Extracting prog: 1m33.61601046s
Minimizing prog: 8m3.501019733s
Simplifying prog options: 5m2.5392193s
Extracting C: 1m48.129848913s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-openat$fuse-mount$fuse-openat$binfmt_register-write$binfmt_register
detailed listing:
executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)

program crashed: lost connection to test machine
single: successfully extracted reproducer
found reproducer with 5 syscalls
minimizing guilty program
testing program (duration=1m3.692616844s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-openat$fuse-mount$fuse-openat$binfmt_register
detailed listing:
executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)

program did not crash
testing program (duration=1m3.692616844s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-openat$fuse-mount$fuse-write$binfmt_register
detailed listing:
executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)

program did not crash
testing program (duration=1m3.692616844s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-openat$fuse-openat$binfmt_register-write$binfmt_register
detailed listing:
executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)

program crashed: lost connection to test machine
testing program (duration=1m3.692616844s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-openat$binfmt_register-write$binfmt_register
detailed listing:
executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)

program crashed: lost connection to test machine
testing program (duration=1m3.692616844s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)

program crashed: lost connection to test machine
testing program (duration=1m3.692616844s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)

program did not crash
testing program (duration=1m3.692616844s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m3.692616844s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
program did not crash
simplifying guilty program options
testing program (duration=1m3.692616844s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)

program crashed: lost connection to test machine
extracting C reproducer
testing compiled C program (duration=1m3.692616844s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
program did not crash
testing program (duration=1m3.692616844s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)

program crashed: lost connection to test machine
extracting C reproducer
testing compiled C program (duration=1m3.692616844s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
program did not crash
testing program (duration=1m3.692616844s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)

program crashed: lost connection to test machine
validation run: crashed=true
testing program (duration=1m3.692616844s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)

program crashed: lost connection to test machine
validation run: crashed=true
testing program (duration=1m3.692616844s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)

program crashed: lost connection to test machine
validation run: crashed=true
reproducing took 18m40.53012771s
repro crashed as (corrupted=false):

final repro crashed as (corrupted=false):