Warning: Permanently added '10.128.10.14' (ECDSA) to the list of known hosts. 2021/02/04 05:07:44 fuzzer started 2021/02/04 05:07:46 dialing manager at 10.128.15.235:5614 2021/02/04 05:07:46 syscalls: 383 2021/02/04 05:07:46 code coverage: enabled 2021/02/04 05:07:46 comparison tracing: enabled 2021/02/04 05:07:46 extra coverage: enabled 2021/02/04 05:07:46 setuid sandbox: enabled 2021/02/04 05:07:46 namespace sandbox: support is not implemented in syzkaller 2021/02/04 05:07:46 Android sandbox: support is not implemented in syzkaller 2021/02/04 05:07:46 fault injection: support is not implemented in syzkaller 2021/02/04 05:07:46 leak checking: support is not implemented in syzkaller 2021/02/04 05:07:46 net packet injection: enabled 2021/02/04 05:07:46 net device setup: support is not implemented in syzkaller 2021/02/04 05:07:46 concurrency sanitizer: support is not implemented in syzkaller 2021/02/04 05:07:46 devlink PCI setup: support is not implemented in syzkaller 2021/02/04 05:07:46 USB emulation: support is not implemented in syzkaller 2021/02/04 05:07:46 hci packet injection: support is not implemented in syzkaller 2021/02/04 05:07:46 wifi device emulation: support is not implemented in syzkaller 2021/02/04 05:07:46 fetching corpus: 0, signal 0/2000 (executing program) 2021/02/04 05:07:46 fetching corpus: 50, signal 14720/18593 (executing program) 2021/02/04 05:07:46 fetching corpus: 100, signal 30966/36624 (executing program) 2021/02/04 05:07:47 fetching corpus: 150, signal 44695/52028 (executing program) 2021/02/04 05:07:47 fetching corpus: 200, signal 61968/70812 (executing program) 2021/02/04 05:07:47 fetching corpus: 250, signal 68963/79467 (executing program) 2021/02/04 05:07:47 fetching corpus: 300, signal 81675/93591 (executing program) 2021/02/04 05:07:47 fetching corpus: 350, signal 91429/104742 (executing program) 2021/02/04 05:07:47 fetching corpus: 400, signal 100440/115210 (executing program) 2021/02/04 05:07:47 fetching corpus: 450, signal 114021/129908 (executing program) 2021/02/04 05:07:48 fetching corpus: 500, signal 124015/141143 (executing program) 2021/02/04 05:07:48 fetching corpus: 550, signal 128534/147016 (executing program) 2021/02/04 05:07:48 fetching corpus: 600, signal 132697/152470 (executing program) 2021/02/04 05:07:48 fetching corpus: 650, signal 135882/157000 (executing program) 2021/02/04 05:07:48 fetching corpus: 700, signal 141455/163761 (executing program) 2021/02/04 05:07:48 fetching corpus: 750, signal 146691/170174 (executing program) 2021/02/04 05:07:48 fetching corpus: 800, signal 156139/180488 (executing program) 2021/02/04 05:07:49 fetching corpus: 850, signal 161164/186607 (executing program) 2021/02/04 05:07:49 fetching corpus: 900, signal 165428/191995 (executing program) 2021/02/04 05:07:49 fetching corpus: 950, signal 167248/195077 (executing program) 2021/02/04 05:07:49 fetching corpus: 1000, signal 173748/202424 (executing program) 2021/02/04 05:07:49 fetching corpus: 1050, signal 178436/208185 (executing program) 2021/02/04 05:07:49 fetching corpus: 1100, signal 182436/213198 (executing program) 2021/02/04 05:07:49 fetching corpus: 1150, signal 186503/218203 (executing program) 2021/02/04 05:07:49 fetching corpus: 1200, signal 191410/223978 (executing program) 2021/02/04 05:07:49 fetching corpus: 1250, signal 195418/228914 (executing program) 2021/02/04 05:07:50 fetching corpus: 1300, signal 198945/233335 (executing program) 2021/02/04 05:07:50 fetching corpus: 1350, signal 204340/239453 (executing program) 2021/02/04 05:07:50 fetching corpus: 1400, signal 208728/244660 (executing program) 2021/02/04 05:07:50 fetching corpus: 1450, signal 213460/250122 (executing program) 2021/02/04 05:07:50 fetching corpus: 1500, signal 217288/254686 (executing program) 2021/02/04 05:07:50 fetching corpus: 1550, signal 224080/261904 (executing program) 2021/02/04 05:07:50 fetching corpus: 1600, signal 227590/266201 (executing program) 2021/02/04 05:07:50 fetching corpus: 1650, signal 230857/270237 (executing program) 2021/02/04 05:07:51 fetching corpus: 1700, signal 232392/272723 (executing program) 2021/02/04 05:07:51 fetching corpus: 1750, signal 236232/277163 (executing program) 2021/02/04 05:07:51 fetching corpus: 1800, signal 240558/282005 (executing program) 2021/02/04 05:07:51 fetching corpus: 1850, signal 241768/284178 (executing program) 2021/02/04 05:07:51 fetching corpus: 1900, signal 243998/287227 (executing program) 2021/02/04 05:07:51 fetching corpus: 1950, signal 247623/291546 (executing program) 2021/02/04 05:07:51 fetching corpus: 2000, signal 249994/294667 (executing program) 2021/02/04 05:07:51 fetching corpus: 2050, signal 252254/297672 (executing program) 2021/02/04 05:07:52 fetching corpus: 2100, signal 255199/301180 (executing program) 2021/02/04 05:07:52 fetching corpus: 2150, signal 256745/303512 (executing program) 2021/02/04 05:07:52 fetching corpus: 2200, signal 263945/310545 (executing program) 2021/02/04 05:07:52 fetching corpus: 2250, signal 266774/313995 (executing program) 2021/02/04 05:07:52 fetching corpus: 2300, signal 269559/317297 (executing program) 2021/02/04 05:07:52 fetching corpus: 2350, signal 275339/323143 (executing program) 2021/02/04 05:07:52 fetching corpus: 2400, signal 277362/325817 (executing program) 2021/02/04 05:07:52 fetching corpus: 2450, signal 278629/327844 (executing program) 2021/02/04 05:07:53 fetching corpus: 2500, signal 279296/329343 (executing program) 2021/02/04 05:07:53 fetching corpus: 2550, signal 281449/332053 (executing program) 2021/02/04 05:07:53 fetching corpus: 2600, signal 283587/334742 (executing program) 2021/02/04 05:07:53 fetching corpus: 2650, signal 288331/339550 (executing program) 2021/02/04 05:07:53 fetching corpus: 2700, signal 291702/343304 (executing program) 2021/02/04 05:07:53 fetching corpus: 2750, signal 293197/345391 (executing program) 2021/02/04 05:07:53 fetching corpus: 2800, signal 295279/347959 (executing program) 2021/02/04 05:07:53 fetching corpus: 2850, signal 296374/349770 (executing program) 2021/02/04 05:07:53 fetching corpus: 2900, signal 297714/351735 (executing program) 2021/02/04 05:07:53 fetching corpus: 2950, signal 299685/354252 (executing program) 2021/02/04 05:07:54 fetching corpus: 3000, signal 302200/357120 (executing program) 2021/02/04 05:07:54 fetching corpus: 3050, signal 303777/359255 (executing program) 2021/02/04 05:07:54 fetching corpus: 3100, signal 305470/361423 (executing program) 2021/02/04 05:07:54 fetching corpus: 3150, signal 307063/363545 (executing program) 2021/02/04 05:07:54 fetching corpus: 3200, signal 309214/366105 (executing program) 2021/02/04 05:07:54 fetching corpus: 3250, signal 310476/367938 (executing program) 2021/02/04 05:07:54 fetching corpus: 3300, signal 311927/369902 (executing program) 2021/02/04 05:07:55 fetching corpus: 3350, signal 313702/372066 (executing program) 2021/02/04 05:07:55 fetching corpus: 3400, signal 315370/374189 (executing program) 2021/02/04 05:07:55 fetching corpus: 3450, signal 318192/377098 (executing program) 2021/02/04 05:07:55 fetching corpus: 3500, signal 319632/378969 (executing program) 2021/02/04 05:07:55 fetching corpus: 3550, signal 322153/381618 (executing program) 2021/02/04 05:07:55 fetching corpus: 3600, signal 323876/383894 (executing program) 2021/02/04 05:07:55 fetching corpus: 3650, signal 325458/385888 (executing program) 2021/02/04 05:07:55 fetching corpus: 3700, signal 327127/387934 (executing program) 2021/02/04 05:07:56 fetching corpus: 3750, signal 328062/389453 (executing program) 2021/02/04 05:07:56 fetching corpus: 3800, signal 329993/391662 (executing program) 2021/02/04 05:07:56 fetching corpus: 3850, signal 332154/394012 (executing program) 2021/02/04 05:07:56 fetching corpus: 3900, signal 334366/396371 (executing program) 2021/02/04 05:07:56 fetching corpus: 3950, signal 336612/398844 (executing program) 2021/02/04 05:07:56 fetching corpus: 4000, signal 337647/400336 (executing program) 2021/02/04 05:07:56 fetching corpus: 4050, signal 339553/402425 (executing program) 2021/02/04 05:07:56 fetching corpus: 4100, signal 340570/403942 (executing program) 2021/02/04 05:07:57 fetching corpus: 4150, signal 342175/405850 (executing program) 2021/02/04 05:07:57 fetching corpus: 4200, signal 343218/407368 (executing program) 2021/02/04 05:07:57 fetching corpus: 4250, signal 345322/409975 (executing program) 2021/02/04 05:07:57 fetching corpus: 4300, signal 346550/411569 (executing program) 2021/02/04 05:07:57 fetching corpus: 4350, signal 348313/413714 (executing program) 2021/02/04 05:07:57 fetching corpus: 4400, signal 350685/416074 (executing program) 2021/02/04 05:07:57 fetching corpus: 4450, signal 352671/418236 (executing program) 2021/02/04 05:07:58 fetching corpus: 4500, signal 353716/419637 (executing program) 2021/02/04 05:07:58 fetching corpus: 4550, signal 356231/421978 (executing program) 2021/02/04 05:07:58 fetching corpus: 4600, signal 357241/423460 (executing program) 2021/02/04 05:07:58 fetching corpus: 4650, signal 358433/424953 (executing program) 2021/02/04 05:07:58 fetching corpus: 4700, signal 361333/427560 (executing program) 2021/02/04 05:07:59 fetching corpus: 4750, signal 362423/428997 (executing program) 2021/02/04 05:07:59 fetching corpus: 4800, signal 364394/431032 (executing program) 2021/02/04 05:07:59 fetching corpus: 4850, signal 365650/432740 (executing program) 2021/02/04 05:07:59 fetching corpus: 4900, signal 366401/433905 (executing program) 2021/02/04 05:07:59 fetching corpus: 4950, signal 367199/435118 (executing program) 2021/02/04 05:07:59 fetching corpus: 5000, signal 367955/436318 (executing program) 2021/02/04 05:07:59 fetching corpus: 5050, signal 368635/437383 (executing program) 2021/02/04 05:07:59 fetching corpus: 5100, signal 370864/439494 (executing program) 2021/02/04 05:07:59 fetching corpus: 5150, signal 372473/441167 (executing program) 2021/02/04 05:08:00 fetching corpus: 5200, signal 374133/442928 (executing program) 2021/02/04 05:08:00 fetching corpus: 5250, signal 375618/444524 (executing program) 2021/02/04 05:08:00 fetching corpus: 5300, signal 376236/445651 (executing program) 2021/02/04 05:08:00 fetching corpus: 5350, signal 377440/447184 (executing program) 2021/02/04 05:08:00 fetching corpus: 5400, signal 378558/448502 (executing program) 2021/02/04 05:08:00 fetching corpus: 5450, signal 379942/449963 (executing program) 2021/02/04 05:08:00 fetching corpus: 5500, signal 380776/451183 (executing program) 2021/02/04 05:08:00 fetching corpus: 5550, signal 381264/452149 (executing program) 2021/02/04 05:08:00 fetching corpus: 5600, signal 381905/453159 (executing program) 2021/02/04 05:08:00 fetching corpus: 5650, signal 382715/454299 (executing program) 2021/02/04 05:08:00 fetching corpus: 5700, signal 383181/455213 (executing program) 2021/02/04 05:08:00 fetching corpus: 5750, signal 384497/456616 (executing program) 2021/02/04 05:08:00 fetching corpus: 5800, signal 385598/457820 (executing program) 2021/02/04 05:08:00 fetching corpus: 5850, signal 386086/458704 (executing program) 2021/02/04 05:08:00 fetching corpus: 5900, signal 387641/460155 (executing program) 2021/02/04 05:08:00 fetching corpus: 5950, signal 388547/461402 (executing program) 2021/02/04 05:08:01 fetching corpus: 6000, signal 389135/462363 (executing program) 2021/02/04 05:08:01 fetching corpus: 6050, signal 390739/463858 (executing program) 2021/02/04 05:08:01 fetching corpus: 6100, signal 393217/465782 (executing program) 2021/02/04 05:08:01 fetching corpus: 6150, signal 393866/466747 (executing program) 2021/02/04 05:08:01 fetching corpus: 6200, signal 394671/467824 (executing program) 2021/02/04 05:08:01 fetching corpus: 6250, signal 395299/468792 (executing program) 2021/02/04 05:08:01 fetching corpus: 6300, signal 396264/469867 (executing program) 2021/02/04 05:08:01 fetching corpus: 6350, signal 397757/471180 (executing program) 2021/02/04 05:08:01 fetching corpus: 6400, signal 399079/472479 (executing program) 2021/02/04 05:08:01 fetching corpus: 6450, signal 399531/473264 (executing program) 2021/02/04 05:08:01 fetching corpus: 6500, signal 400221/474177 (executing program) 2021/02/04 05:08:01 fetching corpus: 6550, signal 400918/475238 (executing program) 2021/02/04 05:08:01 fetching corpus: 6600, signal 402566/476846 (executing program) 2021/02/04 05:08:01 fetching corpus: 6650, signal 403888/478144 (executing program) 2021/02/04 05:08:01 fetching corpus: 6700, signal 405517/479526 (executing program) 2021/02/04 05:08:01 fetching corpus: 6750, signal 406466/480511 (executing program) 2021/02/04 05:08:01 fetching corpus: 6800, signal 407401/481515 (executing program) 2021/02/04 05:08:02 fetching corpus: 6850, signal 408286/482572 (executing program) 2021/02/04 05:08:02 fetching corpus: 6900, signal 409099/483665 (executing program) 2021/02/04 05:08:02 fetching corpus: 6950, signal 410376/484788 (executing program) 2021/02/04 05:08:02 fetching corpus: 7000, signal 410917/485573 (executing program) 2021/02/04 05:08:02 fetching corpus: 7050, signal 411986/486573 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/487462 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/487985 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/488543 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/489080 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/489575 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/490083 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/490605 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/491130 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/491629 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/492172 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/492695 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/493225 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/493751 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/494270 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/494798 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/495327 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/495839 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/496356 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/496866 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/497404 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/497948 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/498457 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/498989 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/499511 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/500035 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/500558 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/501099 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/501612 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/502146 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/502668 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/503180 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/503725 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/504257 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/504807 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/505366 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/505892 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/506405 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/506926 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/507460 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/508006 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/508532 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/509070 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/509569 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/510092 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/510598 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/511135 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/511664 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/512177 (executing program) 2021/02/04 05:08:02 fetching corpus: 7054, signal 412797/512719 (executing program) 2021/02/04 05:08:02 fetching corpus: 7055, signal 412798/513247 (executing program) 2021/02/04 05:08:02 fetching corpus: 7055, signal 412798/513744 (executing program) 2021/02/04 05:08:02 fetching corpus: 7055, signal 412798/514290 (executing program) 2021/02/04 05:08:02 fetching corpus: 7055, signal 412798/514789 (executing program) 2021/02/04 05:08:02 fetching corpus: 7055, signal 412798/515286 (executing program) 2021/02/04 05:08:02 fetching corpus: 7055, signal 412798/515812 (executing program) 2021/02/04 05:08:02 fetching corpus: 7055, signal 412798/516355 (executing program) 2021/02/04 05:08:02 fetching corpus: 7055, signal 412798/516883 (executing program) 2021/02/04 05:08:02 fetching corpus: 7055, signal 412798/517465 (executing program) 2021/02/04 05:08:02 fetching corpus: 7055, signal 412798/517996 (executing program) 2021/02/04 05:08:02 fetching corpus: 7055, signal 412798/518515 (executing program) 2021/02/04 05:08:02 fetching corpus: 7055, signal 412798/519053 (executing program) 2021/02/04 05:08:02 fetching corpus: 7055, signal 412798/519589 (executing program) 2021/02/04 05:08:02 fetching corpus: 7055, signal 412798/520157 (executing program) 2021/02/04 05:08:02 fetching corpus: 7055, signal 412798/520679 (executing program) 2021/02/04 05:08:02 fetching corpus: 7055, signal 412798/521173 (executing program) 2021/02/04 05:08:02 fetching corpus: 7055, signal 412798/521669 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/522183 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/522705 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/523231 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/523713 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/524241 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/524799 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/525326 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/525844 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/526391 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/526943 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/527463 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/527980 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/528516 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/529059 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/529549 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/530080 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/530596 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/531130 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/531663 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/532164 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/532714 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/533251 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/533812 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/534398 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/534946 (executing program) 2021/02/04 05:08:02 fetching corpus: 7056, signal 412799/535481 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/536028 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/536543 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/537046 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/537541 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/538052 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/538606 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/539143 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/539686 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/540214 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/540718 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/541230 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/541736 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/542251 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/542734 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/543190 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/543721 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/544263 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/544751 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/545250 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/545817 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/546350 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/546870 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/547409 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/547948 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/548445 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/548977 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/549474 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/550021 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/550555 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/551109 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/551627 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/552166 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/552628 (executing program) 2021/02/04 05:08:03 fetching corpus: 7056, signal 412799/552628 (executing program) 2021/02/04 05:08:03 starting 2 fuzzer processes 05:08:03 executing program 0: r0 = kqueue() r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r3 = socket$inet(0x2, 0x0, 0x76) setsockopt$inet_opts(r3, 0x0, 0x37bbb41b5e377985, &(0x7f0000000600)="94dab8fb390fe5767ee5e4d12c4c766b62af0550bc01ff939e012fed3a2025a010593f4a5e5cee3b99aacffc849467b43492d412ed4e3990a3b42d47d3fb4354c6a756cf3edb19eec1f6fae1175677ef5c5d1e22a48e588ee16cf4b0ad0ea0ace56ddd7c7b401c", 0x67) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x12a}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x10, r1, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x8}) r4 = syz_open_pts() close(r4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@abs={0xa3e18c30ac20269, 0x0, 0x3}, 0x8, 0x0}, 0x0) 05:08:03 executing program 1: r0 = semget$private(0x0, 0x4000000009, 0x82) semop(r0, &(0x7f0000000380)=[{0x1, 0xffff, 0xe5ce97ab354d86be}, {0x7, 0x2, 0x1800}, {0x4, 0x4, 0x2bef415fd0803d91}, {0x3, 0x2, 0x800}], 0x4) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x40, 0x0) semop(r0, &(0x7f0000000380), 0x1d) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000140)=""/165) semop(r0, &(0x7f0000000380)=[{0x4, 0x2}, {0x4, 0x6, 0x1000}, {0x3, 0x4, 0x800}, {0x2, 0x200}, {0x1, 0x2e3, 0x1000}, {0x0, 0x7d12, 0x1800}, {0x2, 0x7}], 0x7) semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000080)) semctl$GETPID(r0, 0x2, 0x4, &(0x7f0000000000)=""/119) semop(r0, &(0x7f0000000200), 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000240)={{0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x60, 0x9}, 0xfff, 0x7fff, 0x2}) semop(r0, &(0x7f0000000040)=[{0x0, 0x6, 0x1800}, {0x0, 0x1, 0x1000}], 0x2) r1 = kqueue() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000003c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x8, 0x1ff, 0x5}) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) semctl$GETALL(r0, 0x0, 0x6, &(0x7f00000002c0)=""/141) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x10, r2, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x1}) kqueue() r3 = kqueue() fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) vrele: bad writecount: 0xfffffd806e53a4e8, type VCHR, use 0, write 1, hold 0, tag VT_UFS, ino 2674, on dev 4, 0 flags 0x180, effnlink 1, nlink 1 mode 020620, owner 32767, group 4, size 0 panic: vrele: v_writecount != 0 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *305264 18355 32767 0x10 0x4000000 0K syz-executor.0 294448 48307 32767 0x10 0x480 1 syz-executor.0 db_enter() at db_enter+0x18 panic(ffffffff82460f22) at panic+0x15e vrele(fffffd806e53a4e8) at vrele+0x197 ptmioctl(5100,40287401,ffff8000256d6580,3,ffff8000ffff4fc0) at ptmioctl+0x5b9 VOP_IOCTL(fffffd806e622050,40287401,ffff8000256d6580,3,fffffd807f7b7ae0,ffff8000ffff4fc0) at VOP_IOCTL+0x9a vn_ioctl(fffffd80663f6ad0,40287401,ffff8000256d6580,ffff8000ffff4fc0) at vn_ioctl+0xba sys_ioctl(ffff8000ffff4fc0,ffff8000256d6690,ffff8000256d66e0) at sys_ioctl+0x4b0 syscall(ffff8000256d6760) at syscall+0x4a1 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x879449123d0, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic vrele: v_writecount != 0 ddb{0}> trace db_enter() at db_enter+0x18 panic(ffffffff82460f22) at panic+0x15e vrele(fffffd806e53a4e8) at vrele+0x197 ptmioctl(5100,40287401,ffff8000256d6580,3,ffff8000ffff4fc0) at ptmioctl+0x5b9 VOP_IOCTL(fffffd806e622050,40287401,ffff8000256d6580,3,fffffd807f7b7ae0,ffff8000ffff4fc0) at VOP_IOCTL+0x9a vn_ioctl(fffffd80663f6ad0,40287401,ffff8000256d6580,ffff8000ffff4fc0) at vn_ioctl+0xba sys_ioctl(ffff8000ffff4fc0,ffff8000256d6690,ffff8000256d66e0) at sys_ioctl+0x4b0 syscall(ffff8000256d6760) at syscall+0x4a1 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x879449123d0, count: -9 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff8000256d5fc0 rbx 0xffff8000256d5fd0 rdx 0x8b rcx 0x2 rax 0x1 r8 0xffffffff81ea78f5 kprintf+0x145 r9 0x1 r10 0xc220d0317c036935 r11 0xbcee54a996007884 r12 0x3000000008 r13 0xffff8000256d6070 r14 0x100 r15 0x1 rip 0xffffffff8184d248 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff8000256d5fb0 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor.0) pid=305264 stat=onproc flags process=10 proc=4000000 pri=32, usrpri=86, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff4540,0xffff8000ffff4010 process=0xffff8000ffff2e88 user=0xffff8000256d1000, vmspace=0xfffffd807effa5c0 estcpu=36, cpticks=2, pctcpu=0.0 user=0, sys=2, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 18355 164670 48307 32767 2 0x10 syz-executor.0 *18355 305264 48307 32767 7 0x4000010 syz-executor.0 18355 299292 48307 32767 3 0x4000090 fsleep syz-executor.0 24191 349929 38574 32767 2 0x10 syz-executor.1 24191 200092 38574 32767 3 0x4000090 semwait syz-executor.1 24191 349968 38574 32767 3 0x4000090 fsleep syz-executor.1 38574 250794 64563 32767 2 0x490 syz-executor.1 48307 294448 53129 32767 7 0x490 syz-executor.0 64563 431902 74333 0 3 0x82 wait syz-executor.1 53129 453518 74333 0 3 0x82 wait syz-executor.0 74333 218694 47945 0 3 0x82 thrsleep syz-fuzzer 74333 76512 47945 0 3 0x4000082 thrsleep syz-fuzzer 74333 485100 47945 0 3 0x4000082 kqread syz-fuzzer 74333 72573 47945 0 3 0x4000082 thrsleep syz-fuzzer 74333 361615 47945 0 3 0x4000082 thrsleep syz-fuzzer 74333 309087 47945 0 3 0x4000082 thrsleep syz-fuzzer 74333 62199 47945 0 3 0x4000082 thrsleep syz-fuzzer 74333 445306 47945 0 3 0x4000082 thrsleep syz-fuzzer 47945 72943 40112 0 3 0x10008a sigsusp ksh 40112 160533 53144 0 3 0x92 select sshd 9411 107647 1 0 3 0x100083 ttyin getty 53144 289742 1 0 3 0x80 select sshd 7760 104337 8108 73 3 0x100090 kqread syslogd 8108 489965 1 0 3 0x100082 netio syslogd 25687 205504 1 77 3 0x100090 poll dhclient 23843 190044 1 0 3 0x80 poll dhclient 87496 336753 0 0 3 0x14200 bored smr 42792 147149 0 0 2 0x14200 zerothread 38601 4790 0 0 3 0x14200 aiodoned aiodoned 85380 298472 0 0 3 0x14200 syncer update 17420 168331 0 0 3 0x14200 cleaner cleaner 20852 239950 0 0 3 0x14200 reaper reaper 75853 14004 0 0 3 0x14200 pgdaemon pagedaemon 99157 44877 0 0 3 0x14200 bored crynlk 8016 415880 0 0 3 0x14200 bored crypto 96860 314954 0 0 3 0x14200 bored viomb 98761 126582 0 0 3 0x40014200 acpi0 acpi0 66822 513600 0 0 3 0x40014200 idle1 10470 500196 0 0 3 0x14200 bored softnet 83659 182720 0 0 3 0x14200 bored systqmp 71850 383187 0 0 3 0x14200 bored systq 2286 303653 0 0 3 0x40014200 bored softclock 92165 58132 0 0 3 0x40014200 idle0 1 361501 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 18355 (syz-executor.0) thread 0xffff8000ffff4fc0 (305264) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff828cdd98) #0 witness_lock+0x4b0 #1 vn_ioctl+0x40 #2 sys_ioctl+0x4b0 #3 syscall+0x4a1 #4 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9476 6349K 6349K 78643K 10566 0 pcb 13 8K 8K 78643K 13 0 rtable 105 3K 3K 78643K 189 0 ifaddr 39 10K 10K 78643K 39 0 counters 44 34K 34K 78643K 44 0 ioctlops 0 0K 2K 78643K 15 0 mount 1 1K 1K 78643K 1 0 vnodes 1216 76K 76K 78643K 1221 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 2 1K 1K 78643K 2 0 sem 4 0K 0K 78643K 4 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12598 0 file desc 8 25K 33K 78643K 38 0 proc 48 50K 70K 78643K 365 0 subproc 34 2K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 in_multi 33 2K 2K 78643K 33 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 25 122K 122K 78643K 25 0 exec 0 0K 2K 78643K 317 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 156 28K 28K 78643K 756 0 UVM aobj 3 2K 2K 78643K 3 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 NDP 9 0K 0K 78643K 9 0 temp 61 3971K 4033K 78643K 1798 0 kqueue 3 4K 4K 78643K 3 0 SYN cache 2 16K 16K 78643K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 0 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 120 19 0 17 1 0 1 1 0 8 0 rtentry 112 45 0 1 2 0 2 2 0 8 0 unpcb 120 23 0 15 1 0 1 1 0 8 0 syncache 296 4 0 4 1 1 0 1 0 8 0 tcpqe 32 372 0 372 1 0 1 1 0 8 1 tcpcb 736 10 0 6 1 0 1 1 0 8 0 inpcb 304 32 0 25 1 0 1 1 0 8 0 nd6 48 6 0 0 1 0 1 1 0 8 0 kcovpl 48 2 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 189 0 0 12 0 12 12 0 8 0 art_table 32 190 0 0 2 0 2 2 0 8 0 art_node 16 44 0 4 1 0 1 1 0 8 0 semapl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1418 0 21 88 0 88 88 0 8 0 ffsino 272 1418 0 21 94 0 94 94 0 8 0 nchpl 144 1637 0 36 60 0 60 60 0 8 0 uvmvnodes 72 1461 0 0 27 0 27 27 0 8 0 vnodes 224 1461 0 0 86 0 86 86 0 8 0 namei 1024 3980 0 3980 2 1 1 1 0 8 1 percpumem 16 33 0 0 1 0 1 1 0 8 0 scxspl 216 4781 0 4781 9 3 6 8 0 8 6 plimitpl 152 17 0 7 1 0 1 1 0 8 0 sigapl 424 226 0 193 4 0 4 4 0 8 0 futexpl 56 12 0 10 1 0 1 1 0 8 0 knotepl 112 62 0 42 1 0 1 1 0 8 0 kqueuepl 168 3 0 0 1 0 1 1 0 8 0 pipepl 336 69 0 58 1 0 1 1 0 8 0 fdescpl 496 210 0 193 3 0 3 3 0 8 0 filepl 152 968 0 865 5 1 4 4 0 8 0 lockfpl 104 5 0 4 1 0 1 1 0 8 0 lockfspl 48 3 0 2 1 0 1 1 0 8 0 sessionpl 144 17 0 7 1 0 1 1 0 8 0 pgrppl 48 17 0 7 1 0 1 1 0 8 0 ucredpl 96 57 0 48 1 0 1 1 0 8 0 zombiepl 144 193 0 193 2 1 1 1 0 8 1 processpl 1080 226 0 193 5 2 3 3 0 8 0 procpl 672 237 0 193 4 0 4 4 0 8 0 sockpl 432 74 0 57 4 1 3 3 0 8 1 mcl4k 4096 3 0 0 1 0 1 1 0 8 0 mcl2k 2048 190 0 0 22 0 22 22 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 223 0 0 13 0 13 13 0 8 0 bufpl 280 3255 0 173 221 0 221 221 0 8 0 anonpl 24 45247 0 20774 152 3 149 149 0 186 1 amapchunkpl 152 1528 0 924 26 0 26 26 0 158 0 amappl16 200 1054 0 111 50 0 50 50 0 8 0 amappl15 192 2 0 0 1 0 1 1 0 8 0 amappl14 184 23 0 19 1 0 1 1 0 8 0 amappl13 176 28 0 22 2 1 1 1 0 8 0 amappl12 168 9 0 7 2 1 1 1 0 8 0 amappl11 160 49 0 37 1 0 1 1 0 8 0 amappl10 152 18 0 13 1 0 1 1 0 8 0 amappl9 144 266 0 262 2 1 1 1 0 8 0 amappl8 136 146 0 99 2 0 2 2 0 8 0 amappl7 128 221 0 210 1 0 1 1 0 8 0 amappl6 120 61 0 51 1 0 1 1 0 8 0 amappl5 112 392 0 375 1 0 1 1 0 8 0 amappl4 104 245 0 222 1 0 1 1 0 8 0 amappl3 96 116 0 108 1 0 1 1 0 8 0 amappl2 88 846 0 771 4 2 2 3 0 8 0 amappl1 80 14025 0 13491 27 15 12 21 0 8 1 amappl 88 522 0 417 3 0 3 3 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 210 0 193 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 210 0 193 1 0 1 1 0 8 0 vmmpekpl 168 5778 0 5749 2 0 2 2 0 8 0 vmmpepl 168 34518 0 32084 146 14 132 132 0 357 26 vmsppl 368 209 0 193 2 0 2 2 0 8 0 rwobjpl 56 9685 0 7978 32 6 26 26 0 8 1 pdppl 4096 427 0 386 63 18 45 45 0 8 4 pvpl 32 134747 0 107159 226 0 226 226 0 265 3 pmappl 232 209 0 193 2 0 2 2 0 8 1 extentpl 40 58 0 40 1 0 1 1 0 8 0 phpool 112 306 0 21 9 0 9 9 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x18 panic(ffffffff82460f22) at panic+0x15e vrele(fffffd806e53a4e8) at vrele+0x197 ptmioctl(5100,40287401,ffff8000256d6580,3,ffff8000ffff4fc0) at ptmioctl+0x5b9 VOP_IOCTL(fffffd806e622050,40287401,ffff8000256d6580,3,fffffd807f7b7ae0,ffff8000ffff4fc0) at VOP_IOCTL+0x9a vn_ioctl(fffffd80663f6ad0,40287401,ffff8000256d6580,ffff8000ffff4fc0) at vn_ioctl+0xba sys_ioctl(ffff8000ffff4fc0,ffff8000256d6690,ffff8000256d66e0) at sys_ioctl+0x4b0 syscall(ffff8000256d6760) at syscall+0x4a1 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x879449123d0, count: -9 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp x86_ipi_db(ffff800020d68ff0) at x86_ipi_db+0x1a x86_ipi_handler() at x86_ipi_handler+0xb7 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x17 __mp_lock(ffffffff828cdb90) at __mp_lock+0x133 __mp_acquire_count(ffffffff828cdb90,1) at __mp_acquire_count+0x4c mi_switch() at mi_switch+0x390 sleep_finish(ffff8000234be5c8,1) at sleep_finish+0x111 sleep_finish_all(ffff8000234be5c8,1) at sleep_finish_all+0x32 tsleep(ffffffff8285873c,120,ffffffff823a4637,2) at tsleep+0x1f2 sys_nanosleep(ffff8000ffff57a0,ffff8000234be6f0,ffff8000234be740) at sys_nanosleep+0x1f5 syscall(ffff8000234be7c0) at syscall+0x4a1 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffc5390, count: 2 ddb{1}> trace x86_ipi_db(ffff800020d68ff0) at x86_ipi_db+0x1a x86_ipi_handler() at x86_ipi_handler+0xb7 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x17 __mp_lock(ffffffff828cdb90) at __mp_lock+0x133 __mp_acquire_count(ffffffff828cdb90,1) at __mp_acquire_count+0x4c mi_switch() at mi_switch+0x390 sleep_finish(ffff8000234be5c8,1) at sleep_finish+0x111 sleep_finish_all(ffff8000234be5c8,1) at sleep_finish_all+0x32 tsleep(ffffffff8285873c,120,ffffffff823a4637,2) at tsleep+0x1f2 sys_nanosleep(ffff8000ffff57a0,ffff8000234be6f0,ffff8000234be740) at sys_nanosleep+0x1f5 syscall(ffff8000234be7c0) at syscall+0x4a1 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffc5390, count: -13