failed to mmap coverage filter bitmapbad coverage filter bitmap sizecompat_50_____semctl13$GETNCNTcompat_50_____semctl13$GETZCNTcompat_50_____semctl13$IPC_RMIDcompat_50_____semctl13$IPC_SETcompat_50_____semctl13$IPC_STATcompat_50___shmctl13$SHM_UNLOCKioctl$HDAUDIO_FGRP_WIDGET_INFOioctl$WSDISPLAYIO_GETACTIVESCREENioctl$WSKBDIO_GETDEFAULTKEYREPEATioctl$WSKBDIO_SETDEFAULTKEYREPEATioctl$_O_WSDISPLAYIO_SETKEYBOARD/dev/vhci%lluSYZFAIL: %s (errno %d: %s) pos=%p region=[%p:%p]output overflowpos=%p: [%p:%p)input command overflows inputresult=%lldcommand refers to bad resultfailed to chmod /dev/faultclock_gettime failedcover mmap failedsetsid failedevent already setcontrol pipe write failedfailed to open /dev/dev/%spath=%sfailed to chmod vhci/dev/kcovopen of /dev/kcov failedfrom=%d, to=%dfailed to dup cover fdioctl remote attach failedioctl init trace write failedSIGSEGV on %p, skipping SIGSEGV on %p, exiting (errno %d) pthread_mutex_init failedpthread_cond_init failedrmdir(%s) failedopendir(%s) failed..%s/%slstat(%s) failedunlink(%s) failed>#%d [%llums] -> %s(, failed to open /dev/faultnth=%dFAULT_IOC_ENABLE failedthr=%d, cov=%utoo much coverFAULT_IOC_GETINFO failedFAULT_IOC_DISABLE failed#%d [%llums] <- %s=0x%llx errno=%d cover=%u fault=%d rerun=%dformat=%llubad binary format in swapsize=%llubad big-endian int sizeoff=%llu, len=%llubitmask for string formatcopyin: bad argument sizebad strdec size%020llubad strhex size0x%016llxbad stroct size%023llounknown binary formatmmap of output file failedvsnprintf failedstring='%s'command=%s: %dcommand failedcommand '%s': %d tun_id=%dtun_id out of range/dev/tap%difconfig %s destroyifconfig %s createdevice=%stun: can't open devicedup2(tunfd, kTunFd) failedaa:aa:aa:aa:aa:aaifconfig %s link %s172.20.%d.170aa:aa:aa:aa:aa:bb172.20.%d.187arp -s %s %sfe80::%02xaaifconfig %s inet6 %sfe80::%02xbbndp -s %s%%%s %s%02x copyout: bad argument sizetun: read failedextracted seq: %08x extracted ack: %08x INOUTsyz_usb_connect: configured syz_usb_connect: dev: %p syz_usb_connect: dev is null failed to close kOutFdtype=%llxinvalid kcov comp typencomps=%utoo many comparisonsready=%d done=%d executing=%dindex=%lldresult overflows kMaxCommandsnegative runningbag inet checksum sizesize=%lldbad checksum const chunk sizekind=%llubad checksum chunk kindbad checksum kindtype=%llubad argument typecall_num=%lluinvalid syscall numbersyscall=%sexecuting disabled syscallsyz_usbsyz_80211_inject_frameargs=%llubad argument binary formatbad argument bitfieldbad result argument formatout of opened kcov threadspthread_create failedout of threadsbad thread state in schedule./%dfailed to mkdircontrol pipe read failedmagic=0x%llxbad execute request magicsize=0x%llxbad execute prog sizebad timeoutsneed_prog: no programclone failedfailed to chdirspawned worker pid %d killing hanging pid %d child failedSKIPFAILOKversionsetupfeature=%sleaksetup_kcsan_filterlistKCSAN is not implementedtest=== RUN %s --- %-4s %s execunknown commandmmap of data segment failedmmap of input file failedfailed to mkdtempfailed to chmoddup2(0, kInPipeFd) faileddup2(1, kOutPipeFd) faileddup2(2, 1) faileddup2(2, 0) failedread=%dhandshake read failedbad handshake magicsyz-cover-bitmapfaied to stat coverage filterwant=%p, got=%psandbox fork failedspawned loop pid %d loop exited with status %d 08:22:57 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0, 0x0) preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2876, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) r2 = compat_30_socket(0x6, 0x4, 0x20) mmap(&(0x7f00006e7000/0x4000)=nil, 0x4000, 0x2, 0x10, r2, 0x0, 0x92) write(r1, &(0x7f0000004200)='t', 0x1c000) r3 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x7, 0x1, 0x2, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x20, 0x1, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x81, 0x6, 0x20}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x4, 0x6, 0x20, 0x8, 0x4}, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0x6, 0x9}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x243f}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40f}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "869dc03a9087598168848f44948a4d76302ac9c51c361eff9ff36535010ef604c41c63920c5d27c8e4fafb2ac49741aaa30806e1e9f4646efb9c919e39c3be2426ac01874ebf8335e77fd2702153828ca76e80f76af8c4637106e9df20b6977d71048bec39b8dd29abec0cd63934a2d34077054eee4123"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40b}}]}) ioctl$WSDISPLAYIO_LDFONT(r3, 0x8030574d, &(0x7f0000000440)={&(0x7f0000000300)="b9ce8b1241d441813df58550fc3f", 0x10000, 0x3f, 0x1, 0x6, 0x9, 0x8, 0x11, 0x2, &(0x7f0000000340)="eddb9055125c55d193d400480513b5cd8c3b8183b142baccacca574caa7b9ce660568a733bc7bff20637d014b06f6ed7433dc2bbe2da16eb38c9e0cf8df5a4981ae26f4de94f7297b39cd1e27d1fd95811d9e817ba27291d8537c3c8bae79a3c8b2a5e25ee5a1f7193406b61d2c4e06ec92b7e32d4ee1f39969ffa0512817755f477a15ff035cb75ed0382f3a39b7562e61f620c699f314434701ce39bfdb4fbc8c4550ab1721b22c9e04fd366ab6c618b32393a74836ab8af7daeefedf7cb85c6ac8519e8c1eaf39a54f7a1a6643bb5852e0551846d85"}) openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0, 0x0) (async) preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2876, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) (async) compat_30_socket(0x6, 0x4, 0x20) (async) mmap(&(0x7f00006e7000/0x4000)=nil, 0x4000, 0x2, 0x10, r2, 0x0, 0x92) (async) write(r1, &(0x7f0000004200)='t', 0x1c000) (async) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x7, 0x1, 0x2, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x20, 0x1, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x81, 0x6, 0x20}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x4, 0x6, 0x20, 0x8, 0x4}, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0x6, 0x9}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x243f}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40f}}, {0x79, &(0x7f00000001c0)=@string={0x79, 0x3, "869dc03a9087598168848f44948a4d76302ac9c51c361eff9ff36535010ef604c41c63920c5d27c8e4fafb2ac49741aaa30806e1e9f4646efb9c919e39c3be2426ac01874ebf8335e77fd2702153828ca76e80f76af8c4637106e9df20b6977d71048bec39b8dd29abec0cd63934a2d34077054eee4123"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40b}}]}) (async) ioctl$WSDISPLAYIO_LDFONT(r3, 0x8030574d, &(0x7f0000000440)={&(0x7f0000000300)="b9ce8b1241d441813df58550fc3f", 0x10000, 0x3f, 0x1, 0x6, 0x9, 0x8, 0x11, 0x2, &(0x7f0000000340)="eddb9055125c55d193d400480513b5cd8c3b8183b142baccacca574caa7b9ce660568a733bc7bff20637d014b06f6ed7433dc2bbe2da16eb38c9e0cf8df5a4981ae26f4de94f7297b39cd1e27d1fd95811d9e817ba27291d8537c3c8bae79a3c8b2a5e25ee5a1f7193406b61d2c4e06ec92b7e32d4ee1f39969ffa0512817755f477a15ff035cb75ed0382f3a39b7562e61f620c699f314434701ce39bfdb4fbc8c4550ab1721b22c9e04fd366ab6c618b32393a74836ab8af7daeefedf7cb85c6ac8519e8c1eaf39a54f7a1a6643bb5852e0551846d85"}) (async) 08:22:57 executing program 2: __setitimer50(0x3, &(0x7f0000000140)={{0x1000, 0x3ff}, {0x2, 0x5}}, &(0x7f0000000180)) r0 = paccept(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x20000000) lseek(r0, 0x0, 0x9, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r1, 0x8010427a, &(0x7f0000000000)) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000080)="53ffe68d5df54430ed68f32263ac1d8ab9d75dffcc3fea1896e65fbcc4ea988cf8e2cd5be146dc93bc13fa0e363332a0710a8246c7c8954f739f27f5d10851524eeb8e9911f3850bbf912184e3911e98c47397ef89500486e405899558777b3706dc7f8b53700729251b5b1f9a7f569dfdf06cc16242c30035d45d289e40d966c44fe0bdcbfe84d88cfbc0579a3912578eaadcc4f90e4fbbebe352c1683867d42f04", 0xa2) 08:22:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r2, 0x8010427a, &(0x7f0000000000)) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 08:22:57 executing program 0: setreuid(0x0, 0xee01) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1000000, 0x7) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = getuid() fchown(r1, r2, 0x0) setreuid(0xee00, r2) fchown(r0, r2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="6202e54fccfaaca66bbbc6dd06f4abc1048165ade53919945bc049340e7077f59d4db2d71b5640a2"], 0x1) r3 = socket(0x2, 0x1, 0x0) bind(r3, &(0x7f0000000000), 0x10) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r4, 0x8010427a, &(0x7f0000000000)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, r4, 0x0, 0x8) 08:22:57 executing program 3: compat_50_mknod(&(0x7f00000000c0)='./file0\x00', 0x2001, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fktrace(r1, 0x0, 0x4, r2) ktrace(&(0x7f0000000080)='./file0\x00', 0x2, 0x8, r2) ioctl$FIOASYNC(r0, 0x80044279, &(0x7f0000000000)) nobodygetpwnam_r("nobody") failedfailed to setgroupsfailed to setgidfailed to setuidunknown sandbox type./syzkaller.XXXXXXtest_copyintest_csum_inettest_csum_inet_acctest_coverage_filter____semctl50$GETALL____semctl50$GETNCNT____semctl50$GETPID____semctl50$GETVAL____semctl50$GETZCNT____semctl50$IPC_RMID____semctl50$IPC_SET____semctl50$IPC_STAT____semctl50$SETALL____semctl50$SETVAL__clock_getres50__clock_gettime50__clock_settime50__clone__fhopen40__fhstat50__fhstatvfs19[ 60.7576354] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 657 command syz-executor.1) [ 60.7676412] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 657 command syz-executor.1) 08:22:57 executing program 0: setreuid(0x0, 0xee01) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1000000, 0x7) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = getuid() fchown(r1, r2, 0x0) setreuid(0xee00, r2) fchown(r0, r2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="6202e54fccfaaca66bbbc6dd06f4abc1048165ade53919945bc049340e7077f59d4db2d71b5640a2"], 0x1) r3 = socket(0x2, 0x1, 0x0) bind(r3, &(0x7f0000000000), 0x10) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r4, 0x8010427a, &(0x7f0000000000)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, r4, 0x0, 0x8) setreuid(0x0, 0xee01) (async) open(&(0x7f0000000080)='./file0\x00', 0x1000000, 0x7) (async) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) getuid() (async) fchown(r1, r2, 0x0) (async) setreuid(0xee00, r2) (async) fchown(r0, r2, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="6202e54fccfaaca66bbbc6dd06f4abc1048165ade53919945bc049340e7077f59d4db2d71b5640a2"], 0x1) (async) socket(0x2, 0x1, 0x0) (async) bind(r3, &(0x7f0000000000), 0x10) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) ioctl$FIOASYNC(r4, 0x8010427a, &(0x7f0000000000)) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, r4, 0x0, 0x8) (async) t@1D$OA͒@L|$dA I9tDI)ILLHy0x@1HHx[]A\A]A^A_Dd$dED$nL$it$h@В@IH։$DL$lDD$j@1/|$hHT$hHL$OHt$D|$nLT$hfAv1E1H1rHH@t@tftyAD@1E |$O@Ԓ@1HcEII9I)ILLHyDX@1F=ct DH7 @1! 9tAHhAt'9uT$h`u |$ih@1@1=DX@1=cDHEL|$PLl$PAI)ILLH:I9uII9I)ILLrH L$jŃD$к@HcHqHL$8HHHHL LApLD$0@1LD$0Ic@HL$8HHHHDHHL$ HDI$H AT$(A@@1HD$Hp@ =1E1HnHrHHttfrkHD$HpH HD$=_1E1H|$Ht ;GD|$nADG_AYMcLHLIDIH Hp@0McLHLIDIH4(D|$nADGDȆ@`ADG_AH@HDHp@ 0x@1HfD$Z McLHLIDIH(HL$\HfL$`@D$bD$cD|$nA DGHt$ZCH@D|$nA9DG'AUATUSH(H|$Ht$HT$H $HD$Ld$H\$L,$H޿@1ZHtSЇ@1I=ct DH:Ņx=LHLHÉHH([]A\A]ÿ @1Hݿ@@=c%cHHc@t6cHH~cHHmcH@=^c@uTcLct :ct/cucH=cu1=cu=cu+x)Hÿ`տ@ɿ)@ SHH?H1HHt$Ht`Ht:H{Hu!rH{[hH{H{HCHCH{[H{H{HCHCH{[Hc{H{HcCHCH{[H@@J@1HWHt\HHt ctDHH4HHcHccHH9rH9vHWH9rH9wHtHtHH9t1HFH9GuHFH9GÐHH9u{À=ZctAWAVAUATUSHXHHH)HHHHHG HD$(Lg@HHHHLiLS L M9LYM9]LL{LsLKHHHBHCHBHCHBHCLLzLrLJLC LMHt$MI MiM9uHLutH L9uHHXuL9v?IyIqIALMQLRMQLRMQLRMQLHzHrHBLHHLLH)HLHLLHR+I I}H|$0IuHt$8IMHL$@IEHD$HHIUHSIUHSIUHSIULH)HHH<$Ht$HL$HD$1H(H HX[]A\A]A^A_M9LL{LsLSHC HHC(HCHC0HCHC8HCLC L{(Ls0LS8VHH|$(M9LH|$(HAHHAHCHAHCHAHCLALyLqLILC LHM9uYLHptQHAHHAHCHAHCHAHCLALyLqLQLC LH|$('uHHHBHCHBHCHBHCLLzLrLRLC CHC HHC(HCHC0HCHC8HCLC L{(Ls0LK8IAWAVAUATUSHH@t71H9=p#ÍH@E1䀽L A D~1wH1mI1cIĀ=cDTLL`I]IN4;L9h.L9t\LHHH??)HcHLH.IIHH#I9tH*#H I9uLHt"H)HŅt.HMl(1Hu HDH I9uA,$?0#60#HcH[]A\A]A^A_À=ctHPLHހ=$!t+변=ct/DH@LH"3a@k@1=ec=Qc=Hc=3cHn#Hn#USH zp1i1bH1XH1NHH޿ c=#!u@.H%n#H.#.#HcH[]À=}c+Ð)AWAVAUATUSHHHHoHlDc`H@LkhELKDLEH@Hu?Hpƃ*cP!cHH[]A\A]A^A_HHtHHƂcHcHH=HPHH8mHHPHHhHHHPHHxHssHP HHpHD$8HT$8,`HƅcHD$8HcHH=IAdH¾@Ì@1)Ad@Ì@1H꾞@@1DLDLVHn[`HCEDھ@@1D D!ci,#8@0b1Xȿct$,LD{tHDsXHHkHDKDL$(HKt$,t$Ll$D|$D4$DL$(DCpDp@0b1AHÈA mǓ@1AWAVAUATUSH0HgcHXc1HDŽ$d=,ct1=c=c =ctHuj#HHDŽ$$DŽ$,HD$hHD$HD$ D$8H$H=HPH$H0Ht$H H HHAH H HHл@Ht$`H"H\$H HH@H;L$ vHcHL$ Ht$H HL@@Lu(HcH H H HH\$H9HCHL$@Lu*HcH4HHH)HHt$H9HCHL$H@HPH$HXH\$0HLpL$H@HD$H H$P 1HH|$IH$PHD$HHL$H$H$H$H$H$HH$H$HHH$H?HEL$H9tiHI IVH$IHUH H IFH$IVH H$xH|$ tHD$HDŽPHH uD$8D$<D$8$$D$X$(D$G$,D$@`cE1Lt$HII`cI}=ct#=|c=pc=^cu~AD$E<$AƄ$H}LmhLL'='cL7A$LAHňA KX@1ED}ƅA$Pi I$`gHPrVLmhwH$0iH$0׽d!8#_2LL=@H$0H$肾uH$0QLt$(Lt$HIcHi8cHD$(HhcHIcH@HHHHD$PH`cK`L$xH趾L$x L½L$\L萾L$\  L%e#LHD$0HǃƃD$<D$D$HD$(H0\$X`c\$Gdc\$@hcH\$PHD$`HPHHcHHHuHcc$(IHDŽ$$DŽ$,H$H= HPH$HHL$HHgH|$H|$H|$ d Ht$H HHл@HkD$PH@@@1HkD$PHػ@HcHc=[ 61.3876342] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 657 command syz-executor.1) c>HHLݻIcHi cHt$(HcH<+HHIHHL4`cLd$pD|$|II[ 61.4076435] uhub1: device problem, disabling port 1