last executing test programs: 4.745952578s ago: executing program 4 (id=192): open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x80, 0x40) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000240), 0x7c2d69b0631f48af, 0x0) ioctl$WSDISPLAYIO_ADDSCREEN(r1, 0x80245753, &(0x7f0000000280)={0x4d1, './bus\x00', './file0\x00'}) sysctl$vm(&(0x7f0000000000)={0x2, 0x8}, 0x2, &(0x7f0000001240)="8d960000", &(0x7f0000000040)=0x4, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x3, 0x0, 0x0, 0xa3}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000200)=0x8) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0x2a, 0x0, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2d176f4b8f82c1d09936270286ea75b958983a9f15438392f4d2feb0900000000000ef962", 0xa8269}], 0x1, 0x0) r4 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x3) ftruncate(r2, 0x80002) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) r6 = getgid() setrlimit(0x8, &(0x7f0000000980)={0x7, 0x51}) r7 = syz_open_pts() close(r7) syz_open_pts() ioctl$FIOASYNC(r7, 0x80047469, &(0x7f00000000c0)=0x5) write(r7, &(0x7f0000000200)="c8107a417bd71999f9", 0x9) fchownat(r4, &(0x7f0000000140)='./file0\x00', r5, r6, 0x6) r8 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x80, 0x0) preadv(r8, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x1, 0x0) 4.591267348s ago: executing program 4 (id=197): sysctl$hw(&(0x7f00000000c0)={0x6, 0x8}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$hw(&(0x7f00000000c0)={0x6, 0xd}, 0x2, &(0x7f0000000100), &(0x7f0000000080), 0x0, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x106) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000001140)="8a", 0x1}], 0x1, 0xffff) setrlimit(0x1, &(0x7f00000011c0)) ftruncate(r1, 0x8531) r3 = open(&(0x7f0000000240)='./file0\x00', 0x18289, 0x154) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6000000000083a0000000000000000000000000000000080ff"]) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0xd4e688a67930cd) writev(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)="7ca4", 0x2}], 0x1) close(r5) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 4.36815037s ago: executing program 4 (id=204): r0 = socket(0x2, 0x1, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68) r2 = getppid() setpgid(r2, 0x0) unlink(&(0x7f0000000100)='./file0\x00') mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x2810, r1, 0x20000000) close(r1) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x8020699b, &(0x7f0000000100)) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x4, @broadcast}, @icmp=@time_exceeded={0xb, 0x1, 0x0, 0x0, 0xb, 0x0, {0x5, 0x4, 0x1, 0x2, 0x2, 0x68, 0x1, 0xed, 0x11, 0x61a, @broadcast}}}}}}) 4.363513907s ago: executing program 4 (id=206): mkdir(&(0x7f0000000500)='./file0\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = socket(0x18, 0x3, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0x100) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000140)=0xffff) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0xa, 0x0, r2}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$VMM_IOC_CREATE(r3, 0xc2585601, &(0x7f0000000200)={0x10, 0x0, [{&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x31}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x4}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x9}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x2d7}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x9}, {&(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x6}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x1}, {&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xfffffffffffffc01}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x5}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff801}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil}, {&(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1129}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x5bc0}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil}, {&(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffff7}], './file0\x00', 0x4}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) 4.313746974s ago: executing program 4 (id=209): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open(&(0x7f0000000240)='./file0\x00', 0x18289, 0x154) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x1, 0x0) setsockopt(r2, 0x0, 0x4, &(0x7f0000000000)='\v\x00\x00\x00', 0x4) pipe(&(0x7f0000000280)={0xffffffffffffffff}) socket(0x18, 0x3, 0x0) write(r3, &(0x7f0000000340), 0xd4e688a67930cd) (async) write(r3, &(0x7f0000000340), 0xd4e688a67930cd) setrlimit(0x8, 0x0) r4 = syz_open_pts() getdents(r1, &(0x7f0000000380)=""/228, 0xe4) close(r4) r5 = syz_open_pts() ioctl$FIOASYNC(r5, 0x80047460, &(0x7f00000000c0)=0x4) poll(0x0, 0x0, 0xffff8000) (async) poll(0x0, 0x0, 0xffff8000) syz_extract_tcp_res(&(0x7f0000000040), 0x4, 0x1) (async) syz_extract_tcp_res(&(0x7f0000000040), 0x4, 0x1) ioctl$WSKBDIO_SETDEFAULTBELL(r3, 0x80105705, &(0x7f0000000080)={0x6, 0x9, 0xe, 0x20000000}) (async) ioctl$WSKBDIO_SETDEFAULTBELL(r3, 0x80105705, &(0x7f0000000080)={0x6, 0x9, 0xe, 0x20000000}) syz_emit_ethernet(0x103a, &(0x7f0000000480)=ANY=[]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) 2.728246739s ago: executing program 3 (id=233): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x2, 0x1003fffffffffe}}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$TIOCSETA(r0, 0xc4504448, &(0x7f0000000740)={0x6, 0x0, 0x0, 0x0, "6374224ff1c14649ebb1789280c9795a6b47c1d1"}) (async) setpgid(0x0, 0x0) (async) r1 = getppid() setpgid(0x0, r1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0xc0) r4 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r4}) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) (async) setreuid(0xee00, 0x0) r6 = getuid() ioctl$WSKBDIO_GETMAP(r5, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) (async) setreuid(0x0, r6) (async) r7 = fcntl$getown(r5, 0x5) fcntl$setown(r2, 0x6, r7) (async) setreuid(r6, 0x0) close(r2) (async) ioctl$WSDISPLAYIO_SVIDEO(r0, 0x80045745, &(0x7f0000000080)) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async) r8 = fcntl$dupfd(0xffffffffffffff9c, 0xa, 0xffffffffffffffff) getpeername$unix(r8, &(0x7f0000000200)=@file={0x0, ""/253}, &(0x7f0000000180)=0xff) (async) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x200, 0x14c) ioctl$WSDISPLAYIO_GBURNER(r3, 0x400c5752, &(0x7f0000000140)) ioctl$TIOCSETD(r9, 0x8004741b, &(0x7f0000000040)=0x7f) r10 = socket(0x18, 0x2, 0x0) setsockopt(r10, 0x2, 0xc, &(0x7f0000000000), 0x0) 2.712472454s ago: executing program 3 (id=236): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x200}, 0x0, 0x0, 0xfffffffffffffffb}) r0 = socket(0x18, 0x3, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000001c0)="b100050100", 0x5, 0x8, 0x0, 0x0) accept$unix(r0, &(0x7f0000001100)=@abs, &(0x7f0000001140)=0x8) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) getpgrp() connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100000000, 0x6, 0x5, 0xdf60, 0xfffffffffffffffe, 0x4, 0x2f01, 0x4, 0x3, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0xf, 0x8000, 0x5b, 0x1, 0x1fe, 0x0, 0x0, 0x2], [0x100000001, 0x2, 0x3, 0x0, 0xb, 0xffffffff, 0xffffffff00000000], [0x100, 0x5, 0x7fffffffffffffff, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x20000004, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x4, 0x2, 0xfffffffc, 0x80}, {0x3, 0x5, 0x4, 0xffffffffffffffff}, {0x6, 0x2, 0x1000, 0x8}, {0x0, 0x2003, 0x9, 0x2000000000000000}, {}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x5, 0x5, 0x7f}, {0x4, 0x80000000, 0x6d5, 0x2}}}) syz_emit_ethernet(0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="060000004623000000000000"]) r1 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) getsockopt(r2, 0x8, 0x4, &(0x7f0000001240)=""/230, &(0x7f0000001340)=0xe6) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f000064b000/0x3000)=nil, 0x3000, 0x2) r3 = socket(0x18, 0x1, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1d}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) sendto$unix(r0, &(0x7f0000001180)="fa1ee140b1dcd3f4c6ae1b0d34110ae395aee15e993a2278a7f16a23b94e28627f1221104de662b25c82a861572f84ab0fd64f27035f33330bb0ddde8f893aa1e3aefe485c9c75274ed867764301ed74a1f8f0d1e637f9f716b08e73c479d01e11e6", 0x62, 0x408, &(0x7f0000001200)=@abs={0x0, 0x0, 0x1}, 0x8) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x8}, 0x4, &(0x7f0000000080)="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", &(0x7f0000001080)=0x1000, &(0x7f00000010c0)="a1843ca82ec5c69c88f0f0870300d084423b6987f1e5939f71f17899cc", 0x1d) 2.399942599s ago: executing program 3 (id=241): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f0000000000)={0x10, 0xfff, [{&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x800000000000000c}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fcf000/0x2000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c33000/0xe000)=nil, 0xffffffffffff67cd}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x7}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x3800000000000000}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff0000/0xe000)=nil, 0x5}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0x4}, {&(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0xfffffffffffffff8}, {&(0x7f00005aa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x9}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x8}, {&(0x7f0000ea6000/0x1000)=nil, &(0x7f00005a0000/0x1000)=nil, 0x1}, {&(0x7f0000446000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0xffffffffffffff0e}, {&(0x7f0000f45000/0x2000)=nil, &(0x7f0000fbe000/0x2000)=nil, 0x9}, {&(0x7f0000e05000/0x4000)=nil, &(0x7f0000543000/0x1000)=nil, 0x1000000000}, {&(0x7f00004a7000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2}, {&(0x7f0000a13000/0x3000)=nil, &(0x7f0000847000/0x3000)=nil, 0x4}], './file0\x00', 0x9}) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0x401, 0x3, 0x1ffffffffffffffc, 0x181c, 0x8, 0x10000000009}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000001c0)=[{{r1}, 0xfffffffffffffff9, 0xf, 0x2, 0xf, 0xfa1d}, {{r1}, 0xfffffffffffffffc, 0x68, 0x4, 0xc9, 0x3}, {{r1}, 0xfffffffffffffffb, 0x80, 0x40000000, 0x1000008001, 0xffffffffffffffe3}], 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x8, 0x1b4) ioctl$TIOCNOTTY(r2, 0x20007471) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0xe, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x557a, 0x7, 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x3, 0x0, 0x1ff, 0xfffffffffffffffc}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x18, 0x1, 0x0) close(r3) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) setsockopt(r4, 0x1000000029, 0x2e, 0x0, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000140)={'.\x00', 0x2, 0xff, 0x10001, 0x1, 0x1, 0x2, 0x0, 0x2, 0x2, 0x43, 0x200000000d}) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @random="36c4c84f369f", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x8, 0x0, {0x17, 0x4, 0x0, 0x1b, 0xfffc, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @broadcast, {[@end, @ra={0x94, 0x6, 0x62}, @ssrr={0x89, 0x3, 0x9}, @timestamp={0x44, 0x18, 0xb, 0x0, 0x1, [{[], 0xfff}, {[@empty], 0x2}, {[], 0xffff}, {[], 0x9}]}, @ssrr={0x89, 0x23, 0x3, [@multicast2, @loopback, @broadcast, @local={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @loopback, @remote={0xac, 0x14, 0x0}]}]}}}}}}}) 2.328818045s ago: executing program 3 (id=247): mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) r0 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000311000/0x4000)=nil, 0x4000, 0x5) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="f1536c00", 0x4) ioctl$VNDIOCSET(r0, 0x80046478, &(0x7f0000000500)={0x0, 0x0, 0x0}) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) (async) open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) mprotect(&(0x7f0000311000/0x4000)=nil, 0x4000, 0x5) (async) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="f1536c00", 0x4) (async) ioctl$VNDIOCSET(r0, 0x80046478, &(0x7f0000000500)={0x0, 0x0, 0x0}) (async) 2.255856618s ago: executing program 3 (id=249): sendmsg$unix(0xffffffffffffff9c, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="741522223aa5703e0e7049783131b65714923798452c0160eef0b28da1ee96a517814356b09c15c193548fdee42881dffcb5ecac7bb160ca0599fdf9f01467d0d7f7a475698884ba9d2fcf60d47bff7c88ba796757f6c5713eeb9ab5089dbac093e08b5e73488c7752bfa6e052ba5969e4e21608b049f7f97fe359bfba70c0377900d7f41cd7f2a51442d4b2c484d4a08a66a9c71b1da665c9c64eac596a31796899ec9378b2b4cdf20dc178781fa926baf38ec6d8e1fea1f96ce4217a7cce9eeb2de06c06ba1c394b", 0xc9}], 0x1, 0x0, 0x0, 0x9}, 0x8) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$WSMOUSEIO_GCALIBCOORDS(r0, 0x41205725, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4a) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x0) ioctl$FIONREAD(r1, 0xc0206921, &(0x7f0000000380)) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x2, 0x3, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) getsockname(r1, 0x0, &(0x7f00000002c0)) ioctl$FIONREAD(0xffffffffffffffff, 0x8080691a, 0x0) sendto(r2, 0x0, 0x0, 0x8, &(0x7f0000000080)=@un=@abs={0x0, 0x0, 0x3}, 0x8) ioctl$TIOCSETA(r0, 0xc450443c, &(0x7f00000001c0)={0x2072f, 0x1, 0x5, 0x3, "c9f7d2560000004000", 0xfffffffc, 0x4}) 2.040430041s ago: executing program 3 (id=255): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x0, 0x49, 0xffef9ff6, 0xe61, "4b06a6bcff0300dba800000000000800", 0x0, 0xd}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000240)="a819f3d9c24e67c13be394cf7c029fe52d425e63682e3554c5a02589e657454016a18f347a973ef19679da9aa8454d15ade00f422f2dd2b437dddef1f002e2dee156837c6f440b711be42b0fda295f3ad75e133fdd27eeb074c2c002ce59b12433e895bf22775b3a803aed0b4e69a6ecd0d23e127c6589ec1d73a78163d79df521895179f2cf", 0x86}], 0x1) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x10, 0x10000, 0x9, 0x4, "312c8e5ef811af2c350adda842d4273d02665134", 0x1, 0xfffffe01}) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x8118, 0x0) ioctl$VNDIOCGET(r1, 0xc4104603, &(0x7f0000000100)={'./file0\x00', 0x0, 0x401, 0x8}) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, &(0x7f0000000000)=0x1, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000b, &(0x7f0000000000)="e2", 0x1) syz_open_pts() ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000080)=0x2) 1.278392558s ago: executing program 2 (id=276): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000700), 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002bc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r3, 0xffff, 0x80, &(0x7f0000002c00)={0x7f, 0x7}, 0x8) close(r3) fcntl$lock(r2, 0x9, 0xfffffffffffffffe) poll(&(0x7f0000001180)=[{r0, 0x80}], 0x1, 0xfc7) syz_open_pts() sendto$unix(r1, &(0x7f0000001240)="0e8344", 0x3, 0x4, &(0x7f0000001300)=@abs={0x1, 0x0, 0x0}, 0x8) 1.031807676s ago: executing program 7 (id=288): mknod(0x0, 0x1000, 0x0) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000740)="253fa859fcc5dd62d68fbc35d1ba42ef184dd8916910faee404278d6714c0d66e68b8703fc5331371f07ad8f23106a5ce4e32e7182df740fa902b39073671c2da9ff504f318a76e4292ebb9b436b37b642c4d21218e3e9cb46f6c1a994a9bcf2546b421b45c10b6471afd9dc4a7d379ffec6ec314cfdeeebc1a1cd4a0b265b16e811040a5a6105746abcc9d1cb3c", 0x8e}], 0x1) getegid() execve(0x0, 0x0, 0x0) write(r0, &(0x7f0000002300)='<\'', 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r1 = socket(0x2, 0x4001, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x1}, 0x3, &(0x7f0000000180)="ad4b40b5dfeedab44812d83b4871006d6815766e264489de915fc6051368b737886a310bd55dee8c5cc8b56f7cccb361736090eea64cfdb0fb59aafbf9df23d4935bdcf84776c443b8ff181d719898b68aeb020c510d398d431f3738d4d86b", &(0x7f0000000280)=0x5f, &(0x7f0000000380)="9d26778e54f71759182833fb26fe12402612e6b6e093416d78429350f0eaa48ca025c2cbf618ba77b6c0ca4799cd3a2fe28f3b15fac7bfd7164251352e790f54c76644c0c62f21d5b8b911ef3445408d27c37b74e35b0d1fdcab8f04fbe6770d1bd3c8d750ee5ffe8a53ebbd2da4e3d3e2e2a90804b9b960aad44ce8522ff07d448446dd2f707968be93a0567dd680f65dd3605f23d7396b97b373529f919b035eceb8c1d516767efb9a509920a63f58d3929fd6781a26096e2298f1a21a962d72d49522dc47782c767622c056c6309456386684dd84", 0xd6) r2 = dup(r1) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) poll(&(0x7f0000000100)=[{r0, 0x4}], 0x1, 0x1fff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000880)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/265, 0x153}], 0x0, 0x0, 0xfffffffffffffd8d}, 0x6}, 0x10, 0x0, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r5, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) execve(0x0, 0x0, 0x0) accept$unix(r5, 0x0, 0x0) close(r3) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x3) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) open$dir(&(0x7f0000000080)='./bus\x00', 0x80, 0x0) socket(0x20, 0x1, 0x4) mknodat(r2, &(0x7f0000000000)='./file0\x00', 0x80, 0x801) open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) 899.411677ms ago: executing program 6 (id=295): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) ioctl$TIOCSETA(r0, 0xc1584460, &(0x7f0000000740)={0x5, 0x800033, 0x2b, 0xffff, "97a2a24ff3c14649ebb178926cc9795a6b47c1d1", 0x3, 0xfffd}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async) ioctl$FIONREAD(0xffffffffffffffff, 0xc020691b, &(0x7f00000001c0)) 847.515638ms ago: executing program 6 (id=298): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) r0 = socket(0x18, 0x3, 0x3a) sysctl$kern(&(0x7f0000000040)={0x1, 0x5a}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="094b00000000aaaaaaaaaabb08004500001c0000000000019000001400aae000000124009078fe339657"]) (async) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x28db0, 0x0) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x10, 0x0) linkat(r1, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) (async) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x1}, 0xc) (async) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETBELL(r3, 0x80105703, &(0x7f0000000140)) sysctl$net_inet6_ip6(&(0x7f0000000180)={0x4, 0x18, 0x29, 0x34}, 0x4, &(0x7f0000002740), 0x0, 0x0, 0x0) (async) mknod$loop(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) (async) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$WSKBDIO_SETBACKLIGHT(r1, 0x800c5712, &(0x7f0000000380)={0x6, 0x6, 0x3}) (async) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 840.989738ms ago: executing program 7 (id=299): r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r1, 0x27}], 0x1, 0x0) accept(0xffffffffffffffff, &(0x7f00000002c0)=@un=@abs, 0xffffffffffffffff) ftruncate(r0, 0xb358) 767.323252ms ago: executing program 7 (id=301): sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000140)={0x4, 0x18, 0x29, 0xe}, 0x4, &(0x7f0000000180)="befb9d63b63785e289cc2804fd0d3bfa1994b9bd461e0f54f95a0c639118c238e19c15552ee639728ec925b9ca5c91470daa0cebc666ab899c8030624a9a432cc08437bd1f74db765d361e0a6dfbb650441bbb0090f7d5fd0d3974944f2acbc9722778741875efc267fa5fdc75aa9da341749319a0bfa97cdcc37a72b6130ca3f39ba86d14f273a1d3e3dcf708609ad19dc82478e2e0a46a2cd520673f8999047e1deb086a8caa4cf82c08e0d38892288b40f0b66d2111b3e9e1378be482d4020360dbf8d881473b09d99e82b47ecfebb78e7b8a075ebbfd7d0b9b215a668562aeca0ff73ad1", &(0x7f0000000280)=0xe6, &(0x7f00000002c0)="8c8f036d3daee51ec399b891e881561d254f255cd598bf66d2303ee3d4c4260da23519dfdbca4614304f39f59f2af36e07ea24992948110e5739cb227cc2d3b836fd77aff249bc6d6ded49144930cdec350067", 0x53) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="f1536c00", 0x4) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x24) getdents(r0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x5}) getdents(r0, &(0x7f0000000040)=""/84, 0x54) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet6_ip6(&(0x7f0000000140)={0x4, 0x18, 0x29, 0xe}, 0x4, &(0x7f0000000180)="befb9d63b63785e289cc2804fd0d3bfa1994b9bd461e0f54f95a0c639118c238e19c15552ee639728ec925b9ca5c91470daa0cebc666ab899c8030624a9a432cc08437bd1f74db765d361e0a6dfbb650441bbb0090f7d5fd0d3974944f2acbc9722778741875efc267fa5fdc75aa9da341749319a0bfa97cdcc37a72b6130ca3f39ba86d14f273a1d3e3dcf708609ad19dc82478e2e0a46a2cd520673f8999047e1deb086a8caa4cf82c08e0d38892288b40f0b66d2111b3e9e1378be482d4020360dbf8d881473b09d99e82b47ecfebb78e7b8a075ebbfd7d0b9b215a668562aeca0ff73ad1", &(0x7f0000000280)=0xe6, &(0x7f00000002c0)="8c8f036d3daee51ec399b891e881561d254f255cd598bf66d2303ee3d4c4260da23519dfdbca4614304f39f59f2af36e07ea24992948110e5739cb227cc2d3b836fd77aff249bc6d6ded49144930cdec350067", 0x53) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="f1536c00", 0x4) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x24) (async) getdents(r0, 0x0, 0x0) (async) mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) (async) open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) (async) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x5}) (async) getdents(r0, &(0x7f0000000040)=""/84, 0x54) (async) 764.957314ms ago: executing program 6 (id=303): sysctl$net_inet_ip(&(0x7f0000000240)={0x4, 0x2, 0x0, 0x29}, 0x4, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x248f, 0x80, 0xffff, 0x1, 0x21, 0xd, 0x4000001, 0x2, 0x1, 0x1, 0xf1e}) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) close(r2) openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) sysctl$net_inet_ip(&(0x7f0000000240)={0x4, 0x2, 0x0, 0x29}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) socket(0x2, 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) connect$unix(r0, &(0x7f0000000000), 0x10) (async) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) kqueue() (async) kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x248f, 0x80, 0xffff, 0x1, 0x21, 0xd, 0x4000001, 0x2, 0x1, 0x1, 0xf1e}) (async) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) (async) close(r2) (async) openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) 762.762496ms ago: executing program 7 (id=305): sendto(0xffffffffffffffff, 0x0, 0x58, 0x0, &(0x7f0000000080)=@in6={0x18, 0x3, 0x0, 0x1ff}, 0xc) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x0, 0x0}, 0x8) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000180)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44162df3867d25aff254e68dbf44ff53559bdaccfdf6b9e3957261167908bdf9ab63a1900bb07c4a19fe9c74c43e44665d8aa04db2150d2379c95abab88ba171048ff14200a5133cab96cb52dc062c67abb716c06191ca3a1528fd52a92bd16fe9e644b5465e76e17a9df0821b2bf250fa4298ed528be8a422cbea36aceaa0bce82558eadcb5904a61b694ccd0d6fc6ddafdd6224fb0c7a8ffd13019f8edee2119978b8832e94a404d59383d8b4380a6efbe86282b2a44", &(0x7f0000000040)=0x10011, 0x0, 0x5a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x5}, 0x5, &(0x7f0000000080), &(0x7f0000000040), 0x0, 0x0) 637.455604ms ago: executing program 7 (id=306): openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, &(0x7f0000000000)={0x0, 0x0}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r1, 0x20004455, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x200, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x1b}, 0x7297, 0x3d0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x4}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x200, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x1b}, 0x7297, 0x3d0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x4}) socket(0x800000018, 0x2, 0x0) (async) r2 = socket(0x800000018, 0x2, 0x0) bind$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x2}, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) pwrite(r4, &(0x7f00000000c0)="a7", 0x1, 0x40007) (async) pwrite(r4, &(0x7f00000000c0)="a7", 0x1, 0x40007) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r5, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r5, 0x0) fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) (async) r6 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) write(r6, &(0x7f0000000100), 0xfffffe5d) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f00001f7000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0x1800000}, {&(0x7f0000087000/0x1000)=nil, 0x0, 0xfffffffffffffffd}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000066000/0x1000)=nil, 0x3}, {&(0x7f000010b000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f00000ed000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil}, {0x0, &(0x7f00000cb000/0x4000)=nil, 0xfffffffbfffffffc}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f0000139000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0xdc5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f0000169000/0x3000)=nil}, {0x0, &(0x7f0000358000/0x2000)=nil}], './file0\x00', 0x8}) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f00001f7000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0x1800000}, {&(0x7f0000087000/0x1000)=nil, 0x0, 0xfffffffffffffffd}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000066000/0x1000)=nil, 0x3}, {&(0x7f000010b000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f00000ed000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil}, {0x0, &(0x7f00000cb000/0x4000)=nil, 0xfffffffbfffffffc}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f0000139000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0xdc5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f0000169000/0x3000)=nil}, {0x0, &(0x7f0000358000/0x2000)=nil}], './file0\x00', 0x8}) r7 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r7, 0xffff, 0x1000, &(0x7f0000000100)=0x7, 0x4) (async) setsockopt$sock_int(r7, 0xffff, 0x1000, &(0x7f0000000100)=0x7, 0x4) bind$unix(r7, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) mknod$loop(&(0x7f0000000240)='./file1\x00', 0x2000, 0x1) (async) mknod$loop(&(0x7f0000000240)='./file1\x00', 0x2000, 0x1) open(&(0x7f0000000280)='./file1\x00', 0x10000, 0x104) ioctl$WSKBDIO_GETBACKLIGHT(r0, 0x400c5711, &(0x7f0000000080)) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2000, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0xa, 0x0, r9}}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000540)='./file0\x00') 637.046433ms ago: executing program 6 (id=307): chroot(&(0x7f0000000000)='./file0\x00') r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc) listen(r0, 0x200) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x10) r2 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x1, 0x2a) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x40, 0xc) mkdirat(r3, &(0x7f0000000180)='./file0\x00', 0x4) truncate(&(0x7f00000001c0)='./file0\x00', 0x5) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = socket(0x6, 0x3, 0x1) clock_getres(0x0, &(0x7f0000000240)) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x812, r5, 0x7) fcntl$setstatus(r4, 0x4, 0x80) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') r7 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) ioctl$VMM_IOC_TERM(r7, 0x80045604, &(0x7f0000000380)) fcntl$dupfd(r5, 0x0, r1) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000003c0)={'tap', 0x0}) r8 = socket$unix(0x1, 0x5, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x0, 0x0, 0x1}, 0x8) ioctl$SPKRTUNE(r5, 0x20005302, &(0x7f0000000440)={0xffff7ee5, 0x1b9a}) listen(r2, 0x7) execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000500)=[&(0x7f00000004c0)='/dev/ttyCcfg\x00'], &(0x7f0000000780)=[&(0x7f0000000540)='tap', &(0x7f0000000580)='/dev/ttyCcfg\x00', &(0x7f00000005c0)='/dev/vmm\x00', &(0x7f0000000600)='tap', &(0x7f0000000640)=')*)\xc0\x00', &(0x7f0000000680)='^{\x00', &(0x7f00000006c0)='tap', &(0x7f0000000700)=':,+\'\x00', &(0x7f0000000740)='[]]{#(\\#-\x00']) sendto$unix(r6, &(0x7f0000000800)="29e7b0571679bea89505f32b58156ab08dfa70a8db750753c7ccb0ce6f675e04d6f94e104755df14dfe414b65c549bd1ec1ea486af46e1c47b0139b761592cb7bf1d82d47f52db73e9fd25bee0c14ec687bfc1810158430713933f4c", 0x5c, 0x400, &(0x7f0000000880)=@abs={0x0, 0x0, 0x0}, 0x8) connect$unix(0xffffffffffffffff, &(0x7f00000008c0)=@abs={0x0, 0x0, 0x1}, 0x8) r9 = dup2(r8, r2) ioctl$SPKRTUNE(0xffffffffffffff9c, 0x20005302, &(0x7f0000000900)={0x1, 0x6}) ioctl$BIOCSETIF(r9, 0x8020426c, &(0x7f0000000940)={'tap', 0x0}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000980), &(0x7f00000009c0)=0xc) 635.133946ms ago: executing program 6 (id=308): r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0xf02, 0x159) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) socket(0x20, 0x3, 0x0) write(r1, &(0x7f00000004c0), 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) socket(0x18, 0x1, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x15}, 0x4, 0x0, 0x0, 0x0, 0xff46) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f0000000100)="e1000000", 0x4) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x100, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffff020000000000000005fa0800450000300000000000019078ffffffffe00000010c009078000000004500ffe4"]) r3 = openat$pf(0xffffffffffffff9c, 0x0, 0x200, 0x0) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x17}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc0e99db6de761f86, 0x0) sysctl$net_inet_carp(0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0), 0x0) r4 = open$dir(0x0, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0106978, 0x0) ioctl$TIOCSETA(r3, 0xc4504449, &(0x7f0000000740)={0x0, 0x4000, 0x2f00, 0xf, "3901224200", 0x2007, 0x10}) connect$inet(r3, 0x0, 0x0) r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000002c0), 0x10, 0x0) ioctl$WSKBDIO_SETMAP(r5, 0x8010570e, &(0x7f0000000080)={0x0, 0x0}) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$FIOASYNC(r6, 0x8004667d, 0x0) sysctl$hw(&(0x7f0000000000)={0x6, 0x8}, 0x2, &(0x7f00000000c0)="5acd98281daa9f8279598913f887682ec3d46199fd", &(0x7f0000000140)=0x15, 0x0, 0x0) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000300)={0x2, 0x6, 0x5, 0x102, "da9f44e3ee9027bed8b33dfa0f22c04c46233adb", 0x9, 0x2}) readv(r4, &(0x7f0000000240), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) 579.882567ms ago: executing program 6 (id=311): r0 = shmget$private(0x0, 0xf000, 0xa0, &(0x7f0000ff0000/0xf000)=nil) shmat(r0, &(0x7f0000ff8000/0x4000)=nil, 0x2000) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r1, 0x2}, {r2, 0x40c889b6a94f7e0a}], 0x2, 0x8000) recvmmsg(r2, &(0x7f00000007c0)={0x0, 0x6}, 0x10, 0x842, 0x0) shmat(r0, &(0x7f0000ff3000/0x2000)=nil, 0x3000) 484.664018ms ago: executing program 7 (id=312): select(0x40, &(0x7f0000000180)={0x4e, 0x44809ea0, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x0, 0x6}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) kevent(0xffffffffffffffff, 0x0, 0xfffffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffffc, 0x29, 0x0, 0x0, 0x10005}, {{}, 0xfffffffffffffffe, 0xc4, 0x20000000, 0x8000000800000001, 0x46ad}, {{}, 0x7ffffffffffffffc, 0x49, 0xf0000000, 0x1, 0x8}, {{r0}, 0xfffffffffffffffe, 0x20, 0x20, 0x80000000, 0xc3d}, {{}, 0xfffffffffffffffb, 0x0, 0x40000000, 0x9, 0x3f}, {{}, 0xfffffffffffffffd, 0x6, 0x4, 0xff, 0x10000}, {{}, 0xfffffffffffffffd, 0x60, 0x10, 0x2, 0xfff}, {{}, 0xfffffffffffffffc, 0x38, 0x8, 0x100, 0xfffffffffffffffb}], 0xff, 0x0) sysctl$hw(0x0, 0x0, &(0x7f00000000c0)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af7e54a8341f3be673a174c3a12223a171ff2ab99d0e0d43f0a6c3948f11658e876ac2126614dcd00fdfe76f1ace1f77da0c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e491010010791840000000000000000081131a6f0b680f72f2b0d9a19e", 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637d) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}}, 0x3, 0x0, 0x0) r2 = syz_open_pts() read(r2, &(0x7f00000009c0)=""/4096, 0x1000) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000040)={0x5, 0xfffffff9, 0xa88, 0x0, "4efa439223d41c01b65ac2b2ad3d55c70c1066aa", 0x5, 0x7}) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000200)) open(&(0x7f0000001800)='./file0\x00', 0x75f493fec6515f78, 0x0) ktrace(&(0x7f0000000240)='./file0\x00', 0x4, 0xb1c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x10, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000000080)={0x0}, 0x6a, 0x0) dup2(r3, r4) execve(0x0, 0x0, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) close(r1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x1) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x2) ioctl$VNDIOCCLR(r1, 0x80384601, &(0x7f0000000500)={&(0x7f0000000480)='./file0\x00', 0x6, &(0x7f00000004c0)='./file0\x00', 0x8}) 358.411177ms ago: executing program 1 (id=316): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x7}, {}, {0x3}, {0x3}, {}, {0x3}, {0x0, 0xaa59}, {}, {0x1, 0xffffffff}, {}, {0x2, 0x4}, {}, {}, {}, {0x0, 0x80000001}, {0x2, 0xffffffff}, {0x2, 0x3}, {0x3, 0x7218}, {0x0, 0x2}, {0x0, 0x7ff}, {0x2}, {}, {0x3}, {}, {}, {0x2, 0x4}, {}, {0x0, 0x200}, {0x2}, {0x2, 0x2}, {0x2, 0xa}, {0x2}]}) (async, rerun: 64) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1, 0x0, 0x37) (rerun: 64) r0 = open(0x0, 0x0, 0x101) (async, rerun: 64) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x79) (rerun: 64) fchdir(r1) (async) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) setsockopt(r2, 0x1000000029, 0x9, 0x0, 0x0) (async, rerun: 32) r3 = getppid() (rerun: 32) setpgid(0x0, r3) r4 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r4}) (async, rerun: 32) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) (rerun: 32) ioctl$WSKBDIO_GETMAP(r5, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) (async, rerun: 64) r6 = fcntl$getown(r5, 0x5) (rerun: 64) ktrace(&(0x7f0000000200)='./file0\x00', 0x0, 0x400, r6) (async) ioctl$TIOCSETA(r0, 0x802c7414, 0x0) 358.09691ms ago: executing program 2 (id=317): chroot(&(0x7f0000000040)='./file0\x00') writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004500002c101820000400907810000000000000004e214e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="604300079021ee8b2e36d478000204020000"]) sysctl$kern(&(0x7f0000000000)={0x1, 0x1c}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) sendmsg$unix(0xffffffffffffff9c, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000500)="370dc7cc4e61858942", 0x9}], 0x1, 0x0, 0x0, 0x9}, 0x8) r0 = syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000240)={0x0, 0x0, 0x13, 0x0, "523cb3c8b9129c9e242fd505aac10ff300", 0x0, 0xfffffffc}) poll(&(0x7f0000000180)=[{r0, 0x1}], 0x1, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x0, 0x0, 0xfffffffc, 0xcdcf, "1a2198b59b58505f40edabfaffffece900", 0x0, 0xc}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x800000018, 0x3, 0x2) bind$unix(r2, &(0x7f0000000480)=@abs={0x1f95d27d48731892, 0x7}, 0x8) r3 = socket(0x1e, 0x3, 0x0) bind(r3, &(0x7f0000000300)=@un=@abs={0x1, 0x0, 0x2}, 0x8) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$TIOCSETA(r1, 0xc450443c, &(0x7f00000000c0)={0x72f, 0x1, 0x1, 0x3, "c9f7d246000000023b0bca8f00875a6e80f775d2", 0xfffffffc, 0x6}) 357.809782ms ago: executing program 2 (id=318): r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000080), &(0x7f00000032c0)=0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) recvfrom$inet(r1, &(0x7f00000000c0)=""/4096, 0x1000, 0x1000, &(0x7f0000000040)={0x2, 0x2}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, &(0x7f0000000000)=0xfffffffe, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x3, 0x2) setsockopt(r2, 0x1000000029, 0x1a, &(0x7f0000000000)=',\x00\x00\x00', 0x4) syz_open_pts() 357.63913ms ago: executing program 1 (id=319): mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28140000ffff000001"], 0x28}, 0x0) r1 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x2, 0x26, r1) 187.400689ms ago: executing program 1 (id=320): open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x79) setpgid(0x0, 0x0) r0 = getppid() setpgid(0x0, r0) sysctl$net_inet_icmp(&(0x7f0000001380)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f0000000000), 0x0, 0x0, 0x0) r1 = getppid() setpgid(r1, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r1}) r2 = socket$inet(0x2, 0x8003, 0x0) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/76, 0x4c}, 0x800) setsockopt(r2, 0x0, 0x1e, &(0x7f0000000340)="15337ac0", 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1, 0x0, 0x0, 0x16, 0x0, @multicast2}, @udp={{0x0, 0x0, 0x8}}}}}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r3, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r5 = fcntl$getown(r3, 0x5) bind(r4, &(0x7f0000000000)=@in6={0x18, 0x0, 0x2, 0x5e}, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x1b, 0xfffc, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @broadcast}}}}}}) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, r5) 179.795794ms ago: executing program 2 (id=321): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) seteuid(0xffffffffffffffff) r0 = geteuid() setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r2 = open(&(0x7f0000000240)='./file0\x00', 0x18289, 0x154) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r1, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0xd4e688a67930cd) setrlimit(0x8, 0x0) r4 = syz_open_pts() getdents(r2, &(0x7f0000000380)=""/228, 0xe4) close(r4) r5 = syz_open_pts() ioctl$FIOASYNC(r5, 0x80047460, &(0x7f00000000c0)=0x4) poll(0x0, 0x0, 0xffff8000) syz_extract_tcp_res(&(0x7f0000000040), 0x4, 0x1) syz_emit_ethernet(0x103a, &(0x7f0000000480)=ANY=[]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) setreuid(r0, 0x0) r6 = socket(0x18, 0x1, 0x0) close(r6) socket(0x24, 0x2, 0x0) setsockopt(r6, 0x6, 0x42, &(0x7f00000001c0)="c11c2aea", 0x4) 179.295302ms ago: executing program 0 (id=322): r0 = socket(0x20, 0x3, 0xff) (async) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000740)="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", 0x1db}], 0x1) (async) setsockopt(r0, 0x1000000029, 0x2b, &(0x7f0000000000)="ebffcbff13b9fd31929648160000000000000000", 0x14) (async) r2 = socket(0x2, 0x4001, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="74bd8089f10914aae1ada28cfe4560e6f267db6587", 0x15}], 0x1, 0xff) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000001080)=0x7fff, 0x4) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) (async) r3 = accept$inet6(r2, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r4 = fcntl$getown(r1, 0x5) (async) r5 = geteuid() (async) r6 = getegid() setsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000180)={r4, r5, r6}, 0xc) 172.828029ms ago: executing program 4 (id=323): setrlimit(0x0, &(0x7f0000000000)={0x8000000000000000, 0x56}) (async) r0 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) lseek(r0, 0x5, 0x2) r1 = syz_open_pts() close(r1) (async) syz_open_pts() (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000380)={0x7fffffff, 0x8000, 0xbfffdf88, 0xffffff8c, "182628040200c2a6d203680023e0ff7f0d000004", 0x1, 0x1fbff}) (async) r2 = msgget$private(0x0, 0x5e3a2a4fbc13c152) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) (async) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000340)={{0xdf, 0x0, 0x0, 0x0, 0x0, 0x80, 0xbfe}, 0x7fffffffffffffff, 0x3023, 0x0, 0x0, 0x21279ab7, 0x400, 0x9, 0x1}) (async) r3 = geteuid() (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) (async) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, 0xc) r6 = getpid() (async) r7 = getpgid(0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000140)={{0xfff, r3, r4, r5, 0x0, 0xe1, 0x10}, 0x9, 0x5, r6, r7, 0xfda, 0x5, 0xfffffffffffffffa, 0x8}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 168.858461ms ago: executing program 0 (id=324): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000001180)={0x3, &(0x7f0000000000)=[{0x81, 0x0, 0xf1, 0x5}, {0x48, 0x7b, 0x14, 0x4a}, {0x1ae, 0x8, 0x1, 0x9}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffffffffffffff80350001080006"]) syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[]) 124.322658ms ago: executing program 2 (id=325): r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11"], 0x25, 0x2}, 0x6) (async) syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaad09d049f6b638100000086dd6036ea0700303a00fe8036e77e1d681f2a1621e6b81c2100000000000000000000000000aa"]) 122.501109ms ago: executing program 0 (id=326): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, &(0x7f00000003c0)=0x8) sendmsg$unix(r0, 0x0, 0xd) readv(0xffffffffffffffff, &(0x7f0000000600)=[{0x0, 0x59}], 0x10000000000003cd) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000140)={0x0, [{0x1, 0x8}, {0x2, 0xfbe}, {0x3, 0xf}, {0x2, 0x9}, {0x3, 0x8}, {0x2}, {0x2, 0x4}, {0x2, 0xde}, {0x2, 0x9}, {0x3, 0x2}, {0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x1, 0x913d}, {0x1, 0xfffffffc}, {0x3, 0x9}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x7}, {0x3, 0x8}, {0x2, 0x3}, {0x3, 0x10000}, {0x3, 0x3}, {0x3, 0x7}, {0x1, 0xde28}, {0x1, 0x5}, {0x3, 0x5350}, {0x1}, {0x1, 0x1}, {0x2, 0xffff}, {0x2}]}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendto$unix(0xffffffffffffffff, &(0x7f00000001c0)="b100", 0x2, 0x40a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x21) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) fchownat(r2, &(0x7f00000002c0)='./file1\x00', r3, 0x0, 0x1ec53e67677b368e) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xd, [{&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x6c}, {&(0x7f00000ba000/0x2000)=nil, &(0x7f0000162000/0x1000)=nil, 0xffffffffffffff7c}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f00006ac000/0x3000)=nil, 0x6}, {&(0x7f00004f4000/0x3000)=nil, &(0x7f00004ac000/0x1000)=nil, 0xfffffffffffffffa}, {&(0x7f000052e000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000298000/0x2000)=nil, 0x2}, {&(0x7f000025e000/0x4000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x81}, {&(0x7f00007bf000/0x2000)=nil, &(0x7f000053e000/0x4000)=nil, 0x5}, {&(0x7f00002ac000/0x3000)=nil, &(0x7f00002d0000/0x4000)=nil, 0xd}, {&(0x7f0000121000/0x1000)=nil, &(0x7f00003f2000/0x2000)=nil, 0x1}, {&(0x7f0000002000/0x1000)=nil, &(0x7f000038f000/0x4000)=nil, 0x4}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0xb}, {&(0x7f0000196000/0x3000)=nil, &(0x7f00003e4000/0x2000)=nil, 0xb}, {&(0x7f0000566000/0x4000)=nil, &(0x7f000054e000/0x3000)=nil, 0xffffffffbffffff9}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000039f7}, {&(0x7f0000000000/0x400000)=nil, &(0x7f0000001000/0x800000)=nil, 0x80000000}], './file0\x00', 0xfffffffe}) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100400086dd6880058000303b03356d0140558d3dfd766d0a62aab10b9bfe4d1aafbaf5c2c66da2acf4faeb1e580100907828"]) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="673bb5b8cc0c16ed0822c57dd02217f981aa6a78ef1d35e6abbbdabb26a52ad7", 0x20}], 0x1) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) kqueue() ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r5 = socket(0x18, 0x3, 0x3a) setsockopt(r5, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x13, 0x1}, 0xc) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x7fffffff, 0x0, {0x0, 0x1}}) 122.174237ms ago: executing program 1 (id=327): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) setreuid(0xee00, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = getuid() chown(&(0x7f0000000040)='./file0\x00', r1, 0xffffffffffffffff) faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2, 0x0) mkdirat(r0, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) chflagsat(r0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x2) 114.802444ms ago: executing program 0 (id=328): r0 = socket(0x18, 0x3, 0x0) r1 = socket(0x18, 0x3, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x12) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000b80)="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"/285, 0x11d}, {&(0x7f0000002e80)="b389e5aeb7b42eab8dd0017236f060f918", 0x11}, {&(0x7f0000000040)="872cac9a93ee3ac5b3b9743fa8dcb9452ca7d12298445b276099674d5149801845d8a6eaa2b15890ff3199741175ae8d4797f831d1a2", 0x36}, {&(0x7f0000000200)="51e6fd080e294813905e07f580c12e03e6fa0fcec8", 0x15}], 0x4) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r3 = socket(0x18, 0x3, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r3, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff}], 0x2) r4 = socket(0x18, 0x2, 0x0) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendmsg(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)="b68cd6ce9a276fc69ab98c90c7b17ba9a44db2f3a133a24be4dd72e0d56776c288675532b926a33d327c6a8cde3e960caa0153c233dcb42eaa5e489e637b0952db42e570a5b99061a2d1dfc0e059d585a76cf3b0ae39ab7548f603c315b84f68d244d666d70da315d80576db4218e5f71e2e7f437206aa46a241696c59a1d62a0a650a0bf3e69218c46aec119f8efc62c9d7626d55235bd961626f02495da8cb1326d52bcdd0b23945f6de2260f2ac0abb0088eb3bf800a94b", 0xb9}, {&(0x7f0000000400)="e9abc389628413677712b0c7fd625fa2f87e1a7228c662", 0x17}, {&(0x7f0000001740)="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", 0x3f9}, {&(0x7f0000000180)="95d85129b0c78e97", 0x8}], 0x4, &(0x7f00000002c0)=[{0x10, 0x1, 0x3}], 0x10}, 0x8) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) ioctl$WSMUXIO_INJECTEVENT(r5, 0x80185760, &(0x7f0000000140)) read(r5, &(0x7f0000000440)=""/94, 0x5e) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x2011, r2, 0x0) syz_emit_ethernet(0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000046230000000000003c0c68f3e01a0744edc10b7c61ff337b6e71c87a7007a26163"]) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r6 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) setitimer(0x2, &(0x7f0000000140)={{0x9, 0x9}, {0xfffffffefffffffc, 0x10000}}, 0x0) ioctl$FIONREAD(r1, 0x81206919, &(0x7f0000000100)) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) 114.45682ms ago: executing program 2 (id=329): pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = semget$private(0x0, 0x1, 0xb0) semop(r1, &(0x7f0000000e00)=[{0x4, 0x1, 0x800}, {0x4, 0x1}, {0x0, 0x2, 0xafc0e682aab28714}, {0x4, 0xffc0, 0x1400}], 0x4) setreuid(0xffffffffffffffff, 0xee01) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000500)="bdd2b7a0f4303973104318993b9e05b3c496d67fc08de56264b1e7b1f917d9ef5fc37fac2bf8f27348b382a0ebc1d98d4dc904c4e562c2fe1cc73492f49380e467592f13355fb37a627b54bf1adc87ec94836935c798c9a90b40ca1d541ec7fb81c1db67397e3247ffeb7e5363ae3d096881fa89ede1dab7e6b2b0016975e54b23fbc8d2412ccd86c59c6cf3cf072a5d132678909dcfee08205cb2a6021c967c733377f1df6c0db4e43832ff91e7d4a963141199010a5aef36b51d194928f3c5bc32f8e1658c2a4d042678e822f36f2594f904e84adc5d54f824665500d164b2e6f1d2385caf15a18943a560a2fef54c14ff5107bdbeb87ca19caba9432e2fe3f70154893179dc4e14a476215b3fbf814bc33c29181c01f81a94efb69f9b390bb854953fa6c83e7740e0e66c62dc2ae92d0420299a6a4d27a70b3a6dda776577ad946c98277055c731328fb80f94026a4e33422c0ac476a9686fac70363dca5c11f3fa26bae11a2808fdf8ef098c09219e74a595e6afbaef6e1649abeeba04840b56ef4749cf688d75c6c12cc134130176d708340a4558e4307b2c32517a40b9874ce66c6933e85194699e2579ab0a4e830b5f0081c276125796ab0ceb4c2028513dff15cc121da1632e86f03a5c63694a9fcde5dacfc70123160d20170cf7acc58a670a1a1beec8b3046a31e5103f327d6c61e4a29d7538ece017f29bcf0d49cd519a30e57af42a4bce7827407b5b7bc17f11dd132ce89271cdd6929b730d9152fefc6c452a3b010675c1a9834d06a47974b7c55503496a7c6841369cbd14f9199e91ef609f242bb55a690c757af8e5407b855894c7e2d56b255a7f5d5dcfbf3d06d3375d433787ed8009e80f3cf08ef3e873bab3a0437ed9f0aef106e27b68e51e20d18ed92302a2f1b7356dc847524e0f1ad4a90bcd8555aa58b5c041187b5ba6eb3d94bdc0bb60843b470fd966d43cf181ae0433ddf3915f86f24340a78b0f5e73997eb40975fed5ea0fba295588a94cc7ecf6a6c903531430ef6520a8876413710f11a7568d9e8f0add2742690bd23e1a04d909240f2565ab6c4d7c8cb265f55d4151b05159701fdfa8da6f79705edfeb9c3a3f6a2be069e7c250334018aeb961766a3d7aecb9e9b5f9860b99a18b57e64748a37f33266dcbc17be800ec954bac13756aa5d3ae21c8e435910a28f86aa64fae181bc5c86004ad3ba45defe79405b7d17015f779e146b6be1ddf1b827930eb535e3c521cdd37a9834947a9e289271a82f117845fbf5c11ce30cca96c0647bb3bdb00cb0edc5f92add240f4e6baa74244ffd3feb7e462684ac2ab67ae9dd2f5010a66282a0df57284d93678c836173c8f1f5be6f08a4e907e4c624600b5f4594839a3788c4881d9cabfad60df989411bc5f343fca1441f12379221e5e6c477b546a8b8608cbc25b5867fbf158b9aa8438c15ab978c38a251758ca0fbdc5f5df03c7c3a8f01c2bcbf4fa97cbae5df4b7ae58e0ce5a6659221eb39c8bb77b9f3b45323f9d03c709cd057db75e2cf2610163376b3238919eb0d2ba1a7e59f7304eb1eaa392b3c61463b442dad87a939b8bc9a34367934188442996201f6ff87219e3b90387c45074e22acbae31197fe675168f6043c7dd86bbf689edc11d994e7c1dcc5c94eca1f6f8cee229e548fef6a85a6007b62678e9d40ca5b880706c123b0a27d43e241264c0c61982e96d82d52f39399253a933f504af756829603bf1caddd39e34d69f7b5573fab54764208782326c3c456a447eeea21112fb6ffa6d3d1c89e489e923ca02333cf47dc449aadb391526ec0b4413d135be3c38e2da67afb715b5eb19ffb6ce65bfe3d96e305e74930d3dc27eda2ce6f44a834117764aeb5d785c34e28a56bf42c63a009e288bb1e29bbfde2d0da4310f6f898a9c47f63a0a87469198e4fdec2c5f6c7f73b73881ff024313b1936eeed32db239b76530d6cb33ce23d07b03d9776aaeced9d06edd575ea6bc707949faedc36d3a88ffc62e1996c287b0929f02a3f776830dc9adc3e7c39f0ab5b5852b8ad80b2250ee4ea4c07626cf172a2524796a959f157623e4ac201e4d206ac922dda53405629d6d298e758bae31e1dd794ef71e4bb2885573bcf457fdf433b04a853fa4224eacdcc25e32384a22c9d62bc1e206f8b6173db23cef889c6d4b8b14c4dfa3a31b973face6a03d51fa01b697ab6b37046ff916f7ce12fba575688f351bc805e38f628aa7ad3685ca0affb4f6a5a1aa62daac87064a91b72649237c793964e5996de6a4e01b6e22c7a9ef69fc980b61e14347cb2ffc6441bf5422091544f66f294569963c49c2ab3430dc5f63e96bf96196ac1cde2eac0228892a9e228d14f6654a780bb40f97fcaa837a474f78a4229a2cea00296585c8fb184f4271bcbd75d07a3d185fad8a5553d0c919396e65b085b6eb7a174803ddba11a06e4ebb998905988890079eb0a7e29d944df4ee8cd74e84481384b8eeb8528cb79cd4023cb83ce5000473401888439fea2b7f2caf25ec214454372365e95ec20b9ee2d17a637765c95347d9112eacafd20c512e47c81125f0c779e579f4e785f006660d1494974060c4f3ca6c47d245f1bd022fd00f6a0416e5bc14e97bef0e88ed5608b79d1a5d48e9a4902f1ba0491425afb62ee2aae318c2ddf5425a2d0cbcc19ebbd44443bbabf78344b1505bbe0bf06fd428d0dd5aa3dd29498784290f5cc253ad6dac11d7e1977a568ae1e4b3dfeae1e9c715958ed529ed50ce752ab728ab57be012fbee123250bb1ac1660df153b6fd1283de987b3bf1761f19e07e63fb8ec67219e68ebe6c1464b1627ae351579e6b96a6862d50765e766446d175ce78e3ab75cc6604d4b772c1a7b7569e52cb940cb79bfc60593c4ec36df233ef92416b65838d275db6fe915ad49350189e830174c671978ee89ad0067f85e4e1779f5e9f7634c2baf931955ef702825c86269545d2c5f461f95d480e8216a3c05f53c4342d3f35e17e1d843ef4c349eb9e4b4af380eb053329afa269318cb89ecd428ea8f5ad1fd4123c5a87e3393552fc3546d09f3d9b33dd2a2c5954057c6c44e400c37da0c5f40e44a8b60cf518f29c35368f558d086bd5ee7e20c0eb02a082f592345cf61827b32b6455c72961f1a212544621fe27306ac522170f36b6b83e92b8065405282521ef008da0d25cee345a2a1586082351408c5eff24d3fb0d8d43706fbafcfb2dbe1bb757f63eff092a33606dfd9f6f24a4e74dcb1e3778db8279d76fd41493a041df271778c32f307125d841b09bd8861558731198b0346a1f837ebb1d66cb2007e914bb00edafce2646de376ceb1d174c218d243a8c3b4dd65366c90166845472409159971650927317568f368c014a26b18fca8d9abf7a957c785299c86161d85e1d437c2c57a5bf8265732576bf7ed099caa21721b1845352962819d8a191401c56c32dd139cb881516fdc4744117525a15e75dcbf601817195b2092732dcea602771127aef93e2ede0f522879449b3d10ab88b6a0a2dcdbbfe118a7639d1ffd2f97d3c14e2a76745800a9351dac2530483a8f5f37342ba699500e04715916ac821c7ad432f290c3b521ce10445d8805cf0b43f58da6193efbf4070e98d8166f592588c74457a3f4966e9e3b2bd1eec335546315931933bfffc5a5ba71a96f229cd248403a395b1bdef055193942b96666f7901d2637e3709f25403c2eff1cebee334db911a8e097a502e54fdc6dd80b1040f4bcb05e2e3de7cda0c5de9b848c81c645ddda34e0d96f14ec4314749fca8649cc9610ddf450e21dbb7e821a8a075f8c1b4998e47aae89868ee1e4aaaee982ae8e9d191892f4c59343cfa55bf24e6990abaa7a7945ccc65269d1e6a6c7c9cd9690dcb09bce67196e6a2325bb6760e68edf1b0ccf663149c9d4f15ba06fc1c3c5d72b871278b6808fdab5955e9170bca809e1ee60f87e0f8ea9de8b2eb8", 0xb01}, {&(0x7f0000002040)="5263f22488fbd2c62a852e89fba194e8c6f40a4d7f29745b820655c29f620c94274a5f28d557a731986b2b43ff52b2a6bcb29aa303594fe617abf12e351888a4d57f22146c00b1ec0d2b1bc2bd9c817e0d0415a3c397df22de18e0867c71ec8755722be40656c9a83812c26e01b59eee5673731400d47cf0652dc4ad6d53d0edde416892dcfbb842ef4417414e0f48553eee1bfb84ed60ae867088438af19a36a7aef9d844413e5d451508a2e40b4ffafc0020bed2fea327cfa122", 0xbb}, {&(0x7f0000000480)="db4763bbe9b5d6f23586e420a70fc20770336acc49516a9eb1842f67ff6f72d5f537c9466e8898f3e14826f2f7be0fe0bc82e28b1a8fcf434a86a6c3d4b96b2881e1057f50e1fe703f7ad4c8a8e742428e6190e330611c7d20b8463fb03eaa3b45b3ae87ea04c800c5e1eebc757324afe907", 0x72}], 0x2) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=[&(0x7f0000000040)='^/[.}-*\xbc+}*,\x00', &(0x7f0000000080)='!\'(\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000240)='$\x00', &(0x7f0000000400)='\x00'], &(0x7f00000003c0)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)=',\x00']) readv(r0, &(0x7f0000002480)=[{&(0x7f0000001040)=""/4096, 0x1000}], 0x1) 5.801789ms ago: executing program 1 (id=330): r0 = socket(0x2, 0x3, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x20) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0xaa, 0x0, 0x0, {[0x1, 0x0, 0xffffffffffffffd, 0x1, 0x0, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x400000], [], [0xffffffff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8], [{}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x1000}, {0x0, 0x0, 0xc8, 0x7fffffffffffffff}, {0x0, 0x5}, {0x0, 0xeb, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffd, 0x0, 0x100000001}], {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x8}}}) r1 = kqueue() kevent(r1, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) kevent(r1, 0x0, 0x0, &(0x7f00000001c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) getsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) 766.163µs ago: executing program 0 (id=331): setreuid(0x0, 0xee01) symlink(&(0x7f0000000780)='./bus/\x00', &(0x7f0000000740)='./bus\x00') (async) symlink(&(0x7f0000000780)='./bus/\x00', &(0x7f0000000740)='./bus\x00') mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r0, 0x41946472, 0x0) 509.701µs ago: executing program 1 (id=332): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x6c1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000280)=[{0x1, 0x4, 0x2, 0x8000008}, {0x3c, 0x8, 0x9, 0x9}, {0x1006, 0x1, 0x9d}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xb1, 0x10, 0xe4, 0x10000f}, {0x20, 0xd, 0x0, 0x4}, {0x6, 0xa, 0x83, 0x880}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000340)="00a0a78d0ca82026dec3e59be543bfcb4c969b000000000000001783630f5258246106851580cedf632b5fdd539e2e6866e957dfac2edbb18b78a4e78cf5b25976eafea9b52b15b8716b760c521107ee17c9ced253a68701b05afb784970496a67f540192e1f71b61ac3b88200dff33134b05cd26d5042c75988b99a", &(0x7f0000000080)=0x7c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0\x00') r2 = socket(0x18, 0x3, 0x8) shutdown(r2, 0x2) write(r1, &(0x7f0000000480)='\x00'/14, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="ed", 0x1) recvmmsg(r4, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0xfffffffffffffe8e, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2842, 0x0) recvmmsg(r4, &(0x7f00000003c0)={0x0, 0x1}, 0x10, 0x1000, 0x0) select(0x40, &(0x7f00000003c0)={0x0, 0x2000000000000000, 0x0, 0xe}, 0x0, 0x0, 0x0) unveil(0x0, &(0x7f0000000140)='x\x00') write(r0, &(0x7f0000000000)="7c8b30d047c88cd1feeff8db828362390951fdf623c0f096236c3121c824177f72cda4b7b26da135f6a416649f5f739b20585e61a1ace7ffa8b4d889c898b3", 0x3f) 0s ago: executing program 0 (id=333): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000080)=0x2f, 0x4) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) fchown(r0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) unveil(0x0, &(0x7f0000000080)='c\x00') r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) setsockopt(r2, 0x1000000000029, 0xd, &(0x7f0000000000)="ffdaf64c000000004f0527000000055e473e0000", 0x14) mkdir(&(0x7f0000000740)='./file0/file1\x00', 0x0) chroot(&(0x7f0000000100)='./file0/file1\x00') setreuid(0xee00, 0x0) r3 = getuid() setreuid(0x0, r3) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') open(&(0x7f0000000240)='./file0\x00', 0x18289, 0x154) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.228' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error witness: lock order reversal: 1st 0xffff8000299dee00 &cq->cq_mtx (&cq->cq_mtx) 2nd 0xffffffff838f5900 &sched_lock (&sched_lock) lock order [1] &cq->cq_mtx (&cq->cq_mtx) -> [2] &sched_lock (&sched_lock) #0 mtx_enter+0x4a #1 sleep_setup+0xc6 #2 msleep_nsec+0x119 #3 dt_ioctl_record_stop+0xbc #4 dtclose+0x105 #5 spec_close+0x45f #6 VOP_CLOSE+0x133 #7 vn_closefile+0x12b #8 fdrop+0x126 #9 closef+0x192 #10 syscall+0xbc6 #11 Xsyscall+0x128 lock order [2] &sched_lock (&sched_lock) -> [1] &cq->cq_mtx (&cq->cq_mtx) #0 mtx_enter+0x4a #1 clockintr_cancel+0x2f #2 mi_switch+0x172 #3 sleep_finish+0x2da #4 sys_futex+0xa24 #5 syscall+0xbc6 #6 Xsyscall+0x128 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic the kernel did not panic ddb{0}> trace db_enter() at db_enter+0x25 witness_checkorder(ffffffff838f5900,9,0) at witness_checkorder+0x10fb mtx_enter(ffffffff838f58f0) at mtx_enter+0x4a sleep_setup(ffff8000299dee50,220,ffffffff833aa7a4) at sleep_setup+0xc6 msleep_nsec(ffff8000299dee50,ffff8000299dedf0,220,ffffffff833aa7a4,ffffffffffffffff) at msleep_nsec+0x119 dt_ioctl_record_stop(ffff800000afb000) at dt_ioctl_record_stop+0xbc dtclose(11e5f,81,2000,ffff80003c433218) at dtclose+0x105 spec_close(ffff80003c495b80) at spec_close+0x45f VOP_CLOSE(fffffd805fa922c0,81,fffffd80097fb410,ffff80003c433218) at VOP_CLOSE+0x133 vn_closefile(fffffd806ab3c918,ffff80003c433218) at vn_closefile+0x12b fdrop(fffffd806ab3c918,ffff80003c433218) at fdrop+0x126 closef(fffffd806ab3c918,ffff80003c433218) at closef+0x192 syscall(ffff80003c495de0) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x57444ac7150, count: -14 ddb{0}> show registers rdi 0 rsi 0x80000 acpi_pdirpa+0x6be71 rbp 0xffff80003c495880 rbx 0xfffffd8004707330 rdx 0xffff80000002a680 rcx 0xffff80003c433218 rax 0x7ffff acpi_pdirpa+0x6be70 r8 0xffff80003c495760 r9 0x8080808080808080 r10 0x91bec19ec8addae3 r11 0x99f1aa68abf58e09 r12 0 r13 0xfffffd8003f5a300 r14 0x3 r15 0xffffffff rip 0xffffffff814c7145 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c495870 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=286405 pid=15073 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c432548,0xffffffff839b4a40 process=0xffff80003b01d380 user=0xffff80003c490000, vmspace=0xfffffd806c0677a0 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 15073 202991 69056 0 2 0 syz-executor 15073 317861 69056 0 3 0x4000080 piperd syz-executor *15073 286405 69056 0 7 0x4000000 syz-executor 30971 477134 94193 0 3 0x90 nanoslp syz-executor 30971 481912 94193 0 3 0x4000090 piperd syz-executor 13859 364101 43861 0 3 0x80 nanoslp syz-executor 13859 279329 43861 0 3 0x4000080 msgwait syz-executor 13859 401230 43861 0 3 0x4000080 fsleep syz-executor 31226 519630 88935 0 3 0x80 nanoslp syz-executor 31226 372087 88935 0 3 0x4000080 ttyin syz-executor 31226 351799 88935 0 3 0x4000080 fsleep syz-executor 1787 288586 2537 0 3 0x80 nanoslp syz-executor 1787 351211 2537 0 3 0x4000080 kqread syz-executor 1787 186196 2537 0 3 0x4000080 fsleep syz-executor 12367 396617 0 0 3 0x14200 bored sosplice 90356 437972 38176 0 3 0x100082 sbwait ndp 38176 267157 23455 0 3 0x10008a sigsusp sh 88935 255642 36346 0 3 0x82 nanoslp syz-executor 2537 461342 36346 0 3 0x82 nanoslp syz-executor 23455 506906 36346 0 3 0x82 wait syz-executor 43861 205753 36346 0 3 0x82 nanoslp syz-executor 41998 79595 36346 0 3 0x82 nanoslp syz-executor 94193 8372 36346 0 3 0x82 nanoslp syz-executor 69056 513348 36346 0 3 0x82 nanoslp syz-executor 25908 324142 36346 0 7 0x3 syz-executor 36346 99784 93699 0 2 0x82 syz-executor 93699 514580 25653 0 3 0x10008a sigsusp ksh 25653 287815 91009 0 3 0x98 kqread sshd-session 91009 206918 79085 0 3 0x92 kqread sshd-session 360 137698 1 0 3 0x100083 ttyin getty 79085 371702 1 0 3 0x88 kqread sshd 48666 305539 31079 74 3 0x1100092 bpf pflogd 31079 31724 1 0 3 0x80 sbwait pflogd 85089 327221 22122 73 3 0x1100090 kqread syslogd 22122 216176 1 0 3 0x100082 sbwait syslogd 50527 416214 1 0 3 0x100080 kqread resolvd 39970 457173 70291 77 3 0x100092 kqread dhcpleased 23943 90358 70291 77 3 0x100092 kqread dhcpleased 70291 235249 1 0 3 0x80 kqread dhcpleased 81188 163986 0 0 3 0x14200 pause smr 35666 114255 0 0 3 0x14200 pgzero zerothread 95514 438522 0 0 3 0x14200 aiodoned aiodoned 76352 331675 0 0 3 0x14200 syncer update 35652 51525 0 0 3 0x14200 cleaner cleaner 98982 9788 0 0 3 0x14200 reaper reaper 78892 90233 0 0 3 0x14200 pgdaemon pagedaemon 71862 520401 0 0 3 0x14200 bored viomb 16665 198601 0 0 3 0x40014200 acpi0 acpi0 92632 40796 0 0 3 0x40014200 idle1 92278 125568 0 0 3 0x14200 bored softnet3 44029 394585 0 0 3 0x14200 bored softnet2 75929 512004 0 0 3 0x14200 bored softnet1 83122 418321 0 0 3 0x14200 bored softnet0 85308 463661 0 0 3 0x14200 smrbar systqmp 74746 36694 0 0 3 0x14200 bored systq 77264 304301 0 0 3 0x14200 tmoslp softclockmp 30469 112246 0 0 3 0x40014200 tmoslp softclock 55331 435819 0 0 3 0x40014200 idle0 1 481886 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex &cq->cq_mtx r = 0 (0xffff8000299dee00) #0 witness_lock+0x5bb #1 mtx_enter_try+0x1ad #2 mtx_enter+0x13b #3 clockintr_unbind+0x56 #4 dt_ioctl_record_stop+0xbc #5 dtclose+0x105 #6 spec_close+0x45f #7 VOP_CLOSE+0x133 #8 vn_closefile+0x12b #9 fdrop+0x126 #10 closef+0x192 #11 syscall+0xbc6 #12 Xsyscall+0x128 Process 15073 (syz-executor) thread 0xffff80003c433218 (286405) exclusive rwlock dtlk r = 0 (0xffffffff83831868) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x377 #2 dt_ioctl_record_stop+0x68 #3 dtclose+0x105 #4 spec_close+0x45f #5 VOP_CLOSE+0x133 #6 vn_closefile+0x12b #7 fdrop+0x126 #8 closef+0x192 #9 syscall+0xbc6 #10 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a13010) #0 witness_lock+0x5bb #1 vn_closefile+0x41 #2 fdrop+0x126 #3 closef+0x192 #4 syscall+0xbc6 #5 Xsyscall+0x128 exclusive mutex &cq->cq_mtx r = 0 (0xffff8000299dee00) #0 witness_lock+0x5bb #1 mtx_enter_try+0x1ad #2 mtx_enter+0x13b #3 clockintr_unbind+0x56 #4 dt_ioctl_record_stop+0xbc #5 dtclose+0x105 #6 spec_close+0x45f #7 VOP_CLOSE+0x133 #8 vn_closefile+0x12b #9 fdrop+0x126 #10 closef+0x192 #11 syscall+0xbc6 #12 Xsyscall+0x128 Process 85308 (systqmp) thread 0xffff8000ffffe000 (463661) shared rwlock systqmp r = 0 (0xffffffff83854e08) #0 witness_lock+0x5bb #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10221 11130K 11429K 166960K 11873 0 pcb 17 12K 12K 166960K 92 0 rtable 219 7K 8K 166960K 395 0 pf 36 18K 21K 166960K 75 0 ifaddr 43 7K 8K 166960K 59 0 ifgroup 58 2K 2K 166960K 89 0 sysctl 3 1K 9K 166960K 7 0 counters 68 36K 37K 166960K 100 0 ioctlops 0 0K 4K 166960K 1566 0 iov 0 0K 20K 166960K 48 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1406 88K 89K 166960K 1703 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 9K 166960K 9 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 16 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 93K 166960K 463 0 sigio 0 0K 0K 166960K 72 0 proc 72 91K 128K 166960K 569 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 36 0 in_multi 99 7K 7K 166960K 108 0 ether_multi 1 0K 0K 166960K 5 0 mrt 0 0K 0K 166960K 11 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 67 307K 307K 166960K 67 0 exec 0 0K 1K 166960K 414 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 257 162K 172K 166960K 6100 0 UVM aobj 13 2K 2K 166960K 13 0 pinsyscall 44 88K 107K 166960K 1571 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 16 0 NDP 12 0K 2K 166960K 38 0 temp 50 8677K 8742K 166960K 28273 0 kqueue 15 24K 28K 166960K 86 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 60 0 56 1 0 1 1 0 8 0 rtentry 176 124 0 26 6 0 6 6 0 8 0 unpcb 144 210 0 192 2 0 2 2 0 8 1 syncache 336 4 0 4 2 1 1 1 0 8 1 tcpcb 736 187 0 183 7 3 4 7 0 8 3 arp 128 22 0 4 1 0 1 1 0 8 0 inpcb 328 620 0 613 7 1 6 7 0 8 5 nd6 144 23 0 0 1 0 1 1 0 8 0 pkpcb 40 3 0 3 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 0 1 1 0 8 1 ppxss 1192 12 0 12 1 0 1 1 0 8 1 pppxif 1504 1 0 1 1 1 0 1 0 8 0 pffrag 232 3 0 0 1 0 1 1 0 482 0 pffrnode 88 3 0 0 1 0 1 1 0 8 0 pffrent 40 3 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 41 0 1 1 0 1 1 0 8 0 pfstkey 128 41 0 1 2 0 2 2 0 8 0 pfstate 384 40 0 1 4 0 4 4 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 rttmr 136 3 0 3 2 1 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 494 0 54 31 0 31 31 0 8 1 art_table 40 495 0 54 5 0 5 5 0 8 0 art_node 32 124 0 25 1 0 1 1 0 8 0 sysvmsgpl 40 39 0 36 1 0 1 1 0 8 0 semupl 112 3 0 3 1 0 1 1 0 8 1 semapl 112 13 0 3 1 0 1 1 0 8 0 shmpl 112 10 0 0 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 2138 0 628 95 0 95 95 0 8 0 ffsino 288 2138 0 628 109 0 109 109 0 8 0 nchpl 144 2823 0 1129 63 0 63 63 0 8 0 rtmask 32 3 0 3 1 0 1 1 0 8 1 uvmvnodes 80 2477 0 0 51 0 51 51 0 8 0 vnodes 216 2477 0 0 138 0 138 138 0 8 0 namei 1024 9369 0 9369 1 0 1 1 0 8 1 percpumem 16 65 0 16 1 0 1 1 0 8 0 kstatmem 264 46 0 20 2 0 2 2 0 8 0 scxspl 216 17977 0 17977 3 2 1 2 1 8 1 plimitpl 152 142 0 125 1 0 1 1 0 8 0 sigapl 424 771 0 720 7 0 7 7 0 8 0 knotepl 120 515 0 0 16 0 16 16 0 8 0 kqueuepl 224 127 0 115 1 0 1 1 0 8 0 pipepl 336 200 0 170 6 0 6 6 0 8 3 fdescpl 520 752 0 720 3 0 3 3 0 8 0 filepl 160 4124 0 3894 14 0 14 14 0 8 3 lockfpl 104 211 0 209 1 0 1 1 0 8 0 lockfspl 48 97 0 95 1 0 1 1 0 8 0 sessionpl 144 22 0 13 1 0 1 1 0 8 0 pgrppl 48 43 0 26 1 0 1 1 0 8 0 ucredpl 104 463 0 448 1 0 1 1 0 8 0 zombiepl 144 721 0 720 1 0 1 1 0 8 0 processpl 1240 771 0 720 5 0 5 5 0 8 0 procpl 656 1401 0 1341 6 0 6 6 0 8 0 sosppl 168 1 0 1 1 0 1 1 0 8 1 sockpl 728 899 0 870 10 1 9 10 0 8 5 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 108 0 0 14 0 14 14 0 8 0 mcl2k 2048 36 0 0 5 0 5 5 0 8 0 mtagpl 96 69 0 0 2 0 2 2 0 8 0 mbufpl 256 260 0 0 16 0 16 16 0 8 0 bufpl 280 7830 0 1688 439 0 439 439 0 8 0 anonpl 32 11979 0 0 97 0 97 97 0 246 0 amapchunkpl 152 18926 0 18401 31 2 29 31 0 158 5 amappl16 200 2116 0 2087 27 1 26 26 0 8 19 amappl15 192 5 0 5 1 1 0 1 0 8 0 amappl14 184 111 0 98 1 0 1 1 0 8 0 amappl13 176 3 0 2 1 0 1 1 0 8 0 amappl12 168 1407 0 1373 3 1 2 2 0 8 0 amappl11 160 47 0 33 1 0 1 1 0 8 0 amappl10 152 6 0 6 2 2 0 1 0 8 0 amappl9 144 257 0 256 2 1 1 1 0 8 0 amappl8 136 22 0 19 1 0 1 1 0 8 0 amappl7 128 107 0 94 1 0 1 1 0 8 0 amappl6 120 244 0 240 1 0 1 1 0 8 0 amappl5 112 127 0 118 1 0 1 1 0 8 0 amappl4 104 313 0 292 1 0 1 1 0 8 0 amappl3 96 3639 0 3519 5 1 4 4 0 8 0 amappl2 88 647 0 580 2 0 2 2 0 8 0 amappl1 80 9621 0 8994 15 1 14 15 0 8 0 amappl 88 5339 0 5163 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 12 0 0 1 0 1 1 0 8 0 uaddrrnd 24 752 0 720 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 752 0 720 1 0 1 1 0 8 0 vmmpekpl 168 7985 0 7945 3 0 3 3 0 8 0 vmmpepl 168 52950 0 50900 113 0 113 113 0 357 7 vmsppl 480 751 0 720 5 0 5 5 0 8 0 rwobjpl 72 18862 0 15374 70 0 70 70 0 8 0 pdppl 4096 1511 0 1440 101 28 73 85 0 8 2 pvpl 32 18411 0 0 149 0 149 149 0 265 0 pmappl 256 751 0 720 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 401 0 34 11 0 11 11 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 witness_checkorder(ffffffff838f5900,9,0) at witness_checkorder+0x10fb mtx_enter(ffffffff838f58f0) at mtx_enter+0x4a sleep_setup(ffff8000299dee50,220,ffffffff833aa7a4) at sleep_setup+0xc6 msleep_nsec(ffff8000299dee50,ffff8000299dedf0,220,ffffffff833aa7a4,ffffffffffffffff) at msleep_nsec+0x119 dt_ioctl_record_stop(ffff800000afb000) at dt_ioctl_record_stop+0xbc dtclose(11e5f,81,2000,ffff80003c433218) at dtclose+0x105 spec_close(ffff80003c495b80) at spec_close+0x45f VOP_CLOSE(fffffd805fa922c0,81,fffffd80097fb410,ffff80003c433218) at VOP_CLOSE+0x133 vn_closefile(fffffd806ab3c918,ffff80003c433218) at vn_closefile+0x12b fdrop(fffffd806ab3c918,ffff80003c433218) at fdrop+0x126 closef(fffffd806ab3c918,ffff80003c433218) at closef+0x192 syscall(ffff80003c495de0) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x57444ac7150, count: -14 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{1}> trace x86_ipi_db(ffff8000299ddff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 mtx_enter(ffff8000299dedf0) at mtx_enter+0xd2 clockintr_dispatch(ffff80002a300b00) at clockintr_dispatch+0x3b4 lapic_clockintr(0,0) at lapic_clockintr+0x51 Xresume_lapic_ltimer() at Xresume_lapic_ltimer+0x2a __mp_lock(ffffffff83a12e08) at __mp_lock+0x192 ktrgenio(ffff80002a2ba7c8,f8,1,ffff800000b387e0,4) at ktrgenio+0x228 dofilewritev(ffff80002a2ba7c8,f8,ffff80002a300da8,0,ffff80002a300e60) at dofilewritev+0x4d9 sys_write(ffff80002a2ba7c8,ffff80002a300f10,ffff80002a300e60) at sys_write+0xa2 syscall(ffff80002a300f10) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x73b3c58497c0, count: -13