Extracting prog: 51m43.591792306s Minimizing prog: 1h52m32.667274156s Simplifying prog options: 0s Extracting C: 2m26.574045253s Simplifying C: 20m57.001950398s extracting reproducer from 45 programs testing a last program of every proc single: executing 10 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$tun-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-openat$tun-socket$can_bcm-ioctl$ifreq_SIOCGIFINDEX_vcan-connect$can_bcm-sendmsg$can_bcm-sendmsg$can_bcm-socket$nl_generic-close_range-openat$binderfs-openat$tun-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-openat$tun-socket$can_bcm-ioctl$ifreq_SIOCGIFINDEX_vcan-connect$can_bcm-sendmsg$can_bcm-sendmsg$can_bcm-socket$nl_generic-close_range detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[]) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x1, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}}, 0x40) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="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"], 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[]) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x1, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}}, 0x40) (async) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="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"], 0x80}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setsockopt$inet6_tcp_TLS_TX-socket-socket-socket$inet6_tcp-syz_open_procfs$pagemap-lseek-setsockopt$inet6_MCAST_JOIN_GROUP-socket$can_bcm-connect$can_bcm-sendmsg$can_bcm-sendmsg$can_bcm-openat$binderfs-socket$inet_udp-socket$netlink-sendmsg$netlink-bind$inet-setsockopt$sock_int-setsockopt$sock_int-connect$inet-openat$ptmx-openat$ptmx-ioctl$TCSETS-syz_open_pts-ioctl$TIOCSTI-ioctl$TIOCSTI-ioctl$TCSETA-ioctl$TIOCSTI-ioctl$TIOCSTI-sendmmsg$inet-sendmmsg$inet-lseek-connect$tipc-syz_genetlink_get_family_id$tipc-openat$binderfs-prctl$PR_SET_MM_EXE_FILE-prctl$PR_SET_MM_EXE_FILE-pselect6-pselect6 detailed listing: executing program 0: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000180)=@ccm_128={{0x304}, "8f9443f3344d6980", "5400ddffffffffffffff00", "0e18bbd7", "0227f5a2423f0483"}, 0x28) socket(0x1e, 0x4, 0x0) (async) r0 = socket(0x1e, 0x4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) lseek(r2, 0x3, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000002c0)={0x9, {{0xa, 0x4e23, 0x2, @empty, 0x58}}}, 0x88) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000480), 0x10) sendmsg$can_bcm(r3, 0x0, 0x0) (async) sendmsg$can_bcm(r3, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000001400020029bd7000ffdbdf2508005e00", @ANYRES32, @ANYBLOB="ad1fbd99554b03283cfeb140b8f1f30bf15706a1f8601b5ae1ccca"], 0x18}, {&(0x7f0000000580)=ANY=[@ANYBLOB="241000004200020027bd7000fcdbdf25b0eb6800c862f84955698b29387e7f8af7a8461c3a9f9eafe616aaaedaa67d87c8baa6e7231970801ecbb7567d7c304e1611ece72dc3ff30be0b080b9b83a2ad780104bb572006073bc42d4649c75ffd22ed7459eb1c66ff8091804a8baad024bb27be9b8aeef094f440f9743ca93c6a00d4b147712084f617d1c2a3e387956af483c91895a011d6d6316a1bcb10770ff729f1403c1bbd359416dbf36f42e6d191fd50ffc4c3d75727c2f55bc026775643bd5b280d016358ce4e054b288701b5549c9b44eff54d260028df123ddc0bd36842c31c83eb15a411113cc67c59c7199e22af3f88a73b41a790682994627e412004832c098e0f2f27ef221e2074ceb78c9637051a9ef85e954cc23dfd9aced5111c5cf595ae08e538cdc979b96b3391fba910c8226124c70bba0ded6d4ad9606eba6de475f3a4f5e0f38a39ed31d05d01adf1664b912e1f7dd7ac4d381e4f54cf842e005142b200281be5ea6f0c1590c31123a25a0d11acb625df5ac990842552f7cce06a451900d42212769594df3b1e08a83dd504751940626156ba76ef3227b74861bde38fe62a4065275014a89e1d473057261197dedc9b3f0e9413fe3e51ff59615f6aaafb946fb28c0cb0f997218283ab7c1a1f6ba5613f7b1a58214c63b480e53414be442a0dc32f6f6734e4dc42848c05275a4248217bb56d8b23d31cc45456c01671867d1fbc4b6f11a3cdb3cca894c0a9a7892630f20c0cff80474fbadabba13d93b7bdf43e5a7adde53fbe06a353f584586c82728ecc3f44016b1fe0ee4fcb44f0e5dfbd3d64d8c823a8b0cdc6a779e52a53da6fcd55014cca8b6c79a0d04a8c1d8f1650629addb5efff403884f6634a8c0869b3451d69ee960d380a2e5d41f8bcf7c360d4ba0147174de0f8dff0fadbc538cc8b798ff2c5e2f54d0bf0d601d5343324486dfcd95d2467342c739f81c4ebcbab5787aeefb011cb8c91a11b748d1017705ce5cab96438ba65109ae3504fff9e3b8de4ee36481afa6bd2caf4cb0111373c67042203afc215cf2ccc168545ea947695288e3fe6762c0ecd82c0a8c35def592315ebf7545db5d16cc4191a976e9949737b7c72e667e78b0ef5b595230175d72c7c1a930eb4d4e4ebfecab1ee6393e09d067b3685b14d828122273f0b29697dbf380b26065ea08dce2076f70786987548e6d1c7570944ad33facf3688155143fc8dedc9d0045621a37eba6e43ebb2dcd88d5f34ab8b001c9c2d1aa56b2fc4d5332dff899c8092b748d250be66bfc8b2d04e4104dba786074ddd55e39fd0a52b56c566c1c323e3a33e713b672ff5b20ad095a61b29b1f3ec622dc4e234c414e69041f6ba0540d5dcaf33fb28853ac73d4fb7ae5b3e8a8ab232f004296a50d3c04e037a83158339031410a0f8411a51999dbdbf98f2e2eacd188e8af9152c14d5dbbd78a2e78594743e25a9d240a1398b9931a9fef692afb42ace2483c4930208fbff872c6c7d896a0eb971d0b58ea6d617a89672b55a178864d133de6f328ea0a3cc76e36b6a8d8f060e284f9a4e718af974a59649d97a65e225e08d688e04b8329455e36a25bc1055c7ba79de113c8135099aed49175410fb5f1ff802faa8a71b33083d19eb4a06bff0239efdd7b23664006c448a079f73a5989e94af4b9f85ef35270928845754cdf5563a0ef2aa15f8abc7b38b4e8f5c430ebcc885bf0b026d6b735c0a28f12c7058900e6e3c2ec82caeaae5511279e00a0c75f4e57dfd28110ab9f5738b6a839122ebdfefa21c5f3addf53f650bd145f3ea11752d753f9a079a971cbc5a161640b7104ee5e0d76b5c8aac28b4b21126155a9937e25811967164eb0e36b0f8bf4e0d1f738363cf8fedea35d04766e95c35038572e1ecca0edb39ab4634cb2a44557a5679c804a923c9310c5c5a97785b12c7b7ebac8aa8949fe46cf9f3ffabe729fc3f78fb01d77734ae063b4a52b0cb060a5dde7a54e968fd4f9da8a11efb3f0fc5110e5c95db46ad966a8eef676dcc29e72f2fc76655716e6f2673a22b956e931c90a61a48c0e76cc1fc7f126c318a4e9d2cdf505f36a7a2e67597b7e16f33dbfe7dffb3379ce48fcd9f1ee70b448e5a8afefc3e321261f52b374766e4c9c2b35acbdbb4ae30ce77520e959cfa92b861e6068ab095cd7324a09fb86249ae0fb62f52416bdf7f102fadb5c0cdb0467843059a4512f9c768ad5345b269898fc15a11831f71aa95614d20bf2998c1622bb0533789c356241d93676e4b54816afd6cd5fcc78d338668cc9ad29e281f9842d3df746ba5ddd985e042d4f4e2ee0bb780bc99f78ce51541c649e3628ca3b3d5b54d80030bfd0ad376bbdb72b9d3bcbe8477db136c202b001094c25203b9a6601142a48040ea367e13237ad5f87cf774db5136c97e39f14ee61406704c1c90789374a9f8341e01f27cc1a467a4ce7d875209160af08ce16bb13cd4bfae0bf26b93fbf67ffa5cdeb718980bb90a3211047e7d29fbd3f0697661626fc24f06576f5b51ef7b2654331f039f5b3619f44e60adb721147d5baac61eec532a07f2a6f21e73f7d70077e1ed7ba309bfe9bfddb7d1d313088241c1f316583997c4e26a9acecf06699d6ed2a76b071632b40344f44d9c33262be0b55efb88a6d35625c65de87e4b293ccccd8d0263b78ff83f35d8fae32e594c7d49360f8d6a88a6f414211119f37c4f9e7b86a5b1571912856302e3d4c10367db8df7beac8c23d9a22ff1c20aeabc00372f0639bcdbf71d2dfefbda67bb6c85ea0e00af1f80d46c71d8093c923ce25426cd9132520dfa6ff703b974d2eca5fa0b9635a182fdeeb954998391afe7905ed9f4dfbb4ee575ddaa4b0131a4095214d5a28c4e8226fa2078fe3aebaeadf1622962d8e688d511ede574ea8bebf70ac3e63ca0e0001e6da34b7e9cfeda977174b3024cad94830b0c762682f09b72aa0f9d5c71bb1bc2f1cb2e4d3741d0cf523b94a2b71e4ea09f7b8e1f58afa51df599aaba17cd3c49f97a9cb22c47bba5da5426e3bbf953dafe9a41091d05347d8c3abfb609bcdcfc3ab724853f3fb779de9428415313e6f689553fd41236b56e3294396526e5ffc9a664daf0db75b013551a5d85598bf8205e2cf7e0a5449f9cc7bed277ef869ffba10b5a0416b66fd1db4fd3614a5f6fee42831363c2782858c6d689c9c7696793da15b59a9d23cdb907f5d6f8a204df0cf17cf5b6c276131efb6dc254b18ada05747da0e82f830b5c44d5254a3d4b53b6b0c8571f7718ecd98c22782b2a547748ececf8222e7e5d085e34e42b29c5d9b8618567c23c21d2d1a614e587fd551eb48981533217ffe2ba7de71a6d06ee54740ac6d4cc24dc33ccb56bcba343a50b031a8e11efa6d3fd006ee415d00f4bed40e954b1b6a77ba7695dfc68a33e66c072c652c548fcc4f853f18311c02eeba9579f44770e441df6894df19caa821506fc4fc2ed04b77cd0843d38fdd6d4f98c6bd1bc978ff31f69feb0894189660fe9f4a805004e056ca1871a12e70e44bc13a15f599b53434c8f6ab409a81fdf93957f7cad0cba57d7993972b952d96743ef0c45322fc8200025b08ec9f83dd330fc9eb97da0cf58f268d529e529c28be09113c14f75be152d7fe5c40042ab344b4b03d6319cc4904f21296cc804cc51f8e6aa9bfae6681a3238d2da4bdade37bffa7b3b5f742117d5a464808da54461f235da026ef730dd6201135e873a2f42a97ba2f630c1f54523171f7a625d2ecca57df18befa0ffd41bbd88ec66efd9b74bebce4007c254012617a643f46edc5741b26d064a5dd2bf2246e9ee632e205d8a5d65726136423c925438591d44d83f24cc254bef6269925c99c51de8f314a3114385e56d6fc4d6aec54452d66cfc82b9eae78fea0f1e543aea2ec2d9c9f1ca21b94e5984deda93fbc56dfedd4afc32c58a1fd4bb811ef10d45cccdab1e79be670d96711f220a3dd0147bcbeb4f51c8cc505acbb05d4513f88f2f93fb5d18492adc331f1c548b7585fe5a3497628c0aa43a8d87ea945f3db9a7e7fff691cc35b88bc0bf5094838ce8eb3fc7b1437de317ccebf8311537972af4a0d143e257ce3bf7a957a35626b4e8bf45e884d2787b96602b6b4d50380d32fda441f28d878344ee69de8412ce7d32231cbdd092189e91034c53a8c9fe76d3f7bdbb287c6c3276f53cef5a7c75d1a1ddc4d009d1340fb2fe672b472e5a1f705e09a325c0877d4a28e6b35cde093c905d08aa33b8025f90512cda9624163f7e182240bb7aab62422cb03954320be24c8ddbb1d39af7dc74795993d19222f88985125f9b87cc1139c2d9e2c2c0399ac1918305ca82f2724bd3de5309ae152aa7cfc4040c75b561b2c1f960cbfe63b1b580a9427b09a2d55ccc3b8cba7098d804efb364ddb7411fa023b63b93a4ec36d6f21aa152cff91025c5d0f3ef18b583b1987909bfef17addfb6856998016e2900001d86fa066d385f4fb8f9cd626c5333ce84462a2f07c3c69a365c0712e1872f5b696c45bedf7f69ee8964c4ed2d01b505fe6797afcad7980c3facc7c9e0d41b37774b606cdd5e6750f8abe68a59d8d2b53c4c0b3813de8a55f497ed3d737d378fd86c01548d2dfa3cb4d6545cb324f919496f990c704d4b5e92339deb253c57245c17af97d2ed15b032fa9726f22e28357c3ee0f4f78139d9ecbbc914cfb44cc2de2fa373c6f1de5e0ec8442b53963487af6bf8df2604b6d0b84cc2ce85c4efeb229a7109f86f4b9950e36fe9539e9be342830c6cd4c38fab26bf6a9503939d71ee90aedae907aabff872bdb296fa7ca3c0c6c0cb8e601dbc37f016fa5685982d64655811b8e4fd3a8136c7de1567b9309419e4134f9814926fd44d58d7f1528d031ca8b73aabfd542120f1664f9a2f175a5ffe12f4980b2aaedaf8477915ecf5cdafab1492e2a3840470c1fe610bc9bb09bb2db83a195510a89b010c3e4197179dc01e83b4aa3eb5c042e7254aa67adbd0cafa88d7d11b641a38e923d9e64816d61a01b1aa015198b23afd9c61f93315df84931bc948e3529f8c770cf7930bec06850f1503a97fa00533ea24333f12566604f02bf11119c5126ba74e67e3f33c32e324fb3fb655e2ab4f70d90e03dc122cdd151d6c3b9bfcd3a5167bcc9f2b7695161d0449483de83ef7528d8d8d19b0d189187beb23ca83a1ba32f64d588cffa88b48b33ed933fc0f409f2c24fd555c3271db0e736aa5f69b4c352b8fcae763730f2286e9ac65501e2a44e531dce005f2e0d3ead7dbcfb490b5c5dd9d268d49b9ad2ff722195ddc1d9df2adcb2aae66fe8c9fc3c2729829ee9d723028610be74103c19bf09a690e0975fd6e5f710f1c5ec8f026477b447412c854c8ac7a01e4481689d90840bfa4c8de2616248eeb467e6ec9cc89430d91447a03de717c31ab6140f170793098dbfd8617d0e4ca49483912be23f38eff7438f2715ea26bceebc2674dcd9c66c75b7261fc3dabccef94498a15e716483b961665273929db74e70a82ebcdf76bcb08a9f4d4a8b5750a1585832229a3080b2142da4ff7e074fddf6dca81d84ce6e5858c81e03c6ba16a6eb7f5aaec48d20f24f014e977f7a47ad37dbe03f6d90a3688c92bad29e67f7cf74a78578b0f89c04879ce4dce96a0babcf2819bc7264d685bd719c94d107978be573fd594cd33974933645813cb579e57a8bfad195fb57b8797e1919f0026171033052cd8e356cdd55fb2ff123807802bd244d06595032ea463dc915c4346287d71146b6e7ec1269f2c1083b8f62a835bae2dc81201067865e93a383a0500510000000000579572cd3243bfb62000000000"], 0x1024}], 0x2}, 0x8) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x200002, 0x8, "ff00054fa93e008000295894c900ffff00"}) r7 = syz_open_pts(r6, 0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000940)=0x8f) (async) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000940)=0x8f) ioctl$TCSETA(r6, 0x5406, &(0x7f00000001c0)={0x4, 0x0, 0x4, 0x38f, 0x0, "a0590469a322d928"}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000002c0)=0x4) (async) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000002c0)=0x4) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) (async) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) lseek(r1, 0x8, 0x6) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc(0x0, r0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x37, 0xd, 0xffffffffffffffff) (async) prctl$PR_SET_MM_EXE_FILE(0x37, 0xd, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x0, 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone-setpgid-openat$binderfs-ioctl$VHOST_VDPA_GET_VRING_NUM-openat$kvm-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN-openat$binderfs-prlimit64-syz_io_uring_setup-syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io-rt_sigsuspend-close_range detailed listing: executing program 0: r0 = syz_clone(0x41020000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x208083, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) syz_io_uring_setup(0xcbf, &(0x7f00000000c0)={0x0, 0xdd76, 0x40, 0x1, 0x256}, 0x0, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x41, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x5, {0x5, 0xa, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) rt_sigsuspend(&(0x7f0000000140)={[0x893]}, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-connect$inet6-recvfrom$inet6-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-mmap-quotactl$Q_GETINFO-mmap$binder-socket$inet_udp-getsockopt$sock_int-ioctl$BINDER_WRITE_READ-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-connect$inet6-recvfrom$inet6-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io$uac1-syz_usb_control_io$uac1-mmap-quotactl$Q_GETINFO-mmap$binder-socket$inet_udp-getsockopt$sock_int-ioctl$BINDER_WRITE_READ detailed listing: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}}, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x20, 0x5, 0x5d, "5b379b8bfb15c5eb0d32793efa15579f16502eda3dbbd2ebaa1d3d5c49877bc0823fdfe43eb757d43adfc6b7740401ff81a548a5eee4bf7bac1f6977cc31251965b1f47434b98341c838df1246204b267febb3edd13450a877a3ca23c1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f0000000500)={0x14, &(0x7f0000000440)={0x20, 0xe, 0x96, {0x96, 0x0, "6a9c25161bd6f12068d59f80633409e1e744efbf4df711115b027c56a98f3130d6c43db80d2ac364c8daa6f5d11bcd678957557f00748da5e50567907af265b2337e5fc227f36256b2100bfc7b7ffe571dd40e3ff4545eaff51d76fd9e9e2e29be21e898536a5fff25da0719dd0580af63a557030d68caff2211cddf3eb8c6c603dc200ac50964a096e1dd1c61faddb0aadd8003"}}, 0x0}, &(0x7f00000007c0)={0x44, &(0x7f0000000540)={0x40, 0x10, 0x55, "f07a0508e343b7440d8609a10194496348af8350be1c0cf9535472207fad11051f7317c531e2bc39dc508e1d042938caaa52b3aa7a40fef6fb6bc6c837d3cc3d2fa167595559d075b1d88430b39849ab37b40d145e"}, 0x0, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, 0x0, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x1b, 0x0, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/130, 0x82, 0x0, 0x2d}, @flat, @fda={0x66646185, 0x404, 0x0, 0x18}}, &(0x7f0000000500)={0x0, 0x28, 0x40}}}], 0x56, 0x0, &(0x7f0000000000)="a89aff67520a7335b849b4f88a6db06e45e3f5e648c7ae0bbb812da65b8003975be8a904000000000000003d01fddcbd838bac308358a7e349f3334cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b00000000"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0, 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}}, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x20, 0x5, 0x5d, "5b379b8bfb15c5eb0d32793efa15579f16502eda3dbbd2ebaa1d3d5c49877bc0823fdfe43eb757d43adfc6b7740401ff81a548a5eee4bf7bac1f6977cc31251965b1f47434b98341c838df1246204b267febb3edd13450a877a3ca23c1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r1, &(0x7f0000000500)={0x14, &(0x7f0000000440)={0x20, 0xe, 0x96, {0x96, 0x0, "6a9c25161bd6f12068d59f80633409e1e744efbf4df711115b027c56a98f3130d6c43db80d2ac364c8daa6f5d11bcd678957557f00748da5e50567907af265b2337e5fc227f36256b2100bfc7b7ffe571dd40e3ff4545eaff51d76fd9e9e2e29be21e898536a5fff25da0719dd0580af63a557030d68caff2211cddf3eb8c6c603dc200ac50964a096e1dd1c61faddb0aadd8003"}}, 0x0}, &(0x7f00000007c0)={0x44, &(0x7f0000000540)={0x40, 0x10, 0x55, "f07a0508e343b7440d8609a10194496348af8350be1c0cf9535472207fad11051f7317c531e2bc39dc508e1d042938caaa52b3aa7a40fef6fb6bc6c837d3cc3d2fa167595559d075b1d88430b39849ab37b40d145e"}, 0x0, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) (async) quotactl$Q_GETINFO(0xffffffff80000500, 0x0, 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$sock_int(r2, 0x1, 0x1b, 0x0, &(0x7f0000000100)) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/130, 0x82, 0x0, 0x2d}, @flat, @fda={0x66646185, 0x404, 0x0, 0x18}}, &(0x7f0000000500)={0x0, 0x28, 0x40}}}], 0x56, 0x0, &(0x7f0000000000)="a89aff67520a7335b849b4f88a6db06e45e3f5e648c7ae0bbb812da65b8003975be8a904000000000000003d01fddcbd838bac308358a7e349f3334cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b00000000"}) (async) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-setsockopt$bt_l2cap_L2CAP_OPTIONS-sendto-recvmmsg-syz_kvm_setup_cpu$x86-openat$binderfs-openat$binderfs-ioctl$BINDER_SET_MAX_THREADS-mmap-madvise-mprotect-getpriority-socketpair$unix-ioctl$BINDER_WRITE_READ-mprotect-close_range-socket-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-setsockopt$bt_l2cap_L2CAP_OPTIONS-sendto-recvmmsg-syz_kvm_setup_cpu$x86-openat$binderfs-openat$binderfs-ioctl$BINDER_SET_MAX_THREADS-mmap-madvise-mprotect-getpriority-socketpair$unix-ioctl$BINDER_WRITE_READ-mprotect-close_range detailed listing: executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003240)=""/106, 0x6a}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000380)=""/232, 0xe8}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000600)=""/242, 0xf2}], 0x7}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00008ad000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000100)="0f01c20fc68202001cba4200b0d1eedc28440f20c066350b000000440f22c066b8538e00000f23d80f21f86635400000500f23f80f2064b808008ec0f2ad0f01cb", 0x41}], 0x1, 0x3, &(0x7f0000000180)=[@cstype3={0x5, 0x6}], 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000040)=0xfffffff7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) getpriority(0x4320e11e835fbdba, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f00000001c0)=[@register_looper, @release={0x40046306, 0x7}], 0x50, 0x0, &(0x7f0000000400)="f5f8bc844de1c02a7c9f049ef2cbefdd6ccc05c5c279cfffe3b1ae9eaf03bbac8fdf87c9ea45d4faace03589d639c417b54053f9f0950a9720cef8afcc1a6f9124bf7bcc5c3a6ae57145f63c85dfd263"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003240)=""/106, 0x6a}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000380)=""/232, 0xe8}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000600)=""/242, 0xf2}], 0x7}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00008ad000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000100)="0f01c20fc68202001cba4200b0d1eedc28440f20c066350b000000440f22c066b8538e00000f23d80f21f86635400000500f23f80f2064b808008ec0f2ad0f01cb", 0x41}], 0x1, 0x3, &(0x7f0000000180)=[@cstype3={0x5, 0x6}], 0x1) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000040)=0xfffffff7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async) getpriority(0x4320e11e835fbdba, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f00000001c0)=[@register_looper, @release={0x40046306, 0x7}], 0x50, 0x0, &(0x7f0000000400)="f5f8bc844de1c02a7c9f049ef2cbefdd6ccc05c5c279cfffe3b1ae9eaf03bbac8fdf87c9ea45d4faace03589d639c417b54053f9f0950a9720cef8afcc1a6f9124bf7bcc5c3a6ae57145f63c85dfd263"}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-setsockopt$bt_l2cap_L2CAP_OPTIONS-sendto-recvmmsg-syz_kvm_setup_cpu$x86-openat$binderfs-openat$binderfs-ioctl$BINDER_SET_MAX_THREADS-mmap-madvise-mprotect-getpriority-socketpair$unix-ioctl$BINDER_WRITE_READ-mprotect-close_range-socket-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-setsockopt$bt_l2cap_L2CAP_OPTIONS-sendto-recvmmsg-syz_kvm_setup_cpu$x86-openat$binderfs-openat$binderfs-ioctl$BINDER_SET_MAX_THREADS-mmap-madvise-mprotect-getpriority-socketpair$unix-ioctl$BINDER_WRITE_READ-mprotect-close_range detailed listing: executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003240)=""/106, 0x6a}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000380)=""/232, 0xe8}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000600)=""/242, 0xf2}], 0x7}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00008ad000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000100)="0f01c20fc68202001cba4200b0d1eedc28440f20c066350b000000440f22c066b8538e00000f23d80f21f86635400000500f23f80f2064b808008ec0f2ad0f01cb", 0x41}], 0x1, 0x3, &(0x7f0000000180)=[@cstype3={0x5, 0x6}], 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000040)=0xfffffff7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) getpriority(0x4320e11e835fbdba, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f00000001c0)=[@register_looper, @release={0x40046306, 0x7}], 0x50, 0x0, &(0x7f0000000400)="f5f8bc844de1c02a7c9f049ef2cbefdd6ccc05c5c279cfffe3b1ae9eaf03bbac8fdf87c9ea45d4faace03589d639c417b54053f9f0950a9720cef8afcc1a6f9124bf7bcc5c3a6ae57145f63c85dfd263"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003240)=""/106, 0x6a}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000380)=""/232, 0xe8}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000600)=""/242, 0xf2}], 0x7}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00008ad000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000100)="0f01c20fc68202001cba4200b0d1eedc28440f20c066350b000000440f22c066b8538e00000f23d80f21f86635400000500f23f80f2064b808008ec0f2ad0f01cb", 0x41}], 0x1, 0x3, &(0x7f0000000180)=[@cstype3={0x5, 0x6}], 0x1) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000040)=0xfffffff7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async) getpriority(0x4320e11e835fbdba, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f00000001c0)=[@register_looper, @release={0x40046306, 0x7}], 0x50, 0x0, &(0x7f0000000400)="f5f8bc844de1c02a7c9f049ef2cbefdd6ccc05c5c279cfffe3b1ae9eaf03bbac8fdf87c9ea45d4faace03589d639c417b54053f9f0950a9720cef8afcc1a6f9124bf7bcc5c3a6ae57145f63c85dfd263"}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$TIPC_NL_PEER_REMOVE detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8c0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$TIPC_NL_PEER_REMOVE detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8c0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mknodat-pipe2$9p-write$P9_RVERSION-socket$nl_xfrm-io_setup-io_submit-mount$9p_fd-futex-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-getpid-syz_pidfd_open-mkdirat-chroot-openat2$dir-open_tree-move_mount-setns-umount2-close_range detailed listing: executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x201, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x5000000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) chroot(0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x100, 0x8}, 0x18) r8 = open_tree(r7, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) program crashed: INFO: task hung in do_coredump single: successfully extracted reproducer found reproducer with 20 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mknodat-pipe2$9p-write$P9_RVERSION-socket$nl_xfrm-io_setup-io_submit-mount$9p_fd-futex-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-getpid-syz_pidfd_open-mkdirat-chroot-openat2$dir-open_tree-move_mount-setns-umount2 detailed listing: executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x201, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x5000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) chroot(0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x100, 0x8}, 0x18) r7 = open_tree(r6, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) program crashed: INFO: task hung in do_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mknodat-pipe2$9p-write$P9_RVERSION-socket$nl_xfrm-io_setup-io_submit-mount$9p_fd-futex-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-getpid-syz_pidfd_open-mkdirat-chroot-openat2$dir-open_tree-move_mount-setns detailed listing: executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x201, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x5000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) chroot(0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x100, 0x8}, 0x18) r7 = open_tree(r6, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) setns(r5, 0x24020000) program crashed: INFO: task hung in do_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mknodat-pipe2$9p-write$P9_RVERSION-socket$nl_xfrm-io_setup-io_submit-mount$9p_fd-futex-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-getpid-syz_pidfd_open-mkdirat-chroot-openat2$dir-open_tree-move_mount detailed listing: executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x201, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x5000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) r4 = getpid() syz_pidfd_open(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) chroot(0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x100, 0x8}, 0x18) r6 = open_tree(r5, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) program crashed: INFO: task hung in do_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mknodat-pipe2$9p-write$P9_RVERSION-socket$nl_xfrm-io_setup-io_submit-mount$9p_fd-futex-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-getpid-syz_pidfd_open-mkdirat-chroot-openat2$dir-open_tree detailed listing: executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x201, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x5000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) r4 = getpid() syz_pidfd_open(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) chroot(0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x100, 0x8}, 0x18) open_tree(r5, &(0x7f0000000080)='./file0\x00', 0x89901) program crashed: INFO: task hung in do_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mknodat-pipe2$9p-write$P9_RVERSION-socket$nl_xfrm-io_setup-io_submit-mount$9p_fd-futex-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-getpid-syz_pidfd_open-mkdirat-chroot-openat2$dir detailed listing: executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x201, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x5000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) r4 = getpid() syz_pidfd_open(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) chroot(0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x100, 0x8}, 0x18) program crashed: INFO: task hung in do_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mknodat-pipe2$9p-write$P9_RVERSION-socket$nl_xfrm-io_setup-io_submit-mount$9p_fd-futex-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-getpid-syz_pidfd_open-mkdirat-chroot detailed listing: executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x201, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x5000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) r4 = getpid() syz_pidfd_open(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) chroot(0x0) program crashed: INFO: task hung in do_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mknodat-pipe2$9p-write$P9_RVERSION-socket$nl_xfrm-io_setup-io_submit-mount$9p_fd-futex-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-getpid-syz_pidfd_open-mkdirat detailed listing: executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x201, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x5000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) r4 = getpid() syz_pidfd_open(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) program crashed: INFO: task hung in do_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mknodat-pipe2$9p-write$P9_RVERSION-socket$nl_xfrm-io_setup-io_submit-mount$9p_fd-futex-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-getpid-syz_pidfd_open detailed listing: executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x201, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x5000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) r4 = getpid() syz_pidfd_open(r4, 0x0) program crashed: INFO: task hung in do_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mknodat-pipe2$9p-write$P9_RVERSION-socket$nl_xfrm-io_setup-io_submit-mount$9p_fd-futex-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-getpid detailed listing: executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x201, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x5000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) getpid() program crashed: INFO: task hung in do_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mknodat-pipe2$9p-write$P9_RVERSION-socket$nl_xfrm-io_setup-io_submit-mount$9p_fd-futex-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER detailed listing: executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x201, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x5000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) program crashed: INFO: task hung in do_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mknodat-pipe2$9p-write$P9_RVERSION-socket$nl_xfrm-io_setup-io_submit-mount$9p_fd-futex detailed listing: executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x201, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x5000000) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mknodat-pipe2$9p-write$P9_RVERSION-socket$nl_xfrm-io_setup-io_submit-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER detailed listing: executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x201, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) program crashed: INFO: task hung in do_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mknodat-pipe2$9p-write$P9_RVERSION-socket$nl_xfrm-io_setup-io_submit-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER detailed listing: executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x201, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mknodat-pipe2$9p-write$P9_RVERSION-socket$nl_xfrm-io_setup-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER detailed listing: executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x201, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) program crashed: INFO: task hung in do_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mknodat-pipe2$9p-write$P9_RVERSION-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER detailed listing: executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) program crashed: INFO: task hung in do_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mknodat-pipe2$9p-write$P9_RVERSION-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER detailed listing: executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mknodat-pipe2$9p-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER detailed listing: executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) program crashed: INFO: task hung in do_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-mknodat-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER detailed listing: executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-pipe2$9p-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER detailed listing: executing program 0: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknodat-pipe2$9p-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER detailed listing: executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) program crashed: INFO: task hung in do_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknodat-pipe2$9p-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER detailed listing: executing program 0: mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknodat-pipe2$9p-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER detailed listing: executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknodat-pipe2$9p-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER detailed listing: executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknodat-pipe2$9p-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER detailed listing: executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknodat-pipe2$9p-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER detailed listing: executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknodat-pipe2$9p-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER detailed listing: executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknodat-pipe2$9p-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER detailed listing: executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) program did not crash extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknodat-pipe2$9p-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER program crashed: INFO: task hung in do_coredump simplifying C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknodat-pipe2$9p-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknodat-pipe2$9p-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER program crashed: INFO: task hung in do_coredump testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknodat-pipe2$9p-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER program crashed: INFO: task hung in do_coredump testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknodat-pipe2$9p-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER program crashed: INFO: task hung in do_coredump testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknodat-pipe2$9p-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER program crashed: INFO: task hung in do_coredump testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknodat-pipe2$9p-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER program crashed: INFO: task hung in do_coredump testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknodat-pipe2$9p-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER detailed listing: executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) program crashed: INFO: task hung in do_coredump validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknodat-pipe2$9p-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER detailed listing: executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) program crashed: INFO: task hung in do_coredump validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknodat-pipe2$9p-socket$nl_xfrm-mount$9p_fd-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER detailed listing: executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x1000a, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) program crashed: INFO: task hung in do_coredump validation run: crashed=true reproducing took 3h16m54.093133702s repro crashed as (corrupted=false): INFO: task syz.2.16:367 blocked for more than 122 seconds. Not tainted 6.12.30-syzkaller-gc40c54e66959 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.16 state:D stack:0 pid:367 tgid:365 ppid:361 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5924 [inline] __schedule+0x145b/0x1f10 kernel/sched/core.c:7750 __schedule_loop kernel/sched/core.c:7831 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7846 schedule_timeout+0xb2/0x3a0 kernel/time/timer.c:2595 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common+0x359/0x630 kernel/sched/completion.c:127 wait_for_completion_state+0x19/0x40 kernel/sched/completion.c:264 coredump_wait fs/coredump.c:419 [inline] do_coredump+0x7cf/0x2bd0 fs/coredump.c:576 get_signal+0x11fd/0x14f0 kernel/signal.c:2919 arch_do_signal_or_restart+0x96/0x720 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x58/0xb0 kernel/entry/common.c:218 do_syscall_64+0x64/0xf0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f204d98e929 RSP: 002b:00007f204e8160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 00000000000000ca RBX: 00007f204dbb6088 RCX: 00007f204d98e929 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f204dbb608c RBP: 00007f204dbb6080 R08: 7fffffffffffffff R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f204dbb608c R13: 0000000000000000 R14: 00007ffdd8a9cdc0 R15: 00007ffdd8a9cea8 INFO: task syz.3.17:376 blocked for more than 123 seconds. Not tainted 6.12.30-syzkaller-gc40c54e66959 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.17 state:D stack:0 pid:376 tgid:373 ppid:369 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5924 [inline] __schedule+0x145b/0x1f10 kernel/sched/core.c:7750 __schedule_loop kernel/sched/core.c:7831 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7846 schedule_timeout+0xb2/0x3a0 kernel/time/timer.c:2595 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common+0x359/0x630 kernel/sched/completion.c:127 wait_for_completion_state+0x19/0x40 kernel/sched/completion.c:264 coredump_wait fs/coredump.c:419 [inline] do_coredump+0x7cf/0x2bd0 fs/coredump.c:576 get_signal+0x11fd/0x14f0 kernel/signal.c:2919 arch_do_signal_or_restart+0x96/0x720 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x58/0xb0 kernel/entry/common.c:218 do_syscall_64+0x64/0xf0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7efc4dd8e929 RSP: 002b:00007efc4eb140e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 00000000000000ca RBX: 00007efc4dfb6088 RCX: 00007efc4dd8e929 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efc4dfb608c RBP: 00007efc4dfb6080 R08: 7fffffffffffffff R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc4dfb608c R13: 0000000000000000 R14: 00007ffcdc4cedd0 R15: 00007ffcdc4ceeb8 NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.30-syzkaller-gc40c54e66959 #0 d09897295957ba49fce5d3909215422667ca3e4a Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x10c/0x190 lib/dump_stack.c:120 dump_stack+0x19/0x20 lib/dump_stack.c:129 nmi_cpu_backtrace+0x2bf/0x2d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x142/0x2c0 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:41 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:229 [inline] watchdog+0xd8f/0xed0 kernel/hung_task.c:385 kthread+0x2ca/0x370 kernel/kthread.c:389 ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.12.30-syzkaller-gc40c54e66959 #0 d09897295957ba49fce5d3909215422667ca3e4a Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 RIP: 0010:pv_native_safe_halt+0x17/0x20 arch/x86/kernel/paravirt.c:106 Code: cc cc cc b8 e5 2b 0f 10 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 bc 41 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 c3 59 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c6 RAX: ffff8881f6f00000 RBX: ffff888103669300 RCX: ffffffff8585900e RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000035e5c RBP: ffffc900001a7e00 R08: ffff8881f6f39733 R09: 1ffff1103ede72e6 R10: dffffc0000000000 R11: ffffed103ede72e7 R12: 1ffff110206cd260 R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87ca72e8 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd6563ffd58 CR3: 000000010c29c000 CR4: 00000000003526b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: arch_safe_halt arch/x86/include/asm/paravirt.h:112 [inline] default_idle+0x17/0x30 arch/x86/kernel/process.c:748 arch_cpu_idle+0xd/0x20 arch/x86/kernel/process.c:785 default_idle_call+0x3f/0x80 kernel/sched/idle.c:117 cpuidle_idle_call kernel/sched/idle.c:185 [inline] do_idle+0x1a0/0x470 kernel/sched/idle.c:326 cpu_startup_entry+0x48/0x70 kernel/sched/idle.c:424 start_secondary+0x12e/0x140 arch/x86/kernel/smpboot.c:314 common_startup_64+0x13b/0x157 final repro crashed as (corrupted=false): INFO: task syz.2.16:367 blocked for more than 122 seconds. Not tainted 6.12.30-syzkaller-gc40c54e66959 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.16 state:D stack:0 pid:367 tgid:365 ppid:361 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5924 [inline] __schedule+0x145b/0x1f10 kernel/sched/core.c:7750 __schedule_loop kernel/sched/core.c:7831 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7846 schedule_timeout+0xb2/0x3a0 kernel/time/timer.c:2595 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common+0x359/0x630 kernel/sched/completion.c:127 wait_for_completion_state+0x19/0x40 kernel/sched/completion.c:264 coredump_wait fs/coredump.c:419 [inline] do_coredump+0x7cf/0x2bd0 fs/coredump.c:576 get_signal+0x11fd/0x14f0 kernel/signal.c:2919 arch_do_signal_or_restart+0x96/0x720 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x58/0xb0 kernel/entry/common.c:218 do_syscall_64+0x64/0xf0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f204d98e929 RSP: 002b:00007f204e8160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 00000000000000ca RBX: 00007f204dbb6088 RCX: 00007f204d98e929 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f204dbb608c RBP: 00007f204dbb6080 R08: 7fffffffffffffff R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f204dbb608c R13: 0000000000000000 R14: 00007ffdd8a9cdc0 R15: 00007ffdd8a9cea8 INFO: task syz.3.17:376 blocked for more than 123 seconds. Not tainted 6.12.30-syzkaller-gc40c54e66959 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.17 state:D stack:0 pid:376 tgid:373 ppid:369 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5924 [inline] __schedule+0x145b/0x1f10 kernel/sched/core.c:7750 __schedule_loop kernel/sched/core.c:7831 [inline] schedule+0xc6/0x240 kernel/sched/core.c:7846 schedule_timeout+0xb2/0x3a0 kernel/time/timer.c:2595 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common+0x359/0x630 kernel/sched/completion.c:127 wait_for_completion_state+0x19/0x40 kernel/sched/completion.c:264 coredump_wait fs/coredump.c:419 [inline] do_coredump+0x7cf/0x2bd0 fs/coredump.c:576 get_signal+0x11fd/0x14f0 kernel/signal.c:2919 arch_do_signal_or_restart+0x96/0x720 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x58/0xb0 kernel/entry/common.c:218 do_syscall_64+0x64/0xf0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7efc4dd8e929 RSP: 002b:00007efc4eb140e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 00000000000000ca RBX: 00007efc4dfb6088 RCX: 00007efc4dd8e929 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efc4dfb608c RBP: 00007efc4dfb6080 R08: 7fffffffffffffff R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc4dfb608c R13: 0000000000000000 R14: 00007ffcdc4cedd0 R15: 00007ffcdc4ceeb8 NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.30-syzkaller-gc40c54e66959 #0 d09897295957ba49fce5d3909215422667ca3e4a Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Call Trace: __dump_stack+0x21/0x30 lib/dump_stack.c:94 dump_stack_lvl+0x10c/0x190 lib/dump_stack.c:120 dump_stack+0x19/0x20 lib/dump_stack.c:129 nmi_cpu_backtrace+0x2bf/0x2d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x142/0x2c0 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:41 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:229 [inline] watchdog+0xd8f/0xed0 kernel/hung_task.c:385 kthread+0x2ca/0x370 kernel/kthread.c:389 ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.12.30-syzkaller-gc40c54e66959 #0 d09897295957ba49fce5d3909215422667ca3e4a Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 RIP: 0010:pv_native_safe_halt+0x17/0x20 arch/x86/kernel/paravirt.c:106 Code: cc cc cc b8 e5 2b 0f 10 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 bc 41 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 c3 59 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c6 RAX: ffff8881f6f00000 RBX: ffff888103669300 RCX: ffffffff8585900e RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000035e5c RBP: ffffc900001a7e00 R08: ffff8881f6f39733 R09: 1ffff1103ede72e6 R10: dffffc0000000000 R11: ffffed103ede72e7 R12: 1ffff110206cd260 R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87ca72e8 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd6563ffd58 CR3: 000000010c29c000 CR4: 00000000003526b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: arch_safe_halt arch/x86/include/asm/paravirt.h:112 [inline] default_idle+0x17/0x30 arch/x86/kernel/process.c:748 arch_cpu_idle+0xd/0x20 arch/x86/kernel/process.c:785 default_idle_call+0x3f/0x80 kernel/sched/idle.c:117 cpuidle_idle_call kernel/sched/idle.c:185 [inline] do_idle+0x1a0/0x470 kernel/sched/idle.c:326 cpu_startup_entry+0x48/0x70 kernel/sched/idle.c:424 start_secondary+0x12e/0x140 arch/x86/kernel/smpboot.c:314 common_startup_64+0x13b/0x157