kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Sun Jan 12 13:23:47 PST 2020 OpenBSD/amd64 (ci-openbsd-multicore-0.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.0.246' (ECDSA) to the list of known hosts. 2020/01/12 13:23:59 fuzzer started 2020/01/12 13:24:02 dialing manager at 10.128.15.235:19471 2020/01/12 13:24:02 syscalls: 337 2020/01/12 13:24:02 code coverage: enabled 2020/01/12 13:24:02 comparison tracing: enabled 2020/01/12 13:24:02 extra coverage: support is not implemented in syzkaller 2020/01/12 13:24:02 setuid sandbox: enabled 2020/01/12 13:24:02 namespace sandbox: support is not implemented in syzkaller 2020/01/12 13:24:02 Android sandbox: support is not implemented in syzkaller 2020/01/12 13:24:02 fault injection: support is not implemented in syzkaller 2020/01/12 13:24:02 leak checking: support is not implemented in syzkaller 2020/01/12 13:24:02 net packet injection: enabled 2020/01/12 13:24:02 net device setup: support is not implemented in syzkaller 2020/01/12 13:24:02 concurrency sanitizer: support is not implemented in syzkaller 2020/01/12 13:24:02 devlink PCI setup: support is not implemented in syzkaller 13:24:07 executing program 0: getuid() r0 = semget$private(0x0, 0x3, 0x0) r1 = geteuid() r2 = getegid() r3 = getuid() getgroups(0x5, &(0x7f0000000000)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff]) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000040)={{0x1, r1, r2, r3, r4, 0x40, 0x700}, 0xb28, 0x4, 0xb0e6}) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x10, 0x0) ioctl$TIOCCBRK(r5, 0x2000747a) r6 = socket(0x6, 0x3, 0x5) getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f0000000100)={0x0}, 0xc) r8 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0xb4) readlinkat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/95, 0x5f) getuid() chdir(&(0x7f0000000240)='./file0\x00') r9 = msgget$private(0x0, 0x1e3) r10 = getuid() r11 = getgid() getgroups(0x3, &(0x7f0000000280)=[0x0, 0xffffffffffffffff, 0x0]) r13 = getpgrp() msgctl$IPC_SET(r9, 0x1, &(0x7f00000002c0)={{0x1f, r10, r11, r3, r12, 0x4, 0xf8}, 0x80, 0x412, r13, r7, 0x1, 0x9, 0x1, 0x40000000000000}) ioctl$WSDISPLAYIO_GBURNER(r5, 0x400c5752, &(0x7f0000000340)) setrlimit(0x1, &(0x7f0000000380)={0x3, 0x4}) r14 = accept$inet6(r6, &(0x7f00000003c0), &(0x7f0000000400)=0xc) sendto$inet6(r14, &(0x7f0000000440)="8d10f3a64e214871549969840773ee117ae30d7287cd7b07035321cc6e40343986b376da89b4bf199612d931f19a8e5aeb069abe537859279c1d8e968e4805864686e73509ac948059afbb654931d2bcca8d0377f1b3538f8aa67edbb94ef3f80dbd677a99f57a33d14b0e8ba5b543ed29013037786066a578ed99c422b7791f42856847b8dfb1b075", 0x89, 0x8, 0x0, 0x0) geteuid() r15 = syz_open_pts() ioctl$TIOCSETAW(r15, 0x802c7415, &(0x7f0000000500)={0x4, 0x20, 0x4, 0x1000, "9b1ac296c853b289a7b8b7d404e4b638f7f688ac", 0xffffffff, 0x5}) r16 = shmget(0x3, 0x2000, 0x10, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_UNLOCK(r16, 0x4) 13:24:07 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000040)=""/236, &(0x7f0000000140)=0xec) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r2 = dup(r1) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vmm\x00', 0x20, 0x0) ioctl$FIOSETOWN(r3, 0x8004667c, &(0x7f0000000240)=0xd96d) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vmm\x00', 0x10000, 0x0) pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="5b6974a6e5be6e5a71efc52d07e8396f8c16bccfc9c115e4d0e1273c66485295e7876f8a1187c47398ac8f8c7595c5a540a8c9f7b57181ad97704c78719a467a50185f38fd63f8ad58b583bdbce57c55a8842ffc06d65bea7de91ae8eb086083eb0c0041f3487878ccc318790b0a0767dab4f8be4330aeb4a69094810d4beefcec7308c3f52f6189599468ba599401c516a7249f9aa1950ab805f116045e4d12e4e5431c542eab39a183f199f7e13285fba95871bca9035634ec6be13e9ddd359af9b313d520aaf4ce6323f30934bbdb8054cd0d4ad27a07ac5c9796078f71d59cc69363d8b43f4f3c02696de509ca3e850a", 0xf2}, {&(0x7f00000003c0)="399e0fad6c43b5da16e72f22364ce1ff17e0f91b6526ca6dd592dec998533f5a6f0a3e3f4b42b3e05d6d7eedc321fb4faa1029c56be55e732a09c632301face7c5096b7281673e2582a966d8020a34522852de5b8b42a1ac1726a6ed6203569ec73098534e0cfe2fcd4e", 0x6a}, {&(0x7f0000000440)="6f54891e3cec87f680c0b8f9b7895a86b9b0e5a624e280601e09", 0x1a}, {&(0x7f0000000480)="015318656014b030b1d188d25bca0f1b507b5aa33b7a461b540ba9cae2eb42083ffbae324f7a4503f70722cf41aafdd716b8a50c2b1d76b4ea783d86aee1b78aa2eae57514796976c6cfb705d3efc25f7158e16410e36af07bad307a8db3ce1f6fa877ba557daf5407355483653e2fe68e46361c901cfa8dce90e7f9449a90189ae8", 0x82}, {&(0x7f0000000540)="900e82dc610df559f9f57afdef570f1ffed189a7d8e55228f12ee3a8db4bc9907b95de9e7348c52f0065c3e36e", 0x2d}, {&(0x7f0000000580)="dc146f595c3c7b0627dce244a0511bc41a24ab0720bc9701e37770faf9c1e3d3e8048b3e6cc97038a2f30a810f6109e9140c21a287197b14e7683dda6e6bea38159f030dceaf32e6090b8f9f11c910cb38aa19bc8f10ec949e1f11c3a91d101bd1965dc7221e0144f510896c68db93a09e73f373098f6787c76797b1c42bab3926d53081e1210bbb4a0a81c323b9e7007496ee81ae90b791b9e81f6556e3a4b84427", 0xa2}], 0x6, 0x0, 0x0) ioctl$BIOCGDLTLIST(r0, 0xc010427b, &(0x7f0000000700)={0x0, &(0x7f00000006c0)}) r5 = syz_open_pts() socketpair(0x18, 0x5, 0x4, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r6) pipe2(&(0x7f0000000780), 0x4) r7 = accept$inet6(r2, &(0x7f00000007c0), &(0x7f0000000800)=0xc) fcntl$dupfd(0xffffffffffffff9c, 0x0, r7) pipe(&(0x7f0000000840)={0xffffffffffffffff}) sendto$inet6(r8, &(0x7f0000000880)="0bfbd85c5dac0a63fda9591362f69d8afa0adecdbf713a60aa021bcb571b64ac5bc6a9600ff21a674f6b7d86fdb834587364727217caa6923046a2e3ebc9fda6a49393dd0e34d1d31962a063581f4a61eec9cd5c7154e7", 0x57, 0xa, &(0x7f0000000900)={0x18, 0x0, 0xffffffff}, 0xc) fcntl$setflags(r3, 0x2, 0x1) r9 = semget$private(0x0, 0x0, 0x200) getsockopt$SO_PEERCRED(r8, 0xffff, 0x1022, &(0x7f0000000940)={0x0, 0x0}, 0xc) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) r12 = getuid() getgroups(0x3, &(0x7f0000000a00)=[0x0, 0xffffffffffffffff, 0x0]) semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f0000000a40)={{0xffff8000, r10, r11, r12, r13, 0x82, 0x1f}, 0x80000001, 0x772, 0xffff}) getppid() r14 = dup(0xffffffffffffff9c) ioctl$WSDISPLAYIO_LSFONT(r14, 0xc058574e, &(0x7f0000000ac0)) pipe(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VMM_IOC_RESETCPU(r15, 0x82405605, &(0x7f0000000b80)={0x2f, 0x7, {[0x1f, 0x4a0, 0xfffffffeffffffff, 0x3ff, 0x80000, 0x3, 0x3ff, 0x41e, 0x9, 0x6, 0xfffffffffffffe01, 0x5, 0x3, 0xf4, 0xb66, 0xd08, 0x1ff, 0x8], [0x4, 0x3e4d, 0x0, 0x3, 0x688e11c1, 0xfffffffffffffc00, 0x6, 0x4, 0xfff, 0x4], [0x2cbf, 0xfeb, 0x42c, 0x5, 0x6, 0x0, 0x7a08c6a6], [0x437, 0xfffffffffffffff9, 0x3, 0x7ff, 0x0, 0x1000000000000000], [{0x100, 0x8, 0x1d, 0x691}, {0x6, 0x0, 0x2, 0x200}, {0x5, 0x1, 0x80000001, 0x7}, {0xf974, 0x6, 0x2, 0x7}, {0x200, 0x9, 0x80, 0x29}, {0x1000, 0xffffffff, 0x7, 0x7ff}, {0x7fff, 0x23, 0x1, 0x4}, {0x40, 0x7, 0x5, 0x8c4f}], {0x2, 0x2, 0xffff, 0x1}, {0x6, 0x100, 0x8, 0x71}}}) r16 = accept$inet(0xffffffffffffff9c, &(0x7f0000000dc0), &(0x7f0000000e00)=0xc) setsockopt(r16, 0x3f, 0x8, &(0x7f0000000e40)="7881b7f7c447e1ef1b3ac3808f60ce53cad0c9237604486b900a9ddb91b81df2b7d5fff5a8ee3bc5dba72a82f34dc5ff4cb5b4e2a8a21e2426c27f46d62ed8356625343a92822856da0e45b60fdc56a803fbeaf04ab680ba564e2c436e10804b71d7354e997c9b84a6f0f43df5e7625f8ad04a39e1f4c15a1fc3b3a88013a878ede18007358b98d1b5bffc2ca52d0434930d8c169c1aeca273d76eec55025bef7d954dc83192564eba0d1068a0363aa47e5d3f7e2daaea37236f49a8932ef7f346f2b5a01d77779f0672dde6fa265927afa0c4c603b32cef40e7743a02fd2f9b", 0xe0) 13:24:07 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x21dc}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000500)="9ec750478a20ca65a4f768b20559") 13:24:07 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x34, 0x0, 0x0, 0xfffffffffffffffd}, {0x74}, {0x6}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r1 = kqueue() r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmm\x00', 0x40, 0x0) ioctl$VMM_IOC_INFO(r2, 0xc0185603, &(0x7f0000000040)={0x94, 0x0, &(0x7f0000000180)=""/148}) kevent(r1, &(0x7f0000000000), 0x60, 0x0, 0x3f, 0x0) fcntl$getown(r1, 0x5) syz_emit_ethernet(0xe, &(0x7f00000003c0)="e740608e1d9f9245589c291dbc96") 13:24:07 executing program 0: r0 = socket(0x2, 0x10000000000003, 0x1) connect$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8202f3ffffffffdf0000228f9d74282705dbdf4eb34b8c7392ab67ccb5bf239abafe368e51ffc35613ecf610c2b00abd2adaaa95b9095d005ac1ee3bae93faef3ac01298249752fb92bcc2ef7e86f10ebdd90787484d96113cb552935c0dab1959f57c9e7e5a17b63beb74b4eac35bc5181d21a41a29ee15798a66062e482a2abcf85bedacbc701676a3194281be6d0089e7af5a3e6d81d56d1e0e24a6615dc7477eec"], 0x10) sendto$inet6(r0, &(0x7f00000000c0)="106bdc47d9f3dbe4", 0x8, 0x0, 0x0, 0x0) 13:24:07 executing program 1: r0 = kqueue() r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x80, 0x0) linkat(r1, &(0x7f00000000c0)='./bus\x00', r2, &(0x7f0000000240)='./bus\x00', 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x161) readv(r3, &(0x7f0000000700)=[{&(0x7f00000019c0)=""/69, 0x45}], 0x1) r4 = kqueue() r5 = kqueue() kevent(r5, &(0x7f0000000000), 0x60, 0x0, 0x3f, 0x0) kevent(r5, &(0x7f0000000100), 0x2, 0x0, 0x400, &(0x7f0000000140)={0x3, 0x7fffffbf}) pwritev(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)="6e732dc59568f7016affc437a36dcf1c55eb9ca40353fd30f32f6d8ffb4f5a8fa91a7c303ccfe293f149c72da75f5ad29a3618bbe99d96b0ce90565a87024ac09ce61788c5a48f11667424c7ca205a3ea5a14a41c5b54b0bbbafa3820784deba4dea1ecfd3c9723f8a1fb3ef0929ffdfec716cdf", 0x74}], 0x1, 0x0, 0x0) pwrite(r4, &(0x7f0000000180)="14e6a47d92c3b5f746ebd2fd313e7b2aafc44b0ec5f049b1bafb37d0df35b751a475c95c07303b488047249e4c3836d21b62ea3c6f4cbdceb38a17e23b371f838520a97429044c2e87e4aa85e840ffa93c4a50c30f6a424783ff58d8d23abab4f10c665047cdc3f24e77cf9172a8cba7dc111c960d3b5968e5959f7e7cbbf4a315aed734cad270a9fcf2aacebff4bf08ea6050b006fd9a1938fdf1f94320b961a3181af5a9c7666825b9758b09f53106dc8c6a6a7e5dd906", 0xb8, 0x0, 0xffffffff) r6 = semget(0x3, 0x0, 0x258) semctl$IPC_STAT(r6, 0x0, 0x2, &(0x7f0000000300)=""/88) getrusage(0xffffffffffffffff, &(0x7f0000000380)) 13:24:07 executing program 0: r0 = socket(0x11, 0x10000000000003, 0x0) sendto$unix(r0, &(0x7f0000000340)="b100050100000000000000000110000000000000bf74abcdfef96ecfc73fd3357ae27caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5bbb4257699a1f132e27acbdc47ef1464c703514d602000d7d026ba8af63ff37282902e4fd007f720fd3872babfbb770c1f5a872c881ff7cc53c8943310b404f36a00f90006ee01bc43eaea8c5000000020000000000000202000001000000000000001000"/177, 0xb1, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x100, 0x42d) r1 = getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) chown(&(0x7f0000000000)='./file0\x00', r1, r3) setreuid(0xee00, r1) r4 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r1, r4) 13:24:07 executing program 1: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/160, 0xa0}, {&(0x7f0000000280)=""/158, 0x9e}, {&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000480)=""/161, 0xa1}, {&(0x7f0000000540)=""/132, 0x84}, {&(0x7f0000000600)=""/172, 0xac}], 0x6, 0x0, 0x9a) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlinkat(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000440)='./file1\x00') r1 = dup(r0) r2 = msgget$private(0x0, 0x101) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, 0xc) r4 = getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) chown(&(0x7f0000000000)='./file0\x00', r4, r6) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0}, 0xc) r8 = getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) chown(&(0x7f0000000000)='./file0\x00', r8, r10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r12 = getpid() fcntl$setown(r11, 0x6, r12) r13 = getpid() msgctl$IPC_SET(r2, 0x1, &(0x7f00000006c0)={{0xad, r3, r6, r7, r10, 0x80, 0x8}, 0x3, 0x7, r12, r13, 0x8, 0x80000000, 0x6, 0x9}) openat(r1, &(0x7f0000000080)='./file1\x00', 0x2, 0x0) 13:24:07 executing program 0: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [], [0x0, 0x0, 0x0, 0x9, 0xeffeffffffffffff], [0x0, 0x0, 0x401]}}) ioctl$VMM_IOC_INFO(0xffffffffffffffff, 0xc0185603, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}) r0 = semget$private(0x0, 0x1, 0x201) semctl$GETZCNT(r0, 0x3, 0x7, &(0x7f00000001c0)=""/160) semop(r0, &(0x7f0000000000)=[{0x3, 0x8, 0x850470c44d3b878a}, {0x2, 0x200, 0x800}, {0x1, 0xf8, 0x2800}, {0x1, 0x2, 0x1000}, {0x0, 0x123e, 0x800}, {0x3, 0x7fff}, {0x3, 0x401, 0x800}], 0x7) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) r2 = kqueue() r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000040)=""/39, 0x27, 0x2, &(0x7f0000000080)={0x18, 0x2, 0xfff, 0xb80}, 0xc) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCFLUSH(r4, 0x8080691a, &(0x7f0000000300)) 13:24:07 executing program 0: mknod(&(0x7f0000000840)='./bus\x00', 0x2000, 0x8612b) r0 = open(&(0x7f0000000080)='./bus\x00', 0x6, 0x0) readv(r0, &(0x7f0000000700)=[{&(0x7f00000019c0)=""/69, 0x45}], 0x1) r1 = syz_open_pts() ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000100)=0xcd66) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/121, 0x79}, {&(0x7f0000000300)=""/220, 0xdc}, {&(0x7f0000000400)=""/142, 0x8e}, {&(0x7f0000000040)=""/58, 0x3a}, {&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f0000000580)=""/178, 0xb2}], 0x7, &(0x7f00000000c0)=""/53, 0x35}, 0x0) open$dir(&(0x7f0000000000)='./bus/file0\x00', 0x90, 0x20) write(r0, &(0x7f0000000140)="220e228901001c067ebc74a7ea11cf801bf1fa48f4445ed5", 0x18) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) 13:24:07 executing program 1: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x3, 0xfeffffffffffffff, 0x0, 0x1], [0x0, 0xffffffffffffffff, 0x401], [], {}, {0x0, 0x0, 0x0, 0x4}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCFLUSH(r1, 0x8080691a, &(0x7f0000000300)) 13:24:07 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x0, 0x0) r1 = syz_open_pts() close(r1) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x92}) r2 = syz_open_pts() close(r1) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000080)={0xfffffffffffffffc, 0x0, 0x7ff, 0xfffffffffffffffd, "0366402b00"}) r4 = kqueue() r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r5, 0x0, 0x0) ioctl$WSDISPLAYIO_GBURNER(r5, 0x400c5752, &(0x7f0000000180)) write(r2, &(0x7f00000014c0)="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", 0xa52) write(r2, &(0x7f00000004c0)="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", 0x3ab) write(r2, &(0x7f0000000240)="2ba872c76578dfe7580f3e3add8984b93b24a866eb49ab962020ff28e78041c8c9e92d84d68af167517297cd33bb883210ae7bceb87bae7f752c4fc4c5432aa7655aa7219985112b", 0x48) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x7}, {0xc}, {0x1000000000006}]}) syz_emit_ethernet(0xe, &(0x7f0000000680)="0289c0ea0792d4ce7df189d1b870") 13:24:07 executing program 0: ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000329000/0x4000)=nil, 0x4000, 0x7) r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0xc) recvfrom$inet6(r0, &(0x7f0000000080)=""/170, 0xaa, 0x881, 0x0, 0x0) r1 = socket(0x18, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCFLUSH(r2, 0x80206979, &(0x7f0000000300)) 13:24:07 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4}, {0x45}, {0x4000000000000006}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000100)="26495b55a658d024cd62a548e094") socket(0x2, 0x0, 0xcc) 13:24:07 executing program 1: pipe(&(0x7f0000000040)) r0 = kqueue() kevent(r0, &(0x7f0000000100), 0x6, 0x0, 0x40000009d1, &(0x7f0000000140)={0x3, 0x7fffffff}) kevent(r0, 0x0, 0x0, &(0x7f0000000240), 0x2, 0x0) kqueue() r1 = kqueue() kevent(r1, &(0x7f0000000080), 0x3f, 0x0, 0x9, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000000), 0x60, 0x0, 0x3f, 0x0) r3 = syz_open_pts() r4 = kqueue() kevent(r4, &(0x7f0000000000), 0x60, 0x0, 0x3f, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0xfffffffffffffffa, 0x99b2094f8cb25493, 0x80000000}, {{r3}, 0xffffffffffffffff, 0x65}, {{r0}, 0xfffffffffffffffd, 0x0, 0x1, 0xa1, 0xd3}, {{r4}, 0x8bc6b603e6448c12, 0x0, 0x6, 0xffffffff, 0x1}], 0x0, 0x0, 0x0, 0x0) r5 = kqueue() kevent(r5, &(0x7f0000000000), 0x60, 0x0, 0x3f, 0x0) r6 = kqueue() kevent(r6, &(0x7f0000000000), 0x60, 0x0, 0x3f, 0x0) r7 = kqueue() kevent(r7, &(0x7f0000000000), 0x60, 0x0, 0x3f, 0x0) dup2(r7, r6) 13:24:07 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000380)={0x3, &(0x7f0000000040)=[{0x54}, {0x4000005c}, {0x4006}]}) unlink(&(0x7f0000000080)='./file0\x00') ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) syz_emit_ethernet(0xf7, &(0x7f0000000340)) 13:24:08 executing program 0: mknod(&(0x7f0000000000)='./file0\x00', 0x80000005, 0x2d94) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/201, 0xc9}, {&(0x7f0000000500)=""/4096, 0x5d6}, {&(0x7f00000001c0)=""/121, 0x79}], 0x100000000000031d) r1 = kqueue() r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r2, 0x0, 0x0) kqueue() mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, 0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') 13:24:08 executing program 0: ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x75, 0x0, 0xc7, 0x2000004}, {0x34, 0x0, 0x0, 0x7ffffffe}, {0x800, 0x8, 0x8, 0x400}, {0x4, 0xf9, 0x19, 0x4}, {0x100, 0x3, 0x7, 0x40}]}) syz_emit_ethernet(0xe, &(0x7f0000000a80)="b6bc1fc92479ff2b783f6e8a9c81") 13:24:08 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x7}, {0x3d}, {0x4006}]}) ioctl$BIOCSDIRFILT(r0, 0x8004427d, &(0x7f0000000000)=0x40) syz_emit_ethernet(0xe, &(0x7f0000000a80)="b6bc1fc92479ff2b783f6e8a9c81") chmod(&(0x7f00000000c0)='./file0\x00', 0x11) 13:24:08 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x3d}, {}, {0x4006}]}) r1 = msgget(0x1, 0x182) msgctl$IPC_RMID(r1, 0x0) syz_emit_ethernet(0x35c, &(0x7f0000000000)="b6") 13:24:08 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000380)={0x3, &(0x7f0000000040)=[{0x50}, {0x4000005c, 0x0, 0xc5}, {0x4006}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) syz_emit_ethernet(0xf7, &(0x7f0000000340)) 13:24:08 executing program 0: ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffff9c, 0x80185760, &(0x7f0000000000)={0x5f, 0x4, {0x9, 0x6}}) mknod(&(0x7f0000000040)='./bus\x00', 0x2080002002, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000000)=0x10000002) pipe2(&(0x7f0000000180), 0x8004) r1 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0x8) ioctl$TIOCFLUSH(r1, 0x8020697a, &(0x7f00000000c0)) open(&(0x7f0000000040)='./bus\x00', 0x70e, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000480)='/dev/bpf\x00', 0x201, 0x0) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000080)={0x3, &(0x7f0000000200)=[{0x80}, {0x24}, {0x6, 0x0, 0x4, 0x100}]}) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000002c0)={'tap', 0x0}) pwrite(r3, &(0x7f0000000240)="fbaf8a8d1a029be96914f6357e3a", 0x3a, 0x0, 0x0) ioctl$BIOCVERSION(r3, 0x40044271, &(0x7f0000000140)) lseek(r3, 0x0, 0x0, 0x1) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000004c0)="90c3fe67eb586898600425f2f573e0d1ac83c18d65c8e22066c0d389fe894a974c8d45aaf9d2e7ae9fed58938ea6ac68a0b0632688ca0fab3647175abf22fea120c9b3bb77ca60c128295bf234505356095dbf9e50a4a5079723b57fed8ef0a251b91e67e1f5d347d5b668a390a25beea3962e7c10b8d9f53f5c82b5eacc26757d14f2fa6be9a2cbb2cfacc5e906dfd1e3208364bbc454327b6a1522c332ea628b8cb672e9e7247818f970e017c7cb9303e6b505059f34d3fb9df3993b7535fa269859e24b2802782224d7d5c13c21d4", 0xd0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r2, 0x0, 0x0) geteuid() r4 = semget$private(0x0, 0x4, 0x1) semctl$GETNCNT(r4, 0x4, 0x3, &(0x7f0000000800)=""/170) r5 = semget$private(0x0, 0x2, 0x40) semctl$SETVAL(r5, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r4, &(0x7f0000000280)=[{0x3, 0xff}, {0x0, 0x6}], 0x2aaaaaaaaaaaab5f) getgid() r6 = socket(0x800000018, 0x1, 0x0) bind$unix(r6, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) r7 = accept(r1, &(0x7f0000000900)=@un=@abs, &(0x7f0000000940)=0x8) getsockopt$SO_PEERCRED(r7, 0xffff, 0x1022, &(0x7f00000009c0), 0xfffffc89) getgid() socket(0x11, 0x3, 0x0) 13:24:08 executing program 1: setitimer(0x0, &(0x7f0000000000)={{0x7ff}, {0x0, 0x2711}}, &(0x7f00000011c0)) 13:24:08 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x24}, {0x81}, {0x6}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCGBLEN(r0, 0x40044266, &(0x7f0000000000)) syz_emit_ethernet(0xe, &(0x7f0000000a80)="b6bc1fc92479ff2b783f6e8a9c81") 13:24:08 executing program 0: setrlimit(0x8, &(0x7f0000000000)={0x9, 0x93}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETAW(r0, 0x80047469, &(0x7f0000001780)={0x34, 0x0, 0x0, 0x0, "1ffbffa6163cb90277925f1be62c36ae61dba648"}) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000280)="11a97f469ebdb3e71f1a593627cb7434fc82ff43ed092a839578e335ae386ecc19405afcb5695038bb30c4db6e5e37b8db8da2b0aeb4c95637", 0x39}, {&(0x7f00000002c0)="2bfef5d955f3781612863c1987f43f6327387ee33918ecbe95d3e61b10f3f2ea77d1fbd2873eb3f7b10142a625b10d76609911755b8a37aedf336fefaff7938bd3fb334f97ebf746c627cf6489da96520305365d3499938d54769cde2f7a143797d7a0c6c0640eab7766b3c1878a97778f5188bad5d9be301c89f235c587774af3c9ab9f973a8e41b11c4b89bba414907f972010ed5616e80aec0f8fc08c2eee140921b931e7328d718d385f7ae0f27b2f9d75f59918deba48167264ac48f5cc55fd37ed11434255965900c73f455f50e9a689a328b45eff66ef55d92bdd645a72386430a64a6365b84fe6", 0xeb}, {&(0x7f0000000580)="558566786fbf6683", 0x8}, {&(0x7f0000000640)="e4b2", 0x2}], 0x4) r1 = syz_open_pts() kevent(0xffffffffffffffff, &(0x7f00000001c0)=[{{}, 0xfffffffffffffffa, 0x99b2094f8cb25493}, {{r1}, 0xffffffffffffffff, 0x65}], 0x0, 0x0, 0x0, 0x0) ioctl$TIOCNOTTY(r1, 0x20007471) 13:24:08 executing program 1: getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, 0xc) r1 = getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) chown(&(0x7f0000000000)='./file0\x00', r1, r3) setreuid(0xee00, r1) setreuid(r0, r1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="62020107ff"], 0x1) r4 = socket(0x2, 0x3, 0x1) r5 = kqueue() r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r6, 0x0, 0x0) ioctl$WSDISPLAYIO_DELSCREEN(r6, 0x80085754, &(0x7f0000000080)={0x4, 0x5}) connect$unix(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) write(r4, &(0x7f0000000140)='\r\r\x00\x00\x00\x00\x00\x00', 0x188) 13:24:08 executing program 1: mknod(&(0x7f0000000000)='./bus\x00', 0x20c6, 0x8613e) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, &(0x7f0000000180)={{0x18, 0x2}, {0x18, 0x0, 0x0, 0x1a0000}, 0x8}, 0x3c) r0 = kqueue() r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x0, 0x0) ioctl$WSDISPLAYIO_GETSCREEN(r1, 0xc0245755, &(0x7f0000000080)={0x8, './bus\x00', './bus\x00'}) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x5, 0x0) write(r2, &(0x7f0000000040)="670dc3", 0x3) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) 13:24:08 executing program 0: setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x80047470, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, "61aa0db11ce9bae3c6514e6ae973739ea78b7ec0"}) writev(r1, &(0x7f0000001580)=[{&(0x7f0000000200)="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", 0xff}], 0x1) r2 = syz_open_pts() kevent(0xffffffffffffffff, &(0x7f00000001c0)=[{{}, 0xfffffffffffffffa, 0x99b2094f8cb25493}, {{r2}, 0xffffffffffffffff, 0x65}], 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0x4, 0x4, 0x8, 0x2af7, "f53932e552cc8d4c447e6009be8677dc025ec9a9", 0x5, 0x9d000000}) writev(r1, &(0x7f0000002a00)=[{&(0x7f0000000440)='I', 0x1}], 0x100002ed) readv(r0, &(0x7f0000002540), 0x1000000000000067) r3 = kqueue() fsync(0xffffffffffffff9c) kevent(r3, &(0x7f0000000000), 0x60, 0x0, 0x3f, 0x0) write(r3, &(0x7f0000000040)="e3234cd736d0760e5c67cec07946703eb72f69b837143586b5ef119deaf1d19b88fc9c788e045f63106da3b72fee1a1da2c9d1647901ccc5743e6bb988b1d34e3228d64f56087c6a0ce5e00fc4affff834e7adf41404d5312b576cd37c05b6078031a0c6d3eb", 0x66) 13:24:08 executing program 1: r0 = socket(0x2, 0x2, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x60, 0x0, 0x3f, 0x0) r2 = kqueue() r3 = kqueue() kevent(r3, &(0x7f0000000040), 0x66, 0x0, 0x81, 0x0) dup2(r2, r3) r4 = dup2(r1, r2) unlinkat(r4, &(0x7f0000000080)='./file0\x00', 0x0) connect$unix(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="f8d453020000000230005404821def8690885410031da1d5050e8c0592200119b6136b5eda9a0b9c611d1b2e0deca4db4dc447396ae192c41bf036"], 0x10) shutdown(r0, 0x2) setsockopt$sock_int(r0, 0xffff, 0x1023, &(0x7f0000000100)=0x3, 0x4) r5 = socket(0x10000000002, 0x2, 0x0) r6 = kqueue() r7 = kqueue() kevent(r7, &(0x7f0000000040), 0x66, 0x0, 0x81, 0x0) dup2(r6, r7) r8 = dup2(r7, r5) ioctl$WSDISPLAYIO_GETSCREEN(r8, 0xc0245755, &(0x7f0000000040)={0x3, './file0\x00', './file0\x00'}) r9 = dup2(r0, r5) setsockopt$sock_int(r9, 0xffff, 0x1023, &(0x7f00000000c0)=0x3, 0x4) 13:24:08 executing program 0: socket(0x18, 0x3, 0x102) socket(0x18, 0x3, 0x0) socket$inet6(0x18, 0x8000, 0x7) r0 = kqueue() kevent(r0, &(0x7f0000000000), 0x60, 0x0, 0x3f, 0x0) socket$inet(0x2, 0xc, 0x3f) r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x60, 0x0, 0x3f, 0x0) dup2(r1, r0) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 13:24:09 executing program 1: nanosleep(&(0x7f0000001c40)={0xf4, 0x4}, 0x0) execve(0x0, 0x0, 0x0) 13:24:09 executing program 0: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x9, 0xfffffffffffeffff], [0x0, 0x0, 0x482]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) socket(0x1, 0x4, 0xfe) ioctl$TIOCFLUSH(r1, 0x8080691a, &(0x7f0000000300)) 13:24:09 executing program 0: ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffff9c, 0x80185760, &(0x7f0000000000)={0x5f, 0x4, {0x9, 0x6}}) pipe2(&(0x7f0000000180), 0x8004) r0 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0x8) ioctl$TIOCFLUSH(r0, 0x8020697a, &(0x7f00000000c0)) open(&(0x7f0000000040)='./bus\x00', 0x70e, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000480)='/dev/bpf\x00', 0x201, 0x0) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000080)={0x3, &(0x7f0000000200)=[{0x80}, {0x24}, {0x6, 0x0, 0x4, 0x100}]}) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000002c0)={'tap', 0x0}) pwrite(r2, &(0x7f0000000240)="fbaf8a8d1a029be96914f6357e3a", 0x3a, 0x0, 0x0) ioctl$BIOCVERSION(r2, 0x40044271, &(0x7f0000000140)) lseek(r2, 0x0, 0x0, 0x1) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)="90c3fe67eb586898600425f2f573e0d1ac83c18d65c8e22066c0d389fe894a974c8d45aaf9d2e7ae9fed58938ea6ac68a0b0632688ca0fab3647175abf22fea120c9b3bb77ca60c128295bf234505356095dbf9e50a4a5079723b57fed8ef0a251b91e67e1f5d347d5b668a390a25beea3962e7c10b8d9f53f5c82b5eacc26757d14f2fa6be9a2cbb2cfacc5e906dfd1e3208364bbc454327b6a1522c332ea628b8cb672e9e7247818f970e017c7cb9303e6b505059f34d3fb9df3993b7535fa269859e24b2802782224d7d5c13c21d4", 0xd0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r1, 0x0, 0x0) geteuid() r3 = semget$private(0x0, 0x4, 0x1) semctl$GETNCNT(r3, 0x4, 0x3, &(0x7f0000000800)=""/170) r4 = semget$private(0x0, 0x2, 0x40) semctl$SETVAL(r4, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r3, &(0x7f0000000280)=[{0x3, 0xff}, {0x0, 0x6}], 0x2aaaaaaaaaaaab5f) r5 = getgid() r6 = socket(0x800000018, 0x1, 0x0) bind$unix(r6, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) r7 = accept(r0, &(0x7f0000000900)=@un=@abs, &(0x7f0000000940)=0x8) getsockopt$SO_PEERCRED(r7, 0xffff, 0x1022, &(0x7f00000009c0)={0x0, 0x0}, 0xfffffc89) r9 = getgid() r10 = socket(0x11, 0x3, 0x0) recvmsg(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/88, 0x58}, {&(0x7f0000000140)=""/129, 0x81}, {&(0x7f0000000200)=""/240, 0xf0}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000000480)=""/101, 0x65}, {&(0x7f0000000a00)=""/194, 0xc2}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/157, 0x9d}], 0xa, &(0x7f0000000740)=""/160, 0xa0}, 0x1) setsockopt$sock_int(r10, 0xffff, 0x1002, &(0x7f0000000040)=0x304, 0x4) r11 = geteuid() r12 = semget$private(0x0, 0x1, 0x4a9) semop(r12, &(0x7f00000003c0)=[{0x8, 0x8, 0x1000000}, {0x2, 0xfffffffffffffffd, 0x1000}, {0x2000000003, 0x100, 0x7fc}], 0x3) semctl$SETALL(r12, 0x0, 0x9, &(0x7f00000002c0)) semctl$SETALL(r12, 0x0, 0x9, &(0x7f0000000580)=[0x52, 0x700, 0xa40, 0x0, 0x200, 0x4, 0x5, 0x2]) semop(r12, &(0x7f00000001c0)=[{0x1, 0x6, 0x800}, {0x0, 0x44, 0x1800}, {0x4, 0x3, 0x1000}, {0x3, 0x5, 0x1000}, {0x3, 0x5, 0x1000}, {0x3, 0xffffffffffffffff, 0x400}, {0x3, 0xfffffffffffffff8, 0xc00}, {0x2, 0xad, 0x800}], 0x8) semop(r12, &(0x7f0000000040)=[{0x2, 0xeff7, 0x1800}, {0x4, 0x20, 0x5a8e4b91944d23c3}, {0xa50b5b29fd415b60, 0x4, 0x1000}, {0x3, 0x5, 0x2000}, {0x0, 0x45, 0x1000}], 0x5) r13 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) getsockopt$SO_PEERCRED(r13, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0}, 0x1ad) r15 = getegid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0}, 0x101a8) r17 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r17, &(0x7f0000000000)=[{&(0x7f0000000280)="000000186000fe0000ffffffff0000000af6ce4f22276e2b8d2a48d600000058a300"/44, 0x2c}], 0x1) getsockopt$sock_cred(r17, 0xffff, 0x1022, &(0x7f00000004c0), &(0x7f0000000480)=0xfffffffffffffe8c) r18 = getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r19, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) chown(&(0x7f0000000000)='./file0\x00', r18, r20) semctl$IPC_SET(r12, 0x0, 0x1, &(0x7f0000000100)={{0x3, r14, r15, r16, r20, 0x80}, 0x200, 0x401, 0x2}) r21 = semget$private(0x0, 0x1, 0x4a9) semop(r21, &(0x7f00000003c0)=[{0x8, 0x8, 0x1000000}, {0x2, 0xfffffffffffffffd, 0x1000}, {0x2000000003, 0x100, 0x7fc}], 0x3) semctl$SETALL(r21, 0x0, 0x9, &(0x7f00000002c0)) semctl$SETALL(r21, 0x0, 0x9, &(0x7f0000000580)=[0x52, 0x700, 0xa40, 0x0, 0x200, 0x4, 0x5, 0x2]) semop(r21, &(0x7f00000001c0)=[{0x1, 0x6, 0x800}, {0x0, 0x44, 0x1800}, {0x4, 0x3, 0x1000}, {0x3, 0x5, 0x1000}, {0x3, 0x5, 0x1000}, {0x3, 0xffffffffffffffff, 0x400}, {0x3, 0xfffffffffffffff8, 0xc00}, {0x2, 0xad, 0x800}], 0x8) semop(r21, &(0x7f0000000040)=[{0x2, 0xeff7, 0x1800}, {0x4, 0x20, 0x5a8e4b91944d23c3}, {0xa50b5b29fd415b60, 0x4, 0x1000}, {0x3, 0x5, 0x2000}, {0x0, 0x45, 0x1000}], 0x5) r22 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) getsockopt$SO_PEERCRED(r22, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0}, 0x1ad) r24 = getegid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0}, 0x101a8) r26 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r26, &(0x7f0000000000)=[{&(0x7f0000000280)="000000186000fe0000ffffffff0000000af6ce4f22276e2b8d2a48d600000058a300"/44, 0x2c}], 0x1) getsockopt$sock_cred(r26, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xfffffffffffffe8c) semctl$IPC_SET(r21, 0x0, 0x1, &(0x7f0000000100)={{0x3, r23, r24, r25, r27, 0x4}, 0x200, 0x401, 0x2}) fchown(r10, r11, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x5, r11, r5, r8, r9, 0x10, 0x9}, 0x8, 0x1, 0x9}) 13:24:09 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x4000000001, 0x0) r1 = kqueue() r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r2, 0x0, 0x0) r3 = getpid() r4 = getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) chown(&(0x7f0000000000)='./file0\x00', r4, r6) setreuid(0xee00, r4) r7 = getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) chown(&(0x7f0000000000)='./file0\x00', r7, r9) r10 = getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r11, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) chown(&(0x7f0000000000)='./file0\x00', r10, r12) r13 = getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r14, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) chown(&(0x7f0000000000)='./file0\x00', r13, r15) r16 = getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r17, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) chown(&(0x7f0000000000)='./file0\x00', r16, r18) r19 = getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r20, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) chown(&(0x7f0000000000)='./file0\x00', r19, r21) getgroups(0x8, &(0x7f0000000100)=[r9, r12, r15, 0x0, 0x0, 0xffffffffffffffff, r18, r21]) setsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000140)={r3, r4, r22}, 0xc) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x60}, {0x40}, {0x6, 0x0, 0x0, 0xfffffffd}]}) pwrite(r0, &(0x7f0000000180)="f781ea80e21bb6f576c45af84a28", 0xe, 0x0, 0x0) 13:24:09 executing program 1: mknod(&(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400000002c5, 0x160) kevent(0xffffffffffffffff, &(0x7f00000003c0)=[{{}, 0x0, 0x0, 0x0, 0x0, 0x20000}, {}, {{r1}, 0xffffffffffffffff, 0xb3}], 0x0, 0x0, 0x0, 0x0) r2 = kqueue() mknod(&(0x7f0000000000)='./bus\x00', 0x2003, 0x4000000004500) r3 = open(&(0x7f0000000100)='./bus\x00', 0x2, 0x0) ioctl$WSMUXIO_INJECTEVENT(r3, 0x80185760, &(0x7f0000000140)) kevent(0xffffffffffffffff, &(0x7f0000000480)=[{{r3}, 0xffffffffffdfffff, 0x1}], 0x0, 0x0, 0x0, 0x0) r4 = msgget(0x2, 0xb1fe60fb273cf9bd) r5 = getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) chown(&(0x7f0000000000)='./file0\x00', r5, r7) setreuid(0xee00, r5) r8 = getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) chown(&(0x7f0000000000)='./file0\x00', r8, r10) r11 = getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r12, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) chown(&(0x7f0000000000)='./file0\x00', r11, r13) setreuid(0xee00, r11) r14 = kqueue() r15 = fcntl$dupfd(r14, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r15, 0x0, 0x0) getsockopt$SO_PEERCRED(r15, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc) r17 = getpid() r18 = kqueue() r19 = fcntl$dupfd(r18, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r19, 0x0, 0x0) getsockopt$SO_PEERCRED(r19, 0xffff, 0x1022, &(0x7f00000000c0)={0x0}, 0xc) msgctl$IPC_SET(r4, 0x1, &(0x7f00000001c0)={{0x5, r5, r10, r11, r16, 0x40}, 0x8, 0x8, r17, r20, 0x91c, 0x3f, 0x4, 0x2864}) ioctl$VT_GETSTATE(r0, 0x40067664, &(0x7f0000000180)) kevent(r2, &(0x7f0000000400), 0x7, 0x0, 0x10004, 0x0) kevent(r2, 0x0, 0x0, &(0x7f00000002c0), 0x8, 0x0) 13:24:09 executing program 0: r0 = socket(0x2, 0x4003, 0x0) r1 = socket(0x2, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0xa4a45eb9537ae55d) ioctl$WSMOUSEIO_GTYPE(r2, 0x40045720, &(0x7f0000000200)) setsockopt(r1, 0x8, 0x15, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) r3 = kqueue() r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8) r5 = accept(r4, &(0x7f0000000100)=@in6, &(0x7f0000000140)=0xc) dup2(r5, r0) accept(r1, &(0x7f0000000080)=@in, &(0x7f00000000c0)=0xc) connect$unix(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="82022e2f66696cbb8843ebc52b07004dca9c513b3e82f8dc21abf9d220a110f4f99145fb1d0421e600ac8cfac790cfd2d75eb736136439ce9d7b38d85e953533138f69f04671d7adb1408e4ee8a3fabf26052667354490e33426a03b777e8b0000000017ce07cf7d2b6484a2156ca351cbc9258918f7b611ad71077827b3168706dea4f4b2b4baa2ad7573b49209ae2193fbe9162ac218dd8575aaa7"], 0x10) 13:24:09 executing program 0: mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x108613a) r0 = open(&(0x7f0000000100)='./bus\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)="220e22", 0x3) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{}, 0x6000000000004, 0x103000000000008}) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x0) r1 = kqueue() r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r2, 0x0, 0x0) openat(r2, &(0x7f00000000c0)='./bus\x00', 0x8000, 0x60) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000300)={0xdb1, [{0x2, 0x2}, {0x5, 0x400}, {0x3, 0x8}, {0x2d364e62f4218d09, 0x2}, {0x1, 0xffffffff}, {0x0, 0x40}, {0x1, 0x2}, {0x3, 0x20}, {0x3, 0x8}, {0x3, 0xbb5}, {0x2, 0x38}, {0x3, 0x101}, {0x1, 0x7}, {0x1, 0xbec}, {0x0, 0x2}, {0x0, 0x5}, {0x2, 0x836}, {0x5, 0x2}, {0x3, 0x1000}, {0x1, 0x4}, {0x2, 0x101}, {0x1, 0x5}, {0x1, 0x20}, {0x2, 0xfff}, {0x3, 0x8}, {0x1, 0x8}, {0x3, 0xc4b4}, {0x2, 0x800}, {0xc688619c9dc60325, 0x6}, {0x0, 0x7}, {0x3, 0x3}, {0x3, 0xffffffff}]}) 13:24:09 executing program 0: mmap(&(0x7f000071c000/0x400000)=nil, 0x400000, 0x4, 0x5012, 0xffffffffffffffff, 0x0, 0x7) r0 = kqueue() kevent(r0, &(0x7f0000000000), 0x60, 0x0, 0x3f, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$BIOCGDLTLIST(r1, 0xc010427b, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[0xffffff1e, 0x1, 0x40008000]}) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="21cc6278e637fb70e9de74fe94f9565343c2adbae03b2e07c7d38ac2e0d2b4e9568175fdeb03f4c502c52c16bb101618ed756dc76b741b32095e7936153f96a5bce17f94d3dbeeabcb6009d71b513b91c31fe554f622eecf11ef07", 0x5b}, {&(0x7f00000000c0)="9a6927f64e04d41a025e3a8931887bd6bea3651f0aefd4a838964176f82b6ae35d5aaf17f132381e16cb1c1cca23cc0cfc6088dc14e175f280bde01441a5eb1adc972e7b0cf154b543543c07c434a7270619a650e608ca0dea418c27a625d9ee3cef507e1a5a60c625f422f1cf56c3692c1bd0800d297db20e22dbd2bd87702979dc07365ac80b94ed7c86359e5cb6b802", 0x91}, {&(0x7f0000000180)="0e20b474affad8d2db2d08698051f7a19cd62d5fab103d43172da67cd547ee1d35a516a703cd6fca12627f00b35beeccab7d73ad6036ff4399f7ae75af22277052656af20e138311318f00790559d2a727a762d5ff3db2e88265d679c41e369c020ed1d1725c35f016ff264e80f6bd068aa21918957743bdb8f7cd188443e1ca59fcbe16c43fb18ad3f0e53d76e4ab73fe4dad7079158454b9989459a35cbea38d998bb23dd20e95ad1685f24c6bcea7f61c4bdf90d5d18ad5847f641ade2a8f089fdf9032a2ab4d4b9c752a70f80ee2d71689252b1b7e13387e", 0xda}, {&(0x7f0000000280)="3803f725feb5ba1f7fc3dbe2f7c1c2fa61c1e35b815764b843ed51bc4b266d2ea756fe4eccee3fe6919887e3dba4d6d131ebf0192c5d03a4b2fdbcde3e1e3a72a62d1a74198b770a5696cc14b1ec0290647eb3", 0x53}], 0x4, 0x0, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = open(&(0x7f00009b7000)='./bus\x00', 0x0, 0x0) mlock(&(0x7f00009ed000/0x4000)=nil, 0x4000) mmap(&(0x7f0000847000/0x600000)=nil, 0x600000, 0x0, 0x3013, r2, 0x0, 0x0) ioctl$WSDISPLAYIO_GETSCREENTYPE(r2, 0xc028575d, &(0x7f0000000000)={0xffffffe2, 0x5, './bus\x00', 0xe18, 0xff, 0xb, 0xfffb}) 13:24:10 executing program 1: r0 = kqueue() r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x0, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x1c}, {0x14}, {0x6, 0x9}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) syz_emit_ethernet(0x308, &(0x7f0000000100)="2f524244e0031cfe9fac78661b08") open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2) r2 = syz_open_pts() kevent(0xffffffffffffffff, &(0x7f00000001c0)=[{{}, 0xfffffffffffffffa, 0x99b2094f8cb25493}, {{r2}, 0xffffffffffffffff, 0x65}], 0x0, 0x0, 0x0, 0x0) r3 = syz_open_pts() kevent(0xffffffffffffffff, &(0x7f00000001c0)=[{{}, 0xfffffffffffffffa, 0x99b2094f8cb25493}, {{r3}, 0xffffffffffffffff, 0x65}], 0x0, 0x0, 0x0, 0x0) r4 = syz_open_pts() kevent(0xffffffffffffffff, &(0x7f00000001c0)=[{{}, 0xfffffffffffffffa, 0x99b2094f8cb25493}, {{r4}, 0xffffffffffffffff, 0x65}], 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMGET(r4, 0x4004746a, &(0x7f0000000200)) getitimer(0x2, &(0x7f0000000040)) 13:24:10 executing program 0: r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x800000018, 0x1, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000080)={0x0, 0x0, 0x1ff, 0x0, "d730c1e7e400000001000000000000000000009e"}) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "0000010000000000007800"}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r2 = socket(0x800000018, 0x1, 0x0) r3 = syz_open_pts() r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/wsmouse0\x00', 0x0, 0x0) pread(r4, &(0x7f0000000100)="10", 0x1, 0x0, 0x0) dup2(r4, r3) r5 = socket(0x18, 0x3, 0x0) r6 = socket(0x18, 0x1, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$TIOCFLUSH(r7, 0x80206919, &(0x7f0000000300)) ioctl$TIOCGETA(r3, 0x402c7413, &(0x7f0000000240)) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r8, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0xc, 0xfc, 0x8}, {0x15}, {0x6}]}) ioctl$BIOCSETIF(r8, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) openat$speaker(0xffffffffffffff9c, &(0x7f0000000280)='/dev/speaker\x00', 0x10000, 0x0) syz_emit_ethernet(0x2f1, &(0x7f00000000c0)="b75d03dd00ef43f7f7c855bb7042") setsockopt$sock_int(r2, 0xffff, 0x200, &(0x7f0000000000)=0x7fd5b856, 0x4) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) pipe(&(0x7f0000000180)) r9 = semget$private(0x0, 0x8, 0x80) semop(0xffffffffffffffff, &(0x7f0000000440)=[{0x0, 0x0, 0x1800}, {0x1, 0x3, 0x800}, {0x3, 0x2, 0x800}, {0x4, 0x7fff}, {0x3, 0x4}, {0x0, 0x7}], 0x6) semop(r9, &(0x7f0000000300)=[{0x3, 0x3, 0x1400}, {0x4, 0x7fff, 0x1800}, {0xfe52dc4792d94f09, 0x8000, 0x800}, {0x4, 0xff, 0x800}, {0x4, 0x7fff, 0x1000}, {0x2, 0x100000000, 0xf2e4cf5442ae0ee3}], 0x6) semop(r9, &(0x7f0000000400)=[{0x0, 0xfffe, 0x1800}, {0x4, 0x200, 0xc00}, {0x1, 0x8, 0xcab2bfc5c2d47ec2}], 0x3) r10 = open$dir(&(0x7f0000000340)='./file0\x00', 0x40, 0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r10, 0x0, 0x8000) r11 = socket$inet6(0x18, 0x3, 0x0) getsockopt(r11, 0x29, 0x33, 0x0, 0x0) getsockopt$sock_cred(r11, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r14 = getgid() lchown(&(0x7f0000000300)='./file0\x00', 0x0, r14) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r16 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r16, 0x4, 0x3, &(0x7f0000000480)=""/172) semctl$SETVAL(r16, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r16, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r16, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r17 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) semctl$IPC_SET(r16, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r17, r18, r15, 0xf3, 0x40000000000d}, 0xfffffffffffffffd, 0x1, 0x9}) semctl$IPC_SET(r16, 0x0, 0x1, &(0x7f00000000c0)={{0x400, r12, r13, r12, r14, 0x82, 0xfffffffffffff7f5}, 0x8, 0x1f8}) getegid() pipe2(&(0x7f00000001c0), 0x10000) 13:24:10 executing program 1: r0 = socket(0x2, 0x4003, 0x0) setsockopt(r0, 0x0, 0x7, &(0x7f0000000140)="01003f8a", 0x4) r1 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) r2 = getpid() ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0xfcfc96ac7f78659a, r2) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r3 = socket(0x2, 0x3, 0x0) r4 = dup(0xffffffffffffffff) r5 = kqueue() r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r6, 0x0, 0x0) accept(r6, 0x0, &(0x7f0000000180)) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f00000002c0)={0x200, 0x7, 0x2, 0x5, 0x49, 0x2, 0x0, 0x10, [{0x1f, 0x1, 0x1, 0x2}, {0x3, 0x401, 0x0, 0x10001}, {0xffe00000, 0xcd, 0x1, 0xffffffff}, {0x3ff, 0x1, 0x7fff, 0x5}, {0x2, 0x1, 0xfffffffe, 0x1}, {0x3ff, 0xff, 0x100, 0x5}, {0x9, 0x200, 0x5, 0xeb3}, {0xffff, 0xd636, 0x80000000, 0x5}, {0x0, 0x8000, 0x1000, 0x98}, {0x9, 0xe069, 0xfff, 0x800}, {0xf3f, 0xff, 0x5ef4134, 0x5}, {0x80000001, 0x1, 0x400, 0x8000}, {0x6, 0x7fff, 0x1, 0x101}, {0x1, 0x5d, 0x9, 0x3f}, {0x8, 0xd1, 0x8, 0x400}, {0x2, 0x8, 0x3}]}) connect$unix(r3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x10) setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000040)=0x2, 0x4) writev(r3, &(0x7f0000000000)=[{0x0}], 0x1) recvmsg(r0, &(0x7f0000000280)={0x0, 0xffffff21, 0x0, 0x0, &(0x7f00000001c0)=""/165, 0x22}, 0x0) 13:24:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = getpid() r2 = msgget(0x1, 0x80) msgsnd(r2, &(0x7f0000000440)=ANY=[], 0x0, 0x800) r3 = getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) chown(&(0x7f0000000000)='./file0\x00', r3, r5) setreuid(0xee00, r3) r6 = getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) chown(&(0x7f0000000000)='./file0\x00', r6, r8) r9 = geteuid() r10 = getegid() pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r12 = getpid() fcntl$setown(r11, 0x6, r12) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000000)={{0x693d88a5, r3, r8, r9, r10, 0x40, 0x800}, 0x3, 0x0, r1, r12, 0x6, 0xfffffffffffff000, 0x2, 0x8}) fcntl$setown(r0, 0x6, r1) r13 = getpgrp() fcntl$setown(r0, 0x6, r13) 13:24:10 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x30390, 0x9) r2 = kqueue() r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bpf\x00', 0x80, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) r4 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x0, 0x0) linkat(r1, &(0x7f0000000100)='./file0\x00', r4, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x54}, {0x1d}, {0x6}]}) ioctl$KDDISABIO(r4, 0x20004b3d) syz_emit_ethernet(0x2a2, &(0x7f0000000340)="b6") 13:24:10 executing program 1: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x2, 0x0, {[0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2f9], [0x800, 0x0, 0x0, 0x9, 0xffbffdff], [0x0, 0x1, 0x403], [{}, {}, {}, {}, {0x81}]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000100)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) r1 = socket(0x18, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_pts() kevent(0xffffffffffffffff, &(0x7f00000001c0)=[{{}, 0xfffffffffffffffa, 0x99b2094f8cb25493}, {{r3}, 0xffffffffffffffff, 0x65}], 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTAT(r3, 0x20007465, &(0x7f0000000080)) ioctl$TIOCFLUSH(r2, 0x8080691a, &(0x7f0000000300)) 13:24:10 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20}, {0x34, 0x0, 0x0, 0x8}, {0x6}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = kqueue() r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r2, 0x0, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/23, 0x17}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/78, 0x4e}], 0x3, &(0x7f0000000200)=""/71, 0x47}, 0x40) syz_emit_ethernet(0xe, &(0x7f0000000a80)="b6bc1fc92479ff2b783f6e8a9c81") 13:24:10 executing program 1: setreuid(0xee00, 0x0) r0 = kqueue() r1 = kqueue() kevent(r1, &(0x7f0000000040), 0x66, 0x0, 0x81, 0x0) dup2(r0, r1) fcntl$getflags(0xffffffffffffff9c, 0x46cb1b90ecf9c63d) r2 = getuid() lchown(&(0x7f00000000c0)='./file0\x00', r2, 0x0) r3 = getuid() setreuid(0xee00, r3) open$dir(&(0x7f0000001240)='./file0\x00', 0x200, 0xa5) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x1a, 0x0) 13:24:10 executing program 0: mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0x86135) r0 = open(&(0x7f0000000080)='./bus\x00', 0xc02, 0x0) write(r0, &(0x7f0000000140)="220e22", 0x3) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, r0) ioctl$WSDISPLAYIO_DELSCREEN(r1, 0x80085754, &(0x7f0000000000)={0x200, 0x3}) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{}, 0x4000010000004, 0x4000000100008}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x8}}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) 13:24:10 executing program 1: r0 = socket(0x800000018, 0x1, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{r0}, 0x0, 0x0, 0x0, 0x100000000000000}], 0x0, 0x0, 0x0, 0x0) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x800000018, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) getpeername(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000ffffffff4529042900000000000000000000000000000000000000000000000000000000000000a1500000000000000080000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000005050ff000000"], 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80, "6b0000b40000004e26d03f00"}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r3 = socket(0x800000018, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) login: panic: lock (kernel_lock) mbufpl not locked Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 123054 77642 0 0 0 0 syz-executor.0 *438016 77642 0 0 0x4000000 1K syz-executor.0 db_enter() at db_enter+0x18 panic(ffffffff821b6a4e) at panic+0x15c witness_unlock(ffffffff8262c8e8,8) at witness_unlock+0x4db mtx_leave(ffffffff8262c8d8) at mtx_leave+0x97 pool_cache_get(ffffffff8262c7f0) at pool_cache_get+0x195 pool_get(ffffffff8262c7f0,2) at pool_get+0x91 m_pullup(fffffd806f60cb00,2200) at m_pullup+0x242 swofp_input(ffff800000a49800,fffffd806f60cb00) at swofp_input+0x13f switchwrite(86135,ffff8000237a9ac0,1) at switchwrite+0x3b0 spec_write(ffff8000237a9890) at spec_write+0xd4 VOP_WRITE(fffffd8062d97900,ffff8000237a9ac0,1,fffffd807f7be5a0) at VOP_WRITE+0xc6 vn_write(fffffd8065d9a148,ffff8000237a9ac0,1) at vn_write+0x199 dofilewritev(ffff800020ac9650,3,ffff8000237a9ac0,1,ffff8000237a9bb0) at dofilewritev+0x1b7 sys_pwritev(ffff800020ac9650,ffff8000237a9b68,ffff8000237a9bb0) at sys_pwritev+0xb8 end trace frame: 0xffff8000237a9c20, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic lock (kernel_lock) mbufpl not locked ddb{1}> trace db_enter() at db_enter+0x18 panic(ffffffff821b6a4e) at panic+0x15c witness_unlock(ffffffff8262c8e8,8) at witness_unlock+0x4db mtx_leave(ffffffff8262c8d8) at mtx_leave+0x97 pool_cache_get(ffffffff8262c7f0) at pool_cache_get+0x195 pool_get(ffffffff8262c7f0,2) at pool_get+0x91 m_pullup(fffffd806f60cb00,2200) at m_pullup+0x242 swofp_input(ffff800000a49800,fffffd806f60cb00) at swofp_input+0x13f switchwrite(86135,ffff8000237a9ac0,1) at switchwrite+0x3b0 spec_write(ffff8000237a9890) at spec_write+0xd4 VOP_WRITE(fffffd8062d97900,ffff8000237a9ac0,1,fffffd807f7be5a0) at VOP_WRITE+0xc6 vn_write(fffffd8065d9a148,ffff8000237a9ac0,1) at vn_write+0x199 dofilewritev(ffff800020ac9650,3,ffff8000237a9ac0,1,ffff8000237a9bb0) at dofilewritev+0x1b7 sys_pwritev(ffff800020ac9650,ffff8000237a9b68,ffff8000237a9bb0) at sys_pwritev+0xb8 syscall(ffff8000237a9c30) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x45f6c1f1150, count: -16 ddb{1}> show registers rdi 0xffffffff816d6247 db_enter+0x17 rsi 0x4a40 __ALIGN_SIZE+0x3a40 rbp 0xffff8000237a93e0 rbx 0xffff8000237a9490 rdx 0x4a41 __ALIGN_SIZE+0x3a41 rcx 0xffff800020b80000 rax 0xffff800020b80000 r8 0xffffffff813f6f6f kprintf+0x16f r9 0x1 r10 0x25 r11 0xae981263a894e9ef r12 0x3000000008 r13 0xffff8000237a93f0 r14 0x100 r15 0x1 rip 0xffffffff816d6248 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff8000237a93d0 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor.0) pid=438016 stat=onproc flags process=0 proc=4000000 pri=61, usrpri=61, nice=20 forw=0xffffffffffffffff, list=0xffff800020ac8780,0xffffffff82629b28 process=0xffff800020af5880 user=0xffff8000237a4000, vmspace=0xfffffd807efff730 estcpu=36, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 77642 123054 45313 0 7 0 syz-executor.0 *77642 438016 45313 0 7 0x4000000 syz-executor.0 38963 248739 0 0 3 0x14200 bored sosplice 5117 11087 17573 0 3 0x2 biowait syz-executor.1 45313 226341 17573 0 3 0x82 nanosleep syz-executor.0 17573 307740 45994 0 3 0x82 nanosleep syz-fuzzer 17573 86388 45994 0 3 0x4000082 nanosleep syz-fuzzer 17573 191417 45994 0 3 0x4000082 thrsleep syz-fuzzer 17573 348345 45994 0 3 0x4000082 thrsleep syz-fuzzer 17573 206088 45994 0 3 0x4000082 thrsleep syz-fuzzer 17573 215261 45994 0 3 0x4000082 kqread syz-fuzzer 17573 200814 45994 0 3 0x4000082 thrsleep syz-fuzzer 17573 68726 45994 0 3 0x4000082 thrsleep syz-fuzzer 17573 484623 45994 0 3 0x4000082 thrsleep syz-fuzzer 17573 335095 45994 0 3 0x4000082 thrsleep syz-fuzzer 45994 494899 38819 0 3 0x10008a pause ksh 38819 245608 98097 0 3 0x92 select sshd 55749 57453 1 0 3 0x100083 ttyin getty 98097 326899 1 0 3 0x80 select sshd 62183 423178 83000 74 3 0x100092 bpf pflogd 83000 390226 1 0 3 0x80 netio pflogd 43286 293904 39299 73 3 0x100090 kqread syslogd 39299 297927 1 0 3 0x100082 netio syslogd 20189 246030 1 77 3 0x100090 poll dhclient 89114 343403 1 0 3 0x80 poll dhclient 41771 300421 0 0 2 0x14200 zerothread 34030 392815 0 0 3 0x14200 aiodoned aiodoned 11671 288043 0 0 3 0x14200 syncer update 37820 310480 0 0 3 0x14200 cleaner cleaner 39231 105383 0 0 3 0x14200 reaper reaper 71180 349008 0 0 3 0x14200 pgdaemon pagedaemon 49375 112519 0 0 3 0x14200 bored crynlk 15012 266617 0 0 3 0x14200 bored crypto 61286 55705 0 0 3 0x40014200 acpi0 acpi0 92353 158828 0 0 3 0x40014200 idle1 45852 467944 0 0 3 0x14200 bored softnet 4595 249382 0 0 3 0x14200 bored systqmp 88072 126406 0 0 3 0x14200 bored systq 46232 248950 0 0 3 0x40014200 bored softclock 69008 20428 0 0 3 0x40014200 idle0 53995 494633 0 0 3 0x14200 bored smr 1 480846 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 1: exclusive kernel_lock mbufpl r = 0 (0xffffffff8262c8e8) #0 witness_lock+0x52e #1 mtx_enter_try+0x102 #2 pool_cache_get+0xa3 #3 pool_get+0x91 #4 m_pullup+0x242 #5 swofp_input+0x13f #6 switchwrite+0x3b0 #7 spec_write+0xd4 #8 VOP_WRITE+0xc6 #9 vn_write+0x199 #10 dofilewritev+0x1b7 #11 sys_pwritev+0xb8 #12 syscall+0x4a4 #13 Xsyscall+0x128 Process 77642 (syz-executor.0) thread 0xffff800020ac9650 (438016) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff826509a0) #0 witness_lock+0x52e #1 vn_write+0x42 #2 dofilewritev+0x1b7 #3 sys_pwritev+0xb8 #4 syscall+0x4a4 #5 Xsyscall+0x128 exclusive kernel_lock mbufpl r = 0 (0xffffffff8262c8e8) #0 witness_lock+0x52e #1 mtx_enter_try+0x102 #2 pool_cache_get+0xa3 #3 pool_get+0x91 #4 m_pullup+0x242 #5 swofp_input+0x13f #6 switchwrite+0x3b0 #7 spec_write+0xd4 #8 VOP_WRITE+0xc6 #9 vn_write+0x199 #10 dofilewritev+0x1b7 #11 sys_pwritev+0xb8 #12 syscall+0x4a4 #13 Xsyscall+0x128 Process 5117 (syz-executor.1) thread 0xffff800020ac89f8 (11087) exclusive rrwlock inode r = 0 (0xfffffd8066b56920) #0 witness_lock+0x52e #1 rw_enter+0x453 #2 rrw_enter+0x88 #3 VOP_LOCK+0xf9 #4 vn_lock+0x81 #5 vget+0x1c8 #6 ufs_ihashget+0x141 #7 ffs_vget+0x74 #8 ufs_lookup+0x14b7 #9 VOP_LOOKUP+0x5b #10 vfs_lookup+0x7a6 #11 namei+0x63c #12 dounlinkat+0x99 #13 syscall+0x4a4 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806acc3098) #0 witness_lock+0x52e #1 rw_enter+0x453 #2 rrw_enter+0x88 #3 VOP_LOCK+0xf9 #4 vn_lock+0x81 #5 vfs_lookup+0xe6 #6 namei+0x63c #7 dounlinkat+0x99 #8 syscall+0x4a4 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9500 6472K 6982K 78643K 10700 0 pcb 13 8K 8K 78643K 29 0 rtable 105 3K 3K 78643K 211 0 ifaddr 61 13K 13K 78643K 65 0 counters 39 33K 33K 78643K 39 0 ioctlops 0 0K 4K 78643K 1471 0 iov 1 2K 16K 78643K 11 0 mount 1 1K 1K 78643K 1 0 vnodes 1220 77K 77K 78643K 1259 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 2 1K 1K 78643K 2 0 sem 12 0K 0K 78643K 22 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1809 196K 290K 78643K 12766 0 file desc 5 13K 25K 78643K 81 0 sigio 0 0K 0K 78643K 8 0 proc 60 63K 95K 78643K 439 0 subproc 32 2K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 in_multi 47 2K 2K 78643K 47 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 37 175K 175K 78643K 37 0 exec 0 0K 1K 78643K 208 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 108 21K 22K 78643K 1188 0 UVM aobj 2 2K 2K 78643K 2 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 NDP 9 0K 0K 78643K 13 0 temp 84 3009K 3073K 78643K 4888 0 kqueue 3 4K 21K 78643K 18 0 SYN cache 2 16K 16K 78643K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 0 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 25 0 23 1 0 1 1 0 8 0 rtentry 112 45 0 1 2 0 2 2 0 8 0 unpcb 120 99 0 89 1 0 1 1 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpqe 32 99 0 99 1 0 1 1 0 8 1 tcpcb 544 24 0 20 1 0 1 1 0 8 0 inpcb 280 83 0 76 2 0 2 2 0 8 1 nd6 48 4 0 0 1 0 1 1 0 8 0 pfosfp 40 846 0 423 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 11 0 0 1 0 1 1 0 8 0 pfstkey 112 11 0 0 1 0 1 1 0 8 0 pfstate 328 11 0 0 1 0 1 1 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 212 0 0 14 0 14 14 0 8 0 art_table 32 213 0 0 2 0 2 2 0 8 0 art_node 16 44 0 4 1 0 1 1 0 8 0 semapl 112 20 0 10 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1502 0 94 46 0 46 46 0 8 0 ffsino 272 1502 0 94 95 0 95 95 0 8 0 nchpl 144 1800 0 180 61 0 61 61 0 8 0 uvmvnodes 72 1572 0 0 29 0 29 29 0 8 0 vnodes 208 1572 0 0 83 0 83 83 0 8 0 namei 1024 4737 0 4737 1 0 1 1 0 8 1 percpumem 16 30 0 0 1 0 1 1 0 8 0 scxspl 192 4800 0 4799 2 1 1 2 0 8 0 plimitpl 152 23 0 15 1 0 1 1 0 8 0 sigapl 432 280 0 265 3 0 3 3 0 8 1 futexpl 56 1058 0 1058 1 0 1 1 0 8 1 knotepl 112 87 0 68 1 0 1 1 0 8 0 kqueuepl 104 79 0 77 1 0 1 1 0 8 0 pipelkpl 48 88 0 78 1 0 1 1 0 8 0 pipepl 120 176 0 157 1 0 1 1 0 8 0 fdescpl 496 281 0 265 3 0 3 3 0 8 0 filepl 152 1622 0 1521 5 0 5 5 0 8 1 lockfpl 104 14 0 13 1 0 1 1 0 8 0 lockfspl 48 6 0 5 1 0 1 1 0 8 0 sessionpl 112 18 0 7 1 0 1 1 0 8 0 pgrppl 48 18 0 7 1 0 1 1 0 8 0 ucredpl 96 134 0 125 1 0 1 1 0 8 0 zombiepl 144 265 0 265 1 0 1 1 0 8 1 processpl 896 297 0 265 4 0 4 4 0 8 0 procpl 632 416 0 374 5 0 5 5 0 8 1 sosppl 128 2 0 2 1 0 1 1 0 8 1 sockpl 384 207 0 188 4 0 4 4 0 8 2 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 166 0 0 20 0 20 20 0 8 0 mtagpl 80 4 0 0 1 0 1 1 0 8 0 mbufpl 256 167 0 0 10 0 10 10 0 8 0 bufpl 280 6330 0 1340 357 0 357 357 0 8 0 anonpl 16 41064 0 25538 64 1 63 63 0 125 0 amapchunkpl 152 1280 0 1152 8 0 8 8 0 158 2 amappl16 192 1093 0 246 44 1 43 43 0 8 0 amappl15 184 59 0 55 1 0 1 1 0 8 0 amappl14 176 57 0 53 1 0 1 1 0 8 0 amappl13 168 8 0 7 1 0 1 1 0 8 0 amappl12 160 5 0 2 1 0 1 1 0 8 0 amappl11 152 56 0 41 1 0 1 1 0 8 0 amappl10 144 17 0 10 1 0 1 1 0 8 0 amappl9 136 626 0 621 1 0 1 1 0 8 0 amappl8 128 135 0 116 1 0 1 1 0 8 0 amappl7 120 101 0 90 1 0 1 1 0 8 0 amappl6 112 60 0 53 1 0 1 1 0 8 0 amappl5 104 128 0 115 1 0 1 1 0 8 0 amappl4 96 535 0 503 2 0 2 2 0 8 1 amappl3 88 143 0 134 1 0 1 1 0 8 0 amappl2 80 1348 0 1273 3 0 3 3 0 8 1 amappl1 72 16405 0 15964 25 8 17 20 0 8 7 amappl 80 657 0 614 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 1 0 0 1 0 1 1 0 8 0 uaddrrnd 24 281 0 265 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 281 0 265 1 0 1 1 0 8 0 vmmpekpl 168 6128 0 6094 2 0 2 2 0 8 0 vmmpepl 168 41874 0 39863 115 5 110 110 0 357 21 vmsppl 368 280 0 265 2 0 2 2 0 8 0 pdppl 4096 569 0 530 6 0 6 6 0 8 1 pvpl 32 142590 0 123896 152 0 152 152 0 265 1 pmappl 232 280 0 265 2 0 2 2 0 8 1 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 160 0 3 5 0 5 5 0 8 0