Thu Feb 10 10:35:37 UTC 2022 NetBSD/amd64 (ci2-netbsd-4.c.syzkaller.internal) (constty) login: Feb 10 10:35:40 ci2-netbsd-4 getty[1069]: /dev/ttyE2: Device not configured Feb 10 10:35:40 ci2-netbsd-4 getty[1070]: /dev/ttyE3: Device not configured Feb 10 10:35:40 ci2-netbsd-4 getty[1126]: /dev/ttyE1: Device not configured Warning: Permanently added '10.128.0.53' (ECDSA) to the list of known hosts. 2022/02/10 10:35:48 parsed 1 programs [ 37.9323789] kqueue_register: syz-execprog[1001]: event type 0 not supported for file type 5/(null) (error 45) [ 37.9435143] kqueue_register: syz-execprog[1001]: event type 0 not supported for file type 5/(null) (error 45) 2022/02/10 10:35:48 executed programs: 0 ./file0 [ 38.7223893] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1236 command syz-executor.4) O! u0""g3Yau.3i)" XZ @alibstdc++.so.9__libc_cond_wait__libc_cond_broadcastmemmove__libc_mutex_initatexitstrerrorabortfflushmemcpy__libc_mutex_unlockread__fstat50fwrite__errno__clock_gettime50pthread_createioctl_Jv_RegisterClassessprintf__libc_mutex_lock__sFstrcmplibm.so.0_fini__deregister_frame_info__register_frame_infolibpthread.so.1pthread_attr_init_exitgetpidopenpthread_attr_destroyenvironclose__libc_cond_initpthread_attr_setstacksize__libc_cond_timedwaitmmaplibc.so.12__getpwnam_r50setuiddup2setsid__prognamesetgidunlinkforkrandsystem__ps_stringsstrrchrclosedirvfprintfkillchmod_longjmp__syscallwaitpidstrncpysetrlimitrmdirmkdir__sigaction14vsnprintfchdir_setjmpputs__lstat50_libc_init__readdir30usleepmkdtempsetgroups__opendir30_endAa Aa2AaDbAaAaBaBaBaBa Ba (Ba 0Ba 8Ba@BaHBaPBaXBa`BahBapBaxBaBaBaBaBaBaBaBaBaBa Ba!Ba"Ba#Ba$Ba%Ba&Ba'Ca(Ca)Ca*Ca+ Ca,(Ca-0Ca.8Ca/@Ca0HCa1PCa3XCa4`Ca5hCa7pCa8xCa9Ca:Ca;Ca<Ca=Ca>Ca?CaACaBCaCCaECaFCaGCaHCaICaJCaKDaMDaNHH5+!%+!@%+!h%+!h%+!h%+!h%+!h%+!h%+!h%+!hp%+!h`%+!h P%+!h @%+!h 0%+!h %+!h%z+!h%r+!h%j+!h%b+!h%Z+!h%R+!h%J+!h%B+!h%:+!h%2+!hp%*+!h`%"+!hP%+!h@%+!h0% +!h %+!h%*!h%*!h%*!h %*!h!%*!h"%*!h#%*!h$%*!h%%*!h&%*!h'p%*!h(`%*!h)P%*!h*@%*!h+0%*!h, %*!h-%z*!h.%r*!h/%j*!h0%b*!h1%Z*!h2%R*!h3%J*!h4%B*!h5%:*!h6%2*!h7p%**!h8`%"*!h9P%*!h:@%*!h;0% *!h< %*!h=%)!h>%)!h?%)!h@%)!hA%)!hB%)!hC%r'!f%r'!f%r'!fHHHHf.USHHs%!H@aH9sHH)HHlHH9uH[]HcWHcGHTHHЋ.1Ht tuHztrHuHfHk8HH91uHH+qH8H9vuHH8H9wHH9HOHHHtu11HuHyHHHtHuHAHHHHuH 8H9r5HHxHH<2HH9vPHtH%tP"HJATUSH@I@L9s{%MH+SHEHL9r[]A\AUATUSHHHHbHHbH(I3HEI$HEHHHDaHHtH/uHuHtH\H=%!H'#!H@aH9sHH)HLlHL9uH=yDH"!H@aH9sHH)HLlHL9uHP@ }I$HuLHDaH5`!H0:Hd1d)=&!tS&!HV"!HHtHH=#!t H=h[À=o&!tSd&!H=#!tH5&!H=l/H=#!tH=!!H?t H!!HHtH[ÐAVAUATUSHPH|$11HT HT HT HT ( @r1AAAA A A AHD$1HP[]A\A]A^USHHt$(HT$0HL$8LD$@LL$Ht7)D$P)L$`)T$p)$)$)$)$)$=udtTH(D$D$ 0H$HD$HD$ HD$HT$H޿0b0bJ5(H[]`uz tHx@1!1HHHd@H1,H1HSHH|$H|$Aÿ@5HcH[ATUSHIHHT$0HL$8LD$@LL$Ht7)D$P)L$`)T$p)$)$)$)$)$7L⾯@0b1QHt9D$D$ 0H$HD$HD$ HD$HT$H0bHھ@0b1dH%HHt u C.1'HdHdLcrdIH9rL9s8HPH`dRH¾͋@@1SHH=s^LHLHIsjLHLHxHHHH1HHIHH HdHH[AdH¾@@1-AdLʾ@@1HHH=HPHHHsbHPHHpHsNHPHL@Hs:HP HH@HwBHctHcHt1HLHAd@@1jHʾ!@-@1VAdH¾@@17H11*HZ@uHÿJ@HHu/H$HHH H4ׂCHHd$HHHÿe@SHuQHwE1D1Ht8HCSHHC= !HHHHC HC([ÿ@z@H=dusHD$H$H HD$H$HHD$H$HHD$H$HHD$H$HHÿ@RSHCXuCXHH{0[|@HH HD$|$ Ht$H uHÿ@SHՌ@HHt}HHt_x uH@H€uHڌ@H1H4tH@@1HH[ÿƌ@>ATUSH HA@1BËu=xbHD$Eu+HT$K}1urD$EH []A\HD$HI dH HHD$HT$ K}1tH@Mھ"@1@1 @gc@]H! dH" dLc dIH9rHPI9vH8HH dRH¾͋@@1JUSHdH%u)HvtHH=0w@1+@1H>USHHHt$(HT$0HL$8LD$@LL$Ht7)D$P)L$`)T$p)$)$)$)$)$D$D$ 0H$HD$HD$ HD$HT$H0bھ@0b11TSH1uH{01:uCX[ÿ@1ٍ@1USHHTHHH`HL@@L€tҿ@LtH@H$1VHH$fu{D$%H$=@t?eH$0@1;HHyuBHĨ[])8tH@1H$@1H@1IIt61DDHL9ru=v=wLЉSHH|$@6HLT$E1ۻ/I2H|$ DD$ AAJfD9u-AIAtED$ IRHuAAJfD9tEDھ@0b1H[1H[AWAVAUATUSHA%y ˀDc%y lE~4L|$MwLI%y AML9uD$DA։Å~2LcE1E1MtIcHD$HLH|$MAAA9uEt#IcHtDD)HcHD$HH|$D$ IcHt)Ht$H|$ D$ f;D$uA11f;D$tHĘ[]A\A]A^A_HfT#45T#T#DT#T# D u#ffT#Āu,<u(1$A4@1H$E1D11X@1HUSH(IHHj@HZ8LZ0LJ(LB HJHRHpHMtHl$H\$L$HAH([]HcHl$H\$L\$L $MIHHH1uH([]AVUSH`HH|$HcD$HH @HL$ H @H+R#HHًuK@1~3Hl$H@19~_@1rHͿ@1`D$HD$ƀ0~mHD$8Z@1[ŃqHD$@CHHD$HHT$@F1 HD$ƀl$=dtHD$H`HH\$Hǃ@dH<%HǠ}dH%PHL$HH@HcD$HHH@tHD$ǀHHT$Ƃ=dtH`HT@HD$ƀL0D$HD$HHD$(HD$L$98\Lt$I@HcD$HH @H+P#HIHA6@1nI@|=1dSHD$0~HD$L@1,HD$8~ #@1@1H`[]A^H\$HHD$ Hp8x./file0 \H@ZD$PHT$PF|$1*H|$XD$<HT$<F|$1|$HD$LD$" dH<%HǠRuHD$ Hp8xHT$(dH%D$=HD$T@1HD$H@1hھ|@@1@@1b@@Ҏ@@HtEHHuJHt,Ht3HtHS@]@1fHωHHHHHþ-@9@1aAVSH8H|$Ht$H$HL$LD$ LL$(HM HD$HHtuHtHT$-@@1H<$dH<%HǠuHT$̏@H|$dH%H8[A^H<$PdH<%HǠDuHT$@H|$lH<$dH<%HǠuHT$@H|$&\dH<%HǠ7H<$vuH$Hu0HD$ H D$(JHT$H|$H\$HHD$ H D$(HT$H|$H\$HH<$HD$ H D$(u HT$H|$wH\$}H\$;Lt$LQH4$L$(HHHHt$ HH|$H1!1@L Lt$LH\$H;L$(HHHt$ HH|$HH1H!H1LHH\$;Lt$LL$(HHzHt$ HHH|$H1!1LalHD$ H D$(u!HT$H|$:H\$f?H\$;Lt$LL$(HHHt$ HH|$H1!1LfLHT$ u@@1H$S@@1oH$S@ԏ@1ZH$S@@1EH$S@@10HJ#Ht19r(H9w)׉D81P@HHHI#H$J#`c>cI#@He~tK= ctBH'eu2=ct)HLuHI#c1HøHËc9}KUSHHcHt8LcLˉ)HcAH~H9uJ-cH[]F%y ȀHcH+HHkcLcTcL뒿@USHHHxHH9sH[]ÿ7@UHH@ @1xHHL$8LD$@LL$Ht7)D$P)L$`)T$p)$)$)$)$)$D$D$ 0H$HD$HD$ HD$HL$=HSHH$H$L$L$t@)$ )$0)$@)$P)$`)$p)$)$D$D$ 0H$HD$H$HD$HPATH=/usHD$ Hr/local/HD$(Hsbin:/usHL$0HD$8Hbin:/usrHD$@H/sbin:/uHD$HHsr/bin:/HD$PHsbin:/biHD$XfD$`n H|$bHL$HH|$ tuHt$ r@1THĠ[ÉHT$ T@c@1=cSH?@H$1ٺ@H|$$1HT$$@110HT$$@11H$1% !O1= ! !@H|$P11HL$PHT$$"@1ٺ6@H|$21HL$2HT$$P@1mD@H|$p1ٺV@H|$A1HL$pHT$Ad@11'ٺq@ H|$1HL$HT$$~@1ٺ@ H|$1RLD$pHL$$HT$@11Hİ[ÿ@bH$Ԑ@ސ@1@@1mHFH9GuHFH9GÅAUATUSHAH7@1EeIHI9t)t@1؃uܿ@1Au H[]A\A]ÿ@1H[]A\A]vUSHH|$H4$=!x3Hl$H$=%ctH;=!HHH[]VHH[]H@D$ HT$ K?1uHËt$ @1MAUATUSHHdH%H=ct~c={ct]HP~HkLkhLc8HrS`uHLC`tH1C`HTL뾀=cutHHs HBHHPAd@@1YH(H|$Ht$HT$dH<%HǠu?H|$twvVHD$Hu.HD$HL$ HdH%H(1HuMHD$HHL$HH|$u.HD$HL$HHD$HL$HHT$S@@1ySHH|$Ht$HT$=!Ht$ QHÅ=ct H|$ f|$,teI|$4HD$VH\$pHT$Ή3@HT$ȉC@1xs@1i1H[HcӃ!~-|$7u&D$.H\$$Ld$(HD$ @1(D$pLt$pLV1'k1Ҿ V 1@1D$OLl$d H9tDH)IHLHy0x@1HHx[]A\A]A^A_Ël$dD$nL$it$h@@@HI׉$DL$lDD$j@1=HD$P|$hHT$hHL$OLDl$nLT$hfAv1E1L1rHH@t@tftyAD@1E|$O@@1HcDMH9H)IHLHyDX@1M=ct DL4 @1( 9tHht'9uT$h`u |$ih@1@15DX@1=cDLELl$XL|$XH)IHLH=H9uLI9I)HLH}HL$jŃF$0@HcHqHL$8HHHHL LApLD$0@1LD$0Ic@HL$8HHHHDHHL$HDIUH AU(A@@1It$Ht$PAD$ =1E1HpLrHHttftnIt$H3Ht$PA$=1E1MtA;D$HD$P+ADl$nADG辨+AgHcHHHHDEHDH HpHt$P@&HcHHHHDEHDH4(Ht$PDl$nADGDȆ@XHD$P+ADl$nADG辠+AH@IDHpHt$P@ 0x@1HafD$P HcHHHHDEHDH(HfL$RHL$T@D$XD$YHt$PDl$nA DG-H@Dl$nA9DGAUATUSH(H|$Ht$HT$H $HD$Ld$H\$L,$H޿1@1@[贮誮1螭LcHc@;@1SH@@@18ٔ@@%@1@ܸf.AWAVAUATUSHI20b6@ӫH[]A\A]A^A_Lf̕@L Å4ݕ@Ly@LݮZa@L迮Å1@L訮T+H#E1A# tH= HDŽ$HDŽ$H$H˪dH%Hǀ`cE1A@dH=dU.襬@HHHH(HիFHŬD$ <HUH׋D$ HDŽ$&@DŽ$P1H 1H 1֪迪訪1蔪1HH$HvH$HܺH9H$#H$Hc=c=cEAA=cEAA Ac1ILjA9t)A1LXA9~IuLQ# c) c޵=c1HHI/H&H)HPH$HH謪H1HHHD)@HƄ$1H1ÅHt$ E1AعH$#HBH+##HH9T$@HH9ũ=ch= c֪Åjƿ|@1 DŽ$AHDɪ9u시$߉ھ@0b1CCED$ É谵+fLfĕ@LJÅ*ȉ@薪@脳1L@L@1_ȶ@1҅ Ӿ@x@@HDL$@1*HH@ucE1D9Ol@L裩_@L莩Lҕ@(@1踳=WcrLD$HHt$ @&KH|$?11虨$HD$x脩#HD$xt @NI1 cp@1H@I1F@b@|@ֲ=uc@αH@ı@躱k@谱@覱@蜱Ӗ@蒱@舱¾@@1謮@@1蛮Ȋ@ZЗ@P@F@H9:tHzHHHHI9usHUSHBHH?HHHՃH9IICLHL ED;Ts IN EFMI9|Ht`I@HH?HHI9~8DD9w-DIHD9vFLBLH?LHL H9|A []L HuIHBHH?HHL9uODBDAIN pAWAVAUATUSHIHH)H@HM4LoLgIHLSAN;9sR99rR{NMLHI9r!H9v H9wH9s1M8HA8IH9r9 ~{LH9HH)H@~mHMVHHLbIB LHIB HLHMuIAALH)HH1HHH[]A\A]A^A_ÉA8N{IvAWAVAUATUSH(HHt$HT$H_ H_cD$DgED$E1E1E1'յu1|$AED9uDU(AՀ=OcuD$D$DD1=1i-'D11DOAAB4c9tA9uډ%<cgAAED9uhHD$D =ct7De=cuPEtAD$Ll;}(HI9uHD$D H([]A\A]A^A_D$%B<cxIN,#L9tYLHHH??)HcHLHI@w;LHH r9ptiHHBHI9uMII)I;Lc@LHM9tA4$ID$AT$9rPHȉPHHP9r0IM9uI9tHII9t192trHHHII9u|LHPHps_strings missing lookup_connect_response_out: unknown requestcover_mmap invoked on an already mmapped cover_t objectbad checksum in test #%u, want: %hx, got: %hx bad result of STORE_BY_BITMASK(le16, 0x1234, 0, 16): %x %x %x %x %x %x bad result of STORE_BY_BITMASK(be16, 0x4567, 13, 3): %x %x %x %x %x %x both fault injection and rerun are enabled for the same callcoverage filter was enabled but bitmap initialization failedvsnprintf: string doesn't fit into bufferifconfig %s inet %s netmask 255.255.255.0cover enable write trace failed, mode=%dparse_usb_descriptor: found interface #%u (%d, %d) at %p parse_usb_descriptor: found endpoint #%u at %p syz_usb_connect: add_usb_index failed syz_usb_connect: vhci_setport failed withsyz_usb_connect: vhci_usb_attach failed with %d syz_usb_connect: vhci_usb_attach success syz_usb_connect: received non-control transfer syz_usb_connect: bReqType: 0x%x (%s), bReq: 0x%x, wVal: 0x%x, wIdx: 0x%x, wLen: %d lookup_connect_response_in: unknown requestsyz_usb_connect: unknown control IN request syz_usb_connect: unknown control OUT request syz_usb_connect: writing %d bytes syz_usb_connect: usb_raw_ep0_read/write failed with %d syz_usb_connect: read %d bytes syz_usb_connect: vhci_usb_recv failed with %d syz_usb_connect: add_usb_index success syz_usb_connect: device data: syz_usb_connect: vhci_open failedbad thread state in completionrunning=%d completed=%d flag_threaded=%d current=%d th #%2d: created=%d executing=%d ready=%d done=%d call_index=%d res=%lld reserrno=%d command has bad number of argumentsusing non-main thread in non-thread mode[%llums] exec opts: procid=%llu threaded=%d cover=%d comps=%d dedup=%d signal=%d timeouts=%llu/%llu/%llu prog=%llu filter=%d syscall=%llu, program=%llu, scale=%llunetbsd amd64 6b3561a0992840cbae76a19c7276e9e2f08a8d4b 0b33604d8e2793b82ec89abecf82d92b82e3d410setup features: unknown featureleak checking is not implementedbitmap is not found, coverage filter disabled failed to mmap coverage filter bitmapbad coverage filter bitmap sizeioctl$HDAUDIO_FGRP_WIDGET_INFOioctl$WSDISPLAYIO_GETACTIVESCREENioctl$WSKBDIO_GETDEFAULTKEYREPEATioctl$WSKBDIO_SETDEFAULTKEYREPEATioctl$_O_WSDISPLAYIO_SETKEYBOARD/dev/vhci%lluSYZFAIL: %s (errno %d: %s) pos=%p region=[%p:%p]output overflowpos=%p: [%p:%p)input command overflows inputresult=%lldcommand refers to bad resultfailed to chmod /dev/faultclock_gettime failedcover mmap failedsetsid failedevent already setcontrol pipe write failedfailed to open /dev/dev/%spath=%sfailed to chmod vhci/dev/kcovopen of /dev/kcov failedfrom=%d, to=%dfailed to dup cover fdioctl remote attach failedioctl init trace write failedSIGSEGV on %p, skipping SIGSEGV on %p, exiting (errno %d) pthread_mutex_init failedpthread_cond_init failedrmdir(%s) failedopendir(%s) failed..%s/%slstat(%s) failedunlink(%s) failed>#%d [%llums] -> %s(, failed to open /dev/faultnth=%dFAULT_IOC_ENABLE failedthr=%d, cov=%utoo much coverFAULT_IOC_GETINFO failedFAULT_IOC_DISABLE failed#%d [%llums] <- %s=0x%llx errno=%d cover=%u fault=%d rerun=%dformat=%llubad binary format in swapsize=%llubad big-endian int sizeoff=%llu, len=%llubitmask for string formatcopyin: bad argument sizebad strdec size%020llubad strhex size0x%016llxbad stroct size%023llounknown binary formatmmap of output file failedvsnprintf failedstring='%s'command=%s: %dcommand failedcommand '%s': %d tun_id=%dtun_id out of range/dev/tap%difconfig %s destroyifconfig %s createdevice=%stun: can't open devicedup2(tunfd, kTunFd) failedaa:aa:aa:aa:aa:aaifconfig %s link %s172.20.%d.170aa:aa:aa:aa:aa:bb172.20.%d.187arp -s %s %sfe80::%02xaaifconfig %s inet6 %sfe80::%02xbbndp -s %s%%%s %s%02x copyout: bad argument sizetun: read failedextracted seq: %08x extracted ack: %08x INOUTsyz_usb_connect: configured syz_usb_connect: dev: %p syz_usb_connect: dev is null 2022/02/10 10:35:54 executed programs: 6 2022/02/10 10:35:59 executed programs: 12 failed to close kOutFdtype=%llxinvalid kcov comp typencomps=%utoo many comparisonsready=%d done=%d executing=%dindex=%lldresult overflows kMaxCommandsnegative runningbag inet checksum sizesize=%lldbad checksum const chunk sizekind=%llubad checksum chunk kindbad checksum kindtype=%llubad argument typecall_num=%lluinvalid syscall numbersyscall=%sexecuting disabled syscallsyz_usbsyz_80./file0 ./file0