Extracting prog: 2m18.925816458s
Minimizing prog: 9m41.407498411s
Simplifying prog options: 4m6.418660854s
Extracting C: 1m1.974059053s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$bt_hci-fstatat-inotify_add_watch_at-freebsd11_statfs-mkdir-__specialfd$inotify-getppid-sigqueue-bind$inet6-kqueue-kevent-inotify_add_watch_at
detailed listing:
executing program 0:
r0 = socket$bt_hci(0x24, 0x3, 0x86)
fstatat(r0, 0x0, &(0x7f0000000040), 0x8200)
inotify_add_watch_at(0xffffffffffffffff, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x880)
freebsd11_statfs(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0))
mkdir(0x0, 0x118)
__specialfd$inotify(0x2, &(0x7f0000000f80)={0x100004}, 0x4)
r1 = getppid()
sigqueue(r1, 0x6a, @sigval_ptr=0x1) (async)
bind$inet6(0xffffffffffffff9c, &(0x7f0000001040)={0x1c, 0x1c, 0x2, 0xe, @local={0xfe, 0x80, '\x00', 0x0}, 0x3}, 0x1c) (async)
r2 = kqueue()
kevent(r2, &(0x7f00000010c0)=[{0x8001, 0xfffffffffffffff8, 0x4028, 0x28c, 0x3ff, 0x81, [0x4, 0x5, 0x7fffffff, 0x6]}, {0x80000000, 0xfffffffffffffffe, 0x80b4, 0x40000000, 0x7ff, 0x1, [0x963, 0xffffffff, 0x4]}, {0x1, 0xfffffffffffffff9, 0x8, 0x8, 0x101, 0x1, [0x0, 0xa5, 0xfcb5, 0x1f]}, {0x5, 0xfffffffffffffff5, 0x0, 0x20, 0x1, 0x8, [0x2, 0xac, 0x1, 0x10000]}, {0x1, 0xfffffffffffffff8, 0x8, 0x1000000, 0x1, 0xff, [0x10, 0x6, 0x1, 0xb8ce]}, {0x3, 0xfffffffffffffff9, 0x48, 0x400, 0x1, 0xfffffffffffffffc, [0x6, 0x1, 0x3e, 0x5f]}, {0x9, 0xfffffffffffffffd, 0x0, 0x20000000, 0xa, 0x7, [0x3, 0x0, 0x20000000000, 0xb27]}], 0x7, 0x0, 0x0, &(0x7f00000012c0)={0x5cc, 0x100000000})
inotify_add_watch_at(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40)

program crashed: lost connection to test machine
program crashed: lost connection to test machine
single: successfully extracted reproducer
found reproducer with 12 syscalls
minimizing guilty program
testing program (duration=58.556188533s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$bt_hci-fstatat-inotify_add_watch_at-freebsd11_statfs-mkdir-__specialfd$inotify-getppid-sigqueue-bind$inet6-kqueue-kevent
detailed listing:
executing program 0:
r0 = socket$bt_hci(0x24, 0x3, 0x86)
fstatat(r0, 0x0, &(0x7f0000000040), 0x8200)
inotify_add_watch_at(0xffffffffffffffff, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x880)
freebsd11_statfs(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0))
mkdir(0x0, 0x118)
__specialfd$inotify(0x2, &(0x7f0000000f80)={0x100004}, 0x4)
r1 = getppid()
sigqueue(r1, 0x6a, @sigval_ptr=0x1) (async)
bind$inet6(0xffffffffffffff9c, &(0x7f0000001040)={0x1c, 0x1c, 0x2, 0xe, @local={0xfe, 0x80, '\x00', 0x0}, 0x3}, 0x1c) (async)
r2 = kqueue()
kevent(r2, &(0x7f00000010c0)=[{0x8001, 0xfffffffffffffff8, 0x4028, 0x28c, 0x3ff, 0x81, [0x4, 0x5, 0x7fffffff, 0x6]}, {0x80000000, 0xfffffffffffffffe, 0x80b4, 0x40000000, 0x7ff, 0x1, [0x963, 0xffffffff, 0x4]}, {0x1, 0xfffffffffffffff9, 0x8, 0x8, 0x101, 0x1, [0x0, 0xa5, 0xfcb5, 0x1f]}, {0x5, 0xfffffffffffffff5, 0x0, 0x20, 0x1, 0x8, [0x2, 0xac, 0x1, 0x10000]}, {0x1, 0xfffffffffffffff8, 0x8, 0x1000000, 0x1, 0xff, [0x10, 0x6, 0x1, 0xb8ce]}, {0x3, 0xfffffffffffffff9, 0x48, 0x400, 0x1, 0xfffffffffffffffc, [0x6, 0x1, 0x3e, 0x5f]}, {0x9, 0xfffffffffffffffd, 0x0, 0x20000000, 0xa, 0x7, [0x3, 0x0, 0x20000000000, 0xb27]}], 0x7, 0x0, 0x0, &(0x7f00000012c0)={0x5cc, 0x100000000})

program crashed: lost connection to test machine
testing program (duration=58.556188533s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$bt_hci-fstatat-inotify_add_watch_at-freebsd11_statfs-mkdir-__specialfd$inotify-getppid-sigqueue-bind$inet6-kqueue
detailed listing:
executing program 0:
r0 = socket$bt_hci(0x24, 0x3, 0x86)
fstatat(r0, 0x0, &(0x7f0000000040), 0x8200)
inotify_add_watch_at(0xffffffffffffffff, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x880)
freebsd11_statfs(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0))
mkdir(0x0, 0x118)
__specialfd$inotify(0x2, &(0x7f0000000f80)={0x100004}, 0x4)
r1 = getppid()
sigqueue(r1, 0x6a, @sigval_ptr=0x1) (async)
bind$inet6(0xffffffffffffff9c, &(0x7f0000001040)={0x1c, 0x1c, 0x2, 0xe, @local={0xfe, 0x80, '\x00', 0x0}, 0x3}, 0x1c) (async)
kqueue()

program crashed: lost connection to test machine
testing program (duration=58.556188533s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$bt_hci-fstatat-inotify_add_watch_at-freebsd11_statfs-mkdir-__specialfd$inotify-getppid-sigqueue-bind$inet6
detailed listing:
executing program 0:
r0 = socket$bt_hci(0x24, 0x3, 0x86)
fstatat(r0, 0x0, &(0x7f0000000040), 0x8200)
inotify_add_watch_at(0xffffffffffffffff, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x880)
freebsd11_statfs(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0))
mkdir(0x0, 0x118)
__specialfd$inotify(0x2, &(0x7f0000000f80)={0x100004}, 0x4)
r1 = getppid()
sigqueue(r1, 0x6a, @sigval_ptr=0x1) (async)
bind$inet6(0xffffffffffffff9c, &(0x7f0000001040)={0x1c, 0x1c, 0x2, 0xe, @local={0xfe, 0x80, '\x00', 0x0}, 0x3}, 0x1c) (async)

program crashed: SYZFAIL: failed to recv rpc
testing program (duration=58.556188533s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$bt_hci-fstatat-inotify_add_watch_at-freebsd11_statfs-mkdir-__specialfd$inotify-getppid-sigqueue
detailed listing:
executing program 0:
r0 = socket$bt_hci(0x24, 0x3, 0x86)
fstatat(r0, 0x0, &(0x7f0000000040), 0x8200)
inotify_add_watch_at(0xffffffffffffffff, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x880)
freebsd11_statfs(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0))
mkdir(0x0, 0x118)
__specialfd$inotify(0x2, &(0x7f0000000f80)={0x100004}, 0x4)
r1 = getppid()
sigqueue(r1, 0x6a, @sigval_ptr=0x1) (async)

program crashed: SYZFAIL: failed to recv rpc
testing program (duration=58.556188533s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$bt_hci-fstatat-inotify_add_watch_at-freebsd11_statfs-mkdir-__specialfd$inotify-getppid
detailed listing:
executing program 0:
r0 = socket$bt_hci(0x24, 0x3, 0x86)
fstatat(r0, 0x0, &(0x7f0000000040), 0x8200)
inotify_add_watch_at(0xffffffffffffffff, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x880)
freebsd11_statfs(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0))
mkdir(0x0, 0x118)
__specialfd$inotify(0x2, &(0x7f0000000f80)={0x100004}, 0x4)
getppid()

program crashed: SYZFAIL: failed to recv rpc
testing program (duration=58.556188533s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$bt_hci-fstatat-inotify_add_watch_at-freebsd11_statfs-mkdir-__specialfd$inotify
detailed listing:
executing program 0:
r0 = socket$bt_hci(0x24, 0x3, 0x86)
fstatat(r0, 0x0, &(0x7f0000000040), 0x8200)
inotify_add_watch_at(0xffffffffffffffff, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x880)
freebsd11_statfs(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0))
mkdir(0x0, 0x118)
__specialfd$inotify(0x2, &(0x7f0000000f80)={0x100004}, 0x4)

program crashed: SYZFAIL: failed to recv rpc
testing program (duration=58.556188533s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$bt_hci-fstatat-inotify_add_watch_at-freebsd11_statfs-mkdir
detailed listing:
executing program 0:
r0 = socket$bt_hci(0x24, 0x3, 0x86)
fstatat(r0, 0x0, &(0x7f0000000040), 0x8200)
inotify_add_watch_at(0xffffffffffffffff, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x880)
freebsd11_statfs(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0))
mkdir(0x0, 0x118)

program crashed: SYZFAIL: failed to recv rpc
testing program (duration=58.556188533s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$bt_hci-fstatat-inotify_add_watch_at-freebsd11_statfs
detailed listing:
executing program 0:
r0 = socket$bt_hci(0x24, 0x3, 0x86)
fstatat(r0, 0x0, &(0x7f0000000040), 0x8200)
inotify_add_watch_at(0xffffffffffffffff, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x880)
freebsd11_statfs(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0))

program crashed: lost connection to test machine
testing program (duration=58.556188533s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$bt_hci-fstatat-inotify_add_watch_at
detailed listing:
executing program 0:
r0 = socket$bt_hci(0x24, 0x3, 0x86)
fstatat(r0, 0x0, &(0x7f0000000040), 0x8200)
inotify_add_watch_at(0xffffffffffffffff, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x880)

program crashed: lost connection to test machine
testing program (duration=58.556188533s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$bt_hci-fstatat
detailed listing:
executing program 0:
r0 = socket$bt_hci(0x24, 0x3, 0x86)
fstatat(r0, 0x0, &(0x7f0000000040), 0x8200)

program crashed: SYZFAIL: failed to recv rpc
testing program (duration=58.556188533s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$bt_hci
detailed listing:
executing program 0:
socket$bt_hci(0x24, 0x3, 0x86)

program crashed: SYZFAIL: failed to recv rpc
extracting C reproducer
testing compiled C program (duration=58.556188533s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$bt_hci
program did not crash
simplifying guilty program options
testing program (duration=58.556188533s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$bt_hci
detailed listing:
executing program 0:
socket$bt_hci(0x24, 0x3, 0x86)

program crashed: SYZFAIL: failed to recv rpc
extracting C reproducer
testing compiled C program (duration=58.556188533s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$bt_hci
program did not crash
testing program (duration=58.556188533s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$bt_hci
detailed listing:
executing program 0:
socket$bt_hci(0x24, 0x3, 0x86)

program crashed: lost connection to test machine
extracting C reproducer
testing compiled C program (duration=58.556188533s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$bt_hci
program did not crash
testing program (duration=58.556188533s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$bt_hci
detailed listing:
executing program 0:
socket$bt_hci(0x24, 0x3, 0x86)

program crashed: lost connection to test machine
validation run: crashed=true
testing program (duration=58.556188533s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$bt_hci
detailed listing:
executing program 0:
socket$bt_hci(0x24, 0x3, 0x86)

program crashed: lost connection to test machine
validation run: crashed=true
testing program (duration=58.556188533s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$bt_hci
detailed listing:
executing program 0:
socket$bt_hci(0x24, 0x3, 0x86)

program crashed: lost connection to test machine
validation run: crashed=true
reproducing took 20m53.600034515s
repro crashed as (corrupted=false):

final repro crashed as (corrupted=false):