Extracting prog: 1m0.565179876s
Minimizing prog: 15m8.313814911s
Simplifying prog options: 3m20.10046371s
Extracting C: 1m40.840582987s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timerfd_create-ioctl$FIGETBSZ-open$dir-renameat-socket$packet-socket$inet6-syz_clone-syz_open_procfs-getsockname$inet6-ioctl$VT_WAITACTIVE-ioctl$XFS_IOC_FSGROWFSLOG
detailed listing:
executing program 0:
r0 = timerfd_create(0x0, 0x80000)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r1 = open$dir(0x0, 0x0, 0x8)
renameat(0xffffffffffffffff, 0x0, r1, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet6(0xa, 0x1, 0x6)
r3 = syz_clone(0x8200, &(0x7f0000000140)="180506", 0x3, 0x0, 0x0, 0x0)
syz_open_procfs(r3, 0x0)
getsockname$inet6(r2, 0x0, 0x0)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5450)
ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, 0x0)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timerfd_create-ioctl$FIGETBSZ-open$dir-renameat-socket$packet-socket$inet6-syz_clone-syz_open_procfs-getsockname$inet6-ioctl$VT_WAITACTIVE-ioctl$XFS_IOC_FSGROWFSLOG
detailed listing:
executing program 0:
r0 = timerfd_create(0x0, 0x80000)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r1 = open$dir(0x0, 0x0, 0x8)
renameat(0xffffffffffffffff, 0x0, r1, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet6(0xa, 0x1, 0x6)
r3 = syz_clone(0x8200, &(0x7f0000000140)="180506", 0x3, 0x0, 0x0, 0x0)
syz_open_procfs(r3, 0x0)
getsockname$inet6(r2, 0x0, 0x0)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5450)
ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, 0x0)

program crashed: WARNING: BUG on pkg/sentry/platform/systrap/subprocess.go:LINE
single: successfully extracted reproducer
found reproducer with 11 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timerfd_create-ioctl$FIGETBSZ-open$dir-renameat-socket$packet-socket$inet6-syz_clone-syz_open_procfs-getsockname$inet6-ioctl$VT_WAITACTIVE
detailed listing:
executing program 0:
timerfd_create(0x0, 0x80000)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r0 = open$dir(0x0, 0x0, 0x8)
renameat(0xffffffffffffffff, 0x0, r0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6(0xa, 0x1, 0x6)
r2 = syz_clone(0x8200, &(0x7f0000000140)="180506", 0x3, 0x0, 0x0, 0x0)
syz_open_procfs(r2, 0x0)
getsockname$inet6(r1, 0x0, 0x0)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5450)

program crashed: WARNING: BUG on pkg/sentry/platform/systrap/subprocess.go:LINE
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timerfd_create-ioctl$FIGETBSZ-open$dir-renameat-socket$packet-socket$inet6-syz_clone-syz_open_procfs-getsockname$inet6
detailed listing:
executing program 0:
timerfd_create(0x0, 0x80000)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r0 = open$dir(0x0, 0x0, 0x8)
renameat(0xffffffffffffffff, 0x0, r0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6(0xa, 0x1, 0x6)
r2 = syz_clone(0x8200, &(0x7f0000000140)="180506", 0x3, 0x0, 0x0, 0x0)
syz_open_procfs(r2, 0x0)
getsockname$inet6(r1, 0x0, 0x0)

program crashed: WARNING: BUG on pkg/sentry/platform/systrap/subprocess.go:LINE
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timerfd_create-ioctl$FIGETBSZ-open$dir-renameat-socket$packet-socket$inet6-syz_clone-syz_open_procfs
detailed listing:
executing program 0:
timerfd_create(0x0, 0x80000)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r0 = open$dir(0x0, 0x0, 0x8)
renameat(0xffffffffffffffff, 0x0, r0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet6(0xa, 0x1, 0x6)
r1 = syz_clone(0x8200, &(0x7f0000000140)="180506", 0x3, 0x0, 0x0, 0x0)
syz_open_procfs(r1, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timerfd_create-ioctl$FIGETBSZ-open$dir-renameat-socket$packet-socket$inet6-syz_clone-getsockname$inet6
detailed listing:
executing program 0:
timerfd_create(0x0, 0x80000)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r0 = open$dir(0x0, 0x0, 0x8)
renameat(0xffffffffffffffff, 0x0, r0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6(0xa, 0x1, 0x6)
syz_clone(0x8200, &(0x7f0000000140)="180506", 0x3, 0x0, 0x0, 0x0)
getsockname$inet6(r1, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timerfd_create-ioctl$FIGETBSZ-open$dir-renameat-socket$packet-socket$inet6-syz_open_procfs-getsockname$inet6
detailed listing:
executing program 0:
timerfd_create(0x0, 0x80000)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r0 = open$dir(0x0, 0x0, 0x8)
renameat(0xffffffffffffffff, 0x0, r0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6(0xa, 0x1, 0x6)
syz_open_procfs(0x0, 0x0)
getsockname$inet6(r1, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timerfd_create-ioctl$FIGETBSZ-open$dir-renameat-socket$packet-syz_clone-syz_open_procfs-getsockname$inet6
detailed listing:
executing program 0:
timerfd_create(0x0, 0x80000)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r0 = open$dir(0x0, 0x0, 0x8)
renameat(0xffffffffffffffff, 0x0, r0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = syz_clone(0x8200, &(0x7f0000000140)="180506", 0x3, 0x0, 0x0, 0x0)
syz_open_procfs(r1, 0x0)
getsockname$inet6(0xffffffffffffffff, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timerfd_create-ioctl$FIGETBSZ-open$dir-renameat-socket$inet6-syz_clone-syz_open_procfs-getsockname$inet6
detailed listing:
executing program 0:
timerfd_create(0x0, 0x80000)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r0 = open$dir(0x0, 0x0, 0x8)
renameat(0xffffffffffffffff, 0x0, r0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x6)
r2 = syz_clone(0x8200, &(0x7f0000000140)="180506", 0x3, 0x0, 0x0, 0x0)
syz_open_procfs(r2, 0x0)
getsockname$inet6(r1, 0x0, 0x0)

program crashed: WARNING: BUG on pkg/sentry/platform/systrap/subprocess.go:LINE
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timerfd_create-ioctl$FIGETBSZ-open$dir-socket$inet6-syz_clone-syz_open_procfs-getsockname$inet6
detailed listing:
executing program 0:
timerfd_create(0x0, 0x80000)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
open$dir(0x0, 0x0, 0x8)
r0 = socket$inet6(0xa, 0x1, 0x6)
r1 = syz_clone(0x8200, &(0x7f0000000140)="180506", 0x3, 0x0, 0x0, 0x0)
syz_open_procfs(r1, 0x0)
getsockname$inet6(r0, 0x0, 0x0)

program crashed: WARNING: BUG on pkg/sentry/platform/systrap/subprocess.go:LINE
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timerfd_create-ioctl$FIGETBSZ-socket$inet6-syz_clone-syz_open_procfs-getsockname$inet6
detailed listing:
executing program 0:
timerfd_create(0x0, 0x80000)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x6)
r1 = syz_clone(0x8200, &(0x7f0000000140)="180506", 0x3, 0x0, 0x0, 0x0)
syz_open_procfs(r1, 0x0)
getsockname$inet6(r0, 0x0, 0x0)

program crashed: WARNING: BUG on pkg/sentry/platform/systrap/subprocess.go:LINE
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timerfd_create-socket$inet6-syz_clone-syz_open_procfs-getsockname$inet6
detailed listing:
executing program 0:
timerfd_create(0x0, 0x80000)
r0 = socket$inet6(0xa, 0x1, 0x6)
r1 = syz_clone(0x8200, &(0x7f0000000140)="180506", 0x3, 0x0, 0x0, 0x0)
syz_open_procfs(r1, 0x0)
getsockname$inet6(r0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FIGETBSZ-socket$inet6-syz_clone-syz_open_procfs-getsockname$inet6
detailed listing:
executing program 0:
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x6)
r1 = syz_clone(0x8200, &(0x7f0000000140)="180506", 0x3, 0x0, 0x0, 0x0)
syz_open_procfs(r1, 0x0)
getsockname$inet6(r0, 0x0, 0x0)

program crashed: WARNING: BUG on pkg/sentry/platform/systrap/subprocess.go:LINE
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FIGETBSZ-socket$inet6-syz_clone-syz_open_procfs-getsockname$inet6
detailed listing:
executing program 0:
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x6)
r1 = syz_clone(0x8200, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r1, 0x0)
getsockname$inet6(r0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FIGETBSZ-socket$inet6-syz_clone-syz_open_procfs-getsockname$inet6
detailed listing:
executing program 0:
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x6)
r1 = syz_clone(0x8200, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r1, 0x0)
getsockname$inet6(r0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FIGETBSZ-socket$inet6-syz_clone-syz_open_procfs-getsockname$inet6
program did not crash
simplifying guilty program options
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FIGETBSZ-socket$inet6-syz_clone-syz_open_procfs-getsockname$inet6
detailed listing:
executing program 0:
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x6)
r1 = syz_clone(0x8200, &(0x7f0000000140)="180506", 0x3, 0x0, 0x0, 0x0)
syz_open_procfs(r1, 0x0)
getsockname$inet6(r0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FIGETBSZ-socket$inet6-syz_clone-syz_open_procfs-getsockname$inet6
detailed listing:
executing program 0:
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x6)
r1 = syz_clone(0x8200, &(0x7f0000000140)="180506", 0x3, 0x0, 0x0, 0x0)
syz_open_procfs(r1, 0x0)
getsockname$inet6(r0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FIGETBSZ-socket$inet6-syz_clone-syz_open_procfs-getsockname$inet6
detailed listing:
executing program 0:
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x6)
r1 = syz_clone(0x8200, &(0x7f0000000140)="180506", 0x3, 0x0, 0x0, 0x0)
syz_open_procfs(r1, 0x0)
getsockname$inet6(r0, 0x0, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FIGETBSZ-socket$inet6-syz_clone-syz_open_procfs-getsockname$inet6
detailed listing:
executing program 0:
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x6)
r1 = syz_clone(0x8200, &(0x7f0000000140)="180506", 0x3, 0x0, 0x0, 0x0)
syz_open_procfs(r1, 0x0)
getsockname$inet6(r0, 0x0, 0x0)

program crashed: WARNING: BUG on pkg/sentry/platform/systrap/subprocess.go:LINE
validation run: crashed=true
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FIGETBSZ-socket$inet6-syz_clone-syz_open_procfs-getsockname$inet6
detailed listing:
executing program 0:
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x6)
r1 = syz_clone(0x8200, &(0x7f0000000140)="180506", 0x3, 0x0, 0x0, 0x0)
syz_open_procfs(r1, 0x0)
getsockname$inet6(r0, 0x0, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FIGETBSZ-socket$inet6-syz_clone-syz_open_procfs-getsockname$inet6
detailed listing:
executing program 0:
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x6)
r1 = syz_clone(0x8200, &(0x7f0000000140)="180506", 0x3, 0x0, 0x0, 0x0)
syz_open_procfs(r1, 0x0)
getsockname$inet6(r0, 0x0, 0x0)

program crashed: WARNING: BUG on pkg/sentry/platform/systrap/subprocess.go:LINE
validation run: crashed=true
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FIGETBSZ-socket$inet6-syz_clone-syz_open_procfs-getsockname$inet6
detailed listing:
executing program 0:
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x6)
r1 = syz_clone(0x8200, &(0x7f0000000140)="180506", 0x3, 0x0, 0x0, 0x0)
syz_open_procfs(r1, 0x0)
getsockname$inet6(r0, 0x0, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FIGETBSZ-socket$inet6-syz_clone-syz_open_procfs-getsockname$inet6
detailed listing:
executing program 0:
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x6)
r1 = syz_clone(0x8200, &(0x7f0000000140)="180506", 0x3, 0x0, 0x0, 0x0)
syz_open_procfs(r1, 0x0)
getsockname$inet6(r0, 0x0, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$FIGETBSZ-socket$inet6-syz_clone-syz_open_procfs-getsockname$inet6
detailed listing:
executing program 0:
ioctl$FIGETBSZ(0xffffffffffffffff, 0x8901, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x6)
r1 = syz_clone(0x8200, &(0x7f0000000140)="180506", 0x3, 0x0, 0x0, 0x0)
syz_open_procfs(r1, 0x0)
getsockname$inet6(r0, 0x0, 0x0)

program crashed: WARNING: BUG on pkg/sentry/platform/systrap/subprocess.go:LINE
validation run: crashed=true
reproducing took 29m15.536902332s
repro crashed as (corrupted=false):
W0505 07:10:59.039718       1 log.go:359] WARNING: BUG on pkg/sentry/platform/systrap/subprocess.go:850

systrap stub thread failure: sysmsg->state was invalid during sys-handler (failed on line 359; sysmsg.Msg{msg: 7fce4009f000 state 2 err bad0001 line 359 debug 0 app stack 7ea9a1a68608 context 7fce400da000 ThreadID 1})
:
goroutine 1013 [running]:
gvisor.dev/gvisor/pkg/log.Stacks(0x1)
	pkg/log/log.go:319 +0x76
gvisor.dev/gvisor/pkg/log.TracebackAll({0xc00027c360, 0x119}, {0x0, 0x0, 0x0})
	pkg/log/log.go:358 +0x45
gvisor.dev/gvisor/pkg/log.reportBug(0x3, {0xc0005c4000, 0xd9}, {0x0, 0x0, 0x0})
	pkg/log/bug.go:56 +0x7c5
gvisor.dev/gvisor/pkg/log.reportBugErr(0x2, {0x2202fc0, 0xc000f3c2b8})
	pkg/log/bug.go:37 +0x5b
gvisor.dev/gvisor/pkg/log.BugTraceback(...)
	pkg/log/bug.go:126
gvisor.dev/gvisor/pkg/sentry/platform/systrap.(*subprocess).switchToApp(0xc000cfb340, 0xc00087c6e0, 0xc0010485a0)
	pkg/sentry/platform/systrap/subprocess.go:850 +0xa76
gvisor.dev/gvisor/pkg/sentry/platform/systrap.(*platformContext).Switch(0xc00087c6e0, {0x2229120, 0xc000f66c88}, {0x2221190, 0xc001251008}, 0xc0010485a0, 0x1b55520?)
	pkg/sentry/platform/systrap/systrap.go:179 +0x116
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc000f66c88?, 0xc000f66c88)
	pkg/sentry/kernel/task_run.go:241 +0xeb1
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc000f66c88, 0xe7)
	pkg/sentry/kernel/task_run.go:89 +0x4aa
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 1030
	pkg/sentry/kernel/task_start.go:416 +0x15a

final repro crashed as (corrupted=false):
W0505 07:10:59.039718       1 log.go:359] WARNING: BUG on pkg/sentry/platform/systrap/subprocess.go:850

systrap stub thread failure: sysmsg->state was invalid during sys-handler (failed on line 359; sysmsg.Msg{msg: 7fce4009f000 state 2 err bad0001 line 359 debug 0 app stack 7ea9a1a68608 context 7fce400da000 ThreadID 1})
:
goroutine 1013 [running]:
gvisor.dev/gvisor/pkg/log.Stacks(0x1)
	pkg/log/log.go:319 +0x76
gvisor.dev/gvisor/pkg/log.TracebackAll({0xc00027c360, 0x119}, {0x0, 0x0, 0x0})
	pkg/log/log.go:358 +0x45
gvisor.dev/gvisor/pkg/log.reportBug(0x3, {0xc0005c4000, 0xd9}, {0x0, 0x0, 0x0})
	pkg/log/bug.go:56 +0x7c5
gvisor.dev/gvisor/pkg/log.reportBugErr(0x2, {0x2202fc0, 0xc000f3c2b8})
	pkg/log/bug.go:37 +0x5b
gvisor.dev/gvisor/pkg/log.BugTraceback(...)
	pkg/log/bug.go:126
gvisor.dev/gvisor/pkg/sentry/platform/systrap.(*subprocess).switchToApp(0xc000cfb340, 0xc00087c6e0, 0xc0010485a0)
	pkg/sentry/platform/systrap/subprocess.go:850 +0xa76
gvisor.dev/gvisor/pkg/sentry/platform/systrap.(*platformContext).Switch(0xc00087c6e0, {0x2229120, 0xc000f66c88}, {0x2221190, 0xc001251008}, 0xc0010485a0, 0x1b55520?)
	pkg/sentry/platform/systrap/systrap.go:179 +0x116
gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc000f66c88?, 0xc000f66c88)
	pkg/sentry/kernel/task_run.go:241 +0xeb1
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc000f66c88, 0xe7)
	pkg/sentry/kernel/task_run.go:89 +0x4aa
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 1030
	pkg/sentry/kernel/task_start.go:416 +0x15a