Extracting prog: 2m2.330588725s
Minimizing prog: 20m18.782950622s
Simplifying prog options: 5m46.120170195s
Extracting C: 2m10.396994587s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-ioctl$KVM_GET_MSRS_sys-set_mempolicy-prctl$PR_SET_MM_MAP-mprotect-socket-syz_open_procfs-mount$9p_fd-setsockopt-mmap-bpf$PROG_LOAD
detailed listing:
executing program 0:
io_setup(0x2, &(0x7f0000000000))
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
set_mempolicy(0x4005, 0x0, 0x3)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f0000409000/0xa000)=nil, &(0x7f000056a000/0x2000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
setsockopt(r0, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x0, 0x18}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc4}}}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2}, 0x94)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-ioctl$KVM_GET_MSRS_sys-set_mempolicy-prctl$PR_SET_MM_MAP-mprotect-socket-syz_open_procfs-mount$9p_fd-setsockopt-mmap-bpf$PROG_LOAD
detailed listing:
executing program 0:
io_setup(0x2, &(0x7f0000000000))
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
set_mempolicy(0x4005, 0x0, 0x3)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f0000409000/0xa000)=nil, &(0x7f000056a000/0x2000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
setsockopt(r0, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x0, 0x18}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc4}}}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2}, 0x94)

program crashed: lost connection to test machine
single: successfully extracted reproducer
found reproducer with 11 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-ioctl$KVM_GET_MSRS_sys-set_mempolicy-prctl$PR_SET_MM_MAP-mprotect-socket-syz_open_procfs-mount$9p_fd-setsockopt-mmap
detailed listing:
executing program 0:
io_setup(0x2, &(0x7f0000000000))
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
set_mempolicy(0x4005, 0x0, 0x3)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f0000409000/0xa000)=nil, &(0x7f000056a000/0x2000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
setsockopt(r0, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program crashed: lost connection to test machine
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-ioctl$KVM_GET_MSRS_sys-set_mempolicy-prctl$PR_SET_MM_MAP-mprotect-socket-syz_open_procfs-mount$9p_fd-setsockopt
detailed listing:
executing program 0:
io_setup(0x2, &(0x7f0000000000))
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
set_mempolicy(0x4005, 0x0, 0x3)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f0000409000/0xa000)=nil, &(0x7f000056a000/0x2000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
setsockopt(r0, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10)

program crashed: SYZFAIL: failed to recv rpc
suppressed program crash: SYZFAIL: failed to recv rpc
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-ioctl$KVM_GET_MSRS_sys-set_mempolicy-prctl$PR_SET_MM_MAP-mprotect-socket-syz_open_procfs-mount$9p_fd-mmap
detailed listing:
executing program 0:
io_setup(0x2, &(0x7f0000000000))
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
set_mempolicy(0x4005, 0x0, 0x3)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f0000409000/0xa000)=nil, &(0x7f000056a000/0x2000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program crashed: lost connection to test machine
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-ioctl$KVM_GET_MSRS_sys-set_mempolicy-prctl$PR_SET_MM_MAP-mprotect-socket-syz_open_procfs-mmap
detailed listing:
executing program 0:
io_setup(0x2, &(0x7f0000000000))
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
set_mempolicy(0x4005, 0x0, 0x3)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f0000409000/0xa000)=nil, &(0x7f000056a000/0x2000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-ioctl$KVM_GET_MSRS_sys-set_mempolicy-prctl$PR_SET_MM_MAP-mprotect-socket-mount$9p_fd-mmap
detailed listing:
executing program 0:
io_setup(0x2, &(0x7f0000000000))
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
set_mempolicy(0x4005, 0x0, 0x3)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f0000409000/0xa000)=nil, &(0x7f000056a000/0x2000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0x11, 0x80803, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-ioctl$KVM_GET_MSRS_sys-set_mempolicy-prctl$PR_SET_MM_MAP-mprotect-syz_open_procfs-mount$9p_fd-mmap
detailed listing:
executing program 0:
io_setup(0x2, &(0x7f0000000000))
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
set_mempolicy(0x4005, 0x0, 0x3)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f0000409000/0xa000)=nil, &(0x7f000056a000/0x2000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-ioctl$KVM_GET_MSRS_sys-set_mempolicy-prctl$PR_SET_MM_MAP-socket-syz_open_procfs-mount$9p_fd-mmap
detailed listing:
executing program 0:
io_setup(0x2, &(0x7f0000000000))
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
set_mempolicy(0x4005, 0x0, 0x3)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f0000409000/0xa000)=nil, &(0x7f000056a000/0x2000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-ioctl$KVM_GET_MSRS_sys-set_mempolicy-mprotect-socket-syz_open_procfs-mount$9p_fd-mmap
detailed listing:
executing program 0:
io_setup(0x2, &(0x7f0000000000))
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
set_mempolicy(0x4005, 0x0, 0x3)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program crashed: lost connection to test machine
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-ioctl$KVM_GET_MSRS_sys-mprotect-socket-syz_open_procfs-mount$9p_fd-mmap
detailed listing:
executing program 0:
io_setup(0x2, &(0x7f0000000000))
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program crashed: lost connection to test machine
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-mprotect-socket-syz_open_procfs-mount$9p_fd-mmap
detailed listing:
executing program 0:
io_setup(0x2, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_GET_MSRS_sys-mprotect-socket-syz_open_procfs-mount$9p_fd-mmap
detailed listing:
executing program 0:
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program crashed: lost connection to test machine
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_GET_MSRS_sys-mprotect-socket-syz_open_procfs-mount$9p_fd-mmap
detailed listing:
executing program 0:
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_GET_MSRS_sys-mprotect-socket-syz_open_procfs-mount$9p_fd-mmap
detailed listing:
executing program 0:
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_GET_MSRS_sys-mprotect-socket-syz_open_procfs-mount$9p_fd-mmap
program did not crash
simplifying guilty program options
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_GET_MSRS_sys-mprotect-socket-syz_open_procfs-mount$9p_fd-mmap
detailed listing:
executing program 0:
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program crashed: lost connection to test machine
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_GET_MSRS_sys-mprotect-socket-syz_open_procfs-mount$9p_fd-mmap
program did not crash
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_GET_MSRS_sys-mprotect-socket-syz_open_procfs-mount$9p_fd-mmap
detailed listing:
executing program 0:
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program crashed: lost connection to test machine
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_GET_MSRS_sys-mprotect-socket-syz_open_procfs-mount$9p_fd-mmap
program did not crash
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_GET_MSRS_sys-mprotect-socket-syz_open_procfs-mount$9p_fd-mmap
detailed listing:
executing program 0:
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_GET_MSRS_sys-mprotect-socket-syz_open_procfs-mount$9p_fd-mmap
detailed listing:
executing program 0:
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_GET_MSRS_sys-mprotect-socket-syz_open_procfs-mount$9p_fd-mmap
detailed listing:
executing program 0:
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program crashed: lost connection to test machine
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_GET_MSRS_sys-mprotect-socket-syz_open_procfs-mount$9p_fd-mmap
detailed listing:
executing program 0:
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_GET_MSRS_sys-mprotect-socket-syz_open_procfs-mount$9p_fd-mmap
detailed listing:
executing program 0:
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_GET_MSRS_sys-mprotect-socket-syz_open_procfs-mount$9p_fd-mmap
detailed listing:
executing program 0:
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_GET_MSRS_sys-mprotect-socket-syz_open_procfs-mount$9p_fd-mmap
detailed listing:
executing program 0:
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program crashed: lost connection to test machine
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_GET_MSRS_sys-mprotect-socket-syz_open_procfs-mount$9p_fd-mmap
detailed listing:
executing program 0:
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0x11, 0x80803, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)

program crashed: lost connection to test machine
validation run: crashed=true
reproducing took 41m41.585380897s
repro crashed as (corrupted=false):

final repro crashed as (corrupted=false):