Warning: Permanently added '10.128.0.59' (ECDSA) to the list of known hosts. 2020/04/29 20:08:02 fuzzer started 2020/04/29 20:08:06 dialing manager at 10.128.15.235:31134 2020/04/29 20:08:06 syscalls: 338 2020/04/29 20:08:06 code coverage: enabled 2020/04/29 20:08:06 comparison tracing: enabled 2020/04/29 20:08:06 extra coverage: support is not implemented in syzkaller 2020/04/29 20:08:06 setuid sandbox: enabled 2020/04/29 20:08:06 namespace sandbox: support is not implemented in syzkaller 2020/04/29 20:08:06 Android sandbox: support is not implemented in syzkaller 2020/04/29 20:08:06 fault injection: support is not implemented in syzkaller 2020/04/29 20:08:06 leak checking: support is not implemented in syzkaller 2020/04/29 20:08:06 net packet injection: enabled 2020/04/29 20:08:06 net device setup: support is not implemented in syzkaller 2020/04/29 20:08:06 concurrency sanitizer: support is not implemented in syzkaller 2020/04/29 20:08:06 devlink PCI setup: support is not implemented in syzkaller 2020/04/29 20:08:06 USB emulation: support is not implemented in syzkaller 20:08:10 executing program 1: r0 = getegid() getgroups(0x8, &(0x7f0000000000)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) setgroups(0x5, &(0x7f0000000080)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r3]) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x5, r5, 0x0, 0x0, r2, 0x9, 0x6}, 0xc2, 0x6, 0x400}) ioctl$WSMOUSEIO_SRES(0xffffffffffffffff, 0x80045721, &(0x7f0000000240)=0x6) ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000308, r4) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x20, 0x12) getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f0000000300), 0xc) getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f0000000340), 0xc) getitimer(0x2, &(0x7f0000000380)) r7 = accept(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) ftruncate(r7, 0x0, 0xe17b) getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xc) getgroups(0xa, &(0x7f0000000440)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2]) setregid(r8, r9) r10 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$BIOCSBLEN(r10, 0xc0044266, &(0x7f0000000480)=0x3b56) 20:08:10 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) renameat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vmm\x00', 0x8000, 0x0) ioctl$VMM_IOC_RESETCPU(r2, 0x82405605, &(0x7f0000000140)={0x3ff, 0xffff8462, {[0x8000, 0x4cac, 0x9, 0x4, 0x9, 0x100, 0x5, 0x1, 0x8, 0x2, 0xffffffffffff0001, 0x5, 0x2, 0xd8, 0x3ff, 0xffffffffffffffff, 0x8, 0x7fffffff], [0xffffffffffffffb4, 0x9, 0x3, 0xfffffffffffffeff, 0x4, 0x0, 0x80, 0x5b1, 0xff, 0x23], [0x7dd7, 0x4, 0x3, 0x283e, 0x0, 0x2, 0x7], [0x7, 0x1ff, 0xfff, 0xff, 0x4, 0x7], [{0x6, 0xa6, 0x5, 0x7}, {0x7, 0x10001, 0x8001, 0x78b1}, {0x8, 0x24, 0x5, 0xae4f}, {0x1a, 0x114, 0x3, 0x8}, {0xfffe, 0x81, 0x5, 0x81}, {0xff, 0x8, 0xffffffff, 0x3}, {0x9, 0x3, 0x6, 0x5}, {0x0, 0xea0, 0x3, 0x76}], {0x3, 0x5, 0x1000, 0xfff}, {0x6bb, 0xc36, 0x8, 0x5}}}) r3 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$VMM_IOC_CREATE(r3, 0xc5005601, &(0x7f0000000380)={0x10, 0x1, 0x4, 0x0, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x80000000}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x5}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3ff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x80}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x8000}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x3}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x10000}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1ff}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x8}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4ce2}, {&(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x8001}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4}], ['./file0\x00', './file0\x00', './file0\x00', './file0\x00'], './file0/file0\x00', './file0\x00', './file0\x00', ['./file', './file', './file', './file'], 0x2}) pipe2(&(0x7f0000000880)={0xffffffffffffffff}, 0x10004) openat(r4, &(0x7f00000008c0)='./file\x00', 0x8000, 0x4) r5 = open(&(0x7f0000000900)='./file0/file0\x00', 0x80, 0x1) ioctl$TIOCGTSTAMP(r5, 0x4010745b, &(0x7f0000000940)) sendmsg$unix(r0, &(0x7f0000000cc0)={&(0x7f0000000980)=@abs={0x1, 0x0, 0x3}, 0x8, &(0x7f0000000c40)=[{&(0x7f00000009c0)="40b860555df96c34438c6f9be92cd98bd63595270aa62dab5c4c27a28e598ab3028776df6e261224c2d618d76ffd6035", 0x30}, {&(0x7f0000000a00)="556d9cdf3760eaf6d49447ad851e0a4175778c81b286ad46989a5e493c94f7f0e1c60eaacc3d02618c4bdf417cca0689580ed6fa8c236b3515ef348cce117246ed592ba76db6c963e53d3c405039c6c0d26060b52313a7efdce074645ca68e003b8083bb522812f59acf724d6e3b669fb7e0b0b64ad089bbeaee10d32f2c763be2ba", 0x82}, {&(0x7f0000000ac0)="16fe4011c74da2035237744696663f8aa30f8117b4af77b91f0133abc5ee148d87f69862aebf92e08826b2188490f780bcad1997b7d14c6d922ae81f53f9ee545cd9a9900f219814effd6a534ae0923102a6678fa6f0b1efc125904f15bb8975db3c12bee46052bb5295b29125", 0x6d}, {&(0x7f0000000b40)="9574dc3ee75e703e0005b04c11eec6585f2025ad35821291fc88fa68318c48473104525efba5a85cfedacc4032948629db4049ef945952a6080b2a1153a89f342a960d75c4347f49e6a487c246d2a8c35b9ff70ef020ffecafa2f2882c38c432a49f82f439f1da752e22", 0x6a}, {&(0x7f0000000bc0)="fa6472afde8e07b7807a97da00b811e37ca524618b744791c2ca8b48e71500fac12a56e05b95398f09b92b122048e707c1f3c597fcf0b46bd12e73132e53ccf49f1ef57b21cea5f02e019f6d66c901dd5d35ddcd290d09c3674dd2413ddb02e979120ef30db67d521c74e8d8206907655f", 0x71}], 0x5, 0x0, 0x0, 0x409}, 0xd) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/diskmap\x00', 0x0, 0x0) r6 = accept(0xffffffffffffffff, &(0x7f0000000d40)=@in, &(0x7f0000000d80)=0xc) connect$unix(r6, &(0x7f0000000dc0)=@file={0x1, './file0\x00'}, 0xa) ioctl$TIOCSPGRP(r1, 0x40047477, &(0x7f0000000e00)) open(&(0x7f0000000e40)='./file0\x00', 0x800, 0x40) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/bpf\x00', 0x200, 0x0) ioctl$BIOCGRTIMEOUT(r7, 0x4010426e, &(0x7f0000000ec0)) ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0x8010426d, &(0x7f0000000f00)={0x101, 0x6}) 20:08:10 executing program 1: r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x400000002, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x3}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x1ff, 0x0, "000000000000000100002000"}) close(r0) socketpair(0x2, 0x4, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGFLAGS(r3, 0x4004745d, &(0x7f00000002c0)) write(r2, &(0x7f0000000100)="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", 0xfe) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x3, 0x0) setsockopt(r4, 0x1000000000029, 0xa, &(0x7f0000000000)="06000000", 0x4) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r1, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20, 0x0) setsockopt$inet_opts(r5, 0x0, 0x1, &(0x7f0000000200)="e9c030bd64d2fa3adf066f5bb8e0ef766a3c5fa7b12af6b3769f1e49acfc40080c85718afe9f0efb69cb33453f626f50f0e188a0e59f29d21e4149ffd4da1bae02ab00991a17799c51cb4329769b45e3ed62c61dadbbe56f0d508df3070d965e3c748d73b84a95827615ebff2806bcf97a3b946fdb96606361b5466d33e5de72c5594836f744b7", 0x87) 20:08:10 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffffe, 0x3, 0x1, 0xfffffffffffffff8}], 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTAT(r0, 0x20007465, &(0x7f0000000080)) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bpf\x00', 0x201, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000180)) pwrite(r1, &(0x7f00000000c0)="fbaf8a8d1a029be96914f6357e3a", 0xe, 0x0, 0x0) 20:08:10 executing program 1: setsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, &(0x7f0000000040)={0x1}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x4, 0xb, &(0x7f0000000080)="d5ff9668c23a62c6def5514980bca80fc61b7cea09b028634a1160e4ada6924e36ace489b40aadd0", 0x28) setsockopt(r0, 0x29, 0x80000000000000a, &(0x7f0000000040)="90000000", 0x4) 20:08:10 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x8613a) r0 = open(&(0x7f0000000040)='./bus\x00', 0x2, 0x6) write(r0, &(0x7f0000000240)="220e2a", 0x3) r1 = getpgid(0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{}, 0x44001000e, 0x400008001, r1}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCLOCK(r2, 0x20004276) ioctl$BIOCGDIRFILT(r2, 0x4004427c, &(0x7f0000000540)) pwritev(r2, &(0x7f0000000600)=[{&(0x7f0000000080)="d2ff3643db3f42d1c6b307a4fec361ab92634c61155eda5ab7bf199055425464272ef76fa678fa842bcdbee496b78a2732a0aeb800339bec4f4f9a60ccb16a64a06803efd55813cf1fcb358d76728ea5fc7de7f5dd8fd49192ee147700944ddcb29b1c6fa9416a6fee766dbfb8c41d0f1a579566ce9f8f341dd9dda9029605ed04ab527873e96f28652819efda5d3f783cc1371a98e10672cbc333bdf63e3864ae5b2b90d6c9c205fd14b19e1c34cf17488bb566d552cd1126ad152c15d4e75d9ae4e2c4f914ebaeb77ea09333b7b576e98b7154d01e7f5d3956a548a1b04fedc2e0", 0xe2}, {&(0x7f0000000200)}, {&(0x7f0000000300)="8a8a4f3a80800057ca90bba8f09b01aec05afa3faf879242793103c3ed30d6f9cd1b978a799126709e57a7a5f6b07c30b9b7e43b33dc0d4ae231a0903839032dd8420e7b77ee6c2302ee121db504e5478f3938950af23918d1543864c6a5731c01f802c14c43", 0x66}, {&(0x7f0000000380)="00343f963608b29ce806b5a1b9fcac80e277d36585a29c97c3f4d347bf70017debc9dd0da687cb86eebf2b22b496ba626fb62c90d581b58a8121e45f1873df80993025aaac6e174ddd1e7a1e76943d46e520abd6eea23f0fa5ddaf253ee9e782801fe0ff4d9834466a249539536be77c27b14980007fa88f70b0d45bd73caaba324f02de609ecd2436e44f6650fb3417962639e6369c1c3f95fef77c99374d3d501613f2c67b1e58c00564e07a9b0be708911baea8435878f573a3dafc54007640cc", 0xc2}, {&(0x7f0000000480)="9b48cc0c0059a5c6adbd1866d8fb5dc3b92643e51f825b6df8bb3e956a53cad2d3c2ae91e138ba5701b9b15d2ca3ebc4857837d415c817345f6bcc33804f5550a4c12f12917bfe2726f166f943107ed907cf66a38c047802658e10cd448d313fe05a5bb0534a169c23982f745b7056072ab29844d356e3acdbc95a1027b65f2cc2d00524e1ee96ca7d13488388057dbd7b8de3836a94edad1b91bb2ddbfd3baa80342e241cde44721a9c839ff0c92169bc86abb42adc5a5762853f128e7fe8", 0xbf}, {&(0x7f0000000540)="826d1ab26b61c540560daac3ec4d8903f53d25bfada5c837f54eb1be1aeca967df7353f435b5fee5a968e0ecdcb5cb7833095e2298b092e4979c6f676d7cba6a068d228878c15aefe55904c55b1d6e53c76ca033115b3d974889baa91add21f27ce92ec133ab5bbb9b9411686556385d4dfecc62b8bbafcc4a6d061c3fed7346d33213c44faa77d99dcff76e802b4a71dcc69c0a0d2597c4490e9f39", 0x9c}], 0x6, 0x0, 0x3f) 20:08:10 executing program 0: ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "000000000000000100002000"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r1 = socket(0x18, 0xc002, 0x0) socket(0x20, 0x0, 0x5) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) dup2(r1, r0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x43cb9, 0x4) r2 = dup(r0) sendto$inet6(r2, &(0x7f00000001c0)="348283560be1b2c4a82c37eec4e13822948983c2b76da98af16dd3dd252e31bae50a76510f236cd22369fee264439cd1bd8877c082bea869038c103df3451140388fb51f61dfb8378c3cee38e188529a4fc8a7eaa9cad1681153f9364e049752f4617fa956fe19fa1ca4268c14f31a111a5e28bb557d3bbf639fe56bd4e0f42dc911ff42d167aecee9291eb05f4c72582134000000000000000000000000000000d597c26374a5203f1415656905391dade1dccf1ee119c11350b8ef7164ad1948cebc3ab8d4b6d3bf958070fd2ebd1414236e968d7c7d34bb5ba84f56f875", 0xffa1, 0xa, 0x0, 0xffffffffffffff87) 20:08:10 executing program 1: setuid(0xee01) r0 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000000)=0x3, 0x4) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000100), 0xc) r1 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x200, &(0x7f0000000000)=0x3, 0x4) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000040)=""/11, &(0x7f00000000c0)=0xb) 20:08:10 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x60}, {0x3d}, {0xffee}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$BIOCGDIRFILT(r1, 0x4004427c, &(0x7f0000000540)) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000000)=0x1) syz_emit_ethernet(0x92, &(0x7f0000000300)={@remote, @remote, [], {@ipv4={0x800, {{0xf, 0x4, 0x0, 0xc, 0x84, 0x68, 0xfff9, 0x5, 0x2f, 0x0, @multicast1, @local={0xac, 0x14, 0x0}, {[@generic={0x82, 0xf, "97987504970f0c48e5ef67ed24"}, @noop, @lsrr={0x83, 0x17, 0x0, [@multicast1, @multicast1, @local={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @broadcast]}]}}, @icmp=@redirect={0x5, 0x2, 0x0, @rand_addr=0x8000, {0xe, 0x4, 0x2, 0x3a, 0x8000, 0x66, 0x3, 0x5, 0x2, 0x3, @multicast1, @local={0xac, 0x14, 0x0}, {[@ra={0x94, 0x6, 0x1f}, @lsrr={0x83, 0xb, 0x3f, [@empty, @local={0xac, 0x14, 0x0}]}, @timestamp={0x44, 0x8, 0x3, 0x0, 0x0, [{}]}, @noop, @ra={0x94, 0x6, 0x8}, @end]}}, "7e598cfbebcce6ef"}}}}}) 20:08:10 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x400, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x1c}, {0x20}, {0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$BIOCGDIRFILT(r1, 0x4004427c, &(0x7f0000000540)) ioctl$BIOCFLUSH(r1, 0x20004268) pwrite(r0, &(0x7f0000000240)="f6357e0195ee9800000000000000", 0xe, 0x0, 0x0) 20:08:10 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffffe, 0x3, 0x1, 0xfffffffffffffff8}], 0x40, 0x0, 0x0, 0x0) kevent(r0, &(0x7f0000000080)=[{{}, 0xfffffffffffffffa, 0x2b, 0xb0000001, 0x0, 0x7}], 0x0, 0x0, 0x0, 0x0) r1 = kqueue() r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x1, 0x50) faccessat(r2, &(0x7f0000000140)='./file0\x00', 0x20, 0x2) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bpf\x00', 0x0, 0x0) kevent(r1, &(0x7f0000000000)=[{{r3}, 0xffffffffffffffff, 0x82a0b7dcfa494625}], 0x8003, 0x0, 0xbb04, 0x0) r4 = kqueue() dup2(r4, r1) nanosleep(&(0x7f0000000180)={0x2, 0x24b}, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000140), &(0x7f0000000100)=0x1) write(r5, &(0x7f0000000200)="7acd7d94c3dd2b326ec9bc659a43e880095a6fd64eb3ec6a240a7bfde3ad57491e640f0b6acdd368139c4cc0cce2f990270da8aefd630f644ad65ceca9c3a6719be8865480f4e32f589f96ae7f78ea29152664e1b8f294158a0402e5ef0b9fa83cacf72a", 0x64) 20:08:10 executing program 0: r0 = syz_open_pts() nanosleep(&(0x7f0000000080)={0x68, 0x7feffffe}, 0x0) r1 = kqueue() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(r2, &(0x7f0000000180)=""/36, 0x24, 0x1001, &(0x7f00000001c0)={0x18, 0x3, 0x6, 0x2}, 0xc) kevent(r1, 0x0, 0x0, 0x0, 0xc4e, 0x0) kevent(r1, &(0x7f0000000000), 0x81, 0x0, 0x7, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000140), &(0x7f0000000100)=0x1) r4 = fcntl$dupfd(r3, 0xa, r0) fchmodat(r4, &(0x7f0000000000)='./file0\x00', 0x100, 0x4) kevent(r1, &(0x7f0000000040), 0x7fff, 0x0, 0xbb01, 0x0) 20:08:11 executing program 0: setitimer(0x0, &(0x7f0000000000)={{0x0, 0x440001f}, {0xffffffffffffffff}}, 0x0) 20:08:11 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x8613a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffffe, 0x3, 0x1, 0xfffffffffffffff8}], 0x0, 0x0, 0x0, 0x0) ioctl$WSDISPLAYIO_GVIDEO(r0, 0x40045744, &(0x7f0000000080)) r1 = open(&(0x7f0000000040)='./bus\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="220e2a", 0x3) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{}, 0x4c0010010}) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) 20:08:11 executing program 1: setrlimit(0x8, &(0x7f0000000040)={0x7, 0x95}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x0, 0x0, 0x100000001, 0x550f, "2ea86ee16eb595607fcfd71100"}) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000000)=0x1) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000140)={0x4, 0x140000, 0x81, 0x8, "60e2416c02f3ab9220a35290535c0984ff7bb6c2", 0xbc, 0x100}) writev(r1, &(0x7f0000001640)=[{&(0x7f0000000240)="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", 0x5d0}], 0x1) write(r0, &(0x7f0000000080)="2078f7b69541d6d97099188e90cd9c8e765f9ba2c14c0333177edf6d0f3295f5a5e8b04efdd700"/53, 0x241c5379a0e79b8e) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r2, 0x0, 0x0) shmctl$IPC_SET(r2, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000040)=""/210) shmctl$SHM_LOCK(r2, 0x3) 20:08:11 executing program 0: socketpair$unix(0x1, 0x9, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) getpeername$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000240)=0x8) r2 = socket$unix(0x1, 0x1, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0x1) r3 = dup2(r2, r0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x9}, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x1) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSDISPLAYIO_GETSCREEN(r3, 0xc0245755, &(0x7f0000000180)={0x4, './file0\x00', './file0/file0\x00'}) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xffae) getgroups(0x1, &(0x7f0000000100)=[r5]) lchown(&(0x7f00000000c0)='./file0\x00', r6, r8) 20:08:11 executing program 0: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x3, 0x0, 0x0, 0x0, 0x80, 0x800000000000000], [], [0x0, 0x0, 0x0, 0x100000000000009, 0xfffffffeffffffff], [0x0, 0x0, 0x482, 0xaa], [{}, {}, {}, {}, {0x2}, {0x0, 0x0, 0x0, 0x200}, {}, {0x0, 0xfffffffc}], {0x0, 0x0, 0x20}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCFLUSH(r1, 0x8080691a, &(0x7f0000000300)) 20:08:11 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000300)=[{0x5c}, {0x35}, {0x6}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/14]) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x8, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$BIOCGDIRFILT(r1, 0x4004427c, &(0x7f0000000540)) fchdir(r1) 20:08:11 executing program 0: r0 = semget$private(0x0, 0x4, 0x5b4) semop(r0, &(0x7f0000000240), 0x62) r1 = semget(0x2, 0x3, 0x650) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000300)=[0x1, 0x7, 0x2, 0xfff]) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000000)=[0x7, 0x20, 0xdce, 0x7, 0x1, 0x0, 0x4, 0x217, 0x8]) 20:08:11 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x7, &(0x7f0000000100)=[{0x1c}, {0x35}, {0x6}, {0xfffd, 0xff, 0xf9, 0x9}, {0xf001, 0x7, 0x4, 0x6}, {0x5849, 0x6, 0x20, 0x57}, {0xda, 0x40, 0xff, 0x7fff}]}) r1 = openat$klog(0xffffffffffffff9c, &(0x7f0000000040)='/dev/klog\x00', 0x100, 0x0) fcntl$getown(r1, 0x5) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000200)) 20:08:11 executing program 1: mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0x5dd9) r0 = open(&(0x7f0000000100)='./bus\x00', 0x20, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000140), &(0x7f0000000100)=0x1) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="808fcb8d281c606e903a92272d4bf6706b915b9c01b88e4f2ee63aca4f52391b8ad8dbe9e2b22ae76b721640985fc5c7368fdf1e91c9ec0035dd52ed94d916c32ec84c3e4d3b80c8ce4b78d8a426799ec96af7704cc2e2fc1de5f256f89dd3f16c2de36f18f32740e2898e2db4506328dff2020506c9cf413b9a7e", 0x7b}], 0x2, 0x0, 0x5) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KDSETRAD(r4, 0x20004b43) kevent(0xffffffffffffffff, &(0x7f0000000100)=[{{r3}, 0xfffffffffffffffe, 0x3, 0x1, 0xfffffffffffffff8}], 0x0, 0x0, 0x0, 0x0) ioctl$WSDISPLAYIO_GETSCREEN(r3, 0xc0245755, &(0x7f0000000000)={0x200, './bus\x00', './bus\x00'}) poll(&(0x7f0000001200)=[{r0}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140), &(0x7f0000000100)=0x1) r5 = open$dir(&(0x7f0000001340)='./bus\x00', 0x800, 0x100) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCLOCK(r6, 0x20004276) ioctl$BIOCGDIRFILT(r6, 0x4004427c, &(0x7f0000000540)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000140), &(0x7f0000000100)=0x1) r8 = openat$tty(0xffffffffffffff9c, &(0x7f0000001380)='/dev/tty\x00', 0x400, 0x0) kevent(r3, &(0x7f0000001280)=[{{0xffffffffffffff9c}, 0xffffffffffffffff, 0x10, 0x20000000, 0xff, 0x3f}, {{}, 0xfffffffffffffffa, 0x68, 0x80000000, 0x1, 0x1}, {{r1}, 0x7fffffffffffffff, 0x81, 0x40, 0x825, 0x8001}, {{}, 0xfffffffffffffff8, 0x0, 0x20000000, 0xffffffffffff30d6, 0x1000}, {{}, 0xfffffffffffffffb, 0x14, 0x2, 0xe61, 0xe9ee}, {{}, 0xfffffffffffffff9, 0x49, 0x2, 0x80000001, 0x100}], 0x0, &(0x7f00000013c0)=[{{r0}, 0x0, 0xe, 0x0, 0x40, 0xff}, {{r5}, 0xfffffffffffffffe, 0x81, 0x80, 0x7, 0xff}, {{r6}, 0xfffffffffffffffe, 0xa, 0x2, 0x800, 0x7ff}, {{r7}, 0xfffffffffffffff8, 0x20, 0x1, 0x9, 0x5}, {{r2}, 0xfffffffffffffffd, 0xd2, 0x2, 0x7fffffff, 0xaee5}, {{r8}, 0xfffffffffffffffa, 0x6, 0x4, 0x5, 0x2}], 0x6, &(0x7f0000001480)={0x9, 0x4}) 20:08:11 executing program 0: mknod$loop(&(0x7f0000000200)='./bus\x00', 0x6000, 0x0) open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) unlink(&(0x7f0000000000)='./bus\x00') 20:08:11 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x4000000001, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000280)={0x3, &(0x7f0000000000)=[{0x24}, {0x45}, {0x6, 0x0, 0x0, 0x10000103}]}) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f00000000c0)={0x101, 0x9}) ioctl$BIOCPROMISC(r0, 0x20004269) minherit(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) pwrite(r0, &(0x7f0000000240)="fbaf8a8d1a029be96914f6357e3a", 0xe, 0x0, 0x0) 20:08:11 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x80, 0x0) r1 = dup(r0) fchmod(r1, 0x44) fcntl$lock(r0, 0x9, 0x0) dup(0xffffffffffffffff) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r3 = dup(r2) ioctl$WSMUXIO_LIST_DEVICES(r3, 0xc1045763, &(0x7f00000001c0)={0x0, [{}, {0x0, 0x10}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x2000000}, {}, {}, {}, {0x3}, {0x3}, {}, {}, {0x2}, {}, {}, {0x0, 0x20}, {}, {}, {0x2}, {}, {}, {}, {0x1, 0x1f}, {}, {}, {0x1}]}) ioctl$VMM_IOC_READREGS(0xffffffffffffffff, 0xc2485607, &(0x7f0000000380)) r4 = syz_open_pts() ioctl$TIOCGTSTAMP(r4, 0x4010745b, &(0x7f0000000340)) r5 = socket(0x400000000018, 0x3, 0x3a) ftruncate(r1, 0x0, 0x40) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) setsockopt(r5, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0x66, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="9b3758e1", 0x4, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x2}, {0x18, 0x1}, 0x0, [0x7, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x3c) r6 = socket(0x18, 0x2, 0x0) sendmsg$unix(r6, &(0x7f0000000600)={&(0x7f0000000040)=@abs={0x1800, 0x0, 0x1}, 0x1c, 0x0}, 0x0) 20:08:12 executing program 1: mknod(&(0x7f0000000140)='./bus\x00', 0x80002005, 0x5300) r0 = open$dir(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x20004b08, &(0x7f0000000000)=0x28f) kevent(0xffffffffffffffff, &(0x7f0000000240)=[{{r0}, 0xfffffffffffffffe, 0x63}], 0x0, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x100, 0x0, 0x10b, 0x0) 20:08:12 executing program 0: ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x400000000018, 0x3, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) minherit(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0x18, 0x2, 0x0) r2 = dup2(r1, r1) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000040), 0x4) write(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="1851f8d668c5fff00799a9bb2a97cf397d17b5e7affb70c4643ac8316753849ed6917a0ab6d58e8198d829d843e1a03d152f20dff885a11900996c294edd732218e53be9db90bbe3780d98b9bbbb6602a3d5147096f8ed017789d74f761af7e6bd207b7d969295165787a70839abaddb99bf", 0x72, 0x8, &(0x7f0000000240)={0x18, 0x3, 0xdc7}, 0xc) ioctl$BIOCLOCK(r3, 0x20004276) ioctl$BIOCGDIRFILT(r3, 0x4004427c, &(0x7f0000000540)) dup2(r3, r1) sync() r4 = msgget(0x2, 0x3) msgctl$IPC_RMID(r4, 0x0) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000000180)=""/58) sendto$unix(r0, &(0x7f0000000080)="56ccb8ca6bd5b9a8df4b3d5bc46b5dfd366dc4c45d176d6b2f6cbb44baefb2d49af13ec7515302b6d731a089e4c2141ff2edc027792e5d8e048f0b53e10a93502318c521219debccc3", 0x49, 0xe, &(0x7f0000000100)=@abs={0x1, 0x0, 0x0}, 0x8) ioctl$VMM_IOC_RUN(r2, 0xc028756b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) 20:08:12 executing program 1: mknod(&(0x7f0000000000)='./bus\x00', 0x2181, 0xfffffffe) r0 = open(&(0x7f0000000040)='./bus\x00', 0x8000, 0x0) ioctl$TIOCNXCL(r0, 0x2000740e) ioctl$TIOCNOTTY(r0, 0x20007471) 20:08:12 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x86128) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="ef04e7529d740a4c986aa000000476ac7f59a22d498a937604c1eca3af6e2020a6c5286fbe28a8bcbf75bccf89627011ebe7b7628bcb20e8f467ba65e6494b03e6cb5f87d466f7b20a3487c9380000000000002000"/98], 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x40, 0x8c) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCLOCK(r2, 0x20004276) ioctl$BIOCGDIRFILT(r2, 0x4004427c, &(0x7f0000000540)) r3 = getpid() ktrace(&(0x7f0000000100)='./file0\x00', 0x0, 0x40000008, r3) fcntl$setown(r0, 0x6, r3) write(r2, &(0x7f00000001c0)="22f921c901001cbc74a7ea11cf805bf1fa48f4d24cd400004a526567dfb45c197ebcfe18a007024fce84ac8bd0c4f3ec6100010000000000006df1755a4d7b9dc93e29deb047e974937fd14409272de46153e40c26d96c834b0c1f154e6adf5a385ece499353d662cbe4bef7cb162d4dceca2925f5290c26fbf5451b16adb8ec73c919a52126f428be82f0cc7817759d0f8b1564e4b8136957c6b222f9c0897e32a3ffa2e8b16f6408dcd91a62d5f8d8", 0xb0) chflags(&(0x7f0000000040)='./bus\x00', 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCLOCK(r4, 0x20004276) ioctl$BIOCGDIRFILT(r4, 0x4004427c, &(0x7f0000000540)) fcntl$setstatus(r4, 0x4, 0x8) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff03}], 0x100000000000005e, 0x0, 0x0) 20:08:12 executing program 1: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [], [0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0xfbdfffffffffffff], [0x0, 0x0, 0x482]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCFLUSH(r1, 0x8080691a, &(0x7f0000000300)) shmget$private(0x0, 0x12000, 0x2, &(0x7f0000fee000/0x12000)=nil) 20:08:12 executing program 1: r0 = socket(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="62020207e0000001"], 0x1) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000080)=0x7, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair(0x6, 0x8000, 0x1, &(0x7f00000000c0)={0xffffffffffffffff}) accept$unix(r1, 0x0, &(0x7f0000000100)) bind(r0, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) clock_gettime(0x4, &(0x7f0000000140)) r2 = socket(0x2, 0x8002, 0x0) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x200, &(0x7f0000000080), 0x4) bind(r3, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) setsockopt$sock_int(r3, 0xffff, 0x1002, &(0x7f0000000040), 0x4) connect$unix(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="620500000000000000d1"], 0x10) write(r2, 0x0, 0x0) 20:08:12 executing program 0: select(0xfffffffffffffdaa, 0x0, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, "00000000000000000000f2ffffffffffffff4000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, "010000000000000000ffffff7f00"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x29, 0xc, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000140), &(0x7f0000000100)=0x1) recvfrom(r3, &(0x7f0000000180)=""/4096, 0x1000, 0x2, 0x0, 0x0) close(r2) socket(0x400000000018, 0x3, 0x3a) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r2, &(0x7f0000000040)="100a2956b9223776", 0x21d) 20:08:12 executing program 1: execve(0x0, &(0x7f0000000040)=[&(0x7f0000000100)='/\xbb\x00'], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='r\x00') chflags(&(0x7f0000000000)='./file0\x00', 0x10000) 20:08:12 executing program 0: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0xffffffffffffffff], [0x0, 0x0, 0x0, 0x9, 0x80fdfffdff], [0x0, 0x0, 0x403], [{0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffff800}]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = dup(0xffffffffffffff9c) ioctl$VT_WAITACTIVE(r0, 0x20007606, &(0x7f0000000000)=0xf8) r1 = socket(0x18, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCFLUSH(r2, 0x8080691a, &(0x7f0000000300)) 20:08:12 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCLOCK(r0, 0x20004276) ioctl$BIOCGDIRFILT(r0, 0x4004427c, &(0x7f0000000540)) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse0\x00', 0x10, 0x0) dup2(r0, r1) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}}, @icmp=@dest_unreach={0x3, 0xb, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}}}}}}) syz_emit_ethernet(0x109, &(0x7f0000000180)={@broadcast, @random="630ab95907ba", [], {@ipv4={0x800, {{0x25, 0x4, 0x1, 0x7, 0xfb, 0x64, 0x8000, 0x40, 0x70, 0x0, @empty, @loopback, {[@ssrr={0x89, 0xb, 0x2, [@loopback, @multicast2]}, @noop, @generic={0x155, 0x9, "645514a8d591d9"}, @ra={0x94, 0x6, 0x7}, @timestamp={0x44, 0x1c, 0x7, 0x3, 0x8, [{[@loopback], 0x7}, {[], 0x43f}, {[@remote={0xac, 0x14, 0x0}], 0x8000}, {[], 0x4}]}, @timestamp={0x44, 0x24, 0x1, 0x3, 0x3, [{[], 0xfffffffd}, {[@loopback], 0x80}, {}, {[@remote={0xac, 0x14, 0x0}], 0x8c12}, {[@multicast2], 0x80}]}, @lsrr={0x83, 0x17, 0x7f, [@loopback, @multicast1, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}]}, @generic={0x89, 0x2}, @lsrr={0x83, 0x7, 0x80, [@multicast1]}, @generic={0x82, 0x3, "cd"}]}}, @generic="1b9c99c762f36ea8b8724709fbdb62d4aec6c4bd26675632df2d29fb37f89458f865f35fcb8926d4976717fd60c410286929cb3a009d1fcddb2b30d40b3d351665d8ff799c2d663385c6b1fe816a11502819e5d46699dee0e353a7f11a72683490835a2fa184e8"}}}}) login: uvm_fault(0xfffffd806bc0a440, 0x0, 0, 2) -> e kernel: page fault trap, code=0 Stopped at memcpy+0x15: repe movsq (%rsi),%es:(%rdi) ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic kernel page fault uvm_fault(0xfffffd806bc0a440, 0x0, 0, 2) -> e memcpy() at memcpy+0x15 end trace frame: 0xffff80001d75a560, count: 0 ddb> trace memcpy() at memcpy+0x15 sbappendstream(fffffd805dad14b8,fffffd805dad15b0,fffffd805a478300) at sbappendstream+0x105 tcp_usrreq(fffffd805dad14b8,9,fffffd805a478300,0,0,ffff80001d7a7eb0) at tcp_usrreq+0x225 sosend(fffffd805dad14b8,0,ffff80001d75a7b8,0,0,80) at sosend+0x669 dofilewritev(ffff80001d7a7eb0,4,ffff80001d75a7b8,0,ffff80001d75a8a0) at dofilewritev+0x1ab sys_write(ffff80001d7a7eb0,ffff80001d75a850,ffff80001d75a8a0) at sys_write+0x83 syscall(ffff80001d75a920) at syscall+0x507 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffd0e60, count: -8 ddb> show registers rdi 0 rsi 0xfffffd805a478370 rbp 0xffff80001d75a500 rbx 0x1 rdx 0x90 rcx 0x12 rax 0 r8 0 r9 0x5 r10 0x30c99d6046ef8502 r11 0 r12 0xfffffd805a478300 r13 0xfffffd805a478400 r14 0x1 r15 0xfffffd805dad15b0 rip 0xffffffff81bd7ba5 memcpy+0x15 cs 0x8 rflags 0x10206 __ALIGN_SIZE+0xf206 rsp 0xffff80001d75a488 ss 0x10 memcpy+0x15: repe movsq (%rsi),%es:(%rdi) ddb> show proc PROC (sshd) pid=247627 stat=onproc flags process=12 proc=0 pri=24, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff80001d7a8870,0xffff80001d7a7c50 process=0xffff8000ffff83b0 user=0xffff80001d755000, vmspace=0xfffffd806bc0a440 estcpu=0, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 97682 14329 21726 0 2 0x2 syz-executor.0 30530 36042 21726 0 2 0x482 syz-executor.1 21726 390911 77213 0 3 0x82 thrsleep syz-fuzzer 21726 12179 77213 0 3 0x4000082 nanosleep syz-fuzzer 21726 312238 77213 0 3 0x4000082 thrsleep syz-fuzzer 21726 358449 77213 0 3 0x4000082 thrsleep syz-fuzzer 21726 235888 77213 0 3 0x4000082 thrsleep syz-fuzzer 21726 41839 77213 0 2 0x4000002 syz-fuzzer 21726 11550 77213 0 3 0x4000082 thrsleep syz-fuzzer 77213 155596 52334 0 3 0x10008a pause ksh *52334 247627 50126 0 7 0x12 sshd 72343 16726 1 0 3 0x100083 ttyin getty 50126 501056 1 0 3 0x80 select sshd 34044 398314 49461 73 3 0x100090 kqread syslogd 49461 518752 1 0 3 0x100082 netio syslogd 22114 455865 1 77 3 0x100090 poll dhclient 20436 318639 1 0 3 0x80 poll dhclient 86362 90785 0 0 3 0x14200 bored smr 16269 185168 0 0 3 0x14200 pgzero zerothread 40471 199176 0 0 3 0x14200 aiodoned aiodoned 613 272870 0 0 3 0x14200 syncer update 34163 269444 0 0 3 0x14200 cleaner cleaner 449 317477 0 0 3 0x14200 reaper reaper 91898 339312 0 0 3 0x14200 pgdaemon pagedaemon 89520 439007 0 0 3 0x14200 bored crynlk 48126 229931 0 0 3 0x14200 bored crypto 78732 179627 0 0 3 0x40014200 acpi0 acpi0 26066 7919 0 0 3 0x14200 bored softnet 31653 1314 0 0 3 0x14200 bored systqmp 99196 17433 0 0 3 0x14200 bored systq 45635 398096 0 0 3 0x40014200 bored softclock 85124 479243 0 0 3 0x40014200 idle0 1 285070 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9465 6330K 6588K 78643K 10636 0 pcb 13 8K 8K 78643K 23 0 rtable 105 3K 3K 78643K 202 0 ifaddr 48 11K 11K 78643K 59 0 counters 21 16K 16K 78643K 22 0 ioctlops 0 0K 2K 78643K 17 0 iov 0 0K 2K 78643K 6 0 mount 1 1K 1K 78643K 1 0 vnodes 1219 77K 77K 78643K 1261 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 2 0K 0K 78643K 2 0 sem 5 0K 1K 78643K 8 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1794 195K 288K 78643K 12646 0 file desc 4 9K 25K 78643K 68 0 proc 48 38K 63K 78643K 364 0 subproc 32 2K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 5 0 in_multi 33 2K 2K 78643K 36 0 ether_multi 1 0K 0K 78643K 3 0 mrt 0 0K 0K 78643K 2 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 31 148K 148K 78643K 31 0 exec 0 0K 1K 78643K 183 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 132 23K 23K 78643K 1023 0 UVM aobj 6 2K 2K 78643K 6 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 6 0 NDP 7 0K 0K 78643K 12 0 temp 70 3031K 3095K 78643K 1890 0 kqueue 3 4K 8K 78643K 11 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 0 1 0 1 1 0 8 0 rtpcb 80 19 0 17 1 0 1 1 0 8 0 rtentry 112 45 0 1 2 0 2 2 0 8 0 unpcb 120 57 0 49 1 0 1 1 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpqe 32 132 0 132 1 0 1 1 0 8 1 tcpcb 544 22 0 18 1 0 1 1 0 8 0 inpcb 280 74 0 67 1 0 1 1 0 8 0 ip6q 72 1 0 1 1 0 1 1 0 8 1 ip6af 40 3 0 3 1 0 1 1 0 8 1 nd6 48 6 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 188 0 0 12 0 12 12 0 8 0 art_table 32 189 0 0 2 0 2 2 0 8 0 art_node 16 44 0 4 1 0 1 1 0 8 0 semapl 112 4 0 1 1 0 1 1 0 8 0 shmpl 112 4 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1469 0 72 88 0 88 88 0 8 0 ffsino 240 1469 0 72 83 0 83 83 0 8 0 nchpl 144 1730 0 130 60 0 60 60 0 8 0 uvmvnodes 72 1544 0 0 29 0 29 29 0 8 0 vnodes 208 1544 0 0 82 0 82 82 0 8 0 namei 1024 4288 0 4288 1 0 1 1 0 8 1 scxspl 192 4298 0 4298 1 0 1 1 0 8 1 plimitpl 152 16 0 9 1 0 1 1 0 8 0 sigapl 424 254 0 227 4 0 4 4 0 8 0 futexpl 56 754 0 754 1 0 1 1 0 8 1 knotepl 112 73 0 54 1 0 1 1 0 8 0 kqueuepl 144 10 0 8 1 0 1 1 0 8 0 pipelkpl 16 88 0 78 1 0 1 1 0 8 0 pipepl 120 176 0 157 1 0 1 1 0 8 0 fdescpl 432 240 0 227 2 0 2 2 0 8 0 filepl 120 1267 0 1172 4 0 4 4 0 8 1 lockfpl 104 15 0 14 1 0 1 1 0 8 0 lockfspl 48 7 0 6 1 0 1 1 0 8 0 sessionpl 112 17 0 7 1 0 1 1 0 8 0 pgrppl 48 17 0 7 1 0 1 1 0 8 0 ucredpl 96 69 0 62 1 0 1 1 0 8 0 zombiepl 144 227 0 226 1 0 1 1 0 8 0 processpl 920 254 0 226 4 0 4 4 0 8 0 procpl 624 300 0 266 4 0 4 4 0 8 1 sockpl 400 150 0 133 3 0 3 3 0 8 1 mcl64k 65536 4 0 4 1 0 1 1 0 8 1 mcl12k 12288 3 0 3 1 0 1 1 0 8 1 mcl8k 8192 1 0 1 1 0 1 1 0 8 1 mcl4k 4096 10 0 10 2 1 1 1 0 8 1 mcl2k 2048 64072 0 64023 22 7 15 17 0 8 8 mtagpl 80 5 0 2 2 1 1 1 0 8 0 mbufpl 256 101751 0 101667 13 3 10 10 0 8 1 bufpl 280 3144 0 138 215 0 215 215 0 8 0 anonpl 16 38364 0 23236 63 1 62 62 0 107 0 amapchunkpl 152 1161 0 1027 8 0 8 8 0 158 2 amappl16 192 1059 0 242 42 0 42 42 0 8 1 amappl15 184 1 0 0 1 0 1 1 0 8 0 amappl14 176 58 0 53 1 0 1 1 0 8 0 amappl13 168 60 0 57 1 0 1 1 0 8 0 amappl12 160 4 0 3 2 1 1 1 0 8 0 amappl11 152 46 0 36 1 0 1 1 0 8 0 amappl10 144 17 0 7 1 0 1 1 0 8 0 amappl9 136 354 0 352 1 0 1 1 0 8 0 amappl8 128 311 0 275 2 0 2 2 0 8 0 amappl7 120 108 0 94 1 0 1 1 0 8 0 amappl6 112 31 0 22 1 0 1 1 0 8 0 amappl5 104 159 0 150 1 0 1 1 0 8 0 amappl4 96 414 0 388 1 0 1 1 0 8 0 amappl3 88 107 0 98 1 0 1 1 0 8 0 amappl2 80 1133 0 1071 2 0 2 2 0 8 0 amappl1 72 14504 0 14045 23 6 17 17 0 8 7 amappl 80 540 0 498 1 0 1 1 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 5 0 0 1 0 1 1 0 8 0 uaddrrnd 24 240 0 227 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 240 0 227 1 0 1 1 0 8 0 vmmpekpl 168 7437 0 7413 2 0 2 2 0 8 0 vmmpepl 168 38917 0 37006 115 5 110 110 0 357 19 vmsppl 272 239 0 227 2 0 2 2 0 8 1 pdppl 4096 486 0 454 6 0 6 6 0 8 1 pvpl 32 141627 0 123111 161 0 161 161 0 265 9 pmappl 200 239 0 227 1 0 1 1 0 8 0 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 245 0 13 7 0 7 7 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace memcpy() at memcpy+0x15 sbappendstream(fffffd805dad14b8,fffffd805dad15b0,fffffd805a478300) at sbappendstream+0x105 tcp_usrreq(fffffd805dad14b8,9,fffffd805a478300,0,0,ffff80001d7a7eb0) at tcp_usrreq+0x225 sosend(fffffd805dad14b8,0,ffff80001d75a7b8,0,0,80) at sosend+0x669 dofilewritev(ffff80001d7a7eb0,4,ffff80001d75a7b8,0,ffff80001d75a8a0) at dofilewritev+0x1ab sys_write(ffff80001d7a7eb0,ffff80001d75a850,ffff80001d75a8a0) at sys_write+0x83 syscall(ffff80001d75a920) at syscall+0x507 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffd0e60, count: -8 ddb> machine ddbcpu 1 No such command ddb> trace memcpy() at memcpy+0x15 sbappendstream(fffffd805dad14b8,fffffd805dad15b0,fffffd805a478300) at sbappendstream+0x105 tcp_usrreq(fffffd805dad14b8,9,fffffd805a478300,0,0,ffff80001d7a7eb0) at tcp_usrreq+0x225 sosend(fffffd805dad14b8,0,ffff80001d75a7b8,0,0,80) at sosend+0x669 dofilewritev(ffff80001d7a7eb0,4,ffff80001d75a7b8,0,ffff80001d75a8a0) at dofilewritev+0x1ab sys_write(ffff80001d7a7eb0,ffff80001d75a850,ffff80001d75a8a0) at sys_write+0x83 syscall(ffff80001d75a920) at syscall+0x507 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffd0e60, count: -8