Extracting prog: 33m18.461579581s
Minimizing prog: 23m50.615065565s
Simplifying prog options: 0s
Extracting C: 7m9.305375621s
Simplifying C: 32m26.232873726s


24 programs, timeouts [30s 6m0s]
extracting reproducer from 24 programs
testing a last program of every proc
single: executing 4 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mprotect-copy_file_range
detailed listing:
executing program 0:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f00000025c0)=0xfe3a, 0xffffffffffffffff, 0x0, 0x81, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_sctp-setsockopt$inet_sctp_SCTP_DELAYED_SACK
detailed listing:
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000500)={0x0, 0x0, 0x1101}, 0xc)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendto
detailed listing:
executing program 0:
r0 = socket(0x1c, 0x1, 0x0)
sendto(r0, 0x0, 0x0, 0x81, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3, 0x0, @loopback={0x20200}}, 0x1c)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fork-procctl$PROC_REAP_KILL
detailed listing:
executing program 0:
r0 = fork()
procctl$PROC_REAP_KILL(0x0, r0, 0x6, &(0x7f0000000180)={0x13, 0x0, 0xffffffffffffffff, 0x0, r0})

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 2, 1, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2]
detailed listing:
executing program 2:
syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @multicast2}, @icmp=@time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback}, "2bf1a8ab6f85407a"}}}}})
executing program 2:
syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00o3', 0x18, 0x3a, 0x0, @rand_addr="8a211dd1450021b07f5a1957de7400", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@mld={0x82, 0x0, 0x0, 0x0, 0x0, @empty}}}}}})
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x1204, &(0x7f0000000140), &(0x7f0000000180)=0x8)
executing program 0:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
executing program 2:
r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x3e0, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101fffff9})
executing program 0:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
getsockopt$inet6_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000a00)={0x0, 0x2, "bb22"}, &(0x7f0000000a40)=0xa)
executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}}, 0x1c)
executing program 0:
r0 = socket$inet(0x2, 0x3, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x2c, 0x0, 0x0)
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2, 0x3, @rand_addr=0x1}, 0x10)
executing program 3:
setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0)
openat$filemon(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000000), 0x8)
executing program 3:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
sendmsg$inet6_sctp(r0, &(0x7f00000004c0)={&(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x0, 0x0, @rand_addr="99a631c47ed654117b79bbc56c862126"}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000840000000900000000000000c0"], 0x1c, 0x100}, 0x0)
executing program 3:
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @remote={0xac, 0x14, 0x0}, @broadcast, @remote={0xac, 0x14, 0x0}}}}})
cpuset_setaffinity(0x3, 0x7, 0x0, 0x4b, &(0x7f0000000040))
executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000200)={@in={{0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}}}, 0x88)
executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_EVENT(r0, 0x84, 0x1e, &(0x7f0000000140)={0x0, 0x2}, 0x8)
executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x8008, &(0x7f0000000040), 0x4)
executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt(r0, 0x0, 0x4, 0x0, &(0x7f0000000bc0))
executing program 1:
freebsd10_pipe(&(0x7f00000006c0)={<r0=>0xffffffffffffffff})
ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f00000008c0)={0x28, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, [0x10001, 0xc, 0x0, 0x40]})
executing program 2:
r0 = fork()
procctl$PROC_REAP_KILL(0x0, r0, 0x6, &(0x7f0000000180)={0x13, 0x0, 0xffffffffffffffff, 0x0, r0})
executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000300)={0x1c, 0x1c, 0x2, 0x0, @loopback, 0x8be}, 0x1c)
executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000840)={&(0x7f0000000000)=@in={0x10, 0x2, 0x3, @local={0xac, 0x14, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x58, 0x109}, 0x0)
executing program 3:
r0 = socket(0x1c, 0x1, 0x0)
sendto(r0, 0x0, 0x0, 0x81, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3, 0x0, @loopback={0x20200}}, 0x1c)
executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000500)={0x0, 0x0, 0x1101}, 0xc)
executing program 0:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f00000025c0)=0xfe3a, 0xffffffffffffffff, 0x0, 0x81, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 4 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mprotect-copy_file_range
detailed listing:
executing program 0:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f00000025c0)=0xfe3a, 0xffffffffffffffff, 0x0, 0x81, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_sctp-setsockopt$inet_sctp_SCTP_DELAYED_SACK
detailed listing:
executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000500)={0x0, 0x0, 0x1101}, 0xc)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendto
detailed listing:
executing program 0:
r0 = socket(0x1c, 0x1, 0x0)
sendto(r0, 0x0, 0x0, 0x81, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3, 0x0, @loopback={0x20200}}, 0x1c)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fork-procctl$PROC_REAP_KILL
detailed listing:
executing program 0:
r0 = fork()
procctl$PROC_REAP_KILL(0x0, r0, 0x6, &(0x7f0000000180)={0x13, 0x0, 0xffffffffffffffff, 0x0, r0})

program crashed: no output from test machine
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=8m25.437340549s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fork
detailed listing:
executing program 0:
fork()

program did not crash
testing program (duration=8m25.437340549s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): procctl$PROC_REAP_KILL
detailed listing:
executing program 0:
procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000180)={0x13, 0x0, 0xffffffffffffffff})

program crashed: no output from test machine
testing program (duration=8m25.437340549s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): procctl$PROC_REAP_KILL
detailed listing:
executing program 0:
procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=8m25.437340549s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): procctl$PROC_REAP_KILL
program crashed: no output from test machine
simplifying C reproducer
testing compiled C program (duration=8m25.437340549s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): procctl$PROC_REAP_KILL
program crashed: no output from test machine
testing compiled C program (duration=8m25.437340549s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): procctl$PROC_REAP_KILL
program crashed: no output from test machine
testing compiled C program (duration=8m25.437340549s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): procctl$PROC_REAP_KILL
program crashed: no output from test machine
testing compiled C program (duration=8m25.437340549s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): procctl$PROC_REAP_KILL
program crashed: no output from test machine
testing compiled C program (duration=8m25.437340549s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): procctl$PROC_REAP_KILL
program crashed: no output from test machine
reproducing took 1h36m44.614938773s
repro crashed as (corrupted=false):

final repro crashed as (corrupted=false):