last executing test programs: 4.39808759s ago: executing program 2 (id=478): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000200)={0x20000005, 0x0, 0x93, 0x70fa4c30, "48a35558fbe47ceb0a13c3471c033816549dbb66", 0x0, 0x40000000}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000000)="a4ecef", 0x3}], 0x1) 3.506526557s ago: executing program 2 (id=509): setrlimit(0x8, &(0x7f0000000140)={0x9, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000080)={0x20776a, 0x6e2, 0xcfb, 0xfffffff5, "9cdc457e4dc8dc0000006308fc5f81e6015fdd04", 0x4, 0x101}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x192}], 0x1) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000040)={0x80000000, 0xd, 0x0, 0x8001, "26434c4eab1cd3002737bdaf481d27457dad7d53", 0x36, 0xe}) 3.231879502s ago: executing program 0 (id=530): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4000000000000054}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x766a, 0x7ff, 0xcfe, 0xffffff01, "9cdc4580307e080000006b08fc5f81e6015fdd04", 0x7, 0x9}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000042c0)={&(0x7f0000004100)=@file={0x3, 0x1, './file2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6a, 0x0}, 0x400) writev(r0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfd98}], 0x1) 3.030106138s ago: executing program 5 (id=535): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) pipe(&(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) r3 = getppid() fcntl$setown(r2, 0x6, r3) r4 = fcntl$dupfd(r1, 0x0, r0) dup2(r4, r2) 2.888406733s ago: executing program 7 (id=540): syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f2ad9"]) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) r1 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x4ebfac6bbaf782c) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="a7", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCCLR(r1, 0xc0a86b03, &(0x7f0000000200)={0x0, 0x10000, 0x0}) 2.862998907s ago: executing program 3 (id=541): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x3, 0x6, 0x7, 0x7}, {0x40, 0xa, 0x6, 0xffffffff}]}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 2.862889984s ago: executing program 3 (id=542): setrlimit(0x8, &(0x7f0000000400)={0x42, 0x800000003fb}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x5) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1) writev(r0, &(0x7f0000000bc0)=[{0x0}], 0x1) 2.83578214s ago: executing program 1 (id=543): openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) sendmmsg(r1, &(0x7f0000000200)={{&(0x7f0000000140)=@in6={0x1c, 0x18, 0x3, 0x7, "ff0100", 0x3}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) 2.83515009s ago: executing program 0 (id=544): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) shmdt(0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) 2.833889354s ago: executing program 7 (id=545): setgid(0xffffffffffffffff) r0 = msgget$private(0x0, 0x116) setresgid(0x0, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000580)={{0x0, 0x0, 0x0, 0x0, 0x84, 0x51f}, 0x0, 0x0, 0xbe7f, 0x602298e2, 0x3a6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}) msgsnd(r0, &(0x7f0000000080)={0x2}, 0x8, 0x0) setuid(0xffffffffffffffff) msgrcv(r0, 0x0, 0x0, 0x3, 0x800) 2.821808698s ago: executing program 1 (id=546): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x3, 0x0, 0x10, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x18, 0x1, 0xb, "759f5a01005ada388e47a1e7a5446cfe", 0x1}, {0x1c, 0x18, 0x3, 0x4, "00000000000000000000000000000001", 0x5}, 0x0, [0x3efa, 0x9f72, 0x1, 0x9, 0x8, 0x7f, 0x800, 0x4]}, 0x5c) 2.82079414s ago: executing program 7 (id=547): r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) socket(0x18, 0x3, 0x0) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) ioctl$DIOCRDELTABLES(0xffffffffffffffff, 0xc450443e, &(0x7f0000003580)={{'./file1\x00', './file1\x00', 0x1, 0x3}, 0x0, 0x1, 0x0, 0x4c8, 0x0, 0x9, 0x8, 0x44, 0xe}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0x748076c9, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) 2.799728016s ago: executing program 3 (id=549): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x1, 0x0, {[0xfffefbfffffffffa, 0x1, 0x2, 0x1, 0xfffffffffffffffe, 0x0, 0xdf5a, 0xffffffffffffffff, 0x0, 0x2eff, 0x5, 0x3, 0xffffffffffffffff, 0x0, 0x8000000, 0xa8, 0x100000001, 0xce7], [0xfffffffffffffffe, 0x2, 0xfffffffffffffffa, 0x8000ffffffff, 0x100, 0x7b9c, 0x1fe, 0xb, 0x1, 0x8], [0x100000001, 0xfffffffffffffffe, 0x40000000, 0x6, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe], [0x100, 0x20002000000, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x8, 0x5, 0x0, 0x8}, {0xfffc, 0x7, 0x5}, {0x10, 0x2001, 0x5bea, 0x814}, {0xf801, 0x5, 0x7, 0x8000000c}, {0x10, 0x2, 0x4, 0x808}, {0x400b, 0x40, 0x40000, 0x4}, {0xa, 0x20000, 0x4, 0x8}, {0x0, 0x965, 0x0, 0x4}], {0x2000, 0xb, 0x10000}, {0x0, 0x0, 0x3, 0x2}}}) r0 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r0, 0x20007461) r1 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) dup3(r1, r0, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, 0x0, 0x15, 0x0) 2.798656735s ago: executing program 1 (id=550): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r0, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) accept4(r0, &(0x7f0000000100)=@in, &(0x7f0000000140)=0x10, 0x4000) 1.733258847s ago: executing program 6 (id=551): ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000780)={{0x0, './file0\x00', [{[@v4=@rand_addr=0x53a5, @v4=@loopback], [0x400, 0xa59], 0xfffb, 0x18}, {[@v6=@loopback, @v4=@multicast2], [0x6, 0xb], 0x3, 0x18}], {{0x1, 0x80, 0xad, 0x400}, 0x4, 0xb54, 0x3, 0x9, 0x7, 0x3, 0xed}, {{0x5, 0x6, 0xd1, 0x3}, 0x0, 0x1, 0x800, 0x96, 0x2, 0xd, 0x7f}, @v6=@remote={0xfe, 0x80, '\x00', 0x0}, 0x40, 0x9, 0x2, 0xb4, 0x0, [[0x0, 0x5], [0xfffffffd, 0x5]], [[0x3, 0x5], [0x9a, 0x8]], 0x1, [0x7ff], 0x4, 0x4, 0x0, 0x3, 0xc5, 0x4, 0x8, 0xc1, 0x4, 0x40, 0x67, 0x920, ')$'}}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$DIOCGETQUEUE(r0, 0xc148445f, &(0x7f0000000080)={0xf00, 0x96, {'\x00', './file1\x00', './file0\x00', './file0\x00', {{0x9, 0x2}, {0x7, 0x4}, 0xe2}, {{0xe8c3, 0xffb0}, {0x3, 0x8}, 0x7}, {{0x100}, {0xc7e, 0xff}, 0x80}, {0xbe, 0x0, 0x8, 0x32c3}, 0x0, 0x8000, 0x9, 0x9, 0x6}}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f00000008c0)={0x10, 0x4, [{&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x9}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x7ff}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x101}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x40}, {&(0x7f0000ff3000/0xb000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x6}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x9}, {&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x9}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x7de}, {&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff7000/0x9000)=nil, 0x8fe}, {&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff2000/0x4000)=nil, 0x6}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x69}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0xbf}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x4}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xfffffffffffffff5}], './file1\x00', 0x3, 0x5, 0x8, 0x8001, [0x9, 0x12, 0x5, 0xd, 0x2, 0xffffffff, 0x6, 0x9, 0x81, 0x2, 0x3, 0x5, 0x9, 0x1000, 0x3265, 0xeb, 0x40, 0x7fff, 0xfffffffa, 0x6, 0x3, 0x401, 0x8, 0x3c, 0x949, 0x5, 0x0, 0x3, 0x800, 0x9, 0xf, 0x3, 0x2, 0xf2, 0xfffffffe, 0x4, 0x4, 0x200, 0x1653b410, 0x0, 0x9, 0x1, 0x5, 0x4, 0x3, 0x5, 0x0, 0xffff4ce8, 0x7, 0x6, 0x1ff, 0x2, 0x1, 0x7, 0x6, 0x9, 0x9, 0x2, 0x1cc, 0x9, 0xffff, 0x3ff, 0x5, 0xffff, 0x0, 0xffff, 0xfec, 0x1, 0x3, 0x3, 0x7f, 0x4, 0x3, 0x0, 0xfffff0d2, 0x8, 0x5, 0xb, 0xe801, 0x3c3a, 0x9, 0x2, 0xff, 0x5, 0xf5, 0x8, 0x38cd, 0x5, 0x5, 0x7, 0x3ff, 0x2, 0x8, 0x3, 0x8, 0xd77a, 0x9, 0x9, 0x5, 0xfff, 0x0, 0x9, 0x8, 0x0, 0xff, 0x5, 0x7, 0x6, 0x6, 0x2, 0x0, 0xfffffffd, 0x2, 0x4, 0x8, 0x2, 0x7fff, 0x5, 0xffff9712, 0x1, 0x2, 0x1, 0x3, 0x0, 0x4, 0x5, 0x1, 0x5b3, 0x5, 0x81, 0x1, 0x2, 0xbd1, 0x0, 0xada, 0x7, 0x3, 0x8, 0x40000006, 0xac66, 0x4, 0x31, 0x637fd157, 0x3, 0x6b, 0xfffffeff, 0x8, 0x7, 0x1, 0x0, 0x400, 0x1000, 0xfff, 0x7, 0x9, 0xf, 0xfff, 0x2, 0x41d8d745, 0x37, 0x57, 0xb, 0x2, 0xffffff81, 0xc, 0x0, 0x0, 0x80000000, 0x8, 0x6, 0xff, 0x2, 0x6, 0x8ec5, 0x3003, 0xefa, 0x8, 0xff, 0x7, 0x6, 0x662, 0x1, 0xd, 0x8, 0x5, 0x6, 0x7, 0x83, 0x0, 0x7, 0x6, 0x4, 0x4, 0x101, 0x8, 0x1, 0x7, 0x0, 0x0, 0x7ff, 0xa6, 0xffff0000, 0x7, 0x5, 0xffffffff, 0x472, 0xfffffffe, 0x8, 0x5, 0x2, 0x7, 0x9, 0x8, 0x0, 0x40, 0x7, 0x9, 0xe, 0x81, 0x8, 0x4, 0x1, 0x5, 0x8, 0x5ce96353, 0x3ff, 0x8, 0x2d70, 0x4, 0x2, 0xfff, 0x7, 0x200, 0x7a, 0x3, 0x7fffffff, 0x6, 0x6, 0x8, 0x1, 0x1, 0x5, 0x3, 0xfffffff7, 0x400, 0x3, 0x9, 0x8, 0x132c, 0xff, 0x8, 0x7fffffff, 0x1, 0x6, 0x7fff, 0x4, 0x5, 0x24000000, 0x9, 0xfffffffd, 0x0, 0x2, 0x3, 0x9, 0x1e8a, 0xffffffff, 0x200, 0x8001, 0x8, 0x3, 0xfffffff7, 0x9, 0x5864e92d, 0xffffffff, 0x5, 0x8, 0x2, 0x1, 0x7fff, 0xc768, 0x5aa, 0x3248, 0x8, 0x0, 0x9, 0x8, 0x8, 0x4, 0x2, 0x4, 0x101, 0x9, 0x20, 0x0, 0xd000, 0x80000, 0x2, 0x2d, 0xffff, 0xff, 0x3, 0xfffffc01, 0xf, 0xbaf, 0x7, 0x1ff, 0x5, 0x7fff, 0x200, 0xc3, 0x3ff, 0x0, 0x4, 0x0, 0x1, 0xfffff56c, 0xe, 0x8, 0x8, 0x5, 0x2, 0x3, 0x2, 0x60, 0xe, 0x0, 0x3eb, 0x200, 0x401, 0x0, 0x4, 0xc, 0x7, 0xff3, 0x0, 0x401, 0x2, 0x40, 0x7, 0xfffffffb, 0x9, 0x7, 0x0, 0x81f, 0x4, 0x101, 0x5, 0x2, 0xffffffff, 0x10, 0x3, 0x4, 0x10001, 0x6, 0x10000, 0xbba6, 0xb, 0x5, 0x8b, 0x1, 0x3, 0xc, 0xd4, 0x6, 0xfbc, 0x2, 0x7, 0xff, 0x7, 0x1, 0x81, 0xaba, 0x8000, 0x0, 0x5, 0xfffffff9, 0xfffffffa, 0x4c, 0x2d, 0x7ff, 0x509b, 0x3, 0x1, 0x3, 0x200, 0x2065, 0x6, 0x1, 0xe, 0x8, 0x5, 0x1, 0x7, 0x80000001, 0x7, 0xd, 0xffff, 0x1, 0x600000, 0x200, 0x9351, 0x0, 0xd4e, 0x2, 0x6, 0x4, 0xffffff1b, 0x3, 0x1a2, 0x9, 0x2ab, 0x4, 0x1ff, 0x2, 0x1, 0x1, 0x7fff, 0x6, 0x5, 0xfff, 0x4, 0x81, 0x4a, 0x0, 0x7, 0x4, 0x0, 0x2752, 0x9, 0x7, 0x9, 0x6, 0x2, 0x1000100, 0x13c, 0x5, 0x9, 0x9, 0x7fffffff, 0xff, 0x100, 0x9, 0x5, 0x0, 0xffffff40, 0x4, 0x5, 0x9, 0x86, 0xfa, 0x7, 0x101, 0x1ff, 0x1, 0x4, 0xfffffffb, 0x2, 0x3, 0x4, 0x3, 0x8000, 0x5, 0x8, 0xffffff7f, 0x3, 0xfffffffc, 0x10000, 0x3, 0x2, 0x4, 0x1, 0x401, 0xa59, 0x8, 0x9, 0x1, 0x4, 0x9136, 0xfffffc01, 0x11, 0x6, 0x7ff, 0x40, 0x1000, 0x5, 0xfffffbff, 0x5, 0x9, 0x2, 0x4, 0xb7, 0x7, 0x4, 0x2, 0x401, 0x0, 0x0, 0x3, 0x80, 0x8, 0x4, 0x4c99, 0xfffffffd, 0x6c30, 0x2dc3, 0x81, 0x4, 0x5, 0xfffffff7, 0xfffffff7, 0x6, 0xfffffebd]}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f0000000040)={0x10000000, 0x2, 0x87a, 0x2f, "2800180000020002000000000068ab5ade800600", 0x6, 0x2}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000001000), 0x10000, 0x0) ioctl$DIOCRCLRTSTATS(r2, 0xc4504441, &(0x7f0000002100)={{'./file0\x00', './file0\x00', 0x20, 0xfd}, &(0x7f0000000200)=[{'./file0\x00', './file1\x00', 0x0, 0x2}, {'./file0/file0\x00', './file0\x00', 0x57, 0xe}], 0x428, 0x2, 0x9, 0x4, 0x9, 0x8, 0x12, 0x8}) 1.729663321s ago: executing program 5 (id=552): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) setitimer(0x1, &(0x7f0000000140)={{0x7fffffffffffffff, 0xa}, {0x1ff, 0x9}}, 0x0) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 1.715716706s ago: executing program 6 (id=553): r0 = socket$inet6(0x18, 0x1, 0x6) r1 = socket$inet6(0x18, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x8, "fffffff9000000000000000000000001", 0x7}, 0x1c) r2 = socket$inet6(0x18, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000140)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000010000000600", 0x7}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x7}, 0x1c) 1.714481227s ago: executing program 2 (id=554): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x3, [{&(0x7f00007ab000/0x3000)=nil, &(0x7f0000ec8000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x100000001}, {&(0x7f0000a1c000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000a6b000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x100000000}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000ccd000/0x1000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000843000/0x1000)=nil, 0x3}, {&(0x7f000046c000/0x2000)=nil, &(0x7f0000efd000/0x1000)=nil, 0xfffe}, {&(0x7f0000a98000/0x4000)=nil, &(0x7f0000a3d000/0xd000)=nil}, {&(0x7f0000d3d000/0x4000)=nil, &(0x7f0000aff000/0x1000)=nil, 0xe}, {&(0x7f0000f6a000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000795000/0x1000)=nil, &(0x7f0000ff2000/0x1000)=nil}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, 0x3c}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil, 0xfefffffffffffffc}, {&(0x7f00000c6000/0x4000)=nil, &(0x7f0000c5e000/0x4000)=nil}], './file0\x00', 0x81, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f5]}) r0 = socket(0x2, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000dc0), 0x0) ioctl$FIONREAD(r1, 0xc0206923, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) 1.710179197s ago: executing program 3 (id=555): open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7dfbf, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) close(0xffffffffffffffff) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047470, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x10, r0, 0x0) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000580)={{0x0, 0x0, 0x0, 0x0, 0x84, 0x51f}, 0x0, 0x0, 0xbe7f, 0x602298e2, 0x3a6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}) 1.709107119s ago: executing program 4 (id=556): r0 = socket$inet(0x2, 0x2, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x192) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x1ff, 0xa4, 0x9, 0x5, 0x80000001, 0xa1b0, 0x40010002, 0x10, [{0xfffffffc, 0x2890, 0x2000005, 0x71002}, {0x6, 0xe, 0x8, 0xffbffff9}, {0x2, 0x6, 0xfffffffc, 0x9}, {0x4, 0x10001, 0x200800f, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0x40, 0xffffffff, 0x4d4, 0x6}, {0x1000086, 0x8, 0x14, 0x5910}, {0x6000001, 0x82, 0x7, 0x4}, {0xfffffd2e, 0x8009, 0x9, 0x4}, {0x1d0, 0x800, 0xda9f, 0x3}, {0xc, 0xa, 0x8, 0x3}, {0x3, 0x7, 0x4, 0x9}, {0x29a71717, 0xfffffffa, 0x60, 0x7}, {0x2, 0x5, 0x5, 0x20204004}, {0x0, 0x1, 0xfff, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000a, &(0x7f0000000340), 0x0) 1.693503608s ago: executing program 2 (id=557): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000002000/0x2000)=nil) r1 = shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) shmctl$IPC_RMID(r0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) shmdt(r1) 1.655421422s ago: executing program 4 (id=558): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x40, 0x6, 0x6, 0x3, 0x8000, 0x0, 0x40000000000, 0x7, 0x400000001, 0x9, 0x91c, 0x8, 0x2000180, 0x0, 0xd3, 0x76, 0xffffffffffffbff7], [0x5438b94c, 0x5, 0x1004, 0x7, 0x1, 0x1, 0x9, 0x3, 0xffffffffffffffff, 0x3], [0x6, 0x0, 0x6, 0x8000000008, 0x10000, 0x210, 0x1000002], [0x100000000, 0x10801, 0x3, 0x9, 0x3], [{0x0, 0x7, 0xfffffbfb, 0x5}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x7f}, {0xb, 0xfffffbff, 0x2, 0xfffffffffffffffd}, {0x4, 0x3, 0x0, 0x8}, {0x1f, 0x6, 0x0, 0x7}, {0xe4, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x8001, 0x5}], {0x8, 0x3, 0x401, 0x8}, {0xfffb, 0xffffbfc0, 0x8}}}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x20000000000001df, &(0x7f0000000040)=[{0x1, 0x0, 0x7, 0x7}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r0, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) 1.655192694s ago: executing program 3 (id=559): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @random="d480d5968f29", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x20, 0x66, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@mask_reply}}}}) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 1.654209833s ago: executing program 1 (id=560): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x18, 0x1, 0xb, "759f5a01005ada388e47a1e7a5446cfe", 0x1}, {0x1c, 0x18, 0x3, 0x4, "00000000000000000000000000000001", 0x5}, 0x0, [0x3efa, 0x9f72, 0x1, 0x9, 0x8, 0x7f, 0x800, 0x4]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x69, &(0x7f00000002c0)={{0x1c, 0x18, 0x1, 0x8, "1e4e52a6da18783192cf9576f2a76e06", 0x450182dd}, {0x1c, 0x18, 0x2, 0x6, "bc57a134089565b2d907788baad8631a", 0x5}, 0x6, [0x7, 0x0, 0x5, 0x1, 0x1, 0x8, 0x95, 0xb83]}, 0x5c) 594.85199ms ago: executing program 6 (id=561): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DIOCKILLSTATES(0xffffffffffffffff, 0x0, &(0x7f0000000180)={{0x12, 0x6, 0x3}, 0x2, '\x00', 0x8, {@addrmask={@v4=@multicast1, @v6=@local={0xfe, 0x80, '\x00', 0x0}, 0x0, 0x0, 0xb}, [0x1, 0x10], 0x28, 0x5, 0xe4}, {@table={'./file0/file0/fi\x00', 0x0, 0x3, 0x3}, [0x8000, 0x1], 0xf5, 0x2, 0x6}, './file0/file0/fi', './file0/file0\x00', 0x1, 0xdffc}) ioctl$TIOCSETA(0xffffffffffffffff, 0x80d04466, &(0x7f0000000140)={0xfffeffff, 0xa525, 0x5, 0x127492, "0849a2ba6300000058302a2f0e83050095ea0868", 0x20004118, 0x9}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0xe9, 0x2, 0xa, 0x3, 0xc, 0x10, [{0x10000004, 0x7, 0x5, 0x80000002}, {0xe9, 0xe8, 0x1000002, 0x2}, {0xcd5, 0x4baa, 0x4, 0x4}, {0x7, 0x2, 0xf, 0x88ce}, {0x4, 0x200000a, 0x1, 0x1}, {0x388d, 0xffffffff, 0x85, 0x5}, {0x10000, 0xa00, 0x20003, 0xffffffff}, {0x206, 0xfffffffd, 0x5, 0xffffe2e8}, {0x7, 0x1000, 0x1, 0x7ffd}, {0x3f8, 0xfffffffd, 0x1ff, 0x12}, {0x82, 0x0, 0x8a3a0004, 0xfffffff4}, {0x10000, 0xfffffffe, 0x1, 0xa68}, {0x401, 0xc, 0xa6a8, 0xfffffff3}, {0x6, 0x2, 0x102, 0x200004}, {0x2, 0x400, 0x81, 0x7}, {0x89be2, 0x1, 0x2, 0x400}]}) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="64e1629b6174d08850c78fe609e9600d"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0x80d04466, &(0x7f0000000140)={0x9, 0xa525, 0x4, 0x127492, "08e50000000000000100", 0x20004118, 0x6}) 537.927628ms ago: executing program 5 (id=562): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x2, 0x3, 0x101, 0x4, 0x1, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0xfffffffd, 0x300b7fe, 0x800002, 0x7}, {0x100806, 0x0, 0x4, 0x2}, {0x2, 0x0, 0x200, 0xfffffffc}, {0x4, 0x3, 0x80000000, 0x7}, {0x2, 0x47fff, 0x14000009, 0xc}, {0x5, 0xbffffff5, 0x7, 0x6d}, {0x2000a, 0x8, 0xfdf0, 0x9}, {0x0, 0x7, 0x34, 0xa}, {0xfffffc04, 0x0, 0x8003, 0x1}, {0xa44f, 0xfff9, 0xa38c002, 0xe1}, {0x80000cb, 0x2, 0xa, 0x8}, {0x2000df, 0x9, 0x15, 0x80000000}, {0x10008, 0xe2, 0xfffffff5, 0x2}, {0x4, 0x5, 0x24, 0x4}, {0x4, 0xd655, 0x3, 0x6}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) setitimer(0x2, &(0x7f0000000140)={{0x0, 0x100800000000009}, {0xfeeffffc, 0x2000a}}, 0x0) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 525.3184ms ago: executing program 4 (id=563): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) ftruncate(r0, 0x8531) ioctl$VMM_IOC_CREATE(r0, 0xca605601, &(0x7f0000000a00)={0x10, 0xaa, [{&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x4}, {&(0x7f0000003000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, 0x4}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x16}, {&(0x7f0000003000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x6}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x19b5}, {&(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x4000)=nil, 0x4}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x9}, {&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000006000/0x1000)=nil}, {&(0x7f00003fe000/0xc00000)=nil, &(0x7f0000c15000/0x2000)=nil, 0x55a24576}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, 0x7}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000b70000/0x5000)=nil, 0x5}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x5}, {&(0x7f0000c61000/0x3000)=nil, &(0x7f0000b8c000/0x4000)=nil, 0x1}, {&(0x7f0000bc4000/0x4000)=nil, &(0x7f0000b9e000/0x3000)=nil, 0x8}, {&(0x7f0000ad6000/0x1000)=nil, &(0x7f0000a31000/0x1000)=nil, 0x4}], './file0\x00', 0x9d4, 0x8, 0x3, 0x1, [0x7f, 0x6c, 0x5, 0x1ff, 0x101, 0x3, 0x1ff, 0x7, 0x9, 0x3, 0x401, 0x10, 0x5a3, 0x7ff, 0x101, 0x7fff, 0x1d, 0x6, 0x6, 0xc8dd, 0x16ad, 0x401, 0x4, 0x0, 0x3, 0xc, 0x4, 0x7a, 0xffff, 0x0, 0x0, 0x9, 0xffffffff, 0x81, 0xfffffffc, 0x0, 0x80, 0x4, 0xf, 0x40, 0x8, 0x6, 0x6, 0xfffffffc, 0x3a, 0x3, 0x5314, 0x5, 0x4, 0x8001, 0x3, 0x5, 0x7, 0x400, 0x0, 0xffff7fff, 0x0, 0xdae2, 0x0, 0x6, 0x3, 0x5, 0x8fe5, 0x3, 0xf, 0x8, 0x6, 0x2, 0x0, 0x6, 0x7fff, 0x0, 0x18, 0xfffffffc, 0xcafe, 0x4, 0xfdf, 0x7, 0x1, 0x13, 0x80000000, 0x800, 0x6791d1c8, 0x2, 0x0, 0xfff, 0x7, 0xff, 0x100, 0xfffffbff, 0x0, 0x7, 0x80000000, 0x8, 0x7, 0x7ff, 0x7, 0x4, 0x9, 0x8, 0xcc9b, 0x40, 0x7, 0x10001, 0x48f1bfb4, 0xfffffffe, 0x4ab, 0xfffffff9, 0x2, 0x10, 0x6, 0x9, 0x2, 0x4, 0x3cf, 0x101, 0x4, 0x81, 0x6241, 0x2, 0x9, 0x66, 0x1, 0x3, 0x2, 0x8, 0xafa1, 0x4, 0x6, 0x2, 0x6, 0x7f, 0x4, 0x4, 0x8001, 0x3, 0xc0f1, 0x8, 0x6, 0x1ff, 0x9, 0x9, 0x2, 0x4, 0x7, 0x8, 0x1b, 0xfff, 0x7, 0x4e2b, 0x6, 0x97d0, 0x4, 0x2, 0x401, 0x6, 0x9, 0x7fffffff, 0x8000, 0x0, 0x338d, 0x6, 0x0, 0x1, 0x89, 0x0, 0xe, 0x100, 0x9, 0x6b5, 0x8, 0x81, 0x5, 0x5, 0x7, 0x582, 0xfffff9e1, 0x8001, 0x8bb, 0xffff1bf4, 0xfffffff3, 0x18d7ffc4, 0x3ff, 0x0, 0xa8b3, 0x4, 0xfffff376, 0x7ca06800, 0xff, 0x0, 0x88, 0x86d3, 0x3118aaeb, 0x5, 0x0, 0x8, 0x5, 0x451, 0x8, 0x1ba8, 0x9, 0x80000000, 0x4, 0x853, 0x4, 0x9, 0x3, 0xa, 0x9, 0x1, 0x8a, 0x4, 0x4, 0x1, 0xd, 0x1, 0x1, 0x1ff, 0x9, 0x200, 0x8, 0x4fd, 0x3, 0xffff, 0x4, 0xcf13, 0xd, 0x7, 0x401, 0x3, 0x0, 0x10, 0x3, 0x1, 0x4, 0x7, 0x7fffffff, 0x3, 0xfffffff8, 0x0, 0x5, 0x8, 0x1, 0x0, 0xfffffffc, 0x34ee, 0x81, 0x7f, 0x8, 0x3, 0xffffffff, 0x2, 0xffff, 0x7, 0x3, 0x73, 0xfffffffe, 0x8, 0x55, 0x3, 0x200, 0x9, 0x9, 0x5, 0x6000000, 0x3, 0x0, 0x4, 0x8, 0xdcd, 0x4, 0x703, 0x5, 0x6, 0x3ff, 0x401, 0x52ee, 0xf, 0x200, 0x2, 0x7, 0x500, 0x8, 0xb2, 0xffff8000, 0x0, 0x5, 0x8, 0x5, 0x1, 0x8000, 0x1, 0x0, 0x4, 0xf, 0x200, 0x8, 0xf0, 0xf, 0xf, 0x3, 0x8e5, 0x2, 0xb1, 0x0, 0x5, 0x317ee6ab, 0x2, 0x8000, 0x0, 0xfff, 0xfffffff9, 0xc, 0x4ffffe, 0x7, 0x1, 0x7fff, 0x4, 0x0, 0x80000001, 0x1000, 0x8000, 0x5dfcbafd, 0xf, 0x792, 0x5, 0x4, 0xd, 0x4, 0x9, 0x1, 0x9, 0x7, 0x2, 0xc, 0x9, 0xde5f, 0xa000000, 0xd142, 0xb89b, 0x3, 0x268000, 0x200, 0x2, 0x80000001, 0x9, 0x1000, 0x1, 0x7, 0x3, 0x7, 0x100, 0x3, 0x8, 0xffff, 0x9, 0x3ff, 0x9, 0x3, 0x9, 0x7, 0xb473, 0xe0, 0x7176, 0xcf, 0x5, 0x9, 0x4, 0x3, 0x100, 0x16, 0x5, 0x8, 0x49c, 0x8, 0x2, 0x5, 0x3074, 0x7, 0x9, 0x8, 0x1, 0x780, 0x0, 0x100, 0x9, 0x9, 0x4, 0xfffffffd, 0xaf6, 0x0, 0xffff0b0e, 0xd, 0x4, 0x9, 0x1, 0xb5c0, 0x6, 0x800, 0x40, 0x0, 0x8000, 0x7, 0x8, 0x3, 0x42, 0x5, 0x574bab5b, 0x4, 0x0, 0x400, 0x6, 0x9, 0x3, 0x4, 0xae8, 0x8, 0x9, 0x5, 0x0, 0x40, 0x800, 0x1c, 0x4e, 0xffff0001, 0x5, 0x9, 0x1000, 0x3, 0x3, 0xe2e0, 0x4, 0x5, 0x0, 0xff, 0x8, 0x7, 0x7230, 0xffff, 0x2, 0x344, 0x2, 0x4, 0x5, 0x2, 0x40000000, 0x3, 0x1d58, 0x4, 0x5, 0x5, 0x8, 0x2, 0x8, 0x400, 0x10000, 0x200, 0xde, 0x46a, 0x80000000, 0xfffffffa, 0x9, 0x8, 0x6c, 0x4, 0x0, 0x6, 0x400, 0x4, 0x8001, 0xc7a, 0xffffffff, 0x4, 0x3, 0x31, 0x7, 0x2c655e84, 0xffffffff, 0x2, 0x2add, 0x10000, 0x63, 0x9891, 0x6, 0xfffffffd, 0x6, 0x4, 0x9bcb, 0x200, 0x0, 0x2107d5d1, 0x593, 0xfffffffb, 0x0, 0x2, 0xfffffff7, 0x1, 0x7, 0x10000, 0x1000, 0x6, 0x8, 0x5, 0x1ff, 0xfffffff9, 0x7ff, 0x3, 0x6, 0x4, 0x8, 0x2, 0xfb4d]}) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 504.692617ms ago: executing program 0 (id=564): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r3, r3) getgroups(0x7, &(0x7f0000000200)=[r1, 0x0, r1, 0x0, 0x0, r3, 0x0]) setuid(0xffffffffffffffff) setresgid(0x0, r1, r4) 484.782439ms ago: executing program 2 (id=565): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x7, 0x80000000, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x44, 0x3effd}) writev(r0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0xfffffffc, 0xfffff801, 0x2, 0x1, "b1ebe63c3896cddd74ad0ad43b43f60c80116502", 0x200, 0x9}) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000780)=0x7) 465.708956ms ago: executing program 7 (id=566): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fb, 0x9, 0x3, 0xfe, 0x1, 0x5, 0x3, 0x10, [{0x3, 0x2, 0x6, 0x71801}, {0xffffffff, 0xb7fe, 0x800002}, {0x100006, 0x0, 0x208, 0x4}, {0x2, 0x80ff, 0x1, 0xfffbfffb}, {0x1, 0x3, 0x80000005, 0x7}, {0x2, 0x7f, 0x14000009, 0xc}, {0xae0, 0x200, 0x8000004, 0x6d}, {0x2000e, 0x3, 0xfdf0, 0x4}, {0x0, 0x7, 0x33, 0x9}, {0x402, 0x0, 0x8001, 0x7}, {0x800a44f, 0xeff9, 0xb1, 0xe1}, {0xcb, 0x2, 0x8, 0x8}, {0x2000df, 0xfffffffe, 0x5, 0x5}, {0x4, 0xfffffffc, 0xfffffff5, 0xffffffb8}, {0x6, 0x5, 0x26, 0x3}, {0xfffffffd, 0xd654, 0x1, 0x6}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) open(0x0, 0x0, 0x140) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x6, 0x20800c1, 0xf, 0x0, 0x1040807, 0x50001, 0x1, 0x0, 0x0, 0x9, 0xf5fffffffffffff9}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 464.116035ms ago: executing program 0 (id=567): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x6, 0x17, 0x2100007, 0x101, 0x80000001, 0x80001001, 0x10001, 0x10, [{0x0, 0x6, 0x800004, 0x71001}, {0x8, 0xffffffff, 0x80008, 0xfffffff9}, {0x8, 0xf86, 0x82, 0x9}, {0x1, 0x801, 0x5, 0xfffefffc}, {0x1, 0x200726, 0x2800, 0x7}, {0xfffffffd, 0xa, 0x3, 0x2}, {0xcdf, 0x0, 0x573, 0x6d}, {0x6, 0x300, 0x54, 0x738}, {0x3cb, 0x9, 0x5, 0x8}, {0x5, 0x1, 0xd1b, 0x8c}, {0x5f, 0x7, 0xc, 0x3}, {0x7ff, 0x9, 0x2, 0x9}, {0xb8c, 0x4, 0x2, 0xe628}, {0x29a71717, 0x1, 0x1, 0xfeac}, {0xc, 0x407, 0xffffffff}, {0x8800, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 462.987753ms ago: executing program 1 (id=568): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000001480)=@file={0x1}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x20, 0x401}, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x26, 0x0, 0x0, 0x0, 0x1f, 0x2}, 0x806) 461.657308ms ago: executing program 3 (id=569): readv(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000600)=""/251, 0xfb}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000002c0)="ed", 0x1) recvmmsg(r1, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xa48c}, 0x38, 0x1842, 0x0) readv(r1, &(0x7f0000001a80)=[{0x0}], 0x1) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1046) shutdown(r0, 0x1) 461.316831ms ago: executing program 4 (id=570): setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000001c0)={0x80d344, 0x5c, 0x1, 0x7fffffff, "08d92100", 0x80001, 0x8}) ioctl$TIOCSTOP(r0, 0x2000746f) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1) 425.147438ms ago: executing program 5 (id=571): r0 = socket(0x11, 0x3, 0x0) ioctl$DIOCRGETADDRS(0xffffffffffffffff, 0xc4504446, &(0x7f0000000540)={{'./bus\x00', './bus\x00', 0x20, 0x9}, &(0x7f0000000000)=[{@broadcast, '\x00', './bus/file0\x00', 0x0, 0x9, 0x2, 0x3, 0x7f, 0x9, 0x8}], 0x9, 0x1, 0x5, 0x8001, 0x8, 0x1, 0x44, 0x7}) setsockopt(r0, 0x11, 0x2, &(0x7f0000000000), 0x4) r1 = kqueue() kevent(r1, &(0x7f0000000040), 0x8, &(0x7f00000001c0), 0x9, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r2, 0x8040691a, &(0x7f00000001c0)) 424.104907ms ago: executing program 6 (id=572): ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x2, 0x800c1, 0xf, 0x0, 0x1040807, 0x50001, 0x0, 0x0, 0x0, 0x8, 0xf5fffffffffffff9}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) setitimer(0x2, &(0x7f0000000140)={{0x1aa, 0x9}, {0x1ff, 0x8}}, 0x0) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 422.659573ms ago: executing program 4 (id=573): utimes(0x0, &(0x7f0000000040)={{0x2, 0x9}, {0x6, 0x9}}) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) socket(0x2, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r0 = socket(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4d) 421.399997ms ago: executing program 7 (id=574): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x3, 0x0, 0x10, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) r1 = open(0x0, 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x18, 0x1, 0xb, "759f5a01005ada388e47a1e7a5446cfe", 0x1}, {0x1c, 0x18, 0x3, 0x4, "00000000000000000000000000000001", 0x5}, 0x0, [0x3efa, 0x9f72, 0x1, 0x9, 0x8, 0x7f, 0x800, 0x4]}, 0x5c) 356.23926ms ago: executing program 5 (id=575): mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000803) pipe(0x0) ktrace(0x0, 0x2, 0x2000250f, 0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) connect(r1, &(0x7f00000001c0)=@un=@file={0xb, 0x1, './file0\x00'}, 0xa) 349.756108ms ago: executing program 6 (id=576): mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x1e62) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xc0) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x802, 0xa6, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010002, 0x10, [{0x0, 0x7, 0xfffffffd, 0x71002}, {0x3, 0x3, 0x8, 0xfffffff7}, {0x101, 0x5, 0xfffffffc, 0x9}, {0x10000000, 0x10001, 0x6, 0x7}, {0x7, 0xfff7, 0x2800, 0x7}, {0x21, 0x650, 0x3, 0x6}, {0xce1, 0xffffffff, 0x4d4, 0xffffffbb}, {0x100000a, 0x8, 0x14, 0x2}, {0x6000001, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1ce, 0x800, 0xdaa7, 0x3}, {0xc, 0xa, 0x5ab0}, {0x1, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffb, 0x60, 0x7}, {0x1, 0xfffffffa, 0x205, 0x4}, {0x0, 0x0, 0x200001ff, 0x230003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 325.667903ms ago: executing program 5 (id=577): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xc0) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa4, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010002, 0x10, [{0x0, 0x7, 0x1, 0x71002}, {0x3, 0xe, 0x4, 0xfffffff7}, {0x101, 0x5, 0xfffffffc, 0x9}, {0x4, 0x10001, 0x6, 0x7}, {0x7, 0xfff7, 0x2800, 0x7f}, {0x1, 0x650, 0x3, 0x6}, {0xce1, 0xffffffff, 0x4d4, 0xffffffbb}, {0x100000a, 0x8, 0x14, 0x2}, {0x6000001, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1ce, 0x800, 0x3, 0x3}, {0xc, 0xa, 0x2}, {0x8, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffb, 0x60, 0x7}, {0x6, 0xfffffffa, 0x205, 0x4}, {0x0, 0x1, 0x200001ff, 0x230003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) 319.34843ms ago: executing program 4 (id=578): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() close(r0) syz_open_pts() write(r0, &(0x7f00000000c0)="abaf", 0x2) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x8, 0x3, 0xffff7dfe, 0xffffff8c, "08ed9599000000094137f9534863ef7cf8ffffe6", 0x5, 0x10001}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 250.896919ms ago: executing program 0 (id=579): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) setsockopt(0xffffffffffffffff, 0x1000000000029, 0x3f, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r1, 0x20007461) ioctl$TIOCSETD(r0, 0x8004745f, &(0x7f0000000000)=0x17) 223.46723ms ago: executing program 0 (id=580): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fb, 0x9, 0x3, 0xfb, 0x1, 0x5, 0x3, 0x10, [{0x3, 0x2, 0x6, 0x71801}, {0xfffffffd, 0x7698, 0x800002}, {0x100006, 0x0, 0x208, 0x4}, {0x2, 0x80ff, 0x1, 0xfffbfffb}, {0x1, 0x3, 0x80000005, 0x7}, {0x2, 0x7f, 0x14000009, 0xc}, {0xae0, 0x200, 0x8000004, 0x6d}, {0x2000e, 0x3, 0xfdf0, 0x4}, {0x7e10000, 0x7, 0x33, 0x9}, {0x402, 0x0, 0x8001, 0x7}, {0x800a44f, 0xeff9, 0xb1, 0xe1}, {0xcb, 0x2, 0x8, 0x8}, {0x2000df, 0xfffffffe, 0x5, 0x5}, {0x4, 0xfffffffc, 0xfffffff5, 0xffffffb8}, {0x6, 0x5, 0x26, 0x3}, {0xfffffffd, 0xd654, 0x1, 0x6}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) read(0xffffffffffffffff, &(0x7f0000000240)=""/243, 0xf3) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x6, 0x20800c1, 0xf, 0x0, 0x1040807, 0x50001, 0x1, 0x0, 0x0, 0x9, 0xf5fffffffffffff9}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 221.797967ms ago: executing program 2 (id=581): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047466, &(0x7f0000000200)=0x5) ioctl$TIOCSBRK(r0, 0x2000747b) open(&(0x7f0000000000)='./file0\x00', 0x4, 0x0) select(0x40, &(0x7f0000000140)={0x2d, 0x4, 0x0, 0x7, 0xe, 0x4101, 0x2, 0x80000001}, 0x0, 0x0, 0x0) 217.792314ms ago: executing program 7 (id=582): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x40) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) setitimer(0x2, &(0x7f0000000140)={{0x800000000f32b473, 0x100000000000c}, {0xe1fb, 0xc0}}, 0x0) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) 29.753123ms ago: executing program 1 (id=583): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4) writev(0xffffffffffffffff, &(0x7f0000000c40)=[{&(0x7f0000000a80)="4648b4e7ed920f31b8d7147fc8cbbb7823d2e759d34f6cb172c49ba8867bb502fa34e3eb80d46bcd5e", 0x29}], 0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000b00)={0x3, 0xc9f5, 0x8001, 0x1, 0xc, 0x6, 0xe, 0x10, [{0x5, 0x1, 0x2, 0x7f}, {0x101, 0x68, 0x0, 0x3ff}, {0x4e, 0x8, 0x5, 0x10}, {0x8, 0xfff, 0x2, 0x8}, {0xfff, 0x3, 0x2e8, 0xa6e}, {0x3412a1d9, 0x1e15, 0xff, 0x6}, {0x5, 0xfff, 0x1, 0x80000000}, {0x8, 0x14ee, 0x5, 0xa}, {0x80000000, 0xffff67c6, 0x3, 0x6}, {0x5, 0x2, 0x2, 0x800}, {0x10001, 0x5, 0xf, 0x8}, {0x8, 0xfff, 0x1, 0x8}, {0x2, 0x3d, 0xc, 0x10001}, {0x200, 0x2, 0xa3b, 0x9}, {0x4, 0x81, 0x7f, 0x1}, {0x3, 0x2, 0xaa, 0x401}]}) socket$inet6(0x18, 0x3, 0x2) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x4}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xf}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f00005dd000/0x3000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000008000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x40000000000007}, {&(0x7f0000636000/0x2000)=nil, &(0x7f00007f7000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f0000696000/0x2000)=nil, &(0x7f0000377000/0x1000)=nil, 0x7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x100000001}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f00000c8000/0x1000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000abf000/0x3000)=nil, 0x1}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x2, 0x94fd, 0xffffb6e0, 0x0, 0x0, 0x0, 0xfffffffd, 0xc69, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xae9, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xffffff49, 0x9, 0x8000009, 0x0, 0x0, 0x9, 0xffc, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x101, 0x0, 0x0, 0xfffffbfd, 0x0, 0x0, 0x0, 0x0, 0xfffff001, 0x80, 0xdec4, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x70000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x0, 0x600, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0x4d, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59e01a04, 0x0, 0x0, 0xff, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xaa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf, 0x0, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x3ff]}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xcd604404, &(0x7f0000000080)={0x1, 0x2, 0x87a, 0x2f, "2000030000000004000000000068a95a010400", 0x6, 0x2}) 0s ago: executing program 6 (id=584): mkdir(&(0x7f0000000180)='./file0\x00', 0x14) r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x120) chroot(&(0x7f0000000740)='.\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.16' (ED25519) to the list of known hosts. pckbd_enable: command error lo0: can't handle af0 pckbd_enable: command error wskbd0: can't attach mux (error=5) wStopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806c191c58,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(fffffd806c191c40,1) at rw_do_enter_write+0xba rrw_enter(fffffd806c191c40,1) at rrw_enter+0xc6 VOP_LOCK(fffffd80602e76f8,2001) at VOP_LOCK+0xbd vn_lock(fffffd80602e76f8,2001) at vn_lock+0xa4 vfs_getcwd_common(fffffd80602e76f8,fffffd80602e7620,0,0,200,0,764ea5a843e98e20) at vfs_getcwd_common+0xd1 vn_isunder(fffffd80602e76f8,fffffd80602e7620,ffff80003bbb9a10) at vn_isunder+0x56 unp_externalize(fffffd806f12fb00,33,0) at unp_externalize+0x26f soreceive(ffff800010fdb4a8,ffff80003bfc94f8,ffff80003bfc94a8,0,ffff80003bfc94e0,ffff80003bfc966c,a96efb10e86765af) at soreceive+0xc24 recvit(ffff80003bbb9a10,4,ffff80003bfc9640,0,ffff80003bfc96f0) at recvit+0x40b sys_recvmsg(ffff80003bbb9a10,ffff80003bfc97a0,ffff80003bfc96f0) at sys_recvmsg+0x1bf syscall(ffff80003bfc97a0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xe4d86f93e70, count: -14 ddb{1}> show registers rdi 0 rsi 0x80000 acpi_pdirpa+0x6be71 rbp 0xffff80003bfc8f80 rbx 0 rdx 0xffff8000015f8340 rcx 0xffff80003bbb9a10 rax 0x7ffff acpi_pdirpa+0x6be70 r8 0xffff80003bfc8e60 r9 0x8080808080808080 r10 0x4f5cdc6a7894240b r11 0x4c894c0500778155 r12 0xfffffd80040c1880 r13 0xfffffd80048a9350 r14 0x3 r15 0xffffffff8352682b substchar+0x8c0b rip 0xffffffff82079915 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003bfc8f70 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=374860 pid=98403 tcnt=2 stat=onproc flags process=1000000 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003bbb8550,0xffff80003bbb8030 process=0xffff80003c461368 user=0xffff80003bfc4000, vmspace=0xfffffd806c6d53e8 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 98403 147741 54344 0 2 0x1000000 syz-executor *98403 374860 54344 0 7 0x5000000 syz-executor 75341 481904 50158 0 2 0 syz-executor 65489 121010 88371 0 7 0 syz-executor 65489 181496 88371 0 3 0x4000080 fsleep syz-executor 3381 418621 84666 0 2 0 syz-executor 3381 5355 84666 0 3 0x4000080 fsleep syz-executor 68328 511108 19066 0 2 0 syz-executor 68328 195057 19066 0 3 0x4000080 fsleep syz-executor 75979 510481 36048 0 2 0 syz-executor 75979 323332 36048 0 3 0x4000080 sbwait syz-executor 75979 167789 36048 0 3 0x4000080 sbufrcv syz-executor 75979 61888 36048 0 3 0x4000080 sbufrcv syz-executor 77600 385550 0 0 3 0x14280 nfsidl nfsio 64562 149252 0 0 3 0x14280 nfsidl nfsio 49017 416816 0 0 3 0x14280 nfsidl nfsio 61983 177390 0 0 3 0x14280 nfsidl nfsio 15495 65992 0 0 3 0x14280 nfsidl nfsio 81374 406207 0 0 3 0x14280 nfsidl nfsio 83303 226523 0 0 3 0x14280 nfsidl nfsio 67181 277761 0 0 3 0x14280 nfsidl nfsio 20849 406362 0 0 3 0x14280 nfsidl nfsio 29477 422697 0 0 3 0x14280 nfsidl nfsio 50705 289440 0 0 3 0x14280 nfsidl nfsio 50067 322424 0 0 3 0x14280 nfsidl nfsio 33679 66176 0 0 3 0x14280 nfsidl nfsio 92640 417321 0 0 3 0x14280 nfsidl nfsio 98491 249492 0 0 3 0x14280 nfsidl nfsio 26749 129087 0 0 3 0x14280 nfsidl nfsio 26626 520358 0 0 3 0x14280 nfsidl nfsio 91759 265921 0 0 3 0x14280 nfsidl nfsio 98772 282000 0 0 3 0x14280 nfsidl nfsio 13064 435894 0 0 3 0x14280 nfsidl nfsio 60377 129230 73931 0 3 0x2 biowait syz-executor 54344 126666 73931 0 2 0x2 syz-executor 18923 348381 73931 0 3 0x82 nanoslp syz-executor 19066 191296 73931 0 3 0x82 nanoslp syz-executor 36048 352485 73931 0 3 0x82 nanoslp syz-executor 50158 501204 73931 0 3 0x82 nanoslp syz-executor 88371 215612 73931 0 3 0x82 nanoslp syz-executor 84666 327219 73931 0 3 0x82 nanoslp syz-executor 73931 238716 12665 0 3 0x82 kqread syz-executor 12665 135101 906 0 3 0x10008a sigsusp ksh 906 104494 43601 0 3 0x98 kqread sshd-session 43601 54685 97653 0 3 0x92 kqread sshd-session 32697 202849 1 0 3 0x100083 ttyin getty 97653 273042 1 0 3 0x88 kqread sshd 10660 425618 69148 74 3 0x1100092 bpf pflogd 69148 480718 1 0 3 0x80 sbwait pflogd 73348 284205 82047 73 3 0x1100090 kqread syslogd 82047 273773 1 0 3 0x100082 sbwait syslogd 16296 239179 1 0 3 0x100080 kqread resolvd 84245 464869 85071 77 3 0x100092 kqread dhcpleased 26238 482126 85071 77 3 0x100092 kqread dhcpleased 85071 200911 1 0 3 0x80 kqread dhcpleased 90453 480343 0 0 3 0x14200 bored smr 26941 59345 0 0 2 0x14200 zerothread 43894 433778 0 0 3 0x14200 aiodoned aiodoned 59652 492765 0 0 3 0x14200 syncer update 60578 453944 0 0 3 0x14200 cleaner cleaner 98232 57225 0 0 3 0x14200 reaper reaper 82784 14540 0 0 3 0x14200 pgdaemon pagedaemon 24443 85768 0 0 3 0x14200 bored viomb 34217 374549 0 0 3 0x40014200 acpi0 acpi0 29628 44280 0 0 3 0x40014200 idle1 62528 329899 0 0 3 0x14200 bored softnet1 95971 315122 0 0 3 0x14200 bored softnet0 31497 41554 0 0 3 0x14200 smrbar systqmp 6171 413388 0 0 3 0x14200 bored systq 33521 304814 0 0 3 0x14200 tmoslp softclockmp 33469 145059 0 0 3 0x40014200 tmoslp softclock 97010 513623 0 0 3 0x40014200 idle0 1 178333 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 98403 (syz-executor) thread 0xffff80003bbb9a10 (374860) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a9f740) #0 witness_lock+0x5f1 #1 unp_externalize+0x155 #2 soreceive+0xc24 #3 recvit+0x40b #4 sys_recvmsg+0x1bf #5 syscall+0xbd4 #6 Xsyscall+0x128 exclusive rwlock sbufrcv r = 0 (0xffff800010fdb598) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sblock+0xb6 #3 soreceive+0x27d #4 recvit+0x40b #5 sys_recvmsg+0x1bf #6 syscall+0xbd4 #7 Xsyscall+0x128 Process 65489 (syz-executor) thread 0xffff80003c3ea2c8 (121010) shared rwlock uobjlk r = 0 (0xfffffd806d9cd490) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvm_fault_lower_lookup+0x53 #3 uvm_fault_lower+0x89 #4 uvm_fault+0x274 #5 upageflttrap+0xa9 #6 usertrap+0x430 #7 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xfffffd806c6d5118) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x430 #7 recall_trap+0x8 Process 75979 (syz-executor) thread 0xffff80003bbb9778 (323332) exclusive rwlock sbufrcv r = 0 (0xffff8000015a6fb0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sblock+0xb6 #3 soreceive+0x27d #4 recvit+0x40b #5 sys_recvmmsg+0x410 #6 syscall+0xbd4 #7 Xsyscall+0x128 Process 60377 (syz-executor) thread 0xffff8000fffeed10 (129230) exclusive rrwlock inode r = 0 (0xfffffd806c191440) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806c88cd78) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x12b #6 namei+0x7c5 #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 Process 31497 (systqmp) thread 0xffff8000ffffe298 (41554) shared rwlock systqmp r = 0 (0xffffffff8394e988) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11073 12126K 12368K 166960K 12513 0 pcb 19 12K 12K 166960K 125 0 rtable 177 5K 7K 166960K 415 0 pf 34 17K 24K 166960K 97 0 ifaddr 37 6K 7K 166960K 61 0 ifgroup 47 2K 2K 166960K 82 0 sysctl 3 1K 9K 166960K 7 0 counters 66 36K 37K 166960K 94 0 ioctlops 0 0K 4K 166960K 1550 0 iov 1 4K 16K 166960K 10 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1291 81K 82K 166960K 1648 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 20K 24K 166960K 7 0 VM map 2 1K 1K 166960K 2 0 sem 10 0K 0K 166960K 13 0 dirhash 12 2K 2K 166960K 30 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 97K 166960K 714 0 sigio 0 0K 0K 166960K 12 0 proc 72 115K 164K 166960K 586 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 23 0 in_multi 77 5K 7K 166960K 134 0 ether_multi 1 0K 0K 166960K 13 0 mrt 1 0K 0K 166960K 42 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 97 440K 440K 166960K 97 0 exec 0 0K 1K 166960K 404 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 225 170K 176K 166960K 7632 0 UVM aobj 5 2K 4K 166960K 7 0 pinsyscall 42 84K 104K 166960K 1870 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 49 0 NDP 10 0K 1K 166960K 38 0 temp 46 9112K 9180K 166960K 13548 0 kqueue 13 20K 25K 166960K 102 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 41 0 38 1 0 1 1 0 8 0 rtentry 176 137 0 59 6 0 6 6 0 8 0 unpcb 144 196 0 175 1 0 1 1 0 8 0 syncache 336 10 0 10 1 0 1 1 0 8 1 tcpcb 736 84 0 79 1 0 1 1 0 8 0 arp 136 22 0 7 1 0 1 1 0 8 0 inpcb 328 321 0 311 2 0 2 2 0 8 1 nd6 152 25 0 7 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 9 0 9 2 1 1 1 0 8 1 pppxif 1576 2 0 2 1 0 1 1 0 8 1 pfstscr 40 8 0 8 1 0 1 1 0 8 1 pffrag 232 3 0 0 1 0 1 1 0 482 0 pffrnode 88 3 0 0 1 0 1 1 0 8 0 pffrent 40 5 0 2 1 0 1 1 0 8 0 pfosfp 40 1428 0 1428 5 1 4 5 0 8 4 pfosfpen 112 1428 0 1428 21 1 20 21 0 8 20 pfsrclim 320 3 0 3 1 0 1 1 0 8 1 pfstlim 224 1 0 1 1 1 0 1 0 8 0 pfanchor 1288 3 0 0 1 0 1 1 0 8 0 pfstitem 24 54 0 1 1 0 1 1 0 8 0 pfstkey 128 62 0 9 2 0 2 2 0 8 0 pfstate 448 57 0 5 6 0 6 6 0 8 0 pfrule 1360 27 0 21 2 1 1 2 0 8 0 rttmr 136 10 0 10 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 607 0 259 29 1 28 29 0 8 4 art_table 40 608 0 259 5 0 5 5 0 8 0 art_node 32 137 0 67 1 0 1 1 0 8 0 sysvmsgpl 40 9 0 2 1 0 1 1 0 8 0 semapl 64 10 0 2 1 0 1 1 0 8 0 shmpl 112 4 0 2 1 0 1 1 0 8 0 dirhash 1024 29 0 12 3 0 3 3 0 8 0 dino2pl 256 2500 0 1039 93 0 93 93 0 8 0 ffsino 296 2500 0 1039 114 0 114 114 0 8 0 nchpl 144 3325 0 1625 64 0 64 64 0 8 0 rtmask 32 1 0 1 1 0 1 1 0 8 1 vnodes 216 2713 0 0 151 0 151 151 0 8 0 namei 1024 9821 0 9820 1 0 1 1 0 8 0 percpumem 16 62 0 14 1 0 1 1 0 8 0 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 kstatmem 264 45 0 22 3 0 3 3 0 8 1 scsiplug 72 2 0 2 1 1 0 1 0 8 0 scxspl 216 11466 0 11465 5 4 1 3 1 8 0 plimitpl 152 131 0 113 1 0 1 1 0 8 0 sigapl 424 1052 0 985 8 0 8 8 0 8 0 knotepl 120 514 0 0 16 0 16 16 0 8 0 kqueuepl 224 98 0 89 1 0 1 1 0 8 0 pipepl 344 140 0 113 3 0 3 3 0 8 0 fdescpl 528 1015 0 984 3 0 3 3 0 8 0 filepl 160 3641 0 3420 10 0 10 10 0 8 0 lockfpl 104 144 0 142 1 0 1 1 0 8 0 lockfspl 48 61 0 59 1 0 1 1 0 8 0 sessionpl 144 42 0 33 1 0 1 1 0 8 0 pgrppl 48 50 0 33 1 0 1 1 0 8 0 ucredpl 104 839 0 825 1 0 1 1 0 8 0 zombiepl 144 986 0 985 1 0 1 1 0 8 0 processpl 1232 1052 0 985 6 0 6 6 0 8 0 procpl 664 1746 0 1672 8 0 8 8 0 8 1 sosppl 176 6 0 6 1 0 1 1 0 8 1 sockpl 752 563 0 529 4 0 4 4 0 8 0 mcl64k 65536 17 0 0 3 0 3 3 0 8 0 mcl16k 16384 17 0 0 3 0 3 3 0 8 0 mcl12k 12288 8 0 0 1 0 1 1 0 8 0 mcl9k128 9344 5 0 0 1 0 1 1 0 8 0 mcl8k 8192 9 0 0 2 0 2 2 0 8 0 mcl4k 4096 135 0 0 17 0 17 17 0 8 0 mcl2k2 2112 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 22 0 0 3 0 3 3 0 8 0 mtagpl 96 7 0 0 1 0 1 1 0 8 0 mbufpl 256 199 0 0 13 0 13 13 0 8 0 bufpl 280 3625 0 105 252 0 252 252 0 8 0 anonpl 32 4048 0 0 34 1 33 34 0 246 0 amapchunkpl 152 23852 0 23407 23 1 22 22 0 158 4 amappl16 200 2237 0 2205 6 2 4 5 0 8 1 amappl15 192 5 0 5 1 1 0 1 0 8 0 amappl14 184 529 0 528 1 0 1 1 0 8 0 amappl13 176 119 0 107 1 0 1 1 0 8 0 amappl12 168 1262 0 1233 2 0 2 2 0 8 0 amappl11 160 6 0 6 1 1 0 1 0 8 0 amappl10 152 64 0 50 1 0 1 1 0 8 0 amappl9 144 278 0 278 1 1 0 1 0 8 0 amappl8 136 98 0 96 1 0 1 1 0 8 0 amappl7 128 167 0 154 1 0 1 1 0 8 0 amappl6 120 171 0 170 1 0 1 1 0 8 0 amappl5 112 93 0 83 1 0 1 1 0 8 0 amappl4 104 298 0 280 1 0 1 1 0 8 0 amappl3 96 5169 0 5064 4 0 4 4 0 8 1 amappl2 88 544 0 483 2 0 2 2 0 8 0 amappl1 80 12731 0 12131 14 1 13 14 0 8 0 amappl 88 6878 0 6725 5 0 5 5 0 92 0 uvmvnodes 80 119 0 0 3 0 3 3 0 8 0 dma32768 32768 1 0 1 1 0 1 1 0 8 1 dma8192 8192 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 1 0 1 1 1 0 1 0 8 0 dma256 256 9 0 9 3 2 1 1 0 8 1 dma128 128 254 0 254 2 2 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 6 0 2 1 0 1 1 0 8 0 uaddrrnd 24 1015 0 984 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1015 0 984 1 0 1 1 0 8 0 vmmpekpl 168 9263 0 9230 2 0 2 2 0 8 0 vmmpepl 168 69322 0 67422 88 0 88 88 0 357 2 vmsppl 488 1014 0 984 5 1 4 5 0 8 0 rwobjpl 80 20265 0 19225 23 0 23 23 0 8 0 pdppl 4096 2037 0 1968 105 34 71 87 0 8 2 pvpl 32 12846 0 0 106 2 104 105 0 265 0 pmappl 256 1014 0 984 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 294 0 41 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff83984ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a9ef40) at __mp_lock+0x192 intr_handler(ffff800033796a50,ffff800000079600) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f _rb_find(ffffffff837d0d40,fffffd8076d744c8,ffff800033796b60) at _rb_find+0x54 uvm_pagelookup(fffffd8076d744b8,63000) at uvm_pagelookup+0x54 uvn_get(fffffd8076d744b8,63000,ffff800033796eb0,ffff800033796d14,3,1,16f58f724f30ec55,ffff800033796f68) at uvn_get+0x486 uvm_fault_lower_lookup(ffff800033796f30,ffff800033796f68,ffff800033796eb0) at uvm_fault_lower_lookup+0x10d uvm_fault_lower(ffff800033796f30,ffff800033796f68,ffff800033796eb0) at uvm_fault_lower+0x89 uvm_fault(fffffd806c6d5018,110c296000,0,1) at uvm_fault+0x274 upageflttrap(ffff8000337970d0,110c296a0e) at upageflttrap+0xa9 usertrap(ffff8000337970d0) at usertrap+0x430 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x764b34683450, count: -15 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806c191c58,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(fffffd806c191c40,1) at rw_do_enter_write+0xba rrw_enter(fffffd806c191c40,1) at rrw_enter+0xc6 VOP_LOCK(fffffd80602e76f8,2001) at VOP_LOCK+0xbd vn_lock(fffffd80602e76f8,2001) at vn_lock+0xa4 vfs_getcwd_common(fffffd80602e76f8,fffffd80602e7620,0,0,200,0,764ea5a843e98e20) at vfs_getcwd_common+0xd1 vn_isunder(fffffd80602e76f8,fffffd80602e7620,ffff80003bbb9a10) at vn_isunder+0x56 unp_externalize(fffffd806f12fb00,33,0) at unp_externalize+0x26f soreceive(ffff800010fdb4a8,ffff80003bfc94f8,ffff80003bfc94a8,0,ffff80003bfc94e0,ffff80003bfc966c,a96efb10e86765af) at soreceive+0xc24 recvit(ffff80003bbb9a10,4,ffff80003bfc9640,0,ffff80003bfc96f0) at recvit+0x40b sys_recvmsg(ffff80003bbb9a10,ffff80003bfc97a0,ffff80003bfc96f0) at sys_recvmsg+0x1bf syscall(ffff80003bfc97a0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xe4d86f93e70, count: -14