kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Tue Feb 19 23:47:46 PST 2019 OpenBSD/amd64 (ci-openbsd-multicore-1.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.10.59' (ECDSA) to the list of known hosts. 2019/02/19 23:48:12 fuzzer started 2019/02/19 23:48:18 dialing manager at 10.128.15.235:15072 2019/02/19 23:48:18 syscalls: 1 2019/02/19 23:48:18 code coverage: enabled 2019/02/19 23:48:18 comparison tracing: enabled 2019/02/19 23:48:18 extra coverage: support is not implemented in syzkaller 2019/02/19 23:48:18 setuid sandbox: enabled 2019/02/19 23:48:18 namespace sandbox: support is not implemented in syzkaller 2019/02/19 23:48:18 Android sandbox: support is not implemented in syzkaller 2019/02/19 23:48:18 fault injection: support is not implemented in syzkaller 2019/02/19 23:48:18 leak checking: support is not implemented in syzkaller 2019/02/19 23:48:18 net packet injection: enabled 2019/02/19 23:48:18 net device setup: support is not implemented in syzkaller 23:48:22 executing program 0: r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xfff, 0x1ff, "d8f3d91f325a6c2d5bd1aeec5016711d53b540f2", 0x8, 0x5}) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x10000, 0x9, 0x6, 0x7, "1685a03c0769a4da8bbe8289bec381c86a6a3586", 0x5, 0x4}) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000080)={0x5, 0x7fff, 0x1, 0xe03, "063b1c948125515ea33e9b42a0a995946137996a"}) ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f00000000c0)) ioctl$TIOCMBIC(r0, 0x8004746b, &(0x7f0000000100)=0x1f) ioctl$TIOCCLRVERAUTH(r0, 0x2000741d) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000140)) r1 = msgget$private(0x0, 0x70) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000180)=""/159) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x1a0, 0x0) ioctl$KDDISABIO(r2, 0x20004b3d) ioctl$KDDISABIO(r2, 0x20004b3d) ioctl$TIOCSTSTAMP(r2, 0x8008745a, &(0x7f0000000280)={0xfffffffffffffcf3, 0x6}) ioctl$TIOCCONS(r2, 0x80047462, &(0x7f00000002c0)=0x7f) ioctl$TIOCOUTQ(r2, 0x40047473, &(0x7f0000000300)=0x6) ioctl$KDGKBMODE(r2, 0x40044b06) ioctl$WSDISPLAYIO_LDFONT(r2, 0x8058574d, &(0x7f0000000340)={'./file0\x00', 0x2, 0x5, 0x4, 0x1, 0x10000, 0xffffffff, 0xa433, 0x2, 0x1, 0x5292, 0x80000000}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x4) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000400)={0xa60, 0x2, 0x40, 0x100000000, "a37848b8f8d5d9457b58f2fe89642c280d07bb5c", 0x0, 0x1000}) r3 = openat(r2, &(0x7f0000000440)='./file0\x00', 0x1, 0x4) ioctl$TIOCSTOP(r2, 0x2000746f) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000480)={0x4, 0x4, 0x8000, 0x79, "99738cff0a884ab2088cda77b2af524a6d2d6feb", 0xff, 0x7}) syz_open_pts() lseek(r0, 0x0, 0x2) msgrcv(r1, &(0x7f00000004c0)={0x0, ""/98}, 0x6a, 0x1, 0x1800) r4 = geteuid() getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) setreuid(r4, r5) linkat(r3, &(0x7f00000005c0)='./file0\x00', r2, &(0x7f0000000600)='./file0/../file0\x00', 0x4) 23:48:23 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) ioctl$WSDISPLAYIO_GMODE(r0, 0x4004574b, &(0x7f0000000040)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8088, 0x0) r2 = dup(r1) r3 = dup(r2) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0xc) r6 = getuid() r7 = getegid() sendmsg$unix(r2, &(0x7f0000001480)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f00000012c0)=[{&(0x7f0000000100)="6e730a1ce3867a0d74b8f6beb1031d06f634650fa22f2cba0d745e3f527a1c18b22de5f5262a0c70da70e913ec2f36ebdeac462d6a038cd2734996cb466c5bf9682224afc700eea7d4faa934e3e2604e6cfaf58718bb52c78ae4d1", 0x5b}, {&(0x7f0000000180)="1c23c2f99fc7256b24015a3b2b651f95fcd8e9de52270943ab273c940f8ff408377a9b7ee82b8a97de57cae6c8c4c712ef3ec07f0935b8ed67ccd32e580f208ee1ccb5e156d382e21b301d96716c86120b915c9e7ca44a09d6ef9111ffc6f4e71b64d1e459f0c5cb5fe25add89cde96b5c454f5a4bd8d40044b5af917a3fbd23f099cdec5cd793c70866c080eff4af6b1c98c660d8a76a934c77fefc884f8f5d11ad4c7b7f2d1e93fa17307c5ed860cd0d938796bb8d2e13629a9671ecf6e3cb1861e57f7767060bddd3eac3ec6dc73ba2e32829b01486de83226bca5e7b5a0970d6b97069f2b4afd0bebed75de91628c9c510", 0xf3}, {&(0x7f0000000280)="d8f8e23c", 0x4}, {&(0x7f00000002c0)="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", 0x1000}], 0x4, &(0x7f0000001340)=[@rights={0x30, 0xffff, 0x1, [r1, r2, r1, r1, r0, r1, r0, r3]}, @rights={0x18, 0xffff, 0x1, [r3]}, @cred={0x20, 0xffff, 0x0, r4, r6, r7}, @rights={0x28, 0xffff, 0x1, [r0, r1, r3, r0, r0, r2]}, @rights={0x28, 0xffff, 0x1, [r2, r0, r3, r2, r1]}, @rights={0x28, 0xffff, 0x1, [r1, r2, r2, r1, r0]}, @rights={0x18, 0xffff, 0x1, [r1, r1]}, @rights={0x28, 0xffff, 0x1, [r1, r1, r0, r2, r0, r2]}], 0x120, 0x409}, 0x407) ioctl$WSDISPLAYIO_USEFONT(r3, 0x80585750, &(0x7f00000014c0)={'./file0\x00', 0x10000, 0x2, 0x0, 0x1, 0x49d, 0x7, 0x3fffc000000000, 0x3, 0x3, 0x9}) connect(r0, &(0x7f0000001540)=@in6={0x18, 0x0, 0x682, 0xfffffffffffffff9}, 0xc) setsockopt(r2, 0x3ff, 0x1, &(0x7f0000001580)="531f36254aef3158fb47f515b99558f70fec01cab4411e3037e10651ce36ae0bcba6eb923e6ea41cdc96dd9a3b12a15267b6588f", 0x34) getpeername(r3, &(0x7f00000015c0)=@in, &(0x7f0000001600)=0xc) connect(r0, &(0x7f0000001640)=@un=@file={0x1, './file0\x00'}, 0xa) write(r2, &(0x7f0000001680)="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", 0x1000) ioctl$WSDISPLAYIO_SVIDEO(r0, 0x80045745, &(0x7f0000002680)) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000026c0), 0xc) ioctl$TIOCMBIC(r0, 0x8004746b, &(0x7f0000002700)=0xd73) rename(&(0x7f0000002740)='./file0\x00', &(0x7f0000002780)='./file0\x00') fchmodat(r2, &(0x7f00000027c0)='./file0\x00', 0x102, 0x2) ioctl$WSMUXIO_LIST_DEVICES(r0, 0xc1045763, &(0x7f0000002800)={0x7f, [{0x3, 0x20}, {0x3, 0xfffffffffffffeff}, {0x3, 0x1}, {0x2, 0x100000001}, {0x3, 0xffffffff}, {0x3, 0x100000000}, {0x3, 0x6}, {0x2, 0x8}, {0x3, 0x10000}, {0x3, 0x5}, {0x3, 0x40}, {0x3, 0x2}, {0x3, 0x4}, {0x1, 0xd42d}, {0x1, 0x9}, {0x1, 0x3}, {0x2, 0x7fff}, {0x0, 0x7}, {0x1, 0xcfec}, {0x3, 0x20}, {0x1, 0xb442}, {0x1, 0x1}, {0x3, 0x8}, {0x3, 0x20}, {0x3, 0x1}, {0x3, 0x100000001}, {0x3, 0x48e3}, {0x3, 0x1}, {0x3, 0x7}, {0x1}, {0x3, 0x9}, {0x1, 0x8}]}) fcntl$setown(r2, 0x6, r4) preadv(r1, &(0x7f0000002cc0)=[{&(0x7f0000002940)=""/4, 0x4}, {&(0x7f0000002980)=""/61, 0x3d}, {&(0x7f00000029c0)=""/179, 0xb3}, {&(0x7f0000002a80)=""/1, 0x1}, {&(0x7f0000002ac0)=""/34, 0x22}, {&(0x7f0000002b00)=""/41, 0x29}, {&(0x7f0000002b40)=""/65, 0x41}, {&(0x7f0000002bc0)=""/221, 0xdd}], 0x8, 0x0) r8 = semget$private(0x0, 0x4, 0x1) semop(r8, &(0x7f0000002d40)=[{0x6, 0x4, 0x1800}, {0x2, 0x10001, 0x800}, {0x6, 0x7, 0x1800}, {0x4, 0x4, 0x1800}], 0x4) setregid(r7, r5) unveil(&(0x7f0000002d80)='./file0\x00', &(0x7f0000002dc0)='r\x00') pipe(&(0x7f0000002e00)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r9, &(0x7f0000002ec0)=[{&(0x7f0000002e40)="7b9277cd9507cbfd331d51b731b7319111c7741f20d506c8e932dedc29a4106c3c9cff991f44bc2f6a298beab6a8bcba02d3ba56788ee6af86a30b7b552aa3add30e72b41e92800f602c775eeb4719", 0x4f}], 0x1) ioctl$TIOCCONS(r3, 0x80047462, &(0x7f0000002f00)=0x1f) 23:48:23 executing program 1: mknod(&(0x7f0000000080)='./bus\x00', 0x2004, 0x4516) r0 = open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000002c0)=[{{r0}, 0xffffffffffffffff, 0x1d}], 0x8, 0x0, 0x9, 0x0) close(r0) rmdir(&(0x7f0000000040)='./bus/../file0\x00') 23:48:23 executing program 0: r0 = kqueue() r1 = syz_open_pts() kevent(r0, &(0x7f0000000040)=[{{r1}, 0xffffffffffffffff, 0x1}], 0x8001, 0x0, 0x0, 0x0) syz_open_pts() syz_open_pts() syz_open_pts() r2 = syz_open_pts() ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000080)={0x0, 0x0, 0x90d2, 0x0, "d730c1e7bb6fc6e23c5b00000000000000e74de4"}) write(r2, &(0x7f0000000180)="582720efabd16ebae63225259560f8e5815f73f2a044fd33055552fbd5e41789632dfc94ff334a5619515a4c8ab06198824b3da025bbd47b3bf579456fc7d4096e8c8b6b87cb2d72b8bcdb9ad8a4f5f728193ef16ab93f12fc4d5f16b136a5d00d1628b53a", 0x65) write(r2, &(0x7f0000000100)="bd6d483c9773", 0x6) r3 = syz_open_pts() close(r2) r4 = dup(r3) r5 = syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "85495500020000000000001167f5bfa60200"}) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffffc, "b08d1dbd961018d3a50a2c21d8e500"}) setitimer(0x0, &(0x7f0000000200)={{0x3, 0x3d4a}, {0x6, 0x100000000}}, &(0x7f0000000240)) accept$inet6(r4, &(0x7f00000000c0), &(0x7f0000000140)=0xc) 23:48:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x10000000002, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0x4c) renameat(r1, &(0x7f0000000040)='\x00', r2, &(0x7f00000000c0)='./file0\x00') getsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000180)=""/47, &(0x7f00000001c0)=0x2f) 23:48:23 executing program 1: mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x4501) r0 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) r1 = dup(r0) pipe2(&(0x7f0000000000), 0x10000) ioctl$WSKBDIO_SETMODE(r1, 0xc0105715, &(0x7f0000000040)=0x500) 23:48:24 executing program 0: r0 = kqueue() r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x2012, r1, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/212, 0xd4}, {&(0x7f0000000100)=""/135, 0x87}, {&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/69, 0x45}, {&(0x7f0000000300)=""/145, 0x91}, {&(0x7f00000003c0)=""/176, 0xb0}, {&(0x7f0000000480)=""/205, 0xcd}, {&(0x7f0000000580)=""/191, 0x24}], 0x8, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) preadv(r1, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0) 23:48:24 executing program 1: mknod(&(0x7f0000000140)='./file0/file0\x00', 0x2000, 0x8) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400000002c5, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000000)=[{{r0}, 0xfffffffffffffffe, 0x3}], 0x7, 0x0, 0x0, 0x0) kevent(r2, &(0x7f00000001c0)=[{{r1}, 0xfffffffffffffffe, 0xf}], 0x4, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x42) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) dup2(r1, r2) 23:48:24 executing program 1: r0 = socket(0x2, 0x2, 0x0) pwritev(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)="75185c28fa1ec47f0501b221", 0xc}, {&(0x7f00000000c0)="651211a5c6496f496b2960f062515155f785d888ace5c13490084f9181dcca60a8c46859e551dc273a46b509ce2993e261e5ee19f05b48eb52a7e7adb27e011822bd796bc81e029909b5ec69daf4704b1978a6a4f03438ffeddfc65bb4a8f8303c997ac5c9926ce6a603318bdaa163e23ca8f257e3ec22fdac8ec400c6c6b967cd9c98dd58abc81b414d6d010808022f87a93e0b06c6283409146b4950143aaa92f151202d31045cb10a9d2148aed1532b502a715d25713b31f21a7190bdcd083d9ef15298bad167677f3dd60d7e4329c71abbd048a231e7bcabe13d32d7bfd055caa4d8c59c98709de79f", 0xeb}, {&(0x7f00000001c0)="4c1c6fbbac4589011bb13f79431631632e088228856acd5d3eed7fa62816e0ecdfa36125e5351d5c6405e1db1a94a7b0aa3571dbbb4ef138460824cf2ac4d390065315f740fad1b3e7e4f23779d3", 0x4e}, {&(0x7f0000000240)="4b14f2f6b58d0f7b1df11a901a8b8ea7a5298ef9156a623e4656381f15f4c5ab1807d37b795f47acc6e59d66696630fd23d3e96d88387eb0fe66b5645d02398dabfb8f35c7c8b2d0ae8d76ddbe46c2eac0414a268403d550327b", 0x5a}, {&(0x7f00000002c0)="0424dc822c8d41ae4de0d0b5640eae4a1390f127476ccd802a0315731698cac5f1e565e3aca19155bd0816ba01f872263458592e983da45922893ec4db946c552f9f17fb571b27693018587d73bbe628ed7c11ac75a8ba2cd06eb45f0cf9412ab62c5016439f3b13d90d17249ac0841b719aed66c994aa2d043ffd17f1a8206df06ed5b98fbb74392672f6d0a01b1fc96f8a29a79043ee7efd35067543ec54c5935a82d20b28c300ef50d9f0ba9a404d33930366c02c4f1eafabd4fb22f3cdb180f47a0db83a33c05edaacaa70b6288266461ba29ee05c285e207c3ccf352fe7463190a5e73b4353", 0xe8}, {&(0x7f00000003c0)="ea441cbe3287961cee90eaa82522109d23557424903c48db0c7ebab5efa2066f59e768a77cdc7570f5fbd23132e286e0be952a6a62f20cc02dc0c132961296eabb764823a56755c8a18b9ff87541e005c348c5f838edeebf27cb311bfd04eba57f124895745e32cf9fa496272e30584c6192de05363c2727a39dc6c9e85dd5cb666aa91a8ad987807c666d1199394a484917b43115d83fa22b05bae742e7d5a665962e7f2e", 0xa5}, {&(0x7f0000000480)="9cd34b8cbddc5859b27b815851a12e5b7f71351bb31a96a6a35de201da13e077f18db86d4c020a011969feb072b0619b868f46971d7ced9853a24a09ae9d5f97db329d70511cc3df8d858b4bd033117b8c7e5a2f4e60a429a10bfaf903774c84a59d28361407c1f89722beef19b9e2e130e1869f36359e2d8f3de68fb01ee3ed049a77d02052e14dc591077d9c41878e78c9774c907a8e", 0x97}, {&(0x7f0000000540)="fb94d092f02f94162e4a6a14c3945071daa626def400c331c066c027128e923a26833ffbd7ae0072f2b51fd2551d21bdb3309a993bb5fc2ce644750e000eb070402919c72d4e6e106a47f3eb7348e2fe346f0c6f3e6b2c1df8c3cea1", 0x5c}], 0x8, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0x10) getpeername$inet6(r0, 0xfffffffffffffffe, &(0x7f0000000040)) 23:48:24 executing program 0: r0 = semget(0x1, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000100)=""/100) r1 = socket$inet6(0x18, 0x2, 0x0) lseek(r1, 0x0, 0x0) getsockopt(r1, 0x200000025, 0x4, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x2, 0x1, 0x7}, {0x18, 0x2, 0x80000001, 0x9}, 0x80000000, [0xe71, 0x8, 0x800000000000007, 0x1, 0x9, 0x3470d135, 0x0, 0x4]}, 0xffffffffffffffed) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f00000001c0)={{0x18, 0x1, 0xffffffff, 0x7}, {0x18, 0x3, 0x9, 0x6}, 0x20, [0x656, 0x5, 0x100000000, 0x5, 0x80, 0x9, 0x8, 0x7]}, 0x3c) r2 = getpgid(0x0) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000180)={0x0}, 0xc) setpgid(r2, r3) semget$private(0x0, 0x3, 0x100) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/88, 0x58) shmget$private(0x0, 0x1000, 0x15a, &(0x7f0000ff9000/0x1000)=nil) 23:48:24 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$WSKBDIO_SETMODE(r0, 0x80045713, &(0x7f00000000c0)=0x1) mknod(&(0x7f0000000040)='./bus\x00', 0x80002003, 0x4300) r1 = open$dir(&(0x7f0000000280)='./bus\x00', 0x381, 0x0) r2 = dup(r1) ioctl$WSKBDIO_SETMODE(r2, 0x80105702, &(0x7f00000002c0)=0xc6) 23:48:24 executing program 1: r0 = syz_open_pts() r1 = socket(0x20, 0x3, 0x636e0834) getpeername(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="c1ffe5ffffff0000000000000000000000000000"], 0x0) r2 = syz_open_pts() msgget$private(0x0, 0x101) r3 = msgget(0xffffffffffffffff, 0x0) write(r1, &(0x7f00000000c0)="cc878b20fb5e15f3edae5041e43572be26750737ab81fe21e7fec4b49f7ba5f608dc43e180473cd35bf824fee82e6a45d753183e83766fda85be4f3d499bc840685a529ebd504e5e25da13860ed68b4b1a3b7e88c7715410da13e5a6d8ebc18625471e175064155d11637d464c3693a9c329faec0b42f0788b3a94763817d409bd5ba2178439ffde273ecd", 0x8b) msgrcv(r3, 0x0, 0x0, 0x400002, 0x2) open(&(0x7f0000000580)='\x00', 0x8, 0x68) setreuid(0x0, 0xee01) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) fchmod(r2, 0x3c) setsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f0000000040)={0x8, 0x62ac}, 0x8) setreuid(r5, r5) getgroups(0x7, &(0x7f0000000000)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0]) ioctl$TIOCCLRVERAUTH(r0, 0x2000741d) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$WSDISPLAYIO_GETSCREEN(r10, 0xc0245755, &(0x7f0000000540)={0x6f, './file0\x00', './file0\x00'}) setregid(r6, r8) fcntl$getflags(r1, 0x3) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400000002c2, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000200)={{0x0, r5, r9, r5, r7, 0x0, 0xe8c}, 0x6, 0x6, r4, r4, 0x2, 0x5, 0x100000000, 0x7f}) geteuid() msgget$private(0x0, 0x8) 23:48:24 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000000), 0x4) r1 = fcntl$dupfd(r0, 0xa, r0) readlinkat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/204, 0xcc) r2 = socket$unix(0x1, 0x7, 0x0) r3 = getpid() fcntl$lock(r2, 0x9, &(0x7f0000000040)={0x2, 0x2, 0xfffffffffffff36d, 0x1000, r3}) 23:48:24 executing program 0: r0 = open(&(0x7f0000000100)='./file0/file0\x00', 0x8, 0x40000004) r1 = semget$private(0x0, 0x0, 0x40000006) semop(r1, &(0x7f0000000440)=[{0x4, 0x400, 0x800}], 0x1) ioctl$TIOCSCTTY(r0, 0x20007461) r2 = semget$private(0x0, 0x8, 0x0) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f00000002c0)=0xfffffffffffffffe) semget(0x2, 0x0, 0x204) mknodat(r0, &(0x7f0000000380)='./file0/file0\x00', 0xed754effb7ef2411, 0x1) r3 = geteuid() getgroups(0x1, &(0x7f0000000540)=[0xffffffffffffffff]) fchownat(r0, &(0x7f0000000500)='./file0/file0\x00', r3, r4, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0xf7, 0x1, 0x41, 0x3, 0x6a7}, 0xfffffffffffffd38) semctl$SETALL(r2, 0x0, 0x9, &(0x7f0000000040)=[0x1, 0x0, 0x14, 0x1, 0x70bd, 0x1ff]) semop(r2, &(0x7f0000000280)=[{0x4, 0x74, 0x1003}, {0x2, 0x1099, 0x1802}, {0xfffffffffffffffd, 0x100, 0x800}, {0x3, 0x7f, 0x1000}, {0x3, 0xfffffffffffffffe, 0x1000}, {0x2, 0xffffffff80000001, 0x800}, {0x1, 0xe77b, 0x800}], 0x2aaaaaaaaaaaaae9) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000a40)=""/122) semop(r2, &(0x7f00000005c0)=[{0x3, 0x1}, {0x0, 0x9, 0x1800}, {0x7, 0x3e664106, 0x1000}, {0x3}], 0x4) r5 = shmget(0x0, 0x1000, 0x21, &(0x7f0000ffc000/0x1000)=nil) sendto$inet6(r0, &(0x7f0000000640)="7b36cdf1e04afd779998cb5b2b65c747acf3e0d037fd2f3e92cfe72664a9d09784fbe78caa3cbd3c8dd79537a8d6fa43b8d67de33f21a6794260ed6f97c9ce406d93c2e5f5c7490bf126fecb0ff9415fff022357eba05ec9bddcbf38f8bee7dc7d01c2872c44c4ddc0b0ee94d6bad99f4d20c20a36fa7a", 0x77, 0x5, 0x0, 0x0) ioctl$TIOCSFLAGS(r0, 0x8004745c, &(0x7f00000000c0)=0x1) mknod(&(0x7f0000000580)='./file0\x00', 0x55875684757fc82f, 0x40000000000) clock_settime(0x0, &(0x7f0000000400)={0x2, 0x580f}) shmctl$SHM_UNLOCK(r5, 0x4) nanosleep(&(0x7f0000000000)={0xffffffffffff462d}, 0x0) clock_gettime(0x3, &(0x7f0000000180)) clock_settime(0x6, &(0x7f0000000240)={0x3, 0x5}) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000200)=0x10000) rmdir(&(0x7f00000004c0)='./file0/file0\x00') ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x100000000) semop(r2, &(0x7f0000000140)=[{0x3, 0x4, 0x1000}, {0x3, 0x8000}, {0x1, 0x7, 0x1000}, {0x0, 0x2, 0x1000}, {0x0, 0x3, 0x1800}], 0x5) semop(r2, &(0x7f0000000000)=[{0x1, 0x0, 0x1000}, {0x3, 0x1ff, 0x1000}, {0x6, 0x8}, {0x3, 0x28, 0x1000}, {0x4, 0x7fffffff00000, 0x1800}, {0x0, 0x438e, 0x1000}, {0x4, 0x8, 0x1000}, {0x1, 0x9, 0x1000}, {0x3, 0x3, 0x800}], 0x9) 16:00:02 executing program 1: mknod(&(0x7f0000000000)='./bus\x00', 0x10000000002000, 0x4503) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x200004100e, 0x0) r1 = semget(0x3, 0x1, 0x57) mknod(&(0x7f0000000080)='./bus\x00', 0x6000, 0xe53d) semop(r1, &(0x7f0000000100)=[{0x2, 0x100, 0x800}, {0x4, 0x86, 0x800}, {0x4, 0x8, 0x1000}, {0x4, 0xfff, 0x800}, {0x7, 0x81}, {0x0, 0x0, 0x1000}, {0x7, 0x8001, 0x1000}, {0x7, 0x10001, 0x1000}, {0x3, 0x3, 0x1800}], 0x9) semctl$SETVAL(r1, 0x3, 0x8, &(0x7f0000000180)=0x2) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f00000001c0)={0x3, 0x3}) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000000140)={0x3, 0x8}) login: witness: acquiring duplicate lock of same type: "&sc->sc_lock" 1st wsmuxlk @ /syzkaller/managers/multicore/kernel/sys/dev/wscons/wsmux.c:629 2nd wsmuxlk @ /syzkaller/managers/multicore/kernel/sys/dev/wscons/wsmux.c:245 Starting stack trace... witness_checkorder(ffff8000019734d0,1,ffffffff81f36129,f5,0) at witness_checkorder+0xe14 _rw_enter_read(ffff8000019734c0,ffffffff81f36129,f5) at _rw_enter_read+0x80 wsmux_mux_open(ffff800001973400,ffff800001973350) at wsmux_mux_open+0x82 wsmux_attach_sc(ffff800001973300,ffff800001973400) at wsmux_attach_sc+0x180 VOP_IOCTL(fffffd8074dfd8d0,80085761,ffff800020c3b7f0,f,fffffd807f7c7a20,ffff800020b42bd0) at VOP_IOCTL+0x9a vn_ioctl(fffffd8069198868,80085761,ffff800020c3b7f0,ffff800020b42bd0) at vn_ioctl+0xc9 sys_ioctl(ffff800020b42bd0,ffff800020c3b938,ffff800020c3b920) at sys_ioctl+0x646 syscall(ffff800020c3b9d0) at syscall+0x5ac Xsyscall(6,0,ffffffffffffff86,0,3,fdc8772f010) at Xsyscall+0x128 end of kernel end trace frame: 0xfdec105d5c0, count: 248 End of stack trace. Stopped at db_enter+0x18: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x18 witness_checkorder(ffff8000019734d0,1,ffffffff81f36129,f5,0) at witness_checkorder+0xe19 _rw_enter_read(ffff8000019734c0,ffffffff81f36129,f5) at _rw_enter_read+0x80 wsmux_mux_open(ffff800001973400,ffff800001973350) at wsmux_mux_open+0x82 wsmux_attach_sc(ffff800001973300,ffff800001973400) at wsmux_attach_sc+0x180 VOP_IOCTL(fffffd8074dfd8d0,80085761,ffff800020c3b7f0,f,fffffd807f7c7a20,ffff800020b42bd0) at VOP_IOCTL+0x9a vn_ioctl(fffffd8069198868,80085761,ffff800020c3b7f0,ffff800020b42bd0) at vn_ioctl+0xc9 sys_ioctl(ffff800020b42bd0,ffff800020c3b938,ffff800020c3b920) at sys_ioctl+0x646 syscall(ffff800020c3b9d0) at syscall+0x5ac Xsyscall(6,0,ffffffffffffff86,0,3,fdc8772f010) at Xsyscall+0x128 end of kernel end trace frame: 0xfdec105d5c0, count: -10 ddb{1}> show registers rdi 0 rsi 0x3ffff acpi_pdirpa+0x2be67 rbp 0xffff800020c3b420 rbx 0x3 rdx 0x40000 acpi_pdirpa+0x2be68 rcx 0xffff800002b49000 rax 0xffff800001947a00 r8 0xffffffff8155ffb3 kprintf+0x183 r9 0x1 r10 0x25 r11 0x4f02f99de60b4f3e r12 0xffffffff81f36129 substchar+0xb4b1 r13 0xf5 r14 0xffffffff81f25d3f apollo_udma33_tim+0x233d r15 0xffffffff81f36129 substchar+0xb4b1 rip 0xffffffff812c7448 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800020c3b410 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor.1) pid=459705 stat=onproc flags process=0 proc=4000000 pri=59, usrpri=59, nice=20 forw=0xffffffffffffffff, list=0xffff800020b42978,0xffffffff8233fe30 process=0xffff800020b44d30 user=0xffff800020c36000, vmspace=0xfffffd807efff708 estcpu=36, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 45314 59745 27338 0 7 0 syz-executor.1 *45314 459705 27338 0 7 0x4000000 syz-executor.1 53234 264205 88560 0 3 0x80 nanosleep syz-executor.0 53234 159188 88560 0 3 0x4000080 semwait syz-executor.0 53234 343526 88560 0 3 0x4000080 semwait syz-executor.0 53234 129077 88560 0 3 0x4000080 fsleep syz-executor.0 27338 315024 18277 0 3 0x82 nanosleep syz-executor.1 88560 463198 18277 0 3 0x82 nanosleep syz-executor.0 18277 485996 81460 0 3 0x82 thrsleep syz-fuzzer 18277 7436 81460 0 3 0x4000082 nanosleep syz-fuzzer 18277 301997 81460 0 3 0x4000082 thrsleep syz-fuzzer 18277 203552 81460 0 3 0x4000082 thrsleep syz-fuzzer 18277 101781 81460 0 3 0x4000082 thrsleep syz-fuzzer 18277 313468 81460 0 3 0x4000082 thrsleep syz-fuzzer 18277 496015 81460 0 3 0x4000082 thrsleep syz-fuzzer 18277 89336 81460 0 3 0x4000082 kqread syz-fuzzer 18277 100141 81460 0 3 0x4000082 thrsleep syz-fuzzer 18277 351765 81460 0 3 0x4000082 thrsleep syz-fuzzer 81460 163911 3492 0 3 0x10008a pause ksh 3492 163843 13231 0 3 0x92 select sshd 28594 18292 1 0 3 0x100083 ttyin getty 13231 185527 1 0 3 0x80 select sshd 71885 264077 56916 73 2 0x100090 syslogd 56916 469940 1 0 3 0x100082 netio syslogd 67620 309881 1 77 3 0x100090 poll dhclient 64387 68071 1 0 3 0x80 poll dhclient 48851 202748 0 0 3 0x14200 pgzero zerothread 28389 187896 0 0 3 0x14200 aiodoned aiodoned 58119 294006 0 0 3 0x14200 syncer update 93263 161281 0 0 3 0x14200 cleaner cleaner 21108 246685 0 0 3 0x14200 reaper reaper 83417 307211 0 0 3 0x14200 pgdaemon pagedaemon 10715 232246 0 0 3 0x14200 bored crynlk 1862 221260 0 0 3 0x14200 bored crypto 97363 349317 0 0 3 0x40014200 acpi0 acpi0 17119 191321 0 0 3 0x40014200 idle1 4317 184826 0 0 3 0x14200 bored softnet 42629 383014 0 0 3 0x14200 bored systqmp 43942 483418 0 0 3 0x14200 bored systq 80683 91205 0 0 3 0x40014200 bored softclock 90447 199797 0 0 3 0x40014200 idle0 1 251254 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 45314 (syz-executor.1) thread 0xffff800020b42bd0 (459705) exclusive rwlock wsmuxlk r = 0 (0xffff8000019733d0) locked @ /syzkaller/managers/multicore/kernel/sys/dev/wscons/wsmux.c:629 #0 witness_lock+0x58a #1 wsmux_attach_sc+0x48 #2 VOP_IOCTL+0x9a #3 vn_ioctl+0xc9 #4 sys_ioctl+0x646 #5 syscall+0x5ac #6 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8230eba0) locked @ /syzkaller/managers/multicore/kernel/sys/sys/syscall_mi.h:90 #0 witness_lock+0x58a #1 syscall+0x47f #2 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9461 6329K 6329K 78643K 10552 0 0 pcb 23 9K 9K 78643K 57 0 0 rtable 97 3K 3K 78643K 167 0 0 ifaddr 34 9K 9K 78643K 34 0 0 counters 39 33K 33K 78643K 39 0 0 ioctlops 0 0K 2K 78643K 17 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1198 75K 75K 78643K 1220 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 1K 78643K 2 0 0 VM map 2 1K 1K 78643K 2 0 0 sem 7 0K 0K 78643K 8 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1792 194K 288K 78643K 12592 0 0 file desc 6 17K 25K 78643K 33 0 0 proc 40 38K 70K 78643K 252 0 0 subproc 64 65538K 67586K 78643K 68 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 in_multi 33 2K 2K 78643K 33 0 0 ether_multi 1 0K 0K 78643K 1 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 48 212K 212K 78643K 48 0 0 exec 0 0K 1K 78643K 163 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 80 20K 20K 78643K 825 0 0 UVM aobj 5 2K 2K 78643K 5 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 NDP 5 0K 0K 78643K 9 0 0 temp 87 2354K 2418K 78643K 2816 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 4 0 0 1 0 1 1 0 8 0 inpcbpl 280 34 0 27 1 0 1 1 0 8 0 plimitpl 152 14 0 7 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtentry 112 41 0 1 2 0 2 2 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpqe 32 12 0 12 1 0 1 1 0 8 1 tcpcb 544 10 0 6 1 0 1 1 0 8 0 nd6 48 4 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 186 0 0 12 0 12 12 0 8 0 art_table 32 187 0 0 2 0 2 2 0 8 0 art_node 16 40 0 6 1 0 1 1 0 8 0 semupl 112 1 0 0 1 0 1 1 0 8 0 semapl 112 5 0 0 1 0 1 1 0 8 0 shmpl 112 3 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1463 0 56 46 0 46 46 0 8 0 ffsino 272 1463 0 56 95 0 95 95 0 8 0 nchpl 144 1713 0 89 61 0 61 61 0 8 0 uvmvnodes 72 1506 0 0 28 0 28 28 0 8 0 vnodes 200 1506 0 0 80 0 80 80 0 8 0 namei 1024 4089 0 4089 2 1 1 1 0 8 1 percpumem 16 30 0 0 1 0 1 1 0 8 0 scxspl 192 4006 0 4006 8 6 2 7 0 8 2 sigapl 432 201 0 187 2 0 2 2 0 8 0 futexpl 56 269 0 268 1 0 1 1 0 8 0 knotepl 112 68 0 41 2 0 2 2 0 8 1 kqueuepl 104 10 0 8 1 0 1 1 0 8 0 pipepl 112 142 0 123 2 1 1 1 0 8 0 fdescpl 488 202 0 187 3 0 3 3 0 8 1 filepl 152 1061 0 966 6 1 5 5 0 8 1 lockfpl 104 9 0 9 2 1 1 1 0 8 1 lockfspl 32 4 0 4 2 1 1 1 0 8 1 sessionpl 112 17 0 7 1 0 1 1 0 8 0 pgrppl 48 19 0 9 1 0 1 1 0 8 0 ucredpl 96 112 0 105 1 0 1 1 0 8 0 zombiepl 144 187 0 187 2 1 1 1 0 8 1 processpl 840 216 0 187 4 0 4 4 0 8 0 procpl 600 260 0 218 4 0 4 4 0 8 0 sockpl 384 78 0 61 3 0 3 3 0 8 1 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 112 0 0 13 0 13 13 0 8 0 mtagpl 80 1 0 0 1 0 1 1 0 8 0 mbufpl 256 129 0 0 8 0 8 8 0 8 0 bufpl 256 5219 0 1013 263 0 263 263 0 8 0 anonpl 16 26842 0 19446 31 1 30 30 0 125 0 amapchunkpl 152 809 0 707 5 0 5 5 0 158 0 amappl16 192 520 0 147 19 0 19 19 0 8 0 amappl15 184 1 0 0 1 0 1 1 0 8 0 amappl14 176 15 0 11 2 1 1 1 0 8 0 amappl13 168 26 0 22 1 0 1 1 0 8 0 amappl12 160 12 0 11 2 1 1 1 0 8 0 amappl11 152 183 0 174 1 0 1 1 0 8 0 amappl10 144 64 0 61 2 1 1 1 0 8 0 amappl9 136 357 0 353 1 0 1 1 0 8 0 amappl8 128 133 0 115 1 0 1 1 0 8 0 amappl7 120 38 0 33 1 0 1 1 0 8 0 amappl6 112 61 0 52 1 0 1 1 0 8 0 amappl5 104 118 0 107 1 0 1 1 0 8 0 amappl4 96 265 0 241 2 1 1 2 0 8 0 amappl3 88 130 0 122 1 0 1 1 0 8 0 amappl2 80 765 0 704 2 0 2 2 0 8 0 amappl1 72 12661 0 12226 24 9 15 19 0 8 6 amappl 72 468 0 429 1 0 1 1 0 75 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma64 64 259 0 259 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 4 0 0 1 0 1 1 0 8 0 uaddrrnd 24 202 0 187 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 202 0 187 1 0 1 1 0 8 0 vmmpekpl 168 5445 0 5424 2 0 2 2 0 8 0 vmmpepl 168 28214 0 26809 81 11 70 70 0 357 8 vmsppl 360 201 0 187 2 0 2 2 0 8 0 pdppl 4096 412 0 374 6 0 6 6 0 8 1 pvpl 32 105057 0 94644 101 7 94 96 0 265 9 pmappl 224 201 0 187 1 0 1 1 0 8 0 extentpl 40 39 0 25 1 0 1 1 0 8 0 phpool 112 408 0 3 12 0 12 12 0 8 0