last executing test programs: 1m16.655774373s ago: executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="231acb", 0x3}], 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) compat_43_osendmsg(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mknod(0x0, 0xf0, 0x1733) compat_50_clock_getres(0x0, 0x0) open(0x0, 0x0, 0x0) swapctl$SWAP_ON(0x1, 0x0, 0x9) compat_40_mount(0x0, 0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x8) symlink(0x0, 0x0) __getvfsstat90(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) unmount(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) mknod(0x0, 0x0, 0x2e00) open$dir(0x0, 0x0, 0x0) setuid(0xee01) pwrite(0xffffffffffffffff, 0x0, 0x0, 0x200000000000) __mount50(0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x0, 0x0) open(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) mmap(&(0x7f0000436000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0) 1m1.316063263s ago: executing program 3: compat_40_mount(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='.\x00', 0x0, &(0x7f00000002c0)="01") unlink(0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) __posix_chown(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x0, 0x0) r0 = socket$inet(0x2, 0x40000000, 0x1f) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0}, 0xc) 59.39068633s ago: executing program 1: syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000100), 0x8, 0x1) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) syz_extract_tcp_res(0x0, 0x7, 0x1) syz_extract_tcp_res(&(0x7f0000000200), 0xfffff600, 0x1) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000280), 0x7fffffff, 0x8) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x1000000) r1 = fcntl$getown(r0, 0x5) read(r0, &(0x7f00000002c0)=""/76, 0x4c) recvfrom$inet(r0, &(0x7f0000000340)=""/193, 0xc1, 0x840, &(0x7f0000000440)={0x2, 0x2}, 0xc) r2 = fork() posix_spawn(r2, &(0x7f0000000480)='-*-\\)*@.}\x00', &(0x7f0000000500)={0x3, 0x0, &(0x7f00000004c0)=@close={0x2, r0}}, &(0x7f0000000540)={0x4, r1, {0x3991}, 0x1, {[0x1, 0x1, 0x4, 0x6]}, {[0x80000000, 0x1, 0x1, 0x13f1]}}, &(0x7f0000000580)=['\x00'], &(0x7f00000005c0)=['\x00', ')),\x00']) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000680), 0x1, 0x0) syz_extract_tcp_res(0x0, 0x2, 0x0) _lwp_create(&(0x7f0000000800)={0x1, &(0x7f0000000780)={0x400f0025, 0x0, {[0xdb, 0x1ff, 0xe40, 0xfff]}, {0x3, 0x7fffffff}, {0xfffffffffffffff9, 0x902e, '&+*^&{+\x00'}}, {[0x0, 0x80000000, 0x0, 0x4]}, {0x800, 0x1, 0x5}, {0x5, 0x0, '\x00'}}, 0x40, &(0x7f0000000880)=0x0) _lwp_suspend(r3) syz_extract_tcp_res$synack(&(0x7f0000000940), 0x1, 0x0) fsync(r0) fstatat(r0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x500) syz_extract_tcp_res$synack(&(0x7f0000000a80), 0x1, 0x0) getppid() 47.835715648s ago: executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) compat_40_mount(&(0x7f0000000180)='ptyfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000500)) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000000)='null\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r0, 0x40043105, 0x0) socketpair(0x2, 0x2, 0x0, 0x0) 47.438261469s ago: executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="231acb", 0x3}], 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) compat_43_osendmsg(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mknod(0x0, 0xf0, 0x1733) compat_50_clock_getres(0x0, 0x0) open(0x0, 0x0, 0x0) swapctl$SWAP_ON(0x1, 0x0, 0x9) compat_40_mount(0x0, 0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x8) symlink(0x0, 0x0) __getvfsstat90(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) unmount(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) mknod(0x0, 0x0, 0x2e00) open$dir(0x0, 0x0, 0x0) setuid(0xee01) pwrite(0xffffffffffffffff, 0x0, 0x0, 0x200000000000) __mount50(0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x0, 0x0) open(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) mmap(&(0x7f0000436000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0) 46.682212796s ago: executing program 2: socketpair(0x17, 0x0, 0x0, &(0x7f0000000140)) 46.606065608s ago: executing program 5: socket(0x0, 0x0, 0x0) compat_30_socket(0x23, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4100) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) compat_50_select(0x40, &(0x7f0000000340)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0}, 0x10) sendto$inet(r0, &(0x7f0000000080)="0c0100000010005d41a915cc545747116bd4d8e60c1f877d030140d82e0a7414bc4cb184d63a1135817b0d47e3813c6e2ffec6984bc59868c783b2acf0d0672eaa2f290dbfa845abbdda4d7baf85146e70850833fb771d960aa19603000e5da70a13b6d0552dc96f", 0xfe86, 0xe, 0x0, 0x800000000000000) 43.691919646s ago: executing program 0: mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x4301) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x4) ioctl$FIONREAD(r0, 0x20007703, 0x0) 42.738670383s ago: executing program 0: mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) compat_50___stat30(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)) r0 = socket(0x12, 0x2, 0x0) ioctl$OFIOGETBMAP(r0, 0xc004667a, &(0x7f0000000000)) symlink(&(0x7f0000000080)='.\x00', 0x0) __mount50(&(0x7f00000000c0)='kernfs\x00', &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) __mount50(&(0x7f0000000000)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) poll(0x0, 0xfffffffffffffff1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) __mount50(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) minherit(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd49f275d97cc01bb, 0x1810, 0xffffffffffffffff, 0x0, 0x0) mknod(0x0, 0x0, 0x1803) fork() mknod(&(0x7f0000000240)='./file0\x00', 0x8000, 0x0) open(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) compat_50_select(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, 0x0) lchown(0x0, 0x0, 0xffffffffffffffff) fchdir(r2) compat_40_mount(&(0x7f0000000140)='union\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000540)) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x1c0) link(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 40.81120284s ago: executing program 3: writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="c8", 0x1}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIOGETOWN(r0, 0x8004667d, &(0x7f0000000100)) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x80) 40.507177466s ago: executing program 5: compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x4, &(0x7f0000000140)="01") open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) rasctl(&(0x7f0000000100), 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r0 = socket(0x18, 0x3, 0x0) __getvfsstat90(&(0x7f0000000580), 0xfffffffffffffdf4, 0x0) __getvfsstat90(0x0, 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) setsockopt(r0, 0x1000000029, 0x11, 0x0, 0x0) __lstat50(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000440)) fork() execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 38.01248417s ago: executing program 0: socket(0x0, 0x0, 0x0) compat_30_socket(0x23, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4100) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) compat_50_select(0x40, &(0x7f0000000340)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0}, 0x10) sendto$inet(r0, &(0x7f0000000080)="0c0100000010005d41a915cc545747116bd4d8e60c1f877d030140d82e0a7414bc4cb184d63a1135817b0d47e3813c6e2ffec6984bc59868c783b2acf0d0672eaa2f290dbfa845abbdda4d7baf85146e70850833fb771d960aa19603000e5da70a13b6d0552dc96f", 0xfe86, 0xe, 0x0, 0xfdffffffffffffff) 37.857961224s ago: executing program 3: r0 = socket(0x11, 0x3, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) compat_43_fstat43(r1, &(0x7f0000000180)) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r2, 0x80017472, &(0x7f0000000040)=0x4) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 29.072949056s ago: executing program 1: syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000100), 0x8, 0x1) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) syz_extract_tcp_res(0x0, 0x7, 0x1) syz_extract_tcp_res(&(0x7f0000000200), 0xfffff600, 0x1) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000280), 0x7fffffff, 0x8) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x1000000) r1 = fcntl$getown(r0, 0x5) read(r0, &(0x7f00000002c0)=""/76, 0x4c) recvfrom$inet(r0, &(0x7f0000000340)=""/193, 0xc1, 0x840, &(0x7f0000000440)={0x2, 0x2}, 0xc) r2 = fork() posix_spawn(r2, &(0x7f0000000480)='-*-\\)*@.}\x00', &(0x7f0000000500)={0x3, 0x0, &(0x7f00000004c0)=@close={0x2, r0}}, &(0x7f0000000540)={0x4, r1, {0x3991}, 0x1, {[0x1, 0x1, 0x4, 0x6]}, {[0x80000000, 0x1, 0x1, 0x13f1]}}, &(0x7f0000000580)=['\x00'], &(0x7f00000005c0)=['\x00', ')),\x00']) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000680), 0x1, 0x0) syz_extract_tcp_res(0x0, 0x2, 0x0) _lwp_create(&(0x7f0000000800)={0x1, &(0x7f0000000780)={0x400f0025, 0x0, {[0xdb, 0x1ff, 0xe40, 0xfff]}, {0x3, 0x7fffffff}, {0xfffffffffffffff9, 0x902e, '&+*^&{+\x00'}}, {[0x0, 0x80000000, 0x0, 0x4]}, {0x800, 0x1, 0x5}, {0x5, 0x0, '\x00'}}, 0x40, &(0x7f0000000880)=0x0) _lwp_suspend(r3) syz_extract_tcp_res$synack(&(0x7f0000000940), 0x1, 0x0) fsync(r0) fstatat(r0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x500) syz_extract_tcp_res$synack(&(0x7f0000000a80), 0x1, 0x0) getppid() 28.989551319s ago: executing program 0: sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/220, 0xfffffdae}, 0x502) 25.896801505s ago: executing program 1: socket(0x1f, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$getown(r0, 0x5) fcntl$lock(r0, 0xe, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xffffffff7fffffff, r1}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x1f, 0x1, 0x0) socket(0x22, 0x10000003, 0x2) r4 = dup3(r2, r3, 0x0) fcntl$setstatus(r4, 0xa, 0x0) 23.441611283s ago: executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="231acb", 0x3}], 0x1) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) compat_43_osendmsg(0xffffffffffffffff, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) mknod(0x0, 0xf0, 0x1733) compat_50_clock_getres(0x0, 0x0) open(0x0, 0x0, 0x0) (async) swapctl$SWAP_ON(0x1, 0x0, 0x9) compat_40_mount(0x0, 0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x8) symlink(0x0, 0x0) (async) __getvfsstat90(0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) unmount(0x0, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) (async) mkdir(0x0, 0x0) (async) mknod(0x0, 0x0, 0x2e00) open$dir(0x0, 0x0, 0x0) setuid(0xee01) pwrite(0xffffffffffffffff, 0x0, 0x0, 0x200000000000) __mount50(0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x0, 0x0) open(0x0, 0x0, 0x0) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) open$dir(0x0, 0x0, 0x0) (async) mmap(&(0x7f0000436000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0) 22.326470424s ago: executing program 1: socket(0x0, 0x0, 0x0) compat_30_socket(0x23, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4100) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) compat_50_select(0x40, &(0x7f0000000340)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0}, 0x10) sendto$inet(r0, &(0x7f0000000080)="0c0100000010005d41a915cc545747116bd4d8e60c1f877d030140d82e0a7414bc4cb184d63a1135817b0d47e3813c6e2ffec6984bc59868c783b2acf0d0672eaa2f290dbfa845abbdda4d7baf85146e70850833fb771d960aa19603000e5da70a13b6d0552dc96f", 0xfe86, 0xe, 0x0, 0x800000000000000) 13.236958003s ago: executing program 2: socketpair(0x17, 0x0, 0x0, &(0x7f0000000140)) 12.14847665s ago: executing program 2: socket(0x0, 0x0, 0x0) compat_30_socket(0x23, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4100) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) compat_50_select(0x40, &(0x7f0000000340)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0}, 0x10) sendto$inet(r0, &(0x7f0000000080)="0c0100000010005d41a915cc545747116bd4d8e60c1f877d030140d82e0a7414bc4cb184d63a1135817b0d47e3813c6e2ffec6984bc59868c783b2acf0d0672eaa2f290dbfa845abbdda4d7baf85146e70850833fb771d960aa19603000e5da70a13b6d0552dc96f", 0xfe86, 0xe, 0x0, 0xfffffffffffffffd) 11.586874027s ago: executing program 3: r0 = socket(0x11, 0x3, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) compat_43_fstat43(r1, &(0x7f0000000180)) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r2, 0x80017472, &(0x7f0000000040)=0x4) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 10.474877068s ago: executing program 4: setuid(0xee01) (async) mknod(&(0x7f0000000200)='./file0\x00', 0xc035cd953ea0fd64, 0x1733) (async) socket$inet(0x2, 0x0, 0x0) (async) compat_50_clock_gettime(0x0, &(0x7f0000000300)) truncate(&(0x7f0000000000)='./file0\x00', 0x0, 0x36d2) (async) _lwp_kill(0x0, 0x0) (async) modctl$MODCTL_UNLOAD(0x1, 0x0) (async) socket(0x10, 0x2, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x8, 0x10) (async) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x0}, 0x8) (async) r0 = socket(0x10, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@family=0x10, 0x10) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0xa718) (async) open$dir(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fcntl$setown(r1, 0x6, 0x0) 10.424121446s ago: executing program 2: socket$inet6(0x18, 0x3, 0x9) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2801) socket$inet6(0x18, 0x2, 0x80) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0xa, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chroot(0x0) socket$inet(0x2, 0x0, 0x0) __lstat50(0x0, 0x0) chroot(&(0x7f0000000000)='.\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, 0x0) _lwp_self() open$dir(0x0, 0x0, 0x0) ktrace(0x0, 0x0, 0x0, 0x0) compat_20_getfsstat(0x0, 0x0, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) write(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) posix_spawn(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fktrace(0xffffffffffffffff, 0x0, 0x0, 0x0) _lwp_exit() unlink(0x0) mknod(0x0, 0x8000, 0x0) open$dir(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) modctl$MODCTL_UNLOAD(0x2, &(0x7f0000000140)) compat_40_mount(&(0x7f0000000180)='ptyfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000500)) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) __getdents30(r0, &(0x7f0000000080)=""/32, 0x80000000) compat_43_ommap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x0, 0xffffffffffffffff, 0x1) 9.498732158s ago: executing program 4: setreuid(0xee00, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) open(0x0, 0x0, 0x0) seteuid(0xffffffffffffffff) pipe(&(0x7f0000000a40)={0xffffffffffffffff}) r1 = getpid() fktrace(r0, 0x0, 0x2, r1) mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x1733) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0x80185728, &(0x7f0000000080)) ioctl$FIONREAD(r2, 0x80104267, &(0x7f0000000080)) compat_90_fhstatvfs1(0x0, 0x0, 0x0, 0x0) 8.51596137s ago: executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) (async) readv(0xffffffffffffff9c, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/196, 0xc4}, {&(0x7f0000000040)=""/27, 0x1b}, {&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f00000003c0)=""/164, 0xa4}, {&(0x7f0000000480)=""/246, 0xf6}, {&(0x7f0000000580)=""/121, 0x79}], 0x6) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') (async) sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) close(r1) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/227, 0xe3}, 0x502) 8.040313673s ago: executing program 3: compat_40_mount(0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r0, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1000300010008}) r1 = open(0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x12, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) 7.958540795s ago: executing program 5: compat_40_mount(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x4, &(0x7f0000000140)="01") open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) rasctl(&(0x7f0000000100), 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r0 = socket(0x18, 0x3, 0x0) __getvfsstat90(&(0x7f0000000580), 0xfffffffffffffdf4, 0x0) __getvfsstat90(0x0, 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) setsockopt(r0, 0x1000000029, 0x11, 0x0, 0x0) __lstat50(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000440)) fork() execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 7.894462535s ago: executing program 4: socket(0x1f, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$getown(r0, 0x5) fcntl$lock(r0, 0xe, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xffffffff7fffffff, r1}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x1f, 0x1, 0x0) socket(0x22, 0x10000003, 0x2) r4 = dup3(r2, r3, 0x0) fcntl$setstatus(r4, 0xa, 0x0) 7.218536509s ago: executing program 2: syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000100), 0x8, 0x1) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) syz_extract_tcp_res(0x0, 0x1, 0x1) syz_extract_tcp_res(&(0x7f0000000200), 0xfffff600, 0x1) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000280), 0x7fffffff, 0x8) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x1000000) r1 = fcntl$getown(r0, 0x5) read(r0, &(0x7f00000002c0)=""/76, 0x4c) open(&(0x7f0000000180)='./file0\x00', 0x200, 0x0) setreuid(0xee00, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) recvfrom$inet(r0, &(0x7f0000000340)=""/193, 0xc1, 0x840, &(0x7f0000000440)={0x2, 0x2}, 0xc) r2 = fork() posix_spawn(r2, &(0x7f0000000480)='-*-\\)*@.}\x00', &(0x7f0000000500)={0x3, 0x0, &(0x7f00000004c0)=@close={0x2, r0}}, &(0x7f0000000540)={0x4, r1, {0x3991}, 0x1, {[0x1, 0x1, 0x4, 0x6]}, {[0x80000000, 0x1, 0x1, 0x13f1]}}, &(0x7f0000000580)=['\x00'], &(0x7f00000005c0)=['\x00', ')),\x00']) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000680), 0x1, 0x0) syz_extract_tcp_res(0x0, 0x2, 0x0) _lwp_create(&(0x7f0000000800)={0x1, &(0x7f0000000780)={0x400f0025, 0x0, {[0xdb, 0x1ff, 0xe40, 0xfff]}, {0x3, 0x7fffffff}, {0xfffffffffffffff9, 0x902e, '&+*^&{+\x00'}}, {[0x0, 0x80000000, 0x0, 0x4]}, {0x800, 0x1, 0x5}, {0x5, 0x0, '\x00'}}, 0x40, &(0x7f0000000880)=0x0) _lwp_suspend(r3) syz_extract_tcp_res$synack(&(0x7f0000000940), 0x1, 0x0) fsync(r0) fstatat(r0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x500) r4 = open(&(0x7f0000000000)='./file0\x00', 0x1000000, 0x7) compat_90_fstatvfs1(r4, &(0x7f0000000ac0), 0x2) syz_extract_tcp_res$synack(&(0x7f0000000a80), 0x1, 0x0) getppid() 6.290686882s ago: executing program 4: mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4301) r0 = open(0x0, 0x2, 0x4) ioctl$FIONREAD(r0, 0x20007703, 0x0) 5.563900134s ago: executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000800000/0x800000)=nil) compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000280)={{0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100), 0xdffffffffffff7fc}}) r2 = getegid() lchown(&(0x7f0000000080)='./file0\x00', r1, r2) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, 0x0, 0x0, 0xffffffffffffffff}}) 5.465648799s ago: executing program 5: r0 = socket(0x1f, 0x5, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x3c0}, 0xb063db41c57f3075) (async) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x3c0}, 0xb063db41c57f3075) 494.059793ms ago: executing program 1: symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r0, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r1 = socket(0x2, 0x1, 0x0) compat_43_ocreat(&(0x7f0000000000)='./file0\x00', 0x0) compat_30___fstat13(r1, &(0x7f0000000280)) symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') r2 = socket(0x18, 0x2, 0x0) listen(r2, 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r3, 0x8004667c, &(0x7f0000000040)) unlinkat(r3, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0xa718) unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000004d831, 0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x8b, &(0x7f0000000000)=ANY=[], 0x0) r4 = socket$inet(0x2, 0x2, 0x0) fcntl$lock(r4, 0xa, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0xb, 0xffffffffffffffff) fcntl$setstatus(r5, 0x4, 0x5005c) 476.221206ms ago: executing program 4: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f0000000400)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0xdffffffffffff7ff}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) msgsnd(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02"], 0x14, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x1000) compat_50___msgctl13$IPC_RMID(0x0, 0x0) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) socket$inet(0x2, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./file0/file0\x00', 0x10) chroot(&(0x7f0000000180)='./file1\x00') __lstat50(&(0x7f0000000000)='.\x00', 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') compat_50___msgctl13$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100), 0x401, 0x0, 0x200}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) compat_40_mount(&(0x7f0000000380)='union\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)) compat_40_mount(&(0x7f0000000300)='umap\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, &(0x7f00000001c0)) pathconf(&(0x7f00000000c0)='./file1\x00', 0x11) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5) unmount(&(0x7f0000000000)='./file1\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x2) r0 = socket$inet6(0x18, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mlockall(0x4) compat_43_ommap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, r1, 0x0) compat_43_ommap(&(0x7f0000672000/0x2000)=nil, 0x2000, 0x1, 0x0, r1, 0x0) __stat50(&(0x7f0000000480)='./file0\x00', &(0x7f0000000280)={0x0}) mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, r2) sendto$inet6(r0, &(0x7f0000000000)='3', 0x180, 0x2, &(0x7f0000000040)={0x18, 0x3}, 0x1c) 465.664298ms ago: executing program 3: setreuid(0xee00, 0x0) getuid() modctl$MODCTL_LOAD(0x4, 0xffffffffffffffff) chown(0x0, 0x0, 0x0) symlink(0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000180)=""/247) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) r0 = semget$private(0x0, 0x4000000009, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FIOASYNC(r1, 0xc004667a, &(0x7f0000000040)=0xfcffffff) semop(r0, &(0x7f0000000100)=[{0x2, 0x3, 0x800}, {0x0, 0x7, 0x1000}, {0x1, 0x401, 0x1000}], 0x3) semop(r0, &(0x7f0000000140)=[{0x0, 0xfffd}, {0x3, 0x0, 0x1000}, {}, {0x0, 0x0, 0x800}, {0x0, 0x1000, 0x1800}], 0x5) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) ioctl$FIOSEEKHOLE(0xffffffffffffffff, 0xc0086662, 0x0) socket$unix(0x1, 0x0, 0x0) compat_50___msgctl13$IPC_STAT(0x0, 0x2, 0x0) compat_40_mount(0x0, 0x0, 0x0, 0x0) __mount50(&(0x7f00000002c0)='overlay\x00', &(0x7f0000000040)='.\x00', 0x0, &(0x7f0000000540), 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r3 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') truncate(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10001) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) 0s ago: executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) compat_50___msgctl13$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x7}}) compat_40_mount(&(0x7f0000000440)='tmpfs\x00', &(0x7f00000003c0)='.\x00', 0x0, &(0x7f0000000140)="01") symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) compat_50___shmctl13$IPC_SET(0x0, 0x1, &(0x7f0000002a00)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.25' (ED25519) to the list of known hosts. 2024/06/20 00:13:05 fuzzer started 2024/06/20 00:13:06 dialing manager at 10.128.0.163:30036 2024/06/20 00:13:06 starting 6 executor processes [ 160.3984684] .: failed to start extattr, error = 0[ 165.8084827] uhub5: device problem, disabling port 1 [ 166.0984829] at_ifinit: timeout?! [ 166.2984976] aarpprobe why did this happen?! [ 168.0884880] tap2: detached [ 168.6184907] tap4: detached [ 171.1685244] tap3: detached [ 172.9585389] WARNING: module error: vfs load failed for `./file0', error 78 [ 173.8185199] tap0: detached [ 183.2085639] tap1: detached [ 183.6685631] tap4: detached [ 186.3585849] tap3: detached [ 191.0586032] load: 4.71 cmd: getty 949 [ttyraw] 0.00u 0.17s 0% 1640k [ 192.4286133] tap2: detached [ 193.9986190] tap0: detached [ 198.9186467] tap1: detached [ 200.3086585] uhub3: device problem, disabling port 1 [ 201.7386589] tap4: detached [ 208.1486943] tap5: detached [ 213.3887206] tap0: detached [ 214.0387173] tap2: detached [ 220.0187412] tap4: detached ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa./file0 êÏÿ À y@ Ö ç@ Ü! @  À Ö./file1 [ 220.9687510] tap1: detached [ 223.3787665] tap5: detached [ 227.0788083] btuart0: major 8 minor 0 [ 227.7287886] sockaddr_getsize_by_family: (syz-executor.2:401:407) Unhandled address family=97 [[ 234.1388127] tap1: detached [ 244.5588716] tap5: detached [ 244.7788731] tap2: detached [ 246.9489166] tap3: detached [ 249.8188996] tap0: detached [ 250.0389001] tap4: detached [ 257.3187.3189585] .: failed to start extattr, = 0r, error = 0[ 265.1089754] tap5: detached [ 265.6389805] tap2: detached [ 274.7790523] tap4: detached [ 275.8990377] pad0: outputs: 44100Hz, 16-bit, stereo [ 275.9090316] audio0 at pad0: playback [ 275.9090316] audio0: slinear_le:16 -> slinear_le:16 2ch 44100Hz, blk 1764 bytes (10ms) for playback [ 275.9290257] spkr1 at audio0: PC Speaker (synthesized) [ 275.9390339] wsbell at spkr1 not configured [ 276.9790520] spkr1: detached [ 276.9990661] audio0: detached [ 277.0090327] pad0: detached [ 277.1490347] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 3489 command syz-executor.0) [ 283.1290617] tap1: detached [ 286.0490755] tap5: detached [ 298.1491399] tap4: detached [ 304.4291664] tap3: detached [ 305.6792010] tap0: detached [ 312.7392108] tap5: detached [ 320.2592825] WARNING: moduleG: module error: vfs load failed for `./file0', error 78 [ 325.7392792] tap4: detached [ 331.8093124] tap1: detached [ 332.6193400] tap2: detached [ 341.9893559] tap3: detached [ 342.0393580] tap0: detached [ 350.4194511] tap4: detached [ 351.6894052] uhub5: device problem, disabling port 1 [ 358.4694407] tap2: detached [ 365.3795056] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1170 command syz-executor.4) [ 367.0795020] Size of accounti accounting nung file not a multifiltiple of 64 - incomplete record truncated [ 367.2595014] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1162 command syzuor.syz-executor.2) [ 367.8594884594884] /root/syzkaer-teskaller-testdir3477565425/syzkaller.VQg91Q/0.: failed to start exteextattr, error = 0[ 377.2995381] tap5: detached [ 379.1595412] tap0: detached [ 382.8995869] tap1: detached [ 384.9995984] tap2: detached [ 387.7995860] tap4: detached [ 390.0295991] uhub5: device problem, disabling port 1 [ 409.5597025] uhub1: device problem, disabling port 1 [ 410.2797040] tap0: detached [ 413.9197184] tap3: detached [ 438.9998708] tap5: detached [ 439.8498447] tap4: detached [ 440.4298483] tap2: detached [ 442.0498486] tap1: detached [ 447.1698834] uhub4: device problem, disabling port 1 [ 458.0699433] tap0: detached [ 459.98 459.9899438] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 1669 command syz-executor.2) [ 461.6599613] sockaddr_getsize_by_family: (syz-executor.2:1670:1348) Unhandled address family=0 [ 473.6400140] tap4: detached [ 475.6400265] tap5: detached [ 475.8400319] tap3: detached [ 479.8900444] tap1: detached [ 482.7800592] tap0: detached [ 501.1101536] tap3: detached [ 506.8602067] tap2: detached [ 513.3002106] tap0: detached [ 530.0402961] .: failed to start extattr, error = 0tap1: detached [ 531.8103119] tap4: detached [ 541.6203551] tap2: detached [ 550.0903935] tap3: detached [ 551.7804871] tap5: detached [ 571.3605201] tap0: detached [ 580.4905507] tap2: detached [ 582.9405994] ReLOCKDEBUG: Reader / writer lock error: rw_vector_enter,300: locking against myself ader / writer lo[ 583.0515469] cpu0: Begin traceback... ck error: rw_vector_enter,300: locking against myself [ 582.9405994] lock address : ffffb2001409ac40 [ 582.9405994] type : sleep/adaptive [ 582.9405994] initialized : netbsd:vcache_alloc+0x3d [ 582.9405994] shared holds : 0 exclusive: 1 [ 582.9405994] shares wanted: 0 exclusive: 1 [ 582.9405994] relevant cpu : 0 last held: 0 [ 582.9405994] relevant lwp : 0xffffb200133ab680 last held: 0xffffb200133ab680 [ 582.9405994] last locked* : netbsd:genfs_lock+0x15a [ 582.9405994] unlocked : netbsd:genfs_unlock+0x2a [ 582.9405994] owner/count : 0xffffb200133ab680 flags : 0x0000000000000004 [ 582.9405994] Turnstile: no active turnstile for this lock. [ 583.0428686] panic: [ 583.1205211] vpanic() at netbsd:vpanic+0x27a [ 583.3505216] panic() at netbsd:panic+0x9d [ 583.5805241] lockdebug_abort1() at netbsd:lockdebug_abort1+0x149 [ 583.7405276] lockdebug_wantlock() at netbsd:lockdebug_wantlock+0x316 [ 583.8805256] rw_enter() at netbsd:rw_enter+0x77b [ 584.0105302] genfs_lock() at netbsd:genfs_lock+0x15a [ 584.1405334] union_lock() at netbsd:union_lock+0x308 [ 584.2705285] VOP_LOCK() at netbsd:VOP_LOCK+0x225 [ 584.4005312] vn_lock() at netbsd:vn_lock+0x1cb [ 584.5405318] union_lookup() at netbsd:union_lookup+0x2fe [ 584.6705303] VOP_LOOKUP() at netbsd:VOP_LOOKUP+0xed [ 584.8105330] lookup_once() at netbsd:lookup_once+0x2a6 [ 584.9505367] namei_tryemulroot() at netbsd:namei_tryemulroot+0x1100 [ 585.0905377] namei() at netbsd:namei+0x6a [ 585.2205341] nameiat_simple_user() at netbsd:nameiat_simple_user+0x1c8 [ 585.3605323] do_sys_mount() at netbsd:do_sys_mount+0x104 [ 585.5005360] compat_40_sys_mount() at netbsd:compat_40_sys_mount+0xbd [ 585.6305362] sys___syscall() at netbsd:sys___syscall+0x10e [ 585.7705419] syscall() at netbsd:syscall+0x35c [ 585.8005352] --- syscall (number 21 via SYS_syscall) --- [ 585.8405388] netbsd:syscall+0x35c: [ 585.8405388] cpu0: End traceback... [ 585.8510500] fatal breakpoint trap in supervisor mode [ 585.8510500] trap type 1 code 0 rip 0xffffffff8023240d cs 0x8 rflags 0x286 cr2 0x10762d000 ilevel 0 rsp 0xffffb20248758e00 [ 585.8669813] curlwp 0xffffb200133ab680 pid 3656.3527 lowest kstack 0xffffb202487522c0 Stopped in pid 3656.3527 (syz-executor.4) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0x105 vpanic() at netbsd:vpanic+0x27a panic() at netbsd:panic+0x9d lockdebug_abort1() at netbsd:lockdebug_abort1+0x149 lockdebug_wantlock() at netbsd:lockdebug_wantlock+0x316 rw_enter() at netbsd:rw_enter+0x77b genfs_lock() at netbsd:genfs_lock+0x15a union_lock() at netbsd:union_lock+0x308 VOP_LOCK() at netbsd:VOP_LOCK+0x225 vn_lock() at netbsd:vn_lock+0x1cb union_lookup() at netbsd:union_lookup+0x2fe VOP_LOOKUP() at netbsd:VOP_LOOKUP+0xed lookup_once() at netbsd:lookup_once+0x2a6 namei_tryemulroot() at netbsd:namei_tryemulroot+0x1100 namei() at netbsd:namei+0x6a nameiat_simple_user() at netbsd:nameiat_simple_user+0x1c8 do_sys_mount() at netbsd:do_sys_mount+0x104 compat_40_sys_mount() at netbsd:compat_40_sys_mount+0xbd sys___syscall() at netbsd:sys___syscall+0x10e syscall() at netbsd:syscall+0x35c --- syscall (number 21 via SYS_syscall) --- netbsd:syscall+0x35c: Panic string: LOCKDEBUG: Reader / writer lock error: rw_vector_enter,300: locking against myself PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 2239 2239 2 1 0 ffffb20013463980 syz-executor.0 3275 3275 2 0 0 ffffb20013363180 syz-executor.2 4823 4823 2 1 40000 ffffb200143b2680 syz-executor.5 3257 4952 3 1 0 ffffb20013389600 syz-executor.3 mutex 3257 3257 2 1 40000 ffffb20012d14280 syz-executor.3 3656 3008 2 0 0 ffffb20013389a40 syz-executor.4 3656 > 3527 7 0 0 ffffb200133ab680 syz-executor.4 3656 3656 2 1 10040000 ffffb20012d28740 syz-executor.4 2188 2869 3 1 180 ffffb200143b2240 syz-executor.1 parked 2188 2740 3 1 180 ffffb20013450080 syz-executor.1 parked 2188 2188 2 1 10040000 ffffb20012c25b00 syz-executor.1 4782 4782 3 1 180 ffffb20013e3b280 syz-executor.2 wait 3376 3376 3 1 180 ffffb200142c6a80 syz-executor.5 parked 1949 1949 3 1 180 ffffb20012ac30c0 syz-executor.4 parked 2180 2180 3 1 0 ffffb20012c13ac0 syz-executor.0 vfork 4714 4714 3 1 180 ffffb20012c13680 syz-executor.4 parked 4827 4827 3 1 180 ffffb2001346d9c0 syz-executor.4 parked 3004 3004 2 1 140 ffffb20012cd29c0 syz-executor.3 1776 1776 3 1 180 ffffb20012c13240 syz-executor.0 parked 1948 1948 2 1 140 ffffb20013dbe600 syz-executor.4 1931 1931 2 1 140 ffffb200134775c0 syz-executor.1 3383 3383 3 0 180 ffffb20012a51bc0 syz-executor.4 parked 1575 2749 3 0 11100000 ffffb200140f7100 syz-executor.4 vfork 1575 1575 2 1 11000040 ffffb20012d05680 syz-executor.4 2047 2047 3 0 180 ffffb20012a6e480 syz-executor.1 parked 3922 1179 2 0 1140000 ffffb20012c81340 syz-executor.3 3922 3922 2 1 11000040 ffffb200133bcb00 syz-executor.3 1581 2784 2 0 1140000 ffffb20012be3600 syz-executor.2 1581 1581 2 1 11000040 ffffb200126d7b80 syz-executor.2 664 664 3 0 180 ffffb200141e0a00 syz-executor.0 parked 2889 2889 3 1 180 ffffb20012ca6900 syz-executor.3 parked 505 507 3 1 11100000 ffffb20012ca6080 syz-executor.3 vfork 505 505 2 1 11000040 ffffb20012cc5100 syz-executor.3 1358 1359 2 0 1140000 ffffb2001405b4c0 syz-executor.1 1358 1358 2 1 11000040 ffffb200140740c0 syz-executor.1 2353 2353 3 1 180 ffffb20013450900 syz-executor.3 parked 2336 1975 3 1 1000000 ffffb20013f2a700 syz-executor.3 lwpwait 2336 2142 3 1 11a0000 ffffb20013445040 syz-executor.3 vfork 2336 2336 5 1 111a0000 ffffb200133f6300 syz-executor.3 1456 1456 3 1 180 ffffb20012d28300 syz-executor.5 parked 1749 1707 3 1 1000000 ffffb200133891c0 syz-executor.5 lwpwait 1749 1736 3 1 11a0000 ffffb200133f6b80 syz-executor.5 vfork 1749 1749 8 1 111a0000 ffffb20012c57300 syz-executor.5 1085 1347 3 1 180 ffffb20013f5c300 syz-fuzzer wait 1085 2467 3 0 180 ffffb200129c1b40 syz-fuzzer wait 1085 460 3 1 180 ffffb20012ceea40 syz-fuzzer parked 1085 1210 3 0 180 ffffb20012b94580 syz-fuzzer parked 1085 1197 2 0 0 ffffb20012a6e8c0 syz-fuzzer 1085 1206 3 0 180 ffffb20013e04240 syz-fuzzer wait 1085 1081 3 0 180 ffffb20013df3a80 syz-fuzzer parked 1085 1186 3 1 180 ffffb20013df3640 syz-fuzzer parked 1085 895 3 1 180 ffffb20013dbe1c0 syz-fuzzer wait 1085 1231 3 1 180 ffffb20013457940 syz-fuzzer parked 1085 449 3 0 180 ffffb20013457500 syz-fuzzer wait 1085 1230 3 1 180 ffffb200134570c0 syz-fuzzer wait 1085 1226 3 0 180 ffffb200129bf280 syz-fuzzer parked 1085 1084 2 1 140 ffffb20012b78980 syz-fuzzer 1085 1085 3 0 180 ffffb20012be31c0 syz-fuzzer parked 1235 1235 3 1 180 ffffb20012bff200 sshd select 1242 1242 3 0 180 ffffb20012a95900 getty nanoslp 1075 1075 3 0 180 ffffb20012ac3940 getty nanoslp 1238 1238 3 0 180 ffffb20012b78100 getty nanoslp 949 949 3 0 180 ffffb20012a51340 getty ttyraw 1116 1116 3 0 180 ffffb200133d2700 sshd select 1065 1065 3 0 180 ffffb20013363a00 powerd kqueue 832 832 3 0 180 ffffb200134458c0 syslogd kqueue 559 559 3 0 180 ffffb20012cb7500 dhcpcd poll 601 601 3 1 180 ffffb20012ce1180 dhcpcd poll 747 747 2 0 0 ffffb20012cb70c0 dhcpcd 605 605 3 1 180 ffffb20012c81bc0 dhcpcd poll 487 487 3 0 180 ffffb20012da5940 dhcpcd poll 488 488 3 1 180 ffffb20012da5500 dhcpcd poll 485 485 2 0 0 ffffb20012da50c0 dhcpcd 1 1 3 0 180 ffffb20012871180 init wait 0 4530 5 1 200 ffffb2001405b900 (zombie) 0 2540 3 0 200 ffffb20012ce1a00 ktrace ktrwait 0 1178 3 1 200 ffffb20012bb8180 acctwatch actwat 0 592 3 1 200 ffffb20012d38780 swapiod swapiod 0 1132 3 0 200 ffffb200129bf6c0 physiod physiod 0 196 3 0 200 ffffb200129c1700 pooldrain pooldrain 0 > 195 7 1 240 ffffb200129c12c0 ioflush 0 194 3 1 200 ffffb200129bfb00 pgdaemon pgdaemon 0 167 3 1 200 ffffb20012976ac0 usb7 usbevt 0 172 3 0 200 ffffb20012976680 usb6 usbevt 0 170 3 0 200 ffffb20012976240 usb5 usbevt 0 168 3 1 200 ffffb2001291ea80 usb4 usbevt 0 166 3 0 200 ffffb2001291e640 usb3 usbevt 0 165 3 0 200 ffffb2001291e200 usb2 usbevt 0 31 3 0 200 ffffb200128caa40 usb1 usbevt 0 63 3 1 200 ffffb200128ca600 usb0 usbevt 0 126 3 1 200 ffffb200128ca1c0 usbtask-dr usbtsk 0 125 3 1 200 ffffb20012871a00 usbtask-hc usbtsk 0 124 3 0 200 ffffb20010d66b00 swwreboot swwreboot 0 123 2 0 240 ffffb200128715c0 npfgc0 0 122 3 0 200 ffffb200128679c0 rt_free rt_free 0 121 3 1 200 ffffb20012867580 unpgc unpgc 0 120 2 0 200 ffffb20012867140 key_timehandler 0 119 3 1 200 ffffb20012703980 icmp6_wqinput/1 icmp6_wqinput 0 118 3 0 200 ffffb20012703540 icmp6_wqinput/0 icmp6_wqinput 0 117 3 1 200 ffffb20012703100 nd6_timer nd6_timer 0 116 3 1 200 ffffb200126fc940 carp6_wqinput/1 carp6_wqinput 0 115 3 0 200 ffffb200126fc500 carp6_wqinput/0 carp6_wqinput 0 114 3 1 200 ffffb200126fc0c0 carp_wqinput/1 carp_wqinput 0 113 3 0 200 ffffb200126ed900 carp_wqinput/0 carp_wqinput 0 112 3 1 200 ffffb200126ed4c0 icmp_wqinput/1 icmp_wqinput 0 111 3 0 200 ffffb200126ed080 icmp_wqinput/0 icmp_wqinput 0 110 3 1 200 ffffb200126db040 rt_timer rt_timer 0 109 3 0 200 ffffb200126db8c0 vmem_rehash vmem_rehash 0 100 3 0 200 ffffb200126d7300 entbutler entropy 0 99 3 1 200 ffffb200120bdb40 viomb balloon 0 98 3 1 200 ffffb200120bd700 vioif0_txrx/1 vioif0_txrx 0 97 3 0 200 ffffb200120bd2c0 vioif0_txrx/0 vioif0_txrx 0 30 3 0 200 ffffb20010d666c0 scsibus0 sccomp 0 29 3 0 200 ffffb20010d66280 pms0 pmsreset 0 28 3 1 200 ffffb20010cacac0 xcall/1 xcall 0 27 1 1 200 ffffb20010cac680 softser/1 0 26 1 1 200 ffffb20010cac240 softclk/1 0 25 1 1 200 ffffb20010ca9a80 softbio/1 0 24 1 1 200 ffffb20010ca9640 softnet/1 0 23 1 1 201 ffffb20010ca9200 idle/1 0 22 3 0 200 ffffb2000fb55a40 lnxsyswq lnxsyswq 0 21 3 0 200 ffffb2000fb55600 lnxubdwq lnxubdwq 0 20 3 0 200 ffffb2000fb551c0 lnxpwrwq lnxpwrwq 0 19 3 0 200 ffffb2000fb54a00 lnxlngwq lnxlngwq 0 18 3 0 200 ffffb2000fb545c0 lnxhipwq lnxhipwq 0 17 3 0 200 ffffb2000fb54180 lnxrcugc lnxrcugc 0 16 3 0 200 ffffb2000fb4d9c0 sysmon smtaskq 0 15 3 0 200 ffffb2000fb4d580 pmfsuspend pmfsuspend 0 14 3 0 200 ffffb2000fb4d140 pmfevent pmfevent 0 13 3 0 200 ffffb2000fb4a980 sopendfree sopendfr 0 12 3 0 200 ffffb2000fb4a540 ifwdog ifwdog 0 11 3 1 200 ffffb2000fb4a100 iflnkst iflnkst 0 10 3 0 200 ffffb2000fb3b940 nfssilly nfssilly 0 9 3 0 200 ffffb2000fb3b500 pooldisp pooldisp 0 8 3 1 200 ffffb2000fb3b0c0 modunload mod_unld 0 7 3 0 200 ffffb2000fb32900 xcall/0 xcall 0 6 1 0 200 ffffb2000fb324c0 softser/0 0 5 1 0 200 ffffb2000fb32080 softclk/0 0 4 1 0 200 ffffb2000fb308c0 softbio/0 0 3 1 0 200 ffffb2000fb30480 softnet/0 0 2 1 0 201 ffffb2000fb30040 idle/0 0 0 2 0 240 ffffffff83350000 swapper [Locks tracked through LWPs] ****** LWP 3275.3275 (syz-executor.2) @ 0xffffb20013363180, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:fork1+0x369) lock address : ffffb2001348fed0 type : sleep/adaptive initialized : netbsd:fork1+0x369 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 1 relevant lwp : 0xffffb20013363180 last held: 0xffffb20013363180 last locked* : netbsd:execve_loadvm+0x31a unlocked : 0 owner/count : 0xffffb20013363180 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 4823.4823 (syz-executor.5) @ 0xffffb200143b2680, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:kcov_open+0x3f) lock address : ffffb200144aa100 type : sleep/adaptive initialized : netbsd:kcov_open+0x3f shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffb200143b2680 last held: 0xffffb200143b2680 last locked* : netbsd:kcov_fops_ioctl+0x28 unlocked : 0 owner field : 0xffffb200143b2680 wait/spin: 0/0 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at netbsd:uvm_obj_init+0xa0) lock address : ffffb200144aa400 type : sleep/adaptive initialized : netbsd:uvm_obj_init+0xa0 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffb200143b2680 last held: 0xffffb200143b2680 last locked* : netbsd:uvm_fault_internal+0x1801 unlocked : netbsd:uvm_fault_lower_enter+0x5f0 owner/count : 0xffffb200143b2680 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 3257.3257 (syz-executor.3) @ 0xffffb20012d14280, l_stat=2 *** Locks held: * Lock 0 (initialized at netbsd:pmap_ctor+0x93) lock address : ffffb20013469980 type : sleep/adaptive initialized : netbsd:pmap_ctor+0x93 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 1 relevant lwp : 0xffffb20012d14280 last held: 0xffffb20012d14280 last locked* : netbsd:pmap_enter_ma+0x396 unlocked : netbsd:pmap_extract+0x161 owner field : 0xffffb20012d14280 wait/spin: 1/0 Turnstile: => 0 waiting readers: => 1 waiting writers: 0xffffb20013389600 *** Locks wanted: none ****** LWP 3656.3527 (syz-executor.4) @ 0xffffb200133ab680, l_stat=7 *** Locks held: * Lock 0 (initialized at netbsd:vcache_alloc+0x3d) lock address : ffffb2001409ac40 type : sleep/adaptive initialized : netbsd:vcache_alloc+0x3d shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb200133ab680 last held: 0xffffb200133ab680 last locked* : netbsd:genfs_lock+0x15a unlocked : netbsd:genfs_unlock+0x2a owner/count : 0xffffb200133ab680 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. *** Locks wanted: none ****** LWP 3656.3656 (syz-executor.4) @ 0xffffb20012d28740, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:sched_cpuattach+0x1ae) lock address : ffffb20010ca7040 type : spin initialized : netbsd:sched_cpuattach+0x1ae shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 1 relevant lwp : 0xffffb20012d28740 last held: 000000000000000000 last locked : netbsd:lwp_lock+0xc0 unlocked* : netbsd:lwp_unpark+0x174 owner field : 0x0000000000000700 wait/spin: 0/1 ****** LWP 2180.2180 (syz-executor.0) @ 0xffffb20012c13ac0, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:xc_init_cpu+0xc1) lock address : netbsd:xc_low_pri type : sleep/adaptive initialized : netbsd:xc_init_cpu+0xc1 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 1 relevant lwp : 0xffffb20012c13ac0 last held: 000000000000000000 last locked : netbsd:xc_wait+0x145 unlocked* : netbsd:xc_wait+0x1ab owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 2353.2353 (syz-executor.3) @ 0xffffb20013450900, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffb20013450900 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 1456.1456 (syz-executor.5) @ 0xffffb20012d28300, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffb20012d28300 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 601.601 (dhcpcd) @ 0xffffb20012ce1180, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffb20012ce1180 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 747.747 (dhcpcd) @ 0xffffb20012cb70c0, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb20012cb70c0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 488.488 (dhcpcd) @ 0xffffb20012da5500, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffb20012da5500 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 485.485 (dhcpcd) @ 0xffffb20012da50c0, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb20012da50c0 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.26 (softclk/1) @ 0xffffb20010cac240, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffb20010cac240 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.11 (iflnkst) @ 0xffffb2000fb4a100, l_stat=3 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 1 last held: 0 relevant lwp : 0xffffb2000fb4a100 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.5 (softclk/0) @ 0xffffb2000fb32080, l_stat=1 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffb2000fb32080 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 0.0 (swapper) @ 0xffffffff83350000, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at netbsd:module_hook_init+0x1c) lock address : netbsd:module_hook type : sleep/adaptive initialized : netbsd:module_hook_init+0x1c shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffffff83350000 last held: 000000000000000000 last locked : 0 unlocked* : 0 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. [Locks tracked through CPUs] PAGE FLAG PQ UOBJECT UANON 0xffffb20000017180 0041 00000000 0x0 0x0 0xffffb20000017200 0041 00000000 0x0 0x0 0xffffb20000017280 0041 00000000 0x0 0x0 0xffffb20000017300 0041 00000000 0x0 0x0 0xffffb20000017380 0041 00000000 0x0 0x0 0xffffb20000017400 0041 00000000 0x0 0x0 0xffffb20000017480 0041 00000000 0x0 0x0 0xffffb20000017500 0041 00000000 0x0 0x0 0xffffb20000017580 0041 00000000 0x0 0x0 0xffffb20000017600 0041 00000000 0x0 0x0 0xffffb20000017680 0041 00000000 0x0 0x0 0xffffb20000017700 0041 00000000 0x0 0x0 0xffffb20000017780 0041 00000000 0x0 0x0 0xffffb20000017800 0041 00000000 0x0 0x0 0xffffb20000017880 0041 00000000 0x0 0x0 0xffffb20000017900 0041 00000000 0x0 0x0 0xffffb20000017980 0041 00000000 0x0 0x0 0xffffb20000017a00 0041 00000000 0x0 0x0 0xffffb20000017a80 0041 00000000 0x0 0x0 0xffffb20000017b00 0041 00000000 0x0 0x0 0xffffb20000017b80 0041 00000000 0x0 0x0 0xffffb20000017c00 0041 00000000 0x0 0x0 0xffffb20000017c80 0041 00000000 0x0 0x0 0xffffb20000017d00 0041 00000000 0x0 0x0 0xffffb20000017d80 0041 00000000 0x0 0x0 0xffffb20000017e00 0041 00000000 0x0 0x0 0xffffb20000017e80 0041 00000000 0x0 0x0 0xffffb20000017f00 0041 00000000 0x0 0x0 0xffffb20000017f80 0041 00000000 0x0 0x0 0xffffb20000018000 0041 00000000 0x0 0x0 0xffffb20000018080 0041 00000000 0x0 0x0 0xffffb20000018100 0041 00000000 0x0 0x0 0xffffb20000018180 0041 00000000 0x0 0x0 0xffffb20000018200 0041 00000000 0x0 0x0 0xffffb20000018280 0041 00000000 0x0 0x0 0xffffb20000018300 0041 00000000 0x0 0x0 0xffffb20000018380 0041 00000000 0x0 0x0 0xffffb20000018400 0041 00000000 0x0 0x0 0xffffb20000018480 0041 00000000 0x0 0x0 0xffffb20000018500 0041 00000000 0x0 0x0 0xffffb20000018580 0041 00000000 0x0 0x0 0xffffb20000018600 0041 00000000 0x0 0x0 0xffffb20000018680 0041 00000000 0x0 0x0 0xffffb20000018700 0041 00000000 0x0 0x0 0xffffb20000018780 0041 00000000 0x0 0x0 0xffffb20000018800 0041 00000000 0x0 0x0 0xffffb20000018880 0041 00000000 0x0 0x0 0xffffb20000018900 0041 00000000 0x0 0x0 0xffffb20000018980 0041 00000000 0x0 0x0 0xffffb20000018a00 0041 00000000 0x0 0x0 0xffffb20000018a80 0041 00000000 0x0 0x0 0xffffb20000018b00 0041 00000000 0x0 0x0 0xffffb20000018b80 0041 00000000 0x0 0x0 0xffffb20000018c00 0041 00000000 0x0 0x0 0xffffb20000018c80 0041 00000000 0x0 0x0