Warning: Permanently added '10.128.0.131' (ECDSA) to the list of known hosts. 2021/03/03 08:23:57 parsed 1 programs [ 48.0057813] kqueue_register: syz-execprog[1079]: event type 0 not supported for file type 5/(null) (error 45) [ 48.0216177] kqueue_register: syz-execprog[1079]: event type 0 not supported for file type 5/(null) (error 45) 2021/03/03 08:23:57 executed programs: 0 2021/03/03 08:23:58 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe 2021/03/03 08:23:58 result: hanged=false err=executor 3: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:23:59 result: hanged=false err=executor 4: failed to write control pipe: write |1: broken pipe 2021/03/03 08:23:59 result: hanged=false err=executor 2: failed to write control pipe: write |1: broken pipe 2021/03/03 08:23:59 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe 2021/03/03 08:23:59 result: hanged=false err=executor 3: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:23:59 result: hanged=false err=executor 1: failed to write control pipe: write |1: broken pipe 2021/03/03 08:23:59 result: hanged=false err=executor 5: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:00 result: hanged=false err=executor 3: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:00 result: hanged=false err=executor 2: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:24:00 result: hanged=false err=executor 4: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:00 result: hanged=false err=executor 1: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:24:00 result: hanged=false err=executor 5: failed to write control pipe: write |1: broken pipe rmdir(./1) failed (errno 16) 2021/03/03 08:24:00 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:00 result: hanged=false err=executor 3: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:01 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:01 result: hanged=false err=executor 5: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:24:01 result: hanged=false err=executor 3: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:24:01 result: hanged=false err=executor 4: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:01 result: hanged=false err=executor 1: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:01 result: hanged=false err=executor 2: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:02 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:24:02 result: hanged=false err=executor 2: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:24:02 executed programs: 76 2021/03/03 08:24:03 result: hanged=false err=executor 3: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:24:03 result: hanged=false err=executor 4: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:03 result: hanged=false err=executor 5: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:03 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:24:03 result: hanged=false err=executor 1: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:24:03 result: hanged=false err=executor 2: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:04 result: hanged=false err=executor 3: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:04 result: hanged=false err=executor 5: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:24:04 result: hanged=false err=executor 1: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:04 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:04 result: hanged=false err=executor 4: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:04 result: hanged=false err=executor 2: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:05 result: hanged=false err=executor 4: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:05 result: hanged=false err=executor 2: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:24:05 result: hanged=false err=executor 5: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:24:05 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:05 result: hanged=false err=executor 3: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:05 result: hanged=false err=executor 2: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:24:05 result: hanged=false err=executor 1: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:05 result: hanged=false err=executor 4: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:06 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:24:06 result: hanged=false err=executor 4: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:24:06 result: hanged=false err=executor 1: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:24:06 result: hanged=false err=executor 3: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:24:06 result: hanged=false err=executor 5: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:06 result: hanged=false err=executor 2: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:24:07 result: hanged=false err=executor 1: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:07 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:08 executed programs: 149 2021/03/03 08:24:08 result: hanged=false err=executor 2: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:24:08 result: hanged=false err=executor 1: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:24:08 result: hanged=false err=executor 4: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:08 result: hanged=false err=executor 3: failed to write control pipe: write |1: broken pipe 2021/03/03 08:24:08 result: hanged=false err=executor 5: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) 2021/03/03 08:24:08 result: hanged=false err=executor 4: failed to write control pipe: write |1: broken pipe rmdir(./0) failed (errno 16) [ 59.5757588] panic: kernel diagnostic assertion "searchdir != foundobj" failed: file "/syzkaller/managers/netbsd-kmsan/kernel/sys/kern/vfs_lookup.c", line 956 same vn 0xffff978013563b80 [ 59.5957316] cpu1: Begin traceback... [ 59.6257318] vpanic() at netbsd:vpanic+0x91a [ 59.6857324] kern_assert() at netbsd:kern_assert+0x214 [ 59.7557326] lookup_crossmount() at netbsd:lookup_crossmount+0x5d3 [ 59.8257346] namei_tryemulroot() at netbsd:namei_tryemulroot+0x3f8b [ 59.8957313] namei() at netbsd:namei+0x28a [ 59.9657314] chdir_lookup() at netbsd:chdir_lookup+0x206 [ 60.0257332] sys_chroot() at netbsd:sys_chroot+0x190 [ 60.0857353] sys___syscall() at netbsd:sys___syscall+0x2a4 [ 60.1657315] syscall() at netbsd:syscall+0x42d [ 60.1757346] --- syscall (number 198) --- [ 60.1957326] netbsd:syscall+0x42d: [ 60.2057303] cpu1: End traceback... [ 60.2057303] fatal breakpoint trap in supervisor mode [ 60.2157300] trap type 1 code 0 rip 0xffffffff8022287d cs 0x8 rflags 0x246 cr2 0x770d6e704000 ilevel 0 rsp 0xffff978087b1f5d0 [ 60.2257355] curlwp 0xffff978013623a40 pid 1820.1834 lowest kstack 0xffff978087b182c0 Stopped in pid 1820.1834 (syz-executor.2) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 vpanic() at netbsd:vpanic+0x91a kern_assert() at netbsd:kern_assert+0x214 lookup_crossmount() at netbsd:lookup_crossmount+0x5d3 namei_tryemulroot() at netbsd:namei_tryemulroot+0x3f8b namei() at netbsd:namei+0x28a chdir_lookup() at netbsd:chdir_lookup+0x206 sys_chroot() at netbsd:sys_chroot+0x190 sys___syscall() at netbsd:sys___syscall+0x2a4 syscall() at netbsd:syscall+0x42d --- syscall (number 198) --- netbsd:syscall+0x42d: Panic string: kernel diagnostic assertion "searchdir != foundobj" failed: file "/syzkaller/managers/netbsd-kmsan/kernel/sys/kern/vfs_lookup.c", line 956 same vn 0xffff978013563b80 PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 1759 1759 2 0 0 ffff9780134cfa00 syz-executor.1 1838 1838 2 1 0 ffff9780134a2540 syz-executor.4 1754 1754 3 0 180 ffff9780136231c0 syz-executor.5 pipe_rd 1820 >1834 7 1 100100 ffff978013623a40 syz-executor.2 1820 1820 2 1 10000040 ffff9780134cf180 syz-executor.2 972 972 2 1 140 ffff9780134b59c0 syz-executor.2 1892 1892 2 0 0 ffff97801329d900 syz-executor.1 1079 1761 2 1 1000100 ffff9780134cf5c0 syz-execprog 1079 1081 3 0 180 ffff9780134b5140 syz-execprog parked 1079 420 2 1 40 ffff97801329d4c0 syz-execprog 1079 1104 3 0 180 ffff97801329d080 syz-execprog parked 1079 1086 3 0 180 ffff978012bba480 syz-execprog parked 1079 1083 3 0 180 ffff978012bba8c0 syz-execprog parked 1079 1074 3 1 180 ffff978012bba040 syz-execprog parked 1079 1072 3 1 180 ffff97801229eac0 syz-execprog parked 1079 1107 2 1 140 ffff97801229e680 syz-execprog 1079 1079 3 1 180 ffff97801229e240 syz-execprog parked 1068 1068 3 1 180 ffff978012124a00 sshd select 1111 1111 3 1 180 ffff9780121a8a80 getty nanoslp 1251 1251 3 1 180 ffff9780121a8640 getty nanoslp 999 999 3 1 180 ffff978012adabc0 getty nanoslp 947 947 3 1 1c0 ffff97801244f2c0 getty ttyraw 949 949 3 0 180 ffff978012ada780 sshd select 965 965 3 1 180 ffff978012ada340 powerd kqueue 555 555 3 0 180 ffff97801250d300 syslogd kqueue 598 598 3 1 180 ffff97801250db80 dhcpcd poll 597 597 3 1 180 ffff97801239b280 dhcpcd poll 594 594 3 0 180 ffff97801239bb00 dhcpcd poll 579 579 3 0 180 ffff97801250d740 dhcpcd poll 350 350 3 0 180 ffff97801244fb40 dhcpcd poll 349 349 3 0 180 ffff97801239b6c0 dhcpcd poll 348 348 3 0 180 ffff97801244f700 dhcpcd poll 1 1 3 0 180 ffff978011e3e900 init wait 0 817 3 0 200 ffff9780121a71c0 physiod physiod 0 192 3 0 200 ffff9780121a8200 pooldrain pooldrain 0 166 2 0 240 ffff9780121a7a40 ioflush 0 165 3 1 200 ffff9780121a7600 pgdaemon pgdaemon 0 162 3 1 200 ffff9780121245c0 usb7 usbevt 0 161 3 1 200 ffff978012124180 usb6 usbevt 0 31 3 1 200 ffff9780120f49c0 usb5 usbevt 0 63 3 1 200 ffff9780120f4580 usb4 usbevt 0 126 3 1 200 ffff9780120f4140 usb3 usbevt 0 125 3 1 200 ffff978012044980 usb2 usbevt 0 124 3 1 200 ffff978012044540 usb1 usbevt 0 123 3 1 200 ffff978012044100 usb0 usbevt 0 122 3 1 200 ffff978011e4e940 usbtask-dr usbtsk 0 121 3 1 200 ffff978011e4e500 usbtask-hc usbtsk 0 120 3 0 200 ffff978011e4e0c0 npfgc0 npfgcw 0 119 3 1 200 ffff978011e3e4c0 rt_free rt_free 0 118 3 1 200 ffff978011e3e080 unpgc unpgc 0 117 3 0 200 ffff978011e3b8c0 key_timehandler key_timehandler 0 116 3 1 200 ffff978011e3b480 icmp6_wqinput/1 icmp6_wqinput 0 115 3 0 200 ffff978011e3b040 icmp6_wqinput/0 icmp6_wqinput 0 114 3 0 200 ffff978011e34bc0 nd6_timer nd6_timer 0 113 3 1 200 ffff978011e34780 carp6_wqinput/1 carp6_wqinput 0 112 3 0 200 ffff978011e34340 carp6_wqinput/0 carp6_wqinput 0 111 3 1 200 ffff978011e29b80 carp_wqinput/1 carp_wqinput 0 110 3 0 200 ffff978011e29740 carp_wqinput/0 carp_wqinput 0 109 3 1 200 ffff978011e29300 icmp_wqinput/1 icmp_wqinput 0 108 3 0 200 ffff978011c65b40 icmp_wqinput/0 icmp_wqinput 0 107 3 0 200 ffff9780103b7ac0 rt_timer rt_timer 0 106 3 0 200 ffff978011c65700 vmem_rehash vmem_rehash 0 105 3 0 200 ffff978011c652c0 entbutler entropy 0 96 3 1 200 ffff9780117a1b00 viomb balloon 0 30 3 1 200 ffff9780117a16c0 vioif0_txrx/1 vioif0_txrx 0 29 3 0 200 ffff9780117a1280 vioif0_txrx/0 vioif0_txrx 0 27 3 1 200 ffff9780103b7680 scsibus0 sccomp 0 26 3 0 200 ffff9780103b7240 pms0 pmsreset 0 25 3 1 200 ffff9780103a6a80 xcall/1 xcall 0 24 1 1 200 ffff9780103a6640 softser/1 0 23 1 1 200 ffff9780103a6200 softclk/1 0 22 1 1 200 ffff9780103a4a40 softbio/1 0 21 1 1 200 ffff9780103a4600 softnet/1 0 20 1 1 201 ffff9780103a41c0 idle/1 0 19 3 1 200 ffff97800f220a00 lnxpwrwq lnxpwrwq 0 18 3 1 200 ffff97800f2205c0 lnxlngwq lnxlngwq 0 17 3 1 200 ffff97800f220180 lnxsyswq lnxsyswq 0 16 3 0 200 ffff97800f21b9c0 lnxrcugc lnxrcugc 0 15 3 0 200 ffff97800f21b580 sysmon smtaskq 0 14 3 1 200 ffff97800f21b140 pmfsuspend pmfsuspend 0 13 3 0 200 ffff97800f217980 pmfevent pmfevent 0 12 3 1 200 ffff97800f217540 sopendfree sopendfr 0 11 3 0 200 ffff97800f217100 iflnkst iflnkst 0 10 3 1 200 ffff97800f20e940 nfssilly nfssilly 0 9 3 0 240 ffff97800f20e500 vdrain vdrain 0 8 3 1 200 ffff97800f20e0c0 modunload mod_unld 0 7 3 0 200 ffff97800ec0a900 xcall/0 xcall 0 6 1 0 200 ffff97800ec0a4c0 softser/0 0 5 1 0 200 ffff97800ec0a080 softclk/0 0 4 1 0 200 ffff97800ec088c0 softbio/0 0 3 1 0 200 ffff97800ec08480 softnet/0 0 2 1 0 201 ffff97800ec08040 idle/0 0 > 0 7 0 240 ffffffff862506c0 swapper [Locks tracked through LWPs] ****** LWP 1754.1754 (syz-executor.5) @ 0xffff9780136231c0, l_stat=3 *** Locks held: * Lock 0 (initialized at vcache_new) lock address : 0xffff97801355c440 type : sleep/adaptive initialized : 0xffffffff8519eb8e shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff9780136231c0 last held: 0xffff9780136231c0 last locked* : 0xffffffff85221ca6 unlocked : 0xffffffff85222055 owner/count : 000000000000000000 flags : 000000000000000000 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at vcache_new) lock address : 0xffff97801355ad40 type : sleep/adaptive initialized : 0xffffffff8519eb8e shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff9780136231c0 last held: 0xffff9780136231c0 last locked* : 0xffffffff85221ca6 unlocked : 000000000000000000 owner/count : 000000000000000000 flags : 000000000000000000 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 1892.1892 (syz-executor.1) @ 0xffff97801329d900, l_stat=2 *** Locks held: * Lock 0 (initialized at vcache_new) lock address : 0xffff978013563200 type : sleep/adaptive initialized : 0xffffffff8519eb8e shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff97801329d900 last held: 0xffff97801329d900 last locked* : 0xffffffff85221ca6 unlocked : 0xffffffff85222055 owner/count : 000000000000000000 flags : 000000000000000000 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at vcache_new) lock address : 0xffff978013563b00 type : sleep/adaptive initialized : 0xffffffff8519eb8e shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffff97801329d900 last held: 0xffff97801329d900 last locked* : 0xffffffff85221ca6 unlocked : 000000000000000000 owner/count : 000000000000000000 flags : 000000000000000000 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 597.597 (dhcpcd) @ 0xffff97801239b280, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff862cd7c0 type : sleep/adaptive initialized : 0xffffffff84cda5f3 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffff97801239b280 last held: 000000000000000000 last locked : 000000000000000000 unlocked*: 000000000000000000 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 594.594 (dhcpcd) @ 0xffff97801239bb00, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at module_hook_init) lock address : 0xffffffff862cd7c0 type : sleep/adaptive initialized : 0xffffffff84cda5f3 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp