Warning: Permanently added '10.128.0.141' (ECDSA) to the list of known hosts. 2020/05/16 13:01:25 fuzzer started 2020/05/16 13:01:25 dialing manager at 10.128.0.105:46407 2020/05/16 13:01:26 syscalls: 225 2020/05/16 13:01:26 code coverage: enabled 2020/05/16 13:01:26 comparison tracing: enabled 2020/05/16 13:01:26 extra coverage: support is not implemented in syzkaller 2020/05/16 13:01:26 setuid sandbox: support is not implemented in syzkaller 2020/05/16 13:01:26 namespace sandbox: support is not implemented in syzkaller 2020/05/16 13:01:26 Android sandbox: support is not implemented in syzkaller 2020/05/16 13:01:26 fault injection: support is not implemented in syzkaller 2020/05/16 13:01:26 leak checking: support is not implemented in syzkaller 2020/05/16 13:01:26 net packet injection: support is not implemented in syzkaller 2020/05/16 13:01:26 net device setup: support is not implemented in syzkaller 2020/05/16 13:01:26 concurrency sanitizer: support is not implemented in syzkaller 2020/05/16 13:01:26 devlink PCI setup: support is not implemented in syzkaller 2020/05/16 13:01:26 USB emulation: support is not implemented in syzkaller 13:01:33 executing program 0: r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) connect(r0, &(0x7f0000000080)=@in6={0x18, 0x0, 0x3, 0x8}, 0xc) syz_extract_tcp_res(&(0x7f00000000c0), 0x49, 0x8) r1 = socket$unix(0x1, 0x2, 0x0) pwrite(r1, &(0x7f0000000100), 0x0, 0x80000001) r2 = fcntl$dupfd(0xffffffffffffffff, 0xc, 0xffffffffffffffff) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x3}, 0x8) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x3}, 0x8) r3 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() shmctl$IPC_SET(r3, 0x1, &(0x7f00000003c0)={{0x20, r4, r6, r7, r8, 0x24, 0x9}, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x1}) recvfrom(0xffffffffffffff9c, &(0x7f0000000440)=""/70, 0x46, 0x841, 0x0, 0x0) sendto$inet(r2, &(0x7f00000004c0)="1e3b6d8d9e99c5f4826997c65bf133209cb38c0ad9cb2994c2a8b0a02b0f4d59c6a51a6790a736c26d02d5fa7e35ecd0a8206a1c5ca975a0152e6094a581ad4f9796283e25c0bfc8a833f6490e39fef7bcd100103399de11a63972442617031779080083a2e7d18af3298e5b2ebf2670adf1260803c7a86f6b50d90c98ab0f68925c3a794401cca4c4c03239ef803f9b99829231f0da27c2c6d6f4798f729ed0d5bd3aa9da7448fc3cb6b6e0412977dd540f05fe9ab5c87645796b029e", 0xbd, 0x2, &(0x7f0000000580)={0x2, 0x2}, 0xc) pipe2(&(0x7f00000005c0)={0xffffffffffffffff}, 0x1400004) bind$unix(r9, &(0x7f0000000600)=@abs={0x0, 0x0, 0x1}, 0x8) r10 = shmget(0x0, 0x3000, 0x180, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r10, 0x1, &(0x7f0000000680)={{0x1ff, r7, r5, 0x0, 0x0, 0x0, 0x5}, 0x2, 0x5fac, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0xab8}) 13:01:33 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) openat(r0, &(0x7f0000000000)='./file0\x00', 0x800, 0x91) r1 = socket$inet(0x2, 0x20000000, 0x57) ftruncate(r1, 0x7f) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ftruncate(r2, 0xffffffffffffffb1) r3 = socket$inet(0x2, 0x4, 0x9) pread(r3, &(0x7f0000000040)="bdf2bb2d82a4984ccba647a9143562077d8e18ca814262315dcd7ea6780bac9bfa61a2cf3f075171af50b19fdf54f3dfe95c5142220ed2adb2ad500030ddd47b6d8e4c5c914300119956f0f5cf01d8ed56698ae46c7f55c44d8a1e2bd3190d7f397a02ce59a6513c6ea7445b9031dff3d097fc0856a8df8a2bf7c38a81cfeebf77aa56a7eefcd4bf2f21d45b3709be93666b4aac81ef5ac6cf027869", 0x9c, 0x2) connect$inet6(r0, &(0x7f0000000100)={0x18, 0x0, 0x9, 0x9d3}, 0xc) fcntl$getown(r2, 0x5) r4 = _lwp_self() _lwp_unpark(r4, &(0x7f0000000140)=0x6) _lwp_create(&(0x7f0000000180)={0x400f002d, 0x0, {[0x8000, 0x7fffffff, 0xffffffff, 0x7f]}, {0xffffffffffff784e, 0x0, 0x4}, {0x101, 0x4, ')\x00'}}, 0x80, &(0x7f0000000200)=0x0) _lwp_suspend(r5) r6 = socket(0x10, 0x2, 0x6) ftruncate(r6, 0x1000) mlockall(0x0) r7 = getpgrp() r8 = accept$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x0, ""/69}, &(0x7f0000000300)=0x47) posix_spawn(r7, &(0x7f0000000240)=')\x00', &(0x7f0000000380)={0x8, 0x2, &(0x7f0000000340)=@dup={0x1, r8, {0xc4}}}, &(0x7f00000013c0)={0x61, 0x0, {0x7fffffff}, 0xe83, {[0x1, 0x58d0, 0x9, 0x2]}, {[0x800, 0x6, 0xc2, 0x4]}}, &(0x7f0000001400)=[')\x00', ')\x00'], &(0x7f0000001440)=[')\x00', '%)+:/][\x00', ')\x00']) 13:01:34 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0xc, 0xffffffffffffffff) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x1, 0xd) close(r0) socketpair(0x10, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f00000000c0)=0x8) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r2, 0x20}, {r0, 0x20}, {r0, 0x4}, {r3, 0x4}, {r5, 0x4}, {r0, 0x10}], 0x6, 0x1) getsockopt(r1, 0x6, 0x0, &(0x7f0000000180)=""/186, &(0x7f0000000240)=0xba) r6 = socket$inet(0x2, 0x4, 0x30) ftruncate(r6, 0x5bfe) poll(&(0x7f0000000280), 0x0, 0x7f) r7 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x10000, 0x10) utimensat(r7, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={{0xc53, 0x9}, {0x90000000000, 0x1}}, 0x200) _lwp_create(&(0x7f0000000400)={0x400f002b, &(0x7f0000000380)={0x1, 0x0, {[0x6, 0x7, 0x8, 0x1]}, {0x8, 0x966f, 0x4}, {0x5, 0x52a, '\\[)-\x00'}}, {[0x7f, 0xfffffffb, 0xfffffffb, 0x3ff]}, {0x3ff, 0x2}, {0x32e2, 0x5, '%\x00'}}, 0x140, &(0x7f0000000480)) r8 = socket(0x6, 0x20000000, 0xff) sendto(r8, &(0x7f00000004c0)="b9f356da34250d02ed4f9eba0bc363adab72522766a35c2f60a637d2a9d9a4dbe868022bca72d1eb9bb8a9993fbf4b53014f28e55cfbfb03d06a02dc16f6d19164d7a73a9d367a6fba538eb6afbc35edf057ed31ee4fec27081a113df2930866e57a5548210524b82811e1d3c7e04ac942a9eb6016486e64f164", 0x7a, 0x4, &(0x7f0000000540)=@un=@abs={0x1, 0x0, 0x0}, 0x8) r9 = socket(0x2, 0x5, 0xc0) r10 = fcntl$dupfd(0xffffffffffffff9c, 0x0, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000005c0)=[{r4, 0x100}, {r9, 0x10}, {r10, 0x2}, {0xffffffffffffff9c, 0x8}, {r11, 0x2}, {0xffffffffffffff9c, 0x100}], 0x6, 0x8001) 13:01:34 executing program 4: chflags(&(0x7f0000000000)='./file0\x00', 0x8) r0 = socket$inet6(0x18, 0x4, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x69, &(0x7f0000000040)={{0x18, 0x1, 0x1, 0x10000}, {0x18, 0x2, 0x7, 0x6}, 0xfffa, [0x80000001, 0x8, 0x7, 0x8, 0x1, 0x41, 0x7c00, 0x2]}, 0x3c) clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x6, 0x7}, &(0x7f00000000c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x100, 0x4) r4 = socket$inet(0x2, 0x40000000, 0x2) r5 = dup2(r0, r0) poll(&(0x7f00000001c0)=[{r1, 0x100}, {r2, 0x80}, {r3, 0x8}, {r0, 0x4}, {r4, 0x4}, {r5, 0x4}], 0x6, 0x20) socketpair(0x6, 0x2, 0x9, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000240)="4bc7", 0x2) r7 = accept(0xffffffffffffffff, &(0x7f0000000280)=@un=@file={0x0, ""/108}, &(0x7f0000000300)=0x6e) fchdir(r7) r8 = dup(0xffffffffffffffff) fchflags(r8, 0xb) r9 = open(&(0x7f0000000340)='./file0\x00', 0x2, 0x29) connect$inet(r9, &(0x7f0000000380)={0x2, 0x0}, 0xc) lchflags(&(0x7f00000003c0)='./file0\x00', 0x1) fcntl$dupfd(0xffffffffffffffff, 0xc, 0xffffffffffffffff) 13:01:34 executing program 3: getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0xc) r1 = getgid() lchown(&(0x7f0000000000)='./file0\x00', r0, r1) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x1400004) pwritev(r2, &(0x7f00000003c0)=[{&(0x7f00000000c0)="6bebd82be862691b196a6f0eb2ab5e893320028e71e29889468c44639efa4cd3af29074a1b9908b20d7aa7b77fb369770770c683052172aa9a9e20be397cb6555682980b97b021450f0578d3365853bbdfa5cf608f9797b5c9ad757970cdfaaa258edc1025c33ea094e42be3e8849e0a637cdbea299f3e7335f794835e83cc62a2041c32c841450473e40a3978870414ea86cf46510153d6663c5c3c6a93c29ab1b1cd6e4f77d943984a4670af18c975b8dc62b24c011fa42a4d48051d42dd4a8500c515890837ea4a64d64363a6ba4e30b0516fe65cb7332795c9", 0xdb}, {&(0x7f00000001c0)="5ab38fae4e6bf7655fc09ca5383333f40684af01ce9e1111cd84ce2111f5ab3cbd0c46a32dbcb7d8ce16ecbaedf624bb691d", 0x32}, {&(0x7f0000000200)="9dc904896fdf75499e05549686e3d90278a0ad1a516c846448bc4c338c7f6d73aaa78004fd845e81062a9e280fbf9e5d438cfaa327d20e45d5d57a3ae7e5387cccd879d50eb15bd9823390e700ed5b59652236e2a695e82529b3f0a26722817df8ee69", 0x63}, {&(0x7f0000000280)="7436a7da5278b955ba3d79923542e1c1f8a2077460f7a314728c79a817c6e0e6cafb68d6ba49bd6e07928003edb0739ec5bfc84a75ea017a1d33530f4eb92da00ffd75bf8e7a1bef38d25b146b138c4192bd50", 0x53}, {&(0x7f0000000300)="4a177ea2527ea99b7d875aa0c7514976e24420f55a03e7c444782c727d0478dae6fec5cca00f741d0a4749928c5085f7b545b9028ce6b968dc6d843c2d79b4986d4cb500e3c0bc6eb6e3be0d4d630b88b5f946064ba73f00f2af9df70e4cb9c399cb43666f70311c9cf41a1985d46b58ebf605b3a2411bd41b43fd2218935832f7c597bf35c14aa5250b06ea5bc65e55a5d2bd63642e4294ef7921698c2d92191b21efeaca47babf2832d94cc3", 0xad}], 0x5, 0xffffffffffff3ffc) chflags(&(0x7f0000000440)='./file0\x00', 0x30001) r3 = socket(0x1f, 0x10000000, 0x3e) read(r3, &(0x7f0000000480)=""/61, 0x3d) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000004c0)='./file0\x00', r4, r1) r5 = socket(0x2, 0x2, 0x8) setsockopt$sock_linger(r5, 0xffff, 0x80, &(0x7f0000000600)={0x4, 0x401}, 0x8) mkdir(&(0x7f0000000640)='./file0\x00', 0x100) getsockopt$SO_PEERCRED(r3, 0xffff, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0xc) r7 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0xc) getgroups(0x3, &(0x7f0000000700)=[r8, 0xffffffffffffffff, r6]) getgroups(0x4, &(0x7f0000000740)=[0xffffffffffffffff, r7, 0x0, r6]) getsockopt$sock_cred(r2, 0xffff, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) setgroups(0x2, &(0x7f0000000800)=[r9, r10]) 13:01:36 executing program 5: r0 = __vfork14() r1 = fork() setpgid(r0, r1) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) fdatasync(r2) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc) accept$inet6(r3, 0x0, &(0x7f00000000c0)) r4 = socket(0x2, 0x20000000, 0x81) r5 = socket(0x1f, 0x1, 0x40) r6 = dup2(r4, r5) r7 = socket$inet(0x2, 0x2, 0xe1) getpeername$inet(r7, &(0x7f0000000100), &(0x7f0000000140)=0xc) _lwp_create(&(0x7f0000000280)={0x400f0020, &(0x7f0000000200)={0x8, &(0x7f0000000180)={0x801e0043, 0x0, {[0x6, 0x7, 0x3ff, 0x1]}, {0x2, 0x81}, {0x20, 0x7, '\\\\+%!-\x00'}}, {[0xf0000000, 0x1f, 0x1ff, 0x4]}, {0x5, 0x8d9, 0x4}, {0x3ff, 0x0, '*\x00'}}, {[0x3, 0x1, 0x4bb, 0x3]}, {0x6, 0x81, 0x8}, {0x0, 0x81, '\'@\x00'}}, 0x40, &(0x7f0000000300)=0x0) _lwp_kill(r8, 0x0) getgroups(0x4, &(0x7f0000000380)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) fchownat(r6, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, r9, 0x400) preadv(r4, &(0x7f0000001700)=[{&(0x7f00000003c0)=""/110, 0x6e}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/72, 0x48}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/121, 0x79}, {&(0x7f00000015c0)}, {&(0x7f0000001600)=""/202, 0xca}], 0x7, 0x8000) pipe2(&(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000000) utimensat(r10, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={{0x9, 0x5}, {0x100000001, 0x5}}, 0x0) dup(r11) 13:01:36 executing program 0: rename(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0//ile0\x00') open(&(0x7f0000000080)='./file0//ile0\x00', 0x200000, 0x50) 13:01:36 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0, 0x0) r2 = accept$unix(r0, &(0x7f0000000080)=@file={0x0, ""/4096}, &(0x7f0000000000)=0x1002) r3 = __clone(0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000010c0)="9f37c785e96e6abcaeba9d5c624918e477109e53d98ac91d954d36eb3818f32068f3ee7afa4f092906468d16a98e8d57472fbfa1035c2be6604f2a25b1b7ae8f70bfd7f4a02de78fef0818023aaaa95c19e46df5144ab4824f829f5e6886f98a0b4c877b68e2b99d622f5650ab5d02ee9cdb302655b5f8ea193c574a3b82b1657268006021d0597da2ceaefe4810a139f77e11f86cbd3f0c8c620778", 0x9c) ptrace(0x9, r3, 0x0, 0x0) fcntl$setown(r2, 0x6, r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0, 0x0) [ 55.8076082] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 835 command syz-executor.0) [ 55.8675536] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 835 command syz-executor.0) 13:01:37 executing program 0: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6f02dd8b7f"], 0x1) r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=ANY=[], 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r1, 0x10001, 0x1, &(0x7f0000000080)="984e8f3a96084744f7c1954427ee96a3bd634722bfad55f4cc311397a479da96d874c8f2b2745afad33cca90cc0085942d21ff02156582b61c0c22a175835cec38a05db1a55ed0f0c5736487b281a42f1dddfeb2490393a082cdf650339a3dfbcd9f8a6a69fb75dcc04fc1f8e6fdb5b1560e0ed7213d259b1707fdb69b3e8c1fd990c25bfed63a2be5711e3b91bc74682b0769c83ad2efde5dc6eafb3209bb587eb02ea03d119a5dc40b59c92992e5ae7e81e93eb5d231a6030c6d72d9ae73d84fb7dfe5b80a95223ba89f92ff2a4a3abc05d62016b75ad84729264565438d55ac2ab0b0", 0xe4) 13:01:37 executing program 0: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x5429f}], 0x1000000000000013) r1 = open(&(0x7f0000000000)='./file0\x00', 0x70e, 0x0) fcntl$setown(r1, 0x6, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000380)=""/102400, 0x19000}, {&(0x7f0000000080)=""/20, 0x14}, {&(0x7f00000000c0)=""/57, 0x39}], 0x3, 0x0) 13:01:37 executing program 1: __clone(0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x70e, 0x0) fcntl$setown(r0, 0x6, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = getpgrp() wait4(r1, 0x0, 0x0, 0x0) 13:01:38 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x70e, 0x0) fcntl$setown(r0, 0x6, 0x0) ftruncate(r0, 0x3648) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x70e, 0x0) fcntl$setown(r1, 0x6, 0x0) r2 = getuid() setreuid(0xee00, r2) r3 = getegid() setregid(r3, 0x0) r4 = getegid() r5 = getegid() setregid(r5, 0x0) setregid(r4, r5) getgroups(0x2, &(0x7f0000000040)=[r3, r4]) r7 = getegid() setregid(r7, 0x0) setregid(0x0, r7) setgid(r7) fchown(r1, r2, r6) 13:01:38 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2080, 0xffffffffffffffff) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000340)=[{r0, 0x40}], 0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x70e, 0x0) fcntl$setown(r1, 0x6, 0x0) open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x1000000, 0x4) fcntl$dupfd(r0, 0xc, r1) 13:01:38 executing program 0: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x201, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0xa, 0xffffffffffffffff) _lwp_setprivate(&(0x7f0000000040)) 13:01:38 executing program 2: mlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) minherit(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) __clone(0x0, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 13:01:38 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x70e, 0x0) fcntl$setown(r0, 0x6, 0x0) recvfrom(r0, &(0x7f0000000000)=""/94, 0x5e, 0x2, &(0x7f0000000080)=@in={0x2, 0x3}, 0xc) setrlimit(0x6, &(0x7f0000000180)) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 13:01:39 executing program 4: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x3, 0x11, r1, 0x0, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000080)=""/191, 0xbf}], 0x1) r2 = __clone(0x0, 0x0) mlock(&(0x7f0000012000/0x2000)=nil, 0x2000) ptrace(0x9, r2, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x70e, 0x0) fcntl$setown(r3, 0x6, 0x0) r4 = getuid() setreuid(0xee00, r4) r5 = getegid() setregid(r5, 0x0) lchown(&(0x7f0000000180)='./file0\x00', r4, r5) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x3, 0x2, 0x4, 0x10000000008, r2}) May 16 13:05:36 ci2-netbsd-6 shutdown: poweroff by root: power button pressed May 16 13:05:47 ci2-netbsd-6 syslogd[46[ 3006.2960599] panic: kernel diagnostic assertion "pgrp->pg_jobc] > 0" failed: file "/syzkaller:/managers/netbsd/kern el/sys/keErn/kern_proc.c", line 1510 [ 306.3160288] cpu1: Begin traceback... xiting on signal 15 [ 306.3260227] vpanic() at netbsd:vpanic+0x22e [ 306.3560015] _GLOBAL__sub_D_65535_0_cpu_configure() at netbsd:_GLOBAL__sub_D_65535_0_cpu_configure [ 306.3759878] fixjobc() at netbsd:fixjobc+0x307 [ 306.4059564] exit1() at netbsd:exit1+0x46f [ 306.4259407] sigexit() at netbsd:sigexit+0x39e [ 306.4459218] sendsig() at netbsd:sendsig [ 306.4659034] lwp_userret() at netbsd:lwp_userret+0x390 [ 306.4858934] syscall() at netbsd:syscall+0x85e [ 306.4958845] --- syscall (number 4) --- [ 306.5058695] netbsd:syscall+0x85e: [ 306.5058695] cpu1: End traceback... [ 306.5158614] fatal breakpoint trap in supervisor mode [ 306.5158614] trap type 1 code 0 rip 0xffffffff802209c5 cs 0x8 rflags 0x282 cr2 0xffffb3016f93cf68 ilevel 0 rsp 0xffffb30189acb910 [ 306.5358416] curlwp 0xffffb30012bfd980 pid 1506.1506 lowest kstack 0xffffb30189ac42c0 Stopped in pid 1506.1506 (syz-executor.5) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xe9 vpanic() at netbsd:vpanic+0x22e _GLOBAL__sub_D_65535_0_cpu_configure() at netbsd:_GLOBAL__sub_D_65535_0_cpu_configure fixjobc() at netbsd:fixjobc+0x307 exit1() at netbsd:exit1+0x46f sigexit() at netbsd:sigexit+0x39e sendsig() at netbsd:sendsig lwp_userret() at netbsd:lwp_userret+0x390 syscall() at netbsd:syscall+0x85e --- syscall (number 4) --- netbsd:syscall+0x85e: ds d980 es 3380 fs b8f0 gs 8e35 rdi ffffffff82bdf900 db_onpanic rsi 1ffffffff057bf20 rbp ffffb30189acb910 rbx ffffb3016e699000 rdx 0 rcx ffffffff81266869 db_panic+0xd5 rax ffffb30012bfd980 r8 4 r9 1ffffffff057bf20 r10 ffffffff82bdf903 db_onpanic+0x3 r11 10 r12 ffffb3016e6aa000 r13 ffffffff823097c0 _device_suspensor_drvctl+0x160 r14 ffffb30189acb9a0 r15 ffffb3016e699060 rip ffffffff802209c5 breakpoint+0x5 cs 8 rflags 282 rsp ffffb30189acb910 ss 10 netbsd:breakpoint+0x5: leave PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 1376 1376 3 0 80 ffffb30012c6a600 halt nanoslp 977 977 3 0 1000040 ffffb30012cd2340 syz-executor.3 tstile 504 504 2 1 1000000 ffffb30012bcd4c0 syz-executor.5 1506 >1506 7 1 1000000 ffffb30012bfd980 syz-executor.5 827 1437 2 1 11100000 ffffb30012be9940 syz-executor.5 827 827 3 0 11000040 ffffb30012c80200 syz-executor.5 xclocv 1469 1469 2 1 1000000 ffffb30013825980 syz-executor.2 825 825 2 1 1000000 ffffb30012bfd540 syz-executor.2 291 291 2 1 1000000 ffffb30014a5ca80 syz-executor.1 850 850 2 1 1000000 ffffb30014a5c640 syz-executor.1 698 698 3 0 1000040 ffffb30014911540 syz-executor.2 tstile 693 693 3 0 1000040 ffffb30012da9a80 syz-executor.4 tstile 557 557 3 0 1000040 ffffb300147e0940 syz-executor.1 tstile 694 694 3 1 1000040 ffffb300147e0500 syz-executor.0 tstile 681 1079 2 0 40 ffffb300147e00c0 syz-fuzzer 681 691 3 1 c0 ffffb300147bd900 syz-fuzzer parked 681 690 3 0 80 ffffb30012741700 syz-fuzzer parked 681 865 3 0 80 ffffb300147bd4c0 syz-fuzzer parked 681 723 3 1 c0 ffffb300140678c0 syz-fuzzer parked 681 688 3 1 80 ffffb30014067480 syz-fuzzer parked 681 686 3 1 80 ffffb30012c92240 syz-fuzzer parked 681 1277 3 1 c0 ffffb300136f4ac0 syz-fuzzer parked 681 724 2 1 40 ffffb300136f4680 syz-fuzzer 681 684 2 0 40 ffffb30013863b00 syz-fuzzer 681 681 3 1 80 ffffb3001387d300 syz-fuzzer parked 678 678 2 1 0 ffffb30013871700 sshd 719 719 2 0 1000000 ffffb3001384f200 getty 1183 1183 2 0 1000000 ffffb30013843a40 getty 1374 1374 3 0 1000000 ffffb30013843600 getty tstile 668 668 2 0 1000040 ffffb300138319c0 getty 584 584 2 0 0 ffffb30012d1e9c0 sshd 601 601 3 0 1000000 ffffb30012c415c0 powerd tstile 460 460 2 1 0 ffffb30013799700 syslogd 303 303 2 0 0 ffffb30012cd2780 dhcpcd 333 > 333 7 0 0 ffffb30012be90c0 dhcpcd 1 1 2 0 0 ffffb30012932100 init 0 590 3 0 200 ffffb300129859c0 physiod physiod 0 123 3 0 200 ffffb30012992a00 pooldrain pooldrain 0 122 3 0 200 ffffb300129925c0 ioflush syncer 0 121 3 0 240 ffffb30012992180 pgdaemon pgdaemon 0 118 3 0 200 ffffb30012985140 usb0 usbevt 0 117 3 0 200 ffffb30012932980 usbtask-dr usbtsk 0 116 3 0 200 ffffb3000fe5cac0 usbtask-hc usbtsk 0 115 3 0 200 ffffb30012932540 npfgc-0 npfgccv 0 114 3 0 200 ffffb30012923940 rt_free rt_free 0 113 3 1 200 ffffb30012923500 unpgc unpgc 0 112 3 0 200 ffffb300129230c0 key_timehandler key_timehandler 0 111 3 1 200 ffffb30012919900 icmp6_wqinput/1 icmp6_wqinput 0 110 3 0 200 ffffb300129194c0 icmp6_wqinput/0 icmp6_wqinput 0 109 3 0 200 ffffb30012919080 nd6_timer nd6_timer 0 108 3 1 200 ffffb300127698c0 carp6_wqinput/1 carp6_wqinput 0 107 3 0 200 ffffb30012769480 carp6_wqinput/0 carp6_wqinput 0 106 3 1 200 ffffb30012769040 carp_wqinput/1 carp_wqinput 0 105 3 0 200 ffffb30012759bc0 carp_wqinput/0 carp_wqinput 0 104 3 1 200 ffffb30012759780 icmp_wqinput/1 icmp_wqinput 0 103 3 0 200 ffffb30012759340 icmp_wqinput/0 icmp_wqinput 0 102 3 0 200 ffffb30012744b80 rt_timer rt_timer 0 101 3 0 200 ffffb30012744740 vmem_rehash vmem_rehash 0 100 3 0 200 ffffb30012741b40 entbutler entropy 0 27 3 0 200 ffffb3000fe5c680 scsibus0 sccomp 0 26 3 0 200 ffffb3000fe5c240 pms0 pmsreset 0 25 2 1 200 ffffb3000fd9da80 xcall/1 0 24 1 1 200 ffffb3000fd9d640 softser/1 0 23 1 1 200 ffffb3000fd9d200 softclk/1 0 22 1 1 200 ffffb3000fd9ba40 softbio/1 0 21 1 1 200 ffffb3000fd9b600 softnet/1 0 20 1 1 201 ffffb3000fd9b1c0 idle/1 0 19 3 0 200 ffffb3000e80aa00 lnxpwrwq lnxpwrwq 0 18 3 0 200 ffffb3000e80a5c0 lnxlngwq lnxlngwq 0 17 3 0 200 ffffb3000e80a180 lnxsyswq lnxsyswq 0 16 3 0 200 ffffb3000e8049c0 lnxrcugc lnxrcugc 0 15 3 0 200 ffffb3000e804580 sysmon smtaskq 0 14 3 0 200 ffffb3000e804140 pmfsuspend pmfsuspend 0 13 3 0 200 ffffb3000e7ff980 pmfevent pmfevent 0 12 3 0 200 ffffb3000e7ff540 sopendfree sopendfr 0 11 3 1 200 ffffb3000e7ff100 iflnkst iflnkst 0 10 3 0 200 ffffb3000e7f3940 nfssilly nfssilly 0 9 3 0 200 ffffb3000e7f3500 vdrain vdrain 0 8 3 1 200 ffffb3000e7f30c0 modunload mod_unld 0 7 3 0 200 ffffb3000e7e6900 xcall/0 xcall 0 6 1 0 200 ffffb3000e7e64c0 softser/0 0 5 1 0 200 ffffb3000e7e6080 softclk/0 0 4 1 0 200 ffffb3000e7e48c0 softbio/0 0 3 1 0 200 ffffb3000e7e4480 softnet/0 0 2 1 0 201 ffffb3000e7e4040 idle/0 0 0 3 0 200 ffffffff82caa740 swapper uvm [Locks tracked through LWPs] ****** LWP 977.977 (syz-executor.3) @ 0xffffb30012cd2340, l_stat=3 *** Locks held: * Lock 0 (initialized at fork1) lock address : 0xffffb30012bbdf50 type : sleep/adaptive initialized : 0xffffffff816afae8 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb30012cd2340 last held: 0xffffb30012cd2340 last locked* : 0xffffffff816ac2e4 unlocked : 0xffffffff816a9c07 owner/count : 0xffffb30012cd2340 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at uvm_map_setup) lock address : 0xffffffff82e277e8 type : sleep/adaptive initialized : 0xffffffff816423e1 shared holds : 0 exclusive: 1 shares wanted: 1 exclusive: 5 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb30012cd2340 last held: 0xffffb30012cd2340 last locked* : 0xffffffff8163c695 unlocked : 0xffffffff81645b9d owner/count : 0x0000000000000020 flags : 0x0000000000000003 Turnstile: => 0 waiting readers: => 5 waiting writers: 0xffffb300147e0940 0xffffb30012da9a80 0xffffb30014911540 0xffffb30012cd2340 0xffffb300147e0500 * Lock 2 (initialized at uvm_obj_init) lock address : 0xffffb30014a29100 type : sleep/adaptive initialized : 0xffffffff8164f080 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb30012cd2340 last held: 0xffffb30012cd2340 last locked* : 0xffffffff8164262f unlocked : 0xffffffff81628c15 owner/count : 000000000000000000 flags : 000000000000000000 Turnstile: no active turnstile for this lock. * Lock 3 (initialized at pmap_bootstrap) lock address : 0xffffffff82d9f000 type : sleep/adaptive initialized : 0xffffffff8086968e shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb30012cd2340 last held: 0xffffb30012cd2340 last locked* : 0xffffffff8086dd97 unlocked : 0xffffffff8086df38 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 504.504 (syz-executor.5) @ 0xffffb30012bcd4c0, l_stat=2 *** Locks held: * Lock 0 (initialized at fork1) lock address : 0xffffb30012b187d0 type : sleep/adaptive initialized : 0xffffffff816afae8 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffb30012bcd4c0 last held: 0xffffb30012bcd4c0 last locked* : 0xffffffff816ac2e4 unlocked : 000000000000000000 owner/count : 0xffffb30012bcd4c0 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at amap_ctor) lock address : 0xffffb30014999480 type : sleep/adaptive initialized : 0xffffffff81620de3 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffb30012bcd4c0 last held: 0xffffb30012bcd4c0 last locked* : 0xffffffff8162584a unlocked : 0xffffffff8162495b owner/count : 0xffffb30012bcd4c0 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: * Lock 0 (initialized at pool_init) lock address : 0xffffffff82e25670 type : sleep/adaptive initialized : 0xffffffff81754cd7 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 2 relevant cpu : 1 last held: 0 relevant lwp : 0xffffb30012bcd4c0 last held: 000000000000000000 last locked : 0xffffffff81757515 unlocked*: 0xffffffff817575dc owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 1506.1506 (syz-executor.5) @ 0xffffb30012bfd980, l_stat=7 *** Locks held: * Lock 0 (initialized at fork1) lock address : 0xffffb30012a0d710 type : sleep/adaptive initialized : 0xffffffff816afae8 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffb30012bfd980 last held: 0xffffb30012bfd980 last locked* : 0xffffffff816ac2e4 unlocked : 000000000000000000 owner/count : 0xffffb30012bfd980 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at procinit) lock address : 0xffffffff82da1d00 type : sleep/adaptive initialized : 0xffffffff816d3fe8 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffb30012bfd980 last held: 0xffffb30012bfd980 last locked* : 0xffffffff816ac432 unlocked : 0xffffffff816c04d3 owner field : 0xffffb30012bfd980 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 2 waiting writers: 0xffffb30012c415c0 0xffffb30013843600 *** Locks wanted: none ****** LWP 698.698 (syz-executor.2) @ 0xffffb30014911540, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at uvm_map_setup) lock address : 0xffffffff82e277e8 type : sleep/adaptive initialized : 0xffffffff816423e1 shared holds : 0 exclusive: 1 shares wanted: 1 exclusive: 5 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb30014911540 last held: 0xffffb30012cd2340 last locked* : 0xffffffff8163c695 unlocked : 0xffffffff81645b9d owner/count : 0x0000000000000020 flags : 0x0000000000000003 Turnstile: => 0 waiting readers: => 5 waiting writers: 0xffffb300147e0940 0xffffb30012da9a80 0xffffb30014911540 0xffffb30012cd2340 0xffffb300147e0500 ****** LWP 693.693 (syz-executor.4) @ 0xffffb30012da9a80, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at uvm_map_setup) lock address : 0xffffffff82e277e8 type : sleep/adaptive initialized : 0xffffffff816423e1 shared holds : 0 exclusive: 1 shares wanted: 1 exclusive: 5 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb30012da9a80 last held: 0xffffb30012cd2340 last locked* : 0xffffffff8163c695 unlocked : 0xffffffff81645b9d owner/count : 0x0000000000000020 flags : 0x0000000000000003 Turnstile: => 0 waiting readers: => 5 waiting writers: 0xffffb300147e0940 0xffffb30012da9a80 0xffffb30014911540 0xffffb30012cd2340 0xffffb300147e0500 ****** LWP 557.557 (syz-executor.1) @ 0xffffb300147e0940, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at uvm_map_setup) lock address : 0xffffffff82e277e8 type : sleep/adaptive initialized : 0xffffffff816423e1 shared holds : 0 exclusive: 1 shares wanted: 1 exclusive: 5 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb300147e0940 last held: 0xffffb30012cd2340 last locked* : 0xffffffff8163c695 unlocked : 0xffffffff81645b9d owner/count : 0x0000000000000020 flags : 0x0000000000000003 Turnstile: => 0 waiting readers: => 5 waiting writers: 0xffffb300147e0940 0xffffb30012da9a80 0xffffb30014911540 0xffffb30012cd2340 0xffffb300147e0500 ****** LWP 694.694 (syz-executor.0) @ 0xffffb300147e0500, l_stat=3 *** Locks held: * Lock 0 (initialized at fork1) lock address : 0xffffb30013876710 type : sleep/adaptive initialized : 0xffffffff816afae8 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffb300147e0500 last held: 0xffffb300147e0500 last locked* : 0xffffffff816ac2e4 unlocked : 0xffffffff816a9c07 owner/count : 0xffffb300147e0500 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: * Lock 0 (initialized at uvm_map_setup) lock address : 0xffffffff82e277e8 type : sleep/adaptive initialized : 0xffffffff816423e1 shared holds : 0 exclusive: 1 shares wanted: 1 exclusive: 5 relevant cpu : 1 last held: 0 relevant lwp : 0xffffb300147e0500 last held: 0xffffb30012cd2340 last locked* : 0xffffffff8163c695 unlocked : 0xffffffff81645b9d owner/count : 0x0000000000000020 flags : 0x0000000000000003 Turnstile: => 0 waiting readers: => 5 waiting writers: 0xffffb300147e0940 0xffffb30012da9a80 0xffffb30014911540 0xffffb30012cd2340 0xffffb300147e0500 ****** LWP 681.1079 (syz-fuzzer) @ 0xffffb300147e00c0, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at uvm_map_setup) lock address : 0xffffffff82e277e8 type : sleep/adaptive initialized : 0xffffffff816423e1 shared holds : 0 exclusive: 1 shares wanted: 1 exclusive: 5 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb300147e00c0 last held: 0xffffb30012cd2340 last locked* : 0xffffffff8163c695 unlocked : 0xffffffff81645b9d owner/count : 0x0000000000000020 flags : 0x0000000000000003 Turnstile: => 0 waiting readers: => 5 waiting writers: 0xffffb300147e0940 0xffffb30012da9a80 0xffffb30014911540 0xffffb30012cd2340 0xffffb300147e0500 ****** LWP 1183.1183 (getty) @ 0xffffb30013843a40, l_stat=2 *** Locks held: * Lock 0 (initialized at fork1) lock address : 0xffffb300138464d0 type : sleep/adaptive initialized : 0xffffffff816afae8 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb30013843a40 last held: 0xffffb30013843a40 last locked* : 0xffffffff816ac2e4 unlocked : 0xffffffff816a9c07 owner/count : 0xffffb30013843a40 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at amap_ctor) lock address : 0xffffb3001430d1c0 type : sleep/adaptive initialized : 0xffffffff81620de3 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb30013843a40 last held: 0xffffb30013843a40 last locked* : 0xffffffff8162584a unlocked : 0xffffffff8162495b [ 306.5358416] Skipping crash dump on recursive panic [ 306.5358416] panic: ASan: Unauthorized Access In 0xffffffff816e7a00: Addr 0xffffb3001430d1c0 [8 bytes, read, PoolUseAfterFree] [ 306.5358416] cpu1: Begin traceback... [ 306.5358416] vpanic() at netbsd:vpanic+0x22e [ 306.5358416] snprintf() at netbsd:snprintf [ 306.5358416] kasan_report() at netbsd:kasan_report+0x9c [ 306.5358416] __asan_load8() at netbsd:__asan_load8+0x294 [ 306.5358416] rw_dump() at netbsd:rw_dump+0x20 [ 306.5358416] lockdebug_dump() at netbsd:lockdebug_dump+0x207 [ 306.5358416] lockdebug_show_one() at netbsd:lockdebug_show_one+0xb7 [ 306.5358416] lockdebug_show_all_locks() at netbsd:lockdebug_show_all_locks+0x26b [ 306.5358416] db_command() at netbsd:db_command+0x2ad [ 306.5358416] db_command_loop() at netbsd:db_command_loop+0x26c [ 306.5358416] db_trap() at netbsd:db_trap+0x206 [ 306.5358416] kdb_trap() at netbsd:kdb_trap+0x1ce [ 306.5358416] trap() at netbsd:trap+0x57e [ 306.5358416] --- trap (number 1) --- [ 306.5358416] breakpoint() at netbsd:breakpoint+0x5 [ 306.5358416] db_panic() at netbsd:db_panic+0xe9 [ 306.5358416] vpanic() at netbsd:vpanic+0x22e [ 306.5358416] _GLOBAL__sub_D_65535_0_cpu_configure() at netbsd:_GLOBAL__sub_D_65535_0_cpu_configure [ 306.5358416] fixjobc() at netbsd:fixjobc+0x307 [ 306.5358416] exit1() at netbsd:exit1+0x46f [ 306.5358416] sigexit() at netbsd:sigexit+0x39e [ 306.5358416] sendsig() at netbsd:sendsig [ 306.5358416] lwp_userret() at netbsd:lwp_userret+0x390 [ 306.5358416] syscall() at netbsd:syscall+0x85e [ 306.5358416] --- syscall (number 4) --- [ 306.5358416] netbsd:syscall+0x85e: [ 306.5358416] cpu1: End traceback... [ 306.5358416] fatal breakpoint trap in supervisor mode [ 306.5358416] trap type 1 code 0 rip 0xffffffff802209c5 cs 0x8 rflags 0x282 cr2 0xffffb3016f93cf68 ilevel 0x8 rsp 0xffffb30189acaeb0 [ 306.5358416] curlwp 0xffffb30012bfd980 pid 1506.1506 lowest kstack 0xffffb30189ac42c0 Stopped in pid 1506.1506 (syz-executor.5) at netbsd:breakpoint+0x5: leave