Extracting prog: 1m42.586240254s
Minimizing prog: 18m58.815194194s
Simplifying prog options: 0s
Extracting C: 18.374667243s
Simplifying C: 3m2.457724283s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-wait4-timer_create-timer_settime-mmap$IORING_OFF_SQ_RING-openat$ptmx-openat$incfs-setsockopt$inet_tcp_int-fsetxattr-getsockname$inet6-fchmod-gettid-syz_emit_ethernet-socket$inet6_tcp-setsockopt$inet6_tcp_TCP_REPAIR-bind$inet6-connect$inet6-syz_emit_ethernet-syz_open_procfs-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
gettid() (async)
wait4(0x0, 0x0, 0x2, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) (async)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x5899c0, 0xd4)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0)
fsetxattr(r0, 0x0, 0x0, 0x0, 0x0)
getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
fchmod(0xffffffffffffffff, 0x60)
r2 = gettid()
syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x91, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev}}}}}}}, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) (rerun: 64)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) (async)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
r4 = syz_open_procfs(r2, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-wait4-timer_create-timer_settime-mmap$IORING_OFF_SQ_RING-openat$ptmx-openat$incfs-setsockopt$inet_tcp_int-fsetxattr-getsockname$inet6-fchmod-gettid-syz_emit_ethernet-socket$inet6_tcp-setsockopt$inet6_tcp_TCP_REPAIR-bind$inet6-connect$inet6-syz_emit_ethernet-syz_open_procfs-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
gettid() (async)
wait4(0x0, 0x0, 0x2, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) (async)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x5899c0, 0xd4)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0)
fsetxattr(r0, 0x0, 0x0, 0x0, 0x0)
getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
fchmod(0xffffffffffffffff, 0x60)
r2 = gettid()
syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x91, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev}}}}}}}, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) (rerun: 64)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) (async)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
r4 = syz_open_procfs(r2, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: WARNING: BUG on pkg/sentry/kernel/timekeeper.go:LINE
single: successfully extracted reproducer
found reproducer with 21 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-wait4-timer_create-timer_settime-mmap$IORING_OFF_SQ_RING-openat$ptmx-openat$incfs-setsockopt$inet_tcp_int-fsetxattr-getsockname$inet6-fchmod-gettid-syz_emit_ethernet-socket$inet6_tcp-setsockopt$inet6_tcp_TCP_REPAIR-bind$inet6-connect$inet6-syz_emit_ethernet-syz_open_procfs-recvfrom
detailed listing:
executing program 0:
gettid() (async)
wait4(0x0, 0x0, 0x2, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) (async)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x5899c0, 0xd4)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0)
fsetxattr(r0, 0x0, 0x0, 0x0, 0x0)
getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
fchmod(0xffffffffffffffff, 0x60)
r2 = gettid()
syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x91, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev}}}}}}}, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) (rerun: 64)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) (async)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
r4 = syz_open_procfs(r2, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-wait4-timer_create-timer_settime-mmap$IORING_OFF_SQ_RING-openat$ptmx-openat$incfs-setsockopt$inet_tcp_int-fsetxattr-getsockname$inet6-fchmod-gettid-syz_emit_ethernet-socket$inet6_tcp-setsockopt$inet6_tcp_TCP_REPAIR-bind$inet6-connect$inet6-syz_emit_ethernet-syz_open_procfs-syz_open_procfs
detailed listing:
executing program 0:
gettid() (async)
wait4(0x0, 0x0, 0x2, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) (async)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x5899c0, 0xd4)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0)
fsetxattr(r0, 0x0, 0x0, 0x0, 0x0)
getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
fchmod(0xffffffffffffffff, 0x60)
r2 = gettid()
syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x91, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev}}}}}}}, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) (rerun: 64)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) (async)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
syz_open_procfs(r2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-wait4-timer_create-timer_settime-mmap$IORING_OFF_SQ_RING-openat$ptmx-openat$incfs-setsockopt$inet_tcp_int-fsetxattr-getsockname$inet6-fchmod-gettid-syz_emit_ethernet-socket$inet6_tcp-setsockopt$inet6_tcp_TCP_REPAIR-bind$inet6-connect$inet6-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
gettid() (async)
wait4(0x0, 0x0, 0x2, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) (async)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x5899c0, 0xd4)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0)
fsetxattr(r0, 0x0, 0x0, 0x0, 0x0)
getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
fchmod(0xffffffffffffffff, 0x60)
gettid()
syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x91, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev}}}}}}}, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) (rerun: 64)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) (async)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: WARNING: BUG on pkg/sentry/kernel/timekeeper.go:LINE
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-wait4-timer_create-timer_settime-mmap$IORING_OFF_SQ_RING-openat$ptmx-openat$incfs-setsockopt$inet_tcp_int-fsetxattr-getsockname$inet6-fchmod-gettid-syz_emit_ethernet-socket$inet6_tcp-setsockopt$inet6_tcp_TCP_REPAIR-bind$inet6-connect$inet6-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
gettid() (async)
wait4(0x0, 0x0, 0x2, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) (async)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x5899c0, 0xd4)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0)
fsetxattr(r0, 0x0, 0x0, 0x0, 0x0)
getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
fchmod(0xffffffffffffffff, 0x60)
gettid()
syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x91, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev}}}}}}}, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) (rerun: 64)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) (async)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-wait4-timer_create-timer_settime-mmap$IORING_OFF_SQ_RING-openat$ptmx-openat$incfs-setsockopt$inet_tcp_int-fsetxattr-getsockname$inet6-fchmod-gettid-syz_emit_ethernet-socket$inet6_tcp-setsockopt$inet6_tcp_TCP_REPAIR-bind$inet6-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
gettid() (async)
wait4(0x0, 0x0, 0x2, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) (async)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x5899c0, 0xd4)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0)
fsetxattr(r0, 0x0, 0x0, 0x0, 0x0)
getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
fchmod(0xffffffffffffffff, 0x60)
gettid()
syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x91, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev}}}}}}}, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) (rerun: 64)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-wait4-timer_create-timer_settime-mmap$IORING_OFF_SQ_RING-openat$ptmx-openat$incfs-setsockopt$inet_tcp_int-fsetxattr-getsockname$inet6-fchmod-gettid-syz_emit_ethernet-socket$inet6_tcp-setsockopt$inet6_tcp_TCP_REPAIR-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
gettid() (async)
wait4(0x0, 0x0, 0x2, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) (async)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x5899c0, 0xd4)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0)
fsetxattr(r0, 0x0, 0x0, 0x0, 0x0)
getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
fchmod(0xffffffffffffffff, 0x60)
gettid()
syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x91, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev}}}}}}}, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) (rerun: 64)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-wait4-timer_create-timer_settime-mmap$IORING_OFF_SQ_RING-openat$ptmx-openat$incfs-setsockopt$inet_tcp_int-fsetxattr-getsockname$inet6-fchmod-gettid-syz_emit_ethernet-socket$inet6_tcp-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
gettid() (async)
wait4(0x0, 0x0, 0x2, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) (async)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x5899c0, 0xd4)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0)
fsetxattr(r0, 0x0, 0x0, 0x0, 0x0)
getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
fchmod(0xffffffffffffffff, 0x60)
gettid()
syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x91, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev}}}}}}}, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-wait4-timer_create-timer_settime-mmap$IORING_OFF_SQ_RING-openat$ptmx-openat$incfs-setsockopt$inet_tcp_int-fsetxattr-getsockname$inet6-fchmod-gettid-syz_emit_ethernet-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
gettid() (async)
wait4(0x0, 0x0, 0x2, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) (async)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x5899c0, 0xd4)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0)
fsetxattr(r0, 0x0, 0x0, 0x0, 0x0)
getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
fchmod(0xffffffffffffffff, 0x60)
gettid()
syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x91, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-wait4-timer_create-timer_settime-mmap$IORING_OFF_SQ_RING-openat$ptmx-openat$incfs-setsockopt$inet_tcp_int-fsetxattr-getsockname$inet6-fchmod-gettid-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
gettid() (async)
wait4(0x0, 0x0, 0x2, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) (async)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x5899c0, 0xd4)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0)
fsetxattr(r0, 0x0, 0x0, 0x0, 0x0)
getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
fchmod(0xffffffffffffffff, 0x60)
gettid()
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-wait4-timer_create-timer_settime-mmap$IORING_OFF_SQ_RING-openat$ptmx-openat$incfs-setsockopt$inet_tcp_int-fsetxattr-getsockname$inet6-fchmod-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
gettid() (async)
wait4(0x0, 0x0, 0x2, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) (async)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x5899c0, 0xd4)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0)
fsetxattr(r0, 0x0, 0x0, 0x0, 0x0)
getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
fchmod(0xffffffffffffffff, 0x60)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-wait4-timer_create-timer_settime-mmap$IORING_OFF_SQ_RING-openat$ptmx-openat$incfs-setsockopt$inet_tcp_int-fsetxattr-getsockname$inet6-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
gettid() (async)
wait4(0x0, 0x0, 0x2, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) (async)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x5899c0, 0xd4)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0)
fsetxattr(r0, 0x0, 0x0, 0x0, 0x0)
getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-wait4-timer_create-timer_settime-mmap$IORING_OFF_SQ_RING-openat$ptmx-openat$incfs-setsockopt$inet_tcp_int-fsetxattr-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
gettid() (async)
wait4(0x0, 0x0, 0x2, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) (async)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x5899c0, 0xd4)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0)
fsetxattr(r0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-wait4-timer_create-timer_settime-mmap$IORING_OFF_SQ_RING-openat$ptmx-openat$incfs-setsockopt$inet_tcp_int-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
gettid() (async)
wait4(0x0, 0x0, 0x2, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) (async)
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x5899c0, 0xd4)
setsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-wait4-timer_create-timer_settime-mmap$IORING_OFF_SQ_RING-openat$ptmx-openat$incfs-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
gettid() (async)
wait4(0x0, 0x0, 0x2, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) (async)
openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x5899c0, 0xd4)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-wait4-timer_create-timer_settime-mmap$IORING_OFF_SQ_RING-openat$ptmx-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
gettid() (async)
wait4(0x0, 0x0, 0x2, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-wait4-timer_create-timer_settime-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
gettid() (async)
wait4(0x0, 0x0, 0x2, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-wait4-timer_create-timer_settime-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
gettid() (async)
wait4(0x0, 0x0, 0x2, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-wait4-timer_create-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
gettid() (async)
wait4(0x0, 0x0, 0x2, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000000200))
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-wait4-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
gettid() (async)
wait4(0x0, 0x0, 0x2, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: lost connection to test machine
ignore low priority crash: lost connection to test machine
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-timer_create-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
gettid() (async)
timer_create(0x0, 0x0, &(0x7f0000000200))
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
timer_create(0x0, 0x0, &(0x7f0000000200))
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) (async, rerun: 64)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
timer_create(0x0, 0x0, &(0x7f0000000200))
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
timer_create(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
timer_create(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
timer_create(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12000, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x8000, @private=0xa010101}, 0x1, 0x3, 0x3, 0x4}}, 0x80)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
timer_create(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12000, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
timer_create(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12000, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
simplifying C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
program did not crash
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
timer_create(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12000, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
timer_create(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12000, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)

program crashed: lost connection to test machine
ignore low priority crash: lost connection to test machine
validation run: crashed=false
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
timer_create(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12000, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-mmap$IORING_OFF_SQ_RING-syz_emit_ethernet-recvfrom-syz_open_procfs
detailed listing:
executing program 0:
timer_create(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12000, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
validation run: crashed=true
reproducing took 25m13.908657738s
repro crashed as (corrupted=false):
W0911 18:05:04.734240  277658 util.go:107] FATAL ERROR: waiting on pid 30: waiting on PID 30 in sandbox "ci-gvisor-ptrace-1-0": urpc method "containerManager.WaitPID" failed: EOF
waiting on pid 30: waiting on PID 30 in sandbox "ci-gvisor-ptrace-1-0": urpc method "containerManager.WaitPID" failed: EOF
W0911 18:05:04.734291  277658 cli.go:326] Failure to execute command, err: 1
D0911 18:05:04.871480       1 connection.go:150] sock read failed, closing connection: EOF
W0911 18:05:04.871504  276802 sandbox.go:1505] Wait RPC to container "ci-gvisor-ptrace-1-0" failed: urpc method "containerManager.Wait" failed: EOF. Will try waiting on the sandbox process instead.
I0911 18:05:04.871894       1 gofer.go:513] All lisafs servers exited.
I0911 18:05:04.872320       1 cli.go:317] Exiting with status: 0
D0911 18:05:04.875819  276802 container.go:977] Destroy container, cid: ci-gvisor-ptrace-1-0
D0911 18:05:04.875919  276802 container.go:1351] Destroying container, cid: ci-gvisor-ptrace-1-0
D0911 18:05:04.875926  276802 sandbox.go:2291] Destroying root container by destroying sandbox, cid: ci-gvisor-ptrace-1-0
D0911 18:05:04.875933  276802 sandbox.go:1576] Destroying sandbox "ci-gvisor-ptrace-1-0"
D0911 18:05:04.875992  276802 container.go:1365] Killing gofer for container, cid: ci-gvisor-ptrace-1-0, PID: 276836
D0911 18:05:04.882321  276802 cgroup.go:654] Deleting cgroup "ci-gvisor-ptrace-1-0"
D0911 18:05:04.882360  276802 cgroup.go:662] Removing cgroup controller for key="cpu" path="/sys/fs/cgroup/cpu/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882429  276802 cgroup.go:662] Removing cgroup controller for key="cpuset" path="/sys/fs/cgroup/cpuset/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882444  276802 cgroup.go:662] Removing cgroup controller for key="hugetlb" path="/sys/fs/cgroup/hugetlb/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882460  276802 cgroup.go:662] Removing cgroup controller for key="memory" path="/sys/fs/cgroup/memory/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882472  276802 cgroup.go:662] Removing cgroup controller for key="net_prio" path="/sys/fs/cgroup/net_prio/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882483  276802 cgroup.go:662] Removing cgroup controller for key="pids" path="/sys/fs/cgroup/pids/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882490  276802 cgroup.go:662] Removing cgroup controller for key="perf_event" path="/sys/fs/cgroup/perf_event/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882522  276802 cgroup.go:662] Removing cgroup controller for key="rdma" path="/sys/fs/cgroup/rdma/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882539  276802 cgroup.go:662] Removing cgroup controller for key="blkio" path="/sys/fs/cgroup/blkio/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882554  276802 cgroup.go:662] Removing cgroup controller for key="net_cls" path="/sys/fs/cgroup/net_cls/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882561  276802 cgroup.go:662] Removing cgroup controller for key="cpuacct" path="/sys/fs/cgroup/cpuacct/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882568  276802 cgroup.go:662] Removing cgroup controller for key="devices" path="/sys/fs/cgroup/devices/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882578  276802 cgroup.go:662] Removing cgroup controller for key="freezer" path="/sys/fs/cgroup/freezer/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882598  276802 cgroup.go:662] Removing cgroup controller for key="systemd" path="/sys/fs/cgroup/systemd/ci-gvisor-ptrace-1-0"
I0911 18:05:04.883029  276802 cli.go:317] Exiting with status: 9

final repro crashed as (corrupted=false):
W0911 18:05:04.734240  277658 util.go:107] FATAL ERROR: waiting on pid 30: waiting on PID 30 in sandbox "ci-gvisor-ptrace-1-0": urpc method "containerManager.WaitPID" failed: EOF
waiting on pid 30: waiting on PID 30 in sandbox "ci-gvisor-ptrace-1-0": urpc method "containerManager.WaitPID" failed: EOF
W0911 18:05:04.734291  277658 cli.go:326] Failure to execute command, err: 1
D0911 18:05:04.871480       1 connection.go:150] sock read failed, closing connection: EOF
W0911 18:05:04.871504  276802 sandbox.go:1505] Wait RPC to container "ci-gvisor-ptrace-1-0" failed: urpc method "containerManager.Wait" failed: EOF. Will try waiting on the sandbox process instead.
I0911 18:05:04.871894       1 gofer.go:513] All lisafs servers exited.
I0911 18:05:04.872320       1 cli.go:317] Exiting with status: 0
D0911 18:05:04.875819  276802 container.go:977] Destroy container, cid: ci-gvisor-ptrace-1-0
D0911 18:05:04.875919  276802 container.go:1351] Destroying container, cid: ci-gvisor-ptrace-1-0
D0911 18:05:04.875926  276802 sandbox.go:2291] Destroying root container by destroying sandbox, cid: ci-gvisor-ptrace-1-0
D0911 18:05:04.875933  276802 sandbox.go:1576] Destroying sandbox "ci-gvisor-ptrace-1-0"
D0911 18:05:04.875992  276802 container.go:1365] Killing gofer for container, cid: ci-gvisor-ptrace-1-0, PID: 276836
D0911 18:05:04.882321  276802 cgroup.go:654] Deleting cgroup "ci-gvisor-ptrace-1-0"
D0911 18:05:04.882360  276802 cgroup.go:662] Removing cgroup controller for key="cpu" path="/sys/fs/cgroup/cpu/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882429  276802 cgroup.go:662] Removing cgroup controller for key="cpuset" path="/sys/fs/cgroup/cpuset/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882444  276802 cgroup.go:662] Removing cgroup controller for key="hugetlb" path="/sys/fs/cgroup/hugetlb/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882460  276802 cgroup.go:662] Removing cgroup controller for key="memory" path="/sys/fs/cgroup/memory/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882472  276802 cgroup.go:662] Removing cgroup controller for key="net_prio" path="/sys/fs/cgroup/net_prio/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882483  276802 cgroup.go:662] Removing cgroup controller for key="pids" path="/sys/fs/cgroup/pids/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882490  276802 cgroup.go:662] Removing cgroup controller for key="perf_event" path="/sys/fs/cgroup/perf_event/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882522  276802 cgroup.go:662] Removing cgroup controller for key="rdma" path="/sys/fs/cgroup/rdma/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882539  276802 cgroup.go:662] Removing cgroup controller for key="blkio" path="/sys/fs/cgroup/blkio/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882554  276802 cgroup.go:662] Removing cgroup controller for key="net_cls" path="/sys/fs/cgroup/net_cls/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882561  276802 cgroup.go:662] Removing cgroup controller for key="cpuacct" path="/sys/fs/cgroup/cpuacct/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882568  276802 cgroup.go:662] Removing cgroup controller for key="devices" path="/sys/fs/cgroup/devices/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882578  276802 cgroup.go:662] Removing cgroup controller for key="freezer" path="/sys/fs/cgroup/freezer/ci-gvisor-ptrace-1-0"
D0911 18:05:04.882598  276802 cgroup.go:662] Removing cgroup controller for key="systemd" path="/sys/fs/cgroup/systemd/ci-gvisor-ptrace-1-0"
I0911 18:05:04.883029  276802 cli.go:317] Exiting with status: 9