 [860785ms] -> syz_open_dev$sg(0x20000040, 0x0, 0x0) #0 [860785ms] <- syz_open_dev$sg=0x7 errno=14 cover=1356 #0 [860786ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x7, 0x1, 0x20000400) #0 [860786ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0x2 errno=14 cover=1291 #0 [860787ms] -> ioctl$FIBMAP(0x7, 0x1, 0x20000280) #0 [860787ms] <- ioctl$FIBMAP=0xffffffffffffffff errno=22 cover=124 #0 [860787ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x6, 0x1, 0x20000300) #0 [860787ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0xffffffffffffffff errno=22 cover=124 #0 [860787ms] -> fgetxattr(0x6, 0x20000180, 0x200001c0, 0x45) #0 [860787ms] <- fgetxattr=0xffffffffffffffff errno=95 cover=397 #0 [860787ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x20000080) #0 [860787ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [860787ms] -> ioctl$sock_inet6_SIOCADDRT(0x4, 0x890b, 0x20000080) #0 [860788ms] <- ioctl$sock_inet6_SIOCADDRT=0xffffffffffffffff errno=100 cover=375 #0 [860788ms] -> sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x20000140, 0x410) #0 [860788ms] <- sendmsg$FOU_CMD_GET=0xffffffffffffffff errno=9 cover=52 #0 [860788ms] -> unshare(0x8000000) #0 [860793ms] <- unshare=0x0 errno=14 cover=15728 #0 [860794ms] -> unshare(0x8000600) #0 [860797ms] <- unshare=0x0 errno=14 cover=13512 #0 [860798ms] -> semctl$SETALL(0x0, 0x0, 0x11, 0x20000040) #0 [860798ms] <- semctl$SETALL=0xffffffffffffffff errno=22 cover=54 #0 [860798ms] -> unshare(0x40040000) #0 [860815ms] <- unshare=0x0 errno=14 cover=159886 #0 [860828ms] -> unshare(0x40100) #0 [860829ms] <- unshare=0xffffffffffffffff errno=22 cover=42 2021/11/10 22:34:19 result hanged=false: 2021/11/10 22:34:19 added new input for call #7 ioctl$SCSI_IOCTL_SEND_COMMAND to corpus: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000240)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000400)={0x114, 0x0, 0x55, "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"}) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000280)=0x80000001) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="000000ebff00000055000000", @ANYRES64, @ANYRES16=r0, @ANYRESHEX]) fgetxattr(r4, &(0x7f0000000180)=@random={'os2.', 'fou\x00'}, &(0x7f00000001c0)=""/69, 0x45) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, @private1, @ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65026c, r6}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="34010010", @ANYRES16=r1, @ANYBLOB="00012bbd7000fbdbdf2503000000040005001400070000000000000000000000ffffe000000108000b00", @ANYRES32=r6, @ANYBLOB="ecbf4380b7f35ff68ac5fca447be61025b0649b8b6fdefb57861a758f05c30f70709505fca96006053258c"], 0x34}, 0x1, 0x0, 0x0, 0x88d0}, 0x410) unshare(0x8000000) unshare(0x8000600) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x0]) unshare(0x40040000) unshare(0x40100) 22:34:19 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='stack\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/178, 0xb2}], 0x1, 0x200, 0x0) [860883ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106543 [ 920.090751] audit: type=1326 audit(1636583659.481:2495): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=110173 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe15fe41b19 code=0x0 #0 [860902ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [860903ms] <- syz_open_procfs=0x3 errno=14 cover=4280 #0 [860903ms] -> prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) SIGSEGV on (nil), exiting #1 [861904ms] -> preadv(0x3, 0x200004c0, 0x1, 0x200, 0x0) #1 [861905ms] <- preadv=0xffffffffffffffff errno=3 cover=376 enabling collider #1 [862011ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #1 [862013ms] <- syz_open_procfs=0x3 errno=14 cover=3803 #1 [862013ms] -> prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) SIGSEGV on (nil), exiting [ 921.201699] audit: type=1326 audit(1636583660.591:2496): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=110173 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe15fe41b19 code=0x0 #2 [862015ms] -> preadv(0x3, 0x200004c0, 0x1, 0x200, 0x0) #2 [862015ms] <- preadv=0xffffffffffffffff errno=3 cover=343 22:34:20 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='stack\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/178, 0xb2}], 0x1, 0x200, 0x0) 2021/11/10 22:34:20 result hanged=false: 2021/11/10 22:34:20 #0: triaging type=7 2021/11/10 22:34:20 triaging input for call #2 preadv (new signal=2) [862086ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106548 #0 [862127ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [862128ms] <- syz_open_procfs=0x3 errno=14 cover=4243 #0 [862130ms] -> prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) SIGSEGV on (nil), exiting [ 921.322706] audit: type=1326 audit(1636583660.712:2497): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=110178 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe15fe41b19 code=0x0 #1 [863131ms] -> preadv(0x3, 0x200004c0, 0x1, 0x200, 0x0) #1 [863137ms] <- preadv=0xffffffffffffffff errno=3 cover=386 22:34:21 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='stack\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/178, 0xb2}], 0x1, 0x200, 0x0) 2021/11/10 22:34:21 result hanged=false: [863306ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106551 #0 [863336ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [863339ms] <- syz_open_procfs=0x3 errno=14 cover=4235 #0 [863342ms] -> prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) SIGSEGV on (nil), exiting [ 922.529560] audit: type=1326 audit(1636583661.919:2498): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=110181 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe15fe41b19 code=0x0 #1 [864343ms] -> preadv(0x3, 0x200004c0, 0x1, 0x200, 0x0) #1 [864343ms] <- preadv=0xffffffffffffffff errno=3 cover=332 2021/11/10 22:34:23 result hanged=false: 22:34:23 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='stack\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/178, 0xb2}], 0x1, 0x200, 0x0) [864486ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106554 #0 [864504ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000100) #0 [864506ms] <- syz_open_procfs=0x3 errno=14 cover=4265 #0 [864508ms] -> prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) SIGSEGV on (nil), exiting [ 923.695701] audit: type=1326 audit(1636583663.086:2499): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=110184 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe15fe41b19 code=0x0 #1 [865509ms] -> preadv(0x3, 0x200004c0, 0x1, 0x200, 0x0) #1 [865509ms] <- preadv=0xffffffffffffffff errno=3 cover=343 2021/11/10 22:34:24 result hanged=false: 2021/11/10 22:34:24 added new input for call #2 preadv to corpus: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='stack\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/178, 0xb2}], 0x1, 0x200, 0x0) 22:34:24 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000004c80)='./file0\x00', 0x0, 0x1, &(0x7f0000004d00)=[{&(0x7f0000004cc0)="f4", 0x1}], 0x0, 0x0) [865655ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106557 #0 [865672ms] -> syz_mount_image$vfat(0x0, 0x20004c80, 0x0, 0x1, 0x20004d00, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [865676ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=22131 enabling collider #0 [865685ms] -> syz_mount_image$vfat(0x0, 0x20004c80, 0x0, 0x1, 0x20004d00, 0x0, 0x0) #0 [865690ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=16 cover=5842 22:34:24 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000400)={@link_local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "ee7c63", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, {[@hopopts={0x0, 0x2, '\x00', [@generic={0x2, 0x1, '#'}, @calipso={0x7, 0x8}, @pad1]}]}}}}}, 0x0) 2021/11/10 22:34:24 result hanged=false: [865761ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106559 #0 [865785ms] -> syz_emit_ethernet(0x4e, 0x20000400, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa 00 86 dd 60 ee 7c 63 00 18 00 00 20 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 02 01 23 07 08 00 00 00 00 00 00 00 00 00 01 00 #0 [865785ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=22817 enabling collider #0 [865786ms] -> syz_emit_ethernet(0x4e, 0x20000400, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa 00 86 dd 60 ee 7c 63 00 18 00 00 20 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 02 01 23 07 08 00 00 00 00 00 00 00 00 00 01 00 #0 [865786ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=22809 22:34:24 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000400)={@link_local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "ee7c63", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, {[@hopopts={0x0, 0x2, '\x00', [@generic={0x2, 0x1, '#'}, @calipso={0x7, 0x8}, @pad1]}]}}}}}, 0x0) 2021/11/10 22:34:24 result hanged=false: 2021/11/10 22:34:24 #0: triaging type=7 2021/11/10 22:34:24 triaging input for call #0 syz_emit_ethernet (new signal=2) [865842ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106561 #0 [865860ms] -> syz_emit_ethernet(0x4e, 0x20000400, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa 00 86 dd 60 ee 7c 63 00 18 00 00 20 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 02 01 23 07 08 00 00 00 00 00 00 00 00 00 01 00 #0 [865861ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=22484 2021/11/10 22:34:24 result hanged=false: 22:34:24 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000400)={@link_local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "ee7c63", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, {[@hopopts={0x0, 0x2, '\x00', [@generic={0x2, 0x1, '#'}, @calipso={0x7, 0x8}, @pad1]}]}}}}}, 0x0) [865900ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106563 #0 [865916ms] -> syz_emit_ethernet(0x4e, 0x20000400, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa 00 86 dd 60 ee 7c 63 00 18 00 00 20 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 02 01 23 07 08 00 00 00 00 00 00 00 00 00 01 00 #0 [865917ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=22484 22:34:24 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000400)={@link_local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "ee7c63", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, {[@hopopts={0x0, 0x2, '\x00', [@generic={0x2, 0x1, '#'}, @calipso={0x7, 0x8}, @pad1]}]}}}}}, 0x0) 2021/11/10 22:34:24 result hanged=false: [865955ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106565 #0 [865971ms] -> syz_emit_ethernet(0x4e, 0x20000400, 0x0) 01 80 c2 00 00 00 aa aa aa aa aa 00 86 dd 60 ee 7c 63 00 18 00 00 20 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 02 01 23 07 08 00 00 00 00 00 00 00 00 00 01 00 #0 [865973ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=22781 2021/11/10 22:34:24 result hanged=false: 2021/11/10 22:34:24 added new input for call #0 syz_emit_ethernet to corpus: syz_emit_ethernet(0x4e, &(0x7f0000000400)={@link_local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "ee7c63", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, {[@hopopts={0x0, 0x2, '\x00', [@generic={0x2, 0x1, '#'}, @calipso={0x7, 0x8}, @pad1]}]}}}}}, 0x0) 22:34:24 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)="fb", 0x1}], 0x1}}], 0x1, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) dup2(r1, r0) [866019ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106567 #0 [866037ms] -> socket$inet(0x2, 0x1, 0x0) #0 [866038ms] <- socket$inet=0x3 errno=14 cover=1982 #0 [866039ms] -> bind$inet(0x3, 0x20000080, 0x10) #0 [866039ms] <- bind$inet=0x0 errno=14 cover=498 #0 [866039ms] -> connect$inet(0x3, 0x20000140, 0x10) 2021/11/10 22:34:25 poll: candidates=0 inputs=0 signal=0 pthread_create failed (errno 11) 2021/11/10 22:34:25 result hanged=false: 22:34:25 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) 2021/11/10 22:34:25 poll: candidates=8 inputs=0 signal=0 iptable filter/2: resetting iptable mangle/2: resetting [867110ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106669 #0 [867129ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [867130ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1665 #0 [867130ms] -> ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0x3, 0x50009418, 0x0) #0 [867130ms] <- ioctl$BTRFS_IOC_SUBVOL_CREATE_V2=0xffffffffffffffff errno=25 cover=117 enabling collider #0 [867131ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [867132ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1697 22:34:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getxattr(0x0, 0x0, &(0x7f0000000140)=""/4096, 0x1000) 2021/11/10 22:34:25 result hanged=false: [867169ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106671 #0 [867186ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [867188ms] <- perf_event_open=0x3 errno=14 cover=12246 #0 [867190ms] -> getxattr(0x0, 0x0, 0x20000140, 0x1000) #0 [867190ms] <- getxattr=0xffffffffffffffff errno=14 cover=603 enabling collider #0 [867201ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [867202ms] <- perf_event_open=0x3 errno=14 cover=10429 #0 [867203ms] -> getxattr(0x0, 0x0, 0x20000140, 0x1000) #0 [867203ms] <- getxattr=0xffffffffffffffff errno=14 cover=593 22:34:25 executing program 0: process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) 2021/11/10 22:34:25 result hanged=false: [867252ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106673 #0 [867268ms] -> process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) #0 [867271ms] <- process_vm_writev=0xffffffffffffffff errno=22 cover=35 enabling collider #0 [867271ms] -> process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) #0 [867272ms] <- process_vm_writev=0xffffffffffffffff errno=22 cover=35 22:34:25 executing program 0: process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) 2021/11/10 22:34:25 result hanged=false: 2021/11/10 22:34:25 #0: triaging type=7 2021/11/10 22:34:25 triaging input for call #0 process_vm_writev (new signal=1) [867311ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106675 #0 [867327ms] -> process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) #0 [867327ms] <- process_vm_writev=0xffffffffffffffff errno=22 cover=35 2021/11/10 22:34:25 result hanged=false: 22:34:25 executing program 0: process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) [867378ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106677 #0 [867395ms] -> process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) #0 [867396ms] <- process_vm_writev=0xffffffffffffffff errno=22 cover=35 22:34:25 executing program 0: process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) 2021/11/10 22:34:25 result hanged=false: [867435ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106679 #0 [867452ms] -> process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) #0 [867452ms] <- process_vm_writev=0xffffffffffffffff errno=22 cover=35 2021/11/10 22:34:26 result hanged=false: 2021/11/10 22:34:26 added new input for call #0 process_vm_writev to corpus: process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) 22:34:26 executing program 0: kexec_load(0x0, 0x0, 0x0, 0x0) [867502ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106681 #0 [867519ms] -> kexec_load(0x0, 0x0, 0x0, 0x0) #0 [867520ms] <- kexec_load=0x0 errno=14 cover=21242 enabling collider #0 [867524ms] -> kexec_load(0x0, 0x0, 0x0, 0x0) #0 [867524ms] <- kexec_load=0x0 errno=14 cover=128 2021/11/10 22:34:26 result hanged=false: 2021/11/10 22:34:26 #0: triaging type=7 2021/11/10 22:34:26 triaging input for call #0 kexec_load (new signal=37) 22:34:26 executing program 0: kexec_load(0x0, 0x0, 0x0, 0x0) [867565ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106683 #0 [867583ms] -> kexec_load(0x0, 0x0, 0x0, 0x0) #0 [867583ms] <- kexec_load=0x0 errno=14 cover=128 2021/11/10 22:34:26 result hanged=false: 22:34:26 executing program 0: kexec_load(0x0, 0x0, 0x0, 0x0) [867620ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106685 #0 [867638ms] -> kexec_load(0x0, 0x0, 0x0, 0x0) #0 [867638ms] <- kexec_load=0x0 errno=14 cover=128 2021/11/10 22:34:26 result hanged=false: 22:34:26 executing program 0: kexec_load(0x0, 0x0, 0x0, 0x0) [867680ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106687 #0 [867698ms] -> kexec_load(0x0, 0x0, 0x0, 0x0) #0 [867698ms] <- kexec_load=0x0 errno=14 cover=128 2021/11/10 22:34:26 result hanged=false: 2021/11/10 22:34:26 added new input for call #0 kexec_load to corpus: kexec_load(0x0, 0x0, 0x0, 0x0) 22:34:26 executing program 0: semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000100)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) [867741ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106689 #0 [867759ms] -> semctl$SETVAL(0x0, 0x0, 0x10, 0x20000100) #0 [867760ms] <- semctl$SETVAL=0xffffffffffffffff errno=22 cover=39 #0 [867761ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [867762ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1647 #0 [867762ms] -> ioctl$TIOCOUTQ(0x3, 0x5411, 0x20000180) #0 [867762ms] <- ioctl$TIOCOUTQ=0x0 errno=14 cover=187 enabling collider #0 [867762ms] -> semctl$SETVAL(0x0, 0x0, 0x10, 0x20000100) #0 [867762ms] <- semctl$SETVAL=0xffffffffffffffff errno=22 cover=39 #0 [867763ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [867763ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1682 pthread_create failed (errno 11) 2021/11/10 22:34:26 result hanged=false: 2021/11/10 22:34:26 #0: triaging type=7 22:34:26 executing program 0: semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000100)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 2021/11/10 22:34:26 triaging input for call #2 ioctl$TIOCOUTQ (new signal=5) [867833ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106791 #0 [867850ms] -> semctl$SETVAL(0x0, 0x0, 0x10, 0x20000100) #0 [867850ms] <- semctl$SETVAL=0xffffffffffffffff errno=22 cover=39 #0 [867850ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [867851ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1637 #0 [867851ms] -> ioctl$TIOCOUTQ(0x3, 0x5411, 0x20000180) #0 [867851ms] <- ioctl$TIOCOUTQ=0x0 errno=14 cover=187 2021/11/10 22:34:26 result hanged=false: 22:34:26 executing program 0: semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000100)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) [867889ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106793 #0 [867906ms] -> semctl$SETVAL(0x0, 0x0, 0x10, 0x20000100) #0 [867906ms] <- semctl$SETVAL=0xffffffffffffffff errno=22 cover=39 #0 [867907ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [867907ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1714 #0 [867908ms] -> ioctl$TIOCOUTQ(0x3, 0x5411, 0x20000180) #0 [867908ms] <- ioctl$TIOCOUTQ=0x0 errno=14 cover=187 2021/11/10 22:34:26 result hanged=false: 22:34:26 executing program 0: semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000100)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) [867952ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106795 #0 [867970ms] -> semctl$SETVAL(0x0, 0x0, 0x10, 0x20000100) #0 [867971ms] <- semctl$SETVAL=0xffffffffffffffff errno=22 cover=39 #0 [867972ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [867973ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1723 #0 [867974ms] -> ioctl$TIOCOUTQ(0x3, 0x5411, 0x20000180) #0 [867974ms] <- ioctl$TIOCOUTQ=0x0 errno=14 cover=187 2021/11/10 22:34:26 result hanged=false: 2021/11/10 22:34:26 added new input for call #2 ioctl$TIOCOUTQ to corpus: semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000100)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 22:34:26 executing program 0: semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000100)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 2021/11/10 22:34:26 #0: triaging type=7 2021/11/10 22:34:26 triaging input for call #0 semctl$SETVAL (new signal=1) [868015ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106797 #0 [868040ms] -> semctl$SETVAL(0x0, 0x0, 0x10, 0x20000100) #0 [868040ms] <- semctl$SETVAL=0xffffffffffffffff errno=22 cover=39 #0 [868042ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [868043ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1709 #0 [868043ms] -> ioctl$TIOCOUTQ(0x3, 0x5411, 0x20000180) #0 [868043ms] <- ioctl$TIOCOUTQ=0x0 errno=14 cover=187 2021/11/10 22:34:26 result hanged=false: 22:34:26 executing program 0: semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000100)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) [868084ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106799 #0 [868103ms] -> semctl$SETVAL(0x0, 0x0, 0x10, 0x20000100) #0 [868103ms] <- semctl$SETVAL=0xffffffffffffffff errno=22 cover=39 #0 [868104ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [868104ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1737 #0 [868105ms] -> ioctl$TIOCOUTQ(0x3, 0x5411, 0x20000180) #0 [868105ms] <- ioctl$TIOCOUTQ=0x0 errno=14 cover=187 22:34:26 executing program 0: semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000100)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 2021/11/10 22:34:26 result hanged=false: [868142ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106801 #0 [868158ms] -> semctl$SETVAL(0x0, 0x0, 0x10, 0x20000100) #0 [868159ms] <- semctl$SETVAL=0xffffffffffffffff errno=22 cover=39 #0 [868159ms] -> syz_open_dev$tty1(0xc, 0x4, 0x1) #0 [868160ms] <- syz_open_dev$tty1=0x3 errno=14 cover=1680 #0 [868160ms] -> ioctl$TIOCOUTQ(0x3, 0x5411, 0x20000180) #0 [868160ms] <- ioctl$TIOCOUTQ=0x0 errno=14 cover=187 2021/11/10 22:34:26 result hanged=false: 2021/11/10 22:34:26 added new input for call #0 semctl$SETVAL to corpus: semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000100)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 22:34:26 executing program 0: r0 = getpid() wait4(r0, 0x0, 0x60000008, 0x0) [868203ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106803 #0 [868218ms] -> getpid() #0 [868218ms] <- getpid=0x1a133 errno=14 cover=48 #0 [868219ms] -> wait4(0x1a133, 0x0, 0x60000008, 0x0) #0 [868219ms] <- wait4=0xffffffffffffffff errno=10 cover=117 enabling collider #0 [868219ms] -> getpid() #0 [868219ms] <- getpid=0x1a133 errno=14 cover=48 #0 [868219ms] -> wait4(0x1a133, 0x0, 0x6000000822:34:26 executing program 0: r0 = getpid() wait4(r0, 0x0, 0x60000008, 0x0) 2021/11/10 22:34:26 result hanged=false: 2021/11/10 22:34:26 #0: triaging type=7 2021/11/10 22:34:26 triaging input for call #1 wait4 (new signal=3) [868255ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106805 #0 [868277ms] -> getpid() #0 [868277ms] <- getpid=0x1a135 errno=14 cover=48 #0 [868278ms] -> wait4(0x1a135, 0x0, 0x60000008, 0x0) #0 [868279ms] <- wait4=0xffffffffffffffff errno=10 cover=117 22:34:26 executing program 0: r0 = getpid() wait4(r0, 0x0, 0x60000008, 0x0) 2021/11/10 22:34:26 result hanged=false: [868314ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106807 #0 [868329ms] -> getpid() #0 [868329ms] <- getpid=0x1a137 errno=14 cover=48 #0 [868330ms] -> wait4(0x1a137, 0x0, 0x60000008, 0x0) #0 [868330ms] <- wait4=0xffffffffffffffff errno=10 cover=117 22:34:26 executing program 0: r0 = getpid() wait4(r0, 0x0, 0x60000008, 0x0) 2021/11/10 22:34:26 result hanged=false: [868366ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106809 #0 [868384ms] -> getpid() #0 [868384ms] <- getpid=0x1a139 errno=14 cover=48 #0 [868385ms] -> wait4(0x1a139, 0x0, 0x60000008, 0x0) #0 [868385ms] <- wait4=0xffffffffffffffff errno=10 cover=117 2021/11/10 22:34:26 result hanged=false: 2021/11/10 22:34:26 added new input for call #1 wait4 to corpus: r0 = getpid() wait4(r0, 0x0, 0x60000008, 0x0) 22:34:26 executing program 0: io_setup(0x8, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x1000000, 0x0, 0x0, r1, 0x0}]) [868420ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106811 #0 [868437ms] -> io_setup(0x8, 0x20000080) #0 [868438ms] <- io_setup=0x0 errno=14 cover=3377 #0 [868439ms] -> creat(0x20000080, 0x0) #0 [868441ms] <- creat=0x3 errno=14 cover=7608 #0 [868442ms] -> io_submit(0x7fe15ff38000, 0x1, 0x20001140) #0 [868442ms] <- io_submit=0xffffffffffffffff errno=95 cover=625 enabling collider #0 [868442ms] -> io_setup(0x8, 0x20000080) #0 [868442ms] <- io_setup=0xffffffffffffffff errno=22 cover=40 #0 [868443ms] -> creat(0x20000080, 0x0) #0 [868445ms] <- creat=0x3 errno=14 cover=5588 pthread_create failed (errno 11) 2021/11/10 22:34:27 result hanged=false: 22:34:27 executing program 0: io_setup(0x8, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x1000000, 0x0, 0x0, r1, 0x0}]) 2021/11/10 22:34:27 #0: triaging type=7 2021/11/10 22:34:27 triaging input for call #2 io_submit (new signal=1) [868532ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106913 #0 [868553ms] -> io_setup(0x8, 0x20000080) #0 [868556ms] <- io_setup=0x0 errno=14 cover=3407 #0 [868558ms] -> creat(0x20000080, 0x0) #0 [868561ms] <- creat=0x3 errno=14 cover=7299 #0 [868563ms] -> io_submit(0x7fe15ff38000, 0x1, 0x20001140) #0 [868563ms] <- io_submit=0xffffffffffffffff errno=95 cover=625 22:34:27 executing program 0: io_setup(0x8, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x1000000, 0x0, 0x0, r1, 0x0}]) 2021/11/10 22:34:27 result hanged=false: [868612ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106915 #0 [868628ms] -> io_setup(0x8, 0x20000080) #0 [868629ms] <- io_setup=0x0 errno=14 cover=3417 #0 [868629ms] -> creat(0x20000080, 0x0) #0 [868631ms] <- creat=0x3 errno=14 cover=7296 #0 [868632ms] -> io_submit(0x7fe15ff38000, 0x1, 0x20001140) #0 [868632ms] <- io_submit=0xffffffffffffffff errno=95 cover=625 22:34:27 executing program 0: io_setup(0x8, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x1000000, 0x0, 0x0, r1, 0x0}]) 2021/11/10 22:34:27 result hanged=false: [868685ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106917 #0 [868705ms] -> io_setup(0x8, 0x20000080) #0 [868706ms] <- io_setup=0x0 errno=14 cover=3393 #0 [868707ms] -> creat(0x20000080, 0x0) #0 [868710ms] <- creat=0x3 errno=14 cover=10635 #0 [868711ms] -> io_submit(0x7fe15ff38000, 0x1, 0x20001140) #0 [868712ms] <- io_submit=0xffffffffffffffff errno=95 cover=625 2021/11/10 22:34:27 result hanged=false: 2021/11/10 22:34:27 added new input for call #2 io_submit to corpus: io_setup(0x8, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x1000000, 0x0, 0x0, r1, 0x0}]) 22:34:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4) [868763ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106919 #0 [868784ms] -> socket$packet(0x11, 0x3, 0x300) #0 [868784ms] <- socket$packet=0x3 errno=14 cover=1799 #0 [868785ms] -> getsockopt$packet_int(0x3, 0x107, 0x13, 0x20000400, 0x20000440) #0 [868785ms] <- getsockopt$packet_int=0x0 errno=14 cover=116 enabling collider #0 [868791ms] -> socket$packet(0x11, 0x3, 0x300) #0 [868791ms] <- socket$packet=0x3 errno=14 cover=1846 #0 [868791ms] -> getsockopt$packet_int(0x3, 0x107, 0x13, 0x20000400, 0x20000440) #0 [868792ms] <- getsockopt$packet_int=0xffffffffffffffff errno=9 cover=50 22:34:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4) 2021/11/10 22:34:27 result hanged=false: 2021/11/10 22:34:27 #0: triaging type=7 2021/11/10 22:34:27 triaging input for call #1 getsockopt$packet_int (new signal=2) [868831ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106921 #0 [868851ms] -> socket$packet(0x11, 0x3, 0x300) #0 [868851ms] <- socket$packet=0x3 errno=14 cover=1752 #0 [868852ms] -> getsockopt$packet_int(0x3, 0x107, 0x13, 0x20000400, 0x20000440) #0 [868852ms] <- getsockopt$packet_int=0x0 errno=14 cover=116 22:34:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4) 2021/11/10 22:34:27 result hanged=false: [868891ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106923 #0 [868909ms] -> socket$packet(0x11, 0x3, 0x300) #0 [868910ms] <- socket$packet=0x3 errno=14 cover=1763 #0 [868913ms] -> getsockopt$packet_int(0x3, 0x107, 0x13, 0x20000400, 0x20000440) #0 [868913ms] <- getsockopt$packet_int=0x0 errno=14 cover=116 2021/11/10 22:34:27 result hanged=false: 22:34:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4) [868952ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106925 #0 [868970ms] -> socket$packet(0x11, 0x3, 0x300) #0 [868970ms] <- socket$packet=0x3 errno=14 cover=1727 #0 [868971ms] -> getsockopt$packet_int(0x3, 0x107, 0x13, 0x20000400, 0x20000440) #0 [868971ms] <- getsockopt$packet_int=0x0 errno=14 cover=116 2021/11/10 22:34:27 result hanged=false: 2021/11/10 22:34:27 added new input for call #1 getsockopt$packet_int to corpus: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4) 22:34:27 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0xff}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000180)) 2021/11/10 22:34:27 poll: candidates=8 inputs=0 signal=0 [869011ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 106927 #0 [869029ms] -> creat(0x20000040, 0x0) #0 [869033ms] <- creat=0x3 errno=14 cover=7399 #0 [869034ms] -> creat(0x20000040, 0x0) #0 [869036ms] <- creat=0x4 errno=14 cover=5626 #0 [869036ms] -> ioctl$FS_IOC_FSSETXATTR(0x3, 0x40086602, 0x20000000) #0 [869046ms] <- ioctl$FS_IOC_FSSETXATTR=0x0 errno=14 cover=2148 #0 [869046ms] -> ioctl$FS_IOC_FSGETXATTR(0x4, 0x801c581f, 0x20000180) #0 [869046ms] <- ioctl$FS_IOC_FSGETXATTR=0x0 errno=14 cover=140 enabling collider #0 [869047ms] -> creat(0x20000040, 0x0) #0 [869047ms] <- creat=0xffffffffffffffff errno=1 cover=1116 #0 [869047ms] -> creat(0x20000040, 0x0) #0 [869047ms] <- creat=0xffffffffffffffff errno=1 cover=1061 pthread_create failed (errno 11) 22:34:27 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0xff}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000180)) 2021/11/10 22:34:27 result hanged=false: 2021/11/10 22:34:27 #0: triaging type=7 2021/11/10 22:34:27 triaging input for call #3 ioctl$FS_IOC_FSGETXATTR (new signal=10) reset FS_XFLAG_IMMUTABLE [869118ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107029 #0 [869139ms] -> creat(0x20000040, 0x0) #0 [869143ms] <- creat=0x3 errno=14 cover=7291 #0 [869147ms] -> creat(0x20000040, 0x0) #0 [869149ms] <- creat=0x4 errno=14 cover=5625 #0 [869149ms] -> ioctl$FS_IOC_FSSETXATTR(0x3, 0x40086602, 0x20000000) #0 [869156ms] <- ioctl$FS_IOC_FSSETXATTR=0x0 errno=14 cover=2162 #0 [869158ms] -> ioctl$FS_IOC_FSGETXATTR(0x4, 0x801c581f, 0x20000180) #0 [869158ms] <- ioctl$FS_IOC_FSGETXATTR=0x0 errno=14 cover=140 22:34:27 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0xff}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000180)) 2021/11/10 22:34:27 result hanged=false: reset FS_XFLAG_IMMUTABLE [869201ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107031 #0 [869217ms] -> creat(0x20000040, 0x0) #0 [869221ms] <- creat=0x3 errno=14 cover=7440 #0 [869223ms] -> creat(0x20000040, 0x0) #0 [869225ms] <- creat=0x4 errno=14 cover=5680 #0 [869226ms] -> ioctl$FS_IOC_FSSETXATTR(0x3, 0x40086602, 0x20000000) #0 [869233ms] <- ioctl$FS_IOC_FSSETXATTR=0x0 errno=14 cover=2173 #0 [869233ms] -> ioctl$FS_IOC_FSGETXATTR(0x4, 0x801c581f, 0x20000180) #0 [869233ms] <- ioctl$FS_IOC_FSGETXATTR=0x0 errno=14 cover=140 2021/11/10 22:34:27 result hanged=false: 22:34:27 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0xff}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000180)) reset FS_XFLAG_IMMUTABLE [869275ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107033 #0 [869292ms] -> creat(0x20000040, 0x0) #0 [869295ms] <- creat=0x3 errno=14 cover=7387 #0 [869296ms] -> creat(0x20000040, 0x0) #0 [869298ms] <- creat=0x4 errno=14 cover=5683 #0 [869299ms] -> ioctl$FS_IOC_FSSETXATTR(0x3, 0x40086602, 0x20000000) #0 [869305ms] <- ioctl$FS_IOC_FSSETXATTR=0x0 errno=14 cover=2148 #0 [869305ms] -> ioctl$FS_IOC_FSGETXATTR(0x4, 0x801c581f, 0x20000180) #0 [869306ms] <- ioctl$FS_IOC_FSGETXATTR=0x0 errno=14 cover=140 2021/11/10 22:34:27 result hanged=false: 2021/11/10 22:34:27 added new input for call #3 ioctl$FS_IOC_FSGETXATTR to corpus: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0xff}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000180)) 22:34:27 executing program 0: rt_sigprocmask(0x2, &(0x7f0000000700)={[0x5]}, &(0x7f0000000740), 0x8) reset FS_XFLAG_IMMUTABLE [869352ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107035 #0 [869374ms] -> rt_sigprocmask(0x2, 0x20000700, 0x20000740, 0x8) #0 [869375ms] <- rt_sigprocmask=0x0 errno=14 cover=96 enabling collider #0 [869376ms] -> rt_sigprocmask(0x2, 0x20000700, 0x20000740, 0x8) #0 [869376ms] <- rt_sigprocmask=0x0 errno=14 cover=73 22:34:27 executing program 0: rt_sigprocmask(0x2, &(0x7f0000000700)={[0x5]}, &(0x7f0000000740), 0x8) 2021/11/10 22:34:27 result hanged=false: 2021/11/10 22:34:27 #0: triaging type=7 2021/11/10 22:34:27 triaging input for call #0 rt_sigprocmask (new signal=10) [869412ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107037 #0 [869433ms] -> rt_sigprocmask(0x2, 0x20000700, 0x20000740, 0x8) #0 [869433ms] <- rt_sigprocmask=0x0 errno=14 cover=96 22:34:28 executing program 0: rt_sigprocmask(0x2, &(0x7f0000000700)={[0x5]}, &(0x7f0000000740), 0x8) 2021/11/10 22:34:28 result hanged=false: [869471ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107039 #0 [869487ms] -> rt_sigprocmask(0x2, 0x20000700, 0x20000740, 0x8) #0 [869487ms] <- rt_sigprocmask=0x0 errno=14 cover=96 2021/11/10 22:34:28 result hanged=false: 22:34:28 executing program 0: rt_sigprocmask(0x2, &(0x7f0000000700)={[0x5]}, &(0x7f0000000740), 0x8) [869527ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107041 #0 [869543ms] -> rt_sigprocmask(0x2, 0x20000700, 0x20000740, 0x8) #0 [869543ms] <- rt_sigprocmask=0x0 errno=14 cover=96 2021/11/10 22:34:28 result hanged=false: 2021/11/10 22:34:28 added new input for call #0 rt_sigprocmask to corpus: rt_sigprocmask(0x2, &(0x7f0000000700)={[0x5]}, &(0x7f0000000740), 0x8) 22:34:28 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) [869581ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107043 #0 [869603ms] -> syz_mount_image$iso9660(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [869610ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=14 cover=13296 #0 [869611ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [869613ms] <- openat=0x3 errno=14 cover=7381 #0 [869614ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [869614ms] <- openat=0x4 errno=14 cover=2797 #0 [869614ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [869691ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [869695ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [869698ms] <- openat=0x5 errno=14 cover=1232 #0 [869699ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [869699ms] <- openat=0x6 errno=14 cover=2212 #0 [869700ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x0) #0 [869760ms] <- copy_file_range=0x1d0000 errno=14 cover=213202 #0 [869762ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [869762ms] <- openat=0x7 errno=14 cover=1170 #0 [869763ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [869763ms] <- openat=0x8 errno=14 cover=2118 #0 [869763ms] -> copy_file_range(0x8, 0x0, 0x7, 0x0, 0x200f5ef, 0x0) #0 [869822ms] <- copy_file_range=0x1d0000 errno=14 cover=196295 enabling collider #0 [869824ms] -> syz_mount_image$iso9660(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [869825ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=17 cover=1334 #0 [869825ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [869825ms] <- openat=0x3 errno=14 cover=1134 pthread_create failed (errno 11) 2021/11/10 22:34:28 result hanged=false: 2021/11/10 22:34:28 #0: triaging type=7 22:34:28 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) 2021/11/10 22:34:28 triaging input for call #9 copy_file_range (new signal=8) [869906ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107145 #0 [869924ms] -> syz_mount_image$iso9660(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [869930ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=14 cover=13956 #0 [869932ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [869934ms] <- openat=0x3 errno=14 cover=7369 #0 [869936ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [869936ms] <- openat=0x4 errno=14 cover=2815 #0 [869937ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [870016ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [870030ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [870031ms] <- openat=0x5 errno=14 cover=1124 #0 [870031ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [870031ms] <- openat=0x6 errno=14 cover=2198 #0 [870031ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x0) #0 [870106ms] <- copy_file_range=0x1d0000 errno=14 cover=190625 #0 [870117ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [870117ms] <- openat=0x7 errno=14 cover=1134 #0 [870117ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [870118ms] <- openat=0x8 errno=14 cover=2107 #0 [870118ms] -> copy_file_range(0x8, 0x0, 0x7, 0x0, 0x200f5ef, 0x0) #0 [870203ms] <- copy_file_range=0x1d0000 errno=14 cover=190649 22:34:28 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) 2021/11/10 22:34:28 result hanged=false: [870253ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107147 #0 [870270ms] -> syz_mount_image$iso9660(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [870279ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=14 cover=12968 #0 [870281ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [870284ms] <- openat=0x3 errno=14 cover=7305 #0 [870285ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [870285ms] <- openat=0x4 errno=14 cover=2794 #0 [870286ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [870360ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [870376ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [870377ms] <- openat=0x5 errno=14 cover=1135 #0 [870378ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [870378ms] <- openat=0x6 errno=14 cover=2179 #0 [870378ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x0) #0 [870450ms] <- copy_file_range=0x1d0000 errno=14 cover=192841 #0 [870460ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [870461ms] <- openat=0x7 errno=14 cover=1167 #0 [870461ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [870461ms] <- openat=0x8 errno=14 cover=2118 #0 [870461ms] -> copy_file_range(0x8, 0x0, 0x7, 0x0, 0x200f5ef, 0x0) #0 [870517ms] <- copy_file_range=0x1d0000 errno=14 cover=190650 22:34:29 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) 2021/11/10 22:34:29 result hanged=false: [870572ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107149 #0 [870588ms] -> syz_mount_image$iso9660(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [870592ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=14 cover=13077 #0 [870593ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [870596ms] <- openat=0x3 errno=14 cover=7405 #0 [870596ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [870597ms] <- openat=0x4 errno=14 cover=2743 #0 [870598ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [870670ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [870683ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [870683ms] <- openat=0x5 errno=14 cover=1212 #0 [870683ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [870684ms] <- openat=0x6 errno=14 cover=2227 #0 [870684ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x0) #0 [870741ms] <- copy_file_range=0x1d0000 errno=14 cover=190476 #0 [870756ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [870756ms] <- openat=0x7 errno=14 cover=1168 #0 [870756ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [870757ms] <- openat=0x8 errno=14 cover=2130 #0 [870757ms] -> copy_file_range(0x8, 0x0, 0x7, 0x0, 0x200f5ef, 0x0) #0 [870821ms] <- copy_file_range=0x1d0000 errno=14 cover=188264 2021/11/10 22:34:29 result hanged=false: 2021/11/10 22:34:29 added new input for call #9 copy_file_range to corpus: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) 2021/11/10 22:34:29 #0: triaging type=7 22:34:29 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) 2021/11/10 22:34:29 triaging input for call #3 copy_file_range (new signal=10) [870890ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107151 #0 [870914ms] -> syz_mount_image$iso9660(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [870919ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=14 cover=13229 #0 [870920ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [870923ms] <- openat=0x3 errno=14 cover=7345 #0 [870924ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [870924ms] <- openat=0x4 errno=14 cover=2699 #0 [870925ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [871003ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [871019ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [871022ms] <- openat=0x5 errno=14 cover=1200 #0 [871023ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [871024ms] <- openat=0x6 errno=14 cover=2241 #0 [871025ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x0) #0 [871105ms] <- copy_file_range=0x1d0000 errno=14 cover=191054 #0 [871115ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [871115ms] <- openat=0x7 errno=14 cover=1137 #0 [871115ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [871116ms] <- openat=0x8 errno=14 cover=2148 #0 [871117ms] -> copy_file_range(0x8, 0x0, 0x7, 0x0, 0x200f5ef, 0x0) #0 [871287ms] <- copy_file_range=0x1d0000 errno=14 cover=190724 2021/11/10 22:34:29 result hanged=false: 22:34:29 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) [871374ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107153 #0 [871398ms] -> syz_mount_image$iso9660(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [871402ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=14 cover=13732 #0 [871404ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [871407ms] <- openat=0x3 errno=14 cover=7336 #0 [871408ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [871408ms] <- openat=0x4 errno=14 cover=2674 #0 [871408ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [871478ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [871492ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [871492ms] <- openat=0x5 errno=14 cover=1222 #0 [871492ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [871493ms] <- openat=0x6 errno=14 cover=2176 #0 [871493ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x0) #0 [871552ms] <- copy_file_range=0x1d0000 errno=14 cover=190487 #0 [871566ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [871570ms] <- openat=0x7 errno=14 cover=1134 #0 [871570ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [871571ms] <- openat=0x8 errno=14 cover=2147 #0 [871572ms] -> copy_file_range(0x8, 0x0, 0x7, 0x0, 0x200f5ef, 0x0) #0 [871629ms] <- copy_file_range=0x1d0000 errno=14 cover=191064 2021/11/10 22:34:30 result hanged=false: 22:34:30 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) [871686ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107155 #0 [871704ms] -> syz_mount_image$iso9660(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [871708ms] <- syz_mount_image$iso9660=0xffffffffffffffff errno=14 cover=13677 #0 [871710ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [871713ms] <- openat=0x3 errno=14 cover=7405 #0 [871715ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [871715ms] <- openat=0x4 errno=14 cover=2696 #0 [871716ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [871795ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 #0 [871811ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [871811ms] <- openat=0x5 errno=14 cover=1203 #0 [871812ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [871813ms] <- openat=0x6 errno=14 cover=2223 #0 [871814ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x0) #0 [871877ms] <- copy_file_range=0x1d0000 errno=14 cover=192428 #0 [871888ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [871888ms] <- openat=0x7 errno=14 cover=1145 #0 [871888ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [871889ms] <- openat=0x8 errno=14 cover=2172 #0 [871890ms] -> copy_file_range(0x8, 0x0, 0x7, 0x0, 0x200f5ef, 0x0) #0 [871949ms] <- copy_file_range=0x1d0000 errno=14 cover=190632 2021/11/10 22:34:30 result hanged=false: 2021/11/10 22:34:30 added new input for call #3 copy_file_range to corpus: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) 22:34:30 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:auditd_initrc_exec_t:s0\x00', 0x2a, 0x0) [872019ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107157 #0 [872038ms] -> openat$vcs(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0) #0 [872038ms] <- openat$vcs=0x3 errno=14 cover=1161 #0 [872040ms] -> fsetxattr$security_selinux(0x3, 0x20000100, 0x20000140, 0x2a, 0x0) [ 931.227776] audit: type=1400 audit(1636583670.618:2500): avc: denied { associate } for pid=110788 comm="syz-executor.0" name="vcs" dev="devtmpfs" ino=15 scontext=system_u:object_r:auditd_initrc_exec_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 #0 [872041ms] <- fsetxattr$security_selinux=0x0 errno=14 cover=26422 enabling collider #0 [872049ms] -> openat$vcs(0xffffffffffffff9c, 0x200000c0, 0x0, 0x0) #0 [872049ms] <- openat$vcs=0x3 errno=14 cover=1214 #0 [872052ms] -> fsetxattr$security_selinux(0x3, 0x20000100, 0x20000140, 0x2a22:34:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x78, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) 2021/11/10 22:34:30 result hanged=false: [872089ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107159 #0 [872106ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [872109ms] <- perf_event_open=0x3 errno=14 cover=11704 #0 [872110ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [872111ms] <- syz_open_dev$sg=0x4 errno=14 cover=1522 enabling collider #0 [872120ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [872121ms] <- perf_event_open=0x3 errno=14 cover=11622 #0 [872121ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [872122ms] <- syz_open_dev$sg=0x3 errno=14 cover=1368 22:34:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x78, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) 2021/11/10 22:34:30 result hanged=false: 2021/11/10 22:34:30 #0: triaging type=7 2021/11/10 22:34:30 triaging input for call #1 syz_open_dev$sg (new signal=1) [872165ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107161 #0 [872181ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [872182ms] <- perf_event_open=0x3 errno=14 cover=11400 #0 [872184ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [872184ms] <- syz_open_dev$sg=0x4 errno=14 cover=1558 22:34:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x78, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) 2021/11/10 22:34:30 result hanged=false: [872230ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107163 #0 [872247ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [872249ms] <- perf_event_open=0x3 errno=14 cover=13835 #0 [872250ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [872251ms] <- syz_open_dev$sg=0x4 errno=14 cover=2207 22:34:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x78, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) 2021/11/10 22:34:30 result hanged=false: [872297ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107165 #0 [872313ms] -> perf_event_open(0x20001d80, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [872314ms] <- perf_event_open=0x3 errno=14 cover=11189 #0 [872315ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [872315ms] <- syz_open_dev$sg=0x4 errno=14 cover=1637 2021/11/10 22:34:30 result hanged=false: 2021/11/10 22:34:30 added new input for call #1 syz_open_dev$sg to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x78, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) 22:34:30 executing program 0: syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) [872366ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107167 #0 [872383ms] -> syz_mount_image$nfs(0x20000240, 0x20000280, 0x0, 0x0, 0x0, 0x0, 0x20000400) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='nfs' flags=0 opts='' syz_mount_image > mount error: 22 #0 [872387ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=22 cover=2628 enabling collider #0 [872388ms] -> syz_mount_image$nfs(0x20000240, 0x20000280, 0x0, 0x0, 0x0, 0x0, 0x20000400) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='nfs' flags=0 opts='' syz_mount_image > mount error: 22 #0 [872388ms] <- syz_mount_image$nfs=0xffffffffffffffff errno=22 cover=2476 22:34:30 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sysvipc/msg\x00', 0x0, 0x0) pipe2(&(0x7f0000000400), 0x0) 2021/11/10 22:34:30 result hanged=false: [872425ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107169 #0 [872442ms] -> openat$procfs(0xffffffffffffff9c, 0x20000300, 0x0, 0x0) #0 [872442ms] <- openat$procfs=0x3 errno=14 cover=3067 #0 [872443ms] -> pipe2(0x20000400, 0x0) #0 [872443ms] <- pipe2=0x0 errno=14 cover=1115 enabling collider #0 [872445ms] -> openat$procfs(0xffffffffffffff9c, 0x20000300, 0x0, 0x0) #0 [872445ms] <- openat$procfs=0x3 errno=14 cover=1500 22:34:31 executing program 0: r0 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$unix(0x1, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 2021/11/10 22:34:31 result hanged=false: [872476ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107171 #0 [872488ms] -> syz_io_uring_setup(0x4, 0x20000080, 0x20ffe000, 0x20ffc000, 0x20000040, 0x20000140) #0 [872490ms] <- syz_io_uring_setup=0x3 errno=14 cover=7571 #0 [872495ms] -> socket$unix(0x1, 0x2, 0x0) #0 [872495ms] <- socket$unix=0x4 errno=14 cover=1424 #0 [872498ms] -> syz_io_uring_submit(0x20ffe000, 0x20ffc000, 0x20000100, 0x0) #0 [872498ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [872498ms] -> io_uring_enter(0x3, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [872498ms] <- io_uring_enter=0x1 errno=14 cover=347 #0 [872499ms] -> sendmsg$unix(0x4, 0x20001280, 0x0) #0 [872499ms] <- sendmsg$unix=0xffffffffffffffff errno=2 cover=1829 enabling collider #0 [872499ms] -> syz_io_uring_setup(0x4, 0x20000080, 0x20ffe000, 0x20ffc000, 0x20000040, 0x20000140) #0 [872501ms] <- syz_io_uring_setup=0x3 errno=14 cover=9042 #0 [872501ms] -> socket$unix(0x1, 0x2, 0x0) #0 [872501ms] <- socket$unix=0x4 errno=14 cover=1423 pthread_create failed (errno 11) 22:34:31 executing program 0: r0 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$unix(0x1, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 2021/11/10 22:34:31 result hanged=false: 2021/11/10 22:34:31 #0: triaging type=7 2021/11/10 22:34:31 triaging input for call #4 sendmsg$unix (new signal=4) [872555ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107273 #0 [872567ms] -> syz_io_uring_setup(0x4, 0x20000080, 0x20ffe000, 0x20ffc000, 0x20000040, 0x20000140) #0 [872568ms] <- syz_io_uring_setup=0x3 errno=14 cover=7516 #0 [872569ms] -> socket$unix(0x1, 0x2, 0x0) #0 [872569ms] <- socket$unix=0x4 errno=14 cover=1511 #0 [872571ms] -> syz_io_uring_submit(0x20ffe000, 0x20ffc000, 0x20000100, 0x0) #0 [872571ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [872571ms] -> io_uring_enter(0x3, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [872571ms] <- io_uring_enter=0x1 errno=14 cover=336 #0 [872572ms] -> sendmsg$unix(0x4, 0x20001280, 0x0) #0 [872572ms] <- sendmsg$unix=0xffffffffffffffff errno=2 cover=1769 22:34:31 executing program 0: r0 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$unix(0x1, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 2021/11/10 22:34:31 result hanged=false: [872597ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107275 #0 [872608ms] -> syz_io_uring_setup(0x4, 0x20000080, 0x20ffe000, 0x20ffc000, 0x20000040, 0x20000140) #0 [872610ms] <- syz_io_uring_setup=0x3 errno=14 cover=7530 #0 [872611ms] -> socket$unix(0x1, 0x2, 0x0) #0 [872611ms] <- socket$unix=0x4 errno=14 cover=1511 #0 [872613ms] -> syz_io_uring_submit(0x20ffe000, 0x20ffc000, 0x20000100, 0x0) #0 [872613ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [872613ms] -> io_uring_enter(0x3, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [872614ms] <- io_uring_enter=0x1 errno=14 cover=347 #0 [872615ms] -> sendmsg$unix(0x4, 0x20001280, 0x0) #0 [872615ms] <- sendmsg$unix=0xffffffffffffffff errno=2 cover=1780 22:34:31 executing program 0: r0 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$unix(0x1, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 2021/11/10 22:34:31 result hanged=false: [872647ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107277 #0 [872659ms] -> syz_io_uring_setup(0x4, 0x20000080, 0x20ffe000, 0x20ffc000, 0x20000040, 0x20000140) #0 [872660ms] <- syz_io_uring_setup=0x3 errno=14 cover=7566 #0 [872661ms] -> socket$unix(0x1, 0x2, 0x0) #0 [872661ms] <- socket$unix=0x4 errno=14 cover=1500 #0 [872663ms] -> syz_io_uring_submit(0x20ffe000, 0x20ffc000, 0x20000100, 0x0) #0 [872663ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [872663ms] -> io_uring_enter(0x3, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [872664ms] <- io_uring_enter=0x1 errno=14 cover=336 #0 [872664ms] -> sendmsg$unix(0x4, 0x20001280, 0x0) #0 [872664ms] <- sendmsg$unix=0xffffffffffffffff errno=2 cover=1703 2021/11/10 22:34:31 result hanged=false: 2021/11/10 22:34:31 added new input for call #4 sendmsg$unix to corpus: r0 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$unix(0x1, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 22:34:31 executing program 0: r0 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$unix(0x1, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 2021/11/10 22:34:31 #0: triaging type=7 2021/11/10 22:34:31 triaging input for call #3 io_uring_enter (new signal=1) [872699ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107279 #0 [872712ms] -> syz_io_uring_setup(0x4, 0x20000080, 0x20ffe000, 0x20ffc000, 0x20000040, 0x20000140) #0 [872714ms] <- syz_io_uring_setup=0x3 errno=14 cover=7820 #0 [872716ms] -> socket$unix(0x1, 0x2, 0x0) #0 [872717ms] <- socket$unix=0x4 errno=14 cover=1601 #0 [872717ms] -> syz_io_uring_submit(0x20ffe000, 0x20ffc000, 0x20000100, 0x0) #0 [872717ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [872717ms] -> io_uring_enter(0x3, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [872717ms] <- io_uring_enter=0x1 errno=14 cover=336 #0 [872717ms] -> sendmsg$unix(0x4, 0x20001280, 0x0) #0 [872718ms] <- sendmsg$unix=0xffffffffffffffff errno=2 cover=1709 22:34:31 executing program 0: r0 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$unix(0x1, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 2021/11/10 22:34:31 result hanged=false: [872744ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107281 #0 [872756ms] -> syz_io_uring_setup(0x4, 0x20000080, 0x20ffe000, 0x20ffc000, 0x20000040, 0x20000140) #0 [872759ms] <- syz_io_uring_setup=0x3 errno=14 cover=7584 #0 [872759ms] -> socket$unix(0x1, 0x2, 0x0) #0 [872760ms] <- socket$unix=0x4 errno=14 cover=1500 #0 [872761ms] -> syz_io_uring_submit(0x20ffe000, 0x20ffc000, 0x20000100, 0x0) #0 [872761ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [872762ms] -> io_uring_enter(0x3, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [872762ms] <- io_uring_enter=0x1 errno=14 cover=347 #0 [872763ms] -> sendmsg$unix(0x4, 0x20001280, 0x0) #0 [872763ms] <- sendmsg$unix=0xffffffffffffffff errno=2 cover=1778 22:34:31 executing program 0: r0 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$unix(0x1, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 2021/11/10 22:34:31 result hanged=false: [872793ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107283 #0 [872809ms] -> syz_io_uring_setup(0x4, 0x20000080, 0x20ffe000, 0x20ffc000, 0x20000040, 0x20000140) #0 [872812ms] <- syz_io_uring_setup=0x3 errno=14 cover=7725 #0 [872813ms] -> socket$unix(0x1, 0x2, 0x0) #0 [872813ms] <- socket$unix=0x4 errno=14 cover=1533 #0 [872814ms] -> syz_io_uring_submit(0x20ffe000, 0x20ffc000, 0x20000100, 0x0) #0 [872814ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [872815ms] -> io_uring_enter(0x3, 0x58ab, 0x0, 0x0, 0x0, 0x0) #0 [872815ms] <- io_uring_enter=0x1 errno=14 cover=361 #0 [872817ms] -> sendmsg$unix(0x4, 0x20001280, 0x0) #0 [872817ms] <- sendmsg$unix=0xffffffffffffffff errno=2 cover=1756 2021/11/10 22:34:31 result hanged=false: 2021/11/10 22:34:31 added new input for call #3 io_uring_enter to corpus: r0 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$unix(0x1, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 22:34:31 executing program 0: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001940), 0xc, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_mount_image$nfs4(&(0x7f0000001b40), &(0x7f0000001b80)='./file0\x00', 0x0, 0x3, &(0x7f0000001e80)=[{&(0x7f0000001bc0)="0f", 0x1, 0x8000}, {&(0x7f0000001cc0)="5c9cd2ee67d70e1539d5866339", 0xd, 0xfffffffffffffff9}, {&(0x7f0000001dc0)="03b7", 0x2, 0x8}], 0x2000, &(0x7f0000001f00)={[{'/'}, {'#@A)]-'}, {'/dev/nvram\x00'}, {'wlan1\x00'}, {'/dev/nvram\x00'}, {'*'}], [{@obj_type={'obj_type', 0x3d, ',Q'}}]}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 2021/11/10 22:34:31 poll: candidates=8 inputs=0 signal=0 [872848ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107285 #0 [872864ms] -> fcntl$lock(0xffffffffffffffff, 0x0, 0x0) #0 [872866ms] <- fcntl$lock=0xffffffffffffffff errno=9 cover=45 #0 [872867ms] -> sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x20001ac0, 0x0) #0 [872867ms] <- sendmsg$NL80211_CMD_SET_WIPHY_NETNS=0xffffffffffffffff errno=9 cover=52 #0 [872867ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [872867ms] <- socket$inet6_udp=0x3 errno=14 cover=1717 #0 [872871ms] -> syz_mount_image$nfs4(0x20001b40, 0x20001b80, 0x0, 0x3, 0x20001e80, 0x2000, 0x20001f00) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='nfs4' flags=8192 opts='/,#@A)]-,/dev/nvram' syz_mount_image > mount error: 22 #0 [872877ms] <- syz_mount_image$nfs4=0xffffffffffffffff errno=22 cover=3349 #0 [872877ms] -> ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) #0 [872877ms] <- ioctl$EXT4_IOC_ALLOC_DA_BLKS=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [872877ms] -> fcntl$lock(0xffffffffffffffff, 0x0, 0x0) #0 [872877ms] <- fcntl$lock=0xffffffffffffffff errno=9 cover=45 #0 [872878ms] -> sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x20001ac0, 0x0) #0 [872878ms] <- sendmsg$NL80211_CMD_SET_WIPHY_NETNS=0xffffffffffffffff errno=9 cover=52 pthread_create failed (errno 11) 22:34:31 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001240), 0x200, 0x0) 2021/11/10 22:34:31 result hanged=false: [872925ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107387 #0 [872937ms] -> openat$ptmx(0xffffffffffffff9c, 0x20001080, 0x0, 0x0) #0 [872938ms] <- openat$ptmx=0x3 errno=14 cover=8170 #0 [872938ms] -> openat$ttyS3(0xffffffffffffff9c, 0x20001240, 0x200, 0x0) #0 [872939ms] <- openat$ttyS3=0x4 errno=14 cover=4311 enabling collider #0 [872940ms] -> openat$ptmx(0xffffffffffffff9c, 0x20001080, 0x0, 0x0) #0 [872941ms] <- openat$ptmx=0x3 errno=14 cover=8155 22:34:31 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000004540)={0x24, @short}, 0x14) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40060}}], 0x324, 0x0) 2021/11/10 22:34:31 result hanged=false: [872976ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107389 #0 [872993ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [872996ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=6263 #0 [872997ms] -> bind$802154_dgram(0x4, 0x20000000, 0x14) #0 [872998ms] <- bind$802154_dgram=0x0 errno=14 cover=170 #0 [872998ms] -> connect$802154_dgram(0x4, 0x20004540, 0x14) #0 [872998ms] <- connect$802154_dgram=0x0 errno=14 cover=187 #0 [872999ms] -> sendmmsg$sock(0x4, 0x200021c0, 0x324, 0x0) #0 [873127ms] <- sendmmsg$sock=0x324 errno=14 cover=262143 enabling collider #0 [873136ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [873137ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=9674 #0 [873139ms] -> bind$802154_dgram(0x4, 0x20000000, 0x14) #0 [873139ms] <- bind$802154_dgram=0x0 errno=14 cover=170 pthread_create failed (errno 11) 2021/11/10 22:34:31 result hanged=false: 22:34:31 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000004540)={0x24, @short}, 0x14) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40060}}], 0x324, 0x0) 2021/11/10 22:34:31 #0: triaging type=7 2021/11/10 22:34:31 triaging input for call #3 sendmmsg$sock (new signal=13) [873199ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107491 #0 [873216ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [873217ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=6258 #0 [873217ms] -> bind$802154_dgram(0x4, 0x20000000, 0x14) #0 [873217ms] <- bind$802154_dgram=0x0 errno=14 cover=170 #0 [873218ms] -> connect$802154_dgram(0x4, 0x20004540, 0x14) #0 [873218ms] <- connect$802154_dgram=0x0 errno=14 cover=187 #0 [873218ms] -> sendmmsg$sock(0x4, 0x200021c0, 0x324, 0x0) #0 [873343ms] <- sendmmsg$sock=0x324 errno=14 cover=262143 22:34:31 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000004540)={0x24, @short}, 0x14) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40060}}], 0x324, 0x0) 2021/11/10 22:34:31 result hanged=false: [873399ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107493 #0 [873422ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [873426ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=6277 #0 [873428ms] -> bind$802154_dgram(0x4, 0x20000000, 0x14) #0 [873429ms] <- bind$802154_dgram=0x0 errno=14 cover=170 #0 [873430ms] -> connect$802154_dgram(0x4, 0x20004540, 0x14) #0 [873430ms] <- connect$802154_dgram=0x0 errno=14 cover=187 #0 [873431ms] -> sendmmsg$sock(0x4, 0x200021c0, 0x324, 0x0) #0 [873613ms] <- sendmmsg$sock=0x324 errno=14 cover=262143 2021/11/10 22:34:32 result hanged=false: 22:34:32 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000004540)={0x24, @short}, 0x14) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40060}}], 0x324, 0x0) [873680ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107495 #0 [873699ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [873700ms] <- syz_init_net_socket$802154_dgram=0x4 errno=14 cover=6277 #0 [873701ms] -> bind$802154_dgram(0x4, 0x20000000, 0x14) #0 [873701ms] <- bind$802154_dgram=0x0 errno=14 cover=170 #0 [873701ms] -> connect$802154_dgram(0x4, 0x20004540, 0x14) #0 [873701ms] <- connect$802154_dgram=0x0 errno=14 cover=187 #0 [873701ms] -> sendmmsg$sock(0x4, 0x200021c0, 0x324, 0x0) #0 [873879ms] <- sendmmsg$sock=0x324 errno=14 cover=262143 2021/11/10 22:34:32 result hanged=false: 2021/11/10 22:34:32 added new input for call #3 sendmmsg$sock to corpus: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000004540)={0x24, @short}, 0x14) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40060}}], 0x324, 0x0) 22:34:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x40}, 0x800, 0x8000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000480)=[{&(0x7f0000010000)="eb58906d6466722e666174000208200008b8008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}, {0x0}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000380)=ANY=[@ANYRESOCT=r0]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) fcntl$dupfd(r0, 0x406, r0) r1 = fork() migrate_pages(r1, 0x4, &(0x7f0000000200)=0x7a52b9a7, &(0x7f0000000240)=0x1) getegid() r2 = fork() getpgid(r1) ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f00000007c0)={0x100000000000005}, &(0x7f0000000800)) ptrace$getsig(0x4202, r2, 0x2, &(0x7f0000000280)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x9, 0x1d3, 0x0, 0x2, 0xffffffff00000000}) [873949ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107497 #0 [873971ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [873981ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=24392 #0 [873982ms] -> syz_mount_image$vfat(0x20000500, 0x200000c0, 0x0, 0x3, 0x20000480, 0x0, 0x20011300) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 933.180162] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 933.181945] FAT-fs (loop0): bogus number of directory entries (184) [ 933.183276] FAT-fs (loop0): Can't find a valid FAT filesystem syz_mount_image > mount error: 22 #0 [874002ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=33471 #0 [874004ms] -> chdir(0x20000040) #0 [874005ms] <- chdir=0x0 errno=14 cover=638 #0 [874006ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [874010ms] <- openat=0x3 errno=14 cover=7907 #0 [874012ms] -> socket$unix(0x1, 0x1, 0x0) #0 [874012ms] <- socket$unix=0x4 errno=14 cover=1443 #0 [874012ms] -> ioctl$sock_SIOCETHTOOL(0x4, 0x8946, 0x20000080) #0 [874012ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=95 cover=252 #0 [874013ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20000440) #0 [874013ms] <- socketpair$unix=0x0 errno=14 cover=2870 #0 [874014ms] -> fcntl$dupfd(0x4, 0x406, 0x4) #0 [874014ms] <- fcntl$dupfd=0x7 errno=14 cover=110 #0 [874015ms] -> fork() #0 [874037ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [874042ms] -> migrate_pages(0x0, 0x4, 0x20000200, 0x20000240) #0 [874051ms] <- migrate_pages=0x0 errno=14 cover=216395 #0 [874054ms] -> getegid() #0 [874055ms] <- getegid=0x0 errno=14 cover=43 #0 [874055ms] -> fork() #0 [874075ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [874078ms] -> getpgid(0x0) #0 [874078ms] <- getpgid=0x1a3e9 errno=14 cover=48 #0 [874079ms] -> ptrace(0x10, 0x0) #0 [874079ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [874080ms] -> ptrace$peeksig(0x4209, 0x0, 0x200007c0, 0x20000800) #0 [874081ms] <- ptrace$peeksig=0xffffffffffffffff errno=3 cover=64 #0 [874081ms] -> ptrace$getsig(0x4202, 0x0, 0x2, 0x20000280) #0 [874081ms] <- ptrace$getsig=0xffffffffffffffff errno=3 cover=64 #0 [874081ms] -> ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x20000300) #0 [874082ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [874082ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [874094ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=16576 #0 [874095ms] -> syz_mount_image$vfat(0x20000500, 0x200000c0, 0x0, 0x3, 0x20000480, 0x0, 0x20011300) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 933.294573] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 933.296463] FAT-fs (loop0): bogus number of directory entries (184) [ 933.297805] FAT-fs (loop0): Can't find a valid FAT filesystem syz_mount_image > mount error: 22 #0 [874130ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=42635 pthread_create failed (errno 11) 22:34:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x40}, 0x800, 0x8000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000480)=[{&(0x7f0000010000)="eb58906d6466722e666174000208200008b8008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}, {0x0}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000380)=ANY=[@ANYRESOCT=r0]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) fcntl$dupfd(r0, 0x406, r0) r1 = fork() migrate_pages(r1, 0x4, &(0x7f0000000200)=0x7a52b9a7, &(0x7f0000000240)=0x1) getegid() r2 = fork() getpgid(r1) ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f00000007c0)={0x100000000000005}, &(0x7f0000000800)) ptrace$getsig(0x4202, r2, 0x2, &(0x7f0000000280)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x9, 0x1d3, 0x0, 0x2, 0xffffffff00000000}) 2021/11/10 22:34:32 result hanged=false: 2021/11/10 22:34:32 #0: triaging type=7 2021/11/10 22:34:32 triaging input for call #5 ioctl$sock_SIOCETHTOOL (new signal=1) [874229ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107601 #0 [874250ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [874262ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=16597 #0 [874263ms] -> syz_mount_image$vfat(0x20000500, 0x200000c0, 0x0, 0x3, 0x20000480, 0x0, 0x20011300) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 933.464509] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 933.466275] FAT-fs (loop0): bogus number of directory entries (184) [ 933.467589] FAT-fs (loop0): Can't find a valid FAT filesystem syz_mount_image > mount error: 22 #0 [874285ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=30471 #0 [874294ms] -> chdir(0x20000040) #0 [874295ms] <- chdir=0x0 errno=14 cover=628 #0 [874296ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [874298ms] <- openat=0x3 errno=14 cover=7722 #0 [874300ms] -> socket$unix(0x1, 0x1, 0x0) #0 [874302ms] <- socket$unix=0x4 errno=14 cover=1578 #0 [874303ms] -> ioctl$sock_SIOCETHTOOL(0x4, 0x8946, 0x20000080) #0 [874303ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=95 cover=252 #0 [874303ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20000440) #0 [874303ms] <- socketpair$unix=0x0 errno=14 cover=2914 #0 [874304ms] -> fcntl$dupfd(0x4, 0x406, 0x4) #0 [874304ms] <- fcntl$dupfd=0x7 errno=14 cover=110 #0 [874304ms] -> fork() #0 [874322ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [874337ms] -> migrate_pages(0x0, 0x4, 0x20000200, 0x20000240) #0 [874340ms] <- migrate_pages=0x0 errno=14 cover=216355 #0 [874349ms] -> getegid() #0 [874349ms] <- getegid=0x0 errno=14 cover=43 #0 [874349ms] -> fork() #0 [874366ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [874380ms] -> getpgid(0x0) #0 [874380ms] <- getpgid=0x1a451 errno=14 cover=48 #0 [874380ms] -> ptrace(0x10, 0x0) #0 [874380ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [874381ms] -> ptrace$peeksig(0x4209, 0x0, 0x200007c0, 0x20000800) #0 [874381ms] <- ptrace$peeksig=0xffffffffffffffff errno=3 cover=64 #0 [874381ms] -> ptrace$getsig(0x4202, 0x0, 0x2, 0x20000280) #0 [874381ms] <- ptrace$getsig=0xffffffffffffffff errno=3 cover=64 #0 [874381ms] -> ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x20000300) #0 [874381ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=9 cover=45 22:34:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x40}, 0x800, 0x8000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000480)=[{&(0x7f0000010000)="eb58906d6466722e666174000208200008b8008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}, {0x0}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000380)=ANY=[@ANYRESOCT=r0]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) fcntl$dupfd(r0, 0x406, r0) r1 = fork() migrate_pages(r1, 0x4, &(0x7f0000000200)=0x7a52b9a7, &(0x7f0000000240)=0x1) getegid() r2 = fork() getpgid(r1) ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f00000007c0)={0x100000000000005}, &(0x7f0000000800)) ptrace$getsig(0x4202, r2, 0x2, &(0x7f0000000280)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x9, 0x1d3, 0x0, 0x2, 0xffffffff00000000}) 2021/11/10 22:34:32 result hanged=false: [874440ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107605 #0 [874464ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [874473ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=17566 #0 [874475ms] -> syz_mount_image$vfat(0x20000500, 0x200000c0, 0x0, 0x3, 0x20000480, 0x0, 0x20011300) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 933.670567] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 933.672398] FAT-fs (loop0): bogus number of directory entries (184) [ 933.673740] FAT-fs (loop0): Can't find a valid FAT filesystem syz_mount_image > mount error: 22 #0 [874493ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=30430 #0 [874502ms] -> chdir(0x20000040) #0 [874502ms] <- chdir=0x0 errno=14 cover=639 #0 [874502ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [874505ms] <- openat=0x3 errno=14 cover=7672 #0 [874506ms] -> socket$unix(0x1, 0x1, 0x0) #0 [874506ms] <- socket$unix=0x4 errno=14 cover=1432 #0 [874506ms] -> ioctl$sock_SIOCETHTOOL(0x4, 0x8946, 0x20000080) #0 [874506ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=95 cover=252 #0 [874507ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20000440) #0 [874507ms] <- socketpair$unix=0x0 errno=14 cover=2848 #0 [874507ms] -> fcntl$dupfd(0x4, 0x406, 0x4) #0 [874507ms] <- fcntl$dupfd=0x7 errno=14 cover=110 #0 [874507ms] -> fork() #0 [874525ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [874539ms] -> migrate_pages(0x0, 0x4, 0x20000200, 0x20000240) #0 [874542ms] <- migrate_pages=0x0 errno=14 cover=216308 #0 [874551ms] -> getegid() #0 [874551ms] <- getegid=0x0 errno=14 cover=43 #0 [874551ms] -> fork() #0 [874567ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [874581ms] -> getpgid(0x0) #0 [874581ms] <- getpgid=0x1a455 errno=14 cover=48 #0 [874581ms] -> ptrace(0x10, 0x0) #0 [874581ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [874581ms] -> ptrace$peeksig(0x4209, 0x0, 0x200007c0, 0x20000800) #0 [874581ms] <- ptrace$peeksig=0xffffffffffffffff errno=3 cover=64 #0 [874581ms] -> ptrace$getsig(0x4202, 0x0, 0x2, 0x20000280) #0 [874581ms] <- ptrace$getsig=0xffffffffffffffff errno=3 cover=64 #0 [874582ms] -> ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x20000300) #0 [874582ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=9 cover=45 22:34:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x40}, 0x800, 0x8000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000480)=[{&(0x7f0000010000)="eb58906d6466722e666174000208200008b8008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}, {0x0}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000380)=ANY=[@ANYRESOCT=r0]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) fcntl$dupfd(r0, 0x406, r0) r1 = fork() migrate_pages(r1, 0x4, &(0x7f0000000200)=0x7a52b9a7, &(0x7f0000000240)=0x1) getegid() r2 = fork() getpgid(r1) ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f00000007c0)={0x100000000000005}, &(0x7f0000000800)) ptrace$getsig(0x4202, r2, 0x2, &(0x7f0000000280)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x9, 0x1d3, 0x0, 0x2, 0xffffffff00000000}) 2021/11/10 22:34:33 result hanged=false: [874636ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107609 #0 [874656ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [874665ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=16587 #0 [874667ms] -> syz_mount_image$vfat(0x20000500, 0x200000c0, 0x0, 0x3, 0x20000480, 0x0, 0x20011300) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 933.864822] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 933.866660] FAT-fs (loop0): bogus number of directory entries (184) [ 933.868071] FAT-fs (loop0): Can't find a valid FAT filesystem syz_mount_image > mount error: 22 #0 [874685ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=30371 #0 [874692ms] -> chdir(0x20000040) #0 [874692ms] <- chdir=0x0 errno=14 cover=684 #0 [874693ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [874696ms] <- openat=0x3 errno=14 cover=7299 #0 [874697ms] -> socket$unix(0x1, 0x1, 0x0) #0 [874697ms] <- socket$unix=0x4 errno=14 cover=1500 #0 [874698ms] -> ioctl$sock_SIOCETHTOOL(0x4, 0x8946, 0x20000080) #0 [874698ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=95 cover=252 #0 [874699ms] -> socketpair$unix(0x1, 0x2, 0x0, 0x20000440) #0 [874699ms] <- socketpair$unix=0x0 errno=14 cover=2906 #0 [874700ms] -> fcntl$dupfd(0x4, 0x406, 0x4) #0 [874700ms] <- fcntl$dupfd=0x7 errno=14 cover=110 #0 [874700ms] -> fork() #0 [874721ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [874736ms] -> migrate_pages(0x0, 0x4, 0x20000200, 0x20000240) #0 [874740ms] <- migrate_pages=0x0 errno=14 cover=216308 #0 [874749ms] -> getegid() #0 [874749ms] <- getegid=0x0 errno=14 cover=43 #0 [874749ms] -> fork() #0 [874766ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [874780ms] -> getpgid(0x0) #0 [874780ms] <- getpgid=0x1a459 errno=14 cover=48 #0 [874780ms] -> ptrace(0x10, 0x0) #0 [874780ms] <- ptrace=0xffffffffffffffff errno=3 cover=64 #0 [874780ms] -> ptrace$peeksig(0x4209, 0x0, 0x200007c0, 0x20000800) #0 [874780ms] <- ptrace$peeksig=0xffffffffffffffff errno=3 cover=64 #0 [874780ms] -> ptrace$getsig(0x4202, 0x0, 0x2, 0x20000280) #0 [874781ms] <- ptrace$getsig=0xffffffffffffffff errno=3 cover=64 #0 [874781ms] -> ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x20000300) #0 [874781ms] <- ioctl$BLKTRACESETUP=0xffffffffffffffff errno=9 cover=45 2021/11/10 22:34:33 result hanged=false: 2021/11/10 22:34:33 added new input for call #5 ioctl$sock_SIOCETHTOOL to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x40}, 0x800, 0x8000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000480)=[{&(0x7f0000010000)="eb58906d6466722e666174000208200008b8008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}, {0x0}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000380)=ANY=[@ANYRESOCT=r0]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) fcntl$dupfd(r0, 0x406, r0) r1 = fork() migrate_pages(r1, 0x4, &(0x7f0000000200)=0x7a52b9a7, &(0x7f0000000240)=0x1) getegid() r2 = fork() getpgid(r1) ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f00000007c0)={0x100000000000005}, &(0x7f0000000800)) ptrace$getsig(0x4202, r2, 0x2, &(0x7f0000000280)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x9, 0x1d3, 0x0, 0x2, 0xffffffff00000000}) 22:34:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) [874833ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107613 #0 [874856ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [874856ms] <- socket$nl_netfilter=0x3 errno=14 cover=1463 #0 [874857ms] -> sendmsg$NFT_MSG_GETGEN(0x3, 0x20000580, 0x0) #0 [874857ms] <- sendmsg$NFT_MSG_GETGEN=0x14 errno=14 cover=1121 enabling collider #0 [874857ms] -> socket$nl_netfilter(0x10, 0x3, 0xc) #0 [874858ms] <- socket$nl_netfilter=0x3 errno=14 cover=1452 22:34:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) 2021/11/10 22:34:33 result hanged=false: [874903ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107615 #0 [874922ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [874928ms] <- perf_event_open=0x3 errno=14 cover=10849 #0 [874932ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [874933ms] <- openat$sndseq=0x4 errno=14 cover=5848 #0 [874934ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0x4, 0xc08c5332, 0x20000340) #0 [874934ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0x0 errno=14 cover=3112 #0 [874935ms] -> ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0x4, 0x40605346, 0x20000100) #0 [874935ms] <- ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO=0x0 errno=14 cover=14654 enabling collider #0 [874945ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [874947ms] <- perf_event_open=0x3 errno=14 cover=10946 #0 [874947ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [874947ms] <- openat$sndseq=0x4 errno=14 cover=5634 pthread_create failed (errno 11) 2021/11/10 22:34:33 result hanged=false: 2021/11/10 22:34:33 #0: triaging type=7 2021/11/10 22:34:33 triaging input for call #3 ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO (new signal=36) 22:34:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) [875045ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107717 #0 [875067ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [875068ms] <- perf_event_open=0x3 errno=14 cover=9718 #0 [875069ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [875069ms] <- openat$sndseq=0x4 errno=14 cover=5491 #0 [875070ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0x4, 0xc08c5332, 0x20000340) #0 [875070ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0x0 errno=14 cover=3137 #0 [875070ms] -> ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0x4, 0x40605346, 0x20000100) #0 [875071ms] <- ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO=0x0 errno=14 cover=5999 22:34:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) 2021/11/10 22:34:33 result hanged=false: [875123ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107719 #0 [875145ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [875146ms] <- perf_event_open=0x3 errno=14 cover=9614 #0 [875147ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [875148ms] <- openat$sndseq=0x4 errno=14 cover=2199 #0 [875148ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0x4, 0xc08c5332, 0x20000340) #0 [875148ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0x0 errno=14 cover=886 #0 [875148ms] -> ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0x4, 0x40605346, 0x20000100) #0 [875148ms] <- ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO=0x0 errno=14 cover=894 22:34:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) 2021/11/10 22:34:33 result hanged=false: [875209ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107721 #0 [875232ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [875233ms] <- perf_event_open=0x3 errno=14 cover=9588 #0 [875236ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [875236ms] <- openat$sndseq=0x4 errno=14 cover=2359 #0 [875241ms] -> ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0x4, 0xc08c5332, 0x20000340) #0 [875242ms] <- ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE=0x0 errno=14 cover=886 #0 [875242ms] -> ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0x4, 0x40605346, 0x20000100) #0 [875242ms] <- ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO=0x0 errno=14 cover=905 2021/11/10 22:34:33 result hanged=false: 2021/11/10 22:34:33 added new input for call #3 ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) 22:34:33 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96173f", 0x10, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0xff}}}}}}, 0x0) [875301ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107723 #0 [875321ms] -> syz_emit_ethernet(0x46, 0x20000080, 0x0) bb bb bb bb bb bb aa aa aa aa aa 00 86 dd 60 96 17 3f 00 10 3a ff fe 88 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 86 ff 7b 28 00 00 00 00 00 00 00 00 00 00 00 00 #0 [875322ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=20749 enabling collider #0 [875324ms] -> syz_emit_ethernet(0x46, 0x20000080, 0x0) bb bb bb bb bb bb aa aa aa aa aa 00 86 dd 60 96 17 3f 00 10 3a ff fe 88 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 86 ff 7b 28 00 00 00 00 00 00 00 00 00 00 00 00 #0 [875325ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=20610 22:34:33 executing program 0: syz_io_uring_setup(0x4449, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 2021/11/10 22:34:33 result hanged=false: [875368ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107725 #0 [875388ms] -> syz_io_uring_setup(0x4449, 0x20000140, 0x20ffc000, 0x20ffa000, 0x200001c0, 0x20000200) #0 [875397ms] <- syz_io_uring_setup=0x3 errno=14 cover=21884 enabling collider #0 [875398ms] -> syz_io_uring_setup(0x4449, 0x20000140, 0x20ffc000, 0x20ffa000, 0x200001c0, 0x20000200) #0 [875405ms] <- syz_io_uring_setup=0x3 errno=14 cover=29184 22:34:33 executing program 0: syz_io_uring_setup(0x4449, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 2021/11/10 22:34:33 result hanged=false: 2021/11/10 22:34:33 #0: triaging type=7 2021/11/10 22:34:33 triaging input for call #0 syz_io_uring_setup (new signal=2) [875449ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107727 #0 [875468ms] -> syz_io_uring_setup(0x4449, 0x20000140, 0x20ffc000, 0x20ffa000, 0x200001c0, 0x20000200) #0 [875478ms] <- syz_io_uring_setup=0x3 errno=14 cover=21979 22:34:34 executing program 0: syz_io_uring_setup(0x4449, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 2021/11/10 22:34:34 result hanged=false: [875529ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107729 #0 [875554ms] -> syz_io_uring_setup(0x4449, 0x20000140, 0x20ffc000, 0x20ffa000, 0x200001c0, 0x20000200) #0 [875557ms] <- syz_io_uring_setup=0x3 errno=14 cover=21923 22:34:34 executing program 0: syz_io_uring_setup(0x4449, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 2021/11/10 22:34:34 result hanged=false: [875602ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107731 #0 [875621ms] -> syz_io_uring_setup(0x4449, 0x20000140, 0x20ffc000, 0x20ffa000, 0x200001c0, 0x20000200) #0 [875627ms] <- syz_io_uring_setup=0x3 errno=14 cover=21868 2021/11/10 22:34:34 result hanged=false: 2021/11/10 22:34:34 added new input for call #0 syz_io_uring_setup to corpus: syz_io_uring_setup(0x4449, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 22:34:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) 2021/11/10 22:34:34 poll: candidates=8 inputs=0 signal=0 [875676ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107733 #0 [875701ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [875703ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6384 #0 [875704ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [875706ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5598 #0 [875707ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000140, 0x4) syz_genetlink_get_family_id(NLBL_UNLBL, 4) #0 [875710ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4825 #0 [875711ms] -> sendmsg$NLBL_UNLABEL_C_STATICADD(0x5, 0x200001c0, 0x0) #0 [875712ms] <- sendmsg$NLBL_UNLABEL_C_STATICADD=0x14 errno=14 cover=1771 enabling collider #0 [875714ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [875715ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5521 #0 [875716ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [875717ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5489 pthread_create failed (errno 11) 22:34:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) 2021/11/10 22:34:34 result hanged=false: 2021/11/10 22:34:34 #0: triaging type=7 2021/11/10 22:34:34 triaging input for call #3 sendmsg$NLBL_UNLABEL_C_STATICADD (new signal=1) [875796ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107835 #0 [875820ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [875822ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6278 #0 [875823ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [875825ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5565 #0 [875827ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000140, 0x4) syz_genetlink_get_family_id(NLBL_UNLBL, 4) #0 [875828ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4670 #0 [875829ms] -> sendmsg$NLBL_UNLABEL_C_STATICADD(0x5, 0x200001c0, 0x0) #0 [875829ms] <- sendmsg$NLBL_UNLABEL_C_STATICADD=0x14 errno=14 cover=1738 22:34:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) 2021/11/10 22:34:34 result hanged=false: [875872ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107837 #0 [875895ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [875896ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6276 #0 [875898ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [875899ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5482 #0 [875900ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000140, 0x4) syz_genetlink_get_family_id(NLBL_UNLBL, 4) #0 [875900ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4643 #0 [875902ms] -> sendmsg$NLBL_UNLABEL_C_STATICADD(0x5, 0x200001c0, 0x0) #0 [875903ms] <- sendmsg$NLBL_UNLABEL_C_STATICADD=0x14 errno=14 cover=1700 22:34:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) 2021/11/10 22:34:34 result hanged=false: [875944ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107839 #0 [875964ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [875965ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6259 #0 [875966ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [875967ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5449 #0 [875968ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20000140, 0x4) syz_genetlink_get_family_id(NLBL_UNLBL, 4) #0 [875969ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=5267 #0 [875969ms] -> sendmsg$NLBL_UNLABEL_C_STATICADD(0x5, 0x200001c0, 0x0) #0 [875970ms] <- sendmsg$NLBL_UNLABEL_C_STATICADD=0x14 errno=14 cover=1722 2021/11/10 22:34:34 result hanged=false: 2021/11/10 22:34:34 added new input for call #3 sendmsg$NLBL_UNLABEL_C_STATICADD to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) 22:34:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4e2, 0x0) inotify_init1(0x0) sendmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r0, r2]}}], 0x18}, 0x0) dup2(r0, r1) [876013ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107841 #0 [876039ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [876044ms] <- perf_event_open=0x3 errno=14 cover=10823 #0 [876045ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x20000040) #0 [876046ms] <- socketpair$unix=0x0 errno=14 cover=9444 #0 [876046ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x4e2, 0x0) #0 [876049ms] <- openat=0x6 errno=14 cover=13732 #0 [876049ms] -> inotify_init1(0x0) #0 [876050ms] <- inotify_init1=0x7 errno=14 cover=3155 #0 [876050ms] -> sendmsg$unix(0x4, 0x20000840, 0x0) #0 [876050ms] <- sendmsg$unix=0x0 errno=14 cover=4826 #0 [876050ms] -> dup2(0x4, 0x5) #0 [876050ms] <- dup2=0x5 errno=14 cover=3075 enabling collider #0 [876060ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [876060ms] <- perf_event_open=0x3 errno=14 cover=10350 #0 [876061ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x20000040) #0 [876062ms] <- socketpair$unix=0x0 errno=14 cover=8920 pthread_create failed (errno 11) 22:34:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4e2, 0x0) inotify_init1(0x0) sendmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r0, r2]}}], 0x18}, 0x0) dup2(r0, r1) 2021/11/10 22:34:34 result hanged=false: 2021/11/10 22:34:34 #0: triaging type=7 2021/11/10 22:34:34 triaging input for call #5 dup2 (new signal=11) [876159ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107943 #0 [876178ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [876178ms] <- perf_event_open=0x3 errno=14 cover=9893 #0 [876181ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x20000040) #0 [876182ms] <- socketpair$unix=0x0 errno=14 cover=8813 #0 [876190ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x4e2, 0x0) #0 [876194ms] <- openat=0x6 errno=14 cover=14781 #0 [876196ms] -> inotify_init1(0x0) #0 [876196ms] <- inotify_init1=0x7 errno=14 cover=2745 #0 [876197ms] -> sendmsg$unix(0x4, 0x20000840, 0x0) #0 [876198ms] <- sendmsg$unix=0x0 errno=14 cover=4057 #0 [876200ms] -> dup2(0x4, 0x5) #0 [876200ms] <- dup2=0x5 errno=14 cover=3061 2021/11/10 22:34:34 result hanged=false: 22:34:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4e2, 0x0) inotify_init1(0x0) sendmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r0, r2]}}], 0x18}, 0x0) dup2(r0, r1) [876254ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107945 #0 [876272ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [876273ms] <- perf_event_open=0x3 errno=14 cover=9963 #0 [876275ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x20000040) #0 [876275ms] <- socketpair$unix=0x0 errno=14 cover=9299 #0 [876277ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x4e2, 0x0) #0 [876280ms] <- openat=0x6 errno=14 cover=14417 #0 [876282ms] -> inotify_init1(0x0) #0 [876282ms] <- inotify_init1=0x7 errno=14 cover=3177 #0 [876283ms] -> sendmsg$unix(0x4, 0x20000840, 0x0) #0 [876283ms] <- sendmsg$unix=0x0 errno=14 cover=3999 #0 [876284ms] -> dup2(0x4, 0x5) #0 [876284ms] <- dup2=0x5 errno=14 cover=3061 22:34:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4e2, 0x0) inotify_init1(0x0) sendmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r0, r2]}}], 0x18}, 0x0) dup2(r0, r1) 2021/11/10 22:34:34 result hanged=false: [876340ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107947 #0 [876361ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [876362ms] <- perf_event_open=0x3 errno=14 cover=9687 #0 [876363ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x20000040) #0 [876364ms] <- socketpair$unix=0x0 errno=14 cover=8813 #0 [876365ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x4e2, 0x0) #0 [876368ms] <- openat=0x6 errno=14 cover=13881 #0 [876371ms] -> inotify_init1(0x0) #0 [876372ms] <- inotify_init1=0x7 errno=14 cover=2560 #0 [876373ms] -> sendmsg$unix(0x4, 0x20000840, 0x0) #0 [876374ms] <- sendmsg$unix=0x0 errno=14 cover=3491 #0 [876375ms] -> dup2(0x4, 0x5) #0 [876375ms] <- dup2=0x5 errno=14 cover=3061 2021/11/10 22:34:34 result hanged=false: 2021/11/10 22:34:34 added new input for call #5 dup2 to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4e2, 0x0) inotify_init1(0x0) sendmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r0, r2]}}], 0x18}, 0x0) dup2(r0, r1) 2021/11/10 22:34:34 #0: triaging type=7 22:34:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4e2, 0x0) inotify_init1(0x0) sendmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r0, r2]}}], 0x18}, 0x0) dup2(r0, r1) 2021/11/10 22:34:34 triaging input for call #4 sendmsg$unix (new signal=4) [876438ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107949 #0 [876459ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [876462ms] <- perf_event_open=0x3 errno=14 cover=9784 #0 [876465ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x20000040) #0 [876466ms] <- socketpair$unix=0x0 errno=14 cover=8856 #0 [876467ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x4e2, 0x0) #0 [876471ms] <- openat=0x6 errno=14 cover=13797 #0 [876479ms] -> inotify_init1(0x0) #0 [876479ms] <- inotify_init1=0x7 errno=14 cover=3187 #0 [876480ms] -> sendmsg$unix(0x4, 0x20000840, 0x0) #0 [876481ms] <- sendmsg$unix=0x0 errno=14 cover=3137 #0 [876481ms] -> dup2(0x4, 0x5) #0 [876481ms] <- dup2=0x5 errno=14 cover=3075 22:34:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4e2, 0x0) inotify_init1(0x0) sendmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r0, r2]}}], 0x18}, 0x0) dup2(r0, r1) 2021/11/10 22:34:35 result hanged=false: [876537ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107951 #0 [876556ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [876557ms] <- perf_event_open=0x3 errno=14 cover=9741 #0 [876559ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x20000040) #0 [876560ms] <- socketpair$unix=0x0 errno=14 cover=8871 #0 [876561ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x4e2, 0x0) #0 [876564ms] <- openat=0x6 errno=14 cover=13814 #0 [876567ms] -> inotify_init1(0x0) #0 [876568ms] <- inotify_init1=0x7 errno=14 cover=2535 #0 [876569ms] -> sendmsg$unix(0x4, 0x20000840, 0x0) #0 [876569ms] <- sendmsg$unix=0x0 errno=14 cover=3191 #0 [876570ms] -> dup2(0x4, 0x5) #0 [876571ms] <- dup2=0x5 errno=14 cover=3061 22:34:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4e2, 0x0) inotify_init1(0x0) sendmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r0, r2]}}], 0x18}, 0x0) dup2(r0, r1) 2021/11/10 22:34:35 result hanged=false: [876632ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107953 #0 [876657ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [876660ms] <- perf_event_open=0x3 errno=14 cover=10023 #0 [876662ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x20000040) #0 [876663ms] <- socketpair$unix=0x0 errno=14 cover=9158 #0 [876664ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x4e2, 0x0) #0 [876669ms] <- openat=0x6 errno=14 cover=13740 #0 [876676ms] -> inotify_init1(0x0) #0 [876677ms] <- inotify_init1=0x7 errno=14 cover=3144 #0 [876678ms] -> sendmsg$unix(0x4, 0x20000840, 0x0) #0 [876679ms] <- sendmsg$unix=0x0 errno=14 cover=4151 #0 [876680ms] -> dup2(0x4, 0x5) #0 [876680ms] <- dup2=0x5 errno=14 cover=3061 2021/11/10 22:34:35 result hanged=false: 2021/11/10 22:34:35 added new input for call #4 sendmsg$unix to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4e2, 0x0) inotify_init1(0x0) sendmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r0, r2]}}], 0x18}, 0x0) dup2(r0, r1) 22:34:35 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x8ab, &(0x7f0000000100)={0x0, 0xc583, 0x8, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [876739ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107955 #0 [876758ms] -> openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [876758ms] <- openat$ptp0=0xffffffffffffffff errno=14 cover=626 #0 [876760ms] -> syz_io_uring_setup(0x8ab, 0x20000100, 0x20ffb000, 0x20ffa000, 0x20000180, 0x200001c0) #0 [876764ms] <- syz_io_uring_setup=0x3 errno=14 cover=13942 enabling collider #0 [876765ms] -> openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [876765ms] <- openat$ptp0=0xffffffffffffffff errno=14 cover=622 22:34:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) 2021/11/10 22:34:35 result hanged=false: [876814ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107957 #0 [876838ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [876839ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6303 #0 [876840ms] -> sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0x4, 0x20000680, 0x0) #0 [876840ms] <- sendmsg$IEEE802154_LLSEC_DEL_DEVKEY=0x0 errno=14 cover=967 enabling collider #0 [876840ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [876841ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5415 22:34:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 2021/11/10 22:34:35 result hanged=false: [876883ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 107959 #0 [876902ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [876906ms] <- openat=0x3 errno=14 cover=7417 #0 [876907ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [876907ms] <- openat=0x4 errno=14 cover=2706 #0 [876908ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [877070ms] <- copy_file_range=0x1da688 errno=14 cover=262143 #0 [877075ms] -> ioctl$FS_IOC_SETFLAGS(0x3, 0x40086602, 0x20000040) #0 [877081ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=95 cover=1839 enabling collider #0 [877082ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [877082ms] <- openat=0x3 errno=14 cover=1154 #0 [877082ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [877083ms] <- openat=0x4 errno=14 cover=2158 pthread_create failed (errno 11) 22:34:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 2021/11/10 22:34:35 result hanged=false: 2021/11/10 22:34:35 #0: triaging type=7 2021/11/10 22:34:35 triaging input for call #3 ioctl$FS_IOC_SETFLAGS (new signal=1) iptable filter/2: resetting iptable mangle/2: resetting [877177ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108061 #0 [877196ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [877201ms] <- openat=0x3 errno=14 cover=7470 #0 [877202ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [877203ms] <- openat=0x4 errno=14 cover=2674 #0 [877203ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [877363ms] <- copy_file_range=0x1da688 errno=14 cover=262143 #0 [877388ms] -> ioctl$FS_IOC_SETFLAGS(0x3, 0x40086602, 0x20000040) #0 [877398ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=95 cover=1805 22:34:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 2021/11/10 22:34:35 result hanged=false: [877462ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108063 #0 [877483ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [877488ms] <- openat=0x3 errno=14 cover=7477 #0 [877490ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [877491ms] <- openat=0x4 errno=14 cover=2835 #0 [877493ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [877657ms] <- copy_file_range=0x1da688 errno=14 cover=262143 #0 [877679ms] -> ioctl$FS_IOC_SETFLAGS(0x3, 0x40086602, 0x20000040) #0 [877685ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=95 cover=1821 22:34:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 2021/11/10 22:34:36 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [877750ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108065 #0 [877775ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [877782ms] <- openat=0x3 errno=14 cover=7348 #0 [877783ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [877784ms] <- openat=0x4 errno=14 cover=2700 #0 [877784ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [877942ms] <- copy_file_range=0x1da688 errno=14 cover=262143 #0 [877962ms] -> ioctl$FS_IOC_SETFLAGS(0x3, 0x40086602, 0x20000040) #0 [877969ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=95 cover=1814 2021/11/10 22:34:36 result hanged=false: 2021/11/10 22:34:36 added new input for call #3 ioctl$FS_IOC_SETFLAGS to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 22:34:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 2021/11/10 22:34:36 #0: triaging type=7 2021/11/10 22:34:36 triaging input for call #2 copy_file_range (new signal=4) [878034ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108067 #0 [878054ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [878060ms] <- openat=0x3 errno=14 cover=7400 #0 [878061ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [878062ms] <- openat=0x4 errno=14 cover=2776 #0 [878062ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [878222ms] <- copy_file_range=0x1da688 errno=14 cover=262143 #0 [878242ms] -> ioctl$FS_IOC_SETFLAGS(0x3, 0x40086602, 0x20000040) #0 [878251ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=95 cover=1816 22:34:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 2021/11/10 22:34:36 result hanged=false: [878312ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108069 #0 [878330ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [878336ms] <- openat=0x3 errno=14 cover=7775 #0 [878344ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [878345ms] <- openat=0x4 errno=14 cover=2860 #0 [878346ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [878505ms] <- copy_file_range=0x1da688 errno=14 cover=262143 #0 [878528ms] -> ioctl$FS_IOC_SETFLAGS(0x3, 0x40086602, 0x20000040) #0 [878537ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=95 cover=1806 2021/11/10 22:34:37 result hanged=false: 22:34:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) [878601ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108071 #0 [878625ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x101142, 0x0) #0 [878629ms] <- openat=0x3 errno=14 cover=7548 #0 [878631ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [878631ms] <- openat=0x4 errno=14 cover=2777 #0 [878631ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [878790ms] <- copy_file_range=0x1da688 errno=14 cover=262143 #0 [878810ms] -> ioctl$FS_IOC_SETFLAGS(0x3, 0x40086602, 0x20000040) #0 [878815ms] <- ioctl$FS_IOC_SETFLAGS=0xffffffffffffffff errno=95 cover=1817 2021/11/10 22:34:37 result hanged=false: 2021/11/10 22:34:37 added new input for call #2 copy_file_range to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 22:34:37 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x47b0, &(0x7f0000001400), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) [878890ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108073 #0 [878911ms] -> syz_io_uring_setup(0x0, 0x0, 0x20ffc000, 0x20ffe000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [878914ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=1395 #0 [878915ms] -> syz_io_uring_setup(0x47b0, 0x20001400, 0x20ff9000, 0x20ffd000, 0x20001480, 0x200014c0) #0 [878925ms] <- syz_io_uring_setup=0x3 errno=14 cover=21325 enabling collider #0 [878926ms] -> syz_io_uring_setup(0x0, 0x0, 0x20ffc000, 0x20ffe000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [878926ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=1154 22:34:37 executing program 0: getitimer(0x1, &(0x7f00000000c0)) 2021/11/10 22:34:37 result hanged=false: [878969ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108075 2021/11/10 22:34:37 poll: candidates=0 inputs=0 signal=0 #0 [878992ms] -> getitimer(0x1, 0x200000c0) #0 [878992ms] <- getitimer=0x0 errno=14 cover=785 enabling collider #0 [878993ms] -> getitimer(0x1, 0x200000c0) #0 [878993ms] <- getitimer=0x0 errno=14 cover=72 22:34:37 executing program 0: getitimer(0x1, &(0x7f00000000c0)) 2021/11/10 22:34:37 result hanged=false: 2021/11/10 22:34:37 #0: triaging type=7 2021/11/10 22:34:37 triaging input for call #0 getitimer (new signal=7) [879038ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108077 #0 [879061ms] -> getitimer(0x1, 0x200000c0) #0 [879063ms] <- getitimer=0x0 errno=14 cover=774 22:34:37 executing program 0: getitimer(0x1, &(0x7f00000000c0)) 2021/11/10 22:34:37 result hanged=false: [879111ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108079 #0 [879132ms] -> getitimer(0x1, 0x200000c0) #0 [879134ms] <- getitimer=0x0 errno=14 cover=818 22:34:37 executing program 0: getitimer(0x1, &(0x7f00000000c0)) 2021/11/10 22:34:37 result hanged=false: [879180ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108081 #0 [879205ms] -> getitimer(0x1, 0x200000c0) #0 [879206ms] <- getitimer=0x0 errno=14 cover=796 2021/11/10 22:34:37 result hanged=false: 2021/11/10 22:34:37 added new input for call #0 getitimer to corpus: getitimer(0x1, &(0x7f00000000c0)) 22:34:37 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000009580), 0xffffffffffffffff) [879251ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108083 #0 [879276ms] -> syz_genetlink_get_family_id$ethtool(0x20009580, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [879277ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=9422 enabling collider #0 [879278ms] -> syz_genetlink_get_family_id$ethtool(0x20009580, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [879279ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=7804 22:34:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file0/file0\x00') syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file0\x00', 0x2) 2021/11/10 22:34:37 result hanged=false: 2021/11/10 22:34:37 poll: candidates=8 inputs=0 signal=0 [879322ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108085 #0 [879343ms] -> syz_mount_image$ext4(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [879348ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13536 #0 [879349ms] -> inotify_init1(0x0) #0 [879349ms] <- inotify_init1=0x3 errno=14 cover=713 #0 [879349ms] -> inotify_add_watch(0x3, 0x20000040, 0x2000003) #0 [879350ms] <- inotify_add_watch=0x1 errno=14 cover=1022 #0 [879355ms] -> openat$dir(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [879356ms] <- openat$dir=0x4 errno=14 cover=1130 #0 [879356ms] -> symlink(0x20000940, 0x20000980) #0 [879360ms] <- symlink=0x0 errno=14 cover=6916 #0 [879361ms] -> syz_mount_image$vfat(0x0, 0x20000280, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [879365ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=13529 #0 [879365ms] -> renameat2(0xffffffffffffff9c, 0x20000040, 0x4, 0x20000080, 0x2) #0 [879369ms] <- renameat2=0x0 errno=14 cover=18188 enabling collider #0 [879371ms] -> syz_mount_image$ext4(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [879371ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1328 #0 [879372ms] -> inotify_init1(0x0) #0 [879372ms] <- inotify_init1=0x3 errno=14 cover=592 pthread_create failed (errno 11) 22:34:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file0/file0\x00') syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file0\x00', 0x2) 2021/11/10 22:34:37 result hanged=false: 2021/11/10 22:34:37 #0: triaging type=7 2021/11/10 22:34:37 triaging input for call #6 renameat2 (new signal=135) [879462ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108187 #0 [879483ms] -> syz_mount_image$ext4(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [879490ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13014 #0 [879493ms] -> inotify_init1(0x0) #0 [879493ms] <- inotify_init1=0x3 errno=14 cover=637 #0 [879494ms] -> inotify_add_watch(0x3, 0x20000040, 0x2000003) #0 [879494ms] <- inotify_add_watch=0x1 errno=14 cover=1010 #0 [879494ms] -> openat$dir(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [879494ms] <- openat$dir=0x4 errno=14 cover=1064 #0 [879495ms] -> symlink(0x20000940, 0x20000980) #0 [879498ms] <- symlink=0x0 errno=14 cover=6913 #0 [879499ms] -> syz_mount_image$vfat(0x0, 0x20000280, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [879503ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12843 #0 [879504ms] -> renameat2(0xffffffffffffff9c, 0x20000040, 0x4, 0x20000080, 0x2) #0 [879507ms] <- renameat2=0x0 errno=14 cover=7179 22:34:38 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file0/file0\x00') syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file0\x00', 0x2) 2021/11/10 22:34:38 result hanged=false: [879565ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108189 #0 [879584ms] -> syz_mount_image$ext4(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [879592ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13059 #0 [879595ms] -> inotify_init1(0x0) #0 [879595ms] <- inotify_init1=0x3 errno=14 cover=662 #0 [879597ms] -> inotify_add_watch(0x3, 0x20000040, 0x2000003) #0 [879598ms] <- inotify_add_watch=0x1 errno=14 cover=1076 #0 [879603ms] -> openat$dir(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [879604ms] <- openat$dir=0x4 errno=14 cover=1164 #0 [879607ms] -> symlink(0x20000940, 0x20000980) #0 [879611ms] <- symlink=0x0 errno=14 cover=6977 #0 [879613ms] -> syz_mount_image$vfat(0x0, 0x20000280, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [879618ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12983 #0 [879620ms] -> renameat2(0xffffffffffffff9c, 0x20000040, 0x4, 0x20000080, 0x2) #0 [879623ms] <- renameat2=0x0 errno=14 cover=7209 22:34:38 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file0/file0\x00') syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file0\x00', 0x2) 2021/11/10 22:34:38 result hanged=false: [879684ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108191 #0 [879704ms] -> syz_mount_image$ext4(0x0, 0x200000c0, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [879710ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13073 #0 [879713ms] -> inotify_init1(0x0) #0 [879713ms] <- inotify_init1=0x3 errno=14 cover=702 #0 [879714ms] -> inotify_add_watch(0x3, 0x20000040, 0x2000003) #0 [879715ms] <- inotify_add_watch=0x1 errno=14 cover=1086 #0 [879716ms] -> openat$dir(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [879716ms] <- openat$dir=0x4 errno=14 cover=1130 #0 [879718ms] -> symlink(0x20000940, 0x20000980) #0 [879721ms] <- symlink=0x0 errno=14 cover=6984 #0 [879722ms] -> syz_mount_image$vfat(0x0, 0x20000280, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [879725ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12919 #0 [879728ms] -> renameat2(0xffffffffffffff9c, 0x20000040, 0x4, 0x20000080, 0x2) #0 [879730ms] <- renameat2=0x0 errno=14 cover=7201 2021/11/10 22:34:38 result hanged=false: 2021/11/10 22:34:38 added new input for call #6 renameat2 to corpus: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file0/file0\x00') syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file0\x00', 0x2) 22:34:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4b66, &(0x7f0000000040)) [879793ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108193 #0 [879813ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [879814ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3457 #0 [879815ms] -> ioctl$FIONREAD(0x3, 0x4b66, 0x20000040) #0 [879816ms] <- ioctl$FIONREAD=0xffffffffffffffff errno=12 cover=5251 enabling collider #0 [879817ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [879817ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3495 22:34:38 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5225) 2021/11/10 22:34:38 result hanged=false: [879859ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108195 #0 [879878ms] -> openat$rfkill(0xffffffffffffff9c, 0x200001c0, 0x0, 0x0) #0 [879879ms] <- openat$rfkill=0x3 errno=14 cover=2412 #0 [879881ms] -> ioctl$RFKILL_IOCTL_NOINPUT(0x3, 0x5225) #0 [879881ms] <- ioctl$RFKILL_IOCTL_NOINPUT=0xffffffffffffffff errno=38 cover=110 enabling collider #0 [879882ms] -> openat$rfkill(0xffffffffffffff9c, 0x200001c0, 0x0, 0x0) #0 [879883ms] <- openat$rfkill=0x3 errno=14 cover=2446 #0 [879884ms] -> ioctl$RFKILL_IOCTL_NOINPUT(0x3, 0x5225) #0 [879884ms] <- ioctl$RFKILL_IOCTL_NOINPUT=0xffffffffffffffff errno=9 cover=46 2021/11/10 22:34:38 result hanged=false: 2021/11/10 22:34:38 #0: triaging type=7 2021/11/10 22:34:38 triaging input for call #1 ioctl$RFKILL_IOCTL_NOINPUT (new signal=1) 22:34:38 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5225) [879927ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108197 #0 [879947ms] -> openat$rfkill(0xffffffffffffff9c, 0x200001c0, 0x0, 0x0) #0 [879948ms] <- openat$rfkill=0x3 errno=14 cover=2419 #0 [879952ms] -> ioctl$RFKILL_IOCTL_NOINPUT(0x3, 0x5225) #0 [879952ms] <- ioctl$RFKILL_IOCTL_NOINPUT=0xffffffffffffffff errno=38 cover=110 2021/11/10 22:34:38 result hanged=false: 22:34:38 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5225) [879999ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108199 #0 [880018ms] -> openat$rfkill(0xffffffffffffff9c, 0x200001c0, 0x0, 0x0) #0 [880019ms] <- openat$rfkill=0x3 errno=14 cover=2379 #0 [880021ms] -> ioctl$RFKILL_IOCTL_NOINPUT(0x3, 0x5225) #0 [880021ms] <- ioctl$RFKILL_IOCTL_NOINPUT=0xffffffffffffffff errno=38 cover=110 22:34:38 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5225) 2021/11/10 22:34:38 result hanged=false: [880065ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108201 #0 [880085ms] -> openat$rfkill(0xffffffffffffff9c, 0x200001c0, 0x0, 0x0) #0 [880086ms] <- openat$rfkill=0x3 errno=14 cover=2383 #0 [880088ms] -> ioctl$RFKILL_IOCTL_NOINPUT(0x3, 0x5225) #0 [880088ms] <- ioctl$RFKILL_IOCTL_NOINPUT=0xffffffffffffffff errno=38 cover=110 2021/11/10 22:34:38 result hanged=false: 2021/11/10 22:34:38 added new input for call #1 ioctl$RFKILL_IOCTL_NOINPUT to corpus: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5225) 22:34:38 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RAUTH(r0, &(0x7f0000000040)={0x14}, 0x14) [880136ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108203 #0 [880162ms] -> creat(0x20000000, 0x0) #0 [880165ms] <- creat=0x3 errno=14 cover=7308 #0 [880166ms] -> write$P9_RAUTH(0x3, 0x20000040, 0x14) #0 [880172ms] <- write$P9_RAUTH=0x14 errno=14 cover=10322 enabling collider #0 [880173ms] -> creat(0x20000000, 0x0) #0 [880176ms] <- creat=0x3 errno=14 cover=9075 #0 [880176ms] -> write$P9_RAUTH(0x3, 0x20000040, 0x14) #0 [880177ms] <- write$P9_RAUTH=0xffffffffffffffff errno=9 cover=48 2021/11/10 22:34:38 result hanged=false: 2021/11/10 22:34:38 #0: triaging type=7 22:34:38 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RAUTH(r0, &(0x7f0000000040)={0x14}, 0x14) 2021/11/10 22:34:38 triaging input for call #1 write$P9_RAUTH (new signal=2) [880224ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108205 #0 [880248ms] -> creat(0x20000000, 0x0) #0 [880254ms] <- creat=0x3 errno=14 cover=7400 #0 [880255ms] -> write$P9_RAUTH(0x3, 0x20000040, 0x14) #0 [880259ms] <- write$P9_RAUTH=0x14 errno=14 cover=9912 2021/11/10 22:34:38 result hanged=false: 22:34:38 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RAUTH(r0, &(0x7f0000000040)={0x14}, 0x14) [880312ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108207 #0 [880332ms] -> creat(0x20000000, 0x0) #0 [880337ms] <- creat=0x3 errno=14 cover=7455 #0 [880338ms] -> write$P9_RAUTH(0x3, 0x20000040, 0x14) #0 [880343ms] <- write$P9_RAUTH=0x14 errno=14 cover=9304 2021/11/10 22:34:38 result hanged=false: 22:34:38 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RAUTH(r0, &(0x7f0000000040)={0x14}, 0x14) [880394ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108209 #0 [880415ms] -> creat(0x20000000, 0x0) #0 [880421ms] <- creat=0x3 errno=14 cover=7309 #0 [880423ms] -> write$P9_RAUTH(0x3, 0x20000040, 0x14) #0 [880426ms] <- write$P9_RAUTH=0x14 errno=14 cover=9980 2021/11/10 22:34:39 result hanged=false: 2021/11/10 22:34:39 added new input for call #1 write$P9_RAUTH to corpus: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RAUTH(r0, &(0x7f0000000040)={0x14}, 0x14) 2021/11/10 22:34:39 #0: triaging type=7 22:34:39 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RAUTH(r0, &(0x7f0000000040)={0x14}, 0x14) 2021/11/10 22:34:39 triaging input for call #0 creat (new signal=2) [880484ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108211 #0 [880502ms] -> creat(0x20000000, 0x0) #0 [880507ms] <- creat=0x3 errno=14 cover=7378 #0 [880508ms] -> write$P9_RAUTH(0x3, 0x20000040, 0x14) #0 [880511ms] <- write$P9_RAUTH=0x14 errno=14 cover=9699 2021/11/10 22:34:39 result hanged=false: 22:34:39 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RAUTH(r0, &(0x7f0000000040)={0x14}, 0x14) [880562ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108213 #0 [880582ms] -> creat(0x20000000, 0x0) #0 [880588ms] <- creat=0x3 errno=14 cover=7276 #0 [880593ms] -> write$P9_RAUTH(0x3, 0x20000040, 0x14) #0 [880597ms] <- write$P9_RAUTH=0x14 errno=14 cover=9648 22:34:39 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RAUTH(r0, &(0x7f0000000040)={0x14}, 0x14) 2021/11/10 22:34:39 result hanged=false: [880648ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108215 #0 [880669ms] -> creat(0x20000000, 0x0) #0 [880672ms] <- creat=0x3 errno=14 cover=7296 #0 [880673ms] -> write$P9_RAUTH(0x3, 0x20000040, 0x14) #0 [880677ms] <- write$P9_RAUTH=0x14 errno=14 cover=9519 2021/11/10 22:34:39 result hanged=false: 2021/11/10 22:34:39 added new input for call #0 creat to corpus: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RAUTH(r0, &(0x7f0000000040)={0x14}, 0x14) 22:34:39 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x0, &(0x7f0000000180)='=static') [880730ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108217 #0 [880751ms] -> syz_mount_image$tmpfs(0x0, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [880756ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=13741 #0 [880757ms] -> mount(0x0, 0x20000100, 0x20000140, 0x0, 0x20000180) #0 [880758ms] <- mount=0x0 errno=14 cover=2887 enabling collider #0 [880760ms] -> syz_mount_image$tmpfs(0x0, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [880761ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=17 cover=1328 22:34:39 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x0, &(0x7f0000000180)='=static') 2021/11/10 22:34:39 result hanged=false: 2021/11/10 22:34:39 #0: triaging type=7 2021/11/10 22:34:39 triaging input for call #1 mount (new signal=1) umount(./7569/file0) [880812ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108219 #0 [880833ms] -> syz_mount_image$tmpfs(0x0, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [880837ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=13732 #0 [880839ms] -> mount(0x0, 0x20000100, 0x20000140, 0x0, 0x20000180) #0 [880840ms] <- mount=0x0 errno=14 cover=2766 2021/11/10 22:34:39 result hanged=false: 22:34:39 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x0, &(0x7f0000000180)='=static') umount(./7570/file0) [880890ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108221 #0 [880913ms] -> syz_mount_image$tmpfs(0x0, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [880917ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=13023 #0 [880920ms] -> mount(0x0, 0x20000100, 0x20000140, 0x0, 0x20000180) #0 [880920ms] <- mount=0x0 errno=14 cover=2757 2021/11/10 22:34:39 result hanged=false: 22:34:39 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x0, &(0x7f0000000180)='=static') umount(./7571/file0) [880969ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108223 #0 [880996ms] -> syz_mount_image$tmpfs(0x0, 0x20000040, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [881001ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=13106 #0 [881002ms] -> mount(0x0, 0x20000100, 0x20000140, 0x0, 0x20000180) #0 [881003ms] <- mount=0x0 errno=14 cover=2713 umount(./7572/file0) 2021/11/10 22:34:39 result hanged=false: 2021/11/10 22:34:39 added new input for call #1 mount to corpus: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x0, &(0x7f0000000180)='=static') 22:34:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) [881055ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108225 #0 [881078ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [881082ms] <- perf_event_open=0x3 errno=14 cover=10524 #0 [881083ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [881084ms] <- syz_init_net_socket$bt_hci=0x5 errno=14 cover=6356 #0 [881085ms] -> ioctl$sock_SIOCETHTOOL(0x5, 0x8946, 0x0) #0 [881085ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=77 cover=828 #0 [881086ms] -> bind$bt_hci(0x5, 0x20000000, 0x65) #0 [881086ms] <- bind$bt_hci=0x0 errno=14 cover=1385 enabling collider #0 [881097ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [881098ms] <- perf_event_open=0x3 errno=14 cover=9537 #0 [881098ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [881099ms] <- syz_init_net_socket$bt_hci=0x5 errno=14 cover=5420 pthread_create failed (errno 11) 2021/11/10 22:34:39 result hanged=false: 2021/11/10 22:34:39 #0: triaging type=7 2021/11/10 22:34:39 triaging input for call #3 bind$bt_hci (new signal=15) 22:34:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) [881194ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108327 #0 [881216ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [881216ms] <- perf_event_open=0x3 errno=14 cover=9522 #0 [881218ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [881219ms] <- syz_init_net_socket$bt_hci=0x5 errno=14 cover=6399 #0 [881221ms] -> ioctl$sock_SIOCETHTOOL(0x5, 0x8946, 0x0) #0 [881221ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=77 cover=839 #0 [881223ms] -> bind$bt_hci(0x5, 0x20000000, 0x65) #0 [881223ms] <- bind$bt_hci=0x0 errno=14 cover=1282 22:34:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) 2021/11/10 22:34:39 result hanged=false: [881275ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108329 #0 [881296ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [881297ms] <- perf_event_open=0x3 errno=14 cover=9662 #0 [881299ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [881300ms] <- syz_init_net_socket$bt_hci=0x5 errno=14 cover=6377 #0 [881302ms] -> ioctl$sock_SIOCETHTOOL(0x5, 0x8946, 0x0) #0 [881302ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=77 cover=839 #0 [881304ms] -> bind$bt_hci(0x5, 0x20000000, 0x65) #0 [881304ms] <- bind$bt_hci=0x0 errno=14 cover=1326 22:34:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) 2021/11/10 22:34:39 result hanged=false: [881357ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108331 #0 [881380ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [881380ms] <- perf_event_open=0x3 errno=14 cover=9514 #0 [881382ms] -> syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) #0 [881383ms] <- syz_init_net_socket$bt_hci=0x5 errno=14 cover=6221 #0 [881383ms] -> ioctl$sock_SIOCETHTOOL(0x5, 0x8946, 0x0) #0 [881384ms] <- ioctl$sock_SIOCETHTOOL=0xffffffffffffffff errno=77 cover=828 #0 [881384ms] -> bind$bt_hci(0x5, 0x20000000, 0x65) #0 [881384ms] <- bind$bt_hci=0x0 errno=14 cover=1293 2021/11/10 22:34:39 result hanged=false: 2021/11/10 22:34:39 added new input for call #3 bind$bt_hci to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) 22:34:39 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) io_setup(0x5, &(0x7f0000000700)=0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) preadv(r1, &(0x7f00000029c0)=[{&(0x7f0000000380)=""/231, 0xe7}], 0x1, 0x0, 0x0) [881439ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108333 #0 [881458ms] -> openat$vcs(0xffffffffffffff9c, 0x20000600, 0x0, 0x0) #0 [881459ms] <- openat$vcs=0x3 errno=14 cover=1162 #0 [881459ms] -> io_setup(0x5, 0x20000700) #0 [881460ms] <- io_setup=0x0 errno=14 cover=2472 #0 [881460ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000080) #0 [881461ms] <- syz_open_procfs=0x4 errno=14 cover=4911 #0 [881462ms] -> io_submit(0x7fe15ff38000, 0x1, 0x200006c0) #0 [881462ms] <- io_submit=0x1 errno=14 cover=2623 #0 [881463ms] -> preadv(0x4, 0x200029c0, 0x1, 0x0, 0x0) #0 [881464ms] <- preadv=0x96 errno=14 cover=1380 enabling collider #0 [881465ms] -> openat$vcs(0xffffffffffffff9c, 0x20000600, 0x0, 0x0) #0 [881466ms] <- openat$vcs=0x3 errno=14 cover=1215 #0 [881466ms] -> io_setup(0x5, 0x20000700) #0 [881466ms] <- io_setup=0xffffffffffffffff errno=22 cover=40 pthread_create failed (errno 11) 2021/11/10 22:34:40 result hanged=false: 2021/11/10 22:34:40 #0: triaging type=7 22:34:40 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) io_setup(0x5, &(0x7f0000000700)=0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) preadv(r1, &(0x7f00000029c0)=[{&(0x7f0000000380)=""/231, 0xe7}], 0x1, 0x0, 0x0) 2021/11/10 22:34:40 triaging input for call #4 preadv (new signal=2) [881562ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108435 #0 [881581ms] -> openat$vcs(0xffffffffffffff9c, 0x20000600, 0x0, 0x0) #0 [881581ms] <- openat$vcs=0x3 errno=14 cover=1129 #0 [881582ms] -> io_setup(0x5, 0x20000700) #0 [881582ms] <- io_setup=0x0 errno=14 cover=2461 #0 [881582ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000080) #0 [881583ms] <- syz_open_procfs=0x4 errno=14 cover=4952 #0 [881584ms] -> io_submit(0x7fe15ff38000, 0x1, 0x200006c0) #0 [881584ms] <- io_submit=0x1 errno=14 cover=634 #0 [881584ms] -> preadv(0x4, 0x200029c0, 0x1, 0x0, 0x0) #0 [881585ms] <- preadv=0x96 errno=14 cover=1437 2021/11/10 22:34:40 result hanged=false: 22:34:40 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) io_setup(0x5, &(0x7f0000000700)=0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) preadv(r1, &(0x7f00000029c0)=[{&(0x7f0000000380)=""/231, 0xe7}], 0x1, 0x0, 0x0) [881635ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108437 #0 [881659ms] -> openat$vcs(0xffffffffffffff9c, 0x20000600, 0x0, 0x0) #0 [881660ms] <- openat$vcs=0x3 errno=14 cover=1139 #0 [881660ms] -> io_setup(0x5, 0x20000700) #0 [881660ms] <- io_setup=0x0 errno=14 cover=2504 #0 [881661ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000080) #0 [881662ms] <- syz_open_procfs=0x4 errno=14 cover=4949 #0 [881663ms] -> io_submit(0x7fe15ff38000, 0x1, 0x200006c0) #0 [881663ms] <- io_submit=0x1 errno=14 cover=645 #0 [881663ms] -> preadv(0x4, 0x200029c0, 0x1, 0x0, 0x0) #0 [881665ms] <- preadv=0x96 errno=14 cover=1421 22:34:40 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) io_setup(0x5, &(0x7f0000000700)=0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) preadv(r1, &(0x7f00000029c0)=[{&(0x7f0000000380)=""/231, 0xe7}], 0x1, 0x0, 0x0) 2021/11/10 22:34:40 result hanged=false: [881713ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108439 #0 [881734ms] -> openat$vcs(0xffffffffffffff9c, 0x20000600, 0x0, 0x0) #0 [881734ms] <- openat$vcs=0x3 errno=14 cover=1173 #0 [881736ms] -> io_setup(0x5, 0x20000700) #0 [881736ms] <- io_setup=0x0 errno=14 cover=2526 #0 [881737ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000080) #0 [881738ms] <- syz_open_procfs=0x4 errno=14 cover=5043 #0 [881739ms] -> io_submit(0x7fe15ff38000, 0x1, 0x200006c0) #0 [881740ms] <- io_submit=0x1 errno=14 cover=645 #0 [881741ms] -> preadv(0x4, 0x200029c0, 0x1, 0x0, 0x0) #0 [881743ms] <- preadv=0x96 errno=14 cover=1366 2021/11/10 22:34:40 result hanged=false: 2021/11/10 22:34:40 added new input for call #4 preadv to corpus: openat$vcs(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) io_setup(0x5, &(0x7f0000000700)=0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) preadv(r1, &(0x7f00000029c0)=[{&(0x7f0000000380)=""/231, 0xe7}], 0x1, 0x0, 0x0) 22:34:40 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) io_setup(0x5, &(0x7f0000000700)=0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) preadv(r1, &(0x7f00000029c0)=[{&(0x7f0000000380)=""/231, 0xe7}], 0x1, 0x0, 0x0) 2021/11/10 22:34:40 #0: triaging type=7 2021/11/10 22:34:40 triaging input for call #3 io_submit (new signal=4) [881800ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108441 #0 [881819ms] -> openat$vcs(0xffffffffffffff9c, 0x20000600, 0x0, 0x0) #0 [881819ms] <- openat$vcs=0x3 errno=14 cover=1161 #0 [881821ms] -> io_setup(0x5, 0x20000700) #0 [881822ms] <- io_setup=0x0 errno=14 cover=2617 #0 [881823ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000080) #0 [881827ms] <- syz_open_procfs=0x4 errno=14 cover=5003 #0 [881831ms] -> io_submit(0x7fe15ff38000, 0x1, 0x200006c0) #0 [881831ms] <- io_submit=0x1 errno=14 cover=645 #0 [881833ms] -> preadv(0x4, 0x200029c0, 0x1, 0x0, 0x0) #0 [881834ms] <- preadv=0x96 errno=14 cover=1366 2021/11/10 22:34:40 result hanged=false: 22:34:40 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) io_setup(0x5, &(0x7f0000000700)=0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) preadv(r1, &(0x7f00000029c0)=[{&(0x7f0000000380)=""/231, 0xe7}], 0x1, 0x0, 0x0) [881879ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108443 #0 [881898ms] -> openat$vcs(0xffffffffffffff9c, 0x20000600, 0x0, 0x0) #0 [881899ms] <- openat$vcs=0x3 errno=14 cover=1161 #0 [881903ms] -> io_setup(0x5, 0x20000700) #0 [881903ms] <- io_setup=0x0 errno=14 cover=2526 #0 [881904ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000080) #0 [881905ms] <- syz_open_procfs=0x4 errno=14 cover=4983 #0 [881906ms] -> io_submit(0x7fe15ff38000, 0x1, 0x200006c0) #0 [881906ms] <- io_submit=0x1 errno=14 cover=645 #0 [881907ms] -> preadv(0x4, 0x200029c0, 0x1, 0x0, 0x0) #0 [881909ms] <- preadv=0x96 errno=14 cover=1380 22:34:40 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) io_setup(0x5, &(0x7f0000000700)=0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) preadv(r1, &(0x7f00000029c0)=[{&(0x7f0000000380)=""/231, 0xe7}], 0x1, 0x0, 0x0) 2021/11/10 22:34:40 result hanged=false: [881961ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108445 #0 [881981ms] -> openat$vcs(0xffffffffffffff9c, 0x20000600, 0x0, 0x0) #0 [881982ms] <- openat$vcs=0x3 errno=14 cover=1150 #0 [881985ms] -> io_setup(0x5, 0x20000700) #0 [881986ms] <- io_setup=0x0 errno=14 cover=2595 #0 [881987ms] -> syz_open_procfs(0xffffffffffffffff, 0x20000080) #0 [881987ms] <- syz_open_procfs=0x4 errno=14 cover=5093 #0 [881989ms] -> io_submit(0x7fe15ff38000, 0x1, 0x200006c0) #0 [881989ms] <- io_submit=0x1 errno=14 cover=634 #0 [881990ms] -> preadv(0x4, 0x200029c0, 0x1, 0x0, 0x0) #0 [881991ms] <- preadv=0x96 errno=14 cover=1380 2021/11/10 22:34:40 result hanged=false: 2021/11/10 22:34:40 added new input for call #3 io_submit to corpus: openat$vcs(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) io_setup(0x5, &(0x7f0000000700)=0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) preadv(r1, &(0x7f00000029c0)=[{&(0x7f0000000380)=""/231, 0xe7}], 0x1, 0x0, 0x0) 22:34:40 executing program 0: perf_event_open(&(0x7f000000a540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [882044ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108447 #0 [882064ms] -> perf_event_open(0x2000a540, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [882065ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=230 enabling collider #0 [882065ms] -> perf_event_open(0x2000a540, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [882065ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=230 2021/11/10 22:34:40 result hanged=false: 2021/11/10 22:34:40 #0: triaging type=7 22:34:40 executing program 0: perf_event_open(&(0x7f000000a540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2021/11/10 22:34:40 triaging input for call #0 perf_event_open (new signal=1) [882112ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108449 #0 [882132ms] -> perf_event_open(0x2000a540, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [882132ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=230 22:34:40 executing program 0: perf_event_open(&(0x7f000000a540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2021/11/10 22:34:40 result hanged=false: [882177ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108451 #0 [882201ms] -> perf_event_open(0x2000a540, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [882202ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=230 2021/11/10 22:34:40 result hanged=false: 22:34:40 executing program 0: perf_event_open(&(0x7f000000a540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [882250ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108453 #0 [882271ms] -> perf_event_open(0x2000a540, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [882271ms] <- perf_event_open=0xffffffffffffffff errno=22 cover=230 2021/11/10 22:34:40 result hanged=false: 2021/11/10 22:34:40 added new input for call #0 perf_event_open to corpus: perf_event_open(&(0x7f000000a540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:34:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x100, 0x12) openat(r0, &(0x7f0000000080)='./file1\x00', 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c616669643d3078303070303030303030303030303011d95f72d3985fedca1404cbdb9130302c63616368657461673d17114276e15d0750c1f898402c706f73697861636c2c", @ANYRESDEC=r1, @ANYBLOB=',posixacl,version=9p2000.u,access=user,\x00']) r4 = fork() openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() getpgid(r4) syz_open_procfs$userns(0x0, &(0x7f0000000000)) r5 = epoll_create(0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)) 2021/11/10 22:34:40 poll: candidates=8 inputs=0 signal=0 [882320ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108455 #0 [882340ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [882345ms] <- openat=0x3 errno=14 cover=7734 #0 [882345ms] -> getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) #0 [882346ms] <- getsockopt$sock_cred=0xffffffffffffffff errno=9 cover=49 #0 [882346ms] -> openat(0x3, 0x20000000, 0x100, 0x12) #0 [882346ms] <- openat=0xffffffffffffffff errno=20 cover=861 #0 [882346ms] -> openat(0x3, 0x20000080, 0x400000, 0x0) #0 [882346ms] <- openat=0xffffffffffffffff errno=22 cover=48 #0 [882346ms] -> clone3(0x200008c0, 0x58) #0 [882347ms] <- clone3=0xffffffffffffffff errno=11 cover=4526 #0 [882347ms] -> pipe(0x200001c0) #0 [882347ms] <- pipe=0x0 errno=14 cover=1205 #0 [882347ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x1000000, 0x200002c0) #0 [882374ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=65478 #0 [882377ms] -> fork() #0 [882396ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [882398ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [882398ms] <- openat=0xffffffffffffffff errno=14 cover=628 #0 [882398ms] -> getpid() #0 [882398ms] <- getpid=0x1a7a7 errno=14 cover=48 #0 [882398ms] -> getpgid(0x0) #0 [882398ms] <- getpgid=0x1a7a7 errno=14 cover=48 #0 [882399ms] -> syz_open_procfs$userns(0x0, 0x20000000) #0 [882400ms] <- syz_open_procfs$userns=0x6 errno=1 cover=6537 #0 [882400ms] -> epoll_create(0x1) #0 [882402ms] <- epoll_create=0x7 errno=14 cover=516 #0 [882402ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [882402ms] <- socket$inet_tcp=0x8 errno=14 cover=1723 #0 [882403ms] -> epoll_ctl$EPOLL_CTL_ADD(0x7, 0x1, 0x8, 0x200000c0) #0 [882403ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=388 enabling collider #0 [882404ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [882405ms] <- openat=0x3 errno=14 cover=1165 #0 [882406ms] -> getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) #0 [882406ms] <- getsockopt$sock_cred=0xffffffffffffffff errno=9 cover=49 pthread_create failed (errno 11) 22:34:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x100, 0x12) openat(r0, &(0x7f0000000080)='./file1\x00', 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c616669643d3078303070303030303030303030303011d95f72d3985fedca1404cbdb9130302c63616368657461673d17114276e15d0750c1f898402c706f73697861636c2c", @ANYRESDEC=r1, @ANYBLOB=',posixacl,version=9p2000.u,access=user,\x00']) r4 = fork() openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() getpgid(r4) syz_open_procfs$userns(0x0, &(0x7f0000000000)) r5 = epoll_create(0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)) 2021/11/10 22:34:41 result hanged=false: 2021/11/10 22:34:41 #0: triaging type=7 2021/11/10 22:34:41 triaging input for call #7 fork (new signal=2) [882498ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108559 #0 [882531ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [882536ms] <- openat=0x3 errno=14 cover=7343 #0 [882538ms] -> getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) #0 [882538ms] <- getsockopt$sock_cred=0xffffffffffffffff errno=9 cover=49 #0 [882538ms] -> openat(0x3, 0x20000000, 0x100, 0x12) #0 [882538ms] <- openat=0xffffffffffffffff errno=20 cover=725 #0 [882539ms] -> openat(0x3, 0x20000080, 0x400000, 0x0) #0 [882539ms] <- openat=0xffffffffffffffff errno=22 cover=48 #0 [882539ms] -> clone3(0x200008c0, 0x58) #0 [882540ms] <- clone3=0xffffffffffffffff errno=11 cover=4497 #0 [882541ms] -> pipe(0x200001c0) #0 [882541ms] <- pipe=0x0 errno=14 cover=1150 #0 [882541ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x1000000, 0x200002c0) #0 [882570ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=66383 #0 [882578ms] -> fork() #0 [882604ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [882630ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [882630ms] <- openat=0xffffffffffffffff errno=14 cover=617 #0 [882630ms] -> getpid() #0 [882630ms] <- getpid=0x1a80f errno=14 cover=48 #0 [882630ms] -> getpgid(0x0) #0 [882630ms] <- getpgid=0x1a80f errno=14 cover=48 #0 [882630ms] -> syz_open_procfs$userns(0x0, 0x20000000) #0 [882632ms] <- syz_open_procfs$userns=0x6 errno=1 cover=6540 #0 [882633ms] -> epoll_create(0x1) #0 [882634ms] <- epoll_create=0x7 errno=14 cover=506 #0 [882634ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [882634ms] <- socket$inet_tcp=0x8 errno=14 cover=1698 #0 [882635ms] -> epoll_ctl$EPOLL_CTL_ADD(0x7, 0x1, 0x8, 0x200000c0) #0 [882635ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=374 22:34:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x100, 0x12) openat(r0, &(0x7f0000000080)='./file1\x00', 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c616669643d3078303070303030303030303030303011d95f72d3985fedca1404cbdb9130302c63616368657461673d17114276e15d0750c1f898402c706f73697861636c2c", @ANYRESDEC=r1, @ANYBLOB=',posixacl,version=9p2000.u,access=user,\x00']) r4 = fork() openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() getpgid(r4) syz_open_procfs$userns(0x0, &(0x7f0000000000)) r5 = epoll_create(0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)) 2021/11/10 22:34:41 result hanged=false: [882711ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108563 #0 [882740ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [882746ms] <- openat=0x3 errno=14 cover=7455 #0 [882749ms] -> getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) #0 [882749ms] <- getsockopt$sock_cred=0xffffffffffffffff errno=9 cover=49 #0 [882751ms] -> openat(0x3, 0x20000000, 0x100, 0x12) #0 [882751ms] <- openat=0xffffffffffffffff errno=20 cover=800 #0 [882752ms] -> openat(0x3, 0x20000080, 0x400000, 0x0) #0 [882753ms] <- openat=0xffffffffffffffff errno=22 cover=48 #0 [882755ms] -> clone3(0x200008c0, 0x58) #0 [882757ms] <- clone3=0xffffffffffffffff errno=11 cover=4645 #0 [882759ms] -> pipe(0x200001c0) #0 [882759ms] <- pipe=0x0 errno=14 cover=1234 #0 [882760ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x1000000, 0x200002c0) #0 [882796ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=71599 #0 [882806ms] -> fork() #0 [882831ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [882852ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [882852ms] <- openat=0xffffffffffffffff errno=14 cover=627 #0 [882852ms] -> getpid() #0 [882853ms] <- getpid=0x1a813 errno=14 cover=48 #0 [882853ms] -> getpgid(0x0) #0 [882853ms] <- getpgid=0x1a813 errno=14 cover=48 #0 [882853ms] -> syz_open_procfs$userns(0x0, 0x20000000) #0 [882855ms] <- syz_open_procfs$userns=0x6 errno=1 cover=6606 #0 [882856ms] -> epoll_create(0x1) #0 [882856ms] <- epoll_create=0x7 errno=14 cover=484 #0 [882856ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [882857ms] <- socket$inet_tcp=0x8 errno=14 cover=1698 #0 [882858ms] -> epoll_ctl$EPOLL_CTL_ADD(0x7, 0x1, 0x8, 0x200000c0) #0 [882858ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=374 22:34:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x100, 0x12) openat(r0, &(0x7f0000000080)='./file1\x00', 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c616669643d3078303070303030303030303030303011d95f72d3985fedca1404cbdb9130302c63616368657461673d17114276e15d0750c1f898402c706f73697861636c2c", @ANYRESDEC=r1, @ANYBLOB=',posixacl,version=9p2000.u,access=user,\x00']) r4 = fork() openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() getpgid(r4) syz_open_procfs$userns(0x0, &(0x7f0000000000)) r5 = epoll_create(0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)) 2021/11/10 22:34:41 result hanged=false: [882937ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108567 #0 [882974ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [882983ms] <- openat=0x3 errno=14 cover=7412 #0 [882985ms] -> getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) #0 [882985ms] <- getsockopt$sock_cred=0xffffffffffffffff errno=9 cover=49 #0 [882985ms] -> openat(0x3, 0x20000000, 0x100, 0x12) #0 [882986ms] <- openat=0xffffffffffffffff errno=20 cover=702 #0 [882986ms] -> openat(0x3, 0x20000080, 0x400000, 0x0) #0 [882986ms] <- openat=0xffffffffffffffff errno=22 cover=48 #0 [882986ms] -> clone3(0x200008c0, 0x58) #0 [882987ms] <- clone3=0xffffffffffffffff errno=11 cover=4581 #0 [882988ms] -> pipe(0x200001c0) #0 [882989ms] <- pipe=0x0 errno=14 cover=1197 #0 [882989ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x1000000, 0x200002c0) #0 [883013ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=65843 #0 [883021ms] -> fork() #0 [883046ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [883067ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [883067ms] <- openat=0xffffffffffffffff errno=14 cover=616 #0 [883067ms] -> getpid() #0 [883067ms] <- getpid=0x1a817 errno=14 cover=48 #0 [883067ms] -> getpgid(0x0) #0 [883067ms] <- getpgid=0x1a817 errno=14 cover=48 #0 [883068ms] -> syz_open_procfs$userns(0x0, 0x20000000) #0 [883069ms] <- syz_open_procfs$userns=0x6 errno=1 cover=6620 #0 [883070ms] -> epoll_create(0x1) #0 [883070ms] <- epoll_create=0x7 errno=14 cover=484 #0 [883070ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [883071ms] <- socket$inet_tcp=0x8 errno=14 cover=1723 #0 [883071ms] -> epoll_ctl$EPOLL_CTL_ADD(0x7, 0x1, 0x8, 0x200000c0) #0 [883071ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=363 2021/11/10 22:34:41 result hanged=false: 2021/11/10 22:34:41 added new input for call #7 fork to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x100, 0x12) openat(r0, &(0x7f0000000080)='./file1\x00', 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c616669643d3078303070303030303030303030303011d95f72d3985fedca1404cbdb9130302c63616368657461673d17114276e15d0750c1f898402c706f73697861636c2c", @ANYRESDEC=r1, @ANYBLOB=',posixacl,version=9p2000.u,access=user,\x00']) r4 = fork() openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() getpgid(r4) syz_open_procfs$userns(0x0, &(0x7f0000000000)) r5 = epoll_create(0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)) 22:34:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x100, 0x12) openat(r0, &(0x7f0000000080)='./file1\x00', 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c616669643d3078303070303030303030303030303011d95f72d3985fedca1404cbdb9130302c63616368657461673d17114276e15d0750c1f898402c706f73697861636c2c", @ANYRESDEC=r1, @ANYBLOB=',posixacl,version=9p2000.u,access=user,\x00']) r4 = fork() openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() getpgid(r4) syz_open_procfs$userns(0x0, &(0x7f0000000000)) r5 = epoll_create(0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)) 2021/11/10 22:34:41 #0: triaging type=7 2021/11/10 22:34:41 triaging input for call #6 mount$9p_fd (new signal=4) [883152ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108571 #0 [883182ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [883190ms] <- openat=0x3 errno=14 cover=7373 #0 [883192ms] -> getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) #0 [883192ms] <- getsockopt$sock_cred=0xffffffffffffffff errno=9 cover=49 #0 [883192ms] -> openat(0x3, 0x20000000, 0x100, 0x12) #0 [883192ms] <- openat=0xffffffffffffffff errno=20 cover=815 #0 [883193ms] -> openat(0x3, 0x20000080, 0x400000, 0x0) #0 [883193ms] <- openat=0xffffffffffffffff errno=22 cover=48 #0 [883193ms] -> clone3(0x200008c0, 0x58) #0 [883194ms] <- clone3=0xffffffffffffffff errno=11 cover=4604 #0 [883197ms] -> pipe(0x200001c0) #0 [883198ms] <- pipe=0x0 errno=14 cover=1180 #0 [883199ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x1000000, 0x200002c0) #0 [883253ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=65212 #0 [883262ms] -> fork() #0 [883291ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [883319ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [883322ms] <- openat=0xffffffffffffffff errno=14 cover=616 #0 [883324ms] -> getpid() #0 [883324ms] <- getpid=0x1a81b errno=14 cover=48 #0 [883324ms] -> getpgid(0x0) #0 [883324ms] <- getpgid=0x1a81b errno=14 cover=48 #0 [883325ms] -> syz_open_procfs$userns(0x0, 0x20000000) #0 [883326ms] <- syz_open_procfs$userns=0x6 errno=1 cover=6524 #0 [883327ms] -> epoll_create(0x1) #0 [883327ms] <- epoll_create=0x7 errno=14 cover=531 #0 [883328ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [883328ms] <- socket$inet_tcp=0x8 errno=14 cover=1709 #0 [883328ms] -> epoll_ctl$EPOLL_CTL_ADD(0x7, 0x1, 0x8, 0x200000c0) #0 [883329ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=363 22:34:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x100, 0x12) openat(r0, &(0x7f0000000080)='./file1\x00', 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c616669643d3078303070303030303030303030303011d95f72d3985fedca1404cbdb9130302c63616368657461673d17114276e15d0750c1f898402c706f73697861636c2c", @ANYRESDEC=r1, @ANYBLOB=',posixacl,version=9p2000.u,access=user,\x00']) r4 = fork() openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() getpgid(r4) syz_open_procfs$userns(0x0, &(0x7f0000000000)) r5 = epoll_create(0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)) 2021/11/10 22:34:41 result hanged=false: [883416ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108575 #0 [883453ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [883466ms] <- openat=0x3 errno=14 cover=7485 #0 [883468ms] -> getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) #0 [883468ms] <- getsockopt$sock_cred=0xffffffffffffffff errno=9 cover=49 #0 [883468ms] -> openat(0x3, 0x20000000, 0x100, 0x12) #0 [883469ms] <- openat=0xffffffffffffffff errno=20 cover=747 #0 [883469ms] -> openat(0x3, 0x20000080, 0x400000, 0x0) #0 [883469ms] <- openat=0xffffffffffffffff errno=22 cover=48 #0 [883469ms] -> clone3(0x200008c0, 0x58) #0 [883473ms] <- clone3=0xffffffffffffffff errno=11 cover=4494 #0 [883474ms] -> pipe(0x200001c0) #0 [883474ms] <- pipe=0x0 errno=14 cover=1125 #0 [883474ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x1000000, 0x200002c0) #0 [883509ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=67929 #0 [883517ms] -> fork() #0 [883544ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [883567ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [883568ms] <- openat=0xffffffffffffffff errno=14 cover=616 #0 [883568ms] -> getpid() #0 [883568ms] <- getpid=0x1a81f errno=14 cover=48 #0 [883568ms] -> getpgid(0x0) #0 [883568ms] <- getpgid=0x1a81f errno=14 cover=48 #0 [883568ms] -> syz_open_procfs$userns(0x0, 0x20000000) #0 [883569ms] <- syz_open_procfs$userns=0x6 errno=1 cover=6690 #0 [883571ms] -> epoll_create(0x1) #0 [883571ms] <- epoll_create=0x7 errno=14 cover=517 #0 [883571ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [883571ms] <- socket$inet_tcp=0x8 errno=14 cover=1742 #0 [883572ms] -> epoll_ctl$EPOLL_CTL_ADD(0x7, 0x1, 0x8, 0x200000c0) #0 [883572ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=363 2021/11/10 22:34:42 result hanged=false: 22:34:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x100, 0x12) openat(r0, &(0x7f0000000080)='./file1\x00', 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c616669643d3078303070303030303030303030303011d95f72d3985fedca1404cbdb9130302c63616368657461673d17114276e15d0750c1f898402c706f73697861636c2c", @ANYRESDEC=r1, @ANYBLOB=',posixacl,version=9p2000.u,access=user,\x00']) r4 = fork() openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() getpgid(r4) syz_open_procfs$userns(0x0, &(0x7f0000000000)) r5 = epoll_create(0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)) [883646ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108579 #0 [883692ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [883701ms] <- openat=0x3 errno=14 cover=7410 #0 [883703ms] -> getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) #0 [883703ms] <- getsockopt$sock_cred=0xffffffffffffffff errno=9 cover=49 #0 [883704ms] -> openat(0x3, 0x20000000, 0x100, 0x12) #0 [883704ms] <- openat=0xffffffffffffffff errno=20 cover=790 #0 [883705ms] -> openat(0x3, 0x20000080, 0x400000, 0x0) #0 [883705ms] <- openat=0xffffffffffffffff errno=22 cover=48 #0 [883705ms] -> clone3(0x200008c0, 0x58) #0 [883706ms] <- clone3=0xffffffffffffffff errno=11 cover=4625 #0 [883709ms] -> pipe(0x200001c0) #0 [883709ms] <- pipe=0x0 errno=14 cover=1223 #0 [883710ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x1000000, 0x200002c0) #0 [883751ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=68342 #0 [883762ms] -> fork() #0 [883791ms] <- fork=0xffffffffffffffff errno=11 cover=262143 #0 [883817ms] -> openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) #0 [883817ms] <- openat=0xffffffffffffffff errno=14 cover=616 #0 [883817ms] -> getpid() #0 [883817ms] <- getpid=0x1a823 errno=14 cover=48 #0 [883817ms] -> getpgid(0x0) #0 [883817ms] <- getpgid=0x1a823 errno=14 cover=48 #0 [883820ms] -> syz_open_procfs$userns(0x0, 0x20000000) #0 [883822ms] <- syz_open_procfs$userns=0x6 errno=1 cover=6582 #0 [883824ms] -> epoll_create(0x1) #0 [883824ms] <- epoll_create=0x7 errno=14 cover=495 #0 [883824ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [883827ms] <- socket$inet_tcp=0x8 errno=14 cover=1723 #0 [883828ms] -> epoll_ctl$EPOLL_CTL_ADD(0x7, 0x1, 0x8, 0x200000c0) #0 [883829ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=363 2021/11/10 22:34:42 result hanged=false: 2021/11/10 22:34:42 added new input for call #6 mount$9p_fd to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x100, 0x12) openat(r0, &(0x7f0000000080)='./file1\x00', 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c616669643d3078303070303030303030303030303011d95f72d3985fedca1404cbdb9130302c63616368657461673d17114276e15d0750c1f898402c706f73697861636c2c", @ANYRESDEC=r1, @ANYBLOB=',posixacl,version=9p2000.u,access=user,\x00']) r4 = fork() openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() getpgid(r4) syz_open_procfs$userns(0x0, &(0x7f0000000000)) r5 = epoll_create(0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)) 22:34:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r0, 0x800000000006, 0x0) [883929ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108583 #0 [883966ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [883977ms] <- perf_event_open=0x3 errno=14 cover=11137 #0 [883978ms] -> openat$procfs(0xffffffffffffff9c, 0x20000140, 0x0, 0x0) #0 [883978ms] <- openat$procfs=0x4 errno=14 cover=2365 #0 [883979ms] -> lseek(0x4, 0x800000000006, 0x0) #0 [883979ms] <- lseek=0x800000000006 errno=14 cover=13794 enabling collider #0 [883988ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [883989ms] <- perf_event_open=0x3 errno=14 cover=9795 #0 [883990ms] -> openat$procfs(0xffffffffffffff9c, 0x20000140, 0x0, 0x0) #0 [883991ms] <- openat$procfs=0x4 errno=14 cover=1424 pthread_create failed (errno 11) 22:34:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r0, 0x800000000006, 0x0) 2021/11/10 22:34:42 result hanged=false: 2021/11/10 22:34:42 #0: triaging type=7 2021/11/10 22:34:42 triaging input for call #2 lseek (new signal=55) [884123ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108685 #0 [884158ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [884159ms] <- perf_event_open=0x3 errno=14 cover=10588 #0 [884161ms] -> openat$procfs(0xffffffffffffff9c, 0x20000140, 0x0, 0x0) #0 [884162ms] <- openat$procfs=0x4 errno=14 cover=1479 #0 [884162ms] -> lseek(0x4, 0x800000000006, 0x0) #0 [884163ms] <- lseek=0x800000000006 errno=14 cover=11053 22:34:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r0, 0x800000000006, 0x0) 2021/11/10 22:34:42 result hanged=false: [884236ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108687 #0 [884271ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [884273ms] <- perf_event_open=0x3 errno=14 cover=10933 #0 [884275ms] -> openat$procfs(0xffffffffffffff9c, 0x20000140, 0x0, 0x0) #0 [884275ms] <- openat$procfs=0x4 errno=14 cover=4969 #0 [884279ms] -> lseek(0x4, 0x800000000006, 0x0) #0 [884280ms] <- lseek=0x800000000006 errno=14 cover=12454 22:34:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r0, 0x800000000006, 0x0) 2021/11/10 22:34:42 result hanged=false: [884350ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108689 #0 [884375ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [884376ms] <- perf_event_open=0x3 errno=14 cover=10530 #0 [884378ms] -> openat$procfs(0xffffffffffffff9c, 0x20000140, 0x0, 0x0) #0 [884379ms] <- openat$procfs=0x4 errno=14 cover=1425 #0 [884384ms] -> lseek(0x4, 0x800000000006, 0x0) #0 [884385ms] <- lseek=0x800000000006 errno=14 cover=11089 2021/11/10 22:34:42 result hanged=false: 2021/11/10 22:34:42 added new input for call #2 lseek to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r0, 0x800000000006, 0x0) 2021/11/10 22:34:43 #0: triaging type=7 22:34:43 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r0, 0x800000000006, 0x0) 2021/11/10 22:34:43 triaging input for call #0 perf_event_open (new signal=2) [884456ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108691 #0 [884482ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [884483ms] <- perf_event_open=0x3 errno=14 cover=9633 #0 [884485ms] -> openat$procfs(0xffffffffffffff9c, 0x20000140, 0x0, 0x0) #0 [884486ms] <- openat$procfs=0x4 errno=14 cover=1547 #0 [884487ms] -> lseek(0x4, 0x800000000006, 0x0) #0 [884488ms] <- lseek=0x800000000006 errno=14 cover=11089 22:34:43 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r0, 0x800000000006, 0x0) 2021/11/10 22:34:43 result hanged=false: [884547ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108693 #0 [884568ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [884569ms] <- perf_event_open=0x3 errno=14 cover=15540 #0 [884570ms] -> openat$procfs(0xffffffffffffff9c, 0x20000140, 0x0, 0x0) #0 [884571ms] <- openat$procfs=0x4 errno=14 cover=4201 #0 [884571ms] -> lseek(0x4, 0x800000000006, 0x0) #0 [884572ms] <- lseek=0x800000000006 errno=14 cover=12387 22:34:43 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r0, 0x800000000006, 0x0) 2021/11/10 22:34:43 result hanged=false: [884627ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108695 #0 [884647ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [884647ms] <- perf_event_open=0x3 errno=14 cover=9881 #0 [884649ms] -> openat$procfs(0xffffffffffffff9c, 0x20000140, 0x0, 0x0) #0 [884649ms] <- openat$procfs=0x4 errno=14 cover=4191 #0 [884651ms] -> lseek(0x4, 0x800000000006, 0x0) #0 [884652ms] <- lseek=0x800000000006 errno=14 cover=12568 2021/11/10 22:34:43 result hanged=false: 2021/11/10 22:34:43 added new input for call #0 perf_event_open to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r0, 0x800000000006, 0x0) 22:34:43 executing program 0: syz_open_dev$vcsn(&(0x7f0000001d80), 0x1, 0x240001) [884713ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108697 #0 [884732ms] -> syz_open_dev$vcsn(0x20001d80, 0x1, 0x240001) #0 [884733ms] <- syz_open_dev$vcsn=0x3 errno=14 cover=888 enabling collider #0 [884734ms] -> syz_open_dev$vcsn(0x20001d80, 0x1, 0x240001) #0 [884734ms] <- syz_open_dev$vcsn=0x3 errno=14 cover=876 22:34:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)="01010101", 0x4) read(r0, &(0x7f00000000c0)=""/4, 0x4) close(r0) 2021/11/10 22:34:43 result hanged=false: [884781ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108699 #0 [884800ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x42, 0x1ff) #0 [884805ms] <- openat=0x3 errno=14 cover=8034 #0 [884806ms] -> write(0x3, 0x20000080, 0x4) #0 [884810ms] <- write=0x4 errno=14 cover=9628 #0 [884811ms] -> read(0x3, 0x200000c0, 0x4) #0 [884811ms] <- read=0x0 errno=14 cover=2502 #0 [884811ms] -> close(0x3) #0 [884811ms] <- close=0x0 errno=14 cover=326 enabling collider #0 [884811ms] -> openat(0xffffffffffffff9c, 0x20000040, 0x42, 0x1ff) #0 [884811ms] <- openat=0x3 errno=14 cover=1142 #0 [884812ms] -> write(0x3, 0x20000080, 0x4) #0 [884813ms] <- write=0x4 errno=14 cover=4058 pthread_create failed (errno 11) 2021/11/10 22:34:43 result hanged=false: 22:34:43 executing program 0: r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [884884ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108801 #0 [884904ms] -> gettid() #0 [884904ms] <- gettid=0x1a902 errno=14 cover=48 #0 [884904ms] -> process_vm_readv(0x1a902, 0x20001a40, 0x3, 0x20001ec0, 0x8, 0x0) #0 [884916ms] <- process_vm_readv=0x13a errno=14 cover=220427 enabling collider #0 [884919ms] -> gettid() #0 [884919ms] <- gettid=0x1a902 errno=14 cover=48 22:34:43 executing program 0: r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 2021/11/10 22:34:43 result hanged=false: 2021/11/10 22:34:43 #0: triaging type=7 2021/11/10 22:34:43 triaging input for call #1 process_vm_readv (new signal=3) [884956ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108803 #0 [884974ms] -> gettid() #0 [884974ms] <- gettid=0x1a904 errno=14 cover=48 #0 [884976ms] -> process_vm_readv(0x1a904, 0x20001a40, 0x3, 0x20001ec0, 0x8, 0x0) #0 [884982ms] <- process_vm_readv=0x13a errno=14 cover=213244 22:34:43 executing program 0: r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 2021/11/10 22:34:43 result hanged=false: [885029ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108805 #0 [885048ms] -> gettid() #0 [885049ms] <- gettid=0x1a906 errno=14 cover=48 #0 [885050ms] -> process_vm_readv(0x1a906, 0x20001a40, 0x3, 0x20001ec0, 0x8, 0x0) #0 [885056ms] <- process_vm_readv=0x13a errno=14 cover=225473 22:34:43 executing program 0: r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 2021/11/10 22:34:43 result hanged=false: [885106ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108807 #0 [885125ms] -> gettid() #0 [885125ms] <- gettid=0x1a908 errno=14 cover=48 #0 [885126ms] -> process_vm_readv(0x1a908, 0x20001a40, 0x3, 0x20001ec0, 0x8, 0x0) #0 [885134ms] <- process_vm_readv=0x13a errno=14 cover=215318 2021/11/10 22:34:43 result hanged=false: 2021/11/10 22:34:43 added new input for call #1 process_vm_readv to corpus: r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 22:34:43 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/diskstats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) [885180ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108809 #0 [885202ms] -> openat$procfs(0xffffffffffffff9c, 0x20000740, 0x0, 0x0) #0 [885202ms] <- openat$procfs=0x3 errno=14 cover=1370 #0 [885203ms] -> ioctl$PERF_EVENT_IOC_REFRESH(0x3, 0x2402, 0x0) #0 [885204ms] <- ioctl$PERF_EVENT_IOC_REFRESH=0xffffffffffffffff errno=25 cover=107 enabling collider #0 [885204ms] -> openat$procfs(0xffffffffffffff9c, 0x20000740, 0x0, 0x0) #0 [885204ms] <- openat$procfs=0x3 errno=14 cover=1366 22:34:43 executing program 0: socket$inet(0x2, 0x3, 0x80) 2021/11/10 22:34:43 result hanged=false: [885239ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108811 #0 [885265ms] -> socket$inet(0x2, 0x3, 0x80) #0 [885266ms] <- socket$inet=0x3 errno=14 cover=1709 enabling collider #0 [885267ms] -> socket$inet(0x2, 0x3, 0x80) #0 [885267ms] <- socket$inet=0x3 errno=14 cover=1740 22:34:43 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) 2021/11/10 22:34:43 result hanged=false: [885304ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108813 #0 [885329ms] -> pipe(0x20000040) #0 [885329ms] <- pipe=0x0 errno=14 cover=1853 #0 [885334ms] -> syz_genetlink_get_family_id$smc(0x20000000, 0x3) syz_genetlink_get_family_id(SMC_PNETID, 3) netlink_send_ext: short netlink write: -1/36 errno=88 netlink: failed to get family id for SMC_PNETID: Socket operation on non-socket syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [885334ms] <- syz_genetlink_get_family_id$smc=0xffffffffffffffff errno=88 cover=3543 enabling collider #0 [885335ms] -> pipe(0x20000040) #0 [885335ms] <- pipe=0x0 errno=14 cover=1113 #0 [885336ms] -> syz_genetlink_get_family_id$smc(0x20000000, 0x3) syz_genetlink_get_family_id(SMC_PNETID, 3) netlink_send_ext: short netlink write: -1/36 errno=9 netlink: failed to get family id for SMC_PNETID: Bad file descriptor syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [885336ms] <- syz_genetlink_get_family_id$smc=0xffffffffffffffff errno=9 cover=1107 22:34:43 executing program 0: ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000900)={{}, 0x0, 0x0, @unused, @name="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"}) r0 = eventfd2(0x9, 0x80801) read$eventfd(r0, &(0x7f0000001900), 0x8) 2021/11/10 22:34:43 result hanged=false: 2021/11/10 22:34:43 poll: candidates=8 inputs=0 signal=0 [885375ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108815 #0 [885393ms] -> ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x20000900) #0 [885393ms] <- ioctl$BTRFS_IOC_RM_DEV_V2=0xffffffffffffffff errno=9 cover=45 #0 [885393ms] -> eventfd2(0x9, 0x80801) #0 [885394ms] <- eventfd2=0x3 errno=14 cover=542 #0 [885394ms] -> read$eventfd(0x3, 0x20001900, 0x8) #0 [885394ms] <- read$eventfd=0x8 errno=14 cover=215 enabling collider #0 [885394ms] -> ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x20000900) #0 [885394ms] <- ioctl$BTRFS_IOC_RM_DEV_V2=0xffffffffffffffff errno=9 cover=45 #0 [885395ms] -> eventfd2(0x9, 0x80801) #0 [885395ms] <- eventfd2=0x3 errno=14 cover=578 pthread_create failed (errno 11) 22:34:44 executing program 0: ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000900)={{}, 0x0, 0x0, @unused, @name="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"}) r0 = eventfd2(0x9, 0x80801) read$eventfd(r0, &(0x7f0000001900), 0x8) 2021/11/10 22:34:44 result hanged=false: 2021/11/10 22:34:44 #0: triaging type=7 2021/11/10 22:34:44 triaging input for call #2 read$eventfd (new signal=2) [885465ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108917 #0 [885484ms] -> ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x20000900) #0 [885484ms] <- ioctl$BTRFS_IOC_RM_DEV_V2=0xffffffffffffffff errno=9 cover=45 #0 [885486ms] -> eventfd2(0x9, 0x80801) #0 [885486ms] <- eventfd2=0x3 errno=14 cover=597 #0 [885487ms] -> read$eventfd(0x3, 0x20001900, 0x8) #0 [885487ms] <- read$eventfd=0x8 errno=14 cover=215 22:34:44 executing program 0: ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000900)={{}, 0x0, 0x0, @unused, @name="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"}) r0 = eventfd2(0x9, 0x80801) read$eventfd(r0, &(0x7f0000001900), 0x8) 2021/11/10 22:34:44 result hanged=false: [885521ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108919 #0 [885538ms] -> ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x20000900) #0 [885538ms] <- ioctl$BTRFS_IOC_RM_DEV_V2=0xffffffffffffffff errno=9 cover=45 #0 [885539ms] -> eventfd2(0x9, 0x80801) #0 [885539ms] <- eventfd2=0x3 errno=14 cover=586 #0 [885539ms] -> read$eventfd(0x3, 0x20001900, 0x8) #0 [885539ms] <- read$eventfd=0x8 errno=14 cover=215 2021/11/10 22:34:44 result hanged=false: 22:34:44 executing program 0: ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000900)={{}, 0x0, 0x0, @unused, @name="ce7d4110a51405a302667e9a1d5a627b25890afe1bff851290d298c95f5332b40ba0d7639e88a87c2eeaeacd768bf1bb759d8a60c9ba71946e7b38aa653c81faa62ef4fb050ad779d17b7273bd4cbada13beb98b938e243e8be3465f0f8175480bbcc5588f7c8860b2e1cadb8d7dd3daafa809dce0f0f907e5cecc620c1e3499d273a611cee2c2f2cfa4bcb321270a11071fc883299d14db07b374b5a9234bfa36e2388650cedab8a98b6d29bf0354f20c1dc2127d7dc1d0d78a57f3e5130e520fef222f17e5866f573f99beb9c22149ecfe21fbc98372f11c821e7da01bd154734d830ef1630c147386b85c836b8c23354a61cc664e290683ffb74d599c3b2307d55392732909fbc5e3a370ae32944ab956ecf5efda268824f55de12635648494c6540e12dbc2a02a9cfe1e74edca209051935b8ec168a774ee2fb0faff88c697e2953dc62e276b4ea842dc343e74c19b5e109cc5d04c4dae47616de2739ce69545e06526850591c6b535e1935ad0b8d3d17051b34f57e723c477b1ae4d62fa237fd64b29828b7893bd7b3c3ee7d59c9b212ee559d70dc7bdd7958391dd1a7b66d448e2dbaad553977c7804e594fb7b794938353b0f3931fc250f381553dd20a6d94cae5ebc8604b1acf48f3039b11ebcc5890795d47d214c9c64a4afdebdd9c3d300ca911c986869e6163c41d3e2ed23b5eb96ea495475f8c0af67f793559935db11d82b4539c37c2889ca5d7d1519672d658abdb2d79b863e27693abe6ffe2f2c4dda869f93bf137578ed9d74bb1826949cb69693728c4afd0f5f8336b5196774066e3d6e04dd5bfba85463af73de924144f2d6b777b75e73b15fe746f0423edc6eb5b0cb744fb32ce27ec844eec1709f43fc64ac9796635e7e9435c60fdc58ab340fd95ccc85d20e91ed3ca008d898addf9f059b17faf3cb67e079c0e17bca8f1c34ef3051de422f4b53d04bb72d392060dc70ffe96137dedb87865adc06373ea2c8b2c46feb12c7019cb6e92d8dc8afb62d9f57c46bd37d0f01ad65d3839262d658ea58c74dc6085085ccb9efc4f98c572967a5f8a01bdd9bbf608dce18cf5c3c3b64c501fd0165e96e6b4c8561b6f7ed8e55ec15104ed41c6ede6bcf2508895d7d6f44222fdb1ffce02b5c085cfc5027175ef890b04231f318086fc82e65a9a28d1aa3a7e513035a92cb1059ea63c9406cbc667588dd134902f19ed27ab3e6d3b71bdfb33d9a01e460917b90a9982bd15d8fd7539845110d08b42cc98287c4ad56d7274cc233627cf38100e79f2deb06c3d14103407301be8cedc467a0ba2deba6ce2d0666a336a89c1fed827ddada2be2053b7dff26a49d2dc66c324c721a8587617691af166cbf6fe25613b0d7a890561809ac93af8978b0ea18e4500d9ffbdfaf2bcf57294fba4de883016ea4c1472f2ff71f84245b8ce162e6345698426e33d43df98f1c93e281535b0847620791784a9df6fd23119effc1486c2b3b03a64c4bdcf1c7bd42644da88f8a8bea9191f251ed656ecb3fc4acbfe836cb30fc1bb934f661f996586e35eceb5cece3513f8dd66f19a0a5c26a512620a98ec574a26cb2f529f1b066dda67f06b73aa81971906af27b397bc26a1f1e017ac0d6e60558fd2397660ebdffab7c6f45ef17237b44e949b397bf42c2002a36194f1333594331d51f5f3c1b56223c60a3fae1fe20c15e45e465da54958fe20f2fc0594890dcad798a312b08236672b42ea2ecb616e933f80cf50e9500f536f1336b5b0cb869b3e48e7ea14177b550f3f07cfeed3f017ac625c323902f330dcaffccfdc1f5376080d662b470af5c2d1a136e76f81edf33bd9e306df81b68dc3061408605cf433cba8908c425ad54e8efd635dbf13045a40f47c444cc4412b27b131deec1e97b4a183a2b771cc59066afad2f588826825e2c967cd73217cec2ba042b48208da453d76d1a068f30d59dab826086b303f759c80678c6cdd4bc124f2bc0c40596e1d58c21565977a3967b265d7711fefe63518ed3d99801d5081b459eab99bab195e8912fc79a19d58e1083217d1854a016aaa65efc72851d48c10fda56e0b4b53ba111827f66beb4270b72b9c8ec2ba61fb30112d0423910d7923b36b6669a0cee1180ba40588b8981f51d91605762d089abb725018060cd6479b893aaaaea930d2f812cc8f9cb2d4f218f47d9a729a3fa73dd7ffc07529e75c95f678688fc7f7f56c46cb59c2d68febfefe039e9165ce74ce84e39923dd5986ccd40e3d4d7d1e07073677013fe1a2d95b3eab8de35f119736a9d5f8704fd27779b064571c6bbfac057bcb310bab36a2acb016733da98d74249d5902ba48ef21e0ad7be642dff4ed34a8fc4bb2a1b7c4c9ddb165255f7e7ce3bfbed961d24627fb1f28e742cb7325ab2886a310736c1f3773181fcd84787050132d489056bfbaeba12e7f2bbc0530cd4980f62502b9d4e7949827052451f2e1c4afd42d1ddd32885328faff183a3424a67208d42e58d47d82a4edae2def638c4177a821a8bb4b80f6ca494b1a5025fca16611cd7820ac51db275a9caabf25214e6061d8f5b0f5e5050a12237055174fe0fab052ab8102af702533c9fe6b37863b97b4b9d239ef0f25a3c46a27f0fcbdb66ef7a0af2268c5d493fd013d84ca696378a01433227f7957fe879d36d519a49cd51cf36612b418a097d3e8fa6eeb75e882aab2c228f9b8b0b886c021ed492cb529ab6d9f877e1f43fb3af9472a35e1b0fd390ff3ccdf85fbac9d73cd14200096673095bae8a122ce14a169aaf155ff02f5f9c49d6f97cf7a37aa28a7d9a5f721b3963b9da09a7311b999af5b31a1b134c5edc370d3eec7a390d8806331aac5073a475e56859fa86fd438dad55d53116240022634a01d3e583c3088b77c688678cb29457a89c37da8d85f935c750a9bec789e63a1f4319a07393295e064d03d5934dc5d2b6678117193cccc956b95286ce51e515014b4c60ae69ed498ef73332a31206d51f19bb8153b29e162b2bc6f1dce74f486f6cde1f08f329642007cdd35f31562e9253b73f6f26111dcee02f1a46d4a46dac2a8ba8119279bd0ffcb324142458132ae17e7bc5f59ec8ea6abce005e5d78b72654422d8138a8075e317c58c23d2aa2cd280e31899ffc85544ac9d68ee770783252518725211d1946f6d1ca43f1950b400c47d5fd7543a62bfe4350347ddf1abf8137eef7fc699448664aad70789f7b459dbc8918b637fee0255a73d0ac19a48e70aec14717044e0af87b981560859243d790467809c4f127dc7ba3c15b7ff5357574ac17f40ba88d42441cd2ad912d76ebc6223e3e56f7d346a4ed3d61fa3a5dfedb4a7c82e506c9904baa75b93cba3482477ae884bcc3fc7bc4bad252d9289d8282826e86344198bf6dc52f9bed25234899194b1bed556731bb4da7cc1b23ef1a408e0915d176f43de3ec64bfe5d7ed6228dfc4e325f7187606da05fc27bb21ad3d9b80b971ed8b64623d07fefcab2fec38e61a82663cc1b7a4e508e6604d2246700cb926d6c1af08e7aef3825d833c4b02f95b0e2b8c04ccef5464f6c3cdf4f8cd005cbd9720ef48b36d0b921d6698ded52319f14383da2a2747e6706c6c5adb9969168c834c2ee0bbc1a476570245a14ec372a0b1f5a3fa0b7191d9fde52a0351c7f090a1aea72efe3f39fce9208fa8972e35c75f3d4a3e771a0a961e650c4e9f670abea18892a84def249bb87fc9f65eaf8357683259eaf28bbcabedecc762ea73ab713c392c72f48fd417dd52fc1b2b5ad1f1d2b94c249bd663833dd166bd4fd24be10c4225a49af029f4e7719c009bd45ac5ab4d1c1caac90ac6100a9ca37d0f6e998c156a4ba037fa635e1946d9c268c5622c3499ea7220a1fc85e36901dcb828a0d476a9aefd980a7bdf9588a63d627ddaf3b4c490ad44e94a6d103be6dc2c20f6ef2b57371e31a9e63961e5ecb51c5a494c4ddcbd5901ba845933cadb0c566bb20891c54682f97501233984690d12f91311d796f8c74ab924ee8954a73873f49fca08fc85b44f7336e54de171e94f3d3436cd9cea7f22bd1917a8b1c7979f1a9f6b97a394ebe782aa116402c8c7a82d42bd81adfd1c2e8b4e3046f078c7a5b687a5632ad58307fc323e31b457b9528d70626405a826b5db540d12d860b7435eed9a600b90416e73f4b0b4cd2cef8e0092d8ef98ca91c852142f4570674b08673fdc74dd57c710724770448cd41e65942b5d78913ef6729ac39bebabd96c20eef9a3b4f407bf91cc8f21a92bf22b27d405f64bb864fc9564159fbeafc93436884f51e7f2b87d0204df124a8254c6910f46edf7915e01142dd1916b1f138835d5cc26c7b23eea5100b72f791ff3b126e8d1eeda596a3b9befd55e45700465c639cfe4b0e07e97cadd06a81ad467a08372101bded5dbea294636f4ea36ae72460cd455261650577ac4ca7fa08786eaa1806e2335c1dadcc267ff066c3fac31ee34a08edc7269bec094d24085e83f3c3a56788d595d265714e1fa176845162fa9e32f2f1982f3d750b2c4749ccb7f8efd0abe1ae4ae72aa4c049269ccf35c93ea3cb22b7b87d6a9c6541a83f94bdf16de6fcf72365fdfe373cc602447a77757c9d6c05489fb85beda9a682687f6c7343e22c1b2ffe98fde1324fa6088567bc46718d0482bf04365169a5b973bcf4bad8f0c339c6e049d7177c814d9aeedff64353a8b6c583341860b877beae844d18c4da7f1f0c0b2245f8c5d869a888afcbbd9c7bd48988947023607cf7ad6fbad76d3a13d84b9418dc371053a26d401b083c17a614b6305f41d940f8fa8dac6fbbacc8f592221d36f6211ff2dfe4a8b83ed566388ffe87c54d441c39b289ad54cbf2af1468825c549a477e5836ba52d20b320ca108179df1175ca4bd737f8ea2e556cde29fccc0402268479da6d3664530ea98c7655ce798a6a2cf626067c95baf4b13cea33d968a4052514845184620374dd5605329d1bd2e7dfa60a91e8af60c9d54a49245a22224b8a2ea78b0ef8be1a831bbd31be802afe5217e5bf2db545f9d509f1bfd0f6921bc72ab99107a30a5414ced8a879c5cbbde3bf486966730c54f8509803fd8739c410cf236796b1a0f27b475bb6e4c871c61c1b7f2fc67aa6248fefce09010d75dc665ba77e2aa02fd40f2303257761ce9fd8402774a938c85193186858ecc117083b65a0eab7fe5f319098b610d450bdb062c91ea70e3e4caad62852635952b7e0b42721e0a8af3b12f8fae60768945d04817e9d9e400cdda42540e5ef5755c93abc0140b17ea75c7462412350131c6b8cfb5ef97af4cd5f048f17bfac1799464cd21bfc923618c7a92951bbb6b63327749a07551a49c39e3dcb45e35e9fc362f7d9d9cd72d6fecf0abd046952b75e09830e4ea344467e77bb253136a1d0312a7702f481a2a27a49303687256d37b790586fe1bea2dcd6b9d8b3e4310ef849b93f7a43e38010dddac62bc8a5220f8336045e88e5ab6e5de5df154d0a5b9074a694fb167c0786324f1d3d6027f9f944728c66b1e2e34d665dbed032cf712a04d33667fd29c662989cfd9c1e84c09c2e57129fb750892f998a9ce9929986d2f8b04a0de963a7320afa16728360faec9054edf87391f8dc46161ec4268f9f48e667de19bb9571aff0909f2e868c58f54b635d4a4baa2b886a522903bb635523727e7d8c294d340688aaa5781807a8287c6d98106d4"}) r0 = eventfd2(0x9, 0x80801) read$eventfd(r0, &(0x7f0000001900), 0x8) [885580ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108921 #0 [885597ms] -> ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x20000900) #0 [885597ms] <- ioctl$BTRFS_IOC_RM_DEV_V2=0xffffffffffffffff errno=9 cover=45 #0 [885598ms] -> eventfd2(0x9, 0x80801) #0 [885598ms] <- eventfd2=0x3 errno=14 cover=564 #0 [885598ms] -> read$eventfd(0x3, 0x20001900, 0x8) #0 [885598ms] <- read$eventfd=0x8 errno=14 cover=215 2021/11/10 22:34:44 result hanged=false: 2021/11/10 22:34:44 added new input for call #2 read$eventfd to corpus: ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000900)={{}, 0x0, 0x0, @unused, @name="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"}) r0 = eventfd2(0x9, 0x80801) read$eventfd(r0, &(0x7f0000001900), 0x8) 22:34:44 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup(r0) getdents64(r1, &(0x7f0000001d00)=""/4096, 0x18) getdents64(r1, &(0x7f0000000000)=""/203, 0xcb) [885643ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 108923 #0 [885660ms] -> openat$pidfd(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [885661ms] <- openat$pidfd=0x3 errno=14 cover=1679 #0 [885661ms] -> dup(0x3) #0 [885661ms] <- dup=0x4 errno=14 cover=87 #0 [885661ms] -> getdents64(0x4, 0x20001d00, 0x18) #0 [885662ms] <- getdents64=0x18 errno=14 cover=3203 #0 [885662ms] -> getdents64(0x4, 0x20000000, 0xcb) #0 [885662ms] <- getdents64=0xb8 errno=14 cover=5317 enabling collider #0 [885663ms] -> openat$pidfd(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [885663ms] <- openat$pidfd=0x3 errno=14 cover=1689 #0 [885663ms] -> dup(0x3) #0 [885663ms] <- dup=0x4 errno=14 cover=86 pthread_create failed (errno 11) 22:34:44 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup(r0) getdents64(r1, &(0x7f0000001d00)=""/4096, 0x18) getdents64(r1, &(0x7f0000000000)=""/203, 0xcb) 2021/11/10 22:34:44 result hanged=false: 2021/11/10 22:34:44 #0: triaging type=7 2021/11/10 22:34:44 triaging input for call #3 getdents64 (new signal=2) [885732ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109025 #0 [885749ms] -> openat$pidfd(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [885752ms] <- openat$pidfd=0x3 errno=14 cover=1723 #0 [885752ms] -> dup(0x3) #0 [885752ms] <- dup=0x4 errno=14 cover=87 #0 [885752ms] -> getdents64(0x4, 0x20001d00, 0x18) #0 [885753ms] <- getdents64=0x18 errno=14 cover=474 #0 [885753ms] -> getdents64(0x4, 0x20000000, 0xcb) #0 [885754ms] <- getdents64=0xb8 errno=14 cover=4502 22:34:44 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup(r0) getdents64(r1, &(0x7f0000001d00)=""/4096, 0x18) getdents64(r1, &(0x7f0000000000)=""/203, 0xcb) 2021/11/10 22:34:44 result hanged=false: [885797ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109027 #0 [885814ms] -> openat$pidfd(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [885814ms] <- openat$pidfd=0x3 errno=14 cover=1722 #0 [885815ms] -> dup(0x3) #0 [885815ms] <- dup=0x4 errno=14 cover=87 #0 [885815ms] -> getdents64(0x4, 0x20001d00, 0x18) #0 [885815ms] <- getdents64=0x18 errno=14 cover=474 #0 [885815ms] -> getdents64(0x4, 0x20000000, 0xcb) #0 [885818ms] <- getdents64=0xb8 errno=14 cover=4597 22:34:44 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup(r0) getdents64(r1, &(0x7f0000001d00)=""/4096, 0x18) getdents64(r1, &(0x7f0000000000)=""/203, 0xcb) 2021/11/10 22:34:44 result hanged=false: [885860ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109029 #0 [885880ms] -> openat$pidfd(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [885880ms] <- openat$pidfd=0x3 errno=14 cover=1722 #0 [885881ms] -> dup(0x3) #0 [885881ms] <- dup=0x4 errno=14 cover=87 #0 [885882ms] -> getdents64(0x4, 0x20001d00, 0x18) #0 [885882ms] <- getdents64=0x18 errno=14 cover=528 #0 [885883ms] -> getdents64(0x4, 0x20000000, 0xcb) #0 [885884ms] <- getdents64=0xb8 errno=14 cover=4588 2021/11/10 22:34:44 result hanged=false: 2021/11/10 22:34:44 added new input for call #3 getdents64 to corpus: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup(r0) getdents64(r1, &(0x7f0000001d00)=""/4096, 0x18) getdents64(r1, &(0x7f0000000000)=""/203, 0xcb) 2021/11/10 22:34:44 #0: triaging type=7 2021/11/10 22:34:44 triaging input for call #2 getdents64 (new signal=6) 22:34:44 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup(r0) getdents64(r1, &(0x7f0000001d00)=""/4096, 0x18) getdents64(r1, &(0x7f0000000000)=""/203, 0xcb) [885933ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109031 #0 [885960ms] -> openat$pidfd(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [885960ms] <- openat$pidfd=0x3 errno=14 cover=1725 #0 [885965ms] -> dup(0x3) #0 [885966ms] <- dup=0x4 errno=14 cover=87 #0 [885966ms] -> getdents64(0x4, 0x20001d00, 0x18) #0 [885967ms] <- getdents64=0x18 errno=14 cover=528 #0 [885968ms] -> getdents64(0x4, 0x20000000, 0xcb) #0 [885968ms] <- getdents64=0xb8 errno=14 cover=4660 22:34:44 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup(r0) getdents64(r1, &(0x7f0000001d00)=""/4096, 0x18) getdents64(r1, &(0x7f0000000000)=""/203, 0xcb) 2021/11/10 22:34:44 result hanged=false: [886047ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109033 #0 [886070ms] -> openat$pidfd(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [886071ms] <- openat$pidfd=0x3 errno=14 cover=1711 #0 [886071ms] -> dup(0x3) #0 [886072ms] <- dup=0x4 errno=14 cover=87 #0 [886073ms] -> getdents64(0x4, 0x20001d00, 0x18) #0 [886073ms] <- getdents64=0x18 errno=14 cover=528 #0 [886074ms] -> getdents64(0x4, 0x20000000, 0xcb) #0 [886075ms] <- getdents64=0xb8 errno=14 cover=4602 22:34:44 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup(r0) getdents64(r1, &(0x7f0000001d00)=""/4096, 0x18) getdents64(r1, &(0x7f0000000000)=""/203, 0xcb) 2021/11/10 22:34:44 result hanged=false: [886116ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109035 #0 [886138ms] -> openat$pidfd(0xffffffffffffff9c, 0x200002c0, 0x0, 0x0) #0 [886139ms] <- openat$pidfd=0x3 errno=14 cover=1712 #0 [886140ms] -> dup(0x3) #0 [886140ms] <- dup=0x4 errno=14 cover=87 #0 [886145ms] -> getdents64(0x4, 0x20001d00, 0x18) #0 [886145ms] <- getdents64=0x18 errno=14 cover=528 #0 [886146ms] -> getdents64(0x4, 0x20000000, 0xcb) #0 [886147ms] <- getdents64=0xb8 errno=14 cover=4715 2021/11/10 22:34:44 result hanged=false: 2021/11/10 22:34:44 added new input for call #2 getdents64 to corpus: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup(r0) getdents64(r1, &(0x7f0000001d00)=""/4096, 0x18) getdents64(r1, &(0x7f0000000000)=""/203, 0xcb) 22:34:44 executing program 0: add_key$user(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, &(0x7f0000000980)='F', 0x1, 0xfffffffffffffffc) [886187ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109037 #0 [886206ms] -> add_key$user(0x20000900, 0x20000940, 0x20000980, 0x1, 0xfffffffffffffffc) #0 [886206ms] <- add_key$user=0x150a3657 errno=14 cover=2166 enabling collider #0 [886206ms] -> add_key$user(0x20000900, 0x20000940, 0x20000980, 0x1, 0xfffffffffffffffc) #0 [886207ms] <- add_key$user=0x150a3657 errno=14 cover=1768 2021/11/10 22:34:44 result hanged=false: 22:34:44 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, r3+60000000}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0, 0x0) [886244ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109039 #0 [886261ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x200a0000, 0x20ffd000, 0x20000180, 0x20002a40) #0 [886264ms] <- syz_io_uring_setup=0x3 errno=14 cover=7826 #0 [886268ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000540, 0x0) #0 [886268ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [886268ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000100, 0x4) #0 [886269ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [886270ms] -> clock_gettime(0x0, 0x20000140) #0 [886270ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [886271ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000300, 0x0) #0 [886271ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [886271ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [886272ms] <- io_uring_enter=0x3 errno=14 cover=961 #0 [886272ms] -> execveat(0xffffffffffffffff, 0x20000000, 0x0, 0x0, 0x0) #0 [886274ms] <- execveat=0xffffffffffffffff errno=9 cover=21243 enabling collider #0 [886275ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x200a0000, 0x20ffd000, 0x20000180, 0x20002a40) #0 [886278ms] <- syz_io_uring_setup=0x3 errno=14 cover=6546 #0 [886278ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000540, 0x0) #0 [886278ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 pthread_create failed (errno 11) 22:34:44 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, r3+60000000}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0, 0x0) 2021/11/10 22:34:44 result hanged=false: 2021/11/10 22:34:44 #0: triaging type=7 2021/11/10 22:34:44 triaging input for call #6 execveat (new signal=24) [886347ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109141 #0 [886366ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x200a0000, 0x20ffd000, 0x20000180, 0x20002a40) #0 [886369ms] <- syz_io_uring_setup=0x3 errno=14 cover=8012 #0 [886370ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000540, 0x0) #0 [886371ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [886371ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000100, 0x4) #0 [886371ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [886373ms] -> clock_gettime(0x0, 0x20000140) #0 [886373ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [886374ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000300, 0x0) #0 [886374ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [886374ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [886374ms] <- io_uring_enter=0x3 errno=14 cover=903 #0 [886375ms] -> execveat(0xffffffffffffffff, 0x20000000, 0x0, 0x0, 0x0) #0 [886376ms] <- execveat=0xffffffffffffffff errno=9 cover=17477 22:34:44 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, r3+60000000}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0, 0x0) 2021/11/10 22:34:44 result hanged=false: [886413ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109143 #0 [886444ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x200a0000, 0x20ffd000, 0x20000180, 0x20002a40) #0 [886446ms] <- syz_io_uring_setup=0x3 errno=14 cover=8146 #0 [886448ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000540, 0x0) #0 [886448ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [886449ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000100, 0x4) #0 [886449ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [886450ms] -> clock_gettime(0x0, 0x20000140) #0 [886450ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [886451ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000300, 0x0) #0 [886451ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [886452ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [886452ms] <- io_uring_enter=0x3 errno=14 cover=881 #0 [886453ms] -> execveat(0xffffffffffffffff, 0x20000000, 0x0, 0x0, 0x0) #0 [886454ms] <- execveat=0xffffffffffffffff errno=9 cover=17320 22:34:45 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, r3+60000000}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0, 0x0) 2021/11/10 22:34:45 result hanged=false: [886493ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109145 #0 [886515ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x200a0000, 0x20ffd000, 0x20000180, 0x20002a40) #0 [886517ms] <- syz_io_uring_setup=0x3 errno=14 cover=7966 #0 [886520ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000540, 0x0) #0 [886520ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [886521ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000100, 0x4) #0 [886521ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [886522ms] -> clock_gettime(0x0, 0x20000140) #0 [886522ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [886522ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000300, 0x0) #0 [886522ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [886523ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [886523ms] <- io_uring_enter=0x3 errno=14 cover=892 #0 [886524ms] -> execveat(0xffffffffffffffff, 0x20000000, 0x0, 0x0, 0x0) #0 [886525ms] <- execveat=0xffffffffffffffff errno=9 cover=17382 2021/11/10 22:34:45 result hanged=false: 2021/11/10 22:34:45 added new input for call #6 execveat to corpus: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, r3+60000000}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0, 0x0) 22:34:45 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, r3+60000000}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0, 0x0) 2021/11/10 22:34:45 #0: triaging type=7 2021/11/10 22:34:45 triaging input for call #5 io_uring_enter (new signal=3) [886569ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109147 #0 [886586ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x200a0000, 0x20ffd000, 0x20000180, 0x20002a40) #0 [886588ms] <- syz_io_uring_setup=0x3 errno=14 cover=7775 #0 [886589ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000540, 0x0) #0 [886589ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [886589ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000100, 0x4) #0 [886589ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [886589ms] -> clock_gettime(0x0, 0x20000140) #0 [886589ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [886589ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000300, 0x0) #0 [886589ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [886589ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [886589ms] <- io_uring_enter=0x3 errno=14 cover=906 #0 [886589ms] -> execveat(0xffffffffffffffff, 0x20000000, 0x0, 0x0, 0x0) #0 [886590ms] <- execveat=0xffffffffffffffff errno=9 cover=17659 22:34:45 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, r3+60000000}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0, 0x0) 2021/11/10 22:34:45 result hanged=false: [886632ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109149 #0 [886649ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x200a0000, 0x20ffd000, 0x20000180, 0x20002a40) #0 [886652ms] <- syz_io_uring_setup=0x3 errno=14 cover=15464 #0 [886660ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000540, 0x0) #0 [886660ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [886660ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000100, 0x4) #0 [886660ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [886660ms] -> clock_gettime(0x0, 0x20000140) #0 [886660ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [886661ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000300, 0x0) #0 [886661ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [886661ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [886661ms] <- io_uring_enter=0x3 errno=14 cover=903 #0 [886661ms] -> execveat(0xffffffffffffffff, 0x20000000, 0x0, 0x0, 0x0) #0 [886663ms] <- execveat=0xffffffffffffffff errno=9 cover=17341 22:34:45 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, r3+60000000}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0, 0x0) 2021/11/10 22:34:45 result hanged=false: [886702ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109151 #0 [886723ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x200a0000, 0x20ffd000, 0x20000180, 0x20002a40) #0 [886727ms] <- syz_io_uring_setup=0x3 errno=14 cover=8004 #0 [886728ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000540, 0x0) #0 [886728ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [886728ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000100, 0x4) #0 [886728ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [886729ms] -> clock_gettime(0x0, 0x20000140) #0 [886729ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [886730ms] -> syz_io_uring_submit(0x200a0000, 0x20ffd000, 0x20000300, 0x0) #0 [886730ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [886730ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [886730ms] <- io_uring_enter=0x3 errno=14 cover=892 #0 [886730ms] -> execveat(0xffffffffffffffff, 0x20000000, 0x0, 0x0, 0x0) #0 [886731ms] <- execveat=0xffffffffffffffff errno=9 cover=17381 2021/11/10 22:34:45 result hanged=false: 2021/11/10 22:34:45 added new input for call #5 io_uring_enter to corpus: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, r3+60000000}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0, 0x0) 22:34:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38323637333130333000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000b8c5c4d1b3cf4b38ab2e2967fb770ff3010040000c00000000000000d4f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000004700000000000000", 0x20, 0x560}, {&(0x7f0000010300)="02000000030000000400000015000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d4f4655fd4f4655fd4f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000d4f4655fd4f4655fd4f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2080}, {&(0x7f0000011600)="8081000000601020d4f4655fd4f4655fd4f4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000", 0x60, 0x2300}, {&(0x7f0000011700)="c041000000400000d4f4655fd4f4655fd4f4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2500}, {&(0x7f0000011800)="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"/768, 0x300, 0x2580}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000011d00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000011f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012400)="504d4d00504d4dffd4f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033310075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000012600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000012b00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x40000}, {&(0x7f0000012d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x407e0}, {&(0x7f0000012e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50000}], 0x0, &(0x7f0000012f00)) [886774ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109153 #0 [886793ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x100000, 0x19, 0x20000200, 0x0, 0x20012f00) syz_mount_image: size=1048576 segs=25 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 945.993815] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 945.995841] ext4 filesystem being mounted at /syzkaller-testdir484146452/syzkaller.uf4sQ5/7630/file0 supports timestamps until 2038 (0x7fffffff) #0 [886813ms] <- syz_mount_image$ext4=0x5 errno=0 cover=60138 enabling collider #0 [886814ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x100000, 0x19, 0x20000200, 0x0, 0x20012f00) #0 [886816ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=24800 22:34:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 2021/11/10 22:34:45 result hanged=false: umount(./7630/file0) [886874ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109155 #0 [886891ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x105142, 0x0) #0 [886894ms] <- openat=0x3 errno=14 cover=7848 #0 [886895ms] -> prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0x3) #0 [886895ms] <- prctl$PR_SET_MM_EXE_FILE=0xffffffffffffffff errno=22 cover=130 enabling collider #0 [886895ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x105142, 0x0) #0 [886896ms] <- openat=0x3 errno=14 cover=1195 22:34:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 2021/11/10 22:34:45 result hanged=false: 2021/11/10 22:34:45 #0: triaging type=7 2021/11/10 22:34:45 triaging input for call #1 prctl$PR_SET_MM_EXE_FILE (new signal=3) [886933ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109157 #0 [886961ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x105142, 0x0) #0 [886966ms] <- openat=0x3 errno=14 cover=7409 #0 [886968ms] -> prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0x3) #0 [886968ms] <- prctl$PR_SET_MM_EXE_FILE=0xffffffffffffffff errno=22 cover=130 22:34:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 2021/11/10 22:34:45 result hanged=false: [887007ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109159 #0 [887023ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x105142, 0x0) #0 [887028ms] <- openat=0x3 errno=14 cover=7480 #0 [887030ms] -> prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0x3) #0 [887030ms] <- prctl$PR_SET_MM_EXE_FILE=0xffffffffffffffff errno=22 cover=130 22:34:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 2021/11/10 22:34:45 result hanged=false: [887070ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109161 #0 [887086ms] -> openat(0xffffffffffffff9c, 0x20000140, 0x105142, 0x0) #0 [887090ms] <- openat=0x3 errno=14 cover=7884 #0 [887093ms] -> prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0x3) #0 [887094ms] <- prctl$PR_SET_MM_EXE_FILE=0xffffffffffffffff errno=22 cover=130 2021/11/10 22:34:45 result hanged=false: 2021/11/10 22:34:45 added new input for call #1 prctl$PR_SET_MM_EXE_FILE to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 22:34:45 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000001780)=[{&(0x7f0000000640)="d60aa62df344abda0c27a976af5f410971a4a2e76ec3863d126a90ea302d62a0bf23ff321826774312f963afbf605c09569b92588a4c2d9def033fd0a6ebe3b0551eef0764e1079e0d328ea560bcfff58b8bb0be081c82a08519943ccae70b1c1be910a1bf5cbb9ba10b1f86170fc75c812de12bb54afa8af81ee712da6796bc38f0ff55373b49c5f336eebdb8df8c83d93a55ce42eeaef004f08ee87c0b9722ecc0b992104f3e33044ab00b40b1d79ee4b1f4ff31754ade8a7a45b419c3966f41bc70c1b573df3eb64aad7dc040e7a4a95aadc0e102b98e58abf82cd52128b71b2906c387344777bd46e87fa972ead552f7a9db32fa74a0e755a5bf2dc50229607a4d37620ae589b459c33475a2b95871bfbbb8b1e19ae5ac24c474a501b9fcf3c930247bef3fae6043170f64e419a06cb66a9ebc4edb2b5b688f83453f48415e260027e87d12fc13ae3bc24b52d4f7042fcbb3bc8621cd82812b63358f94927949d856c19fef26a8b80bfc5e7781caae32aa57f891dccb0a4d425a152c8e44e3d6404641cb1fb35e5c59771e1bed48ecab9d5fe73dc261d69d970c24ab565723033a19d818f9c029dca69b020cfb528c39a451fa590882faa20e2b4e1605708b82620448d5cd63af736de8cebc926fba8fee5ef752127680718b187284cfabc6b20e149c64171bfcf5bdd475d1efda258e6e391ed6bf5340bdc21e5cf1459879505d04c52fd6b4a841c815868ec6d7ca8fac74c2c19a65747ac42dce617627fcee6feaa7b671e1f433e81f659fcb1084b4e3c3ac290a13ba85eb9656e2de256d2c73278e154d4cd5d18e84a9061a1ddf1118a565beaf4db3fe2a221223a8ab02ab5dbef768602df52bf7dbc2769906371b31461948dd019038a23b2ac01740eead64c27e70d5eec46dfd02ba7135e5e0752fcb936f690fb79e2c006301cb4367dcb20141efdbcf936442f7c923a1e2e2d3c143355bb87fdabd1871830d28173c9dda64aeb6f4aa8d1929263a1673869e6dae174f4260c5829786474f6579ca60bae42699401706ac6e2e43f8fe08a9e51b8051034a541b0c8add3ae00cf3db9ade207f895d09c39df1c903cf348f29496e508f790f0d612eeef6e2d81cfd07943b5161e8a1ff51af21f7846eb5051f82aaae51ec6144ca8ded60be408d56e63a8a776af7f4a1c85aa305940840b7301c1707a62202b534a17a91bc4aac307a982d487baf4a4763a67633a0c4cc7c196abd630fa0924d0d52baa09ddc7c738dd0683fac3659f63d44a848061f446083f7594b2010599b315654f1424203b2940be09d1848a56b7cbdf360785337f8cf73328f6f8762bc5e51bfc777875db61a2cbb2983e225816037e5ba77e805d8d649e6f4d3f68a81fef7d0733e53c95a565ddeb4efe36ef6be22db0fa4623dae6576fd1acc635ba1eda3437b52ef4f562bac20355969fc0b7ef8b226e046db5f80153f2f1bd891df0466ac1c1819d4a51babab7398644673bdd49cd6c59e6b8cb897829948b3fb187fc23b3a6a093e60ccd291bf4ab5037c41c04bc1d58f30677c74a8c49640b647e2861cc262864ed931807a1bcdd5f8b65e766a90174a1184fb0944a10a3c4ab0bcdd6ba401013bf47908daa70bc6127442413ad9053da88cf741b32becd6416cb1c3303e9ee9fe6aceaf6a80d9355ea57002e5d89a495c2092a5248602d6f7f31f7be715739cfbe2fb7ad1f187d7e890b28a489a8aee2063ed365d0243cbc0261299da21e537ff46c684ada97243cb78466cf5d22daf89af3bcc8ca9475f4c7dad5d4fdb72a52e80164228ff5bbb3f2b3552e53b4476903138ff6d636bb5217be53c1024a9ed6ef39b1defa4ddd2cd3b6c1d8fd3572e8c5b43885ac3c2dbc50cf5555ae4262b1836ec727ca93289cb01c4eef07f326911e746e753e2c2950a1f88cc9e85a1e2830b025a95284df44a7ae5d34f1f9296167722a0d10995dde25ae54c6d4c6934481918365aa589ac3c9b60ddd4f012b7075a7723b62c936c0add022fa1f91993948ec681b91d22e17709c655c8c547dfa12e86e5b711a3dceb9247eb93a1234779d6b8bfee9f354d1d5a9995af88da4018154db8dee0921a25f6e26c2be6770661ad3356760a389cc2fe6bbae2e0402a98833d20cfcebaccdffccf9a5e381431621dbb1b69a4f2eccbc93aa1bdc82ea99efdf448d19887be789d7cf41a5dc3a22cab5df429f146903682b3cbf6870dafc5453c8212c39a6853cc333c91ce272189e2b8223c49a730d2832ed064ff4763d97eacea8d480c8e2ab9a5086a436f81bf3c93661dac4cbfa088173bf27ecc7d420421418ab100ded34ee091f06739673b3123ce13696edb50a02e822332ebd4c101b09bd0a35984c4bb5d9c183ef95018d32c09e301e297e94b9d4df0778949fb10036f45505ed9285990e3172b4c95b8d2af010184e69c924909b27babec34cb75dffd60f9db80fdda38053ab08a1534911d2860e9a6a48f67371d4531231f9258efe78163e0790973c19cf981ca3e946732a8a1a90418724fffb573f9817051f4c3dfa16c7be9dfea4422b631642a8c9978c53a596f6f4e2a28c58fa44ce3061ae1baf66cbc07b6491c8decdcbf0df58cc9ea2b850765e09a39280fbe7eb0d0c4af45cc83a9f3ae80e07eacd6a475e4efc0d5e9e8044bb9600b8a44afb9ffb2f83c01ca88616e3b86c427609c6b3b70dd2211e56883cd1a406c70654895c5c27fba7d92d54533e845f58966495d030aae732d44032c258589aa4e1b4aa80a385ebb7feba696ecb672183bd3925a0c55fd6b98979344a8530d2ddf03a9c1620ddb72800b9661c9f6789676fee4e0354ee3ac3aa3eaa5171b5eb70df54d689170abb5d354f456b1819196d9165fc4b7ad59daa805a4445883cfc88a6241616b6d1b4d", 0x810}], 0x1) [887138ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109163 #0 [887160ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [887161ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3446 #0 [887162ms] -> writev(0x3, 0x20001780, 0x1) #0 [887166ms] <- writev=0x810 errno=14 cover=163650 enabling collider #0 [887169ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [887170ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3520 #0 [887170ms] -> writev(0x3, 0x20001780, 0x1) #0 [887170ms] <- writev=0xffffffffffffffff errno=9 cover=48 22:34:45 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000001780)=[{&(0x7f0000000640)="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", 0x810}], 0x1) 2021/11/10 22:34:45 result hanged=false: 2021/11/10 22:34:45 #0: triaging type=7 2021/11/10 22:34:45 triaging input for call #1 writev (new signal=22) [887207ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109165 #0 [887229ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [887230ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3470 #0 [887232ms] -> writev(0x3, 0x20001780, 0x1) #0 [887241ms] <- writev=0x810 errno=14 cover=159911 22:34:45 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000001780)=[{&(0x7f0000000640)="d60aa62df344abda0c27a976af5f410971a4a2e76ec3863d126a90ea302d62a0bf23ff321826774312f963afbf605c09569b92588a4c2d9def033fd0a6ebe3b0551eef0764e1079e0d328ea560bcfff58b8bb0be081c82a08519943ccae70b1c1be910a1bf5cbb9ba10b1f86170fc75c812de12bb54afa8af81ee712da6796bc38f0ff55373b49c5f336eebdb8df8c83d93a55ce42eeaef004f08ee87c0b9722ecc0b992104f3e33044ab00b40b1d79ee4b1f4ff31754ade8a7a45b419c3966f41bc70c1b573df3eb64aad7dc040e7a4a95aadc0e102b98e58abf82cd52128b71b2906c387344777bd46e87fa972ead552f7a9db32fa74a0e755a5bf2dc50229607a4d37620ae589b459c33475a2b95871bfbbb8b1e19ae5ac24c474a501b9fcf3c930247bef3fae6043170f64e419a06cb66a9ebc4edb2b5b688f83453f48415e260027e87d12fc13ae3bc24b52d4f7042fcbb3bc8621cd82812b63358f94927949d856c19fef26a8b80bfc5e7781caae32aa57f891dccb0a4d425a152c8e44e3d6404641cb1fb35e5c59771e1bed48ecab9d5fe73dc261d69d970c24ab565723033a19d818f9c029dca69b020cfb528c39a451fa590882faa20e2b4e1605708b82620448d5cd63af736de8cebc926fba8fee5ef752127680718b187284cfabc6b20e149c64171bfcf5bdd475d1efda258e6e391ed6bf5340bdc21e5cf1459879505d04c52fd6b4a841c815868ec6d7ca8fac74c2c19a65747ac42dce617627fcee6feaa7b671e1f433e81f659fcb1084b4e3c3ac290a13ba85eb9656e2de256d2c73278e154d4cd5d18e84a9061a1ddf1118a565beaf4db3fe2a221223a8ab02ab5dbef768602df52bf7dbc2769906371b31461948dd019038a23b2ac01740eead64c27e70d5eec46dfd02ba7135e5e0752fcb936f690fb79e2c006301cb4367dcb20141efdbcf936442f7c923a1e2e2d3c143355bb87fdabd1871830d28173c9dda64aeb6f4aa8d1929263a1673869e6dae174f4260c5829786474f6579ca60bae42699401706ac6e2e43f8fe08a9e51b8051034a541b0c8add3ae00cf3db9ade207f895d09c39df1c903cf348f29496e508f790f0d612eeef6e2d81cfd07943b5161e8a1ff51af21f7846eb5051f82aaae51ec6144ca8ded60be408d56e63a8a776af7f4a1c85aa305940840b7301c1707a62202b534a17a91bc4aac307a982d487baf4a4763a67633a0c4cc7c196abd630fa0924d0d52baa09ddc7c738dd0683fac3659f63d44a848061f446083f7594b2010599b315654f1424203b2940be09d1848a56b7cbdf360785337f8cf73328f6f8762bc5e51bfc777875db61a2cbb2983e225816037e5ba77e805d8d649e6f4d3f68a81fef7d0733e53c95a565ddeb4efe36ef6be22db0fa4623dae6576fd1acc635ba1eda3437b52ef4f562bac20355969fc0b7ef8b226e046db5f80153f2f1bd891df0466ac1c1819d4a51babab7398644673bdd49cd6c59e6b8cb897829948b3fb187fc23b3a6a093e60ccd291bf4ab5037c41c04bc1d58f30677c74a8c49640b647e2861cc262864ed931807a1bcdd5f8b65e766a90174a1184fb0944a10a3c4ab0bcdd6ba401013bf47908daa70bc6127442413ad9053da88cf741b32becd6416cb1c3303e9ee9fe6aceaf6a80d9355ea57002e5d89a495c2092a5248602d6f7f31f7be715739cfbe2fb7ad1f187d7e890b28a489a8aee2063ed365d0243cbc0261299da21e537ff46c684ada97243cb78466cf5d22daf89af3bcc8ca9475f4c7dad5d4fdb72a52e80164228ff5bbb3f2b3552e53b4476903138ff6d636bb5217be53c1024a9ed6ef39b1defa4ddd2cd3b6c1d8fd3572e8c5b43885ac3c2dbc50cf5555ae4262b1836ec727ca93289cb01c4eef07f326911e746e753e2c2950a1f88cc9e85a1e2830b025a95284df44a7ae5d34f1f9296167722a0d10995dde25ae54c6d4c6934481918365aa589ac3c9b60ddd4f012b7075a7723b62c936c0add022fa1f91993948ec681b91d22e17709c655c8c547dfa12e86e5b711a3dceb9247eb93a1234779d6b8bfee9f354d1d5a9995af88da4018154db8dee0921a25f6e26c2be6770661ad3356760a389cc2fe6bbae2e0402a98833d20cfcebaccdffccf9a5e381431621dbb1b69a4f2eccbc93aa1bdc82ea99efdf448d19887be789d7cf41a5dc3a22cab5df429f146903682b3cbf6870dafc5453c8212c39a6853cc333c91ce272189e2b8223c49a730d2832ed064ff4763d97eacea8d480c8e2ab9a5086a436f81bf3c93661dac4cbfa088173bf27ecc7d420421418ab100ded34ee091f06739673b3123ce13696edb50a02e822332ebd4c101b09bd0a35984c4bb5d9c183ef95018d32c09e301e297e94b9d4df0778949fb10036f45505ed9285990e3172b4c95b8d2af010184e69c924909b27babec34cb75dffd60f9db80fdda38053ab08a1534911d2860e9a6a48f67371d4531231f9258efe78163e0790973c19cf981ca3e946732a8a1a90418724fffb573f9817051f4c3dfa16c7be9dfea4422b631642a8c9978c53a596f6f4e2a28c58fa44ce3061ae1baf66cbc07b6491c8decdcbf0df58cc9ea2b850765e09a39280fbe7eb0d0c4af45cc83a9f3ae80e07eacd6a475e4efc0d5e9e8044bb9600b8a44afb9ffb2f83c01ca88616e3b86c427609c6b3b70dd2211e56883cd1a406c70654895c5c27fba7d92d54533e845f58966495d030aae732d44032c258589aa4e1b4aa80a385ebb7feba696ecb672183bd3925a0c55fd6b98979344a8530d2ddf03a9c1620ddb72800b9661c9f6789676fee4e0354ee3ac3aa3eaa5171b5eb70df54d689170abb5d354f456b1819196d9165fc4b7ad59daa805a4445883cfc88a6241616b6d1b4d", 0x810}], 0x1) 2021/11/10 22:34:45 result hanged=false: [887284ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109167 #0 [887301ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [887302ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3431 #0 [887303ms] -> writev(0x3, 0x20001780, 0x1) #0 [887307ms] <- writev=0x810 errno=14 cover=159826 22:34:45 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000001780)=[{&(0x7f0000000640)="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", 0x810}], 0x1) 2021/11/10 22:34:45 result hanged=false: [887351ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109169 #0 [887367ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [887368ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3409 #0 [887369ms] -> writev(0x3, 0x20001780, 0x1) #0 [887382ms] <- writev=0x810 errno=14 cover=159883 2021/11/10 22:34:45 result hanged=false: 2021/11/10 22:34:45 added new input for call #1 writev to corpus: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000001780)=[{&(0x7f0000000640)="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", 0x810}], 0x1) 22:34:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000140)="f8ffff1000000a0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5b", 0x9e, 0x4800}], 0x0, &(0x7f00000001c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) [887431ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109171 #0 [887450ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x0, 0x3, 0x20000200, 0x0, 0x200001c0) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 946.656640] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) #0 [887482ms] <- syz_mount_image$vfat=0x5 errno=0 cover=41975 #0 [887483ms] -> chdir(0x20000040) #0 [887483ms] <- chdir=0x0 errno=14 cover=658 #0 [887484ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [887485ms] <- openat=0x3 errno=14 cover=6414 #0 [887485ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [887485ms] <- openat=0x4 errno=14 cover=2714 [ 946.673954] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 946.675301] FAT-fs (loop0): Filesystem has been set read-only #0 [887486ms] -> mkdir(0x20000500, 0x0) #0 [887490ms] <- mkdir=0xffffffffffffffff errno=5 cover=34899 #0 [887493ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) [ 946.681115] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 580) [ 946.686697] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 580) #0 [887502ms] <- copy_file_range=0x1000 errno=14 cover=26472 enabling collider #0 [887504ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x0, 0x3, 0x20000200, 0x0, 0x200001c0) [ 946.704558] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) #0 [887512ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=16 cover=7908 #0 [887517ms] -> chdir(0x20000040) #0 [887519ms] <- chdir=0xffffffffffffffff errno=5 cover=3872 pthread_create failed (errno 11) 22:34:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000140)="f8ffff1000000a0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5b", 0x9e, 0x4800}], 0x0, &(0x7f00000001c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 2021/11/10 22:34:46 result hanged=false: 2021/11/10 22:34:46 #0: triaging type=7 2021/11/10 22:34:46 triaging input for call #5 copy_file_range (new signal=6) umount(./7639/file0) [887606ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109273 #0 [887627ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x0, 0x3, 0x20000200, 0x0, 0x200001c0) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 946.824034] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) #0 [887641ms] <- syz_mount_image$vfat=0x5 errno=0 cover=35059 #0 [887648ms] -> chdir(0x20000040) #0 [887648ms] <- chdir=0x0 errno=14 cover=659 #0 [887648ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [887650ms] <- openat=0x3 errno=14 cover=7225 #0 [887650ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [887651ms] <- openat=0x4 errno=14 cover=2815 #0 [887652ms] -> mkdir(0x20000500, 0x0) [ 946.838976] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 946.840539] FAT-fs (loop0): Filesystem has been set read-only #0 [887655ms] <- mkdir=0xffffffffffffffff errno=5 cover=6058 #0 [887655ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) [ 946.842716] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 580) [ 946.850531] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 580) #0 [887667ms] <- copy_file_range=0x1000 errno=14 cover=16492 22:34:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000140)="f8ffff1000000a0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5b", 0x9e, 0x4800}], 0x0, &(0x7f00000001c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 2021/11/10 22:34:46 result hanged=false: umount(./7640/file0) [887725ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109275 #0 [887742ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x0, 0x3, 0x20000200, 0x0, 0x200001c0) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 946.939780] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) #0 [887769ms] <- syz_mount_image$vfat=0x5 errno=0 cover=32714 #0 [887774ms] -> chdir(0x20000040) #0 [887774ms] <- chdir=0x0 errno=14 cover=658 #0 [887775ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [887776ms] <- openat=0x3 errno=14 cover=2994 #0 [887777ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [887777ms] <- openat=0x4 errno=14 cover=2710 [ 946.964969] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 946.966286] FAT-fs (loop0): Filesystem has been set read-only #0 [887778ms] -> mkdir(0x20000500, 0x0) #0 [887780ms] <- mkdir=0xffffffffffffffff errno=5 cover=8606 [ 946.968892] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 580) #0 [887781ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) [ 946.975966] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 580) #0 [887790ms] <- copy_file_range=0x1000 errno=14 cover=15963 2021/11/10 22:34:46 result hanged=false: 22:34:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000140)="f8ffff1000000a0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5b", 0x9e, 0x4800}], 0x0, &(0x7f00000001c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) umount(./7641/file0) [887854ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109277 #0 [887871ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x0, 0x3, 0x20000200, 0x0, 0x200001c0) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 947.071125] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) #0 [887888ms] <- syz_mount_image$vfat=0x5 errno=0 cover=40673 #0 [887893ms] -> chdir(0x20000040) #0 [887893ms] <- chdir=0x0 errno=14 cover=669 #0 [887898ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [887900ms] <- openat=0x3 errno=14 cover=9156 #0 [887901ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [887901ms] <- openat=0x4 errno=14 cover=2758 #0 [887902ms] -> mkdir(0x20000500, 0x0) [ 947.088952] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 947.090747] FAT-fs (loop0): Filesystem has been set read-only #0 [887905ms] <- mkdir=0xffffffffffffffff errno=5 cover=5237 [ 947.095859] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 580) #0 [887906ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) [ 947.101801] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 580) #0 [887918ms] <- copy_file_range=0x1000 errno=14 cover=16437 2021/11/10 22:34:46 result hanged=false: 2021/11/10 22:34:46 added new input for call #5 copy_file_range to corpus: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000140)="f8ffff1000000a0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5b", 0x9e, 0x4800}], 0x0, &(0x7f00000001c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) umount(./7642/file0) 22:34:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000140)="f8ffff1000000a0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5b", 0x9e, 0x4800}], 0x0, &(0x7f00000001c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 2021/11/10 22:34:46 #0: triaging type=7 2021/11/10 22:34:46 triaging input for call #4 mkdir (new signal=1) [887970ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109279 #0 [887988ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x0, 0x3, 0x20000200, 0x0, 0x200001c0) [ 947.185946] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' #0 [888008ms] <- syz_mount_image$vfat=0x5 errno=0 cover=34349 #0 [888010ms] -> chdir(0x20000040) #0 [888010ms] <- chdir=0x0 errno=14 cover=658 #0 [888020ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [888020ms] <- openat=0x3 errno=14 cover=3018 #0 [888021ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [888022ms] <- openat=0x4 errno=14 cover=2692 [ 947.210200] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 947.211510] FAT-fs (loop0): Filesystem has been set read-only #0 [888023ms] -> mkdir(0x20000500, 0x0) #0 [888027ms] <- mkdir=0xffffffffffffffff errno=5 cover=5323 [ 947.217182] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 580) #0 [888028ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) [ 947.225902] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 580) #0 [888040ms] <- copy_file_range=0x1000 errno=14 cover=16160 22:34:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000140)="f8ffff1000000a0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5b", 0x9e, 0x4800}], 0x0, &(0x7f00000001c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 2021/11/10 22:34:46 result hanged=false: umount(./7643/file0) [888094ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109281 #0 [888114ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x0, 0x3, 0x20000200, 0x0, 0x200001c0) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 947.314033] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) #0 [888134ms] <- syz_mount_image$vfat=0x5 errno=0 cover=30846 #0 [888137ms] -> chdir(0x20000040) #0 [888137ms] <- chdir=0x0 errno=14 cover=659 #0 [888141ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [888142ms] <- openat=0x3 errno=14 cover=3144 #0 [888142ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [888143ms] <- openat=0x4 errno=14 cover=2789 #0 [888145ms] -> mkdir(0x20000500, 0x0) [ 947.333693] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 947.334955] FAT-fs (loop0): Filesystem has been set read-only #0 [888154ms] <- mkdir=0xffffffffffffffff errno=5 cover=14352 #0 [888161ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) [ 947.349187] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 580) [ 947.358728] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 580) #0 [888173ms] <- copy_file_range=0x1000 errno=14 cover=16103 22:34:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000140)="f8ffff1000000a0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5b", 0x9e, 0x4800}], 0x0, &(0x7f00000001c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 2021/11/10 22:34:46 result hanged=false: umount(./7644/file0) [888225ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109283 #0 [888247ms] -> syz_mount_image$vfat(0x20000000, 0x20000100, 0x0, 0x3, 0x20000200, 0x0, 0x200001c0) syz_mount_image: size=0 segs=3 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='' [ 947.457981] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) #0 [888282ms] <- syz_mount_image$vfat=0x5 errno=0 cover=36185 [ 947.474251] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 947.475523] FAT-fs (loop0): Filesystem has been set read-only #0 [888285ms] -> chdir(0x20000040) #0 [888286ms] <- chdir=0x0 errno=14 cover=669 #0 [888286ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [888286ms] <- openat=0x3 errno=14 cover=3050 #0 [888286ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [888287ms] <- openat=0x4 errno=14 cover=2677 #0 [888287ms] -> mkdir(0x20000500, 0x0) [ 947.479410] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 580) #0 [888291ms] <- mkdir=0xffffffffffffffff errno=5 cover=5339 #0 [888292ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [888299ms] <- copy_file_range=0x1000 errno=14 cover=16097 [ 947.484556] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 580) 2021/11/10 22:34:46 result hanged=false: 2021/11/10 22:34:46 added new input for call #4 mkdir to corpus: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000140)="f8ffff1000000a0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5b", 0x9e, 0x4800}], 0x0, &(0x7f00000001c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) umount(./7645/file0) 22:34:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) 2021/11/10 22:34:46 poll: candidates=8 inputs=0 signal=0 [888390ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109285 #0 [888419ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [888420ms] <- socket$inet6_udp=0x3 errno=14 cover=1706 #0 [888420ms] -> setsockopt$inet6_mreq(0x3, 0x29, 0x1c, 0x0, 0x0) #0 [888421ms] <- setsockopt$inet6_mreq=0xffffffffffffffff errno=22 cover=155 enabling collider #0 [888421ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [888422ms] <- socket$inet6_udp=0x3 errno=14 cover=1697 #0 [888422ms] -> setsockopt$inet6_mreq(0x3, 0x29, 0x1c, 22:34:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4bfb, &(0x7f0000000040)) 2021/11/10 22:34:47 result hanged=false: [888467ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109287 #0 [888491ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [888496ms] <- perf_event_open=0x3 errno=14 cover=10895 #0 [888497ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [888497ms] <- syz_open_dev$tty20=0x4 errno=14 cover=3457 #0 [888498ms] -> ioctl$FIONREAD(0x4, 0x4bfb, 0x20000040) #0 [888498ms] <- ioctl$FIONREAD=0x0 errno=14 cover=415 enabling collider #0 [888508ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [888508ms] <- perf_event_open=0x3 errno=14 cover=9468 #0 [888509ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [888509ms] <- syz_open_dev$tty20=0x4 errno=14 cover=3467 pthread_create failed (errno 11) 22:34:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4bfb, &(0x7f0000000040)) 2021/11/10 22:34:47 result hanged=false: 2021/11/10 22:34:47 #0: triaging type=7 2021/11/10 22:34:47 triaging input for call #2 ioctl$FIONREAD (new signal=12) [888592ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109389 #0 [888616ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [888616ms] <- perf_event_open=0x3 errno=14 cover=10203 #0 [888617ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [888618ms] <- syz_open_dev$tty20=0x4 errno=14 cover=3399 #0 [888618ms] -> ioctl$FIONREAD(0x4, 0x4bfb, 0x20000040) #0 [888618ms] <- ioctl$FIONREAD=0x0 errno=14 cover=393 22:34:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4bfb, &(0x7f0000000040)) 2021/11/10 22:34:47 result hanged=false: [888665ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109391 #0 [888686ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [888687ms] <- perf_event_open=0x3 errno=14 cover=10321 #0 [888688ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [888688ms] <- syz_open_dev$tty20=0x4 errno=14 cover=3366 #0 [888688ms] -> ioctl$FIONREAD(0x4, 0x4bfb, 0x20000040) #0 [888689ms] <- ioctl$FIONREAD=0x0 errno=14 cover=393 22:34:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4bfb, &(0x7f0000000040)) 2021/11/10 22:34:47 result hanged=false: [888743ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109393 #0 [888760ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [888761ms] <- perf_event_open=0x3 errno=14 cover=9808 #0 [888768ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [888769ms] <- syz_open_dev$tty20=0x4 errno=14 cover=3500 #0 [888770ms] -> ioctl$FIONREAD(0x4, 0x4bfb, 0x20000040) #0 [888770ms] <- ioctl$FIONREAD=0x0 errno=14 cover=382 2021/11/10 22:34:47 result hanged=false: 2021/11/10 22:34:47 added new input for call #2 ioctl$FIONREAD to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x4bfb, &(0x7f0000000040)) 22:34:47 executing program 0: get_mempolicy(0x0, &(0x7f0000000040), 0x3f, &(0x7f0000ffd000/0x2000)=nil, 0x5) [888817ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109395 #0 [888835ms] -> get_mempolicy(0x0, 0x20000040, 0x3f, 0x20ffd000, 0x5) #0 [888835ms] <- get_mempolicy=0xffffffffffffffff errno=22 cover=39 enabling collider #0 [888836ms] -> get_mempolicy(0x0, 0x20000040, 0x3f, 0x20ffd000, 0x5) #0 [888836ms] <- get_mempolicy=0xffffffffffffffff errno=22 cover=39 22:34:47 executing program 0: get_mempolicy(0x0, &(0x7f0000000040), 0x3f, &(0x7f0000ffd000/0x2000)=nil, 0x5) 2021/11/10 22:34:47 result hanged=false: 2021/11/10 22:34:47 #0: triaging type=7 2021/11/10 22:34:47 triaging input for call #0 get_mempolicy (new signal=1) [888873ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109397 #0 [888891ms] -> get_mempolicy(0x0, 0x20000040, 0x3f, 0x20ffd000, 0x5) #0 [888894ms] <- get_mempolicy=0xffffffffffffffff errno=22 cover=39 22:34:47 executing program 0: get_mempolicy(0x0, &(0x7f0000000040), 0x3f, &(0x7f0000ffd000/0x2000)=nil, 0x5) 2021/11/10 22:34:47 result hanged=false: [888934ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109399 #0 [888954ms] -> get_mempolicy(0x0, 0x20000040, 0x3f, 0x20ffd000, 0x5) #0 [888956ms] <- get_mempolicy=0xffffffffffffffff errno=22 cover=39 22:34:47 executing program 0: get_mempolicy(0x0, &(0x7f0000000040), 0x3f, &(0x7f0000ffd000/0x2000)=nil, 0x5) 2021/11/10 22:34:47 result hanged=false: [888994ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109401 #0 [889011ms] -> get_mempolicy(0x0, 0x20000040, 0x3f, 0x20ffd000, 0x5) #0 [889013ms] <- get_mempolicy=0xffffffffffffffff errno=22 cover=39 2021/11/10 22:34:47 result hanged=false: 2021/11/10 22:34:47 added new input for call #0 get_mempolicy to corpus: get_mempolicy(0x0, &(0x7f0000000040), 0x3f, &(0x7f0000ffd000/0x2000)=nil, 0x5) 22:34:47 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f0000005340)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000c00)=[{&(0x7f00000000c0)="863c53142513ecdb", 0x8}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x32}, @local}}}], 0x20}}], 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000740)=0x2, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [889053ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109403 #0 [889071ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [889073ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1691 #0 [889074ms] -> sendmmsg$inet(0x3, 0x20000180, 0x1, 0x0) #0 [889074ms] <- sendmmsg$inet=0x1 errno=14 cover=1777 #0 [889075ms] -> setsockopt$SO_TIMESTAMP(0x3, 0x1, 0x23, 0x20000740, 0x4) #0 [889076ms] <- setsockopt$SO_TIMESTAMP=0x0 errno=14 cover=287 #0 [889077ms] -> recvfrom(0x3, 0x0, 0x0, 0x0, 0x0, 0x0) enabling collider pthread_create failed (errno 11) 22:34:48 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 2021/11/10 22:34:48 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [890247ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109505 #0 [890271ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [890276ms] <- openat=0x3 errno=14 cover=7492 #0 [890277ms] -> pipe(0x200001c0) #0 [890277ms] <- pipe=0x0 errno=14 cover=1184 #0 [890277ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x200004c0) #0 [890297ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=65102 enabling collider #0 [890299ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [890299ms] <- openat=0x3 errno=14 cover=1121 #0 [890301ms] -> pipe(0x200001c0) #0 [890301ms] <- pipe=0x0 errno=14 cover=1149 pthread_create failed (errno 11) 22:34:48 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 2021/11/10 22:34:48 result hanged=false: 2021/11/10 22:34:48 #0: triaging type=7 2021/11/10 22:34:48 triaging input for call #2 mount$9p_fd (new signal=9) [890371ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109607 #0 [890399ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [890402ms] <- openat=0x3 errno=14 cover=7751 #0 [890403ms] -> pipe(0x200001c0) #0 [890403ms] <- pipe=0x0 errno=14 cover=1147 #0 [890404ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x200004c0) #0 [890422ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=64784 22:34:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 2021/11/10 22:34:49 result hanged=false: [890465ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109609 #0 [890482ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [890486ms] <- openat=0x3 errno=14 cover=7436 #0 [890488ms] -> pipe(0x200001c0) #0 [890488ms] <- pipe=0x0 errno=14 cover=1202 #0 [890489ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x200004c0) #0 [890517ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=64069 22:34:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 2021/11/10 22:34:49 result hanged=false: [890572ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109611 #0 [890598ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [890605ms] <- openat=0x3 errno=14 cover=7314 #0 [890606ms] -> pipe(0x200001c0) #0 [890606ms] <- pipe=0x0 errno=14 cover=1235 #0 [890606ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x200004c0) #0 [890630ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=64126 2021/11/10 22:34:49 result hanged=false: 2021/11/10 22:34:49 added new input for call #2 mount$9p_fd to corpus: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}]}}) 22:34:49 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="15d10a0464c770bda332", 0xa, 0x9}], 0x0, &(0x7f0000000200)) [890700ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109613 #0 [890717ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x1, 0x200001c0, 0x0, 0x20000200) SIGSEGV on (nil), skipping #0 [890724ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=21430 enabling collider #0 [890725ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x1, 0x200001c0, 0x0, 0x20000200) #0 [890727ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=5774 22:34:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00H\x00!\f\x00\x00\x00\x00\x00\x00\x00\x00\n', @ANYRES32], 0x30}}, 0x0) 2021/11/10 22:34:49 result hanged=false: [890777ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109615 [ 949.987254] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [890795ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [890796ms] <- socket$netlink=0x3 errno=14 cover=1428 #0 [890800ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [890802ms] <- sendmsg$nl_generic=0x30 errno=14 cover=3434 enabling collider #0 [890803ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [890803ms] <- socket$netlink=0x3 errno=14 cover=1416 #0 [890803ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [890803ms] <- sendmsg$nl_generic=0xffffffffffffffff errno=9 cover=53 22:34:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00H\x00!\f\x00\x00\x00\x00\x00\x00\x00\x00\n', @ANYRES32], 0x30}}, 0x0) 2021/11/10 22:34:49 result hanged=false: 2021/11/10 22:34:49 #0: triaging type=7 2021/11/10 22:34:49 triaging input for call #1 sendmsg$nl_generic (new signal=9) [890848ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109617 #0 [890894ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [890895ms] <- socket$netlink=0x3 errno=14 cover=1428 [ 950.082875] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [890896ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [890897ms] <- sendmsg$nl_generic=0x30 errno=14 cover=3436 2021/11/10 22:34:49 result hanged=false: 22:34:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00H\x00!\f\x00\x00\x00\x00\x00\x00\x00\x00\n', @ANYRES32], 0x30}}, 0x0) [890940ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109619 #0 [890963ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [890964ms] <- socket$netlink=0x3 errno=14 cover=5227 #0 [890964ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) [ 950.151514] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [890966ms] <- sendmsg$nl_generic=0x30 errno=14 cover=3411 22:34:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00H\x00!\f\x00\x00\x00\x00\x00\x00\x00\x00\n', @ANYRES32], 0x30}}, 0x0) 2021/11/10 22:34:49 result hanged=false: 2021/11/10 22:34:49 poll: candidates=0 inputs=0 signal=0 [891008ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109621 [ 950.211734] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. #0 [891024ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [891024ms] <- socket$netlink=0x3 errno=14 cover=1428 #0 [891025ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [891026ms] <- sendmsg$nl_generic=0x30 errno=14 cover=3409 2021/11/10 22:34:49 result hanged=false: 2021/11/10 22:34:49 added new input for call #1 sendmsg$nl_generic to corpus: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00H\x00!\f\x00\x00\x00\x00\x00\x00\x00\x00\n', @ANYRES32], 0x30}}, 0x0) 22:34:49 executing program 0: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000680)) [891067ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109623 #0 [891081ms] -> syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [891082ms] <- syz_genetlink_get_family_id$nl802154=0xffffffffffffffff errno=14 cover=4353 #0 [891082ms] -> openat$snapshot(0xffffffffffffff9c, 0x20000640, 0x0, 0x0) #0 [891083ms] <- openat$snapshot=0x4 errno=14 cover=8200 #0 [891084ms] -> ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0x4, 0x80083313, 0x20000680) #0 [891085ms] <- ioctl$SNAPSHOT_AVAIL_SWAP_SIZE=0x0 errno=14 cover=4046 enabling collider #0 [891086ms] -> syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [891086ms] <- syz_genetlink_get_family_id$nl802154=0xffffffffffffffff errno=14 cover=2529 #0 [891086ms] -> openat$snapshot(0xffffffffffffff9c, 0x20000640, 0x0, 0x0) #0 [891087ms] <- openat$snapshot=0x4 errno=14 cover=8274 pthread_create failed (errno 11) 2021/11/10 22:34:49 result hanged=false: 22:34:49 executing program 0: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000680)) 2021/11/10 22:34:49 #0: triaging type=7 2021/11/10 22:34:49 triaging input for call #2 ioctl$SNAPSHOT_AVAIL_SWAP_SIZE (new signal=7) [891161ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109725 #0 [891188ms] -> syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [891188ms] <- syz_genetlink_get_family_id$nl802154=0xffffffffffffffff errno=14 cover=4372 #0 [891189ms] -> openat$snapshot(0xffffffffffffff9c, 0x20000640, 0x0, 0x0) #0 [891190ms] <- openat$snapshot=0x4 errno=14 cover=8297 #0 [891191ms] -> ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0x4, 0x80083313, 0x20000680) #0 [891191ms] <- ioctl$SNAPSHOT_AVAIL_SWAP_SIZE=0x0 errno=14 cover=166 22:34:49 executing program 0: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000680)) 2021/11/10 22:34:49 result hanged=false: [891228ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109727 #0 [891250ms] -> syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [891262ms] <- syz_genetlink_get_family_id$nl802154=0xffffffffffffffff errno=14 cover=4504 #0 [891263ms] -> openat$snapshot(0xffffffffffffff9c, 0x20000640, 0x0, 0x0) #0 [891264ms] <- openat$snapshot=0x4 errno=14 cover=8283 #0 [891265ms] -> ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0x4, 0x80083313, 0x20000680) #0 [891265ms] <- ioctl$SNAPSHOT_AVAIL_SWAP_SIZE=0x0 errno=14 cover=166 22:34:49 executing program 0: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000680)) 2021/11/10 22:34:49 result hanged=false: [891302ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109729 #0 [891319ms] -> syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [891320ms] <- syz_genetlink_get_family_id$nl802154=0xffffffffffffffff errno=14 cover=4406 #0 [891321ms] -> openat$snapshot(0xffffffffffffff9c, 0x20000640, 0x0, 0x0) #0 [891323ms] <- openat$snapshot=0x4 errno=14 cover=8296 #0 [891328ms] -> ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0x4, 0x80083313, 0x20000680) #0 [891328ms] <- ioctl$SNAPSHOT_AVAIL_SWAP_SIZE=0x0 errno=14 cover=166 2021/11/10 22:34:49 result hanged=false: 2021/11/10 22:34:49 added new input for call #2 ioctl$SNAPSHOT_AVAIL_SWAP_SIZE to corpus: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000680)) 22:34:49 executing program 0: timer_create(0x5, &(0x7f0000000000), 0x0) timer_gettime(0x0, 0x0) sync() 2021/11/10 22:34:49 poll: candidates=8 inputs=0 signal=0 [891373ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109731 #0 [891391ms] -> timer_create(0x5, 0x20000000, 0x0) #0 [891391ms] <- timer_create=0xffffffffffffffff errno=95 cover=58 #0 [891391ms] -> timer_gettime(0x0, 0x0) #0 [891391ms] <- timer_gettime=0xffffffffffffffff errno=22 cover=45 #0 [891391ms] -> sync() #0 [891438ms] <- sync=0x0 errno=14 cover=12925 enabling collider #0 [891439ms] -> timer_create(0x5, 0x20000000, 0x0) #0 [891439ms] <- timer_create=0xffffffffffffffff errno=95 cover=58 #0 [891439ms] -> timer_gettime(0x0, 0x0) #0 [891439ms] <- timer_gettime=0xffffffffffffffff errno=22 cover=45 pthread_create failed (errno 11) 22:34:50 executing program 0: timer_create(0x5, &(0x7f0000000000), 0x0) timer_gettime(0x0, 0x0) sync() 2021/11/10 22:34:50 result hanged=false: 2021/11/10 22:34:50 #0: triaging type=7 2021/11/10 22:34:50 triaging input for call #2 sync (new signal=3) [891529ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109833 #0 [891591ms] -> timer_create(0x5, 0x20000000, 0x0) #0 [891592ms] <- timer_create=0xffffffffffffffff errno=95 cover=58 #0 [891592ms] -> timer_gettime(0x0, 0x0) #0 [891592ms] <- timer_gettime=0xffffffffffffffff errno=22 cover=45 #0 [891593ms] -> sync() #0 [891597ms] <- sync=0x0 errno=14 cover=4324 22:34:50 executing program 0: timer_create(0x5, &(0x7f0000000000), 0x0) timer_gettime(0x0, 0x0) sync() 2021/11/10 22:34:50 result hanged=false: [891631ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109835 #0 [891648ms] -> timer_create(0x5, 0x20000000, 0x0) #0 [891651ms] <- timer_create=0xffffffffffffffff errno=95 cover=58 #0 [891652ms] -> timer_gettime(0x0, 0x0) #0 [891652ms] <- timer_gettime=0xffffffffffffffff errno=22 cover=45 #0 [891652ms] -> sync() #0 [891657ms] <- sync=0x0 errno=14 cover=4337 2021/11/10 22:34:50 result hanged=false: 22:34:50 executing program 0: timer_create(0x5, &(0x7f0000000000), 0x0) timer_gettime(0x0, 0x0) sync() [891705ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109837 #0 [891779ms] -> timer_create(0x5, 0x20000000, 0x0) #0 [891779ms] <- timer_create=0xffffffffffffffff errno=95 cover=58 #0 [891780ms] -> timer_gettime(0x0, 0x0) #0 [891780ms] <- timer_gettime=0xffffffffffffffff errno=22 cover=45 #0 [891781ms] -> sync() #0 [891832ms] <- sync=0x0 errno=14 cover=5532 2021/11/10 22:34:50 result hanged=false: 2021/11/10 22:34:50 added new input for call #2 sync to corpus: timer_create(0x5, &(0x7f0000000000), 0x0) timer_gettime(0x0, 0x0) sync() 22:34:50 executing program 0: timer_create(0x9, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000480)={0x0}) timer_settime(0x0, 0x1, &(0x7f00000004c0)={{r0, r1+60000000}, {r2}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) [891886ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109839 #0 [891901ms] -> timer_create(0x9, 0x20000200, 0x20000240) #0 [891901ms] <- timer_create=0x0 errno=14 cover=318 #0 [891902ms] -> clock_gettime(0x0, 0x20000380) #0 [891902ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [891902ms] -> clock_gettime(0x0, 0x20000480) #0 [891902ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [891902ms] -> timer_settime(0x0, 0x1, 0x200004c0, 0x0) #0 [891902ms] <- timer_settime=0x0 errno=14 cover=153 #0 [891902ms] -> timer_settime(0x0, 0x0, 0x20000080, 0x200000c0) #0 [891903ms] <- timer_settime=0x0 errno=14 cover=2175 enabling collider #0 [891905ms] -> timer_create(0x9, 0x20000200, 0x20000240) #0 [891905ms] <- timer_create=0x0 errno=14 cover=318 #0 [891907ms] -> clock_gettime(0x0, 0x20000380) #0 [891907ms] <- clock_gettime=0x0 errno=14 cover=75 pthread_create failed (errno 11) 22:34:50 executing program 0: timer_create(0x9, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000480)={0x0}) timer_settime(0x0, 0x1, &(0x7f00000004c0)={{r0, r1+60000000}, {r2}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) 2021/11/10 22:34:50 result hanged=false: 2021/11/10 22:34:50 #0: triaging type=7 2021/11/10 22:34:50 triaging input for call #4 timer_settime (new signal=1) [892010ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109941 #0 [892075ms] -> timer_create(0x9, 0x20000200, 0x20000240) #0 [892075ms] <- timer_create=0x0 errno=14 cover=329 #0 [892075ms] -> clock_gettime(0x0, 0x20000380) #0 [892075ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [892076ms] -> clock_gettime(0x0, 0x20000480) #0 [892076ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [892076ms] -> timer_settime(0x0, 0x1, 0x200004c0, 0x0) #0 [892076ms] <- timer_settime=0x0 errno=14 cover=153 #0 [892076ms] -> timer_settime(0x0, 0x0, 0x20000080, 0x200000c0) #0 [892076ms] <- timer_settime=0x0 errno=14 cover=235 22:34:50 executing program 0: timer_create(0x9, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000480)={0x0}) timer_settime(0x0, 0x1, &(0x7f00000004c0)={{r0, r1+60000000}, {r2}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) 2021/11/10 22:34:50 result hanged=false: [892115ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109943 #0 [892141ms] -> timer_create(0x9, 0x20000200, 0x20000240) #0 [892141ms] <- timer_create=0x0 errno=14 cover=343 #0 [892142ms] -> clock_gettime(0x0, 0x20000380) #0 [892142ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [892143ms] -> clock_gettime(0x0, 0x20000480) #0 [892143ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [892144ms] -> timer_settime(0x0, 0x1, 0x200004c0, 0x0) #0 [892144ms] <- timer_settime=0x0 errno=14 cover=153 #0 [892144ms] -> timer_settime(0x0, 0x0, 0x20000080, 0x200000c0) #0 [892144ms] <- timer_settime=0x0 errno=14 cover=235 2021/11/10 22:34:50 result hanged=false: 22:34:50 executing program 0: timer_create(0x9, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000480)={0x0}) timer_settime(0x0, 0x1, &(0x7f00000004c0)={{r0, r1+60000000}, {r2}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) [892181ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109945 #0 [892199ms] -> timer_create(0x9, 0x20000200, 0x20000240) #0 [892200ms] <- timer_create=0x0 errno=14 cover=318 #0 [892203ms] -> clock_gettime(0x0, 0x20000380) #0 [892203ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [892204ms] -> clock_gettime(0x0, 0x20000480) #0 [892204ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [892205ms] -> timer_settime(0x0, 0x1, 0x200004c0, 0x0) #0 [892205ms] <- timer_settime=0x0 errno=14 cover=153 #0 [892206ms] -> timer_settime(0x0, 0x0, 0x20000080, 0x200000c0) #0 [892207ms] <- timer_settime=0x0 errno=14 cover=235 2021/11/10 22:34:50 result hanged=false: 2021/11/10 22:34:50 added new input for call #4 timer_settime to corpus: timer_create(0x9, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000480)={0x0}) timer_settime(0x0, 0x1, &(0x7f00000004c0)={{r0, r1+60000000}, {r2}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) 22:34:50 executing program 0: timer_create(0x9, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000480)={0x0}) timer_settime(0x0, 0x1, &(0x7f00000004c0)={{r0, r1+60000000}, {r2}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) 2021/11/10 22:34:50 #0: triaging type=7 2021/11/10 22:34:50 triaging input for call #3 timer_settime (new signal=1) [892244ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109947 #0 [892264ms] -> timer_create(0x9, 0x20000200, 0x20000240) #0 [892264ms] <- timer_create=0x0 errno=14 cover=318 #0 [892265ms] -> clock_gettime(0x0, 0x20000380) #0 [892265ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [892265ms] -> clock_gettime(0x0, 0x20000480) #0 [892266ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [892266ms] -> timer_settime(0x0, 0x1, 0x200004c0, 0x0) #0 [892266ms] <- timer_settime=0x0 errno=14 cover=153 #0 [892266ms] -> timer_settime(0x0, 0x0, 0x20000080, 0x200000c0) #0 [892266ms] <- timer_settime=0x0 errno=14 cover=235 2021/11/10 22:34:50 result hanged=false: 22:34:50 executing program 0: timer_create(0x9, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000480)={0x0}) timer_settime(0x0, 0x1, &(0x7f00000004c0)={{r0, r1+60000000}, {r2}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) [892304ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109949 #0 [892323ms] -> timer_create(0x9, 0x20000200, 0x20000240) #0 [892323ms] <- timer_create=0x0 errno=14 cover=340 #0 [892323ms] -> clock_gettime(0x0, 0x20000380) #0 [892324ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [892324ms] -> clock_gettime(0x0, 0x20000480) #0 [892324ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [892324ms] -> timer_settime(0x0, 0x1, 0x200004c0, 0x0) #0 [892324ms] <- timer_settime=0x0 errno=14 cover=153 #0 [892324ms] -> timer_settime(0x0, 0x0, 0x20000080, 0x200000c0) #0 [892325ms] <- timer_settime=0x0 errno=14 cover=235 22:34:50 executing program 0: timer_create(0x9, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000480)={0x0}) timer_settime(0x0, 0x1, &(0x7f00000004c0)={{r0, r1+60000000}, {r2}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) 2021/11/10 22:34:50 result hanged=false: [892365ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109951 #0 [892387ms] -> timer_create(0x9, 0x20000200, 0x20000240) #0 [892387ms] <- timer_create=0x0 errno=14 cover=329 #0 [892388ms] -> clock_gettime(0x0, 0x20000380) #0 [892388ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [892388ms] -> clock_gettime(0x0, 0x20000480) #0 [892388ms] <- clock_gettime=0x0 errno=14 cover=75 #0 [892389ms] -> timer_settime(0x0, 0x1, 0x200004c0, 0x0) #0 [892389ms] <- timer_settime=0xffffffffffffffff errno=22 cover=79 #0 [892389ms] -> timer_settime(0x0, 0x0, 0x20000080, 0x200000c0) #0 [892389ms] <- timer_settime=0x0 errno=14 cover=221 2021/11/10 22:34:50 result hanged=false: 2021/11/10 22:34:50 added new input for call #3 timer_settime to corpus: timer_create(0x9, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000480)={0x0}) timer_settime(0x0, 0x1, &(0x7f00000004c0)={{r0, r1+60000000}, {r2}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) 22:34:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(r0, &(0x7f0000000700)=""/4096, 0xe34e, 0xcd08, 0x0, 0x6b4) [892431ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 109953 #0 [892456ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [892456ms] <- socket$inet6_tcp=0x3 errno=14 cover=1759 #0 [892457ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [892457ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=306 #0 [892457ms] -> connect$inet6(0x3, 0x20000000, 0x1c) pthread_create failed (errno 11) 22:34:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_setup(0x8001, &(0x7f00000190c0)=0x0) io_submit(r1, 0x3, &(0x7f0000019380)=[&(0x7f0000019140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000019100)='a', 0x1}, 0x0, 0x0]) mount(0x0, 0x0, 0x0, 0x0, 0x0) 2021/11/10 22:34:52 result hanged=false: iptable filter/10: resetting iptable mangle/10: resetting [893527ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110055 #0 [893550ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [893552ms] <- openat=0x3 errno=14 cover=7401 #0 [893553ms] -> io_setup(0x8001, 0x200190c0) #0 [893559ms] <- io_setup=0x0 errno=14 cover=144706 #0 [893560ms] -> io_submit(0x7fe15d196000, 0x3, 0x20019380) #0 [893566ms] <- io_submit=0x1 errno=14 cover=66042 #0 [893567ms] -> mount(0x0, 0x0, 0x0, 0x0, 0x0) #0 [893567ms] <- mount=0xffffffffffffffff errno=14 cover=602 enabling collider #0 [893567ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [893568ms] <- openat=0x3 errno=14 cover=1149 #0 [893569ms] -> io_setup(0x8001, 0x200190c0) #0 [893569ms] <- io_setup=0xffffffffffffffff errno=22 cover=40 pthread_create failed (errno 11) 2021/11/10 22:34:52 result hanged=false: 22:34:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='sessionid\x00') pread64(r0, 0x0, 0x0, 0x80000) [893648ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110157 #0 [893673ms] -> syz_open_procfs(0x0, 0x20000180) #0 [893674ms] <- syz_open_procfs=0x3 errno=14 cover=2568 #0 [893675ms] -> pread64(0x3, 0x0, 0x0, 0x80000) #0 [893675ms] <- pread64=0x0 errno=14 cover=199 enabling collider #0 [893675ms] -> syz_open_procfs(0x0, 0x20000180) #0 [893676ms] <- syz_open_procfs=0x3 errno=14 cover=2028 2021/11/10 22:34:52 result hanged=false: 22:34:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='sessionid\x00') pread64(r0, 0x0, 0x0, 0x80000) 2021/11/10 22:34:52 #0: triaging type=7 2021/11/10 22:34:52 triaging input for call #1 pread64 (new signal=4) [893715ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110159 #0 [893734ms] -> syz_open_procfs(0x0, 0x20000180) #0 [893735ms] <- syz_open_procfs=0x3 errno=14 cover=2565 #0 [893736ms] -> pread64(0x3, 0x0, 0x0, 0x80000) #0 [893736ms] <- pread64=0x0 errno=14 cover=199 22:34:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='sessionid\x00') pread64(r0, 0x0, 0x0, 0x80000) 2021/11/10 22:34:52 result hanged=false: [893773ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110161 #0 [893792ms] -> syz_open_procfs(0x0, 0x20000180) #0 [893794ms] <- syz_open_procfs=0x3 errno=14 cover=2579 #0 [893795ms] -> pread64(0x3, 0x0, 0x0, 0x80000) #0 [893795ms] <- pread64=0x0 errno=14 cover=199 2021/11/10 22:34:52 result hanged=false: 22:34:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='sessionid\x00') pread64(r0, 0x0, 0x0, 0x80000) [893835ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110163 #0 [893851ms] -> syz_open_procfs(0x0, 0x20000180) #0 [893853ms] <- syz_open_procfs=0x3 errno=14 cover=2590 #0 [893854ms] -> pread64(0x3, 0x0, 0x0, 0x80000) #0 [893855ms] <- pread64=0x0 errno=14 cover=199 2021/11/10 22:34:52 result hanged=false: 2021/11/10 22:34:52 added new input for call #1 pread64 to corpus: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='sessionid\x00') pread64(r0, 0x0, 0x0, 0x80000) 22:34:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) pipe2$9p(&(0x7f0000000080), 0x1000) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000240), 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000002c0)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_buf(r0, 0x6, 0x19, &(0x7f0000000300)="3aade4aeaa", 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @local, @mcast2, 0x0, 0x10, 0x8}}) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair(0x15, 0x6, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000700)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, 0x0) [893898ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110165 #0 [893919ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [893919ms] <- socket$inet_tcp=0x3 errno=14 cover=1721 #0 [893920ms] -> getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) #0 [893920ms] <- getsockopt$bt_l2cap_L2CAP_LM=0xffffffffffffffff errno=9 cover=49 #0 [893920ms] -> pipe2$9p(0x20000080, 0x1000) #0 [893920ms] <- pipe2$9p=0xffffffffffffffff errno=22 cover=35 #0 [893921ms] -> mount$bind(0x0, 0x20000180, 0x0, 0x0, 0x0) #0 [893921ms] <- mount$bind=0xffffffffffffffff errno=2 cover=911 #0 [893921ms] -> pipe(0x20000200) #0 [893922ms] <- pipe=0x0 errno=14 cover=5674 #0 [893927ms] -> setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x20000240, 0x0) #0 [893927ms] <- setsockopt$inet_tcp_buf=0xffffffffffffffff errno=9 cover=50 #0 [893929ms] -> ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x200002c0) #0 [893929ms] <- ioctl$PERF_EVENT_IOC_QUERY_BPF=0xffffffffffffffff errno=9 cover=45 #0 [893929ms] -> setsockopt$inet_tcp_buf(0x3, 0x6, 0x19, 0x20000300, 0x5) #0 [893929ms] <- setsockopt$inet_tcp_buf=0x0 errno=14 cover=157 #0 [893929ms] -> ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x20000540) #0 [893929ms] <- ioctl$sock_ipv6_tunnel_SIOCGET6RD=0xffffffffffffffff errno=9 cover=45 #0 [893929ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [893930ms] <- socket$inet6_udplite=0x6 errno=14 cover=1735 #0 [893930ms] -> socketpair(0x15, 0x6, 0x0, 0x20000640) #0 [893947ms] <- socketpair=0xffffffffffffffff errno=97 cover=19666 #0 [893948ms] -> creat(0x20000700, 0x0) #0 [893950ms] <- creat=0x7 errno=14 cover=7046 #0 [893951ms] -> ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) #0 [893951ms] <- ioctl$sock_ipv6_tunnel_SIOCCHG6RD=0xffffffffffffffff errno=9 cover=45 #0 [893951ms] -> ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) #0 [893951ms] <- ioctl$sock_ipv6_tunnel_SIOCADD6RD=0xffffffffffffffff errno=9 cover=45 enabling collider #0 [893952ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [893952ms] <- socket$inet_tcp=0x3 errno=14 cover=1786 #0 [893952ms] -> getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) #0 [893952ms] <- getsockopt$bt_l2cap_L2CAP_LM=0xffffffffffffffff errno=9 cover=49 pthread_create failed (errno 11) 22:34:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) pipe2$9p(&(0x7f0000000080), 0x1000) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000240), 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000002c0)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_buf(r0, 0x6, 0x19, &(0x7f0000000300)="3aade4aeaa", 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @local, @mcast2, 0x0, 0x10, 0x8}}) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair(0x15, 0x6, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000700)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, 0x0) 2021/11/10 22:34:52 result hanged=false: 2021/11/10 22:34:52 #0: triaging type=7 2021/11/10 22:34:52 triaging input for call #7 setsockopt$inet_tcp_buf (new signal=7) [894028ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110267 #0 [894046ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [894046ms] <- socket$inet_tcp=0x3 errno=14 cover=1776 #0 [894050ms] -> getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) #0 [894050ms] <- getsockopt$bt_l2cap_L2CAP_LM=0xffffffffffffffff errno=9 cover=49 #0 [894052ms] -> pipe2$9p(0x20000080, 0x1000) #0 [894052ms] <- pipe2$9p=0xffffffffffffffff errno=22 cover=35 #0 [894053ms] -> mount$bind(0x0, 0x20000180, 0x0, 0x0, 0x0) #0 [894053ms] <- mount$bind=0xffffffffffffffff errno=2 cover=997 #0 [894056ms] -> pipe(0x20000200) #0 [894057ms] <- pipe=0x0 errno=14 cover=1246 #0 [894058ms] -> setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x20000240, 0x0) #0 [894058ms] <- setsockopt$inet_tcp_buf=0xffffffffffffffff errno=9 cover=50 #0 [894058ms] -> ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x200002c0) #0 [894058ms] <- ioctl$PERF_EVENT_IOC_QUERY_BPF=0xffffffffffffffff errno=9 cover=45 #0 [894060ms] -> setsockopt$inet_tcp_buf(0x3, 0x6, 0x19, 0x20000300, 0x5) #0 [894060ms] <- setsockopt$inet_tcp_buf=0x0 errno=14 cover=157 #0 [894061ms] -> ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x20000540) #0 [894061ms] <- ioctl$sock_ipv6_tunnel_SIOCGET6RD=0xffffffffffffffff errno=9 cover=45 #0 [894061ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [894062ms] <- socket$inet6_udplite=0x6 errno=14 cover=1670 #0 [894062ms] -> socketpair(0x15, 0x6, 0x0, 0x20000640) #0 [894079ms] <- socketpair=0xffffffffffffffff errno=97 cover=1616 #0 [894079ms] -> creat(0x20000700, 0x0) #0 [894082ms] <- creat=0x7 errno=14 cover=6969 #0 [894083ms] -> ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) #0 [894083ms] <- ioctl$sock_ipv6_tunnel_SIOCCHG6RD=0xffffffffffffffff errno=9 cover=45 #0 [894083ms] -> ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) #0 [894083ms] <- ioctl$sock_ipv6_tunnel_SIOCADD6RD=0xffffffffffffffff errno=9 cover=45 22:34:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) pipe2$9p(&(0x7f0000000080), 0x1000) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000240), 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000002c0)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_buf(r0, 0x6, 0x19, &(0x7f0000000300)="3aade4aeaa", 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @local, @mcast2, 0x0, 0x10, 0x8}}) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair(0x15, 0x6, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000700)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, 0x0) 2021/11/10 22:34:52 result hanged=false: [894123ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110269 #0 [894142ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [894142ms] <- socket$inet_tcp=0x3 errno=14 cover=1787 #0 [894143ms] -> getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) #0 [894143ms] <- getsockopt$bt_l2cap_L2CAP_LM=0xffffffffffffffff errno=9 cover=49 #0 [894143ms] -> pipe2$9p(0x20000080, 0x1000) #0 [894143ms] <- pipe2$9p=0xffffffffffffffff errno=22 cover=35 #0 [894144ms] -> mount$bind(0x0, 0x20000180, 0x0, 0x0, 0x0) #0 [894144ms] <- mount$bind=0xffffffffffffffff errno=2 cover=998 #0 [894145ms] -> pipe(0x20000200) #0 [894145ms] <- pipe=0x0 errno=14 cover=1235 #0 [894145ms] -> setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x20000240, 0x0) #0 [894145ms] <- setsockopt$inet_tcp_buf=0xffffffffffffffff errno=9 cover=50 #0 [894146ms] -> ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x200002c0) #0 [894146ms] <- ioctl$PERF_EVENT_IOC_QUERY_BPF=0xffffffffffffffff errno=9 cover=45 #0 [894146ms] -> setsockopt$inet_tcp_buf(0x3, 0x6, 0x19, 0x20000300, 0x5) #0 [894146ms] <- setsockopt$inet_tcp_buf=0x0 errno=14 cover=157 #0 [894147ms] -> ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x20000540) #0 [894147ms] <- ioctl$sock_ipv6_tunnel_SIOCGET6RD=0xffffffffffffffff errno=9 cover=45 #0 [894148ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [894148ms] <- socket$inet6_udplite=0x6 errno=14 cover=1710 #0 [894153ms] -> socketpair(0x15, 0x6, 0x0, 0x20000640) #0 [894171ms] <- socketpair=0xffffffffffffffff errno=97 cover=1789 #0 [894172ms] -> creat(0x20000700, 0x0) #0 [894174ms] <- creat=0x7 errno=14 cover=7041 #0 [894176ms] -> ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) #0 [894176ms] <- ioctl$sock_ipv6_tunnel_SIOCCHG6RD=0xffffffffffffffff errno=9 cover=45 #0 [894176ms] -> ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) #0 [894176ms] <- ioctl$sock_ipv6_tunnel_SIOCADD6RD=0xffffffffffffffff errno=9 cover=45 22:34:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) pipe2$9p(&(0x7f0000000080), 0x1000) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000240), 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000002c0)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_buf(r0, 0x6, 0x19, &(0x7f0000000300)="3aade4aeaa", 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @local, @mcast2, 0x0, 0x10, 0x8}}) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair(0x15, 0x6, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000700)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, 0x0) 2021/11/10 22:34:52 result hanged=false: [894219ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110271 #0 [894238ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [894238ms] <- socket$inet_tcp=0x3 errno=14 cover=1735 #0 [894239ms] -> getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) #0 [894240ms] <- getsockopt$bt_l2cap_L2CAP_LM=0xffffffffffffffff errno=9 cover=49 #0 [894240ms] -> pipe2$9p(0x20000080, 0x1000) #0 [894240ms] <- pipe2$9p=0xffffffffffffffff errno=22 cover=35 #0 [894240ms] -> mount$bind(0x0, 0x20000180, 0x0, 0x0, 0x0) #0 [894241ms] <- mount$bind=0xffffffffffffffff errno=2 cover=943 #0 [894242ms] -> pipe(0x20000200) #0 [894242ms] <- pipe=0x0 errno=14 cover=1148 #0 [894242ms] -> setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x20000240, 0x0) #0 [894243ms] <- setsockopt$inet_tcp_buf=0xffffffffffffffff errno=9 cover=50 #0 [894243ms] -> ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x200002c0) #0 [894243ms] <- ioctl$PERF_EVENT_IOC_QUERY_BPF=0xffffffffffffffff errno=9 cover=45 #0 [894243ms] -> setsockopt$inet_tcp_buf(0x3, 0x6, 0x19, 0x20000300, 0x5) #0 [894243ms] <- setsockopt$inet_tcp_buf=0x0 errno=14 cover=157 #0 [894243ms] -> ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x20000540) #0 [894243ms] <- ioctl$sock_ipv6_tunnel_SIOCGET6RD=0xffffffffffffffff errno=9 cover=45 #0 [894243ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [894244ms] <- socket$inet6_udplite=0x6 errno=14 cover=1626 #0 [894245ms] -> socketpair(0x15, 0x6, 0x0, 0x20000640) #0 [894262ms] <- socketpair=0xffffffffffffffff errno=97 cover=1637 #0 [894262ms] -> creat(0x20000700, 0x0) #0 [894266ms] <- creat=0x7 errno=14 cover=6963 #0 [894268ms] -> ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) #0 [894268ms] <- ioctl$sock_ipv6_tunnel_SIOCCHG6RD=0xffffffffffffffff errno=9 cover=45 #0 [894268ms] -> ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) #0 [894268ms] <- ioctl$sock_ipv6_tunnel_SIOCADD6RD=0xffffffffffffffff errno=9 cover=45 2021/11/10 22:34:52 result hanged=false: 2021/11/10 22:34:52 added new input for call #7 setsockopt$inet_tcp_buf to corpus: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) pipe2$9p(&(0x7f0000000080), 0x1000) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000240), 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000002c0)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_buf(r0, 0x6, 0x19, &(0x7f0000000300)="3aade4aeaa", 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @local, @mcast2, 0x0, 0x10, 0x8}}) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair(0x15, 0x6, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000700)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, 0x0) 22:34:52 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) [894315ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110273 #0 [894335ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [894342ms] <- perf_event_open=0x3 errno=14 cover=14466 #0 [894343ms] -> kexec_load(0x0, 0x0, 0x0, 0x0) #0 [894343ms] <- kexec_load=0x0 errno=14 cover=157 enabling collider #0 [894352ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [894353ms] <- perf_event_open=0x3 errno=14 cover=12691 #0 [894353ms] -> kexec_load(0x0, 0x0, 0x0, 0x0) #0 [894353ms] <- kexec_load=0x0 errno=14 cover=128 22:34:52 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 2021/11/10 22:34:52 result hanged=false: 2021/11/10 22:34:52 #0: triaging type=7 2021/11/10 22:34:52 triaging input for call #1 kexec_load (new signal=1) [894399ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110275 #0 [894419ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [894420ms] <- perf_event_open=0x3 errno=14 cover=13707 #0 [894421ms] -> kexec_load(0x0, 0x0, 0x0, 0x0) #0 [894421ms] <- kexec_load=0x0 errno=14 cover=157 22:34:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 2021/11/10 22:34:53 result hanged=false: [894476ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110277 #0 [894502ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [894503ms] <- perf_event_open=0x3 errno=14 cover=12239 #0 [894509ms] -> kexec_load(0x0, 0x0, 0x0, 0x0) #0 [894509ms] <- kexec_load=0x0 errno=14 cover=171 22:34:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 2021/11/10 22:34:53 result hanged=false: [894557ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110279 #0 [894581ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [894583ms] <- perf_event_open=0x3 errno=14 cover=12298 #0 [894587ms] -> kexec_load(0x0, 0x0, 0x0, 0x0) #0 [894587ms] <- kexec_load=0x0 errno=14 cover=157 2021/11/10 22:34:53 result hanged=false: 2021/11/10 22:34:53 added new input for call #1 kexec_load to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 22:34:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 2021/11/10 22:34:53 #0: triaging type=7 2021/11/10 22:34:53 triaging input for call #0 perf_event_open (new signal=2) [894637ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110281 #0 [894654ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [894656ms] <- perf_event_open=0x3 errno=14 cover=12318 #0 [894661ms] -> kexec_load(0x0, 0x0, 0x0, 0x0) #0 [894661ms] <- kexec_load=0x0 errno=14 cover=157 22:34:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 2021/11/10 22:34:53 result hanged=false: [894707ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110283 #0 [894725ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [894726ms] <- perf_event_open=0x3 errno=14 cover=12427 #0 [894728ms] -> kexec_load(0x0, 0x0, 0x0, 0x0) #0 [894728ms] <- kexec_load=0x0 errno=14 cover=157 2021/11/10 22:34:53 result hanged=false: 22:34:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) [894776ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110285 #0 [894796ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [894798ms] <- perf_event_open=0x3 errno=14 cover=12447 #0 [894800ms] -> kexec_load(0x0, 0x0, 0x0, 0x0) #0 [894801ms] <- kexec_load=0x0 errno=14 cover=157 2021/11/10 22:34:53 result hanged=false: 2021/11/10 22:34:53 added new input for call #0 perf_event_open to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 22:34:53 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [894858ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110287 #0 [894881ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [894883ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6325 #0 [894884ms] -> syz_genetlink_get_family_id$nl802154(0x200006c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [894884ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=7903 #0 [894885ms] -> sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x20000900, 0x0) #0 [894885ms] <- sendmsg$BATADV_CMD_GET_ROUTING_ALGOS=0xffffffffffffffff errno=9 cover=52 #0 [894885ms] -> sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0) #0 [894885ms] <- sendmsg$NL802154_CMD_GET_SEC_DEVKEY=0xffffffffffffffff errno=9 cover=52 #0 [894885ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [894886ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5428 enabling collider #0 [894887ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [894887ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5380 #0 [894888ms] -> syz_genetlink_get_family_id$nl802154(0x200006c0, 0xffffffffffffffff) syz_genetlink_get_family_id(nl802154, -1) #0 [894889ms] <- syz_genetlink_get_family_id$nl802154=0x19 errno=14 cover=7466 pthread_create failed (errno 11) 2021/11/10 22:34:53 result hanged=false: 22:34:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x17, &(0x7f0000000040), 0x4) 2021/11/10 22:34:53 poll: candidates=8 inputs=0 signal=0 [894963ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110389 #0 [894979ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [894980ms] <- perf_event_open=0x3 errno=14 cover=12280 #0 [894981ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [894981ms] <- socket$inet_tcp=0x4 errno=14 cover=5263 #0 [894981ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x4, 0x6, 0x17, 0x20000040, 0x4) #0 [894982ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=5022 enabling collider #0 [894996ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [894996ms] <- perf_event_open=0x3 errno=14 cover=12273 #0 [894997ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [894997ms] <- socket$inet_tcp=0x4 errno=14 cover=5366 pthread_create failed (errno 11) 2021/11/10 22:34:53 result hanged=false: 22:34:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x17, &(0x7f0000000040), 0x4) 2021/11/10 22:34:53 #0: triaging type=7 2021/11/10 22:34:53 triaging input for call #2 setsockopt$inet_tcp_TCP_REPAIR (new signal=6) [895087ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110491 #0 [895104ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [895105ms] <- perf_event_open=0x3 errno=14 cover=11812 #0 [895106ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [895106ms] <- socket$inet_tcp=0x4 errno=14 cover=1724 #0 [895107ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x4, 0x6, 0x17, 0x20000040, 0x4) #0 [895107ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=150 22:34:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x17, &(0x7f0000000040), 0x4) 2021/11/10 22:34:53 result hanged=false: [895158ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110493 #0 [895184ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [895185ms] <- perf_event_open=0x3 errno=14 cover=12192 #0 [895186ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [895186ms] <- socket$inet_tcp=0x4 errno=14 cover=5204 #0 [895186ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x4, 0x6, 0x17, 0x20000040, 0x4) #0 [895187ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=324 2021/11/10 22:34:53 result hanged=false: 22:34:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x17, &(0x7f0000000040), 0x4) [895236ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110495 #0 [895257ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [895258ms] <- perf_event_open=0x3 errno=14 cover=12813 #0 [895259ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [895260ms] <- socket$inet_tcp=0x4 errno=14 cover=5672 #0 [895261ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x4, 0x6, 0x17, 0x20000040, 0x4) #0 [895261ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=328 2021/11/10 22:34:53 result hanged=false: 2021/11/10 22:34:53 added new input for call #2 setsockopt$inet_tcp_TCP_REPAIR to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x17, &(0x7f0000000040), 0x4) 22:34:53 executing program 0: clone3(&(0x7f0000000500)={0x40000000, 0x0, 0x0, 0x0, {0x17}, &(0x7f00000000c0)=""/232, 0xe8, 0x0, 0x0}, 0x58) [895322ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110497 #0 [895340ms] -> clone3(0x20000500, 0x58) #0 [895382ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 enabling collider #0 [895390ms] -> clone3(0x20000500, 0x58) #0 [895426ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 2021/11/10 22:34:54 result hanged=false: 2021/11/10 22:34:54 #0: triaging type=7 22:34:54 executing program 0: clone3(&(0x7f0000000500)={0x40000000, 0x0, 0x0, 0x0, {0x17}, &(0x7f00000000c0)=""/232, 0xe8, 0x0, 0x0}, 0x58) 2021/11/10 22:34:54 triaging input for call #0 clone3 (new signal=4) [895472ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110501 #0 [895490ms] -> clone3(0x20000500, 0x58) #0 [895535ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 22:34:54 executing program 0: clone3(&(0x7f0000000500)={0x40000000, 0x0, 0x0, 0x0, {0x17}, &(0x7f00000000c0)=""/232, 0xe8, 0x0, 0x0}, 0x58) 2021/11/10 22:34:54 result hanged=false: [895585ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110504 #0 [895604ms] -> clone3(0x20000500, 0x58) #0 [895634ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 22:34:54 executing program 0: clone3(&(0x7f0000000500)={0x40000000, 0x0, 0x0, 0x0, {0x17}, &(0x7f00000000c0)=""/232, 0xe8, 0x0, 0x0}, 0x58) 2021/11/10 22:34:54 result hanged=false: [895691ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110507 #0 [895716ms] -> clone3(0x20000500, 0x58) #0 [895763ms] <- clone3=0xffffffffffffffff errno=11 cover=262143 2021/11/10 22:34:54 result hanged=false: 2021/11/10 22:34:54 added new input for call #0 clone3 to corpus: clone3(&(0x7f0000000500)={0x40000000, 0x0, 0x0, 0x0, {0x17}, &(0x7f00000000c0)=""/232, 0xe8, 0x0, 0x0}, 0x58) 22:34:54 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0xd4, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000000c0)) [895826ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110510 #0 [895848ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [895848ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1735 #0 [895849ms] -> setsockopt$SO_TIMESTAMP(0x3, 0x1, 0x40, 0x20000040, 0x4) #0 [895849ms] <- setsockopt$SO_TIMESTAMP=0x0 errno=14 cover=246 #0 [895849ms] -> getsockopt$SO_TIMESTAMP(0x3, 0x1, 0x23, 0x0, 0x200000c0) #0 [895850ms] <- getsockopt$SO_TIMESTAMP=0x0 errno=14 cover=109 enabling collider #0 [895851ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [895851ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1690 #0 [895854ms] -> setsockopt$SO_TIMESTAMP(0x3, 0x1, 0x40, 0x20000040, 0x4) #0 [895855ms] <- setsockopt$SO_TIMESTAMP=0x0 errno=14 cover=276 pthread_create failed (errno 11) 22:34:54 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0xd4, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000000c0)) 2021/11/10 22:34:54 result hanged=false: 2021/11/10 22:34:54 #0: triaging type=7 2021/11/10 22:34:54 triaging input for call #2 getsockopt$SO_TIMESTAMP (new signal=3) [895935ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110612 #0 [895961ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [895962ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1713 #0 [895963ms] -> setsockopt$SO_TIMESTAMP(0x3, 0x1, 0x40, 0x20000040, 0x4) #0 [895964ms] <- setsockopt$SO_TIMESTAMP=0x0 errno=14 cover=287 #0 [895964ms] -> getsockopt$SO_TIMESTAMP(0x3, 0x1, 0x23, 0x0, 0x200000c0) #0 [895964ms] <- getsockopt$SO_TIMESTAMP=0x0 errno=14 cover=123 22:34:54 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0xd4, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000000c0)) 2021/11/10 22:34:54 result hanged=false: [895999ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110614 #0 [896017ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [896018ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1790 #0 [896019ms] -> setsockopt$SO_TIMESTAMP(0x3, 0x1, 0x40, 0x20000040, 0x4) #0 [896020ms] <- setsockopt$SO_TIMESTAMP=0x0 errno=14 cover=276 #0 [896021ms] -> getsockopt$SO_TIMESTAMP(0x3, 0x1, 0x23, 0x0, 0x200000c0) #0 [896021ms] <- getsockopt$SO_TIMESTAMP=0x0 errno=14 cover=109 2021/11/10 22:34:54 result hanged=false: 22:34:54 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0xd4, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000000c0)) [896065ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110616 #0 [896084ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [896085ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1699 #0 [896086ms] -> setsockopt$SO_TIMESTAMP(0x3, 0x1, 0x40, 0x20000040, 0x4) #0 [896086ms] <- setsockopt$SO_TIMESTAMP=0x0 errno=14 cover=276 #0 [896086ms] -> getsockopt$SO_TIMESTAMP(0x3, 0x1, 0x23, 0x0, 0x200000c0) #0 [896087ms] <- getsockopt$SO_TIMESTAMP=0x0 errno=14 cover=109 2021/11/10 22:34:54 result hanged=false: 2021/11/10 22:34:54 added new input for call #2 getsockopt$SO_TIMESTAMP to corpus: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0xd4, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000000c0)) 22:34:54 executing program 0: msgsnd(0x0, &(0x7f0000000000), 0x8, 0x800) msgget(0x3, 0x0) msgsnd(0x0, &(0x7f0000001040)={0x2}, 0x8, 0x0) msgget(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000003400)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) msgget(0x1, 0x200) [896129ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110618 #0 [896153ms] -> msgsnd(0x0, 0x20000000, 0x8, 0x800) #0 [896153ms] <- msgsnd=0xffffffffffffffff errno=22 cover=44 #0 [896153ms] -> msgget(0x798e2636, 0x0) #0 [896153ms] <- msgget=0xffffffffffffffff errno=2 cover=66 #0 [896153ms] -> msgsnd(0x0, 0x20001040, 0x8, 0x0) #0 [896154ms] <- msgsnd=0xffffffffffffffff errno=22 cover=489 #0 [896155ms] -> msgget(0x798e2633, 0x0) #0 [896155ms] <- msgget=0x7 errno=14 cover=109 #0 [896155ms] -> msgctl$MSG_INFO(0x0, 0xc, 0x0) #0 [896155ms] <- msgctl$MSG_INFO=0xffffffffffffffff errno=14 cover=435 #0 [896155ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [896156ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6357 #0 [896156ms] -> sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x20003400, 0x40010) #0 [896156ms] <- sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT=0xffffffffffffffff errno=9 cover=52 #0 [896156ms] -> msgget(0x798e2634, 0x200) #0 [896157ms] <- msgget=0xe errno=14 cover=424 enabling collider #0 [896157ms] -> msgsnd(0x0, 0x20000000, 0x8, 0x800) #0 [896157ms] <- msgsnd=0xffffffffffffffff errno=22 cover=44 #0 [896158ms] -> msgget(0x798e2636, 0x0) #0 [896158ms] <- msgget=0xffffffffffffffff errno=2 cover=66 pthread_create failed (errno 11) 2021/11/10 22:34:54 result hanged=false: 2021/11/10 22:34:54 #0: triaging type=7 22:34:54 executing program 0: msgsnd(0x0, &(0x7f0000000000), 0x8, 0x800) msgget(0x3, 0x0) msgsnd(0x0, &(0x7f0000001040)={0x2}, 0x8, 0x0) msgget(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000003400)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) msgget(0x1, 0x200) 2021/11/10 22:34:54 triaging input for call #5 syz_init_net_socket$nl_generic (new signal=2) [896229ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110720 #0 [896247ms] -> msgsnd(0x0, 0x20000000, 0x8, 0x800) #0 [896247ms] <- msgsnd=0xffffffffffffffff errno=22 cover=44 #0 [896247ms] -> msgget(0x798e2636, 0x0) #0 [896247ms] <- msgget=0xffffffffffffffff errno=2 cover=66 #0 [896247ms] -> msgsnd(0x0, 0x20001040, 0x8, 0x0) #0 [896248ms] <- msgsnd=0xffffffffffffffff errno=22 cover=475 #0 [896248ms] -> msgget(0x798e2633, 0x0) #0 [896248ms] <- msgget=0x7 errno=14 cover=109 #0 [896248ms] -> msgctl$MSG_INFO(0x0, 0xc, 0x0) #0 [896248ms] <- msgctl$MSG_INFO=0xffffffffffffffff errno=14 cover=435 #0 [896248ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [896251ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6446 #0 [896257ms] -> sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x20003400, 0x40010) #0 [896257ms] <- sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT=0xffffffffffffffff errno=9 cover=52 #0 [896257ms] -> msgget(0x798e2634, 0x200) #0 [896257ms] <- msgget=0xe errno=14 cover=109 22:34:54 executing program 0: msgsnd(0x0, &(0x7f0000000000), 0x8, 0x800) msgget(0x3, 0x0) msgsnd(0x0, &(0x7f0000001040)={0x2}, 0x8, 0x0) msgget(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000003400)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) msgget(0x1, 0x200) 2021/11/10 22:34:54 result hanged=false: [896291ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110722 #0 [896308ms] -> msgsnd(0x0, 0x20000000, 0x8, 0x800) #0 [896308ms] <- msgsnd=0xffffffffffffffff errno=22 cover=44 #0 [896308ms] -> msgget(0x798e2636, 0x0) #0 [896308ms] <- msgget=0xffffffffffffffff errno=2 cover=66 #0 [896309ms] -> msgsnd(0x0, 0x20001040, 0x8, 0x0) #0 [896309ms] <- msgsnd=0xffffffffffffffff errno=22 cover=486 #0 [896309ms] -> msgget(0x798e2633, 0x0) #0 [896309ms] <- msgget=0x7 errno=14 cover=109 #0 [896309ms] -> msgctl$MSG_INFO(0x0, 0xc, 0x0) #0 [896309ms] <- msgctl$MSG_INFO=0xffffffffffffffff errno=14 cover=435 #0 [896309ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [896310ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6332 #0 [896311ms] -> sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x20003400, 0x40010) #0 [896311ms] <- sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT=0xffffffffffffffff errno=9 cover=52 #0 [896311ms] -> msgget(0x798e2634, 0x200) #0 [896311ms] <- msgget=0xe errno=14 cover=109 22:34:54 executing program 0: msgsnd(0x0, &(0x7f0000000000), 0x8, 0x800) msgget(0x3, 0x0) msgsnd(0x0, &(0x7f0000001040)={0x2}, 0x8, 0x0) msgget(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000003400)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) msgget(0x1, 0x200) 2021/11/10 22:34:54 result hanged=false: [896351ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110724 #0 [896371ms] -> msgsnd(0x0, 0x20000000, 0x8, 0x800) #0 [896371ms] <- msgsnd=0xffffffffffffffff errno=22 cover=44 #0 [896372ms] -> msgget(0x798e2636, 0x0) #0 [896373ms] <- msgget=0xffffffffffffffff errno=2 cover=66 #0 [896374ms] -> msgsnd(0x0, 0x20001040, 0x8, 0x0) #0 [896374ms] <- msgsnd=0xffffffffffffffff errno=22 cover=573 #0 [896375ms] -> msgget(0x798e2633, 0x0) #0 [896375ms] <- msgget=0x7 errno=14 cover=109 #0 [896376ms] -> msgctl$MSG_INFO(0x0, 0xc, 0x0) #0 [896376ms] <- msgctl$MSG_INFO=0xffffffffffffffff errno=14 cover=435 #0 [896377ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [896378ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6484 #0 [896380ms] -> sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x20003400, 0x40010) #0 [896380ms] <- sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT=0xffffffffffffffff errno=9 cover=52 #0 [896380ms] -> msgget(0x798e2634, 0x200) #0 [896381ms] <- msgget=0xe errno=14 cover=109 2021/11/10 22:34:54 result hanged=false: 2021/11/10 22:34:54 added new input for call #5 syz_init_net_socket$nl_generic to corpus: msgsnd(0x0, &(0x7f0000000000), 0x8, 0x800) msgget(0x3, 0x0) msgsnd(0x0, &(0x7f0000001040)={0x2}, 0x8, 0x0) msgget(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000003400)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) msgget(0x1, 0x200) 22:34:55 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x40, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) [896425ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110726 #0 [896442ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [896445ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13727 #0 [896446ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #0 [896449ms] <- mount=0x0 errno=14 cover=12139 #0 [896451ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x40, 0x0) #0 [896452ms] <- openat$dir=0x3 errno=14 cover=22167 #0 [896454ms] -> preadv2(0x3, 0x20000000, 0x1, 0x0, 0x0, 0x0) #0 [896454ms] <- preadv2=0x0 errno=14 cover=2552 enabling collider #0 [896455ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [896456ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1338 #0 [896456ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #0 [896459ms] <- mount=0x0 errno=14 cover=12323 pthread_create failed (errno 11) 22:34:55 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x40, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 2021/11/10 22:34:55 result hanged=false: 2021/11/10 22:34:55 #0: triaging type=7 2021/11/10 22:34:55 triaging input for call #3 preadv2 (new signal=11) umount(./7714/file0) umount(./7714/file0) [896552ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110828 #0 [896570ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [896577ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12911 #0 [896582ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #0 [896585ms] <- mount=0x0 errno=14 cover=12263 #0 [896586ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x40, 0x0) #0 [896587ms] <- openat$dir=0x3 errno=14 cover=4019 #0 [896588ms] -> preadv2(0x3, 0x20000000, 0x1, 0x0, 0x0, 0x0) #0 [896588ms] <- preadv2=0x0 errno=14 cover=608 22:34:55 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x40, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 2021/11/10 22:34:55 result hanged=false: umount(./7715/file0) [896632ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110830 #0 [896657ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [896663ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13396 #0 [896664ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #0 [896666ms] <- mount=0x0 errno=14 cover=11964 #0 [896667ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x40, 0x0) #0 [896667ms] <- openat$dir=0x3 errno=14 cover=1988 #0 [896667ms] -> preadv2(0x3, 0x20000000, 0x1, 0x0, 0x0, 0x0) #0 [896667ms] <- preadv2=0x0 errno=14 cover=484 22:34:55 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x40, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 2021/11/10 22:34:55 result hanged=false: umount(./7716/file0) [896709ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110832 #0 [896730ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [896733ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12934 #0 [896740ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #0 [896742ms] <- mount=0x0 errno=14 cover=12095 #0 [896743ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x40, 0x0) #0 [896743ms] <- openat$dir=0x3 errno=14 cover=2023 #0 [896744ms] -> preadv2(0x3, 0x20000000, 0x1, 0x0, 0x0, 0x0) #0 [896744ms] <- preadv2=0x0 errno=14 cover=484 2021/11/10 22:34:55 result hanged=false: 2021/11/10 22:34:55 added new input for call #3 preadv2 to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x40, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) umount(./7717/file0) 2021/11/10 22:34:55 #0: triaging type=7 2021/11/10 22:34:55 triaging input for call #2 openat$dir (new signal=1) 22:34:55 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x40, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) [896791ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110834 #0 [896809ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [896815ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13658 #0 [896819ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #0 [896829ms] <- mount=0x0 errno=14 cover=12184 #0 [896829ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x40, 0x0) #0 [896830ms] <- openat$dir=0x3 errno=14 cover=2086 #0 [896831ms] -> preadv2(0x3, 0x20000000, 0x1, 0x0, 0x0, 0x0) #0 [896832ms] <- preadv2=0x0 errno=14 cover=554 22:34:55 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x40, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 2021/11/10 22:34:55 result hanged=false: umount(./7718/file0) [896881ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110836 #0 [896907ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [896912ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13245 #0 [896913ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #0 [896918ms] <- mount=0x0 errno=14 cover=12115 #0 [896919ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x40, 0x0) #0 [896919ms] <- openat$dir=0x3 errno=14 cover=2032 #0 [896920ms] -> preadv2(0x3, 0x20000000, 0x1, 0x0, 0x0, 0x0) #0 [896920ms] <- preadv2=0x0 errno=14 cover=554 umount(./7719/file0) 2021/11/10 22:34:55 result hanged=false: 22:34:55 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x40, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) [896966ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110838 #0 [896987ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [896990ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12945 #0 [896991ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #0 [896994ms] <- mount=0x0 errno=14 cover=12204 #0 [897001ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x40, 0x0) #0 [897001ms] <- openat$dir=0x3 errno=14 cover=2109 #0 [897002ms] -> preadv2(0x3, 0x20000000, 0x1, 0x0, 0x0, 0x0) #0 [897002ms] <- preadv2=0x0 errno=14 cover=554 umount(./7720/file0) 2021/11/10 22:34:55 result hanged=false: 2021/11/10 22:34:55 added new input for call #2 openat$dir to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x40, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 22:34:55 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x40, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 2021/11/10 22:34:55 #0: triaging type=7 2021/11/10 22:34:55 triaging input for call #0 syz_mount_image$ext4 (new signal=1) [897044ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110840 #0 [897059ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [897065ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12914 #0 [897067ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #0 [897069ms] <- mount=0x0 errno=14 cover=12128 #0 [897070ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x40, 0x0) #0 [897070ms] <- openat$dir=0x3 errno=14 cover=2065 #0 [897071ms] -> preadv2(0x3, 0x20000000, 0x1, 0x0, 0x0, 0x0) #0 [897071ms] <- preadv2=0x0 errno=14 cover=608 22:34:55 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x40, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 2021/11/10 22:34:55 result hanged=false: umount(./7721/file0) [897121ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110842 #0 [897141ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [897145ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13007 #0 [897147ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #0 [897150ms] <- mount=0x0 errno=14 cover=12055 #0 [897155ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x40, 0x0) #0 [897155ms] <- openat$dir=0x3 errno=14 cover=1980 #0 [897156ms] -> preadv2(0x3, 0x20000000, 0x1, 0x0, 0x0, 0x0) #0 [897156ms] <- preadv2=0x0 errno=14 cover=484 22:34:55 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x40, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) umount(./7722/file0) 2021/11/10 22:34:55 result hanged=false: [897197ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110844 #0 [897214ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [897222ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13060 #0 [897224ms] -> mount(0x0, 0x200004c0, 0x20000500, 0x0, 0x0) #0 [897226ms] <- mount=0x0 errno=14 cover=11941 #0 [897227ms] -> openat$dir(0xffffffffffffff9c, 0x200000c0, 0x40, 0x0) #0 [897228ms] <- openat$dir=0x3 errno=14 cover=1979 #0 [897228ms] -> preadv2(0x3, 0x20000000, 0x1, 0x0, 0x0, 0x0) #0 [897228ms] <- preadv2=0x0 errno=14 cover=484 2021/11/10 22:34:55 result hanged=false: 2021/11/10 22:34:55 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x40, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) umount(./7723/file0) 22:34:55 executing program 0: syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) [897317ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110846 #0 [897340ms] -> syz_genetlink_get_family_id$tipc(0x20000540, 0xffffffffffffffff) syz_genetlink_get_family_id(TIPC, -1) netlink: failed to get family id for TIPC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [897356ms] <- syz_genetlink_get_family_id$tipc=0xffffffffffffffff errno=2 cover=14509 enabling collider #0 [897357ms] -> syz_genetlink_get_family_id$tipc(0x20000540, 0xffffffffffffffff) syz_genetlink_get_family_id(TIPC, -1) netlink: failed to get family id for TIPC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [897372ms] <- syz_genetlink_get_family_id$tipc=0xffffffffffffffff errno=2 cover=8195 2021/11/10 22:34:55 result hanged=false: 2021/11/10 22:34:55 #0: triaging type=7 2021/11/10 22:34:55 triaging input for call #0 syz_genetlink_get_family_id$tipc (new signal=2) 22:34:55 executing program 0: syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) [897410ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110848 #0 [897429ms] -> syz_genetlink_get_family_id$tipc(0x20000540, 0xffffffffffffffff) syz_genetlink_get_family_id(TIPC, -1) netlink: failed to get family id for TIPC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [897448ms] <- syz_genetlink_get_family_id$tipc=0xffffffffffffffff errno=2 cover=10877 22:34:56 executing program 0: syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) 2021/11/10 22:34:56 result hanged=false: [897541ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110850 #0 [897632ms] -> syz_genetlink_get_family_id$tipc(0x20000540, 0xffffffffffffffff) syz_genetlink_get_family_id(TIPC, -1) netlink: failed to get family id for TIPC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [897644ms] <- syz_genetlink_get_family_id$tipc=0xffffffffffffffff errno=2 cover=11108 22:34:56 executing program 0: syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) 2021/11/10 22:34:56 result hanged=false: [897680ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110852 #0 [897698ms] -> syz_genetlink_get_family_id$tipc(0x20000540, 0xffffffffffffffff) syz_genetlink_get_family_id(TIPC, -1) netlink: failed to get family id for TIPC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [897710ms] <- syz_genetlink_get_family_id$tipc=0xffffffffffffffff errno=2 cover=10886 2021/11/10 22:34:56 result hanged=false: 2021/11/10 22:34:56 added new input for call #0 syz_genetlink_get_family_id$tipc to corpus: syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) 22:34:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) [897793ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110854 #0 [897812ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [897812ms] <- socket$inet_tcp=0x3 errno=14 cover=1754 #0 [897813ms] -> socket$packet(0x11, 0x3, 0x300) #0 [897815ms] <- socket$packet=0x4 errno=14 cover=2021 #0 [897817ms] -> setsockopt$packet_fanout(0x4, 0x107, 0x12, 0x200000c0, 0x4) #0 [897817ms] <- setsockopt$packet_fanout=0x0 errno=14 cover=246 #0 [897818ms] -> setsockopt$packet_fanout_data(0x4, 0x107, 0x16, 0x20000080, 0x10) #0 [897865ms] <- setsockopt$packet_fanout_data=0x0 errno=14 cover=262143 #0 [897869ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [897869ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [897871ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [897871ms] <- connect$inet=0x0 errno=14 cover=1120 #0 [897872ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000040, 0x4) #0 [897873ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=1335 enabling collider #0 [897883ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [897884ms] <- socket$inet_tcp=0x3 errno=14 cover=1775 #0 [897884ms] -> socket$packet(0x11, 0x3, 0x300) #0 [897887ms] <- socket$packet=0x4 errno=14 cover=1765 pthread_create failed (errno 11) 2021/11/10 22:34:56 result hanged=false: 22:34:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 2021/11/10 22:34:56 #0: triaging type=7 2021/11/10 22:34:56 triaging input for call #3 setsockopt$packet_fanout_data (new signal=9) iptable filter/2: resetting iptable mangle/2: resetting [897963ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110956 #0 [897985ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [897986ms] <- socket$inet_tcp=0x3 errno=14 cover=1765 #0 [897987ms] -> socket$packet(0x11, 0x3, 0x300) #0 [897987ms] <- socket$packet=0x4 errno=14 cover=1818 #0 [897988ms] -> setsockopt$packet_fanout(0x4, 0x107, 0x12, 0x200000c0, 0x4) #0 [897988ms] <- setsockopt$packet_fanout=0x0 errno=14 cover=246 #0 [897990ms] -> setsockopt$packet_fanout_data(0x4, 0x107, 0x16, 0x20000080, 0x10) #0 [897990ms] <- setsockopt$packet_fanout_data=0x0 errno=14 cover=3422 #0 [897991ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [897991ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [897992ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [897993ms] <- connect$inet=0x0 errno=14 cover=1109 #0 [897994ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000040, 0x4) #0 [897994ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=1296 22:34:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 2021/11/10 22:34:56 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [898047ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110958 #0 [898064ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [898064ms] <- socket$inet_tcp=0x3 errno=14 cover=1735 #0 [898065ms] -> socket$packet(0x11, 0x3, 0x300) #0 [898065ms] <- socket$packet=0x4 errno=14 cover=1733 #0 [898065ms] -> setsockopt$packet_fanout(0x4, 0x107, 0x12, 0x200000c0, 0x4) #0 [898066ms] <- setsockopt$packet_fanout=0x0 errno=14 cover=235 #0 [898066ms] -> setsockopt$packet_fanout_data(0x4, 0x107, 0x16, 0x20000080, 0x10) #0 [898066ms] <- setsockopt$packet_fanout_data=0x0 errno=14 cover=3461 #0 [898066ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [898067ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [898067ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [898067ms] <- connect$inet=0x0 errno=14 cover=1120 #0 [898067ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000040, 0x4) #0 [898067ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=1332 22:34:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 2021/11/10 22:34:56 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [898119ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110960 #0 [898143ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [898144ms] <- socket$inet_tcp=0x3 errno=14 cover=1721 #0 [898145ms] -> socket$packet(0x11, 0x3, 0x300) #0 [898145ms] <- socket$packet=0x4 errno=14 cover=1730 #0 [898146ms] -> setsockopt$packet_fanout(0x4, 0x107, 0x12, 0x200000c0, 0x4) #0 [898146ms] <- setsockopt$packet_fanout=0x0 errno=14 cover=224 #0 [898148ms] -> setsockopt$packet_fanout_data(0x4, 0x107, 0x16, 0x20000080, 0x10) #0 [898149ms] <- setsockopt$packet_fanout_data=0x0 errno=14 cover=3533 #0 [898149ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [898149ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [898149ms] -> connect$inet(0x3, 0x20000000, 0x10) #0 [898150ms] <- connect$inet=0x0 errno=14 cover=1109 #0 [898150ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000040, 0x4) #0 [898150ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=1296 2021/11/10 22:34:56 result hanged=false: 2021/11/10 22:34:56 added new input for call #3 setsockopt$packet_fanout_data to corpus: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 22:34:56 executing program 0: prctl$PR_SET_CHILD_SUBREAPER(0x34, 0x1) iptable filter/2: resetting iptable mangle/2: resetting [898209ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110962 #0 [898225ms] -> prctl$PR_SET_CHILD_SUBREAPER(0x34, 0x1) #0 [898225ms] <- prctl$PR_SET_CHILD_SUBREAPER=0x3 errno=22 cover=51 enabling collider #0 [898225ms] -> prctl$PR_SET_CHILD_SUBREAPER(0x34, 0x1) #0 [898225ms] <- prctl$PR_SET_CHILD_SUBREAPER=0x3 errno=22 cover=51 22:34:56 executing program 0: prctl$PR_SET_CHILD_SUBREAPER(0x34, 0x1) 2021/11/10 22:34:56 result hanged=false: 2021/11/10 22:34:56 #0: triaging type=7 2021/11/10 22:34:56 triaging input for call #0 prctl$PR_SET_CHILD_SUBREAPER (new signal=6) [898269ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110964 #0 [898288ms] -> prctl$PR_SET_CHILD_SUBREAPER(0x34, 0x1) #0 [898290ms] <- prctl$PR_SET_CHILD_SUBREAPER=0x3 errno=22 cover=51 22:34:56 executing program 0: prctl$PR_SET_CHILD_SUBREAPER(0x34, 0x1) 2021/11/10 22:34:56 result hanged=false: [898325ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110966 #0 [898339ms] -> prctl$PR_SET_CHILD_SUBREAPER(0x34, 0x1) #0 [898339ms] <- prctl$PR_SET_CHILD_SUBREAPER=0x3 errno=22 cover=51 22:34:56 executing program 0: prctl$PR_SET_CHILD_SUBREAPER(0x34, 0x1) 2021/11/10 22:34:56 result hanged=false: [898381ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110968 #0 [898397ms] -> prctl$PR_SET_CHILD_SUBREAPER(0x34, 0x1) #0 [898397ms] <- prctl$PR_SET_CHILD_SUBREAPER=0x3 errno=22 cover=51 2021/11/10 22:34:56 result hanged=false: 2021/11/10 22:34:56 added new input for call #0 prctl$PR_SET_CHILD_SUBREAPER to corpus: prctl$PR_SET_CHILD_SUBREAPER(0x34, 0x1) 22:34:56 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80000161, 0x0) 2021/11/10 22:34:56 poll: candidates=8 inputs=0 signal=0 [898435ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110970 #0 [898452ms] -> recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80000161, 0x0) #0 [898452ms] <- recvmmsg=0xffffffffffffffff errno=22 cover=34 enabling collider #0 [898452ms] -> recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80000161, 0x0) #0 [898452ms] <- recvmmsg=0xffffffffffffffff errno=22 cover=34 22:34:57 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80000161, 0x0) 2021/11/10 22:34:57 result hanged=false: 2021/11/10 22:34:57 #0: triaging type=7 2021/11/10 22:34:57 triaging input for call #0 recvmmsg (new signal=1) [898490ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110972 #0 [898509ms] -> recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80000161, 0x0) #0 [898509ms] <- recvmmsg=0xffffffffffffffff errno=22 cover=34 22:34:57 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80000161, 0x0) 2021/11/10 22:34:57 result hanged=false: [898545ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110974 #0 [898561ms] -> recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80000161, 0x0) #0 [898561ms] <- recvmmsg=0xffffffffffffffff errno=22 cover=34 2021/11/10 22:34:57 result hanged=false: 22:34:57 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80000161, 0x0) [898605ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110976 #0 [898626ms] -> recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80000161, 0x0) #0 [898626ms] <- recvmmsg=0xffffffffffffffff errno=22 cover=34 2021/11/10 22:34:57 result hanged=false: 2021/11/10 22:34:57 added new input for call #0 recvmmsg to corpus: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80000161, 0x0) 22:34:57 executing program 0: syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@multicast, @random="ab14645b02dd", @val={@void, {0x8100, 0x0, 0x1}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @empty}, {0x0, 0x0, 0x0, @dev}}}}}, 0x0) [898667ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110978 #0 [898684ms] -> syz_emit_ethernet(0x2e, 0x200000c0, 0x0) bb bb bb bb bb bb ab 14 64 5b 02 dd 81 00 08 00 08 00 45 00 00 1c 00 00 00 00 00 02 da de e0 00 00 02 00 00 00 00 00 00 3f eb ac 14 14 00 #0 [898685ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=13742 enabling collider #0 [898686ms] -> syz_emit_ethernet(0x2e, 0x200000c0, 0x0) bb bb bb bb bb bb ab 14 64 5b 02 dd 81 00 08 00 08 00 45 00 00 1c 00 00 00 00 00 02 da de e0 00 00 02 00 00 00 00 00 00 3f eb ac 14 14 00 #0 [898686ms] <- syz_emit_ethernet=0xffffffffffffffff errno=5 cover=13574 22:34:57 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) 2021/11/10 22:34:57 result hanged=false: [898724ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110980 #0 [898741ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [898747ms] <- perf_event_open=0x3 errno=14 cover=12011 #0 [898748ms] -> ioctl$PERF_EVENT_IOC_PERIOD(0x3, 0x40082404, 0x0) #0 [898748ms] <- ioctl$PERF_EVENT_IOC_PERIOD=0xffffffffffffffff errno=14 cover=501 enabling collider #0 [898763ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [898764ms] <- perf_event_open=0x3 errno=14 cover=11644 #0 [898764ms] -> ioctl$PERF_EVENT_IOC_PERIOD(0x3, 0x40082404, 0x0) #0 [898764ms] <- ioctl$PERF_EVENT_IOC_PERIOD=0xffffffffffffffff errno=9 cover=46 22:34:57 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) 2021/11/10 22:34:57 result hanged=false: 2021/11/10 22:34:57 #0: triaging type=7 2021/11/10 22:34:57 triaging input for call #1 ioctl$PERF_EVENT_IOC_PERIOD (new signal=1) [898808ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110982 #0 [898829ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [898830ms] <- perf_event_open=0x3 errno=14 cover=10391 #0 [898832ms] -> ioctl$PERF_EVENT_IOC_PERIOD(0x3, 0x40082404, 0x0) #0 [898832ms] <- ioctl$PERF_EVENT_IOC_PERIOD=0xffffffffffffffff errno=14 cover=501 22:34:57 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) 2021/11/10 22:34:57 result hanged=false: [898879ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110984 #0 [898902ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [898903ms] <- perf_event_open=0x3 errno=14 cover=10452 #0 [898908ms] -> ioctl$PERF_EVENT_IOC_PERIOD(0x3, 0x40082404, 0x0) #0 [898908ms] <- ioctl$PERF_EVENT_IOC_PERIOD=0xffffffffffffffff errno=14 cover=501 22:34:57 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) 2021/11/10 22:34:57 result hanged=false: [898949ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110986 #0 [898975ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [898975ms] <- perf_event_open=0x3 errno=14 cover=11162 #0 [898977ms] -> ioctl$PERF_EVENT_IOC_PERIOD(0x3, 0x40082404, 0x0) #0 [898977ms] <- ioctl$PERF_EVENT_IOC_PERIOD=0xffffffffffffffff errno=14 cover=501 2021/11/10 22:34:57 result hanged=false: 2021/11/10 22:34:57 added new input for call #1 ioctl$PERF_EVENT_IOC_PERIOD to corpus: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) 22:34:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) stat(&(0x7f0000000040)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioctl$SG_IO(r0, 0x2284, 0x0) [899023ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 110988 #0 [899040ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [899041ms] <- syz_open_dev$sg=0x3 errno=14 cover=1380 #0 [899042ms] -> stat(0x20000040, 0x20001c00) #0 [899042ms] <- stat=0x0 errno=14 cover=859 #0 [899042ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [899042ms] <- setresuid=0x0 errno=14 cover=451 #0 [899048ms] -> ioctl$SG_IO(0x3, 0x2284, 0x0) #0 [899048ms] <- ioctl$SG_IO=0xffffffffffffffff errno=13 cover=135 enabling collider #0 [899049ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [899049ms] <- syz_open_dev$sg=0xffffffffffffffff errno=13 cover=1161 #0 [899050ms] -> stat(0x20000040, 0x20001c00) #0 [899050ms] <- stat=0x0 errno=14 cover=564 pthread_create failed (errno 11) 22:34:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) stat(&(0x7f0000000040)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioctl$SG_IO(r0, 0x2284, 0x0) 2021/11/10 22:34:57 result hanged=false: 2021/11/10 22:34:57 #0: triaging type=7 2021/11/10 22:34:57 triaging input for call #3 ioctl$SG_IO (new signal=1) [899122ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111090 #0 [899140ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [899140ms] <- syz_open_dev$sg=0x3 errno=14 cover=1412 #0 [899142ms] -> stat(0x20000040, 0x20001c00) #0 [899142ms] <- stat=0x0 errno=14 cover=869 #0 [899145ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [899146ms] <- setresuid=0x0 errno=14 cover=5446 #0 [899147ms] -> ioctl$SG_IO(0x3, 0x2284, 0x0) #0 [899147ms] <- ioctl$SG_IO=0xffffffffffffffff errno=13 cover=135 22:34:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) stat(&(0x7f0000000040)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioctl$SG_IO(r0, 0x2284, 0x0) 2021/11/10 22:34:57 result hanged=false: [899183ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111092 #0 [899201ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [899201ms] <- syz_open_dev$sg=0x3 errno=14 cover=1391 #0 [899203ms] -> stat(0x20000040, 0x20001c00) #0 [899203ms] <- stat=0x0 errno=14 cover=858 #0 [899206ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [899206ms] <- setresuid=0x0 errno=14 cover=437 #0 [899207ms] -> ioctl$SG_IO(0x3, 0x2284, 0x0) #0 [899207ms] <- ioctl$SG_IO=0xffffffffffffffff errno=13 cover=135 22:34:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) stat(&(0x7f0000000040)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioctl$SG_IO(r0, 0x2284, 0x0) 2021/11/10 22:34:57 result hanged=false: [899243ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111094 #0 [899260ms] -> syz_open_dev$sg(0x20000080, 0x0, 0x0) #0 [899260ms] <- syz_open_dev$sg=0x3 errno=14 cover=1368 #0 [899261ms] -> stat(0x20000040, 0x20001c00) #0 [899261ms] <- stat=0x0 errno=14 cover=804 #0 [899261ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [899261ms] <- setresuid=0x0 errno=14 cover=382 #0 [899262ms] -> ioctl$SG_IO(0x3, 0x2284, 0x0) #0 [899262ms] <- ioctl$SG_IO=0xffffffffffffffff errno=13 cover=135 2021/11/10 22:34:57 result hanged=false: 2021/11/10 22:34:57 added new input for call #3 ioctl$SG_IO to corpus: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) stat(&(0x7f0000000040)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioctl$SG_IO(r0, 0x2284, 0x0) 22:34:57 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4c, &(0x7f0000000000)=""/112) [899306ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111096 #0 [899324ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [899325ms] <- perf_event_open=0x3 errno=14 cover=9730 #0 [899327ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [899329ms] <- syz_open_dev$tty20=0x4 errno=14 cover=9312 #0 [899331ms] -> ioctl$KDGKBDIACR(0x4, 0x4b4c, 0x20000000) #0 [899332ms] <- ioctl$KDGKBDIACR=0x0 errno=14 cover=1527 enabling collider #0 [899343ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [899344ms] <- perf_event_open=0x3 errno=14 cover=9687 #0 [899345ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [899346ms] <- syz_open_dev$tty20=0x4 errno=14 cover=8768 pthread_create failed (errno 11) 2021/11/10 22:34:57 result hanged=false: 2021/11/10 22:34:57 #0: triaging type=7 22:34:57 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4c, &(0x7f0000000000)=""/112) 2021/11/10 22:34:57 triaging input for call #2 ioctl$KDGKBDIACR (new signal=3) [899432ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111198 #0 [899455ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [899456ms] <- perf_event_open=0x3 errno=14 cover=9720 #0 [899459ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [899459ms] <- syz_open_dev$tty20=0x4 errno=14 cover=3453 #0 [899460ms] -> ioctl$KDGKBDIACR(0x4, 0x4b4c, 0x20000000) #0 [899460ms] <- ioctl$KDGKBDIACR=0x0 errno=14 cover=802 2021/11/10 22:34:58 result hanged=false: 22:34:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4c, &(0x7f0000000000)=""/112) [899504ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111200 #0 [899522ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [899524ms] <- perf_event_open=0x3 errno=14 cover=10773 #0 [899525ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [899526ms] <- syz_open_dev$tty20=0x4 errno=14 cover=9330 #0 [899527ms] -> ioctl$KDGKBDIACR(0x4, 0x4b4c, 0x20000000) #0 [899527ms] <- ioctl$KDGKBDIACR=0x0 errno=14 cover=1415 22:34:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4c, &(0x7f0000000000)=""/112) 2021/11/10 22:34:58 result hanged=false: [899571ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111202 #0 [899588ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [899590ms] <- perf_event_open=0x3 errno=14 cover=10656 #0 [899592ms] -> syz_open_dev$tty20(0xc, 0x4, 0x14) #0 [899594ms] <- syz_open_dev$tty20=0x4 errno=14 cover=9400 #0 [899599ms] -> ioctl$KDGKBDIACR(0x4, 0x4b4c, 0x20000000) #0 [899599ms] <- ioctl$KDGKBDIACR=0x0 errno=14 cover=1671 2021/11/10 22:34:58 result hanged=false: 2021/11/10 22:34:58 added new input for call #2 ioctl$KDGKBDIACR to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4c, &(0x7f0000000000)=""/112) 22:34:58 executing program 0: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x49, 0x29, 0x1, {0x7, [{{0x0, 0x0, 0x1}, 0x1ff, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x5}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000001100), &(0x7f0000001140), 0x2, 0x0) geteuid() setxattr$security_capability(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0, 0x4) symlinkat(&(0x7f0000001300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001340)='./file0\x00') pipe2(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREADDIR(r0, 0x0, 0x0) pipe2(&(0x7f0000001400)={0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', 0x5, 0x2, &(0x7f0000001580)=[{&(0x7f0000001500)="0dd5946e44fb5982370068e24443ef416d748ef89214935b63d1", 0x1a, 0x5}, {&(0x7f0000001540), 0x0, 0x6}], 0x401, &(0x7f00000015c0)={[{@fat=@showexec}], [{@hash}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, '],\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise_type}, {@hash}, {@audit}]}) linkat(r1, &(0x7f0000001440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001680)='./file0/file0\x00', 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000016c0)) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) removexattr(&(0x7f0000006e40)='./file0\x00', &(0x7f0000006e80)=@known='security.apparmor\x00') socketpair(0x18, 0x0, 0xffffffff, &(0x7f0000006ec0)) write$P9_RREADDIR(r1, &(0x7f0000006f00)={0x52, 0x29, 0x0, {0x80000000, [{{}, 0x0, 0x7, 0x7, './file0'}, {{0x20, 0x1, 0x1}, 0x7ff, 0x11, 0x10, './file0/../file0'}]}}, 0x52) [899651ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111204 #0 [899671ms] -> write$P9_RREADDIR(0xffffffffffffffff, 0x20000000, 0x49) #0 [899672ms] <- write$P9_RREADDIR=0xffffffffffffffff errno=9 cover=47 #0 [899673ms] -> readlinkat(0xffffffffffffffff, 0x0, 0x200000c0, 0x1000) #0 [899673ms] <- readlinkat=0xffffffffffffffff errno=14 cover=605 #0 [899675ms] -> setxattr$trusted_overlay_opaque(0x0, 0x20001100, 0x20001140, 0x2, 0x0) #0 [899675ms] <- setxattr$trusted_overlay_opaque=0xffffffffffffffff errno=14 cover=629 #0 [899675ms] -> geteuid() #0 [899675ms] <- geteuid=0x0 errno=14 cover=43 #0 [899675ms] -> setxattr$security_capability(0x20001240, 0x0, 0x0, 0x0, 0x4) #0 [899676ms] <- setxattr$security_capability=0xffffffffffffffff errno=2 cover=1034 #0 [899676ms] -> symlinkat(0x20001300, 0xffffffffffffffff, 0x20001340) #0 [899676ms] <- symlinkat=0xffffffffffffffff errno=9 cover=507 #0 [899676ms] -> pipe2(0x20001380, 0x800) #0 [899676ms] <- pipe2=0x0 errno=14 cover=1137 #0 [899676ms] -> write$P9_RREADDIR(0x4, 0x0, 0x0) #0 [899676ms] <- write$P9_RREADDIR=0x0 errno=14 cover=152 #0 [899676ms] -> pipe2(0x20001400, 0x0) #0 [899676ms] <- pipe2=0x0 errno=14 cover=1150 #0 [899676ms] -> syz_mount_image$vfat(0x20001480, 0x200014c0, 0x5, 0x2, 0x20001580, 0x401, 0x200015c0) [ 958.870181] FAT-fs (loop0): Unrecognized mount option "hash" or missing value syz_mount_image: size=5 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=1025 opts='showexec,hash,fscontext=staff_u,dont_appraise,obj_role=],' syz_mount_image > mount error: 22 #0 [899686ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=24874 #0 [899686ms] -> linkat(0x5, 0x20001440, 0xffffffffffffffff, 0x20001680, 0x200) #0 [899686ms] <- linkat=0xffffffffffffffff errno=22 cover=35 #0 [899686ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x200016c0) #0 [899687ms] <- socketpair$unix=0x0 errno=14 cover=2910 #0 [899687ms] -> bind$unix(0xffffffffffffffff, 0x0, 0x0) #0 [899687ms] <- bind$unix=0xffffffffffffffff errno=9 cover=48 #0 [899687ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [899688ms] <- socket$inet_udplite=0x9 errno=14 cover=1669 #0 [899689ms] -> removexattr(0x20006e40, 0x20006e80) #0 [899690ms] <- removexattr=0xffffffffffffffff errno=61 cover=1375 #0 [899690ms] -> socketpair(0x18, 0x0, 0xffffffff, 0x20006ec0) #0 [899708ms] <- socketpair=0xffffffffffffffff errno=97 cover=19858 #0 [899709ms] -> write$P9_RREADDIR(0x5, 0x20006f00, 0x52) #0 [899709ms] <- write$P9_RREADDIR=0xffffffffffffffff errno=9 cover=64 enabling collider #0 [899709ms] -> write$P9_RREADDIR(0xffffffffffffffff, 0x20000000, 0x49) #0 [899709ms] <- write$P9_RREADDIR=0xffffffffffffffff errno=9 cover=47 #0 [899710ms] -> readlinkat(0xffffffffffffffff, 0x0, 0x200000c0, 0x1000) #0 [899710ms] <- readlinkat=0xffffffffffffffff errno=14 cover=595 pthread_create failed (errno 11) 22:34:58 executing program 0: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x49, 0x29, 0x1, {0x7, [{{0x0, 0x0, 0x1}, 0x1ff, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x5}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000001100), &(0x7f0000001140), 0x2, 0x0) geteuid() setxattr$security_capability(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0, 0x4) symlinkat(&(0x7f0000001300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001340)='./file0\x00') pipe2(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREADDIR(r0, 0x0, 0x0) pipe2(&(0x7f0000001400)={0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', 0x5, 0x2, &(0x7f0000001580)=[{&(0x7f0000001500)="0dd5946e44fb5982370068e24443ef416d748ef89214935b63d1", 0x1a, 0x5}, {&(0x7f0000001540), 0x0, 0x6}], 0x401, &(0x7f00000015c0)={[{@fat=@showexec}], [{@hash}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, '],\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise_type}, {@hash}, {@audit}]}) linkat(r1, &(0x7f0000001440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001680)='./file0/file0\x00', 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000016c0)) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) removexattr(&(0x7f0000006e40)='./file0\x00', &(0x7f0000006e80)=@known='security.apparmor\x00') socketpair(0x18, 0x0, 0xffffffff, &(0x7f0000006ec0)) write$P9_RREADDIR(r1, &(0x7f0000006f00)={0x52, 0x29, 0x0, {0x80000000, [{{}, 0x0, 0x7, 0x7, './file0'}, {{0x20, 0x1, 0x1}, 0x7ff, 0x11, 0x10, './file0/../file0'}]}}, 0x52) 2021/11/10 22:34:58 result hanged=false: 2021/11/10 22:34:58 #0: triaging type=7 2021/11/10 22:34:58 triaging input for call #14 removexattr (new signal=1) [899782ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111306 #0 [899804ms] -> write$P9_RREADDIR(0xffffffffffffffff, 0x20000000, 0x49) #0 [899805ms] <- write$P9_RREADDIR=0xffffffffffffffff errno=9 cover=47 #0 [899811ms] -> readlinkat(0xffffffffffffffff, 0x0, 0x200000c0, 0x1000) #0 [899811ms] <- readlinkat=0xffffffffffffffff errno=14 cover=593 #0 [899812ms] -> setxattr$trusted_overlay_opaque(0x0, 0x20001100, 0x20001140, 0x2, 0x0) #0 [899812ms] <- setxattr$trusted_overlay_opaque=0xffffffffffffffff errno=14 cover=615 #0 [899814ms] -> geteuid() #0 [899814ms] <- geteuid=0x0 errno=14 cover=43 #0 [899815ms] -> setxattr$security_capability(0x20001240, 0x0, 0x0, 0x0, 0x4) #0 [899815ms] <- setxattr$security_capability=0xffffffffffffffff errno=2 cover=1033 #0 [899816ms] -> symlinkat(0x20001300, 0xffffffffffffffff, 0x20001340) #0 [899816ms] <- symlinkat=0xffffffffffffffff errno=9 cover=526 #0 [899816ms] -> pipe2(0x20001380, 0x800) #0 [899816ms] <- pipe2=0x0 errno=14 cover=1213 #0 [899818ms] -> write$P9_RREADDIR(0x4, 0x0, 0x0) #0 [899818ms] <- write$P9_RREADDIR=0x0 errno=14 cover=152 #0 [899818ms] -> pipe2(0x20001400, 0x0) #0 [899818ms] <- pipe2=0x0 errno=14 cover=1226 #0 [899819ms] -> syz_mount_image$vfat(0x20001480, 0x200014c0, 0x5, 0x2, 0x20001580, 0x401, 0x200015c0) syz_mount_image: size=5 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=1025 opts='showexec,hash,fscontext=staff_u,dont_appraise,obj_role=],' [ 959.012578] FAT-fs (loop0): Unrecognized mount option "hash" or missing value syz_mount_image > mount error: 22 #0 [899828ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=24848 #0 [899830ms] -> linkat(0x5, 0x20001440, 0xffffffffffffffff, 0x20001680, 0x200) #0 [899830ms] <- linkat=0xffffffffffffffff errno=22 cover=35 #0 [899836ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x200016c0) #0 [899837ms] <- socketpair$unix=0x0 errno=14 cover=3022 #0 [899839ms] -> bind$unix(0xffffffffffffffff, 0x0, 0x0) #0 [899839ms] <- bind$unix=0xffffffffffffffff errno=9 cover=48 #0 [899840ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [899841ms] <- socket$inet_udplite=0x9 errno=14 cover=1732 #0 [899843ms] -> removexattr(0x20006e40, 0x20006e80) #0 [899843ms] <- removexattr=0xffffffffffffffff errno=61 cover=1293 #0 [899844ms] -> socketpair(0x18, 0x0, 0xffffffff, 0x20006ec0) #0 [899858ms] <- socketpair=0xffffffffffffffff errno=97 cover=1658 #0 [899859ms] -> write$P9_RREADDIR(0x5, 0x20006f00, 0x52) #0 [899859ms] <- write$P9_RREADDIR=0xffffffffffffffff errno=9 cover=64 22:34:58 executing program 0: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x49, 0x29, 0x1, {0x7, [{{0x0, 0x0, 0x1}, 0x1ff, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x5}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000001100), &(0x7f0000001140), 0x2, 0x0) geteuid() setxattr$security_capability(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0, 0x4) symlinkat(&(0x7f0000001300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001340)='./file0\x00') pipe2(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREADDIR(r0, 0x0, 0x0) pipe2(&(0x7f0000001400)={0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', 0x5, 0x2, &(0x7f0000001580)=[{&(0x7f0000001500)="0dd5946e44fb5982370068e24443ef416d748ef89214935b63d1", 0x1a, 0x5}, {&(0x7f0000001540), 0x0, 0x6}], 0x401, &(0x7f00000015c0)={[{@fat=@showexec}], [{@hash}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, '],\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise_type}, {@hash}, {@audit}]}) linkat(r1, &(0x7f0000001440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001680)='./file0/file0\x00', 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000016c0)) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) removexattr(&(0x7f0000006e40)='./file0\x00', &(0x7f0000006e80)=@known='security.apparmor\x00') socketpair(0x18, 0x0, 0xffffffff, &(0x7f0000006ec0)) write$P9_RREADDIR(r1, &(0x7f0000006f00)={0x52, 0x29, 0x0, {0x80000000, [{{}, 0x0, 0x7, 0x7, './file0'}, {{0x20, 0x1, 0x1}, 0x7ff, 0x11, 0x10, './file0/../file0'}]}}, 0x52) 2021/11/10 22:34:58 result hanged=false: [899910ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111308 #0 [899927ms] -> write$P9_RREADDIR(0xffffffffffffffff, 0x20000000, 0x49) #0 [899927ms] <- write$P9_RREADDIR=0xffffffffffffffff errno=9 cover=47 #0 [899928ms] -> readlinkat(0xffffffffffffffff, 0x0, 0x200000c0, 0x1000) #0 [899928ms] <- readlinkat=0xffffffffffffffff errno=14 cover=594 #0 [899929ms] -> setxattr$trusted_overlay_opaque(0x0, 0x20001100, 0x20001140, 0x2, 0x0) #0 [899929ms] <- setxattr$trusted_overlay_opaque=0xffffffffffffffff errno=14 cover=605 #0 [899930ms] -> geteuid() #0 [899930ms] <- geteuid=0x0 errno=14 cover=43 #0 [899930ms] -> setxattr$security_capability(0x20001240, 0x0, 0x0, 0x0, 0x4) #0 [899930ms] <- setxattr$security_capability=0xffffffffffffffff errno=2 cover=1009 #0 [899931ms] -> symlinkat(0x20001300, 0xffffffffffffffff, 0x20001340) #0 [899931ms] <- symlinkat=0xffffffffffffffff errno=9 cover=506 #0 [899932ms] -> pipe2(0x20001380, 0x800) #0 [899933ms] <- pipe2=0x0 errno=14 cover=1115 #0 [899933ms] -> write$P9_RREADDIR(0x4, 0x0, 0x0) #0 [899933ms] <- write$P9_RREADDIR=0x0 errno=14 cover=152 #0 [899933ms] -> pipe2(0x20001400, 0x0) #0 [899933ms] <- pipe2=0x0 errno=14 cover=1169 #0 [899933ms] -> syz_mount_image$vfat(0x20001480, 0x200014c0, 0x5, 0x2, 0x20001580, 0x401, 0x200015c0) syz_mount_image: size=5 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=1025 opts='showexec,hash,fscontext=staff_u,dont_appraise,obj_role=],' [ 959.131433] FAT-fs (loop0): Unrecognized mount option "hash" or missing value syz_mount_image > mount error: 22 #0 [899947ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=24906 #0 [899948ms] -> linkat(0x5, 0x20001440, 0xffffffffffffffff, 0x20001680, 0x200) #0 [899948ms] <- linkat=0xffffffffffffffff errno=22 cover=35 #0 [899951ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x200016c0) #0 [899953ms] <- socketpair$unix=0x0 errno=14 cover=2964 #0 [899953ms] -> bind$unix(0xffffffffffffffff, 0x0, 0x0) #0 [899953ms] <- bind$unix=0xffffffffffffffff errno=9 cover=48 #0 [899953ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [899953ms] <- socket$inet_udplite=0x9 errno=14 cover=1623 #0 [899956ms] -> removexattr(0x20006e40, 0x20006e80) #0 [899957ms] <- removexattr=0xffffffffffffffff errno=61 cover=1284 #0 [899957ms] -> socketpair(0x18, 0x0, 0xffffffff, 0x20006ec0) #0 [899973ms] <- socketpair=0xffffffffffffffff errno=97 cover=1607 #0 [899973ms] -> write$P9_RREADDIR(0x5, 0x20006f00, 0x52) #0 [899973ms] <- write$P9_RREADDIR=0xffffffffffffffff errno=9 cover=64 22:34:58 executing program 0: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x49, 0x29, 0x1, {0x7, [{{0x0, 0x0, 0x1}, 0x1ff, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x5}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000001100), &(0x7f0000001140), 0x2, 0x0) geteuid() setxattr$security_capability(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0, 0x4) symlinkat(&(0x7f0000001300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001340)='./file0\x00') pipe2(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREADDIR(r0, 0x0, 0x0) pipe2(&(0x7f0000001400)={0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', 0x5, 0x2, &(0x7f0000001580)=[{&(0x7f0000001500)="0dd5946e44fb5982370068e24443ef416d748ef89214935b63d1", 0x1a, 0x5}, {&(0x7f0000001540), 0x0, 0x6}], 0x401, &(0x7f00000015c0)={[{@fat=@showexec}], [{@hash}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, '],\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise_type}, {@hash}, {@audit}]}) linkat(r1, &(0x7f0000001440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001680)='./file0/file0\x00', 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000016c0)) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) removexattr(&(0x7f0000006e40)='./file0\x00', &(0x7f0000006e80)=@known='security.apparmor\x00') socketpair(0x18, 0x0, 0xffffffff, &(0x7f0000006ec0)) write$P9_RREADDIR(r1, &(0x7f0000006f00)={0x52, 0x29, 0x0, {0x80000000, [{{}, 0x0, 0x7, 0x7, './file0'}, {{0x20, 0x1, 0x1}, 0x7ff, 0x11, 0x10, './file0/../file0'}]}}, 0x52) 2021/11/10 22:34:58 result hanged=false: [900017ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111310 #0 [900036ms] -> write$P9_RREADDIR(0xffffffffffffffff, 0x20000000, 0x49) #0 [900036ms] <- write$P9_RREADDIR=0xffffffffffffffff errno=9 cover=47 #0 [900037ms] -> readlinkat(0xffffffffffffffff, 0x0, 0x200000c0, 0x1000) #0 [900038ms] <- readlinkat=0xffffffffffffffff errno=14 cover=594 #0 [900044ms] -> setxattr$trusted_overlay_opaque(0x0, 0x20001100, 0x20001140, 0x2, 0x0) #0 [900044ms] <- setxattr$trusted_overlay_opaque=0xffffffffffffffff errno=14 cover=594 #0 [900045ms] -> geteuid() #0 [900045ms] <- geteuid=0x0 errno=14 cover=43 #0 [900045ms] -> setxattr$security_capability(0x20001240, 0x0, 0x0, 0x0, 0x4) #0 [900045ms] <- setxattr$security_capability=0xffffffffffffffff errno=2 cover=1156 #0 [900046ms] -> symlinkat(0x20001300, 0xffffffffffffffff, 0x20001340) #0 [900046ms] <- symlinkat=0xffffffffffffffff errno=9 cover=561 #0 [900047ms] -> pipe2(0x20001380, 0x800) #0 [900048ms] <- pipe2=0x0 errno=14 cover=1303 #0 [900048ms] -> write$P9_RREADDIR(0x4, 0x0, 0x0) #0 [900048ms] <- write$P9_RREADDIR=0x0 errno=14 cover=152 #0 [900049ms] -> pipe2(0x20001400, 0x0) #0 [900049ms] <- pipe2=0x0 errno=14 cover=1283 #0 [900050ms] -> syz_mount_image$vfat(0x20001480, 0x200014c0, 0x5, 0x2, 0x20001580, 0x401, 0x200015c0) syz_mount_image: size=5 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=1025 opts='showexec,hash,fscontext=staff_u,dont_appraise,obj_role=],' [ 959.244407] FAT-fs (loop0): Unrecognized mount option "hash" or missing value syz_mount_image > mount error: 22 #0 [900061ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=29778 #0 [900064ms] -> linkat(0x5, 0x20001440, 0xffffffffffffffff, 0x20001680, 0x200) #0 [900065ms] <- linkat=0xffffffffffffffff errno=22 cover=35 #0 [900067ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x200016c0) #0 [900068ms] <- socketpair$unix=0x0 errno=14 cover=2975 #0 [900068ms] -> bind$unix(0xffffffffffffffff, 0x0, 0x0) #0 [900068ms] <- bind$unix=0xffffffffffffffff errno=9 cover=48 #0 [900070ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [900071ms] <- socket$inet_udplite=0x9 errno=14 cover=1666 #0 [900072ms] -> removexattr(0x20006e40, 0x20006e80) #0 [900072ms] <- removexattr=0xffffffffffffffff errno=61 cover=1451 #0 [900073ms] -> socketpair(0x18, 0x0, 0xffffffff, 0x20006ec0) #0 [900089ms] <- socketpair=0xffffffffffffffff errno=97 cover=1582 #0 [900089ms] -> write$P9_RREADDIR(0x5, 0x20006f00, 0x52) #0 [900090ms] <- write$P9_RREADDIR=0xffffffffffffffff errno=9 cover=64 2021/11/10 22:34:58 result hanged=false: 2021/11/10 22:34:58 added new input for call #14 removexattr to corpus: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x49, 0x29, 0x1, {0x7, [{{0x0, 0x0, 0x1}, 0x1ff, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x5}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000001100), &(0x7f0000001140), 0x2, 0x0) geteuid() setxattr$security_capability(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0, 0x4) symlinkat(&(0x7f0000001300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001340)='./file0\x00') pipe2(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREADDIR(r0, 0x0, 0x0) pipe2(&(0x7f0000001400)={0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', 0x5, 0x2, &(0x7f0000001580)=[{&(0x7f0000001500)="0dd5946e44fb5982370068e24443ef416d748ef89214935b63d1", 0x1a, 0x5}, {&(0x7f0000001540), 0x0, 0x6}], 0x401, &(0x7f00000015c0)={[{@fat=@showexec}], [{@hash}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, '],\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise_type}, {@hash}, {@audit}]}) linkat(r1, &(0x7f0000001440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001680)='./file0/file0\x00', 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000016c0)) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) removexattr(&(0x7f0000006e40)='./file0\x00', &(0x7f0000006e80)=@known='security.apparmor\x00') socketpair(0x18, 0x0, 0xffffffff, &(0x7f0000006ec0)) write$P9_RREADDIR(r1, &(0x7f0000006f00)={0x52, 0x29, 0x0, {0x80000000, [{{}, 0x0, 0x7, 0x7, './file0'}, {{0x20, 0x1, 0x1}, 0x7ff, 0x11, 0x10, './file0/../file0'}]}}, 0x52) 22:34:58 executing program 0: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x49, 0x29, 0x1, {0x7, [{{0x0, 0x0, 0x1}, 0x1ff, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x5}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000001100), &(0x7f0000001140), 0x2, 0x0) geteuid() setxattr$security_capability(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0, 0x4) symlinkat(&(0x7f0000001300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001340)='./file0\x00') pipe2(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREADDIR(r0, 0x0, 0x0) pipe2(&(0x7f0000001400)={0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', 0x5, 0x2, &(0x7f0000001580)=[{&(0x7f0000001500)="0dd5946e44fb5982370068e24443ef416d748ef89214935b63d1", 0x1a, 0x5}, {&(0x7f0000001540), 0x0, 0x6}], 0x401, &(0x7f00000015c0)={[{@fat=@showexec}], [{@hash}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, '],\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise_type}, {@hash}, {@audit}]}) linkat(r1, &(0x7f0000001440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001680)='./file0/file0\x00', 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000016c0)) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) removexattr(&(0x7f0000006e40)='./file0\x00', &(0x7f0000006e80)=@known='security.apparmor\x00') socketpair(0x18, 0x0, 0xffffffff, &(0x7f0000006ec0)) write$P9_RREADDIR(r1, &(0x7f0000006f00)={0x52, 0x29, 0x0, {0x80000000, [{{}, 0x0, 0x7, 0x7, './file0'}, {{0x20, 0x1, 0x1}, 0x7ff, 0x11, 0x10, './file0/../file0'}]}}, 0x52) 2021/11/10 22:34:58 #0: triaging type=7 2021/11/10 22:34:58 triaging input for call #10 linkat (new signal=1) [900135ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111312 #0 [900153ms] -> write$P9_RREADDIR(0xffffffffffffffff, 0x20000000, 0x49) #0 [900153ms] <- write$P9_RREADDIR=0xffffffffffffffff errno=9 cover=47 #0 [900154ms] -> readlinkat(0xffffffffffffffff, 0x0, 0x200000c0, 0x1000) #0 [900154ms] <- readlinkat=0xffffffffffffffff errno=14 cover=605 #0 [900155ms] -> setxattr$trusted_overlay_opaque(0x0, 0x20001100, 0x20001140, 0x2, 0x0) #0 [900155ms] <- setxattr$trusted_overlay_opaque=0xffffffffffffffff errno=14 cover=594 #0 [900155ms] -> geteuid() #0 [900155ms] <- geteuid=0x0 errno=14 cover=43 #0 [900155ms] -> setxattr$security_capability(0x20001240, 0x0, 0x0, 0x0, 0x4) #0 [900155ms] <- setxattr$security_capability=0xffffffffffffffff errno=2 cover=972 #0 [900156ms] -> symlinkat(0x20001300, 0xffffffffffffffff, 0x20001340) #0 [900156ms] <- symlinkat=0xffffffffffffffff errno=9 cover=560 #0 [900156ms] -> pipe2(0x20001380, 0x800) #0 [900156ms] <- pipe2=0x0 errno=14 cover=1137 #0 [900157ms] -> write$P9_RREADDIR(0x4, 0x0, 0x0) #0 [900157ms] <- write$P9_RREADDIR=0x0 errno=14 cover=152 #0 [900159ms] -> pipe2(0x20001400, 0x0) #0 [900160ms] <- pipe2=0x0 errno=14 cover=1234 #0 [900160ms] -> syz_mount_image$vfat(0x20001480, 0x200014c0, 0x5, 0x2, 0x20001580, 0x401, 0x200015c0) [ 959.355461] FAT-fs (loop0): Unrecognized mount option "hash" or missing value syz_mount_image: size=5 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=1025 opts='showexec,hash,fscontext=staff_u,dont_appraise,obj_role=],' syz_mount_image > mount error: 22 #0 [900175ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=25195 #0 [900177ms] -> linkat(0x5, 0x20001440, 0xffffffffffffffff, 0x20001680, 0x200) #0 [900178ms] <- linkat=0xffffffffffffffff errno=22 cover=35 #0 [900179ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x200016c0) #0 [900180ms] <- socketpair$unix=0x0 errno=14 cover=3010 #0 [900181ms] -> bind$unix(0xffffffffffffffff, 0x0, 0x0) #0 [900181ms] <- bind$unix=0xffffffffffffffff errno=9 cover=48 #0 [900182ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [900182ms] <- socket$inet_udplite=0x9 errno=14 cover=1692 #0 [900183ms] -> removexattr(0x20006e40, 0x20006e80) #0 [900183ms] <- removexattr=0xffffffffffffffff errno=61 cover=1264 #0 [900184ms] -> socketpair(0x18, 0x0, 0xffffffff, 0x20006ec0) #0 [900201ms] <- socketpair=0xffffffffffffffff errno=97 cover=1560 #0 [900202ms] -> write$P9_RREADDIR(0x5, 0x20006f00, 0x52) #0 [900202ms] <- write$P9_RREADDIR=0xffffffffffffffff errno=9 cover=64 22:34:58 executing program 0: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x49, 0x29, 0x1, {0x7, [{{0x0, 0x0, 0x1}, 0x1ff, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x5}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000001100), &(0x7f0000001140), 0x2, 0x0) geteuid() setxattr$security_capability(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0, 0x4) symlinkat(&(0x7f0000001300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001340)='./file0\x00') pipe2(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREADDIR(r0, 0x0, 0x0) pipe2(&(0x7f0000001400)={0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', 0x5, 0x2, &(0x7f0000001580)=[{&(0x7f0000001500)="0dd5946e44fb5982370068e24443ef416d748ef89214935b63d1", 0x1a, 0x5}, {&(0x7f0000001540), 0x0, 0x6}], 0x401, &(0x7f00000015c0)={[{@fat=@showexec}], [{@hash}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, '],\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise_type}, {@hash}, {@audit}]}) linkat(r1, &(0x7f0000001440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001680)='./file0/file0\x00', 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000016c0)) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) removexattr(&(0x7f0000006e40)='./file0\x00', &(0x7f0000006e80)=@known='security.apparmor\x00') socketpair(0x18, 0x0, 0xffffffff, &(0x7f0000006ec0)) write$P9_RREADDIR(r1, &(0x7f0000006f00)={0x52, 0x29, 0x0, {0x80000000, [{{}, 0x0, 0x7, 0x7, './file0'}, {{0x20, 0x1, 0x1}, 0x7ff, 0x11, 0x10, './file0/../file0'}]}}, 0x52) 2021/11/10 22:34:58 result hanged=false: [900248ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111314 #0 [900269ms] -> write$P9_RREADDIR(0xffffffffffffffff, 0x20000000, 0x49) #0 [900269ms] <- write$P9_RREADDIR=0xffffffffffffffff errno=9 cover=47 #0 [900271ms] -> readlinkat(0xffffffffffffffff, 0x0, 0x200000c0, 0x1000) #0 [900271ms] <- readlinkat=0xffffffffffffffff errno=14 cover=626 #0 [900275ms] -> setxattr$trusted_overlay_opaque(0x0, 0x20001100, 0x20001140, 0x2, 0x0) #0 [900275ms] <- setxattr$trusted_overlay_opaque=0xffffffffffffffff errno=14 cover=593 #0 [900276ms] -> geteuid() #0 [900276ms] <- geteuid=0x0 errno=14 cover=43 #0 [900276ms] -> setxattr$security_capability(0x20001240, 0x0, 0x0, 0x0, 0x4) #0 [900276ms] <- setxattr$security_capability=0xffffffffffffffff errno=2 cover=1004 #0 [900277ms] -> symlinkat(0x20001300, 0xffffffffffffffff, 0x20001340) #0 [900277ms] <- symlinkat=0xffffffffffffffff errno=9 cover=539 #0 [900277ms] -> pipe2(0x20001380, 0x800) #0 [900278ms] <- pipe2=0x0 errno=14 cover=1279 #0 [900278ms] -> write$P9_RREADDIR(0x4, 0x0, 0x0) #0 [900278ms] <- write$P9_RREADDIR=0x0 errno=14 cover=152 #0 [900279ms] -> pipe2(0x20001400, 0x0) #0 [900280ms] <- pipe2=0x0 errno=14 cover=1212 #0 [900280ms] -> syz_mount_image$vfat(0x20001480, 0x200014c0, 0x5, 0x2, 0x20001580, 0x401, 0x200015c0) syz_mount_image: size=5 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=1025 opts='showexec,hash,fscontext=staff_u,dont_appraise,obj_role=],' [ 959.474667] FAT-fs (loop0): Unrecognized mount option "hash" or missing value syz_mount_image > mount error: 22 #0 [900302ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=24981 #0 [900303ms] -> linkat(0x5, 0x20001440, 0xffffffffffffffff, 0x20001680, 0x200) #0 [900304ms] <- linkat=0xffffffffffffffff errno=22 cover=35 #0 [900305ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x200016c0) #0 [900306ms] <- socketpair$unix=0x0 errno=14 cover=2975 #0 [900308ms] -> bind$unix(0xffffffffffffffff, 0x0, 0x0) #0 [900308ms] <- bind$unix=0xffffffffffffffff errno=9 cover=48 #0 [900308ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [900308ms] <- socket$inet_udplite=0x9 errno=14 cover=1634 #0 [900309ms] -> removexattr(0x20006e40, 0x20006e80) #0 [900309ms] <- removexattr=0xffffffffffffffff errno=61 cover=1275 #0 [900309ms] -> socketpair(0x18, 0x0, 0xffffffff, 0x20006ec0) #0 [900327ms] <- socketpair=0xffffffffffffffff errno=97 cover=1585 #0 [900329ms] -> write$P9_RREADDIR(0x5, 0x20006f00, 0x52) #0 [900329ms] <- write$P9_RREADDIR=0xffffffffffffffff errno=9 cover=64 22:34:58 executing program 0: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x49, 0x29, 0x1, {0x7, [{{0x0, 0x0, 0x1}, 0x1ff, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x5}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000001100), &(0x7f0000001140), 0x2, 0x0) geteuid() setxattr$security_capability(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0, 0x4) symlinkat(&(0x7f0000001300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001340)='./file0\x00') pipe2(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREADDIR(r0, 0x0, 0x0) pipe2(&(0x7f0000001400)={0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', 0x5, 0x2, &(0x7f0000001580)=[{&(0x7f0000001500)="0dd5946e44fb5982370068e24443ef416d748ef89214935b63d1", 0x1a, 0x5}, {&(0x7f0000001540), 0x0, 0x6}], 0x401, &(0x7f00000015c0)={[{@fat=@showexec}], [{@hash}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, '],\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise_type}, {@hash}, {@audit}]}) linkat(r1, &(0x7f0000001440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001680)='./file0/file0\x00', 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000016c0)) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) removexattr(&(0x7f0000006e40)='./file0\x00', &(0x7f0000006e80)=@known='security.apparmor\x00') socketpair(0x18, 0x0, 0xffffffff, &(0x7f0000006ec0)) write$P9_RREADDIR(r1, &(0x7f0000006f00)={0x52, 0x29, 0x0, {0x80000000, [{{}, 0x0, 0x7, 0x7, './file0'}, {{0x20, 0x1, 0x1}, 0x7ff, 0x11, 0x10, './file0/../file0'}]}}, 0x52) 2021/11/10 22:34:58 result hanged=false: [900386ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111316 #0 [900407ms] -> write$P9_RREADDIR(0xffffffffffffffff, 0x20000000, 0x49) #0 [900407ms] <- write$P9_RREADDIR=0xffffffffffffffff errno=9 cover=47 #0 [900408ms] -> readlinkat(0xffffffffffffffff, 0x0, 0x200000c0, 0x1000) #0 [900408ms] <- readlinkat=0xffffffffffffffff errno=14 cover=594 #0 [900408ms] -> setxattr$trusted_overlay_opaque(0x0, 0x20001100, 0x20001140, 0x2, 0x0) #0 [900408ms] <- setxattr$trusted_overlay_opaque=0xffffffffffffffff errno=14 cover=594 #0 [900408ms] -> geteuid() #0 [900408ms] <- geteuid=0x0 errno=14 cover=43 #0 [900408ms] -> setxattr$security_capability(0x20001240, 0x0, 0x0, 0x0, 0x4) #0 [900409ms] <- setxattr$security_capability=0xffffffffffffffff errno=2 cover=1150 #0 [900409ms] -> symlinkat(0x20001300, 0xffffffffffffffff, 0x20001340) #0 [900409ms] <- symlinkat=0xffffffffffffffff errno=9 cover=529 #0 [900410ms] -> pipe2(0x20001380, 0x800) #0 [900410ms] <- pipe2=0x0 errno=14 cover=1170 #0 [900410ms] -> write$P9_RREADDIR(0x4, 0x0, 0x0) #0 [900410ms] <- write$P9_RREADDIR=0x0 errno=14 cover=152 #0 [900411ms] -> pipe2(0x20001400, 0x0) #0 [900411ms] <- pipe2=0x0 errno=14 cover=1136 #0 [900411ms] -> syz_mount_image$vfat(0x20001480, 0x200014c0, 0x5, 0x2, 0x20001580, 0x401, 0x200015c0) [ 959.605937] FAT-fs (loop0): Unrecognized mount option "hash" or missing value syz_mount_image: size=5 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=1025 opts='showexec,hash,fscontext=staff_u,dont_appraise,obj_role=],' syz_mount_image > mount error: 22 #0 [900429ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=25176 #0 [900430ms] -> linkat(0x5, 0x20001440, 0xffffffffffffffff, 0x20001680, 0x200) #0 [900430ms] <- linkat=0xffffffffffffffff errno=22 cover=35 #0 [900432ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x200016c0) #0 [900433ms] <- socketpair$unix=0x0 errno=14 cover=3027 #0 [900433ms] -> bind$unix(0xffffffffffffffff, 0x0, 0x0) #0 [900433ms] <- bind$unix=0xffffffffffffffff errno=9 cover=48 #0 [900434ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [900434ms] <- socket$inet_udplite=0x9 errno=14 cover=1702 #0 [900435ms] -> removexattr(0x20006e40, 0x20006e80) #0 [900435ms] <- removexattr=0xffffffffffffffff errno=61 cover=1276 #0 [900436ms] -> socketpair(0x18, 0x0, 0xffffffff, 0x20006ec0) #0 [900450ms] <- socketpair=0xffffffffffffffff errno=97 cover=1605 #0 [900451ms] -> write$P9_RREADDIR(0x5, 0x20006f00, 0x52) #0 [900451ms] <- write$P9_RREADDIR=0xffffffffffffffff errno=9 cover=64 2021/11/10 22:34:59 result hanged=false: 2021/11/10 22:34:59 added new input for call #10 linkat to corpus: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x49, 0x29, 0x1, {0x7, [{{0x0, 0x0, 0x1}, 0x1ff, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x5}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000001100), &(0x7f0000001140), 0x2, 0x0) geteuid() setxattr$security_capability(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0, 0x4) symlinkat(&(0x7f0000001300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001340)='./file0\x00') pipe2(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREADDIR(r0, 0x0, 0x0) pipe2(&(0x7f0000001400)={0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', 0x5, 0x2, &(0x7f0000001580)=[{&(0x7f0000001500)="0dd5946e44fb5982370068e24443ef416d748ef89214935b63d1", 0x1a, 0x5}, {&(0x7f0000001540), 0x0, 0x6}], 0x401, &(0x7f00000015c0)={[{@fat=@showexec}], [{@hash}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, '],\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise_type}, {@hash}, {@audit}]}) linkat(r1, &(0x7f0000001440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001680)='./file0/file0\x00', 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000016c0)) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) removexattr(&(0x7f0000006e40)='./file0\x00', &(0x7f0000006e80)=@known='security.apparmor\x00') socketpair(0x18, 0x0, 0xffffffff, &(0x7f0000006ec0)) write$P9_RREADDIR(r1, &(0x7f0000006f00)={0x52, 0x29, 0x0, {0x80000000, [{{}, 0x0, 0x7, 0x7, './file0'}, {{0x20, 0x1, 0x1}, 0x7ff, 0x11, 0x10, './file0/../file0'}]}}, 0x52) 22:34:59 executing program 0: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x49, 0x29, 0x1, {0x7, [{{0x0, 0x0, 0x1}, 0x1ff, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x5}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000001100), &(0x7f0000001140), 0x2, 0x0) geteuid() setxattr$security_capability(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0, 0x4) symlinkat(&(0x7f0000001300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001340)='./file0\x00') pipe2(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREADDIR(r0, 0x0, 0x0) pipe2(&(0x7f0000001400)={0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', 0x5, 0x2, &(0x7f0000001580)=[{&(0x7f0000001500)="0dd5946e44fb5982370068e24443ef416d748ef89214935b63d1", 0x1a, 0x5}, {&(0x7f0000001540), 0x0, 0x6}], 0x401, &(0x7f00000015c0)={[{@fat=@showexec}], [{@hash}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, '],\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise_type}, {@hash}, {@audit}]}) linkat(r1, &(0x7f0000001440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001680)='./file0/file0\x00', 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000016c0)) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) removexattr(&(0x7f0000006e40)='./file0\x00', &(0x7f0000006e80)=@known='security.apparmor\x00') socketpair(0x18, 0x0, 0xffffffff, &(0x7f0000006ec0)) write$P9_RREADDIR(r1, &(0x7f0000006f00)={0x52, 0x29, 0x0, {0x80000000, [{{}, 0x0, 0x7, 0x7, './file0'}, {{0x20, 0x1, 0x1}, 0x7ff, 0x11, 0x10, './file0/../file0'}]}}, 0x52) 2021/11/10 22:34:59 #0: triaging type=7 2021/11/10 22:34:59 triaging input for call #9 syz_mount_image$vfat (new signal=1) [900494ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111318 #0 [900511ms] -> write$P9_RREADDIR(0xffffffffffffffff, 0x20000000, 0x49) #0 [900511ms] <- write$P9_RREADDIR=0xffffffffffffffff errno=9 cover=47 #0 [900512ms] -> readlinkat(0xffffffffffffffff, 0x0, 0x200000c0, 0x1000) #0 [900512ms] <- readlinkat=0xffffffffffffffff errno=14 cover=593 #0 [900513ms] -> setxattr$trusted_overlay_opaque(0x0, 0x20001100, 0x20001140, 0x2, 0x0) #0 [900513ms] <- setxattr$trusted_overlay_opaque=0xffffffffffffffff errno=14 cover=604 #0 [900513ms] -> geteuid() #0 [900513ms] <- geteuid=0x0 errno=14 cover=43 #0 [900514ms] -> setxattr$security_capability(0x20001240, 0x0, 0x0, 0x0, 0x4) #0 [900514ms] <- setxattr$security_capability=0xffffffffffffffff errno=2 cover=960 #0 [900519ms] -> symlinkat(0x20001300, 0xffffffffffffffff, 0x20001340) #0 [900519ms] <- symlinkat=0xffffffffffffffff errno=9 cover=530 #0 [900519ms] -> pipe2(0x20001380, 0x800) #0 [900520ms] <- pipe2=0x0 errno=14 cover=1199 #0 [900520ms] -> write$P9_RREADDIR(0x4, 0x0, 0x0) #0 [900520ms] <- write$P9_RREADDIR=0x0 errno=14 cover=152 #0 [900520ms] -> pipe2(0x20001400, 0x0) #0 [900520ms] <- pipe2=0x0 errno=14 cover=1147 #0 [900520ms] -> syz_mount_image$vfat(0x20001480, 0x200014c0, 0x5, 0x2, 0x20001580, 0x401, 0x200015c0) [ 959.714245] FAT-fs (loop0): Unrecognized mount option "hash" or missing value syz_mount_image: size=5 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=1025 opts='showexec,hash,fscontext=staff_u,dont_appraise,obj_role=],' syz_mount_image > mount error: 22 #0 [900531ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=24865 #0 [900533ms] -> linkat(0x5, 0x20001440, 0xffffffffffffffff, 0x20001680, 0x200) #0 [900533ms] <- linkat=0xffffffffffffffff errno=22 cover=35 #0 [900533ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x200016c0) #0 [900535ms] <- socketpair$unix=0x0 errno=14 cover=2985 #0 [900535ms] -> bind$unix(0xffffffffffffffff, 0x0, 0x0) #0 [900535ms] <- bind$unix=0xffffffffffffffff errno=9 cover=48 #0 [900535ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [900535ms] <- socket$inet_udplite=0x9 errno=14 cover=1637 #0 [900536ms] -> removexattr(0x20006e40, 0x20006e80) #0 [900536ms] <- removexattr=0xffffffffffffffff errno=61 cover=1252 #0 [900536ms] -> socketpair(0x18, 0x0, 0xffffffff, 0x20006ec0) #0 [900549ms] <- socketpair=0xffffffffffffffff errno=97 cover=1699 #0 [900549ms] -> write$P9_RREADDIR(0x5, 0x20006f00, 0x52) #0 [900549ms] <- write$P9_RREADDIR=0xffffffffffffffff errno=9 cover=64 22:34:59 executing program 0: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x49, 0x29, 0x1, {0x7, [{{0x0, 0x0, 0x1}, 0x1ff, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x5}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000001100), &(0x7f0000001140), 0x2, 0x0) geteuid() setxattr$security_capability(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0, 0x4) symlinkat(&(0x7f0000001300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001340)='./file0\x00') pipe2(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREADDIR(r0, 0x0, 0x0) pipe2(&(0x7f0000001400)={0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', 0x5, 0x2, &(0x7f0000001580)=[{&(0x7f0000001500)="0dd5946e44fb5982370068e24443ef416d748ef89214935b63d1", 0x1a, 0x5}, {&(0x7f0000001540), 0x0, 0x6}], 0x401, &(0x7f00000015c0)={[{@fat=@showexec}], [{@hash}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, '],\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise_type}, {@hash}, {@audit}]}) linkat(r1, &(0x7f0000001440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001680)='./file0/file0\x00', 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000016c0)) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) removexattr(&(0x7f0000006e40)='./file0\x00', &(0x7f0000006e80)=@known='security.apparmor\x00') socketpair(0x18, 0x0, 0xffffffff, &(0x7f0000006ec0)) write$P9_RREADDIR(r1, &(0x7f0000006f00)={0x52, 0x29, 0x0, {0x80000000, [{{}, 0x0, 0x7, 0x7, './file0'}, {{0x20, 0x1, 0x1}, 0x7ff, 0x11, 0x10, './file0/../file0'}]}}, 0x52) 2021/11/10 22:34:59 result hanged=false: [900593ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111320 #0 [900612ms] -> write$P9_RREADDIR(0xffffffffffffffff, 0x20000000, 0x49) #0 [900612ms] <- write$P9_RREADDIR=0xffffffffffffffff errno=9 cover=47 #0 [900612ms] -> readlinkat(0xffffffffffffffff, 0x0, 0x200000c0, 0x1000) #0 [900612ms] <- readlinkat=0xffffffffffffffff errno=14 cover=604 #0 [900613ms] -> setxattr$trusted_overlay_opaque(0x0, 0x20001100, 0x20001140, 0x2, 0x0) #0 [900614ms] <- setxattr$trusted_overlay_opaque=0xffffffffffffffff errno=14 cover=635 #0 [900614ms] -> geteuid() #0 [900614ms] <- geteuid=0x0 errno=14 cover=43 #0 [900614ms] -> setxattr$security_capability(0x20001240, 0x0, 0x0, 0x0, 0x4) #0 [900614ms] <- setxattr$security_capability=0xffffffffffffffff errno=2 cover=913 #0 [900615ms] -> symlinkat(0x20001300, 0xffffffffffffffff, 0x20001340) #0 [900615ms] <- symlinkat=0xffffffffffffffff errno=9 cover=527 #0 [900615ms] -> pipe2(0x20001380, 0x800) #0 [900615ms] <- pipe2=0x0 errno=14 cover=1198 #0 [900616ms] -> write$P9_RREADDIR(0x4, 0x0, 0x0) #0 [900616ms] <- write$P9_RREADDIR=0x0 errno=14 cover=152 #0 [900616ms] -> pipe2(0x20001400, 0x0) #0 [900617ms] <- pipe2=0x0 errno=14 cover=1251 #0 [900618ms] -> syz_mount_image$vfat(0x20001480, 0x200014c0, 0x5, 0x2, 0x20001580, 0x401, 0x200015c0) syz_mount_image: size=5 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=1025 opts='showexec,hash,fscontext=staff_u,dont_appraise,obj_role=],' [ 959.811315] FAT-fs (loop0): Unrecognized mount option "hash" or missing value syz_mount_image > mount error: 22 #0 [900628ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=24908 #0 [900634ms] -> linkat(0x5, 0x20001440, 0xffffffffffffffff, 0x20001680, 0x200) #0 [900634ms] <- linkat=0xffffffffffffffff errno=22 cover=35 #0 [900634ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x200016c0) #0 [900635ms] <- socketpair$unix=0x0 errno=14 cover=2941 #0 [900636ms] -> bind$unix(0xffffffffffffffff, 0x0, 0x0) #0 [900636ms] <- bind$unix=0xffffffffffffffff errno=9 cover=48 #0 [900636ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [900637ms] <- socket$inet_udplite=0x9 errno=14 cover=1673 #0 [900639ms] -> removexattr(0x20006e40, 0x20006e80) #0 [900639ms] <- removexattr=0xffffffffffffffff errno=61 cover=3230 #0 [900640ms] -> socketpair(0x18, 0x0, 0xffffffff, 0x20006ec0) #0 [900652ms] <- socketpair=0xffffffffffffffff errno=97 cover=1753 #0 [900653ms] -> write$P9_RREADDIR(0x5, 0x20006f00, 0x52) #0 [900653ms] <- write$P9_RREADDIR=0xffffffffffffffff errno=9 cover=64 22:34:59 executing program 0: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x49, 0x29, 0x1, {0x7, [{{0x0, 0x0, 0x1}, 0x1ff, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x5}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000001100), &(0x7f0000001140), 0x2, 0x0) geteuid() setxattr$security_capability(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0, 0x4) symlinkat(&(0x7f0000001300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001340)='./file0\x00') pipe2(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREADDIR(r0, 0x0, 0x0) pipe2(&(0x7f0000001400)={0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', 0x5, 0x2, &(0x7f0000001580)=[{&(0x7f0000001500)="0dd5946e44fb5982370068e24443ef416d748ef89214935b63d1", 0x1a, 0x5}, {&(0x7f0000001540), 0x0, 0x6}], 0x401, &(0x7f00000015c0)={[{@fat=@showexec}], [{@hash}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, '],\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise_type}, {@hash}, {@audit}]}) linkat(r1, &(0x7f0000001440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001680)='./file0/file0\x00', 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000016c0)) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) removexattr(&(0x7f0000006e40)='./file0\x00', &(0x7f0000006e80)=@known='security.apparmor\x00') socketpair(0x18, 0x0, 0xffffffff, &(0x7f0000006ec0)) write$P9_RREADDIR(r1, &(0x7f0000006f00)={0x52, 0x29, 0x0, {0x80000000, [{{}, 0x0, 0x7, 0x7, './file0'}, {{0x20, 0x1, 0x1}, 0x7ff, 0x11, 0x10, './file0/../file0'}]}}, 0x52) 2021/11/10 22:34:59 result hanged=false: [900701ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111322 #0 [900723ms] -> write$P9_RREADDIR(0xffffffffffffffff, 0x20000000, 0x49) #0 [900724ms] <- write$P9_RREADDIR=0xffffffffffffffff errno=9 cover=47 #0 [900725ms] -> readlinkat(0xffffffffffffffff, 0x0, 0x200000c0, 0x1000) #0 [900725ms] <- readlinkat=0xffffffffffffffff errno=14 cover=593 #0 [900726ms] -> setxattr$trusted_overlay_opaque(0x0, 0x20001100, 0x20001140, 0x2, 0x0) #0 [900726ms] <- setxattr$trusted_overlay_opaque=0xffffffffffffffff errno=14 cover=603 #0 [900726ms] -> geteuid() #0 [900726ms] <- geteuid=0x0 errno=14 cover=43 #0 [900731ms] -> setxattr$security_capability(0x20001240, 0x0, 0x0, 0x0, 0x4) #0 [900732ms] <- setxattr$security_capability=0xffffffffffffffff errno=2 cover=996 #0 [900732ms] -> symlinkat(0x20001300, 0xffffffffffffffff, 0x20001340) #0 [900732ms] <- symlinkat=0xffffffffffffffff errno=9 cover=560 #0 [900732ms] -> pipe2(0x20001380, 0x800) #0 [900733ms] <- pipe2=0x0 errno=14 cover=1104 #0 [900733ms] -> write$P9_RREADDIR(0x4, 0x0, 0x0) #0 [900733ms] <- write$P9_RREADDIR=0x0 errno=14 cover=152 #0 [900733ms] -> pipe2(0x20001400, 0x0) #0 [900734ms] <- pipe2=0x0 errno=14 cover=1157 #0 [900739ms] -> syz_mount_image$vfat(0x20001480, 0x200014c0, 0x5, 0x2, 0x20001580, 0x401, 0x200015c0) syz_mount_image: size=5 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=1025 opts='showexec,hash,fscontext=staff_u,dont_appraise,obj_role=],' [ 959.933481] FAT-fs (loop0): Unrecognized mount option "hash" or missing value syz_mount_image > mount error: 22 #0 [900752ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=22 cover=25008 #0 [900755ms] -> linkat(0x5, 0x20001440, 0xffffffffffffffff, 0x20001680, 0x200) #0 [900756ms] <- linkat=0xffffffffffffffff errno=22 cover=35 #0 [900757ms] -> socketpair$unix(0x1, 0x5, 0x0, 0x200016c0) #0 [900757ms] <- socketpair$unix=0x0 errno=14 cover=2975 #0 [900760ms] -> bind$unix(0xffffffffffffffff, 0x0, 0x0) #0 [900760ms] <- bind$unix=0xffffffffffffffff errno=9 cover=48 #0 [900760ms] -> socket$inet_udplite(0x2, 0x2, 0x88) #0 [900761ms] <- socket$inet_udplite=0x9 errno=14 cover=1735 #0 [900762ms] -> removexattr(0x20006e40, 0x20006e80) #0 [900762ms] <- removexattr=0xffffffffffffffff errno=61 cover=1260 #0 [900762ms] -> socketpair(0x18, 0x0, 0xffffffff, 0x20006ec0) #0 [900777ms] <- socketpair=0xffffffffffffffff errno=97 cover=1655 #0 [900778ms] -> write$P9_RREADDIR(0x5, 0x20006f00, 0x52) #0 [900778ms] <- write$P9_RREADDIR=0xffffffffffffffff errno=9 cover=64 2021/11/10 22:34:59 result hanged=false: 2021/11/10 22:34:59 added new input for call #9 syz_mount_image$vfat to corpus: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x49, 0x29, 0x1, {0x7, [{{0x0, 0x0, 0x1}, 0x1ff, 0x0, 0x7, './file0'}, {{0x0, 0x3, 0x5}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000001100), &(0x7f0000001140), 0x2, 0x0) geteuid() setxattr$security_capability(&(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0, 0x4) symlinkat(&(0x7f0000001300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001340)='./file0\x00') pipe2(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREADDIR(r0, 0x0, 0x0) pipe2(&(0x7f0000001400)={0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', 0x5, 0x2, &(0x7f0000001580)=[{&(0x7f0000001500)="0dd5946e44fb5982370068e24443ef416d748ef89214935b63d1", 0x1a, 0x5}, {&(0x7f0000001540), 0x0, 0x6}], 0x401, &(0x7f00000015c0)={[{@fat=@showexec}], [{@hash}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, '],\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise_type}, {@hash}, {@audit}]}) linkat(r1, &(0x7f0000001440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001680)='./file0/file0\x00', 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000016c0)) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) removexattr(&(0x7f0000006e40)='./file0\x00', &(0x7f0000006e80)=@known='security.apparmor\x00') socketpair(0x18, 0x0, 0xffffffff, &(0x7f0000006ec0)) write$P9_RREADDIR(r1, &(0x7f0000006f00)={0x52, 0x29, 0x0, {0x80000000, [{{}, 0x0, 0x7, 0x7, './file0'}, {{0x20, 0x1, 0x1}, 0x7ff, 0x11, 0x10, './file0/../file0'}]}}, 0x52) 22:34:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) [900829ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111324 #0 [900847ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [900848ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6347 #0 [900850ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEV(0x4, 0x0, 0x0) #0 [900850ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEV=0xffffffffffffffff errno=14 cover=431 #0 [900850ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [900851ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5526 #0 [900856ms] -> syz_genetlink_get_family_id$ieee802154(0x20000700, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [900856ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5514 #0 [900858ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [900858ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5445 #0 [900859ms] -> sendmsg$IEEE802154_SET_MACPARAMS(0x6, 0x20000cc0, 0x0) #0 [900859ms] <- sendmsg$IEEE802154_SET_MACPARAMS=0x14 errno=14 cover=1765 enabling collider #0 [900860ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [900860ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5466 #0 [900861ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEV(0x4, 0x0, 0x0) #0 [900861ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEV=0xffffffffffffffff errno=14 cover=432 pthread_create failed (errno 11) 22:34:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) 2021/11/10 22:34:59 result hanged=false: 2021/11/10 22:34:59 #0: triaging type=7 2021/11/10 22:34:59 triaging input for call #3 syz_genetlink_get_family_id$ieee802154 (new signal=1) iptable filter/2: resetting iptable mangle/2: resetting [900939ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111426 #0 [900958ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [900959ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6350 #0 [900960ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEV(0x4, 0x0, 0x0) #0 [900960ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEV=0xffffffffffffffff errno=14 cover=431 #0 [900962ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [900962ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5635 #0 [900963ms] -> syz_genetlink_get_family_id$ieee802154(0x20000700, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [900964ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5531 #0 [900966ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [900967ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5474 #0 [900968ms] -> sendmsg$IEEE802154_SET_MACPARAMS(0x6, 0x20000cc0, 0x0) #0 [900969ms] <- sendmsg$IEEE802154_SET_MACPARAMS=0x14 errno=14 cover=1772 22:34:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) 2021/11/10 22:34:59 result hanged=false: [901005ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111428 #0 [901022ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [901023ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6256 #0 [901025ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEV(0x4, 0x0, 0x0) #0 [901025ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEV=0xffffffffffffffff errno=14 cover=431 #0 [901025ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [901026ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5499 #0 [901027ms] -> syz_genetlink_get_family_id$ieee802154(0x20000700, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [901027ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=6092 #0 [901028ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [901029ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5499 #0 [901029ms] -> sendmsg$IEEE802154_SET_MACPARAMS(0x6, 0x20000cc0, 0x0) #0 [901030ms] <- sendmsg$IEEE802154_SET_MACPARAMS=0x14 errno=14 cover=1798 22:34:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) 2021/11/10 22:34:59 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [901067ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111430 #0 [901084ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [901085ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6308 #0 [901087ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEV(0x4, 0x0, 0x0) #0 [901089ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEV=0xffffffffffffffff errno=14 cover=431 #0 [901090ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [901091ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5511 #0 [901091ms] -> syz_genetlink_get_family_id$ieee802154(0x20000700, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [901093ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5536 #0 [901094ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [901094ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5365 #0 [901095ms] -> sendmsg$IEEE802154_SET_MACPARAMS(0x6, 0x20000cc0, 0x0) #0 [901095ms] <- sendmsg$IEEE802154_SET_MACPARAMS=0x14 errno=14 cover=1751 2021/11/10 22:34:59 result hanged=false: 2021/11/10 22:34:59 added new input for call #3 syz_genetlink_get_family_id$ieee802154 to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) 22:34:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) 2021/11/10 22:34:59 #0: triaging type=7 2021/11/10 22:34:59 triaging input for call #0 syz_init_net_socket$nl_generic (new signal=2) iptable filter/2: resetting iptable mangle/2: resetting [901141ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111432 #0 [901158ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [901159ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6271 #0 [901160ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEV(0x4, 0x0, 0x0) #0 [901160ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEV=0xffffffffffffffff errno=14 cover=431 #0 [901160ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [901161ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5625 #0 [901162ms] -> syz_genetlink_get_family_id$ieee802154(0x20000700, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [901163ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5509 #0 [901164ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [901165ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5474 #0 [901166ms] -> sendmsg$IEEE802154_SET_MACPARAMS(0x6, 0x20000cc0, 0x0) #0 [901166ms] <- sendmsg$IEEE802154_SET_MACPARAMS=0x14 errno=14 cover=1755 2021/11/10 22:34:59 result hanged=false: 22:34:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) iptable filter/2: resetting iptable mangle/2: resetting [901212ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111434 #0 [901230ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [901233ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6279 #0 [901234ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEV(0x4, 0x0, 0x0) #0 [901234ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEV=0xffffffffffffffff errno=14 cover=431 #0 [901235ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [901235ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5472 #0 [901236ms] -> syz_genetlink_get_family_id$ieee802154(0x20000700, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [901238ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5510 #0 [901242ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [901244ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5551 #0 [901245ms] -> sendmsg$IEEE802154_SET_MACPARAMS(0x6, 0x20000cc0, 0x0) #0 [901245ms] <- sendmsg$IEEE802154_SET_MACPARAMS=0x14 errno=14 cover=1790 22:34:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) 2021/11/10 22:34:59 result hanged=false: [901284ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111436 #0 [901307ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [901308ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6366 #0 [901311ms] -> sendmsg$IEEE802154_LLSEC_LIST_DEV(0x4, 0x0, 0x0) #0 [901311ms] <- sendmsg$IEEE802154_LLSEC_LIST_DEV=0xffffffffffffffff errno=14 cover=431 #0 [901311ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [901312ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5533 #0 [901313ms] -> syz_genetlink_get_family_id$ieee802154(0x20000700, 0x5) syz_genetlink_get_family_id(802.15.4 MAC, 5) #0 [901313ms] <- syz_genetlink_get_family_id$ieee802154=0x18 errno=14 cover=5414 #0 [901315ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [901315ms] <- syz_init_net_socket$nl_generic=0x6 errno=14 cover=5412 #0 [901316ms] -> sendmsg$IEEE802154_SET_MACPARAMS(0x6, 0x20000cc0, 0x0) #0 [901316ms] <- sendmsg$IEEE802154_SET_MACPARAMS=0x14 errno=14 cover=1777 2021/11/10 22:34:59 result hanged=false: 2021/11/10 22:34:59 added new input for call #0 syz_init_net_socket$nl_generic to corpus: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, r2, 0x1}, 0x14}}, 0x0) 22:34:59 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x38, 0x0, &(0x7f0000001d80)) [901360ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111438 #0 [901392ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [901392ms] <- close_range=0x0 errno=14 cover=1319 #0 [901393ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [901393ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1701 #0 [901394ms] -> getsockopt$IP_SET_OP_VERSION(0x3, 0x1, 0x38, 0x0, 0x20001d80) #0 [901394ms] <- getsockopt$IP_SET_OP_VERSION=0x0 errno=14 cover=95 enabling collider #0 [901394ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [901394ms] <- close_range=0x0 errno=14 cover=51 #0 [901394ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [901394ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1677 pthread_create failed (errno 11) 22:35:00 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x38, 0x0, &(0x7f0000001d80)) 2021/11/10 22:35:00 result hanged=false: 2021/11/10 22:35:00 #0: triaging type=7 2021/11/10 22:35:00 triaging input for call #2 getsockopt$IP_SET_OP_VERSION (new signal=4) [901501ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111540 #0 [901548ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [901548ms] <- close_range=0x0 errno=14 cover=1333 #0 [901550ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [901550ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1731 #0 [901551ms] -> getsockopt$IP_SET_OP_VERSION(0x3, 0x1, 0x38, 0x0, 0x20001d80) #0 [901551ms] <- getsockopt$IP_SET_OP_VERSION=0x0 errno=14 cover=95 22:35:00 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x38, 0x0, &(0x7f0000001d80)) 2021/11/10 22:35:00 result hanged=false: [901589ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111542 #0 [901608ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [901610ms] <- close_range=0x0 errno=14 cover=1374 #0 [901614ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [901614ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1741 #0 [901615ms] -> getsockopt$IP_SET_OP_VERSION(0x3, 0x1, 0x38, 0x0, 0x20001d80) #0 [901615ms] <- getsockopt$IP_SET_OP_VERSION=0x0 errno=14 cover=95 2021/11/10 22:35:00 result hanged=false: 22:35:00 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x38, 0x0, &(0x7f0000001d80)) [901652ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111544 #0 [901674ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [901676ms] <- close_range=0x0 errno=14 cover=1286 #0 [901677ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [901678ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1709 #0 [901678ms] -> getsockopt$IP_SET_OP_VERSION(0x3, 0x1, 0x38, 0x0, 0x20001d80) #0 [901678ms] <- getsockopt$IP_SET_OP_VERSION=0x0 errno=14 cover=95 2021/11/10 22:35:00 result hanged=false: 2021/11/10 22:35:00 added new input for call #2 getsockopt$IP_SET_OP_VERSION to corpus: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x38, 0x0, &(0x7f0000001d80)) 22:35:00 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0) 2021/11/10 22:35:00 poll: candidates=8 inputs=0 signal=0 [901719ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111546 #0 [901737ms] -> shmat(0x0, 0x20ffc000, 0x0) #0 [901737ms] <- shmat=0xffffffffffffffff errno=22 cover=945 enabling collider #0 [901738ms] -> shmat(0x0, 0x20ffc000, 0x0) #0 [901738ms] <- shmat=0xffffffffffffffff errno=22 cover=934 22:35:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setregid(0x0, 0xee00) 2021/11/10 22:35:00 result hanged=false: [901775ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111548 #0 [901799ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [901804ms] <- perf_event_open=0x3 errno=14 cover=15286 #0 [901805ms] -> setregid(0x0, 0xee00) #0 [901805ms] <- setregid=0x0 errno=14 cover=488 enabling collider #0 [901817ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [901817ms] <- perf_event_open=0x3 errno=14 cover=12033 #0 [901819ms] -> setregid(0x0, 0xee00) #0 [901819ms] <- setregid=0x0 errno=14 cover=344 22:35:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setregid(0x0, 0xee00) 2021/11/10 22:35:00 result hanged=false: 2021/11/10 22:35:00 #0: triaging type=7 2021/11/10 22:35:00 triaging input for call #1 setregid (new signal=5) [901866ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111550 #0 [901886ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [901891ms] <- perf_event_open=0x3 errno=14 cover=10278 #0 [901893ms] -> setregid(0x0, 0xee00) #0 [901893ms] <- setregid=0x0 errno=14 cover=401 22:35:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setregid(0x0, 0xee00) 2021/11/10 22:35:00 result hanged=false: [901938ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111552 #0 [901957ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [901958ms] <- perf_event_open=0x3 errno=14 cover=9930 #0 [901960ms] -> setregid(0x0, 0xee00) #0 [901960ms] <- setregid=0x0 errno=14 cover=477 22:35:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setregid(0x0, 0xee00) 2021/11/10 22:35:00 result hanged=false: [902006ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111554 #0 [902027ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [902028ms] <- perf_event_open=0x3 errno=14 cover=9994 #0 [902031ms] -> setregid(0x0, 0xee00) #0 [902032ms] <- setregid=0x0 errno=14 cover=401 2021/11/10 22:35:00 result hanged=false: 2021/11/10 22:35:00 added new input for call #1 setregid to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setregid(0x0, 0xee00) 22:35:00 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) [902078ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111556 #0 [902103ms] -> openat$zero(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [902103ms] <- openat$zero=0x3 errno=14 cover=1096 enabling collider #0 [902104ms] -> openat$zero(0xffffffffffffff9c, 0x20000080, 0x0, 0x0) #0 [902104ms] <- openat$zero=0x3 errno=14 cover=1062 22:35:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000140)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10000000}) 2021/11/10 22:35:00 result hanged=false: [902140ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111558 #0 [902159ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [902163ms] <- openat=0x3 errno=14 cover=7351 #0 [902165ms] -> clone3(0x20000140, 0x58) #0 [902165ms] <- clone3=0xffffffffffffffff errno=11 cover=4412 #0 [902166ms] -> ioctl$EXT4_IOC_GROUP_ADD(0x3, 0x40286608, 0x20000040) [ 961.353428] EXT4-fs warning (device sda): verify_group_input:131: Cannot add at group 268435456 (only 16 groups) #0 [902179ms] <- ioctl$EXT4_IOC_GROUP_ADD=0xffffffffffffffff errno=22 cover=24061 enabling collider #0 [902180ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [902180ms] <- openat=0x3 errno=14 cover=1206 #0 [902182ms] -> clone3(0x20000140, 0x58) #0 [902184ms] <- clone3=0xffffffffffffffff errno=11 cover=4248 pthread_create failed (errno 11) 2021/11/10 22:35:00 result hanged=false: 2021/11/10 22:35:00 #0: triaging type=7 2021/11/10 22:35:00 triaging input for call #2 ioctl$EXT4_IOC_GROUP_ADD (new signal=2) 22:35:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000140)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10000000}) [902256ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111662 #0 [902273ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) [ 961.465688] EXT4-fs warning (device sda): verify_group_input:131: Cannot add at group 268435456 (only 16 groups) #0 [902277ms] <- openat=0x3 errno=14 cover=7389 #0 [902278ms] -> clone3(0x20000140, 0x58) #0 [902278ms] <- clone3=0xffffffffffffffff errno=11 cover=4386 #0 [902279ms] -> ioctl$EXT4_IOC_GROUP_ADD(0x3, 0x40286608, 0x20000040) #0 [902291ms] <- ioctl$EXT4_IOC_GROUP_ADD=0xffffffffffffffff errno=22 cover=20923 2021/11/10 22:35:00 result hanged=false: 22:35:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000140)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10000000}) [902337ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111665 #0 [902353ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [902357ms] <- openat=0x3 errno=14 cover=7426 #0 [902358ms] -> clone3(0x20000140, 0x58) #0 [902359ms] <- clone3=0xffffffffffffffff errno=11 cover=4345 #0 [902359ms] -> ioctl$EXT4_IOC_GROUP_ADD(0x3, 0x40286608, 0x20000040) [ 961.546305] EXT4-fs warning (device sda): verify_group_input:131: Cannot add at group 268435456 (only 16 groups) #0 [902379ms] <- ioctl$EXT4_IOC_GROUP_ADD=0xffffffffffffffff errno=22 cover=20562 22:35:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000140)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10000000}) 2021/11/10 22:35:00 result hanged=false: [902420ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111668 #0 [902440ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [902443ms] <- openat=0x3 errno=14 cover=7388 #0 [902445ms] -> clone3(0x20000140, 0x58) #0 [902446ms] <- clone3=0xffffffffffffffff errno=11 cover=4443 [ 961.633542] EXT4-fs warning (device sda): verify_group_input:131: Cannot add at group 268435456 (only 16 groups) #0 [902446ms] -> ioctl$EXT4_IOC_GROUP_ADD(0x3, 0x40286608, 0x20000040) #0 [902459ms] <- ioctl$EXT4_IOC_GROUP_ADD=0xffffffffffffffff errno=22 cover=20388 2021/11/10 22:35:01 result hanged=false: 2021/11/10 22:35:01 added new input for call #2 ioctl$EXT4_IOC_GROUP_ADD to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000140)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10000000}) 2021/11/10 22:35:01 #0: triaging type=7 2021/11/10 22:35:01 triaging input for call #0 openat (new signal=1) 22:35:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000140)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10000000}) [902513ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111671 #0 [902536ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [902540ms] <- openat=0x3 errno=14 cover=7424 #0 [902542ms] -> clone3(0x20000140, 0x58) #0 [902543ms] <- clone3=0xffffffffffffffff errno=11 cover=4341 #0 [902543ms] -> ioctl$EXT4_IOC_GROUP_ADD(0x3, 0x40286608, 0x20000040) [ 961.730195] EXT4-fs warning (device sda): verify_group_input:131: Cannot add at group 268435456 (only 16 groups) #0 [902555ms] <- ioctl$EXT4_IOC_GROUP_ADD=0xffffffffffffffff errno=22 cover=21816 22:35:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000140)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10000000}) 2021/11/10 22:35:01 result hanged=false: [902593ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111674 #0 [902604ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [902607ms] <- openat=0x3 errno=14 cover=7595 #0 [902607ms] -> clone3(0x20000140, 0x58) #0 [902608ms] <- clone3=0xffffffffffffffff errno=11 cover=4501 [ 961.794905] EXT4-fs warning (device sda): verify_group_input:131: Cannot add at group 268435456 (only 16 groups) #0 [902608ms] -> ioctl$EXT4_IOC_GROUP_ADD(0x3, 0x40286608, 0x20000040) #0 [902623ms] <- ioctl$EXT4_IOC_GROUP_ADD=0xffffffffffffffff errno=22 cover=20800 2021/11/10 22:35:01 result hanged=false: 22:35:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000140)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10000000}) [902660ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111677 #0 [902674ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [902677ms] <- openat=0x3 errno=14 cover=7513 #0 [902678ms] -> clone3(0x20000140, 0x58) #0 [902678ms] <- clone3=0xffffffffffffffff errno=11 cover=4335 #0 [902678ms] -> ioctl$EXT4_IOC_GROUP_ADD(0x3, 0x40286608, 0x20000040) [ 961.865449] EXT4-fs warning (device sda): verify_group_input:131: Cannot add at group 268435456 (only 16 groups) #0 [902689ms] <- ioctl$EXT4_IOC_GROUP_ADD=0xffffffffffffffff errno=22 cover=21050 2021/11/10 22:35:01 result hanged=false: 2021/11/10 22:35:01 added new input for call #0 openat to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000140)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10000000}) 22:35:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000002bc0)={&(0x7f0000000780)=@phonet, 0x80, &(0x7f0000002ac0)=[{0x0}, {0x0}], 0x2, &(0x7f0000002b40)=[@timestamping={{0x14}}, @txtime={{0x18}}], 0x30}, 0x0) [902728ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111680 #0 [902747ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [902748ms] <- socket$inet_udp=0x3 errno=14 cover=1728 #0 [902748ms] -> sendmsg$sock(0x3, 0x20002bc0, 0x0) #0 [902748ms] <- sendmsg$sock=0xffffffffffffffff errno=97 cover=567 enabling collider #0 [902749ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [902749ms] <- socket$inet_udp=0x3 errno=14 cover=1729 2021/11/10 22:35:01 result hanged=false: 2021/11/10 22:35:01 #0: triaging type=7 2021/11/10 22:35:01 triaging input for call #1 sendmsg$sock (new signal=1) 22:35:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000002bc0)={&(0x7f0000000780)=@phonet, 0x80, &(0x7f0000002ac0)=[{0x0}, {0x0}], 0x2, &(0x7f0000002b40)=[@timestamping={{0x14}}, @txtime={{0x18}}], 0x30}, 0x0) [902781ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111682 #0 [902794ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [902795ms] <- socket$inet_udp=0x3 errno=14 cover=1706 #0 [902795ms] -> sendmsg$sock(0x3, 0x20002bc0, 0x0) #0 [902795ms] <- sendmsg$sock=0xffffffffffffffff errno=97 cover=567 22:35:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000002bc0)={&(0x7f0000000780)=@phonet, 0x80, &(0x7f0000002ac0)=[{0x0}, {0x0}], 0x2, &(0x7f0000002b40)=[@timestamping={{0x14}}, @txtime={{0x18}}], 0x30}, 0x0) 2021/11/10 22:35:01 result hanged=false: [902819ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111684 #0 [902831ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [902831ms] <- socket$inet_udp=0x3 errno=14 cover=1728 #0 [902832ms] -> sendmsg$sock(0x3, 0x20002bc0, 0x0) #0 [902832ms] <- sendmsg$sock=0xffffffffffffffff errno=97 cover=567 22:35:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000002bc0)={&(0x7f0000000780)=@phonet, 0x80, &(0x7f0000002ac0)=[{0x0}, {0x0}], 0x2, &(0x7f0000002b40)=[@timestamping={{0x14}}, @txtime={{0x18}}], 0x30}, 0x0) 2021/11/10 22:35:01 result hanged=false: [902865ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111686 #0 [902878ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [902878ms] <- socket$inet_udp=0x3 errno=14 cover=1706 #0 [902879ms] -> sendmsg$sock(0x3, 0x20002bc0, 0x0) #0 [902879ms] <- sendmsg$sock=0xffffffffffffffff errno=97 cover=568 2021/11/10 22:35:01 result hanged=false: 2021/11/10 22:35:01 added new input for call #1 sendmsg$sock to corpus: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000002bc0)={&(0x7f0000000780)=@phonet, 0x80, &(0x7f0000002ac0)=[{0x0}, {0x0}], 0x2, &(0x7f0000002b40)=[@timestamping={{0x14}}, @txtime={{0x18}}], 0x30}, 0x0) 22:35:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={0x0}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001b40), r1) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0}}, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [902916ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111688 #0 [902931ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [902931ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6276 #0 [902932ms] -> syz_genetlink_get_family_id$ieee802154(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(802.15.4 MAC, -1) netlink: failed to get family id for 802.15.4 MAC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [902932ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=2 cover=7772 #0 [902932ms] -> sendmsg$IEEE802154_ADD_IFACE(0x4, 0x20000100, 0x0) #0 [902933ms] <- sendmsg$IEEE802154_ADD_IFACE=0x0 errno=14 cover=956 #0 [902933ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [902933ms] <- syz_init_net_socket$nl_generic=0x5 errno=14 cover=5479 #0 [902933ms] -> syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [902933ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=14 cover=2751 #0 [902933ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [902934ms] <- syz_init_net_socket$nl_generic=0x7 errno=14 cover=5366 #0 [902934ms] -> socket$nl_sock_diag(0x10, 0x3, 0x4) #0 [902934ms] <- socket$nl_sock_diag=0x6 errno=14 cover=1402 #0 [902934ms] -> sendmsg$DCCPDIAG_GETSOCK(0x6, 0x20001880, 0x0) #0 [902934ms] <- sendmsg$DCCPDIAG_GETSOCK=0x0 errno=14 cover=978 #0 [902934ms] -> syz_genetlink_get_family_id$netlbl_unlabel(0x20001b40, 0x5) syz_genetlink_get_family_id(NLBL_UNLBL, 5) #0 [902935ms] <- syz_genetlink_get_family_id$netlbl_unlabel=0x17 errno=14 cover=4151 #0 [902935ms] -> sendmsg$IEEE802154_START_REQ(0x7, 0x20001c40, 0x1) #0 [902935ms] <- sendmsg$IEEE802154_START_REQ=0xffffffffffffffff errno=95 cover=167 #0 [902935ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [902936ms] <- syz_init_net_socket$nl_generic=0x9 errno=14 cover=5424 enabling collider #0 [902936ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [902936ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5420 #0 [902937ms] -> syz_genetlink_get_family_id$ieee802154(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(802.15.4 MAC, -1) netlink: failed to get family id for 802.15.4 MAC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [902938ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=2 cover=6101 pthread_create failed (errno 11) 22:35:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fdatasync(r0) 2021/11/10 22:35:01 result hanged=false: 2021/11/10 22:35:01 poll: candidates=0 inputs=0 signal=0 [903006ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111790 #0 [903022ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [903027ms] <- perf_event_open=0x3 errno=14 cover=10444 #0 [903028ms] -> creat(0x20000040, 0x0) #0 [903030ms] <- creat=0x4 errno=14 cover=7339 #0 [903031ms] -> fdatasync(0x4) #0 [903032ms] <- fdatasync=0x0 errno=14 cover=991 enabling collider #0 [903040ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [903040ms] <- perf_event_open=0x3 errno=14 cover=10445 #0 [903041ms] -> creat(0x20000040, 0x0) #0 [903043ms] <- creat=0x4 errno=14 cover=5619 pthread_create failed (errno 11) 2021/11/10 22:35:01 result hanged=false: 2021/11/10 22:35:01 #0: triaging type=7 22:35:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fdatasync(r0) 2021/11/10 22:35:01 triaging input for call #2 fdatasync (new signal=1) [903116ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111892 #0 [903135ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [903136ms] <- perf_event_open=0x3 errno=14 cover=9940 #0 [903138ms] -> creat(0x20000040, 0x0) #0 [903140ms] <- creat=0x4 errno=14 cover=7360 #0 [903141ms] -> fdatasync(0x4) #0 [903142ms] <- fdatasync=0x0 errno=14 cover=867 2021/11/10 22:35:01 result hanged=false: 22:35:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fdatasync(r0) [903200ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111894 #0 [903219ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [903220ms] <- perf_event_open=0x3 errno=14 cover=11106 #0 [903221ms] -> creat(0x20000040, 0x0) #0 [903223ms] <- creat=0x4 errno=14 cover=7418 #0 [903225ms] -> fdatasync(0x4) #0 [903225ms] <- fdatasync=0x0 errno=14 cover=1078 2021/11/10 22:35:01 result hanged=false: 22:35:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fdatasync(r0) [903275ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111896 #0 [903297ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [903297ms] <- perf_event_open=0x3 errno=14 cover=11860 #0 [903299ms] -> creat(0x20000040, 0x0) #0 [903301ms] <- creat=0x4 errno=14 cover=7393 #0 [903302ms] -> fdatasync(0x4) #0 [903303ms] <- fdatasync=0x0 errno=14 cover=867 2021/11/10 22:35:01 result hanged=false: 2021/11/10 22:35:01 added new input for call #2 fdatasync to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fdatasync(r0) 22:35:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e35383633343136333700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000bdcefad9b4924007bb7e3623d7c96baa010000000c00000000000000e1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}], 0x0, &(0x7f0000000080)={[{@data_journal}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@sb={'sb', 0x3d, 0x400}}, {@nodiscard}]}) [903366ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111898 #0 [903382ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x5, 0x20000200, 0x0, 0x20000080) syz_mount_image: size=262144 segs=5 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts='data=journal,barrier=0x0000000000000009,sb=0x0000000000000400,nodiscard,,errors=continue' [ 962.578415] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 962.583177] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal syz_mount_image > mount error: 22 #0 [903401ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=37661 enabling collider #0 [903405ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x5, 0x20000200, 0x0, 0x20000080) #0 [903407ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=16 cover=8549 2021/11/10 22:35:01 result hanged=false: 2021/11/10 22:35:01 #0: triaging type=7 22:35:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e35383633343136333700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000bdcefad9b4924007bb7e3623d7c96baa010000000c00000000000000e1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}], 0x0, &(0x7f0000000080)={[{@data_journal}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@sb={'sb', 0x3d, 0x400}}, {@nodiscard}]}) 2021/11/10 22:35:01 triaging input for call #0 syz_mount_image$ext4 (new signal=10) [903445ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111900 #0 [903460ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x5, 0x20000200, 0x0, 0x20000080) syz_mount_image: size=262144 segs=5 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts='data=journal,barrier=0x0000000000000009,sb=0x0000000000000400,nodiscard,,errors=continue' [ 962.656149] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 962.659051] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal syz_mount_image > mount error: 22 #0 [903474ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=40600 22:35:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e35383633343136333700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000bdcefad9b4924007bb7e3623d7c96baa010000000c00000000000000e1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}], 0x0, &(0x7f0000000080)={[{@data_journal}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@sb={'sb', 0x3d, 0x400}}, {@nodiscard}]}) 2021/11/10 22:35:02 result hanged=false: [903520ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111902 #0 [903545ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x5, 0x20000200, 0x0, 0x20000080) syz_mount_image: size=262144 segs=5 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts='data=journal,barrier=0x0000000000000009,sb=0x0000000000000400,nodiscard,,errors=continue' [ 962.739475] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 962.741545] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal syz_mount_image > mount error: 22 #0 [903558ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=40182 22:35:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e35383633343136333700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000bdcefad9b4924007bb7e3623d7c96baa010000000c00000000000000e1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}], 0x0, &(0x7f0000000080)={[{@data_journal}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@sb={'sb', 0x3d, 0x400}}, {@nodiscard}]}) 2021/11/10 22:35:02 result hanged=false: [903608ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111904 #0 [903626ms] -> syz_mount_image$ext4(0x20000000, 0x20000100, 0x40000, 0x5, 0x20000200, 0x0, 0x20000080) syz_mount_image: size=262144 segs=5 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts='data=journal,barrier=0x0000000000000009,sb=0x0000000000000400,nodiscard,,errors=continue' [ 962.821016] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 962.827644] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal syz_mount_image > mount error: 22 #0 [903652ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=50615 2021/11/10 22:35:02 result hanged=false: 2021/11/10 22:35:02 added new input for call #0 syz_mount_image$ext4 to corpus: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e35383633343136333700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000bdcefad9b4924007bb7e3623d7c96baa010000000c00000000000000e1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}], 0x0, &(0x7f0000000080)={[{@data_journal}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@sb={'sb', 0x3d, 0x400}}, {@nodiscard}]}) 22:35:02 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sysvipc/msg\x00', 0x0, 0x0) 2021/11/10 22:35:02 poll: candidates=8 inputs=0 signal=0 [903704ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111906 #0 [903726ms] -> openat$procfs(0xffffffffffffff9c, 0x20000600, 0x0, 0x0) #0 [903726ms] <- openat$procfs=0x3 errno=14 cover=1450 enabling collider #0 [903727ms] -> openat$procfs(0xffffffffffffff9c, 0x20000600, 0x0, 0x0) #0 [903727ms] <- openat$procfs=0x3 errno=14 cover=1438 22:35:02 executing program 0: pselect6(0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x2]}, 0x8}) 2021/11/10 22:35:02 result hanged=false: [903769ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 111908 #0 [903786ms] -> pselect6(0x0, 0x0, 0x20000200, 0x20000240, 0x20000280, 0x20000300) enabling collider pthread_create failed (errno 11) 22:35:03 executing program 0: unshare(0x28020600) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) 2021/11/10 22:35:03 result hanged=false: [904971ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112010 #0 [904993ms] -> unshare(0x28020600) #0 [904999ms] <- unshare=0x0 errno=14 cover=26274 #0 [905001ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [905001ms] <- socket$inet6_udp=0x3 errno=14 cover=1717 #0 [905001ms] -> connect$inet6(0x3, 0x20000100, 0x1c) #0 [905001ms] <- connect$inet6=0x0 errno=14 cover=1390 enabling collider #0 [905002ms] -> unshare(0x28020600) #0 [905008ms] <- unshare=0xffffffffffffffff errno=22 cover=29477 #0 [905011ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [905012ms] <- socket$inet6_udp=0x4 errno=14 cover=1749 pthread_create failed (errno 11) 22:35:03 executing program 0: unshare(0x28020600) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) 2021/11/10 22:35:03 result hanged=false: 2021/11/10 22:35:03 #0: triaging type=7 2021/11/10 22:35:03 triaging input for call #2 connect$inet6 (new signal=2) [905085ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112112 #0 [905104ms] -> unshare(0x28020600) #0 [905114ms] <- unshare=0x0 errno=14 cover=26520 #0 [905118ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [905118ms] <- socket$inet6_udp=0x3 errno=14 cover=1695 #0 [905119ms] -> connect$inet6(0x3, 0x20000100, 0x1c) #0 [905119ms] <- connect$inet6=0x0 errno=14 cover=1390 22:35:03 executing program 0: unshare(0x28020600) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) 2021/11/10 22:35:03 result hanged=false: [905161ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112114 #0 [905182ms] -> unshare(0x28020600) #0 [905189ms] <- unshare=0x0 errno=14 cover=26461 #0 [905192ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [905192ms] <- socket$inet6_udp=0x3 errno=14 cover=1717 #0 [905193ms] -> connect$inet6(0x3, 0x20000100, 0x1c) #0 [905193ms] <- connect$inet6=0x0 errno=14 cover=1390 22:35:03 executing program 0: unshare(0x28020600) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) 2021/11/10 22:35:03 result hanged=false: [905235ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112116 #0 [905254ms] -> unshare(0x28020600) #0 [905263ms] <- unshare=0x0 errno=14 cover=26420 #0 [905269ms] -> socket$inet6_udp(0xa, 0x2, 0x0) #0 [905270ms] <- socket$inet6_udp=0x3 errno=14 cover=1695 #0 [905270ms] -> connect$inet6(0x3, 0x20000100, 0x1c) #0 [905270ms] <- connect$inet6=0x0 errno=14 cover=1404 2021/11/10 22:35:03 result hanged=false: 2021/11/10 22:35:03 added new input for call #2 connect$inet6 to corpus: unshare(0x28020600) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) 22:35:03 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000300)={0x0, 0x4, 0xfdfdffff}) [905316ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112118 #0 [905336ms] -> openat$sndtimer(0xffffffffffffff9c, 0x200002c0, 0x0) #0 [905337ms] <- openat$sndtimer=0x3 errno=14 cover=1367 #0 [905337ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0x3, 0x40345410, 0x20000040) #0 [905338ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0x0 errno=14 cover=431 #0 [905338ms] -> ioctl$SNDRV_TIMER_IOCTL_PARAMS(0x3, 0x40505412, 0x20000300) #0 [905338ms] <- ioctl$SNDRV_TIMER_IOCTL_PARAMS=0xffffffffffffffff errno=22 cover=167 enabling collider #0 [905339ms] -> openat$sndtimer(0xffffffffffffff9c, 0x200002c0, 0x0) #0 [905339ms] <- openat$sndtimer=0x3 errno=14 cover=1413 #0 [905340ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0x3, 0x40345410, 0x20000040) #0 [905340ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0x0 errno=14 cover=431 pthread_create failed (errno 11) 22:35:03 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000300)={0x0, 0x4, 0xfdfdffff}) 2021/11/10 22:35:03 result hanged=false: 2021/11/10 22:35:03 #0: triaging type=7 2021/11/10 22:35:03 triaging input for call #2 ioctl$SNDRV_TIMER_IOCTL_PARAMS (new signal=1) [905418ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112220 #0 [905440ms] -> openat$sndtimer(0xffffffffffffff9c, 0x200002c0, 0x0) #0 [905443ms] <- openat$sndtimer=0x3 errno=14 cover=4894 #0 [905444ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0x3, 0x40345410, 0x20000040) #0 [905445ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0x0 errno=14 cover=431 #0 [905445ms] -> ioctl$SNDRV_TIMER_IOCTL_PARAMS(0x3, 0x40505412, 0x20000300) #0 [905446ms] <- ioctl$SNDRV_TIMER_IOCTL_PARAMS=0xffffffffffffffff errno=22 cover=221 22:35:04 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000300)={0x0, 0x4, 0xfdfdffff}) 2021/11/10 22:35:04 result hanged=false: [905486ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112222 #0 [905505ms] -> openat$sndtimer(0xffffffffffffff9c, 0x200002c0, 0x0) #0 [905505ms] <- openat$sndtimer=0x3 errno=14 cover=1388 #0 [905506ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0x3, 0x40345410, 0x20000040) #0 [905506ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0x0 errno=14 cover=431 #0 [905506ms] -> ioctl$SNDRV_TIMER_IOCTL_PARAMS(0x3, 0x40505412, 0x20000300) #0 [905506ms] <- ioctl$SNDRV_TIMER_IOCTL_PARAMS=0xffffffffffffffff errno=22 cover=167 22:35:04 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000300)={0x0, 0x4, 0xfdfdffff}) 2021/11/10 22:35:04 result hanged=false: [905556ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112224 #0 [905576ms] -> openat$sndtimer(0xffffffffffffff9c, 0x200002c0, 0x0) #0 [905576ms] <- openat$sndtimer=0x3 errno=14 cover=1377 #0 [905577ms] -> ioctl$SNDRV_TIMER_IOCTL_SELECT(0x3, 0x40345410, 0x20000040) #0 [905577ms] <- ioctl$SNDRV_TIMER_IOCTL_SELECT=0x0 errno=14 cover=431 #0 [905577ms] -> ioctl$SNDRV_TIMER_IOCTL_PARAMS(0x3, 0x40505412, 0x20000300) #0 [905577ms] <- ioctl$SNDRV_TIMER_IOCTL_PARAMS=0xffffffffffffffff errno=22 cover=167 2021/11/10 22:35:04 result hanged=false: 2021/11/10 22:35:04 added new input for call #2 ioctl$SNDRV_TIMER_IOCTL_PARAMS to corpus: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000300)={0x0, 0x4, 0xfdfdffff}) 22:35:04 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLOPEN(r0, &(0x7f00000000c0)={0x18}, 0x18) write$P9_RSTATu(r0, &(0x7f0000000240)={0x5b, 0x7d, 0x0, {{0x0, 0x45, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2, '+!', 0x1, '\x00', 0x3, '+[#', 0xc, '!!p&,*-)&[%)'}, 0x1, '-'}}, 0x5b) [905621ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112226 #0 [905643ms] -> pipe(0x20000080) #0 [905644ms] <- pipe=0x0 errno=14 cover=1872 #0 [905644ms] -> write$P9_RLOPEN(0x4, 0x200000c0, 0x18) #0 [905645ms] <- write$P9_RLOPEN=0x18 errno=14 cover=354 #0 [905645ms] -> write$P9_RSTATu(0x4, 0x20000240, 0x5b) #0 [905645ms] <- write$P9_RSTATu=0x5b errno=14 cover=250 enabling collider #0 [905645ms] -> pipe(0x20000080) #0 [905646ms] <- pipe=0x0 errno=14 cover=1168 #0 [905646ms] -> write$P9_RLOPEN(0x4, 0x200000c0, 0x18) #0 [905646ms] <- write$P9_RLOPEN=0x18 errno=14 cover=312 pthread_create failed (errno 11) 22:35:04 executing program 0: syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x1) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="eb1a3a3c03c7892aafd53f6034d49badaa08b8afdb0d29c8612d64d45e10184dabbc8a0c5c2886461c8a39f1beead5f56e69b211620d648584ef234a7b4a4fb6204f8cd0f418ec95e8a20e721154abb7cbaa1d0fa433f98534d0259d344900d62a6a059274dc3bd8eca294bde46e5065fe159c4bfaf12ecb7901a8", 0x7b, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4008800) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000540)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3d}, @void, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000c}, 0x20040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000700)={0x1, &(0x7f00000006c0)=[{0x6, 0x3, 0x5, 0x8000}]}) 2021/11/10 22:35:04 result hanged=false: [905724ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112328 #0 [905742ms] -> syz_open_dev$hiddev(0x20000040, 0x0, 0x1) #0 [905743ms] <- syz_open_dev$hiddev=0xffffffffffffffff errno=2 cover=1336 #0 [905743ms] -> sendto$packet(0xffffffffffffffff, 0x20000080, 0x7b, 0x0, 0x20000100, 0x14) #0 [905744ms] <- sendto$packet=0xffffffffffffffff errno=9 cover=58 #0 [905744ms] -> sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x200004c0, 0x4008800) #0 [905744ms] <- sendmsg$DEVLINK_CMD_PORT_GET=0xffffffffffffffff errno=9 cover=95 #0 [905744ms] -> syz_open_procfs$userns(0x0, 0x20000540) #0 [905745ms] <- syz_open_procfs$userns=0x3 errno=1 cover=6549 #0 [905746ms] -> sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x20000680, 0x20040) #0 [905746ms] <- sendmsg$NL80211_CMD_SET_WIPHY_NETNS=0xffffffffffffffff errno=9 cover=52 #0 [905747ms] -> seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x20000700) [ 964.946852] audit: type=1326 audit(1636583704.337:2501): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=116055 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=1 compat=0 ip=0x7fe15fdf45ff code=0x0 killing hanging pid 112328 2021/11/10 22:35:07 result hanged=false: 22:35:07 executing program 0: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) iptable filter/2: resetting iptable mangle/2: resetting [908775ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112330 #0 [908795ms] -> prctl$PR_MCE_KILL(0x21, 0x1, 0x0) #0 [908796ms] <- prctl$PR_MCE_KILL=0x0 errno=22 cover=47 enabling collider #0 [908799ms] -> prctl$PR_MCE_KILL(0x21, 0x1, 0x0) #0 [908799ms] <- prctl$PR_MCE_KILL=0x0 errno=22 cover=47 22:35:07 executing program 0: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 2021/11/10 22:35:07 result hanged=false: 2021/11/10 22:35:07 #0: triaging type=7 2021/11/10 22:35:07 triaging input for call #0 prctl$PR_MCE_KILL (new signal=6) [908844ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112332 #0 [908864ms] -> prctl$PR_MCE_KILL(0x21, 0x1, 0x0) #0 [908864ms] <- prctl$PR_MCE_KILL=0x0 errno=22 cover=47 2021/11/10 22:35:07 result hanged=false: 22:35:07 executing program 0: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) [908912ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112334 #0 [908937ms] -> prctl$PR_MCE_KILL(0x21, 0x1, 0x0) #0 [908937ms] <- prctl$PR_MCE_KILL=0x0 errno=22 cover=47 22:35:07 executing program 0: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 2021/11/10 22:35:07 result hanged=false: [908982ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112336 #0 [909002ms] -> prctl$PR_MCE_KILL(0x21, 0x1, 0x0) #0 [909005ms] <- prctl$PR_MCE_KILL=0x0 errno=22 cover=47 2021/11/10 22:35:07 result hanged=false: 2021/11/10 22:35:07 added new input for call #0 prctl$PR_MCE_KILL to corpus: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 22:35:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) [909051ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112338 #0 [909070ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [909071ms] <- socket$inet6_tcp=0x3 errno=14 cover=1762 #0 [909072ms] -> getsockopt$inet6_int(0x3, 0x29, 0x50, 0x0, 0x20000080) #0 [909074ms] <- getsockopt$inet6_int=0xffffffffffffffff errno=22 cover=158 enabling collider #0 [909075ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [909075ms] <- socket$inet6_tcp=0x3 errno=14 cover=1766 2021/11/10 22:35:07 result hanged=false: 22:35:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) 2021/11/10 22:35:07 #0: triaging type=7 2021/11/10 22:35:07 triaging input for call #1 getsockopt$inet6_int (new signal=1) [909116ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112340 #0 [909137ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [909140ms] <- socket$inet6_tcp=0x3 errno=14 cover=1756 #0 [909142ms] -> getsockopt$inet6_int(0x3, 0x29, 0x50, 0x0, 0x20000080) #0 [909143ms] <- getsockopt$inet6_int=0xffffffffffffffff errno=22 cover=158 22:35:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) 2021/11/10 22:35:07 result hanged=false: [909186ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112342 #0 [909210ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [909211ms] <- socket$inet6_tcp=0x3 errno=14 cover=1734 #0 [909211ms] -> getsockopt$inet6_int(0x3, 0x29, 0x50, 0x0, 0x20000080) #0 [909212ms] <- getsockopt$inet6_int=0xffffffffffffffff errno=22 cover=158 22:35:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) 2021/11/10 22:35:07 result hanged=false: [909256ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112344 #0 [909275ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [909276ms] <- socket$inet6_tcp=0x3 errno=14 cover=1778 #0 [909276ms] -> getsockopt$inet6_int(0x3, 0x29, 0x50, 0x0, 0x20000080) #0 [909277ms] <- getsockopt$inet6_int=0xffffffffffffffff errno=22 cover=162 2021/11/10 22:35:07 result hanged=false: 2021/11/10 22:35:07 added new input for call #1 getsockopt$inet6_int to corpus: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) 22:35:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) 2021/11/10 22:35:07 #0: triaging type=7 2021/11/10 22:35:07 triaging input for call #0 socket$inet6_tcp (new signal=2) [909326ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112346 #0 [909345ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [909345ms] <- socket$inet6_tcp=0x3 errno=14 cover=1745 #0 [909346ms] -> getsockopt$inet6_int(0x3, 0x29, 0x50, 0x0, 0x20000080) #0 [909346ms] <- getsockopt$inet6_int=0xffffffffffffffff errno=22 cover=162 22:35:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) 2021/11/10 22:35:07 result hanged=false: [909394ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112348 #0 [909418ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [909419ms] <- socket$inet6_tcp=0x3 errno=14 cover=1756 #0 [909420ms] -> getsockopt$inet6_int(0x3, 0x29, 0x50, 0x0, 0x20000080) #0 [909420ms] <- getsockopt$inet6_int=0xffffffffffffffff errno=22 cover=158 22:35:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) 2021/11/10 22:35:08 result hanged=false: [909462ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112350 #0 [909483ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [909484ms] <- socket$inet6_tcp=0x3 errno=14 cover=1772 #0 [909486ms] -> getsockopt$inet6_int(0x3, 0x29, 0x50, 0x0, 0x20000080) #0 [909486ms] <- getsockopt$inet6_int=0xffffffffffffffff errno=22 cover=158 2021/11/10 22:35:08 result hanged=false: 2021/11/10 22:35:08 added new input for call #0 socket$inet6_tcp to corpus: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) 22:35:08 executing program 0: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='n', 0x1, 0xfffffffffffffffc) 2021/11/10 22:35:08 poll: candidates=8 inputs=0 signal=0 [909537ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112352 #0 [909560ms] -> add_key$user(0x20000000, 0x20000040, 0x20000080, 0x1, 0xfffffffffffffffc) #0 [909561ms] <- add_key$user=0x2f3428b6 errno=14 cover=11056 enabling collider #0 [909561ms] -> add_key$user(0x20000000, 0x20000040, 0x20000080, 0x1, 0xfffffffffffffffc) #0 [909562ms] <- add_key$user=0x2f3428b6 errno=14 cover=1783 22:35:08 executing program 0: pause() 2021/11/10 22:35:08 result hanged=false: [909604ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112354 #0 [909624ms] -> pause() enabling collider pthread_create failed (errno 11) 22:35:09 executing program 0: pause() 2021/11/10 22:35:09 result hanged=false: 2021/11/10 22:35:09 #0: triaging type=7 2021/11/10 22:35:09 triaging input for call #0 pause (new signal=3) [910805ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112456 #0 [910825ms] -> pause() 22:35:10 executing program 0: pause() 2021/11/10 22:35:10 result hanged=false: [911973ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112458 #0 [911995ms] -> pause() 22:35:11 executing program 0: pause() 2021/11/10 22:35:11 result hanged=false: [913146ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112460 #0 [913166ms] -> pause() 2021/11/10 22:35:12 result hanged=false: 2021/11/10 22:35:12 added new input for call #0 pause to corpus: pause() 22:35:12 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x2}) [914315ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112462 #0 [914334ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [914339ms] <- perf_event_open=0x3 errno=14 cover=15879 #0 [914340ms] -> openat$sndtimer(0xffffffffffffff9c, 0x20000000, 0x0) #0 [914340ms] <- openat$sndtimer=0x4 errno=14 cover=3934 #0 [914341ms] -> ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0x4, 0xc0145401, 0x20000100) #0 [914341ms] <- ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE=0x0 errno=14 cover=320 enabling collider #0 [914351ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [914352ms] <- perf_event_open=0x3 errno=14 cover=11844 #0 [914353ms] -> openat$sndtimer(0xffffffffffffff9c, 0x20000000, 0x0) #0 [914354ms] <- openat$sndtimer=0x4 errno=14 cover=3671 pthread_create failed (errno 11) 22:35:12 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x2}) 2021/11/10 22:35:12 result hanged=false: 2021/11/10 22:35:12 #0: triaging type=7 2021/11/10 22:35:12 triaging input for call #2 ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE (new signal=7) [914445ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112564 #0 [914468ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [914470ms] <- perf_event_open=0x3 errno=14 cover=11924 #0 [914472ms] -> openat$sndtimer(0xffffffffffffff9c, 0x20000000, 0x0) #0 [914473ms] <- openat$sndtimer=0x4 errno=14 cover=3635 #0 [914474ms] -> ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0x4, 0xc0145401, 0x20000100) #0 [914474ms] <- ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE=0x0 errno=14 cover=320 22:35:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x2}) 2021/11/10 22:35:13 result hanged=false: [914528ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112566 #0 [914549ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [914552ms] <- perf_event_open=0x3 errno=14 cover=11860 #0 [914554ms] -> openat$sndtimer(0xffffffffffffff9c, 0x20000000, 0x0) #0 [914555ms] <- openat$sndtimer=0x4 errno=14 cover=1401 #0 [914556ms] -> ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0x4, 0xc0145401, 0x20000100) #0 [914556ms] <- ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE=0x0 errno=14 cover=146 22:35:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x2}) 2021/11/10 22:35:13 result hanged=false: [914609ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112568 #0 [914634ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [914635ms] <- perf_event_open=0x3 errno=14 cover=11833 #0 [914636ms] -> openat$sndtimer(0xffffffffffffff9c, 0x20000000, 0x0) #0 [914636ms] <- openat$sndtimer=0x4 errno=14 cover=1402 #0 [914637ms] -> ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0x4, 0xc0145401, 0x20000100) #0 [914637ms] <- ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE=0x0 errno=14 cover=146 2021/11/10 22:35:13 result hanged=false: 2021/11/10 22:35:13 added new input for call #2 ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x2}) 22:35:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) [914688ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112570 #0 [914709ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [914709ms] <- perf_event_open=0x3 errno=14 cover=12256 #0 [914711ms] -> epoll_create1(0x0) #0 [914711ms] <- epoll_create1=0x4 errno=14 cover=612 #0 [914711ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [914712ms] <- socket$inet6_udplite=0x5 errno=14 cover=1762 #0 [914713ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0x5, 0x20000140) #0 [914713ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=397 enabling collider #0 [914725ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [914726ms] <- perf_event_open=0x3 errno=14 cover=11988 #0 [914726ms] -> epoll_create1(0x0) #0 [914726ms] <- epoll_create1=0x4 errno=14 cover=513 pthread_create failed (errno 11) 22:35:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) 2021/11/10 22:35:13 result hanged=false: 2021/11/10 22:35:13 #0: triaging type=7 2021/11/10 22:35:13 triaging input for call #3 epoll_ctl$EPOLL_CTL_ADD (new signal=1) [914820ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112672 #0 [914839ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [914840ms] <- perf_event_open=0x3 errno=14 cover=12218 #0 [914842ms] -> epoll_create1(0x0) #0 [914842ms] <- epoll_create1=0x4 errno=14 cover=634 #0 [914842ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [914842ms] <- socket$inet6_udplite=0x5 errno=14 cover=1721 #0 [914844ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0x5, 0x20000140) #0 [914846ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=9363 22:35:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) 2021/11/10 22:35:13 result hanged=false: [914902ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112674 #0 [914921ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [914922ms] <- perf_event_open=0x3 errno=14 cover=12146 #0 [914924ms] -> epoll_create1(0x0) #0 [914924ms] <- epoll_create1=0x4 errno=14 cover=645 #0 [914924ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [914924ms] <- socket$inet6_udplite=0x5 errno=14 cover=1700 #0 [914925ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0x5, 0x20000140) #0 [914926ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=386 22:35:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) 2021/11/10 22:35:13 result hanged=false: [914981ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112676 2021/11/10 22:35:13 poll: candidates=0 inputs=0 signal=0 #0 [915001ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [915002ms] <- perf_event_open=0x3 errno=14 cover=12085 #0 [915004ms] -> epoll_create1(0x0) #0 [915004ms] <- epoll_create1=0x4 errno=14 cover=612 #0 [915005ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [915005ms] <- socket$inet6_udplite=0x5 errno=14 cover=1708 #0 [915006ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0x5, 0x20000140) #0 [915007ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=473 2021/11/10 22:35:13 result hanged=false: 2021/11/10 22:35:13 added new input for call #3 epoll_ctl$EPOLL_CTL_ADD to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) 22:35:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) 2021/11/10 22:35:13 #0: triaging type=7 2021/11/10 22:35:13 triaging input for call #1 epoll_create1 (new signal=1) [915062ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112678 #0 [915083ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [915084ms] <- perf_event_open=0x3 errno=14 cover=12272 #0 [915086ms] -> epoll_create1(0x0) #0 [915086ms] <- epoll_create1=0x4 errno=14 cover=569 #0 [915086ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [915087ms] <- socket$inet6_udplite=0x5 errno=14 cover=1689 #0 [915087ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0x5, 0x20000140) #0 [915087ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=375 22:35:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) 2021/11/10 22:35:13 result hanged=false: [915139ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112680 #0 [915158ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [915159ms] <- perf_event_open=0x3 errno=14 cover=12139 #0 [915162ms] -> epoll_create1(0x0) #0 [915162ms] <- epoll_create1=0x4 errno=14 cover=623 #0 [915163ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [915164ms] <- socket$inet6_udplite=0x5 errno=14 cover=1795 #0 [915170ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0x5, 0x20000140) #0 [915170ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=473 22:35:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) 2021/11/10 22:35:13 result hanged=false: [915220ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112682 #0 [915241ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [915242ms] <- perf_event_open=0x3 errno=14 cover=12275 #0 [915244ms] -> epoll_create1(0x0) #0 [915244ms] <- epoll_create1=0x4 errno=14 cover=612 #0 [915245ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [915246ms] <- socket$inet6_udplite=0x5 errno=14 cover=1762 #0 [915247ms] -> epoll_ctl$EPOLL_CTL_ADD(0x4, 0x1, 0x5, 0x20000140) #0 [915248ms] <- epoll_ctl$EPOLL_CTL_ADD=0x0 errno=14 cover=495 2021/11/10 22:35:13 result hanged=false: 2021/11/10 22:35:13 added new input for call #1 epoll_create1 to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) 22:35:13 executing program 0: mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) pkey_mprotect(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x5, 0xffffffffffffffff) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x5, 0x206, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) [915302ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112684 #0 [915321ms] -> mlock2(0x20ffc000, 0x1000, 0x0) #0 [915321ms] <- mlock2=0x0 errno=14 cover=1501 #0 [915322ms] -> pkey_mprotect(0x20fed000, 0x11000, 0x5, 0xffffffffffffffff) #0 [915322ms] <- pkey_mprotect=0x0 errno=14 cover=1087 #0 [915322ms] -> mbind(0x20ffb000, 0x4000, 0x3, 0x20000040, 0x206, 0x0) #0 [915322ms] <- mbind=0x0 errno=14 cover=1292 #0 [915325ms] -> mlock2(0x20ffb000, 0x3000, 0x0) #0 [915325ms] <- mlock2=0x0 errno=14 cover=1310 enabling collider #0 [915325ms] -> mlock2(0x20ffc000, 0x1000, 0x0) #0 [915325ms] <- mlock2=0x0 errno=14 cover=222 #0 [915326ms] -> pkey_mprotect(0x20fed000, 0x11000, 0x5, 0xffffffffffffffff) #0 [915326ms] <- pkey_mprotect=0x0 errno=14 cover=215 pthread_create failed (errno 11) 2021/11/10 22:35:13 result hanged=false: 22:35:13 executing program 0: mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) pkey_mprotect(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x5, 0xffffffffffffffff) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x5, 0x206, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 2021/11/10 22:35:13 #0: triaging type=7 2021/11/10 22:35:13 triaging input for call #3 mlock2 (new signal=3) [915396ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112786 #0 [915411ms] -> mlock2(0x20ffc000, 0x1000, 0x0) #0 [915412ms] <- mlock2=0x0 errno=14 cover=1456 #0 [915413ms] -> pkey_mprotect(0x20fed000, 0x11000, 0x5, 0xffffffffffffffff) #0 [915413ms] <- pkey_mprotect=0x0 errno=14 cover=1108 #0 [915415ms] -> mbind(0x20ffb000, 0x4000, 0x3, 0x20000040, 0x206, 0x0) #0 [915415ms] <- mbind=0x0 errno=14 cover=1376 #0 [915416ms] -> mlock2(0x20ffb000, 0x3000, 0x0) #0 [915416ms] <- mlock2=0x0 errno=14 cover=1266 22:35:14 executing program 0: mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) pkey_mprotect(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x5, 0xffffffffffffffff) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x5, 0x206, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 2021/11/10 22:35:14 result hanged=false: [915452ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112788 #0 [915466ms] -> mlock2(0x20ffc000, 0x1000, 0x0) #0 [915466ms] <- mlock2=0x0 errno=14 cover=1456 #0 [915468ms] -> pkey_mprotect(0x20fed000, 0x11000, 0x5, 0xffffffffffffffff) #0 [915468ms] <- pkey_mprotect=0x0 errno=14 cover=1108 #0 [915469ms] -> mbind(0x20ffb000, 0x4000, 0x3, 0x20000040, 0x206, 0x0) #0 [915470ms] <- mbind=0x0 errno=14 cover=1376 #0 [915471ms] -> mlock2(0x20ffb000, 0x3000, 0x0) #0 [915471ms] <- mlock2=0x0 errno=14 cover=1266 22:35:14 executing program 0: mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) pkey_mprotect(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x5, 0xffffffffffffffff) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x5, 0x206, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 2021/11/10 22:35:14 result hanged=false: [915509ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112790 #0 [915523ms] -> mlock2(0x20ffc000, 0x1000, 0x0) #0 [915523ms] <- mlock2=0x0 errno=14 cover=1467 #0 [915525ms] -> pkey_mprotect(0x20fed000, 0x11000, 0x5, 0xffffffffffffffff) #0 [915525ms] <- pkey_mprotect=0x0 errno=14 cover=1119 #0 [915527ms] -> mbind(0x20ffb000, 0x4000, 0x3, 0x20000040, 0x206, 0x0) #0 [915527ms] <- mbind=0x0 errno=14 cover=1376 #0 [915528ms] -> mlock2(0x20ffb000, 0x3000, 0x0) #0 [915529ms] <- mlock2=0x0 errno=14 cover=1266 2021/11/10 22:35:14 result hanged=false: 2021/11/10 22:35:14 added new input for call #3 mlock2 to corpus: mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) pkey_mprotect(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x5, 0xffffffffffffffff) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x5, 0x206, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 22:35:14 executing program 0: mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) pkey_mprotect(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x5, 0xffffffffffffffff) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x5, 0x206, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 2021/11/10 22:35:14 #0: triaging type=7 2021/11/10 22:35:14 triaging input for call #2 mbind (new signal=2) [915567ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112792 #0 [915585ms] -> mlock2(0x20ffc000, 0x1000, 0x0) #0 [915585ms] <- mlock2=0x0 errno=14 cover=1754 #0 [915586ms] -> pkey_mprotect(0x20fed000, 0x11000, 0x5, 0xffffffffffffffff) #0 [915586ms] <- pkey_mprotect=0x0 errno=14 cover=1054 #0 [915587ms] -> mbind(0x20ffb000, 0x4000, 0x3, 0x20000040, 0x206, 0x0) #0 [915587ms] <- mbind=0x0 errno=14 cover=1256 #0 [915587ms] -> mlock2(0x20ffb000, 0x3000, 0x0) #0 [915587ms] <- mlock2=0x0 errno=14 cover=1698 22:35:14 executing program 0: mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) pkey_mprotect(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x5, 0xffffffffffffffff) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x5, 0x206, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 2021/11/10 22:35:14 result hanged=false: [915625ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112794 #0 [915644ms] -> mlock2(0x20ffc000, 0x1000, 0x0) #0 [915645ms] <- mlock2=0x0 errno=14 cover=1522 #0 [915648ms] -> pkey_mprotect(0x20fed000, 0x11000, 0x5, 0xffffffffffffffff) #0 [915648ms] <- pkey_mprotect=0x0 errno=14 cover=1130 #0 [915649ms] -> mbind(0x20ffb000, 0x4000, 0x3, 0x20000040, 0x206, 0x0) #0 [915649ms] <- mbind=0x0 errno=14 cover=1387 #0 [915650ms] -> mlock2(0x20ffb000, 0x3000, 0x0) #0 [915650ms] <- mlock2=0x0 errno=14 cover=1266 22:35:14 executing program 0: mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) pkey_mprotect(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x5, 0xffffffffffffffff) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x5, 0x206, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 2021/11/10 22:35:14 result hanged=false: [915690ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112796 #0 [915709ms] -> mlock2(0x20ffc000, 0x1000, 0x0) #0 [915709ms] <- mlock2=0x0 errno=14 cover=1487 #0 [915713ms] -> pkey_mprotect(0x20fed000, 0x11000, 0x5, 0xffffffffffffffff) #0 [915713ms] <- pkey_mprotect=0x0 errno=14 cover=1108 #0 [915714ms] -> mbind(0x20ffb000, 0x4000, 0x3, 0x20000040, 0x206, 0x0) #0 [915714ms] <- mbind=0x0 errno=14 cover=1300 #0 [915715ms] -> mlock2(0x20ffb000, 0x3000, 0x0) #0 [915715ms] <- mlock2=0x0 errno=14 cover=1266 2021/11/10 22:35:14 result hanged=false: 2021/11/10 22:35:14 added new input for call #2 mbind to corpus: mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) pkey_mprotect(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x5, 0xffffffffffffffff) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x5, 0x206, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 22:35:14 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) [915756ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112798 #0 [915776ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [915782ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=13286 #0 [915782ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [915785ms] <- perf_event_open=0x3 errno=14 cover=13167 #0 [915786ms] -> clone3(0x200008c0, 0x58) #0 [915787ms] <- clone3=0xffffffffffffffff errno=11 cover=15404 #0 [915787ms] -> pipe(0x200001c0) #0 [915787ms] <- pipe=0x0 errno=14 cover=5313 #0 [915788ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x20000140) #0 [915813ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=190842 enabling collider #0 [915831ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [915831ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=17 cover=1334 #0 [915831ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [915832ms] <- perf_event_open=0x3 errno=14 cover=11979 pthread_create failed (errno 11) 2021/11/10 22:35:14 result hanged=false: 2021/11/10 22:35:14 #0: triaging type=7 2021/11/10 22:35:14 triaging input for call #4 mount$9p_fd (new signal=8) 22:35:14 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) [915935ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112901 #0 [915955ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [915959ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=13159 #0 [915961ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [915962ms] <- perf_event_open=0x3 errno=14 cover=12454 #0 [915966ms] -> clone3(0x200008c0, 0x58) #0 [915967ms] <- clone3=0xffffffffffffffff errno=11 cover=15463 #0 [915969ms] -> pipe(0x200001c0) #0 [915969ms] <- pipe=0x0 errno=14 cover=5161 #0 [915970ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x20000140) #0 [915997ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=218984 22:35:14 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 2021/11/10 22:35:14 result hanged=false: [916077ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112904 #0 [916102ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [916106ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=13030 #0 [916109ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [916111ms] <- perf_event_open=0x3 errno=14 cover=12305 #0 [916113ms] -> clone3(0x200008c0, 0x58) #0 [916114ms] <- clone3=0xffffffffffffffff errno=11 cover=15514 #0 [916123ms] -> pipe(0x200001c0) #0 [916123ms] <- pipe=0x0 errno=14 cover=5411 #0 [916124ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x20000140) #0 [916154ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=192458 2021/11/10 22:35:14 result hanged=false: 22:35:14 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) [916232ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112907 #0 [916253ms] -> syz_mount_image$vfat(0x0, 0x20000240, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [916257ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=14 cover=12886 #0 [916259ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [916260ms] <- perf_event_open=0x3 errno=14 cover=12408 #0 [916263ms] -> clone3(0x200008c0, 0x58) #0 [916264ms] <- clone3=0xffffffffffffffff errno=11 cover=14149 #0 [916266ms] -> pipe(0x200001c0) #0 [916267ms] <- pipe=0x0 errno=14 cover=5197 #0 [916268ms] -> mount$9p_fd(0x0, 0x20000040, 0x200000c0, 0x0, 0x20000140) #0 [916298ms] <- mount$9p_fd=0xffffffffffffffff errno=14 cover=188621 2021/11/10 22:35:14 result hanged=false: 2021/11/10 22:35:14 added new input for call #4 mount$9p_fd to corpus: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 22:35:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)={0x28, r1, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x7}]}, 0x28}}, 0x0) [916390ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 112910 #0 [916409ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [916410ms] <- socket$nl_generic=0x3 errno=14 cover=1434 #0 [916412ms] -> syz_genetlink_get_family_id$ethtool(0x20002740, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [916415ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=8410 #0 [916418ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [916419ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1806 #0 [916420ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8933, 0x20000140) #0 [916420ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [916421ms] -> sendmsg$ETHTOOL_MSG_EEE_SET(0x3, 0x20002800, 0x0) #0 [916421ms] <- sendmsg$ETHTOOL_MSG_EEE_SET=0x28 errno=14 cover=1860 enabling collider #0 [916422ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [916422ms] <- socket$nl_generic=0x3 errno=14 cover=1531 #0 [916423ms] -> syz_genetlink_get_family_id$ethtool(0x20002740, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [916424ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=8032 pthread_create failed (errno 11) 22:35:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)={0x28, r1, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x7}]}, 0x28}}, 0x0) 2021/11/10 22:35:15 result hanged=false: 2021/11/10 22:35:15 #0: triaging type=7 2021/11/10 22:35:15 triaging input for call #4 sendmsg$ETHTOOL_MSG_EEE_SET (new signal=5) [916504ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113012 #0 [916525ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [916528ms] <- socket$nl_generic=0x3 errno=14 cover=1437 #0 [916529ms] -> syz_genetlink_get_family_id$ethtool(0x20002740, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [916531ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=8320 #0 [916532ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [916534ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1751 #0 [916537ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8933, 0x20000140) #0 [916537ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [916538ms] -> sendmsg$ETHTOOL_MSG_EEE_SET(0x3, 0x20002800, 0x0) #0 [916538ms] <- sendmsg$ETHTOOL_MSG_EEE_SET=0x28 errno=14 cover=1824 22:35:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)={0x28, r1, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x7}]}, 0x28}}, 0x0) 2021/11/10 22:35:15 result hanged=false: [916582ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113014 #0 [916602ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [916602ms] <- socket$nl_generic=0x3 errno=14 cover=1500 #0 [916604ms] -> syz_genetlink_get_family_id$ethtool(0x20002740, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [916605ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=8304 #0 [916607ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [916608ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1784 #0 [916608ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8933, 0x20000140) #0 [916609ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [916609ms] -> sendmsg$ETHTOOL_MSG_EEE_SET(0x3, 0x20002800, 0x0) #0 [916609ms] <- sendmsg$ETHTOOL_MSG_EEE_SET=0x28 errno=14 cover=1848 22:35:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)={0x28, r1, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x7}]}, 0x28}}, 0x0) 2021/11/10 22:35:15 result hanged=false: [916660ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113016 #0 [916680ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [916683ms] <- socket$nl_generic=0x3 errno=14 cover=1456 #0 [916684ms] -> syz_genetlink_get_family_id$ethtool(0x20002740, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [916685ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=8349 #0 [916688ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [916689ms] <- socket$inet6_icmp_raw=0x4 errno=14 cover=1722 #0 [916689ms] -> ioctl$sock_SIOCGIFINDEX(0x4, 0x8933, 0x20000140) #0 [916689ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=193 #0 [916689ms] -> sendmsg$ETHTOOL_MSG_EEE_SET(0x3, 0x20002800, 0x0) #0 [916690ms] <- sendmsg$ETHTOOL_MSG_EEE_SET=0x28 errno=14 cover=1874 2021/11/10 22:35:15 result hanged=false: 2021/11/10 22:35:15 added new input for call #4 sendmsg$ETHTOOL_MSG_EEE_SET to corpus: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)={0x28, r1, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x7}]}, 0x28}}, 0x0) 22:35:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000003000)={0x2, 0x4e20, @local}, 0x10) connect(r0, &(0x7f0000000340)=@un=@abs, 0x80) [916735ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113018 #0 [916754ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [916754ms] <- socket$inet_udp=0x3 errno=14 cover=1684 #0 [916756ms] -> bind$inet(0x3, 0x20003000, 0x10) #0 [916756ms] <- bind$inet=0x0 errno=14 cover=389 #0 [916758ms] -> connect(0x3, 0x20000340, 0x80) #0 [916758ms] <- connect=0x0 errno=14 cover=201 enabling collider #0 [916763ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [916763ms] <- socket$inet_udp=0x3 errno=14 cover=1792 #0 [916763ms] -> bind$inet(0x3, 0x20003000, 0x10) #0 [916763ms] <- bind$inet=0x0 errno=14 cover=389 pthread_create failed (errno 11) 2021/11/10 22:35:15 result hanged=false: 22:35:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000003000)={0x2, 0x4e20, @local}, 0x10) connect(r0, &(0x7f0000000340)=@un=@abs, 0x80) 2021/11/10 22:35:15 #0: triaging type=7 2021/11/10 22:35:15 triaging input for call #2 connect (new signal=6) [916852ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113120 #0 [916874ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [916874ms] <- socket$inet_udp=0x3 errno=14 cover=1731 #0 [916877ms] -> bind$inet(0x3, 0x20003000, 0x10) #0 [916877ms] <- bind$inet=0x0 errno=14 cover=389 #0 [916879ms] -> connect(0x3, 0x20000340, 0x80) #0 [916879ms] <- connect=0x0 errno=14 cover=201 22:35:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000003000)={0x2, 0x4e20, @local}, 0x10) connect(r0, &(0x7f0000000340)=@un=@abs, 0x80) 2021/11/10 22:35:15 result hanged=false: [916924ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113122 #0 [916943ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [916943ms] <- socket$inet_udp=0x3 errno=14 cover=1662 #0 [916945ms] -> bind$inet(0x3, 0x20003000, 0x10) #0 [916945ms] <- bind$inet=0x0 errno=14 cover=389 #0 [916946ms] -> connect(0x3, 0x20000340, 0x80) #0 [916946ms] <- connect=0x0 errno=14 cover=201 22:35:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000003000)={0x2, 0x4e20, @local}, 0x10) connect(r0, &(0x7f0000000340)=@un=@abs, 0x80) 2021/11/10 22:35:15 result hanged=false: [916992ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113124 #0 [917011ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [917011ms] <- socket$inet_udp=0x3 errno=14 cover=1695 #0 [917012ms] -> bind$inet(0x3, 0x20003000, 0x10) #0 [917012ms] <- bind$inet=0x0 errno=14 cover=389 #0 [917012ms] -> connect(0x3, 0x20000340, 0x80) #0 [917013ms] <- connect=0x0 errno=14 cover=201 2021/11/10 22:35:15 result hanged=false: 2021/11/10 22:35:15 added new input for call #2 connect to corpus: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000003000)={0x2, 0x4e20, @local}, 0x10) connect(r0, &(0x7f0000000340)=@un=@abs, 0x80) 22:35:15 executing program 0: syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000880)) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), 0xffffffffffffffff) 2021/11/10 22:35:15 poll: candidates=8 inputs=0 signal=0 [917058ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113126 #0 [917078ms] -> syz_mount_image$ext4(0x200006c0, 0x20000700, 0x0, 0x0, 0x20000840, 0x0, 0x20000880) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 976.276283] EXT4-fs (loop0): VFS: Can't find ext4 filesystem syz_mount_image > mount error: 22 #0 [917095ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=26270 #0 [917098ms] -> sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) #0 [917098ms] <- sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL=0xffffffffffffffff errno=9 cover=52 #0 [917100ms] -> syz_genetlink_get_family_id$ieee802154(0x20000d00, 0xffffffffffffffff) syz_genetlink_get_family_id(802.15.4 MAC, -1) netlink: failed to get family id for 802.15.4 MAC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [917101ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=2 cover=8041 enabling collider #0 [917102ms] -> syz_mount_image$ext4(0x200006c0, 0x20000700, 0x0, 0x0, 0x20000840, 0x0, 0x20000880) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 976.301408] EXT4-fs (loop0): VFS: Can't find ext4 filesystem syz_mount_image > mount error: 22 #0 [917119ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=25935 #0 [917120ms] -> sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) #0 [917120ms] <- sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL=0xffffffffffffffff errno=9 cover=52 pthread_create failed (errno 11) 2021/11/10 22:35:15 result hanged=false: 2021/11/10 22:35:15 #0: triaging type=7 22:35:15 executing program 0: syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000880)) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), 0xffffffffffffffff) 2021/11/10 22:35:15 triaging input for call #2 syz_genetlink_get_family_id$ieee802154 (new signal=2) [917209ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113228 #0 [917231ms] -> syz_mount_image$ext4(0x200006c0, 0x20000700, 0x0, 0x0, 0x20000840, 0x0, 0x20000880) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 976.426523] EXT4-fs (loop0): VFS: Can't find ext4 filesystem syz_mount_image > mount error: 22 #0 [917256ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=32695 #0 [917259ms] -> sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) #0 [917259ms] <- sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL=0xffffffffffffffff errno=9 cover=52 #0 [917260ms] -> syz_genetlink_get_family_id$ieee802154(0x20000d00, 0xffffffffffffffff) syz_genetlink_get_family_id(802.15.4 MAC, -1) netlink: failed to get family id for 802.15.4 MAC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [917261ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=2 cover=7865 2021/11/10 22:35:15 result hanged=false: 22:35:15 executing program 0: syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000880)) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), 0xffffffffffffffff) [917316ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113230 #0 [917335ms] -> syz_mount_image$ext4(0x200006c0, 0x20000700, 0x0, 0x0, 0x20000840, 0x0, 0x20000880) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 976.530783] EXT4-fs (loop0): VFS: Can't find ext4 filesystem syz_mount_image > mount error: 22 #0 [917349ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=26005 #0 [917354ms] -> sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) #0 [917355ms] <- sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL=0xffffffffffffffff errno=9 cover=52 #0 [917355ms] -> syz_genetlink_get_family_id$ieee802154(0x20000d00, 0xffffffffffffffff) syz_genetlink_get_family_id(802.15.4 MAC, -1) netlink: failed to get family id for 802.15.4 MAC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [917356ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=2 cover=7912 22:35:15 executing program 0: syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000880)) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), 0xffffffffffffffff) 2021/11/10 22:35:15 result hanged=false: [917445ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113232 #0 [917476ms] -> syz_mount_image$ext4(0x200006c0, 0x20000700, 0x0, 0x0, 0x20000840, 0x0, 0x20000880) syz_mount_image: size=0 segs=0 loop='/dev/loop0' dir='./file0' fs='ext4' flags=0 opts=',errors=continue' [ 976.683367] EXT4-fs (loop0): VFS: Can't find ext4 filesystem syz_mount_image > mount error: 22 #0 [917509ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=22 cover=26076 #0 [917513ms] -> sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) #0 [917513ms] <- sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL=0xffffffffffffffff errno=9 cover=52 #0 [917513ms] -> syz_genetlink_get_family_id$ieee802154(0x20000d00, 0xffffffffffffffff) syz_genetlink_get_family_id(802.15.4 MAC, -1) netlink: failed to get family id for 802.15.4 MAC: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [917515ms] <- syz_genetlink_get_family_id$ieee802154=0xffffffffffffffff errno=2 cover=8053 2021/11/10 22:35:16 result hanged=false: 2021/11/10 22:35:16 added new input for call #2 syz_genetlink_get_family_id$ieee802154 to corpus: syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000880)) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), 0xffffffffffffffff) 22:35:16 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) unshare(0x28020600) [917612ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113234 #0 [917670ms] -> stat(0x20001cc0, 0x20001c00) #0 [917670ms] <- stat=0x0 errno=14 cover=532 #0 [917671ms] -> setresuid(0xffffffffffffffff, 0x41ed, 0x0) #0 [917672ms] <- setresuid=0x0 errno=14 cover=398 #0 [917672ms] -> unshare(0x28020600) #0 [917672ms] <- unshare=0xffffffffffffffff errno=1 cover=2415 enabling collider #0 [917673ms] -> stat(0x20001cc0, 0x20001c00) #0 [917673ms] <- stat=0x0 errno=14 cover=541 #0 [917673ms] -> setresuid(0xffffffffffffffff, 0x41ed, 0x0) #0 [917673ms] <- setresuid=0x0 errno=14 cover=436 pthread_create failed (errno 11) 2021/11/10 22:35:16 result hanged=false: 2021/11/10 22:35:16 #0: triaging type=7 22:35:16 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) unshare(0x28020600) 2021/11/10 22:35:16 triaging input for call #2 unshare (new signal=10) [917789ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113336 #0 [917827ms] -> stat(0x20001cc0, 0x20001c00) #0 [917828ms] <- stat=0x0 errno=14 cover=544 #0 [917828ms] -> setresuid(0xffffffffffffffff, 0x41ed, 0x0) #0 [917829ms] <- setresuid=0x0 errno=14 cover=442 #0 [917830ms] -> unshare(0x28020600) #0 [917830ms] <- unshare=0xffffffffffffffff errno=1 cover=2444 22:35:16 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) unshare(0x28020600) 2021/11/10 22:35:16 result hanged=false: [917905ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113338 #0 [917938ms] -> stat(0x20001cc0, 0x20001c00) #0 [917938ms] <- stat=0x0 errno=14 cover=558 #0 [917941ms] -> setresuid(0xffffffffffffffff, 0x41ed, 0x0) #0 [917941ms] <- setresuid=0x0 errno=14 cover=474 #0 [917942ms] -> unshare(0x28020600) #0 [917945ms] <- unshare=0xffffffffffffffff errno=1 cover=2367 22:35:16 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) unshare(0x28020600) 2021/11/10 22:35:16 result hanged=false: [918013ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113340 #0 [918056ms] -> stat(0x20001cc0, 0x20001c00) #0 [918056ms] <- stat=0x0 errno=14 cover=532 #0 [918057ms] -> setresuid(0xffffffffffffffff, 0x41ed, 0x0) #0 [918057ms] <- setresuid=0x0 errno=14 cover=398 #0 [918057ms] -> unshare(0x28020600) #0 [918057ms] <- unshare=0xffffffffffffffff errno=1 cover=2371 2021/11/10 22:35:16 result hanged=false: 2021/11/10 22:35:16 added new input for call #2 unshare to corpus: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) unshare(0x28020600) 22:35:16 executing program 0: keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) [918124ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113342 #0 [918153ms] -> keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) #0 [918153ms] <- keyctl$chown=0x0 errno=14 cover=53 enabling collider #0 [918154ms] -> keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) #0 [918155ms] <- keyctl$chown=0x0 errno=14 cover=53 22:35:16 executing program 0: keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 2021/11/10 22:35:16 result hanged=false: 2021/11/10 22:35:16 #0: triaging type=7 2021/11/10 22:35:16 triaging input for call #0 keyctl$chown (new signal=1) [918232ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113344 #0 [918271ms] -> keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) #0 [918271ms] <- keyctl$chown=0x0 errno=14 cover=53 22:35:16 executing program 0: keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 2021/11/10 22:35:16 result hanged=false: [918346ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113346 #0 [918386ms] -> keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) #0 [918386ms] <- keyctl$chown=0x0 errno=14 cover=53 22:35:16 executing program 0: keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 2021/11/10 22:35:16 result hanged=false: [918485ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113348 #0 [918520ms] -> keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) #0 [918520ms] <- keyctl$chown=0x0 errno=14 cover=53 2021/11/10 22:35:17 result hanged=false: 2021/11/10 22:35:17 added new input for call #0 keyctl$chown to corpus: keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 22:35:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5fb, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @binary="7fdaf14f"}]}, 0x24}}, 0x0) [918590ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113350 #0 [918630ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [918643ms] <- perf_event_open=0x3 errno=14 cover=14260 #0 [918644ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [918645ms] <- socket$netlink=0x4 errno=14 cover=4179 #0 [918645ms] -> fcntl$dupfd(0x4, 0x0, 0x4) #0 [918646ms] <- fcntl$dupfd=0x5 errno=14 cover=198 #0 [918646ms] -> sendmsg$nl_generic(0x5, 0x20000280, 0x0) #0 [918647ms] <- sendmsg$nl_generic=0x24 errno=14 cover=5862 enabling collider #0 [918659ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [918660ms] <- perf_event_open=0x3 errno=14 cover=13108 #0 [918662ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [918663ms] <- socket$netlink=0x4 errno=14 cover=4370 pthread_create failed (errno 11) 22:35:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5fb, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @binary="7fdaf14f"}]}, 0x24}}, 0x0) 2021/11/10 22:35:17 result hanged=false: 2021/11/10 22:35:17 #0: triaging type=7 2021/11/10 22:35:17 triaging input for call #3 sendmsg$nl_generic (new signal=27) [918800ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113452 #0 [918824ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [918827ms] <- perf_event_open=0x3 errno=14 cover=12030 #0 [918829ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [918832ms] <- socket$netlink=0x4 errno=14 cover=1406 #0 [918832ms] -> fcntl$dupfd(0x4, 0x0, 0x4) #0 [918832ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [918833ms] -> sendmsg$nl_generic(0x5, 0x20000280, 0x0) #0 [918834ms] <- sendmsg$nl_generic=0x24 errno=14 cover=2203 22:35:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5fb, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @binary="7fdaf14f"}]}, 0x24}}, 0x0) 2021/11/10 22:35:17 result hanged=false: [918912ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113454 #0 [918943ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [918945ms] <- perf_event_open=0x3 errno=14 cover=17175 #0 [918947ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [918947ms] <- socket$netlink=0x4 errno=14 cover=1450 #0 [918948ms] -> fcntl$dupfd(0x4, 0x0, 0x4) #0 [918948ms] <- fcntl$dupfd=0x5 errno=14 cover=111 #0 [918948ms] -> sendmsg$nl_generic(0x5, 0x20000280, 0x0) #0 [918948ms] <- sendmsg$nl_generic=0x24 errno=14 cover=2157 22:35:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5fb, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @binary="7fdaf14f"}]}, 0x24}}, 0x0) 2021/11/10 22:35:17 result hanged=false: [919005ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113456 #0 [919035ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [919037ms] <- perf_event_open=0x3 errno=14 cover=12509 #0 [919038ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [919041ms] <- socket$netlink=0x4 errno=14 cover=4951 #0 [919041ms] -> fcntl$dupfd(0x4, 0x0, 0x4) #0 [919041ms] <- fcntl$dupfd=0x5 errno=14 cover=198 #0 [919044ms] -> sendmsg$nl_generic(0x5, 0x20000280, 0x0) #0 [919045ms] <- sendmsg$nl_generic=0x24 errno=14 cover=5755 2021/11/10 22:35:17 result hanged=false: 2021/11/10 22:35:17 added new input for call #3 sendmsg$nl_generic to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5fb, 0x0, 0x0, @u32}, @typed={0x8, 0x5, 0x0, 0x0, @binary="7fdaf14f"}]}, 0x24}}, 0x0) 22:35:17 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000c00), 0x2602a0, 0x0) mount$9p_fd(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x0, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [919110ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113458 #0 [919138ms] -> syz_mount_image$ext4(0x0, 0x20000200, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [919145ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13438 #0 [919145ms] -> openat(0xffffffffffffff9c, 0x200000c0, 0x42, 0x0) #0 [919149ms] <- openat=0x3 errno=14 cover=7359 #0 [919150ms] -> openat$rfkill(0xffffffffffffff9c, 0x20000c00, 0x2602a0, 0x0) #0 [919150ms] <- openat$rfkill=0x4 errno=14 cover=911 #0 [919151ms] -> mount$9p_fd(0x0, 0x20000b80, 0x20000bc0, 0x0, 0x20000c40) #0 [919152ms] <- mount$9p_fd=0xffffffffffffffff errno=5 cover=4218 enabling collider #0 [919153ms] -> syz_mount_image$ext4(0x0, 0x20000200, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [919154ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1349 #0 [919154ms] -> openat(0xffffffffffffff9c, 0x200000c0, 0x42, 0x0) #0 [919154ms] <- openat=0x3 errno=14 cover=1132 pthread_create failed (errno 11) 2021/11/10 22:35:17 result hanged=false: 22:35:17 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000c00), 0x2602a0, 0x0) mount$9p_fd(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x0, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2021/11/10 22:35:17 #0: triaging type=7 2021/11/10 22:35:17 triaging input for call #3 mount$9p_fd (new signal=5) [919242ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113560 #0 [919262ms] -> syz_mount_image$ext4(0x0, 0x20000200, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [919267ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13013 #0 [919270ms] -> openat(0xffffffffffffff9c, 0x200000c0, 0x42, 0x0) #0 [919272ms] <- openat=0x3 errno=14 cover=7308 #0 [919273ms] -> openat$rfkill(0xffffffffffffff9c, 0x20000c00, 0x2602a0, 0x0) #0 [919273ms] <- openat$rfkill=0x4 errno=14 cover=980 #0 [919273ms] -> mount$9p_fd(0x0, 0x20000b80, 0x20000bc0, 0x0, 0x20000c40) #0 [919274ms] <- mount$9p_fd=0xffffffffffffffff errno=5 cover=4163 22:35:17 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000c00), 0x2602a0, 0x0) mount$9p_fd(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x0, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2021/11/10 22:35:17 result hanged=false: [919323ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113562 #0 [919340ms] -> syz_mount_image$ext4(0x0, 0x20000200, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [919343ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12926 #0 [919344ms] -> openat(0xffffffffffffff9c, 0x200000c0, 0x42, 0x0) #0 [919346ms] <- openat=0x3 errno=14 cover=7428 #0 [919347ms] -> openat$rfkill(0xffffffffffffff9c, 0x20000c00, 0x2602a0, 0x0) #0 [919347ms] <- openat$rfkill=0x4 errno=14 cover=966 #0 [919347ms] -> mount$9p_fd(0x0, 0x20000b80, 0x20000bc0, 0x0, 0x20000c40) #0 [919348ms] <- mount$9p_fd=0xffffffffffffffff errno=5 cover=4141 2021/11/10 22:35:17 result hanged=false: 22:35:17 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000c00), 0x2602a0, 0x0) mount$9p_fd(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x0, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [919398ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113564 #0 [919414ms] -> syz_mount_image$ext4(0x0, 0x20000200, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [919419ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13504 #0 [919422ms] -> openat(0xffffffffffffff9c, 0x200000c0, 0x42, 0x0) #0 [919431ms] <- openat=0x3 errno=14 cover=7360 #0 [919432ms] -> openat$rfkill(0xffffffffffffff9c, 0x20000c00, 0x2602a0, 0x0) #0 [919432ms] <- openat$rfkill=0x4 errno=14 cover=965 #0 [919432ms] -> mount$9p_fd(0x0, 0x20000b80, 0x20000bc0, 0x0, 0x20000c40) #0 [919432ms] <- mount$9p_fd=0xffffffffffffffff errno=5 cover=4151 2021/11/10 22:35:18 result hanged=false: 2021/11/10 22:35:18 added new input for call #3 mount$9p_fd to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000c00), 0x2602a0, 0x0) mount$9p_fd(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x0, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 22:35:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0xfffffffeffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffffffd) [919506ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113566 #0 [919546ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [919552ms] <- openat=0x3 errno=14 cover=7399 #0 [919552ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [919552ms] <- socket$inet_tcp=0x4 errno=14 cover=1760 #0 [919553ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x4, 0x6, 0x13, 0x20000080, 0x4) #0 [919553ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [919553ms] -> ioctl$int_in(0x4, 0x5421, 0x200000c0) #0 [919553ms] <- ioctl$int_in=0x0 errno=14 cover=79 #0 [919553ms] -> openat(0xffffffffffffff9c, 0x200000c0, 0x101802, 0x0) #0 [919553ms] <- openat=0x5 errno=14 cover=1059 #0 [919553ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [919553ms] <- openat=0x6 errno=14 cover=2695 #0 [919553ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x0) #0 [919710ms] <- copy_file_range=0x1da688 errno=14 cover=262143 #0 [919715ms] -> connect$inet(0x4, 0x20000000, 0x10) #0 [919718ms] <- connect$inet=0x0 errno=14 cover=1185 #0 [919719ms] -> sendfile(0x4, 0x3, 0x0, 0x7ffffffd) #0 [919720ms] <- sendfile=0xfd58 errno=14 cover=16264 enabling collider #0 [919721ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [919722ms] <- openat=0x3 errno=14 cover=1184 #0 [919723ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [919723ms] <- socket$inet_tcp=0x4 errno=14 cover=1731 pthread_create failed (errno 11) 22:35:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0xfffffffeffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffffffd) 2021/11/10 22:35:18 result hanged=false: 2021/11/10 22:35:18 #0: triaging type=7 2021/11/10 22:35:18 triaging input for call #8 sendfile (new signal=20) iptable filter/2: resetting iptable mangle/2: resetting [919809ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113668 #0 [919828ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [919833ms] <- openat=0x3 errno=14 cover=7307 #0 [919834ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [919835ms] <- socket$inet_tcp=0x4 errno=14 cover=1743 #0 [919835ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x4, 0x6, 0x13, 0x20000080, 0x4) #0 [919835ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [919835ms] -> ioctl$int_in(0x4, 0x5421, 0x200000c0) #0 [919836ms] <- ioctl$int_in=0x0 errno=14 cover=79 #0 [919836ms] -> openat(0xffffffffffffff9c, 0x200000c0, 0x101802, 0x0) #0 [919836ms] <- openat=0x5 errno=14 cover=1060 #0 [919837ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [919837ms] <- openat=0x6 errno=14 cover=2682 #0 [919838ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x0) #0 [919981ms] <- copy_file_range=0x1da688 errno=14 cover=262143 #0 [919996ms] -> connect$inet(0x4, 0x20000000, 0x10) #0 [919996ms] <- connect$inet=0x0 errno=14 cover=1049 #0 [919997ms] -> sendfile(0x4, 0x3, 0x0, 0x7ffffffd) #0 [919998ms] <- sendfile=0xfd58 errno=14 cover=8020 2021/11/10 22:35:18 result hanged=false: 22:35:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0xfffffffeffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffffffd) [920055ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113670 #0 [920072ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [920078ms] <- openat=0x3 errno=14 cover=7506 #0 [920079ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [920080ms] <- socket$inet_tcp=0x4 errno=14 cover=1800 #0 [920080ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x4, 0x6, 0x13, 0x20000080, 0x4) #0 [920081ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [920083ms] -> ioctl$int_in(0x4, 0x5421, 0x200000c0) #0 [920083ms] <- ioctl$int_in=0x0 errno=14 cover=79 #0 [920085ms] -> openat(0xffffffffffffff9c, 0x200000c0, 0x101802, 0x0) #0 [920086ms] <- openat=0x5 errno=14 cover=1152 #0 [920086ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [920087ms] <- openat=0x6 errno=14 cover=2779 #0 [920088ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x0) #0 [920227ms] <- copy_file_range=0x1da688 errno=14 cover=262143 #0 [920242ms] -> connect$inet(0x4, 0x20000000, 0x10) #0 [920243ms] <- connect$inet=0x0 errno=14 cover=1049 #0 [920244ms] -> sendfile(0x4, 0x3, 0x0, 0x7ffffffd) #0 [920246ms] <- sendfile=0xfd58 errno=14 cover=11906 2021/11/10 22:35:18 result hanged=false: 22:35:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0xfffffffeffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffffffd) [920299ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113672 #0 [920322ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [920327ms] <- openat=0x3 errno=14 cover=7409 #0 [920329ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [920329ms] <- socket$inet_tcp=0x4 errno=14 cover=1797 #0 [920330ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x4, 0x6, 0x13, 0x20000080, 0x4) #0 [920330ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [920330ms] -> ioctl$int_in(0x4, 0x5421, 0x200000c0) #0 [920330ms] <- ioctl$int_in=0x0 errno=14 cover=79 #0 [920331ms] -> openat(0xffffffffffffff9c, 0x200000c0, 0x101802, 0x0) #0 [920331ms] <- openat=0x5 errno=14 cover=1069 #0 [920331ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [920332ms] <- openat=0x6 errno=14 cover=2714 #0 [920332ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x0) #0 [920471ms] <- copy_file_range=0x1da688 errno=14 cover=262143 #0 [920486ms] -> connect$inet(0x4, 0x20000000, 0x10) #0 [920486ms] <- connect$inet=0x0 errno=14 cover=1197 #0 [920486ms] -> sendfile(0x4, 0x3, 0x0, 0x7ffffffd) #0 [920488ms] <- sendfile=0xfd58 errno=14 cover=8096 2021/11/10 22:35:19 result hanged=false: 2021/11/10 22:35:19 added new input for call #8 sendfile to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0xfffffffeffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffffffd) 22:35:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0xfffffffeffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffffffd) 2021/11/10 22:35:19 #0: triaging type=7 2021/11/10 22:35:19 triaging input for call #6 copy_file_range (new signal=3) [920550ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113674 #0 [920567ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [920571ms] <- openat=0x3 errno=14 cover=7507 #0 [920572ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [920573ms] <- socket$inet_tcp=0x4 errno=14 cover=1775 #0 [920573ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x4, 0x6, 0x13, 0x20000080, 0x4) #0 [920573ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [920573ms] -> ioctl$int_in(0x4, 0x5421, 0x200000c0) #0 [920573ms] <- ioctl$int_in=0x0 errno=14 cover=79 #0 [920574ms] -> openat(0xffffffffffffff9c, 0x200000c0, 0x101802, 0x0) #0 [920574ms] <- openat=0x5 errno=14 cover=1069 #0 [920575ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [920575ms] <- openat=0x6 errno=14 cover=2681 #0 [920576ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x0) #0 [920720ms] <- copy_file_range=0x1da688 errno=14 cover=262143 #0 [920735ms] -> connect$inet(0x4, 0x20000000, 0x10) #0 [920739ms] <- connect$inet=0x0 errno=14 cover=1049 #0 [920740ms] -> sendfile(0x4, 0x3, 0x0, 0x7ffffffd) #0 [920742ms] <- sendfile=0xfd58 errno=14 cover=8134 22:35:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0xfffffffeffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffffffd) 2021/11/10 22:35:19 result hanged=false: [920792ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113676 #0 [920811ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [920817ms] <- openat=0x3 errno=14 cover=7483 #0 [920818ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [920818ms] <- socket$inet_tcp=0x4 errno=14 cover=1812 #0 [920825ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x4, 0x6, 0x13, 0x20000080, 0x4) #0 [920825ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [920825ms] -> ioctl$int_in(0x4, 0x5421, 0x200000c0) #0 [920825ms] <- ioctl$int_in=0x0 errno=14 cover=79 #0 [920825ms] -> openat(0xffffffffffffff9c, 0x200000c0, 0x101802, 0x0) #0 [920826ms] <- openat=0x5 errno=14 cover=1135 #0 [920826ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [920827ms] <- openat=0x6 errno=14 cover=2695 #0 [920827ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x0) #0 [920964ms] <- copy_file_range=0x1da688 errno=14 cover=262143 #0 [920980ms] -> connect$inet(0x4, 0x20000000, 0x10) #0 [920981ms] <- connect$inet=0x0 errno=14 cover=1060 #0 [920984ms] -> sendfile(0x4, 0x3, 0x0, 0x7ffffffd) #0 [920987ms] <- sendfile=0xfd58 errno=14 cover=8703 2021/11/10 22:35:19 result hanged=false: 22:35:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0xfffffffeffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffffffd) [921032ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113678 #0 [921050ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [921054ms] <- openat=0x3 errno=14 cover=7786 #0 [921062ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [921062ms] <- socket$inet_tcp=0x4 errno=14 cover=1797 #0 [921063ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x4, 0x6, 0x13, 0x20000080, 0x4) #0 [921063ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [921064ms] -> ioctl$int_in(0x4, 0x5421, 0x200000c0) #0 [921064ms] <- ioctl$int_in=0x0 errno=14 cover=79 #0 [921064ms] -> openat(0xffffffffffffff9c, 0x200000c0, 0x101802, 0x0) #0 [921065ms] <- openat=0x5 errno=14 cover=1183 #0 [921065ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [921066ms] <- openat=0x6 errno=14 cover=8170 #0 [921068ms] -> copy_file_range(0x6, 0x0, 0x5, 0x0, 0x200f5ef, 0x0) #0 [921200ms] <- copy_file_range=0x1da688 errno=14 cover=262143 #0 [921216ms] -> connect$inet(0x4, 0x20000000, 0x10) #0 [921216ms] <- connect$inet=0x0 errno=14 cover=1049 #0 [921216ms] -> sendfile(0x4, 0x3, 0x0, 0x7ffffffd) #0 [921218ms] <- sendfile=0xfd58 errno=14 cover=8076 2021/11/10 22:35:19 result hanged=false: 2021/11/10 22:35:19 added new input for call #6 copy_file_range to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0xfffffffeffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x7ffffffd) 22:35:19 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000300)={0x3, 0x0, 0x11, &(0x7f00000000c0)="5e3c4760563ca8153125461a3cc89b66a7"}) [921278ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113680 #0 [921295ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [921300ms] <- mknod$loop=0x0 errno=14 cover=6450 #0 [921301ms] -> creat(0x20000080, 0x0) #0 [921301ms] <- creat=0x3 errno=14 cover=1234 #0 [921301ms] -> ioctl$BLKPG(0x3, 0x1269, 0x20000300) #0 [921301ms] <- ioctl$BLKPG=0xffffffffffffffff errno=6 cover=194 enabling collider #0 [921301ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [921301ms] <- mknod$loop=0xffffffffffffffff errno=17 cover=574 #0 [921302ms] -> creat(0x20000080, 0x0) #0 [921302ms] <- creat=0x3 errno=14 cover=1191 pthread_create failed (errno 11) 22:35:19 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000300)={0x3, 0x0, 0x11, &(0x7f00000000c0)="5e3c4760563ca8153125461a3cc89b66a7"}) 2021/11/10 22:35:19 result hanged=false: 2021/11/10 22:35:19 #0: triaging type=7 2021/11/10 22:35:19 triaging input for call #2 ioctl$BLKPG (new signal=7) [921379ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113782 #0 [921401ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [921404ms] <- mknod$loop=0x0 errno=14 cover=6504 #0 [921406ms] -> creat(0x20000080, 0x0) #0 [921406ms] <- creat=0x3 errno=14 cover=1191 #0 [921406ms] -> ioctl$BLKPG(0x3, 0x1269, 0x20000300) #0 [921407ms] <- ioctl$BLKPG=0xffffffffffffffff errno=6 cover=194 22:35:19 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000300)={0x3, 0x0, 0x11, &(0x7f00000000c0)="5e3c4760563ca8153125461a3cc89b66a7"}) 2021/11/10 22:35:19 result hanged=false: [921448ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113784 #0 [921465ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [921469ms] <- mknod$loop=0x0 errno=14 cover=6526 #0 [921470ms] -> creat(0x20000080, 0x0) #0 [921470ms] <- creat=0x3 errno=14 cover=1266 #0 [921470ms] -> ioctl$BLKPG(0x3, 0x1269, 0x20000300) #0 [921471ms] <- ioctl$BLKPG=0xffffffffffffffff errno=6 cover=194 2021/11/10 22:35:20 result hanged=false: 22:35:20 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000300)={0x3, 0x0, 0x11, &(0x7f00000000c0)="5e3c4760563ca8153125461a3cc89b66a7"}) [921520ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113786 #0 [921546ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [921553ms] <- mknod$loop=0x0 errno=14 cover=6510 #0 [921555ms] -> creat(0x20000080, 0x0) #0 [921555ms] <- creat=0x3 errno=14 cover=1285 #0 [921555ms] -> ioctl$BLKPG(0x3, 0x1269, 0x20000300) #0 [921556ms] <- ioctl$BLKPG=0xffffffffffffffff errno=6 cover=194 2021/11/10 22:35:20 result hanged=false: 2021/11/10 22:35:20 added new input for call #2 ioctl$BLKPG to corpus: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000300)={0x3, 0x0, 0x11, &(0x7f00000000c0)="5e3c4760563ca8153125461a3cc89b66a7"}) 22:35:20 executing program 0: syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x5bd7, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x0) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) [921595ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113788 #0 [921617ms] -> syz_io_uring_setup(0x5, 0x20000080, 0x20ffd000, 0x200b0000, 0x20000100, 0x20000540) #0 [921630ms] <- syz_io_uring_setup=0x3 errno=14 cover=7509 #0 [921630ms] -> syz_io_uring_setup(0x5bd7, 0x20000240, 0x20ffc000, 0x20ffc000, 0x200002c0, 0x20000300) #0 [921633ms] <- syz_io_uring_setup=0x4 errno=14 cover=21280 #0 [921634ms] -> syz_io_uring_submit(0x20ffd000, 0x20ffc000, 0x20000340, 0x0) #0 [921635ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [921635ms] -> sigaltstack(0x20ffc000, 0x0) #0 [921635ms] <- sigaltstack=0x0 errno=14 cover=65 enabling collider #0 [921635ms] -> syz_io_uring_setup(0x5, 0x20000080, 0x20ffd000, 0x200b0000, 0x20000100, 0x20000540) #0 [921637ms] <- syz_io_uring_setup=0x3 errno=14 cover=5877 #0 [921637ms] -> syz_io_uring_setup(0x5bd7, 0x20000240, 0x20ffc000, 0x20ffc000, 0x200002c0, 0x20000300) #0 [921640ms] <- syz_io_uring_setup=0x4 errno=14 cover=29296 pthread_create failed (errno 11) 22:35:20 executing program 0: syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x5bd7, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x0) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) 2021/11/10 22:35:20 result hanged=false: 2021/11/10 22:35:20 #0: triaging type=7 2021/11/10 22:35:20 triaging input for call #3 sigaltstack (new signal=20) [921708ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113890 #0 [921724ms] -> syz_io_uring_setup(0x5, 0x20000080, 0x20ffd000, 0x200b0000, 0x20000100, 0x20000540) #0 [921728ms] <- syz_io_uring_setup=0x3 errno=14 cover=7760 #0 [921729ms] -> syz_io_uring_setup(0x5bd7, 0x20000240, 0x20ffc000, 0x20ffc000, 0x200002c0, 0x20000300) #0 [921731ms] <- syz_io_uring_setup=0x4 errno=14 cover=20719 #0 [921736ms] -> syz_io_uring_submit(0x20ffd000, 0x20ffc000, 0x20000340, 0x0) #0 [921736ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [921738ms] -> sigaltstack(0x20ffc000, 0x0) #0 [921738ms] <- sigaltstack=0x0 errno=14 cover=65 2021/11/10 22:35:20 result hanged=false: 22:35:20 executing program 0: syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x5bd7, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x0) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) [921779ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113892 #0 [921796ms] -> syz_io_uring_setup(0x5, 0x20000080, 0x20ffd000, 0x200b0000, 0x20000100, 0x20000540) #0 [921798ms] <- syz_io_uring_setup=0x3 errno=14 cover=7630 #0 [921799ms] -> syz_io_uring_setup(0x5bd7, 0x20000240, 0x20ffc000, 0x20ffc000, 0x200002c0, 0x20000300) #0 [921802ms] <- syz_io_uring_setup=0x4 errno=14 cover=20693 #0 [921803ms] -> syz_io_uring_submit(0x20ffd000, 0x20ffc000, 0x20000340, 0x0) #0 [921804ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [921804ms] -> sigaltstack(0x20ffc000, 0x0) #0 [921804ms] <- sigaltstack=0x0 errno=14 cover=65 22:35:20 executing program 0: syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x5bd7, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x0) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) 2021/11/10 22:35:20 result hanged=false: [921841ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113894 #0 [921868ms] -> syz_io_uring_setup(0x5, 0x20000080, 0x20ffd000, 0x200b0000, 0x20000100, 0x20000540) #0 [921870ms] <- syz_io_uring_setup=0x3 errno=14 cover=7848 #0 [921871ms] -> syz_io_uring_setup(0x5bd7, 0x20000240, 0x20ffc000, 0x20ffc000, 0x200002c0, 0x20000300) #0 [921875ms] <- syz_io_uring_setup=0x4 errno=14 cover=21026 #0 [921876ms] -> syz_io_uring_submit(0x20ffd000, 0x20ffc000, 0x20000340, 0x0) #0 [921876ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [921876ms] -> sigaltstack(0x20ffc000, 0x0) #0 [921876ms] <- sigaltstack=0x0 errno=14 cover=65 2021/11/10 22:35:20 result hanged=false: 2021/11/10 22:35:20 added new input for call #3 sigaltstack to corpus: syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x5bd7, &(0x7f0000000240), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x0) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) 22:35:20 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 2021/11/10 22:35:20 poll: candidates=8 inputs=0 signal=0 [921919ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113896 #0 [921937ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [921939ms] <- mknod$loop=0x0 errno=14 cover=6907 #0 [921940ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [921941ms] <- openat=0x3 errno=14 cover=1176 #0 [921942ms] -> stat(0x20000600, 0x20001c00) #0 [921942ms] <- stat=0x0 errno=14 cover=959 #0 [921945ms] -> setresuid(0xffffffffffffffff, 0x6000, 0x0) #0 [921945ms] <- setresuid=0x0 errno=14 cover=496 #0 [921945ms] -> ioctl$LOOP_SET_STATUS(0x3, 0x4c02, 0x0) #0 [921945ms] <- ioctl$LOOP_SET_STATUS=0xffffffffffffffff errno=1 cover=122 enabling collider #0 [921946ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [921946ms] <- mknod$loop=0xffffffffffffffff errno=17 cover=592 #0 [921946ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [921947ms] <- openat=0xffffffffffffffff errno=13 cover=1033 pthread_create failed (errno 11) 2021/11/10 22:35:20 result hanged=false: 22:35:20 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 2021/11/10 22:35:20 #0: triaging type=7 2021/11/10 22:35:20 triaging input for call #4 ioctl$LOOP_SET_STATUS (new signal=1) [922013ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 113998 #0 [922031ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [922035ms] <- mknod$loop=0x0 errno=14 cover=6484 #0 [922036ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [922036ms] <- openat=0x3 errno=14 cover=1218 #0 [922036ms] -> stat(0x20000600, 0x20001c00) #0 [922037ms] <- stat=0x0 errno=14 cover=917 #0 [922037ms] -> setresuid(0xffffffffffffffff, 0x6000, 0x0) #0 [922037ms] <- setresuid=0x0 errno=14 cover=420 #0 [922038ms] -> ioctl$LOOP_SET_STATUS(0x3, 0x4c02, 0x0) #0 [922038ms] <- ioctl$LOOP_SET_STATUS=0xffffffffffffffff errno=1 cover=122 22:35:20 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 2021/11/10 22:35:20 result hanged=false: [922079ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114000 #0 [922095ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [922099ms] <- mknod$loop=0x0 errno=14 cover=6479 #0 [922100ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [922100ms] <- openat=0x3 errno=14 cover=1240 #0 [922101ms] -> stat(0x20000600, 0x20001c00) #0 [922101ms] <- stat=0x0 errno=14 cover=916 #0 [922101ms] -> setresuid(0xffffffffffffffff, 0x6000, 0x0) #0 [922101ms] <- setresuid=0x0 errno=14 cover=431 #0 [922102ms] -> ioctl$LOOP_SET_STATUS(0x3, 0x4c02, 0x0) #0 [922102ms] <- ioctl$LOOP_SET_STATUS=0xffffffffffffffff errno=1 cover=122 22:35:20 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 2021/11/10 22:35:20 result hanged=false: [922143ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114002 #0 [922162ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [922167ms] <- mknod$loop=0x0 errno=14 cover=6372 #0 [922168ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [922169ms] <- openat=0x3 errno=14 cover=1145 #0 [922170ms] -> stat(0x20000600, 0x20001c00) #0 [922170ms] <- stat=0x0 errno=14 cover=905 #0 [922170ms] -> setresuid(0xffffffffffffffff, 0x6000, 0x0) #0 [922170ms] <- setresuid=0x0 errno=14 cover=387 #0 [922170ms] -> ioctl$LOOP_SET_STATUS(0x3, 0x4c02, 0x0) #0 [922170ms] <- ioctl$LOOP_SET_STATUS=0xffffffffffffffff errno=1 cover=122 2021/11/10 22:35:20 result hanged=false: 2021/11/10 22:35:20 added new input for call #4 ioctl$LOOP_SET_STATUS to corpus: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 22:35:20 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 2021/11/10 22:35:20 #0: triaging type=7 2021/11/10 22:35:20 triaging input for call #0 mknod$loop (new signal=1) [922209ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114004 #0 [922230ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [922235ms] <- mknod$loop=0x0 errno=14 cover=6587 #0 [922236ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [922236ms] <- openat=0x3 errno=14 cover=1147 #0 [922237ms] -> stat(0x20000600, 0x20001c00) #0 [922237ms] <- stat=0x0 errno=14 cover=916 #0 [922238ms] -> setresuid(0xffffffffffffffff, 0x6000, 0x0) #0 [922238ms] <- setresuid=0x0 errno=14 cover=387 #0 [922238ms] -> ioctl$LOOP_SET_STATUS(0x3, 0x4c02, 0x0) #0 [922238ms] <- ioctl$LOOP_SET_STATUS=0xffffffffffffffff errno=1 cover=122 2021/11/10 22:35:20 result hanged=false: 22:35:20 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) [922277ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114006 #0 [922297ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [922301ms] <- mknod$loop=0x0 errno=14 cover=6627 #0 [922302ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [922303ms] <- openat=0x3 errno=14 cover=1200 #0 [922303ms] -> stat(0x20000600, 0x20001c00) #0 [922303ms] <- stat=0x0 errno=14 cover=917 #0 [922303ms] -> setresuid(0xffffffffffffffff, 0x6000, 0x0) #0 [922303ms] <- setresuid=0x0 errno=14 cover=387 #0 [922304ms] -> ioctl$LOOP_SET_STATUS(0x3, 0x4c02, 0x0) #0 [922304ms] <- ioctl$LOOP_SET_STATUS=0xffffffffffffffff errno=1 cover=122 2021/11/10 22:35:20 result hanged=false: 22:35:20 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) [922346ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114008 #0 [922370ms] -> mknod$loop(0x20000400, 0x6000, 0x700) #0 [922374ms] <- mknod$loop=0x0 errno=14 cover=6455 #0 [922376ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [922376ms] <- openat=0x3 errno=14 cover=1188 #0 [922376ms] -> stat(0x20000600, 0x20001c00) #0 [922376ms] <- stat=0x0 errno=14 cover=928 #0 [922376ms] -> setresuid(0xffffffffffffffff, 0x6000, 0x0) #0 [922377ms] <- setresuid=0x0 errno=14 cover=376 #0 [922377ms] -> ioctl$LOOP_SET_STATUS(0x3, 0x4c02, 0x0) #0 [922377ms] <- ioctl$LOOP_SET_STATUS=0xffffffffffffffff errno=1 cover=122 2021/11/10 22:35:20 result hanged=false: 2021/11/10 22:35:20 added new input for call #0 mknod$loop to corpus: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 22:35:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002780)={0x18, 0x68, 0xc21, 0x0, 0x0, {}, [@typed={0x4}]}, 0x18}}, 0x0) [922427ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114010 #0 [922445ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [922446ms] <- socket$netlink=0x3 errno=14 cover=1406 #0 [922446ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [922447ms] <- sendmsg$nl_generic=0x18 errno=14 cover=1695 enabling collider #0 [922448ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [922448ms] <- socket$netlink=0x3 errno=14 cover=1427 2021/11/10 22:35:21 result hanged=false: 2021/11/10 22:35:21 #0: triaging type=7 2021/11/10 22:35:21 triaging input for call #1 sendmsg$nl_generic (new signal=7) 22:35:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002780)={0x18, 0x68, 0xc21, 0x0, 0x0, {}, [@typed={0x4}]}, 0x18}}, 0x0) [922485ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114012 #0 [922501ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [922504ms] <- socket$netlink=0x3 errno=14 cover=5095 #0 [922507ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [922507ms] <- sendmsg$nl_generic=0x18 errno=14 cover=1694 22:35:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002780)={0x18, 0x68, 0xc21, 0x0, 0x0, {}, [@typed={0x4}]}, 0x18}}, 0x0) 2021/11/10 22:35:21 result hanged=false: [922552ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114014 #0 [922577ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [922577ms] <- socket$netlink=0x3 errno=14 cover=1428 #0 [922578ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [922579ms] <- sendmsg$nl_generic=0x18 errno=14 cover=1712 22:35:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002780)={0x18, 0x68, 0xc21, 0x0, 0x0, {}, [@typed={0x4}]}, 0x18}}, 0x0) 2021/11/10 22:35:21 result hanged=false: [922623ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114016 #0 [922641ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [922642ms] <- socket$netlink=0x3 errno=14 cover=1431 #0 [922644ms] -> sendmsg$nl_generic(0x3, 0x20000280, 0x0) #0 [922644ms] <- sendmsg$nl_generic=0x18 errno=14 cover=1706 2021/11/10 22:35:21 result hanged=false: 2021/11/10 22:35:21 added new input for call #1 sendmsg$nl_generic to corpus: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002780)={0x18, 0x68, 0xc21, 0x0, 0x0, {}, [@typed={0x4}]}, 0x18}}, 0x0) 22:35:21 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010000000000000004000000000000000800000000000000200000000500000000001b008cc295d8abc70100000000000000d7bbc139397ce68c3d103dcb238668ac0b33031376db41ec08997b9e7656556a9c12124526558ce6fced8a73d0e378ba5b1667c3eabeb11be8d498c78a180c51233280b46b22b5ee96407b755c322c775a30aa6b0ae0d3456a46e839a9a4879fc4108c6e1c17df45ac83173d788f777711a8a7015211ff14e9aa48279f45edb234e5bd08357db6bacdc76c4b2878cd90f035bd4a55b1a4144b279bea4b558083c0d78177a66f35ad183ed698d7e3c31b34f37fe6a3c73b96a1f0161e85e42d"], 0x24, 0x0) [922692ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114018 #0 [922717ms] -> syz_mount_image$tmpfs(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [922723ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=13256 #0 [922723ms] -> setxattr$system_posix_acl(0x20000500, 0x20000540, 0x20000240, 0x24, 0x0) #0 [922723ms] <- setxattr$system_posix_acl=0xffffffffffffffff errno=22 cover=1212 enabling collider #0 [922723ms] -> syz_mount_image$tmpfs(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [922724ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=17 cover=1394 2021/11/10 22:35:21 result hanged=false: 22:35:21 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010000000000000004000000000000000800000000000000200000000500000000001b008cc295d8abc70100000000000000d7bbc139397ce68c3d103dcb238668ac0b33031376db41ec08997b9e7656556a9c12124526558ce6fced8a73d0e378ba5b1667c3eabeb11be8d498c78a180c51233280b46b22b5ee96407b755c322c775a30aa6b0ae0d3456a46e839a9a4879fc4108c6e1c17df45ac83173d788f777711a8a7015211ff14e9aa48279f45edb234e5bd08357db6bacdc76c4b2878cd90f035bd4a55b1a4144b279bea4b558083c0d78177a66f35ad183ed698d7e3c31b34f37fe6a3c73b96a1f0161e85e42d"], 0x24, 0x0) 2021/11/10 22:35:21 #0: triaging type=7 2021/11/10 22:35:21 triaging input for call #1 setxattr$system_posix_acl (new signal=3) [922763ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114020 #0 [922782ms] -> syz_mount_image$tmpfs(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [922789ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=12862 #0 [922795ms] -> setxattr$system_posix_acl(0x20000500, 0x20000540, 0x20000240, 0x24, 0x0) #0 [922796ms] <- setxattr$system_posix_acl=0xffffffffffffffff errno=22 cover=1198 22:35:21 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010000000000000004000000000000000800000000000000200000000500000000001b008cc295d8abc70100000000000000d7bbc139397ce68c3d103dcb238668ac0b33031376db41ec08997b9e7656556a9c12124526558ce6fced8a73d0e378ba5b1667c3eabeb11be8d498c78a180c51233280b46b22b5ee96407b755c322c775a30aa6b0ae0d3456a46e839a9a4879fc4108c6e1c17df45ac83173d788f777711a8a7015211ff14e9aa48279f45edb234e5bd08357db6bacdc76c4b2878cd90f035bd4a55b1a4144b279bea4b558083c0d78177a66f35ad183ed698d7e3c31b34f37fe6a3c73b96a1f0161e85e42d"], 0x24, 0x0) 2021/11/10 22:35:21 result hanged=false: [922836ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114022 #0 [922868ms] -> syz_mount_image$tmpfs(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [922888ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=13023 #0 [922889ms] -> setxattr$system_posix_acl(0x20000500, 0x20000540, 0x20000240, 0x24, 0x0) #0 [922890ms] <- setxattr$system_posix_acl=0xffffffffffffffff errno=22 cover=1200 22:35:21 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010000000000000004000000000000000800000000000000200000000500000000001b008cc295d8abc70100000000000000d7bbc139397ce68c3d103dcb238668ac0b33031376db41ec08997b9e7656556a9c12124526558ce6fced8a73d0e378ba5b1667c3eabeb11be8d498c78a180c51233280b46b22b5ee96407b755c322c775a30aa6b0ae0d3456a46e839a9a4879fc4108c6e1c17df45ac83173d788f777711a8a7015211ff14e9aa48279f45edb234e5bd08357db6bacdc76c4b2878cd90f035bd4a55b1a4144b279bea4b558083c0d78177a66f35ad183ed698d7e3c31b34f37fe6a3c73b96a1f0161e85e42d"], 0x24, 0x0) 2021/11/10 22:35:21 result hanged=false: [922935ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114024 #0 [922957ms] -> syz_mount_image$tmpfs(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [922962ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=13259 #0 [922964ms] -> setxattr$system_posix_acl(0x20000500, 0x20000540, 0x20000240, 0x24, 0x0) #0 [922964ms] <- setxattr$system_posix_acl=0xffffffffffffffff errno=22 cover=1253 2021/11/10 22:35:21 result hanged=false: 2021/11/10 22:35:21 added new input for call #1 setxattr$system_posix_acl to corpus: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010000000000000004000000000000000800000000000000200000000500000000001b008cc295d8abc70100000000000000d7bbc139397ce68c3d103dcb238668ac0b33031376db41ec08997b9e7656556a9c12124526558ce6fced8a73d0e378ba5b1667c3eabeb11be8d498c78a180c51233280b46b22b5ee96407b755c322c775a30aa6b0ae0d3456a46e839a9a4879fc4108c6e1c17df45ac83173d788f777711a8a7015211ff14e9aa48279f45edb234e5bd08357db6bacdc76c4b2878cd90f035bd4a55b1a4144b279bea4b558083c0d78177a66f35ad183ed698d7e3c31b34f37fe6a3c73b96a1f0161e85e42d"], 0x24, 0x0) 2021/11/10 22:35:21 #0: triaging type=7 22:35:21 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010000000000000004000000000000000800000000000000200000000500000000001b008cc295d8abc70100000000000000d7bbc139397ce68c3d103dcb238668ac0b33031376db41ec08997b9e7656556a9c12124526558ce6fced8a73d0e378ba5b1667c3eabeb11be8d498c78a180c51233280b46b22b5ee96407b755c322c775a30aa6b0ae0d3456a46e839a9a4879fc4108c6e1c17df45ac83173d788f777711a8a7015211ff14e9aa48279f45edb234e5bd08357db6bacdc76c4b2878cd90f035bd4a55b1a4144b279bea4b558083c0d78177a66f35ad183ed698d7e3c31b34f37fe6a3c73b96a1f0161e85e42d"], 0x24, 0x0) 2021/11/10 22:35:21 triaging input for call #0 syz_mount_image$tmpfs (new signal=1) [923008ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114026 #0 [923053ms] -> syz_mount_image$tmpfs(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [923060ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=13718 #0 [923062ms] -> setxattr$system_posix_acl(0x20000500, 0x20000540, 0x20000240, 0x24, 0x0) #0 [923062ms] <- setxattr$system_posix_acl=0xffffffffffffffff errno=22 cover=1198 22:35:21 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010000000000000004000000000000000800000000000000200000000500000000001b008cc295d8abc70100000000000000d7bbc139397ce68c3d103dcb238668ac0b33031376db41ec08997b9e7656556a9c12124526558ce6fced8a73d0e378ba5b1667c3eabeb11be8d498c78a180c51233280b46b22b5ee96407b755c322c775a30aa6b0ae0d3456a46e839a9a4879fc4108c6e1c17df45ac83173d788f777711a8a7015211ff14e9aa48279f45edb234e5bd08357db6bacdc76c4b2878cd90f035bd4a55b1a4144b279bea4b558083c0d78177a66f35ad183ed698d7e3c31b34f37fe6a3c73b96a1f0161e85e42d"], 0x24, 0x0) 2021/11/10 22:35:21 result hanged=false: [923102ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114028 #0 [923118ms] -> syz_mount_image$tmpfs(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [923123ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=13091 #0 [923124ms] -> setxattr$system_posix_acl(0x20000500, 0x20000540, 0x20000240, 0x24, 0x0) #0 [923124ms] <- setxattr$system_posix_acl=0xffffffffffffffff errno=22 cover=1188 22:35:21 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010000000000000004000000000000000800000000000000200000000500000000001b008cc295d8abc70100000000000000d7bbc139397ce68c3d103dcb238668ac0b33031376db41ec08997b9e7656556a9c12124526558ce6fced8a73d0e378ba5b1667c3eabeb11be8d498c78a180c51233280b46b22b5ee96407b755c322c775a30aa6b0ae0d3456a46e839a9a4879fc4108c6e1c17df45ac83173d788f777711a8a7015211ff14e9aa48279f45edb234e5bd08357db6bacdc76c4b2878cd90f035bd4a55b1a4144b279bea4b558083c0d78177a66f35ad183ed698d7e3c31b34f37fe6a3c73b96a1f0161e85e42d"], 0x24, 0x0) 2021/11/10 22:35:21 result hanged=false: [923165ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114030 #0 [923182ms] -> syz_mount_image$tmpfs(0x0, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [923186ms] <- syz_mount_image$tmpfs=0xffffffffffffffff errno=14 cover=12877 #0 [923188ms] -> setxattr$system_posix_acl(0x20000500, 0x20000540, 0x20000240, 0x24, 0x0) #0 [923188ms] <- setxattr$system_posix_acl=0xffffffffffffffff errno=22 cover=1189 2021/11/10 22:35:21 result hanged=false: 2021/11/10 22:35:21 added new input for call #0 syz_mount_image$tmpfs to corpus: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010000000000000004000000000000000800000000000000200000000500000000001b008cc295d8abc70100000000000000d7bbc139397ce68c3d103dcb238668ac0b33031376db41ec08997b9e7656556a9c12124526558ce6fced8a73d0e378ba5b1667c3eabeb11be8d498c78a180c51233280b46b22b5ee96407b755c322c775a30aa6b0ae0d3456a46e839a9a4879fc4108c6e1c17df45ac83173d788f777711a8a7015211ff14e9aa48279f45edb234e5bd08357db6bacdc76c4b2878cd90f035bd4a55b1a4144b279bea4b558083c0d78177a66f35ad183ed698d7e3c31b34f37fe6a3c73b96a1f0161e85e42d"], 0x24, 0x0) 22:35:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x40) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffbfffffffd}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000080), 0x0) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, 0x0) fork() [923227ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114032 #0 [923244ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [923248ms] <- openat=0x3 errno=14 cover=7409 #0 [923249ms] -> creat(0x20000200, 0x40) #0 [923251ms] <- creat=0x4 errno=14 cover=5576 #0 [923251ms] -> ioctl$FITRIM(0x4, 0xc0185879, 0x200000c0) #0 [923275ms] <- ioctl$FITRIM=0x0 errno=14 cover=164071 #0 [923277ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [923278ms] <- syz_init_net_socket$802154_dgram=0x6 errno=14 cover=6334 #0 [923279ms] -> ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0x6, 0x8983, 0x200001c0) #0 [923294ms] <- ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD=0xffffffffffffffff errno=65 cover=2029 #0 [923294ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [923295ms] <- syz_init_net_socket$802154_dgram=0x7 errno=14 cover=5496 #0 [923296ms] -> prlimit64(0x0, 0x6, 0x20000080, 0x0) #0 [923296ms] <- prlimit64=0x0 errno=14 cover=126 #0 [923296ms] -> stat(0x20000240, 0x20001c00) #0 [923296ms] <- stat=0x0 errno=14 cover=913 #0 [923297ms] -> setreuid(0x8000, 0x0) #0 [923297ms] <- setreuid=0x0 errno=14 cover=499 #0 [923297ms] -> fork() #0 [923312ms] <- fork=0xffffffffffffffff errno=11 cover=262143 enabling collider #0 [923316ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [923319ms] <- openat=0x3 errno=14 cover=1142 #0 [923320ms] -> creat(0x20000200, 0x40) #0 [923325ms] <- creat=0x4 errno=14 cover=5661 pthread_create failed (errno 11) 22:35:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x40) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffbfffffffd}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000080), 0x0) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, 0x0) fork() 2021/11/10 22:35:21 result hanged=false: 2021/11/10 22:35:21 #0: triaging type=7 2021/11/10 22:35:21 triaging input for call #9 fork (new signal=1) [923403ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114135 #0 [923438ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [923440ms] <- openat=0x3 errno=14 cover=7563 #0 [923441ms] -> creat(0x20000200, 0x40) #0 [923444ms] <- creat=0x4 errno=14 cover=5628 #0 [923445ms] -> ioctl$FITRIM(0x4, 0xc0185879, 0x200000c0) #0 [923447ms] <- ioctl$FITRIM=0x0 errno=14 cover=15872 #0 [923448ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [923449ms] <- syz_init_net_socket$802154_dgram=0x6 errno=14 cover=6273 #0 [923450ms] -> ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0x6, 0x8983, 0x200001c0) #0 [923464ms] <- ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD=0xffffffffffffffff errno=65 cover=854 #0 [923464ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [923465ms] <- syz_init_net_socket$802154_dgram=0x7 errno=14 cover=5565 #0 [923466ms] -> prlimit64(0x0, 0x6, 0x20000080, 0x0) #0 [923466ms] <- prlimit64=0x0 errno=14 cover=126 #0 [923466ms] -> stat(0x20000240, 0x20001c00) #0 [923467ms] <- stat=0x0 errno=14 cover=960 #0 [923467ms] -> setreuid(0x8000, 0x0) #0 [923467ms] <- setreuid=0x0 errno=14 cover=510 #0 [923468ms] -> fork() #0 [923483ms] <- fork=0xffffffffffffffff errno=11 cover=262143 22:35:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x40) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffbfffffffd}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000080), 0x0) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, 0x0) fork() 2021/11/10 22:35:22 result hanged=false: [923531ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114138 #0 [923547ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [923554ms] <- openat=0x3 errno=14 cover=7410 #0 [923555ms] -> creat(0x20000200, 0x40) #0 [923558ms] <- creat=0x4 errno=14 cover=5615 #0 [923558ms] -> ioctl$FITRIM(0x4, 0xc0185879, 0x200000c0) #0 [923561ms] <- ioctl$FITRIM=0x0 errno=14 cover=15904 #0 [923562ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [923563ms] <- syz_init_net_socket$802154_dgram=0x6 errno=14 cover=6398 #0 [923563ms] -> ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0x6, 0x8983, 0x200001c0) #0 [923577ms] <- ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD=0xffffffffffffffff errno=65 cover=867 #0 [923578ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [923578ms] <- syz_init_net_socket$802154_dgram=0x7 errno=14 cover=5440 #0 [923579ms] -> prlimit64(0x0, 0x6, 0x20000080, 0x0) #0 [923579ms] <- prlimit64=0x0 errno=14 cover=126 #0 [923580ms] -> stat(0x20000240, 0x20001c00) #0 [923580ms] <- stat=0x0 errno=14 cover=1565 #0 [923580ms] -> setreuid(0x8000, 0x0) #0 [923580ms] <- setreuid=0x0 errno=14 cover=488 #0 [923580ms] -> fork() #0 [923595ms] <- fork=0xffffffffffffffff errno=11 cover=262143 22:35:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x40) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffbfffffffd}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000080), 0x0) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, 0x0) fork() 2021/11/10 22:35:22 result hanged=false: [923647ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114141 #0 [923662ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [923666ms] <- openat=0x3 errno=14 cover=7423 #0 [923668ms] -> creat(0x20000200, 0x40) #0 [923670ms] <- creat=0x4 errno=14 cover=5625 #0 [923671ms] -> ioctl$FITRIM(0x4, 0xc0185879, 0x200000c0) #0 [923676ms] <- ioctl$FITRIM=0x0 errno=14 cover=15916 #0 [923677ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [923678ms] <- syz_init_net_socket$802154_dgram=0x6 errno=14 cover=6357 #0 [923679ms] -> ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0x6, 0x8983, 0x200001c0) #0 [923689ms] <- ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD=0xffffffffffffffff errno=65 cover=977 #0 [923691ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [923692ms] <- syz_init_net_socket$802154_dgram=0x7 errno=14 cover=5550 #0 [923692ms] -> prlimit64(0x0, 0x6, 0x20000080, 0x0) #0 [923693ms] <- prlimit64=0x0 errno=14 cover=126 #0 [923693ms] -> stat(0x20000240, 0x20001c00) #0 [923693ms] <- stat=0x0 errno=14 cover=914 #0 [923693ms] -> setreuid(0x8000, 0x0) #0 [923693ms] <- setreuid=0x0 errno=14 cover=499 #0 [923693ms] -> fork() #0 [923703ms] <- fork=0xffffffffffffffff errno=11 cover=262143 2021/11/10 22:35:22 result hanged=false: 2021/11/10 22:35:22 added new input for call #9 fork to corpus: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x40) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffbfffffffd}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000080), 0x0) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, 0x0) fork() 22:35:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x40) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffbfffffffd}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000080), 0x0) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, 0x0) fork() 2021/11/10 22:35:22 #0: triaging type=7 2021/11/10 22:35:22 triaging input for call #8 setreuid (new signal=4) [923749ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114144 #0 [923761ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [923763ms] <- openat=0x3 errno=14 cover=7336 #0 [923765ms] -> creat(0x20000200, 0x40) #0 [923767ms] <- creat=0x4 errno=14 cover=5615 #0 [923767ms] -> ioctl$FITRIM(0x4, 0xc0185879, 0x200000c0) #0 [923771ms] <- ioctl$FITRIM=0x0 errno=14 cover=15933 #0 [923773ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [923774ms] <- syz_init_net_socket$802154_dgram=0x6 errno=14 cover=6371 #0 [923775ms] -> ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0x6, 0x8983, 0x200001c0) #0 [923790ms] <- ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD=0xffffffffffffffff errno=65 cover=844 #0 [923791ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [923791ms] <- syz_init_net_socket$802154_dgram=0x7 errno=14 cover=5612 #0 [923792ms] -> prlimit64(0x0, 0x6, 0x20000080, 0x0) #0 [923792ms] <- prlimit64=0x0 errno=14 cover=126 #0 [923793ms] -> stat(0x20000240, 0x20001c00) #0 [923793ms] <- stat=0x0 errno=14 cover=925 #0 [923794ms] -> setreuid(0x8000, 0x0) #0 [923794ms] <- setreuid=0x0 errno=14 cover=499 #0 [923795ms] -> fork() #0 [923806ms] <- fork=0xffffffffffffffff errno=11 cover=262143 22:35:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x40) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffbfffffffd}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000080), 0x0) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, 0x0) fork() 2021/11/10 22:35:22 result hanged=false: [923850ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114147 #0 [923868ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [923872ms] <- openat=0x3 errno=14 cover=7454 #0 [923873ms] -> creat(0x20000200, 0x40) #0 [923875ms] <- creat=0x4 errno=14 cover=5654 #0 [923876ms] -> ioctl$FITRIM(0x4, 0xc0185879, 0x200000c0) #0 [923878ms] <- ioctl$FITRIM=0x0 errno=14 cover=15919 #0 [923879ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [923881ms] <- syz_init_net_socket$802154_dgram=0x6 errno=14 cover=6289 #0 [923881ms] -> ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0x6, 0x8983, 0x200001c0) #0 [923891ms] <- ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD=0xffffffffffffffff errno=65 cover=870 #0 [923891ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [923892ms] <- syz_init_net_socket$802154_dgram=0x7 errno=14 cover=5482 #0 [923893ms] -> prlimit64(0x0, 0x6, 0x20000080, 0x0) #0 [923893ms] <- prlimit64=0x0 errno=14 cover=126 #0 [923893ms] -> stat(0x20000240, 0x20001c00) #0 [923894ms] <- stat=0x0 errno=14 cover=963 #0 [923895ms] -> setreuid(0x8000, 0x0) #0 [923895ms] <- setreuid=0x0 errno=14 cover=488 #0 [923895ms] -> fork() #0 [923906ms] <- fork=0xffffffffffffffff errno=11 cover=262143 22:35:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x40) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffbfffffffd}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000080), 0x0) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, 0x0) fork() 2021/11/10 22:35:22 result hanged=false: [923951ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114150 #0 [923971ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [923976ms] <- openat=0x3 errno=14 cover=7296 #0 [923977ms] -> creat(0x20000200, 0x40) #0 [923982ms] <- creat=0x4 errno=14 cover=5657 #0 [923983ms] -> ioctl$FITRIM(0x4, 0xc0185879, 0x200000c0) #0 [923985ms] <- ioctl$FITRIM=0x0 errno=14 cover=15905 #0 [923986ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [923987ms] <- syz_init_net_socket$802154_dgram=0x6 errno=14 cover=6360 #0 [923988ms] -> ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0x6, 0x8983, 0x200001c0) #0 [923998ms] <- ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD=0xffffffffffffffff errno=65 cover=983 #0 [923998ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [923999ms] <- syz_init_net_socket$802154_dgram=0x7 errno=14 cover=5452 #0 [924000ms] -> prlimit64(0x0, 0x6, 0x20000080, 0x0) #0 [924000ms] <- prlimit64=0x0 errno=14 cover=126 #0 [924000ms] -> stat(0x20000240, 0x20001c00) #0 [924000ms] <- stat=0x0 errno=14 cover=924 #0 [924000ms] -> setreuid(0x8000, 0x0) #0 [924001ms] <- setreuid=0x0 errno=14 cover=488 #0 [924001ms] -> fork() #0 [924013ms] <- fork=0xffffffffffffffff errno=11 cover=262143 2021/11/10 22:35:22 result hanged=false: 2021/11/10 22:35:22 added new input for call #8 setreuid to corpus: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x40) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffbfffffffd}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000080), 0x0) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, 0x0) fork() 22:35:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x40) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffbfffffffd}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000080), 0x0) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, 0x0) fork() 2021/11/10 22:35:22 #0: triaging type=7 2021/11/10 22:35:22 triaging input for call #2 ioctl$FITRIM (new signal=7) [924076ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114153 #0 [924094ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [924099ms] <- openat=0x3 errno=14 cover=7301 #0 [924101ms] -> creat(0x20000200, 0x40) #0 [924102ms] <- creat=0x4 errno=14 cover=5746 #0 [924103ms] -> ioctl$FITRIM(0x4, 0xc0185879, 0x200000c0) #0 [924105ms] <- ioctl$FITRIM=0x0 errno=14 cover=15882 #0 [924107ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [924108ms] <- syz_init_net_socket$802154_dgram=0x6 errno=14 cover=6363 #0 [924109ms] -> ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0x6, 0x8983, 0x200001c0) #0 [924121ms] <- ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD=0xffffffffffffffff errno=65 cover=1050 #0 [924122ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [924123ms] <- syz_init_net_socket$802154_dgram=0x7 errno=14 cover=5687 #0 [924124ms] -> prlimit64(0x0, 0x6, 0x20000080, 0x0) #0 [924124ms] <- prlimit64=0x0 errno=14 cover=126 #0 [924124ms] -> stat(0x20000240, 0x20001c00) #0 [924124ms] <- stat=0x0 errno=14 cover=942 #0 [924125ms] -> setreuid(0x8000, 0x0) #0 [924125ms] <- setreuid=0x0 errno=14 cover=510 #0 [924126ms] -> fork() #0 [924139ms] <- fork=0xffffffffffffffff errno=11 cover=262143 22:35:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x40) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffbfffffffd}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000080), 0x0) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, 0x0) fork() 2021/11/10 22:35:22 result hanged=false: [924183ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114156 #0 [924202ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [924213ms] <- openat=0x3 errno=14 cover=7374 #0 [924216ms] -> creat(0x20000200, 0x40) #0 [924219ms] <- creat=0x4 errno=14 cover=5699 #0 [924220ms] -> ioctl$FITRIM(0x4, 0xc0185879, 0x200000c0) #0 [924223ms] <- ioctl$FITRIM=0x0 errno=14 cover=15937 #0 [924224ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [924225ms] <- syz_init_net_socket$802154_dgram=0x6 errno=14 cover=6349 #0 [924226ms] -> ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0x6, 0x8983, 0x200001c0) #0 [924239ms] <- ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD=0xffffffffffffffff errno=65 cover=878 #0 [924239ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [924240ms] <- syz_init_net_socket$802154_dgram=0x7 errno=14 cover=5456 #0 [924241ms] -> prlimit64(0x0, 0x6, 0x20000080, 0x0) #0 [924241ms] <- prlimit64=0x0 errno=14 cover=126 #0 [924241ms] -> stat(0x20000240, 0x20001c00) #0 [924242ms] <- stat=0x0 errno=14 cover=942 #0 [924242ms] -> setreuid(0x8000, 0x0) #0 [924242ms] <- setreuid=0x0 errno=14 cover=510 #0 [924242ms] -> fork() #0 [924257ms] <- fork=0xffffffffffffffff errno=11 cover=262143 22:35:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x40) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffbfffffffd}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000080), 0x0) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, 0x0) fork() 2021/11/10 22:35:22 result hanged=false: [924309ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114159 #0 [924327ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [924331ms] <- openat=0x3 errno=14 cover=7471 #0 [924333ms] -> creat(0x20000200, 0x40) #0 [924336ms] <- creat=0x4 errno=14 cover=5654 #0 [924337ms] -> ioctl$FITRIM(0x4, 0xc0185879, 0x200000c0) #0 [924340ms] <- ioctl$FITRIM=0x0 errno=14 cover=15910 #0 [924341ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [924342ms] <- syz_init_net_socket$802154_dgram=0x6 errno=14 cover=6379 #0 [924343ms] -> ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0x6, 0x8983, 0x200001c0) #0 [924356ms] <- ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD=0xffffffffffffffff errno=65 cover=994 #0 [924357ms] -> syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) #0 [924358ms] <- syz_init_net_socket$802154_dgram=0x7 errno=14 cover=5565 #0 [924359ms] -> prlimit64(0x0, 0x6, 0x20000080, 0x0) #0 [924359ms] <- prlimit64=0x0 errno=14 cover=126 #0 [924359ms] -> stat(0x20000240, 0x20001c00) #0 [924359ms] <- stat=0x0 errno=14 cover=914 #0 [924359ms] -> setreuid(0x8000, 0x0) #0 [924360ms] <- setreuid=0x0 errno=14 cover=510 #0 [924360ms] -> fork() #0 [924375ms] <- fork=0xffffffffffffffff errno=11 cover=262143 2021/11/10 22:35:22 result hanged=false: 2021/11/10 22:35:22 added new input for call #2 ioctl$FITRIM to corpus: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x40) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffbfffffffd}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000080), 0x0) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, 0x0) fork() 22:35:22 executing program 0: syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) open$dir(&(0x7f0000000580)='./file0\x00', 0x4541, 0x0) [924425ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114162 #0 [924440ms] -> syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [924440ms] <- syz_genetlink_get_family_id$SEG6=0xffffffffffffffff errno=14 cover=4401 #0 [924441ms] -> open$dir(0x20000580, 0x4541, 0x0) #0 [924444ms] <- open$dir=0x4 errno=14 cover=7330 enabling collider #0 [924445ms] -> syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id((null), -1) SIGSEGV on (nil), skipping #0 [924445ms] <- syz_genetlink_get_family_id$SEG6=0xffffffffffffffff errno=14 cover=2551 #0 [924445ms] -> open$dir(0x20000580, 0x4541, 0x0) 2021/11/10 22:35:23 result hanged=false: 22:35:23 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, 0x0, 0x0) [924486ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114164 #0 [924503ms] -> socket$packet(0x11, 0x2, 0x300) #0 [924504ms] <- socket$packet=0x3 errno=14 cover=1774 #0 [924504ms] -> bind$packet(0x3, 0x0, 0x0) #0 [924504ms] <- bind$packet=0xffffffffffffffff errno=22 cover=77 enabling collider #0 [924508ms] -> socket$packet(0x11, 0x2, 0x300) #0 [924508ms] <- socket$packet=0x3 errno=14 cover=1776 #0 [924508ms] -> bind$packet(0x3, 0x0, 0x0) #0 [924508ms] <- bind$packet=0xffffffffffffffff errno=9 cover=49 2021/11/10 22:35:23 result hanged=false: 22:35:23 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, 0x0, 0x0) 2021/11/10 22:35:23 #0: triaging type=7 2021/11/10 22:35:23 triaging input for call #1 bind$packet (new signal=1) [924551ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114166 #0 [924567ms] -> socket$packet(0x11, 0x2, 0x300) #0 [924568ms] <- socket$packet=0x3 errno=14 cover=1856 #0 [924569ms] -> bind$packet(0x3, 0x0, 0x0) #0 [924569ms] <- bind$packet=0xffffffffffffffff errno=22 cover=77 22:35:23 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, 0x0, 0x0) 2021/11/10 22:35:23 result hanged=false: [924610ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114168 #0 [924632ms] -> socket$packet(0x11, 0x2, 0x300) #0 [924632ms] <- socket$packet=0x3 errno=14 cover=1829 #0 [924634ms] -> bind$packet(0x3, 0x0, 0x0) #0 [924634ms] <- bind$packet=0xffffffffffffffff errno=22 cover=77 22:35:23 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, 0x0, 0x0) 2021/11/10 22:35:23 result hanged=false: [924672ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114170 #0 [924690ms] -> socket$packet(0x11, 0x2, 0x300) #0 [924690ms] <- socket$packet=0x3 errno=14 cover=1807 #0 [924691ms] -> bind$packet(0x3, 0x0, 0x0) #0 [924691ms] <- bind$packet=0xffffffffffffffff errno=22 cover=77 2021/11/10 22:35:23 result hanged=false: 2021/11/10 22:35:23 added new input for call #1 bind$packet to corpus: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, 0x0, 0x0) 22:35:23 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, "6d69dedb"}, &(0x7f0000000180)=0x2c) [924739ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114172 #0 [924761ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [924762ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1665 #0 [924763ms] -> getsockopt$IP6T_SO_GET_ENTRIES(0x3, 0x29, 0x41, 0x20000040, 0x20000180) #0 [924763ms] <- getsockopt$IP6T_SO_GET_ENTRIES=0xffffffffffffffff errno=11 cover=187 enabling collider #0 [924764ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [924765ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1685 22:35:23 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, "6d69dedb"}, &(0x7f0000000180)=0x2c) 2021/11/10 22:35:23 result hanged=false: 2021/11/10 22:35:23 #0: triaging type=7 2021/11/10 22:35:23 triaging input for call #1 getsockopt$IP6T_SO_GET_ENTRIES (new signal=9) [924800ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114174 #0 [924818ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [924821ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1676 #0 [924822ms] -> getsockopt$IP6T_SO_GET_ENTRIES(0x3, 0x29, 0x41, 0x20000040, 0x20000180) #0 [924822ms] <- getsockopt$IP6T_SO_GET_ENTRIES=0xffffffffffffffff errno=11 cover=187 22:35:23 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, "6d69dedb"}, &(0x7f0000000180)=0x2c) 2021/11/10 22:35:23 result hanged=false: [924860ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114176 #0 [924877ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [924877ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1720 #0 [924878ms] -> getsockopt$IP6T_SO_GET_ENTRIES(0x3, 0x29, 0x41, 0x20000040, 0x20000180) #0 [924878ms] <- getsockopt$IP6T_SO_GET_ENTRIES=0xffffffffffffffff errno=11 cover=187 2021/11/10 22:35:23 result hanged=false: 22:35:23 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, "6d69dedb"}, &(0x7f0000000180)=0x2c) [924920ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114178 #0 [924937ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [924937ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1756 #0 [924939ms] -> getsockopt$IP6T_SO_GET_ENTRIES(0x3, 0x29, 0x41, 0x20000040, 0x20000180) #0 [924939ms] <- getsockopt$IP6T_SO_GET_ENTRIES=0xffffffffffffffff errno=11 cover=187 2021/11/10 22:35:23 result hanged=false: 2021/11/10 22:35:23 added new input for call #1 getsockopt$IP6T_SO_GET_ENTRIES to corpus: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, "6d69dedb"}, &(0x7f0000000180)=0x2c) 22:35:23 executing program 0: syz_genetlink_get_family_id$team(&(0x7f00000022c0), 0xffffffffffffffff) [924979ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114180 #0 [924999ms] -> syz_genetlink_get_family_id$team(0x200022c0, 0xffffffffffffffff) syz_genetlink_get_family_id(team, -1) netlink: failed to get family id for team: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [925019ms] <- syz_genetlink_get_family_id$team=0xffffffffffffffff errno=2 cover=11060 enabling collider #0 [925020ms] -> syz_genetlink_get_family_id$team(0x200022c0, 0xffffffffffffffff) syz_genetlink_get_family_id(team, -1) netlink: failed to get family id for team: No such file or directory syz_genetlink_get_family_id: netlink_query_family_id failed: -1 #0 [925032ms] <- syz_genetlink_get_family_id$team=0xffffffffffffffff errno=2 cover=8175 22:35:23 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 2021/11/10 22:35:23 result hanged=false: 2021/11/10 22:35:23 poll: candidates=8 inputs=0 signal=0 [925070ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114182 #0 [925090ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffd000, 0x200b0000, 0x20000180, 0x20002a40) #0 [925092ms] <- syz_io_uring_setup=0x3 errno=14 cover=7920 #0 [925093ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [925094ms] <- socket$inet6_tcp=0x4 errno=14 cover=1809 #0 [925098ms] -> syz_io_uring_submit(0x20ffd000, 0x200b0000, 0x20000280, 0x0) #0 [925098ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [925099ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [925100ms] <- io_uring_enter=0x1 errno=14 cover=8364 enabling collider #0 [925101ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffd000, 0x200b0000, 0x20000180, 0x20002a40) #0 [925105ms] <- syz_io_uring_setup=0x3 errno=14 cover=5830 #0 [925105ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [925105ms] <- socket$inet6_tcp=0x4 errno=14 cover=1755 pthread_create failed (errno 11) 22:35:23 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 2021/11/10 22:35:23 result hanged=false: 2021/11/10 22:35:23 #0: triaging type=7 2021/11/10 22:35:23 triaging input for call #3 io_uring_enter (new signal=2) iptable filter/2: resetting iptable mangle/2: resetting [925172ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114284 #0 [925189ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffd000, 0x200b0000, 0x20000180, 0x20002a40) #0 [925192ms] <- syz_io_uring_setup=0x3 errno=14 cover=8056 #0 [925193ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [925194ms] <- socket$inet6_tcp=0x4 errno=14 cover=1810 #0 [925194ms] -> syz_io_uring_submit(0x20ffd000, 0x200b0000, 0x20000280, 0x0) #0 [925194ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [925194ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [925195ms] <- io_uring_enter=0x1 errno=14 cover=1556 22:35:23 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 2021/11/10 22:35:23 result hanged=false: [925234ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114286 #0 [925258ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffd000, 0x200b0000, 0x20000180, 0x20002a40) #0 [925263ms] <- syz_io_uring_setup=0x3 errno=14 cover=8347 #0 [925264ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [925264ms] <- socket$inet6_tcp=0x4 errno=14 cover=1748 #0 [925266ms] -> syz_io_uring_submit(0x20ffd000, 0x200b0000, 0x20000280, 0x0) #0 [925266ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [925266ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [925267ms] <- io_uring_enter=0x1 errno=14 cover=1542 22:35:23 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 2021/11/10 22:35:23 result hanged=false: [925303ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114288 #0 [925321ms] -> syz_io_uring_setup(0x21, 0x20000080, 0x20ffd000, 0x200b0000, 0x20000180, 0x20002a40) #0 [925326ms] <- syz_io_uring_setup=0x3 errno=14 cover=8559 #0 [925327ms] -> socket$inet6_tcp(0xa, 0x1, 0x0) #0 [925328ms] <- socket$inet6_tcp=0x4 errno=14 cover=1788 #0 [925329ms] -> syz_io_uring_submit(0x20ffd000, 0x200b0000, 0x20000280, 0x0) #0 [925329ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [925330ms] -> io_uring_enter(0x3, 0x76d3, 0x0, 0x0, 0x0, 0x0) #0 [925330ms] <- io_uring_enter=0x1 errno=14 cover=1618 2021/11/10 22:35:23 result hanged=false: 2021/11/10 22:35:23 added new input for call #3 io_uring_enter to corpus: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 22:35:23 executing program 0: epoll_pwait(0xffffffffffffffff, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x0) [925396ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114290 #0 [925435ms] -> epoll_pwait(0xffffffffffffffff, 0x200005c0, 0x1, 0x0, 0x0, 0x0) #0 [925436ms] <- epoll_pwait=0xffffffffffffffff errno=9 cover=58 enabling collider #0 [925437ms] -> epoll_pwait(0xffffffffffffffff, 0x200005c0, 0x1, 0x0, 0x0, 0x0) #0 [925437ms] <- epoll_pwait=0xffffffffffffffff errno=9 cover=58 2021/11/10 22:35:24 result hanged=false: 2021/11/10 22:35:24 #0: triaging type=7 2021/11/10 22:35:24 triaging input for call #0 epoll_pwait (new signal=1) 22:35:24 executing program 0: epoll_pwait(0xffffffffffffffff, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x0) [925477ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114292 #0 [925494ms] -> epoll_pwait(0xffffffffffffffff, 0x200005c0, 0x1, 0x0, 0x0, 0x0) #0 [925495ms] <- epoll_pwait=0xffffffffffffffff errno=9 cover=58 22:35:24 executing program 0: epoll_pwait(0xffffffffffffffff, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x0) 2021/11/10 22:35:24 result hanged=false: [925538ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114294 #0 [925556ms] -> epoll_pwait(0xffffffffffffffff, 0x200005c0, 0x1, 0x0, 0x0, 0x0) #0 [925556ms] <- epoll_pwait=0xffffffffffffffff errno=9 cover=58 22:35:24 executing program 0: epoll_pwait(0xffffffffffffffff, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x0) 2021/11/10 22:35:24 result hanged=false: [925594ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114296 #0 [925610ms] -> epoll_pwait(0xffffffffffffffff, 0x200005c0, 0x1, 0x0, 0x0, 0x0) #0 [925610ms] <- epoll_pwait=0xffffffffffffffff errno=9 cover=58 2021/11/10 22:35:24 result hanged=false: 2021/11/10 22:35:24 added new input for call #0 epoll_pwait to corpus: epoll_pwait(0xffffffffffffffff, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x0) 22:35:24 executing program 0: syz_io_uring_setup(0x16a5, &(0x7f0000000680), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) [925660ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114298 #0 [925681ms] -> syz_io_uring_setup(0x16a5, 0x20000680, 0x20ff9000, 0x20ff9000, 0x20000700, 0x20000740) #0 [925686ms] <- syz_io_uring_setup=0x3 errno=14 cover=11154 enabling collider #0 [925687ms] -> syz_io_uring_setup(0x16a5, 0x20000680, 0x20ff9000, 0x20ff9000, 0x20000700, 0x20000740) #0 [925689ms] <- syz_io_uring_setup=0x3 errno=14 cover=11713 22:35:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 2021/11/10 22:35:24 result hanged=false: [925727ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114300 #0 [925744ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [925748ms] <- openat=0x3 errno=14 cover=7447 #0 [925748ms] -> ioctl$FS_IOC_SETFLAGS(0x3, 0x40086602, 0x20000040) #0 [925754ms] <- ioctl$FS_IOC_SETFLAGS=0x0 errno=14 cover=2189 #0 [925758ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [925759ms] <- openat=0x4 errno=14 cover=2849 #0 [925759ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [925925ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 enabling collider #0 [925927ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [925928ms] <- openat=0x3 errno=14 cover=1211 #0 [925929ms] -> ioctl$FS_IOC_SETFLAGS(0x3, 0x40086602, 0x20000040) #0 [925930ms] <- ioctl$FS_IOC_SETFLAGS=0x0 errno=14 cover=1165 pthread_create failed (errno 11) 2021/11/10 22:35:24 result hanged=false: 2021/11/10 22:35:24 #0: triaging type=7 2021/11/10 22:35:24 triaging input for call #3 copy_file_range (new signal=12) 22:35:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) [926006ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114402 #0 [926030ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [926034ms] <- openat=0x3 errno=14 cover=7306 #0 [926035ms] -> ioctl$FS_IOC_SETFLAGS(0x3, 0x40086602, 0x20000040) #0 [926040ms] <- ioctl$FS_IOC_SETFLAGS=0x0 errno=14 cover=2215 #0 [926041ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [926042ms] <- openat=0x4 errno=14 cover=2720 #0 [926043ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [926193ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 2021/11/10 22:35:24 result hanged=false: 22:35:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) [926250ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114404 #0 [926273ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [926279ms] <- openat=0x3 errno=14 cover=7425 #0 [926281ms] -> ioctl$FS_IOC_SETFLAGS(0x3, 0x40086602, 0x20000040) #0 [926286ms] <- ioctl$FS_IOC_SETFLAGS=0x0 errno=14 cover=2235 #0 [926287ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [926288ms] <- openat=0x4 errno=14 cover=2718 #0 [926289ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [926448ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 2021/11/10 22:35:25 result hanged=false: 22:35:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) [926501ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114406 #0 [926520ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [926523ms] <- openat=0x3 errno=14 cover=7360 #0 [926524ms] -> ioctl$FS_IOC_SETFLAGS(0x3, 0x40086602, 0x20000040) #0 [926532ms] <- ioctl$FS_IOC_SETFLAGS=0x0 errno=14 cover=2198 #0 [926533ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [926534ms] <- openat=0x4 errno=14 cover=2905 #0 [926535ms] -> copy_file_range(0x4, 0x0, 0x3, 0x0, 0x200f5ef, 0x0) #0 [926682ms] <- copy_file_range=0x1d0000 errno=14 cover=262143 2021/11/10 22:35:25 result hanged=false: 2021/11/10 22:35:25 added new input for call #3 copy_file_range to corpus: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 22:35:25 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) [926755ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114408 #0 [926771ms] -> mlock2(0x20ffd000, 0x3000, 0x0) #0 [926771ms] <- mlock2=0x0 errno=14 cover=2257 #0 [926772ms] -> mremap(0x20ffd000, 0x1000, 0x1000, 0x7, 0x20fff000) #0 [926772ms] <- mremap=0x20fff000 errno=14 cover=1706 #0 [926773ms] -> mbind(0x20ffd000, 0x3000, 0x0, 0x0, 0x0, 0x3) #0 [926773ms] <- mbind=0x0 errno=14 cover=2164 enabling collider #0 [926773ms] -> mlock2(0x20ffd000, 0x3000, 0x0) #0 [926773ms] <- mlock2=0x0 errno=14 cover=1208 #0 [926773ms] -> mremap(0x20ffd000, 0x1000, 0x1000, 0x7, 0x20fff000) #0 [926774ms] <- mremap=0x20fff000 errno=14 cover=1916 pthread_create failed (errno 11) 2021/11/10 22:35:25 result hanged=false: 2021/11/10 22:35:25 #0: triaging type=7 2021/11/10 22:35:25 triaging input for call #2 mbind (new signal=2) 22:35:25 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) [926848ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114510 #0 [926871ms] -> mlock2(0x20ffd000, 0x3000, 0x0) #0 [926872ms] <- mlock2=0x0 errno=14 cover=2323 #0 [926872ms] -> mremap(0x20ffd000, 0x1000, 0x1000, 0x7, 0x20fff000) #0 [926872ms] <- mremap=0x20fff000 errno=14 cover=2159 #0 [926873ms] -> mbind(0x20ffd000, 0x3000, 0x0, 0x0, 0x0, 0x3) #0 [926873ms] <- mbind=0x0 errno=14 cover=2164 22:35:25 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) 2021/11/10 22:35:25 result hanged=false: [926914ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114512 #0 [926939ms] -> mlock2(0x20ffd000, 0x3000, 0x0) #0 [926940ms] <- mlock2=0x0 errno=14 cover=1956 #0 [926940ms] -> mremap(0x20ffd000, 0x1000, 0x1000, 0x7, 0x20fff000) #0 [926940ms] <- mremap=0x20fff000 errno=14 cover=2090 #0 [926941ms] -> mbind(0x20ffd000, 0x3000, 0x0, 0x0, 0x0, 0x3) #0 [926941ms] <- mbind=0x0 errno=14 cover=1963 22:35:25 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) 2021/11/10 22:35:25 result hanged=false: [926985ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114514 2021/11/10 22:35:25 poll: candidates=0 inputs=0 signal=0 #0 [927006ms] -> mlock2(0x20ffd000, 0x3000, 0x0) #0 [927006ms] <- mlock2=0x0 errno=14 cover=2499 #0 [927007ms] -> mremap(0x20ffd000, 0x1000, 0x1000, 0x7, 0x20fff000) #0 [927008ms] <- mremap=0x20fff000 errno=14 cover=2051 #0 [927009ms] -> mbind(0x20ffd000, 0x3000, 0x0, 0x0, 0x0, 0x3) #0 [927010ms] <- mbind=0x0 errno=14 cover=2153 2021/11/10 22:35:25 result hanged=false: 2021/11/10 22:35:25 added new input for call #2 mbind to corpus: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) 22:35:25 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0xc) [927048ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114516 #0 [927067ms] -> socket$inet(0x2, 0x1, 0x0) #0 [927067ms] <- socket$inet=0x3 errno=14 cover=1776 #0 [927068ms] -> setsockopt$inet_mreqsrc(0x3, 0x0, 0x27, 0x0, 0xc) #0 [927068ms] <- setsockopt$inet_mreqsrc=0xffffffffffffffff errno=14 cover=495 enabling collider #0 [927069ms] -> socket$inet(0x2, 0x1, 0x0) #0 [927069ms] <- socket$inet=0x3 errno=14 cover=1767 22:35:25 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0xc) 2021/11/10 22:35:25 result hanged=false: 2021/11/10 22:35:25 #0: triaging type=7 2021/11/10 22:35:25 triaging input for call #1 setsockopt$inet_mreqsrc (new signal=6) [927108ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114518 #0 [927138ms] -> socket$inet(0x2, 0x1, 0x0) #0 [927139ms] <- socket$inet=0x3 errno=14 cover=1721 #0 [927139ms] -> setsockopt$inet_mreqsrc(0x3, 0x0, 0x27, 0x0, 0xc) #0 [927139ms] <- setsockopt$inet_mreqsrc=0xffffffffffffffff errno=14 cover=509 22:35:25 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0xc) 2021/11/10 22:35:25 result hanged=false: [927231ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114520 #0 [927254ms] -> socket$inet(0x2, 0x1, 0x0) #0 [927255ms] <- socket$inet=0x3 errno=14 cover=1757 #0 [927255ms] -> setsockopt$inet_mreqsrc(0x3, 0x0, 0x27, 0x0, 0xc) #0 [927255ms] <- setsockopt$inet_mreqsrc=0xffffffffffffffff errno=14 cover=495 22:35:25 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0xc) 2021/11/10 22:35:25 result hanged=false: [927345ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114522 #0 [927377ms] -> socket$inet(0x2, 0x1, 0x0) #0 [927377ms] <- socket$inet=0x3 errno=14 cover=1743 #0 [927378ms] -> setsockopt$inet_mreqsrc(0x3, 0x0, 0x27, 0x0, 0xc) #0 [927378ms] <- setsockopt$inet_mreqsrc=0xffffffffffffffff errno=14 cover=495 2021/11/10 22:35:25 result hanged=false: 2021/11/10 22:35:25 added new input for call #1 setsockopt$inet_mreqsrc to corpus: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0xc) 22:35:25 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}) [927420ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114524 #0 [927445ms] -> stat(0x20001cc0, 0x20001c00) #0 [927445ms] <- stat=0x0 errno=14 cover=544 #0 [927446ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [927446ms] <- setresuid=0x0 errno=14 cover=480 #0 [927448ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [927448ms] <- socket$inet6_udplite=0x3 errno=14 cover=1722 #0 [927449ms] -> ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0x3, 0x89f2, 0x200000c0) #0 [927449ms] <- ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL=0xffffffffffffffff errno=1 cover=209 enabling collider #0 [927451ms] -> stat(0x20001cc0, 0x20001c00) #0 [927451ms] <- stat=0x0 errno=14 cover=551 #0 [927453ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [927453ms] <- setresuid=0x0 errno=14 cover=398 pthread_create failed (errno 11) 22:35:26 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}) 2021/11/10 22:35:26 result hanged=false: 2021/11/10 22:35:26 #0: triaging type=7 2021/11/10 22:35:26 triaging input for call #3 ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL (new signal=3) [927524ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114626 #0 [927544ms] -> stat(0x20001cc0, 0x20001c00) #0 [927546ms] <- stat=0x0 errno=14 cover=558 #0 [927547ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [927547ms] <- setresuid=0x0 errno=14 cover=426 #0 [927547ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [927548ms] <- socket$inet6_udplite=0x3 errno=14 cover=1700 #0 [927548ms] -> ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0x3, 0x89f2, 0x200000c0) #0 [927548ms] <- ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL=0xffffffffffffffff errno=1 cover=209 22:35:26 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}) 2021/11/10 22:35:26 result hanged=false: [927592ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114628 #0 [927615ms] -> stat(0x20001cc0, 0x20001c00) #0 [927616ms] <- stat=0x0 errno=14 cover=544 #0 [927617ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [927617ms] <- setresuid=0x0 errno=14 cover=426 #0 [927618ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [927618ms] <- socket$inet6_udplite=0x3 errno=14 cover=1679 #0 [927618ms] -> ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0x3, 0x89f2, 0x200000c0) #0 [927618ms] <- ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL=0xffffffffffffffff errno=1 cover=209 22:35:26 executing program 0: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}) 2021/11/10 22:35:26 result hanged=false: [927658ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114630 #0 [927676ms] -> stat(0x20001cc0, 0x20001c00) #0 [927676ms] <- stat=0x0 errno=14 cover=543 #0 [927676ms] -> setresuid(0x0, 0x41ed, 0x0) #0 [927676ms] <- setresuid=0x0 errno=14 cover=393 #0 [927676ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [927677ms] <- socket$inet6_udplite=0x3 errno=14 cover=1660 #0 [927677ms] -> ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0x3, 0x89f2, 0x200000c0) #0 [927677ms] <- ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL=0xffffffffffffffff errno=1 cover=209 2021/11/10 22:35:26 result hanged=false: 2021/11/10 22:35:26 added new input for call #3 ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL to corpus: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}) 22:35:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f00000004c0)="eccc", 0x2, 0x400c810, &(0x7f0000000500)={0x2, 0x0, @empty}, 0x10) [927720ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114632 #0 [927738ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [927738ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1677 #0 [927739ms] -> sendto$inet(0x3, 0x200004c0, 0x2, 0x400c810, 0x20000500, 0x10) #0 [927739ms] <- sendto$inet=0x2 errno=14 cover=461 enabling collider #0 [927739ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [927740ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1687 22:35:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f00000004c0)="eccc", 0x2, 0x400c810, &(0x7f0000000500)={0x2, 0x0, @empty}, 0x10) 2021/11/10 22:35:26 result hanged=false: 2021/11/10 22:35:26 #0: triaging type=7 2021/11/10 22:35:26 triaging input for call #1 sendto$inet (new signal=8) [927778ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114634 #0 [927796ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [927797ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1701 #0 [927797ms] -> sendto$inet(0x3, 0x200004c0, 0x2, 0x400c810, 0x20000500, 0x10) #0 [927797ms] <- sendto$inet=0x2 errno=14 cover=450 2021/11/10 22:35:26 result hanged=false: 22:35:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f00000004c0)="eccc", 0x2, 0x400c810, &(0x7f0000000500)={0x2, 0x0, @empty}, 0x10) [927835ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114636 #0 [927855ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [927855ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1721 #0 [927857ms] -> sendto$inet(0x3, 0x200004c0, 0x2, 0x400c810, 0x20000500, 0x10) #0 [927857ms] <- sendto$inet=0x2 errno=14 cover=450 22:35:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f00000004c0)="eccc", 0x2, 0x400c810, &(0x7f0000000500)={0x2, 0x0, @empty}, 0x10) 2021/11/10 22:35:26 result hanged=false: [927910ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114638 #0 [927930ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [927931ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1710 #0 [927932ms] -> sendto$inet(0x3, 0x200004c0, 0x2, 0x400c810, 0x20000500, 0x10) #0 [927932ms] <- sendto$inet=0x2 errno=14 cover=439 2021/11/10 22:35:26 result hanged=false: 2021/11/10 22:35:26 added new input for call #1 sendto$inet to corpus: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f00000004c0)="eccc", 0x2, 0x400c810, &(0x7f0000000500)={0x2, 0x0, @empty}, 0x10) 22:35:26 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) getdents64(r0, &(0x7f00000000c0)=""/28, 0x1c) getdents64(r0, &(0x7f00000014c0)=""/124, 0x7c) 2021/11/10 22:35:26 poll: candidates=8 inputs=0 signal=0 [927973ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114640 #0 [927990ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000600) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='' #0 [928007ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=21477 #0 [928008ms] -> getdents64(0x3, 0x200000c0, 0x1c) #0 [928008ms] <- getdents64=0x18 errno=14 cover=280 #0 [928009ms] -> getdents64(0x3, 0x200014c0, 0x7c) #0 [928010ms] <- getdents64=0x18 errno=14 cover=3951 enabling collider #0 [928011ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000600) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='' #0 [928014ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=14691 #0 [928014ms] -> getdents64(0x3, 0x200000c0, 0x1c) #0 [928014ms] <- getdents64=0x18 errno=14 cover=210 pthread_create failed (errno 11) 22:35:26 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) getdents64(r0, &(0x7f00000000c0)=""/28, 0x1c) getdents64(r0, &(0x7f00000014c0)=""/124, 0x7c) 2021/11/10 22:35:26 result hanged=false: 2021/11/10 22:35:26 #0: triaging type=7 2021/11/10 22:35:26 triaging input for call #2 getdents64 (new signal=1) umount(./7960/file0) umount(./7960/file0) [928091ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114742 #0 [928108ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000600) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='' #0 [928114ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=14617 #0 [928116ms] -> getdents64(0x3, 0x200000c0, 0x1c) #0 [928116ms] <- getdents64=0x18 errno=14 cover=280 #0 [928118ms] -> getdents64(0x3, 0x200014c0, 0x7c) #0 [928119ms] <- getdents64=0x18 errno=14 cover=2142 umount(./7961/file0) 22:35:26 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) getdents64(r0, &(0x7f00000000c0)=""/28, 0x1c) getdents64(r0, &(0x7f00000014c0)=""/124, 0x7c) 2021/11/10 22:35:26 result hanged=false: [928161ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114744 #0 [928179ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000600) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='' #0 [928189ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=14619 #0 [928193ms] -> getdents64(0x3, 0x200000c0, 0x1c) #0 [928193ms] <- getdents64=0x18 errno=14 cover=280 #0 [928194ms] -> getdents64(0x3, 0x200014c0, 0x7c) #0 [928194ms] <- getdents64=0x18 errno=14 cover=541 22:35:26 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) getdents64(r0, &(0x7f00000000c0)=""/28, 0x1c) getdents64(r0, &(0x7f00000014c0)=""/124, 0x7c) 2021/11/10 22:35:26 result hanged=false: umount(./7962/file0) [928237ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114746 #0 [928255ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000600) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='' #0 [928261ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=14424 #0 [928262ms] -> getdents64(0x3, 0x200000c0, 0x1c) #0 [928262ms] <- getdents64=0x18 errno=14 cover=280 #0 [928262ms] -> getdents64(0x3, 0x200014c0, 0x7c) #0 [928263ms] <- getdents64=0x18 errno=14 cover=487 2021/11/10 22:35:26 result hanged=false: 2021/11/10 22:35:26 added new input for call #2 getdents64 to corpus: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) getdents64(r0, &(0x7f00000000c0)=""/28, 0x1c) getdents64(r0, &(0x7f00000014c0)=""/124, 0x7c) umount(./7963/file0) 22:35:26 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) getdents64(r0, &(0x7f00000000c0)=""/28, 0x1c) getdents64(r0, &(0x7f00000014c0)=""/124, 0x7c) 2021/11/10 22:35:26 #0: triaging type=7 2021/11/10 22:35:26 triaging input for call #1 getdents64 (new signal=2) [928314ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114748 #0 [928341ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000600) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='' #0 [928348ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=14710 #0 [928349ms] -> getdents64(0x3, 0x200000c0, 0x1c) #0 [928349ms] <- getdents64=0x18 errno=14 cover=280 #0 [928350ms] -> getdents64(0x3, 0x200014c0, 0x7c) #0 [928350ms] <- getdents64=0x18 errno=14 cover=487 22:35:26 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) getdents64(r0, &(0x7f00000000c0)=""/28, 0x1c) getdents64(r0, &(0x7f00000014c0)=""/124, 0x7c) umount(./7964/file0) 2021/11/10 22:35:26 result hanged=false: [928413ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114750 #0 [928439ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000600) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='' #0 [928446ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=14475 #0 [928447ms] -> getdents64(0x3, 0x200000c0, 0x1c) #0 [928447ms] <- getdents64=0x18 errno=14 cover=280 #0 [928447ms] -> getdents64(0x3, 0x200014c0, 0x7c) #0 [928447ms] <- getdents64=0x18 errno=14 cover=487 umount(./7965/file0) 22:35:27 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) getdents64(r0, &(0x7f00000000c0)=""/28, 0x1c) getdents64(r0, &(0x7f00000014c0)=""/124, 0x7c) 2021/11/10 22:35:27 result hanged=false: [928517ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114752 #0 [928533ms] -> syz_mount_image$tmpfs(0x20000000, 0x20000080, 0x0, 0x0, 0x0, 0x0, 0x20000600) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='tmpfs' flags=0 opts='' #0 [928538ms] <- syz_mount_image$tmpfs=0x3 errno=0 cover=14701 #0 [928539ms] -> getdents64(0x3, 0x200000c0, 0x1c) #0 [928539ms] <- getdents64=0x18 errno=14 cover=280 #0 [928539ms] -> getdents64(0x3, 0x200014c0, 0x7c) #0 [928539ms] <- getdents64=0x18 errno=14 cover=487 umount(./7966/file0) 2021/11/10 22:35:27 result hanged=false: 2021/11/10 22:35:27 added new input for call #1 getdents64 to corpus: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) getdents64(r0, &(0x7f00000000c0)=""/28, 0x1c) getdents64(r0, &(0x7f00000014c0)=""/124, 0x7c) 22:35:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, 0x0, 0x6914379612e64d35}, 0x14}}, 0x0) [928585ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114754 #0 [928611ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [928612ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6364 #0 [928613ms] -> sendmsg$NBD_CMD_RECONFIGURE(0x4, 0x200006c0, 0x0) #0 [928614ms] <- sendmsg$NBD_CMD_RECONFIGURE=0x14 errno=14 cover=1459 enabling collider #0 [928614ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [928616ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=7511 #0 [928616ms] -> sendmsg$NBD_CMD_RECONFIGURE(0x4, 0x200006c0, 0x0) #0 [928616ms] <- sendmsg$NBD_CMD_RECONFIGURE=0xffffffffffffffff errno=9 cover=53 22:35:27 executing program 0: io_pgetevents(0x0, 0x0, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f00000003c0)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000400), 0xffffffffffffff56}) 2021/11/10 22:35:27 result hanged=false: [928649ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114756 #0 [928666ms] -> io_pgetevents(0x0, 0x0, 0x0, 0x200004c0, 0x200003c0, 0x200001c0) #0 [928666ms] <- io_pgetevents=0xffffffffffffffff errno=22 cover=77 enabling collider #0 [928666ms] -> io_pgetevents(0x0, 0x0, 0x0, 0x200004c0, 0x200003c0, 0x200001c0) #0 [928666ms] <- io_pgetevents=0xffffffffffffffff errno=22 cover=77 22:35:27 executing program 0: io_pgetevents(0x0, 0x0, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f00000003c0)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000400), 0xffffffffffffff56}) 2021/11/10 22:35:27 result hanged=false: 2021/11/10 22:35:27 #0: triaging type=7 2021/11/10 22:35:27 triaging input for call #0 io_pgetevents (new signal=3) [928702ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114758 #0 [928718ms] -> io_pgetevents(0x0, 0x0, 0x0, 0x200004c0, 0x200003c0, 0x200001c0) #0 [928719ms] <- io_pgetevents=0xffffffffffffffff errno=22 cover=77 2021/11/10 22:35:27 result hanged=false: 22:35:27 executing program 0: io_pgetevents(0x0, 0x0, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f00000003c0)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000400), 0xffffffffffffff56}) [928762ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114760 #0 [928779ms] -> io_pgetevents(0x0, 0x0, 0x0, 0x200004c0, 0x200003c0, 0x200001c0) #0 [928779ms] <- io_pgetevents=0xffffffffffffffff errno=22 cover=77 22:35:27 executing program 0: io_pgetevents(0x0, 0x0, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f00000003c0)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000400), 0xffffffffffffff56}) 2021/11/10 22:35:27 result hanged=false: [928816ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114762 #0 [928833ms] -> io_pgetevents(0x0, 0x0, 0x0, 0x200004c0, 0x200003c0, 0x200001c0) #0 [928833ms] <- io_pgetevents=0xffffffffffffffff errno=22 cover=77 2021/11/10 22:35:27 result hanged=false: 2021/11/10 22:35:27 added new input for call #0 io_pgetevents to corpus: io_pgetevents(0x0, 0x0, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f00000003c0)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000400), 0xffffffffffffff56}) 22:35:27 executing program 0: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) [928881ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114764 #0 [928897ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000280, 0x1, 0x0) #0 [928898ms] <- openat$tcp_mem=0x3 errno=14 cover=1666 #0 [928898ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [928898ms] <- openat$sndseq=0x4 errno=14 cover=2209 #0 [928899ms] -> socket$unix(0x1, 0x1, 0x0) #0 [928899ms] <- socket$unix=0x5 errno=14 cover=1434 #0 [928900ms] -> syz_io_uring_setup(0x1, 0x20000180, 0x20ffd000, 0x20ffb000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [928902ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=7018 #0 [928902ms] -> socket$packet(0x11, 0x3, 0x300) #0 [928902ms] <- socket$packet=0x7 errno=14 cover=1726 #0 [928902ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [928907ms] <- perf_event_open=0x8 errno=14 cover=10277 #0 [928908ms] -> openat$rtc(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [928908ms] <- openat$rtc=0x9 errno=14 cover=1119 #0 [928909ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [928909ms] <- close_range=0x0 errno=14 cover=1286 #0 [928909ms] -> pselect6(0x40, 0x20000180, 0x200001c0, 0x0, 0x0, 0x0) #0 [928909ms] <- pselect6=0x5 errno=14 cover=544 enabling collider #0 [928910ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000280, 0x1, 0x0) #0 [928910ms] <- openat$tcp_mem=0xa errno=14 cover=1690 #0 [928911ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [928911ms] <- openat$sndseq=0xb errno=14 cover=2218 pthread_create failed (errno 11) 22:35:27 executing program 0: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) 2021/11/10 22:35:27 result hanged=false: 2021/11/10 22:35:27 #0: triaging type=7 2021/11/10 22:35:27 triaging input for call #8 pselect6 (new signal=2) [929012ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114866 #0 [929030ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000280, 0x1, 0x0) #0 [929032ms] <- openat$tcp_mem=0x3 errno=14 cover=1688 #0 [929033ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [929036ms] <- openat$sndseq=0x4 errno=14 cover=2195 #0 [929036ms] -> socket$unix(0x1, 0x1, 0x0) #0 [929036ms] <- socket$unix=0x5 errno=14 cover=1469 #0 [929037ms] -> syz_io_uring_setup(0x1, 0x20000180, 0x20ffd000, 0x20ffb000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [929044ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=7143 #0 [929045ms] -> socket$packet(0x11, 0x3, 0x300) #0 [929045ms] <- socket$packet=0x7 errno=14 cover=1759 #0 [929045ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [929046ms] <- perf_event_open=0x8 errno=14 cover=9210 #0 [929047ms] -> openat$rtc(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [929047ms] <- openat$rtc=0x9 errno=14 cover=1085 #0 [929048ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [929048ms] <- close_range=0x0 errno=14 cover=1308 #0 [929048ms] -> pselect6(0x40, 0x20000180, 0x200001c0, 0x0, 0x0, 0x0) #0 [929048ms] <- pselect6=0x5 errno=14 cover=544 22:35:27 executing program 0: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) 2021/11/10 22:35:27 result hanged=false: [929105ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114868 #0 [929122ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000280, 0x1, 0x0) #0 [929122ms] <- openat$tcp_mem=0x3 errno=14 cover=1699 #0 [929128ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [929128ms] <- openat$sndseq=0x4 errno=14 cover=2228 #0 [929128ms] -> socket$unix(0x1, 0x1, 0x0) #0 [929129ms] <- socket$unix=0x5 errno=14 cover=1494 #0 [929129ms] -> syz_io_uring_setup(0x1, 0x20000180, 0x20ffd000, 0x20ffb000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [929130ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=7243 #0 [929131ms] -> socket$packet(0x11, 0x3, 0x300) #0 [929131ms] <- socket$packet=0x7 errno=14 cover=1748 #0 [929132ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [929132ms] <- perf_event_open=0x8 errno=14 cover=9732 #0 [929133ms] -> openat$rtc(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [929133ms] <- openat$rtc=0x9 errno=14 cover=1096 #0 [929133ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [929133ms] <- close_range=0x0 errno=14 cover=1308 #0 [929133ms] -> pselect6(0x40, 0x20000180, 0x200001c0, 0x0, 0x0, 0x0) #0 [929133ms] <- pselect6=0x5 errno=14 cover=544 22:35:27 executing program 0: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) 2021/11/10 22:35:27 result hanged=false: [929202ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114870 #0 [929224ms] -> openat$tcp_mem(0xffffffffffffff9c, 0x20000280, 0x1, 0x0) #0 [929224ms] <- openat$tcp_mem=0x3 errno=14 cover=1691 #0 [929225ms] -> openat$sndseq(0xffffffffffffff9c, 0x20000040, 0x0) #0 [929226ms] <- openat$sndseq=0x4 errno=14 cover=2267 #0 [929226ms] -> socket$unix(0x1, 0x1, 0x0) #0 [929227ms] <- socket$unix=0x5 errno=14 cover=1541 #0 [929227ms] -> syz_io_uring_setup(0x1, 0x20000180, 0x20ffd000, 0x20ffb000, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [929233ms] <- syz_io_uring_setup=0xffffffffffffffff errno=14 cover=7389 #0 [929234ms] -> socket$packet(0x11, 0x3, 0x300) #0 [929235ms] <- socket$packet=0x7 errno=14 cover=1792 #0 [929235ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [929237ms] <- perf_event_open=0x8 errno=14 cover=10282 #0 [929238ms] -> openat$rtc(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [929238ms] <- openat$rtc=0x9 errno=14 cover=2710 #0 [929240ms] -> close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) #0 [929241ms] <- close_range=0x0 errno=14 cover=3700 #0 [929241ms] -> pselect6(0x40, 0x20000180, 0x200001c0, 0x0, 0x0, 0x0) #0 [929241ms] <- pselect6=0x5 errno=14 cover=921 2021/11/10 22:35:27 result hanged=false: 2021/11/10 22:35:27 added new input for call #8 pselect6 to corpus: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) 22:35:27 executing program 0: io_setup(0x2, &(0x7f0000000180)=0x0) io_getevents(r0, 0xda43, 0x0, 0x0, 0x0) iptable filter/2: resetting iptable mangle/2: resetting [929309ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114872 #0 [929333ms] -> io_setup(0x2, 0x20000180) #0 [929333ms] <- io_setup=0x0 errno=14 cover=3374 #0 [929334ms] -> io_getevents(0x7fe15ff38000, 0xda43, 0x0, 0x0, 0x0) #0 [929334ms] <- io_getevents=0xffffffffffffffff errno=22 cover=353 enabling collider #0 [929334ms] -> io_setup(0x2, 0x20000180) #0 [929334ms] <- io_setup=0xffffffffffffffff errno=22 cover=40 #0 [929334ms] -> io_getevents(0x7fe15ff38000, 0xda43, 0x0, 2021/11/10 22:35:27 result hanged=false: 22:35:27 executing program 0: semget$private(0x0, 0x4, 0x0) [929377ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114874 #0 [929401ms] -> semget$private(0x0, 0x4, 0x0) #0 [929401ms] <- semget$private=0xe errno=14 cover=369 enabling collider #0 [929403ms] -> semget$private(0x0, 0x4, 0x0) #0 [929403ms] <- semget$private=0xf errno=14 cover=377 22:35:27 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x402, 0x0) 2021/11/10 22:35:27 result hanged=false: [929443ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114876 #0 [929463ms] -> openat$vcsu(0xffffffffffffff9c, 0x20000480, 0x402, 0x0) #0 [929463ms] <- openat$vcsu=0x3 errno=14 cover=1180 enabling collider #0 [929465ms] -> openat$vcsu(0xffffffffffffff9c, 0x20000480, 0x402, 0x0) #0 [929465ms] <- openat$vcsu=0x3 errno=14 cover=1222 22:35:28 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) 2021/11/10 22:35:28 result hanged=false: [929525ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114878 #0 [929544ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [929551ms] <- perf_event_open=0x3 errno=14 cover=56271 #0 [929560ms] -> msgget$private(0x0, 0x0) #0 [929560ms] <- msgget$private=0xf errno=14 cover=339 #0 [929560ms] -> msgctl$IPC_SET(0xf, 0x1, 0x200001c0) #0 [929560ms] <- msgctl$IPC_SET=0x0 errno=14 cover=148 enabling collider #0 [929573ms] -> perf_event_open(0x20000040, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [929573ms] <- perf_event_open=0x3 errno=14 cover=12861 #0 [929574ms] -> msgget$private(0x0, 0x0) #0 [929574ms] <- msgget$private=0x10 errno=14 cover=372 pthread_create failed (errno 11) 22:35:28 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) memfd_create(0x0, 0x0) flock(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) shutdown(r0, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x56) 2021/11/10 22:35:28 result hanged=false: 2021/11/10 22:35:28 poll: candidates=8 inputs=0 signal=0 [929658ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 114980 #0 [929676ms] -> socket$inet(0x2, 0x1, 0x0) #0 [929676ms] <- socket$inet=0x3 errno=14 cover=1743 #0 [929678ms] -> memfd_create(0x0, 0x0) #0 [929678ms] <- memfd_create=0xffffffffffffffff errno=14 cover=224 #0 [929678ms] -> flock(0xffffffffffffffff, 0x0) #0 [929678ms] <- flock=0xffffffffffffffff errno=9 cover=45 #0 [929678ms] -> dup2(0xffffffffffffffff, 0xffffffffffffffff) #0 [929678ms] <- dup2=0xffffffffffffffff errno=9 cover=41 #0 [929678ms] -> getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) #0 [929678ms] <- getsockopt$inet_IP_XFRM_POLICY=0xffffffffffffffff errno=9 cover=49 #0 [929679ms] -> bind$inet(0x3, 0x20000000, 0x10) #0 [929679ms] <- bind$inet=0x0 errno=14 cover=383 #0 [929679ms] -> connect$inet(0x3, 0x20000140, 0x10) pthread_create failed (errno 11) 22:35:29 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000003000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 2021/11/10 22:35:29 result hanged=false: iptable filter/2: resetting iptable mangle/2: resetting [930753ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115082 #0 [930770ms] -> syz_io_uring_setup(0x0, 0x20000340, 0x20003000, 0x20002000, 0x200003c0, 0x20000400) #0 [930773ms] <- syz_io_uring_setup=0xffffffff errno=9 cover=141 enabling collider #0 [930774ms] -> syz_io_uring_setup(0x0, 0x20000340, 0x20003000, 0x20002000, 0x200003c0, 0x20000400) #0 [930774ms] <- syz_io_uring_setup=0xffffffff errno=9 cover=141 22:35:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)={[{@fat=@discard}]}) 2021/11/10 22:35:29 result hanged=false: [930812ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115084 #0 [930830ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x200000c0) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='discard,' #0 [930846ms] <- syz_mount_image$vfat=0x5 errno=0 cover=37559 enabling collider #0 [930847ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x200000c0) #0 [930849ms] <- syz_mount_image$vfat=0xffffffffffffffff errno=16 cover=5549 2021/11/10 22:35:29 result hanged=false: 2021/11/10 22:35:29 #0: triaging type=7 22:35:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)={[{@fat=@discard}]}) umount(./7982/file0) 2021/11/10 22:35:29 triaging input for call #0 syz_mount_image$vfat (new signal=4) [930893ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115086 #0 [930909ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x200000c0) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='discard,' #0 [930916ms] <- syz_mount_image$vfat=0x5 errno=0 cover=27220 2021/11/10 22:35:29 result hanged=false: 22:35:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)={[{@fat=@discard}]}) umount(./7983/file0) [930965ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115088 #0 [930980ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x200000c0) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='discard,' #0 [930988ms] <- syz_mount_image$vfat=0x5 errno=0 cover=33032 22:35:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)={[{@fat=@discard}]}) umount(./7984/file0) 2021/11/10 22:35:29 result hanged=false: [931041ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115090 #0 [931059ms] -> syz_mount_image$vfat(0x20000080, 0x20000100, 0x0, 0x2, 0x20000200, 0x0, 0x200000c0) syz_mount_image: size=0 segs=2 loop='/dev/loop0' dir='./file0' fs='vfat' flags=0 opts='discard,' #0 [931070ms] <- syz_mount_image$vfat=0x5 errno=0 cover=41368 2021/11/10 22:35:29 result hanged=false: 2021/11/10 22:35:29 added new input for call #0 syz_mount_image$vfat to corpus: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)={[{@fat=@discard}]}) umount(./7985/file0) 22:35:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [931133ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115092 #0 [931147ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [931148ms] <- openat=0x3 errno=14 cover=2727 #0 [931148ms] -> perf_event_open(0x20000040, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [931168ms] <- perf_event_open=0x4 errno=14 cover=118573 enabling collider #0 [931182ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [931182ms] <- openat=0x3 errno=14 cover=2192 22:35:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2021/11/10 22:35:29 result hanged=false: 2021/11/10 22:35:29 #0: triaging type=7 2021/11/10 22:35:29 triaging input for call #1 perf_event_open (new signal=5) [931221ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115094 #0 [931239ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [931242ms] <- openat=0x3 errno=14 cover=2715 #0 [931243ms] -> perf_event_open(0x20000040, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [931256ms] <- perf_event_open=0x4 errno=14 cover=46172 22:35:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2021/11/10 22:35:29 result hanged=false: [931309ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115096 #0 [931325ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [931325ms] <- openat=0x3 errno=14 cover=2738 #0 [931329ms] -> perf_event_open(0x20000040, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [931341ms] <- perf_event_open=0x4 errno=14 cover=50865 22:35:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2021/11/10 22:35:29 result hanged=false: [931398ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115098 #0 [931423ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [931423ms] <- openat=0x3 errno=14 cover=2727 #0 [931424ms] -> perf_event_open(0x20000040, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) #0 [931433ms] <- perf_event_open=0x4 errno=14 cover=45975 2021/11/10 22:35:30 result hanged=false: 2021/11/10 22:35:30 added new input for call #1 perf_event_open to corpus: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:35:30 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000080), 0x4) [931494ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115100 #0 [931515ms] -> socket$packet(0x11, 0x2, 0x300) #0 [931515ms] <- socket$packet=0x3 errno=14 cover=1785 #0 [931516ms] -> setsockopt$packet_int(0x3, 0x107, 0x7, 0x20000080, 0x4) #0 [931516ms] <- setsockopt$packet_int=0x0 errno=14 cover=103 enabling collider #0 [931524ms] -> socket$packet(0x11, 0x2, 0x300) #0 [931524ms] <- socket$packet=0x3 errno=14 cover=1805 #0 [931527ms] -> setsockopt$packet_int(0x3, 0x107, 0x7, 0x20000080, 0x4) #0 [931527ms] <- setsockopt$packet_int=0xffffffffffffffff errno=9 cover=51 22:35:30 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000080), 0x4) 2021/11/10 22:35:30 result hanged=false: 2021/11/10 22:35:30 #0: triaging type=7 2021/11/10 22:35:30 triaging input for call #1 setsockopt$packet_int (new signal=6) [931575ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115102 #0 [931598ms] -> socket$packet(0x11, 0x2, 0x300) #0 [931599ms] <- socket$packet=0x3 errno=14 cover=1763 #0 [931600ms] -> setsockopt$packet_int(0x3, 0x107, 0x7, 0x20000080, 0x4) #0 [931600ms] <- setsockopt$packet_int=0x0 errno=14 cover=103 22:35:30 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000080), 0x4) 2021/11/10 22:35:30 result hanged=false: [931649ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115104 #0 [931672ms] -> socket$packet(0x11, 0x2, 0x300) #0 [931673ms] <- socket$packet=0x3 errno=14 cover=1741 #0 [931673ms] -> setsockopt$packet_int(0x3, 0x107, 0x7, 0x20000080, 0x4) #0 [931674ms] <- setsockopt$packet_int=0x0 errno=14 cover=103 22:35:30 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000080), 0x4) 2021/11/10 22:35:30 result hanged=false: [931724ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115106 #0 [931748ms] -> socket$packet(0x11, 0x2, 0x300) #0 [931749ms] <- socket$packet=0x3 errno=14 cover=1744 #0 [931749ms] -> setsockopt$packet_int(0x3, 0x107, 0x7, 0x20000080, 0x4) #0 [931749ms] <- setsockopt$packet_int=0x0 errno=14 cover=103 2021/11/10 22:35:30 result hanged=false: 2021/11/10 22:35:30 added new input for call #1 setsockopt$packet_int to corpus: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000080), 0x4) 22:35:30 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000040)) [931799ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115108 #0 [931819ms] -> socket$unix(0x1, 0x1, 0x0) #0 [931820ms] <- socket$unix=0x3 errno=14 cover=1456 #0 [931821ms] -> getsockopt$sock_int(0x3, 0x1, 0x26, 0x0, 0x20000040) #0 [931821ms] <- getsockopt$sock_int=0x0 errno=14 cover=107 enabling collider #0 [931821ms] -> socket$unix(0x1, 0x1, 0x0) #0 [931822ms] <- socket$unix=0x3 errno=14 cover=1510 #0 [931822ms] -> getsockopt$sock_int(0x3, 0x1, 0x2622:35:30 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000040)) 2021/11/10 22:35:30 result hanged=false: 2021/11/10 22:35:30 #0: triaging type=7 2021/11/10 22:35:30 triaging input for call #1 getsockopt$sock_int (new signal=2) [931868ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115110 #0 [931888ms] -> socket$unix(0x1, 0x1, 0x0) #0 [931889ms] <- socket$unix=0x3 errno=14 cover=1433 #0 [931890ms] -> getsockopt$sock_int(0x3, 0x1, 0x26, 0x0, 0x20000040) #0 [931890ms] <- getsockopt$sock_int=0x0 errno=14 cover=107 2021/11/10 22:35:30 result hanged=false: 22:35:30 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000040)) [931938ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115112 #0 [931958ms] -> socket$unix(0x1, 0x1, 0x0) #0 [931958ms] <- socket$unix=0x3 errno=14 cover=1466 #0 [931960ms] -> getsockopt$sock_int(0x3, 0x1, 0x26, 0x0, 0x20000040) #0 [931960ms] <- getsockopt$sock_int=0x0 errno=14 cover=107 22:35:30 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000040)) 2021/11/10 22:35:30 result hanged=false: [932005ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115114 #0 [932026ms] -> socket$unix(0x1, 0x1, 0x0) #0 [932026ms] <- socket$unix=0x3 errno=14 cover=1477 #0 [932027ms] -> getsockopt$sock_int(0x3, 0x1, 0x26, 0x0, 0x20000040) #0 [932027ms] <- getsockopt$sock_int=0x0 errno=14 cover=107 2021/11/10 22:35:30 result hanged=false: 2021/11/10 22:35:30 added new input for call #1 getsockopt$sock_int to corpus: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000040)) 22:35:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x30}}, 0x0) [932069ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115116 #0 [932089ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [932093ms] <- perf_event_open=0x3 errno=14 cover=10741 #0 [932094ms] -> syz_genetlink_get_family_id$nl80211(0x20000000, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [932096ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12234 #0 [932097ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [932098ms] <- socket$nl_generic=0x4 errno=14 cover=1476 #0 [932099ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x4, 0x8933, 0x20000040) #0 [932099ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [932100ms] -> gettid() #0 [932101ms] <- gettid=0x1c1ad errno=14 cover=48 #0 [932101ms] -> sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0x4, 0x200009c0, 0x0) #0 [932101ms] <- sendmsg$NL80211_CMD_SET_WIPHY_NETNS=0x30 errno=14 cover=3574 enabling collider #0 [932111ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [932112ms] <- perf_event_open=0x3 errno=14 cover=9760 #0 [932112ms] -> syz_genetlink_get_family_id$nl80211(0x20000000, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [932113ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11594 pthread_create failed (errno 11) 2021/11/10 22:35:30 result hanged=false: 22:35:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80}, [@nested={0x5, 0x0, 0x0, 0x1, [@generic="e0"]}]}, 0x1c}}, 0x0) [932205ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115218 #0 [932226ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [932227ms] <- perf_event_open=0x3 errno=14 cover=9743 #0 [932229ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [932230ms] <- socket$netlink=0x4 errno=14 cover=5075 #0 [932231ms] -> sendmsg$nl_generic(0x4, 0x20000100, 0x0) #0 [932232ms] <- sendmsg$nl_generic=0x1c errno=14 cover=4281 enabling collider #0 [932243ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [932243ms] <- perf_event_open=0x3 errno=14 cover=9933 #0 [932245ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [932245ms] <- socket$netlink=0x4 errno=14 cover=4349 pthread_create failed (errno 11) 2021/11/10 22:35:30 result hanged=false: 2021/11/10 22:35:30 #0: triaging type=7 22:35:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80}, [@nested={0x5, 0x0, 0x0, 0x1, [@generic="e0"]}]}, 0x1c}}, 0x0) 2021/11/10 22:35:30 triaging input for call #2 sendmsg$nl_generic (new signal=41) [932343ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115320 #0 [932364ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [932364ms] <- perf_event_open=0x3 errno=14 cover=9653 #0 [932366ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [932367ms] <- socket$netlink=0x4 errno=14 cover=5144 #0 [932369ms] -> sendmsg$nl_generic(0x4, 0x20000100, 0x0) #0 [932369ms] <- sendmsg$nl_generic=0x1c errno=14 cover=4278 2021/11/10 22:35:30 result hanged=false: 22:35:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80}, [@nested={0x5, 0x0, 0x0, 0x1, [@generic="e0"]}]}, 0x1c}}, 0x0) [932422ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115322 #0 [932443ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [932443ms] <- perf_event_open=0x3 errno=14 cover=9817 #0 [932446ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [932450ms] <- socket$netlink=0x4 errno=14 cover=5245 #0 [932452ms] -> sendmsg$nl_generic(0x4, 0x20000100, 0x0) #0 [932453ms] <- sendmsg$nl_generic=0x1c errno=14 cover=4252 2021/11/10 22:35:31 result hanged=false: 22:35:31 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80}, [@nested={0x5, 0x0, 0x0, 0x1, [@generic="e0"]}]}, 0x1c}}, 0x0) [932509ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115324 #0 [932530ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [932533ms] <- perf_event_open=0x3 errno=14 cover=9629 #0 [932535ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [932536ms] <- socket$netlink=0x4 errno=14 cover=4335 #0 [932537ms] -> sendmsg$nl_generic(0x4, 0x20000100, 0x0) #0 [932537ms] <- sendmsg$nl_generic=0x1c errno=14 cover=4208 2021/11/10 22:35:31 result hanged=false: 2021/11/10 22:35:31 added new input for call #2 sendmsg$nl_generic to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80}, [@nested={0x5, 0x0, 0x0, 0x1, [@generic="e0"]}]}, 0x1c}}, 0x0) 22:35:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0xfe}}]}, 0x1c}}, 0x0) 2021/11/10 22:35:31 poll: candidates=8 inputs=0 signal=0 [932591ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115326 #0 [932611ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [932611ms] <- socket$nl_xfrm=0x3 errno=14 cover=1466 #0 [932612ms] -> sendmsg$nl_xfrm(0x3, 0x20000100, 0x0) #0 [932612ms] <- sendmsg$nl_xfrm=0x1c errno=14 cover=1642 enabling collider #0 [932614ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [932614ms] <- socket$nl_xfrm=0x3 errno=14 cover=1505 22:35:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0xfe}}]}, 0x1c}}, 0x0) 2021/11/10 22:35:31 result hanged=false: 2021/11/10 22:35:31 #0: triaging type=7 2021/11/10 22:35:31 triaging input for call #1 sendmsg$nl_xfrm (new signal=6) [932658ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115328 #0 [932677ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [932677ms] <- socket$nl_xfrm=0x3 errno=14 cover=1430 #0 [932679ms] -> sendmsg$nl_xfrm(0x3, 0x20000100, 0x0) #0 [932679ms] <- sendmsg$nl_xfrm=0x1c errno=14 cover=1589 22:35:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0xfe}}]}, 0x1c}}, 0x0) 2021/11/10 22:35:31 result hanged=false: [932722ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115330 #0 [932745ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [932745ms] <- socket$nl_xfrm=0x3 errno=14 cover=1432 #0 [932747ms] -> sendmsg$nl_xfrm(0x3, 0x20000100, 0x0) #0 [932747ms] <- sendmsg$nl_xfrm=0x1c errno=14 cover=1594 2021/11/10 22:35:31 result hanged=false: 22:35:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0xfe}}]}, 0x1c}}, 0x0) [932790ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115332 #0 [932810ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [932811ms] <- socket$nl_xfrm=0x3 errno=14 cover=1430 #0 [932812ms] -> sendmsg$nl_xfrm(0x3, 0x20000100, 0x0) #0 [932812ms] <- sendmsg$nl_xfrm=0x1c errno=14 cover=1592 2021/11/10 22:35:31 result hanged=false: 2021/11/10 22:35:31 added new input for call #1 sendmsg$nl_xfrm to corpus: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0xfe}}]}, 0x1c}}, 0x0) 22:35:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)={0x0, 0x0, 0xffffff8a}) [932876ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115334 #0 [932908ms] -> syz_open_dev$sg(0x20000400, 0x0, 0x0) #0 [932909ms] <- syz_open_dev$sg=0x3 errno=14 cover=1380 #0 [932909ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x3, 0x1, 0x20000300) #0 [932909ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0x0 errno=14 cover=839 enabling collider #0 [932910ms] -> syz_open_dev$sg(0x20000400, 0x0, 0x0) #0 [932910ms] <- syz_open_dev$sg=0x3 errno=14 cover=1390 22:35:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)={0x0, 0x0, 0xffffff8a}) 2021/11/10 22:35:31 result hanged=false: 2021/11/10 22:35:31 #0: triaging type=7 2021/11/10 22:35:31 triaging input for call #1 ioctl$SCSI_IOCTL_SEND_COMMAND (new signal=2) [932952ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115336 #0 [932974ms] -> syz_open_dev$sg(0x20000400, 0x0, 0x0) #0 [932974ms] <- syz_open_dev$sg=0x3 errno=14 cover=1416 #0 [932975ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x3, 0x1, 0x20000300) #0 [932976ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0x0 errno=14 cover=935 2021/11/10 22:35:31 result hanged=false: 22:35:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)={0x0, 0x0, 0xffffff8a}) [933020ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115338 #0 [933039ms] -> syz_open_dev$sg(0x20000400, 0x0, 0x0) #0 [933039ms] <- syz_open_dev$sg=0x3 errno=14 cover=1405 #0 [933040ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x3, 0x1, 0x20000300) #0 [933040ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0x0 errno=14 cover=957 2021/11/10 22:35:31 result hanged=false: 22:35:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)={0x0, 0x0, 0xffffff8a}) [933087ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115340 #0 [933106ms] -> syz_open_dev$sg(0x20000400, 0x0, 0x0) #0 [933106ms] <- syz_open_dev$sg=0x3 errno=14 cover=1380 #0 [933110ms] -> ioctl$SCSI_IOCTL_SEND_COMMAND(0x3, 0x1, 0x20000300) #0 [933110ms] <- ioctl$SCSI_IOCTL_SEND_COMMAND=0x0 errno=14 cover=935 2021/11/10 22:35:31 result hanged=false: 2021/11/10 22:35:31 added new input for call #1 ioctl$SCSI_IOCTL_SEND_COMMAND to corpus: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)={0x0, 0x0, 0xffffff8a}) 22:35:31 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x3) [933153ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115342 #0 [933171ms] -> creat(0x20000000, 0x0) #0 [933176ms] <- creat=0x3 errno=14 cover=7529 #0 [933178ms] -> fcntl$setlease(0x3, 0x400, 0x3) #0 [933178ms] <- fcntl$setlease=0xffffffffffffffff errno=22 cover=241 enabling collider #0 [933178ms] -> creat(0x20000000, 0x0) #0 [933181ms] <- creat=0x3 errno=14 cover=5632 22:35:31 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x3) 2021/11/10 22:35:31 result hanged=false: 2021/11/10 22:35:31 #0: triaging type=7 2021/11/10 22:35:31 triaging input for call #1 fcntl$setlease (new signal=7) [933228ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115344 #0 [933247ms] -> creat(0x20000000, 0x0) #0 [933250ms] <- creat=0x3 errno=14 cover=7328 #0 [933252ms] -> fcntl$setlease(0x3, 0x400, 0x3) #0 [933252ms] <- fcntl$setlease=0xffffffffffffffff errno=22 cover=230 2021/11/10 22:35:31 result hanged=false: 22:35:31 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x3) [933301ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115346 #0 [933322ms] -> creat(0x20000000, 0x0) #0 [933328ms] <- creat=0x3 errno=14 cover=7685 #0 [933334ms] -> fcntl$setlease(0x3, 0x400, 0x3) #0 [933334ms] <- fcntl$setlease=0xffffffffffffffff errno=22 cover=230 22:35:31 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x3) 2021/11/10 22:35:31 result hanged=false: [933380ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115348 #0 [933399ms] -> creat(0x20000000, 0x0) #0 [933405ms] <- creat=0x3 errno=14 cover=7423 #0 [933406ms] -> fcntl$setlease(0x3, 0x400, 0x3) #0 [933406ms] <- fcntl$setlease=0xffffffffffffffff errno=22 cover=241 2021/11/10 22:35:32 result hanged=false: 2021/11/10 22:35:32 added new input for call #1 fcntl$setlease to corpus: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x3) 22:35:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/71, 0x47}], 0x1, 0x5ade, 0x0) [933454ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115350 #0 [933473ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [933478ms] <- perf_event_open=0x3 errno=14 cover=10943 #0 [933483ms] -> openat$procfs(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [933483ms] <- openat$procfs=0x4 errno=14 cover=4329 #0 [933486ms] -> preadv(0x4, 0x20000180, 0x1, 0x5ade, 0x0) #0 [933487ms] <- preadv=0x0 errno=14 cover=12682 enabling collider #0 [933496ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [933497ms] <- perf_event_open=0x3 errno=14 cover=15484 #0 [933498ms] -> openat$procfs(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [933498ms] <- openat$procfs=0x4 errno=14 cover=5006 pthread_create failed (errno 11) 22:35:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/71, 0x47}], 0x1, 0x5ade, 0x0) 2021/11/10 22:35:32 result hanged=false: 2021/11/10 22:35:32 #0: triaging type=7 2021/11/10 22:35:32 triaging input for call #2 preadv (new signal=26) [933594ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115452 #0 [933618ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [933619ms] <- perf_event_open=0x3 errno=14 cover=9460 #0 [933620ms] -> openat$procfs(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [933620ms] <- openat$procfs=0x4 errno=14 cover=1479 #0 [933621ms] -> preadv(0x4, 0x20000180, 0x1, 0x5ade, 0x0) #0 [933621ms] <- preadv=0x0 errno=14 cover=9913 22:35:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/71, 0x47}], 0x1, 0x5ade, 0x0) 2021/11/10 22:35:32 result hanged=false: [933673ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115454 #0 [933694ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [933697ms] <- perf_event_open=0x3 errno=14 cover=9893 #0 [933700ms] -> openat$procfs(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [933701ms] <- openat$procfs=0x4 errno=14 cover=5136 #0 [933705ms] -> preadv(0x4, 0x20000180, 0x1, 0x5ade, 0x0) #0 [933706ms] <- preadv=0x0 errno=14 cover=11246 22:35:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/71, 0x47}], 0x1, 0x5ade, 0x0) 2021/11/10 22:35:32 result hanged=false: [933762ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115456 #0 [933785ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [933787ms] <- perf_event_open=0x3 errno=14 cover=14834 #0 [933788ms] -> openat$procfs(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [933788ms] <- openat$procfs=0x4 errno=14 cover=1522 #0 [933790ms] -> preadv(0x4, 0x20000180, 0x1, 0x5ade, 0x0) #0 [933790ms] <- preadv=0x0 errno=14 cover=9931 2021/11/10 22:35:32 result hanged=false: 2021/11/10 22:35:32 added new input for call #2 preadv to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/71, 0x47}], 0x1, 0x5ade, 0x0) 22:35:32 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x80284504, 0x0) [933843ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115458 #0 [933867ms] -> syz_open_dev$evdev(0x20000040, 0x0, 0x0) #0 [933867ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1339 #0 [933870ms] -> ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0x3, 0x80284504, 0x0) #0 [933870ms] <- ioctl$BTRFS_IOC_SNAP_DESTROY_V2=0xffffffffffffffff errno=14 cover=477 enabling collider #0 [933880ms] -> syz_open_dev$evdev(0x20000040, 0x0, 0x0) #0 [933881ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1278 #0 [933881ms] -> ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0x3, 0x80284504, 0x0) #0 [933881ms] <- ioctl$BTRFS_IOC_SNAP_DESTROY_V2=0xffffffffffffffff errno=9 cover=46 2021/11/10 22:35:32 result hanged=false: 2021/11/10 22:35:32 #0: triaging type=7 22:35:32 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x80284504, 0x0) 2021/11/10 22:35:32 triaging input for call #1 ioctl$BTRFS_IOC_SNAP_DESTROY_V2 (new signal=1) [933937ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115460 #0 [933964ms] -> syz_open_dev$evdev(0x20000040, 0x0, 0x0) #0 [933965ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1312 #0 [933965ms] -> ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0x3, 0x80284504, 0x0) #0 [933965ms] <- ioctl$BTRFS_IOC_SNAP_DESTROY_V2=0xffffffffffffffff errno=14 cover=477 22:35:32 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x80284504, 0x0) 2021/11/10 22:35:32 result hanged=false: [934022ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115462 #0 [934046ms] -> syz_open_dev$evdev(0x20000040, 0x0, 0x0) #0 [934047ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1300 #0 [934047ms] -> ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0x3, 0x80284504, 0x0) #0 [934047ms] <- ioctl$BTRFS_IOC_SNAP_DESTROY_V2=0xffffffffffffffff errno=14 cover=477 22:35:32 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x80284504, 0x0) 2021/11/10 22:35:32 result hanged=false: [934102ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115464 #0 [934123ms] -> syz_open_dev$evdev(0x20000040, 0x0, 0x0) #0 [934125ms] <- syz_open_dev$evdev=0x3 errno=14 cover=1311 #0 [934128ms] -> ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0x3, 0x80284504, 0x0) #0 [934128ms] <- ioctl$BTRFS_IOC_SNAP_DESTROY_V2=0xffffffffffffffff errno=14 cover=477 2021/11/10 22:35:32 result hanged=false: 2021/11/10 22:35:32 added new input for call #1 ioctl$BTRFS_IOC_SNAP_DESTROY_V2 to corpus: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x80284504, 0x0) 22:35:32 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x100820, &(0x7f00000028c0)={[{@gid}]}) [934183ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115466 #0 [934203ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [934208ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13368 #0 [934212ms] -> mount(0x0, 0x20000000, 0x200000c0, 0x0, 0x0) #0 [934215ms] <- mount=0x0 errno=14 cover=13510 #0 [934215ms] -> syz_mount_image$iso9660(0x20000080, 0x20000280, 0x0, 0x0, 0x0, 0x100820, 0x200028c0) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='iso9660' flags=1050657 opts='gid=0x0000000000000000,' #0 [934215ms] <- syz_mount_image$iso9660=0x3 errno=0 cover=6077 enabling collider #0 [934216ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [934216ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=17 cover=1331 #0 [934217ms] -> mount(0x0, 0x20000000, 0x200000c0, 0x0, 0x0) #0 [934221ms] <- mount=0x0 errno=14 cover=21394 pthread_create failed (errno 11) 22:35:32 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x100820, &(0x7f00000028c0)={[{@gid}]}) umount(./8023/file0) 2021/11/10 22:35:32 result hanged=false: 2021/11/10 22:35:32 #0: triaging type=7 2021/11/10 22:35:32 triaging input for call #2 syz_mount_image$iso9660 (new signal=8) umount(./8023/file0) [934306ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115568 #0 [934326ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [934336ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12975 #0 [934338ms] -> mount(0x0, 0x20000000, 0x200000c0, 0x0, 0x0) #0 [934342ms] <- mount=0x0 errno=14 cover=13372 #0 [934343ms] -> syz_mount_image$iso9660(0x20000080, 0x20000280, 0x0, 0x0, 0x0, 0x100820, 0x200028c0) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='iso9660' flags=1050657 opts='gid=0x0000000000000000,' #0 [934345ms] <- syz_mount_image$iso9660=0x3 errno=0 cover=4157 22:35:32 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x100820, &(0x7f00000028c0)={[{@gid}]}) 2021/11/10 22:35:32 result hanged=false: umount(./8024/file0) [934413ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115570 #0 [934445ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [934452ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=12867 #0 [934455ms] -> mount(0x0, 0x20000000, 0x200000c0, 0x0, 0x0) #0 [934461ms] <- mount=0x0 errno=14 cover=20351 #0 [934463ms] -> syz_mount_image$iso9660(0x20000080, 0x20000280, 0x0, 0x0, 0x0, 0x100820, 0x200028c0) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='iso9660' flags=1050657 opts='gid=0x0000000000000000,' #0 [934464ms] <- syz_mount_image$iso9660=0x3 errno=0 cover=4084 22:35:33 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x100820, &(0x7f00000028c0)={[{@gid}]}) 2021/11/10 22:35:33 result hanged=false: umount(./8025/file0) [934569ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115572 #0 [934606ms] -> syz_mount_image$ext4(0x0, 0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) SIGSEGV on (nil), skipping #0 [934615ms] <- syz_mount_image$ext4=0xffffffffffffffff errno=14 cover=13063 #0 [934619ms] -> mount(0x0, 0x20000000, 0x200000c0, 0x0, 0x0) #0 [934622ms] <- mount=0x0 errno=14 cover=13637 #0 [934624ms] -> syz_mount_image$iso9660(0x20000080, 0x20000280, 0x0, 0x0, 0x0, 0x100820, 0x200028c0) syz_mount_image: size=0 segs=0 loop='' dir='./file0' fs='iso9660' flags=1050657 opts='gid=0x0000000000000000,' #0 [934625ms] <- syz_mount_image$iso9660=0x3 errno=0 cover=4105 umount(./8026/file0) 2021/11/10 22:35:33 result hanged=false: 2021/11/10 22:35:33 added new input for call #2 syz_mount_image$iso9660 to corpus: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x100820, &(0x7f00000028c0)={[{@gid}]}) 22:35:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000580), 0x4) [934696ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115574 #0 [934719ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [934720ms] <- socket$inet6_udplite=0x3 errno=14 cover=1646 #0 [934720ms] -> setsockopt$inet6_IPV6_ADDRFORM(0x3, 0x29, 0x1, 0x20000580, 0x4) #0 [934720ms] <- setsockopt$inet6_IPV6_ADDRFORM=0xffffffffffffffff errno=107 cover=164 enabling collider #0 [934723ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [934723ms] <- socket$inet6_udplite=0x3 errno=14 cover=1656 22:35:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000580), 0x4) 2021/11/10 22:35:33 result hanged=false: 2021/11/10 22:35:33 #0: triaging type=7 2021/11/10 22:35:33 triaging input for call #1 setsockopt$inet6_IPV6_ADDRFORM (new signal=1) [934769ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115576 #0 [934791ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [934791ms] <- socket$inet6_udplite=0x3 errno=14 cover=1635 #0 [934792ms] -> setsockopt$inet6_IPV6_ADDRFORM(0x3, 0x29, 0x1, 0x20000580, 0x4) #0 [934793ms] <- setsockopt$inet6_IPV6_ADDRFORM=0xffffffffffffffff errno=107 cover=164 22:35:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000580), 0x4) 2021/11/10 22:35:33 result hanged=false: [934840ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115578 #0 [934858ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [934859ms] <- socket$inet6_udplite=0x3 errno=14 cover=1657 #0 [934859ms] -> setsockopt$inet6_IPV6_ADDRFORM(0x3, 0x29, 0x1, 0x20000580, 0x4) #0 [934861ms] <- setsockopt$inet6_IPV6_ADDRFORM=0xffffffffffffffff errno=107 cover=164 22:35:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000580), 0x4) 2021/11/10 22:35:33 result hanged=false: [934905ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115580 #0 [934924ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [934925ms] <- socket$inet6_udplite=0x3 errno=14 cover=1668 #0 [934926ms] -> setsockopt$inet6_IPV6_ADDRFORM(0x3, 0x29, 0x1, 0x20000580, 0x4) #0 [934926ms] <- setsockopt$inet6_IPV6_ADDRFORM=0xffffffffffffffff errno=107 cover=164 2021/11/10 22:35:33 result hanged=false: 2021/11/10 22:35:33 added new input for call #1 setsockopt$inet6_IPV6_ADDRFORM to corpus: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000580), 0x4) 22:35:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) [934971ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115582 #0 [934993ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [934995ms] <- socket$inet6_udplite=0x3 errno=14 cover=1646 #0 [934995ms] -> bind$inet6(0x3, 0x20000080, 0x1c) #0 [934995ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=388 #0 [934996ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [934996ms] <- bind$inet6=0x0 errno=14 cover=316 enabling collider #0 [934997ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [934997ms] <- socket$inet6_udplite=0x3 errno=14 cover=1667 #0 [934998ms] -> bind$inet6(0x3, 0x20000080, 0x1c) #0 [934998ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=229 pthread_create failed (errno 11) 22:35:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 2021/11/10 22:35:33 result hanged=false: 2021/11/10 22:35:33 #0: triaging type=7 2021/11/10 22:35:33 triaging input for call #2 bind$inet6 (new signal=2) [935076ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115684 #0 [935095ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [935096ms] <- socket$inet6_udplite=0x3 errno=14 cover=1646 #0 [935097ms] -> bind$inet6(0x3, 0x20000080, 0x1c) #0 [935097ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=229 #0 [935097ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [935097ms] <- bind$inet6=0x0 errno=14 cover=316 22:35:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 2021/11/10 22:35:33 result hanged=false: [935144ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115686 #0 [935163ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [935164ms] <- socket$inet6_udplite=0x3 errno=14 cover=1679 #0 [935166ms] -> bind$inet6(0x3, 0x20000080, 0x1c) #0 [935166ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=229 #0 [935167ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [935167ms] <- bind$inet6=0x0 errno=14 cover=322 22:35:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 2021/11/10 22:35:33 result hanged=false: [935208ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115688 #0 [935235ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [935235ms] <- socket$inet6_udplite=0x3 errno=14 cover=1685 #0 [935237ms] -> bind$inet6(0x3, 0x20000080, 0x1c) #0 [935238ms] <- bind$inet6=0xffffffffffffffff errno=99 cover=229 #0 [935238ms] -> bind$inet6(0x3, 0x200000c0, 0x1c) #0 [935238ms] <- bind$inet6=0x0 errno=14 cover=316 2021/11/10 22:35:33 result hanged=false: 2021/11/10 22:35:33 added new input for call #2 bind$inet6 to corpus: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 22:35:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) 2021/11/10 22:35:33 poll: candidates=8 inputs=0 signal=0 [935282ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115690 #0 [935302ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [935303ms] <- socket$nl_xfrm=0x3 errno=14 cover=1477 #0 [935303ms] -> setsockopt$SO_ATTACH_FILTER(0x3, 0x1, 0x1a, 0x20000080, 0x10) #0 [935324ms] <- setsockopt$SO_ATTACH_FILTER=0x0 errno=14 cover=123286 enabling collider #0 [935331ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [935331ms] <- socket$nl_xfrm=0x3 errno=14 cover=1454 2021/11/10 22:35:33 result hanged=false: 22:35:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) 2021/11/10 22:35:33 #0: triaging type=7 2021/11/10 22:35:33 triaging input for call #1 setsockopt$SO_ATTACH_FILTER (new signal=3) [935375ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115692 #0 [935397ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [935400ms] <- socket$nl_xfrm=0x3 errno=14 cover=1419 #0 [935401ms] -> setsockopt$SO_ATTACH_FILTER(0x3, 0x1, 0x1a, 0x20000080, 0x10) #0 [935402ms] <- setsockopt$SO_ATTACH_FILTER=0x0 errno=14 cover=3407 22:35:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) 2021/11/10 22:35:33 result hanged=false: [935446ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115694 #0 [935469ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [935469ms] <- socket$nl_xfrm=0x3 errno=14 cover=1441 #0 [935470ms] -> setsockopt$SO_ATTACH_FILTER(0x3, 0x1, 0x1a, 0x20000080, 0x10) #0 [935471ms] <- setsockopt$SO_ATTACH_FILTER=0x0 errno=14 cover=3327 22:35:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) 2021/11/10 22:35:34 result hanged=false: [935513ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115696 #0 [935532ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [935532ms] <- socket$nl_xfrm=0x3 errno=14 cover=1466 #0 [935533ms] -> setsockopt$SO_ATTACH_FILTER(0x3, 0x1, 0x1a, 0x20000080, 0x10) #0 [935533ms] <- setsockopt$SO_ATTACH_FILTER=0x0 errno=14 cover=3211 2021/11/10 22:35:34 result hanged=false: 2021/11/10 22:35:34 added new input for call #1 setsockopt$SO_ATTACH_FILTER to corpus: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) 22:35:34 executing program 0: epoll_pwait(0xffffffffffffffff, &(0x7f0000000c40)=[{}], 0x1, 0x0, &(0x7f0000000cc0), 0x8) [935578ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115698 #0 [935597ms] -> epoll_pwait(0xffffffffffffffff, 0x20000c40, 0x1, 0x0, 0x20000cc0, 0x8) #0 [935598ms] <- epoll_pwait=0xffffffffffffffff errno=9 cover=79 enabling collider #0 [935599ms] -> epoll_pwait(0xffffffffffffffff, 0x20000c40, 0x1, 0x0, 0x20000cc0, 0x8) #0 [935600ms] <- epoll_pwait=0xffffffffffffffff errno=9 cover=79 22:35:34 executing program 0: epoll_pwait(0xffffffffffffffff, &(0x7f0000000c40)=[{}], 0x1, 0x0, &(0x7f0000000cc0), 0x8) 2021/11/10 22:35:34 result hanged=false: 2021/11/10 22:35:34 #0: triaging type=7 2021/11/10 22:35:34 triaging input for call #0 epoll_pwait (new signal=1) [935650ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115700 #0 [935671ms] -> epoll_pwait(0xffffffffffffffff, 0x20000c40, 0x1, 0x0, 0x20000cc0, 0x8) #0 [935671ms] <- epoll_pwait=0xffffffffffffffff errno=9 cover=79 2021/11/10 22:35:34 result hanged=false: 22:35:34 executing program 0: epoll_pwait(0xffffffffffffffff, &(0x7f0000000c40)=[{}], 0x1, 0x0, &(0x7f0000000cc0), 0x8) [935720ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115702 #0 [935738ms] -> epoll_pwait(0xffffffffffffffff, 0x20000c40, 0x1, 0x0, 0x20000cc0, 0x8) #0 [935738ms] <- epoll_pwait=0xffffffffffffffff errno=9 cover=79 22:35:34 executing program 0: epoll_pwait(0xffffffffffffffff, &(0x7f0000000c40)=[{}], 0x1, 0x0, &(0x7f0000000cc0), 0x8) 2021/11/10 22:35:34 result hanged=false: [935785ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115704 #0 [935812ms] -> epoll_pwait(0xffffffffffffffff, 0x20000c40, 0x1, 0x0, 0x20000cc0, 0x8) #0 [935812ms] <- epoll_pwait=0xffffffffffffffff errno=9 cover=79 2021/11/10 22:35:34 result hanged=false: 2021/11/10 22:35:34 added new input for call #0 epoll_pwait to corpus: epoll_pwait(0xffffffffffffffff, &(0x7f0000000c40)=[{}], 0x1, 0x0, &(0x7f0000000cc0), 0x8) 22:35:34 executing program 0: r0 = syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x6}, 0x0) io_uring_enter(r0, 0x2fd1, 0x0, 0x0, 0x0, 0x0) [935861ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115706 #0 [935883ms] -> syz_io_uring_setup(0x1, 0x20000180, 0x20ffd000, 0x20ffc000, 0x20000100, 0x20000140) #0 [935885ms] <- syz_io_uring_setup=0x3 errno=14 cover=7647 #0 [935886ms] -> syz_io_uring_submit(0x20ffd000, 0x20ffc000, 0x20000080, 0x0) #0 [935887ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [935888ms] -> io_uring_enter(0x3, 0x2fd1, 0x0, 0x0, 0x0, 0x0) #0 [935889ms] <- io_uring_enter=0x1 errno=14 cover=518 enabling collider #0 [935889ms] -> syz_io_uring_setup(0x1, 0x20000180, 0x20ffd000, 0x20ffc000, 0x20000100, 0x20000140) #0 [935891ms] <- syz_io_uring_setup=0x3 errno=14 cover=5275 #0 [935891ms] -> syz_io_uring_submit(0x20ffd000, 0x20ffc000, 0x20000080, 0x0) #0 [935891ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 pthread_create failed (errno 11) 2021/11/10 22:35:34 result hanged=false: 22:35:34 executing program 0: r0 = syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x6}, 0x0) io_uring_enter(r0, 0x2fd1, 0x0, 0x0, 0x0, 0x0) 2021/11/10 22:35:34 #0: triaging type=7 2021/11/10 22:35:34 triaging input for call #2 io_uring_enter (new signal=2) [935968ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115808 #0 [935988ms] -> syz_io_uring_setup(0x1, 0x20000180, 0x20ffd000, 0x20ffc000, 0x20000100, 0x20000140) #0 [935993ms] <- syz_io_uring_setup=0x3 errno=14 cover=7261 #0 [935994ms] -> syz_io_uring_submit(0x20ffd000, 0x20ffc000, 0x20000080, 0x0) #0 [935995ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [935995ms] -> io_uring_enter(0x3, 0x2fd1, 0x0, 0x0, 0x0, 0x0) #0 [935996ms] <- io_uring_enter=0x1 errno=14 cover=507 22:35:34 executing program 0: r0 = syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x6}, 0x0) io_uring_enter(r0, 0x2fd1, 0x0, 0x0, 0x0, 0x0) 2021/11/10 22:35:34 result hanged=false: [936041ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115810 #0 [936063ms] -> syz_io_uring_setup(0x1, 0x20000180, 0x20ffd000, 0x20ffc000, 0x20000100, 0x20000140) #0 [936065ms] <- syz_io_uring_setup=0x3 errno=14 cover=7259 #0 [936066ms] -> syz_io_uring_submit(0x20ffd000, 0x20ffc000, 0x20000080, 0x0) #0 [936066ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [936066ms] -> io_uring_enter(0x3, 0x2fd1, 0x0, 0x0, 0x0, 0x0) #0 [936066ms] <- io_uring_enter=0x1 errno=14 cover=507 22:35:34 executing program 0: r0 = syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x6}, 0x0) io_uring_enter(r0, 0x2fd1, 0x0, 0x0, 0x0, 0x0) 2021/11/10 22:35:34 result hanged=false: [936114ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115812 #0 [936134ms] -> syz_io_uring_setup(0x1, 0x20000180, 0x20ffd000, 0x20ffc000, 0x20000100, 0x20000140) #0 [936136ms] <- syz_io_uring_setup=0x3 errno=14 cover=7226 #0 [936137ms] -> syz_io_uring_submit(0x20ffd000, 0x20ffc000, 0x20000080, 0x0) #0 [936138ms] <- syz_io_uring_submit=0x0 errno=14 cover=0 #0 [936138ms] -> io_uring_enter(0x3, 0x2fd1, 0x0, 0x0, 0x0, 0x0) #0 [936138ms] <- io_uring_enter=0x1 errno=14 cover=507 2021/11/10 22:35:34 result hanged=false: 2021/11/10 22:35:34 added new input for call #2 io_uring_enter to corpus: r0 = syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x6}, 0x0) io_uring_enter(r0, 0x2fd1, 0x0, 0x0, 0x0, 0x0) 22:35:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000150001000000000000000000ff010000000000000000000000000001fe80000000000000000000000000001b00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000c00080008002af5ce4040"], 0x5c}}, 0x0) [936187ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115814 #0 [936207ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [936210ms] <- socket$nl_xfrm=0x3 errno=14 cover=1441 #0 [936211ms] -> sendmsg$nl_xfrm(0x3, 0x20000580, 0x0) #0 [936211ms] <- sendmsg$nl_xfrm=0x5c errno=14 cover=1603 enabling collider #0 [936213ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [936213ms] <- socket$nl_xfrm=0x3 errno=14 cover=1519 2021/11/10 22:35:34 result hanged=false: 2021/11/10 22:35:34 #0: triaging type=7 22:35:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000150001000000000000000000ff010000000000000000000000000001fe80000000000000000000000000001b00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000c00080008002af5ce4040"], 0x5c}}, 0x0) 2021/11/10 22:35:34 triaging input for call #1 sendmsg$nl_xfrm (new signal=2) [936261ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115816 #0 [936282ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [936283ms] <- socket$nl_xfrm=0x3 errno=14 cover=1444 #0 [936284ms] -> sendmsg$nl_xfrm(0x3, 0x20000580, 0x0) #0 [936284ms] <- sendmsg$nl_xfrm=0x5c errno=14 cover=1566 2021/11/10 22:35:34 result hanged=false: 22:35:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000150001000000000000000000ff010000000000000000000000000001fe80000000000000000000000000001b00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000c00080008002af5ce4040"], 0x5c}}, 0x0) [936326ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115818 #0 [936347ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [936347ms] <- socket$nl_xfrm=0x3 errno=14 cover=1419 #0 [936348ms] -> sendmsg$nl_xfrm(0x3, 0x20000580, 0x0) #0 [936348ms] <- sendmsg$nl_xfrm=0x5c errno=14 cover=1534 2021/11/10 22:35:34 result hanged=false: 22:35:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000150001000000000000000000ff010000000000000000000000000001fe80000000000000000000000000001b00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000c00080008002af5ce4040"], 0x5c}}, 0x0) [936391ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115820 #0 [936411ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [936411ms] <- socket$nl_xfrm=0x3 errno=14 cover=1463 #0 [936414ms] -> sendmsg$nl_xfrm(0x3, 0x20000580, 0x0) #0 [936414ms] <- sendmsg$nl_xfrm=0x5c errno=14 cover=1567 2021/11/10 22:35:35 result hanged=false: 2021/11/10 22:35:35 added new input for call #1 sendmsg$nl_xfrm to corpus: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000150001000000000000000000ff010000000000000000000000000001fe80000000000000000000000000001b00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000c00080008002af5ce4040"], 0x5c}}, 0x0) 22:35:35 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x1d, r0, &(0x7f00000003c0)="48226d78129a94beb4f1ad22da77bc27781bca46fa0e35c36b8c6a8ceb5e2ecc", 0x20) [936462ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115822 #0 [936482ms] -> add_key$keyring(0x20000180, 0x200001c0, 0x0, 0x0, 0xffffffffffffffff) #0 [936483ms] <- add_key$keyring=0x222c4fdd errno=14 cover=2391 #0 [936484ms] -> keyctl$update(0x1d, 0x222c4fdd, 0x200003c0, 0x20) #0 [936484ms] <- keyctl$update=0xffffffffffffffff errno=22 cover=373 enabling collider #0 [936484ms] -> add_key$keyring(0x20000180, 0x200001c0, 0x0, 0x0, 0xffffffffffffffff) #0 [936485ms] <- add_key$keyring=0x238ad19 errno=14 cover=1066 2021/11/10 22:35:35 result hanged=false: 2021/11/10 22:35:35 #0: triaging type=7 2021/11/10 22:35:35 triaging input for call #1 keyctl$update (new signal=1) 22:35:35 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x1d, r0, &(0x7f00000003c0)="48226d78129a94beb4f1ad22da77bc27781bca46fa0e35c36b8c6a8ceb5e2ecc", 0x20) [936529ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115824 #0 [936549ms] -> add_key$keyring(0x20000180, 0x200001c0, 0x0, 0x0, 0xffffffffffffffff) #0 [936549ms] <- add_key$keyring=0x2d95f238 errno=14 cover=2122 #0 [936550ms] -> keyctl$update(0x1d, 0x2d95f238, 0x200003c0, 0x20) #0 [936550ms] <- keyctl$update=0xffffffffffffffff errno=22 cover=380 2021/11/10 22:35:35 result hanged=false: 22:35:35 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x1d, r0, &(0x7f00000003c0)="48226d78129a94beb4f1ad22da77bc27781bca46fa0e35c36b8c6a8ceb5e2ecc", 0x20) [936595ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115826 #0 [936616ms] -> add_key$keyring(0x20000180, 0x200001c0, 0x0, 0x0, 0xffffffffffffffff) #0 [936616ms] <- add_key$keyring=0x2cfd738d errno=14 cover=2370 #0 [936618ms] -> keyctl$update(0x1d, 0x2cfd738d, 0x200003c0, 0x20) #0 [936618ms] <- keyctl$update=0xffffffffffffffff errno=22 cover=377 22:35:35 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x1d, r0, &(0x7f00000003c0)="48226d78129a94beb4f1ad22da77bc27781bca46fa0e35c36b8c6a8ceb5e2ecc", 0x20) 2021/11/10 22:35:35 result hanged=false: [936663ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115828 #0 [936682ms] -> add_key$keyring(0x20000180, 0x200001c0, 0x0, 0x0, 0xffffffffffffffff) #0 [936683ms] <- add_key$keyring=0x1d0c55cc errno=14 cover=1893 #0 [936684ms] -> keyctl$update(0x1d, 0x1d0c55cc, 0x200003c0, 0x20) #0 [936684ms] <- keyctl$update=0xffffffffffffffff errno=22 cover=378 2021/11/10 22:35:35 result hanged=false: 2021/11/10 22:35:35 added new input for call #1 keyctl$update to corpus: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x1d, r0, &(0x7f00000003c0)="48226d78129a94beb4f1ad22da77bc27781bca46fa0e35c36b8c6a8ceb5e2ecc", 0x20) 22:35:35 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000004040)={'ip6tnl0\x00', 0x0}) [936731ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115830 #0 [936750ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [936751ms] <- socket$inet6_udplite=0x3 errno=14 cover=1635 #0 [936752ms] -> ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0x3, 0x89f3, 0x20004040) #0 [936784ms] <- ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL=0xffffffffffffffff errno=19 cover=8623 enabling collider #0 [936785ms] -> socket$inet6_udplite(0xa, 0x2, 0x88) #0 [936785ms] <- socket$inet6_udplite=0x3 errno=14 cover=1724 22:35:35 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) 2021/11/10 22:35:35 result hanged=false: [936830ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115832 #0 [936850ms] -> chdir(0x0) #0 [936850ms] <- chdir=0xffffffffffffffff errno=14 cover=604 #0 [936853ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [936856ms] <- openat=0x3 errno=14 cover=7546 #0 [936857ms] -> io_setup(0x5, 0x20000080) #0 [936858ms] <- io_setup=0x0 errno=14 cover=2639 #0 [936859ms] -> io_submit(0x7fe15ff38000, 0x1, 0x200008c0) #0 [936865ms] <- io_submit=0x1 errno=14 cover=19602 #0 [936866ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [936866ms] <- openat=0x4 errno=14 cover=1114 #0 [936866ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [936869ms] <- openat=0x5 errno=14 cover=7410 #0 [936869ms] -> sendfile(0x5, 0x4, 0x0, 0x7ffffff9) #0 [937290ms] <- sendfile=0x800000 errno=14 cover=262143 #0 [937295ms] -> setxattr$security_capability(0x20000280, 0x200002c0, 0x0, 0x0, 0x0) #0 [937297ms] <- setxattr$security_capability=0x0 errno=14 cover=1908 enabling collider #0 [937297ms] -> chdir(0x0) #0 [937297ms] <- chdir=0xffffffffffffffff errno=14 cover=606 #0 [937298ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [937298ms] <- openat=0x3 errno=14 cover=1121 pthread_create failed (errno 11) 22:35:35 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) 2021/11/10 22:35:35 result hanged=false: 2021/11/10 22:35:35 #0: triaging type=7 2021/11/10 22:35:35 triaging input for call #6 sendfile (new signal=10) [937397ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115934 #0 [937416ms] -> chdir(0x0) #0 [937416ms] <- chdir=0xffffffffffffffff errno=14 cover=605 #0 [937418ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [937426ms] <- openat=0x3 errno=14 cover=7846 #0 [937428ms] -> io_setup(0x5, 0x20000080) #0 [937428ms] <- io_setup=0x0 errno=14 cover=2653 #0 [937430ms] -> io_submit(0x7fe15ff38000, 0x1, 0x200008c0) #0 [937434ms] <- io_submit=0x1 errno=14 cover=11291 #0 [937436ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [937437ms] <- openat=0x4 errno=14 cover=1060 #0 [937438ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [937441ms] <- openat=0x5 errno=14 cover=7296 #0 [937442ms] -> sendfile(0x5, 0x4, 0x0, 0x7ffffff9) #0 [937852ms] <- sendfile=0x800000 errno=14 cover=262143 #0 [937872ms] -> setxattr$security_capability(0x20000280, 0x200002c0, 0x0, 0x0, 0x0) #0 [937874ms] <- setxattr$security_capability=0x0 errno=14 cover=1736 2021/11/10 22:35:36 result hanged=false: 22:35:36 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) [937946ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115936 #0 [937966ms] -> chdir(0x0) #0 [937966ms] <- chdir=0xffffffffffffffff errno=14 cover=593 #0 [937968ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [937972ms] <- openat=0x3 errno=14 cover=7754 #0 [937973ms] -> io_setup(0x5, 0x20000080) #0 [937974ms] <- io_setup=0x0 errno=14 cover=2628 #0 [937975ms] -> io_submit(0x7fe15ff38000, 0x1, 0x200008c0) #0 [937979ms] <- io_submit=0x1 errno=14 cover=11343 #0 [937982ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [937982ms] <- openat=0x4 errno=14 cover=1137 #0 [937983ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [937987ms] <- openat=0x5 errno=14 cover=7407 #0 [937988ms] -> sendfile(0x5, 0x4, 0x0, 0x7ffffff9) #0 [938416ms] <- sendfile=0x800000 errno=14 cover=262143 #0 [938437ms] -> setxattr$security_capability(0x20000280, 0x200002c0, 0x0, 0x0, 0x0) #0 [938440ms] <- setxattr$security_capability=0x0 errno=14 cover=1731 22:35:37 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) 2021/11/10 22:35:37 result hanged=false: [938515ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115938 #0 [938535ms] -> chdir(0x0) #0 [938535ms] <- chdir=0xffffffffffffffff errno=14 cover=604 #0 [938537ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [938540ms] <- openat=0x3 errno=14 cover=7607 #0 [938542ms] -> io_setup(0x5, 0x20000080) #0 [938542ms] <- io_setup=0x0 errno=14 cover=2650 #0 [938543ms] -> io_submit(0x7fe15ff38000, 0x1, 0x200008c0) #0 [938551ms] <- io_submit=0x1 errno=14 cover=11509 #0 [938553ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [938553ms] <- openat=0x4 errno=14 cover=1136 #0 [938555ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [938558ms] <- openat=0x5 errno=14 cover=7430 #0 [938559ms] -> sendfile(0x5, 0x4, 0x0, 0x7ffffff9) #0 [938972ms] <- sendfile=0x800000 errno=14 cover=262143 2021/11/10 22:35:37 poll: candidates=0 inputs=0 signal=0 #0 [938996ms] -> setxattr$security_capability(0x20000280, 0x200002c0, 0x0, 0x0, 0x0) #0 [938998ms] <- setxattr$security_capability=0x0 errno=14 cover=1762 2021/11/10 22:35:37 result hanged=false: 2021/11/10 22:35:37 added new input for call #6 sendfile to corpus: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) 2021/11/10 22:35:37 #0: triaging type=7 22:35:37 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) 2021/11/10 22:35:37 triaging input for call #1 openat (new signal=1) [939074ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115940 #0 [939094ms] -> chdir(0x0) #0 [939095ms] <- chdir=0xffffffffffffffff errno=14 cover=630 #0 [939096ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [939100ms] <- openat=0x3 errno=14 cover=7865 #0 [939101ms] -> io_setup(0x5, 0x20000080) #0 [939101ms] <- io_setup=0x0 errno=14 cover=2497 #0 [939104ms] -> io_submit(0x7fe15ff38000, 0x1, 0x200008c0) #0 [939108ms] <- io_submit=0x1 errno=14 cover=11701 #0 [939112ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [939112ms] <- openat=0x4 errno=14 cover=1064 #0 [939112ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [939117ms] <- openat=0x5 errno=14 cover=7339 #0 [939118ms] -> sendfile(0x5, 0x4, 0x0, 0x7ffffff9) #0 [939535ms] <- sendfile=0x800000 errno=14 cover=262143 #0 [939559ms] -> setxattr$security_capability(0x20000280, 0x200002c0, 0x0, 0x0, 0x0) #0 [939563ms] <- setxattr$security_capability=0x0 errno=14 cover=1746 2021/11/10 22:35:38 result hanged=false: 22:35:38 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) [939645ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115942 #0 [939666ms] -> chdir(0x0) #0 [939667ms] <- chdir=0xffffffffffffffff errno=14 cover=592 #0 [939669ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [939672ms] <- openat=0x3 errno=14 cover=7344 #0 [939675ms] -> io_setup(0x5, 0x20000080) #0 [939676ms] <- io_setup=0x0 errno=14 cover=2606 #0 [939676ms] -> io_submit(0x7fe15ff38000, 0x1, 0x200008c0) #0 [939681ms] <- io_submit=0x1 errno=14 cover=13232 #0 [939683ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [939683ms] <- openat=0x4 errno=14 cover=1039 #0 [939683ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [939687ms] <- openat=0x5 errno=14 cover=7658 #0 [939688ms] -> sendfile(0x5, 0x4, 0x0, 0x7ffffff9) #0 [940104ms] <- sendfile=0x800000 errno=14 cover=262143 #0 [940127ms] -> setxattr$security_capability(0x20000280, 0x200002c0, 0x0, 0x0, 0x0) #0 [940133ms] <- setxattr$security_capability=0x0 errno=14 cover=1736 2021/11/10 22:35:38 result hanged=false: 22:35:38 executing program 0: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) [940206ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115944 #0 [940226ms] -> chdir(0x0) #0 [940226ms] <- chdir=0xffffffffffffffff errno=14 cover=593 #0 [940229ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [940233ms] <- openat=0x3 errno=14 cover=7620 #0 [940235ms] -> io_setup(0x5, 0x20000080) #0 [940235ms] <- io_setup=0x0 errno=14 cover=2584 #0 [940236ms] -> io_submit(0x7fe15ff38000, 0x1, 0x200008c0) #0 [940244ms] <- io_submit=0x1 errno=14 cover=13675 #0 [940246ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x0, 0x0) #0 [940246ms] <- openat=0x4 errno=14 cover=1114 #0 [940248ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x105142, 0x0) #0 [940251ms] <- openat=0x5 errno=14 cover=7273 #0 [940252ms] -> sendfile(0x5, 0x4, 0x0, 0x7ffffff9) #0 [940674ms] <- sendfile=0x800000 errno=14 cover=262143 #0 [940694ms] -> setxattr$security_capability(0x20000280, 0x200002c0, 0x0, 0x0, 0x0) #0 [940698ms] <- setxattr$security_capability=0x0 errno=14 cover=1768 2021/11/10 22:35:39 result hanged=false: 2021/11/10 22:35:39 added new input for call #1 openat to corpus: chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) 22:35:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x7f94cedf969ce946) [940778ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115946 #0 [940797ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [940798ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3555 #0 [940800ms] -> ioctl$TCXONC(0x3, 0x540a, 0x7f94cedf969ce946) #0 [940800ms] <- ioctl$TCXONC=0xffffffffffffffff errno=22 cover=184 enabling collider #0 [940801ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [940802ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3487 #0 [940803ms] -> ioctl$TCXONC(0x3, 0x540a, 0x7f94cedf969ce946) #0 [940803ms] <- ioctl$TCXONC=0xffffffffffffffff errno=9 cover=46 2021/11/10 22:35:39 result hanged=false: 22:35:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x7f94cedf969ce946) 2021/11/10 22:35:39 #0: triaging type=7 2021/11/10 22:35:39 triaging input for call #1 ioctl$TCXONC (new signal=1) [940848ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115948 #0 [940869ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [940870ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3435 #0 [940871ms] -> ioctl$TCXONC(0x3, 0x540a, 0x7f94cedf969ce946) #0 [940871ms] <- ioctl$TCXONC=0xffffffffffffffff errno=22 cover=184 22:35:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x7f94cedf969ce946) 2021/11/10 22:35:39 result hanged=false: [940913ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115950 #0 [940935ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [940936ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3479 #0 [940942ms] -> ioctl$TCXONC(0x3, 0x540a, 0x7f94cedf969ce946) #0 [940942ms] <- ioctl$TCXONC=0xffffffffffffffff errno=22 cover=184 22:35:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x7f94cedf969ce946) 2021/11/10 22:35:39 result hanged=false: [940986ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115952 #0 [941008ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [941008ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3490 #0 [941010ms] -> ioctl$TCXONC(0x3, 0x540a, 0x7f94cedf969ce946) #0 [941010ms] <- ioctl$TCXONC=0xffffffffffffffff errno=22 cover=184 2021/11/10 22:35:39 result hanged=false: 2021/11/10 22:35:39 added new input for call #1 ioctl$TCXONC to corpus: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x7f94cedf969ce946) 2021/11/10 22:35:39 #0: triaging type=7 22:35:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x7f94cedf969ce946) 2021/11/10 22:35:39 triaging input for call #0 syz_open_dev$tty20 (new signal=9) [941076ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115954 #0 [941111ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [941112ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3457 #0 [941115ms] -> ioctl$TCXONC(0x3, 0x540a, 0x7f94cedf969ce946) #0 [941115ms] <- ioctl$TCXONC=0xffffffffffffffff errno=22 cover=184 22:35:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x7f94cedf969ce946) 2021/11/10 22:35:39 result hanged=false: [941179ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115956 #0 [941211ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [941214ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3533 #0 [941219ms] -> ioctl$TCXONC(0x3, 0x540a, 0x7f94cedf969ce946) #0 [941219ms] <- ioctl$TCXONC=0xffffffffffffffff errno=22 cover=184 2021/11/10 22:35:39 result hanged=false: 22:35:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x7f94cedf969ce946) [941284ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115958 #0 [941339ms] -> syz_open_dev$tty20(0xc, 0x4, 0x15) #0 [941340ms] <- syz_open_dev$tty20=0x3 errno=14 cover=3473 #0 [941342ms] -> ioctl$TCXONC(0x3, 0x540a, 0x7f94cedf969ce946) #0 [941342ms] <- ioctl$TCXONC=0xffffffffffffffff errno=22 cover=184 2021/11/10 22:35:39 result hanged=false: 2021/11/10 22:35:39 added new input for call #0 syz_open_dev$tty20 to corpus: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x7f94cedf969ce946) 22:35:39 executing program 0: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}}, 0x0) 2021/11/10 22:35:39 poll: candidates=8 inputs=0 signal=0 [941516ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 115960 #0 [941555ms] -> timerfd_create(0x7, 0x0) #0 [941556ms] <- timerfd_create=0x3 errno=14 cover=537 #0 [941558ms] -> timerfd_settime(0x3, 0x1, 0x20000040, 0x0) #0 [941558ms] <- timerfd_settime=0x0 errno=14 cover=254 #0 [941559ms] -> timerfd_settime(0x3, 0x0, 0x20000180, 0x0) #0 [941559ms] <- timerfd_settime=0x0 errno=14 cover=190 enabling collider #0 [941560ms] -> timerfd_create(0x7, 0x0) #0 [941560ms] <- timerfd_create=0x3 errno=14 cover=637 #0 [941561ms] -> timerfd_settime(0x3, 0x1, 0x20000040, 0x0) #0 [941561ms] <- timerfd_settime=0x0 errno=14 cover=254 pthread_create failed (errno 11) 22:35:40 executing program 0: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}}, 0x0) 2021/11/10 22:35:40 result hanged=false: 2021/11/10 22:35:40 #0: triaging type=7 2021/11/10 22:35:40 triaging input for call #2 timerfd_settime (new signal=1) [941677ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116062 #0 [941706ms] -> timerfd_create(0x7, 0x0) #0 [941707ms] <- timerfd_create=0x3 errno=14 cover=581 #0 [941713ms] -> timerfd_settime(0x3, 0x1, 0x20000040, 0x0) #0 [941713ms] <- timerfd_settime=0x0 errno=14 cover=254 #0 [941715ms] -> timerfd_settime(0x3, 0x0, 0x20000180, 0x0) #0 [941715ms] <- timerfd_settime=0x0 errno=14 cover=190 22:35:40 executing program 0: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}}, 0x0) 2021/11/10 22:35:40 result hanged=false: [941783ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116064 #0 [941813ms] -> timerfd_create(0x7, 0x0) #0 [941814ms] <- timerfd_create=0x3 errno=14 cover=559 #0 [941817ms] -> timerfd_settime(0x3, 0x1, 0x20000040, 0x0) #0 [941817ms] <- timerfd_settime=0x0 errno=14 cover=260 #0 [941817ms] -> timerfd_settime(0x3, 0x0, 0x20000180, 0x0) #0 [941817ms] <- timerfd_settime=0x0 errno=14 cover=190 22:35:40 executing program 0: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}}, 0x0) 2021/11/10 22:35:40 result hanged=false: [941897ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116066 #0 [941929ms] -> timerfd_create(0x7, 0x0) #0 [941929ms] <- timerfd_create=0x3 errno=14 cover=537 #0 [941931ms] -> timerfd_settime(0x3, 0x1, 0x20000040, 0x0) #0 [941931ms] <- timerfd_settime=0x0 errno=14 cover=258 #0 [941933ms] -> timerfd_settime(0x3, 0x0, 0x20000180, 0x0) #0 [941933ms] <- timerfd_settime=0x0 errno=14 cover=190 2021/11/10 22:35:40 result hanged=false: 2021/11/10 22:35:40 added new input for call #2 timerfd_settime to corpus: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}}, 0x0) 22:35:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) [942019ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116068 #0 [942103ms] -> socket$netlink(0x10, 0x3, 0x9) #0 [942104ms] <- socket$netlink=0x3 errno=14 cover=1430 #0 [942108ms] -> sendmsg$GTP_CMD_DELPDP(0x3, 0x20000a80, 0x0) [ 1001.295610] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=119872 comm=syz-executor.0 #0 [942112ms] <- sendmsg$GTP_CMD_DELPDP=0x14 errno=14 cover=4056 enabling collider #0 [942115ms] -> socket$netlink(0x10, 0x3, 0x9) #0 [942115ms] <- socket$netlink=0x3 errno=14 cover=1407 22:35:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), &(0x7f0000001cc0)='system_u:object_r:default_context_t:s0\x00', 0x27, 0x0) 2021/11/10 22:35:40 result hanged=false: [942199ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116070 #0 [942228ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [942231ms] <- socket$inet_udp=0x3 errno=14 cover=1705 #0 [942239ms] -> sendmsg$sock(0x3, 0x0, 0x0) #0 [942239ms] <- sendmsg$sock=0xffffffffffffffff errno=14 cover=431 #0 [942240ms] -> accept4(0x3, 0x0, 0x0, 0x0) #0 [942241ms] <- accept4=0xffffffffffffffff errno=95 cover=1320 #0 [942242ms] -> mknodat(0xffffffffffffff9c, 0x20001c00, 0x0, 0x0) #0 [942251ms] <- mknodat=0x0 errno=14 cover=6844 #0 [942252ms] -> lsetxattr$security_selinux(0x20001c40, 0x20001c80, 0x20001cc0, 0x27, 0x0) #0 [942260ms] <- lsetxattr$security_selinux=0x0 errno=14 cover=10987 enabling collider #0 [942262ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [942264ms] <- socket$inet_udp=0x3 errno=14 cover=1802 #0 [942266ms] -> sendmsg$sock(0x3, 0x0, 0x0) #0 [942266ms] <- sendmsg$sock=0xffffffffffffffff errno=14 cover=432 pthread_create failed (errno 11) 22:35:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), &(0x7f0000001cc0)='system_u:object_r:default_context_t:s0\x00', 0x27, 0x0) 2021/11/10 22:35:40 result hanged=false: 2021/11/10 22:35:40 #0: triaging type=7 2021/11/10 22:35:40 triaging input for call #4 lsetxattr$security_selinux (new signal=1) [942395ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116172 #0 [942436ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [942436ms] <- socket$inet_udp=0x3 errno=14 cover=1742 #0 [942445ms] -> sendmsg$sock(0x3, 0x0, 0x0) #0 [942445ms] <- sendmsg$sock=0xffffffffffffffff errno=14 cover=431 #0 [942445ms] -> accept4(0x3, 0x0, 0x0, 0x0) #0 [942446ms] <- accept4=0xffffffffffffffff errno=95 cover=1366 #0 [942448ms] -> mknodat(0xffffffffffffff9c, 0x20001c00, 0x0, 0x0) #0 [942452ms] <- mknodat=0x0 errno=14 cover=6860 #0 [942458ms] -> lsetxattr$security_selinux(0x20001c40, 0x20001c80, 0x20001cc0, 0x27, 0x0) #0 [942462ms] <- lsetxattr$security_selinux=0x0 errno=14 cover=3129 22:35:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), &(0x7f0000001cc0)='system_u:object_r:default_context_t:s0\x00', 0x27, 0x0) 2021/11/10 22:35:41 result hanged=false: [942530ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116174 #0 [942568ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [942568ms] <- socket$inet_udp=0x3 errno=14 cover=1728 #0 [942570ms] -> sendmsg$sock(0x3, 0x0, 0x0) #0 [942570ms] <- sendmsg$sock=0xffffffffffffffff errno=14 cover=431 #0 [942571ms] -> accept4(0x3, 0x0, 0x0, 0x0) #0 [942571ms] <- accept4=0xffffffffffffffff errno=95 cover=1301 #0 [942572ms] -> mknodat(0xffffffffffffff9c, 0x20001c00, 0x0, 0x0) #0 [942576ms] <- mknodat=0x0 errno=14 cover=6830 #0 [942578ms] -> lsetxattr$security_selinux(0x20001c40, 0x20001c80, 0x20001cc0, 0x27, 0x0) #0 [942581ms] <- lsetxattr$security_selinux=0x0 errno=14 cover=3192 22:35:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), &(0x7f0000001cc0)='system_u:object_r:default_context_t:s0\x00', 0x27, 0x0) 2021/11/10 22:35:41 result hanged=false: [942654ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116176 #0 [942682ms] -> socket$inet_udp(0x2, 0x2, 0x0) #0 [942683ms] <- socket$inet_udp=0x3 errno=14 cover=1673 #0 [942685ms] -> sendmsg$sock(0x3, 0x0, 0x0) #0 [942685ms] <- sendmsg$sock=0xffffffffffffffff errno=14 cover=431 #0 [942687ms] -> accept4(0x3, 0x0, 0x0, 0x0) #0 [942687ms] <- accept4=0xffffffffffffffff errno=95 cover=1320 #0 [942689ms] -> mknodat(0xffffffffffffff9c, 0x20001c00, 0x0, 0x0) #0 [942693ms] <- mknodat=0x0 errno=14 cover=6849 #0 [942695ms] -> lsetxattr$security_selinux(0x20001c40, 0x20001c80, 0x20001cc0, 0x27, 0x0) #0 [942698ms] <- lsetxattr$security_selinux=0x0 errno=14 cover=3129 2021/11/10 22:35:41 result hanged=false: 2021/11/10 22:35:41 added new input for call #4 lsetxattr$security_selinux to corpus: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), &(0x7f0000001cc0)='system_u:object_r:default_context_t:s0\x00', 0x27, 0x0) 22:35:41 executing program 0: waitid(0x0, 0x0, &(0x7f00000010c0), 0x0, 0x0) io_setup(0x101, &(0x7f0000001500)) [942781ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116178 #0 [942802ms] -> waitid(0x0, 0x0, 0x200010c0, 0x0, 0x0) #0 [942802ms] <- waitid=0xffffffffffffffff errno=22 cover=741 #0 [942810ms] -> io_setup(0x101, 0x20001500) #0 [942811ms] <- io_setup=0x0 errno=14 cover=4123 enabling collider #0 [942812ms] -> waitid(0x0, 0x0, 0x200010c0, 0x0, 0x0) #0 [942812ms] <- waitid=0xffffffffffffffff errno=22 cover=50 #0 [942812ms] -> io_setup(0x101, 0x20001500) #0 [942812ms] <- io_setup=0xffffffffffffffff errno=22 cover=40 22:35:41 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000b80), 0x480, 0x0) 2021/11/10 22:35:41 result hanged=false: [942864ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116180 #0 [942881ms] -> openat$bsg(0xffffffffffffff9c, 0x20000b80, 0x480, 0x0) #0 [942882ms] <- openat$bsg=0x3 errno=14 cover=1165 enabling collider #0 [942883ms] -> openat$bsg(0xffffffffffffff9c, 0x20000b80, 0x480, 0x0) #0 [942883ms] <- openat$bsg=0x3 errno=14 cover=1220 22:35:41 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) close(r0) 2021/11/10 22:35:41 result hanged=false: [942943ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116182 #0 [942967ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [942977ms] <- perf_event_open=0x3 errno=14 cover=10733 #0 [942979ms] -> socket$packet(0x11, 0x3, 0x300) #0 [942979ms] <- socket$packet=0x4 errno=14 cover=5603 #0 [942981ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [942982ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=5822 #0 [942983ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x20000140) #0 [942983ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=367 #0 [942983ms] -> setsockopt$packet_add_memb(0x4, 0x107, 0x1, 0x20000100, 0x10) #0 [942984ms] <- setsockopt$packet_add_memb=0x0 errno=14 cover=1132 #0 [942985ms] -> close(0x4) #0 [942990ms] <- close=0x0 errno=14 cover=5958 enabling collider #0 [943023ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [943036ms] <- perf_event_open=0x3 errno=14 cover=174264 #0 [943053ms] -> socket$packet(0x11, 0x3, 0x300) #0 [943053ms] <- socket$packet=0x4 errno=14 cover=4967 pthread_create failed (errno 11) 22:35:41 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) close(r0) 2021/11/10 22:35:41 result hanged=false: 2021/11/10 22:35:41 #0: triaging type=7 2021/11/10 22:35:41 triaging input for call #5 close (new signal=3) [943159ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116284 #0 [943177ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [943180ms] <- perf_event_open=0x3 errno=14 cover=9806 #0 [943181ms] -> socket$packet(0x11, 0x3, 0x300) #0 [943182ms] <- socket$packet=0x4 errno=14 cover=5066 #0 [943183ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [943183ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=5174 #0 [943188ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x20000140) #0 [943190ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=367 #0 [943190ms] -> setsockopt$packet_add_memb(0x4, 0x107, 0x1, 0x20000100, 0x10) #0 [943191ms] <- setsockopt$packet_add_memb=0x0 errno=14 cover=1063 #0 [943191ms] -> close(0x4) #0 [943195ms] <- close=0x0 errno=14 cover=3608 2021/11/10 22:35:41 result hanged=false: 22:35:41 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) close(r0) [943245ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116286 #0 [943270ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [943270ms] <- perf_event_open=0x3 errno=14 cover=11183 #0 [943272ms] -> socket$packet(0x11, 0x3, 0x300) #0 [943272ms] <- socket$packet=0x4 errno=14 cover=5693 #0 [943274ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [943274ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=6039 #0 [943275ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x20000140) #0 [943275ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=367 #0 [943277ms] -> setsockopt$packet_add_memb(0x4, 0x107, 0x1, 0x20000100, 0x10) #0 [943277ms] <- setsockopt$packet_add_memb=0x0 errno=14 cover=1063 #0 [943278ms] -> close(0x4) #0 [943282ms] <- close=0x0 errno=14 cover=3695 22:35:41 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) close(r0) 2021/11/10 22:35:41 result hanged=false: [943337ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116288 #0 [943356ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [943357ms] <- perf_event_open=0x3 errno=14 cover=9874 #0 [943359ms] -> socket$packet(0x11, 0x3, 0x300) #0 [943359ms] <- socket$packet=0x4 errno=14 cover=5777 #0 [943360ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [943360ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=5228 #0 [943361ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x20000140) #0 [943361ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=367 #0 [943361ms] -> setsockopt$packet_add_memb(0x4, 0x107, 0x1, 0x20000100, 0x10) #0 [943361ms] <- setsockopt$packet_add_memb=0x0 errno=14 cover=1012 #0 [943361ms] -> close(0x4) #0 [943369ms] <- close=0x0 errno=14 cover=3605 2021/11/10 22:35:41 result hanged=false: 2021/11/10 22:35:41 added new input for call #5 close to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) close(r0) 2021/11/10 22:35:41 #0: triaging type=7 22:35:41 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) close(r0) 2021/11/10 22:35:41 triaging input for call #4 setsockopt$packet_add_memb (new signal=2) [943420ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116290 #0 [943437ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [943437ms] <- perf_event_open=0x3 errno=14 cover=11526 #0 [943439ms] -> socket$packet(0x11, 0x3, 0x300) #0 [943440ms] <- socket$packet=0x4 errno=14 cover=5831 #0 [943441ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [943441ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=5247 #0 [943441ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x20000140) #0 [943441ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=367 #0 [943443ms] -> setsockopt$packet_add_memb(0x4, 0x107, 0x1, 0x20000100, 0x10) #0 [943444ms] <- setsockopt$packet_add_memb=0x0 errno=14 cover=1012 #0 [943444ms] -> close(0x4) #0 [943456ms] <- close=0x0 errno=14 cover=3633 22:35:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) close(r0) 2021/11/10 22:35:42 result hanged=false: [943505ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116292 #0 [943521ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [943522ms] <- perf_event_open=0x3 errno=14 cover=11040 #0 [943523ms] -> socket$packet(0x11, 0x3, 0x300) #0 [943523ms] <- socket$packet=0x4 errno=14 cover=4968 #0 [943528ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [943528ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=5207 #0 [943529ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x20000140) #0 [943529ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=367 #0 [943529ms] -> setsockopt$packet_add_memb(0x4, 0x107, 0x1, 0x20000100, 0x10) #0 [943529ms] <- setsockopt$packet_add_memb=0x0 errno=14 cover=1052 #0 [943529ms] -> close(0x4) #0 [943533ms] <- close=0x0 errno=14 cover=3605 22:35:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) close(r0) 2021/11/10 22:35:42 result hanged=false: [943583ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116294 #0 [943607ms] -> perf_event_open(0x20001d80, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [943608ms] <- perf_event_open=0x3 errno=14 cover=13031 #0 [943611ms] -> socket$packet(0x11, 0x3, 0x300) #0 [943612ms] <- socket$packet=0x4 errno=14 cover=6045 #0 [943612ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [943613ms] <- socket$inet6_icmp_raw=0x5 errno=14 cover=5276 #0 [943613ms] -> ioctl$sock_SIOCGIFINDEX(0x5, 0x8933, 0x20000140) #0 [943613ms] <- ioctl$sock_SIOCGIFINDEX=0x0 errno=14 cover=367 #0 [943613ms] -> setsockopt$packet_add_memb(0x4, 0x107, 0x1, 0x20000100, 0x10) #0 [943613ms] <- setsockopt$packet_add_memb=0x0 errno=14 cover=1012 #0 [943614ms] -> close(0x4) #0 [943618ms] <- close=0x0 errno=14 cover=3605 2021/11/10 22:35:42 result hanged=false: 2021/11/10 22:35:42 added new input for call #4 setsockopt$packet_add_memb to corpus: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6}, 0x10) close(r0) 22:35:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}]}]}, 0x28}}, 0x0) iptable filter/2: resetting iptable mangle/2: resetting [943670ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116296 #0 [943693ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [943693ms] <- socket$nl_generic=0x3 errno=14 cover=1467 #0 [943693ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [943694ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=12134 #0 [943695ms] -> ioctl$sock_SIOCGIFINDEX_80211(0x3, 0x8933, 0x20000080) #0 [943695ms] <- ioctl$sock_SIOCGIFINDEX_80211=0x0 errno=14 cover=188 #0 [943695ms] -> sendmsg$NL80211_CMD_JOIN_MESH(0x3, 0x20000000, 0x0) #0 [943695ms] <- sendmsg$NL80211_CMD_JOIN_MESH=0x28 errno=14 cover=1984 enabling collider #0 [943695ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [943695ms] <- socket$nl_generic=0x3 errno=14 cover=1436 #0 [943696ms] -> syz_genetlink_get_family_id$nl80211(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(nl80211, -1) #0 [943696ms] <- syz_genetlink_get_family_id$nl80211=0x1c errno=14 cover=11614 pthread_create failed (errno 11) 22:35:42 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000080)) 2021/11/10 22:35:42 result hanged=false: [943766ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116398 #0 [943784ms] -> socket$packet(0x11, 0x3, 0x300) #0 [943784ms] <- socket$packet=0x3 errno=14 cover=1741 #0 [943784ms] -> getsockopt$packet_int(0x3, 0x107, 0xb, 0x0, 0x20000080) #0 [943785ms] <- getsockopt$packet_int=0xffffffffffffffff errno=22 cover=85 enabling collider #0 [943794ms] -> socket$packet(0x11, 0x3, 0x300) #0 [943794ms] <- socket$packet=0x3 errno=14 cover=1871 #0 [943794ms] -> getsockopt$packet_int(0x3, 0x107, 0xb, 0x0, 0x20000080) #0 [943794ms] <- getsockopt$packet_int=0xffffffffffffffff errno=9 cover=50 22:35:42 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000080)) 2021/11/10 22:35:42 result hanged=false: 2021/11/10 22:35:42 #0: triaging type=7 2021/11/10 22:35:42 triaging input for call #1 getsockopt$packet_int (new signal=1) [943831ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116400 #0 [943850ms] -> socket$packet(0x11, 0x3, 0x300) #0 [943851ms] <- socket$packet=0x3 errno=14 cover=1885 #0 [943853ms] -> getsockopt$packet_int(0x3, 0x107, 0xb, 0x0, 0x20000080) #0 [943853ms] <- getsockopt$packet_int=0xffffffffffffffff errno=22 cover=85 22:35:42 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000080)) 2021/11/10 22:35:42 result hanged=false: [943892ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116402 #0 [943910ms] -> socket$packet(0x11, 0x3, 0x300) #0 [943910ms] <- socket$packet=0x3 errno=14 cover=1763 #0 [943912ms] -> getsockopt$packet_int(0x3, 0x107, 0xb, 0x0, 0x20000080) #0 [943912ms] <- getsockopt$packet_int=0xffffffffffffffff errno=22 cover=85 2021/11/10 22:35:42 result hanged=false: 22:35:42 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000080)) [943952ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116404 #0 [943970ms] -> socket$packet(0x11, 0x3, 0x300) #0 [943970ms] <- socket$packet=0x3 errno=14 cover=1894 #0 [943971ms] -> getsockopt$packet_int(0x3, 0x107, 0xb, 0x0, 0x20000080) #0 [943971ms] <- getsockopt$packet_int=0xffffffffffffffff errno=22 cover=85 2021/11/10 22:35:42 result hanged=false: 2021/11/10 22:35:42 added new input for call #1 getsockopt$packet_int to corpus: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000080)) 22:35:42 executing program 0: perf_event_open(&(0x7f0000002580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2021/11/10 22:35:42 poll: candidates=8 inputs=0 signal=0 [944015ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116406 #0 [944032ms] -> perf_event_open(0x20002580, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [944033ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=845 enabling collider #0 [944033ms] -> perf_event_open(0x20002580, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [944033ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=833 22:35:42 executing program 0: perf_event_open(&(0x7f0000002580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2021/11/10 22:35:42 result hanged=false: 2021/11/10 22:35:42 #0: triaging type=7 2021/11/10 22:35:42 triaging input for call #0 perf_event_open (new signal=6) [944067ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116408 #0 [944085ms] -> perf_event_open(0x20002580, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [944085ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=834 22:35:42 executing program 0: perf_event_open(&(0x7f0000002580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2021/11/10 22:35:42 result hanged=false: [944124ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116410 #0 [944140ms] -> perf_event_open(0x20002580, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [944141ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=845 2021/11/10 22:35:42 result hanged=false: 22:35:42 executing program 0: perf_event_open(&(0x7f0000002580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [944183ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116412 #0 [944200ms] -> perf_event_open(0x20002580, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [944200ms] <- perf_event_open=0xffffffffffffffff errno=95 cover=845 2021/11/10 22:35:42 result hanged=false: 2021/11/10 22:35:42 added new input for call #0 perf_event_open to corpus: perf_event_open(&(0x7f0000002580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 22:35:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000340)) [944239ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116414 #0 [944255ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [944255ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1677 #0 [944255ms] -> ioctl$sock_proto_private(0x3, 0x89e0, 0x20000340) #0 [944256ms] <- ioctl$sock_proto_private=0xffffffffffffffff errno=22 cover=545 enabling collider #0 [944256ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [944257ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1687 22:35:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000340)) 2021/11/10 22:35:42 result hanged=false: 2021/11/10 22:35:42 #0: triaging type=7 2021/11/10 22:35:42 triaging input for call #1 ioctl$sock_proto_private (new signal=4) [944298ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116416 #0 [944315ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [944315ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1688 #0 [944316ms] -> ioctl$sock_proto_private(0x3, 0x89e0, 0x20000340) #0 [944317ms] <- ioctl$sock_proto_private=0xffffffffffffffff errno=22 cover=566 2021/11/10 22:35:42 result hanged=false: 22:35:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000340)) [944353ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116418 #0 [944372ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [944372ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1688 #0 [944374ms] -> ioctl$sock_proto_private(0x3, 0x89e0, 0x20000340) #0 [944374ms] <- ioctl$sock_proto_private=0xffffffffffffffff errno=22 cover=588 22:35:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000340)) 2021/11/10 22:35:42 result hanged=false: [944412ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116420 #0 [944435ms] -> socket$inet_icmp_raw(0x2, 0x3, 0x1) #0 [944435ms] <- socket$inet_icmp_raw=0x3 errno=14 cover=1754 #0 [944436ms] -> ioctl$sock_proto_private(0x3, 0x89e0, 0x20000340) #0 [944436ms] <- ioctl$sock_proto_private=0xffffffffffffffff errno=22 cover=512 2021/11/10 22:35:43 result hanged=false: 2021/11/10 22:35:43 added new input for call #1 ioctl$sock_proto_private to corpus: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000340)) 22:35:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2f, &(0x7f0000000100)={0x0, 0x0}, 0x10) [944477ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116422 #0 [944495ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [944495ms] <- socket$nl_xfrm=0x3 errno=14 cover=1441 #0 [944496ms] -> setsockopt$SO_ATTACH_FILTER(0x3, 0x1, 0x2f, 0x20000100, 0x10) #0 [944496ms] <- setsockopt$SO_ATTACH_FILTER=0x0 errno=14 cover=157 enabling collider #0 [944497ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [944497ms] <- socket$nl_xfrm=0x3 errno=14 cover=1541 #0 [944498ms] -> setsockopt$SO_ATTACH_FILTER(0x3, 0x1, 0x2f, 0x20000100, 0x10) #0 [944498ms] <- setsockopt$SO_ATTACH_FILTER=0xffffffffffffffff errno=9 cover=51 22:35:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2f, &(0x7f0000000100)={0x0, 0x0}, 0x10) 2021/11/10 22:35:43 result hanged=false: 2021/11/10 22:35:43 #0: triaging type=7 2021/11/10 22:35:43 triaging input for call #1 setsockopt$SO_ATTACH_FILTER (new signal=6) [944534ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116424 #0 [944558ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [944559ms] <- socket$nl_xfrm=0x3 errno=14 cover=1430 #0 [944560ms] -> setsockopt$SO_ATTACH_FILTER(0x3, 0x1, 0x2f, 0x20000100, 0x10) #0 [944562ms] <- setsockopt$SO_ATTACH_FILTER=0x0 errno=14 cover=157 22:35:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2f, &(0x7f0000000100)={0x0, 0x0}, 0x10) 2021/11/10 22:35:43 result hanged=false: [944595ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116426 #0 [944613ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [944613ms] <- socket$nl_xfrm=0x3 errno=14 cover=1408 #0 [944614ms] -> setsockopt$SO_ATTACH_FILTER(0x3, 0x1, 0x2f, 0x20000100, 0x10) #0 [944614ms] <- setsockopt$SO_ATTACH_FILTER=0x0 errno=14 cover=157 22:35:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2f, &(0x7f0000000100)={0x0, 0x0}, 0x10) 2021/11/10 22:35:43 result hanged=false: [944653ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116428 #0 [944673ms] -> socket$nl_xfrm(0x10, 0x3, 0x6) #0 [944674ms] <- socket$nl_xfrm=0x3 errno=14 cover=1430 #0 [944675ms] -> setsockopt$SO_ATTACH_FILTER(0x3, 0x1, 0x2f, 0x20000100, 0x10) #0 [944675ms] <- setsockopt$SO_ATTACH_FILTER=0x0 errno=14 cover=161 2021/11/10 22:35:43 result hanged=false: 2021/11/10 22:35:43 added new input for call #1 setsockopt$SO_ATTACH_FILTER to corpus: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2f, &(0x7f0000000100)={0x0, 0x0}, 0x10) 22:35:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x14) [944715ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116430 #0 [944730ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [944731ms] <- socket$inet_tcp=0x3 errno=14 cover=1765 #0 [944732ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [944732ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=189 #0 [944733ms] -> setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0x3, 0x6, 0x1d, 0x20000100, 0x14) #0 [944733ms] <- setsockopt$inet_tcp_TCP_REPAIR_WINDOW=0xffffffffffffffff errno=22 cover=162 enabling collider #0 [944734ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [944735ms] <- socket$inet_tcp=0x3 errno=14 cover=1838 #0 [944736ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [944736ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 pthread_create failed (errno 11) 22:35:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x14) 2021/11/10 22:35:43 result hanged=false: 2021/11/10 22:35:43 #0: triaging type=7 2021/11/10 22:35:43 triaging input for call #2 setsockopt$inet_tcp_TCP_REPAIR_WINDOW (new signal=1) [944814ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116532 #0 [944831ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [944831ms] <- socket$inet_tcp=0x3 errno=14 cover=1754 #0 [944833ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [944834ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=199 #0 [944836ms] -> setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0x3, 0x6, 0x1d, 0x20000100, 0x14) #0 [944837ms] <- setsockopt$inet_tcp_TCP_REPAIR_WINDOW=0xffffffffffffffff errno=22 cover=162 22:35:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x14) 2021/11/10 22:35:43 result hanged=false: [944876ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116534 #0 [944899ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [944899ms] <- socket$inet_tcp=0x3 errno=14 cover=1770 #0 [944901ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [944901ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [944901ms] -> setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0x3, 0x6, 0x1d, 0x20000100, 0x14) #0 [944902ms] <- setsockopt$inet_tcp_TCP_REPAIR_WINDOW=0xffffffffffffffff errno=22 cover=162 22:35:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x14) 2021/11/10 22:35:43 result hanged=false: [944939ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116536 #0 [944956ms] -> socket$inet_tcp(0x2, 0x1, 0x0) #0 [944956ms] <- socket$inet_tcp=0x3 errno=14 cover=1746 #0 [944957ms] -> setsockopt$inet_tcp_TCP_REPAIR(0x3, 0x6, 0x13, 0x20000080, 0x4) #0 [944957ms] <- setsockopt$inet_tcp_TCP_REPAIR=0x0 errno=14 cover=185 #0 [944957ms] -> setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0x3, 0x6, 0x1d, 0x20000100, 0x14) #0 [944957ms] <- setsockopt$inet_tcp_TCP_REPAIR_WINDOW=0xffffffffffffffff errno=22 cover=176 2021/11/10 22:35:43 result hanged=false: 2021/11/10 22:35:43 added new input for call #2 setsockopt$inet_tcp_TCP_REPAIR_WINDOW to corpus: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x14) 22:35:43 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000340)=0x1000, 0x4) open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1000) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x2, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) lseek(r1, 0x0, 0x4) [945023ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116538 #0 [945044ms] -> creat(0x20000080, 0x0) #0 [945049ms] <- creat=0x3 errno=14 cover=7432 #0 [945050ms] -> creat(0x20000000, 0x0) #0 [945052ms] <- creat=0x4 errno=14 cover=5626 #0 [945052ms] -> setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x20000340, 0x4) #0 [945052ms] <- setsockopt$inet6_tcp_int=0xffffffffffffffff errno=9 cover=50 #0 [945052ms] -> open_tree(0xffffffffffffffff, 0x20000280, 0x1000) #0 [945053ms] <- open_tree=0xffffffffffffffff errno=9 cover=338 #0 [945053ms] -> io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x2, 0x0, 0x0) #0 [945053ms] <- io_uring_register$IORING_UNREGISTER_PERSONALITY=0xffffffffffffffff errno=9 cover=46 #0 [945053ms] -> fallocate(0x4, 0x0, 0x0, 0x8800000) #0 [945057ms] <- fallocate=0x0 errno=14 cover=78443 #0 [945059ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [945425ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [945427ms] -> lseek(0x4, 0x0, 0x4) #0 [945427ms] <- lseek=0xfff000 errno=14 cover=342 enabling collider #0 [945427ms] -> creat(0x20000080, 0x0) #0 [945536ms] <- creat=0x3 errno=14 cover=262143 #0 [945538ms] -> creat(0x20000000, 0x0) #0 [945543ms] <- creat=0x4 errno=14 cover=5275 pthread_create failed (errno 11) 2021/11/10 22:35:44 result hanged=false: 22:35:44 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000340)=0x1000, 0x4) open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1000) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x2, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) lseek(r1, 0x0, 0x4) 2021/11/10 22:35:44 #0: triaging type=7 2021/11/10 22:35:44 triaging input for call #6 pwrite64 (new signal=4) [945613ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116640 #0 [945631ms] -> creat(0x20000080, 0x0) #0 [945634ms] <- creat=0x3 errno=14 cover=7373 #0 [945636ms] -> creat(0x20000000, 0x0) #0 [945638ms] <- creat=0x4 errno=14 cover=5615 #0 [945639ms] -> setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x20000340, 0x4) #0 [945639ms] <- setsockopt$inet6_tcp_int=0xffffffffffffffff errno=9 cover=50 #0 [945640ms] -> open_tree(0xffffffffffffffff, 0x20000280, 0x1000) #0 [945640ms] <- open_tree=0xffffffffffffffff errno=9 cover=338 #0 [945641ms] -> io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x2, 0x0, 0x0) #0 [945641ms] <- io_uring_register$IORING_UNREGISTER_PERSONALITY=0xffffffffffffffff errno=9 cover=46 #0 [945642ms] -> fallocate(0x4, 0x0, 0x0, 0x8800000) #0 [945646ms] <- fallocate=0x0 errno=14 cover=80028 #0 [945651ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [946025ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [946040ms] -> lseek(0x4, 0x0, 0x4) #0 [946043ms] <- lseek=0xfff000 errno=14 cover=346 22:35:44 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000340)=0x1000, 0x4) open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1000) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x2, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) lseek(r1, 0x0, 0x4) 2021/11/10 22:35:44 result hanged=false: [946161ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116642 #0 [946182ms] -> creat(0x20000080, 0x0) #0 [946187ms] <- creat=0x3 errno=14 cover=7503 #0 [946189ms] -> creat(0x20000000, 0x0) #0 [946191ms] <- creat=0x4 errno=14 cover=5635 #0 [946192ms] -> setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x20000340, 0x4) #0 [946192ms] <- setsockopt$inet6_tcp_int=0xffffffffffffffff errno=9 cover=50 #0 [946193ms] -> open_tree(0xffffffffffffffff, 0x20000280, 0x1000) #0 [946193ms] <- open_tree=0xffffffffffffffff errno=9 cover=338 #0 [946194ms] -> io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x2, 0x0, 0x0) #0 [946195ms] <- io_uring_register$IORING_UNREGISTER_PERSONALITY=0xffffffffffffffff errno=9 cover=46 #0 [946195ms] -> fallocate(0x4, 0x0, 0x0, 0x8800000) #0 [946198ms] <- fallocate=0x0 errno=14 cover=77867 #0 [946202ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [946541ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [946559ms] -> lseek(0x4, 0x0, 0x4) #0 [946559ms] <- lseek=0xfff000 errno=14 cover=340 22:35:45 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000340)=0x1000, 0x4) open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1000) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x2, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) lseek(r1, 0x0, 0x4) 2021/11/10 22:35:45 result hanged=false: [946671ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116644 #0 [946695ms] -> creat(0x20000080, 0x0) #0 [946699ms] <- creat=0x3 errno=14 cover=11798 #0 [946703ms] -> creat(0x20000000, 0x0) #0 [946706ms] <- creat=0x4 errno=14 cover=5639 #0 [946706ms] -> setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x20000340, 0x4) #0 [946707ms] <- setsockopt$inet6_tcp_int=0xffffffffffffffff errno=9 cover=50 #0 [946708ms] -> open_tree(0xffffffffffffffff, 0x20000280, 0x1000) #0 [946709ms] <- open_tree=0xffffffffffffffff errno=9 cover=338 #0 [946709ms] -> io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x2, 0x0, 0x0) #0 [946709ms] <- io_uring_register$IORING_UNREGISTER_PERSONALITY=0xffffffffffffffff errno=9 cover=46 #0 [946709ms] -> fallocate(0x4, 0x0, 0x0, 0x8800000) #0 [946713ms] <- fallocate=0x0 errno=14 cover=77848 #0 [946716ms] -> pwrite64(0x3, 0x20000300, 0xfffffeb2, 0x0) #0 [947074ms] <- pwrite64=0xfff000 errno=14 cover=262143 #0 [947089ms] -> lseek(0x4, 0x0, 0x4) #0 [947090ms] <- lseek=0xfff000 errno=14 cover=340 2021/11/10 22:35:45 result hanged=false: 2021/11/10 22:35:45 added new input for call #6 pwrite64 to corpus: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000340)=0x1000, 0x4) open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1000) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x2, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) lseek(r1, 0x0, 0x4) 22:35:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lchown(&(0x7f00000000c0)='./file1\x00', 0xee01, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) [947204ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116646 #0 [947223ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [947226ms] <- openat=0x3 errno=14 cover=7584 #0 [947228ms] -> lchown(0x200000c0, 0xee01, 0xffffffffffffffff) #0 [947229ms] <- lchown=0x0 errno=14 cover=2551 #0 [947230ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [947230ms] <- openat=0x4 errno=14 cover=1031 #0 [947230ms] -> ioctl$EXT4_IOC_ALLOC_DA_BLKS(0x4, 0x660c) #0 [947230ms] <- ioctl$EXT4_IOC_ALLOC_DA_BLKS=0x0 errno=14 cover=192 enabling collider #0 [947231ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [947231ms] <- openat=0x3 errno=14 cover=1146 #0 [947231ms] -> lchown(0x200000c0, 0xee01, 0xffffffffffffffff) #0 [947232ms] <- lchown=0x0 errno=14 cover=1637 pthread_create failed (errno 11) 22:35:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lchown(&(0x7f00000000c0)='./file1\x00', 0xee01, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 2021/11/10 22:35:45 result hanged=false: 2021/11/10 22:35:45 #0: triaging type=7 2021/11/10 22:35:45 triaging input for call #3 ioctl$EXT4_IOC_ALLOC_DA_BLKS (new signal=1) [947307ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116748 #0 [947323ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [947327ms] <- openat=0x3 errno=14 cover=7453 #0 [947329ms] -> lchown(0x200000c0, 0xee01, 0xffffffffffffffff) #0 [947330ms] <- lchown=0x0 errno=14 cover=2361 #0 [947330ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [947331ms] <- openat=0x4 errno=14 cover=1106 #0 [947332ms] -> ioctl$EXT4_IOC_ALLOC_DA_BLKS(0x4, 0x660c) #0 [947332ms] <- ioctl$EXT4_IOC_ALLOC_DA_BLKS=0x0 errno=14 cover=192 22:35:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lchown(&(0x7f00000000c0)='./file1\x00', 0xee01, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 2021/11/10 22:35:45 result hanged=false: [947372ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116750 #0 [947397ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [947402ms] <- openat=0x3 errno=14 cover=7426 #0 [947404ms] -> lchown(0x200000c0, 0xee01, 0xffffffffffffffff) #0 [947404ms] <- lchown=0x0 errno=14 cover=2374 #0 [947404ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [947404ms] <- openat=0x4 errno=14 cover=1053 #0 [947405ms] -> ioctl$EXT4_IOC_ALLOC_DA_BLKS(0x4, 0x660c) #0 [947405ms] <- ioctl$EXT4_IOC_ALLOC_DA_BLKS=0x0 errno=14 cover=192 22:35:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lchown(&(0x7f00000000c0)='./file1\x00', 0xee01, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 2021/11/10 22:35:45 result hanged=false: [947447ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116752 #0 [947468ms] -> openat(0xffffffffffffff9c, 0x20000100, 0x42, 0x0) #0 [947471ms] <- openat=0x3 errno=14 cover=7521 #0 [947474ms] -> lchown(0x200000c0, 0xee01, 0xffffffffffffffff) #0 [947474ms] <- lchown=0x0 errno=14 cover=2384 #0 [947475ms] -> openat(0xffffffffffffff9c, 0x20000000, 0x0, 0x0) #0 [947475ms] <- openat=0x4 errno=14 cover=1065 #0 [947475ms] -> ioctl$EXT4_IOC_ALLOC_DA_BLKS(0x4, 0x660c) #0 [947475ms] <- ioctl$EXT4_IOC_ALLOC_DA_BLKS=0x0 errno=14 cover=192 2021/11/10 22:35:46 result hanged=false: 2021/11/10 22:35:46 added new input for call #3 ioctl$EXT4_IOC_ALLOC_DA_BLKS to corpus: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lchown(&(0x7f00000000c0)='./file1\x00', 0xee01, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 22:35:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() [947518ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116754 #0 [947541ms] -> perf_event_open(0x20000080, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [947548ms] <- perf_event_open=0x3 errno=14 cover=110073 #0 [947549ms] -> fork() #0 [947564ms] <- fork=0xffffffffffffffff errno=11 cover=262143 enabling collider #0 [947592ms] -> perf_event_open(0x20000080, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [947594ms] <- perf_event_open=0x3 errno=14 cover=109269 #0 [947594ms] -> fork() #0 [947609ms] <- fork=0xffffffffffffffff errno=11 cover=262143 22:35:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 2021/11/10 22:35:46 result hanged=false: 2021/11/10 22:35:46 #0: triaging type=7 2021/11/10 22:35:46 triaging input for call #1 fork (new signal=1) [947657ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116758 #0 [947677ms] -> perf_event_open(0x20000080, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [947680ms] <- perf_event_open=0x3 errno=14 cover=120364 #0 [947690ms] -> fork() #0 [947705ms] <- fork=0xffffffffffffffff errno=11 cover=262143 22:35:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 2021/11/10 22:35:46 result hanged=false: [947773ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116761 #0 [947795ms] -> perf_event_open(0x20000080, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [947800ms] <- perf_event_open=0x3 errno=14 cover=141598 #0 [947807ms] -> fork() #0 [947820ms] <- fork=0xffffffffffffffff errno=11 cover=262143 22:35:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 2021/11/10 22:35:46 result hanged=false: [947888ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116764 #0 [947907ms] -> perf_event_open(0x20000080, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [947910ms] <- perf_event_open=0x3 errno=14 cover=109133 #0 [947917ms] -> fork() #0 [947935ms] <- fork=0xffffffffffffffff errno=11 cover=262143 2021/11/10 22:35:46 result hanged=false: 2021/11/10 22:35:46 added new input for call #1 fork to corpus: perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 2021/11/10 22:35:46 #0: triaging type=7 22:35:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 2021/11/10 22:35:46 triaging input for call #0 perf_event_open (new signal=2) [948020ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116767 #0 [948046ms] -> perf_event_open(0x20000080, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [948047ms] <- perf_event_open=0x3 errno=14 cover=109145 #0 [948052ms] -> fork() #0 [948069ms] <- fork=0xffffffffffffffff errno=11 cover=262143 22:35:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 2021/11/10 22:35:46 result hanged=false: [948127ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116770 #0 [948145ms] -> perf_event_open(0x20000080, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [948147ms] <- perf_event_open=0x3 errno=14 cover=108997 #0 [948159ms] -> fork() #0 [948180ms] <- fork=0xffffffffffffffff errno=11 cover=262143 22:35:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 2021/11/10 22:35:46 result hanged=false: [948242ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116773 #0 [948266ms] -> perf_event_open(0x20000080, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [948270ms] <- perf_event_open=0x3 errno=14 cover=109419 #0 [948275ms] -> fork() #0 [948293ms] <- fork=0xffffffffffffffff errno=11 cover=262143 2021/11/10 22:35:46 result hanged=false: 2021/11/10 22:35:46 added new input for call #0 perf_event_open to corpus: perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 22:35:46 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9736) syz_open_dev$vcsu(0x0, 0x3, 0x280000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000a80)={0x8, 0x0, 0x7fff}) unshare(0x48020200) [948371ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116776 #0 [948388ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [948389ms] <- perf_event_open=0x3 errno=14 cover=10950 #0 [948391ms] -> ioctl$int_in(0x3, 0x5452, 0x20000040) #0 [948391ms] <- ioctl$int_in=0x0 errno=14 cover=820 #0 [948392ms] -> syz_open_dev$vcsu(0x0, 0x3, 0x280000) SIGSEGV on (nil), skipping #0 [948392ms] <- syz_open_dev$vcsu=0xffffffffffffffff errno=14 cover=2682 #0 [948393ms] -> ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x20000a80) #0 [948394ms] <- ioctl$PIO_UNIMAPCLR=0xffffffffffffffff errno=9 cover=169 #0 [948394ms] -> unshare(0x48020200) #0 [948444ms] <- unshare=0x0 errno=14 cover=262143 enabling collider #0 [948457ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [948459ms] <- perf_event_open=0x3 errno=14 cover=12040 #0 [948459ms] -> ioctl$int_in(0x3, 0x5452, 0x20000040) #0 [948460ms] <- ioctl$int_in=0x0 errno=14 cover=732 pthread_create failed (errno 11) 2021/11/10 22:35:47 result hanged=false: 2021/11/10 22:35:47 #0: triaging type=7 2021/11/10 22:35:47 triaging input for call #4 unshare (new signal=10) 22:35:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9736) syz_open_dev$vcsu(0x0, 0x3, 0x280000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000a80)={0x8, 0x0, 0x7fff}) unshare(0x48020200) [948552ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116878 #0 [948570ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [948571ms] <- perf_event_open=0x3 errno=14 cover=8382 #0 [948574ms] -> ioctl$int_in(0x3, 0x5452, 0x20000040) #0 [948574ms] <- ioctl$int_in=0x0 errno=14 cover=146 #0 [948590ms] -> syz_open_dev$vcsu(0x0, 0x3, 0x280000) SIGSEGV on (nil), skipping #0 [948591ms] <- syz_open_dev$vcsu=0xffffffffffffffff errno=14 cover=1068 #0 [948591ms] -> ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x20000a80) #0 [948591ms] <- ioctl$PIO_UNIMAPCLR=0xffffffffffffffff errno=9 cover=45 #0 [948591ms] -> unshare(0x48020200) #0 [948617ms] <- unshare=0x0 errno=14 cover=220078 22:35:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9736) syz_open_dev$vcsu(0x0, 0x3, 0x280000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000a80)={0x8, 0x0, 0x7fff}) unshare(0x48020200) 2021/11/10 22:35:47 result hanged=false: [948687ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116880 #0 [948706ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [948707ms] <- perf_event_open=0x3 errno=14 cover=9461 #0 [948708ms] -> ioctl$int_in(0x3, 0x5452, 0x20000040) #0 [948708ms] <- ioctl$int_in=0x0 errno=14 cover=732 #0 [948709ms] -> syz_open_dev$vcsu(0x0, 0x3, 0x280000) SIGSEGV on (nil), skipping #0 [948712ms] <- syz_open_dev$vcsu=0xffffffffffffffff errno=14 cover=3103 #0 [948713ms] -> ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x20000a80) #0 [948713ms] <- ioctl$PIO_UNIMAPCLR=0xffffffffffffffff errno=9 cover=169 #0 [948716ms] -> unshare(0x48020200) #0 [948764ms] <- unshare=0x0 errno=14 cover=262143 22:35:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9736) syz_open_dev$vcsu(0x0, 0x3, 0x280000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000a80)={0x8, 0x0, 0x7fff}) unshare(0x48020200) 2021/11/10 22:35:47 result hanged=false: [948832ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116882 #0 [948854ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [948855ms] <- perf_event_open=0x3 errno=14 cover=9442 #0 [948856ms] -> ioctl$int_in(0x3, 0x5452, 0x20000040) #0 [948858ms] <- ioctl$int_in=0x0 errno=14 cover=157 #0 [948860ms] -> syz_open_dev$vcsu(0x0, 0x3, 0x280000) SIGSEGV on (nil), skipping #0 [948860ms] <- syz_open_dev$vcsu=0xffffffffffffffff errno=14 cover=1120 #0 [948861ms] -> ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x20000a80) #0 [948861ms] <- ioctl$PIO_UNIMAPCLR=0xffffffffffffffff errno=9 cover=45 #0 [948862ms] -> unshare(0x48020200) #0 [948889ms] <- unshare=0x0 errno=14 cover=191128 2021/11/10 22:35:47 result hanged=false: 2021/11/10 22:35:47 added new input for call #4 unshare to corpus: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9736) syz_open_dev$vcsu(0x0, 0x3, 0x280000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000a80)={0x8, 0x0, 0x7fff}) unshare(0x48020200) 2021/11/10 22:35:47 #0: triaging type=7 22:35:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9736) syz_open_dev$vcsu(0x0, 0x3, 0x280000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000a80)={0x8, 0x0, 0x7fff}) unshare(0x48020200) 2021/11/10 22:35:47 triaging input for call #2 syz_open_dev$vcsu (new signal=4) [948990ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116884 #0 [949049ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [949050ms] <- perf_event_open=0x3 errno=14 cover=9909 #0 [949051ms] -> ioctl$int_in(0x3, 0x5452, 0x20000040) #0 [949051ms] <- ioctl$int_in=0x0 errno=14 cover=146 #0 [949051ms] -> syz_open_dev$vcsu(0x0, 0x3, 0x280000) SIGSEGV on (nil), skipping #0 [949051ms] <- syz_open_dev$vcsu=0xffffffffffffffff errno=14 cover=1010 #0 [949052ms] -> ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x20000a80) #0 [949052ms] <- ioctl$PIO_UNIMAPCLR=0xffffffffffffffff errno=9 cover=45 #0 [949052ms] -> unshare(0x48020200) #0 [949073ms] <- unshare=0x0 errno=14 cover=190968 2021/11/10 22:35:47 result hanged=false: 22:35:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9736) syz_open_dev$vcsu(0x0, 0x3, 0x280000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000a80)={0x8, 0x0, 0x7fff}) unshare(0x48020200) [949142ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116886 #0 [949171ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [949172ms] <- perf_event_open=0x3 errno=14 cover=9049 #0 [949189ms] -> ioctl$int_in(0x3, 0x5452, 0x20000040) #0 [949189ms] <- ioctl$int_in=0x0 errno=14 cover=670 #0 [949192ms] -> syz_open_dev$vcsu(0x0, 0x3, 0x280000) SIGSEGV on (nil), skipping #0 [949193ms] <- syz_open_dev$vcsu=0xffffffffffffffff errno=14 cover=2719 #0 [949197ms] -> ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x20000a80) #0 [949197ms] <- ioctl$PIO_UNIMAPCLR=0xffffffffffffffff errno=9 cover=78 #0 [949198ms] -> unshare(0x48020200) #0 [949264ms] <- unshare=0x0 errno=14 cover=262143 2021/11/10 22:35:47 result hanged=false: 22:35:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9736) syz_open_dev$vcsu(0x0, 0x3, 0x280000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000a80)={0x8, 0x0, 0x7fff}) unshare(0x48020200) [949339ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116888 #0 [949360ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [949362ms] <- perf_event_open=0x3 errno=14 cover=8271 #0 [949366ms] -> ioctl$int_in(0x3, 0x5452, 0x20000040) #0 [949366ms] <- ioctl$int_in=0x0 errno=14 cover=146 #0 [949367ms] -> syz_open_dev$vcsu(0x0, 0x3, 0x280000) SIGSEGV on (nil), skipping #0 [949367ms] <- syz_open_dev$vcsu=0xffffffffffffffff errno=14 cover=1064 #0 [949369ms] -> ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x20000a80) #0 [949369ms] <- ioctl$PIO_UNIMAPCLR=0xffffffffffffffff errno=9 cover=45 #0 [949378ms] -> unshare(0x48020200) #0 [949431ms] <- unshare=0x0 errno=14 cover=262143 2021/11/10 22:35:48 result hanged=false: 2021/11/10 22:35:48 added new input for call #2 syz_open_dev$vcsu to corpus: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9736) syz_open_dev$vcsu(0x0, 0x3, 0x280000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000a80)={0x8, 0x0, 0x7fff}) unshare(0x48020200) 22:35:48 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9736) syz_open_dev$vcsu(0x0, 0x3, 0x280000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000a80)={0x8, 0x0, 0x7fff}) unshare(0x48020200) 2021/11/10 22:35:48 #0: triaging type=7 2021/11/10 22:35:48 triaging input for call #1 ioctl$int_in (new signal=3) [949502ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116890 #0 [949524ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [949524ms] <- perf_event_open=0x3 errno=14 cover=8337 #0 [949525ms] -> ioctl$int_in(0x3, 0x5452, 0x20000040) #0 [949525ms] <- ioctl$int_in=0x0 errno=14 cover=160 #0 [949525ms] -> syz_open_dev$vcsu(0x0, 0x3, 0x280000) SIGSEGV on (nil), skipping #0 [949526ms] <- syz_open_dev$vcsu=0xffffffffffffffff errno=14 cover=1010 #0 [949526ms] -> ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x20000a80) #0 [949526ms] <- ioctl$PIO_UNIMAPCLR=0xffffffffffffffff errno=9 cover=45 #0 [949526ms] -> unshare(0x48020200) #0 [949548ms] <- unshare=0x0 errno=14 cover=184135 22:35:48 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9736) syz_open_dev$vcsu(0x0, 0x3, 0x280000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000a80)={0x8, 0x0, 0x7fff}) unshare(0x48020200) 2021/11/10 22:35:48 result hanged=false: [949720ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116892 #0 [949755ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [949759ms] <- perf_event_open=0x3 errno=14 cover=10516 #0 [949761ms] -> ioctl$int_in(0x3, 0x5452, 0x20000040) #0 [949761ms] <- ioctl$int_in=0x0 errno=14 cover=157 #0 [949762ms] -> syz_open_dev$vcsu(0x0, 0x3, 0x280000) SIGSEGV on (nil), skipping #0 [949762ms] <- syz_open_dev$vcsu=0xffffffffffffffff errno=14 cover=1014 #0 [949763ms] -> ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x20000a80) #0 [949763ms] <- ioctl$PIO_UNIMAPCLR=0xffffffffffffffff errno=9 cover=45 #0 [949764ms] -> unshare(0x48020200) #0 [949783ms] <- unshare=0x0 errno=14 cover=184828 22:35:48 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9736) syz_open_dev$vcsu(0x0, 0x3, 0x280000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000a80)={0x8, 0x0, 0x7fff}) unshare(0x48020200) 2021/11/10 22:35:48 result hanged=false: [949859ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116894 #0 [949895ms] -> perf_event_open(0x20001d80, 0x0, 0x0, 0xffffffffffffffff, 0x0) #0 [949899ms] <- perf_event_open=0x3 errno=14 cover=11679 #0 [949900ms] -> ioctl$int_in(0x3, 0x5452, 0x20000040) #0 [949900ms] <- ioctl$int_in=0x0 errno=14 cover=670 #0 [949901ms] -> syz_open_dev$vcsu(0x0, 0x3, 0x280000) SIGSEGV on (nil), skipping #0 [949903ms] <- syz_open_dev$vcsu=0xffffffffffffffff errno=14 cover=2969 #0 [949903ms] -> ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x20000a80) #0 [949904ms] <- ioctl$PIO_UNIMAPCLR=0xffffffffffffffff errno=9 cover=78 #0 [949906ms] -> unshare(0x48020200) #0 [949947ms] <- unshare=0x0 errno=14 cover=262143 2021/11/10 22:35:48 result hanged=false: 2021/11/10 22:35:48 added new input for call #1 ioctl$int_in to corpus: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9736) syz_open_dev$vcsu(0x0, 0x3, 0x280000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000a80)={0x8, 0x0, 0x7fff}) unshare(0x48020200) 22:35:48 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') close(r0) pread64(r1, &(0x7f0000000540)=""/41, 0x29, 0x4) 2021/11/10 22:35:48 poll: candidates=8 inputs=0 signal=0 [950018ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116896 #0 [950043ms] -> creat(0x20000000, 0x0) #0 [950046ms] <- creat=0x3 errno=14 cover=7235 #0 [950047ms] -> syz_open_procfs(0x0, 0x200005c0) #0 [950048ms] <- syz_open_procfs=0x4 errno=14 cover=3369 #0 [950048ms] -> close(0x3) #0 [950048ms] <- close=0x0 errno=14 cover=326 #0 [950048ms] -> pread64(0x4, 0x20000540, 0x29, 0x4) #0 [950048ms] <- pread64=0xffffffffffffffff errno=2 cover=396 enabling collider #0 [950048ms] -> creat(0x20000000, 0x0) #0 [950054ms] <- creat=0x3 errno=14 cover=5550 #0 [950055ms] -> syz_open_procfs(0x0, 0x200005c0) #0 [950055ms] <- syz_open_procfs=0x4 errno=14 cover=2366 pthread_create failed (errno 11) 2021/11/10 22:35:48 result hanged=false: 2021/11/10 22:35:48 #0: triaging type=7 22:35:48 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') close(r0) pread64(r1, &(0x7f0000000540)=""/41, 0x29, 0x4) 2021/11/10 22:35:48 triaging input for call #3 pread64 (new signal=5) [950133ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 116998 #0 [950152ms] -> creat(0x20000000, 0x0) #0 [950158ms] <- creat=0x3 errno=14 cover=7262 #0 [950163ms] -> syz_open_procfs(0x0, 0x200005c0) #0 [950163ms] <- syz_open_procfs=0x4 errno=14 cover=3379 #0 [950169ms] -> close(0x3) #0 [950169ms] <- close=0x0 errno=14 cover=326 #0 [950169ms] -> pread64(0x4, 0x20000540, 0x29, 0x4) #0 [950169ms] <- pread64=0xffffffffffffffff errno=2 cover=353 22:35:48 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') close(r0) pread64(r1, &(0x7f0000000540)=""/41, 0x29, 0x4) 2021/11/10 22:35:48 result hanged=false: [950213ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117000 #0 [950231ms] -> creat(0x20000000, 0x0) #0 [950235ms] <- creat=0x3 errno=14 cover=7373 #0 [950237ms] -> syz_open_procfs(0x0, 0x200005c0) #0 [950238ms] <- syz_open_procfs=0x4 errno=14 cover=3376 #0 [950239ms] -> close(0x3) #0 [950239ms] <- close=0x0 errno=14 cover=326 #0 [950240ms] -> pread64(0x4, 0x20000540, 0x29, 0x4) #0 [950240ms] <- pread64=0xffffffffffffffff errno=2 cover=328 22:35:48 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') close(r0) pread64(r1, &(0x7f0000000540)=""/41, 0x29, 0x4) 2021/11/10 22:35:48 result hanged=false: [950285ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117002 #0 [950303ms] -> creat(0x20000000, 0x0) #0 [950308ms] <- creat=0x3 errno=14 cover=7921 #0 [950309ms] -> syz_open_procfs(0x0, 0x200005c0) #0 [950310ms] <- syz_open_procfs=0x4 errno=14 cover=3470 #0 [950311ms] -> close(0x3) #0 [950311ms] <- close=0x0 errno=14 cover=326 #0 [950311ms] -> pread64(0x4, 0x20000540, 0x29, 0x4) #0 [950312ms] <- pread64=0xffffffffffffffff errno=2 cover=310 2021/11/10 22:35:48 result hanged=false: 2021/11/10 22:35:48 added new input for call #3 pread64 to corpus: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') close(r0) pread64(r1, &(0x7f0000000540)=""/41, 0x29, 0x4) 22:35:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000ac0), &(0x7f0000000b00)={'U+'}, 0x16, 0x0) [950356ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117004 #0 [950375ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [950376ms] <- socket$netlink=0x3 errno=14 cover=1439 #0 [950377ms] -> fsetxattr$trusted_overlay_nlink(0x3, 0x20000ac0, 0x20000b00, 0x16, 0x0) #0 [950378ms] <- fsetxattr$trusted_overlay_nlink=0xffffffffffffffff errno=95 cover=11792 enabling collider #0 [950379ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [950379ms] <- socket$netlink=0x3 errno=14 cover=1416 22:35:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000ac0), &(0x7f0000000b00)={'U+'}, 0x16, 0x0) 2021/11/10 22:35:48 result hanged=false: 2021/11/10 22:35:48 #0: triaging type=7 2021/11/10 22:35:48 triaging input for call #1 fsetxattr$trusted_overlay_nlink (new signal=3) [950417ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117006 #0 [950436ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [950436ms] <- socket$netlink=0x3 errno=14 cover=1446 #0 [950438ms] -> fsetxattr$trusted_overlay_nlink(0x3, 0x20000ac0, 0x20000b00, 0x16, 0x0) #0 [950438ms] <- fsetxattr$trusted_overlay_nlink=0xffffffffffffffff errno=95 cover=468 22:35:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000ac0), &(0x7f0000000b00)={'U+'}, 0x16, 0x0) 2021/11/10 22:35:49 result hanged=false: [950474ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117008 #0 [950491ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [950492ms] <- socket$netlink=0x3 errno=14 cover=1419 #0 [950493ms] -> fsetxattr$trusted_overlay_nlink(0x3, 0x20000ac0, 0x20000b00, 0x16, 0x0) #0 [950493ms] <- fsetxattr$trusted_overlay_nlink=0xffffffffffffffff errno=95 cover=468 22:35:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000ac0), &(0x7f0000000b00)={'U+'}, 0x16, 0x0) 2021/11/10 22:35:49 result hanged=false: [950537ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117010 #0 [950554ms] -> socket$netlink(0x10, 0x3, 0x0) #0 [950554ms] <- socket$netlink=0x3 errno=14 cover=1439 #0 [950555ms] -> fsetxattr$trusted_overlay_nlink(0x3, 0x20000ac0, 0x20000b00, 0x16, 0x0) #0 [950555ms] <- fsetxattr$trusted_overlay_nlink=0xffffffffffffffff errno=95 cover=482 2021/11/10 22:35:49 result hanged=false: 2021/11/10 22:35:49 added new input for call #1 fsetxattr$trusted_overlay_nlink to corpus: r0 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000ac0), &(0x7f0000000b00)={'U+'}, 0x16, 0x0) 22:35:49 executing program 0: socket(0x18, 0x0, 0x0) [950615ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117012 #0 [950651ms] -> socket(0x18, 0x0, 0x0) #0 [950663ms] <- socket=0xffffffffffffffff errno=97 cover=1524 enabling collider #0 [950663ms] -> socket(0x18, 0x0, 0x0) #0 [950675ms] <- socket=0xffffffffffffffff errno=97 cover=1721 22:35:49 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000700)) 2021/11/10 22:35:49 result hanged=false: [950719ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117014 #0 [950736ms] -> socketpair(0x0, 0x0, 0x0, 0x20000700) #0 [950756ms] <- socketpair=0xffffffffffffffff errno=97 cover=2315 enabling collider #0 [950757ms] -> socketpair(0x0, 0x0, 0x0, 0x20000700) #0 [950769ms] <- socketpair=0xffffffffffffffff errno=97 cover=1682 22:35:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fstat(r0, &(0x7f0000000080)) 2021/11/10 22:35:49 result hanged=false: [950806ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117016 #0 [950829ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [950831ms] <- perf_event_open=0x3 errno=14 cover=10883 #0 [950832ms] -> openat$thread_pidfd(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [950833ms] <- openat$thread_pidfd=0x4 errno=14 cover=9610 #0 [950833ms] -> fstat(0x4, 0x20000080) #0 [950834ms] <- fstat=0x0 errno=14 cover=321 enabling collider #0 [950842ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [950843ms] <- perf_event_open=0x3 errno=14 cover=13829 #0 [950843ms] -> openat$thread_pidfd(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [950844ms] <- openat$thread_pidfd=0x4 errno=14 cover=5355 pthread_create failed (errno 11) 22:35:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fstat(r0, &(0x7f0000000080)) 2021/11/10 22:35:49 result hanged=false: 2021/11/10 22:35:49 #0: triaging type=7 2021/11/10 22:35:49 triaging input for call #2 fstat (new signal=16) [950925ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117118 #0 [950942ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [950943ms] <- perf_event_open=0x3 errno=14 cover=12141 #0 [950945ms] -> openat$thread_pidfd(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [950945ms] <- openat$thread_pidfd=0x4 errno=14 cover=9465 #0 [950946ms] -> fstat(0x4, 0x20000080) #0 [950946ms] <- fstat=0x0 errno=14 cover=321 22:35:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fstat(r0, &(0x7f0000000080)) 2021/11/10 22:35:49 result hanged=false: 2021/11/10 22:35:49 poll: candidates=0 inputs=0 signal=0 [950993ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117120 #0 [951013ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [951014ms] <- perf_event_open=0x3 errno=14 cover=9985 #0 [951019ms] -> openat$thread_pidfd(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [951020ms] <- openat$thread_pidfd=0x4 errno=14 cover=9481 #0 [951021ms] -> fstat(0x4, 0x20000080) #0 [951021ms] <- fstat=0x0 errno=14 cover=321 22:35:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fstat(r0, &(0x7f0000000080)) 2021/11/10 22:35:49 result hanged=false: [951066ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117122 #0 [951082ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [951083ms] <- perf_event_open=0x3 errno=14 cover=13446 #0 [951084ms] -> openat$thread_pidfd(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [951085ms] <- openat$thread_pidfd=0x4 errno=14 cover=9512 #0 [951086ms] -> fstat(0x4, 0x20000080) #0 [951086ms] <- fstat=0x0 errno=14 cover=321 2021/11/10 22:35:49 result hanged=false: 2021/11/10 22:35:49 added new input for call #2 fstat to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fstat(r0, &(0x7f0000000080)) 22:35:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fstat(r0, &(0x7f0000000080)) 2021/11/10 22:35:49 #0: triaging type=7 2021/11/10 22:35:49 triaging input for call #1 openat$thread_pidfd (new signal=2) [951133ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117124 #0 [951154ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [951156ms] <- perf_event_open=0x3 errno=14 cover=9758 #0 [951161ms] -> openat$thread_pidfd(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [951163ms] <- openat$thread_pidfd=0x4 errno=14 cover=10653 #0 [951164ms] -> fstat(0x4, 0x20000080) #0 [951164ms] <- fstat=0x0 errno=14 cover=321 22:35:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fstat(r0, &(0x7f0000000080)) 2021/11/10 22:35:49 result hanged=false: [951206ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117126 #0 [951222ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [951223ms] <- perf_event_open=0x3 errno=14 cover=10064 #0 [951227ms] -> openat$thread_pidfd(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [951228ms] <- openat$thread_pidfd=0x4 errno=14 cover=10208 #0 [951233ms] -> fstat(0x4, 0x20000080) #0 [951233ms] <- fstat=0x0 errno=14 cover=321 2021/11/10 22:35:49 result hanged=false: 22:35:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fstat(r0, &(0x7f0000000080)) [951278ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117128 #0 [951296ms] -> perf_event_open(0x20000040, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) #0 [951297ms] <- perf_event_open=0x3 errno=14 cover=10235 #0 [951303ms] -> openat$thread_pidfd(0xffffffffffffff9c, 0x20000040, 0x0, 0x0) #0 [951305ms] <- openat$thread_pidfd=0x4 errno=14 cover=10716 #0 [951306ms] -> fstat(0x4, 0x20000080) #0 [951306ms] <- fstat=0x0 errno=14 cover=321 2021/11/10 22:35:49 result hanged=false: 2021/11/10 22:35:49 added new input for call #1 openat$thread_pidfd to corpus: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fstat(r0, &(0x7f0000000080)) 22:35:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xe0800}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) [951354ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117130 #0 [951370ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [951371ms] <- socket$nl_generic=0x3 errno=14 cover=1469 #0 [951372ms] -> sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0x3, 0x200002c0, 0x0) #0 [951372ms] <- sendmsg$TIPC_NL_UDP_GET_REMOTEIP=0x14 errno=14 cover=1184 enabling collider #0 [951373ms] -> socket$nl_generic(0x10, 0x3, 0x10) #0 [951374ms] <- socket$nl_generic=0x3 errno=14 cover=1487 #0 [951374ms] -> sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0x3, 0x200002c0, 0x0) #0 [951375ms] <- sendmsg$TIPC_NL_UDP_GET_REMOTEIP=0xffffffffffffffff errno=9 22:35:49 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2021/11/10 22:35:49 result hanged=false: [951412ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117132 #0 [951429ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [951430ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=6514 enabling collider #0 [951432ms] -> syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) #0 [951433ms] <- syz_init_net_socket$nl_generic=0x4 errno=14 cover=5492 22:35:50 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x0) 2021/11/10 22:35:50 result hanged=false: [951468ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117134 #0 [951485ms] -> pipe(0x20000080) #0 [951485ms] <- pipe=0x0 errno=14 cover=1980 #0 [951486ms] -> fsetxattr$trusted_overlay_origin(0x4, 0x200000c0, 0x20000100, 0x2, 0x0) #0 [951487ms] <- fsetxattr$trusted_overlay_origin=0xffffffffffffffff errno=95 cover=11034 enabling collider #0 [951488ms] -> pipe(0x20000080) #0 [951488ms] <- pipe=0x0 errno=14 cover=1179 22:35:50 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x0) 2021/11/10 22:35:50 result hanged=false: 2021/11/10 22:35:50 #0: triaging type=7 2021/11/10 22:35:50 triaging input for call #1 fsetxattr$trusted_overlay_origin (new signal=1) [951524ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117136 #0 [951543ms] -> pipe(0x20000080) #0 [951545ms] <- pipe=0x0 errno=14 cover=1894 #0 [951546ms] -> fsetxattr$trusted_overlay_origin(0x4, 0x200000c0, 0x20000100, 0x2, 0x0) #0 [951547ms] <- fsetxattr$trusted_overlay_origin=0xffffffffffffffff errno=95 cover=448 22:35:50 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x0) 2021/11/10 22:35:50 result hanged=false: [951583ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117138 #0 [951601ms] -> pipe(0x20000080) #0 [951603ms] <- pipe=0x0 errno=14 cover=1925 #0 [951604ms] -> fsetxattr$trusted_overlay_origin(0x4, 0x200000c0, 0x20000100, 0x2, 0x0) #0 [951605ms] <- fsetxattr$trusted_overlay_origin=0xffffffffffffffff errno=95 cover=448 22:35:50 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x0) 2021/11/10 22:35:50 result hanged=false: [951639ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117140 #0 [951656ms] -> pipe(0x20000080) #0 [951658ms] <- pipe=0x0 errno=14 cover=1925 #0 [951659ms] -> fsetxattr$trusted_overlay_origin(0x4, 0x200000c0, 0x20000100, 0x2, 0x0) #0 [951659ms] <- fsetxattr$trusted_overlay_origin=0xffffffffffffffff errno=95 cover=448 2021/11/10 22:35:50 result hanged=false: 2021/11/10 22:35:50 added new input for call #1 fsetxattr$trusted_overlay_origin to corpus: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x0) 22:35:50 executing program 0: select(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x80000001}, &(0x7f0000000100)={0x77359400}) 2021/11/10 22:35:50 poll: candidates=8 inputs=0 signal=0 [951700ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117142 #0 [951719ms] -> select(0x40, 0x20000040, 0x20000080, 0x200000c0, 0x20000100) #0 [951720ms] <- select=0xffffffffffffffff errno=9 cover=239 enabling collider #0 [951720ms] -> select(0x40, 0x20000040, 0x20000080, 0x200000c0, 0x20000100) #0 [951721ms] <- select=0xffffffffffffffff errno=9 cover=239 2021/11/10 22:35:50 result hanged=false: 22:35:50 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) [951756ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117144 #0 [951778ms] -> syz_genetlink_get_family_id$ethtool(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [951780ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=9490 enabling collider #0 [951781ms] -> syz_genetlink_get_family_id$ethtool(0x20000040, 0xffffffffffffffff) syz_genetlink_get_family_id(ethtool, -1) #0 [951781ms] <- syz_genetlink_get_family_id$ethtool=0x13 errno=14 cover=7737 22:35:50 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x0, &(0x7f0000000100), 0x0) 2021/11/10 22:35:50 result hanged=false: [951817ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117146 #0 [951833ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [951834ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1720 #0 [951834ms] -> setsockopt(0x3, 0xff, 0x0, 0x20000100, 0x0) #0 [951835ms] <- setsockopt=0xffffffffffffffff errno=92 cover=504 enabling collider #0 [951842ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [951842ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1703 22:35:50 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x0, &(0x7f0000000100), 0x0) 2021/11/10 22:35:50 result hanged=false: 2021/11/10 22:35:50 #0: triaging type=7 2021/11/10 22:35:50 triaging input for call #1 setsockopt (new signal=1) [951880ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117148 #0 [951898ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [951899ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1676 #0 [951899ms] -> setsockopt(0x3, 0xff, 0x0, 0x20000100, 0x0) #0 [951899ms] <- setsockopt=0xffffffffffffffff errno=92 cover=493 22:35:50 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x0, &(0x7f0000000100), 0x0) 2021/11/10 22:35:50 result hanged=false: [951938ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117150 #0 [951958ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [951960ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1679 #0 [951961ms] -> setsockopt(0x3, 0xff, 0x0, 0x20000100, 0x0) #0 [951961ms] <- setsockopt=0xffffffffffffffff errno=92 cover=493 22:35:50 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x0, &(0x7f0000000100), 0x0) 2021/11/10 22:35:50 result hanged=false: [951998ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117152 #0 [952022ms] -> socket$inet6_icmp_raw(0xa, 0x3, 0x3a) #0 [952023ms] <- socket$inet6_icmp_raw=0x3 errno=14 cover=1709 #0 [952023ms] -> setsockopt(0x3, 0xff, 0x0, 0x20000100, 0x0) #0 [952023ms] <- setsockopt=0xffffffffffffffff errno=92 cover=547 2021/11/10 22:35:50 result hanged=false: 2021/11/10 22:35:50 added new input for call #1 setsockopt to corpus: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x0, &(0x7f0000000100), 0x0) 22:35:50 executing program 0: ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) [952064ms] exec opts: procid=0 threaded=1 collide=1 cover=0 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 117154 #0 [952095ms] -> ptrace(0x10, 0x1) #0 [952096ms] <- ptrace=0x0 errno=14 cover=6840 #0 [952097ms] -> sched_setattr(0x0, 0x20000040, 0x0) #0 [952097ms] <- sched_setattr=0xffffffffffffffff errno=22 cover=63 #0 [952097ms] -> sched_setattr(0x0, 0x20000080, 0x0) #0 [952097ms] <- sched_setattr=0xffffffffffffffff errno=1 cover=81 #0 [952098ms] -> sched_setattr(0x0, 0x200000c0, 0x0) #0 [952098ms] <- sched_setattr=0xffffffffffffffff errno=1 cover=81 enabling collider #0 [952098ms] -> ptrace(0x10, 0x1) #0 [952098ms] <- ptrace=0xffffffffffffffff errno=1 cover=176 #0 [952098ms] -> sched_setattr(0x0, 0x20000040, 0x0) #0 [952098ms] <- sched_setattr=0xffffffffffffffff errno=22 cover=63 pthread_create failed (errno 11) 2021/11/10 22:36:01 poll: candidates=0 inputs=0 signal=0 2021/11/10 22:36:13 poll: candidates=0 inputs=0 signal=0 2021/11/10 22:36:25 poll: candidates=0 inputs=0 signal=0 2021/11/10 22:36:37 poll: candidates=0 inputs=0 signal=0 2021/11/10 22:36:40 result hanged=true: signal: killed 2021/11/10 22:36:40 #0: triaging type=7 22:36:40 executing program 0: ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 2021/11/10 22:36:40 triaging input for call #0 ptrace (new signal=4) 2021/11/10 22:36:40 fuzzer detected executor failure='executor 0: failed to write control pipe: write |1: broken pipe', retrying #1 bitmap is not found, coverage filter disabled spawned loop pid 121071 mount(fusectl) failed: 2 hci dev id: 0 01 03 0c 00 01 03 10 00 01 01 10 00 01 09 10 00 01 05 10 00 01 23 0c 00 01 14 0c 00 01 25 0c 00 01 38 0c 00 01 39 0c 00 01 05 0c 01 00 01 16 0c 02 00 7d SYZFAIL: ioctl(HCIDEVUP) failed (errno 19: No such device) loop exited with status 67 2021/11/10 22:36:43 fuzzer detected executor failure='executor 0: exit status 67 ', retrying #2 bitmap is not found, coverage filter disabled spawned loop pid 121079 mount(fusectl) failed: 2 hci dev id: 0 01 03 0c 00 01 03 10 00 01 01 10 00 01 09 10 00 01 05 10 00 01 23 0c 00 01 14 0c 00 01 25 0c 00 01 38 0c 00 01 39 0c 00 01 05 0c 01 00 01 16 0c 02 00 7d 01 03 0c 00 01 03 10 00 01 01 10 00 01 09 10 00 01 05 10 00 01 23 0c 00 01 14 0c 00 01 25 0c 00 01 38 0c 00 01 39 0c 00 01 05 0c 01 00 01 16 0c 02 00 7d 01 1a 0c 01 02 netlink: add addr 172.30.0.1 dev nr0: No such device netlink: device nr0 up master NULL: No such device netlink: add addr 172.30.1.1 dev rose0: No such device netlink: device rose0 up master NULL: No such device netlink: adding device ip6gretap0 type ip6gretap: Operation not supported netlink: adding device bridge0 type bridge: Operation not supported netlink: adding device vcan0 type vcan: Operation not supported netlink: adding device bond0 type bond: Operation not supported netlink: adding device team0 type team: Operation not supported netlink: adding device dummy0 type dummy: Operation not supported netlink: adding device nlmon0 type nlmon: Operation not supported netlink: adding device caif0 type caif: Operation not supported netlink: adding device batadv0 type batadv: Operation not supported netlink: adding device vxcan1 type vxcan: Operation not supported netlink: adding device netdevsim0 type netdevsim: Operation not supported netlink: adding device (null) type veth: Operation not supported netlink: adding device xfrm0 type xfrm: Operation not supported netlink: adding device wg0 type wireguard: Operation not supported netlink: adding device wg1 type wireguard: Operation not supported netlink: adding device wg2 type wireguard: Operation not supported netlink: adding device bridge_slave_0 type veth peer veth0_to_bridge: Operation not supported netlink: adding device bridge_slave_1 type veth peer veth1_to_bridge: Operation not supported netlink: device bridge_slave_0 up master bridge0: No such device netlink: device bridge_slave_1 up master bridge0: No such device netlink: adding device bond_slave_0 type veth peer veth0_to_bond: Operation not supported netlink: adding device bond_slave_1 type veth peer veth1_to_bond: Operation not supported netlink: device bond_slave_0 up master bond0: No such device netlink: device bond_slave_1 up master bond0: No such device netlink: adding device team_slave_0 type veth peer veth0_to_team: Operation not supported netlink: adding device team_slave_1 type veth peer veth1_to_team: Operation not supported netlink: device team_slave_0 up master team0: No such device netlink: device team_slave_1 up master team0: No such device netlink: adding device batadv_slave_0 type veth peer veth0_to_batadv: Operation not supported netlink: adding device batadv_slave_1 type veth peer veth1_to_batadv: Operation not supported netlink: device batadv_slave_0 up master batadv0: No such device netlink: device batadv_slave_1 up master batadv0: No such device netlink: device bridge_slave_0 up master NULL: No such device netlink: device bridge_slave_1 up master NULL: No such device netlink: adding device hsr_slave_0 type veth peer veth0_to_hsr: Operation not supported netlink: adding device hsr_slave_1 type veth peer veth1_to_hsr: Operation not supported netlink: adding device hsr0 type hsr slave1 hsr_slave_0 slave2 hsr_slave_1: Unknown error -95 netlink: device hsr_slave_0 up master NULL: No such device netlink: device hsr_slave_1 up master NULL: No such device netlink: adding device veth0_virt_wifi type veth peer veth1_virt_wifi: Operation not supported netlink: adding device virt_wifi0 type virt_wifi link veth1_virt_wifi: Operation not supported netlink: adding device veth0_vlan type veth peer veth1_vlan: Operation not supported netlink: add vlan0 type vlan link veth0_vlan id 0: Operation not supported netlink: add vlan1 type vlan link veth0_vlan id 1: Operation not supported netlink: add macvlan0 type macvlan link veth1_vlan mode 4: Operation not supported netlink: add macvlan1 type macvlan link veth1_vlan mode 4: Operation not supported netlink: add ipvlan0 type ipvlan link veth0_vlan mode 0: Operation not supported netlink: add ipvlan1 type ipvlan link veth0_vlan mode 2: Operation not supported netlink: adding device veth0_macvtap type veth peer veth1_macvtap: Operation not supported netlink: adding device macvtap0 type macvtap link veth0_macvtap: Operation not supported netlink: adding device macsec0 type macsec link veth1_macvtap: Operation not supported netlink: add geneve0 type geneve vni 0: Operation not supported netlink: add geneve1 type geneve vni 1: Operation not supported netlink: failed to get family id for wireguard: No such file or directory netlink: add addr 172.20.20.12 dev bridge0: No such device netlink: add addr fe80::0c dev bridge0: No such device netlink: device bridge0 up master NULL: No such device netlink: add addr 172.20.20.13 dev vcan0: No such device netlink: device vcan0 up master NULL: No such device netlink: add addr 172.20.20.14 dev tunl0: No such device netlink: add addr fe80::0e dev tunl0: No such device netlink: device tunl0 up master NULL: No such device netlink: add addr 172.20.20.15 dev gre0: No such device netlink: add addr fe80::0f dev gre0: No such device netlink: device gre0 up master NULL: No such device netlink: add addr 172.20.20.16 dev gretap0: No such device netlink: add addr fe80::10 dev gretap0: No such device netlink: device gretap0 up master NULL: No such device netlink: add addr 172.20.20.17 dev ip_vti0: No such device netlink: add addr fe80::11 dev ip_vti0: No such device netlink: device ip_vti0 up master NULL: No such device netlink: add addr 172.20.20.18 dev ip6_vti0: No such device netlink: add addr fe80::12 dev ip6_vti0: No such device netlink: device ip6_vti0 up master NULL: No such device netlink: add addr 172.20.20.19 dev ip6tnl0: No such device netlink: add addr fe80::13 dev ip6tnl0: No such device netlink: device ip6tnl0 up master NULL: No such device netlink: add addr 172.20.20.20 dev ip6gre0: No such device netlink: add addr fe80::14 dev ip6gre0: No such device netlink: device ip6gre0 up master NULL: No such device netlink: add addr 172.20.20.21 dev ip6gretap0: No such device netlink: add addr fe80::15 dev ip6gretap0: No such device netlink: device ip6gretap0 up master NULL: No such device netlink: add addr 172.20.20.22 dev erspan0: No such device netlink: add addr fe80::16 dev erspan0: No such device netlink: device erspan0 up master NULL: No such device netlink: add addr 172.20.20.23 dev bond0: No such device netlink: add addr fe80::17 dev bond0: No such device netlink: device bond0 up master NULL: No such device netlink: add addr 172.20.20.24 dev veth0: No such device netlink: add addr fe80::18 dev veth0: No such device netlink: device veth0 up master NULL: No such device netlink: add addr 172.20.20.25 dev veth1: No such device netlink: add addr fe80::19 dev veth1: No such device [ 1068.002262] Bluetooth: hci0: command 0x0409 tx timeout netlink: device veth1 up master NULL: No such device netlink: add addr 172.20.20.26 dev team0: No such device netlink: add addr fe80::1a dev team0: No such device netlink: device team0 up master NULL: No such device netlink: add addr 172.20.20.27 dev veth0_to_bridge: No such device netlink: add addr fe80::1b dev veth0_to_bridge: No such device netlink: device veth0_to_bridge up master NULL: No such device netlink: add addr 172.20.20.28 dev veth1_to_bridge: No such device netlink: add addr fe80::1c dev veth1_to_bridge: No such device netlink: device veth1_to_bridge up master NULL: No such device netlink: add addr 172.20.20.29 dev veth0_to_bond: No such device netlink: add addr fe80::1d dev veth0_to_bond: No such device netlink: device veth0_to_bond up master NULL: No such device netlink: add addr 172.20.20.30 dev veth1_to_bond: No such device netlink: add addr fe80::1e dev veth1_to_bond: No such device netlink: device veth1_to_bond up master NULL: No such device netlink: add addr 172.20.20.31 dev veth0_to_team: No such device netlink: add addr fe80::1f dev veth0_to_team: No such device netlink: device veth0_to_team up master NULL: No such device netlink: add addr 172.20.20.32 dev veth1_to_team: No such device netlink: add addr fe80::20 dev veth1_to_team: No such device netlink: device veth1_to_team up master NULL: No such device netlink: add addr 172.20.20.33 dev veth0_to_hsr: No such device netlink: add addr fe80::21 dev veth0_to_hsr: No such device netlink: device veth0_to_hsr up master NULL: No such device netlink: add addr 172.20.20.34 dev veth1_to_hsr: No such device netlink: add addr fe80::22 dev veth1_to_hsr: No such device netlink: device veth1_to_hsr up master NULL: No such device netlink: add addr 172.20.20.35 dev hsr0: No such device netlink: add addr fe80::23 dev hsr0: No such device netlink: device hsr0 up master NULL: No such device netlink: add addr 172.20.20.36 dev dummy0: No such device netlink: add addr fe80::24 dev dummy0: No such device netlink: device dummy0 up master NULL: No such device netlink: add addr 172.20.20.37 dev nlmon0: No such device netlink: add addr fe80::25 dev nlmon0: No such device netlink: device nlmon0 up master NULL: No such device netlink: add addr 172.20.20.38 dev vxcan0: No such device netlink: device vxcan0 up master NULL: No such device netlink: add addr 172.20.20.39 dev vxcan1: No such device netlink: device vxcan1 up master NULL: No such device netlink: add addr 172.20.20.40 dev caif0: No such device netlink: add addr fe80::28 dev caif0: No such device netlink: device caif0 up master NULL: No such device netlink: add addr 172.20.20.41 dev batadv0: No such device netlink: add addr fe80::29 dev batadv0: No such device netlink: device batadv0 up master NULL: No such device netlink: add addr 172.20.20.42 dev netdevsim0: No such device netlink: add addr fe80::2a dev netdevsim0: No such device netlink: device netdevsim0 up master NULL: No such device netlink: add addr 172.20.20.43 dev xfrm0: No such device netlink: add addr fe80::2b dev xfrm0: No such device netlink: device xfrm0 up master NULL: No such device netlink: add addr 172.20.20.44 dev veth0_virt_wifi: No such device netlink: add addr fe80::2c dev veth0_virt_wifi: No such device netlink: device veth0_virt_wifi up master NULL: No such device netlink: add addr 172.20.20.45 dev veth1_virt_wifi: No such device netlink: add addr fe80::2d dev veth1_virt_wifi: No such device netlink: device veth1_virt_wifi up master NULL: No such device netlink: add addr 172.20.20.46 dev virt_wifi0: No such device netlink: add addr fe80::2e dev virt_wifi0: No such device netlink: device virt_wifi0 up master NULL: No such device netlink: add addr 172.20.20.47 dev veth0_vlan: No such device netlink: add addr fe80::2f dev veth0_vlan: No such device netlink: device veth0_vlan up master NULL: No such device netlink: add addr 172.20.20.48 dev veth1_vlan: No such device netlink: add addr fe80::30 dev veth1_vlan: No such device netlink: device veth1_vlan up master NULL: No such device netlink: add addr 172.20.20.49 dev vlan0: No such device netlink: add addr fe80::31 dev vlan0: No such device netlink: device vlan0 up master NULL: No such device netlink: add addr 172.20.20.50 dev vlan1: No such device netlink: add addr fe80::32 dev vlan1: No such device netlink: device vlan1 up master NULL: No such device netlink: add addr 172.20.20.51 dev macvlan0: No such device netlink: add addr fe80::33 dev macvlan0: No such device netlink: device macvlan0 up master NULL: No such device netlink: add addr 172.20.20.52 dev macvlan1: No such device netlink: add addr fe80::34 dev macvlan1: No such device netlink: device macvlan1 up master NULL: No such device netlink: add addr 172.20.20.53 dev ipvlan0: No such device [ 1070.049226] Bluetooth: hci0: command 0x041b tx timeout netlink: add addr fe80::35 dev ipvlan0: No such device netlink: device ipvlan0 up master NULL: No such device netlink: add addr 172.20.20.54 dev ipvlan1: No such device netlink: add addr fe80::36 dev ipvlan1: No such device 2021/11/10 22:36:49 poll: candidates=0 inputs=0 signal=0 netlink: device ipvlan1 up master NULL: No such device netlink: add addr 172.20.20.55 dev veth0_macvtap: No such device netlink: add addr fe80::37 dev veth0_macvtap: No such device netlink: device veth0_macvtap up master NULL: No such device netlink: add addr 172.20.20.56 dev veth1_macvtap: No such device netlink: add addr fe80::38 dev veth1_macvtap: No such device netlink: device veth1_macvtap up master NULL: No such device netlink: add addr 172.20.20.57 dev macvtap0: No such device netlink: add addr fe80::39 dev macvtap0: No such device netlink: device macvtap0 up master NULL: No such device netlink: add addr 172.20.20.58 dev macsec0: No such device netlink: add addr fe80::3a dev macsec0: No such device netlink: device macsec0 up master NULL: No such device netlink: add addr 172.20.20.59 dev veth0_to_batadv: No such device netlink: add addr fe80::3b dev veth0_to_batadv: No such device netlink: device veth0_to_batadv up master NULL: No such device netlink: add addr 172.20.20.60 dev veth1_to_batadv: No such device netlink: add addr fe80::3c dev veth1_to_batadv: No such device netlink: device veth1_to_batadv up master NULL: No such device netlink: add addr 172.20.20.61 dev batadv_slave_0: No such device netlink: add addr fe80::3d dev batadv_slave_0: No such device netlink: device batadv_slave_0 up master NULL: No such device netlink: add addr 172.20.20.62 dev batadv_slave_1: No such device netlink: add addr fe80::3e dev batadv_slave_1: No such device netlink: device batadv_slave_1 up master NULL: No such device netlink: add addr 172.20.20.63 dev geneve0: No such device netlink: add addr fe80::3f dev geneve0: No such device netlink: device geneve0 up master NULL: No such device netlink: add addr 172.20.20.64 dev geneve1: No such device netlink: add addr fe80::40 dev geneve1: No such device netlink: device geneve1 up master NULL: No such device netlink: add addr 172.20.20.65 dev wg0: No such device netlink: add addr fe80::41 dev wg0: No such device netlink: device wg0 up master NULL: No such device netlink: add addr 172.20.20.66 dev wg1: No such device netlink: add addr fe80::42 dev wg1: No such device netlink: device wg1 up master NULL: No such device netlink: add addr 172.20.20.67 dev wg2: No such device netlink: add addr fe80::43 dev wg2: No such device netlink: device wg2 up master NULL: No such device [ 1071.310394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.312771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.326070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1071.344053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.346100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.348774] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready mkdir(/dev/binderfs) failed: 17 mount of binder at /dev/binderfs failed: 19 mkdir(/syzcgroup/unified/syz0) failed: 17 mkdir(/syzcgroup/cpu/syz0) failed: 17 mkdir(/syzcgroup/net/syz0) failed: 17 iptable checkpoint filter/2: checkpoint entries=4 hooks=e size=632 iptable checkpoint mangle/2: checkpoint entries=6 hooks=1f size=936 iptable checkpoint filter/10: checkpoint entries=4 hooks=e size=856 iptable checkpoint mangle/10: checkpoint entries=6 hooks=1f size=1272 [6707ms] exec opts: procid=0 threaded=1 collide=0 cover=1 comps=0 dedup=1 timeouts=50/5000/1 prog=0 filter=0 spawned worker pid 3 #0 [6731ms] -> ptrace(0x10, 0x1) #0 [6733ms] <- ptrace=0x0 errno=14 cover=331 #0 [6734ms] -> sched_setattr(0x0, 0x20000040, 0x0) #0 [6734ms] <- sched_setattr=0xffffffffffffffff errno=22 cover=63 #0 [6734ms] -> sched_setattr(0x0, 0x20000080, 0x0) #0 [6734ms] <- sched_setattr=0xffffffffffffffff errno=1 cover=81 #0 [6734ms] -> sched_setattr(0x0, 0x200000c0, 0x0) #0 [6734ms] <- sched_setattr=0x0 errno=14 cover=207 [ 1072.097294] Bluetooth: hci0: command 0x040f tx timeout VM DIAGNOSIS: 22:36:43 Registers: info registers vcpu 0 RAX=00000000ffffffff RBX=dffffc0000000000 RCX=ffffffff8174784b RDX=ffff8880389b4bc0 RSI=00000000ffffffff RDI=0000000000000000 RBP=ffff8880172542f0 RSP=ffff88803864f978 R8 =0000000000000001 R9 =ffffffff86542627 R10=0000000000000000 R11=0000000000000001 R12=ffff888017254380 R13=ffffffff817477b5 R14=00000000ffffffff R15=0000000000000000 RIP=ffffffff813f5c90 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5342819900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055abd6f11758 CR3=000000002ff3a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffff000000000000 00ff000000000000 YMM02=0000000000000000 0000000000000000 77656e6d70720070 756f72672e61746f YMM03=0000000000000000 0000000000000000 646e756f662b7473 6f6c002f2e2f002f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 000055abd6f0b4d0 000055abd6f0ec90 YMM06=0000000000000000 0000000000000000 000055abd6f0eb00 0000000000000002 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 722f6c6c696b6672 2f6372732f2e2e00 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000200000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000003d2b RBX=ffff888008ac7cc0 RCX=0000000000000001 RDX=0000000000400dc0 RSI=ffff88800dcf7d80 RDI=ffff888007c41a00 RBP=ffff888007c41a00 RSP=ffff88802da4fdd8 R8 =ffff88802da4fde8 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=0000000000400dc0 R13=0000000000400dc0 R14=0000000000000018 R15=ffff88800dcf7d80 RIP=ffffffff8169b700 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff2687b68c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d1f4f0c020 CR3=000000002d6e0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000ff0000 0000000000000000 YMM02=0000000000000000 0000000000000000 386565656900326d 697377682f6d6973 YMM03=0000000000000000 0000000000000000 7269762f73656369 7665642f7379732f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 000055d1f4efbcc0 0000000400000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 2f63697361622f63 72732f2e2e000d0a YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000