Extracting prog: 2m17.178053389s
Minimizing prog: 2m21.41520233s
Simplifying prog options: 3m42.48708781s
Extracting C: 1m4.127341789s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmget$private-shmat-mlock-munlock
detailed listing:
executing program 0:
r0 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000)
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

program crashed: SYZFAIL: failed to recv rpc
single: successfully extracted reproducer
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmget$private-shmat-mlock
detailed listing:
executing program 0:
r0 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000)
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)

program crashed: SYZFAIL: failed to recv rpc
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmget$private-shmat
detailed listing:
executing program 0:
r0 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000)

program crashed: lost connection to test machine
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmget$private
detailed listing:
executing program 0:
shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil)

program crashed: SYZFAIL: failed to recv rpc
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmget$private
program did not crash
simplifying guilty program options
testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmget$private
detailed listing:
executing program 0:
shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil)

program crashed: SYZFAIL: failed to recv rpc
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmget$private
program did not crash
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmget$private
detailed listing:
executing program 0:
shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil)

program crashed: lost connection to test machine
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmget$private
program did not crash
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmget$private
detailed listing:
executing program 0:
shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil)

program crashed: SYZFAIL: failed to recv rpc
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmget$private
detailed listing:
executing program 0:
shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil)

program crashed: lost connection to test machine
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): shmget$private
detailed listing:
executing program 0:
shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil)

program crashed: SYZFAIL: failed to recv rpc
validation run: crashed=true
reproducing took 12m22.140469697s
repro crashed as (corrupted=false):
SYZFAIL: failed to recv rpc
fd=4 want=4 recv=0 n=0aborting RPC server: mismatching manager/executor arches: amd64 vs 386 (full request: `&flatrpc.ConnectRequestRawT{Cookie:0xb99ede4ac7d810a6, Id:0, Arch:"386", GitRevision:"82d7b89499c17d61b77fab6a1de8cb90d4c4741c", SyzRevision:"3cef233bb64c12952c330d3f223bf232815cec07"}`)


FreeBSD/amd64 (ci-freebsd-i386-1.us-central1-b.c.syzkaller.internal) (ttyu0)

login: set $lines = 0
Password:
Login incorrect
login: show registers
Password:
Login incorrect
login: ps
Nov 19 18:27:27 ci-freebsd-i386-1 login[747]: 2 LOGIN FAILURES ON ttyu0
Password:
Login incorrect
login: show malloc
Password:
Login incorrect
show all tcpcbs/bl

final repro crashed as (corrupted=false):
SYZFAIL: failed to recv rpc
fd=4 want=4 recv=0 n=0aborting RPC server: mismatching manager/executor arches: amd64 vs 386 (full request: `&flatrpc.ConnectRequestRawT{Cookie:0xb99ede4ac7d810a6, Id:0, Arch:"386", GitRevision:"82d7b89499c17d61b77fab6a1de8cb90d4c4741c", SyzRevision:"3cef233bb64c12952c330d3f223bf232815cec07"}`)


FreeBSD/amd64 (ci-freebsd-i386-1.us-central1-b.c.syzkaller.internal) (ttyu0)

login: set $lines = 0
Password:
Login incorrect
login: show registers
Password:
Login incorrect
login: ps
Nov 19 18:27:27 ci-freebsd-i386-1 login[747]: 2 LOGIN FAILURES ON ttyu0
Password:
Login incorrect
login: show malloc
Password:
Login incorrect
show all tcpcbs/bl