last executing test programs: 435.237242ms ago: executing program 3 (id=4): openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) clock_getres(0x3, &(0x7f0000000080)) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xc, 0x1, 0x2, 0x6}, {0x40, 0x4, 0xf3, 0x4}, {0xdb1e, 0xfd, 0x5, 0x4000800}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x3a) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) rename(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') (async) rename(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045f400280067000000069078ac1400bbac1400aa4e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b606000000892954264110ab8fa75f859e61000b4d136f9a"]) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045f400280067000000069078ac1400bbac1400aa4e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b606000000892954264110ab8fa75f859e61000b4d136f9a"]) 377.351952ms ago: executing program 7 (id=8): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffe, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) chdir(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') unlinkat(r1, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) setrlimit(0x7, &(0x7f00000000c0)={0x8001, 0x5}) r2 = socket(0x18, 0x1, 0x6) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000040), 0x0) futimes(r2, &(0x7f0000000180)=[{0x3, 0x3}, {0x4, 0x3}]) ftruncate(r0, 0x8) sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x2, &(0x7f0000000080)="bd", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) closefrom(r0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r3, &(0x7f00000003c0)=""/4096, 0x1000) setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000000080)="fd8df8fe1be06e8acd2993e4dfad0074061bdc78c03df35e362f7c57cdd55e452d6fdd", 0x23) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 372.889308ms ago: executing program 0 (id=1): r0 = geteuid() r1 = getpid() (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) (async, rerun: 32) r2 = msgget(0x3, 0x1) (rerun: 32) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) getgroups(0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0]) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fchownat(r5, &(0x7f0000000000)='./file0\x00', r3, r4, 0x6) (async) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000280)={{r3, r4, r0, r7, 0x56, 0xff}, 0x0, 0x0, 0x1, 0x3, 0x2, r1, r1, 0x7, 0x0, 0x129, 0x0, 0x6}) (async, rerun: 32) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) (async, rerun: 32) getthrid() (async) setuid(r6) (async) seteuid(r3) 343.806172ms ago: executing program 2 (id=3): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = kqueue() preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/132, 0x84}], 0x1, 0xfffffffffffffffa) getresgid(0x0, 0x0, &(0x7f00000036c0)) r1 = syz_open_pts() syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffff15"]) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) ioctl$TIOCFLUSH(r2, 0xc0187009, &(0x7f0000000080)) ioctl$FIOASYNC(r1, 0x80047460, &(0x7f00000000c0)=0x4) ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000100)=0x4) ioctl$TIOCMGET(r1, 0x4004746a, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 126.126569ms ago: executing program 3 (id=9): sysctl$vm(&(0x7f0000000a40)={0x2, 0xc}, 0x2, &(0x7f0000000a80)="4cf8a847996d", &(0x7f0000000b40)=0x6, &(0x7f0000000040), 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000ac0)=0x1) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000400)={0x2, &(0x7f0000000000)=[{0x84, 0x1, 0x9, 0x9}, {0x6, 0xff, 0xe4, 0x4000800}]}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000080)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffb0, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@info_request={0xf, 0x0, 0x0, 0x205c, 0x3}}}}}) (async) sysctl$ddb(&(0x7f0000000000)={0x9, 0x7}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) (async) msgsnd(0xffffffffffffffff, 0x0, 0x0, 0x800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x11, 0x3, 0x0) fstat(r2, &(0x7f00000003c0)) setsockopt(r2, 0x9, 0x4, &(0x7f0000000200)="4940e862af1029887fc537e0ef1f1d09eb5cd8f03da1af8e27f573a7780f890953addfeb46a43718a37851184dac36d12530833d89af668df0f56870834825e12c494d7db36f08b992fa786b54c7092ba0b2eccf1476dc414af4906ad117583f973fe27e535347d36683786466f72401a5c193a53fa7c20a28ab40948f01ca5125ae37d5e42e9cadee35ceb382755d2c1374b50f3ac75440ac822ac3a10f81ee84c612e9", 0xa4) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0xe}, 0x2, &(0x7f00000011c0), &(0x7f0000000080), 0x0, 0x0) (async) sysctl$vm(&(0x7f0000000140)={0x2, 0x4}, 0x2, &(0x7f0000000b80)="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", &(0x7f0000001b80)=0x1000, &(0x7f0000001bc0)="74681b49cdd688a622357af764a1ab232a796e0f7c5c91e5469267a446a9579022bbb3c2572438bf74de38f6c2e67691c369e5dc4fb45c8765a981c180e41e7799afcbdb3d18d5c77703f810eefe81c6f2620076294ad0f6e4306e2fdaa854debdcbc2ef7e3808bd773dc1", 0x6b) (async) setitimer(0x1, &(0x7f0000000140)={{0x80007ff5, 0x100900000000009}, {0xdffffffffffffdff, 0x7fff}}, 0x0) (async) sysctl$vm(&(0x7f0000000000)={0x2, 0xc}, 0x2, &(0x7f0000000040)="af80590f11068ccb87a0b74cf4a0023da283b62dbf9ada10de792d577ce897bcc9dad80957530a12cbde826ad88a82845264754c9f301fcffe040480e3643e14d5179bf68e237b4a10b6e9675989d409fb0759d7aa6a67665935c45ccf17a1dd37080165313b636721b06b47b5290aa093ee19d91a02d82b023a423cf2db01b91d043752478ba5c9b6e5", &(0x7f0000000180)=0x8a, &(0x7f0000000100)="5b2ffdaed38f3a03f8e1176ab1", 0xd) 125.150816ms ago: executing program 0 (id=10): syz_emit_ethernet(0x43, &(0x7f00000000c0)=ANY=[@ANYBLOB="fffff3ffffffffffffffffff86dd605f6a40000d33a9fe82f0913c00000000000000000000aa00000000000000000000ffff"]) setgid(0xffffffffffffffff) r0 = msgget$private(0x0, 0x116) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200"], 0x8, 0x0) setresgid(0x0, 0x0, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) fstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r2 = socket$inet(0x2, 0x8003, 0x0) setsockopt$sock_int(r2, 0xffff, 0x800, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}, @icmp=@echo}}}}) recvmmsg(r2, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)=""/17, 0x11}}, 0x38, 0x1882, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000580)={{r1, 0x0, 0x0, 0x0, 0x84, 0x51f, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xbe7f, 0x602298e2, 0x3a6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}) setuid(0xffffffffffffffff) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r4 = socket(0x18, 0xc003, 0x3a) setsockopt(r4, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x18, 0x1, 0xb, "759f5a01005ada388e47a1e7a5446cfe", 0x1}, {0x1c, 0x18, 0x3, 0x4, "00000000000000000000000000000001", 0x5}, 0x0, [0x3efa, 0x9f72, 0x1, 0x9, 0x8, 0x7f, 0x800, 0x4]}, 0x5c) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x100000001}) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r5, 0xc050756a, &(0x7f0000000100)) ioctl$VMM_IOC_CREATE(r3, 0xca605601, &(0x7f0000000640)={0x10, 0x80000000, [{&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x52c3300f}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x7e2b}, {&(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x200}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x6}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x80}, {&(0x7f0000000000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2a}, {&(0x7f0000001000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, 0x8000000000000000}, {&(0x7f0000ff4000/0xb000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x401}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x4}], './file0\x00', 0x4, 0x4, 0x5, 0x9, [0xe9, 0x8001, 0x7, 0xd0ab, 0x10000, 0x7, 0x8, 0x0, 0x4, 0xf6, 0x8, 0x1ff, 0x5, 0x5, 0x56, 0x5, 0x0, 0x6, 0x4, 0x9, 0x10000, 0x26e, 0xfffffffc, 0x401, 0x36, 0x5, 0x7, 0x6, 0x2, 0x8, 0x7, 0x5, 0x0, 0x8, 0x80000000, 0x5, 0x7, 0x4, 0x34e, 0xbd, 0x8, 0x8000, 0x9, 0x58c8, 0x3, 0xc43, 0xa, 0xe, 0x7, 0x6, 0x1, 0xfffffe00, 0x2, 0x17e7, 0x6, 0x8, 0x1, 0x42f, 0x5, 0x5, 0x80, 0x5, 0xb130, 0x8, 0x2, 0xa1, 0x1, 0x9, 0x7, 0x7, 0x0, 0x3, 0x2, 0xfff, 0x0, 0x4c6, 0x2, 0x8, 0x3d, 0x8d, 0x7fff, 0x4, 0x5, 0x8, 0xb1, 0x8, 0x1000, 0xfffffffa, 0x400, 0x800, 0x0, 0x21e, 0xd, 0x81, 0x2, 0x1, 0x2, 0x6, 0x7f, 0xa882, 0x141, 0x1, 0x9, 0x8, 0x1, 0x4, 0x7, 0x2a, 0x3, 0xd28a, 0x1000, 0x4, 0x800, 0xffffffff, 0x4, 0x0, 0xfffffff7, 0x7, 0x6, 0xe5a, 0x6, 0x9, 0x6, 0x3, 0xc9, 0x1, 0x8, 0x4, 0x2, 0x4, 0xaaf1, 0x0, 0x4, 0x6, 0x8, 0x8, 0x7, 0x2, 0x1, 0x4608, 0x8, 0x7ff, 0x1, 0x0, 0x1, 0x4, 0xf053, 0x3, 0x6, 0x7, 0xffffffc0, 0xffffffff, 0x32, 0x0, 0x5, 0x2, 0xf4, 0x3, 0x5, 0x81, 0x8, 0x8, 0x80b4, 0x8000, 0x9, 0x6, 0x7, 0x9, 0x4, 0x6, 0x0, 0x5, 0x109f, 0x0, 0x2, 0x8, 0x4, 0xbc4, 0x3, 0x5, 0x10001, 0x6, 0x10000, 0xa, 0x2, 0x80, 0x8, 0x1, 0x800, 0x6, 0x5, 0xb, 0x8001, 0x3, 0x0, 0x10100000, 0x7f, 0x6, 0xffffffe3, 0x10001, 0x4, 0x1, 0x1, 0x9, 0x104, 0x453, 0x10001, 0x9f8, 0x80000001, 0x8000, 0x0, 0x1ff, 0x5, 0x6, 0x5, 0x7, 0x5, 0xd, 0x0, 0x3, 0x9, 0x6, 0x4, 0x1, 0x0, 0x9, 0x9, 0x1, 0x6, 0x6, 0x2, 0x9, 0xc16e, 0x1, 0x40, 0x4, 0x1ff, 0x5, 0xfffffffc, 0x2, 0x77eb, 0x5, 0x7, 0x7, 0x101, 0x6f, 0x1, 0x6, 0x4, 0x74fc, 0x4, 0x5, 0x4, 0x948, 0x9, 0x1, 0x6770, 0x6, 0x4, 0x7f, 0xfffff801, 0xff, 0x5, 0x0, 0xffffffff, 0x8, 0x0, 0x2, 0x3, 0x1400000, 0x800, 0x8, 0xe56b, 0xfffffffd, 0x3ff, 0x7, 0x0, 0x8, 0x5, 0x92, 0x88a, 0x7, 0x1, 0x7, 0xffffffff, 0x9bd, 0x1000, 0x3, 0x1, 0x80000000, 0x1ff, 0x4, 0x8, 0x7, 0x4, 0x3, 0xd, 0x6, 0x5, 0x33, 0x5, 0x6, 0x4, 0x5, 0x3ff, 0x101, 0x6, 0x0, 0x4f, 0x9cb, 0x2208, 0x3, 0x3, 0x2, 0x5, 0x1, 0xffff7fff, 0x6, 0x5, 0xf, 0x0, 0x4, 0xd, 0x7, 0xe3, 0xff, 0x0, 0x42, 0x40000, 0x5, 0xfffffffb, 0x36, 0x8, 0x100, 0x3, 0xfffffff8, 0x7, 0xffff0567, 0x80000000, 0xfffffffd, 0xd, 0x400, 0x9, 0x3, 0x6, 0x35, 0x6, 0x40, 0x3, 0x3, 0xf923, 0x1ff, 0x6, 0x3, 0x9, 0x10, 0x80000000, 0x3, 0x8, 0x3, 0xfffffffb, 0x8, 0x6e3a7d60, 0x3, 0x1, 0x1a46, 0x6, 0xdb0, 0xbe8f, 0x9, 0x4, 0x8, 0x6, 0x4, 0x1000, 0x8, 0xbc5, 0x9, 0x6, 0x0, 0x3, 0x5, 0xb, 0x9, 0xd6, 0xad, 0x10, 0x3ff, 0xfc46, 0x2, 0x7, 0x1, 0xf, 0x4, 0x10001, 0xffffff47, 0x3, 0x6, 0x4, 0xffffffff, 0x9, 0x5, 0x8, 0x3946, 0x8, 0x0, 0x40, 0x800, 0x30, 0x1, 0x6, 0x1, 0x2, 0x8001, 0xb, 0x80, 0x5, 0x1, 0x7fffffff, 0x7, 0x80000001, 0x2, 0x4, 0xf, 0x0, 0x4, 0x1, 0x7f, 0x80, 0x4, 0xa, 0x7b, 0x3, 0x0, 0x35, 0x8, 0x9, 0x1, 0x1, 0x1cf3, 0xede, 0x1000, 0xdee8, 0x8, 0x8, 0x10001, 0x3, 0x3, 0x9, 0x8, 0x8, 0x9, 0x77, 0x3, 0xfff, 0x47708861, 0x800, 0x4, 0x3, 0x2, 0x5, 0x9, 0x0, 0x1594, 0x7ff, 0x8, 0x8001, 0x2, 0x9, 0x5, 0x6a956f1d, 0x3, 0x10, 0x4, 0x0, 0x2, 0x6, 0x7, 0xff, 0x81, 0x10000, 0x80000000, 0x4a3, 0x1f, 0x4, 0x44ff, 0x2, 0x7, 0x3, 0x9, 0x8, 0x3, 0x5, 0x8001, 0x4, 0x2, 0x7, 0x9, 0x2, 0x4, 0x6, 0x0, 0x7fffffff, 0x1, 0x4, 0xa, 0x148, 0x2e8, 0x9, 0x2, 0x4, 0x3]}) msgrcv(r0, 0x0, 0x0, 0x2, 0x800) 124.933231ms ago: executing program 6 (id=7): r0 = socket(0x11, 0x3, 0xa) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) getsockopt(r1, 0x0, 0x68, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = getppid() ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x40000404, r3) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401, r3}) r4 = open(&(0x7f0000000400)='./file0\x00', 0x10000, 0xca) fcntl$lock(r4, 0x9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x269000000, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000100)="b10005016000009f05003f0407000000001813fecea10516d09a32693f316e357ae302b37b673031d2d236acf20b8f25be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af6300372821020000000000008bfbb770c116a985c881ea772ec5890400000000ff0000361b1257aea8c5000020022138f2d900008a09000000000008e38295f80004073da51a221f00000080042000000000000000", 0xb1, 0x0, 0x0, 0x0) 124.711481ms ago: executing program 2 (id=11): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000240)=[{&(0x7f0000000380)=""/215}, {&(0x7f0000000300)=""/72}, {&(0x7f0000000280)=""/104, 0xc2}], 0x100000000000039d, 0x0, 0xfffffffffffffcd8}, 0x2001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) recvmsg(r0, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000240)=[{&(0x7f0000000380)=""/215}, {&(0x7f0000000300)=""/72}, {&(0x7f0000000280)=""/104, 0xc2}], 0x100000000000039d, 0x0, 0xfffffffffffffcd8}, 0x2001) (async) 124.268104ms ago: executing program 4 (id=5): socket$inet(0x2, 0x1, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0xbfffffff, 0x400, 0x40, 0xffffd6c6, "e48294068d5bfac68f398406df04df009900", 0x543, 0x8}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffe4ffff71f89adf44c086dd64125fd700083a08fe80000000000000000000000000aacd7e1e89fb8281da6295872b11144562de0189"]) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebf6cbdf13b9fd812eaa4e712e54e69931929648", 0x14) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x162) pipe(&(0x7f0000000040)={0xffffffffffffffff}) close(r1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x9, 0x8, 0x80000001, 0xa1b0, 0x10001, 0x10, [{0xfffffffc, 0x2890, 0x4, 0x5}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x1, 0xfffffffa, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x4, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0x10000}, {0x6, 0x803, 0x3, 0x7}, {0xd0f5, 0x82, 0x5, 0x9}, {0x6a75, 0x8009, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x7, 0xa, 0x8}, {0x3, 0x7, 0x6, 0x1}, {0x6, 0xfffffffa, 0x60, 0x6}, {0x10008, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x6}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 123.755953ms ago: executing program 1 (id=2): r0 = open(&(0x7f0000000080)='./bus\x00', 0x800, 0x10c) ioctl$VMM_IOC_CREATE(r0, 0xc290560b, &(0x7f0000000100)={0x10, 0x5, [{&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x800}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x4000000000000000}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x7}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x5}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0xeb}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000705000/0x2000)=nil, 0x8}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xad}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xffffffffffff0000}], './file0\x00', 0x3, 0x4, 0xfff, 0x0, [0x7, 0x1689d41c, 0x80000001, 0x401, 0x0, 0x9, 0x9, 0x78, 0x9, 0xfffffffd, 0x7, 0x10001, 0x6, 0x6, 0x8001, 0x8, 0x3ff, 0x7, 0x1, 0x0, 0xfffffff7, 0x3, 0x7, 0x280000, 0x4, 0x1, 0x0, 0x3, 0x3, 0x7, 0x0, 0x6, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x8, 0x100, 0xffffff80, 0x2, 0xdae, 0x7ff, 0x1, 0x7fffffff, 0x6, 0x101, 0x0, 0x3, 0x10000000, 0x8, 0x2, 0x5, 0x1, 0x6, 0x6, 0x46af0a69, 0x4a9, 0x80000000, 0x10001, 0x1ff, 0x9, 0x2, 0x7ff, 0xff, 0x3, 0x2, 0x6, 0x6, 0x1, 0x2, 0x6, 0x3, 0x5, 0x7, 0x5, 0x7, 0xfffffffc, 0x2, 0xf8000000, 0x3, 0x4, 0xbbf, 0x6, 0x3, 0x9, 0x1000000, 0x0, 0xd, 0x4, 0xffaf, 0x6, 0x1, 0x9, 0xce, 0x8, 0x8, 0xa94a, 0x0, 0x987, 0x5, 0x6, 0xa9d4, 0xfffffff2, 0x8000, 0x1, 0x6, 0xcc6, 0x400, 0xfffffffd, 0xa19, 0x80, 0x6, 0x8b, 0x80000001, 0x4, 0x1, 0x2, 0x9, 0x53f1, 0x1000, 0xfffffffd, 0xffffff25, 0x9, 0xc144, 0xfffffffc, 0x3, 0x9, 0x8, 0x470f, 0x4, 0x4, 0x6, 0xffff, 0x2, 0xfffffffc, 0x6, 0x5, 0x4, 0x5, 0x5a9c, 0x4, 0xeb6, 0x5, 0x3, 0x2, 0x2, 0x2, 0x8000, 0x8, 0xaa, 0x8c, 0x38, 0x6, 0x9, 0xb277, 0x400, 0x7, 0x7, 0xd4, 0x7, 0x4, 0x9, 0x75, 0x1ff, 0x1, 0x800, 0xfffffffb, 0x3, 0x1ff, 0x401, 0x1000, 0x4be, 0x7, 0x1, 0x100, 0x3, 0x2, 0x8, 0x239ed050, 0x7f, 0xff, 0x7, 0x9, 0x3ff, 0x4, 0x5317ce34, 0x0, 0x101, 0x80000000, 0x2, 0x10, 0x2, 0x6, 0x5, 0xb, 0x4, 0x9, 0x40, 0x3, 0x6, 0xffff, 0x0, 0x4, 0x1ff, 0x1ff, 0x16, 0x7, 0x4, 0xffffff01, 0x6, 0x5, 0x2, 0x4, 0x4, 0xffffffff, 0x788, 0x0, 0x6, 0x9, 0x1, 0x6, 0x6, 0x6, 0x6, 0xffff, 0x5310, 0x4, 0xd, 0x9, 0x8001, 0x5, 0x5, 0xfffffff7, 0xa, 0x400, 0x4, 0x5, 0x200, 0x6, 0x5, 0x4, 0x4, 0x3, 0x693, 0x40, 0x8, 0x6, 0x80000000, 0x1d209cda, 0x7, 0x4, 0x7fffffff, 0x63439b01, 0xfffffff8, 0xfffffff8, 0x7, 0x9, 0xdf44d6, 0x5, 0xfffff19c, 0x6, 0xed, 0x6, 0xf4d7, 0x9, 0x9, 0xffff, 0xadb, 0x16947a10, 0x3, 0x7, 0x6, 0xc, 0x1, 0x10000, 0x4, 0x9, 0xffff0000, 0x9, 0x9, 0x81, 0x7fffffff, 0x1, 0xda6, 0xf27e, 0x8001, 0xf, 0x0, 0xe7, 0x93c9, 0x3, 0x4, 0x9, 0x1, 0x8, 0x5, 0x4, 0x1, 0xb, 0x2, 0x3, 0x4, 0xffff, 0xbb8, 0x44cf, 0x6, 0xfffffff8, 0x2, 0xe877, 0x5, 0x1, 0x5, 0x1014, 0x1, 0x0, 0x3dd, 0x2, 0xffff5ad4, 0x5, 0x2, 0xc, 0x2, 0xf49, 0x65, 0x3, 0x5, 0xef6, 0x2, 0x719, 0x99bd, 0x3, 0x2d5cc7e1, 0x7fffffff, 0x2, 0x1, 0x9, 0x1ff, 0x3, 0xc263, 0xdc81, 0xda, 0x9, 0x400, 0xaed3, 0x9, 0x1, 0xffffff7f, 0x1400000, 0x3, 0xb0, 0x8001, 0x4800000, 0x5, 0xe12, 0x5c, 0x7, 0x4, 0xffff9327, 0xb65, 0x4f, 0x9, 0x7fffffff, 0x787f, 0x8, 0x200000, 0xf, 0x6, 0x2, 0x7, 0x3a31, 0x0, 0x3, 0xc, 0x101, 0x7fffffff, 0xfffffff7, 0x3, 0x5, 0x7fffffff, 0x9, 0x2, 0x7, 0x5, 0xfffffe00, 0xa88, 0x7eec, 0x8000, 0x0, 0x100, 0x682, 0x36a5, 0x100, 0xd2, 0x81, 0x0, 0x0, 0x2, 0xde, 0xf2d, 0x6d61, 0x3a1, 0x87ab, 0x4, 0xe, 0x7, 0xffff, 0x8ba, 0x7, 0x4, 0xfffffe00, 0x9, 0x8, 0xfffffff7, 0x6e04f75a, 0x0, 0x2, 0x4d, 0x4, 0x10000, 0x8, 0x6, 0x1, 0x8, 0x9, 0x8, 0x80, 0x1, 0x2, 0x1, 0x3, 0x7, 0xcd, 0x6, 0xc6, 0xf3, 0x10, 0x7, 0x27a, 0x7, 0xff28, 0x2, 0xdb9, 0x7, 0x0, 0x10, 0xfff, 0x3, 0x6, 0xe, 0xa6d, 0xfc46, 0x202, 0x10000, 0xdee, 0xfffffff9, 0x7d08, 0x4aa, 0x7fffffff, 0x10, 0x6, 0x9, 0x8, 0x4, 0x9, 0x7, 0x10, 0x8, 0x2, 0x5b7, 0x7ff, 0x9d1, 0xfffffffe, 0x4, 0x8, 0x18, 0xff, 0x8, 0x9, 0xfffffffa, 0x1, 0x7fff, 0x6022, 0x401, 0x10000, 0x5, 0xfb3f, 0x2, 0x317b, 0x0, 0x2dd, 0x4, 0x10001, 0x3, 0xd4ef, 0x5, 0x1, 0x10001, 0x9, 0x7, 0xf, 0x1, 0x6, 0x100, 0x5, 0xff, 0x8, 0x7, 0x5, 0x0, 0xba]}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DIOCNATLOOK(r1, 0xc0504417, &(0x7f0000000b00)={@v4, @v6=@loopback, @v4=@rand_addr=0x2, @v6=@ipv4, 0x28c, 0x0, 0x9, 0x2, 0x0, 0x45, 0x1a, 0xc, 0x3}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 121.105868ms ago: executing program 3 (id=12): r0 = openat$dri(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x8000, 0x0) (async) mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0x58cf) (async) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) (async) setuid(0xee01) (async) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xa, &(0x7f00000001c0)="03000000", 0x4) (async) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffff9c, 0xc00464b4, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x80086409, &(0x7f0000000140)={r2, 0x10}) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000001580), 0x80, 0x0) ioctl$DIOCGETRULESETS(r3, 0xc444443a, &(0x7f0000000580)={0x9, '.\x00', './file0\x00'}) select(0x40, &(0x7f0000000000)={0xfffffffffffffffc, 0x2, 0x0, 0x3, 0x0, 0x3fe, 0x4}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) openat$pci(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) select(0x40, &(0x7f0000000100)={0x7, 0x85, 0x0, 0x8000000000001, 0x0, 0x69, 0x0, 0xfff}, &(0x7f00000024c0)={0x8, 0xffffffffffffe821, 0x1, 0x0, 0x8000000000000, 0x9, 0x8, 0xffffffffffffffff}, 0x0, 0x0) (async) unveil(0x0, &(0x7f0000000080)='c\x00') 13.206446ms ago: executing program 2 (id=13): r0 = syz_open_pts() (async) r1 = getsid(0x0) r2 = getsid(r1) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x3, 0x0, 0x800000000000, 0x100030000007f, r2}) (async) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x2ff, 0x100000001}) (async) fcntl$lock(r0, 0x9, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x300000005}) 8.034591ms ago: executing program 1 (id=14): openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0xa8, 0x0) open(0x0, 0x2, 0x0) ioctl$WSKBDIO_SETBELL(r0, 0x80105703, 0x0) sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x36, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) poll(0x0, 0x0, 0x400) ioctl$WSKBDIO_SETENCODING(r0, 0x80045710, &(0x7f00000000c0)=0x5ca2) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x20007606, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write(r2, &(0x7f00000002c0)="3dacaf2007efe7f2aacb103ef5614b7ee991217204933059d9fcfbc5d67adfc708ba90e85c3252b8101709dc11c37cee01b0a4070000005e0984f204ef676d7a15176cbe2584124bbc6eaeffa4739da44ab12627c0b68f4f6b2a5fa778b0241132b072462a736f1b3a5227eb254db06f148a13f278b8f1efb35410a0a7febc5571457cab4d2763c894eb64c90f92efc71616839cd5b627c5e619747c135a97a2e37ccf6b1bc0dd5d56d3cecd8029ecfb924772ed6fe4798b990c82e93aab095f25642c116a27a7babca09430204e2ee06ac8cce7404e", 0xffffff33) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) openat$wskbd(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x4, 0x0, 0x8000003}, {0x0, 0x0, 0x40, 0xc}, {0x46, 0x0, 0x0, 0x37f}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = fcntl$dupfd(r3, 0xc, 0xffffffffffffffff) socket(0x17, 0x4, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setrlimit(0x8, &(0x7f0000000140)={0x9, 0xffffffffffffff01}) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$KDGKBMODE(r4, 0x40044b06, &(0x7f00000000c0)) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) 2.860342ms ago: executing program 2 (id=15): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mknod(0x0, 0xc000, 0x65b3) truncate(&(0x7f0000000000)='./file0\x00', 0xafffe) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) pwritev(r1, &(0x7f00000005c0)=[{&(0x7f0000000380)="1304964a", 0x4}], 0x1, 0x6423) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0) 2.084766ms ago: executing program 6 (id=16): r0 = socket$inet(0x2, 0x3, 0xfc) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000)) 445.061µs ago: executing program 5 (id=6): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendsyslog(&(0x7f0000000000)="dd23706b634ecda7caadc00ea73830b14df0b5c3cd5e2f0bea0329c29adddf44c9b4e9912979c91a235955ef740e26f7281d481200148df40426db38b8fcce248dd7febfe0d180eb1d74b157fc023aa2785f0cb351f2d41190f8caa87edfac29823864b0943a00b7b763be9fb68937a14a5c3f128bdf963ad9e9f84e81d848ed25609388a088500e1dbcf7921245a7235571f32894aa77d7a69d418944e62506b5b1502e5ab889c865e90afe28ff7d7fdd", 0xb1, 0x2) sysctl$net_inet_etherip(&(0x7f0000000000)={0x4, 0x2, 0x6c, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) getresgid(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)) sysctl$net_inet_etherip(&(0x7f0000000040)={0x4, 0x2, 0x61, 0x1}, 0x4, &(0x7f0000000080)="4b54be1aa3b0847ece930b36612d306773f9a001be9ec8804e972a54997651abd2acb200181788fe4f685c6c53b5987f2bf8ecddcebd71c7b2d71e7b01226e5e8a9df991d139c16bd746e39c49b63745feda7e0b186a15b07281ce4cf1625d4d8496e127fe15e3315f802a881d97e64d9188d58a57a1552925e0ec4ce3328bba99c5cda49dcbd1fe5130de418967b8157fba4b59b80870707b73bcc30ca4e4a7324c", &(0x7f0000000140)=0xa2, &(0x7f0000000180)="5a23343a881031bf2ef6dd82d5ec4a4b2b9bf09504c617c70400b18fac2013fe6cf27d4d538a8288f085d0757a2a9865315296d474cfd5b43b6697afea8b0abc9e0c5134561a7c8cf2c375319c96fa13e8d3416816647118fa2cda2f9dbaa4b3dff9cc83439d187f8e6d4b41bb76c11cebe1a7c365a74e9752d1e8082f819f86023090ce2501c7804e3503394bd37d54529e19b2c1f08c430449992f45c94b57a1ce40704b2e88b919a2f0eb255cd6008ead6272be3f4010474ecdc1c5c086d67479f83426c3cf094a144bb9ef3dc9340439d3fd914c292f33006e609a703d89e7cde1010f7e38a059e8291706fde181e29a9a", 0xf3) 0s ago: executing program 6 (id=17): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000380)={0x10000, [{0x1, 0x2}, {0x0, 0xfffffffd}, {}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0xc8}, {0x132435cf0b6608e6, 0x2}, {0x0, 0xb354}, {0x2}, {0x3, 0x204}, {0x3, 0xfffffffd}, {}, {0x0, 0x7fffffff}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0x2000000}, {0x0, 0x3}, {0x1}, {0x1, 0xfffffffc}, {0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x1}, {0x2, 0x3}, {0x3}, {0x1}, {}, {0x0, 0x9}, {0x1, 0x57fd}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) r1 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, r1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r2, 0x0) utimensat(r0, 0x0, &(0x7f0000000100)={{0xfffffffffffffffe, 0x9}, {0x2, 0x1}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts. malloc(): allocation too large, type = 127, size = 1476395004 uvm_fault(0xfffff4806f36a3d8, 0xf, 0, 1) -> e kernel: page fault trap, code=0 Stopped at ktrops+0x58: movq 0x10(%r14),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND *348436 37036 0 0 0x4000000 0K syz-executor 6653 2270 0 0x2 0x1 1 syz-executor ktrops(ffff8000fffee2b0,ffffffffffffffff,0,a0c7df9f,fffff4806b889b08,fffff480097fd5b0) at ktrops+0x58 doktrace(fffff4806b889b08,4,20c7df9f,0,ffff8000fffee2b0) at doktrace+0x6bd sys_ktrace(ffff8000fffee2b0,ffff80003c3f5900,ffff80003c3f5850) at sys_ktrace+0x11c syscall(ffff80003c3f5900) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xe4cb4812440, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: uvm_fault(0xfffff4806f36a3d8, 0xf, 0, 1) -> e ddb{0}> trace ktrops(ffff8000fffee2b0,ffffffffffffffff,0,a0c7df9f,fffff4806b889b08,fffff480097fd5b0) at ktrops+0x58 doktrace(fffff4806b889b08,4,20c7df9f,0,ffff8000fffee2b0) at doktrace+0x6bd sys_ktrace(ffff8000fffee2b0,ffff80003c3f5900,ffff80003c3f5850) at sys_ktrace+0x11c syscall(ffff80003c3f5900) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xe4cb4812440, count: -5 ddb{0}> show registers rdi 0xffff80002a380000 rsi 0x5b79 __ALIGN_SIZE+0x4b79 rbp 0xffff80003c3f5610 rbx 0xfffff480097fd5b0 rdx 0xffff80002a380000 rcx 0x5b78 __ALIGN_SIZE+0x4b78 rax 0xffffffff823407d3 ktrops+0x43 r8 0xfffff4806b889b08 r9 0xfffff480097fd5b0 r10 0x20007ad4a818aa01 r11 0xd3190887a8d0d83e r12 0xffff8000fffee2b0 r13 0xffffffffffffffff r14 0xffffffffffffffff r15 0xa0c7df9f rip 0xffffffff823407e8 ktrops+0x58 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c3f5590 ss 0x10 ktrops+0x58: movq 0x10(%r14),%r14 ddb{0}> show proc PROC (syz-executor) tid=348436 pid=37036 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=17, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000fffef4d8,0xffff8000fffee028 process=0xffff80003c3b66a0 user=0xffff80003c3f0000, vmspace=0xfffff4806f36a3d8 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 15858 426312 53255 0 2 0 syz-executor 37036 114361 53778 0 2 0 syz-executor *37036 348436 53778 0 7 0x4000000 syz-executor 69589 165126 69336 60929 2 0x10 syz-executor 69589 87236 69336 60929 2 0x4000010 syz-executor 69589 32177 69336 60929 3 0x4000090 fsleep syz-executor 74072 157365 9213 0 2 0 syz-executor 74072 383231 9213 0 3 0x4000080 fsleep syz-executor 74072 148510 9213 0 3 0x4000080 fsleep syz-executor 77172 320088 14762 0 2 0 syz-executor 77172 369435 14762 0 3 0x4000080 fsleep syz-executor 71038 315136 30569 0 2 0 syz-executor 71038 474118 30569 0 3 0x4000080 fsleep syz-executor 71038 329186 30569 0 3 0x4000080 fsleep syz-executor 87668 102978 58576 0 2 0 syz-executor 87668 435408 58576 0 2 0x4000000 syz-executor 87668 170563 58576 0 3 0x4000080 fsleep syz-executor 58576 256843 2270 0 2 0xc82 syz-executor 37372 45016 2270 0 2 0x2 syz-executor 53255 61429 2270 0 2 0x2 syz-executor 30569 520449 2270 0 2 0xc82 syz-executor 69336 281262 2270 0 2 0xc82 syz-executor 9213 447325 2270 0 3 0x82 nanoslp syz-executor 14762 273641 2270 0 2 0xc82 syz-executor 53778 496701 2270 0 3 0x82 nanoslp syz-executor 2270 6653 37529 0 7 0x3 syz-executor 37529 290098 32101 0 3 0x10008a sigsusp ksh 32101 223052 51142 0 3 0x98 kqread sshd-session 51142 426541 42984 0 3 0x92 kqread sshd-session 75619 274661 1 0 3 0x100083 ttyin getty 42984 136274 1 0 3 0x88 kqread sshd 64601 256023 9357 74 3 0x1100092 bpf pflogd 9357 105468 1 0 3 0x80 sbwait pflogd 45516 468702 12851 73 3 0x1100090 kqread syslogd 12851 284757 1 0 3 0x100082 sbwait syslogd 12062 9841 1 0 3 0x100080 kqread resolvd 44476 494060 5483 77 3 0x100092 kqread dhcpleased 16073 6592 5483 77 3 0x100092 kqread dhcpleased 5483 64849 1 0 3 0x80 kqread dhcpleased 84672 503161 0 0 3 0x14200 bored smr 28520 21712 0 0 2 0x14200 zerothread 81200 390447 0 0 3 0x14200 aiodoned aiodoned 1600 496796 0 0 3 0x14200 syncer update 59158 214676 0 0 3 0x14200 cleaner cleaner 7153 384846 0 0 3 0x14200 reaper reaper 99013 3037 0 0 3 0x14200 pgdaemon pagedaemon 8228 845 0 0 3 0x14200 bored viomb 9139 257701 0 0 3 0x40014200 acpi0 acpi0 87114 514162 0 0 3 0x40014200 idle1 95157 451582 0 0 3 0x14200 bored softnet1 58161 278826 0 0 3 0x14200 bored softnet0 70153 345065 0 0 3 0x14200 bored systqmp 76352 397051 0 0 3 0x14200 bored systq 53297 20068 0 0 3 0x14200 tmoslp softclockmp 90147 134251 0 0 3 0x40014200 tmoslp softclock 43222 338233 0 0 3 0x40014200 idle0 1 373535 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 37036 (syz-executor) thread 0xffff8000fffee2b0 (348436) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83b15540) #0 witness_lock+0x5f1 #1 __mp_acquire_count+0x58 #2 sleep_finish+0x2d8 #3 biowait+0xc6 #4 bwrite+0x2e7 #5 ffs_update+0x2fe #6 ffs_truncate+0xc9b #7 ufs_inactive+0x202 #8 VOP_INACTIVE+0x104 #9 vrele+0x129 #10 ktrsettrace+0xe7 #11 ktrops+0x26c #12 doktrace+0x6bd #13 sys_ktrace+0x11c #14 syscall+0xb17 #15 Xsyscall+0x128 Process 87668 (syz-executor) thread 0xffff80003c3b8d18 (435408) exclusive rrwlock inode r = 0 (0xfffff4806c86b688) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x2bd #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11051 12084K 12214K 166960K 12154 0 pcb 17 12K 12K 166960K 19 0 rtable 245 7K 7K 166960K 375 0 pf 34 17K 18K 166960K 46 0 ifaddr 43 7K 7K 166960K 45 0 ifgroup 55 2K 2K 166960K 58 0 sysctl 1 1K 9K 166960K 5 0 counters 70 37K 37K 166960K 70 0 ioctlops 0 0K 4K 166960K 1483 0 iov 0 0K 16K 166960K 2 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1293 81K 81K 166960K 1367 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 93K 166960K 150 0 proc 71 115K 164K 166960K 554 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 1 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 31 148K 148K 166960K 31 0 exec 0 0K 1K 166960K 391 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 227 175K 185K 166960K 3366 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 42 84K 104K 166960K 1336 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 2 0K 0K 166960K 2 0 NDP 28 2K 2K 166960K 28 0 temp 37 9110K 9126K 166960K 7965 0 kqueue 17 28K 28K 166960K 32 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 38 0 35 1 0 1 1 0 8 0 rtentry 176 112 0 1 6 0 6 6 0 8 0 unpcb 144 43 0 26 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 10 0 4 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 71 0 61 1 0 1 1 0 8 0 nd6 152 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 1 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 19 0 0 1 0 1 1 0 8 0 pfstkey 128 19 0 0 1 0 1 1 0 8 0 pfstate 448 19 0 0 3 0 3 3 0 8 0 pfrule 1360 21 0 15 2 0 2 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 453 0 0 29 0 29 29 0 8 0 art_table 40 455 0 0 5 0 5 5 0 8 0 art_node 32 112 0 11 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1592 0 115 93 0 93 93 0 8 0 ffsino 296 1592 0 115 114 0 114 114 0 8 0 nchpl 144 1809 0 103 64 0 64 64 0 8 0 vnodes 216 1684 0 0 94 0 94 94 0 8 0 namei 1024 5554 0 5554 2 0 2 2 0 8 2 percpumem 16 50 0 0 1 0 1 1 0 8 0 kstatmem 264 27 0 0 2 0 2 2 0 8 0 scxspl 216 7034 0 7034 4 2 2 3 1 8 2 plimitpl 152 30 0 12 1 0 1 1 0 8 0 sigapl 424 476 0 429 7 0 7 7 0 8 1 knotepl 120 549 0 0 17 0 17 17 0 8 0 kqueuepl 224 29 0 16 1 0 1 1 0 8 0 pipepl 344 130 0 103 3 0 3 3 0 8 0 fdescpl 528 460 0 429 3 0 3 3 0 8 0 filepl 160 1628 0 1411 10 0 10 10 0 8 0 lockfpl 104 13 0 11 1 0 1 1 0 8 0 lockfspl 48 7 0 5 1 0 1 1 0 8 0 sessionpl 144 24 0 15 1 0 1 1 0 8 0 pgrppl 48 32 0 15 1 0 1 1 0 8 0 ucredpl 104 93 0 78 1 0 1 1 0 8 0 zombiepl 144 429 0 429 1 0 1 1 0 8 1 processpl 1232 476 0 429 5 0 5 5 0 8 0 procpl 664 506 0 449 6 0 6 6 0 8 0 sockpl 752 154 0 124 4 0 4 4 0 8 1 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 121 0 0 16 0 16 16 0 8 0 mcl2k 2048 15 0 0 2 0 2 2 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 135 0 0 9 0 9 9 0 8 0 bufpl 280 2744 0 105 189 0 189 189 0 8 0 anonpl 32 4866 0 0 41 0 41 41 0 246 1 amapchunkpl 152 8920 0 8468 21 1 20 20 0 158 1 amappl16 200 1827 0 1714 6 0 6 6 0 8 0 amappl15 192 37 0 37 1 0 1 1 0 8 1 amappl14 184 438 0 437 1 0 1 1 0 8 0 amappl13 176 140 0 128 1 0 1 1 0 8 0 amappl12 168 716 0 687 2 0 2 2 0 8 0 amappl11 160 3 0 3 1 1 0 1 0 8 0 amappl10 152 81 0 67 1 0 1 1 0 8 0 amappl9 144 278 0 278 1 0 1 1 0 8 1 amappl8 136 187 0 185 1 0 1 1 0 8 0 amappl7 128 162 0 149 1 0 1 1 0 8 0 amappl6 120 173 0 171 1 0 1 1 0 8 0 amappl5 112 102 0 92 1 0 1 1 0 8 0 amappl4 104 300 0 281 1 0 1 1 0 8 0 amappl3 96 1561 0 1456 3 0 3 3 0 8 0 amappl2 88 555 0 496 2 0 2 2 0 8 0 amappl1 80 10584 0 9982 15 0 15 15 0 8 0 amappl 88 2613 0 2458 4 0 4 4 0 92 0 uvmvnodes 80 101 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 460 0 429 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 460 0 429 1 0 1 1 0 8 0 vmmpekpl 168 5839 0 5807 2 0 2 2 0 8 0 vmmpepl 168 39299 0 37326 89 0 89 89 0 357 0 vmsppl 488 459 0 429 5 0 5 5 0 8 1 rwobjpl 80 14856 0 13753 24 0 24 24 0 8 0 pdppl 4096 927 0 858 101 16 85 85 0 8 16 pvpl 32 11198 0 0 91 0 91 91 0 265 0 pmappl 256 459 0 429 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 272 0 18 8 0 8 8 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace ktrops(ffff8000fffee2b0,ffffffffffffffff,0,a0c7df9f,fffff4806b889b08,fffff480097fd5b0) at ktrops+0x58 doktrace(fffff4806b889b08,4,20c7df9f,0,ffff8000fffee2b0) at doktrace+0x6bd sys_ktrace(ffff8000fffee2b0,ffff80003c3f5900,ffff80003c3f5850) at sys_ktrace+0x11c syscall(ffff80003c3f5900) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xe4cb4812440, count: -5 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83b14d40) at __mp_lock+0x192 ktrgenio(ffff8000ffffd230,3,1,ffff800000c40430,38) at ktrgenio+0x228 dofilewritev(ffff8000ffffd230,3,ffff80002a24e5f8,0,ffff80002a24e6b0) at dofilewritev+0x58e sys_write(ffff8000ffffd230,ffff80002a24e760,ffff80002a24e6b0) at sys_write+0xa2 syscall(ffff80002a24e760) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7a2eaeeff1c0, count: 6 ddb{1}> trace x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83b14d40) at __mp_lock+0x192 ktrgenio(ffff8000ffffd230,3,1,ffff800000c40430,38) at ktrgenio+0x228 dofilewritev(ffff8000ffffd230,3,ffff80002a24e5f8,0,ffff80002a24e6b0) at dofilewritev+0x58e sys_write(ffff8000ffffd230,ffff80002a24e760,ffff80002a24e6b0) at sys_write+0xa2 syscall(ffff80002a24e760) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7a2eaeeff1c0, count: -9