last executing test programs: 1.496111598s ago: executing program 3 (id=4): openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) listen(r0, 0x7fff) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, 0x0, 0x29) mprotect(&(0x7f0000379000/0x1000)=nil, 0x1000, 0x1) r1 = socket(0x2, 0x4001, 0x0) sysctl$hw(&(0x7f0000000000)={0x7, 0x10}, 0x2, &(0x7f00000000c0)="21fe78720773d4a8", &(0x7f0000000040)=0x8, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x6}, 0x4, &(0x7f00000000c0)="e645c57168a3cef0d1f96cf4ba8bc0d394b54337bb5434903ef86517", &(0x7f0000000140)=0x1c, &(0x7f0000000180)="cfd704e24598aa5b36c9bcf44bd68599a4da2b8de542c9109b7e149a2b96c1a158e6d5342d55f03997de2ea5e9b64888f73d1e13a92a516dcf0f59c255c24eacd93f99fc1a8ef43c1d963cc981c83592b4fa8cf6d1e65f822652460ff84d4f1416ec06964ef62c5d2aec4e95f9fa0f2ed09389337523a0b6ea08956419c093a0a1d2ab68469d13627e2a2f768a00beaea312def3aa8a6173dbb2ba14", 0x9c) getgroups(0x349, &(0x7f0000000040)) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x8009, 0x0) setsockopt(r2, 0x200, 0x3ff, &(0x7f0000000480)="c922353f2db69306bcefc696323cbf7c80d9edef206cb91a2fd7a422c025f59007908de44edebd6cb90b03d292cc606bb80827bde7111f334ffa5ad32827375f3b8414f2add2f8c137e783444822ab7bd2a6b89f656f7bd590a491aa426539d848fef7b79d9c2139765570f91f67512dbae0bd3e55153a28c4ca4e7603fbbc060853078f942eda1b4ce0bbe5637ef561ffe46b70a865c3ea06c34011fd4f90f837ee1f61c877ed9e8b0d4a6abc524b704f3e84eab3c5036de2175fddd1fca95a17ba36be896969141c65e8cf14cbcc68f74edbc623560212861689f394cd186cab1d4a2baa61af6f46f6e4b3603b5258599d3b7e49ddf8cb", 0xf8) ioctl$WSKBDIO_SETMAP(r3, 0x8010570e, &(0x7f0000000040)={0x2, &(0x7f00000002c0)=[{0x4, 0x2, 0x43, 0x3, 0xa6}, {0x4, 0x7, 0xfffb, 0x4, 0xfff4}]}) ioctl$WSKBDIO_GETENCODINGS(r3, 0xc0105715, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[0x0, 0x0]}) setreuid(0x0, 0xee01) r4 = getpgid(0x0) kill(r4, 0x0) close(r2) socket(0x2, 0x4001, 0x0) sysctl$net_inet_ip(&(0x7f0000000240)={0x4, 0x2, 0x0, 0x18}, 0x4, &(0x7f0000000300)="8eb55772108e54a504d1354e3cfb712b2760358e283e27d725e1de49a4cff2efa94daa9b89b3ae11782a21fdb42d966c8d4ef7df07cf9a301ad56f7c5fe70c86e9404b2b81bbccb52f45e153de87b89cd84763e766079884229203ca2827aea676e46587380563f9b12727032233b5dc59ed29c90a0e6e7fed6a4fc4d7f890a3d285f5d97d7d9707027b478072da51f71ec7174f7decfd67f770e5489b98a3827e52", &(0x7f00000003c0)=0xa2, &(0x7f0000000400)="405b4521b2557b879de9075bc1fdaeeca7b71fd98e9d2b04de91d617f2ddc8ffa257c0a3cf313e806b55c0eacaf819bfbb0977a5a8a102868a5ae88491da6b5c570497a4768a96", 0x47) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5200) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./bus\x00') setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) shmget$private(0x0, 0x1000, 0x16, &(0x7f0000379000/0x1000)=nil) r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ftruncate(r5, 0x40000000007) truncate(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) sysctl$net_pipex(&(0x7f0000000280)={0x4, 0x23, 0x1}, 0x3, 0x0, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00', 0x4) 1.481792987s ago: executing program 6 (id=7): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x800000004, [{&(0x7f000014c000/0x4000)=nil, &(0x7f00000b7000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000124000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000795000/0x2000)=nil, 0xb93a}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00006d4000/0x2000)=nil, 0xfdfffffffffffff9}, {&(0x7f0000312000/0x2000)=nil, &(0x7f0000025000/0x3000)=nil, 0x4001}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000123000/0x3000)=nil, &(0x7f000014d000/0x4000)=nil, 0x4}, {&(0x7f00002f3000/0x3000)=nil, &(0x7f000063b000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000026000/0x4000)=nil, 0x6}, {&(0x7f00001dc000/0x1000)=nil, &(0x7f00001db000/0x3000)=nil, 0xc6}, {&(0x7f0000392000/0x1000)=nil, &(0x7f00003a6000/0x3000)=nil, 0x1000}, {&(0x7f00006b8000/0x4000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x51c}, {&(0x7f000068b000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xc0}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000754000/0x4000)=nil, 0x4000009e}], './file0\x00', 0xfffffffa, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}) (async) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) (async) r0 = socket(0x18, 0x1, 0x0) r1 = socket$inet6(0x18, 0x1, 0x6) closefrom(r0) (async, rerun: 32) syz_open_pts() (async, rerun: 32) bind$inet6(r1, 0x0, 0x0) (async) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000380)={0x5a3, 0x6, 0x1c62, 0x7ffffffd, "c2a6d2030056521039d18100a0d4d37e3600", 0x3, 0xa19}) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000b40)={&(0x7f0000000ac0)='./file0\x00', 0x9, &(0x7f0000000b00)='./file0\x00', 0x8}) (async) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setrlimit(0x3, &(0x7f0000000b80)={0x3, 0x7}) (async, rerun: 32) ioctl$WSKBDIO_SETENCODING(r4, 0x80045710, &(0x7f00000001c0)=0x100) (rerun: 32) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 1.330896859s ago: executing program 3 (id=9): r0 = syz_open_pts() ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f0000000000)) ioctl$TIOCSFLAGS(r0, 0x8004745c, &(0x7f0000000040)=0xc) ioctl$TIOCGETA(r0, 0x402c7413, &(0x7f0000000080)) setuid(0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x812, r0, 0x3) sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x23, 0x2}, 0x3, &(0x7f0000000100)="cb60c8cec0fafe6af08f6385a7eafa7444050680b71d31aa4f09a5793ef1c9db19d10f325a32405878e2e460a2a526fe4841045dd54f498c876be8bcd69cb7ca0a9fe1a4f88fb88bd75a7af86a5148625a28ee20b7a1e3eb95bd62abb165b8bb9310b7aa2ec59f672e8a6c628b1a024c1af83af2ff5521732a057af4ed09138a733075ca93cc3600b7254921efd1d269d4024f50562070564930598cb73be728dfa49d962b04506e1ed6d791a65832f6fe534ad8aba471404237bd56edc270006be7c8a573bf1869ab4b80a00d220674e2e586ddce9a4bc17c9ef376e07f131e31b4a3f85fd823", &(0x7f0000000200)=0xe7, &(0x7f0000000240)="8cea2c126e75b83b5db84dc2a4f1fb971cdfd5362534aeda971933767cba9712d1565d6b88df2969adef233143cb35584e5cfeeba5b1a05d7d1f2626b661cd6dbbc33c136f856f8a876410f697fe7f804b160d1d21ff088f11309959cca5013ae67e72d473690e132bbbd2abbf7253ff38b7a3b4f0860ab312bc1462264bdad36bded0e78adf1ffa55c78a248873f566d3a807c0df6f54e55d7aa9f6fdb7eb11cfe55710d634f616cc76", 0xaa) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000340)={0x9, 0xb4, 0x4, 0xb28, 0xc00000, 0xfffffffd, 0x4, 0x10, [{0x9, 0x8, 0x5, 0x4}, {0x4, 0x80, 0x858, 0x27}, {0x3, 0x1000, 0x9, 0x100}, {0x0, 0x1, 0x5c68, 0x4e78}, {0x6, 0xba7, 0x4, 0xfe000000}, {0x8, 0x40, 0x0, 0x7}, {0x5, 0x3, 0x7fff, 0x5}, {0x65f, 0x576, 0x9, 0xb3}, {0x5, 0x80000000, 0x6, 0x6}, {0x3, 0xeb7, 0xf}, {0xc, 0x6, 0x1, 0x400}, {0x2, 0xc2, 0x7797, 0x10000}, {0x1fc0, 0x7fffffff, 0x0, 0x5}, {0x100, 0x400, 0x9, 0x9}, {0x3, 0xed, 0x10000, 0x2}, {0xffff, 0x7, 0xe, 0xc}]}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x2, 0x0) ioctl$AUDIO_GETSTATUS(r2, 0x40204128, &(0x7f00000004c0)) r3 = syz_open_pts() ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000500)=0x7fff) setsockopt(r2, 0x5dc, 0x323, &(0x7f0000000540)="10485be09a893ac93ddecdf757fe08d1a72435a60f58c899540aaa9156a4207e9dac174e7016316fe777b6647d9fe11ceba26c1797ef0511b084e2540790db7fa385265a3f108b29894056e108efdb8e9f8b7a2582a7ee647d4968644cf433b072f7337a9983f6d48a2c6cc55ff39ebd7108c80b9e2713261296a3a1aa08e6eaad168c8ff32d3e1eb9e2f1d92071b256f5e9d1b11182", 0x96) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000600)) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000680)={0x5, &(0x7f0000000640)=[{0x3, 0x4, 0x70, 0x2}, {0x4, 0x31, 0x7, 0x7}, {0x7, 0x8b, 0x4, 0x3}, {0xdab, 0x3, 0x1, 0x5}, {0x3, 0x7f, 0x4, 0x9}]}) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r4, 0x3, 0x6, &(0x7f0000000700)="b7635120775d47958c2f29e962332096ae739c1a", 0x14) r5 = getegid() getgroups(0x2, &(0x7f0000000740)=[r5, 0xffffffffffffffff]) ioctl$TIOCMGET(r0, 0x4004746a, &(0x7f0000000780)) ioctl$TIOCSCTTY(r3, 0x20007461) r6 = shmget(0x0, 0x2000, 0x25, &(0x7f0000ffe000/0x2000)=nil) shmat(r6, &(0x7f0000ffc000/0x4000)=nil, 0x2000) ioctl$TIOCSETVERAUTH(r3, 0x8004741c, &(0x7f00000007c0)=0xffffffff) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000800), 0x200, 0x0) ioctl$DIOCXROLLBACK(r7, 0xc0104453, &(0x7f0000001480)={0x3, 0x7, &(0x7f0000000840)=[{0xe4cfc9b0f526bc6d, './file0\x00'}, {0x0, './file0\x00', 0x80000000}, {0x1, './file0\x00', 0x9}]}) msync(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2) 1.328024636s ago: executing program 1 (id=2): open(&(0x7f0000000000)='./file0\x00', 0x200, 0xb4) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x26, &(0x7f0000000000), 0x14) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) setitimer(0x0, &(0x7f0000000040)={{0xffffffff, 0x800000000003}, {0xffffffff}}, 0x0) 1.326900344s ago: executing program 7 (id=8): open(&(0x7f0000000180)='./file0\x00', 0x40000, 0x160) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) (async) truncate(&(0x7f0000000040)='./file0\x00', 0x600030000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) r0 = socket$inet6(0x18, 0x1, 0x6) (async) r1 = socket$inet6(0x18, 0x1, 0x6) (async) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$DIOCXROLLBACK(r2, 0xc0104453, &(0x7f0000000000)={0x0, 0x9, 0x0}) (async) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x8, "fffffff9000000000000000000000001", 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000280)={0x1c, 0x18, 0x0, 0xfffffffc, "0000000000000001000000000800", 0x2}, 0x1c) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x14, &(0x7f0000000000), 0x1) (async) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x7}, 0x1c) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000}) (async) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0x4, &(0x7f00000001c0)="03000000", 0x4) (async) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) r5 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000380)="018130399503687acf22fd38d1f6b21692407b9c34dab16ff22ba7c78947eebbec06c28f461baa0c000000000000008413d0ed3b843d37866d54149565022a64f0741c7dd7fa530182d03756477a297d963fa7fb6d71f6b519dfe34ae81280bf1a3d1e4dd25b0600ba3b7bbe67548642909087efa14ee135c447e617af899c79227c45d0276d2f1cc646c3fd72238ea25f5949ff58ba057c6cd7467b4cc3d07eb7e86f5bdd42f21505784f6626275c6e952e76eddea72165bad474e73cd1b5821c85515f811d15cadab176acccc7e183c5196763", 0xd4}], 0x1) (async) execve(0x0, 0x0, 0x0) (async) r6 = socket(0x18, 0x1, 0x0) setsockopt(r6, 0x1000000000029, 0x3e, &(0x7f0000000040)="00fb534f", 0x4) (async) getsockopt(r6, 0x29, 0x32, 0x0, 0x0) (async) getpeername$inet(r6, &(0x7f0000000040), &(0x7f0000000080)=0x10) 1.326544212s ago: executing program 4 (id=11): mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) mquery(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x0, 0xffffffffffffffff, 0x97) r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = dup2(r0, r0) kevent(r1, &(0x7f0000000040)=[{{}, 0xfffffffffffffff6, 0xb4, 0x80, 0x6, 0x80}, {{r0}, 0xfffffffffffffffd, 0x0, 0x4, 0x3}, {{r0}, 0xfffffffffffffffb, 0x0, 0x4, 0xe62, 0x8}, {{r0}, 0xfffffffffffffffb, 0x44, 0x1, 0x2, 0x10}, {{r0}, 0xffffffffffffffff, 0x40, 0x4, 0x400, 0xcd8}, {{r0}, 0xffffffffffffffff, 0x9, 0x2, 0x3565e7bc, 0x7d}], 0x5, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffff6, 0x80, 0x40000000, 0x0, 0xffffffffffffffff}, {{r0}, 0xfffffffffffffff5, 0x0, 0xf0000000, 0x9, 0x8}, {{r0}, 0xfffffffffffffffa, 0x40, 0x20000000, 0x4}], 0x8, &(0x7f0000000180)={0x2, 0x1}) ioctl$TIOCDRAIN(r0, 0x2000745e) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) (async) mquery(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x0, 0xffffffffffffffff, 0x97) (async) openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) dup2(r0, r0) (async) kevent(r1, &(0x7f0000000040)=[{{}, 0xfffffffffffffff6, 0xb4, 0x80, 0x6, 0x80}, {{r0}, 0xfffffffffffffffd, 0x0, 0x4, 0x3}, {{r0}, 0xfffffffffffffffb, 0x0, 0x4, 0xe62, 0x8}, {{r0}, 0xfffffffffffffffb, 0x44, 0x1, 0x2, 0x10}, {{r0}, 0xffffffffffffffff, 0x40, 0x4, 0x400, 0xcd8}, {{r0}, 0xffffffffffffffff, 0x9, 0x2, 0x3565e7bc, 0x7d}], 0x5, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffff6, 0x80, 0x40000000, 0x0, 0xffffffffffffffff}, {{r0}, 0xfffffffffffffff5, 0x0, 0xf0000000, 0x9, 0x8}, {{r0}, 0xfffffffffffffffa, 0x40, 0x20000000, 0x4}], 0x8, &(0x7f0000000180)={0x2, 0x1}) (async) ioctl$TIOCDRAIN(r0, 0x2000745e) (async) 1.323427818s ago: executing program 1 (id=12): r0 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r3, 0x0) sysctl$hw(&(0x7f0000000280)={0x6, 0x14}, 0x2, &(0x7f0000001280), &(0x7f0000000000)=0xfffffffffffffd9e, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x38, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x8200, 0x0, 0xfffc, {[@timestamp={0x8, 0xa, 0x1, 0x1}, @mss={0x2, 0x4, 0x6}]}}}}}}}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, r2, r3, 0x8f, 0x25, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0x8}) r4 = socket(0x11, 0x3, 0x0) fchflags(r4, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) close(r6) r7 = socket(0x2, 0x2, 0x0) connect$unix(r7, &(0x7f0000000000), 0x10) ftruncate(r5, 0x1) write(r6, 0x0, 0x0) r8 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4d) setreuid(0xee00, r2) syz_open_pts() 1.322373311s ago: executing program 6 (id=13): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x413dff) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 1.321196845s ago: executing program 7 (id=14): r0 = msgget$private(0x0, 0x4) msgctl$IPC_RMID(r0, 0x0) select(0xd, &(0x7f00000000c0)={0x4, 0xe9, 0x8, 0x81, 0x2, 0x4, 0x8000000000000000, 0xb}, &(0x7f0000000140)={0x1, 0xffffffffffffcca3, 0x101, 0x40000000003, 0x5, 0x7, 0x0, 0x6}, &(0x7f0000000300)={0x4, 0x8000000000000000, 0x3d, 0x100, 0x9, 0xda0, 0x5, 0xe}, 0x0) 1.275926195s ago: executing program 4 (id=15): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='#', 0x1}, {&(0x7f0000000040)='!', 0x1}], 0x2) write(r0, &(0x7f0000000280)="7a6620ff00ce9d0a", 0x8) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x0, 0x0, 0x6}], 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f00000001c0)="82de67f08d2392bc3b89ea3f64770f2cf072e3d2c024a995c3ea9bbfab3a4b24f20bf7de3d66fee923721748d4a8", 0x2e) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fc, 0x17, 0x10000, 0x101, 0x80000001, 0x80001001, 0x10001, 0x10, [{0x0, 0x6, 0x800004, 0x71000}, {0xffffffff, 0xffffffff, 0x8, 0xfffffff9}, {0x8, 0xb526, 0x82, 0x9}, {0x1, 0x800, 0x5}, {0x4, 0x200722, 0x2800, 0x7}, {0x1, 0xa, 0x3, 0x2}, {0xce1, 0xd, 0x573, 0x6d}, {0x16, 0x300, 0x54, 0x8}, {0x2, 0x9, 0x5, 0x8}, {0x5, 0x1, 0xd1b, 0x8c}, {0x60, 0x3f7f, 0x5, 0x3}, {0x7ff, 0x9, 0x0, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71713, 0x1, 0x1, 0xfeac}, {0xc, 0x407, 0x7}, {0x8800, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) pread(r2, &(0x7f00000002c0)="436d9e7fa09f9297bab336afcf23d88d1c7f857e16b39f1305cee0d20de663497b4509b56aace3a74684249031a1728344f75b0da3a115f2cda2738926233b22ab872c82cf66655312a76efb426f558a004fc2ddd0904a510b0de0cb1d8597faad58108b46b6f8796cf1a1ba23c47d8e4450ee1335fc66429d992461196be03d358720c346910677fa7a3b81898cf045fccf08200c7bbed29e83b8bd808eb08c36f3f040a690cd8db264c00772454089d9169e964c569ba6c23c2f73b0096dbe99b5958b44306b3b4bd3462787", 0xcd, 0x5) r3 = socket$inet(0x2, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = socket(0x18, 0x3, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800"]) ioctl$FIONREAD(r4, 0x8020697a, &(0x7f0000000100)) r5 = socket(0x18, 0x1, 0x0) sysctl$kern(&(0x7f0000002340)={0x1, 0x29}, 0x2, &(0x7f0000002380)="271b85d3585750437d9d63b8624df91e18e8f3d97d21c50d7996610fcc91a75ac621ba890ba8ecabbd1f267215436bd8f1303fe8bc67b901607c245c9074ee69ec4b5e3af95059e6ef18268656eba49d3cc9205d009f82fbddac2d2f6ba078aa", &(0x7f0000002880)=0x60, &(0x7f0000002480), 0x0) ioctl$FIONREAD(r5, 0x802069dd, &(0x7f00000001c0)) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x4, [{&(0x7f0000558000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000340000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7e}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x80000000}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f000024d000/0x1000)=nil, &(0x7f00005ff000/0x4000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000179000/0x1000)=nil, 0x80000002}, {&(0x7f0000338000/0x4000)=nil, &(0x7f0000000000/0x400000)=nil, 0x8}, {&(0x7f000077c000/0x1000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x6b9}, {&(0x7f0000132000/0x2000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12e}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x2}, {&(0x7f0000196000/0x3000)=nil, &(0x7f000076c000/0x4000)=nil, 0xa}, {&(0x7f000024b000/0x2000)=nil, &(0x7f000079e000/0x4000)=nil, 0xffffffffbffffff9}, {&(0x7f00004d0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5e04}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x6}], './file0\x00', 0x3}) r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) truncate(&(0x7f00000000c0)='./file0\x00', 0x100000001) ioctl$FIOASYNC(r6, 0xc0107002, &(0x7f00000000c0)) setsockopt$inet_opts(r3, 0x0, 0x200000000000b, &(0x7f0000000080), 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) 1.274631316s ago: executing program 6 (id=16): open$dir(0x0, 0x200, 0x68) (async) openat$pf(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r0, 0xcd604406, &(0x7f0000000040)={0x7ffb, 0x0, 0xfffbfff0, 0x0, "d6a24900b178926c79486b47c1dd00", 0x4, 0x5}) (async) mknod(0x0, 0x2000, 0x5c4a) (async) syz_emit_ethernet(0x46, 0x0) mknod(0x0, 0x2000, 0x1e5f) (async) r1 = open(0x0, 0x0, 0x2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r1, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x2, 0x2, 0x9, 0x300000006}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x3) ioctl$DIOCCLRIFFLAG(r2, 0xc028445a, &(0x7f0000000100)={'./file0\x00', &(0x7f00000000c0), 0x3ff, 0x201, 0x1, 0x3ff}) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) (async) open(&(0x7f0000000300)='./file0\x00', 0x80, 0x123) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) r3 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) (async, rerun: 32) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) (rerun: 32) clock_settime(0x100000000000000, &(0x7f0000000000)={0xfd1ecc7f}) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r4, 0x0, 0x64, &(0x7f0000000240), 0x0) (async) semctl$SETVAL(0x0, 0x2, 0x8, 0x0) ioctl$DIOCSETIFFLAG(0xffffffffffffffff, 0xc0284459, &(0x7f0000000080)={'./file1\x00', &(0x7f0000000040)=""/44, 0x6c54, 0xc, 0xbace, 0x10001}) r5 = semget$private(0x0, 0xb, 0x19f) semop(r5, &(0x7f0000000040)=[{0x1, 0x7ff, 0x1000}, {0x0, 0x100, 0x1800}, {0x3, 0x5, 0x1000}], 0x3) 1.273453154s ago: executing program 7 (id=17): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) getitimer(0x2, 0x0) acct(0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000040)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) openat$diskmap(0xffffffffffffff9c, 0x0, 0x20, 0x0) open(&(0x7f0000000140)='./file2\x00', 0x20000, 0x12a) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x8004746c, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x5, 0x1, 0x0, 0x2}, 0x8) r2 = socket$unix(0x1, 0x1, 0x0) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xee01) connect$unix(r2, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) shmget$private(0x0, 0xc00000, 0x24c, &(0x7f0000400000/0xc00000)=nil) syz_emit_ethernet(0x3e, 0x0) open$dir(&(0x7f00000001c0)='./file2\x00', 0x8000, 0x0) execve(0x0, 0x0, 0x0) 1.272518007s ago: executing program 4 (id=18): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x5eed8, &(0x7f00000002c0), 0x0) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSKBDIO_SETBELL(r1, 0x80105703, &(0x7f0000000080)={0xccc, 0x8, 0x8, 0x2}) r2 = setsid() mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r3 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0xc2) ioctl$TIOCSCTTY(r3, 0x20007461) fcntl$setown(r3, 0x6, r2) 1.245133614s ago: executing program 5 (id=6): r0 = syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000040)={0xfffffffe, 0x2, 0x83, 0xc072, "e0909ca47e03e8fe0ad400001613f6d7bc0d6e60", 0x6, 0x80001}) fcntl$setown(r0, 0x6, 0xffffffffffffffff) 1.19358821s ago: executing program 2 (id=3): mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r0 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) r1 = semget$private(0x0, 0x3, 0x10) semctl$GETALL(r1, 0x0, 0x6, &(0x7f0000000300)=""/240) semctl$SETVAL(r1, 0x0, 0x8, &(0x7f0000000080)=0x7) 1.136574846s ago: executing program 2 (id=19): r0 = socket(0x10, 0x2, 0x0) listen(r0, 0x3ff) getsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000000), &(0x7f0000000040)=0x4) pipe(&(0x7f0000000000)) 1.135716242s ago: executing program 2 (id=20): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0xffffffffffffffff, 0x40, 0xfffffffffffffffb, 0x6, 0x3, 0x8000, 0x6, 0xd347, 0x7, 0x2, 0x9, 0x91c, 0x8, 0x2000180, 0x0, 0xd3, 0x200000076, 0xffffffffffffbff7], [0x5438b950, 0x5, 0x1004, 0xf916, 0x1, 0x1, 0x9, 0x2, 0xffffffffffffffff, 0x3], [0x9, 0x0, 0x8, 0x7, 0x10000, 0x40000000000210, 0x1000002], [0x100000000, 0x10801, 0xcfa, 0x5, 0x3], [{0x0, 0x7, 0xfffffbfc, 0x5}, {0x2, 0x928, 0x1, 0x338}, {0x1000, 0x7fffffff, 0x1, 0x5}, {0xb, 0xfffffbff, 0x2, 0x1}, {0x3, 0x10000008, 0x2, 0x8}, {0x1f, 0x40000004, 0x0, 0x7}, {0xe4, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x8001, 0x5}], {0x52b, 0x4, 0x401, 0x5e}, {0xfffb, 0xffffbfc0, 0x9}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0206923, &(0x7f00000001c0)) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) socket(0x18, 0x3, 0x0) (async) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) r3 = syz_open_pts() ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f0000000040)={0xfffffffe, 0x0, 0x83, 0xc072, "e0909c80429a030bf70100001613f6d7bc0d6e60"}) (async) ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f0000000040)={0xfffffffe, 0x0, 0x83, 0xc072, "e0909c80429a030bf70100001613f6d7bc0d6e60"}) fcntl$setown(r3, 0x6, 0xffffffffffffffff) 1.135093016s ago: executing program 5 (id=21): mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) (async) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x80000000, {[0xfffffbeffffffffb, 0x10000000001, 0x2, 0x2, 0x8001, 0x7fff, 0x6, 0x1, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa5, 0x82, 0x95], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffff9, 0x2, 0x0, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000002, 0x0, 0x4, 0x11003, 0x4], [0xd, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffa, 0x4], [{0xdb6e, 0x4, 0x0, 0x40007d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0x7, 0x80}, {0x3, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0xfffff3d8, 0x0, 0x8}, {0x0, 0x2003, 0x40003, 0x6}, {0x6b7}, {0x0, 0x965, 0xfffffffc, 0x9}], {0x2000, 0x10007, 0x5}, {0x29, 0x6, 0xb0, 0x2}}}) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x80000000, {[0xfffffbeffffffffb, 0x10000000001, 0x2, 0x2, 0x8001, 0x7fff, 0x6, 0x1, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa5, 0x82, 0x95], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffff9, 0x2, 0x0, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000002, 0x0, 0x4, 0x11003, 0x4], [0xd, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffa, 0x4], [{0xdb6e, 0x4, 0x0, 0x40007d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0x7, 0x80}, {0x3, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0xfffff3d8, 0x0, 0x8}, {0x0, 0x2003, 0x40003, 0x6}, {0x6b7}, {0x0, 0x965, 0xfffffffc, 0x9}], {0x2000, 0x10007, 0x5}, {0x29, 0x6, 0xb0, 0x2}}}) pselect(0x40, &(0x7f00000038c0)={0x6, 0x8, 0x8, 0x800, 0x7, 0x5, 0x8, 0x7}, &(0x7f0000003900)={0x4, 0x5, 0xfffffffffffffffd, 0x13, 0x7b, 0x3, 0x6, 0x1}, &(0x7f0000003940)={0x7af, 0x8, 0x2, 0x1, 0x2, 0x6, 0xe09d, 0xa}, &(0x7f0000003980)={0xe, 0x7f}, &(0x7f00000039c0)={0x7}) r1 = kqueue() kevent(0xffffffffffffffff, &(0x7f0000000340)=[{{r0}, 0xffffffffffffffff, 0x12, 0x2, 0x8000000000000000, 0x8}], 0x8001, 0x0, 0x200, 0x0) socketpair(0x1e, 0x4, 0x2, 0x0) kevent(r1, &(0x7f00000000c0), 0x56, 0x0, 0x7fff, 0x0) ioctl$DIOCRADDTABLES(r0, 0xc450443d, &(0x7f0000002180)={{'./file0\x00', './file0\x00', 0x64, 0x8}, &(0x7f0000000440)=[{'./file0\x00', './file0\x00', 0x4, 0xc}, {'./file0\x00', './file0\x00', 0x48, 0x7}, {'./file0\x00', './file1\x00', 0x1, 0x7}, {'./file0\x00', './file0\x00', 0x1, 0x9f}, {'./file0\x00', './file0\x00', 0x22, 0x9}, {'./file0/file0\x00', './file0\x00', 0x0, 0x67}, {'./file0\x00', './file0\x00', 0x0, 0x4}], 0xd, 0x7, 0x9264, 0x3, 0xc37f, 0x1000, 0x3c, 0x80000000}) 1.133872257s ago: executing program 6 (id=22): stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)) r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) ioctl$WSDISPLAYIO_LSFONT(r1, 0xc058574e, &(0x7f0000000100)={'./file0\x00', 0x4, 0x124c0, 0x3, 0x0, 0xffffffff, 0x1bfff, 0x5, 0x2, 0x2}) 1.116731433s ago: executing program 2 (id=23): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d3725864749b) ioctl$WSDISPLAYIO_GETEMULTYPE(r0, 0x801c4903, &(0x7f0000000140)={0x4, '.\x00'}) sysctl$kern(&(0x7f0000000100)={0x1, 0x55}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x7c1a11f59a1601b4) 1.113306877s ago: executing program 4 (id=24): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000347000/0x3000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f00005c9000/0x2000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1}, {&(0x7f0000b66000/0x4000)=nil, &(0x7f000088d000/0x2000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x6}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f00000c4000/0x10000)=nil, 0x200000000000}, {&(0x7f000000d000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2}, {&(0x7f00004cc000/0x4000)=nil, &(0x7f0000661000/0x3000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x16}, {&(0x7f0000b11000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000038f000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000003}, {&(0x7f0000322000/0x4000)=nil, 0x0, 0x9bbf}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000142000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f00004e9000/0x4000)=nil, 0x40000000000}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x5}, 0xc) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_open_pts() r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000007c0), 0x82, 0x0) pipe2(0x0, 0x10004) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) write$audio(0xffffffffffffffff, &(0x7f0000000100), 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0xafffe) readv(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0) ioctl$WSDISPLAYIO_GETSCREEN(0xffffffffffffffff, 0xc0245755, 0x0) openat(0xffffffffffffff9c, 0x0, 0xb5219f1000b913f1, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r3, &(0x7f0000001280), 0x0) openat$vnd(0xffffffffffffff9c, &(0x7f0000000400), 0x400, 0x0) ioctl$TIOCSETA(r2, 0xcd60441a, &(0x7f0000000040)={0x3, 0x2, 0x3, 0x0, "00000100000000000000000000001561b6c91000", 0x200, 0x1}) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x100, &(0x7f0000000180)=[{{r1}, 0xffffffffffffffff, 0x13, 0x2}, {{r1}, 0xffffffffffffffff, 0x62}], 0x6, 0x0) mknod(&(0x7f0000000bc0)='./file0\x00', 0x8000, 0x9) ioctl$DIOCGETQUEUE(r1, 0xc148445f, &(0x7f0000000a40)={0x2f39, 0xfffffffa, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x0, 0x4}, {0x5, 0x5}, 0xbd66}, {{0x0, 0x4}, {0x8000000000000001, 0x80}, 0x8}, {{0x2, 0x10000}, {0x3, 0x9}, 0xffffffff}, {0x7, 0x7ff, 0x2, 0x8000}, 0x0, 0xffff, 0xff, 0x1, 0x5}}) execve(0x0, &(0x7f0000000340)=[&(0x7f0000000100)='tap'], 0x0) r5 = socket(0x18, 0x3, 0x0) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000a00), 0x1, 0x0) ioctl$FIONREAD(r5, 0xc028698a, &(0x7f0000000100)) 1.112718567s ago: executing program 6 (id=25): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xc0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x2b, 0x9, 0x0, 0x80000001, 0xa1b0, 0x9, 0x10, [{0x0, 0x7, 0x1, 0x71002}, {0x3, 0x40, 0x8, 0xfffffffd}, {0x101, 0x7, 0xfffffffd, 0x9}, {0x4, 0x10001, 0x800f, 0x80000000}, {0x7, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x6}, {0x100000a, 0x8, 0x14, 0x5910}, {0x6000001, 0x82, 0x80000006, 0x6}, {0x6, 0x2000006, 0x1000, 0x4}, {0x1ce, 0x0, 0xdaa1, 0x3}, {0x7, 0x9, 0x8}, {0x4, 0x9, 0x8, 0x8}, {0x29a7171a, 0xffffffff, 0x60, 0xb}, {0x6, 0xfffffffa, 0x206, 0x4}, {0x0, 0x1, 0x1ff, 0x230003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, 0x0) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x8000000000002001, 0x0}) r1 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, 0x0, 0x0) ioctl$DIOCCHANGERULE(r0, 0xcd60441a, &(0x7f00000002c0)={0x9, 0x800, 0x3, './file1\x00', './file0\x00', 0x0, "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"}) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) nanosleep(&(0x7f00000025c0), &(0x7f0000001180)) 1.112042927s ago: executing program 5 (id=26): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x18, 0x3, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6f000000500000000000ff02000000000000000000e1b493"]) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) execve(0x0, &(0x7f0000000000)=[&(0x7f0000000100)='///'], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000180)='./file0\x00', 0x119) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) chroot(&(0x7f00000002c0)='./file0/file0\x00') setuid(0xffffffffffffffff) unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000080)='c\x00') ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) r2 = openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) fcntl$setstatus(r2, 0x4, 0x8) setuid(0xee01) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504446, &(0x7f00000000c0)={0x20004, 0x805c, 0x5, 0xa, "97a2e900", 0x8, 0x7}) connect(r0, &(0x7f0000000040)=@un=@abs={0x1, 0x1, 0x0, 0x3}, 0x8) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffef1) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x64, 0xd, 0xf7, 0x6}, {0x1d, 0x0, 0x0, 0x6661}, {0x9b1e, 0xff, 0xf4, 0x4000800}]}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 1.103189648s ago: executing program 1 (id=27): r0 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r0, 0xffff, 0x1007, &(0x7f0000000000)=0x2, 0x4) (async) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x7}, 0x1c) 1.097751881s ago: executing program 2 (id=28): mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) r0 = semget(0x3, 0x4, 0x2) semop(r0, &(0x7f0000000000)=[{0x3, 0xf3f7, 0x1000}, {0x1, 0x57b5, 0x1800}, {0x1, 0xffff, 0x1000}, {0x3, 0x9, 0x1000}, {0x4, 0x8, 0x1800}, {0x1, 0x8, 0x800}, {0x0, 0x2, 0x400}, {0x2, 0x7, 0x1000}], 0x8) (async) r1 = semget(0x0, 0x2, 0x240) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000040)) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0x1c, 0x18, 0x3, 0x10001, "981cd19bd370d7a8777b0311162f0655"}, 0x1c) (async) shutdown(r2, 0x2) (async) madvise(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x6) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffff9c, 0xc01864c1, &(0x7f0000000140)={0x0, 0x2, 0xffffffffffffffff, 0x0, 0x2}) ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000180)={0xa, 0x800, 0x4, 0xdb, "4b9820a93078d1cd74f11275cc3d45f17803938e", 0x2, 0x81}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$LIOCSFD(r3, 0x80046c7f, &(0x7f00000001c0)=r2) (async) mknod(&(0x7f0000000200)='./file0\x00', 0x100, 0x0) (async) sendmsg(r3, &(0x7f0000000580)={&(0x7f0000000240)=@in={0x10, 0x2, 0x3, 0x100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="fec90a911245cb7da09116d245c612dadaa579078cf466403d5e77562afe0b3751adc7fb3e5ae3eba9b6f8c3d1110ef9b17cdd6c505cd92f1f617bf390f4e21bdc6e063c674bc8ccd376bf251f7aafd35cc9dd", 0x53}], 0x1, &(0x7f0000000340)=[{0x28, 0x1, 0xccf, "d632990687cf8cb25d1640f0a94f330bc61d77f5025ade0bee"}, {0x18, 0xffff, 0x9, "27b8badf4d0ab2930711"}, {0xf8, 0x0, 0x40, "1fb6f76666f14e6012cb7ff57ed9f6b55cabb555fb6967544005e841f53a2e1908af9bf664287e687fadc6d1595dedb1de1a8251a718e98ec569de8dd4be55396871e56f664eca520c7428c6406076c965bcf97feb4d137c3cc5428b9230919d48956dc1ef6038e433d641d98fe52c09ee8cc21838078ea69804855550b993434ec2c56ea17e57da161a74fbb7a568c2f6553d1060c67f9fe7c8b0701981b7084b0ffa03afd7a93bf50c7d708321287113403ef9f9525518b96034f4f5e244ea629a31a6fdff150a64ad49c29c9b9ecac664fa8bf3eead82cfdd0d162450d1a53218a2d32a52d8e7dbc5d5"}, {0x10, 0x1, 0x800, "14d3d5"}, {0xf0, 0xffff, 0x3, "1ba255c4aa088fe4ef024fbc4d6ee8e853110c27ce4ad0794327243c9830d1645150cdbe6064a55a8c45d462a0a1d6ebe2e96a5348f13e83f99ffdc98ae8671f901e7e7abc3c3246a1d6368dfb7cba4a8019366d6ef2718581c0414d206656401950875d6334c2a9626bbc877f37bb9e7dd6abdad467f72f928a8f8fd7c6b86ccf5fdf32d372baada38f3f824747507c9146dbeb1c1a66bcede08a0e8848c23839b03101dd309d9720f0ce4a59f53f3f63f6e1f30854f77142e0930be44e4c501f234a737ac07383d60035e0f7b8d7dabb846c393e29dcd9fc411c8ff9962b3f5b4aca"}], 0x238}, 0xea63cc673c43db0d) (async) mprotect(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x4) (async) getpeername$inet6(r3, &(0x7f00000005c0), &(0x7f0000000600)=0x1c) syz_extract_tcp_res(&(0x7f0000000640), 0xfffffbff, 0x101) r4 = dup3(r3, r3, 0x10004) (async) semctl$GETZCNT(r0, 0x1, 0x7, &(0x7f0000000680)=""/189) (async) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000780)={0x7, &(0x7f0000000740)=[{0x3, 0x7f, 0x3b, 0xe5b8}, {0x0, 0x1, 0x3, 0x1}, {0x1, 0x7, 0x8, 0xffff84f5}, {0x3, 0x9f, 0x4c, 0xde}, {0xfa2d, 0x1, 0x8, 0x8}, {0x7, 0x1, 0x1b, 0x178}, {0x9, 0xd, 0x10, 0x237}]}) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) (async) r5 = semget(0x1, 0x4, 0x0) semop(r5, &(0x7f00000007c0)=[{0x4, 0xfff8, 0x800}, {0x4, 0x5691, 0x800}, {0x3, 0xb, 0x1000}], 0x3) (async) semctl$GETPID(r1, 0x1, 0x4, &(0x7f0000000800)=""/25) (async) mlock(&(0x7f0000fef000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000) (async) unveil(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='r\x00') (async) r6 = openat(r4, &(0x7f00000008c0)='./file1\x00', 0x40, 0x80) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, &(0x7f0000000a00)={0x0, 0x98, &(0x7f0000000940)=""/152}) 1.093058896s ago: executing program 4 (id=29): r0 = socket(0x11, 0x3, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/13, 0xd}], 0x1, 0x0}, 0x42) sendto$unix(r0, 0x0, 0x0, 0x40a, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x196, 0x3ff}, 0x400, 0x10000, 0x0, 0x0, 0x1, 0x80000000000010c, 0x5, 0x7}) r1 = semget(0x0, 0x1, 0x281) semctl$SETALL(r1, 0x0, 0x9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) chmod(&(0x7f0000000000)='./file0\x00', 0x0) setresgid(0x0, r4, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, r3, r4, 0x8f, 0x25, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0x8}) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) semop(r1, &(0x7f00000000c0)=[{0x1, 0x9, 0x1000}], 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x18, 0x0, 0x37) 1.053548247s ago: executing program 3 (id=30): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x20000, 0x80) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) ioctl$TIOCFLUSH(r1, 0xc0187009, &(0x7f0000000080)=0x400) sysctl$kern(&(0x7f00000000c0)={0x1, 0x32}, 0x2, &(0x7f0000000100)="71100000", &(0x7f0000000140)=0x4, 0x0, 0x0) ioctl$DIOCRGETASTATS(r0, 0xc4504447, &(0x7f0000000300)={{'./file0\x00', './file0\x00', 0x20, 0x1}, &(0x7f00000000c0)=[{@rand_addr=0xb1, '\x00', './file0\x00', 0xffffffff, 0x4, 0x2, 0x1, 0x8, 0x80, 0xb}, {@empty, '\x00', './file0\x00', 0x8, 0x194, 0x0, 0xfb, 0x9, 0x9, 0x4}, {@loopback, '\x00', './file0\x00', 0x40, 0x7, 0x3, 0x7, 0xb, 0xed, 0x39}], 0xea, 0x3, 0x7fffffff, 0x10006, 0x95, 0x4, 0x2, 0x8}) ioctl$PCIOCREAD(r0, 0xc0107002, &(0x7f0000000180)={{0x2, 0x5, 0xf7}, 0x3, 0x8, 0x80000000}) open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) 1.05251337s ago: executing program 2 (id=31): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4) r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000100)=0x7, 0x4) (async) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000100)=0x7, 0x4) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) (async) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x30, 0x1, './file0\x00'}, 0xa) (async) bind$unix(r0, &(0x7f0000000200)=@file={0x30, 0x1, './file0\x00'}, 0xa) sendmsg$unix(r0, &(0x7f00000029c0)={&(0x7f0000000080)=@file={0x80, 0x1, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$unix(r0, &(0x7f00000029c0)={&(0x7f0000000080)=@file={0x80, 0x1, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000080)={0x3, 0x0, 0x4, 0x20001fffffffd}) fcntl$lock(r3, 0x7, &(0x7f00000003c0)={0x3, 0x0, 0x41, 0x200000001}) ioctl$TIOCGWINSZ(0xffffffffffffff9c, 0x40087468, &(0x7f0000000000)) (async) ioctl$TIOCGWINSZ(0xffffffffffffff9c, 0x40087468, &(0x7f0000000000)) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x84, 0xd, 0x8, 0x9}, {0x54, 0xf4, 0xff, 0x7}, {0x6, 0x80, 0x2, 0xfffff804}]}) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6036e28200083b0001984b0e23742b40c3fa3d76af5fc1faff0200000000000000000000000000014e234e20000890788eb3560c6c19ef50667ac3cdbe17e9a6f229d2b3c5fd664735876a7c5a1a8f0871cefe7a86c2bb3346ef4f6e932f3dbf7f7347c0b36b6e84"]) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000200)=[{0x4c, 0xfc, 0x8}, {0x4, 0xf0, 0xfa, 0x49}, {0x6, 0x44, 0x52, 0xfffff804}]}) syz_emit_ethernet(0x165, &(0x7f0000000240)=ANY=[]) (async) syz_emit_ethernet(0x165, &(0x7f0000000240)=ANY=[]) 1.051673487s ago: executing program 5 (id=32): sysctl$net_inet6_ip6(&(0x7f0000000180)={0x4, 0x18, 0x29, 0x35}, 0x4, &(0x7f0000000200)="741ad85d9f", &(0x7f00000001c0)=0x5, 0x0, 0x0) sysctl$kern(&(0x7f0000000200)={0x1, 0x16}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x80, 0x80) mknodat(r0, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x3361) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x1ba) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCCLR(r1, 0xc0a86b06, &(0x7f0000000200)={0x0, 0x10000, 0x0}) semget$private(0x0, 0x0, 0x500) 1.047696665s ago: executing program 0 (id=1): chmod(&(0x7f0000000040)='.\x00', 0x31e) (async) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) (async) listen(r0, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) (async) connect$unix(r1, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) (async) accept4(r0, 0x0, 0x0, 0x4000) (async) setuid(0xee01) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0xc5) (async) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000300)='r\x00') 1.040772356s ago: executing program 4 (id=33): sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(r2, r2, 0x0) r3 = kqueue() r4 = fcntl$dupfd(r1, 0x0, r0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x890, 0x0) ioctl$BIOCLOCK(r5, 0x20004276) ioctl$BIOCSRTIMEOUT(r5, 0x8010426d, &(0x7f0000000040)={0x20006, 0xa9e0}) r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) kevent(r3, &(0x7f00000001c0)=[{{r0}, 0xfffffffffffffff7, 0x0, 0x80, 0x1, 0x1}, {{r1}, 0xfffffffffffffff9, 0x10, 0x8, 0x0, 0x5}, {{r1}, 0xc, 0x4d, 0x40, 0x4}, {{r0}, 0xfffffffffffffffe, 0x32d184bcfa203a65, 0x8, 0x5, 0x6}, {{r0}, 0xfffffffffffffffd, 0x8d, 0xf0000000, 0xffffffffffffff80, 0x2}, {{r4}, 0xfffffffffffffffa, 0x84, 0x2, 0x800000}, {{r1}, 0xfffffffffffffffb, 0xfa, 0x4a5b5a940f565da6, 0x7, 0x81}, {{r1}, 0xfffffffffffffff6, 0x64, 0x80, 0x4, 0x48d9}], 0x91, &(0x7f0000000300)=[{{r0}, 0xfffffffffffffff7, 0x40, 0x1, 0x2e67, 0x10000}, {{r0}, 0xfffffffffffffff9, 0x81, 0x2, 0x6, 0xd}, {{r5}, 0xfffffffffffffff7, 0x1, 0x2, 0x4, 0xcf}, {{r0}, 0xfffffffffffffffc, 0x0, 0x20, 0x3, 0x10001}, {{r6}, 0xffffffffffffffff, 0x4, 0x4, 0x9, 0x200}], 0x8000, &(0x7f00000003c0)={0x6, 0x10}) setgid(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$vm(&(0x7f0000000000)={0x2, 0x8}, 0x2, &(0x7f0000000080), &(0x7f0000000040), 0x0, 0x0) 755.808µs ago: executing program 0 (id=34): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abfba0900000008e37193f8343712050500b71dc0", 0x95, 0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) r1 = openat$audioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$AUDIO_GETPOS_ctl(r1, 0x40104123, &(0x7f0000000040)) socket$inet(0x2, 0x3, 0x2) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x84, 0xff, 0x1, 0xff}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{0xfffe}, {0x1, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0xff}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) 0s ago: executing program 5 (id=35): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea10070000000000", 0x8) (async, rerun: 32) r1 = openat$dri(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x20000, 0x0) (rerun: 32) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000140)) (async, rerun: 64) setuid(0xee01) (async, rerun: 64) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x3, 0x0, 0x8, 0xfffffffc}, {0x1}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts. witness: lock order reversal: 1st 0xffff800010fda4f0 sbufsnd (&so->so_snd.sb_lock) 2nd 0xfffffd806ade7c58 inode (&ip->i_lock) lock order [1] sbufsnd (&so->so_snd.sb_lock) -> [2] inode (&ip->i_lock) lock order data 0xffffffff8350c4d7 -> 0xffffffff8347b7ef is missing lock order [2] inode (&ip->i_lock) -> [3] sbufrcv (&so->so_rcv.sb_lock) #0 rw_do_enter_write+0xba #1 sblock+0xb6 #2 soreceive+0x27d #3 fifo_read+0x117 #4 VOP_READ+0x101 #5 vn_rdwr+0x15b #6 vndsetcred+0xa1 #7 vndioctl+0xdfc #8 VOP_IOCTL+0xac #9 vn_ioctl+0xf8 #10 sys_ioctl+0x674 #11 syscall+0xbd4 #12 Xsyscall+0x128 lock order [3] sbufrcv (&so->so_rcv.sb_lock) -> [1] sbufsnd (&so->so_snd.sb_lock) #0 rw_do_enter_write+0xba #1 sblock+0xb6 #2 sosplice+0x312 #3 sys_setsockopt+0x2ba #4 syscall+0xbd4 #5 Xsyscall+0x128 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806ade7c58,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(fffffd806ade7c40,1) at rw_do_enter_write+0xba rrw_enter(fffffd806ade7c40,1) at rrw_enter+0xc6 VOP_LOCK(fffffd806c1c0e70,2001) at VOP_LOCK+0xbd vn_lock(fffffd806c1c0e70,2001) at vn_lock+0xa4 vfs_lookup(ffff800033790d90) at vfs_lookup+0x10f namei(ffff800033790d90) at namei+0x7c5 unp_connect(ffff800010fda308,fffffd806d739700,ffff80003c3ba028) at unp_connect+0x29d uipc_dgram_send(ffff800010fda308,fffffd806d26e300,fffffd806d739700,0) at uipc_dgram_send+0x163 sosend(ffff800010fda308,fffffd806d739700,ffff800033791018,0,0,0) at sosend+0x804 sendit(ffff80003c3ba028,3,ffff800033791198,0,ffff800033791250) at sendit+0x5a5 sys_sendmsg(ffff80003c3ba028,ffff800033791300,ffff800033791250) at sys_sendmsg+0x246 syscall(ffff800033791300) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f3bac9d250, count: -15 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff800033790a00 rbx 0 rdx 0 rcx 0xffff80003c3ba028 rax 0xffff80002999dff0 r8 0xffff8000337908e0 r9 0x8080808080808080 r10 0x4f6a49e11ccce5fc r11 0x6b7cd1578a0dd57a r12 0xfffffd80040b08c0 r13 0xfffffd8004898570 r14 0x3 r15 0xffffffff83512ed3 substchar+0x5b7c rip 0xffffffff8258b975 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff8000337909f0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=200651 pid=36559 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=53, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c3bb4e8,0xffff80003abac560 process=0xffff80002a37d828 user=0xffff80003378c000, vmspace=0xfffffd806c6d65d0 estcpu=3, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 55741 174873 22609 0 2 0 syz-executor 77783 356646 29070 0 2 0 syz-executor 47919 296112 84533 0 2 0x10 syz-executor 47919 318205 84533 0 3 0x4000090 fsleep syz-executor 36559 450067 17692 0 2 0 syz-executor *36559 200651 17692 0 7 0x4000000 syz-executor 36559 13448 17692 0 3 0x4000080 fsleep syz-executor 9248 329564 22904 0 2 0 syz-executor 63766 256249 77641 0 2 0 syz-executor 63766 105014 77641 0 3 0x4000080 fsleep syz-executor 65598 423311 65661 60929 3 0x90 nanoslp syz-executor 65598 23258 65661 60929 3 0x4000090 fsleep syz-executor 65598 167981 65661 60929 3 0x4000090 fsleep syz-executor 65598 174590 65661 60929 3 0x4000090 fsleep syz-executor 65598 363287 65661 60929 3 0x4000090 fsleep syz-executor 65661 54942 69740 0 3 0x82 nanoslp syz-executor 77641 358796 69740 0 3 0x82 nanoslp syz-executor 22609 94846 69740 0 3 0x82 nanoslp syz-executor 84533 458122 69740 0 3 0x82 nanoslp syz-executor 99366 123526 69740 0 7 0x3 syz-executor 17692 187889 69740 0 3 0x82 nanoslp syz-executor 22904 117150 69740 0 3 0x82 nanoslp syz-executor 29070 222510 69740 0 3 0x82 nanoslp syz-executor 69740 1254 17136 0 3 0x82 kqread syz-executor 17136 148570 13580 0 3 0x10008a sigsusp ksh 13580 206512 56215 0 3 0x98 kqread sshd-session 56215 327416 3608 0 3 0x92 kqread sshd-session 79633 5411 1 0 3 0x100083 ttyin getty 3608 53523 1 0 3 0x88 kqread sshd 51307 313846 46490 74 3 0x1100092 bpf pflogd 46490 55472 1 0 3 0x80 sbwait pflogd 38546 438062 62154 73 3 0x1100090 kqread syslogd 62154 327629 1 0 3 0x100082 sbwait syslogd 4240 285965 1 0 3 0x100080 kqread resolvd 38274 381907 59604 77 3 0x100092 kqread dhcpleased 9037 231041 59604 77 3 0x100092 kqread dhcpleased 59604 474994 1 0 3 0x80 kqread dhcpleased 99041 2443 0 0 3 0x14200 bored smr 67656 285723 0 0 2 0x14200 zerothread 13345 48543 0 0 3 0x14200 aiodoned aiodoned 67752 160553 0 0 3 0x14200 syncer update 58423 246736 0 0 3 0x14200 cleaner cleaner 84791 190909 0 0 3 0x14200 reaper reaper 39227 331273 0 0 3 0x14200 pgdaemon pagedaemon 18586 148514 0 0 3 0x14200 bored viomb 20816 159068 0 0 3 0x40014200 acpi0 acpi0 62270 53533 0 0 3 0x40014200 idle1 41654 438023 0 0 3 0x14200 bored softnet1 96082 452876 0 0 2 0x14200 softnet0 38634 375733 0 0 3 0x14200 bored systqmp 46665 361969 0 0 3 0x14200 bored systq 35345 493201 0 0 3 0x14200 tmoslp softclockmp 81351 188569 0 0 3 0x40014200 tmoslp softclock 6505 56348 0 0 3 0x40014200 idle0 1 16013 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 36559 (syz-executor) thread 0xffff80003c3ba028 (200651) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83aa7580) #0 witness_lock+0x5f1 #1 unp_connect+0x28c #2 uipc_dgram_send+0x163 #3 sosend+0x804 #4 sendit+0x5a5 #5 sys_sendmsg+0x246 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive rwlock sbufsnd r = 0 (0xffff800010fda4f0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sblock+0xb6 #3 sosend+0x2e9 #4 sendit+0x5a5 #5 sys_sendmsg+0x246 #6 syscall+0xbd4 #7 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11059 12089K 12092K 166960K 12158 0 pcb 17 12K 12K 166960K 26 0 rtable 237 6K 7K 166960K 359 0 pf 34 17K 18K 166960K 48 0 ifaddr 43 7K 7K 166960K 46 0 ifgroup 55 2K 2K 166960K 57 0 sysctl 1 1K 9K 166960K 5 0 counters 70 37K 37K 166960K 72 0 ioctlops 0 0K 4K 166960K 1489 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1290 81K 81K 166960K 1377 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 7 0K 0K 166960K 7 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 93K 166960K 166 0 proc 72 115K 164K 166960K 555 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 2 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 3 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 49 228K 228K 166960K 49 0 exec 0 0K 1K 166960K 400 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 219 158K 169K 166960K 3332 0 UVM aobj 5 4K 4K 166960K 5 0 pinsyscall 42 84K 103K 166960K 1346 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 12 0K 2K 166960K 29 0 temp 36 9098K 9166K 166960K 6498 0 kqueue 13 20K 24K 166960K 27 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 39 0 36 1 0 1 1 0 8 0 rtentry 176 111 0 1 5 0 5 5 0 8 0 unpcb 144 52 0 30 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 736 19 0 15 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 92 0 85 2 0 2 2 0 8 1 nd6 152 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 1 0 1 1 0 1 1 0 8 1 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 19 0 0 1 0 1 1 0 8 0 pfstkey 128 19 0 0 1 0 1 1 0 8 0 pfstate 448 19 0 0 3 0 3 3 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 451 0 0 29 0 29 29 0 8 0 art_table 40 452 0 0 5 0 5 5 0 8 0 art_node 32 111 0 11 1 0 1 1 0 8 0 semapl 112 5 0 0 1 0 1 1 0 8 0 shmpl 112 2 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1616 0 147 92 0 92 92 0 8 0 ffsino 296 1616 0 147 114 0 114 114 0 8 0 nchpl 144 1858 0 154 64 0 64 64 0 8 0 vnodes 216 1710 0 0 95 0 95 95 0 8 0 namei 1024 5653 0 5652 2 0 2 2 0 8 1 percpumem 16 51 0 1 1 0 1 1 0 8 0 kstatmem 264 29 0 2 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 6278 0 6278 4 3 1 3 1 8 1 plimitpl 152 29 0 12 1 0 1 1 0 8 0 sigapl 424 491 0 444 7 0 7 7 0 8 1 knotepl 120 301 0 0 10 0 10 10 0 8 0 kqueuepl 224 24 0 14 1 0 1 1 0 8 0 pipepl 344 129 0 102 3 0 3 3 0 8 0 fdescpl 528 475 0 444 3 0 3 3 0 8 0 filepl 160 1692 0 1472 10 0 10 10 0 8 0 lockfpl 104 15 0 12 1 0 1 1 0 8 0 lockfspl 48 9 0 6 1 0 1 1 0 8 0 sessionpl 144 23 0 14 1 0 1 1 0 8 0 pgrppl 48 31 0 14 1 0 1 1 0 8 0 ucredpl 104 99 0 84 1 0 1 1 0 8 0 zombiepl 144 444 0 444 1 0 1 1 0 8 1 processpl 1232 491 0 444 5 0 5 5 0 8 1 procpl 664 546 0 491 6 0 6 6 0 8 0 sockpl 752 183 0 151 5 0 5 5 0 8 1 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 133 0 0 17 0 17 17 0 8 0 mcl2k 2048 25 0 0 4 0 4 4 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 173 0 0 11 0 11 11 0 8 0 bufpl 280 2340 0 105 160 0 160 160 0 8 0 anonpl 32 3565 0 0 30 1 29 29 0 246 0 amapchunkpl 152 8345 0 7908 19 0 19 19 0 158 0 amappl16 200 272 0 253 2 0 2 2 0 8 0 amappl14 184 438 0 437 1 0 1 1 0 8 0 amappl13 176 119 0 107 1 0 1 1 0 8 0 amappl12 168 726 0 697 2 0 2 2 0 8 0 amappl11 160 2 0 2 1 1 0 1 0 8 0 amappl10 152 62 0 48 1 0 1 1 0 8 0 amappl9 144 270 0 270 1 1 0 1 0 8 0 amappl8 136 101 0 99 1 0 1 1 0 8 0 amappl7 128 144 0 131 1 0 1 1 0 8 0 amappl6 120 150 0 149 1 0 1 1 0 8 0 amappl5 112 90 0 80 1 0 1 1 0 8 0 amappl4 104 286 0 267 1 0 1 1 0 8 0 amappl3 96 1643 0 1541 3 0 3 3 0 8 0 amappl2 88 536 0 476 2 0 2 2 0 8 0 amappl1 80 9573 0 8965 15 0 15 15 0 8 1 amappl 88 2588 0 2440 4 0 4 4 0 92 0 uvmvnodes 80 100 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 4 0 0 1 0 1 1 0 8 0 uaddrrnd 24 475 0 444 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 475 0 444 1 0 1 1 0 8 0 vmmpekpl 168 5638 0 5604 2 0 2 2 0 8 0 vmmpepl 168 36545 0 34683 86 0 86 86 0 357 0 vmsppl 488 474 0 444 5 0 5 5 0 8 0 rwobjpl 80 12424 0 11415 24 0 24 24 0 8 0 pdppl 4096 957 0 888 105 24 81 85 0 8 12 pvpl 32 9504 0 0 78 1 77 78 0 265 0 pmappl 256 474 0 444 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 279 0 27 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff8393dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83aa6d80) at __mp_lock+0x192 intr_handler(ffff80002a301b20,ffff800000079600) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __mp_lock(ffffffff83aa6d80) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff83aa6d80) at __mp_lock+0x192 ktrsysret(ffff8000ffffd760,5,0,ffff80002a301ea0) at ktrsysret+0xde syscall(ffff80002a301f50) at syscall+0xa51 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d05e99c20d0, count: -14 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806ade7c58,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(fffffd806ade7c40,1) at rw_do_enter_write+0xba rrw_enter(fffffd806ade7c40,1) at rrw_enter+0xc6 VOP_LOCK(fffffd806c1c0e70,2001) at VOP_LOCK+0xbd vn_lock(fffffd806c1c0e70,2001) at vn_lock+0xa4 vfs_lookup(ffff800033790d90) at vfs_lookup+0x10f namei(ffff800033790d90) at namei+0x7c5 unp_connect(ffff800010fda308,fffffd806d739700,ffff80003c3ba028) at unp_connect+0x29d uipc_dgram_send(ffff800010fda308,fffffd806d26e300,fffffd806d739700,0) at uipc_dgram_send+0x163 sosend(ffff800010fda308,fffffd806d739700,ffff800033791018,0,0,0) at sosend+0x804 sendit(ffff80003c3ba028,3,ffff800033791198,0,ffff800033791250) at sendit+0x5a5 sys_sendmsg(ffff80003c3ba028,ffff800033791300,ffff800033791250) at sys_sendmsg+0x246 syscall(ffff800033791300) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f3bac9d250, count: -15