Warning: Permanently added '10.128.0.156' (ECDSA) to the list of known hosts. 2020/01/13 05:13:47 fuzzer started 2020/01/13 05:13:47 dialing manager at 10.128.0.105:39543 2020/01/13 05:13:48 syscalls: 215 2020/01/13 05:13:48 code coverage: enabled 2020/01/13 05:13:48 comparison tracing: enabled 2020/01/13 05:13:48 extra coverage: support is not implemented in syzkaller 2020/01/13 05:13:48 setuid sandbox: support is not implemented in syzkaller 2020/01/13 05:13:48 namespace sandbox: support is not implemented in syzkaller 2020/01/13 05:13:48 Android sandbox: support is not implemented in syzkaller 2020/01/13 05:13:48 fault injection: support is not implemented in syzkaller 2020/01/13 05:13:48 leak checking: support is not implemented in syzkaller 2020/01/13 05:13:48 net packet injection: support is not implemented in syzkaller 2020/01/13 05:13:48 net device setup: support is not implemented in syzkaller 2020/01/13 05:13:48 concurrency sanitizer: support is not implemented in syzkaller 2020/01/13 05:13:48 devlink PCI setup: support is not implemented in syzkaller 05:13:55 executing program 0: r0 = semget(0x1, 0x23e107c2486197d, 0x525) semctl$IPC_RMID(r0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') socketpair(0x18, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f0000000080)=@in6, &(0x7f00000000c0)=0xc) r3 = fcntl$dupfd(r1, 0x0, 0xffffffffffffff9c) mkdirat(r3, &(0x7f0000000100)='./file0\x00', 0x0) readlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/100, 0x64) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) open(&(0x7f00000002c0)='./file0\x00', 0x1080001, 0x4) r4 = dup(0xffffffffffffff9c) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x3}, 0x8) r5 = open(&(0x7f0000000340)='./file0\x00', 0x8000, 0x20) accept$inet6(r5, &(0x7f0000000380), &(0x7f00000003c0)=0xc) setsockopt$inet_opts(r3, 0x0, 0x484ba275535d5c13, &(0x7f0000000400)="81b8", 0x2) clock_nanosleep(0x40000000, 0x1, &(0x7f0000000440)={0x2, 0xe00}, &(0x7f0000000480)) r6 = socket$inet(0x2, 0x1, 0x52) fcntl$setflags(r6, 0x2, 0x1) r7 = fork() fcntl$lock(r3, 0xf, &(0x7f00000004c0)={0x3, 0x1, 0x0, 0x4, r7}) getsockname(0xffffffffffffff9c, &(0x7f0000000500)=@un=@file={0x0, ""/108}, &(0x7f0000000580)=0x6e) getpeername(r4, &(0x7f00000005c0)=@in6, &(0x7f0000000600)=0xc) r8 = socket(0x1, 0x1, 0x5e) getsockopt$sock_cred(r8, 0xffff, 0x11, &(0x7f0000000640), &(0x7f0000000680)=0xc) rename(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00') connect$unix(r2, &(0x7f0000000740)=@file={0x1, './file1\x00'}, 0xa) r9 = getuid() setuid(r9) r10 = fcntl$dupfd(0xffffffffffffffff, 0xc, r4) mknodat(r10, &(0x7f0000000780)='./file0\x00', 0xc000, 0x8001) 05:13:55 executing program 1: r0 = dup(0xffffffffffffffff) flock(r0, 0x8) getsockname$unix(r0, &(0x7f0000000000)=@file={0x0, ""/108}, &(0x7f0000000080)=0x6e) pread(r0, &(0x7f00000000c0)="2478a381b4418cae4a3405e65ac395c43f63291d50474e34438d2f18cfd72a75918c50d3347bbf79997626aa9f1952b443b56e3fc16a93899a1c8db8b02fe6caf155d85913aebd7cc8c8d23aab2cccccd6a88dc839bd950fedd8e0cc306eff0f89226e9288f826b4553385f9ee20e00e63029e44b917834d3f51e5f4d39adeb8136504f05c5dd491a6dec559a8e401f97ed22e7e8c5790aedf9aa53151", 0x9d, 0x3f) bind$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x0}, 0x8) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0xa) r1 = semget(0x2, 0x3, 0x290) semctl$GETPID(r1, 0x2, 0x4, &(0x7f0000000200)=""/217) mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x10) sendto(r0, &(0x7f0000000340)="9d246035a47b66170364bdedd5ebe3d74bcbeaed3cc9f1c663337324cb8604dbf2870ac0fb51a8ece66086d86c61621e0859ab184133744ae2135a4d98d2c796fdd22c130925", 0x46, 0xa, &(0x7f00000003c0)=@in6={0x18, 0x0, 0x7fffffff, 0x1f}, 0xc) getgroups(0x3, &(0x7f0000000400)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff]) getgroups(0x4, &(0x7f0000000440)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) setregid(r2, r3) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000480)) pread(0xffffffffffffff9c, &(0x7f00000004c0)="d65fa44951c5511ea0e79c2fce08adfea7979873461aee1744ab4efbde5fef9a4c0fd4aed21f86d71cffaef6c434b0af22e58c01bb821b124458f09382432f97e7c8d214a372a06f4cb8508c18872c1a47def0ac7b25cb5ec2ce2162814bf75da8d919f20b87", 0x66, 0x5) write(0xffffffffffffffff, &(0x7f0000000540)="7d50c6e48f8a99b24a5b58f0f51c609448610feea131dde2d775875934270337ac5229a73730bc66a235ccfd8b4d909d5084c6d3930c1c8e4cd38932196e6d9ed081a3e9d3f448d815b0092df3cd9eb45f3940ec2151386dd6cab6dcdf3421c5a663f5c0ed1bbe52942f4e009e575bd7a4f55ab0e2398294c4e4eca285bc1b452649cfac7c4a27b3b46a00590a673ff302fe55c8c940d8686cffaf6d431594dc6c1123fffc4b6db473d85bd0e6bb3da7854c26e71e8643bad71d4df1779373c42ae157", 0xc3) r4 = accept(0xffffffffffffffff, &(0x7f0000000640)=@un=@file={0x0, ""/4096}, &(0x7f0000001680)=0x1002) recvmsg(r4, &(0x7f00000019c0)={&(0x7f00000016c0)=@in, 0xc, &(0x7f0000001880)=[{&(0x7f0000001700)=""/90, 0x5a}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/84, 0x54}], 0x3, &(0x7f00000018c0)=""/207, 0xcf}, 0x1) pipe2(&(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000000) getpeername$unix(r5, &(0x7f0000001a40)=@abs, &(0x7f0000001a80)=0x8) pipe(&(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_DEL_MFC(r8, 0x29, 0x69, &(0x7f0000001b00)={{0x18, 0x3, 0x2, 0x9}, {0x18, 0x3, 0x10001, 0x3}, 0x7f, [0x2d3000, 0x73, 0xa1c, 0x3ff, 0x4, 0x9, 0x0, 0x8]}, 0x3c) fcntl$setflags(r6, 0x2, 0x2) r9 = posix_spawn(0xffffffffffffffff, &(0x7f0000001b40)='(\x00', &(0x7f0000001bc0)={0x101, 0x5, &(0x7f0000001b80)=@dup={0x1, r7, {0x79}}}, &(0x7f0000001c00)={0x8, 0x0, {0x3ff}, 0x5, {[0x401, 0x7, 0x80000000, 0x4]}, {[0x9, 0x10001, 0x9bd, 0x7fffffff]}}, &(0x7f0000001c40)=['!}]*\x00', '-\x00', ')\x00', '\x00', '\x8b/\\,\x00', '\x00', '\'(*\x00', '+'], &(0x7f0000001c80)=['}*/$}[\x00', '\'.]^.^\x00', '[{[\x00', '(\'!\x00']) r10 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) r11 = vfork() posix_spawn(r9, &(0x7f0000001cc0)=':/\x00', &(0x7f0000001d80)={0x7fff, 0x7f, &(0x7f0000001d40)=@open={0x0, r10, {&(0x7f0000001d00)='{\x00', 0xffff, 0x7}}}, &(0x7f0000001dc0)={0x8, r11, {0x9}, 0x0, {[0x10000, 0x8, 0x6, 0x800]}, {[0xfb1d, 0x2, 0x2, 0x3c1c0d67]}}, &(0x7f0000001e00)=['\x00'], &(0x7f0000001e40)=['\x00', '\x00', '.#(\x00', '}-\x00', '+\x00', '-\x00']) socketpair(0x1f, 0x40000000, 0x0, &(0x7f0000001e80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r12, 0xffff, 0x806, &(0x7f0000001ec0), &(0x7f0000001f00)=0x10) fchmodat(r5, &(0x7f0000001f40)='./file0\x00', 0x2, 0x200) 05:13:55 executing program 2: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x840, 0x2) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0xc896, 0x5}, {0x4, 0xfffffffffffffffd}}, 0x200) getsockname$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, ""/108}, &(0x7f0000000140)=0x6e) clock_nanosleep(0x7, 0x2, &(0x7f0000000180)={0x5d1bd945, 0x4}, 0x0) setrlimit(0x18, &(0x7f00000001c0)={0x100000001, 0xcf24}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r1 = accept$unix(0xffffffffffffff9c, &(0x7f00000002c0)=@file={0x0, ""/108}, &(0x7f0000000340)=0x6e) fchroot(r1) mknod(&(0x7f0000000380)='./file0\x00', 0x80, 0x6) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00') msgget$private(0x0, 0x10) _lwp_detach(0xffffffffffffffff) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r2 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x40000, 0x2) r3 = fork() fcntl$setown(r2, 0x6, r3) r4 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f00000004c0)="3fd020653ffda0d68cb07f098e9466e0f43da35c58a8691c18e5fe162d99d137c17ec4ed2da86ee341d69a87fa5e43def89ccb2efa676ad4b17a3ee3b2271d3bff5e509ab5fbe750956d5fe7e594059623cd78fae3b2317a16b6685661c2746423a0d0967f976471575f30b09dc69924c9d71b6fc6c9c51dc97f70079185030cf91e7c74f6b5cd5c84b5732fa2f2330ab8ebba2cd91ed101d58b4812b246c7ac50b023ed", 0xa4) getsockname(r1, &(0x7f0000000580)=@un=@file={0x0, ""/3}, &(0x7f00000005c0)=0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x200000, 0x90) getsockname(r5, &(0x7f0000000640)=@in, &(0x7f0000000680)=0xc) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f00000006c0)=""/185) r6 = accept$inet(0xffffffffffffff9c, &(0x7f0000000780), &(0x7f00000007c0)=0xc) setsockopt$inet_opts(r6, 0x0, 0x3, &(0x7f0000000800)="2fd59a045c676d3c78d908605d3441a8be795cb4e84e777f70efc18d325f58a4c932dbe5885f8a6a731c7e60c46b62513d88bbcf3ac56d84ab0167369992bd7f1e72d08c5dfdaa5d8fe91ef863b1c4c514f3552bb88a48d9a78d86a08d6ac5924a33a88ea202cdc966b24dd37f40496a14870666f472dc5b1c61c4bdc0923923173b5c1a5778cd0b3df65e377e514bdd58f1b7f38f9c674dd70fa6fd3da23ac152dab0bc16503e3529c786387aae7280d10e5b0cddc6b65e075578ec0bfe2bd4deb9f8e12bf99ea8b41e6dec0cdeee2551441e5832203e162a2099d127b7b1ed657b8efb192eb5de04fe1994e096f0ac6011934593", 0xf5) clock_settime(0x80000003, &(0x7f0000000900)={0x3, 0x5}) syz_emit_ethernet(0x68, &(0x7f0000000940)="8e6cfbdb42d976829cbe2ebf70ebfc3a720af497fb2cdc077d35eefcdfee7606f0b5b15c986013d8b133690ddd3813ccde55c695880ce92e258c0f02fd651cbcbef688265cca19f90dcc834163f7751154c23cf482f70b6dc30bf53c9c582e682ab49f372b345a20") r7 = dup2(r0, 0xffffffffffffff9c) close(r7) getpid() 05:13:55 executing program 3: mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) _lwp_setname(0xffffffffffffffff, &(0x7f0000000000)='}\x00') rmdir(&(0x7f0000000040)='./file0\x00') accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000080)) truncate(&(0x7f00000000c0)='./file0\x00', 0x8) r0 = socket(0x1f, 0x4, 0x7) fsync(r0) open(&(0x7f0000000100)='./file0\x00', 0x400, 0x20) r1 = socket(0x1, 0x20000000, 0x0) listen(r1, 0x8) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) execve(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000180)='}\x00'], &(0x7f00000002c0)=[&(0x7f0000000200)='}\x00', &(0x7f0000000240)='}\x00', &(0x7f0000000280)='(\x00']) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r2 = socket$inet6(0x18, 0x4, 0x80) ftruncate(r2, 0x9) r3 = shmget(0x1, 0x1000, 0xdb8f89838811bcd3, &(0x7f0000fff000/0x1000)=nil) r4 = paccept(0xffffffffffffff9c, &(0x7f0000000300)=@un=@abs, &(0x7f0000000340)=0x8, 0x10000000) paccept(r4, &(0x7f0000000380)=@in6, &(0x7f00000003c0)=0xc, 0x30000000) shmat(r3, &(0x7f0000ff5000/0xb000)=nil, 0x2000) pipe(&(0x7f0000000400)) r5 = _lwp_self() _lwp_setname(r5, &(0x7f0000000440)='(\x00') r6 = _lwp_self() pipe(&(0x7f0000000480)) readv(r4, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/20, 0x14}, {&(0x7f0000000540)=""/58, 0x3a}, {&(0x7f0000000580)=""/26, 0x1a}, {&(0x7f00000005c0)=""/196, 0xc4}, {&(0x7f00000006c0)=""/192, 0xc0}, {&(0x7f0000000780)=""/98, 0x62}], 0x7) _lwp_create(&(0x7f0000000980)={0x1, &(0x7f0000000900)={0x8, &(0x7f0000000880)={0x8, 0x0, {[0x6, 0xfb, 0x10000, 0x7ff]}, {0x368e, 0x4, 0x81126d72b1ed88ba}, {0x9, 0x5, ':#,\xe7\\^\x00'}}, {[0x3ff, 0x6, 0x7fff, 0x6]}, {0x7f, 0xfffffffffffff801, 0x5}, {0xff, 0x8000, '\x00'}}, {[0x3, 0xfffffffc, 0x0, 0x9]}, {0x7fffffff, 0x400, 0x5}, {0x80000001, 0xb3d, ')}[:-\x00'}}, 0x40, &(0x7f0000000a00)=0x0) r8 = _lwp_self() _lwp_create(&(0x7f0000000b40)={0x4, &(0x7f0000000ac0)={0x6d3dafdfd72c23f6, &(0x7f0000000a40)={0x0, 0x0, {[0xc4a, 0x3, 0x0, 0x7]}, {0x5, 0x5b, 0x1}, {0x417adb35, 0x927e, '(]]\x00'}}, {[0x8, 0x10001, 0x3, 0x10001]}, {0x4, 0x9, 0x1}, {0xfffffffffffffa2e, 0x2, '}\x00'}}, {[0x0, 0x1f, 0x5, 0x4000]}, {0x2, 0x6, 0x4}, {0x264, 0x517d8615, '\x00'}}, 0xc0, &(0x7f0000000bc0)=0x0) _lwp_create(&(0x7f0000000d00)={0x3, &(0x7f0000000c80)={0x4, &(0x7f0000000c00)={0xa, 0x0, {[0x4, 0x8, 0xae, 0x9]}, {0x3, 0x6, 0x4}, {0x6, 0xf1e, '}\x00'}}, {[0x6, 0x7, 0x6, 0x7fff]}, {0x2, 0x2, 0x1}, {0x0, 0x5, '}\x00'}}, {[0x25da5263, 0xffffffff, 0x7, 0xfffffff9]}, {0x6, 0x3a, 0x4}, {0x5, 0x2, '\x00'}}, 0xc0, &(0x7f0000000d80)=0x0) r11 = _lwp_self() _lwp_create(&(0x7f0000000ec0)={0x801e005e, &(0x7f0000000e40)={0x400f0020, &(0x7f0000000dc0)={0x0, 0x0, {[0x1, 0xcf21, 0x47]}, {0x83, 0x6, 0x4}, {0x5, 0x1000, '+[\x00'}}, {[0x8, 0xe3c, 0x10000, 0x10001]}, {0x7fff, 0x3f, 0x1}, {0x6e2, 0x6, 'C,}[\x00'}}, {[0x0, 0x6, 0x6, 0x3ff]}, {0x400, 0x9, 0x1}, {0x6, 0x10, '\x00'}}, 0x80, &(0x7f0000000f40)=0x0) _lwp_create(&(0x7f0000001080)={0x8, &(0x7f0000001000)={0x8, &(0x7f0000000f80)={0x1, 0x0, {[0x5, 0x8001, 0x3, 0x7]}, {0x2, 0x2d3}, {0x7, 0x6, '}\x00'}}, {[0x2, 0x400, 0x7, 0x5]}, {0x6, 0x81, 0x1}, {0x2, 0xca3e, '}\x00'}}, {[0x0, 0x8ee, 0xf766, 0x3]}, {0x8000, 0x9, 0x4}, {0x52a0, 0x400, '%\x00'}}, 0xa0, &(0x7f0000001100)=0x0) _lwp_unpark_all(&(0x7f0000001140)=[r7, r8, r9, 0x0, r6, r10, r11, r12, r13], 0x9, &(0x7f0000001180)=0xd4) 05:13:56 executing program 5: _lwp_create(&(0x7f0000000100)={0x7, &(0x7f0000000080)={0x1, &(0x7f0000000000)={0x400f0020, 0x0, {[0x85, 0x3, 0x1, 0x2]}, {0xfff, 0x10000, 0xe}, {0xffffffff, 0x4, '#\x00'}}, {[0x0, 0x0, 0x8, 0x8]}, {0x1f, 0xddd, 0x1}, {0x7, 0x8, ',[/,S@@\']\x00'}}, {[0x7ff, 0x8, 0xa1, 0x7]}, {0x7ff, 0xba95, 0x1}, {0x200, 0x93, '(}\x00'}}, 0x80, &(0x7f0000000180)=0x0) _lwp_continue(r0) r1 = open(&(0x7f0000000200)='./file0\x00', 0xee8f36ef3c45f37b, 0x4) symlinkat(&(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000240)='./file0\x00') r2 = _lwp_self() compat_50__lwp_park(&(0x7f0000000280)={0x1, 0x3ff}, r2, &(0x7f00000002c0)=0x9, &(0x7f0000000300)=0x1) _lwp_create(&(0x7f0000000440)={0x0, &(0x7f00000003c0)={0x400f0020, &(0x7f0000000340)={0x8, 0x0, {[0x1, 0x1, 0x2f73bcf6, 0x5]}, {0x7f, 0xd9, 0x7}, {0xf0, 0x1, '#\x00'}}, {[0xffff, 0x8, 0x9, 0x8]}, {0x2, 0x101}, {0x2, 0x7fff, '\x00'}}, {[0x0, 0x101, 0x5, 0x1]}, {0x2, 0x0, 0xc}, {0x8, 0x2f00, '\x00'}}, 0x80, &(0x7f00000004c0)=0x0) _lwp_getname(r3, &(0x7f0000000500)=""/6, 0x6) symlinkat(&(0x7f0000000540)='./file1\x00', r1, &(0x7f0000000580)='./file0\x00') clock_nanosleep(0x1, 0x1, &(0x7f00000005c0)={0x9, 0x8}, 0x0) r4 = open(&(0x7f0000000600)='./file1\x00', 0x8, 0x20) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6, 0x812, r4, 0x0, 0x0) linkat(r1, &(0x7f0000000640)='./file0\x00', r4, &(0x7f0000000680)='./file2\x00', 0x200) r5 = _lwp_self() _lwp_setname(r5, &(0x7f00000006c0)='\x00') pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(r6, &(0x7f0000000740)=""/4096, 0x1000, 0x0, &(0x7f0000001740)={0x18, 0x0, 0x3f, 0x8}, 0xc) socket$inet(0x2, 0x20000000, 0x80) r8 = socket$inet6(0x18, 0x0, 0x3f) r9 = dup2(r7, 0xffffffffffffff9c) sendto$inet6(r9, &(0x7f0000001780)="4163ce48234a04f9adb76a564ea03c3a2cae842e591df57a063c8939656fa3bf472867beb25e834a34786f3827b08af05fb471dc61a4553f483a79ef896b8587ddd641a6aef39b0743e1c278b73236653f14b9366a03233a7eda625459e3443a64ab94b4608bd3f285ab469bbb778d0a11031f7d804dce50abd8412c17366100676d89987c146ddef557599c", 0x8c, 0x2, &(0x7f0000001840)={0x18, 0x3, 0x8001, 0xbf}, 0xc) r10 = _lwp_self() _lwp_detach(r10) r11 = fcntl$dupfd(0xffffffffffffffff, 0x0, r8) getsockname$unix(r11, &(0x7f0000001880)=@abs, &(0x7f00000018c0)=0x8) r12 = socket$inet6(0x18, 0x1, 0x80) fchmod(r12, 0x161) _lwp_setname(r3, &(0x7f0000001900)=',[/,S@@\']\x00') getitimer(0x3, &(0x7f0000001940)) rename(&(0x7f0000001980)='./file1\x00', &(0x7f00000019c0)='./file0\x00') 05:13:56 executing program 4: setitimer(0x0, &(0x7f0000000000)={{0x960, 0x2}, {0x8, 0x5}}, &(0x7f0000000040)) _lwp_create(&(0x7f0000000180)={0x2, &(0x7f0000000100)={0x9, &(0x7f0000000080)={0x400f0022, 0x0, {[0x2, 0x8, 0x80000001, 0x8001]}, {0x0, 0x2}, {0x9, 0x9, '*}9+*^}\x00'}}, {[0xcc7a, 0x8, 0x4, 0xf55]}, {0x7, 0x5, 0x1137c7eeba01d2d6}, {0x200, 0xfff, '.\'\x00'}}, {[0x8001, 0x0, 0x7, 0xffffff01]}, {0x1, 0x372, 0x444c205eb488d150}, {0x6e75, 0x4, '^\x00'}}, 0x40, &(0x7f0000000200)=0x0) _lwp_create(&(0x7f0000000340)={0x8, &(0x7f00000002c0)={0x7de90d5dceb87a6c, &(0x7f0000000240)={0x400f0020, 0x0, {[0x8, 0x6, 0xaa, 0x972]}, {0x6c1f, 0x80, 0x7}, {0xe912, 0x2, '\xe4\'\xff/).#\x00'}}, {[0x101, 0x3099, 0xffff, 0x7]}, {0x4, 0x3, 0x4}, {0x7, 0x3, '\x00'}}, {[0x8, 0xc7a, 0x0, 0x6]}, {0x80, 0x2, 0x8}, {0x800, 0xfffffffffffffff9, '@%\x00'}}, 0x0, &(0x7f00000003c0)=0x0) r2 = _lwp_self() r3 = _lwp_self() _lwp_unpark_all(&(0x7f0000000400)=[r0, r1, r2, r3], 0x4, &(0x7f0000000440)=0x6) setitimer(0x2, &(0x7f0000000480)={{0x4, 0x1}, {0x0, 0x3}}, &(0x7f00000004c0)) _lwp_create(&(0x7f0000000600)={0x4, &(0x7f0000000580)={0xa, &(0x7f0000000500)={0x8, 0x0, {[0x970, 0x2, 0x9, 0x80]}, {0xfffffffffffffffa, 0x1, 0x7}, {0x8, 0x6, '*}9+*^}\x00'}}, {[0x5, 0x81, 0xfffff800, 0xe9]}, {0x4, 0x3656, 0xc}, {0x1, 0x7, '\x00'}}, {[0x4, 0x2, 0x2]}, {0x9, 0x1f, 0x4}, {0x80000000, 0x9, '\xe4\'\xff/).#\x00'}}, 0x40, &(0x7f0000000680)=0x0) _lwp_wait(r3, &(0x7f00000006c0)=r4) r5 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$sock_linger(r5, 0xffff, 0x80, &(0x7f0000000700)={0x1, 0x101}, 0x8) _lwp_setname(r2, &(0x7f0000000740)='(/\x00') geteuid() _lwp_self() r6 = semget$private(0x0, 0x2, 0x80) semctl$GETPID(r6, 0x1, 0x4, &(0x7f0000000780)=""/216) r7 = _lwp_self() _lwp_setname(r7, &(0x7f0000000880)='\x00') _lwp_unpark(0x0, &(0x7f00000008c0)=0x7540) _lwp_create(&(0x7f0000000a00)={0x4, &(0x7f0000000980)={0x6, &(0x7f0000000900)={0x8, 0x0, {[0xa5, 0x8, 0xffffffff, 0x7fff]}, {0x0, 0x0, 0x6}, {0x3, 0x3, '-\'}\x00'}}, {[0xfffeffff, 0x5, 0xffffa4c7, 0xfff]}, {0xffffffffffffff7f, 0x6, 0x1}, {0xfb1e, 0x9, '\x00'}}, {[0x9, 0xd9c, 0x4, 0x1]}, {0xe6, 0x5, 0x37dc3bc5901f110}, {0x800, 0x5, '.\'\x00'}}, 0x80, &(0x7f0000000a80)=0x0) _lwp_kill(r8, 0x8) r9 = socket(0x10, 0x3, 0x80) pipe2(&(0x7f0000000ac0)={0xffffffffffffffff}, 0x1000000) dup2(r9, r10) setitimer(0x1, &(0x7f0000000b00)={{0x5, 0xa7}, {0x33bdef19, 0x3f}}, 0x0) _lwp_setname(0x0, &(0x7f0000000b40)='+\x00') _lwp_continue(r8) r11 = socket$inet6(0x18, 0x0, 0x7) writev(r11, &(0x7f0000000e00)=[{&(0x7f0000000b80)="afaf4b8af3f8ab57cd95f06aedd4c2cc1cc68453f8487dba5e91a57bb4c86cd401aed69c25dd9a390d0a41c88028c000c00a6cb388649a67ff6c52df57d32bb7956242d9175c401714ada5ca03e049f50f2848efbb329015aa47fee7b06b2aed4e46b7a9c5a963577c2e40ac60bc3426d8af863ea91f94938bcb7c8e1c086115d964ef4b71472c5fa099f89c0d", 0x8d}, {&(0x7f0000000c40)="7b6d3f49a900ea66914cb4d84050ef35bdbd16cbe531073a3146553352fe39bb2d4e609d182e77b4ee48b82049d20d359cc802a17702b9bfb739431e29e876bd6c4d2a84ddcd3ba3d6ce3657bc524b51680510b65fe9020b5f7b2308d96d0346739003ba72a68cd837d1864bca763774a4d489c4657cff31698df96bba686881462a0bf050b1f47a6d6a89254dcf03b11a438b3a42513a43be64762dd671f53572fc6c09182c3a55aa96504e0638c0049fcecec5a982de7c622552ccb8fdcbb16700077c63a44cc981dd2242b5dfc6", 0xcf}, {&(0x7f0000000d40)="491198fadc7928af7606a05ef149b2e68e9c3a8bb1b73a385d997b115527368c792453c1437b9e6ae30e7316262b9ce06be22fa07005389bfb02736d37017e76e4603c32b21e420df31c18cf42528c873ef5daebb3af37e39867c9c8580b177d948d56507ae345354f275012327c4ed75d0a", 0x72}, {&(0x7f0000000dc0)="75e12364e13f39c006", 0x9}], 0x4) r12 = _lwp_self() _lwp_detach(r12) 05:13:59 executing program 5: _lwp_create(&(0x7f0000000100)={0x7, &(0x7f0000000080)={0x1, &(0x7f0000000000)={0x400f0020, 0x0, {[0x85, 0x3, 0x1, 0x2]}, {0xfff, 0x10000, 0xe}, {0xffffffff, 0x4, '#\x00'}}, {[0x0, 0x0, 0x8, 0x8]}, {0x1f, 0xddd, 0x1}, {0x7, 0x8, ',[/,S@@\']\x00'}}, {[0x7ff, 0x8, 0xa1, 0x7]}, {0x7ff, 0xba95, 0x1}, {0x200, 0x93, '(}\x00'}}, 0x80, &(0x7f0000000180)=0x0) _lwp_continue(r0) r1 = open(&(0x7f0000000200)='./file0\x00', 0xee8f36ef3c45f37b, 0x4) symlinkat(&(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000240)='./file0\x00') r2 = _lwp_self() compat_50__lwp_park(&(0x7f0000000280)={0x1, 0x3ff}, r2, &(0x7f00000002c0)=0x9, &(0x7f0000000300)=0x1) _lwp_create(&(0x7f0000000440)={0x0, &(0x7f00000003c0)={0x400f0020, &(0x7f0000000340)={0x8, 0x0, {[0x1, 0x1, 0x2f73bcf6, 0x5]}, {0x7f, 0xd9, 0x7}, {0xf0, 0x1, '#\x00'}}, {[0xffff, 0x8, 0x9, 0x8]}, {0x2, 0x101}, {0x2, 0x7fff, '\x00'}}, {[0x0, 0x101, 0x5, 0x1]}, {0x2, 0x0, 0xc}, {0x8, 0x2f00, '\x00'}}, 0x80, &(0x7f00000004c0)=0x0) _lwp_getname(r3, &(0x7f0000000500)=""/6, 0x6) symlinkat(&(0x7f0000000540)='./file1\x00', r1, &(0x7f0000000580)='./file0\x00') clock_nanosleep(0x1, 0x1, &(0x7f00000005c0)={0x9, 0x8}, 0x0) r4 = open(&(0x7f0000000600)='./file1\x00', 0x8, 0x20) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6, 0x812, r4, 0x0, 0x0) linkat(r1, &(0x7f0000000640)='./file0\x00', r4, &(0x7f0000000680)='./file2\x00', 0x200) r5 = _lwp_self() _lwp_setname(r5, &(0x7f00000006c0)='\x00') pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(r6, &(0x7f0000000740)=""/4096, 0x1000, 0x0, &(0x7f0000001740)={0x18, 0x0, 0x3f, 0x8}, 0xc) socket$inet(0x2, 0x20000000, 0x80) r8 = socket$inet6(0x18, 0x0, 0x3f) r9 = dup2(r7, 0xffffffffffffff9c) sendto$inet6(r9, &(0x7f0000001780)="4163ce48234a04f9adb76a564ea03c3a2cae842e591df57a063c8939656fa3bf472867beb25e834a34786f3827b08af05fb471dc61a4553f483a79ef896b8587ddd641a6aef39b0743e1c278b73236653f14b9366a03233a7eda625459e3443a64ab94b4608bd3f285ab469bbb778d0a11031f7d804dce50abd8412c17366100676d89987c146ddef557599c", 0x8c, 0x2, &(0x7f0000001840)={0x18, 0x3, 0x8001, 0xbf}, 0xc) r10 = _lwp_self() _lwp_detach(r10) r11 = fcntl$dupfd(0xffffffffffffffff, 0x0, r8) getsockname$unix(r11, &(0x7f0000001880)=@abs, &(0x7f00000018c0)=0x8) r12 = socket$inet6(0x18, 0x1, 0x80) fchmod(r12, 0x161) _lwp_setname(r3, &(0x7f0000001900)=',[/,S@@\']\x00') getitimer(0x3, &(0x7f0000001940)) rename(&(0x7f0000001980)='./file1\x00', &(0x7f00000019c0)='./file0\x00') 05:13:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000)={0xfffffc00, 0x30}, 0x8) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r0, &(0x7f0000000180)=@abs={0x1}, 0x6e) 05:14:00 executing program 3: r0 = _lwp_self() _lwp_suspend(r0) _lwp_continue(r0) _lwp_detach(r0) _lwp_wait(0x0, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x2, 0x3ff}, {0x3}}) 05:14:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x2, 0x0) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="28000000ffff00000100000008cd7fdf0300000002c61c3ba4df10ca9bc59e71c5a2e48e37a8213abf45c2ac730bad23aa3869f5d529e928701d8130e9562e9dd50f50", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2], 0x28}, 0x0) recvmsg(r0, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 05:14:00 executing program 5: socket$inet(0x2, 0x10000006, 0x3e) 05:14:00 executing program 0: open$dir(&(0x7f0000000040)='./file1\x00', 0xa62, 0x0) r0 = open(&(0x7f0000000080)='./file1/file0/../file0\x00', 0x188, 0x51) chdir(&(0x7f0000001140)='./file1/file0\x00') getpeername$unix(r0, &(0x7f00000000c0)=@file={0x0, ""/4096}, &(0x7f0000001100)=0x1002) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r1, &(0x7f0000001280)=[{&(0x7f00000010c0)="c08d6c3a198962ef6672e1d4c8532c7a449a0f8c18427be9bc8891a732253e3c5bac20e26e5708786b1a8cb2293307300fcb9995733dddac1674eb0959efc2a8d4a818b7ec8d5d4a76b69db11da30d46b3f6e1761652ebb59d3c58deca8330c967a68bc1012750bc46bb76d8366748a7f609dfb300e9a26f3cc617b9b2c15cb5979b66ba678d390f8814b79e49528d24bdef2f87fe3a", 0xff0b}, {&(0x7f0000000040)="b9635fb5e46ed8fed7d34fee5e9a3ada719908e9e59908925291eef22d9136c90e563524dcca7ee846500c54b62a099bd251ac4b943f7abdd8fced6e20feffeea5cd4aa82e47c71c6efb81220000000040daee000000", 0x56}, {&(0x7f0000001180)="e8d1b96545ae1733c7b570dc39e0465a118e26e69a68644b471f6ca62e05d48736d4417566d41e55c933ce9ad587f7a42079042118bcba8c581ce75f1f5403510dd7c16f87fc64bfa86e41a754ca3d6c00e715dc2043da80ed1556a96f2e7d8b87051509ccece37c2111183fec33674e72fc33585c6c55be6ccba7862d25f3b662cd8603e87afb0ca6e4b00c6e422c71226c89e692d73c6183b1cba63a0e75320b4536865daec56b63b3b9e88a91fc37419795d5ce8b93fd72fca6a204d1a1e2e5fe34", 0xc3}], 0x1) faccessat(r1, &(0x7f0000001180)='./file1/file0/../file0\x00', 0xada0ab8b3280f19, 0x200) open$dir(&(0x7f0000000000)='./file1/file0\x00', 0x80000, 0x40) 05:14:00 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) read(r0, &(0x7f00000012c0)=""/4115, 0x1013) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x2, 0xf62) open$dir(&(0x7f0000000040)='./file0\x00', 0x809086, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x1a8) getdents(r1, &(0x7f00000001c0)=""/203, 0xcb) pipe2(0x0, 0x1000000) select(0xfffffffffffffd24, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000180)={0x1f}, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)="8dded2268dea7659cb845f13d758123e009931d389475a4e675cbfa746ca2ff96063b7af49136d7b08512fc84796079d5f18255693714ba02feeaba585a232d9af624d4665eb35fa5eb1128153d8bbf57affb0af4f35cf657432de430be82c0140c5fbf9fd14f4eb2ba17c8696735479f85e9e0c39d8") [ 66.8589025] panic: ASan: Unauthorized Access In 0xffffffff81178895: Addr 0xffff9a0011d86b18 [8 bytes, read, PoolUseAfterFree] [ 66.8688970] fatal page fault in supervisor mode [ 66.8688970] trap type 6 code 0 rip 0xffffffff811dbe04 cs 0x8 rflags 0x10283 cr2 0xffff900000000007 ilevel 0x8 rsp 0xffff9a016da9fda0 [ 66.8688970] curlwp 0xffff9a000de22080 pid 0.5 lowest kstack 0xffff9a016da982c0 k efranetla:l ppaaggee ffaauulltt itrn aps,up cerovdie=s0o[ Stopped in pid 0.5 (system) at netbsd:__asan_load8+0x62: movzbl 0(%rax),%r8d ? __asan_load8() at netbsd:__asan_load8+0x62 sleepq_remove() at netbsd:sleepq_remove+0x26c sleepq_unsleep() at netbsd:sleepq_unsleep+0x74 sleepq_timeout() at netbsd:sleepq_timeout+0x6b callout_softclock() at netbsd:callout_softclock+0x272 softint_dispatch() at netbsd:softint_dispatch+0x269 DDB lost frame for netbsd:Xsoftintr+0x5a, trying 0xffff9a016da9fff0 Xsoftintr() at netbsd:Xsoftintr+0x5a --- interrupt --- 0: ds fdb0 es d19a fs 3060 gs d5b0 rdi 38 rsi 7 rbp ffff9a016da9fdb0 rbx ffff9a00138dd500 rdx 800000000000 rcx ffffffff811a8921 sleepq_remove+0x26c rax ffff900000000007 r8 0 r9 3f r10 7 r11 0 r12 0 r13 38 r14 195f r15 ffff9a00138dd58c rip ffffffff811dbe04 __asan_load8+0x62 cs 8 rflags 10283 rsp ffff9a016da9fda0 ss 10 netbsd:__asan_load8+0x62: movzbl 0(%rax),%r8d PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 686 3 3 0 80 ffff9a0011e4d100 syz-executor.1 parked 519 1 2 0 0 ffff9a0011cd11c0 syz-executor.5 446 3 3 1 4 ffff9a0011deb740 syz-executor.1 vfork 446 1 2 0 10040000 ffff9a0011ddf700 syz-executor.1 635 5 3 0 40080 ffff9a0011d1f240 syz-executor.0 parked 34 3 3 1 80 ffff9a0011c815c0 syz-executor.2 parked 73 > 1 7 1 20040000 ffff9a0013ab6ac0 syz-executor.4 565 3 3 0 40080 ffff9a0013ab6240 syz-executor.2 parked 619 4 3 1 80 ffff9a0013a751c0 syz-executor.0 parked 45 1 3 -1 0 ffff9a00138dd940 syz-executor.4 522 1 3 -1 0 ffff9a00138dd500 syz-executor.5 607 1 3 0 80 ffff9a00138dd0c0 syz-executor.3 pipe_rd 483 1 3 0 80 ffff9a0013793900 syz-executor.2 pipe_rd 464 1 3 0 80 ffff9a00137934c0 syz-executor.1 nanoslp 40 > 1 7 0 20000000 ffff9a001295c240 syz-executor.0 562 11 3 1 80 ffff9a0013793080 syz-fuzzer parked 562 10 3 1 80 ffff9a00137808c0 syz-fuzzer parked 562 9 3 1 80 ffff9a0011ae2b00 syz-fuzzer parked 562 8 3 0 80 ffff9a0013780480 syz-fuzzer parked 562 7 3 1 80 ffff9a001377dbc0 syz-fuzzer parked 562 6 3 1 80 ffff9a001377d780 syz-fuzzer parked 562 5 3 1 80 ffff9a001377d340 syz-fuzzer parked 562 4 3 0 80 ffff9a0012a51ac0 syz-fuzzer parked 562 3 3 1 80 ffff9a0012a51240 syz-fuzzer kqueue 562 2 2 1 0 ffff9a0012a46640 syz-fuzzer 562 1 3 0 80 ffff9a0011ae7300 syz-fuzzer parked 390 1 3 0 80 ffff9a001297a280 sshd select 535 1 3 1 80 ffff9a0012a30180 getty nanoslp 564 1 3 1 80 ffff9a0012a3e600 getty nanoslp 569 1 3 1 80 ffff9a0012a3e1c0 getty nanoslp 420 1 3 1 80 ffff9a0012a28580 getty ttyraw 433 1 3 0 80 ffff9a0011fdaa40 cron nanoslp 463 1 3 0 80 ffff9a00129abb80 inetd kqueue 317 1 3 0 80 ffff9a0011f639c0 sshd select 440 1 3 0 80 ffff9a0011e5e580 powerd kqueue 314 1 3 1 80 ffff9a001297ab00 syslogd kqueue 268 1 3 0 80 ffff9a0011f10340 dhcpcd kqueue 220 1 3 0 80 ffff9a0011e28080 dhcpcd kqueue 1 1 3 1 80 ffff9a0011bfc940 init wait 0 58 3 0 204 ffff9a0011c50540 physiod physiod 0 57 3 1 204 ffff9a0011c529c0 aiodoned aiodoned 0 56 3 0 204 ffff9a0011c52580 pooldrain pooldrain 0 55 3 0 200 ffff9a0011c52140 ioflush syncer 0 54 3 0 200 ffff9a0011c50980 pgdaemon pgdaemon 0 51 3 1 200 ffff9a000f3c4ac0 npfgc-0 npfgccv 0 50 3 1 204 ffff9a0011bfc500 rt_free rt_free 0 49 3 1 204 ffff9a0011bfc0c0 unpgc unpgc 0 48 3 1 204 ffff9a0011bf5900 key_timehandler key_timehandler 0 47 3 1 204 ffff9a0011bf54c0 icmp6_wqinput/1 icmp6_wqinput 0 46 3 0 204 ffff9a0011bf5080 icmp6_wqinput/0 icmp6_wqinput 0 45 3 1 204 ffff9a0011b0c8c0 nd6_timer nd6_timer 0 44 3 1 204 ffff9a0011b0c480 carp6_wqinput/1 carp6_wqinput 0 43 3 0 204 ffff9a0011b0c040 carp6_wqinput/0 carp6_wqinput 0 42 3 1 204 ffff9a0011af7bc0 carp_wqinput/1 carp_wqinput 0 41 3 0 204 ffff9a0011af7780 carp_wqinput/0 carp_wqinput 0 40 3 1 204 ffff9a0011af7340 icmp_wqinput/1 icmp_wqinput 0 39 3 0 204 ffff9a0011ae7b80 icmp_wqinput/0 icmp_wqinput 0 38 3 0 204 ffff9a0011ae7740 rt_timer rt_timer 0 37 3 0 204 ffff9a0011ae4b40 vmem_rehash vmem_rehash 0 27 3 0 204 ffff9a000f3c4680 scsibus0 sccomp 0 26 3 0 200 ffff9a000f3c4240 pms0 pmsreset 0 25 3 1 204 ffff9a000f335a80 xcall/1 xcall 0 24 1 1 200 ffff9a000f335640 softser/1 0 > 23 7 1 20000200 ffff9a000f335200 softclk/1 0 22 1 1 200 ffff9a000f331a40 softbio/1 0 21 1 1 200 ffff9a000f331600 softnet/1 0 20 1 1 201 ffff9a000f3311c0 idle/1 0 19 3 0 204 ffff9a000de52a00 lnxpwrwq lnxpwrwq 0 18 3 0 204 ffff9a000de525c0 lnxlngwq lnxlngwq 0 17 3 0 204 ffff9a000de52180 lnxsyswq lnxsyswq 0 16 3 0 204 ffff9a000de4d9c0 lnxrcugc lnxrcugc 0 15 3 0 204 ffff9a000de4d580 sysmon smtaskq 0 14 3 0 204 ffff9a000de4d140 pmfsuspend pmfsuspend 0 13 3 0 204 ffff9a000de3e980 pmfevent pmfevent 0 12 3 0 204 ffff9a000de3e540 sopendfree sopendfr 0 11 3 0 204 ffff9a000de3e100 nfssilly nfssilly 0 10 3 0 200 ffff9a000de32940 cachegc cachegc 0 9 3 0 204 ffff9a000de32500 vdrain vdrain 0 8 3 1 200 ffff9a000de320c0 modunload mod_unld 0 7 3 0 204 ffff9a000de22900 xcall/0 xcall 0 6 1 0 200 ffff9a000de224c0 softser/0 0 > 5 7 0 20000200 ffff9a000de22080 softclk/0 0 4 1 0 200 ffff9a000de1f8c0 softbio/0 0 3 1 0 200 ffff9a000de1f480 softnet/0 0 2 1 0 201 ffff9a000de1f040 idle/0 0 1 3 0 200 ffffffff82b66d80 swapper uvm [Locks tracked through LWPs] Locks held by an LWP (syz-executor.5): Lock 0 (initialized at uvm_map_setup) lock address : 0xffff9a0011c055c8 type : sleep/adaptive initialized : 0xffffffff810fe8cd shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 current cpu : 0 last held: 0 current lwp : 0xffff9a000de22080 last held: 0xffff9a0011cd11c0 last locked* : 0xffffffff810f87b4 unlocked : 0xffffffff810ef721 owner/count : 0x0000000000000010 flags : 000000000000000000 Turnstile chain at 0xffffffff82d8cbb8 with mutex 0xffffffff82d8bec0. => No active turnstile for this lock. Locks held by an LWP (syz-executor.4): Lock 0 (initialized at uvm_obj_init) lock address : 0xffff9a00136b9d00 type : sleep/adaptive initialized : 0xffffffff8110aa97 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 current cpu : 0 last held: 0 current lwp : 0xffff9a000de22080 last held: 0xffff9a0013ab6ac0 last locked* : 0xffffffff810ee8e8 unlocked : 0xffffffff810f7b87 owner field : 0xffff9a0013ab6ac0 wait/spin: 0/0 Turnstile chain at 0xffffffff82d8cca0 with mutex 0xffffffff82d8c600. => No active turnstile for this lock. Lock 1 (initialized at pmap_ctor) lock address : 0xffff9a0012a37f80 type : sleep/adaptive initialized : 0xffffffff80276a44 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 current cpu : 0 last held: 0 current lwp : 0xffff9a000de22080 last held: 0xffff9a0013ab6ac0 last locked* : 0xffffffff80278e7f unlocked : 0xffffffff802799ff owner field : 0xffff9a0013ab6ac0 wait/spin: 0/0 Turnstile chain at 0xffffffff82d8ccf0 with mutex 0xffffffff82d8c880. => No active turnstile for this lock. Locks held by an LWP (syz-executor.0): Lock 0 (initialized at vcache_alloc) lock address : 0xffff9a0013784a40 type : sleep/adaptive initialized : 0xffffffff812c85b2 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 current cpu : 0 last held: 0 current lwp : 0xffff9a000de22080 last held: 0xffff9a001295c240 last locked* : 0xffffffff812f51f0 unlocked : 0xffffffff812f50ad owner/count : 0xffff9a001295c240 flags : 0x0000000000000004 Turnstile chain at 0xffffffff82d8ca48 with mutex 0xffffffff82d8b340. => No active turnstile for this lock. Lock 1 (initialized at vcache_alloc) lock address : 0xffff9a0013784a80 type : sleep/adaptive initialized : 0xffffffff812c85b2 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 current cpu : 0 last held: 0 current lwp : 0xffff9a000de22080 last held: 0xffff9a001295c240 last locked* : 0xffffffff812f51f0 unlocked : 0xffffffff812f50ad