last executing test programs: 24.861937125s ago: executing program 7 (id=125): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x13) ioctl$TIOCFLUSH(r1, 0x80047476, &(0x7f0000000000)=0xfffffffe) (async, rerun: 64) bind(r1, &(0x7f0000000200)=@in={0x2, 0x2}, 0xc) (async, rerun: 64) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) setuid(0xee01) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000003c0)="674b187b94eeaeef53833af0f10500000017f981aa6a78ef1d35597f9eb7e649fdea5571ae000000368847d20000000000", 0x31}], 0x1) (async, rerun: 64) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x18, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000040)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x20, 0x2}, 0x6) (async) open$dir(&(0x7f0000000380)='./file0\x00', 0x20000, 0x103) (async) truncate(&(0x7f00000003c0)='./file0\x00', 0x2) (async) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000440)=0xc) (async) setrlimit(0x0, &(0x7f0000000100)={0x7, 0x45af}) (async) ftruncate(r0, 0x40000000007) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="00f4fb673611e6f969b248acbe373f5929be849a9a7f35b595a3d32bffe74570f20e", 0x22}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f0000000280)="270aaf730a4e542e7c8dd4984b4e428350d335880ae3ea73bd98f7087f6b56b982edd670ae699797b7c83639c24ed89cc7bc2400a59f437ea03b52993f46eb8a07f32ca7009589f9da42df5e9d4555e713f0ac7c2263ebca5a81ba89ca188089d2ffb7b6439eb3c0f1c0069685915187567f55aabc5c7deed5597801c573857db77c713471e5ce0c6c2dbdd4249530ee542da0681ccd04eb3071aeb39952d9db67a99d5d7685060233edc2ee16549b8e64f51701059fff6e2bf58fb706", 0xbd}], 0x3, 0x20000000000000) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) r3 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x0) write(r3, 0x0, 0x0) (async) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00', 0x8000000000000001, &(0x7f0000000180)='./file0\x00', 0x8}) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0) 24.804288671s ago: executing program 7 (id=126): r0 = open(&(0x7f0000000240)='./file0\x00', 0x18289, 0x154) (async) acct(&(0x7f0000000080)='./file0\x00') r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) (async) syz_emit_ethernet(0x15b, &(0x7f0000000240)=ANY=[@ANYBLOB="8f6f77ede655aaaaaaaaaabb86dd605f6ad901253a003bcc3f0600000058132fa13a8be186e3fe8000000000000000000000000000aa04019078000000036594a33c00000009fe800000"]) (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) r3 = getppid() fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1, 0x1, 0x1, 0x5, r3}) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000180)=""/110, 0x6e}], 0x2) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000140)=[{0x4, 0xb8, 0x2f, 0x1}, {0x51, 0x11, 0x4, 0x8}, {0x6, 0xaa, 0x2, 0x44000008}]}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x45548) (async) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r4, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64=r2, @ANYRES16=r2, @ANYRES64, @ANYRESHEX=r2, @ANYRES64=r0, @ANYRES32=r2]) (async) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) (async) syz_emit_ethernet(0x105e, &(0x7f0000000780)={@random="e702f2ffef1f", @random="97b0ae1a006b", [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0x1028, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x9, 0x6, "00de00", 0x6, 0x1, 0x8, @rand_addr="26651f52e2840a3a68632730c0fc4357", @mcast1, [@dstopts={0x11, 0x1ea, '\x00', [@generic={0x57, 0xf53, "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"}]}, @routing={0x50, 0x0, 0x0, 0x5}], "cdc7d5f435179c8a3a2c30b63fae67cf8a5370c9ff870a9bff7e06613f148d95c9c8a454451e63dae9ce7126b5130fb4e1c3e21832e515326477ca06a0e8bbabfdf38dfc2e6660e36d9cb7101af879ae96ee100e71deed49ea8a28886533da262df047b4a9b7d02f78abc0501c467a88c312d39b559acac8dce47ce4246496e7503b3d21d328e9db2943ebe15f303f4e"}}}}}}}) (async) acct(0x0) 24.698109684s ago: executing program 7 (id=136): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/251, 0xfb}, {&(0x7f0000000480)=""/172, 0xac}], 0x2, 0x0}, 0x1840) (async) writev(r1, &(0x7f0000000400)=[{&(0x7f00000005c0)='dr', 0x2}], 0x1) write(r1, &(0x7f0000000600)="7cc97585253a5126a4ac0678c6d790b6c33b3e6e763c38371579343e19562401b7b74f0055ce1abc9e74072d11b74b65d267fefb275700f04cc1f8f490e5bb72db73bf3b59d1ae962bb0e2c9b3a30412087b7513d03b26bbcb131156c5b601d726737abaed6fc41250440030cd1135475f8fb9431d3b6ee9f988c84ccc22e7fdc124c69fc4f8337a514e971c8b2da6d4bb", 0x91) (async) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x164) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6099cea600282c03cb697a6500500000000000ff02a00e1acc9f8ca727298135b4afe0b60000000800000000000000000000000000000301fee6e43205e68d9f2d3d3ae9592567bdc6f4fe0bf84af31d2753c3cea4037f28d5ce650300e2f0fc1124ceff0a4955ffa3aad7a4b90dbf21914a00"/147]) (async) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x4}, 0x40b) (async) sendmmsg(r2, &(0x7f00000003c0)={0x0, 0x6}, 0x10, 0x4) 23.646180522s ago: executing program 7 (id=170): open(&(0x7f0000000080)='./file1\x00', 0x20, 0x131) (async) acct(&(0x7f0000000000)='./file1\x00') 23.645775788s ago: executing program 7 (id=171): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x10, 0x40000800) ioctl$WSDISPLAYIO_LSFONT(0xffffffffffffff9c, 0xc058574e, &(0x7f00000001c0)) r0 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000100)={0x7, 0x1, 0x4, 0x0, "6f9ddfd64646ca79e08ce663c2c6a8916f7c4510", 0x7fff, 0x3}) pread(r0, 0x0, 0x0, 0x1) write(r0, &(0x7f0000000280), 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x6, 0x0, 0x0, 0x0, 0x0, 0x90, 0x3ff}, 0x2, 0x10000, 0x0, 0x0, 0x1, 0x800000000000108, 0x1, 0x9}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3f}, 0x6, &(0x7f0000000240)="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", &(0x7f0000000100)=0xb115, 0x0, 0xfffffffffffffeff) r2 = socket(0x11, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f00000004c0)=0xfffffff0, 0x1) setgroups(0x0, 0x0) r3 = msgget(0x3, 0x280) msgctl$IPC_RMID(r3, 0x2000000) r4 = msgget(0x3, 0x280) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) msgrcv(r4, 0x0, 0x0, 0x3, 0x800) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setegid(r5) msgctl$IPC_STAT(r4, 0x2, 0x0) semget(0x0, 0x1, 0x281) setuid(0xee01) socket$inet(0x2, 0x4006, 0xfa) mprotect(&(0x7f00003dd000/0x3000)=nil, 0x3000, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) close(r6) socket(0x24, 0x2, 0x0) 23.645482246s ago: executing program 7 (id=172): mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) (async) r0 = open(&(0x7f0000000240)='./file0\x00', 0x2, 0x0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000140)={&(0x7f0000001400)='./file0\x00', 0x567, 0x0}) (async) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) write(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) setrlimit(0x2, &(0x7f0000000000)={0x60000000, 0x60000000}) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) unveil(0x0, &(0x7f0000000100)='r\x00') (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x104) (async) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 9.97455935s ago: executing program 5 (id=349): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fchmod(r0, 0x184) recvmmsg(r1, &(0x7f0000000040)={&(0x7f0000000580)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000180)=""/202, 0xca}], 0x1, 0x0}}, 0xffffffffffffff33, 0x40, 0x0) r2 = socket(0x18, 0x3, 0x0) setsockopt(r2, 0x1000000029, 0x32, &(0x7f00000001c0)="87", 0x1) sendmmsg(r2, &(0x7f0000000000)={0x0, 0x4009}, 0x10, 0x0) 9.863592833s ago: executing program 4 (id=358): r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) readv(r0, &(0x7f0000001440)=[{&(0x7f0000001640)=""/4101, 0x1005}], 0x100000000000018e) ioctl$TIOCEXCL(r0, 0x2000740d) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7f, 0x0, 0x0, 0x0, 0x0, 0x1ad, 0x7}, 0x85c, 0x1, 0x0, 0x0, 0x56b, 0xfffffffffffffffe, 0x1735, 0x8000004}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0x8020560a, &(0x7f00000002c0)={0x10, 0x40000005, [{&(0x7f0000360000/0x2000)=nil, &(0x7f0000fef000/0x4000)=nil, 0xe9c}, {&(0x7f00003d1000/0x3000)=nil, &(0x7f0000123000/0x13000)=nil, 0x3}, {&(0x7f0000778000/0x3000)=nil, &(0x7f000011c000/0x3000)=nil, 0x40008}, {&(0x7f00005bd000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x8}, {&(0x7f00006e2000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f0000328000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x8000000005}, {&(0x7f0000565000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x1000}, {&(0x7f00002bf000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f00000c0000/0x1000)=nil, 0x2}, {&(0x7f0000760000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x4}, {&(0x7f0000fec000/0x14000)=nil, &(0x7f0000142000/0x1000)=nil, 0xa}, {&(0x7f00003d9000/0x4000)=nil, &(0x7f00000d5000/0x1000)=nil, 0x1}, {&(0x7f0000374000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f000014c000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x87}, {&(0x7f0000622000/0x1000)=nil, &(0x7f00002f9000/0x4000)=nil, 0xfffffffffffffffb}, {&(0x7f0000548000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x6}], './file1\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000180)={0x806377, 0x80000006, 0x6, 0xff, "bb08b5590209ff0000d06900", 0x4, 0xdcd3}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='r\x00') getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x804, r1) r2 = socket(0x11, 0x3, 0x0) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x42) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) 9.235505539s ago: executing program 1 (id=379): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2010, r0, 0x0) accept$inet6(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async) r2 = accept$inet6(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) getsockopt(r2, 0xd, 0x9, &(0x7f0000000200)=""/226, &(0x7f0000000300)=0xe2) (async) getsockopt(r2, 0xd, 0x9, &(0x7f0000000200)=""/226, &(0x7f0000000300)=0xe2) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x2, 0x9, 0x4}) socket(0x800000018, 0x2, 0x0) (async) r4 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1000, &(0x7f0000000100)=0x7, 0x4) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) close(r3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 7.897482604s ago: executing program 32 (id=172): mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) (async) r0 = open(&(0x7f0000000240)='./file0\x00', 0x2, 0x0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000140)={&(0x7f0000001400)='./file0\x00', 0x567, 0x0}) (async) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) write(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) setrlimit(0x2, &(0x7f0000000000)={0x60000000, 0x60000000}) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) unveil(0x0, &(0x7f0000000100)='r\x00') (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x104) (async) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 7.204743019s ago: executing program 3 (id=386): sysctl$hw(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="91e1b090a1c2d53b959358eb2fef65671a90b33fab453d75d83a11e732d1481985718f287a1398af775595a82409bd55e76a3433932aae725209594d5279c3fe42178c9a09cb44a84b1bae8d4d7dc356b78953f45e18f6", 0x57) 6.736869026s ago: executing program 1 (id=387): r0 = accept(0xffffffffffffff9c, &(0x7f00000000c0)=@in6, &(0x7f0000000100)=0xc) (async, rerun: 64) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x8, 0x0) (rerun: 64) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x200000000000012c, &(0x7f0000000080)=[{0x8, 0x7f, 0x40, 0x10000}, {0x0, 0xe4, 0x80, 0xc}]}) (async) madvise(&(0x7f00001dd000/0x3000)=nil, 0x3000, 0x7ba3fb050ef7b4a4) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="a7a6d61de4a10909926243003b47915d8156c41f1b4f0919d7aacdfaffffffffffffff46c0fbde0346df012e786031d4b86fc1f36e5250f6d2b982fd3883a8b58c1af70800000000000000b5fe1448533302cf7069ee14085a11c77d5527f600", &(0x7f0000000000)=0x60, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async) bind(r0, &(0x7f00000001c0)=@un=@abs={0x0, 0x0, 0x0}, 0x8) write(r1, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) 6.73614495s ago: executing program 3 (id=388): getrlimit(0xc, &(0x7f0000000040)) 6.734868733s ago: executing program 4 (id=389): r0 = syz_open_pts() r1 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x40) ioctl$TIOCSFLAGS(r1, 0x8004745c, &(0x7f0000000180)=0x9) r2 = socket(0x18, 0xc003, 0x3a) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000100)) setsockopt(r2, 0x29, 0xe, &(0x7f0000000080), 0x0) r3 = getpid() fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x1000300000000, r3}) flock(r0, 0x1) r4 = msgget$private(0x0, 0xc00) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000000000)=""/190) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x15}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, "0100dd2d018000000000005e00", 0x1}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x8, 0x5) flock(r0, 0x2) syz_open_pts() mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="cc1cc3b5d8384e8676", 0x9}, {&(0x7f00000003c0)="e00e988b9846b36fdeb19b22af2ef546e20515e5a89308f15e01951873f2052f70e501ae036e4f4f5e5a2fbdbc156469deb6af6bd81cd395126ea30160973867ee242ad899268901aa11fe8d7ec50a4e17f6d9652c0eee132688123934d82f91d3a4e6f150586adba86aa5", 0x6b}], 0x2) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) r5 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1, 0x101) r6 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d3725864749b) ioctl$BIOCSETIF(r6, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) ioctl$BIOCSETIF(r6, 0x40384900, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r6, 0x801c4903, &(0x7f00000000c0)={0x3, '.\x00'}) ioctl$TIOCDRAIN(r6, 0x2000745e) ioctl$FIONREAD(r5, 0xc0106978, &(0x7f0000000140)) syz_open_pts() 6.731936845s ago: executing program 5 (id=390): writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) sysctl$net_inet_tcp(&(0x7f0000000000)={0x7, 0x2, 0x2, 0xe}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) syz_emit_ethernet(0x138, &(0x7f0000000040)=ANY=[]) r0 = socket(0x2, 0x4001, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x9}, 0x2, &(0x7f00000002c0)="284f8762", &(0x7f0000000240)=0x4, &(0x7f0000000280)="84951277", 0x4) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x9af, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) semop(0x0, &(0x7f00000000c0)=[{0x3, 0x1}, {0x4, 0x2ff}], 0x2) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) r1 = semget(0x0, 0x1, 0x281) r2 = getgid() getgroups(0x7, &(0x7f0000000340)=[0x0, 0x0, 0xffffffffffffffff, 0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff]) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000001440)={{0x3, 0x0, r2, 0x0, r3, 0x80, 0xfffd}, 0x23d, 0x6, 0x2}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x43f79b51, 0x0, r2, 0xffffffffffffffff, 0x0, 0xa, 0x2}, 0x0, 0x3, 0x3}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x1, 0x0) close(r4) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) setsockopt(r5, 0x1000000029, 0x32, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) connect$unix(r0, &(0x7f0000000000), 0x10) 6.113145423s ago: executing program 1 (id=392): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000002c0)="ed", 0x1) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000540)=""/185, 0xb9}], 0x1, 0x0}}, 0x10, 0x1040, 0x0) read(r1, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) shutdown(r1, 0x2) r2 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfe) connect(r2, &(0x7f0000000000)=@un=@file={0x1, './file0\x00'}, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000004, 0xfd6, 0x80000001, 0x7, 0x17ffe, 0x10, [{0x0, 0x9, 0x4, 0xa24}, {0xc5c, 0xb, 0x4, 0xfffffff9}, {0x800008, 0x8, 0x200, 0x9}, {0x7ffffffd, 0x80000800, 0xba2, 0x1}, {0x3fe, 0x20007ff, 0x6, 0x4d8a}, {0x3, 0x101, 0x3, 0xb4}, {0x800000c, 0xd173, 0x81e8, 0xa}, {0x100004, 0x836, 0x6, 0x6}, {0x3165, 0x87e, 0x5, 0x9}, {0x1000002, 0x2, 0xd1b, 0x2}, {0x1c5, 0x5, 0x4, 0x41ac8391}, {0x100003, 0x6, 0x20004, 0x4000000c}, {0xb8d, 0x7, 0x6de, 0x1}, {0x69a71720, 0xffffdffa, 0x8, 0x7}, {0x2137, 0x4ecf, 0xfffffff9, 0x100}, {0xfffffffe, 0x8, 0x40004, 0xc}]}) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) close(r0) 6.111994533s ago: executing program 3 (id=394): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xd5, 0x0, 0x8, 0x100200000, 0x3, 0x8, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x8000000000000000], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x6, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x8], [0x100000001, 0x8000, 0x3ffffffe, 0x0, 0xb, 0x11004, 0xffffffff00000001], [0x1, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0x8, 0x22, 0xeb, 0xffffffbffffffff9}, {0x4, 0x4, 0xfffffffe, 0x80}, {0x2, 0xd, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x207f, 0xb}, {0x0, 0x9, 0xe7, 0x2000000000000002}, {0x7f, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0xfbfe, 0x9, 0x6d5, 0x4}}}) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xd5, 0x0, 0x8, 0x100200000, 0x3, 0x8, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x8000000000000000], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x6, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x8], [0x100000001, 0x8000, 0x3ffffffe, 0x0, 0xb, 0x11004, 0xffffffff00000001], [0x1, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0x8, 0x22, 0xeb, 0xffffffbffffffff9}, {0x4, 0x4, 0xfffffffe, 0x80}, {0x2, 0xd, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x207f, 0xb}, {0x0, 0x9, 0xe7, 0x2000000000000002}, {0x7f, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0xfbfe, 0x9, 0x6d5, 0x4}}}) r0 = socket(0x2, 0x3, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) r2 = dup(r1) setsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000080)="fd0cc085", 0x4) (async) setsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000080)="fd0cc085", 0x4) sendmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) pread(r2, &(0x7f0000000340)="f9dd4fc19be1cfe4c0c38c2f28fd189b483280209dc8b2eacda5403e1b052f85c2f8bc9cda99077d5f5a85848f1df16ac1c7c16c7b069705423b2b2b61a316d5e9d2e5aa62034256ecdd424c71fc8bb4731b8052cd3dabbd8c9fe83d1774d176d0773722fdba8cf6762bb14dde1a3a57198704e247e7071466c01a", 0x7b, 0xffffffffffffffff) r3 = socket(0x2, 0x400000000002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r3, 0x8000004, 0x2, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) poll(0x0, 0x0, 0xffffffff) execve(0x0, 0x0, 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) close(r4) (async) close(r4) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) (async) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r6 = fcntl$dupfd(r5, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r6, 0x800474c4, &(0x7f0000000180)) (async) ioctl$FIONREAD(r6, 0x800474c4, &(0x7f0000000180)) pread(r6, &(0x7f0000000080)=':', 0x1, 0x81) (async) pread(r6, &(0x7f0000000080)=':', 0x1, 0x81) 6.111673419s ago: executing program 5 (id=395): sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x2, &(0x7f0000000100)="db", &(0x7f0000000140)=0x1, 0x0, 0x0) 5.864838608s ago: executing program 5 (id=398): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r0 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$FIOASYNC(r1, 0x80047469, &(0x7f00000000c0)=0x5) readv(r2, &(0x7f0000000680)=[{&(0x7f0000000380)=""/227, 0xe3}], 0x28d) writev(r1, &(0x7f0000000140)=[{&(0x7f00000004c0)="33f57cbd9b7a3dce024abd0a4458ebe67b96abcc9815f01b7384118224bac83dd8e2f9bac9fcf5581b498f230fc2c56937691faa0a6fbc6ec7d970f3e70feb02fcbb032f1cd7719778b73a00610bbc2cda7a2357f162165a18ec7a8361d61e5f202c9c6839ada531b7f39a0c09140e3052f9116a0a4d3d422542a855d3257c406d5788afe863c7854a8c4906fe9008dcaf7540ee", 0x94}, {&(0x7f00000001c0)="4ac86e07b6f5cf353ce773366d0d1462532e49bb326d1951a16fadedf93ecbca2089c60264be4f5368f05fb89ffcee8bcc1f30c0cd028f53323eed00", 0x3c}, {&(0x7f00000002c0)="8072f965e5368d8a2ce261ea12ce28665881a3c9", 0x14}], 0x3) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2010, r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) execve(0x0, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0xc018696c, 0x0) r5 = kqueue() kevent(r5, 0x0, 0x2, 0x0, 0x2, &(0x7f00000000c0)={0x1, 0x3ff}) sysctl$hw(&(0x7f00000000c0)={0x6, 0xe}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000002c0), &(0x7f0000000080)=0x1a, 0x0, 0x0) kevent(r5, 0x0, 0x3ff, 0x0, 0x80007fd, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x2000, 0x81) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r6 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r6, 0x80206979, &(0x7f0000000100)) fcntl$setstatus(r4, 0x4, 0x40) 4.405442574s ago: executing program 0 (id=404): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0xc0) poll(&(0x7f0000000040)=[{r1, 0x4}], 0x1, 0xffffffff) close(r0) setitimer(0x0, &(0x7f0000000000)={{0x401, 0x3fc}, {0x1, 0xc0000}}, 0x0) setitimer(0x1, &(0x7f00000000c0)={{0xc, 0x6}, {0x1000000, 0xffffffffffffff81}}, &(0x7f0000000100)) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000080)="0300f30085b0013184ed895e117b8da028", 0x11) setsockopt(r2, 0x1000000000029, 0xb, &(0x7f0000000340)='\x00\"\x00\x00', 0x4) ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, &(0x7f0000000300)) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setrlimit(0x1, &(0x7f0000000340)={0xfffffffffffffffd, 0xfffffffffffffffd}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x110) write(r4, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) fchown(r4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) close(r4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000880)="50ef020000003ae42d25d4a389", 0xd}], 0x1) pwritev(r3, &(0x7f0000000400)=[{&(0x7f00000003c0)="f95df9d11cc57107afdb4f3639f3", 0xe}], 0x1, 0x4) setitimer(0x0, 0x0, &(0x7f0000000140)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mlockall(0x0) setitimer(0x1, &(0x7f0000000340)={{0x8, 0xfffffffffffffff9}, {0xffffffff00000000, 0x6}}, &(0x7f0000000380)) r5 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r5, 0x80146952, &(0x7f00000001c0)) setsockopt(r5, 0xc, 0x511, &(0x7f0000000200)="9dbdbbfd36ba2961c6023231b360ded61aa72417ddb3fe9a3d11bdda99419ec7971eab75df93d14ae44999985a553e0f2aef56cc752fb4cc30e3a0005ac97dc37a1c8f01703a5ac3f78c9b32464a188444bf9144bfb90f7d9fbaba8dbc237114211d2086301c592465", 0x69) ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f0000000180)={0x9, &(0x7f0000000280)=[{0x9, 0x3, 0x2, 0x4}, {0xdaf, 0x1, 0xf, 0x5}, {0x6, 0x1, 0x6}, {0xdae5, 0x7, 0x63}, {0x3, 0x6, 0x5, 0x7fff}, {0x7, 0x7, 0x1, 0x4}, {0x9, 0xc7, 0x8, 0x3}, {0xa0f, 0xc, 0x3b, 0xffffffff}, {0x80, 0x5, 0x1, 0x2}]}) fcntl$dupfd(r3, 0xa, r3) 4.356602693s ago: executing program 6 (id=408): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$WSDISPLAYIO_WSMOUSED(r0, 0x80185758, &(0x7f0000000040)={0xfffffffc, 0x2, {0x0, 0x8}}) socketpair(0x2, 0x4000, 0x2, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$WSDISPLAYIO_GETSCREENTYPE(r0, 0xc028575d, &(0x7f00000000c0)={0x41, 0x0, './file0\x00', 0x5dae, 0x9, 0x8, 0x10000}) r2 = socket$inet(0x2, 0x4, 0x3) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000100)="d37f68ac51d6b085ca801dbc36d4276be6ef766e44285c2e3503d75225f8468ef3a4aa441302ec26ba53437cb06c5bc698b51b5b4ce3177c1a5679f63505a006b9224d5ef969fd2e4c9da0292a5c55557fd6468932a1810ddc656d19be6a508471d3de870b16491a77f5dd54108128e6f4909ab0c1116cd16015c45e372880d3d346889883b4cb45f7e5d6c772b1c779f32d4ed6d374df4d214bfcd0a0e083599ffa46ad5d312626821eeca54ed9298c172f3e359248275cc9015242402b9436c9fa278563", 0xc5) r3 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) linkat(r3, &(0x7f0000000240)='./file0\x00', r5, &(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(r4, &(0x7f0000000300)='./file0\x00', 0x100) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$WSMUXIO_INJECTEVENT(r6, 0x80185760, &(0x7f0000000380)={0x4, 0xd112, {0x1, 0x4}}) r7 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000003c0), 0x10300, 0x0) r8 = openat$tty(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) ioctl$TIOCGETA(r8, 0x402c7413, &(0x7f0000000440)) socketpair(0x0, 0x5, 0x6, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$WSMUXIO_INJECTEVENT(r7, 0x80185760, &(0x7f00000004c0)={0x7, 0x719, {0xfffffffffffffffc, 0x7}}) ioctl$WSDISPLAYIO_SBURNER(r4, 0x800c5751, &(0x7f0000000500)={0x5, 0x2}) getpeername$inet6(r4, &(0x7f0000000540), &(0x7f0000000580)=0xc) setsockopt$inet_opts(r9, 0x0, 0x1, &(0x7f00000005c0)="d32b238fa58e9df7fce2992c017242118cd45944220531003d1ffa4ae13d06c3360a8739824c7eaf4b4d1f5e42cdc0f3bed60faba993a8e2aa00321cea727834acec23a986d38221e5783d953f8810a47966b045e11915d07cc0114dee7675e6444ec80063f04599a1c4c90fa62c418e161a33bffed4caf4499588e17734648d88da3b2c88a36c688e5eb173de13e1b6552631485ecaa2173891b0129dc294fc3998b5fec6511c1a1d9d60b1904332ed5f0d3aef3d5ae1210b61b7d37ecbdc14a69d725305a6846bc8202e43197ccd5dfb9afbffbf9851979823ef93f928c55e07901b85aa65ababcd7a325dfb4bb09767c2688dca02d63007", 0xf9) connect$inet6(r4, &(0x7f00000006c0)={0x18, 0x2, 0xffff, 0x9cd}, 0xc) ioctl$VT_GETMODE(r5, 0x40087603, &(0x7f0000000700)) bind$inet(r1, &(0x7f0000000740)={0x2, 0x2}, 0xc) symlinkat(&(0x7f0000000780)='./file0\x00', r4, &(0x7f00000007c0)='./file0\x00') ioctl$KDGETLED(r4, 0x40044b41, &(0x7f0000000800)=0x1) close(r9) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000840)) ioctl$TIOCOUTQ(r8, 0x40047473, &(0x7f0000000880)=0x3) setsockopt$inet_opts(r5, 0x0, 0x1, &(0x7f00000008c0)="26850051ff62b91da4e518bf70158571ad9fe2e4dc505cd582f24e69978351ada6bc4c5fcaf05484a1c14a937be06b222fab04c1cfdb7d03afa6936d5d5708125c02cd856e5d69ced16ee99420ae94606d88df83814b7eefe7ff53bf441dcac63bd52f7230c62d1852fe23a241b79c884eb874255b3f6fedc511fd63dffe6fdb777197def64920997b599c599511c74d33ba75bafa05dac9275d1b933d9720fe1d34962911df150b433781eac724ad1c6f6187432f6373833257ad0f1300432afae071300266f1b3770c217197c83317ffa7e1794e588e9fde85f8b230f58127628404bfd9", 0xe5) ioctl$FIONREAD(r7, 0x4004667f, &(0x7f00000009c0)) 4.356201606s ago: executing program 0 (id=409): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0xfffffff9, 0x8018, 0xb70, 0x501, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x40, 0x42890, 0x4, 0x71002}, {0x4, 0x9, 0x8, 0xfffffff9}, {0x188, 0xb88, 0xfffffffd, 0x9}, {0x6, 0x4000800, 0x8007, 0x7}, {0x8000, 0x3, 0x2800, 0xd7}, {0x1, 0x7a0, 0x3, 0x109a}, {0xce1, 0x3, 0x4f4, 0x6d}, {0x80000006, 0x803, 0x14, 0x8}, {0xb63, 0x82, 0x80005, 0xf}, {0x6a75, 0x8001, 0x1000, 0x2}, {0x1cc, 0x10001, 0xc, 0x1}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0xb, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x9}, {0x80000001, 0x80, 0x5, 0x10000000}, {0x0, 0x1, 0x6, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) open(&(0x7f00000001c0)='./file0\x00', 0x800, 0xd8) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = semget(0x0, 0x1, 0x281) semctl$GETALL(r1, 0x0, 0x6, &(0x7f0000000080)=""/126) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r2 = socket(0x18, 0x3, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r2, &(0x7f0000000080), &(0x7f0000000040)=0xc) r3 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000000)=0x1, 0x4) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) getsockname$unix(r3, 0x0, &(0x7f0000000100)) 4.355511405s ago: executing program 2 (id=410): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005136000009f050000002010000000000934ed0a0500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4d0800000000000000f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b671f4d335d223e7db3009b95665b00e32118", 0x62, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) writev(0xffffffffffffffff, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000180)="54fdf8a8aab818314eaa4d1686e9ba30c12b45ccfaaea31484c79c4d68e53245e61f54266c57eaefb47899dfd1b35b6999e63db16bcb98863525a0818e9c4a591d53d3301cee6c07edb79afa0b5405a1c5", 0x51}], 0x2) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r0, 0x8020699d, &(0x7f00000001c0)) munlock(&(0x7f0000076000/0x4000)=nil, 0x4000) r1 = socket(0x11, 0x3, 0x0) r2 = syz_open_pts() sendmsg(r0, &(0x7f0000000540)={&(0x7f00000003c0)=@in6={0x18, 0x2, 0x8}, 0xc, &(0x7f0000000500)=[{&(0x7f0000000400)="18ae8eaa394aa39489d4aa2f252fc4579788aa3d65b2178c706c4804d5d6b398ddb4726524c9294afa5c57f1709367f2802be83c423545fc79e5bd98292ed97188975f0239e76e14d5e87458acc0710b4cb7141b5694bccdf643101fed93547186ac3302c40ea73cec792dace4e3b88394038cdea3add6d7d9b63dd55d894210481e2eabf23b7b0f5fdb79422ba162daced1a37fb7d30003c2ece0adbb9aa462bbf6a872ddde29e086797202325ab5961640e658da909024e74cc6920bffc7d6f28b14e9b14be9d78f", 0xc9}], 0x1, &(0x7f00000006c0)=[{0x58, 0xffff, 0xff, "094eb6dac2d1e3bdd0c2f7435d1fe1fd66bc4f8df9050fc38b089e412030291a79aee5fb66339d9462a9b6568764e4481bc1e5e6586090e79639232c39e5573b257e01"}, {0x110, 0x1, 0x800, "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"}, {0x68, 0xffff, 0x2, "1c0ad0260733283d5e924aab9a93bfee354c92089264dd90c72f5f753968f5fdfa9d5724c5b19050530df511bc3c67bb0afc0e6d78cef1d70ff7d4e3b5f4295fa46c4530562c7c6f9586d182d24953f9a66002ceea23"}, {0x90, 0x1, 0xec5, "56c78a98bcec8d408066225565100409189e0d3fbbca7f1013688db6f163ae01b7fe2b98185985d4424cb5730b8fa3174752b1ad1b6b742e47ab38d3a20b6de5fd5cdfd0c65d4fea66202a01bdbbd17685fa1e5e0c60252079fcb8d9f88430cb2e127081de0f7fbe0fd715d4e1edc3bd27e300aa1380d77c16e7c2d1"}, {0x10, 0x1, 0x10}], 0x270}, 0x408) fcntl$lock(r2, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x40000000000000, 0x1000300000000}) fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x2, 0x0, 0x7ff, 0x100000001}) r3 = syz_open_pts() syz_open_pts() syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "36d2b5", 0x8, 0x3a, 0xf9, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@ndisc_rs}}}}}) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000100)="cc00e00e8e7d1c743325a65c54820ba3a8b0012ff3060e642abf9195a42e1833c469097d1f8db3d2fea8dd85420c109564c6803bf4071b5b18027e0883f66b636a9ccf2475ff0e082a058fa4", 0x4c}, {&(0x7f0000000180)="7a0ce3ac8d96c7fbe6c28b67513aa53f95cbb6a2f332ac0a7d385ccaa6e25f096bb5cf4ce4f99d79905af9fe4909ade44d74b55a979bddfdfe9a157c9b", 0x3d}, {&(0x7f00000001c0)="299b0b0c0288038d5f648827c3803c3e7b7fa88589322efd581694019d90b9852cefd8e7acc784ed969923d8cdf3b27be749504b8098957429f52c6b636c343cdb0da97ca5a6dc8ff9fc41af4c3501c341decc56c65c458eb65617941133718a4aa2eab0841decc7344eb86f0a7dab3a1ef182ea77311dbfda576e4fac78992d980294a1c4188370bf0d8cdabdf5b4ca14de67f4d5f6d2b977c1144fc9002322fcbcfe8d", 0xa4}, {&(0x7f0000000280)="f1c8c3730e3aa7254c099eb415dfa74f0c5b4d7190a639654a8c905dba87b862807336581ee21926809af92c64ea612e3c32ee95430d2a02819270689e0a755bdbc9ab121cf52851094e54ac805190645908cdaf9025ea305131271f9a1fde8a296bf708ef1687949b5840ec96e4e9fcf6f82cb2513963180a2037c30b28530b0ab47e784b4ce8d0c54012f680a4b21108e0d08799d1d2858b4e685445cfbd9c094d3f5b068939b58ed47a76eafea5fb510dee7c651b9c15117c62c394630da6b042f1ee83302b1ffafea7fb802fb6d66ec4f620af790ce6f9b90335422d5cbac7a35694d7", 0xe5}], 0x4) setsockopt$sock_int(r1, 0xffff, 0x200, &(0x7f00000000c0)=0x3, 0x4) 4.351103599s ago: executing program 6 (id=411): syz_emit_ethernet(0x86, &(0x7f0000000000)={@random="f3fb1e48f0f4", @local, [], {@ipv4={0x800, {{0xb, 0x4, 0x3, 0x5, 0x78, 0x6a, 0x81, 0x8, 0x2e, 0x0, @multicast1, @empty, {[@end, @lsrr={0x83, 0x17, 0xc, [@empty, @broadcast, @multicast1, @local={0xac, 0x14, 0x0}, @multicast1]}]}}, @tcp={{0x2, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x13, 0x1, 0x40, 0x0, 0xb1, {[@sack_perm={0x4, 0x2}, @generic={0x1, 0x10, "993737d4c8399d50b83861d02e8b"}, @sack={0x5, 0x26, [0x5, 0x651, 0x4, 0x3, 0x4, 0x6, 0x800, 0x101, 0x8]}]}}}}}}}) 4.095883072s ago: executing program 6 (id=412): syz_emit_ethernet(0x86, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800455c0078006600000001907800000001e00000010c010000476cfffc00000000084100f0e0000001000000e3ff0767e7907b2e830b04ac1400aa7f0000ee914be3af4347057e078f5a8201070f09000031f60f7c341700000000000000000002831710ffffffdfe0000002ffffffffac1400aa"]) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0xff) (async) r0 = getuid() chown(&(0x7f0000000040)='./file0\x00', r0, 0xffffffffffffffff) (async) r1 = getegid() chown(&(0x7f0000000080)='./file1\x00', r0, r1) (async) openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) (async) open(&(0x7f0000000240)='./file0\x00', 0x20, 0x7) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000100)=0xc) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async) r2 = syz_open_pts() close(r2) setrlimit(0x7, &(0x7f0000000180)={0x20000000, 0x7}) (async) r3 = syz_open_pts() (async) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x14}, 0x4, &(0x7f0000000400), &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) (async) r4 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000000)) (async) r5 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) setregid(0xffffffffffffffff, 0x0) 3.385474859s ago: executing program 0 (id=413): setitimer(0x1, &(0x7f00000007c0)={{0x100, 0x9}, {0x4, 0xc}}, &(0x7f0000000800)) (async) syz_emit_ethernet(0x227, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]) (async) r0 = open$dir(&(0x7f0000000280)='./file0/file0\x00', 0x80, 0x121) (async) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd605f6ad900703a2900000000000000000002000000800000fe8000000000000000000000000000aa040290780000000965a28eea932e2c00fe8000000000000000000000000000aa428d8a0aa07df960ae22721eb73d8b56"]) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="00001c00ac14", @ANYRES16=r0, @ANYRES8=r0]) (async) r1 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r1, 0x0, 0x0) (async) syz_emit_ethernet(0x138, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64) r2 = socket(0x2, 0x3, 0x0) bind(r2, &(0x7f0000000000), 0x10) (async) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$TIOCSETAF(0xffffffffffffff9c, 0x802c7416, &(0x7f0000000000)={0x6, 0x7, 0x5, 0x545, "22ef0600000000fda92be2f9000000007f007600", 0x7, 0x9}) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050400", 0x5, 0x400, 0x0, 0x0) (async) ioctl$DIOCMAP(r3, 0xc0106477, &(0x7f0000000180)={&(0x7f00000000c0)='./file0\x00', r0}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async, rerun: 64) r4 = socket(0x11, 0x3, 0x0) sendto$unix(r4, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x7, 0x1}, {0x0, 0x60}}, 0x2) (async, rerun: 64) r5 = socket(0x2, 0x1, 0x0) (async, rerun: 64) lstat(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)) recvmmsg(r5, &(0x7f0000000100)={0x0, 0xfffff907}, 0x10, 0x801, 0x0) mknod(&(0x7f00000002c0)='./bus\x00', 0x100000000205f, 0x800) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xb5219f1000b913f1, 0x0) open$dir(&(0x7f00000001c0)='./bus\x00', 0x80, 0x32) (async) close(r6) (async) close(r5) 3.383951715s ago: executing program 2 (id=414): r0 = socket$unix(0x1, 0x5, 0x0) (async) r1 = getpid() setpgid(r1, 0x0) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r1, 0x0, 0x0, 0xfffffffffffffffd, 0x4000, 0xffffffffffffffff}) (async, rerun: 32) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) (rerun: 32) ioctl$WSKBDIO_GETMAP(r2, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) (async) r3 = fcntl$getown(r2, 0x5) fcntl$setown(r0, 0x6, r3) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0xa) listen(r0, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) msgget$private(0x0, 0x400) (async) connect$unix(r4, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) wait4(r1, &(0x7f0000000140), 0x3, &(0x7f0000000340)) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x18, 0x1, 0x0) r6 = socket(0x18, 0x2, 0x0) setsockopt(r6, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) connect$unix(r5, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) r7 = socket$inet(0x18, 0x3, 0x102) sendmsg(r7, &(0x7f0000000280)={&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000d0100000000a4f800000000000000050000ff7f0000050000002fc2eb664139e20a22525bf08f8cbac6b3deb9902d5717bc4a932378d697ccfbb066e15f8592575c3e68d67cc4f68c818c40e4743f6885e8317bd2423727916a2b7bcc7f90b09dad30997e35d836f595eb6ea6822715173c0864f4b79e9fe0321d4fb3f45a91bc531ebfbf0fcaac852f5cd4dbb53275b212591071ea31c30242ec95c40eae916f8054ecc25dee564ab2e349a2be2f51c4982f307dad3353bb204f14ab2655a3b56749228c9dea758dce231b38a2acf9b645fda9668187089557d3202fae2d495fc31c"], 0x10}, 0x2) syz_emit_ethernet(0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816a00380630000300008effefffffff188e9c000000fe800000000000fffffffe00000000aa3d259c06b15a443aa1d72c0ce983"]) 3.376807338s ago: executing program 4 (id=415): setrlimit(0x8, &(0x7f0000000040)={0xa, 0x50}) pipe2(&(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) poll(&(0x7f0000001b40)=[{r1, 0x80}], 0x1, 0x7) write(r0, &(0x7f0000001e00)="977818", 0x3) sysctl$kern(&(0x7f0000000000)={0x1, 0x36}, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000000)={0xfffff236, 0x83, 0xd, 0xfffffffd, "23030803be0d0a00e2d8910bb864d3c3acc900", 0xe}) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000380)="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", 0x130}, {&(0x7f0000000200)="a55edb72db2a8618809684ed6e157f22ec14441e85a3183e3858c16751e98980717695cafcf59b3e5ea5a903f0166e6aa09bc89759f55e9e28b597d40419a45376c3a1f3fc4a7646a892ddd998e91fc1297f3ce971b14d27abb0d452976736ab670eb153efd2eb96c2c43b0af959d6d2bb3dc6fc25ded8dc54", 0x79}], 0x2) socket$unix(0x1, 0x2, 0x0) sysctl$vm_swapencrypt(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x58}, 0xc, 0x4, 0x0, 0x0, 0x40000040000005, 0x7, 0x8000000200, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x13, 0x0, 0x37) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./bus\x00', 0x8001, 0x0}) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x20000000000002, 0x7}) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x8) preadv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) sysctl$vm(&(0x7f0000000000)={0x2, 0x7}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0x1, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xffffffffffffffff, 0x0, 0x8, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffa, 0x20200001, 0x5e, 0x100000000007b98, 0x800, 0x9, 0x8, 0xfffffffffffffffe], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0x2, 0x90000000], [{0x0, 0x0, 0x0, 0x7d06}, {0x9, 0x22, 0x5}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x0, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x5, 0x0, 0x0, 0xb}, {0xe, 0x100, 0x1, 0xc}], {0x1, 0x8, 0x80000006, 0x3}, {0xfffe, 0x6, 0x6d5, 0x6}}}) 3.375552854s ago: executing program 6 (id=416): sysctl$kern(&(0x7f0000002f80)={0x1, 0xb}, 0x2, 0x0, 0x0, &(0x7f0000004000), 0x0) openat$wsdisplay(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)='N94', 0x3}], 0x1) r1 = openat$klog(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r2 = dup2(r1, r1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1000) r3 = socket(0x2, 0x3, 0x3a) poll(&(0x7f0000000100)=[{r3, 0x1eb}], 0x1, 0x101) close(r0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x6, 0x3c, 0x0, 0x6}, {0x4, 0xd, 0x2, 0x4000001}, {0x3c56, 0x9, 0x16, 0x40003}]}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x5b}) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000140)) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) r5 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r5, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r5}) close(r5) r6 = syz_open_pts() close(r6) setrlimit(0x8, &(0x7f0000000040)={0xa, 0x50}) r7 = syz_open_pts() close(r7) syz_open_pts() ioctl$TIOCSETAW(r7, 0x802c7415, &(0x7f0000000000)={0xfffff236, 0x83, 0xd, 0xfffffffd, "23030803be0d0a00e2d8910bb864d3c3acc900", 0xe}) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000380)="31e669649dc461af87807fe3305be3b4cfce563b7872130f6161861ab3ec851b08fa48597a1de298f441db6763aaf76284729804f2fdfc645df7b81648c4d84f4e0aa69a86087cdb4f78b7d3340a5f6b4c2ba2fd26b778f4703d57dddfd101de2f2ec2ef3be543644cd3cd77c251d34c23244fed9e68efcc26bc80996337c5809df8de285aaf54fa655ba4025ffe5844ba71bb722add1d1ce5cca108518cc0c3fcb61cde315592911b98ee9dc701b225169ccc0f8881d253befc4c33a170534f8163fd995a09ac41870ee9946af6f9b40e298329949648c25bd66f5f832456fcef21c03da26edad06db1c4b0d66bd69c0b809079f3fd4f2e22b6d474cb1358bb7baebc06d2eefacba616c36a82224f62ce9ff03b203c468541b1269716818f0222ee3d4ba0eb69bbd122ddab8dfe9388f33249a7753e7f84d1dbb731cd9068c26442ee8332297eb73a5552b91d64dd640748273cb82a78d3d7ff16d7a4c4cbad7e40172e19c349284f734b899bde7c79de3e55df2cb1c60c8bd76219ab56ce3e240e24b7eeabcfdfd6059befc87a3707f6195c44863ab07a79417fac25e07774e5a69ba3157f7000fe78c58b13176a0e2986ce9e42b7a0b6855f751209678f6f3f0f291c37fa99691190da143ee6f5598d6ccc4e17a28f8179d2c79117681926c24106446a5d844b0145e05efc13f913308d5e91fc100cb243422c6294a5b00463cc357880ec4cfc2b52c742cc5c40ced335971b7b57074331c2dbfc391ff50e880db99c0a66c957e397a357df60638a906aec83d50f732fe72bbbfa6baadf904ac7962d2c6f08a34526c106b1801d6ce578f83f030759a36626a5d5d1743f0f4a70acc5011ad9ff5456e2473388789a7cd57b8fa12dd2ab89d68dff7520f984732698cffd0f49ba4d663fc5c3a2b953b1bd1217b4eb0f2cd68e1ce3b3a0c986129cb3e34d031500f33115b3b7844bc49f88a3c15b8e74e03d5556a55d15f5993cec750984861bec8952d73764dcb3b2948efcc88526c7c026912a3d4b036692526c9427fe6c9cf5dd1dd5268f70acd3977eb43021887a6917a34e32eabcd7f5c94d6b8fe68ea2284a32dff46346cbc6a130dcbef953400af8788569b31fabc231d1cef22528998e521a5646f332d304370b374e325228242e53f6267b365d53ab51a88ff2b0e0e0e1acdb92654147ea11db408a2a7b9e2b59199a8c190a3b981ba27fca2efed3ffb9299028f821d60daf3baccd01479f1bb07bedf9c8c28a9b88b9211b7a0ae9a4cd67821afe09a9edb7bdce0d0e7d931b9605970c562c651d959f40444133a3498229483a489005d0cf3ad96c0dc5d6edff0908b9788232ca04b7b6bd85a5b6c35489def184d98ed4d891cca1bb4a92a6c4ec6b828e321bd8c0b945ea7354059dc6c181f2b8830b5dabaeb11b61aee715365ccafa0707e492793221c9b0928878e2dd2f624954ca017b98ecae4786442788c045e85bf2b60ad5ca4c13b993bc519bd28cc34fa979382efe1fe695b5a9126119ab6daf0c5896453e50a1abb79d2a690fb2f33a74498ee109e2a49fff6224230d0e6f371546aab74653c1767778c97d205c66e95ad80fceb3bdfa22354204c29526c947ee2f5e1b68d8b633cb9f83b254d2cd592c4c1b06743df62bee3ad0d08861edc5dd9af4b54eebfa7d1620d941570c488d73994a958ddf434c9ad6096f28ff", 0x4bb}, {&(0x7f0000000200)="a55edb72db2a8618809684ed6e157f22ec14441e85a3183e3858c16751e98980717695cafcf59b3e5ea5a903f0166e6aa09bc89759f55e9e28b597d40419a45376c3a1f3fc4a7646a892ddd998e91fc1297f3ce971b14d27abb0d452976736ab670eb153efd2eb96c2c43b0af959d6d2bb3dc6fc25ded8dc545df7aa6c14f656ca62f726f5d3bd7ff96d1d9c7f8f88f0dfb9eeb366fc7fb112f74d92b223fc53378926511c60ea792d4686cc230a", 0xae}], 0x2) syz_open_pts() writev(r6, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) poll(&(0x7f00000000c0)=[{r6, 0xe5}], 0x1, 0x4) 3.135624141s ago: executing program 0 (id=417): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = kqueue() r2 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r2, 0x80286987, &(0x7f00000001c0)) r3 = socket(0x18, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000)=@abs={0x682eb13985c518e6, 0x7}, 0x8) r4 = syz_open_pts() r5 = syz_open_pts() close(r5) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) kevent(r1, &(0x7f0000000080)=[{{r0}, 0xfffffffffffffffd, 0x20, 0x80, 0x4}], 0x9, &(0x7f0000000480)=[{{r0}, 0xfffffffffffffff8, 0x40, 0x4, 0x7fff, 0x1}, {{r0}, 0xffffffffffffffff, 0x10, 0x40, 0x1, 0x3}, {{r2}, 0xfffffffffffffffe, 0x44, 0x8, 0xf, 0x9}, {{r0}, 0xfffffffffffffffb, 0x10, 0x80000000, 0x8000000}, {{r0}, 0xfffffffffffffffc, 0x24, 0x40, 0x92, 0x7}, {{r4}, 0xfffffffffffffffc, 0x0, 0x4}, {{r5}, 0x7ffffffffffffff4, 0x1, 0xfffff, 0x5, 0x1}, {{r0}, 0xfffffffffffffffb, 0x88, 0x2, 0x6, 0x6}, {{r0}, 0xfffffffffffffffb, 0x40, 0x80000000, 0xc74, 0x100000001}], 0x9, &(0x7f0000000180)={0x7fff}) r6 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) ioctl$SPKRTUNE(r6, 0x20005302, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/246, 0xfffffc5c}, {&(0x7f00000000c0)=""/179, 0xfdb3}, {&(0x7f0000000200)=""/224, 0xe2}, {&(0x7f0000000400)=""/108}], 0x50, 0xfffffffffffffffd) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4) 3.130275949s ago: executing program 2 (id=418): r0 = socket(0x10, 0x8000, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x400001, 0x7, 0x6, 0x3, 0x80002001, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x3}, {0x7, 0x4, 0xc, 0x7}, {0x6, 0xf86, 0x100, 0xaf9}, {0x5, 0x8, 0xb, 0x3}, {0x400007, 0xfffffffd, 0xe, 0x7}, {0x2, 0x7, 0xffffffff, 0x9c}, {0x80000cdf, 0xffffffff, 0x5, 0x6d}, {0x2000a, 0x9, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x3ff, 0x8001, 0xffffffff, 0x87}, {0x4, 0x5, 0x9, 0x10aeb}, {0x803, 0x40, 0x4, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x9, 0x7}, {0x0, 0x5, 0x4, 0x30000}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) getsockopt(r0, 0x29, 0xb, 0x0, 0x0) 2.28171477s ago: executing program 0 (id=419): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x28, 0x4}, 0x403) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x100, 0x4ebfac6bbaf7859) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000007c0)="7f454c35c5c41a49b70cb7a21de87373791810aaa95d576a0ac7fca22716a22987b881794ffa08bb11bafcdc202a294097ae6826050800eb0683d43b24ff4c5d", 0x40}], 0x1) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r1, r0) 2.280348367s ago: executing program 1 (id=420): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1}, {0x0, 0x1}, {0x2, 0x3}, {0x0, 0x4000000}, {0x1}, {0x3}, {0x2, 0x20000000}, {0x1, 0xffffffff}, {0x2}, {0xcbd23ee33f7696d0}, {}, {0x1, 0x80000}, {0x3, 0x3b6}, {0x3, 0x3ffffc}, {}, {0x2, 0x3}, {0x3, 0x800}, {0x1}, {0x0, 0x7ff}, {0x2}, {0x0, 0x7}, {0x3}, {0x3, 0x400}, {}, {0x2, 0x3}, {0x0, 0xfffffffd}, {}, {0x2}, {}, {0x1, 0xa}, {0x1}]}) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x2, 0x8, 0xd5, "00000000000000000000001500", 0x3, 0xff}) setrlimit(0x8, &(0x7f0000000980)={0x45, 0x62}) r0 = syz_open_pts() writev(r0, &(0x7f0000000640)=[{&(0x7f0000001280)="006b07600e0ece355648b2a627325db0b0288d561d1e8dc75ae0221bf98aaf1dbd096d748d0807452d4144159503e2639d59ed88cd4c7670dc68fd5b", 0x3c}, {&(0x7f00000012c0), 0x31}, {&(0x7f0000001300)="b9067375e0e1403ff4fded97550b1e61b77b00000067beb2383b78db2dc7c7cd43bdf3128ec5", 0x26}, {&(0x7f0000000340)="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", 0x193}, {&(0x7f0000001440)="6f7448cf4b91f1c88850662ca72c2ee5cb7d9a8085a0173b7de705437b8af2265a2a2a6b47b0de193b25911788c5cf056c7db6fc0d34d3c3487953310415e662301489e18e6295710f9a90b8c8240f41959a605be0c1a7948c49b642", 0x5c}, {&(0x7f0000000500)="4d4b43b3cc88da0063d6253f190fa46c3b3b27cdccd8e590bf0f389c2621cf1bf788ecbab91d77575682f5d96cf57a66a89f237c852db90fc2e58303fe906b0632ac4318e1e6a0f55686c72fde52ee9388d191d8b38f8b3fc0d5b0c1cde0fd415583b32e7eeef4a427dd7ba2e423366012eb3d42f0973a8b6c3dbc07f61c173e79bc1ddba6201b5d053384ff2026368c72ab0d004fc6652bc5bf315250815d78a24044a55df9", 0xa6}], 0x67) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) ioctl$VMM_IOC_INTR(r1, 0xca605601, &(0x7f0000000040)={0xb, 0x0, 0x200d}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x48) sysctl$kern(&(0x7f0000000000)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = socket(0x18, 0x1, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xe24, 0xbe, 0xb0, 0x3e}]}) setsockopt(r3, 0x1000000000029, 0xb, &(0x7f00000001c0)='\x00\x00@\x00', 0x4) setsockopt(r3, 0x1000000000029, 0xa, &(0x7f0000000000)="8858cd20", 0x4) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) faccessat(r2, &(0x7f0000000080)='./file0\x00', 0x114, 0x0) 2.280113096s ago: executing program 2 (id=421): syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0xfffe, 0x0, 0x0, 0x0, 0x0, 0x19, 0xe}, 0x1000, 0xffffffffffffffff, 0x3}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) setsockopt(r1, 0x1, 0x40002e, &(0x7f0000000000)="eb05ccff13b9fd822eaa4e717048e699319296d0", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 2.279655929s ago: executing program 3 (id=422): mkdir(&(0x7f0000000180)='./file0\x00', 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') mknod(&(0x7f0000000080)='./file0\x00', 0x1, 0x8) (async) mknod(&(0x7f0000000080)='./file0\x00', 0x1, 0x8) getuid() (async) r0 = getuid() lchown(&(0x7f0000000200)='./file0\x00', r0, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setuid(r0) open$dir(&(0x7f0000000040)='./file0/file0/file0\x00', 0x200, 0x2) 2.278915326s ago: executing program 4 (id=423): sysctl$vm(&(0x7f0000000000)={0x2, 0x9}, 0x4000000000000177, 0x0, 0x0, 0x0, 0x0) 2.275114663s ago: executing program 5 (id=424): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$WSKBDIO_SETDEFAULTBELL(r0, 0x80105705, &(0x7f0000000100)={0x9, 0x5, 0xfffff000, 0x401}) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x1005, &(0x7f0000000000)={0xba2, 0x8}, 0x10) seteuid(0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe519919c80178fc0) ioctl$TIOCSETA(r1, 0xc4504448, &(0x7f0000000740)={0x10000, 0x9de, 0x400, 0x0, "000001e3bb4e3447c1d100", 0x4, 0xffff2bd9}) 2.254508411s ago: executing program 6 (id=425): getsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x1006, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/265, 0x109}], 0x1, 0x0}, 0x80000006}, 0x10, 0x1003, 0x0) close(r0) r1 = socket$unix(0x1, 0x5, 0x0) execve(0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r1, 0x300000) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) accept(r0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) r4 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000340)="dcf65619c427d3e33b08aef01c8d7fb61c22ae6be8b034300a335bcf6ecfd096bc9d5b57bd911d8c9eef826ca27fddd10743974db44fe8788a1e602715656e533af55edb274ce4972198f6e6dfcd7d7b04ecb0b7ecd0d27baf642a958e4523", 0x5f}], 0x1) execve(0x0, 0x0, 0x0) open(0x0, 0x615, 0x0) open$dir(0x0, 0x2, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x66}) sysctl$kern(&(0x7f0000000100)={0x1, 0xb}, 0x2, &(0x7f0000000140), 0x0, 0x0, 0x0) r5 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000340)={0x8, 0x1, 0x800, 0xffffff8c, "61afcf19ffff09ffffffe600", 0x4, 0x4}) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) kqueue() ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9, 0x3, 0xfe, 0x4, 0x80002001, 0x5, 0x10, [{0x2, 0xfe3, 0x6, 0x71800}, {0x1, 0xb7fe, 0x800002, 0x7}, {0x100206, 0x0, 0x8, 0x2}, {0x2, 0xff, 0x200, 0xfffffffb}, {0x10001, 0x3, 0x7fffffff, 0x7}, {0x2, 0x47fff, 0x14000009, 0xc}, {0x20000005, 0xbffffff5, 0x1, 0x6d}, {0x2000a, 0x3, 0xfdf0, 0x4}, {0x0, 0x7, 0x33, 0x80}, {0x401, 0x7, 0x8001, 0x7}, {0xa44f, 0xfff9, 0x48a, 0x40e1}, {0xcb, 0x3, 0x8, 0x8}, {0x2000e0, 0x29, 0x6, 0x3ff}, {0xb, 0xfffffffc, 0xfffffff5, 0xfffffff8}, {0x6, 0x5, 0x3bf3, 0x3}, {0xfffffffd, 0xd654, 0x3, 0x4}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r6 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) 1.184743458s ago: executing program 3 (id=426): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000340)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x200, 0x4787, 0x5, 0x2, 0x100000000, 0x6, 0xffff7fffffffffff, 0x0, 0x2f00, 0x4, 0x8000000000000000, 0xbffffffffffbffff, 0x400000002000000, 0x0, 0x3, 0x82, 0xce5], [0xfffffffffffffffe, 0x8748, 0xfffffffffffffffd, 0x100000000, 0x5, 0xffffffffffffff7f, 0x8, 0x0, 0x80000001, 0x7], [0x5ad8, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffe], [0x3, 0x6, 0xfffffffffffffffc, 0x8000000100000000, 0xfffffffffffffffe, 0xffffffffffffffff], [{0x0, 0x4, 0x0, 0x4000002000007d06}, {0xfffc, 0x2, 0x0, 0x10}, {0x0, 0x0, 0xe05f, 0x81}, {0x3, 0x1, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x7, 0x8}, {0x7, 0x2006, 0x40000, 0x2000000000000000}, {0x6b7, 0x0, 0x1}, {0x8, 0x0, 0x0, 0x8}], {0x2, 0x1000006, 0x8}, {0x49, 0x6, 0x100000b0, 0x2}}}) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x2, 0x0) close(r0) socket(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x3}, 0x8) connect$unix(r0, &(0x7f0000000000), 0x10) r1 = socket(0x18, 0x3, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0x4b}, 0x2, &(0x7f0000002480)="71f91eca", &(0x7f0000000080)=0x4, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r2 = syz_open_pts() close(r2) fchdir(r2) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x2, 0x3, 0x0) close(r3) r4 = socket(0x18, 0x2, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0xfffffffffffffffa}) r5 = socket(0x18, 0x3, 0x0) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r5, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x800}, {0x2, 0x2ff, 0x1000}], 0x2) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) write(r3, &(0x7f0000001680)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0x1001c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) getsockopt$sock_cred(r1, 0xffff, 0x1024, &(0x7f0000000240), &(0x7f0000000280)=0x2) 1.182676126s ago: executing program 4 (id=427): recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000300)={0x2, &(0x7f0000000180)=[{0x44, 0x40, 0x59, 0x5}, {0x6, 0x5, 0x2, 0x4}]}) syz_emit_ethernet(0x26, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv4={0x8847, {{0x5, 0x4, 0x0, 0x20, 0x18, 0x0, 0x0, 0x80, 0x4, 0x0, @broadcast, @rand_addr=0xdfffffff}, @icmp=@generic={0x21}}}}}) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x2b, 0x1001, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cac73ce1ff03000000000000a593555fff", 0x11}], 0x1}, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0xffffffffdf001fff, 0x0) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(r1, 0xc4504442, &(0x7f0000000000)={0x32, 0xffffffff, 0x0, 0x4000, "97a2224ff1c14a06ebb178926cc9795a6b47c1d1", 0x1, 0xfffffffe}) r2 = socket(0x20, 0x1, 0xff) ioctl$FIONREAD(r2, 0xc038694e, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000000080)={0x0}, 0x6a, 0x0) close(r3) unveil(0x0, &(0x7f00000000c0)='c\x00') dup2(r2, r2) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="bf30e56f25000046fa9dc486a7817494c44281ea65f2f48172e91da15b249657e5cdc8bc443657d0b1de8e56de47a7a757", 0x31}], 0x1) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) socket(0x18, 0x2, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0x8020560a, &(0x7f00000002c0)={0x10, 0x200, [{&(0x7f0000360000/0x2000)=nil, &(0x7f0000fef000/0x4000)=nil, 0xe9c}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000123000/0x13000)=nil, 0x40000000006}, {&(0x7f000063b000/0x4000)=nil, &(0x7f000011c000/0x3000)=nil, 0x8}, {&(0x7f00005bd000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x7f}, {&(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x1}, {&(0x7f0000328000/0x4000)=nil, &(0x7f00007f1000/0x1000)=nil, 0x5}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x1000}, {&(0x7f00005a6000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f00000c0000/0x1000)=nil, 0x2}, {&(0x7f0000760000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil}, {&(0x7f0000fec000/0x14000)=nil, &(0x7f0000142000/0x1000)=nil, 0xa}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f00001fe000/0x2000)=nil, 0x1}, {&(0x7f0000801000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f00005ae000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x86}, {&(0x7f0000622000/0x1000)=nil, &(0x7f00002f9000/0x4000)=nil, 0xfffffffffffffffb}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f000044a000/0x2000)=nil, 0x4000000000003}], './file0\x00'}) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd605d34520030000000000000000000000000000000000000000000009f0500040000000000000001010090780000000060397772"]) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00') 965.887368ms ago: executing program 1 (id=428): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x2, 0x1, 0x400000000000, 0x100000403}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') syz_emit_ethernet(0x24, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x16, 0x0, 0x2000, 0x7, 0x33, 0x0, @empty, @rand_addr=0xfffffc}, @generic="3398"}}}}) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) setuid(0xee01) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x2, 0x1, 0x400000000000, 0x100000403}) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) (async) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async) syz_emit_ethernet(0x24, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x16, 0x0, 0x2000, 0x7, 0x33, 0x0, @empty, @rand_addr=0xfffffc}, @generic="3398"}}}}) (async) 963.508965ms ago: executing program 2 (id=429): preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000140)=""/192, 0xc0}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000000)=""/18, 0x12}], 0x4, 0x1) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0, 0x0, 0x0, 0x31}, 0x0) r1 = socket(0x2, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000200), &(0x7f0000000240)=0xc) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x404) r2 = socket(0x2, 0x400000000002, 0x0) setsockopt(r2, 0x0, 0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$kern(&(0x7f0000000080)={0x1, 0x5b}, 0x2, 0x0, 0x0, 0x0, 0x0) mknod(0x0, 0x2000, 0xd02) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000080)={0xa2a5, 0x7fffffff}) lseek(r0, 0x10001, 0x2) open$dir(&(0x7f0000000100)='./file1\x00', 0x1, 0x20) 960.523212ms ago: executing program 0 (id=430): r0 = open(&(0x7f0000000180)='./file0\x00', 0x20, 0xa7) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000080)={0x0}, 0xc) ioctl$TIOCSETA(0xffffffffffffffff, 0xc450443f, &(0x7f0000000040)={0x40, 0x2f, 0x87a, 0xe68, "a2a48100", 0xfffffffc, 0xe762}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r4 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) sysctl$hw(0x0, 0x0, &(0x7f0000000200)="a489", &(0x7f00000001c0)=0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) socket(0x1e, 0x3, 0x0) recvmmsg(r3, &(0x7f0000000040)={0x0}, 0x10, 0x40, 0x0) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) execve(0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0xff, 0x0, {0x5, 0x4, 0x0, 0x1b, 0xfffc, 0x0, 0x0, 0x8, 0x6, 0xf0, @multicast1, @loopback}}}}}}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$kern(&(0x7f0000000040)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) close(r3) sendmmsg(r2, &(0x7f0000000140)={0x0, 0xbdd}, 0xfffffffffffffc78, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r1) 37.062947ms ago: executing program 1 (id=431): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) close(r0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x4, &(0x7f0000000000)=0xfffff606, 0x4) chmod(&(0x7f0000000180)='./file0\x00', 0x3fe) setuid(0xee01) sendmsg$unix(r1, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x404}, 0xe) 9.426217ms ago: executing program 2 (id=432): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) setgroups(0x0, 0x0) setgid(0xffffffffffffffff) setuid(0xee01) semctl$GETPID(0x0, 0x0, 0x4, 0x0) syz_open_pts() (async) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() mquery(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r1, 0xbf8) (async) mquery(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, r1, 0xbf8) ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x47) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) (async) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) r2 = socket(0x24, 0x2, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0xa) writev(r0, &(0x7f0000000180)=[{0x0, 0xfffffffffffffcd4}], 0x1) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x200}, 0x0, 0x0, 0xfffffffffffffffb}) socket(0x18, 0x3, 0x0) (async) r3 = socket(0x18, 0x3, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7, 0x3}, 0x8) (async) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7, 0x3}, 0x8) sendto$unix(0xffffffffffffffff, &(0x7f0000000140)="b100050200000000000000ac00010000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896443a42112000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702", 0x84, 0x8, 0x0, 0x0) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000140)="b100050200000000000000ac00010000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896443a42112000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702", 0x84, 0x8, 0x0, 0x0) getsockname$inet(r3, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="a77a97e67bcaa2d936c6c8739bc4af04150f5c07b47822fbd3f081ca67b0b0c27f484792c3e94b6d30bb9d321adf8ff732b6b7e9522c97cf8020160000000000000005", 0x43}], 0x1) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) socket(0x18, 0x1, 0x0) (async) r4 = socket(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000540)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/222, 0xde}, {&(0x7f0000000480)=""/133, 0x85}], 0x3) (async) readv(r4, &(0x7f0000000540)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/222, 0xde}, {&(0x7f0000000480)=""/133, 0x85}], 0x3) setsockopt(r4, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/file0\x00') connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) writev(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f00000002c0)="5eb1c632307aa9386b416dc38a6f2d1b04f850af82a2a5b9369939bc1823195aedd92e969df9afbdb396a86accb3ca0000b16b719668307667467c06a456d3ea25b46911cd059d6f6497862969b45a08914863442c62d795cdffa72f8c19bfbd9f74f40f9d6bc9fe", 0x68}, {&(0x7f0000000080)="08279a9ed4616e833a076ded1d6a4de77fe737e1e81dc0544e605268e9eb3c3bf200432e9b133817d90b44598f973bfd", 0x30}], 0x3) (async) writev(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f00000002c0)="5eb1c632307aa9386b416dc38a6f2d1b04f850af82a2a5b9369939bc1823195aedd92e969df9afbdb396a86accb3ca0000b16b719668307667467c06a456d3ea25b46911cd059d6f6497862969b45a08914863442c62d795cdffa72f8c19bfbd9f74f40f9d6bc9fe", 0x68}, {&(0x7f0000000080)="08279a9ed4616e833a076ded1d6a4de77fe737e1e81dc0544e605268e9eb3c3bf200432e9b133817d90b44598f973bfd", 0x30}], 0x3) 8.195109ms ago: executing program 3 (id=433): socket(0x18, 0x2, 0x0) socket(0x18, 0x2, 0x0) (async) socket(0x18, 0x2, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x400, 0x6, 0x0, 0x0, 0x200000001, 0x1, 0x6, 0x7}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x400, 0x6, 0x0, 0x0, 0x200000001, 0x1, 0x6, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) listen(r1, 0x1) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r2 = socket$unix(0x1, 0x2, 0x0) recvmsg(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/172, 0xac}], 0x1, 0x0}, 0x2) sendmsg$unix(r2, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0xe) recvmmsg(r0, &(0x7f0000000980)={&(0x7f0000000940)={&(0x7f0000000140)=@in, 0xc, &(0x7f0000000880)=[{&(0x7f0000000240)=""/99, 0x63}, {&(0x7f00000002c0)=""/141, 0x8d}, {&(0x7f00000004c0)=""/244, 0xf4}, {&(0x7f00000001c0)}, {&(0x7f00000005c0)=""/171, 0xab}, {&(0x7f0000000380)=""/32, 0x20}, {&(0x7f0000000680)=""/200, 0xc8}, {&(0x7f0000000780)=""/209, 0xd1}], 0x8, &(0x7f00000003c0)=""/60, 0x3c}, 0x6}, 0x10, 0x0, 0x0) 7.762428ms ago: executing program 4 (id=434): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffc, &(0x7f0000000040)='./file0\x00', 0x8}) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c397, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='c\x00') 4.230541ms ago: executing program 5 (id=435): syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="8f6f77ede655aaaaaaaaaabb86dd605f6ad900183a01fe8034b7366e542d824fb36017ec4af400000000000000000000000000bbfe80"]) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) unveil(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='r\x00') 0s ago: executing program 6 (id=436): r0 = socket(0x2, 0x3, 0x0) setuid(0xee01) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x100000000000000}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37) close(r0) r1 = socket(0x2, 0x3, 0x0) close(r1) r2 = socket(0x2, 0x3, 0x0) close(r2) socket(0x18, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt(r1, 0x1000000029, 0x31, &(0x7f0000000000)="b211d7170d816685c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e180e9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x400}, 0x8) r3 = socket(0x18, 0x2, 0x0) close(r3) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0x35, &(0x7f0000000040)="03000000", 0x4) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) execve(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts. pckbd_enable: command error vm_create: uvm_map failed: 12 OpenBSD/amd64 (ci-openbsd-multicore-2.us-central1-b.c.syzkaller.internal) (tty00) login: pckbd_enable: command error pckbd_enable: command error witness: lock order reversal: 1st 0xffff8000015330a8 sbufsnd (&so->so_snd.sb_lock) 2nd 0xfffffd806b33bc70 inode (&ip->i_lock) lock order [1] sbufsnd (&so->so_snd.sb_lock) -> [2] inode (&ip->i_lock) lock order data 0xffffffff8341b403 -> 0xffffffff833873c0 is missing lock order [2] inode (&ip->i_lock) -> [3] sbufrcv (&so->so_rcv.sb_lock) #0 rw_do_enter_write+0xba #1 sblock+0xb6 #2 soreceive+0x27d #3 fifo_read+0x117 #4 VOP_READ+0x101 #5 vn_rdwr+0x15b #6 vndsetcred+0xa1 #7 vndioctl+0xdfc #8 VOP_IOCTL+0xac #9 vn_ioctl+0xf8 #10 sys_ioctl+0x674 #11 syscall+0xbd4 #12 Xsyscall+0x128 lock order [3] sbufrcv (&so->so_rcv.sb_lock) -> [1] sbufsnd (&so->so_snd.sb_lock) #0 rw_do_enter_write+0xba #1 sblock+0xb6 #2 sosplice+0x312 #3 sys_setsockopt+0x2ba #4 syscall+0xbd4 #5 Xsyscall+0x128 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806b33bc70,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(fffffd806b33bc58,1) at rw_do_enter_write+0xba rrw_enter(fffffd806b33bc58,1) at rrw_enter+0xc6 VOP_LOCK(fffffd8069342978,2001) at VOP_LOCK+0xbd vn_lock(fffffd8069342978,2001) at vn_lock+0xa4 vfs_lookup(ffff80002a3a83a0) at vfs_lookup+0x11c namei(ffff80002a3a83a0) at namei+0x7ca unp_connect(ffff800001532ec0,fffffd805f376f00,ffff80003c3f9ca8) at unp_connect+0x29d uipc_dgram_send(ffff800001532ec0,fffffd806b2de700,fffffd805f376f00,0) at uipc_dgram_send+0x163 sosend(ffff800001532ec0,fffffd805f376f00,ffff80002a3a8628,0,0,e) at sosend+0x804 sendit(ffff80003c3f9ca8,3,ffff80002a3a87a8,e,ffff80002a3a8860) at sendit+0x5a5 sys_sendmsg(ffff80003c3f9ca8,ffff80002a3a8910,ffff80002a3a8860) at sys_sendmsg+0x246 syscall(ffff80002a3a8910) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x1f76b55dea0, count: -15 ddb{1}> show registers rdi 0 rsi 0x80000 acpi_pdirpa+0x6be71 rbp 0xffff80002a3a8010 rbx 0 rdx 0xffff800001552b40 rcx 0xffff80003c3f9ca8 rax 0x7ffff acpi_pdirpa+0x6be70 r8 0xffff80002a3a7ef0 r9 0x8080808080808080 r10 0x8a3f64f339c43ffa r11 0x5fe25783cbf0da66 r12 0xfffffd8003f598c0 r13 0xfffffd8004741ac0 r14 0x3 r15 0xffffffff83421e46 substchar+0xccdf rip 0xffffffff81428175 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a3a8000 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=181136 pid=74801 tcnt=2 stat=onproc flags process=10 proc=4000000 runpri=75, usrpri=75, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c3f9778,0xffff80003c4122d0 process=0xffff80003c4179e0 user=0xffff80002a3a3000, vmspace=0xfffffd806631f3f0 estcpu=25, cpticks=1, pctcpu=0.0, user=1, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 20619 381827 24602 0 2 0 syz-executor 20619 170161 24602 0 3 0x4000080 fsleep syz-executor 50780 82533 29518 0 7 0 syz-executor 50780 95636 29518 0 3 0x4000080 fsleep syz-executor 75943 454942 58640 0 3 0x80 fsleep syz-executor 75943 58509 58640 0 3 0x4000000 biowait syz-executor 97300 513218 61002 0 3 0x80 fsleep syz-executor 97300 324 61002 0 2 0x4000000 syz-executor 97300 371571 61002 0 3 0x4000080 fsleep syz-executor 24205 384504 92962 60929 3 0x90 fsleep syz-executor 24205 394953 92962 60929 3 0x4000090 ttyout syz-executor 24205 246977 92962 60929 3 0x4000090 fsleep syz-executor 74801 442227 56555 60929 3 0x90 fsleep syz-executor *74801 181136 56555 60929 7 0x4000010 syz-executor 96598 148151 62586 0 3 0x80 fsleep syz-executor 96598 453985 62586 0 3 0x4000080 sbwait syz-executor 62586 469774 36664 0 3 0x82 nanoslp syz-executor 4950 270074 1 0 3 0x80 fsleep syz-executor 4950 45258 1 0 3 0x4000080 sbwait syz-executor 4950 364621 1 0 3 0x4000000 inode syz-executor 64213 137731 1 0 3 0x100083 ttyin getty 24602 126773 36664 0 3 0x82 nanoslp syz-executor 29518 300050 36664 0 3 0x82 nanoslp syz-executor 58640 153809 36664 0 3 0x82 nanoslp syz-executor 61002 435530 36664 0 3 0x82 nanoslp syz-executor 92962 177290 36664 0 3 0x82 nanoslp syz-executor 56555 177738 36664 0 3 0x82 nanoslp syz-executor 36664 132950 52897 0 3 0x82 nanoslp syz-executor 52897 245252 20816 0 3 0x10008a sigsusp ksh 20816 388786 44477 0 3 0x98 kqread sshd-session 44477 197706 43142 0 3 0x92 kqread sshd-session 43142 464314 1 0 3 0x88 kqread sshd 84159 40164 18963 74 3 0x1100092 bpf pflogd 18963 461590 1 0 3 0x80 sbwait pflogd 98231 318083 11498 73 3 0x1100090 kqread syslogd 11498 30528 1 0 3 0x100082 sbwait syslogd 5150 170585 1 0 3 0x100080 kqread resolvd 17970 174266 70059 77 3 0x100092 kqread dhcpleased 7433 450745 70059 77 3 0x100092 kqread dhcpleased 70059 119516 1 0 3 0x80 kqread dhcpleased 84882 401650 0 0 3 0x14200 bored smr 82496 522524 0 0 2 0x14200 zerothread 35754 313056 0 0 3 0x14200 aiodoned aiodoned 95459 453731 0 0 3 0x14200 syncer update 21199 270124 0 0 3 0x14200 cleaner cleaner 1587 20584 0 0 3 0x14200 reaper reaper 54367 76606 0 0 3 0x14200 pgdaemon pagedaemon 53072 489636 0 0 3 0x14200 bored viomb 65873 201417 0 0 3 0x40014200 acpi0 acpi0 15031 169499 0 0 3 0x40014200 idle1 9512 7073 0 0 3 0x14200 bored softnet1 28541 517129 0 0 2 0x14200 softnet0 36353 183656 0 0 3 0x14200 bored systqmp 29435 398255 0 0 3 0x14200 bored systq 51019 337490 0 0 3 0x14200 tmoslp softclockmp 9570 115300 0 0 3 0x40014200 tmoslp softclock 18752 279789 0 0 3 0x40014200 idle0 1 27494 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 50780 (syz-executor) thread 0xffff80003c3f9248 (82533) exclusive rwlock uobjlk r = 0 (0xfffffd806ca33298) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 uvm_fault+0x1e5 #3 upageflttrap+0xa9 #4 usertrap+0x42f #5 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xfffffd806eab04e0) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x42f #7 recall_trap+0x8 Process 75943 (syz-executor) thread 0xffff80003c4122c0 (58509) exclusive rrwlock inode r = 0 (0xfffffd807054b248) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_makeinode+0xcd #8 ufs_create+0x4e #9 VOP_CREATE+0xfe #10 vn_open+0x34d #11 doopenat+0x35b #12 syscall+0xbd4 #13 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806b33b208) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 vn_open+0x1f1 #8 doopenat+0x35b #9 syscall+0xbd4 #10 Xsyscall+0x128 Process 74801 (syz-executor) thread 0xffff80003c3f9ca8 (181136) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83952040) #0 witness_lock+0x5f1 #1 unp_connect+0x28c #2 uipc_dgram_send+0x163 #3 sosend+0x804 #4 sendit+0x5a5 #5 sys_sendmsg+0x246 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive rwlock sbufsnd r = 0 (0xffff8000015330a8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sblock+0xb6 #3 sosend+0x2e9 #4 sendit+0x5a5 #5 sys_sendmsg+0x246 #6 syscall+0xbd4 #7 Xsyscall+0x128 Process 4950 (syz-executor) thread 0xffff80003c3f87e8 (45258) exclusive rrwlock inode r = 0 (0xfffffd806e8728b8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vget+0x2a2 #6 cache_lookup+0x351 #7 ufs_lookup+0x1e3 #8 VOP_LOOKUP+0x6e #9 vfs_lookup+0x93a #10 namei+0x7ca #11 vn_open+0x15a #12 vndioctl+0xc43 #13 VOP_IOCTL+0xac #14 vn_ioctl+0xf8 #15 sys_ioctl+0x674 #16 syscall+0xbd4 #17 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11075 12129K 12387K 166960K 12649 0 pcb 17 12K 12K 166960K 91 0 rtable 246 10K 13K 166960K 497 0 pf 37 18K 82K 166960K 96 0 ifaddr 42 7K 8K 166960K 64 0 ifgroup 55 2K 2K 166960K 87 0 sysctl 3 1K 9K 166960K 9 0 counters 70 37K 37K 166960K 112 0 ioctlops 0 0K 4K 166960K 1623 0 iov 0 0K 28K 166960K 30 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1412 89K 89K 166960K 1931 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 10 0 VM map 2 1K 1K 166960K 2 0 sem 14 0K 0K 166960K 22 0 dirhash 12 2K 2K 166960K 21 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 236K 166960K 630 0 sigio 0 0K 0K 166960K 7 0 proc 72 115K 164K 166960K 610 0 subproc 72 4K 5K 166960K 189 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 187 0 in_multi 95 7K 7K 166960K 129 0 ether_multi 1 0K 0K 166960K 3 0 mrt 1 0K 0K 166960K 3 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 97 440K 440K 166960K 97 0 exec 0 0K 1K 166960K 449 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 247 159K 173K 166960K 7142 0 UVM aobj 17 4K 4K 166960K 22 0 pinsyscall 42 84K 104K 166960K 1776 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 21 0 NDP 12 0K 2K 166960K 43 0 temp 49 8673K 8752K 166960K 26391 0 kqueue 13 20K 26K 166960K 110 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 70 0 67 1 0 1 1 0 8 0 rtentry 176 141 0 37 6 0 6 6 0 8 0 unpcb 144 318 0 294 4 2 2 4 0 8 0 syncache 336 5 0 5 2 2 0 1 0 8 0 tcpqe 32 1 0 1 1 1 0 1 0 8 0 tcpcb 736 172 0 167 4 3 1 4 0 8 0 arp 136 23 0 6 1 0 1 1 0 8 0 inpcb 328 566 0 554 7 5 2 7 0 8 1 nd6 152 30 0 4 2 0 2 2 0 8 0 pkpcb 40 5 0 4 2 1 1 1 0 8 0 kcovpl 48 21 0 13 1 0 1 1 0 8 0 ppxss 1192 18 0 18 1 0 1 1 0 8 1 pppxif 1504 2 0 2 1 0 1 1 0 8 1 pffrag 232 8 0 1 1 0 1 1 0 482 0 pffrnode 88 7 0 0 1 0 1 1 0 8 0 pffrent 40 16 0 9 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 9 0 8 1 0 1 1 0 8 0 pfanchor 1288 1 0 1 1 1 0 1 0 8 0 pftag 88 2 0 0 1 0 1 1 0 8 0 pfqueue 320 1 0 1 1 1 0 1 0 8 0 pfstitem 24 2 0 0 1 0 1 1 0 8 0 pfstkey 128 4 0 2 2 1 1 1 0 8 0 pfstate 448 2 0 1 2 1 1 1 0 8 0 pfrule 1360 11 0 5 1 0 1 1 0 8 0 art_heap8 4096 3 0 0 3 0 3 3 0 8 0 art_heap4 256 557 0 136 30 3 27 30 0 8 0 art_table 40 560 0 136 5 0 5 5 0 8 0 art_node 32 140 0 48 1 0 1 1 0 8 0 sysvmsgpl 40 4 0 0 1 0 1 1 0 8 0 semupl 112 3 0 3 2 1 1 1 0 8 1 semapl 112 18 0 6 1 0 1 1 0 8 0 shmpl 112 17 0 4 1 0 1 1 0 8 0 dirhash 1024 23 0 6 3 0 3 3 0 8 0 dino2pl 256 2503 0 985 96 1 95 96 0 8 0 ffsino 296 2503 0 985 117 0 117 117 0 8 0 nchpl 144 3329 0 1612 64 0 64 64 0 8 0 rtmask 32 4 0 4 2 2 0 1 0 8 0 vnodes 216 2933 0 0 163 0 163 163 0 8 0 namei 1024 10785 0 10783 2 1 1 2 0 8 0 percpumem 16 71 0 21 1 0 1 1 0 8 0 vcpupl 3968 1 0 0 1 0 1 1 0 8 0 vmpool 848 2 0 1 1 0 1 1 0 8 0 pfiaddrpl 120 2 0 2 1 1 0 1 0 8 0 kstatmem 264 50 0 24 3 1 2 3 0 8 0 scsiplug 72 3 0 3 2 1 1 1 0 8 1 scxspl 216 23123 0 23122 10 6 4 8 1 8 3 plimitpl 152 127 0 109 1 0 1 1 0 8 0 sigapl 424 902 0 855 7 1 6 7 0 8 0 knotepl 120 323 0 0 10 0 10 10 0 8 0 kqueuepl 224 159 0 150 3 1 2 2 0 8 1 pipepl 344 255 0 227 9 3 6 6 0 8 3 fdescpl 528 885 0 854 3 0 3 3 0 8 0 filepl 160 4972 0 4746 17 4 13 15 0 8 3 lockfpl 104 162 0 160 1 0 1 1 0 8 0 lockfspl 48 75 0 73 1 0 1 1 0 8 0 sessionpl 144 37 0 28 1 0 1 1 0 8 0 pgrppl 48 64 0 47 1 0 1 1 0 8 0 ucredpl 104 723 0 707 1 0 1 1 0 8 0 zombiepl 144 855 0 855 1 0 1 1 0 8 1 processpl 1232 902 0 855 5 0 5 5 0 8 1 procpl 664 1598 0 1540 6 0 6 6 0 8 0 sosppl 176 7 0 7 1 1 0 1 0 8 0 sockpl 752 978 0 938 16 7 9 11 0 8 5 mcl64k 65536 5 0 0 1 0 1 1 0 8 0 mcl16k 16384 4 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 123 0 0 16 0 16 16 0 8 0 mcl2k 2048 28 0 0 4 0 4 4 0 8 0 mtagpl 96 7 0 0 1 0 1 1 0 8 0 mbufpl 256 1459 0 0 92 0 92 92 0 8 0 bufpl 280 9774 0 3638 439 0 439 439 0 8 0 anonpl 32 10292 0 0 83 0 83 83 0 246 0 amapchunkpl 152 22198 0 21692 34 7 27 29 0 158 7 amappl16 200 3940 0 3907 26 11 15 24 0 8 8 amappl15 192 36 0 36 1 1 0 1 0 8 0 amappl14 184 11 0 11 1 1 0 1 0 8 0 amappl13 176 479 0 478 1 0 1 1 0 8 0 amappl12 168 1270 0 1228 3 0 3 3 0 8 0 amappl11 160 12 0 12 1 1 0 1 0 8 0 amappl10 152 54 0 40 1 0 1 1 0 8 0 amappl9 144 265 0 264 1 0 1 1 0 8 0 amappl8 136 94 0 92 1 0 1 1 0 8 0 amappl7 128 121 0 119 1 0 1 1 0 8 0 amappl6 120 292 0 279 1 0 1 1 0 8 0 amappl5 112 79 0 67 1 0 1 1 0 8 0 amappl4 104 520 0 489 1 0 1 1 0 8 0 amappl3 96 3828 0 3731 4 1 3 3 0 8 0 amappl2 88 1006 0 927 2 0 2 2 0 8 0 amappl1 80 11242 0 10657 15 1 14 15 0 8 0 amappl 88 6312 0 6142 5 0 5 5 0 92 0 uvmvnodes 80 117 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 8 0 8 2 2 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 21 0 5 1 0 1 1 0 8 0 uaddrrnd 24 885 0 854 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 885 0 854 1 0 1 1 0 8 0 vmmpekpl 168 9150 0 9105 3 0 3 3 0 8 0 vmmpepl 168 64384 0 62446 105 0 105 105 0 357 19 vmsppl 488 884 0 854 6 2 4 5 0 8 0 rwobjpl 80 20479 0 19408 31 0 31 31 0 8 2 pdppl 4096 1781 0 1711 106 34 72 87 0 8 2 pvpl 32 16340 0 0 132 0 132 132 0 265 0 pmappl 256 886 0 855 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 370 0 47 10 0 10 10 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff838a8ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83951840) at __mp_lock+0x192 intr_handler(ffff800034bd15e0,ffff800000079600) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __mp_lock(ffffffff83951840) at __mp_lock+0x192 intr_handler(ffff800034bd1740,ffff8000002a3480) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __mp_lock(ffffffff83951840) at __mp_lock+0x190 uvm_fault(fffffd806eab03e0,8aceb22c000,0,1) at uvm_fault+0x1ea upageflttrap(ffff800034bd1ae0,8aceb22c000) at upageflttrap+0xa9 usertrap(ffff800034bd1ae0) at usertrap+0x42f recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x77fc7fcf9740, count: -14 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806b33bc70,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(fffffd806b33bc58,1) at rw_do_enter_write+0xba rrw_enter(fffffd806b33bc58,1) at rrw_enter+0xc6 VOP_LOCK(fffffd8069342978,2001) at VOP_LOCK+0xbd vn_lock(fffffd8069342978,2001) at vn_lock+0xa4 vfs_lookup(ffff80002a3a83a0) at vfs_lookup+0x11c namei(ffff80002a3a83a0) at namei+0x7ca unp_connect(ffff800001532ec0,fffffd805f376f00,ffff80003c3f9ca8) at unp_connect+0x29d uipc_dgram_send(ffff800001532ec0,fffffd806b2de700,fffffd805f376f00,0) at uipc_dgram_send+0x163 sosend(ffff800001532ec0,fffffd805f376f00,ffff80002a3a8628,0,0,e) at sosend+0x804 sendit(ffff80003c3f9ca8,3,ffff80002a3a87a8,e,ffff80002a3a8860) at sendit+0x5a5 sys_sendmsg(ffff80003c3f9ca8,ffff80002a3a8910,ffff80002a3a8860) at sys_sendmsg+0x246 syscall(ffff80002a3a8910) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x1f76b55dea0, count: -15