Extracting prog: 2m26.353593311s
Minimizing prog: 10m30.349165932s
Simplifying prog options: 4m12.264493678s
Extracting C: 1m33.31543453s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FICLONERANGE-memfd_create-mprotect-openat-pwrite64-sendmsg$nl_route
detailed listing:
executing program 0:
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)
memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0x5b000)
sendmsg$nl_route(r0, 0x0, 0x4081)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FICLONERANGE-memfd_create-mprotect-openat-pwrite64-sendmsg$nl_route
detailed listing:
executing program 0:
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)
memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0x5b000)
sendmsg$nl_route(r0, 0x0, 0x4081)

program crashed: SYZFAIL: mkdir(syz-tmp) failed
single: successfully extracted reproducer
found reproducer with 6 syscalls
minimizing guilty program
testing program (duration=52.390400858s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FICLONERANGE-memfd_create-mprotect-openat-pwrite64
detailed listing:
executing program 0:
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)
memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0x5b000)

program crashed: SYZFAIL: posix_spawnp failed
testing program (duration=52.390400858s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FICLONERANGE-memfd_create-mprotect-openat
detailed listing:
executing program 0:
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)
memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)

program did not crash
testing program (duration=52.390400858s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FICLONERANGE-memfd_create-mprotect-pwrite64
detailed listing:
executing program 0:
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)
memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x58200, 0x5b000)

program did not crash
testing program (duration=52.390400858s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FICLONERANGE-memfd_create-openat-pwrite64
detailed listing:
executing program 0:
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)
memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0x5b000)

program did not crash
testing program (duration=52.390400858s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FICLONERANGE-mprotect-openat-pwrite64
detailed listing:
executing program 0:
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0x5b000)

program did not crash
testing program (duration=52.390400858s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-mprotect-openat-pwrite64
detailed listing:
executing program 0:
memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0x5b000)

program crashed: SYZFAIL: posix_spawnp failed
testing program (duration=52.390400858s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-mprotect-openat-pwrite64
detailed listing:
executing program 0:
memfd_create(0x0, 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0x5b000)

program did not crash
testing program (duration=52.390400858s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-mprotect-openat-pwrite64
detailed listing:
executing program 0:
memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat(0xffffffffffffff9c, 0x0, 0x18d042, 0x15)
pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0x5b000)

program did not crash
testing program (duration=52.390400858s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-mprotect-openat-pwrite64
detailed listing:
executing program 0:
memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
pwrite64(r0, 0x0, 0x0, 0x5b000)

program did not crash
testing program (duration=52.390400858s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-mprotect-openat-pwrite64
detailed listing:
executing program 0:
memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
pwrite64(r0, &(0x7f0000000000), 0x0, 0x5b000)

program did not crash
extracting C reproducer
testing compiled C program (duration=52.390400858s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-mprotect-openat-pwrite64
program did not crash
simplifying guilty program options
testing program (duration=52.390400858s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-mprotect-openat-pwrite64
detailed listing:
executing program 0:
memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0x5b000)

program crashed: SYZFAIL: posix_spawnp failed
extracting C reproducer
testing compiled C program (duration=52.390400858s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-mprotect-openat-pwrite64
program did not crash
testing program (duration=52.390400858s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-mprotect-openat-pwrite64
detailed listing:
executing program 0:
memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0x5b000)

program did not crash
testing program (duration=52.390400858s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-mprotect-openat-pwrite64
detailed listing:
executing program 0:
memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0x5b000)

program crashed: lost connection to test machine
a never seen crash title: lost connection to test machine, ignore
testing program (duration=52.390400858s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-mprotect-openat-pwrite64
detailed listing:
executing program 0:
memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0x5b000)

program crashed: SYZFAIL: posix_spawnp failed
validation run: crashed=true
testing program (duration=52.390400858s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-mprotect-openat-pwrite64
detailed listing:
executing program 0:
memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0x5b000)

program crashed: SYZFAIL: mkdir(syz-tmp) failed
validation run: crashed=true
testing program (duration=52.390400858s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): memfd_create-mprotect-openat-pwrite64
detailed listing:
executing program 0:
memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0x5b000)

program crashed: SYZFAIL: posix_spawnp failed
validation run: crashed=true
reproducing took 20m58.648186327s
repro crashed as (corrupted=false):
SYZFAIL: posix_spawnp failed
 (errno 8: Exec format error)
connection error: failed to recv *flatrpc.ExecutorMessageRawT: read tcp 127.0.0.1:44481->127.0.0.1:43554: read: connection reset by peer

final repro crashed as (corrupted=false):
SYZFAIL: posix_spawnp failed
 (errno 8: Exec format error)
connection error: failed to recv *flatrpc.ExecutorMessageRawT: read tcp 127.0.0.1:44481->127.0.0.1:43554: read: connection reset by peer