Warning: Permanently added '10.128.0.237' (ECDSA) to the list of known hosts. 2020/05/12 14:52:17 fuzzer started 2020/05/12 14:52:17 dialing manager at 10.128.0.105:41079 2020/05/12 14:52:17 syscalls: 223 2020/05/12 14:52:17 code coverage: enabled 2020/05/12 14:52:17 comparison tracing: enabled 2020/05/12 14:52:17 extra coverage: support is not implemented in syzkaller 2020/05/12 14:52:17 setuid sandbox: support is not implemented in syzkaller 2020/05/12 14:52:17 namespace sandbox: support is not implemented in syzkaller 2020/05/12 14:52:17 Android sandbox: support is not implemented in syzkaller 2020/05/12 14:52:17 fault injection: support is not implemented in syzkaller 2020/05/12 14:52:17 leak checking: support is not implemented in syzkaller 2020/05/12 14:52:17 net packet injection: support is not implemented in syzkaller 2020/05/12 14:52:17 net device setup: support is not implemented in syzkaller 2020/05/12 14:52:17 concurrency sanitizer: support is not implemented in syzkaller 2020/05/12 14:52:17 devlink PCI setup: support is not implemented in syzkaller 2020/05/12 14:52:17 USB emulation: support is not implemented in syzkaller 14:52:22 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000, 0x14) setsockopt(r0, 0x10001, 0x2, &(0x7f0000000040)="5f79f18d59dc06850746a4f10d2434b30c5ab5dbb223fef08455129a6eff6cf8a32559972a5afa3e8046473d2450cbd88e66485a225e4fad471a6a78ecf801c605680aa8ebeda17ac042624d36de", 0x4e) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') getsockname(r0, &(0x7f0000000140)=@un=@file={0x0, ""/108}, &(0x7f00000001c0)=0x6e) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', r1, r2, 0x600) fchmod(r0, 0x0) readlink(&(0x7f00000003c0)='./file2\x00', &(0x7f0000000400)=""/47, 0x2f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) mknod(&(0x7f0000000480)='./file0\x00', 0x8000, 0x1) r5 = _lwp_self() _lwp_wakeup(r5) r6 = open(&(0x7f00000004c0)='./file1\x00', 0xd2c771dc3d72f781, 0x2) setsockopt$sock_int(r6, 0xffff, 0x1007, &(0x7f0000000500), 0x4) select(0x40, &(0x7f0000000540)={0x5, 0x80000000, 0x0, 0x9, 0x7, 0x0, 0x401, 0xc7}, &(0x7f0000000580)={0x3, 0x4, 0x0, 0x1000, 0x7, 0x20d, 0x2, 0x8000}, &(0x7f00000005c0)={0xc0, 0x2, 0x1ff, 0xcc5, 0x7ff, 0x400, 0x8, 0xff}, &(0x7f0000000600)={0xff, 0x8}) ptrace(0xff, 0xffffffffffffffff, &(0x7f0000000640), 0x1) openat(r6, &(0x7f0000000680)='./file2\x00', 0x100, 0x51) mknodat(r4, &(0x7f00000006c0)='./file2\x00', 0x1000, 0x338) 14:52:23 executing program 1: r0 = dup(0xffffffffffffff9c) fchflags(r0, 0x1000d) r1 = msgget$private(0x0, 0x8) msgctl$IPC_RMID(r1, 0x0) r2 = msgget(0x0, 0x80) msgsnd(r2, &(0x7f0000000000)={0x3, "9303cec182818a"}, 0xf, 0x9f8d5d7360169178) r3 = posix_spawn(0x0, &(0x7f0000000040)='\x00', &(0x7f00000000c0)={0xf9cb, 0x83, &(0x7f0000000080)=@dup={0x1, 0xffffffffffffffff, {0x6}}}, &(0x7f0000000100)={0x10, 0xffffffffffffffff, {0x18000}, 0x566e, {[0x5, 0x855, 0x4, 0x80]}, {[0x100, 0x916, 0x4, 0x10]}}, &(0x7f0000000140)=['*\x00'], &(0x7f0000000180)=['}\'!{%\x00']) r4 = getpgrp() setpgid(r3, r4) r5 = getuid() r6 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x11, &(0x7f00000001c0)={r3, r5, r6}, 0xc) nanosleep(&(0x7f0000000200)={0x10001, 0x74}, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = geteuid() setreuid(r7, r8) r9 = getppid() getpgid(r9) r10 = getpgrp() ptrace(0x8, r10, &(0x7f0000000340), 0xff) 14:52:23 executing program 2: r0 = dup(0xffffffffffffff9c) r1 = accept(r0, 0x0, &(0x7f0000000000)) getpeername(0xffffffffffffff9c, &(0x7f0000000040)=@in6, &(0x7f0000000080)=0xc) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_timeval(r2, 0xffff, 0x100c, &(0x7f00000000c0), &(0x7f0000000100)=0x10) getsockopt$sock_timeval(0xffffffffffffff9c, 0xffff, 0x100b, &(0x7f0000000140), &(0x7f0000000180)=0x10) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40000, 0x40) getsockopt$sock_cred(r3, 0xffff, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) getsockopt(r1, 0x8, 0x6, &(0x7f0000000380)=""/26, &(0x7f00000003c0)=0x1a) connect$inet(r3, &(0x7f0000000400)={0x2, 0x0}, 0xc) getsockname$unix(0xffffffffffffff9c, &(0x7f0000000440)=@file={0x0, ""/4096}, &(0x7f0000001480)=0x1002) _lwp_ctl(0x4, &(0x7f0000001500)=&(0x7f00000014c0)={0x6, 0x2}) r4 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmdt(r4) symlink(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)='./file0\x00') getpeername(r1, &(0x7f00000015c0)=@un=@abs, &(0x7f0000001600)=0x8) r5 = shmget$private(0x0, 0x200000, 0x81, &(0x7f0000e00000/0x200000)=nil) shmat(r5, &(0x7f0000f81000/0x4000)=nil, 0x0) open$dir(&(0x7f0000001640)='./file0/file0\x00', 0x0, 0x8) 14:52:23 executing program 4: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x11) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/254, 0xfe) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x2, 0x2) lseek(r1, 0x8, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x11, &(0x7f00000001c0)={0x0}, 0xc) fcntl$lock(0xffffffffffffff9c, 0x8, &(0x7f0000000200)={0x1, 0x1, 0x8d, 0x54b, r2}) r3 = getpid() r4 = open(&(0x7f0000000280)='./file0\x00', 0x80, 0x76) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x11, &(0x7f0000000340)={0x0}, 0xc) posix_spawn(r3, &(0x7f0000000240)='\x00', &(0x7f0000000300)={0x0, 0x4, &(0x7f00000002c0)=@close={0x2, r4}}, &(0x7f0000000380)={0x40, r5, {0x4}, 0x8, {[0x1f, 0x2268a885, 0x52b, 0x4]}, {[0x40, 0xfffffbff, 0x5, 0x7]}}, &(0x7f00000003c0)=['\'\xa6\x00', '\')\'A.L\x00', '\x00'], &(0x7f0000000400)=['\x00', '+\x00', '*-\x00', '&\x00', '\x7f-\x00']) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) recvfrom$inet6(r6, &(0x7f0000000480)=""/229, 0xe5, 0x800, &(0x7f0000000580)={0x18, 0x0, 0x0, 0x2f80}, 0xc) socketpair(0x1, 0x5, 0x1, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r7, &(0x7f0000000600)=@abs={0x0, 0x0, 0x3}, 0x8) r9 = open$dir(&(0x7f0000000640)='./file0\x00', 0x800, 0x42) utimensat(r9, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={{0x5600, 0x5}, {0x10000, 0x6a}}, 0x200) fcntl$setstatus(r8, 0x4, 0x20040) r10 = open(&(0x7f0000000700)='./file0\x00', 0x8000, 0x0) paccept(r10, &(0x7f0000000740)=@un=@file={0x0, ""/108}, &(0x7f00000007c0)=0x6e, 0x60000000) setsockopt$sock_int(r4, 0xffff, 0xf79070903097a12a, &(0x7f0000000800), 0x4) 14:52:23 executing program 3: r0 = getpgid(0xffffffffffffffff) setpgid(r0, 0x0) fork() stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc) r4 = getpgid(0xffffffffffffffff) r5 = getpgrp() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x28, r1, 0x0, 0x0, r3, 0x103, 0xfffc}, 0x8001, 0x6, r4, r5, 0x2, 0x800, 0x3, 0xfffffffffffffffe}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) setpgid(r6, 0x0) getpgrp() getpgid(0x0) chroot(&(0x7f0000000240)='./file0\x00') r7 = fork() setpgid(r7, r6) getpid() execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='\\.\x00'], &(0x7f0000000400)=[&(0x7f0000000340)='/%&-]\x00', &(0x7f0000000380)='\\-#(:*\x00', &(0x7f00000003c0)='*{\x00']) r8 = accept$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs, &(0x7f0000000480)=0x8) r9 = getuid() setsockopt$sock_cred(r8, 0xffff, 0x11, &(0x7f00000004c0)={r2, r9, r3}, 0xc) 14:52:23 executing program 5: execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000040)='\x00', &(0x7f0000000080)='#.\x00', &(0x7f00000000c0)=':\'\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)=':\x00', &(0x7f0000000180)='!\x00', &(0x7f00000001c0)=':[[#:\x00'], &(0x7f0000000280)=[&(0x7f0000000240)='\x00']) syz_extract_tcp_res(&(0x7f00000002c0), 0x80000001, 0x800) r0 = socket(0x1f, 0x40000000, 0x4) recvfrom(r0, &(0x7f0000000300)=""/20, 0x14, 0x42, &(0x7f0000000340)=@un=@file={0x0, './file0\x00'}, 0xa) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, &(0x7f00000003c0)=0x8) getpeername(r1, &(0x7f0000000400)=@in6, &(0x7f0000000440)=0xc) mknod(&(0x7f0000000480)='./file0\x00', 0xc010, 0x5) r2 = getgid() stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0xc) r6 = getegid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0xc) getgroups(0x7, &(0x7f0000000640)=[0xffffffffffffffff, r2, r3, r4, r5, r6, r7]) getgid() r9 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000680)) getsockname$inet(r9, &(0x7f00000006c0), &(0x7f0000000700)=0xc) r10 = getgid() getsockopt$SO_PEERCRED(r0, 0xffff, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0xc) setgroups(0x8, &(0x7f0000000980)=[r10, 0x0, r11, r8, 0x0, 0x0, r6, 0x0]) 14:52:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200000, 0xa8f21eb68b0c6c83) symlinkat(&(0x7f0000000200)='/', r0, &(0x7f0000000240)='./file0\x00') rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00') 14:52:26 executing program 0: posix_spawn(0x0, &(0x7f0000001540)='^+,-\x00', 0x0, 0x0, 0x0, 0x0) posix_spawn(0x0, &(0x7f0000001540)='^+,-\x00', 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) fchdir(r0) fdatasync(r0) r1 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r1) accept$inet6(r1, &(0x7f0000000000), &(0x7f0000000280)=0xc) r2 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) r3 = accept$inet6(r2, &(0x7f0000000040), &(0x7f00000002c0)=0xc) r4 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) select(0x40, &(0x7f0000000080)={0x9, 0x80000001, 0xffffffff, 0xd48, 0x3ff, 0x0, 0xfda4, 0x4}, &(0x7f00000000c0)={0x7, 0x2, 0xfffffffffffffffe, 0x1, 0x8, 0x4, 0x8001, 0xc313}, &(0x7f0000000100)={0x2, 0xa4, 0xfffffffffffffffe, 0x50, 0x1, 0x400, 0x1000100, 0x100000002}, &(0x7f0000000140)={0x8, 0x6}) r5 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r5) getpeername$inet6(r5, &(0x7f0000000180), &(0x7f00000001c0)=0xc) fchdir(r4) r6 = open(&(0x7f0000000240)='./file0\x00', 0x10000, 0x119) fchroot(r6) fcntl$getown(r3, 0x5) 14:52:26 executing program 1: open$dir(&(0x7f0000001240)='./file0\x00', 0x200000, 0x4) open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x2, 0x2) 14:52:26 executing program 0: r0 = getpid() ptrace(0x9, r0, 0x0, 0xfffffffffffffffb) r1 = posix_spawn(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x5, r1, 0x0, 0x0) ptrace(0x75c3, r1, &(0x7f0000000000), 0x651) 14:52:26 executing program 1: setuid(0xee01) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00004b2000/0x2000)=nil) r1 = shmget(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) open(&(0x7f0000000000)='./file0\x00', 0x40, 0xe0) shmat(r1, &(0x7f0000e4c000/0x2000)=nil, 0x3000) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 14:52:27 executing program 0: mkdir(&(0x7f0000000140)='./file1\x00', 0x22) chown(&(0x7f00000001c0)='./file0\x00', 0xee01, 0xee01) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getsockname$inet(r0, &(0x7f0000000040), &(0x7f0000000100)=0xc) fchdir(r0) open$dir(&(0x7f0000000000)='./file0\x00', 0x400004000011830a, 0x0) 14:52:27 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) r1 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x31) fchroot(r1) getpeername$inet(r1, &(0x7f0000000000), &(0x7f0000000080)=0xc) r2 = getuid() r3 = getegid() setregid(r3, 0x0) fchown(r1, r2, r3) pwrite(r0, 0x0, 0x0, 0x0) 14:52:27 executing program 1: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) access(&(0x7f0000000040)='./file0\x00', 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x0) r0 = paccept(0xffffffffffffffff, &(0x7f0000000080)=@in, &(0x7f00000000c0)=0xc, 0x60000000) connect(r0, &(0x7f0000000100)=@un=@file={0x1, './file0\x00'}, 0xa) 14:52:27 executing program 2: r0 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/112, 0x70}, {&(0x7f00000000c0)=""/95, 0x5f}, {&(0x7f0000000140)=""/40, 0x28}, {&(0x7f0000000180)=""/168, 0xa8}], 0x4) fchroot(r0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000000)={0x8, 0x1, 0x9, 0x100, 0x3}, 0xc) socket(0x2, 0x10000000000003, 0x33) 14:52:27 executing program 0: mkdir(&(0x7f0000000140)='./file1\x00', 0x22) chown(&(0x7f00000001c0)='./file0\x00', 0xee01, 0xee01) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getsockname$inet(r0, &(0x7f0000000040), &(0x7f0000000100)=0xc) fchdir(r0) open$dir(&(0x7f0000000000)='./file0\x00', 0x400004000011830a, 0x0) 14:52:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r1) sendto(r1, &(0x7f0000000040)="03d390bf9e8d97205708ff2243eae01a5eac938c4f574a844be4b9586da7fa3389e07c37c0c51be763779454611df4a2e22ef2156abb", 0x36, 0x4, &(0x7f0000000080)=@in={0x2, 0x3}, 0xc) 14:52:27 executing program 1: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x1010, 0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x1200000) read(r0, &(0x7f0000000040)=""/8, 0x8) r1 = socket(0x10, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18, 0x3}, 0xc) 14:52:27 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000040)="eaff125c00000000", 0x8) _lwp_self() r1 = accept(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x8) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000000c0)="f04976807b36b5d37361d0ebb987969b532ae333fb44fc156ce05063918eef08683158b7739626535e55d08af4ac00e9f206afe85c8040d62d03c21904f62f11b8988cb65962907c913ab4af9b1b33199d00551da7f9879f48493c62922251bb426012d0aec83c76e8a398311e630f771d4f34a8c7f9eaedfcc58b4ce542ca6247973cd07cfd84cd5b49478355e93d888dc785d7c01b0d6babe2e673116670f54b9ad99c09041dda2232bbf82bb8efc6a96206", 0xb3) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000040)="eaff120000000000", 0x8) 14:52:27 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x0) 14:52:27 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd49f275d97cc01bb, 0x1010, 0xffffffffffffffff, 0x0, 0xffffffffffff130e) r0 = _lwp_self() _lwp_wait(r0, 0x0) _lwp_continue(r0) 14:52:27 executing program 3: r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x29, 0x80000000000000c, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0xa, 0xffffffffffffffff) socketpair(0x0, 0x20000000, 0x9, &(0x7f0000000000)) 14:52:27 executing program 0: socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x8) sendto$unix(r1, &(0x7f0000000080)="2198c5df4a73ccb74f03da55d977bb1022d31eff11af7b973ddc3cf9f551d0d6ffdbf88c", 0x24, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000040)={0x9}, 0x10) 14:52:28 executing program 2: r0 = socket(0x22, 0x5, 0x0) sendmsg(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4) 14:52:28 executing program 0: socket(0x2, 0x3, 0x40) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0x18, 0x5, 0x7) sendto(r1, &(0x7f0000000000)="2d8e2e62d7a39b478ffcbe50874ab5af5fa126a993bc0ce3e0deb0d7a5d8b1e7d1c5cb12500242e0125d18bfc7d781bae6f9fc71b302bcb9bb06248f65b20bf25fca47096e6b2a5206c11d6960aa72ec2a2cef2fe82889181f030b4b17c0b51d817f69f1ea8ec5829037ec59142f29", 0x6f, 0xf, &(0x7f0000000080)=@un=@file={0x1, './file0\x00'}, 0xa) fcntl$dupfd(r0, 0xa, 0xffffffffffffffff) 14:52:28 executing program 3: r0 = socket(0x22, 0x3, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r1) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x1010, r1, 0x0, 0x8954) recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000200)=@in6, 0xc, 0x0, 0x0, &(0x7f00000005c0)=""/3, 0x3}, 0x40) r2 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r2) setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000000)={0xf9, 0xc8e9}, 0x8) 14:52:28 executing program 1: mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r0) truncate(&(0x7f0000000040)='./file1/file0\x00', 0x1f) faccessat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x200) 14:52:28 executing program 3: r0 = socket(0x2, 0x1, 0x0) shutdown(r0, 0x2) r1 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r1) r2 = dup(r1) bind(r2, &(0x7f00000001c0)=@in={0x2, 0x1}, 0xc) getsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') sendto$unix(r0, &(0x7f0000000200)="7a94cad903f102a098082dd69dec4afd8b3099f3b1c51bcfcfe443578feae07bd59722ebb1251e4c62e7fccc983297a7cefdd6223ae67460d1abb6ee00a509818c8c61e22feb8d94c28140633cd43b0100000031d484959dff522882961e28249f90ea62e425c23ed097e3d62ff6f0c4f168c82d9096c06cfef76aec4b8c17bc8a21d857e80d22108c9655e7aa722a211bb3da2245389c693690bc7025bbe9983fb3f68d450011f16e3f93381239a46d0efa6887d60180b942f1391d0b7e7196fad2b7442c8103004d0fcd87e4a9f62a6083586ded442feaa3230188b7977a2e721dc261eb658d2c42de9504a6dcd2e1cd174e", 0xf3, 0xa, &(0x7f0000000300)=ANY=[], 0xa) 14:52:28 executing program 4: setrlimit(0x6, &(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd49f275d97cc01bb, 0x1810, 0xffffffffffffffff, 0x0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 14:52:28 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r1) r2 = dup(r1) unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x800) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="030000000057620034095c9475d92e7706088b01ce11f367cc279d5bba7cee157f30032f5d1a5ca7e0d7e593aa551901772cdf69de2229f059294a76f9d30036a5a04b6d082d86709b4e6197675e7d52316a59bd7550d82dfcceac95227e3ee26f4e7c9e1eb2a858ef9a4a9c60f293ce05719bb1fcbfc0d1713c31eba16ccd55628f35dfe6ec6646dc9cf52adbf1b671f5fb635fcbf6a694f1d845daab41a95d378a2022111f22af2caab367e7fda2949b6573fdcdb1f9e356c1516a070b6d16e7fce2", @ANYRESOCT], 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) 14:52:28 executing program 1: setrlimit(0x7, &(0x7f0000000200)) fork() getrlimit(0x3, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 14:52:28 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0}, 0x0) 14:52:28 executing program 2: utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x279, 0x200020000000000}, {0x8, 0xfffffffffffffff7}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2080, 0xffffffffffffffff) geteuid() stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x10, 0x0) dup2(r1, r2) 14:52:28 executing program 4: r0 = __clone(0x0, &(0x7f0000000000)) wait4(r0, 0x0, 0x8, &(0x7f0000000140)) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r1) getsockopt$sock_cred(r1, 0xffff, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0xc) r2 = semget(0x1, 0x2, 0x41) r3 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r3) renameat(r1, &(0x7f00000002c0)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00') r4 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r4) accept$inet6(r4, &(0x7f0000000240), &(0x7f0000000280)=0xc) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000040)=""/129) [ 55.2334778] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 859 command syz-executor.0) 14:52:28 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00') r0 = __clone(0x607f, &(0x7f00000001c0)="ec877650cc8bac7e8e5779b58905b656ba9c8111cb41af8ba594b1291fc314501a6b23dd3aa889ed60bf8b022df55fd52a333db83872fa43c37d1a9addc829b9e4b253f40c93bdf2195bb3f68ecea41ac27ac56745d109b6e046a2aeaeb34f19b1797a8f3fec3a515ac833f172b3633b903631085d34aace9d44cb1b1a03979801c878697465f88511660a02947a84f518a171ef09ee0d01656f45e17d89ef512e644b138fc087184c0fec0ede230a8724c0b09a9f0627b10c94a29fbed26789504505") r1 = posix_spawn(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x5, r1, 0x0, 0x0) setpgid(r0, r1) 14:52:28 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r1) r2 = dup(r1) unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x800) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="030000000057620034095c9475d92e7706088b01ce11f367cc279d5bba7cee157f30032f5d1a5ca7e0d7e593aa551901772cdf69de2229f059294a76f9d30036a5a04b6d082d86709b4e6197675e7d52316a59bd7550d82dfcceac95227e3ee26f4e7c9e1eb2a858ef9a4a9c60f293ce05719bb1fcbfc0d1713c31eba16ccd55628f35dfe6ec6646dc9cf52adbf1b671f5fb635fcbf6a694f1d845daab41a95d378a2022111f22af2caab367e7fda2949b6573fdcdb1f9e356c1516a070b6d16e7fce2", @ANYRESOCT], 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) [ 55.3438002] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 859 command syz-executor.0) 14:52:28 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x201, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010001}) pipe(&(0x7f0000000140)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) _lwp_getprivate() r3 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) r4 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r4) preadv(r4, &(0x7f0000002600)=[{&(0x7f0000000240)=""/196, 0xc4}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/202, 0xca}, {&(0x7f00000014c0)=""/71, 0x47}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000001540)}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/17, 0x11}, {&(0x7f00000025c0)=""/19, 0x13}], 0xa, 0x0) fchdir(r3) sendto$inet(r3, &(0x7f0000000040)="521c28d8b208d9190533f7cdcdb0482f5d6e01399dd269720841cf46800f6d9a89dc35e7221c9797794299bc29a1f3109b6662fbd215d3dcd76e390993fda46d59a7f48684d7b77da0a8ae93f979158f29c20766757b95f425de201b46039dab141f61d58c", 0x65, 0x5, &(0x7f0000000100)={0x2, 0x2}, 0x6e) dup(r1) exit(0xba0) r5 = socket(0x10, 0x5, 0x9) r6 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r6) dup2(r5, r6) fcntl$dupfd(r2, 0xa, 0xffffffffffffffff) 14:52:28 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x180743, 0x0) r0 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x7, 0x0) semop(r1, &(0x7f0000000180), 0x0) r2 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r2) r3 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r4) r5 = accept(r4, &(0x7f0000000040)=@un=@file={0x0, ""/41}, &(0x7f00000000c0)=0x2b) r6 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r6) poll(&(0x7f0000000100)=[{r2, 0x40}, {r3, 0x2}, {r5, 0x10}, {r0, 0x2}, {r6, 0x80}], 0x5, 0x7fffffff) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000000)=[0x7, 0x8, 0x1, 0x2, 0x1f, 0x5, 0xff, 0x400, 0x7]) fchroot(r0) fcntl$setstatus(r0, 0x4, 0x40000) r7 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r7) fchroot(r7) [ 55.5644418] WARNING: defaulted mmap() share type to MAP_PRIVATE (pid 953 command syz-executor.0) 14:52:29 executing program 1: mmap(&(0x7f0000303000/0xb000)=nil, 0xb000, 0x0, 0x800000000009031, 0xffffffffffffffff, 0x0, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x800000000009031, 0xffffffffffffffff, 0x0, 0x0) 14:52:29 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fchmodat(r0, 0x0, 0x0, 0x200) r1 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r1) r2 = getuid() setreuid(0xee00, r2) r3 = getegid() setregid(r3, 0x0) fchownat(r1, &(0x7f0000000080)='./file0\x00', r2, r3, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x20, 0x101) getegid() 14:52:29 executing program 5: r0 = _lwp_self() _lwp_suspend(r0) r1 = _lwp_self() r2 = _lwp_self() r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000080)=0x8) shutdown(r3, 0x2) _lwp_wait(r2, 0x0) _lwp_getname(r2, &(0x7f0000000000)=""/2, 0x2) _lwp_suspend(r1) _lwp_detach(0x0) _lwp_wakeup(r1) 14:52:29 executing program 4: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)='a', 0x1}], 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r1) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x400, 0x49) r3 = getuid() setreuid(0xee00, r3) r4 = getegid() setregid(r4, 0x0) fchownat(r2, &(0x7f0000000100)='./file0\x00', r3, r4, 0x200) 14:52:29 executing program 1: getdents(0xffffffffffffffff, &(0x7f0000000100)=""/102400, 0x19000) _lwp_create(&(0x7f0000019100)={0x8, &(0x7f0000000080)={0x0, &(0x7f0000000000)={0x2, 0x0, {[0x4, 0x1d39, 0x7, 0x9]}, {0x2, 0x7, 0x1}, {0x6, 0x3, '\x00'}}, {[0x2, 0x10000, 0x3ff, 0x80000001]}, {0x1, 0x9, 0x4}, {0x3ff, 0x1, '(\x00'}}, {[0x5, 0x312c, 0x4, 0x600]}, {0xfffffffffffffffd, 0x8}, {0xca7, 0x5, '\x00'}}, 0x40, &(0x7f0000019180)) r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r0) symlinkat(&(0x7f00000191c0)='./file0\x00', r0, &(0x7f0000019200)='./file0\x00') 14:52:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x404a2c0, 0x51) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00') __getcwd(&(0x7f0000000180)=""/164, 0xa4) 14:52:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)='\v', 0x1}, {&(0x7f0000000140)="ed", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r1 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) socket(0x10, 0x5, 0x3f) rmdir(&(0x7f0000000080)='./file0\x00') fchroot(r1) accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) 14:52:29 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) socket$inet6(0x18, 0x1, 0x5) pwrite(r0, 0x0, 0x0, 0x0) 14:52:29 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) socketpair(0x1f, 0x5, 0x2, 0x0) 14:52:29 executing program 2: r0 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r0) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r2) poll(&(0x7f0000000040)=[{}, {r0, 0x4}, {r1, 0x4}, {r2, 0x10}], 0x4, 0xfffffffc) r3 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r3) fcntl$setstatus(r3, 0x4, 0x8) 14:52:29 executing program 0: r0 = socket(0x18, 0x1, 0x0) r1 = getuid() setreuid(0xee00, r1) r2 = getegid() r3 = getegid() r4 = getuid() setreuid(0xee00, r4) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, r5) setregid(r3, 0x0) setregid(r3, 0x0) fchown(r0, r1, r2) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 14:52:29 executing program 1: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) 14:52:29 executing program 4: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)='a', 0x1}], 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r1) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x400, 0x49) r3 = getuid() setreuid(0xee00, r3) r4 = getegid() setregid(r4, 0x0) fchownat(r2, &(0x7f0000000100)='./file0\x00', r3, r4, 0x200) 14:52:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/214, 0xd6) truncate(&(0x7f00000000c0)='./file0/file1\x00', 0x8000) chmod(&(0x7f0000000080)='./file0/file1\x00', 0xcb) chmod(&(0x7f0000000100)='./file0/file1\x00', 0x4) 14:52:30 executing program 2: r0 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r0) r1 = paccept(r0, &(0x7f0000000100)=@in6, &(0x7f0000000140)=0xc, 0x0) accept(r1, &(0x7f0000000180)=@in, &(0x7f00000001c0)=0xc) mknod(&(0x7f0000000000)='./bus\x00', 0x8000, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) link(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='./file0\x00') lstat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)) 14:52:30 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x60e, 0x16f) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000240)="b4", 0xfdb6}], 0x1, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/40, 0xb77cb748d5ee361}], 0x1) 14:52:30 executing program 5: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x4, 0x300) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 14:52:30 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x100, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r0, 0x0, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') 14:52:30 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fchmodat(r0, 0x0, 0x0, 0x200) r1 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r1) r2 = getuid() setreuid(0xee00, r2) r3 = getegid() setregid(r3, 0x0) fchownat(r1, &(0x7f0000000080)='./file0\x00', r2, r3, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x20, 0x101) getegid() 14:52:30 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0xa, 0xffffffffffffffff) __clone(0x0, 0x0) getpgrp() 14:52:30 executing program 1: _lwp_getname(0xffffffffffffffff, 0x0, 0x0) r0 = _lwp_self() _lwp_wait(r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) _lwp_create(&(0x7f0000000440)={0x4, &(0x7f00000003c0)={0xa, &(0x7f0000000340)={0x20078011, 0x0, {[0x7fffffff, 0x1f, 0x9ef, 0x3f]}, {0x3, 0x1, 0x1}, {0x5, 0x4, '!&N,\xaa!\x00'}}, {[0x0, 0x7f, 0x7915, 0xc93a]}, {0x0, 0xffffffffffffffff, 0x1}, {0x9, 0x2, '\x00'}}, {[0x9, 0xfff, 0x3, 0x101]}, {0x90, 0x9d5, 0x1}, {0x5, 0x100, '\x00'}}, 0x40, &(0x7f00000004c0)=0x0) _lwp_wakeup(r2) fchdir(r1) recvfrom(r1, &(0x7f0000000180)=""/127, 0x7f, 0x800, 0x0, 0x0) _lwp_detach(r0) _lwp_ctl(0x3, &(0x7f0000000100)=&(0x7f0000000140)={0x10001, 0x3}) r3 = _lwp_self() msgget(0x3, 0x0) recvfrom$inet6(r1, &(0x7f0000000240)=""/235, 0xeb, 0x2, &(0x7f00000000c0)={0x18, 0x3, 0xf46, 0x80000001}, 0xc) _lwp_wait(r3, 0x0) compat_60__lwp_park(&(0x7f0000000000)={0x7, 0xa0}, r3, &(0x7f0000000040)=0x262f, &(0x7f0000000080)=0x7fffffff) write(r1, &(0x7f0000000500)="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", 0x1000) 14:52:30 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) pwrite(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r1) connect(r1, &(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x3}, 0x8) 14:52:30 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x400000, 0x21) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010001}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0xa, 0xffffffffffffffff) 14:52:30 executing program 3: lchmod(&(0x7f0000000280)='.\x00', 0x0) _lwp_setprivate(&(0x7f0000000040)=0x3) open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0xc4) 14:52:30 executing program 4: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2080, 0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x3) r1 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r1) utimensat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x4, 0xfffffffffffffffb}, {0x2, 0x3546}}, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 14:52:30 executing program 1: mkdir(&(0x7f0000000000)='./control\x00', 0x108) rmdir(&(0x7f0000000100)='./control\x00') unlink(&(0x7f0000000080)='./control\x00') r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r0) r1 = dup(r0) connect$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x2}, 0x8) 14:52:30 executing program 0: mknod(&(0x7f0000000180)='./bus\x00', 0x8000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x81, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="fa", 0x1}], 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r1) r2 = fcntl$dupfd(0xffffffffffffffff, 0xc, r1) getpeername$unix(r2, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) pwritev(r0, &(0x7f00000001c0), 0x28d, 0x0) 14:52:30 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x60e, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000240)="b4", 0xfdb6}], 0x1, 0x0) close(r0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/40, 0xb77cb748d5ee361}], 0x1) 14:52:31 executing program 3: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="ff82ec"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) r1 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r1) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="edc05828aaed541c2a4799dc955aac536e73bddd484cdd7d51d29e33fa31ac8ed4570a999aab9352", 0x28}, {&(0x7f0000000140)="c8ca329e9935d33eb4d044d1c5110ec26dcf9f5459fd94cfe47e4417a795d9f3eff7642e68fd5444a5ab4e0a79cc561d11080d3e57412db92f7d93e928f7c9464b50d2b01039acb7eaf127734e73f14200a2cb691859b2abca8214441018974fb57e51d65e11e9099b591e6b0121e17c155ed8b4441d2ba4a31d6659d6dbff94f2c9fb2c3454dcbdcbb615a1799d19718d67f6e4032b716575494b62c7aa6e157fb2ba47aa1e29c0193c77331a83408adebda3daa0bcbd8508848342aa5310d44bf4c28012098320a9f702000b48796d5964cb93f94bf791070e0b0caa06863f3b0b86fa55", 0xe5}], 0x2, &(0x7f0000000280)=[{0x68, 0xffff, 0x7ff, "5f540435393f0167feb4db850c9611586de3e8bdceb8613bb5bfb3162b1fe77c1acf25b04f908c30dede53a92f59d6a55d3c9c726dd184801f53d6fafd9a22e5b8cc0e4778e10850ba9f5a36657cd60f3895"}, {0x18, 0x29, 0x8, "9f44e6d5"}], 0x80}, 0x404) readlinkat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/28, 0x1c) bind(r0, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) r2 = dup(r0) listen(r2, 0x0) r3 = socket(0x2, 0x1, 0x0) connect$unix(r3, &(0x7f0000000040)=@abs={0x1, 0x0, 0x2}, 0x76230103b6d1ec3f) 14:52:31 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r0) r1 = paccept(r0, 0x0, &(0x7f0000000000), 0x20000000) connect$inet6(r1, &(0x7f0000000040)={0x18, 0x2, 0x80, 0x101}, 0xc) utimes(0x0, &(0x7f0000001580)) r2 = semget$private(0x0, 0x7, 0x0) semop(r2, &(0x7f0000000180), 0x0) open(&(0x7f0000000000)='./file0\x00', 0x70e, 0x0) semctl$GETALL(r2, 0x0, 0x6, &(0x7f0000000080)) r3 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r3) symlinkat(&(0x7f0000000080)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00') r4 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ff7000/0x2000)=nil) r5 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r5) pwritev(r5, &(0x7f0000000300)=[{&(0x7f0000000100)="4d94c20ad803e556dd3dcd66470b9dcd51e22e994b1529ccc597", 0x1a}, {&(0x7f0000000180)="d75ee8a1d2e73d69b19cd1b3afec5e2bfa6918c770f5a5c2498b4443d058769ae97ba12b248b8868f676b88b2a0eea547b536e8b5d19954e4e33e9a515821b9be87317d4666b7c28f92b087b233daa26369c", 0x52}, {&(0x7f0000000240)="a68d180491e31739adcb7efc1c9bf10743710f539f5cc6979ae0dcfef586b4cec6b360585f0f99ec877dbf461311934625dc10ab4e56d9eaba290c58967b126a6fc54e314421acf7d867b9c8b0d18c343179bd7713d2113ba7647f6a3b1de3123e5a4292da10e90799ef6eda1283661cd214afa9570d2ef1b23d36e47de5dee995ee1a1595d5d42cb7d16d9d6129bf28", 0x90}], 0x3, 0x8) r6 = shmat(r4, &(0x7f0000002000/0x1000)=nil, 0x0) shmdt(r6) shmdt(r6) 14:52:31 executing program 3: setregid(0x0, 0xee01) r0 = getegid() setregid(0x0, 0x0) setregid(r0, 0x0) setregid(0x0, 0x0) r1 = semget$private(0x0, 0x7, 0x0) semop(r1, &(0x7f0000000180), 0x0) r2 = getuid() setreuid(0xee00, r2) r3 = getegid() setregid(0x0, 0x0) r4 = getuid() r5 = getuid() setreuid(0xee00, r5) r6 = getuid() setreuid(0xee00, r6) setreuid(0xee00, r6) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000000)={{0x5, r2, r3, r4, 0xffffffffffffffff, 0x128, 0xcd51}, 0x9, 0x4, 0x7}) r7 = posix_spawn(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x5, r7, 0x0, 0x0) 14:52:31 executing program 1: mkdir(&(0x7f0000000040)='./bus\x00', 0x3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rename(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='./bus\x00') posix_spawn(0x0, &(0x7f0000001540)='^+,-\x00', 0x0, 0x0, 0x0, 0x0) 14:52:31 executing program 2: __clone(0x0, 0x0) setitimer(0x0, 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r0) r1 = fcntl$getown(r0, 0x5) wait4(r1, 0x0, 0x4, &(0x7f0000000040)) 14:52:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f00000190c0)=""/102400, 0x19000, 0x0, 0x0, 0xffffff9f) r2 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r2) r3 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r3) r4 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r4) r5 = posix_spawn(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x5, r5, 0x0, 0x0) r6 = getuid() setreuid(0xee00, r6) getegid() setregid(0x0, 0x0) r7 = getuid() setreuid(0xee00, r7) r8 = getegid() setregid(r8, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00000002c0)=[{&(0x7f00000000c0)="ac028a48da61223ddb983658c7e43e593754211b90fdd4ba8799f68c8d2c7639", 0x20}, {&(0x7f0000000100)="764193eb89df58149c3acbb58e8a8a815555c64b9cc87339fc6f19e96585c26377061f0a758f4195c51302aa16908e53f523e85f1907b5ada9bb8dfc82e3283eb0a1e0502f4a1f34460b804cec099a0e9837a25b006292e2fc93cc3fcf2cf66fbd3fb65acc9f18005094ad5dc03efff6e5e5d2c1fcd464b9911c5946848a018b10b9a24dbc84333b063181dedbfa5a3e2cd14ebf83c576d9431d7fc497544705bcf932bb8d9a2721fccb145a121b1a230645127ab381fc44a94aebd0d595bb61a941dfb0365ec0c8359d89d02c85d5252400d86708654549af02", 0xda}, {&(0x7f0000000200)="cbcd4de3b873498ac8a7c75bdbf1b007915b935b9fc1f3795699106a6adf111bd386f8604df0876a695d1ecd39526faa5c9baa62efc150c03b6736706cc977333147497a30021456242f8873ced76953c4c03957a3666f66452469a9d8b0a4503b7aeec56f58361ed801430d80af750b75cb1505d5079ee4d3aabdc77475be92cca722aee3567cd4717932546aa8ea0d2cb7d80cdad10026fe314c5b1b50181e2f6576639e", 0xa5}], 0x3, &(0x7f0000000480)=ANY=[], 0xf0, 0x408}, 0x40e) sendto$unix(r1, 0x0, 0x0, 0x8, 0x0, 0x0) 14:52:31 executing program 3: r0 = semget$private(0x0, 0x7, 0x0) semop(r0, &(0x7f0000000180), 0x0) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000140)=[0x458, 0x7]) getrusage(0xffffffffffffffff, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r2) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/94, 0x5e}, {&(0x7f0000000200)=""/238, 0xee}, {&(0x7f0000000300)=""/126, 0x7e}, {&(0x7f0000000380)=""/212, 0xd4}], 0x4, 0x32) shmctl$IPC_SET(r1, 0x1, &(0x7f00000000c0)) r3 = shmget(0x1, 0x1000, 0x80, &(0x7f00002ac000/0x1000)=nil) shmctl$SHM_LOCK(r3, 0x3) 14:52:31 executing program 1: mkdir(&(0x7f0000000040)='./bus\x00', 0x3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rename(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='./bus\x00') posix_spawn(0x0, &(0x7f0000001540)='^+,-\x00', 0x0, 0x0, 0x0, 0x0) 14:52:31 executing program 5: r0 = fork() wait4(r0, 0x0, 0x0, 0x0) 14:52:31 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x69, &(0x7f0000000040)={{0x18, 0x2, 0x9, 0xe7}, {0x18, 0x2, 0x8, 0x3}, 0x8001, [0x1, 0x8, 0x5, 0x9, 0x91, 0x0, 0x0, 0x8]}, 0x3c) r1 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r1) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ff7000/0x2000)=nil) shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x0) shmctl$IPC_RMID(r2, 0x0) getsockname$inet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) shmat(r2, &(0x7f0000ff2000/0xd000)=nil, 0x1000) fchmodat(r1, &(0x7f0000000000)='./file0\x00', 0x2, 0x400) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x10) 14:52:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000200)='/', r0, &(0x7f0000000240)='./file0\x00') rename(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x58) pwrite(r0, &(0x7f0000000000)="fdabf0ffeecf30a0c7116ac3c49131295f35264e2666c4f36e1ff0df8c2616ec184719aa50a68f953858584ebbdff498fbe7cd4257c0dc015706e59d539ec8514434241a9f0d2eb2c834a1e24270469a929e", 0x52, 0xffffffffffffff00) r1 = getuid() setreuid(0xee00, r1) r2 = getegid() setregid(r2, 0x0) chown(&(0x7f0000000100)='./file0/file0\x00', r1, r2) 14:52:31 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000380)={0x2}, 0x8, 0x800) r1 = getegid() setregid(r1, 0x0) setegid(r1) setgroups(0x1, &(0x7f0000000000)=[r1]) msgrcv(r0, &(0x7f00000014c0)={0x0, ""/133}, 0x8d, 0x2, 0x1000) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 14:52:31 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="41a75e75a39cef95282ae4c9796f8c11a956", 0x1}], 0xffffffffffffff15) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000100)='\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='[\x00', &(0x7f0000000200)='}^.@\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00'], &(0x7f0000000440)=[&(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(}\'(/\x00']) semget(0x2, 0x1, 0x101) 14:52:31 executing program 1: r0 = msgget(0x2, 0x204) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/93) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0100d61f7189591e9233614b0026395b8ba5659aeee5f4f4a7440a1bca565fb242e4e46c9ff75b84b3d9abf05bf5fd5443bdd258dc183e992a6562d7ad218ec129b1081395a4c04f7b8e82bde111d426f347c228b14f52afd232022c930b0fdddcb86c1b9af7c6403332812868d92799bded6dbf370ee75b775682f28fdea91073b70f08fefa82d0602d30e37d37f79e4ce336"], 0xc) r2 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r3) r4 = posix_spawn(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x5, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r5) getsockopt$sock_cred(r5, 0xffff, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) r7 = getegid() setregid(r7, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f00000003c0)=[{&(0x7f0000000240)="16c24563eeb415ceedf9cdbcc13cfddc1bc8d7146f7d5ac31c8d56fc890c73420dc378aec5d8a8c679145373545d5ed8cf45d8db80cafa6fb090bcbc6dae3fee961daaa8a910eb72421125a9eacb31fbfa7d2d6ddb252b8810aedb", 0x5b}, {&(0x7f00000002c0)="17e76115b2d069f3212057bd7e9ee56176f649c975fa03ce361865999501e5df593fa11cf5c92b2de41a5685ef5f5af0bd1e9bfafbca62ba1f682d20df042b55c0a5b525c20ed65943e443fe067e0249275b504bb243389ad02260f0f20e869d4d5e34abc6981bd69243a78071f0709ca8517e59b3df1846c793f9bbaff7d33a90fd40457351779c3ece88a494ecf49dcb939d67cb4e67a28a7eaf3f23a95e75351163c52ccdad0e8dc4aaaa12b2dab8fae90bbac04a4fa0698882e77a220674235caa826001af555f72ad1b12de93f58d7d00f8a1767df24333ea823a9c2ca0d36b44", 0xe3}], 0x2, &(0x7f0000000480)=[@cred={0x20}, @rights={0x20, 0xffff, 0x1, [0xffffffffffffffff, 0xffffffffffffff9c, 0xffffffffffffffff]}, @rights={0x20, 0xffff, 0x1, [0xffffffffffffffff, r3, r1]}, @cred={0x20, 0xffff, 0x2, r4, r6, r7}], 0x80, 0x19}, 0x400) fchroot(r2) sendto(r2, &(0x7f0000000080)="d330ae57e0222956af7f42baaa21d33057567f5e6085157a452efdcba8bab7ad82860059e4a0f022e09516ac6503979832741bb28a41c1036bb13a1f08bf338ef76fb4d4177914c736750dfe492f41e5335826ecfc4f0e53af70962759150684e39dc443f2dd9610eb04071532dec39acf87", 0x72, 0x400, &(0x7f0000000100)=@in6={0x18, 0x2, 0x4, 0x7f}, 0xc) mknod$loop(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100e91f7189591e9233614b00824a5517dc1e46c9f88969cf89"], 0xc) 14:52:32 executing program 2: r0 = _lwp_self() _lwp_wait(r0, 0x0) _lwp_detach(r0) r1 = posix_spawn(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = _lwp_self() _lwp_wait(r2, 0x0) _lwp_unpark_all(&(0x7f0000000040)=[r0, r2, r0, r0], 0x4, &(0x7f0000000080)=0x1) ptrace(0x5, r1, 0x0, 0x0) r3 = vfork() posix_spawn(r3, &(0x7f0000000000)='\x05\xa9\xa6I\xe2\xc71\xca8;\xd8[DeC!\x00', 0x0, 0x0, 0x0, 0x0) 14:52:32 executing program 0: symlink(0x0, &(0x7f0000000040)='./file0\x00') r0 = socket(0x18, 0x1, 0x0) r1 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r1) getpeername$inet6(r1, &(0x7f0000000000), &(0x7f0000000080)=0xc) setsockopt(r0, 0x29, 0x800000000000009, &(0x7f0000000040), 0x4) 14:52:32 executing program 4: r0 = socket(0x18, 0x2, 0x0) r1 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r1) setsockopt$sock_int(r1, 0xffff, 0x1002, &(0x7f0000000000)=0x4f, 0x4) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) flock(r0, 0x2) getpeername$inet(r0, 0x0, 0x0) 14:52:32 executing program 1: r0 = msgget(0x2, 0x204) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/93) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0100d61f7189591e9233614b0026395b8ba5659aeee5f4f4a7440a1bca565fb242e4e46c9ff75b84b3d9abf05bf5fd5443bdd258dc183e992a6562d7ad218ec129b1081395a4c04f7b8e82bde111d426f347c228b14f52afd232022c930b0fdddcb86c1b9af7c6403332812868d92799bded6dbf370ee75b775682f28fdea91073b70f08fefa82d0602d30e37d37f79e4ce336"], 0xc) r2 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r3) r4 = posix_spawn(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x5, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r5) getsockopt$sock_cred(r5, 0xffff, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) r7 = getegid() setregid(r7, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f00000003c0)=[{&(0x7f0000000240)="16c24563eeb415ceedf9cdbcc13cfddc1bc8d7146f7d5ac31c8d56fc890c73420dc378aec5d8a8c679145373545d5ed8cf45d8db80cafa6fb090bcbc6dae3fee961daaa8a910eb72421125a9eacb31fbfa7d2d6ddb252b8810aedb", 0x5b}, {&(0x7f00000002c0)="17e76115b2d069f3212057bd7e9ee56176f649c975fa03ce361865999501e5df593fa11cf5c92b2de41a5685ef5f5af0bd1e9bfafbca62ba1f682d20df042b55c0a5b525c20ed65943e443fe067e0249275b504bb243389ad02260f0f20e869d4d5e34abc6981bd69243a78071f0709ca8517e59b3df1846c793f9bbaff7d33a90fd40457351779c3ece88a494ecf49dcb939d67cb4e67a28a7eaf3f23a95e75351163c52ccdad0e8dc4aaaa12b2dab8fae90bbac04a4fa0698882e77a220674235caa826001af555f72ad1b12de93f58d7d00f8a1767df24333ea823a9c2ca0d36b44", 0xe3}], 0x2, &(0x7f0000000480)=[@cred={0x20}, @rights={0x20, 0xffff, 0x1, [0xffffffffffffffff, 0xffffffffffffff9c, 0xffffffffffffffff]}, @rights={0x20, 0xffff, 0x1, [0xffffffffffffffff, r3, r1]}, @cred={0x20, 0xffff, 0x2, r4, r6, r7}], 0x80, 0x19}, 0x400) fchroot(r2) sendto(r2, &(0x7f0000000080)="d330ae57e0222956af7f42baaa21d33057567f5e6085157a452efdcba8bab7ad82860059e4a0f022e09516ac6503979832741bb28a41c1036bb13a1f08bf338ef76fb4d4177914c736750dfe492f41e5335826ecfc4f0e53af70962759150684e39dc443f2dd9610eb04071532dec39acf87", 0x72, 0x400, &(0x7f0000000100)=@in6={0x18, 0x2, 0x4, 0x7f}, 0xc) mknod$loop(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100e91f7189591e9233614b00824a5517dc1e46c9f88969cf89"], 0xc) 14:52:32 executing program 0: connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x1, 0x1, 0x0) close(r1) socket(0x1, 0x20000000, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) r2 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r2) recvfrom$inet6(r2, &(0x7f0000000000)=""/4, 0x4, 0x0, &(0x7f0000000040)={0x18, 0x2, 0x8001, 0x5}, 0xc) getsockopt(r0, 0x200000029, 0x2c, 0x0, 0x0) 14:52:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x27) open(&(0x7f0000000000)='./file0\x00', 0x404a2c0, 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00') mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0, 0x3) r1 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r2) fchroot(r2) getdents(r1, &(0x7f0000000180)=""/187, 0x37) rename(&(0x7f00000000c0)='./file1/file1\x00', &(0x7f0000000240)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x400000, 0x20) fchroot(r1) 14:52:32 executing program 1: r0 = msgget(0x2, 0x204) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/93) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0100d61f7189591e9233614b0026395b8ba5659aeee5f4f4a7440a1bca565fb242e4e46c9ff75b84b3d9abf05bf5fd5443bdd258dc183e992a6562d7ad218ec129b1081395a4c04f7b8e82bde111d426f347c228b14f52afd232022c930b0fdddcb86c1b9af7c6403332812868d92799bded6dbf370ee75b775682f28fdea91073b70f08fefa82d0602d30e37d37f79e4ce336"], 0xc) r2 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r3) r4 = posix_spawn(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x5, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r5) getsockopt$sock_cred(r5, 0xffff, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) r7 = getegid() setregid(r7, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f00000003c0)=[{&(0x7f0000000240)="16c24563eeb415ceedf9cdbcc13cfddc1bc8d7146f7d5ac31c8d56fc890c73420dc378aec5d8a8c679145373545d5ed8cf45d8db80cafa6fb090bcbc6dae3fee961daaa8a910eb72421125a9eacb31fbfa7d2d6ddb252b8810aedb", 0x5b}, {&(0x7f00000002c0)="17e76115b2d069f3212057bd7e9ee56176f649c975fa03ce361865999501e5df593fa11cf5c92b2de41a5685ef5f5af0bd1e9bfafbca62ba1f682d20df042b55c0a5b525c20ed65943e443fe067e0249275b504bb243389ad02260f0f20e869d4d5e34abc6981bd69243a78071f0709ca8517e59b3df1846c793f9bbaff7d33a90fd40457351779c3ece88a494ecf49dcb939d67cb4e67a28a7eaf3f23a95e75351163c52ccdad0e8dc4aaaa12b2dab8fae90bbac04a4fa0698882e77a220674235caa826001af555f72ad1b12de93f58d7d00f8a1767df24333ea823a9c2ca0d36b44", 0xe3}], 0x2, &(0x7f0000000480)=[@cred={0x20}, @rights={0x20, 0xffff, 0x1, [0xffffffffffffffff, 0xffffffffffffff9c, 0xffffffffffffffff]}, @rights={0x20, 0xffff, 0x1, [0xffffffffffffffff, r3, r1]}, @cred={0x20, 0xffff, 0x2, r4, r6, r7}], 0x80, 0x19}, 0x400) fchroot(r2) sendto(r2, &(0x7f0000000080)="d330ae57e0222956af7f42baaa21d33057567f5e6085157a452efdcba8bab7ad82860059e4a0f022e09516ac6503979832741bb28a41c1036bb13a1f08bf338ef76fb4d4177914c736750dfe492f41e5335826ecfc4f0e53af70962759150684e39dc443f2dd9610eb04071532dec39acf87", 0x72, 0x400, &(0x7f0000000100)=@in6={0x18, 0x2, 0x4, 0x7f}, 0xc) mknod$loop(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100e91f7189591e9233614b00824a5517dc1e46c9f88969cf89"], 0xc) 14:52:32 executing program 5: r0 = getegid() setregid(r0, 0x0) setgroups(0x2, &(0x7f0000000000)=[r0, 0x0]) r1 = socket(0x2, 0x3, 0x0) connect$unix(r1, &(0x7f0000000b40)=ANY=[@ANYBLOB="8202adfd008100ff"], 0x10) r2 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000280)='\x00'], &(0x7f0000000540)=[&(0x7f0000000300)='\x00', &(0x7f0000000340)=')$]\x00', &(0x7f0000000380)='\r^\x00', &(0x7f0000000400)='!\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='+\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00']) fchroot(r2) getsockname$unix(r2, &(0x7f00000001c0)=@abs, &(0x7f0000000200)=0x8) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000b80)="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", 0x5a1}], 0x1) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x400004) getsockname(r3, &(0x7f00000005c0)=@un=@file={0x0, ""/108}, &(0x7f0000000640)=0x6e) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000000) r5 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) fchroot(r5) connect$unix(r5, &(0x7f0000000180)=@abs={0x1, 0x0, 0x2}, 0x8) sendto$inet6(r4, &(0x7f0000000080)="62902520bcda8bd388c04c824712a5b69d15e967713e68cd13b95c167052c30a036f234ba043948b8a708fca8485808c1cd2a65de14c74aac30a619f79df171539c50c3588cba487115de225bac780ef49fa3d606a6789ea197318e26562d2df5ed9737f317a200aea72a9d9f0662d1aebc86a36736637f1074aa27876da0d1c3b11ed16eec889aa52d75a9beedbb81521f044392677a3066f25c4b8fc0e0aeaf2ddbc587be9d13868385d1c56526e4f6b8fb68e0154a86d1c73c66bcc9d136ccdec9f5cc31a1bc362713fa513", 0xcd, 0x2, 0x0, 0x0) 14:52:32 executing program 0: mprotect(&(0x7f0000795000/0xf000)=nil, 0xf000, 0x5) r0 = socket(0x2, 0x20000003, 0x0) getsockname(r0, &(0x7f0000000040)=@in, &(0x7f0000000000)=0xc) 14:52:32 executing program 4: mknod(&(0x7f0000000000)='./bus\x00', 0x8000, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000080)='./file0\x00') r0 = semget$private(0x0, 0x7, 0x0) semop(r0, &(0x7f0000000180), 0x0) chmod(&(0x7f0000000040)='./bus\x00', 0xe0) r1 = getegid() setregid(r1, 0x0) r2 = getegid() setregid(r2, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)) r4 = semget$private(0x0, 0x7, 0x0) fchdir(0xffffffffffffffff) getpeername(0xffffffffffffffff, &(0x7f00000001c0)=@in, &(0x7f0000000440)=0xc) r5 = semget$private(0x0, 0x7, 0x0) semop(r5, &(0x7f0000000180), 0x0) semop(r5, &(0x7f0000000180), 0x0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000300)={{0x4, r3, r1, 0x0, r2, 0x14, 0x9}, 0xfffffffffffffffe, 0xb4e, 0x9}) 14:52:32 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='/', 0x0, 0x0) fchdir(r0) readlink(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)=""/221, 0xdd) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x0, 0x1) r1 = socket$inet(0x2, 0x54ebefe30a0d67ff, 0xfe) faccessat(r0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x200) r2 = open(&(0x7f00000009c0)='.\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0/file0\x00', 0x1, 0x21) fchroot(r2) faccessat(r2, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x100) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000040)="eaff125c00000000", 0x8) r3 = socket(0x1f, 0x3, 0x6) setsockopt$sock_timeval(r3, 0xffff, 0x1006, &(0x7f0000000040), 0x10) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000040)="eaff120000000000", 0x8) 14:52:32 executing program 3: r0 = socket(0x1f, 0x5, 0x2) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x843) [ 59.5560304] panic: ASan: Unauthorized Access In 0xffffffff816c76c9: Addr 0xffffbc80137932d8 [8 bytes, read, PoolUseAfterFree] [ 59.5660466] cpu1: Begin traceback... [ 59.5861088] vpanic() at netbsd:vpanic+0x22e [ 59.6061669] snprintf() at netbsd:snprintf [ 59.6362531] kasan_report() at netbsd:kasan_report+0x9c [ 59.6663423] __asan_load8() at netbsd:__asan_load8+0x294 [ 59.6964285] mutex_oncpu() at netbsd:mutex_oncpu+0x38 [ 59.7164831] mutex_enter() at netbsd:mutex_enter+0x1a1 [ 59.7465738] lwp_exit() at netbsd:lwp_exit+0x32e [ 59.7766611] lwp_userret() at netbsd:lwp_userret+0x1f5 [ 59.8067480] syscall() at netbsd:syscall+0x85e [ 59.8167779] --- syscall (number 4) --- [ 59.8268048] 7d37114ade7a: [ 59.8268048] cpu1: End traceback... [ 59.8368335] fatal breakpoint trap in supervisor mode [ 59.8368335] trap type 1 code 0 rip 0xffffffff802209c5 cs 0x8 rflags 0x246 cr2 0x7f0829c00000 ilevel 0 rsp 0xffffbc818c35fb90 [ 59.8468613] curlwp 0xffffbc801381e980 pid 1574.1577 lowest kstack 0xffffbc818c3582c0 Stopped in pid 1574.1577 (syz-executor.5) at netbsd:breakpoint+0x5: leave ? breakpoint() at netbsd:breakpoint+0x5 db_panic() at netbsd:db_panic+0xe9 vpanic() at netbsd:vpanic+0x22e snprintf() at netbsd:snprintf kasan_report() at netbsd:kasan_report+0x9c __asan_load8() at netbsd:__asan_load8+0x294 mutex_oncpu() at netbsd:mutex_oncpu+0x38 mutex_enter() at netbsd:mutex_enter+0x1a1 lwp_exit() at netbsd:lwp_exit+0x32e lwp_userret() at netbsd:lwp_userret+0x1f5 syscall() at netbsd:syscall+0x85e --- syscall (number 4) --- 7d37114ade7a: ds e980 es 9fb0 fs fb70 gs 9156 rdi ffffffff82bdf240 db_onpanic rsi 1ffffffff057be48 rbp ffffbc818c35fb90 rbx ffffbc816e699000 rdx 3ffff rcx ffffbc81844b8000 rax ffffbc80148ecdc0 r8 4 r9 1ffffffff057be48 r10 ffffffff82bdf243 db_onpanic+0x3 r11 10 r12 ffffbc816e6aa000 r13 ffffffff82444490 ostype+0x70890 r14 ffffbc818c35fc20 r15 ffffbc816e699060 rip ffffffff802209c5 breakpoint+0x5 cs 8 rflags 246 rsp ffffbc818c35fb90 ss 10 netbsd:breakpoint+0x5: leave PID LID S CPU FLAGS STRUCT LWP * NAME WAIT 1604 1604 2 0 0 ffffbc801385b6c0 syz-executor.4 2206 1576 2 0 0 ffffbc8014adf2c0 syz-executor.1 2206 1983 2 0 0 ffffbc8013793b40 syz-executor.1 2206 >2206 7 0 0 ffffbc8012ceb900 syz-executor.1 1574 1573 2 1 100000 ffffbc80137c9480 syz-executor.5 1574 >1577 7 1 100000 ffffbc801381e980 syz-executor.5 1574 1574 2 1 10000040 ffffbc8014aeb740 syz-executor.5 1612 1593 2 1 0 ffffbc8012da3a80 syz-executor.0 1612 1612 2 0 10000000 ffffbc8012d2c5c0 syz-executor.0 1623 1564 3 0 80 ffffbc801381e540 syz-executor.2 parked 1623 1623 2 0 10000000 ffffbc8012a74b00 syz-executor.2 1618 1618 3 0 40080 ffffbc8012ca12c0 syz-executor.5 parked 1505 1505 3 1 80 ffffbc8012c1d180 syz-executor.2 parked 1598 1598 3 0 80 ffffbc8012b98040 syz-executor.4 parked 1663 1663 3 1 80 ffffbc80149ae600 syz-executor.4 parked 1341 1341 3 1 80 ffffbc8012d07980 syz-executor.1 parked 1109 1109 3 0 80 ffffbc8012d07540 syz-executor.1 parked 220 220 3 0 80 ffffbc8012b1b740 syz-executor.3 parked 705 705 3 0 80 ffffbc8014a1e200 syz-executor.3 parked 376 376 3 0 80 ffffbc8012a0da80 syz-executor.3 parked 834 834 3 0 80 ffffbc8012a0d200 syz-executor.3 parked 1247 1247 2 1 40 ffffbc8014928140 syz-executor.5 729 729 2 0 40 ffffbc80148af980 syz-executor.3 689 689 2 1 40 ffffbc80148af100 syz-executor.2 563 563 2 0 40 ffffbc8014884500 syz-executor.4 1335 1335 2 0 40 ffffbc80148840c0 syz-executor.1 694 694 2 1 40 ffffbc8012741700 syz-executor.0 709 698 3 1 80 ffffbc80148af540 syz-fuzzer parked 709 693 3 0 c0 ffffbc8014884940 syz-fuzzer parked 709 692 3 1 c0 ffffbc8013869b40 syz-fuzzer parked 709 572 3 1 c0 ffffbc80147cc4c0 syz-fuzzer parked 709 683 3 0 80 ffffbc80147cc080 syz-fuzzer parked 709 688 3 0 80 ffffbc801406a8c0 syz-fuzzer parked 709 723 3 1 80 ffffbc801406a480 syz-fuzzer parked 709 685 3 1 80 ffffbc8012c88680 syz-fuzzer parked 709 686 3 1 c0 ffffbc80136e8ac0 syz-fuzzer kqueue 709 724 3 1 c0 ffffbc80136e8680 syz-fuzzer parked 709 684 3 0 80 ffffbc8013848a80 syz-fuzzer parked 709 709 3 0 80 ffffbc8013876300 syz-fuzzer parked 867 867 3 0 80 ffffbc8013869700 sshd select 1183 1183 3 0 80 ffffbc801383c600 getty nanoslp 719 719 3 0 80 ffffbc801383c1c0 getty nanoslp 1374 1374 3 1 80 ffffbc8013833a00 getty nanoslp 1373 1373 3 1 c0 ffffbc80138335c0 getty ttyraw 894 894 3 0 80 ffffbc80136e8240 cron nanoslp 1184 1184 3 0 80 ffffbc80137a3b80 inetd kqueue 584 584 3 0 80 ffffbc8012d179c0 sshd select 602 602 3 1 80 ffffbc8012c1d5c0 powerd kqueue 459 459 3 1 80 ffffbc8013793700 syslogd kqueue 303 303 3 0 80 ffffbc8012cc7780 dhcpcd kqueue 333 333 3 0 80 ffffbc8012be30c0 dhcpcd kqueue 1 1 3 0 80 ffffbc8012932100 init wait 0 590 3 0 200 ffffbc801297c9c0 physiod physiod 0 123 3 0 200 ffffbc801298aa00 pooldrain pooldrain 0 122 3 0 240 ffffbc801298a5c0 ioflush biolock 0 121 3 1 200 ffffbc801298a180 pgdaemon pgdaemon 0 118 3 1 200 ffffbc801297c140 usb0 usbevt 0 117 3 1 200 ffffbc8012932980 usbtask-dr usbtsk 0 116 3 1 200 ffffbc800fe5cac0 usbtask-hc usbtsk 0 115 3 1 200 ffffbc8012932540 npfgc-0 npfgccv 0 114 3 1 200 ffffbc8012923940 rt_free rt_free 0 113 3 1 200 ffffbc8012923500 unpgc unpgc 0 112 3 0 200 ffffbc80129230c0 key_timehandler key_timehandler 0 111 3 1 200 ffffbc8012919900 icmp6_wqinput/1 icmp6_wqinput 0 110 3 0 200 ffffbc80129194c0 icmp6_wqinput/0 icmp6_wqinput 0 109 3 0 200 ffffbc8012919080 nd6_timer nd6_timer 0 108 3 1 200 ffffbc80127698c0 carp6_wqinput/1 carp6_wqinput 0 107 3 0 200 ffffbc8012769480 carp6_wqinput/0 carp6_wqinput 0 106 3 1 200 ffffbc8012769040 carp_wqinput/1 carp_wqinput 0 105 3 0 200 ffffbc8012758bc0 carp_wqinput/0 carp_wqinput 0 104 3 1 200 ffffbc8012758780 icmp_wqinput/1 icmp_wqinput 0 103 3 0 200 ffffbc8012758340 icmp_wqinput/0 icmp_wqinput 0 102 3 0 200 ffffbc8012744b80 rt_timer rt_timer 0 101 3 0 200 ffffbc8012744740 vmem_rehash vmem_rehash 0 100 3 0 200 ffffbc8012741b40 entbutler entropy 0 27 3 0 200 ffffbc800fe5c680 scsibus0 sccomp 0 26 3 0 200 ffffbc800fe5c240 pms0 pmsreset 0 25 3 1 200 ffffbc800fd9da80 xcall/1 xcall 0 24 1 1 200 ffffbc800fd9d640 softser/1 0 23 1 1 200 ffffbc800fd9d200 softclk/1 0 22 1 1 200 ffffbc800fd9ba40 softbio/1 0 21 1 1 200 ffffbc800fd9b600 softnet/1 0 20 1 1 201 ffffbc800fd9b1c0 idle/1 0 19 3 0 200 ffffbc800e80aa00 lnxpwrwq lnxpwrwq 0 18 3 0 200 ffffbc800e80a5c0 lnxlngwq lnxlngwq 0 17 3 0 200 ffffbc800e80a180 lnxsyswq lnxsyswq 0 16 3 0 200 ffffbc800e8049c0 lnxrcugc lnxrcugc 0 15 3 0 200 ffffbc800e804580 sysmon smtaskq 0 14 3 0 200 ffffbc800e804140 pmfsuspend pmfsuspend 0 13 3 0 200 ffffbc800e7ff980 pmfevent pmfevent 0 12 3 0 200 ffffbc800e7ff540 sopendfree sopendfr 0 11 3 0 200 ffffbc800e7ff100 iflnkst iflnkst 0 10 3 0 200 ffffbc800e7f3940 nfssilly nfssilly 0 9 3 0 200 ffffbc800e7f3500 vdrain vdrain 0 8 3 1 200 ffffbc800e7f30c0 modunload mod_unld 0 7 3 0 200 ffffbc800e7e5900 xcall/0 xcall 0 6 1 0 200 ffffbc800e7e54c0 softser/0 0 5 1 0 200 ffffbc800e7e5080 softclk/0 0 4 1 0 200 ffffbc800e7e38c0 softbio/0 0 3 1 0 200 ffffbc800e7e3480 softnet/0 0 2 1 0 201 ffffbc800e7e3040 idle/0 0 0 3 0 200 ffffffff82caa080 swapper uvm [Locks tracked through LWPs] ****** LWP 1574.1577 (syz-executor.5) @ 0xffffbc801381e980, l_stat=7 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at fork1) lock address : 0xffffbc8014531ac0 type : sleep/adaptive initialized : 0xffffffff816afb4a shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 1 last held: 1 relevant lwp : 0xffffbc801381e980 last held: 000000000000000000 last locked : 0xffffffff816c031f unlocked*: 0xffffffff81688743 owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 1612.1612 (syz-executor.0) @ 0xffffbc8012d2c5c0, l_stat=2 *** Locks held: none *** Locks wanted: * Lock 0 (initialized at pmap_ctor) lock address : 0xffffbc8012c92180 type : sleep/adaptive initialized : 0xffffffff8086bc67 shared holds : 0 exclusive: 0 shares wanted: 0 exclusive: 1 relevant cpu : 0 last held: 0 relevant lwp : 0xffffbc8012d2c5c0 last held: 000000000000000000 last locked : 0xffffffff8086d812 unlocked*: 0xffffffff8086dfed owner field : 000000000000000000 wait/spin: 0/0 Turnstile: no active turnstile for this lock. ****** LWP 729.729 (syz-executor.3) @ 0xffffbc80148af980, l_stat=2 *** Locks held: * Lock 0 (initialized at vcache_alloc) lock address : 0xffffbc80129a7700 type : sleep/adaptive initialized : 0xffffffff818162a3 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffbc80148af980 last held: 0xffffbc80148af980 last locked* : 0xffffffff81844b3e unlocked : 0xffffffff81844ba0 owner/count : 0xffffbc80148af980 flags : 0x0000000000000004 Turnstile: no active turnstile for this lock. * Lock 1 (initialized at vcache_alloc) lock address : 0xffffbc8013899c80 type : sleep/adaptive initialized : 0xffffffff818162a3 shared holds : 0 exclusive: 1 shares wanted: 0 exclusive: 0 relevant cpu : 0 last held: 0 relevant lwp : 0xffffbc80148af980 last held: 0xffffbc80148af980 last locked* : 0xffffffff81844b3e unlocked : 0xffffffff81844ba0 [ 59.8568896] Skipping crash dump on recursive panic [ 59.8568896] panic: ASan: Unauthorized Access In 0xffffffff816e6a50: Addr 0xffffbc8013899c80 [8 bytes, read, PoolUseAfterFree] [ 59.8568896] cpu1: Begin traceback... [ 59.8568896] vpanic() at netbsd:vpanic+0x22e [ 59.8568896] snprintf() at netbsd:snprintf [ 59.8568896] kasan_report() at netbsd:kasan_report+0x9c [ 59.8568896] __asan_load8() at netbsd:__asan_load8+0x294 [ 59.8568896] rw_dump() at netbsd:rw_dump+0x20 [ 59.8568896] lockdebug_dump() at netbsd:lockdebug_dump+0x207 [ 59.8568896] lockdebug_show_one() at netbsd:lockdebug_show_one+0xb7 [ 59.8568896] lockdebug_show_all_locks() at netbsd:lockdebug_show_all_locks+0x26b [ 59.8568896] db_command() at netbsd:db_command+0x2ad [ 59.8568896] db_command_loop() at netbsd:db_command_loop+0x26c [ 59.8568896] db_trap() at netbsd:db_trap+0x206 [ 59.8568896] kdb_trap() at netbsd:kdb_trap+0x1ce [ 59.8568896] trap() at netbsd:trap+0x57e [ 59.8568896] --- trap (number 1) --- [ 59.8568896] breakpoint() at netbsd:breakpoint+0x5 [ 59.8568896] db_panic() at netbsd:db_panic+0xe9 [ 59.8568896] vpanic() at netbsd:vpanic+0x22e [ 59.8568896] snprintf() at netbsd:snprintf [ 59.8568896] kasan_report() at netbsd:kasan_report+0x9c [ 59.8568896] __asan_load8() at netbsd:__asan_load8+0x294 [ 59.8568896] mutex_oncpu() at netbsd:mutex_oncpu+0x38 [ 59.8568896] mutex_enter() at netbsd:mutex_enter+0x1a1 [ 59.8568896] lwp_exit() at netbsd:lwp_exit+0x32e [ 59.8568896] lwp_userret() at netbsd:lwp_userret+0x1f5 [ 59.8568896] syscall() at netbsd:syscall+0x85e [ 59.8568896] --- syscall (number 4) --- [ 59.8568896] 7d37114ade7a: [ 59.8568896] cpu1: End traceback... [ 59.8568896] fatal breakpoint trap in supervisor mode [ 59.8568896] trap type 1 code 0 rip 0xffffffff802209c5 cs 0x8 rflags 0x246 cr2 0x7f0829c00000 ilevel 0x8 rsp 0xffffbc818c35f130 [ 59.8568896] curlwp 0xffffbc801381e980 pid 1574.1577 lowest kstack 0xffffbc818c3582c0 Stopped in pid 1574.1577 (syz-executor.5) at netbsd:breakpoint+0x5: leave