Warning: Permanently added '10.128.0.141' (ECDSA) to the list of known hosts. 2020/03/30 21:36:05 fuzzer started 2020/03/30 21:36:11 dialing manager at 10.128.15.235:30322 2020/03/30 21:36:11 syscalls: 338 2020/03/30 21:36:11 code coverage: enabled 2020/03/30 21:36:11 comparison tracing: enabled 2020/03/30 21:36:11 extra coverage: support is not implemented in syzkaller 2020/03/30 21:36:11 setuid sandbox: enabled 2020/03/30 21:36:11 namespace sandbox: support is not implemented in syzkaller 2020/03/30 21:36:11 Android sandbox: support is not implemented in syzkaller 2020/03/30 21:36:11 fault injection: support is not implemented in syzkaller 2020/03/30 21:36:11 leak checking: support is not implemented in syzkaller 2020/03/30 21:36:11 net packet injection: enabled 2020/03/30 21:36:11 net device setup: support is not implemented in syzkaller 2020/03/30 21:36:11 concurrency sanitizer: support is not implemented in syzkaller 2020/03/30 21:36:11 devlink PCI setup: support is not implemented in syzkaller 21:36:16 executing program 0: r0 = dup(0xffffffffffffffff) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r1, 0xc8943e5a89c4e526}) syz_emit_ethernet(0xa0, &(0x7f0000000080)="02f26f6695672c87b0ea8e6b48cf143aff3d1753703550f4ad7ad51c877e8f9f76c891c8c83bd12f83f2fee95581c4134c0b6b32606b35cf5ec2c188fed315076525aa48fbdadb728541b04c053795a71751b7a607684da01adca45aa7220ee0ceba23731f9798eaa43d4a7830d25250f2308ec33d5ac4866e2046c777001900a3fb2cb23554dcba96ef111c68215fa64b1781eabcf08007b2fe2556e9544c6f") connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200, 0x93) recvfrom$unix(r2, &(0x7f00000001c0)=""/233, 0xe9, 0x43, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0xa) readlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=""/4096, 0x1000) close(r0) kqueue() pipe2(&(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000001380)={0xb04c, 0x5}) r4 = openat$tty(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/tty\x00', 0x800, 0x0) ioctl$TIOCGETA(r4, 0x402c7413, &(0x7f0000001400)) r5 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x8000, 0x88) ioctl$BIOCSRSIG(r5, 0x80044272, &(0x7f0000001480)=0x1ff) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/zero\x00', 0x10, 0x0) ioctl$TIOCMGET(r6, 0x4004746a, &(0x7f0000001500)) open(&(0x7f0000001540)='./file0\x00', 0x2, 0x6) ioctl$TIOCSETVERAUTH(0xffffffffffffffff, 0x8004741c, &(0x7f00000015c0)=0x1) 21:36:16 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0xa, 0xffffffffffffff9c) ioctl$TIOCMBIC(r0, 0x8004746b, &(0x7f0000000000)=0xb2) r1 = getuid() setuid(r1) ioctl$WSDISPLAYIO_DELFONT(r0, 0x8058574f, &(0x7f0000000040)={'./file0\x00', 0x4, 0x33, 0x100, 0x0, 0x7f, 0x180, 0x417, 0x1, 0x1, 0xffffffffffffffff, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24) r2 = semget$private(0x0, 0x1, 0x120) r3 = getegid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000180)={{0x2, r1, r3, r1, r4, 0xb5, 0x100}, 0x9, 0xfffffffffffffff7, 0xfffffffffffff2cb}) ioctl$WSDISPLAYIO_SETSCREEN(0xffffffffffffffff, 0x80045756, &(0x7f0000000200)=0xfffffff9) r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000240)='/dev/wskbd0\x00', 0x80, 0x0) r6 = getppid() fcntl$lock(r5, 0x9, &(0x7f0000000280)={0x1, 0x2, 0x3, 0x5, r6}) chmod(&(0x7f00000002c0)='./file0/file0\x00', 0x5) ioctl$TIOCCHKVERAUTH(0xffffffffffffff9c, 0x2000741e) syz_open_pts() semop(r2, &(0x7f0000000300)=[{0x2, 0x9, 0x800}, {0x3, 0x9b, 0x1800}, {0x1, 0x20, 0x8e21ee449e273ac2}, {0x1, 0x5, 0x1000}], 0x4) ioctl$KDSETMODE(r0, 0x20004b0a, &(0x7f0000000340)) ioctl$VMM_IOC_INFO(0xffffffffffffffff, 0xc0185603, &(0x7f0000000440)={0x43, 0x0, &(0x7f00000003c0)=""/67}) 21:36:18 executing program 0: r0 = kqueue() kevent(r0, 0x0, 0x0, 0x0, 0x40000009d1, &(0x7f0000000140)={0x0, 0x8}) r1 = syz_open_pts() close(r1) ioctl$TIOCSTOP(r1, 0x2000746f) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x7fffffff, "73cc5160527b0100e53407000000e8ffffff00"}) write(r1, &(0x7f0000000100)='\x00', 0x1) read(r1, &(0x7f0000000000)=""/16, 0x10) login: pckbd_enable: command error 21:36:19 executing program 1: r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085762, &(0x7f0000000100)) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000180)={&(0x7f0000000100)='./bus\x00', 0xffffffffffffffff, 0x1}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000040)={0x3, 0x2}) r3 = accept$inet(r2, 0x0, &(0x7f0000000080)) fcntl$setstatus(r3, 0x4, 0x80) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffff9c, 0x80104267, &(0x7f0000000000)={0x47, &(0x7f0000000200)=[{0x60, 0x0, 0x0, 0x5}, {0x3f, 0x10, 0x5}, {0x6, 0x1d, 0x0, 0x2}]}) syz_emit_ethernet(0xe, &(0x7f00000001c0)="174af205b6068bbc6be6634ecdd0") r4 = syz_open_pts() close(r4) ioctl$TIOCSTOP(r4, 0x2000746f) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x7fffffff, "73cc5160527b0100e53407000000e8ffffff00"}) write(r4, &(0x7f0000000100)='\x00', 0x1) ioctl$TIOCCONS(r4, 0x80047462, &(0x7f00000000c0)=0x1) 21:36:19 executing program 0: r0 = syz_open_pts() write(r0, &(0x7f0000000480)='X', 0x1) getrusage(0x0, &(0x7f00000002c0)) r1 = syz_open_pts() close(r1) ioctl$TIOCSTOP(r1, 0x2000746f) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x7fffffff, "73cc5160527b0100e53407000000e8ffffff00"}) write(r1, &(0x7f0000000100)='\x00', 0x1) ioctl$TIOCSCTTY(r1, 0x20007461) ioctl$TIOCSTOP(0xffffffffffffffff, 0x2000746f) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x0, 0x7, 0x6, 0x7fffffff, "73cc5160527b0100e53407000000e8ffffff00"}) write(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x1) write(0xffffffffffffffff, &(0x7f0000000180)="2bfd1330d6c4ef3fe44a0cfd81e57f7b177a9d6f7db2a26c776118989a16a5cdf3c6eba54a230a5fe99f7c89f2b1461b574141f98b193ff3bc7f26d2742f206e38de47396e82782ded6306e8bf243ea342f8fef9bcc31e37879a3875d1937ab84d89f9994fb25e0f32ad264576a2b757569e3cb06982616f0a0b8be2e27873857ba48a59c5f43cc9adeb3a078b995cb84de32a7fa5d255af6234b2e824d25e8d17c3302461723613c020f69c28ec8030715717e228c6263d641802d6d79d85c3b2a1ba8c82a07ff87a7b38dc27a543de455cfcecb210", 0xd6) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000280)={0x1, 0x637}) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0xc) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f0000000140)={&(0x7f0000000000)='./file0\x00', r3}) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000000c0)=0x7) syz_open_pts() syz_open_pts() 21:36:19 executing program 1: r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080)='/dev/speaker\x00', 0x42, 0x0) r1 = dup(r0) r2 = getpid() ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0xfcfc96ac7f78659a, r2) fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x3, 0x3, 0xd379, 0x31, r2}) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="3e6c261d4958dd5bccac39f10f6ac85bc5174e38", 0x14}], 0x1, 0x0, 0x0) 21:36:19 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x4000000001, 0x0) r1 = syz_open_pts() close(r1) ioctl$TIOCSTOP(r1, 0x2000746f) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x7fffffff, "73cc5160527b0100e53407000000e8ffffff00"}) write(r1, &(0x7f0000000100)='\x00', 0x1) ioctl$TIOCSTAT(r1, 0x20007465, &(0x7f0000000000)) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x1c}, {0x81}, {0x6, 0x0, 0x0, 0x100ff}]}) pwrite(r0, &(0x7f0000000280)="d000"/14, 0xe, 0x0, 0x0) 21:36:19 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80085761, &(0x7f0000000040)={0x3, 0x2}) sendto$inet(r1, &(0x7f0000000080)="b01cfcb4721be5391a52f3ac423af994d91c3e26bf56bac501e3e35c4aa0074f763dc7576b182f2d12a940c065c59a15cbff4c904f82d0f02a9015c3e5119d4c51526a8425b8a80063ac1f8ed92b18d52d4ed8892da983d479aa1c75788c696df9b3f4015679252f9f14e7fda46d468766f5", 0x72, 0x1, &(0x7f0000000100)={0x2, 0x2}, 0xc) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000040)="ca6827f0a0e2f65a", 0x8) 21:36:19 executing program 0: open$dir(&(0x7f00000002c0)='./file0\x00', 0xa8e329f9edf63bbd, 0x0) r0 = getpid() ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0xfcfc96ac7f78659a, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000280)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000000240), 0x260}, 0x0) getuid() msgctl$IPC_RMID(0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000040)={0x3, 0x2}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x20000, 0x0) ioctl$TIOCCDTR(r3, 0x20007478) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000000)={0x1, 0x3}) 21:36:19 executing program 1: r0 = getuid() setreuid(0xee00, r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) r2 = getuid() setreuid(0xee00, r2) setreuid(r0, r2) ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80085761, &(0x7f0000000040)={0x3, 0x2}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) chown(&(0x7f0000000000)='./file0\x00', r0, r3) r4 = socket(0x2, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r4, 0x0, 0x2, &(0x7f0000000040)="9e8c1695", 0x4) 21:36:19 executing program 0: madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x118) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f00000010c0)='x\x00') 21:36:19 executing program 1: shmget(0x2, 0x3000, 0x4d, &(0x7f0000011000/0x3000)=nil) r0 = syz_open_pts() close(r0) ioctl$TIOCSTOP(0xffffffffffffffff, 0x2000746f) ioctl$TIOCSTOP(r0, 0x2000746f) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x7fffffff, "73cc5160527b0100e53407000000e8ffffff00"}) write(r0, &(0x7f0000000100)='\x00', 0x1) ioctl$TIOCCLRVERAUTH(r0, 0x2000741d) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="4402", 0x2}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x0, 0x810, 0xffffffffffffffff, 0x0, 0x5) r1 = socket(0x2, 0x8002, 0x0) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00ae4d2cfaca512095c39311423ab61666142430250900000050960bbcb891f41008df86090f4a04fb1f469b3b94d91458e265bc2ffe82f949d0b77ec108de906ffa84dd780d6ea819eb68b306925f3c283462fe3c904e"], 0x10) 21:36:19 executing program 0: mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0x86139) r0 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0) write(r0, &(0x7f0000000040)='g\r', 0x2) write(r0, &(0x7f0000000200)="08ade09f32746a223c471c0795bf5c", 0xf) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0) ioctl$WSDISPLAYIO_LDFONT(r1, 0x8058574d, &(0x7f0000000140)={'./bus\x00', 0x1, 0x3f, 0x8ec, 0x1, 0x10001, 0x0, 0x2, 0x2, 0x2, 0x68, 0x3}) 21:36:19 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) renameat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00') symlink(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080)='./file1\x00') renameat(r0, &(0x7f0000000200)='./file1/file0\x00', r0, &(0x7f00000002c0)='./file0\x00') unveil(&(0x7f0000000340)='./file1/../file0\x00', &(0x7f0000000300)='c\x00') rmdir(&(0x7f0000000280)='./file1/../file0\x00') 21:36:19 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x80, 0x3f}, {0x20}, {0xe}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xc}, {0x15}, {0x6}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) syz_emit_ethernet(0x35a, &(0x7f0000000000)) 21:36:19 executing program 1: open(&(0x7f0000000180)='./file1\x00', 0x200, 0x0) kqueue() rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000140)='./file0\x00') 21:36:19 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x200, 0x0, 0x0) 21:36:19 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaa36aaaaaaaa86dd60b3fc0800303a00fec256000007000000000000000000aaff0200000000000000000000000000010200901b3c50780000003547698169aae49c59311e3b8db0ae0f5228725618fc99e4e80000d400000000e629ab000000ffd567"]) r0 = semget$private(0x0, 0x0, 0xc4) semctl$SETVAL(r0, 0x1, 0x8, &(0x7f0000000180)=0xc7400000) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80085761, &(0x7f0000000040)={0x3, 0x2}) r2 = getuid() setreuid(0xee00, r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r3, 0x80085761, &(0x7f0000000040)={0x3, 0x2}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r5 = getpid() ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0xfcfc96ac7f78659a, r5) ktrace(&(0x7f0000000140)='./bus\x00', 0x3, 0x1122, r5) fchownat(r1, &(0x7f0000000000)='./file0\x00', r2, r4, 0x2) 21:36:19 executing program 0: getgroups(0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000100)=0x1) setuid(r1) r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r2, &(0x7f0000f05000/0x2000)=nil, 0x0) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000040)=""/47) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202e177c13c0bef"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x1, 0x0) bind(r3, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) 21:36:19 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock(&(0x7f00003eb000/0x12000)=nil, 0x12000) munmap(&(0x7f000037f000/0x2000)=nil, 0x2000) mmap(&(0x7f00003f8000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0, 0x0) 21:36:19 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80085762, &(0x7f0000000100)) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085762, &(0x7f0000000080)={0x2, 0x7490}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000040)=0xc) socket$inet6(0x18, 0x1, 0x6) 21:36:19 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x10004) r1 = getuid() setreuid(0xee00, r1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x24a, 0x101) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) fchown(r2, 0x0, r4) fchown(0xffffffffffffffff, r1, r4) ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000080)=0x4) sendsyslog(&(0x7f0000000240)="b7dd1d63bdef4ee87462a49e9775ed12b597b8ce76d4f3f4e667c629943a9b8e8f24068d9a340d008bc8db29a229ab8ee674d730cbd25742ed44f11061df48825e0630307c5f2901e566684726957af5f16f83e27b7151d4d3b861a8cc7846278b926be3a6fda23c", 0x68, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x2001, 0x4086331) r5 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r6 = kqueue() fcntl$setstatus(r2, 0x4, 0x80) kevent(r6, &(0x7f0000000180)=[{{r5}, 0xfffffffffffffffe, 0x1}], 0x0, &(0x7f0000000280), 0x10000, 0x0) kevent(r6, &(0x7f0000000000), 0x66, 0x0, 0x81, 0x0) 21:36:19 executing program 0: setgroups(0x0, 0x0) setuid(0xee01) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x400, 0x2) openat(r0, &(0x7f0000000040)='./file0\x00', 0x80, 0x94) openat$diskmap(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/diskmap\x00', 0x0, 0x0) 21:36:20 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085762, &(0x7f0000000100)) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x80, 0x20) ioctl$VMM_IOC_TERM(r1, 0x80045604, &(0x7f0000000040)={0x9}) r2 = socket(0x6, 0x200000003, 0x4) r3 = syz_open_pts() close(r3) ioctl$TIOCSTOP(r3, 0x2000746f) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x7fffffff, "73cc5160527b0100e53407000000e8ffffff00"}) write(r3, &(0x7f0000000100)='\x00', 0x1) dup2(r3, 0xffffffffffffffff) sendto$unix(r2, &(0x7f0000000640)="b100051300000000000008000f01000000000000cea1fea7fef96ecfc73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3e00c257699a1f132e27acb5d602000d7d026ba8af63ff372829e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea8c500000002000000000000020208a371a3f800040000000000000001000000000000000000", 0xb1, 0x0, 0x0, 0x0) 21:36:20 executing program 1: r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_WRITEREGS(r0, 0xc5005601, &(0x7f0000000580)={0x1, 0x0, 0x1, {[0x0, 0x0, 0x0, 0x20000000, 0x1200000]}}) mlock(&(0x7f0000e8f000/0x4000)=nil, 0x4000) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80085762, &(0x7f0000000100)) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x80, 0x80) mlock(&(0x7f0000e53000/0xc000)=nil, 0xc000) munmap(&(0x7f0000dfd000/0x200000)=nil, 0x200000) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setgid(r3) 21:36:20 executing program 0: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) mknod(&(0x7f0000000100)='./bus\x00', 0x3a0934c44f7b202b, 0x1b00) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x11, 0x0) r1 = getpid() write(r0, &(0x7f0000000880)="6a16cb270a02bf5623ce11c23061116ff18483ec6e728f519a16315eca82928d57f867bae262db15f0ab7adc3808b39b82b0b59231da63a19faf70629eba2d7369ecf7e7e66b6d996691aa87806c034fb522c8e7b459026b9fd90cea3408d9d304eccc2861ed636a8a9428d8f9d7042ee0ccfaeff75e805de85595bfec0e4944716c0faad75902d6170bc3c9e3c81bb46112c129faec1a43687af6aab7dafee15db6d47ee27344209a441c375f3cc8840e60a119766a47f276b053694317c32f8b19d7179c1a593c71e524ee89622ee755146ad8f3e6705b2bb05631268052f2d3554a095b1178c16b55a754a09b74b64de4bee8f02aa734985ad005817f8e30a818cb5e8d7a08ca36e61b8e3a473b26f0b6cb41b2845094ecd51a0d834c9351af7df1569aa0981d4c61ac06ad7bec05e09afd1487fe8b21da61403ae68ca76c5e112f961d0507d21aa747e41533784eb4e78cecae85bef71c44e9c563f2a4ace5d2a417160c3e8b8d643ebd28a085500aa54239d2674c74b218d72df2a09de28738fa0aa3ef12a11691996b8e29750d945aa15ac7f7c73bcff18f51b3eadf7504d47ae6117a19f930d060d2248c10d814c3f13c266ea2504d0dfedc8afe2c0582089400b27fcfda69e3898877f0f3d53d4ce810f6c1b6ea2cc6e0980463bb7aef99023e05b4595216a4f9345fe0c5e48692a7aeb1aa884b490e761d37d8298b57cd3b550d407556b6643e374ee781370fcdcfa8a160464772b0c7e67db91900c13f88e942024df24f57bc16c2963aa425c70fb3762d9c1d35102455d011763e8549bb00723c4332f8ff239fad8f1a5b2025ef048d7944a0c0caff65f0d388e264800e97ee6ddce1c62d071a277562953068bf128aa55ed8a1bec2083fbb2edd497160249cae7d3d202cf41035a63c1f933cca2ce50691b15087f33726bc9cdff98b4187c535902dcc7a790fbdb6399497cdbc2e3f13e6b8d23dbb94dafe5f15c4e1eb53298ad82de476e5f7b38f2c0dd27df88c5f32ddb830ffa27597c13564424df6c06af998cdf5f08fc36120171d8cb0c2fc2b1ff7c1cc0d4eb10e5dc2229b5b118a21f5cb22906645d65a005d38ebf8e7b2bf5433eb0609cd824f11170c50e7e56bc2fa9db72c979f5149aba06f152c177bcfb35d79a3a589e39714880dfa6fd16ac4efef0772dc64c5f045c7c3234332ac2a1970dc8cc905a51e3cbfc374ec847c7e96447b86db5939ac2cfa799830c2c11b3f01c9b6e13b8a66bbc6121222be59b222c2aa394dc46f842bc10e774786e72327d0579e6067db9ddc139b30c2d3e831ecd9ab59976c086b9e0b51c68678ef0d832cac72b640dc0262631e673ce4d23b7d9e731c10fbe4345f4e69ba071abdba76fe8a45bca3d8985072b345cd879b7b71d3f349c96a319e0ccec9bee3a7bdb7313567bf854143ad40951cf10797d477441828922ddf733d1f35d7e58c9738f8c345192f8e42d0d48705df417ff999318f2e9ccf8f92447242e7555839f8db2d79e5c97e0c2fa3b405259009176b1c2f2805741d9cd9e8c35df80e9fa11e82154d3a3815e9f99b9e19d01e915e993feda06f2740cb00538ca073cf90439425ddc4ddb62b4ec2d6f3c62cbcb8201904c36932502173f7fd20a05fecd922d535864f40f7bb5ea29581fa6a46583247f9236759c957c200156bb73833c020c76062768d997658fc5ddcf3816fd1d41e675ce964f3da79d0675164f89387264f6f7799564032df193a9f633c98db1a2bb66b38b41eb73accd97ed57005f010fa6ca20c23237b3c0191ed3aebc855006a6cf3485f01e13894fffae6d52deaae35d7e75dfcea664ec1b9719d34fab8d0dfc1c2d1f02a8f1586f6600094d85c390c58cb0e475f9c72042905a8a729a34efa62d5c546dbba0ecf90c3cc22b241cc14963b27ead2816c4ee846867f9469b12c3f78e170cb9e5bbf549cfb52bc1779115894208c76310d4d5065a4acc4b775af57207a7c094eca9f0c81943542e8d09ce9b821e2d6f6aa568f12a8ad5a5bab8c9a247556b3d31f2393da48be8d8a8ade72129443e6925c671f522a7aac1f449d46f6a6f11475cf92a989d66c19a0949539a75eb31bd41604362218760bb5468002913a43908ef74e9d666171b4df62024fde3b8f537f1f1569b59170a1c7c3f82c597bb87cbbe7456c30f88bb14fcdf077f020f4d1b7211596625d053d69ce80705486d118fb6132f619c007ee01d38e9a38c05b36e632ed1e47d2b4daa6e4d587c99f02912906a3a336d471650d4b0cb2940a2d0560fb517dd158e814b9d9a08bda54507dff61df8b077c5d652001e92503bdfaa05ae12b94dba2db933c111242e8c3bd5b05c352c0924cfa05feb051ddd00544fb167d6e5411a7243e5953eccb12be960073d0931aec0bb74dfb7a2ea2e75fae6c9ccdbbc2adab674fec23cacb1282bb83b193b0f4bfc6fa0bf0b3697a0ad45d1c6237a6856fb692253aba9859a3d9afd48fcc1424d78204502d8b7b0651d231feee308ccf97d0a7c9e7275b25b73804e7157f348020edc430c28f245ba2e6142ed5b8442160b1685d866d354d615413cf4b888967fb5af18c64b83ef809abc603f7149cd25a5658e3092d8afad2ecdf1270b20c6bf4b7d7a4eaa0507794ecc37dce2a9891de229cc76677b7fffaf30b0e3ef4fb4c63a786d3c2efb087e8d73fb7cbc11b50283b771636ffc2abf6f4e889b5e0d78b94707a37cd4869de512f2259cd0aed586839769d54f81226a317e0fe09e60e31203459660a6de928f3fd90186cc1b9daa06c9f21ff28b9a683572b4cc75c2157bdff687fc8fd7c5fec9ef8ed91fee315996c8ab1819f0a8af487deabe702432819a5f87af5d7a3517b86b0a67fe55c26cd85dc60fcba25a07ca785041e12c46718555e3154c5996ebafb1e97447d9f86ab9b9ae4755fd51b0193fa89fd6861cef8cdcb08f11ca7dcab1470e8e64fbfac7f7266a6d3e4bacf324d3b54fb46b20233cb0a38450b7d6936613f5e32861bc1fd64599f68e3cdaaf24d697e651397c88a6ad4eb9556efa81fefc4c330538b5ea969e4efa2435f050dbaf03a18feb83411302a78e9c599fb6c512acebca2fe1e5e494a211ba2d0337e53c14c6070ae232dd99f83e860aaa730d01c40fa5b63df8a0948133faaf9c47d447a90794c4dc056fed1bf22e94dbd647df8852ef3f0fdf99992a490db406422a9f9feb0e4be766293728961d27ddb8f3982f428555655cf3ee352cee2a2b50f118623771200483184d3d8da2a5c0d002a1421d2dad4711380a54a551f91acf0767ed02bf4715e4ca5a68a98dfd9e0f05fb05dc1a4edd0858af306c28a754ab65be9ffb5fa74962f83c293324fea0ba2634c2985881649d3db95f160a03134a13b4955de66073cafc2951b2e8d3e6f91077b3e36aa35f87af3c85a59caa351fc32be104bbaba87b99af648a8e03b69b0d4bee84fb5d0128b691333a674bf6be74b649b80c80ef2d635ed35c26c1a652041d18f76f8028c46c9a006fba060a59a3cdf5a35f6a8c78710dc0b02f032e29cbcfb4551949c75fccd1408bfe59443b14c06ad65057f856d74d05fecf9ba91944503c7099e3d27b0d931c68274f921f270378cda3787768929a5eec0b80a96b29f29f3e430eda0b5d0a5d20094d1df652c77dc7ef43192707bff6e48d17e7e4be96310ce0e090bcbd757272aa269ce67ce0a986005cc07757d05e8dd66dbf1d1660268e51120411c0ce3be4e57f067b327686b3c49ef2f9f320de9b7fa0feb2fc0d28dd27dedb2d84aa60a7b04a940038c9179a798782dc645fcb97700a64f666d1ba45f0b6739f91f41c92d63af6db7eb28b92e01b804de95a2583e23ddf6cd27aa96219c8a0b5730d556188f170db289c036a20ec18cf71ab5355ceb487f945e0010aec15451306b007e4f62f53f9c8cf714430ac9ada62746fecd58e00194db1ac3506424ddceb795ec02bd2d38e555916337b7c26a004f5c1a272d1b29f10eb132e83d171180d23ce499b97c88da2d2fa33f31f1439f8690c7bb4d51355d5db2a6cf6ef12b2b032090498835a12844e714f58d856c9e3d61b9faa87df908eac333edb65a9b4559d0d3ca801ceb025789797be55a51c5efe4bee9aa64f091c7493a4511ba03b0457c620949a6ff61ae90fd8244dc3a587ed43ee955e4999fb4e9521d9469fdb8b94cbf44ed4b5cab506dd09ed3a296bdbbb27418176f52d10315ae41454b8be0738702f96f577e31177c88fd28d93acdec4b04e357fea8142dc8f7e0d8073b7fbf750f00003d45b2536e4ccb68480dec26b4a85e8acba5145a7446c9141d5417b95aec728dc4c84cf9769b8b5f57fa13bcec58591c224d79b6e4085c39430834a15558bb87d2b566d169e72890049e215cde3ed4cb9c1844d6738138dca7ee11b38f4fad50900281630a17ab4ff35f9ffc620d8a031ac9e62b0bf0b232b43545d004e32df3c96f6940779d6a742de4c4ea48908bd516cf8a2c4a6ea968860f226ac2e552ba8ac91d09a4c72f77a32b7fb0b3c53488c7f1e9c5be5e0c8b4fa812afa6fee153234c67aa4c4957e99bde7bbda1292520de1cc3adb853e1bf14bea3a17a01cb087f2279396e51f83174ebbded5d3ffc085b863f04a44f06ebdab18474f7c6088c980234a5a76f8f5906cd817b78ed0fa74fa4b3cdf7ce5732a2412c2ef0e10b0ef883903d14a3488119fbeaba119910508392eff7909838156aae2ae91205e7702ad4d639ed87171dc63b23ead7b2440307661466e217a87ce2350a21da2da0c90b38a53beab78c018a4e1558b25ca88e5225de9c265b7cd02dc21635e964cab73bff1f788f43a8749cb585a2ea2b10491dba7e1b7260db8186adb700cfe14a085df1fcbacf8aa09bac2596b2327e33a3efe726cfaf733621a2cf2e9f40fc4d6a29f036d1d9b3ec91f8eee67368a1a65e4c2c372add3a00b285e1384b916ca9420be1734c2634393c10daae885f63ac30f911eac274b462b33525303a506789a308bd35cf022693e325323058b2e11bed2637b61ef8c503f857be86cd3abdda5b04faf4219e96a2f9c95ffddfa209f97a60c986a5eb55e8940df96e72bd0b0967cfb5a96c7f8dc01150389b76edf65ce6193e029e30ce5f1e5945fa99f9d8b28149b9b983b2ad80f18acf5cbeca39b86b6f1f931982b4cba956a1076f4524ea6d569f1f5538b2bad3cb417e038d4381ed04b5b60381ec7dec7dd057dafaa5b3e2ff838ce8029af0e020a80a953fa4ace621a2c76f3c07664889bed92502dfcfc4a5714b31e75bc2298042cc91acca006834101b42c28be5a0c63dbeea56969570ceb56caec848af2e964acb80db1c42c011960dbebbd09cbf4b3344706db11d36fa171a8e8aa42b06deb4d5e30085ef5194f182f32e0fb2e38b37e2d75793343f398ee202684fae9fd7d27c28f660ddb977c7a8ac748055b6b76d0078e06e12789dd903f5f7e3875d7fcbe7ccb2ba1365ee0eba4ebb86789bc3d4ac933df583f5e84ee4aa0ec02766ebdac17386097f0225fd87b15209e02233b7fe4ca0d547b0efff5ca7bcca35e4a4405c190955756eff4696afed70c82582f52a910975b4abc2daefa48b980a4327a0ba2e8d3fa9ba4813ea6e00ab17d3152ac9e5c2df6eb81fc6ddb226c809f0969e168b82aa6d21e9840e728c632bf0ec9778b6f677813c685389ab866a0082564cdfa81666dfb32b4dd0de0fa4ca35dc4d4b9b622624a0b20e51dc495c6b48e5e1e677efa1550d1e21e6ca02c0c5cdd60d5416e04d", 0x1000) ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0xfcfc96ac7f78659a, r1) r2 = getpgid(r1) ktrace(&(0x7f0000000000)='./bus\x00', 0x0, 0x1010, r2) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) pwritev(r4, &(0x7f0000000440)=[{&(0x7f0000000700)="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", 0x144}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r3, 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(r0, 0x20005302, &(0x7f0000000140)={0x0, [{}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}]}) vm_impl_init_vmx: uvm_share failed (22) failed to init arch-specific features for vm 0x0xffff800022b893b0 21:36:20 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x4000000001, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x10045}, {0x20}, {0x6, 0x0, 0x0, 0x100}]}) r1 = syz_open_pts() close(r1) ioctl$TIOCSTOP(r1, 0x2000746f) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x7fffffff, "73cc5160527b0100e53407000000e8ffffff00"}) ioctl$TIOCGFLAGS(0xffffffffffffffff, 0x4004745d, &(0x7f0000000040)) write(r1, &(0x7f0000000100)='\x00', 0x1) r2 = dup(r1) ioctl$TIOCGWINSZ(r2, 0x40087468, &(0x7f0000000000)) pwrite(r0, &(0x7f0000000280)="d000"/14, 0xe, 0x0, 0x0) vm_impl_init_vmx: uvm_share failed (22) failed to init arch-specific features for vm 0x0xffff800022b893b0 21:36:21 executing program 0: r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmm\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x20000, 0x0) r2 = syz_open_pts() close(r2) ioctl$TIOCSTOP(r2, 0x2000746f) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x7fffffff, "73cc5160527b0100e53407000000e8ffffff00"}) write(r2, &(0x7f0000000100)='\x00', 0x1) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r2, 0x2}) ioctl$VMM_IOC_INFO(r0, 0xc0185603, &(0x7f0000001080)={0x0, 0x0, 0x0}) 21:36:21 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x60e, 0x0) mmap(&(0x7f0000002000/0x600000)=nil, 0x600000, 0x1, 0x2010, r0, 0x0, 0x0) write(r0, &(0x7f0000000200)="247a7664327f9c7100", 0xfffffeda) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x600000)=nil, 0x600000, 0x0, 0x10, r1, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000040)={0x3, 0x2}) accept(r2, &(0x7f0000000000)=@in6, &(0x7f0000000080)=0xc) 21:36:21 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x0) read(r0, &(0x7f0000001740)=""/4096, 0x1000) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffcc}], 0x1, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) fcntl$setstatus(r3, 0x4, 0x80) pwritev(r3, &(0x7f00000003c0), 0x273, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x10, r2, 0x0, 0x0) write(r1, &(0x7f0000000100)='w', 0x1) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_WRITEREGS(r4, 0xc5005601, &(0x7f0000000580)={0x1, 0x0, 0x1, {[0x0, 0x0, 0x0, 0x20000000, 0x200000]}}) 21:37:20 executing program 1: mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x86138) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)="220e2a", 0x3) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040)='/dev/speaker\x00', 0x8901, 0x0) ioctl$SPKRTUNE(r1, 0x20005302, &(0x7f0000000140)={0x0, 0xb}) openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vmm\x00', 0x80, 0x0) r2 = socket(0x2, 0x4003, 0x0) dup2(r2, r1) r3 = getuid() setreuid(0xee00, r3) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x0, r3, 0x0, 0x0, 0x0, 0x3fe2c}, 0x30000044001000e, 0x400008001}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xc17f}], 0x100000000000033b, 0x0, 0x0) 21:37:20 executing program 0: ioctl$BIOCSETF(0xffffffffffffff9c, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000300)=[{0x200}, {}, {0x18, 0x0, 0x0, 0x40000}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCFLUSH(r1, 0x801169ac, &(0x7f0000000300)) r2 = syz_open_pts() close(r2) ioctl$TIOCSTOP(r2, 0x2000746f) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x7fffffff, "73cc5160527b0100e53407000000e8ffffff00"}) write(r2, &(0x7f0000000100)='\x00', 0x1) r3 = syz_open_pts() close(r3) ioctl$TIOCSTOP(r3, 0x2000746f) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x7fffffff, "73cc5160527b0100e53407000000e8ffffff00"}) write(r3, &(0x7f0000000100)='\x00', 0x1) fcntl$dupfd(r2, 0xa, r3) 21:37:20 executing program 0: socketpair(0x2, 0x5, 0x4, 0x0) 21:37:20 executing program 0: ioctl$TIOCSETA(0xffffffffffffffff, 0xc2d0422a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "443139e00000e608060000000300", 0x5}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xc}, {0x15}, {0x6}]}) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000080)={0x4, 0x2b}) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000140)='/dev/tty\x00', 0x8000, 0x0) ioctl$TIOCSTSTAMP(r1, 0x8008745a, &(0x7f0000000180)={0x401, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000ffff000001"], 0x9}, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x28}, 0x0) panic: kernel diagnostic assertion "p == curproc" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/vfs_vops.c", line 169 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 40437 57498 0 0x14000 0x200 0 reaper * 71668 85866 0 0x14000 0x200 1K systq db_enter() at db_enter+0x18 panic(ffffffff821f472c) at panic+0x15c __assert(ffffffff8224a9ea,ffffffff8224bf14,a9,ffffffff8222a32f) at __assert+0x2b VOP_CLOSE(fffffd80718fcea8,1,fffffd807f7bf6c0,0) at VOP_CLOSE+0x12f vn_closefile(fffffd80664113b0,0) at vn_closefile+0xd7 fdrop(fffffd80664113b0,0) at fdrop+0xc2 closef(fffffd80664113b0,0) at closef+0x11c unp_gc(0) at unp_gc+0x172 taskq_thread(ffffffff8248bfb0) at taskq_thread+0x9c end trace frame: 0x0, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic kernel diagnostic assertion "p == curproc" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/vfs_vops.c", line 169 ddb{1}> trace db_enter() at db_enter+0x18 panic(ffffffff821f472c) at panic+0x15c __assert(ffffffff8224a9ea,ffffffff8224bf14,a9,ffffffff8222a32f) at __assert+0x2b VOP_CLOSE(fffffd80718fcea8,1,fffffd807f7bf6c0,0) at VOP_CLOSE+0x12f vn_closefile(fffffd80664113b0,0) at vn_closefile+0xd7 fdrop(fffffd80664113b0,0) at fdrop+0xc2 closef(fffffd80664113b0,0) at closef+0x11c unp_gc(0) at unp_gc+0x172 taskq_thread(ffffffff8248bfb0) at taskq_thread+0x9c end trace frame: 0x0, count: -9 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff800020a2d480 rbx 0xffff800020a2d530 rdx 0xffff800020a18000 rcx 0 rax 0 r8 0xffffffff81e1786f kprintf+0x16f r9 0x1 r10 0x25 r11 0x55f39980f7d250f2 r12 0x3000000008 r13 0xffff800020a2d490 r14 0x100 r15 0x1 rip 0xffffffff81f88cf8 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800020a2d470 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{1}> show proc PROC (systq) pid=71668 stat=onproc flags process=14000 proc=200 pri=32, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff800020a18750,0xffff800020a18280 process=0xffff800020a1a000 user=0xffff800020a28000, vmspace=0xffffffff82648778 estcpu=0, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 6692 440286 18524 0 3 0x82 nanosleep syz-executor.0 18524 447786 73841 0 3 0x82 thrsleep syz-fuzzer 18524 288652 73841 0 3 0x4000082 nanosleep syz-fuzzer 18524 409425 73841 0 3 0x4000082 thrsleep syz-fuzzer 18524 121364 73841 0 3 0x4000082 thrsleep syz-fuzzer 18524 278691 73841 0 3 0x4000082 nanosleep syz-fuzzer 18524 213575 73841 0 3 0x4000082 thrsleep syz-fuzzer 18524 411453 73841 0 3 0x4000082 thrsleep syz-fuzzer 18524 188361 73841 0 3 0x4000082 thrsleep syz-fuzzer 18524 426782 73841 0 3 0x4000082 thrsleep syz-fuzzer 18524 43276 73841 0 3 0x4000082 thrsleep syz-fuzzer 18524 185751 73841 0 3 0x4000082 kqread syz-fuzzer 73841 396715 14553 0 3 0x10008a pause ksh 14553 57216 27278 0 3 0x92 select sshd 89747 243216 1 0 3 0x100083 ttyin getty 27278 99921 1 0 3 0x80 select sshd 43657 403682 7410 74 3 0x100092 bpf pflogd 7410 449543 1 0 3 0x80 netio pflogd 78563 283170 4259 73 3 0x100090 kqread syslogd 4259 96599 1 0 3 0x100082 netio syslogd 16725 285209 1 77 3 0x100090 poll dhclient 17334 459219 1 0 3 0x80 poll dhclient 8243 348525 0 0 3 0x14200 bored smr 77490 2365 0 0 3 0x14200 pgzero zerothread 4105 282239 0 0 3 0x14200 aiodoned aiodoned 1234 426025 0 0 3 0x14200 syncer update 87432 397095 0 0 3 0x14200 cleaner cleaner 57498 40437 0 0 7 0x14200 reaper 31881 64027 0 0 3 0x14200 pgdaemon pagedaemon 88770 382818 0 0 3 0x14200 bored crynlk 3660 454012 0 0 3 0x14200 bored crypto 42965 518513 0 0 3 0x40014200 acpi0 acpi0 12355 204202 0 0 3 0x40014200 idle1 17817 364739 0 0 3 0x14200 bored softnet 45208 153724 0 0 3 0x14200 bored systqmp *85866 71668 0 0 7 0x14200 systq 5305 289221 0 0 3 0x40014200 bored softclock 43413 265648 0 0 3 0x40014200 idle0 1 357724 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 85866 (systq) thread 0xffff800020a18000 (71668) shared rwlock systq r = 0 (0xffffffff8248c010) #0 witness_lock+0x4c5 #1 taskq_thread+0x8f #2 proc_trampoline+0x1c exclusive kernel_lock &kernel_lock r = 1 (0xffffffff8267f3f0) #0 witness_lock+0x4c5 #1 __mp_acquire_count+0x51 #2 mi_switch+0x392 #3 sleep_finish+0x113 #4 sleep_finish_all+0x32 #5 msleep+0x20e #6 taskq_next_work+0xbe #7 taskq_thread+0xe5 #8 proc_trampoline+0x1c ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9490 6466K 6659K 78643K 10638 0 pcb 13 8K 8K 78643K 17 0 rtable 94 3K 4K 78643K 208 0 ifaddr 47 10K 11K 78643K 55 0 counters 43 33K 34K 78643K 45 0 ioctlops 0 0K 4K 78643K 1472 0 iov 0 0K 12K 78643K 6 0 mount 1 1K 1K 78643K 1 0 vnodes 1221 77K 77K 78643K 1243 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 3 0 VM map 2 1K 1K 78643K 2 0 sem 4 0K 0K 78643K 4 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1809 196K 290K 78643K 12766 0 file desc 4 9K 25K 78643K 67 0 proc 62 63K 95K 78643K 451 0 subproc 31 1K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 4 0 in_multi 23 1K 2K 78643K 33 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 49 228K 228K 78643K 49 0 exec 0 0K 1K 78643K 207 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 105 37K 37K 78643K 1120 0 UVM aobj 4 4K 4K 78643K 4 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 NDP 7 0K 0K 78643K 12 0 temp 73 3036K 3100K 78643K 5855 0 kqueue 3 4K 6K 78643K 4 0 SYN cache 2 16K 16K 78643K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 0 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 19 0 17 1 0 1 1 0 8 0 rtentry 112 45 0 8 2 0 2 2 0 8 0 unpcb 120 41 0 30 1 0 1 1 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpqe 32 53 0 53 1 1 0 1 0 8 0 tcpcb 544 14 0 10 1 0 1 1 0 8 0 inpcb 280 49 0 42 1 0 1 1 0 8 0 nd6 48 6 0 3 1 0 1 1 0 8 0 ppxss 1128 1 0 1 1 1 0 1 0 8 0 pfosfp 40 846 0 423 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 12 0 5 1 0 1 1 0 8 0 pfstkey 112 12 0 5 1 0 1 1 0 8 0 pfstate 328 12 0 5 1 0 1 1 0 8 0 pfrule 1360 21 0 15 2 0 2 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 188 0 40 12 0 12 12 0 8 1 art_table 32 189 0 40 2 0 2 2 0 8 0 art_node 16 44 0 10 1 0 1 1 0 8 0 semapl 112 2 0 0 1 0 1 1 0 8 0 shmpl 112 2 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1484 0 77 46 0 46 46 0 8 0 ffsino 272 1484 0 77 95 0 95 95 0 8 0 nchpl 144 1782 0 186 61 0 61 61 0 8 0 uvmvnodes 72 1540 0 0 28 0 28 28 0 8 0 vnodes 208 1540 0 0 82 0 82 82 0 8 0 namei 1024 4633 0 4633 2 1 1 1 0 8 1 percpumem 16 33 0 1 1 0 1 1 0 8 0 vcpupl 1984 1 0 0 1 0 1 1 0 8 0 vmpool 560 3 0 2 1 0 1 1 0 8 0 scxspl 192 5564 0 5564 10 9 1 7 0 8 1 plimitpl 152 15 0 7 1 0 1 1 0 8 0 sigapl 424 282 0 252 4 0 4 4 0 8 0 futexpl 56 474 0 474 2 1 1 1 0 8 1 knotepl 112 54 0 41 1 0 1 1 0 8 0 kqueuepl 144 10 0 8 1 0 1 1 0 8 0 pipelkpl 48 78 0 71 1 0 1 1 0 8 0 pipepl 120 156 0 143 1 0 1 1 0 8 0 fdescpl 496 267 0 252 3 0 3 3 0 8 0 filepl 152 1388 0 1289 5 0 5 5 0 8 0 lockfpl 104 15 0 14 1 0 1 1 0 8 0 lockfspl 48 6 0 5 1 0 1 1 0 8 0 sessionpl 112 18 0 7 1 0 1 1 0 8 0 pgrppl 48 18 0 7 1 0 1 1 0 8 0 ucredpl 96 135 0 126 1 0 1 1 0 8 0 zombiepl 144 253 0 251 1 0 1 1 0 8 0 processpl 984 282 0 251 5 0 5 5 0 8 0 procpl 624 367 0 326 4 0 4 4 0 8 0 sockpl 400 110 0 90 4 1 3 3 0 8 0 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 170 0 0 21 1 20 21 0 8 0 mtagpl 80 4 0 0 1 0 1 1 0 8 0 mbufpl 256 162 0 0 10 0 10 10 0 8 0 bufpl 280 4331 0 173 297 0 297 297 0 8 0 anonpl 16 38137 0 27506 55 1 54 54 0 124 0 amapchunkpl 152 1461 0 1310 10 4 6 10 0 158 0 amappl16 192 963 0 254 36 0 36 36 0 8 0 amappl15 184 1 0 0 1 0 1 1 0 8 0 amappl14 176 5 0 4 2 1 1 1 0 8 0 amappl13 168 37 0 35 1 0 1 1 0 8 0 amappl12 160 12 0 11 1 0 1 1 0 8 0 amappl11 152 96 0 76 1 0 1 1 0 8 0 amappl10 144 18 0 13 1 0 1 1 0 8 0 amappl9 136 392 0 389 1 0 1 1 0 8 0 amappl8 128 293 0 280 1 0 1 1 0 8 0 amappl7 120 120 0 108 1 0 1 1 0 8 0 amappl6 112 46 0 42 1 0 1 1 0 8 0 amappl5 104 133 0 118 1 0 1 1 0 8 0 amappl4 96 539 0 504 2 1 1 2 0 8 0 amappl3 88 119 0 110 1 0 1 1 0 8 0 amappl2 80 1214 0 1136 3 1 2 3 0 8 0 amappl1 72 16238 0 15778 25 15 10 20 0 8 0 amappl 80 619 0 571 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 270 0 253 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 270 0 253 1 0 1 1 0 8 0 vmmpekpl 168 5985 0 5953 2 0 2 2 0 8 0 vmmpepl 168 39612 0 37716 103 19 84 99 0 357 0 vmsppl 368 269 0 253 2 0 2 2 0 8 0 pdppl 4096 548 0 507 6 0 6 6 0 8 0 pvpl 32 138563 0 125071 141 6 135 138 0 265 3 pmappl 232 269 0 253 2 1 1 2 0 8 0 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 167 0 5 5 0 5 5 0 8 0