last executing test programs: 44.107089954s ago: executing program 5: unmount(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) open(0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x4f4b) open$dir(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r0 = getsid(0x0) compat_40_mount(0x0, 0x0, 0x0, 0x0) shmget(0x2, 0x3000, 0x430, &(0x7f0000ffa000/0x3000)=nil) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x38) open$dir(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$inet(0x2, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(0x0, 0x0, 0x401, 0x0) msgrcv(r1, 0x0, 0x0, 0x2, 0x1800) socket$inet(0x2, 0x0, 0x3f) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) chroot(&(0x7f0000000180)='./file1\x00') __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6da) compat_90_statvfs1(&(0x7f0000000000)='./file0\x00', &(0x7f00000013c0), 0x0) getpgid(r0) compat_30_socket(0x22, 0x3, 0x0) 43.827024878s ago: executing program 5: mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x200) r0 = getppid() setpriority(0x1, r0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x9d3e7d920a78206f, 0x0, &(0x7f0000000000)) shmget(0x3, 0x4000, 0x230, &(0x7f0000ffa000/0x4000)=nil) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0xd004c) 42.855192557s ago: executing program 5: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) compat_40_mount(&(0x7f0000000040)='ptyfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000500)) chflags(&(0x7f0000000100)='./file0\x00', 0x20001) __getlogin(&(0x7f0000000000)=""/252, 0xfc) __getlogin(&(0x7f0000000100)=""/141, 0x8d) 42.156841466s ago: executing program 5: compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000800)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x8000d27c}}}) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f0000000100)='mfs\x00'], 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffffff7ff}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) r4 = __vfork14() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{0x10001, r0, r3, r2, r1, 0x800, 0x3}, 0x6, 0x1, r4, 0xffffffffffffffff, 0x9c1, 0x0, 0xffffffffffffff7f, 0x100000000}) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) r5 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) compat_30_getdents(r5, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x4f4b) r6 = open$dir(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket(0x18, 0x1, 0x0) setsockopt(r7, 0x1000000029, 0x32, &(0x7f0000000000)="b211", 0x2) ioctl$FIOASYNC(r6, 0x80104303, &(0x7f00000001c0)) 38.133620737s ago: executing program 5: compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000800)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x8000d27c}}}) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f0000000100)='mfs\x00'], 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffffff7ff}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) r4 = __vfork14() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{0x10001, r0, r3, r2, r1, 0x800, 0x3}, 0x6, 0x1, r4, 0xffffffffffffffff, 0x9c1, 0x0, 0xffffffffffffff7f, 0x100000000}) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) r5 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) compat_30_getdents(r5, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x4f4b) r6 = open$dir(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket(0x18, 0x1, 0x0) setsockopt(r7, 0x1000000029, 0x32, &(0x7f0000000000)="b211", 0x2) ioctl$FIOASYNC(r6, 0x80104303, &(0x7f00000001c0)) 20.015578467s ago: executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0, 0x800) compat_40_mount(&(0x7f0000000280)='tmpfs\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, &(0x7f0000000140)='A') open(0x0, 0x0, 0x0) __mount50(0x0, &(0x7f0000000040)='.\x00', 0xe680bf986c21abfb, &(0x7f0000000140), 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) __clone(0x9ff, &(0x7f0000000000)="2f5879528546080b10fbc9197df04af438b50341889115a45f22de011b29fb91fab95287") __mount50(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000274000/0x1000)=nil, 0x1000, 0x0, 0x210, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd49f275d97cc01bb, 0x1810, 0xffffffffffffffff, 0x0, 0x0) 18.727093536s ago: executing program 0: mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x200) r0 = getppid() setpriority(0x1, r0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0xd004c) 18.367259802s ago: executing program 0: _ksem_open(0x0, 0x0, 0x1c0, 0x3fe, 0x0) pipe(&(0x7f0000001100)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd6}}) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1f, 0x40000003, 0x0) getsockopt(r0, 0x1, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x100b, &(0x7f0000000000), 0x10) compat_30___lstat13(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = getsid(0x0) getsid(0x0) compat_50_wait4(0x0, 0x0, 0x0, 0x0) ptrace(0xb, r2, &(0x7f0000000000), 0x0) writev(r1, &(0x7f0000000180), 0x2) write(r1, &(0x7f0000000040)='\t', 0xa) _ksem_close(0x0) 15.647657102s ago: executing program 0: open(0x0, 0x0, 0x0) __mount50(0x0, 0x0, 0xe680bf986c21abfb, &(0x7f0000000140), 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) __clone(0x9ff, &(0x7f0000000000)="2f5879528546080b10fbc9197df04af438b50341889115a45f22de011b29fb91fab95287") __mount50(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000274000/0x1000)=nil, 0x1000, 0x0, 0x210, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd49f275d97cc01bb, 0x1810, 0xffffffffffffffff, 0x0, 0x0) 11.672282456s ago: executing program 0: open(0x0, 0x0, 0x0) __mount50(0x0, 0x0, 0xe680bf986c21abfb, &(0x7f0000000140), 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) __clone(0x9ff, &(0x7f0000000000)="2f5879528546080b10fbc9197df04af438b50341889115a45f22de011b29fb91fab95287") __mount50(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000274000/0x1000)=nil, 0x1000, 0x0, 0x210, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd49f275d97cc01bb, 0x1810, 0xffffffffffffffff, 0x0, 0x0) 11.588219139s ago: executing program 0: mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r0 = socket(0x12, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x800, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) connect$unix(r1, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x0}, 0x8) ktrace(&(0x7f00000000c0)='./file0\x00', 0x0, 0x40000630, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x3}, 0x8) r2 = getppid() ktrace(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, r2) compat_40_mount(&(0x7f0000000380)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x4, &(0x7f0000000140)="01") mknod(&(0x7f0000000100)='./file0\x00', 0x80002005, 0x0) compat_43_olseek(0xffffffffffffffff, 0x0, 0x1) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x262, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0x10, r4, 0x262, 0x0) open$dir(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) __lstat50(&(0x7f0000000280)='./file0/file1\x00', &(0x7f0000000700)={0x0}) _ksem_timedwait(0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffffb}) modctl$MODCTL_STAT(0x4, &(0x7f0000000180)={&(0x7f00000000c0)=""/118, 0x76}) compat_40_mount(&(0x7f0000000200)='procfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0x8018698d, &(0x7f0000000100)=0x8000000000000034) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) chdir(&(0x7f0000000100)='./file0\x00') mlock(&(0x7f0000656000/0x1000)=nil, 0x1000) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000900)='./file0/file1\x00', 0x80002005, r5) fktrace(r0, 0x4, 0x2, r2) 10.817378928s ago: executing program 3: r0 = getsid(0x0) getpriority(0x1, r0) (async) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4100) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) compat_50_select(0x40, &(0x7f0000000280)={0x1ff}, 0x0, 0x0, 0x0) 9.487248414s ago: executing program 1: socket(0x18, 0x1, 0x0) __fhstat50(&(0x7f0000000180), 0x0, 0x0) compat_40_mount(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") __stat50(&(0x7f0000001200)='./file0\x00', &(0x7f0000001240)) socket(0x1, 0x20000000, 0x99) __clone(0x900, 0x0) r0 = getsid(0x0) r1 = getsid(0x0) ptrace(0x9, r1, 0x0, 0x0) compat_50_wait4(0x0, 0x0, 0x0, 0x0) ptrace(0xe, r0, &(0x7f0000000000), 0x8000000002008) 9.345068446s ago: executing program 3: mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x100, 0xa76) compat_30___fstat13(r0, &(0x7f00000000c0)) compat_43_osetrlimit(0x9, &(0x7f0000000080)) msgget$private(0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x10, &(0x7f0000000000), 0x4) (async) setsockopt$sock_int(r1, 0xffff, 0x10, &(0x7f0000000000), 0x4) socket(0x2, 0x3, 0x0) (async) socket(0x2, 0x3, 0x0) getsid(0x0) (async) r2 = getsid(0x0) ptrace(0x27, r2, 0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0xf, r2) 9.329533989s ago: executing program 4: open(0x0, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x0, 0x1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 8.569498576s ago: executing program 1: _ksem_open(0x0, 0x0, 0x1c0, 0x3fe, 0x0) pipe(&(0x7f0000001100)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd6}}) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1f, 0x40000003, 0x0) getsockopt(r0, 0x1, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x100b, &(0x7f0000000000), 0x10) compat_30___lstat13(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = getsid(0x0) getsid(0x0) compat_50_wait4(0x0, 0x0, 0x0, 0x0) ptrace(0xb, r2, &(0x7f0000000000), 0x0) writev(r1, &(0x7f0000000180), 0x2) write(r1, &(0x7f0000000040)='\t', 0xa) _ksem_close(0x0) 7.804069315s ago: executing program 2: compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x8000000}}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x8, &(0x7f0000000200), 0x0, 0x0, 0xfffffffffffffd68}, 0x0) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='./file0\x00') r3 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0x38) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) unlink(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f0000000100)='./file0\x00', 0x80002005, 0x0) lchown(0x0, 0x0, 0x0) fdatasync(0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r5 = getsid(0x0) ptrace(0x9, r5, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000003140)) __wait450(r5, &(0x7f0000000340), 0x8, &(0x7f0000003240)) r6 = getppid() setpgid(r5, r6) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') compat_43_ogetdirentries(r3, 0x0, 0x3, 0x0) r7 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000055b000/0x4000)=nil) shmat(0x0, &(0x7f00002a7000/0x2000)=nil, 0x0) compat_12_fstat12(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000440)={{0x3ca, r1, r8, r0, r2, 0x200, 0x20}, 0x2, 0x8, r5, r5, 0x5, 0x6}) unlinkat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x800) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) 7.698485071s ago: executing program 4: __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) symlink(0x0, &(0x7f0000000240)='./file0\x00') open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) __lstat50(&(0x7f0000000000)='.\x00', 0x0) 7.472011146s ago: executing program 3: r0 = semget$private(0x0, 0x2, 0x83) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/40) semop(r0, &(0x7f0000000040)=[{0x2, 0x5, 0x1000}, {0x6, 0x2, 0x800}, {0x0, 0x0, 0x1000}, {0x4, 0x3}, {0x4, 0x200, 0x1800}, {0x3, 0x1000, 0x1800}, {0x0, 0x80}, {0x2, 0x335, 0x1000}], 0x8) r1 = semget(0x1, 0x1, 0x0) ____semctl50$GETNCNT(r1, 0x0, 0x3) r2 = getuid() r3 = __fhopen40(&(0x7f0000000080)="8d6f84e245c471deb4444471c2cc52b3e95847cbda988a9b45a5c65a9b5b3b48eefbf081131cc0fee59d2be6c45d5a5e5adbeb530eba9999b8f4bd2c46c4c758", 0x40, 0x40) __getdents30(r3, &(0x7f00000000c0)=""/248, 0xf3dc) setreuid(r2, 0x0) r4 = openat(r3, &(0x7f00000001c0)='./file0\x00', 0x2, 0x1) semget(0x2, 0x1, 0x42) __fhstat50(&(0x7f0000000200)="4777765b662c9c635f3855faa304f4a42c93477edb1c7743ef3a9b29ad55d7208a20a34fa47cdc43d8664abcd2e3c4db9ebaaccb559886f71a57f8c6f4a70dc05105502233ff7b6426e7", 0x4a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) __posix_lchown(r4, r2, r5) semctl$GETPID(r0, 0x1, 0x4, &(0x7f0000000340)=""/116) r6 = semget$private(0x0, 0x4, 0xcd) fstatat(r3, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f00000004c0)={{0x0, r2, r5, r2, r7, 0x2, 0x4}, 0x4, 0x7, 0xd8d}) ____semctl50$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000580)=@array=&(0x7f0000000540)=0xff) r9 = semget(0x3, 0x3, 0x269) compat_50_____semctl13$GETNCNT(r9, 0x0, 0x3) mknod(&(0x7f00000005c0)='./file0\x00', 0xc000, r8) semop(r0, &(0x7f0000000600)=[{0x2, 0x5, 0x1800}, {0x0, 0x8, 0x800}], 0x2) __select50(0x40, &(0x7f0000000640)={0x4, 0x82, 0x7, 0x8, 0x5, 0x3ff, 0x8001, 0xffffffffffffffff}, &(0x7f0000000680)={0x800, 0x6, 0x40, 0xf5, 0x7, 0x80000001, 0xb029, 0x600000000}, &(0x7f00000006c0)={0xffffffff7fffffff, 0x0, 0x2, 0x7, 0x2, 0x1000, 0x100000000, 0x3}, &(0x7f0000000700)={0x0, 0x6}) getsockopt$SO_PEERCRED(r3, 0xffff, 0x11, &(0x7f0000000740)={0x0}, 0xc) fktrace(r3, 0x0, 0x40000000, r10) r11 = semget$private(0x0, 0x3, 0x14) ____semctl50$GETVAL(r11, 0x0, 0x5) semget(0x2, 0x3, 0x620) 7.24788843s ago: executing program 5: connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r0 = socket(0x18, 0x3, 0x0) socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0x2}, 0x8) 5.635222249s ago: executing program 4: open(0x0, 0x0, 0x0) __mount50(0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) __clone(0x9ff, &(0x7f0000000000)="2f5879528546080b10fbc9197df04af438b50341889115a45f22de011b29fb91fab95287") __mount50(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000274000/0x1000)=nil, 0x1000, 0x0, 0x210, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd49f275d97cc01bb, 0x1810, 0xffffffffffffffff, 0x0, 0x0) 5.138144796s ago: executing program 3: open(&(0x7f0000000180)='./file0\x00', 0x280, 0x0) r0 = socket(0x1, 0x1, 0x0) ioctl$FIOSEEKHOLE(r0, 0x8018698d, &(0x7f0000000000)=0x8000000000000032) __mount50(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) setsockopt(r1, 0x1000000000029, 0x1d, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) 5.041420851s ago: executing program 1: _ksem_open(0x0, 0x0, 0x1c0, 0x3fe, 0x0) pipe(&(0x7f0000001100)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd6}}) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1f, 0x40000003, 0x0) getsockopt(r0, 0x1, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x100b, &(0x7f0000000000), 0x10) compat_30___lstat13(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = getsid(0x0) getsid(0x0) compat_50_wait4(0x0, 0x0, 0x0, 0x0) ptrace(0xb, r2, &(0x7f0000000000), 0x0) writev(r1, &(0x7f0000000180), 0x2) write(r1, &(0x7f0000000040)='\t', 0xa) _ksem_close(0x0) 4.459430371s ago: executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) lchflags(&(0x7f0000000040)='./file0\x00', 0x20004) unlink(&(0x7f0000000000)='./file0\x00') 4.187293253s ago: executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) __mount50(&(0x7f0000000180)='kernfs\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0x0) r0 = socket(0x18, 0x2, 0x0) close(r0) r1 = socket(0x800000018, 0x1, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) socketpair(0x18, 0x3, 0x0, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) modctl$MODCTL_LOAD(0x0, &(0x7f0000000380)={&(0x7f0000000240), 0x0, &(0x7f00000002c0)='\r', 0x1}) r2 = socket(0x800000018, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000040)=[0x7ff]) compat_50___lstat30(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) compat_43_osend(r5, &(0x7f0000000000)="3e1ded", 0x3, 0x0) shutdown(r4, 0x1) 4.154599118s ago: executing program 3: mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x200) r0 = getppid() setpriority(0x1, r0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0xd004c) 3.841348897s ago: executing program 2: mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x0, 0x0) 3.69248882s ago: executing program 1: r0 = socket(0x18, 0x5, 0x0) r1 = accept$inet6(r0, 0x0, &(0x7f0000000000)) getsockopt(r1, 0x7, 0x7, &(0x7f0000000040)=""/241, &(0x7f0000000140)=0xf1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x2, 0x2, 0x7f, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0xc0, 0x7f, [{{0x9, 0x4, 0x0, 0xf9, 0x2, 0x3, 0x1, 0x2, 0x3f, {0x9, 0x21, 0x80, 0x7, 0x1, {0x22, 0xb67}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xd4, 0x3, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1, 0x8, 0x2}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x350, 0x0, 0x65, 0x6, 0x8, 0x29}, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x82, 0x5, 0x1, 0xd1, 0x1}]}, 0x1, [{0xab, &(0x7f0000000300)=@string={0xab, 0x3, "07696ff351a0998861798915e0bd7bfd9a35387314402c7511e9994bf41fb1b27104d5e411ea55e46b7a145a97eeadc9687cdb08124d03bb0532d65d904ec9e3a079c5d5ab14a4f28679a5073b5f5255c164af9ec36b53fc4e3ad314f12d7229bf1d5c3cb8ac9a9cc7c03c47677719540c0a9cea9e33b97a5330aa5d8157fb1dc018898e56765151b2e73308ab18e4729257782241862b3ea4ba830ac7d55ade3ce8a4297a51e88b1d"}}]}) poll(&(0x7f0000000400)=[{r5, 0x43}, {r2, 0x8}, {r7, 0x100}, {r8, 0x8}], 0x4, 0x0) preadv(r6, &(0x7f0000000900)=[{&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000000500)=""/136, 0x88}, {&(0x7f00000005c0)=""/137, 0x89}, {&(0x7f0000000680)=""/218, 0xda}, {&(0x7f0000000780)=""/88, 0x58}, {&(0x7f0000000800)=""/201, 0xc9}], 0x6, 0x3) socket(0x1f, 0x40000000, 0xc9) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) setsockopt(r3, 0x3, 0x2, &(0x7f0000000980)="9d760eb044f95e59d656469ec00b766bc9a38fa2b92bae6301653b9327b4dc06990a902cbd8bd2bc89612417b6afc94cc2fcaab85d9624c619cc2dacfd11951b4e9b067863446f728619cf7c04237e608d7fa3029e083419259e9069ee5dc99be32e748976ac930e78827f3409aa4265cd19af05b6992c9f9cb008839d2b86966521256a0e77ea84b8bb231e019555f227e568a5f1ee50ad1acad54b0553e28985070290e5b7aa47f48334733e7a100139d6685c8d9b6768f5fed3e75b87722d602ab2efc0fb0244c5368c8537f3bcd1f0a60ae72675", 0xd6) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x90, r5, 0x0, 0xb43a) compat_12_getdirentries(r7, &(0x7f0000000a80)=""/51, 0x200, &(0x7f0000000ac0)=0x100000000) recvfrom$unix(r8, &(0x7f0000000b00)=""/79, 0x4f, 0x200, &(0x7f0000000b80)=@abs={0x0, 0x0, 0x2}, 0x8) r9 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffa000/0x4000)=nil) shmat(r9, &(0x7f0000ffc000/0x4000)=nil, 0x3000) _ksem_trywait(0x50535244) accept$inet6(r8, 0x0, &(0x7f0000000bc0)) r10 = getppid() compat_50_wait4(r10, 0x0, 0x10, 0x0) socket$inet6(0x18, 0x3, 0xd3) r11 = semget(0x0, 0x1, 0x611) semop(r11, &(0x7f0000000c00)=[{0x3, 0x80}, {0x3, 0x1f}, {0x0, 0x8, 0x1000}, {0x4, 0xfff, 0x1800}, {0x3, 0xfff8, 0x800}, {0x0, 0x7ff, 0x1000}], 0x6) recvfrom$inet(r6, &(0x7f0000000c40)=""/140, 0x8c, 0x284, 0x0, 0x0) write(r0, &(0x7f0000000d00)="151cba8a4c2c78bbc303a0f352e3e83425bad61b71fdebf5524ea6bf7e0cb5e98be99a906aa908", 0x27) compat_43_oaccept(r4, &(0x7f0000000d40)=""/184, &(0x7f0000000e00)=0xb8) paccept(r7, &(0x7f0000000e40)=@family, &(0x7f0000000e80)=0xe, 0x20000000) getsockname$inet6(r0, &(0x7f0000000ec0), &(0x7f0000000f00)=0xc) 2.569617873s ago: executing program 3: socket(0x18, 0x1, 0x0) __fhstat50(&(0x7f0000000180), 0x0, 0x0) compat_40_mount(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") socket(0x1, 0x20000000, 0x99) __clone(0x900, 0x0) r0 = getsid(0x0) r1 = getsid(0x0) ptrace(0x9, r1, 0x0, 0x0) compat_50_wait4(0x0, 0x0, 0x0, 0x0) ptrace(0xe, r0, &(0x7f0000000000), 0x8000000002008) 1.872539171s ago: executing program 1: mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 861.041017ms ago: executing program 2: mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x0, 0x0) 711.34819ms ago: executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) __mount50(&(0x7f0000000180)='kernfs\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0x0) r0 = socket(0x18, 0x2, 0x0) close(r0) r1 = socket(0x800000018, 0x1, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) socketpair(0x18, 0x3, 0x0, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) modctl$MODCTL_LOAD(0x0, &(0x7f0000000380)={&(0x7f0000000240), 0x0, &(0x7f00000002c0)='\r', 0x1}) r2 = socket(0x800000018, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000040)=[0x7ff]) compat_50___lstat30(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) compat_43_osend(r5, &(0x7f0000000000)="3e1ded", 0x3, 0x0) shutdown(r4, 0x1) 328.851409ms ago: executing program 2: open(0x0, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x0, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 215.690087ms ago: executing program 2: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchroot(r0) compat_43_ommap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x800, r0, 0x1000000000000) 97.016315ms ago: executing program 2: compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000800)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x8000d27c}}}) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f0000000100)='mfs\x00'], 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffffff7ff}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) r4 = __vfork14() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{0x10001, r0, r3, r2, r1, 0x800, 0x3}, 0x6, 0x1, r4, 0xffffffffffffffff, 0x9c1, 0x0, 0xffffffffffffff7f, 0x100000000}) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) r5 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) compat_30_getdents(r5, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x4f4b) r6 = open$dir(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket(0x18, 0x1, 0x0) setsockopt(r7, 0x1000000029, 0x32, &(0x7f0000000000)="b211", 0x2) ioctl$FIOASYNC(r6, 0x80104303, &(0x7f00000001c0)) 0s ago: executing program 4: __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) symlink(0x0, &(0x7f0000000240)='./file0\x00') open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_40_mount(&(0x7f0000000140)='umap\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)) __lstat50(&(0x7f0000000000)='.\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.101' (ED25519) to the list of known hosts. 2024/06/17 08:32:39 fuzzer started 2024/06/17 08:32:39 dialing manager at 10.128.0.163:30036 2024/06/17 08:32:39 starting 6 executor processes [ 53.5519480] tap2: detached [ 55.8019536] tap1: detached [ 57.1019575] tap5: detached [ 60.7119717] tap3: detached [ 62.3619825] tap4: detached [ 63.9919801] tap5: detached [ 65.5919932] tap2: detached [ 66.2019866] tap3: detached [ 66.7819856] tap0: detached [ 68.8219947] tap2: detached [ 71.0319988] tap0: detached [ 71.5220033] tap5: detached [ 73.4720077] tap3: detached [ 73.8620059] tap1: detached [ 74.8520092] tap2: detached [ 75.1120076] tap4: detached [ 76.2720282] tap0: detached [ 79.9420242] tap4: detached [ 80.7720347] tap2: detached [ 81.0720355] tap0: detached [ 82.9320417] tap1: detached [ 84.7420605] tap5: detached [ 84.8520432] tap2: detached [ 85.1120425] tap0: detached [ 87.4120441] tap5: detached [ 89.6420492] tap0: detached [ 90.7420565] tap2: detached [ 92.0720614] tap3: detached [ 92.8920689] tap4: detached [ 93.4020834] tap5: detached [ 95.8020709] tap1: detached [ 96.4320742] tap4: detached [ 98.3320773] tap1: detached [ 98.9620779] tap2: detached [ 100.1220810] tap4: detached [ 101.5020848] tap5: detached [ 102.4520881] tap3: detached [ 103.9720926] tap0: detached [ 105.1220957] tap2: detached [ 107.0221080] tap3: detached [ 107.5321100] tap1: detached [ 109.8621103] tap0: detached [ 110.5121090] tap5: detached [ 111.0921131] tap4: detached [ 112.4221158] tap2: detached [ 114.2921190] tap1: detached [ 114.5121202] tap0: detached [ 117.3721434] tap2: detached [ 118.0421340] tap3: detached [ 119.5321444] tap0: detached [ 121.1421416] tap5: detached [ 122.3021439] tap1: detached [ 122.4621440] tap4: detached [ 123.6921475] tap2: detached [ 125.8821564] tap1: detached [ 127.3321668] tap0: detached [ 127.5021584] tap3: detached [ 128.6821636] tap4: detached [ 130.5421690] tap3: detached [ 132.1421719] tap5: detached [ 133.6321854] WARNING: defaulted mmap() share type to MAP_SHARED (pid 7895 command syz-executor.4) [ 134.2621788] tap2: detached [ 134.9921790] tap3: detached [ 137.2021880] tap4: detached [ 139.0921981] tap1: detached [ 139.2321913] tap0: detached [ 139.5621911] tap5: detached [ 140.3021933] tap3: detached [ 141.0321990] tap2: detached [ 143.6422086] WARNING: module error: vfs load failed for `./file0', error 78 [ 144.8622078] tap3: detached [ 144.9122153] tap2: detached [ 146.9922137] tap1: detached [ 148.6922236] tap4: detached [ 149.8722249] tap0: detached [ 150.3222244] tap5: detached [ 151.5522333] tap2: detached [ 152.8322406] tap4: detached [ 153.4922414] tap1: detached [ 153.8822381] tap3: detached [ 156.5622415] tap0: detached [ 158.3522539] tap4: detached [ 159.0122618] tap5: detached [ 159.8122521] tap2: detached [ 160.5122615] tap1: detached [ 160.6322614] tap3: detached [ 162.5322591] tap0: detached [ 164.4622657] tap4: detached [ 165.7322758] tap1: detached [ 167.6722800] tap5: detached [ 168.3522784] tap2: detached [ 169.6822805] tap0: detached [ 170.1223101] tap3: detached [ 170.8522837] tap5: detached [ 172.3222865] tap2: detached [ 173.7123012] tap4: detached [ 175.5322967] tap2: detached [ 176.7623026] tap5: detached [ 178.5823048] tap0: detached [ 178.7823056] tap3: detached [ 180.0923247] tap5: detached [ 182.5323239] tap3: detached [ 182.6423201] tap5: detached [ 184.9923304] tap5: detached [ 185.3423224] tap0: detached [ 188.2623348] tap3: detached [ 188.5323414] tap4: detached [ 189.5723379] tap1: detached [ 191.8523430] tap2: detached [ 192.5123460] tap0: detached [ 195.4823540] tap3: detached [ 195.6123612] tap2: detached [ 196.9423574] tap4: detached [ 197.7423582] tap5: detached [ 197.8523706] tap0: detached [ 201.0523690] tap1: detached [ 201.2423702] tap3: detached [ 201.5423718] tap2: detached [ 202.2523748] tap0: detached [ 203.6323972] tap4: detached [ 206.8523845] tap3: detached [ 207.3823861] tap0: detached [ 208.0523914] tap2: detached [ 210.1123963] tap5: detached [ 210.7123955] tap3: detached [ 210.9023956] tap4: detached [ 212.6624017] tap1: detached [ 213.7624037] tap3: detached [ 215.6524192] tap0: detached [ 218.1224172] tap5: detached [ 218.5624227] tap2: detached [ 219.4424190] tap3: detached [ 220.7224227] tap4: detached [ 222.5524369] tap1: detached [ 222.7324388] tap0: detached [ 225.0224609] tap2: detached [ 225.4224381] tap4: detached [ 225.5524629] tap3: detached [ 228.2824470] tap0: detached [ 230.5924636] tap3: detached [ 230.9124552] tap2: detached [ 232.7724676] tap4: detached [ 233.2524607] tap1: detached [ 234.6224676] tap0: detached [ 236.4924694] tap3: detached [ 237.3924772] tap1: detached [ 240.3924814] tap4: detached [ 240.7224796] tap2: detached [ 242.3124870] tap1: detached [ 242.5924912] tap3: detached [ 245.0124929] tap0: detached [ 245.5424955] tap2: detached [ 246.6125057] tap3: detached [ 247.8825003] tap1: detached [ 249.7625059] tap4: detached [ 249.8925083] tap2: detached [ 250.7025088] tap3: detached [ 252.4825169] tap0: detached [ 252.7425171] tap1: detached [ 254.9425237] tap2: detached [ 256.4225271] tap4: detached [ 257.2225299] tap1: detached [ 258.4125316] tap3: detached [ 259.2825355] tap0: detached [ 260.2025379] tap2: detached [ 261.3825402] tap4: detached [ 263.2725469] tap1: detached [ 265.4625536] tap3: detached [ 265.9525545] tap0: detached [ 266.1625530] tap4: detached [ 267.7825589] tap1: detached [ 271.0225658] tap2: detached [ 271.1225841] tap0: detached [ 271.2225691] tap4: detached [ 273.4425734] tap3: detached [ 274.6425768] tap4: detached [ 276.1125804] tap1: detached [ 277.1525914] tap3: detached [ 278.8825909] tap0: detached [ 280.0725952] tap4: detached [ 280.7425988] tap1: detached [ 285.0026074] tap2: detached [ 285.3626097] tap4: detached [ 285.8226133] tap5: detached [ 285.9926122] tap0: detached [ 287.1026131] Size of accounting file not a multiple of 64 - incomplete record truncated [ 289.4226198] tap1: detached [ 290.1726319] tap0: detached [ 290.6826248] tap4: detached [ 292.2426512] tap5: detached [ 292.6226318] tap3: detached [ 296.0226418] tap2: detached [ 297.1826418] tap1: detached [ 298.3926476] tap0: detached [ 299.8726764] tap5: detached [ 300.4826572] tap3: detached [ 301.5426533] tap2: detached [ 302.1226565] tap1: detached [ 302.5726590] tap4: detached [ 306.4326751] tap5: detached [ 307.5826710] tap2: detached [ 308.6926719] tap0: detached [ 309.2426748] tap1: detached [ 309.4926828] tap3: detached [ 313.4326885] tap5: detached [ 313.6626908] tap3: detached [ 315.4826904] tap2: detached [ 315.6026995] WARNING: module error: vfs load failed for `./file0', error 78 [ 316.1826982] tap1: detached [ 319.3227060] tap0: detached [ 320.4627035] tap3: detached [ 320.8227078] tap4: detached [ 321.6327121] tap2: detached [ 322.7727138] tap1: detached [ 322.8527173] tap5: detached [ 324.5327179] btuart0: major 8 minor 262146 [ 324.8527268] btuart0: detached [ 326.0127206] tap0: detached [ 327.5527339] tap3: detached [ 328.4127322] tap2: detached [ 329.1927316] tap4: detached [ 331.9027403] tap5: detached [ 333.6127569] tap4: detached [ 334.1627496] tap2: detached [ 334.2827470] tap3: detached [ 335.2527490] tap0: detached [ 336.5027574] tap1: detached [ 338.1827573] tap4: detached [ 340.1127661] tap0: detached [ 341.6127692] tap4: detached [ 342.8527779] tap2: detached [ 343.0527710] tap1: detached [ 345.3327785] uhub3: device problem, disabling port 1 [ 346.3827838] tap0: detached [ 347.6627836] tap2: detached [ 347.9227841] tap1: detached [ 348.7227906] tap3: detached [ 351.4327997] tap4: detached [ 352.6928022] tap5: detached [ 353.9228034] tap0: detached [ 354.7928138] tap1: detached [ 355.8228083] tap3: detached [ 357.2228120] tap1: detached [ 359.9628198] tap4: detached [ 360.2428219] tap1: detached [ 360.2828185] tap0: detached [ 361.4428250] tap5: detached [ 363.5428311] tap2: detached [ 366.4028400] tap1: detached [ 366.8328403] tap2: detached [ 367.9728612] tap0: detached [ 369.1128486] tap2: detached [ 371.0928528] tap4: detached [ 371.3728537] tap0: detached [ 372.5728639] tap2: detached [ 375.1728670] tap1: detached [ 375.6928663] tap5: detached [ 376.6928762] WARNING: defaulted mmap() share type to MAP_SHARED (pid 3623 command syz-executor.1) [ 376.7059653] WARNING: defaulted mmap() share type to MAP_SHARED (pid 3623 command syz-executor.1) [ 376.8628710] tap2: detached [ 377.2228758] tap4: detached [ 378.2428807] WARNING: module error: vfs load failed for `./file0', error 78 [ 379.3728850] tap0: detached [ 381.5728826] tap5: detached [ 381.7028920] sockaddr_getsize_by_family: (syz-executor.2:4592:14463) Unhandled address family=0 [ 383.8928978] tap4: detached [ 385.6028932] tap2: detached [ 385.8928952] tap5: detached [ 389.1929029] tap5: detached [ 391.2829103] tap3: detached [ 392.4429148] sockaddr_getsize_by_family: (syz-executor.5:4759:5704) Unhandled address family=0 [ 394.3729287] tap4: detached [ 394.3929366] tap2: detached [ 395.7329227] tap5: detached [ 399.3729432] tap5: detached [ 399.4929352] tap2: detached [ 402.9629445] tap3: detached [ 403.0429465] tap5: detached [ 405.5729500] tap2: detached [ 408.3629582] tap5: detached [ 408.9729699] tap4: detached [ 409.8429631] tap1: detached [ 411.8129680] tap5: detached [ 413.8929816] WARNING: defaulted mmap() share type to MAP_SHARED (pid 4932 command syz-executor.4) [ 413.9030813] WARNING: defaulted mmap() share type to MAP_SHARED (pid 4932 command syz-executor.4) [ 422.7830148] tap5: detached [ 422.8630026] tap3: detached [ 423.9430021] tap0: detached [ 429.1330277] tap3: detached [ 429.3030183] tap0: detached [ 430.2130323] tap1: detached [ 432.6130372] tap3: detached [ 436.4430395] tap0: detached [ 436.4930413] tap1: detached [ 439.2630472] tap0: detached [ 441.6430622] tap2: detached [ 442.5330582] tap3: detached [ 446.1430666] tap4: detached [ 448.8730835] tap2: detached [ 448.9530728] tap0: detached [ 451.1430866] tap1: detached [ 453.0530913] tap2: detached [ 453.3530871] WARNING: defaulted mmap() share type to MAP_SHARED (pid 5823 command syz-executor.0) [ 453.3530871] WARNING: defaulted mmap() share type to MAP_SHARED (pid 5823 command syz-executor.0) [ 455.6830926] tap1: detached [ 459.9631068] tap5: detached [ 460.2731113] tap2: detached [ 460.7331092] tap4: detached [cpu0: softints stuck for 16 seconds [ 478.0031590] cpu0: Begin traceback... [ 478.0031590] vpanic() at netbsd:vpanic+0x27a [ 478.0031590] panic() at netbsd:panic+0x9d [ 478.0031590] heartbeat() at netbsd:heartbeat+0x759 [ 478.0031590] hardclock() at netbsd:hardclock+0x182 [ 478.0031590] Xresume_lapic_ltimer() at netbsd:Xresume_lapic_ltimer+0x1e [ 478.0031590] --- interrupt --- [ 478.0031590] __sanitizer_cov_trace_pc() at netbsd:__sanitizer_cov_trace_pc+0x1d [ 478.0031590] procfs_readdir() at netbsd:procfs_readdir+0x1228 [ 478.0031590] VOP_READDIR() at netbsd:VOP_READDIR+0x15c [ 478.0031590] getcwd_scandir() at netbsd:getcwd_scandir+0x3ba [ 478.0031590] getcwd_common() at netbsd:getcwd_common+0x5c2 [ 478.0031590] exec_makepathbuf() at netbsd:exec_makepathbuf+0x275 [ 478.0031590] execve_loadvm() at netbsd:execve_loadvm+0x1a1 [ 478.0031590] execve1() at netbsd:execve1+0xde [ 478.0031590] sys_execve() at netbsd:sys_execve+0x5f [ 478.0031590] sys___syscall() at netbsd:sys___syscall+0x10e [ 478.0031590] syscall() at netbsd:syscall+0x35c [ 478.0031590] --- syscall (number 59 via SYS_syscall) --- [ 478.0031590] netbsd:syscall+0x35c: [ 478.0031590] cpu0: End traceback... [ 478.0031590] fatal breakpoint trap in supervisor mode [ 478.0031590] trap type 1 code 0 rip 0xffffffff8023240d cs 0x8 rflags 0x246 cr2 0xc000253900 ilevel 0x7 rsp 0xffffa482516df698 [ 478.0031590] curlwp 0xffffa480143145c0 pid 5823.5347 lowest kstack 0xffffa482516d92c0 Stopped in pid 5823.5347 (syz-executor.0) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0x105 vpanic() at netbsd:vpanic+0x27a panic() at netbsd:panic+0x9d heartbeat() at netbsd:heartbeat+0x759 hardclock() at netbsd:hardclock+0x182 Xresume_lapic_ltimer() at netbsd:Xresume_lapic_ltimer+0x1e --- interrupt --- __sanitizer_cov_trace_pc() at netbsd:__sanitizer_cov_trace_pc+0x1d procfs_readdir() at netbsd:procfs_readdir+0x1228 VOP_READDIR() at netbsd:VOP_READDIR+0x15c getcwd_scandir() at netbsd:getcwd_scandir+0x3ba getcwd_common() at netbsd:getcwd_common+0x5c2 exec_makepathbuf() at netbsd:exec_makepathbuf+0x275 execve_loadvm() at netbsd:execve_loadvm+0x1a1 execve1() at netbsd:execve1+0xde sys_execve() at netbsd:sys_execve+0x5f sys___syscall() at netbsd:sys___syscall+0x10e syscall() at netbsd:syscall+0x35c --- syscall (number 59 via SYS_syscall) --- netbsd:syscall+0x35c: Panic string: cpu0: softints stuck for 16 seconds PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 15026 15026 3 1 180 ffffa48012c492c0 syz-executor.2 parked 6829 5990 3 1 0 ffffa480149e9b80 syz-executor.2 fstchg 6829 18391 3 1 0 ffffa48013458940 syz-executor.2 fstchg 6829 17354 3 1 180 ffffa480144ec200 syz-executor.2 fstcnt 6829 6200 3 1 10000000 ffffa48012c67740 syz-executor.2 vfork 6829 6829 3 1 10000000 ffffa48013444040 syz-executor.2 rwlock 6224 6224 2 0 0 ffffa48012a72480 sh 16604 16604 3 1 0 ffffa4801343bbc0 syz-executor.1 rwlock 13488 14267 3 1 180 ffffa48012ca4900 syz-executor.3 parked 13488 5522 3 1 180 ffffa48012ca44c0 syz-executor.3 parked 13488 13488 2 0 10000000 ffffa48012be4600 syz-executor.3 6614 6614 3 0 180 ffffa4801342eb80 syz-executor.2 nanoslp 6020 6020 2 0 0 ffffa48014314180 syz-executor.4 16467 16467 3 1 180 ffffa48012ac7500 syz-executor.5 wait 5823 > 5347 7 0 1140000 ffffa480143145c0 syz-executor.0 5823 5823 2 0 11000040 ffffa48013462100 syz-executor.0 5365 5365 3 1 1000000 ffffa48012cbd100 syz-executor.0 rwlock 5160 5160 4 0 1000100 ffffa4801430d140 syz-executor.3 16997 16997 3 0 180 ffffa48012cfe680 syz-executor.3 parked 5089 5089 3 0 180 ffffa480126d9340 syz-executor.5 parked 5112 5470 3 0 11100000 ffffa48012c00a80 syz-executor.5 vfork 5112 5112 2 0 11000040 ffffa48012a53340 syz-executor.5 4932 7102 2 0 1100000 ffffa48012d7a480 syz-executor.4 4932 4932 2 0 11000040 ffffa48014049500 syz-executor.4 15027 15027 3 1 180 ffffa480134448c0 syz-executor.0 parked 15531 5612 3 1 11100000 ffffa48014314a00 syz-executor.0 vfork 15531 15531 2 0 11000040 ffffa48013f5d740 syz-executor.0 3623 4347 2 0 1100000 ffffa48012c49700 syz-executor.1 3623 3623 2 0 11000040 ffffa480126d7b80 syz-executor.1 13823 13823 3 1 180 ffffa48013f5d300 syz-executor.3 parked 4232 4248 3 1 1100000 ffffa480129c1b40 syz-executor.3 vfork 4232 4232 2 0 11000040 ffffa48012cbd540 syz-executor.3 1Mutex error: mutex_vector_enter,519: assertion failed: !cpu_intr_p() [ 478.0031590] lock address : ffffa48013343380 [ 478.0031590] type : sleep/adaptive [ 478.0031590] initialized : netbsd:pmap_ctor+0x93 [ 478.0031590] shared holds : 0 exclusive: 0 [ 478.0031590] shares wanted: 0 exclusive: 0 [ 478.0031590] relevant cpu : 0 last held: 0 [ 478.0031590] relevant lwp : 0xffffa480143145c0 last held: 000000000000000000 [ 478.0031590] last locked : netbsd:pmap_enter_ma+0x396 [ 478.0031590] unlocked* : netbsd:pmap_enter_ma+0x1024 [ 478.0031590] owner field : 000000000000000000 wait/spin: 0/0 [ 478.0031590] Turnstile: no active turnstile for this lock. [ 478.0031590] Skipping crash dump on recursive panic [ 478.0031590] panic: LOCKDEBUG: Mutex error: mutex_vector_enter,519: assertion failed: !cpu_intr_p() [ 478.0031590] cpu0: Begin traceback... [ 478.0031590] vpanic() at netbsd:vpanic+0x27a [ 478.0031590] panic() at netbsd:panic+0x9d [ 478.0031590] lockdebug_abort1() at netbsd:lockdebug_abort1+0x149 [ 478.0031590] lockdebug_abort() at netbsd:lockdebug_abort+0xa2 [ 478.0031590] mutex_enter() at netbsd:mutex_enter+0xa88 [ 478.0031590] pmap_extract() at netbsd:pmap_extract+0xd8 [ 478.0031590] db_validate_address() at netbsd:db_validate_address+0xb9 [ 478.0031590] db_read_bytes() at netbsd:db_read_bytes+0x27 [ 478.0031590] db_show_all_procs() at netbsd:db_show_all_procs+0x897 [ 478.0031590] db_command() at netbsd:db_command+0x369 [ 478.0031590] db_command_loop() at netbsd:db_command_loop+0x390 [ 478.0031590] db_trap() at netbsd:db_trap+0x226 [ 478.0031590] kdb_trap() at netbsd:kdb_trap+0x262 [ 478.0031590] trap() at netbsd:trap+0x42f [ 478.0031590] --- trap (number 1) --- [ 478.0031590] breakpoint() at netbsd:breakpoint+0x5 [ 478.0031590] db_panic() at netbsd:db_panic+0x105 [ 478.0031590] vpanic() at netbsd:vpanic+0x27a [ 478.0031590] panic() at netbsd:panic+0x9d [ 478.0031590] heartbeat() at netbsd:heartbeat+0x759 [ 478.0031590] hardclock() at netbsd:hardclock+0x182 [ 478.0031590] Xresume_lapic_ltimer() at netbsd:Xresume_lapic_ltimer+0x1e [ 478.0031590] --- interrupt --- [ 478.0031590] __sanitizer_cov_trace_pc() at netbsd:__sanitizer_cov_trace_pc+0x1d [ 478.0031590] procfs_readdir() at netbsd:procfs_readdir+0x1228 [ 478.0031590] VOP_READDIR() at netbsd:VOP_READDIR+0x15c [ 478.0031590] getcwd_scandir() at netbsd:getcwd_scandir+0x3ba [ 478.0031590] getcwd_common() at netbsd:getcwd_common+0x5c2 [ 478.0031590] exec_makepathbuf() at netbsd:exec_makepathbuf+0x275 [ 478.0031590] execve_loadvm() at netbsd:execve_loadvm+0x1a1 [ 478.0031590] execve1() at netbsd:execve1+0xde [ 478.0031590] sys_execve() at netbsd:sys_execve+0x5f [ 478.0031590] sys___syscall() at netbsd:sys___syscall+0x10e [ 478.0031590] syscall() at netbsd:syscall+0x35c [ 478.0031590] --- syscall (number 59 via SYS_syscall) --- [ 478.0031590] netbsd:syscall+0x35c: [ 478.0031590] cpu0: End traceback... [ 478.0031590] fatal breakpoint trap in supervisor mode [ 478.0031590] trap type 1 code 0 rip 0xffffffff8023240d cs 0x8 rflags 0x246 cr2 0xc000253900 ilevel 0x8 rsp 0xffffa482516de960 [ 478.0031590] curlwp 0xffffa480143145c0 pid 5823.5347 lowest kstack 0xffffa482516d92c0 Stopped in pid 5823.5347 (syz-executor.0) at netbsd:breakpoint+0x5: leave