last executing test programs: 3.193339539s ago: executing program 2 (id=34): r0 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r0, 0x801c693c, &(0x7f00000001c0)) 3.126023583s ago: executing program 2 (id=37): select(0x0, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0x7fff) syz_emit_ethernet(0x46, &(0x7f0000000380)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4, 0x38, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x8200, 0x0, 0x1, {[@sack_perm={0x4, 0x2}, @sack={0x5, 0x2}, @timestamp={0x8, 0xa, 0x4, 0xffff}]}}}}}}}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r1, 0xc00c7006, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x800474c4, &(0x7f0000000040)) writev(0xffffffffffffffff, &(0x7f0000001500), 0x0) sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000100), 0x0, &(0x7f0000000180), 0x0) socket(0x18, 0xc003, 0x3a) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) 2.230921819s ago: executing program 2 (id=76): syz_emit_ethernet(0x0, 0x0) 2.159722434s ago: executing program 2 (id=81): syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @random="0000c9db73f0", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x1c, 0x64, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast1}, @icmp=@info_reply={0x10, 0x0, 0x0, 0x5, 0x1}}}}}) socket(0x2, 0x1, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) sched_yield() sendsyslog(&(0x7f0000004240)="3c2b3c7be6070663ff8229e129123179b62a94f3c332c35752de1059888dae162754155e454003486092af84a9de93c2210a0dec44ca061286a2700820c04d963bcee0a5c09c8e6be14df61c21fccd2e7a83435f77c261030c554f27173644ab80faa1346f2e377f071cf1b5604b5fc09601ca2bd9aa9e77b9bfb8", 0x100000, 0x26) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @random="0000c9db73f0", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x1c, 0x64, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast1}, @icmp=@info_reply={0x10, 0x0, 0x0, 0x5, 0x1}}}}}) (async) socket(0x2, 0x1, 0x0) (async) select(0x0, 0x0, 0x0, 0x0, 0x0) (async) sched_yield() (async) sendsyslog(&(0x7f0000004240)="3c2b3c7be6070663ff8229e129123179b62a94f3c332c35752de1059888dae162754155e454003486092af84a9de93c2210a0dec44ca061286a2700820c04d963bcee0a5c09c8e6be14df61c21fccd2e7a83435f77c261030c554f27173644ab80faa1346f2e377f071cf1b5604b5fc09601ca2bd9aa9e77b9bfb8", 0x100000, 0x26) (async) 1.574473415s ago: executing program 3 (id=90): sysctl$net_inet_ip(&(0x7f0000000100)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000600), 0x10, 0x0) ioctl$DIOCRGETTSTATS(r0, 0xc4504440, &(0x7f0000000180)={{'\x00', './bus/file0/file0\x00', 0x0, 0x20}, 0x0, 0x4d0, 0x0, 0x10000004, 0x5, 0xffffffff, 0xf8b3, 0x0, 0x6}) 1.573712328s ago: executing program 7 (id=92): select(0x0, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0x7fff) syz_emit_ethernet(0x46, &(0x7f0000000380)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4, 0x38, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x8200, 0x0, 0x1, {[@sack_perm={0x4, 0x2}, @sack={0x5, 0x2}, @timestamp={0x8, 0xa, 0x4, 0xffff}]}}}}}}}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r1, 0xc00c7006, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x800474c4, &(0x7f0000000040)) writev(0xffffffffffffffff, &(0x7f0000001500), 0x0) sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000100), 0x0, &(0x7f0000000180), 0x0) socket(0x18, 0xc003, 0x3a) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) 1.495374815s ago: executing program 5 (id=97): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mlock(&(0x7f00002d0000/0x3000)=nil, 0x3000) 1.479879222s ago: executing program 3 (id=98): semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0xd2, 0x7}, 0x0, 0x8, 0x0, 0x0, 0xb, 0x0, 0x7}) r0 = semget$private(0x0, 0x3, 0x668) semctl$GETPID(r0, 0x1, 0x4, &(0x7f00000000c0)=""/248) semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x400}, {0x1, 0x7, 0x1800}, {0x3, 0x3, 0x1c00}], 0x5a) 1.469712701s ago: executing program 3 (id=100): open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) ioctl$WSDISPLAYIO_DELFONT(0xffffffffffffff9c, 0x8058574f, &(0x7f0000000000)={'./file0\x00', 0xd90, 0x100, 0x1, 0x1, 0x3, 0x7, 0xfffffffa, 0x0, 0x1, 0x3, 0x4}) socket(0x1e, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000280)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4d) r2 = socket$inet(0x2, 0x2, 0x0) dup(r2) ktrace(&(0x7f0000000240)='./file1\x00', 0x4, 0xd27d43220c7df9f, 0x0) r3 = fcntl$dupfd(r2, 0xa, r2) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x7010, r3, 0x1) r4 = msgget$private(0x0, 0x600) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$DIOCGETSTATUS(r5, 0xc2084415, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1c}, 0x4, &(0x7f0000000080), 0x0, 0x0, 0x0) ioctl$DIOCXBEGIN(r5, 0xc0104451, &(0x7f0000000040)={0x29, 0x408, &(0x7f0000000c40)=[{0x1, './file1\x00', 0x80000001}, {0x1, './file0/file0\x00', 0x7}, {0x1, './bus\x00', 0xd}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504449, 0x0) sendmmsg(r0, &(0x7f0000000a40)={{&(0x7f0000000100)=@in6={0x1c, 0x18, 0x1, 0x7ff, "e6f7d584a6e91ab14be7cd7644456e43", 0x3}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000002c0)="f6ab8603fb6b7720022b041e3b47f7b9308c6ba864e1437cbb95322f47a8b2c87d523b2ec105baa24b308a960b245497872a49fcaa22ace46e7dedf0d41bd862743c41815174c682e7563598a28b1cfed13b166774870f923dbc0638390a31e10c7a08c15b0b75c520c6a99261c44a30bffec2f9a91fccfc73b74aecd604a46e4cdc2709f334d605964192520e3b50b00d252231e1870d09b2013345e6affe8520f3dd9c206f4b308333334993494ba96915eaab22136379d941bddd7c465488306838baa601033ee12f0a3cc98ec35f754b136ee273c8fa1fa1c3d74b9a7b74dc89e8abd4a4381ab5db053222578f41cb", 0xf1}, {&(0x7f00000004c0)="af81476fb4ff4735c383d79a73c8820a46999e14a56268508d27aefb319c070d446ad4d444f4074f4db4ca671987f7fb06e4a188ef86fa6805a6e3b8d136a9c8c0dddb027f1e1d23a2308638e0553d34aeff0c9e1dcdcbab8c5901330e210f26560c94e13520dd4b5cf50baf91dcc0acd9b81a1e301745c93d5edab05663c658a614c79439de381539e67488862d462d35ff9c01b81dc4afa42ffb049fe0ce8d9657dbe87faf8923b9ca3709f3e3be755d0190b49aded2214872788bce9194b7642374b2c8", 0xc5}, {&(0x7f00000005c0)="343f9ae553cdbc452b5d8ec3e191b18f4bfdae17585a951c8929c02567614e", 0x1f}, {&(0x7f0000000600)="fcbb584619b5", 0x6}, {&(0x7f0000000640)="791f360756aba842dc255f16f00a03739cc0d82edba33aeb515d83a2364aa07d46bcfb4b584583945c6e3e061e3e0301b2fd2bf2289b06ee8bf7eda890edc6255e8c67fc61e8fdccb5ef293424078f8d7a3db6c4dba17d9f7f455d303cdc76c4d3d803c4073e537b6e05579a83a2f2dc3725d717100e4f4bf8de94250b91cd2d960c3a3e189353af3b3cfc84248d1d34d5b462468c72f02657039292885e61b612c5c37544398d7efcb2d029f14fe2e40a7ea50d99ca7d917040e1611f015cdac23eb4482cafd5c809440a4a32fc6c93cd71a0", 0xd3}, {&(0x7f0000000740)="f0c2d9e99578714054e37f705ae316c66565f759027a2c7e8793ef6cfbf3806488515f2e5667f9b35d7c11b60ae17a78fb3c9d9c8c7b527bee05a92d63d002fb375f5634f6d0f321c124eee35566472ec549ae", 0x53}], 0x6, &(0x7f0000000880)=[{0xb4, 0x1, 0x7, "f8ac204142e2e10868bcb75e6663d70a5b8a04b5c144ff503f47fc6371a83fd7d409c93faa435643e8e73331bf6a0bf723dfbe23e578d21f39888a15edee368861e11c4106819a8e27a537bd4a7c94e6a16a7566a2718a14898ccd5dbac9c333f88b082ea6245cafcb4b3255a8f88ead5a52653a633631e3e71774c0c55f51f004d8f05b8102d84a5199f3ccb09f914f07b72c963d10e31b00a422ba8559e505b624eb178bc3e5"}, {0x3c, 0xffff, 0x8, "fa04896e2373b087793b5708f7872a44fc6501f9121f3fdc22b78ef40cdbc20efae02c48ad06f01d6d27b31aaaed9fef"}, {0x44, 0xffff, 0x7, "fcf564ba605bd408fca5c4125501bfd43722238d5a22d771fbe9390925c64db1641f5ac382d5e067a943304928c2b31abfaaf0bfeb"}, {0x64, 0x1, 0xee41, "c8de0d3cdc6a1b841f8c211e821ceeae2d6e7f3b6aa2741e777f0c1f725c2d3ca69fe51df304ad8cb6c2ac2648426a3c778e319ac42fd9877672899913aaf2f858ff1b96a8e4da218b6cc8d2d4ed56bfe937c9290d3b"}], 0x198}}, 0x38, 0x400) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x180, 0x619, 0x4}, 0x0, 0x0, 0x762, 0xe6f, 0x5, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0xebc}) 1.219511302s ago: executing program 2 (id=81): syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @random="0000c9db73f0", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x1c, 0x64, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast1}, @icmp=@info_reply={0x10, 0x0, 0x0, 0x5, 0x1}}}}}) socket(0x2, 0x1, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) sched_yield() sendsyslog(&(0x7f0000004240)="3c2b3c7be6070663ff8229e129123179b62a94f3c332c35752de1059888dae162754155e454003486092af84a9de93c2210a0dec44ca061286a2700820c04d963bcee0a5c09c8e6be14df61c21fccd2e7a83435f77c261030c554f27173644ab80faa1346f2e377f071cf1b5604b5fc09601ca2bd9aa9e77b9bfb8", 0x100000, 0x26) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @random="0000c9db73f0", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x1c, 0x64, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast1}, @icmp=@info_reply={0x10, 0x0, 0x0, 0x5, 0x1}}}}}) (async) socket(0x2, 0x1, 0x0) (async) select(0x0, 0x0, 0x0, 0x0, 0x0) (async) sched_yield() (async) sendsyslog(&(0x7f0000004240)="3c2b3c7be6070663ff8229e129123179b62a94f3c332c35752de1059888dae162754155e454003486092af84a9de93c2210a0dec44ca061286a2700820c04d963bcee0a5c09c8e6be14df61c21fccd2e7a83435f77c261030c554f27173644ab80faa1346f2e377f071cf1b5604b5fc09601ca2bd9aa9e77b9bfb8", 0x100000, 0x26) (async) 1.146489732s ago: executing program 0 (id=110): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$DIOCGETRULESET(r0, 0xc444443b, &(0x7f0000000180)={0x0, './file0\x00', './file0\x00'}) (fail_nth: 1) 1.095975389s ago: executing program 0 (id=113): sysctl$kern(&(0x7f0000000040)={0x1, 0x4c}, 0x2, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0) 1.095135303s ago: executing program 0 (id=115): close(0xffffffffffffffff) openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) setrlimit(0x8, 0x0) syz_open_pts() syz_open_pts() pselect(0x40, &(0x7f00000038c0)={0x6, 0x5, 0x8, 0x800, 0x7, 0x5, 0x8, 0x7}, 0x0, 0x0, 0x0, 0x0) 844.184752ms ago: executing program 4 (id=120): seteuid(0x0) 703.148943ms ago: executing program 5 (id=121): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0xfd, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x17f, 0x0, 0x0, 0xbc2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9) (fail_nth: 1) 698.461571ms ago: executing program 4 (id=124): r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) readv(r2, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/105, 0x69}], 0x1) r3 = socket(0x11, 0x3, 0x0) setsockopt(r3, 0x11, 0x1, &(0x7f0000000000)="80000600", 0x4) sendto$unix(r3, &(0x7f0000000580)="b10005010000009f0500070105000000331c13fecea70500fef96ecfc72fd3357ae30200004e3039d2d236acf20bf404be01000000f7c8cf5f882b297bd8aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abfba0900000008e37193f8343712050500b71d808e5ed405080000fca653181afc9d3f0100"/177, 0xb1, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802) r4 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r4, 0x20007461) r5 = openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000080)={0x32, 0x9, 0x0, 0x9, "746e26134d5a0f5bf432a21d94cd5c570900ec2b", 0x0, 0xfffff7c0}) r6 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x191) write(r6, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r7 = open(&(0x7f0000000100)='./file0\x00', 0x10, 0xa) ioctl$TIOCSETD(r7, 0x8004741b, &(0x7f0000000080)=0x7) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) closefrom(r1) r8 = kqueue() kevent(r8, &(0x7f0000000240)=[{{}, 0xfffffffffffffff6, 0xa7, 0x40000000, 0xfffffffffffffffd, 0x13fff}], 0x4, 0x0, 0x8, 0x0) kevent(r8, &(0x7f0000000280)=[{{r8}, 0xfffffffffffffffb, 0x81, 0x1, 0x9, 0x71}, {{r8}, 0xfffffffffffffff6, 0x8, 0x1, 0x0, 0x8}, {{r8}, 0xfffffffffffffffb, 0x81, 0x8, 0xfff0000000, 0x2}], 0x809, 0x0, 0xa9f7, 0x0) 597.148486ms ago: executing program 7 (id=125): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x5, 0x3, 0xfffffffe, 0x0, "ff0600000002586c000000d200000000000c00", 0x45, 0x40080001}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, 0x0, 0x0) r1 = socket$inet6(0x18, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x18, 0x0, 0x1200017, "00000000000c000600", 0x7}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x9, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000000), 0x98, &(0x7f0000000380), 0xfffa4961, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x7e, 0x0) ioctl$TIOCSETA(r3, 0xcd60441a, &(0x7f0000000080)={0x1, 0x2, 0x7, 0x2f, "2000030100010000000000000068a95a010400", 0x6}) setresuid(0x0, 0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1000, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) ioctl$BIOCLOCK(r5, 0x20004276) ioctl$BIOCGRSIG(r5, 0x40044273, 0x0) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 596.341712ms ago: executing program 3 (id=126): openat$wsmuxmouse(0xffffffffffffff9c, 0x0, 0x404a2, 0x0) setreuid(0xee00, 0x0) setreuid(0x0, 0xee01) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) r0 = socket(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2, 0x2, 0x200000e3}, 0x10) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4d) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) readv(r1, &(0x7f0000000280)=[{0x0}], 0x1) setreuid(0x0, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unveil(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='w\x00') lchown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = semget$private(0x0, 0x4, 0x101) socket(0x1e, 0x3, 0x0) syz_open_pts() sysctl$kern(&(0x7f0000001900)={0x1, 0x58}, 0x2, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x1}, 0x10) setsockopt$sock_int(r3, 0xffff, 0x4, &(0x7f0000000100)=0x3, 0x4) openat$dri(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/renderD128\x00', 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc933289095ae6031, 0x7}, 0x0, 0x32, 0x0, 0x0, 0x4, 0x0, 0xfd}) setuid(0xffffffffffffffff) 550.765659ms ago: executing program 1 (id=127): setuid(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r1, 0x0) 550.474418ms ago: executing program 5 (id=128): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x13}, 0x4, 0x0, 0x0, &(0x7f00000011c0)='\x00', 0x1) setuid(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet6_ip6(&(0x7f0000000080)={0x4, 0x18, 0x29, 0x35}, 0x4, &(0x7f00000000c0)="743ad85d9fa22ae9c467a0a33e0d3a721be836be5b29d7f9a102568c877fbe6f927c019a1d4c7a2a09e090dd6347873c67f935b2748ae791e782e2de2d1bf114a019daf1ac9e08cf58c8436028a7bee87408d78fc9f14caab1be7b3bf052aa046049c056e4177cebc2692e28b775cfc78b489047fe3ee0c5a220714be274b4048ca529261bd0440d6b0cc70745897adb510e851c3d2cd56f0e054dedfc90a372b13dc3a6c8986b50e89c0fddfa21b96baa5c95295d592f0000c087f8043c60fed091db37e814f4359e53c12dd47ffe0a472b2722b68d7e8002962fdb796e93c5e3c2171d05935c8ea2b3cb000000", &(0x7f00000001c0)=0xff32, 0x0, 0x0) setitimer(0x0, &(0x7f0000001740)={{0x3, 0x86a}, {0x6, 0x5}}, &(0x7f0000001780)) r2 = msgget(0x3, 0x4) msgctl$IPC_RMID(r2, 0x0) setresgid(0x0, r1, 0x0) 548.975909ms ago: executing program 6 (id=129): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) syz_emit_ethernet(0x3a, &(0x7f0000000200)={@random="e77a5aecff83", @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x3, 0x29, 0x2c, 0x66, 0x63c, 0x4, 0x2, 0x0, @rand_addr=0x5, @multicast1, {[@generic={0x1, 0x2}]}}, @tcp={{0x0, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x2, 0x0, 0x3}}}}}}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8020697f, &(0x7f0000000100)) 523.946856ms ago: executing program 7 (id=130): r0 = socket(0x18, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x10001, "fe80b362000000000000008e000200", 0xa}, 0x1c) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000340)=@in6={0x1c, 0x18, 0x3, 0x5, "000000080000fffb4000", 0x20000101}, 0x1c, 0x0, 0x0, 0x0}, 0x40a) 427.776197ms ago: executing program 5 (id=131): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000600), 0x10, 0x0) ioctl$DIOCRDELTABLES(r0, 0xc450443e, &(0x7f0000000a80)={{'./bus/file0/file0\x00', './bus/file0/file0\x00', 0x5}, &(0x7f0000000640)=[{'./bus/file0/file0\x00', './bus/file0/file0\x00', 0x20, 0xd}], 0x1, 0x1, 0x8, 0x13, 0x46ab, 0x397, 0x4, 0xff}) 426.773583ms ago: executing program 5 (id=132): sysctl$kern(&(0x7f0000000040)={0x1, 0x4c}, 0x2, 0x0, 0x0, &(0x7f0000000140), 0x0) 404.841778ms ago: executing program 4 (id=133): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x8004667d, &(0x7f00000000c0)={0x3, 0x1d}) 404.26589ms ago: executing program 1 (id=134): open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504446, &(0x7f00000000c0)={0x6, 0x4000805c, 0x5, 0xa, "d53fe9000000001000000000e5ffffffe80100", 0x3db, 0x3}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f00000002c0)="c971f91e8e5f84cf71b59c7afec3708201000000007bc9000000000000b96e95c0b795740e034dfac26a28", &(0x7f0000000080)=0x5b6, 0x0, 0xfffffffffffffef1) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r0, 0x80105727, &(0x7f0000000280)={&(0x7f0000000240)=[{0x23, 0xbc8}, {0x20, 0x5}], 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x3, 0x0) setsockopt(r1, 0x0, 0x2, &(0x7f00000000c0)="63e1303d", 0x4) ktrace(&(0x7f0000000100)='./file0\x00', 0x4, 0xd27d43220c7ff9d, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) 355.20863ms ago: executing program 7 (id=135): openat$wsmuxmouse(0xffffffffffffff9c, 0x0, 0x404a2, 0x0) openat$wsmouse(0xffffffffffffff9c, 0x0, 0x1, 0x0) setreuid(0xee00, 0x0) setreuid(0x0, 0xee01) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) r0 = socket(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4d) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) readv(r1, &(0x7f0000000280)=[{0x0}], 0x1) setreuid(0x0, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unveil(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='w\x00') lchown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = semget$private(0x0, 0x4, 0x101) socket(0x1e, 0x3, 0x0) syz_open_pts() sysctl$kern(&(0x7f0000001900)={0x1, 0x58}, 0x2, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x1}, 0x10) setsockopt$sock_int(r3, 0xffff, 0x4, &(0x7f0000000100)=0x3, 0x4) openat$dri(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/renderD128\x00', 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc933289095ae6031, 0x7}, 0x0, 0x32, 0x0, 0x0, 0x4, 0x0, 0xfd}) setuid(0xffffffffffffffff) 349.060494ms ago: executing program 4 (id=136): syz_emit_ethernet(0x4a, &(0x7f0000000980)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '_j@', 0x14, 0x2c, 0xa9, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x0, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x6, 0x0, 0x4}}}}}}}) 346.995544ms ago: executing program 4 (id=137): sysctl$kern(0x0, 0x700, 0x0, 0x0, 0x0, 0x0) 341.493695ms ago: executing program 1 (id=138): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mlock(&(0x7f00002d0000/0x3000)=nil, 0x3000) 340.958919ms ago: executing program 6 (id=139): semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0xd2, 0x7}, 0x0, 0x8, 0x0, 0x0, 0xb, 0x0, 0x7}) semget$private(0x0, 0x3, 0x668) r0 = semget$private(0x0, 0x4, 0x13e) semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x400}, {0x1, 0x7, 0x1800}, {0x3, 0x3, 0x1c00}], 0x5a) 339.373727ms ago: executing program 3 (id=140): r0 = syz_open_pts() fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x6, 0x2000003, 0x0, 0x3}) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x8, 0xa, 0x0, 0x1}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x41, 0x3}, {0x100, 0x15ad}], 0x2}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) r2 = socket$inet(0x18, 0x3, 0x102) sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x7, '\x00', 0x101}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000000)="638802000000339afe51f6f2efa24a85abdd612dd68e59adfecf9323100084410a8591426ee03e5311c178ac19a25f2e", 0x30}], 0x1, 0x0}, 0x402) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0xc02069b6, &(0x7f00000001c0)) fcntl$lock(r0, 0x9, &(0x7f0000000080)={0x3, 0xe, 0x200, 0x1, 0x2}) syz_open_pts() (async) fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x6, 0x2000003, 0x0, 0x3}) (async) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x8, 0xa, 0x0, 0x1}) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) (async) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x41, 0x3}, {0x100, 0x15ad}], 0x2}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) (async) socket$inet(0x18, 0x3, 0x102) (async) sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x7, '\x00', 0x101}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000000)="638802000000339afe51f6f2efa24a85abdd612dd68e59adfecf9323100084410a8591426ee03e5311c178ac19a25f2e", 0x30}], 0x1, 0x0}, 0x402) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$FIONREAD(r1, 0xc02069b6, &(0x7f00000001c0)) (async) fcntl$lock(r0, 0x9, &(0x7f0000000080)={0x3, 0xe, 0x200, 0x1, 0x2}) (async) 297.805038ms ago: executing program 4 (id=141): select(0x0, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0x7fff) syz_emit_ethernet(0x46, &(0x7f0000000380)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4, 0x38, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x8200, 0x0, 0x1, {[@sack_perm={0x4, 0x2}, @sack={0x5, 0x2}, @timestamp={0x8, 0xa, 0x4, 0xffff}]}}}}}}}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r1, 0xc00c7006, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x800474c4, &(0x7f0000000040)) writev(0xffffffffffffffff, &(0x7f0000001500), 0x0) sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000100), 0x0, &(0x7f0000000180), 0x0) socket(0x18, 0xc003, 0x3a) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) 296.024023ms ago: executing program 5 (id=142): open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) ioctl$WSDISPLAYIO_DELFONT(0xffffffffffffff9c, 0x8058574f, &(0x7f0000000000)={'./file0\x00', 0xd90, 0x100, 0x1, 0x1, 0x3, 0x7, 0xfffffffa, 0x0, 0x1, 0x3, 0x4}) socket(0x1e, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000280)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4d) r2 = socket$inet(0x2, 0x2, 0x0) dup(r2) ktrace(&(0x7f0000000240)='./file1\x00', 0x4, 0xd27d43220c7df9f, 0x0) r3 = fcntl$dupfd(r2, 0xa, r2) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x7010, r3, 0x1) r4 = msgget$private(0x0, 0x600) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$DIOCGETSTATUS(r5, 0xc2084415, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1c}, 0x4, &(0x7f0000000080), 0x0, 0x0, 0x0) ioctl$DIOCXBEGIN(r5, 0xc0104451, &(0x7f0000000040)={0x29, 0x408, &(0x7f0000000c40)=[{0x1, './file1\x00', 0x80000001}, {0x1, './file0/file0\x00', 0x7}, {0x1, './bus\x00', 0xd}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504449, 0x0) sendmmsg(r0, &(0x7f0000000a40)={{&(0x7f0000000100)=@in6={0x1c, 0x18, 0x1, 0x7ff, "e6f7d584a6e91ab14be7cd7644456e43", 0x3}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000002c0)="f6ab8603fb6b7720022b041e3b47f7b9308c6ba864e1437cbb95322f47a8b2c87d523b2ec105baa24b308a960b245497872a49fcaa22ace46e7dedf0d41bd862743c41815174c682e7563598a28b1cfed13b166774870f923dbc0638390a31e10c7a08c15b0b75c520c6a99261c44a30bffec2f9a91fccfc73b74aecd604a46e4cdc2709f334d605964192520e3b50b00d252231e1870d09b2013345e6affe8520f3dd9c206f4b308333334993494ba96915eaab22136379d941bddd7c465488306838baa601033ee12f0a3cc98ec35f754b136ee273c8fa1fa1c3d74b9a7b74dc89e8abd4a4381ab5db053222578f41cb", 0xf1}, {&(0x7f00000004c0)="af81476fb4ff4735c383d79a73c8820a46999e14a56268508d27aefb319c070d446ad4d444f4074f4db4ca671987f7fb06e4a188ef86fa6805a6e3b8d136a9c8c0dddb027f1e1d23a2308638e0553d34aeff0c9e1dcdcbab8c5901330e210f26560c94e13520dd4b5cf50baf91dcc0acd9b81a1e301745c93d5edab05663c658a614c79439de381539e67488862d462d35ff9c01b81dc4afa42ffb049fe0ce8d9657dbe87faf8923b9ca3709f3e3be755d0190b49aded2214872788bce9194b7642374b2c8", 0xc5}, {&(0x7f00000005c0)="343f9ae553cdbc452b5d8ec3e191b18f4bfdae17585a951c8929c02567614e", 0x1f}, {&(0x7f0000000600)="fcbb584619b5", 0x6}, {&(0x7f0000000640)="791f360756aba842dc255f16f00a03739cc0d82edba33aeb515d83a2364aa07d46bcfb4b584583945c6e3e061e3e0301b2fd2bf2289b06ee8bf7eda890edc6255e8c67fc61e8fdccb5ef293424078f8d7a3db6c4dba17d9f7f455d303cdc76c4d3d803c4073e537b6e05579a83a2f2dc3725d717100e4f4bf8de94250b91cd2d960c3a3e189353af3b3cfc84248d1d34d5b462468c72f02657039292885e61b612c5c37544398d7efcb2d029f14fe2e40a7ea50d99ca7d917040e1611f015cdac23eb4482cafd5c809440a4a32fc6c93cd71a0", 0xd3}, {&(0x7f0000000740)="f0c2d9e99578714054e37f705ae316c66565f759027a2c7e8793ef6cfbf3806488515f2e5667f9b35d7c11b60ae17a78fb3c9d9c8c7b527bee05a92d63d002fb375f5634f6d0f321c124eee35566472ec549ae", 0x53}], 0x6, &(0x7f0000000880)=[{0xb4, 0x1, 0x7, "f8ac204142e2e10868bcb75e6663d70a5b8a04b5c144ff503f47fc6371a83fd7d409c93faa435643e8e73331bf6a0bf723dfbe23e578d21f39888a15edee368861e11c4106819a8e27a537bd4a7c94e6a16a7566a2718a14898ccd5dbac9c333f88b082ea6245cafcb4b3255a8f88ead5a52653a633631e3e71774c0c55f51f004d8f05b8102d84a5199f3ccb09f914f07b72c963d10e31b00a422ba8559e505b624eb178bc3e5"}, {0x3c, 0xffff, 0x8, "fa04896e2373b087793b5708f7872a44fc6501f9121f3fdc22b78ef40cdbc20efae02c48ad06f01d6d27b31aaaed9fef"}, {0x44, 0xffff, 0x7, "fcf564ba605bd408fca5c4125501bfd43722238d5a22d771fbe9390925c64db1641f5ac382d5e067a943304928c2b31abfaaf0bfeb"}, {0x64, 0x1, 0xee41, "c8de0d3cdc6a1b841f8c211e821ceeae2d6e7f3b6aa2741e777f0c1f725c2d3ca69fe51df304ad8cb6c2ac2648426a3c778e319ac42fd9877672899913aaf2f858ff1b96a8e4da218b6cc8d2d4ed56bfe937c9290d3b"}], 0x198}}, 0x38, 0x400) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x180, 0x619, 0x4}, 0x0, 0x0, 0x762, 0xe6f, 0x5, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0xebc}) 213.724915ms ago: executing program 1 (id=143): r0 = socket$inet(0x18, 0x3, 0x102) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0x7, "0000000000a56a00", 0xff}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000180)="6388020004003c9a8751f6f2efa24a85abdd612dd68e59ad4ecf9323100084410a8591426ee0", 0x26}, {&(0x7f0000000000)="89b911", 0x3}, {&(0x7f00000002c0)="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", 0x3f8}], 0x3, 0x0}, 0x2) 213.183784ms ago: executing program 0 (id=144): ktrace(0x0, 0x5, 0x280c, 0xffffffffffffffff) 140.739043ms ago: executing program 6 (id=145): ktrace(0x0, 0x5, 0x280c, 0xffffffffffffffff) (fail_nth: 1) 140.445927ms ago: executing program 6 (id=146): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x5, 0x3, 0xfffffffe, 0x0, "ff0600000002586c000000d200000000000c00", 0x45, 0x40080001}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, 0x0, 0x0) r1 = socket$inet6(0x18, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x18, 0x0, 0x1200017, "00000000000c000600", 0x7}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x9, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000000), 0x98, &(0x7f0000000380), 0xfffa4961, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x7e, 0x0) ioctl$TIOCSETA(r3, 0xcd60441a, &(0x7f0000000080)={0x1, 0x2, 0x7, 0x2f, "2000030100010000000000000068a95a010400", 0x6}) setresuid(0x0, 0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1000, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) ioctl$BIOCLOCK(r5, 0x20004276) ioctl$BIOCGRSIG(r5, 0x40044273, 0x0) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 137.750955ms ago: executing program 7 (id=147): openat$pf(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) r0 = open$dir(&(0x7f0000000200)='./bus\x00', 0x2, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x1d, 0x1, 0x0, 0x7}, {0xa8e8, 0x4, 0x9, 0x2}, {0x7, 0x99, 0x9, 0xffffffff}, {0x4, 0x2, 0x9}]}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)="8d6bb85551ec8430", 0x8}], 0x1) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000000000)={&(0x7f0000000140)=[{0x4, 0x3}, {0x6, 0x81}], 0x2}) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000000300)={&(0x7f00000002c0)=[{0x8e, 0x7ff}], 0x1}) r3 = socket$inet(0x2, 0x8003, 0xfc) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000)) ioctl$FIOASYNC(r0, 0xc2c04223, &(0x7f00000001c0)) r4 = accept(r3, &(0x7f0000000080)=@in, &(0x7f0000000100)=0x10) ioctl$FIONREAD(r4, 0x4004667f, &(0x7f0000000180)) r5 = socket(0x18, 0x3, 0x80) sendto(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffc0}, 0x1c) getsockname$unix(0xffffffffffffff9c, &(0x7f0000000000)=@file={0x0, 0x0, ""/23}, &(0x7f0000000040)=0x19) 110.890508ms ago: executing program 1 (id=148): r0 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r3, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000780)={{0x0, r3, r2, r3, 0x8f, 0x9}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r4, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x80, &(0x7f0000000580)=ANY=[@ANYBLOB="8d46e4c45991ffffffffffff86dd605f6a40004a00a902000000000000000000020000000000fe6f00000000000000000000000000aa0600000900000000a9baf889a8c524ab504d8229d4d0"]) ktrace(0x0, 0x5, 0x40001008, r3) 110.67351ms ago: executing program 2 (id=81): syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @random="0000c9db73f0", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x1c, 0x64, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast1}, @icmp=@info_reply={0x10, 0x0, 0x0, 0x5, 0x1}}}}}) socket(0x2, 0x1, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) sched_yield() sendsyslog(&(0x7f0000004240)="3c2b3c7be6070663ff8229e129123179b62a94f3c332c35752de1059888dae162754155e454003486092af84a9de93c2210a0dec44ca061286a2700820c04d963bcee0a5c09c8e6be14df61c21fccd2e7a83435f77c261030c554f27173644ab80faa1346f2e377f071cf1b5604b5fc09601ca2bd9aa9e77b9bfb8", 0x100000, 0x26) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @random="0000c9db73f0", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x1c, 0x64, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast1}, @icmp=@info_reply={0x10, 0x0, 0x0, 0x5, 0x1}}}}}) (async) socket(0x2, 0x1, 0x0) (async) select(0x0, 0x0, 0x0, 0x0, 0x0) (async) sched_yield() (async) sendsyslog(&(0x7f0000004240)="3c2b3c7be6070663ff8229e129123179b62a94f3c332c35752de1059888dae162754155e454003486092af84a9de93c2210a0dec44ca061286a2700820c04d963bcee0a5c09c8e6be14df61c21fccd2e7a83435f77c261030c554f27173644ab80faa1346f2e377f071cf1b5604b5fc09601ca2bd9aa9e77b9bfb8", 0x100000, 0x26) (async) 110.446339ms ago: executing program 0 (id=149): r0 = openat$pf(0xffffffffffffff9c, 0x0, 0x10, 0x0) ioctl$DIOCRDELTABLES(r0, 0xc450443e, &(0x7f0000000a80)={{'./bus/file0/file0\x00', './bus/file0/file0\x00', 0x5}, &(0x7f0000000640)=[{'./bus/file0/file0\x00', './bus/file0/file0\x00', 0x20, 0xd}], 0x1, 0x1, 0x8, 0x13, 0x46ab, 0x397, 0x4, 0xff}) 109.535165ms ago: executing program 6 (id=150): readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)=""/49, 0x26}], 0x1000000000000274) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000180)={0x0, 0x152, 0xdeadbeef}) 1.11208ms ago: executing program 7 (id=151): poll(0x0, 0x0, 0x2a70591d) r0 = socket(0x1, 0x2, 0x1) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_emit_ethernet(0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaa5b5b4311017b591ad3adad13c09623202400000af1628699118ab44dbeb2faf6202e0571887b328605303c29e953cdc991571f397a7f9396a6d076c0cfc2aa99822a107a73c573598b1e4fa6fec14f19cd0c58791b6ec00dd344318e7561386b00"/110]) closefrom(r1) r2 = syz_open_pts() ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3}, {}, {0x2}, {}, {}, {}, {0x0, 0xaa59}, {}, {0x1, 0xffffffff}, {}, {0x2, 0x4}, {}, {}, {}, {0x0, 0x7}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x1}, {0x0, 0x2}, {0x0, 0x7ff}, {0xbb08c0840fa32129}, {}, {0x2}, {}, {}, {0x2, 0x1}, {}, {0x0, 0x200}, {0x2, 0xffffffff}, {0x0, 0xfffffffd}, {0x3, 0x8}, {0x3}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000240)="71f91e3471ac0058bc5a91501d94a34be3867e0e6c400cacfec37082ee4c57416bf7c912b246b4ede2570608015d567ec33a28501e952be75c986dec10b04f2d194775ae42cb00d6faa40b87f3508e18d8baed6b6cc42ad2785841ec4f19f24b69470737242d9dbd9b40e032006aca96f5257b4f5172bb5d65506efc9f6c847a99d889f7622cb8d3ace9f79684a57d6e0ad299b6f78d20656d501aea719075cf35f0e069f964b08faee0adbc1e9ce86adb2035014fff04e2c0a925f7159f8c12fe5324191901759d9e613c3b9d", &(0x7f0000000180)=0x6, 0x0, 0x2e) preadv(r2, &(0x7f0000001700)=[{0x0}], 0x1, 0xd) ioctl$VMM_IOC_CREATE(r1, 0xca605601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000bfe000/0x400000)=nil, &(0x7f0000eec000/0x4000)=nil, 0x7ff, 0x2}, {&(0x7f0000c2f000/0x1000)=nil, &(0x7f0000cdf000/0x3000)=nil, 0x3ff, 0x1}, {&(0x7f0000cc5000/0x2000)=nil, &(0x7f0000f87000/0x1000)=nil, 0x400000009, 0x1}, {&(0x7f0000c7d000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x71d}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000efc000/0x4000)=nil, 0x2, 0x2}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000c3a000/0x2000)=nil, 0x6a3}, {&(0x7f0000de8000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4e, 0x2}, {&(0x7f0000feb000/0x2000)=nil, &(0x7f0000cb3000/0x1000)=nil, 0x4}, {&(0x7f0000d3e000/0x5000)=nil, &(0x7f0000edd000/0x2000)=nil, 0xa, 0x1}, {&(0x7f0000f40000/0x4000)=nil, &(0x7f0000dcb000/0x1000)=nil, 0x2a, 0x1}, {&(0x7f0000f14000/0x5000)=nil, &(0x7f0000e58000/0x2000)=nil, 0x3, 0x1}, {&(0x7f0000f9f000/0x2000)=nil, &(0x7f0000e5b000/0x14000)=nil, 0x8, 0x1}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x100000001, 0x3}, {&(0x7f0000d59000/0x4000)=nil, &(0x7f0000ee6000/0x1000)=nil, 0x7fffffffffffffff}, {&(0x7f0000ee5000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x6, 0x1}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000e6c000/0x2000)=nil, 0x1, 0x2}], './file0\x00', 0xfffffffd, 0x3}) 901.005µs ago: executing program 0 (id=152): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000000080)={0x1}) 690.987µs ago: executing program 1 (id=153): syz_emit_ethernet(0x4a, &(0x7f0000000980)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '_j@', 0x14, 0x2c, 0xa9, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x0, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x6, 0x0, 0x4}}}}}}}) 456.954µs ago: executing program 3 (id=154): r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000000029, 0xa, &(0x7f0000000000)="00000001", 0x4) dup(r0) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x2, &(0x7f00000011c0)="71ff060000009ee9fac4ab2dfb", &(0x7f0000000080)=0xd, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x2, &(0x7f00000000c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x1c, 0x0, 0x0) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x22}, 0x4, 0x0, 0x0, &(0x7f0000000100), 0x0) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105727, &(0x7f0000000300)={&(0x7f00000000c0)}) 0s ago: executing program 6 (id=155): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000001000), 0x10000, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x2010, r1, 0x0) ioctl$DIOCRCLRTSTATS(r0, 0xc4504441, &(0x7f0000002100)={{'./file1\x00', './file1/file0\x00', 0x29, 0x2}, &(0x7f0000001200)=[{'./file0\x00', './file1/file0\x00', 0x0, 0x2}], 0x428, 0x1, 0x1, 0x4, 0x9, 0x8, 0x12, 0x8}) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000240)={0x0, 0x2, 0x1, 0xb45, 0x9, 0x4, 0x5, 0x10, [{0x800, 0x6, 0x1, 0x1}, {0x4, 0x5d, 0x800, 0x80000000}, {0x7, 0x1, 0x9, 0xbfc}, {0x80000000, 0x9885, 0x4, 0x4}, {0x200, 0x6, 0x80}, {0x2, 0x9, 0xffffffff, 0x1000}, {0x401, 0x9, 0x8, 0x658c}, {0x6, 0x26, 0x8, 0x2}, {0x0, 0xfffffffa, 0x5, 0x6}, {0xa, 0x0, 0x5, 0x5}, {0x5, 0xf65, 0x2, 0x8}, {0x5, 0x4, 0x400, 0x20c9}, {0xf, 0x6}, {0x7, 0xee24, 0x8, 0x7}, {0x8, 0x8272, 0x7f, 0xa7}, {0xef, 0xd7c, 0xffffffff, 0x10}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) write(r2, &(0x7f00000000c0)="f81aec0140060000000000000080000000e90ec9bf68d24d14eeaed5b376733aeae1673b054fbfa67cdc24f97685efffffff9053e0b2", 0xffee) r3 = kqueue() open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7ffbf, 0x0) kevent(r3, 0x0, 0x3, 0x0, 0x7, &(0x7f0000000580)={0xfffffffffffffbff, 0xb}) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) openat$pf(0xffffffffffffff9c, &(0x7f0000001000), 0x10000, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) (async) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x2010, r1, 0x0) (async) ioctl$DIOCRCLRTSTATS(r0, 0xc4504441, &(0x7f0000002100)={{'./file1\x00', './file1/file0\x00', 0x29, 0x2}, &(0x7f0000001200)=[{'./file0\x00', './file1/file0\x00', 0x0, 0x2}], 0x428, 0x1, 0x1, 0x4, 0x9, 0x8, 0x12, 0x8}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000240)={0x0, 0x2, 0x1, 0xb45, 0x9, 0x4, 0x5, 0x10, [{0x800, 0x6, 0x1, 0x1}, {0x4, 0x5d, 0x800, 0x80000000}, {0x7, 0x1, 0x9, 0xbfc}, {0x80000000, 0x9885, 0x4, 0x4}, {0x200, 0x6, 0x80}, {0x2, 0x9, 0xffffffff, 0x1000}, {0x401, 0x9, 0x8, 0x658c}, {0x6, 0x26, 0x8, 0x2}, {0x0, 0xfffffffa, 0x5, 0x6}, {0xa, 0x0, 0x5, 0x5}, {0x5, 0xf65, 0x2, 0x8}, {0x5, 0x4, 0x400, 0x20c9}, {0xf, 0x6}, {0x7, 0xee24, 0x8, 0x7}, {0x8, 0x8272, 0x7f, 0xa7}, {0xef, 0xd7c, 0xffffffff, 0x10}]}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async) write(r2, &(0x7f00000000c0)="f81aec0140060000000000000080000000e90ec9bf68d24d14eeaed5b376733aeae1673b054fbfa67cdc24f97685efffffff9053e0b2", 0xffee) (async) kqueue() (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7ffbf, 0x0) (async) kevent(r3, 0x0, 0x3, 0x0, 0x7, &(0x7f0000000580)={0xfffffffffffffbff, 0xb}) (async) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts. OpenBSD/amd64 (ci-openbsd-multicore-6.us-central1-c.c.syzkaller.internal) (tty00) login: witness: lock order reversal: 1st 0xffffffff8391fb98 pf_lock (pf_lock) 2nd 0xffffffff839a3e30 netlock (netlock) lock order [1] pf_lock (pf_lock) -> [2] netlock (netlock) #0 rw_do_enter_write+0xba #1 uvn_io+0x54c #2 uvn_get+0x31d #3 uvm_fault_lower_io+0x2ce #4 uvm_fault_lower+0x28d #5 uvm_fault+0x274 #6 kpageflttrap+0x2f4 #7 kerntrap+0x19d #8 alltraps_kern_meltdown+0x7b #9 _copyin+0x5b #10 pfioctl+0x1377 #11 VOP_IOCTL+0xac #12 vn_ioctl+0xf8 #13 sys_ioctl+0x674 #14 syscall+0xbd4 #15 Xsyscall+0x128 lock order [2] netlock (netlock) -> [1] pf_lock (pf_lock) #0 rw_do_enter_write+0xba #1 pfi_attach_ifgroup+0x2a #2 if_addgroup+0x2f8 #3 if_attachsetup+0xcf #4 if_attach+0x6d #5 vio_attach+0x1853 #6 config_attach+0x449 #7 virtio_pci_attach+0x52c #8 config_attach+0x449 #9 pci_probe_device+0x8e5 #10 pci_enumerate_bus+0x368 #11 config_attach+0x449 #12 acpipci_attach_bus+0x381 #13 acpipci_attach_busses+0x93 #14 mainbus_attach+0x304 #15 config_attach+0x449 #16 cpu_configure+0x47 #17 main+0x4c7 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> show kasan No such command ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(ffffffff839a3e30,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(ffffffff839a3e18,0) at rw_do_enter_write+0xba uvn_io(fffffc806cc12920,ffff80002a2def98,1,202,0) at uvn_io+0x54c uvn_get(fffffc806cc12920,0,ffff80002a2df068,ffff80002a2df04c,0,1,f384649feb484d91,1) at uvn_get+0x31d uvm_fault_lower_io(ffff80002a2df280,ffff80002a2df2b8,ffff80002a2df100,ffff80002a2df0e8) at uvm_fault_lower_io+0x2ce uvm_fault_lower(ffff80002a2df280,ffff80002a2df2b8,ffff80002a2df200) at uvm_fault_lower+0x28d uvm_fault(fffffc806cef09a0,200000001000,0,1) at uvm_fault+0x274 kpageflttrap(ffff80002a2df430,200000001200) at kpageflttrap+0x2f4 kerntrap(ffff80002a2df430) at kerntrap+0x19d alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b _copyin() at _copyin+0x5b pfioctl(24900,c4504441,ffff80000161f800,1,ffff80003c3e6a90) at pfioctl+0x1377 VOP_IOCTL(fffffc80715d9968,c4504441,ffff80000161f800,1,fffffc80097fd6e8,ffff80003c3e6a90) at VOP_IOCTL+0xac vn_ioctl(fffffc806d696e88,c4504441,ffff80000161f800,ffff80003c3e6a90) at vn_ioctl+0xf8 sys_ioctl(ffff80003c3e6a90,ffff80002a2dffe0,ffff80002a2dff30) at sys_ioctl+0x674 syscall(ffff80002a2dffe0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x9bffc45b200, count: -18 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80002a2ded50 rbx 0 rdx 0 rcx 0xffff80003c3e6a90 rax 0xffff80002999dff0 r8 0xffff80002a2dec30 r9 0x8080808080808080 r10 0xe5744d72c0c4c533 r11 0x90fe83e56fb32d4e r12 0xfffffc80040d52c0 r13 0xfffffc80048c32d8 r14 0x3 r15 0xffffffff8353edec substchar+0x73ba rip 0xffffffff82ff4105 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a2ded40 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=451005 pid=34174 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c3e7258,0xffffffff83b583e0 process=0xffff800045fddd38 user=0xffff80002a2db000, vmspace=0xfffffc806cef09a0 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 34174 454738 86978 0 2 0 0 syz-executor *34174 451005 86978 0 7 0 0x4000000 syz-executor 30764 15535 44320 0 2 0 0 syz-executor 30764 521240 44320 0 2 0 0x4000000 syz-executor 76359 191852 33430 0 3 0 0x80 nanoslp syz-executor 76359 438610 33430 0 3 0 0x4000080 kqpoll syz-executor 76359 202565 33430 0 3 0 0x4000080 fsleep syz-executor 66734 307283 77822 0 3 0 0x80 nanoslp syz-executor 66734 220132 77822 0 3 0 0x4000080 netcon syz-executor 66734 39881 77822 0 3 0 0x4000080 fsleep syz-executor 66734 200299 77822 0 3 0 0x4000080 fsleep syz-executor 52600 137303 98157 0 3 0 0x80 nanoslp syz-executor 52600 71953 98157 0 3 0 0x4000080 kqsel syz-executor 52600 275322 98157 0 3 0 0x4000080 fsleep syz-executor 81459 293115 0 0 3 0x14000 0x280 nfsidl nfsio 57664 187556 0 0 3 0x14000 0x280 nfsidl nfsio 87135 129213 0 0 3 0x14000 0x280 nfsidl nfsio 32625 424568 0 0 3 0x14000 0x280 nfsidl nfsio 12672 389559 0 0 3 0x14000 0x280 nfsidl nfsio 96494 170730 0 0 3 0x14000 0x280 nfsidl nfsio 31285 314711 0 0 3 0x14000 0x280 nfsidl nfsio 53800 316334 0 0 3 0x14000 0x280 nfsidl nfsio 86627 426540 0 0 3 0x14000 0x280 nfsidl nfsio 59650 418386 0 0 3 0x14000 0x280 nfsidl nfsio 10017 213942 0 0 3 0x14000 0x280 nfsidl nfsio 94008 189254 0 0 3 0x14000 0x280 nfsidl nfsio 29420 55921 0 0 3 0x14000 0x280 nfsidl nfsio 25748 332278 0 0 3 0x14000 0x280 nfsidl nfsio 55404 244227 0 0 3 0x14000 0x280 nfsidl nfsio 35574 492490 0 0 3 0x14000 0x280 nfsidl nfsio 40602 482449 0 0 3 0x14000 0x280 nfsidl nfsio 50923 480765 0 0 3 0x14000 0x280 nfsidl nfsio 47870 139148 0 0 3 0x14000 0x280 nfsidl nfsio 38850 135751 0 0 3 0x14000 0x280 nfsidl nfsio 81144 213939 1 0 3 0x100003 0x80 ttyin getty 33430 324282 28842 0 3 0x2 0x80 nanoslp syz-executor 86978 3003 28842 0 3 0x2 0x80 nanoslp syz-executor 77822 75742 28842 0 3 0x2 0x80 nanoslp syz-executor 98157 172481 28842 0 3 0x2 0x80 nanoslp syz-executor 44320 358865 28842 0 3 0x2 0x80 nanoslp syz-executor 65914 387598 28842 0 3 0x2 0x80 piperd syz-executor 23658 470440 28842 0 7 0x2 0 syz-executor 28842 388980 19412 0 3 0x2 0x80 wait syz-executor 19412 283773 61723 0 3 0x100002 0x88 sigsusp ksh 61723 296818 19644 0 3 0x10 0x88 kqread sshd-session 19644 318616 34307 0 3 0x12 0x80 kqread sshd-session 34307 441317 1 0 3 0 0x88 kqread sshd 98131 11754 22866 74 3 0x1100012 0x80 bpf pflogd 22866 512813 1 0 3 0 0x80 sbwait pflogd 26305 35892 65042 73 3 0x1100010 0x80 kqread syslogd 65042 70625 1 0 3 0x100002 0x80 sbwait syslogd 4314 119715 1 0 3 0x100000 0x80 kqread resolvd 9987 199052 17404 77 3 0x100012 0x80 kqread dhcpleased 19199 438252 17404 77 3 0x100012 0x80 kqread dhcpleased 17404 362246 1 0 3 0 0x80 kqread dhcpleased 19613 510406 0 0 3 0x14000 0x200 bored smr 52494 253234 0 0 2 0x14000 0x200 zerothread 14969 167044 0 0 3 0x14000 0x200 aiodoned aiodoned 65519 458966 0 0 3 0x14000 0x200 syncer update 44435 353843 0 0 3 0x14000 0x200 cleaner cleaner 98973 419727 0 0 3 0x14000 0x200 reaper reaper 15738 293012 0 0 3 0x14000 0x200 pgdaemon pagedaemon 60227 291084 0 0 3 0x14000 0x200 bored viomb 36024 175710 0 0 3 0x14000 0x40000200 acpi0 acpi0 34757 463478 0 0 3 0x14000 0x40000200 idle1 59687 265675 0 0 3 0x14000 0x200 bored softnet1 10200 509819 0 0 2 0x14000 0x200 softnet0 93121 290943 0 0 3 0x14000 0x200 bored systqmp 59277 217135 0 0 3 0x14000 0x200 bored systq 47728 456558 0 0 3 0x14000 0x200 tmoslp softclockmp 18341 136182 0 0 3 0x14000 0x40000200 tmoslp softclock 65021 111982 0 0 3 0x14000 0x40000200 idle0 1 132615 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 34174 (syz-executor) thread 0xffff80003c3e6a90 (451005) exclusive rwlock pf_lock r = 0 (0xffffffff8391fb98) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 pfioctl+0x1342 #3 VOP_IOCTL+0xac #4 vn_ioctl+0xf8 #5 sys_ioctl+0x674 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive rwlock pfioctl_rw r = 0 (0xffffffff8391fc28) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 pfioctl+0x1d4 #3 VOP_IOCTL+0xac #4 vn_ioctl+0xf8 #5 sys_ioctl+0x674 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83aa0c00) #0 witness_lock+0x5f1 #1 vn_ioctl+0x4d #2 sys_ioctl+0x674 #3 syscall+0xbd4 #4 Xsyscall+0x128 Process 23658 (syz-executor) thread 0xffff800045ffdc90 (470440) exclusive rrwlock inode r = 0 (0xfffffc807f08a8e0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffc806e1a60b0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x12b #6 namei+0x7c1 #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11059 12149K 12157K 166960K 12206 0 pcb 18 12K 12K 166960K 39 0 rtable 247 7K 10K 166960K 446 0 pf 37 18K 25K 166960K 108 0 ifaddr 43 7K 7K 166960K 57 0 ifgroup 55 2K 2K 166960K 70 0 sysctl 3 1K 9K 166960K 8 0 counters 70 37K 37K 166960K 80 0 ioctlops 1 2K 4K 166960K 1523 0 iov 0 0K 12K 166960K 3 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1297 82K 82K 166960K 1466 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 27 2K 3K 166960K 32 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 15 53K 97K 166960K 317 0 proc 72 115K 180K 166960K 631 0 subproc 72 4K 4K 166960K 90 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 3 0 in_multi 99 6K 6K 166960K 122 0 ether_multi 1 0K 0K 166960K 1 0 mrt 1 0K 0K 166960K 9 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 61 281K 281K 166960K 61 0 exec 0 0K 1K 166960K 410 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 224 167K 177K 166960K 4578 0 UVM aobj 5 4K 4K 166960K 6 0 pinsyscall 40 80K 106K 166960K 1529 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 14 0K 2K 166960K 36 0 temp 42 9115K 9135K 166960K 8747 0 kqueue 13 20K 24K 166960K 40 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 39 0 36 1 0 1 1 0 8 0 rtentry 176 135 0 24 6 0 6 6 0 8 0 unpcb 144 74 0 57 1 0 1 1 0 8 0 syncache 336 11 0 10 1 0 1 1 0 8 0 tcpcb 736 42 0 35 1 0 1 1 0 8 0 arp 136 22 0 4 1 0 1 1 0 8 0 inpcb 328 203 0 191 2 0 2 2 0 8 0 nd6 152 32 0 7 2 0 2 2 0 8 1 pkpcb 40 15 0 14 1 0 1 1 0 8 0 kcovpl 48 10 0 2 1 0 1 1 0 8 0 ppxss 1192 2 0 2 1 0 1 1 0 8 1 pfstscr 40 3 0 0 1 0 1 1 0 8 0 pffrag 232 1 0 1 1 0 1 1 0 482 1 pffrnode 88 1 0 1 1 0 1 1 0 8 1 pffrent 40 9 0 9 1 0 1 1 0 8 1 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 7 0 7 1 0 1 1 0 8 1 pfanchor 1288 6 0 1 1 0 1 1 0 8 0 pftag 88 2 0 2 1 0 1 1 0 8 1 pfstitem 24 52 0 0 1 0 1 1 0 8 0 pfstkey 128 52 0 0 2 0 2 2 0 8 0 pfstate 448 50 0 0 6 0 6 6 0 8 0 pfrule 1360 28 0 22 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 553 0 95 29 0 29 29 0 8 0 art_table 40 554 0 95 5 0 5 5 0 8 0 art_node 32 135 0 34 1 0 1 1 0 8 0 semupl 112 2 0 2 1 0 1 1 0 8 1 semapl 72 26 0 1 1 0 1 1 0 8 0 shmpl 120 3 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1789 0 315 93 0 93 93 0 8 0 ffsino 296 1789 0 315 114 0 114 114 0 8 0 nchpl 144 2202 0 494 64 0 64 64 0 8 0 vnodes 216 1953 0 0 109 0 109 109 0 8 0 namei 1024 7590 0 7589 4 1 3 3 0 8 2 percpumem 16 56 0 5 1 0 1 1 0 8 0 pfiaddrpl 120 2 0 2 1 0 1 1 0 8 1 kstatmem 264 35 0 8 2 0 2 2 0 8 0 scsiplug 72 2 0 2 1 0 1 1 0 8 1 scxspl 216 7929 0 7929 4 3 1 3 1 8 1 plimitpl 152 35 0 18 1 0 1 1 0 8 0 sigapl 424 651 0 586 8 0 8 8 0 8 0 knotepl 120 268 0 0 9 0 9 9 0 8 0 kqueuepl 224 61 0 49 1 0 1 1 0 8 0 pipepl 344 141 0 113 3 0 3 3 0 8 0 fdescpl 528 615 0 586 3 0 3 3 0 8 0 filepl 160 2325 0 2100 11 0 11 11 0 8 1 lockfpl 104 66 0 63 1 0 1 1 0 8 0 lockfspl 48 28 0 25 1 0 1 1 0 8 0 sessionpl 144 31 0 22 1 0 1 1 0 8 0 pgrppl 48 41 0 24 1 0 1 1 0 8 0 ucredpl 104 257 0 244 1 0 1 1 0 8 0 zombiepl 144 587 0 586 1 0 1 1 0 8 0 processpl 1240 651 0 586 6 0 6 6 0 8 0 procpl 664 863 0 789 8 0 8 8 0 8 1 sockpl 752 333 0 300 5 0 5 5 0 8 0 mcl64k 65536 14 0 0 2 0 2 2 0 8 0 mcl16k 16384 11 0 0 2 0 2 2 0 8 0 mcl12k 12288 4 0 0 1 0 1 1 0 8 0 mcl9k128 9344 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 128 0 0 16 0 16 16 0 8 0 mcl2k2 2112 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 17 0 0 3 0 3 3 0 8 0 mextrefs 64 23 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 196 0 0 13 0 13 13 0 8 0 bufpl 272 2970 0 107 191 0 191 191 0 8 0 anonpl 32 5497 0 0 45 0 45 45 0 247 0 amapchunkpl 152 13451 0 13005 30 0 30 30 0 158 9 amappl16 200 2157 0 2137 5 2 3 5 0 8 0 amappl15 192 9 0 9 2 2 0 1 0 8 0 amappl14 184 455 0 454 1 0 1 1 0 8 0 amappl13 176 132 0 120 1 0 1 1 0 8 0 amappl12 168 872 0 843 2 0 2 2 0 8 0 amappl11 160 6 0 6 1 1 0 1 0 8 0 amappl10 152 77 0 63 1 0 1 1 0 8 0 amappl9 144 290 0 290 1 1 0 1 0 8 0 amappl8 136 110 0 108 1 0 1 1 0 8 0 amappl7 128 164 0 151 1 0 1 1 0 8 0 amappl6 120 174 0 173 1 0 1 1 0 8 0 amappl5 112 95 0 85 1 0 1 1 0 8 0 amappl4 104 294 0 276 1 0 1 1 0 8 0 amappl3 96 2344 0 2257 3 0 3 3 0 8 0 amappl2 88 735 0 662 2 0 2 2 0 8 0 amappl1 80 11361 0 10760 15 0 15 15 0 8 1 amappl 88 3804 0 3655 5 0 5 5 0 92 0 uvmvnodes 80 105 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 255 0 255 2 1 1 1 0 8 1 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 5 0 1 1 0 1 1 0 8 0 uaddrrnd 24 615 0 586 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 615 0 586 1 0 1 1 0 8 0 vmmpekpl 168 6862 0 6814 3 0 3 3 0 8 0 vmmpepl 168 48211 0 46407 88 0 88 88 0 357 2 vmsppl 488 614 0 586 5 0 5 5 0 8 0 rwobjpl 80 16856 0 15842 24 0 24 24 0 8 0 pdppl 4096 1237 0 1172 101 28 73 87 0 8 8 pvpl 32 12935 0 0 105 0 105 105 0 265 0 pmappl 256 614 0 586 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 475 0 32 13 0 13 13 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff8395bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83aa0400) at __mp_lock+0x199 intr_handler(ffff80002a2b0480,ffff80000006e200) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __mp_lock(ffffffff83aa0400) at __mp_lock+0x19e __mp_acquire_count(ffffffff83aa0400,1) at __mp_acquire_count+0x58 sleep_finish(ffffffffffffffff,1) at sleep_finish+0x2d8 biowait(fffffc8071512bb8) at biowait+0xc6 bwrite(fffffc8071512bb8) at bwrite+0x359 VOP_BWRITE(fffffc8071512bb8) at VOP_BWRITE+0x60 ufs_mkdir(ffff80002a2b08b0) at ufs_mkdir+0x547 VOP_MKDIR(fffffc806e450c08,ffff80002a2b0a10,ffff80002a2b0a40,ffff80002a2b0940) at VOP_MKDIR+0x101 domkdirat(ffff800045ffdc90,ffffff9c,7e603c056d10,1ff) at domkdirat+0x179 syscall(ffff80002a2b0bc0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7e603c056db0, count: -17 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(ffffffff839a3e30,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(ffffffff839a3e18,0) at rw_do_enter_write+0xba uvn_io(fffffc806cc12920,ffff80002a2def98,1,202,0) at uvn_io+0x54c uvn_get(fffffc806cc12920,0,ffff80002a2df068,ffff80002a2df04c,0,1,f384649feb484d91,1) at uvn_get+0x31d uvm_fault_lower_io(ffff80002a2df280,ffff80002a2df2b8,ffff80002a2df100,ffff80002a2df0e8) at uvm_fault_lower_io+0x2ce uvm_fault_lower(ffff80002a2df280,ffff80002a2df2b8,ffff80002a2df200) at uvm_fault_lower+0x28d uvm_fault(fffffc806cef09a0,200000001000,0,1) at uvm_fault+0x274 kpageflttrap(ffff80002a2df430,200000001200) at kpageflttrap+0x2f4 kerntrap(ffff80002a2df430) at kerntrap+0x19d alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b _copyin() at _copyin+0x5b pfioctl(24900,c4504441,ffff80000161f800,1,ffff80003c3e6a90) at pfioctl+0x1377 VOP_IOCTL(fffffc80715d9968,c4504441,ffff80000161f800,1,fffffc80097fd6e8,ffff80003c3e6a90) at VOP_IOCTL+0xac vn_ioctl(fffffc806d696e88,c4504441,ffff80000161f800,ffff80003c3e6a90) at vn_ioctl+0xf8 sys_ioctl(ffff80003c3e6a90,ffff80002a2dffe0,ffff80002a2dff30) at sys_ioctl+0x674 syscall(ffff80002a2dffe0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x9bffc45b200, count: -18