Extracting prog: 38.921432363s
Minimizing prog: 2m26.962510877s
Simplifying prog options: 1m39.929192689s
Extracting C: 31.223309176s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-syz_clone
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write(r0, 0x0, 0x8)
syz_clone(0x84880000, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
single: successfully extracted reproducer
found reproducer with 5 syscalls
minimizing guilty program
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write(r0, 0x0, 0x8)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-syz_clone
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
syz_clone(0x84880000, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_clone
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0)
syz_clone(0x84880000, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-syz_clone
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff)
syz_clone(0x84880000, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone
detailed listing:
executing program 0:
syz_clone(0x84880000, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone
program did not crash
simplifying guilty program options
testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone
detailed listing:
executing program 0:
syz_clone(0x84880000, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone
program did not crash
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone
detailed listing:
executing program 0:
syz_clone(0x84880000, 0x0, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone
detailed listing:
executing program 0:
syz_clone(0x84880000, 0x0, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone
detailed listing:
executing program 0:
syz_clone(0x84880000, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone
detailed listing:
executing program 0:
syz_clone(0x84880000, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone
detailed listing:
executing program 0:
syz_clone(0x84880000, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: FATAL ERROR: waiting on pid X: waiting on pid X in sandbox NAME failed: EOF
validation run: crashed=true
reproducing took 6m29.371492634s
repro crashed as (corrupted=false):
W0902 08:05:41.171982  2835688 util.go:107] FATAL ERROR: waiting on pid 15: waiting on PID 15 in sandbox "ci-gvisor-kvm-1": urpc method "containerManager.WaitPID" failed: EOF
waiting on pid 15: waiting on PID 15 in sandbox "ci-gvisor-kvm-1": urpc method "containerManager.WaitPID" failed: EOF
W0902 08:05:41.172088  2835688 cli.go:326] Failure to execute command, err: 1
D0902 08:05:41.550197       1 connection.go:150] sock read failed, closing connection: EOF
W0902 08:05:41.550271  2835512 sandbox.go:1500] Wait RPC to container "ci-gvisor-kvm-1" failed: urpc method "containerManager.Wait" failed: EOF. Will try waiting on the sandbox process instead.
I0902 08:05:41.550312       1 gofer.go:513] All lisafs servers exited.
D0902 08:05:41.550427  2835512 container.go:977] Destroy container, cid: ci-gvisor-kvm-1
I0902 08:05:41.550446       1 cli.go:317] Exiting with status: 0
D0902 08:05:41.550508  2835512 container.go:1351] Destroying container, cid: ci-gvisor-kvm-1
D0902 08:05:41.550525  2835512 sandbox.go:2246] Destroying root container by destroying sandbox, cid: ci-gvisor-kvm-1
D0902 08:05:41.550551  2835512 sandbox.go:1571] Destroying sandbox "ci-gvisor-kvm-1"
I0902 08:05:41.552466  2835512 container.go:701] Gofer process (PID=2835521) reaped: exit code = 0
D0902 08:05:41.552609  2835512 cgroup_v2.go:222] Deleting cgroup "/sys/fs/cgroup/system.slice/ci-gvisor-kvm-1"
D0902 08:05:41.552682  2835512 cgroup_v2.go:233] Removing cgroup for path="/sys/fs/cgroup/system.slice/ci-gvisor-kvm-1"
I0902 08:05:41.552989  2835512 cli.go:317] Exiting with status: 9

final repro crashed as (corrupted=false):
W0902 08:05:41.171982  2835688 util.go:107] FATAL ERROR: waiting on pid 15: waiting on PID 15 in sandbox "ci-gvisor-kvm-1": urpc method "containerManager.WaitPID" failed: EOF
waiting on pid 15: waiting on PID 15 in sandbox "ci-gvisor-kvm-1": urpc method "containerManager.WaitPID" failed: EOF
W0902 08:05:41.172088  2835688 cli.go:326] Failure to execute command, err: 1
D0902 08:05:41.550197       1 connection.go:150] sock read failed, closing connection: EOF
W0902 08:05:41.550271  2835512 sandbox.go:1500] Wait RPC to container "ci-gvisor-kvm-1" failed: urpc method "containerManager.Wait" failed: EOF. Will try waiting on the sandbox process instead.
I0902 08:05:41.550312       1 gofer.go:513] All lisafs servers exited.
D0902 08:05:41.550427  2835512 container.go:977] Destroy container, cid: ci-gvisor-kvm-1
I0902 08:05:41.550446       1 cli.go:317] Exiting with status: 0
D0902 08:05:41.550508  2835512 container.go:1351] Destroying container, cid: ci-gvisor-kvm-1
D0902 08:05:41.550525  2835512 sandbox.go:2246] Destroying root container by destroying sandbox, cid: ci-gvisor-kvm-1
D0902 08:05:41.550551  2835512 sandbox.go:1571] Destroying sandbox "ci-gvisor-kvm-1"
I0902 08:05:41.552466  2835512 container.go:701] Gofer process (PID=2835521) reaped: exit code = 0
D0902 08:05:41.552609  2835512 cgroup_v2.go:222] Deleting cgroup "/sys/fs/cgroup/system.slice/ci-gvisor-kvm-1"
D0902 08:05:41.552682  2835512 cgroup_v2.go:233] Removing cgroup for path="/sys/fs/cgroup/system.slice/ci-gvisor-kvm-1"
I0902 08:05:41.552989  2835512 cli.go:317] Exiting with status: 9