last executing test programs: 4.157113939s ago: executing program 4 (id=140): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCLOCK(r0, 0x20004276) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f0000000140)=[{0x5, 0x21, 0x3, 0xffff0011}, {0x1, 0xbc, 0x1c, 0x815}, {0x6, 0x16, 0x3, 0x6cb}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) 3.865830143s ago: executing program 4 (id=141): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) r1 = getpid() (async) setrlimit(0x1, &(0x7f0000000000)={0xf7ffffffffffffed, 0xffffffffffffffff}) ktrace(&(0x7f00000001c0)='./file0\x00', 0x0, 0x40000534, r1) (async) r2 = getuid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc) setsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000100)={r1, r2, r3}, 0xc) (async) setitimer(0x0, &(0x7f0000000080)={{0x1000000000000, 0x4}, {0x4, 0x6}}, 0x0) (async) r4 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PCIOCREAD(r4, 0xc0107002, &(0x7f0000000080)) (async) ftruncate(r0, 0x48001000007) (async) truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd) (async) open(&(0x7f0000000140)='./file0\x00', 0x686, 0x8) (async) r5 = socket(0x2, 0x3, 0x0) (async) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite(r6, &(0x7f0000000040)="b6", 0x1, 0x3) (async) connect$unix(r5, &(0x7f0000000000), 0x10) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x10, 0xffffffffffffffff, 0x0) sendmmsg(r5, &(0x7f0000000380)={0x0, 0x8}, 0x10, 0xa) mprotect(&(0x7f000078e000/0x6000)=nil, 0x6000, 0x0) 3.614799066s ago: executing program 4 (id=145): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @empty, @rand_addr=0x4, @local, @remote={0xac, 0x14, 0x0}}}}}) r1 = syz_open_pts() setuid(0xee01) fcntl$getown(r1, 0x5) r2 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x2a) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5c}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffff7fd, 0x0}) r3 = fcntl$dupfd(r0, 0xa, r2) ioctl$FIONREAD(r3, 0x800474c4, &(0x7f00000000c0)) syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816a00280630fe80190000000000000000000000008000000000000000000000000000aa4e"]) 3.453603393s ago: executing program 4 (id=148): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000140)={0x7, 0x3, 0x8000001, 0x41fdfc43, 0xffffff80, 0x8, 0x5, 0x10, [{0x2, 0x800, 0x80000008, 0x6898}, {0x800, 0x2d3, 0xffffffa7, 0x3}, {0x8001, 0x90b9, 0x6f, 0x252}, {0xfffff846, 0xf, 0x5e33, 0x1ff}, {0x3, 0x8, 0x5}, {0x10001, 0x2, 0x3ff, 0xe15b}, {0xe, 0x20101, 0x4, 0x345c7e9a}, {0x8, 0xb, 0x9, 0x4}, {0x401, 0x9, 0x9, 0x1}, {0x157e, 0x7, 0xd, 0x2}, {0x20000003, 0x9, 0x9d, 0x3}, {0xa7, 0x2, 0x7, 0x8}, {0x6, 0x0, 0x46, 0x7fc}, {0x3, 0x88, 0x40, 0x5}, {0xf8e8, 0x300000, 0x8, 0x7}, {0x0, 0x5, 0x7, 0x7}]}) r1 = socket(0x18, 0x3, 0x1) setuid(0xee01) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0x80286987, &(0x7f0000000100)) r3 = socket(0x2, 0x3, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) openat$bpf(0xffffffffffffff9c, 0x0, 0x80, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$BIOCSETF(r4, 0x80104267, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket(0x2, 0x2, 0x0) close(r5) r6 = socket(0x2, 0x2, 0x4) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) chdir(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') connect$unix(r6, &(0x7f0000000000), 0x10) connect$unix(r5, &(0x7f0000000000), 0x10) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYRES16=r3]) minherit(&(0x7f0000763000/0x3000)=nil, 0x3000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 3.293020235s ago: executing program 4 (id=150): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) getrlimit(0x0, &(0x7f0000000140)) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00') open(&(0x7f0000000180)='./file0\x00', 0x0, 0x11b) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffdc9, &(0x7f0000000680)=""/100, 0x64}, 0x80003fae}, 0x10, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000080)={0x0, 0x4}, 0x10, 0x400) shutdown(r2, 0x2) ftruncate(r2, 0x2) read(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 1.591293036s ago: executing program 3 (id=169): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) connect$unix(r0, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) 1.466104635s ago: executing program 7 (id=176): syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaf0f1ffffffffff86dd6000000000083a7f20f4372e0865915f577ee80000008000ff02000000000000000000000000000181009078096d0000"]) r0 = msgget$private(0x0, 0x22) r1 = getgid() r2 = geteuid() r3 = getgid() r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0) ioctl$TIOCSETA(r4, 0xc4504449, &(0x7f0000000740)={0x0, 0x4000, 0x2f00, 0xf, "3901224200", 0x2007, 0x10}) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x8, 0x0, r1, r2, r3, 0x82, 0x6}, 0x2f1, 0x10, r5, r6, 0x0, 0x8, 0xff, 0x7}) r7 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$VMM_IOC_CREATE(r7, 0xc2585601, &(0x7f0000000200)={0x10, 0x10000, [{&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffff4}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x1}, {&(0x7f0000fed000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x9}, {&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xde8d}, {&(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x3}, {&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x6}, {&(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x80000001}, {&(0x7f0000ff3000/0x1000)=nil, &(0x7f0000fef000/0x4000)=nil, 0x7}, {&(0x7f0000ffb000/0x5000)=nil, &(0x7f0000fef000/0x2000)=nil, 0x3f2d}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2}, {&(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x8000000000000000}, {&(0x7f0000ff3000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x5}, {&(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x3}, {&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000fef000/0x4000)=nil, 0x5}, {&(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, 0xf3}], './file0\x00', 0x1}) 1.430681026s ago: executing program 1 (id=178): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r0, &(0x7f0000000040)=@in6, &(0x7f0000000080)=0xc) write(r0, &(0x7f0000000100)="e8", 0xff25) select(0x40, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x40000, 0x100, 0x3560000000000, 0x0, 0x80000000000000}, &(0x7f0000000200)={0xcea, 0x20010, 0x80000002, 0x1, 0x1, 0x3, 0x80000000000001, 0xfffffffffffffffe}, 0x0, 0x0) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x2006da) r2 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) recvmmsg(r1, &(0x7f0000000880)={0x0, 0x6}, 0x10, 0x60, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9b, 0xffffffffffffffff, 0x1, 0x2de, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x0, 0x4, 0x0, 0x10}, {{}, 0xfffffffffffffffa, 0xc0, 0x20000000, 0x7fffffffffffffff, 0x46ad}, {{}, 0xfffffffffffffff9, 0x83, 0xf0000000, 0x3, 0x8}, {{}, 0xfffffffffffffffb, 0x20, 0x1, 0xffffffff, 0xc3d}, {{}, 0xfffffffffffffffa, 0x37, 0x80, 0x9, 0x3}, {{}, 0xffffffffffffffff, 0x2f, 0x2, 0x4, 0x10000}, {{}, 0xfffffffffffffffd, 0x14, 0x10, 0x8, 0x100000001}, {{}, 0xfffffffffffffffb, 0x38, 0x2, 0x1f70, 0x80000000000005}], 0xb19, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)=""/62, 0x3e}], 0x1) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) ioctl$BIOCSRTIMEOUT(r4, 0x8010426d, &(0x7f00000001c0)={0x0, 0x9}) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) munlock(&(0x7f00002d0000/0x3000)=nil, 0x3000) ioctl$WSDISPLAYIO_GETEMULTYPE(r2, 0xc014575e, &(0x7f0000000180)={0x59, './file0\x00'}) 1.314221781s ago: executing program 7 (id=179): sysctl$hw(&(0x7f0000000000)={0x7, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) shutdown(r1, 0x2) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000080), 0xc) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x84, 0x3, 0x27, 0xd577}, {0x50, 0x10, 0xfd}, {0x6, 0x11, 0x43, 0xffffeffd}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) sysctl$vm(&(0x7f0000000180)={0x2, 0x9}, 0x2, &(0x7f0000000000)="43a262d7", 0x0, 0x0, 0x0) 1.306055016s ago: executing program 3 (id=181): r0 = socket(0x18, 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x80000000000206, 0xd4) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c397, 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000000480)={&(0x7f0000000100)={&(0x7f0000000080)=@in6={0x18, 0x0, 0x8, 0xa}, 0xc, &(0x7f00000000c0)=[{&(0x7f00000001c0)="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", 0xfd}, {&(0x7f00000002c0)="586dff71b9c9c207a4f42a370adcfd3086b8c6b817d4e71ed91bc20e0292f6412e20219b6ace64dc9a99d7b8fb611c08a1e5ebac4df5468585d9a94eca34b4e58a2af108aac4b3ce3a58f89d3115868c2126efb8a363db9c27ddb56d99a4a0335eed0cc093cecf79e3cf6bf82ffc3153164a5576a85edd27a899682330b1754ca729aed4bd664e03ed40364a5a1f81fc5ddf51d2ea4232ddb706ce395d7125012fadd196651b908667ec032332d66f3d1302076ff5227f32d8beff28fb8ff297", 0xc0}], 0x2, &(0x7f0000000380)=[{0xf8, 0xffff, 0x8, "a91eb91ac9178922f895b128e3ab7fa963eeccdf92e77dba9c54dd55a7a6fb324d63474bd04cdf1731c4d397272e0f0f12ac3b517d36760bdc10c1776c9d6d6406aa49d7633852037f38377b491b5280c59884e810b54bcd4f5de802d9c45f5c77ab85f489433667f4ca70033cb3bd5b0850df6124e6a937078e65c28e56707cdcee568d4aef38c20a5727374fe8302c9e5813e6bdb824c96decd5444c904648b9914ee815b5c911d24906eab255161a77df9178352833e0ded3612993cf6eaee50808eaed3b916b4bb017dbc6d0103ffe910d0e21b7172b960e7cded63d9cbac378b348d1"}], 0xf8}, 0x5}, 0x10, 0x1) clock_getres(0x0, &(0x7f0000000040)) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0xa8d2, 0x1}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000bc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd605f6ad900383a0000aa02009078000000006006c33e00003a00fe8000000000000000000000000000aa4f6d3891bc040000008600ee446214602900010000000000000000000000ddffffff00"/110]) 1.239051705s ago: executing program 3 (id=184): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0) listen(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) r2 = getppid() fcntl$setown(r1, 0x6, r2) fcntl$setown(r1, 0x6, r2) accept$unix(r0, 0x0, 0x0) r3 = semget(0x0, 0x1, 0x281) semop(r3, &(0x7f0000000000), 0x23) close(r0) execve(0x0, 0x0, 0x0) 1.175619108s ago: executing program 7 (id=188): r0 = socket$unix(0x1, 0x1, 0x0) r1 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r1) r2 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r2, 0x8020697a, &(0x7f00000001c0)) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000000)) getsockname(r2, &(0x7f0000000280)=@in6, &(0x7f00000002c0)=0xc) fcntl$getown(r2, 0x5) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r3, 0x0, 0x200000000000a, 0x0, 0x36) r4 = semget$private(0x0, 0x4, 0x200) semop(r4, &(0x7f0000000b80)=[{0x3, 0x8, 0xcf0244f7e054b15a}, {0x1, 0x7e, 0x1800}], 0x2) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xc) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000200)={{0x1, 0x0, 0x0, 0x0, r6, 0x0, 0x1}, 0x2, 0x8, 0x7}) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000100)={r1, 0x0, r6}, 0xc) bind$unix(r0, &(0x7f0000000040)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) setreuid(r5, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) r7 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) pread(r7, &(0x7f0000000180)="9a17881d8443489e73383a3c97055a071fd1642d43471464", 0x18, 0x9) ioctl$WSMUXIO_INJECTEVENT(r7, 0x80185760, &(0x7f0000000140)={0xd, 0x6}) r8 = msgget$private(0x0, 0x0) msgget$private(0x0, 0x1e1) msgctl$IPC_SET(r8, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, 0x7fff}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3}) setgroups(0x0, 0x0) msgctl$IPC_SET(r8, 0x1, 0x0) ioctl$VMM_IOC_INTR(r0, 0x800c5606, &(0x7f0000000080)={0x3, 0x3, 0x2}) r9 = socket$unix(0x1, 0x5, 0x0) connect$unix(r9, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) 1.094422799s ago: executing program 3 (id=190): shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000100)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x158, 0x6}, 0x7, 0xf, 0xffffffffffffffff, 0x0, 0x8e8a, 0x8000000000000000, 0x5}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000019c0)={0x2, &(0x7f0000001980)=[{0xc9, 0x0, 0x9, 0x513}, {0x7, 0x0, 0x81, 0xfffffff8}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fchflags(r1, 0x10001) 1.093648144s ago: executing program 3 (id=191): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xfffffffc, 0x0, 0x1, 0xffffffff, "1a1116f043000000000000fffffffffff700"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x40000800) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0xe0) r1 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1003, &(0x7f0000000000)=0x9, 0x4) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x9) close(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x5, 0x0, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x3effd}) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000000)={0x6, 0x7cd, 0x400, 0x0, "296438fe6c90e90f06142dbd32b73669cad5a2db", 0x7fffffff}) write(r2, &(0x7f0000000100)="b105", 0x2) syz_open_pts() ioctl$TIOCFLUSH(r2, 0x80047410, &(0x7f0000000780)=0x6) unveil(0x0, &(0x7f0000000000)='x\x00') open(&(0x7f0000000240)='.\x00', 0xa40, 0x1a) 850.52923ms ago: executing program 3 (id=196): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023}) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0x1, {0x6, 0x1}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async, rerun: 64) r1 = socket(0x18, 0x1, 0x0) (rerun: 64) fcntl$setstatus(r1, 0x4, 0x40) (async, rerun: 64) shutdown(r1, 0x2) (rerun: 64) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x80000001, [{0x2}, {0x0, 0xeffffffe}, {}, {0x0, 0x56}, {0x0, 0x400}, {0x0, 0x8}, {0x0, 0x8}, {}, {0x5, 0x3}, {0x2, 0x7fb6}, {0x3}, {0x3, 0x400}, {0x3, 0xd03}, {0x1}, {}, {0x3, 0x1ff}, {0x1, 0x8}, {0xc3af572159119000, 0xfffeffff}, {}, {}, {}, {0x1, 0xfffffffc}, {0x406e0f656ed361f}, {}, {0x3, 0xffff7ffc}, {0x2}, {}, {0x1}, {0x1, 0x8}, {0x3}, {}, {0x0, 0x1}]}) (async) sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) (async) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket(0x2, 0x400000000002, 0x0) r6 = socket(0x20, 0x1, 0x3) (async) kqueue() select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x4000000000000008, 0x0, 0x8000000000000}, 0x0, 0x0) (async) setsockopt(r6, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) connect$unix(r6, &(0x7f0000000000)=@abs={0x0, 0x0, 0x3}, 0x8) (async, rerun: 32) setsockopt(r6, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) (rerun: 32) msgget(0x2, 0x0) setsockopt(r5, 0x0, 0x1f, 0x0, 0x0) shutdown(r4, 0x0) sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffcde, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x400}, 0xa) ioctl$VNDIOCSET(r2, 0xc0384600, 0x0) syz_emit_ethernet(0x52, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000440000200000009078ac1400bbffffffff4e214e220008907889268f6df090649377b8df44c8c6a83f02d3e2646a5a6d85a8e317427160c9a21591bc0cff0f66480dbbaded45086222732169058072f2cebbdcfd1599ed428e819808e5ac2481eae16d33613fc20e2affce5415b1d4ce7ff099244044"]) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="b905f0ffffff00000000000008004500ff080000000100009078ac1400205c0003000000000000000000"]) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000000140)={&(0x7f0000000100)=[{0x8c, 0x80000001}, {0x43, 0x8}, {0x3, 0x355}, {0x41, 0x8}, {0x88, 0x5}, {0x41, 0x7}], 0x6}) (async, rerun: 64) ioctl$VNDIOCGET(0xffffffffffffffff, 0xc4104603, &(0x7f0000000180)={'./file0\x00', 0x1000, 0x8, 0x5}) (rerun: 64) 850.044349ms ago: executing program 7 (id=197): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) r1 = socket(0x11, 0x3, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc0}, 0xf0ffffffffffffff, 0x1}) setsockopt$sock_int(r1, 0xffff, 0x1002, &(0x7f0000000100)=0xffffffff, 0x4) r2 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r2, 0x8040691a, &(0x7f00000001c0)) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x129) ftruncate(r3, 0xb358) sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) symlink(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') munmap(&(0x7f000026d000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) kqueue() mprotect(&(0x7f0000211000/0x4000)=nil, 0x4000, 0x1) 734.234729ms ago: executing program 6 (id=203): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0x7, 0xf8, 0x4}, {0x20, 0x5, 0xff, 0x209}, {0x6, 0x7d, 0x8, 0xfffffffc}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r1, 0x8020690c, &(0x7f00000001c0)) pledge(&(0x7f0000000000)='tty V\xef\x86\xce3|#\xcb\x13\x12\xe0\x19\x9c\xe6\x98\x0f \x01\xa6~\xd0|/?\xc9\xd5k\xbe\xa9kGS\x00\x00K\x00\x00\x00\x00\x00\x10\xeb\x91vr)\\\x9el\x03(rut\xd4\x9a\xbak\x04\x88J\x19\x9aU8\xee\xcf\xb4B\x95\x15\xb6\r^o\xfa\x03\x8bgI\xbdf\xc0\x9ffXo\x95\xad\x1f\x88\xd5\x95\xd9?!`\xbf\x8a\xeb5&\xdf\xeb\x04rN\\\x10\x18\xc3Unm\x84\vg\xef\xe8\xe3\xb1\x01\xdfZ\xfe\xd0\xa3\xa9E?\xa0\xcc\xd8\x8f\xff\x1e\xcd\x87_\xb9\xc2I0xffffffffffffffff}) bind(r2, &(0x7f0000000080)=@un=@file={0x41a0805bbded0123, './file0\x00'}, 0x4) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xffffffff, 0xfffffffc, 0x3, 0xffffff80, "0120002d29497f07af80d6df356bbb612c0800", 0x3, 0x3}) 658.536629ms ago: executing program 7 (id=208): r0 = kqueue() mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x205b9b) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000300)=[{{r1}, 0xfffffffffffffffe, 0x11}], 0x7, 0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x7, 0x9, 0x7, 0x2445}, {0x24, 0x10, 0xdd, 0x7}, {0x6, 0x15, 0x53, 0x7}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) kevent(r2, 0x0, 0x0, &(0x7f0000000200), 0x3b, 0x0) (async) kevent(r2, 0x0, 0x0, &(0x7f0000000200), 0x3b, 0x0) kevent(r0, &(0x7f0000000140), 0xe4a, 0x0, 0xa9fa, 0x0) 596.087999ms ago: executing program 5 (id=209): socket(0x24, 0x4000, 0x0) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xf7ffffffffffffed, 0xffffffffffffffff}) ftruncate(r0, 0x40000000007) r1 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x2, 0x8, r1) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x50) r3 = dup2(r2, r0) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000200)={&(0x7f0000000080)='./file0\x00', 0xed3, &(0x7f0000000180)='./file0\x00', 0x8}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/97, 0x61}], 0x1, 0x0) pwrite(r3, &(0x7f0000000280)="73750bd90fc61fa843410eb4efaf866257285cc505f33418f358e7a67a8cbe80ec19a62f1384e013b0a47060116c3d7e4a5461956f63e18cce3568a8855069cde0d6cc2611778bba692af67cd690aa424dae8273301bf83c3eb21f2f197942bd36f4bb5b2a1d80c0aa33a32e9f04899236ff7b4aa4430a0ec71a64ba1db2632ffa0d8cce701ed5bb00d9bed758ae6a9da0332a112ec478c946cd01b3031239caa3c7a02690fb50d3b48bdf13068dd69bc64bfa79889fb182", 0xb8, 0x5) 502.907616ms ago: executing program 6 (id=215): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f0000000240)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000000380)="095384fca037", &(0x7f0000000440)=0x6, &(0x7f0000000b80), 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0x117}], 0x50, 0x0) 502.594858ms ago: executing program 5 (id=216): syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYRES32]) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYRES32]) (async) 501.487774ms ago: executing program 1 (id=217): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = msgget$private(0x0, 0x180) msgsnd(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB="03"], 0x8, 0x0) msgrcv(r0, 0xffffffffffffffff, 0x0, 0x3, 0x1800) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) 398.400559ms ago: executing program 6 (id=219): mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff"]) ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xc2585601, &(0x7f00000000c0)={0x10, 0x21ac00000, [{&(0x7f0000f36000/0x4000)=nil, &(0x7f0000685000/0x3000)=nil}, {&(0x7f0000ccb000/0x2000)=nil, &(0x7f000014b000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0x3}, {&(0x7f0000672000/0x3000)=nil, &(0x7f00004ed000/0x800000)=nil, 0x4}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x2}, {&(0x7f0000c1a000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0xf}, {&(0x7f000005b000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x4}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil}, {&(0x7f00004f6000/0x4000)=nil, &(0x7f0000018000/0x1000)=nil, 0xfffffffffffffffc}, {&(0x7f0000807000/0x1000)=nil, &(0x7f0000b61000/0x3000)=nil, 0x7}, {&(0x7f00002f6000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x10000}, {&(0x7f000000e000/0x4000)=nil, &(0x7f000069c000/0x2000)=nil, 0x1}, {&(0x7f000015e000/0x3000)=nil, &(0x7f0000660000/0x2000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil, 0x101}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7}, {&(0x7f00002f6000/0x3000)=nil, &(0x7f00008cb000/0x7000)=nil, 0x8000000000000001}], './bus/file0\x00', 0xfffffffd}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) syz_emit_ethernet(0xaa, &(0x7f0000000180)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @multicast1, @empty, {[@ra={0x94, 0x6, 0x9}, @generic={0x1, 0x10, "a18a025cf83995a68e331f934dfe"}, @end, @rr={0x7, 0x2b, 0x5, [@rand_addr=0x9, @multicast1, @local={0xac, 0x14, 0x0}, @multicast2, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @empty, @local={0xac, 0x14, 0x0}, @multicast1, @broadcast]}, @lsrr={0x83, 0x27, 0x2, [@local={0xac, 0x14, 0x0}, @rand_addr=0xe65f, @local={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @rand_addr=0x7, @broadcast, @local={0xac, 0x14, 0x0}, @broadcast]}]}}}}}}}) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f0000000100)) r1 = socket(0x18, 0x2, 0x0) syz_emit_ethernet(0x39, &(0x7f00000016c0)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900033a000000000000871f68d97f81ed1b0000000000000000000000fe"]) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c397, 0xffffffffffffffff) minherit(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3) getitimer(0x0, &(0x7f0000000380)) ioctl$BIOCLOCK(r2, 0x20004276) getrusage(0x0, &(0x7f00000000c0)) select(0xff7e, &(0x7f0000000040)={0x7c, 0x0, 0x10000000000, 0x4, 0x8, 0x9c, 0x7f}, 0x0, 0x0, 0x0) r3 = socket(0x11, 0x8000, 0x28) syz_emit_ethernet(0xc0, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaabb08004c3e00b200660b3704329078ffffffffac1400aa0194060001000000890b07e0000402e00000029406000002ac000000fa3369445ec5c9fa3d25f4b05301f6117488858aa307233ecc0a9c4fc7ff372f14119171d2c576bcc75381ce5f1f3d78a576c9e347ac21a3f683836d3f7c6bf06bddd89f2d9a6c6bed03cefe8b19d2d818b3bd310b77c9b061c7a5a0d90158bf8935d6e3b2ccb9de7e9130d2e207a6642cad17d54bdc972d409e025f5a84f8000000"]) sendto$unix(r3, &(0x7f0000000000)="b10005016000000416000b00070000000020000010c18125d7f96ecfc73fd38c23781fd6c61a27ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c500002012010000de5000000000000020000000000000000000000000000000000000001f00000000000800", 0xb1, 0x3a3ae0e0de5f5dda, 0x0, 0x0) r4 = syz_open_pts() ioctl$TIOCGETD(r4, 0x4004741a, &(0x7f0000000040)) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) 392.030612ms ago: executing program 0 (id=220): setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x4, &(0x7f0000000000)="0b000019", 0x4) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x1, 0x2, 0x0, 0x1005}, {0x84, 0x9, 0x6, 0x80}, {0x8, 0x7, 0x80, 0x5}]}) open(&(0x7f0000000080)='./file0\x00', 0x800, 0x1f) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) 391.639637ms ago: executing program 1 (id=221): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x20, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x11, 0x3, &(0x7f0000000340)="12000000", 0x4) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000180)="b1000504600000000000180007000000331c13fecea10500fef9ed061ddd1efb7ae320b37b673051d2d236073705ae04be38164991f7b85143222b297be1aa5b2354eb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907a900000200361b1257aea8c5000020020000000000ffbb27c501f1306c7f008a09ba09006574ffffffffff35b5710426037503682ce371a30080", 0xb1, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000180)=[{0x14, 0x7a, 0x8, 0x6}, {0x84, 0x9, 0xa, 0x7}, {0x6, 0x4, 0xfe, 0x1}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x24, 0x8, 0x45, 0x5}, {0x50, 0x83, 0xd, 0x7}, {0x816, 0xe, 0x14, 0x7c}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) chflags(&(0x7f0000001280)='.\x00', 0x1) 390.787064ms ago: executing program 5 (id=222): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x18, 0x3, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0/file0\x00', 0x6, 0x1, 0xfffffff9, 0x1, 0x4, 0xf, 0x1, 0x1, 0x2, 0x4001, 0x7f}) (async, rerun: 64) setitimer(0x0, &(0x7f0000000140)={{0xf6f4303, 0x100800000000009}, {0xffffffffffffffff, 0xff}}, 0x0) (async, rerun: 64) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local, @random="d0b5049f6b63", [], {@ipv6={0x86dd, {0x0, 0x6, "36d247", 0x38, 0x3a, 0xfc, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "5f0200", 0x0, 0x2c, 0x0, @mcast2, @remote={0xfe, 0x80, '\x00', 0x0}, [@routing={0x3a, 0x0, 0x0, 0x5}]}}}}}}}) (async) r2 = open(&(0x7f0000000280)='./file0\x00', 0x200, 0x5667c4b14e58f13b) read(r2, &(0x7f00000002c0)=""/203, 0xcb) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x8}, 0x2, &(0x7f0000000100)="71100000", &(0x7f0000000140)=0x4, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x0}, 0x0, &(0x7f0000000040)="dba6b138f00f819677d461f483f1f5a08f3fd6c4ed6013ec7a7612e13031cddc1b3d548a501b204f08270ae9e08ea7aed605491810fde4f0aa4e5353acb028", &(0x7f0000000080)=0x3f, &(0x7f0000000180)="708865a9a0bc8bd9aa2bfae1d018960964a76ed5653f4a81c8ed61fd1c7d425fbbf44d1f2e556c2443bb5e664c4778e2f53d9d0952aab7b987e41bcead84bcccc0aca5b23f2dd013bca5403a08fb7fcb1bed5b7745f6fbb1e238bb9599dbadcf000cf93e5055f3aea39ae58518be299ef28a0290fbdc080085e874733df95d61d593b8ef49a2f30902e46d12a5d5f683bb6a59ce6f2559802e0fa5f5eef7110d2b66c9b8d2f1ab6673755562fa9087556a0081f6358ab99346ac6fbd66a59043576ccdfcc88161f92f0d169af9dc0a230003a36fe5f1f6fe117c07cdd28622364fcc3c1f28211457909a09105a38b90185ac8eadd8", 0xf5) (async) openat$wskbd(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) 314.801979ms ago: executing program 0 (id=223): r0 = socket$inet(0x2, 0x3, 0x0) close(r0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r1 = socket(0x18, 0xc003, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt(r0, 0x29, 0x69, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@random="172140030f70", @empty, [], {@ipv6={0x86dd, {0x6, 0x6, "0cf5b8", 0x8, 0x6, 0x1, @rand_addr="5796bdca6f177b098b2b5ae22967efd7", @mcast2, {[@dstopts={0x3c}]}}}}}) sysctl$kern(&(0x7f00000017c0)={0x1, 0x12}, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 313.210099ms ago: executing program 6 (id=225): writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='m', 0x1}], 0x1) r0 = socket$inet(0x2, 0x2, 0x0) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="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", &(0x7f0000000000)=0x200, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x3, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) setsockopt(r1, 0x0, 0x2, &(0x7f00000000c0)="63e1303d", 0x4) write(r1, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) r3 = socket(0x18, 0x2, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) accept(r4, 0x0, &(0x7f0000000040)) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setuid(0xffffffffffffffff) ioctl$BIOCLOCK(r5, 0x20004276) ioctl$BIOCSFILDROP(r5, 0x40047477, &(0x7f0000000000)=0x1) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r2, 0x0, 0x0) 310.652772ms ago: executing program 0 (id=226): socket$unix(0x1, 0x2, 0x0) (async) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6dc) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4a) (async) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) (async) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) (async, rerun: 64) r3 = socket(0x2, 0x2, 0x0) (rerun: 64) ioctl$FIONREAD(r3, 0x80146953, &(0x7f00000001c0)) syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaafe8000000000000000000000000000bbff0200000000000000000000000000010102907800000000605f7f0000ffff00ff020000000000000000000000000001fe8000000000000000000000000000bb000000000000000000000000000000000a3579ea8cdb98507840a12a89cfe182960d57878bba15df25f131ccc7ffedab72ce77185596944ecc93590835992c007fe1b1cfeacc02d47493d70648717e1b49a703eb064b56d6408ff2582cb5403974dd3629b45f0d0b875047962c78afc082fc25d459f384b92dcd05219c02105f80a00768981fcf1a778d45eaaf92e50105b003ac76872a3f30b3b429da545964d241b82e91427687f39a68d1a6db0a38cb18238c6eb4b2bcdcc0f17ab14260ffe7404d4da400ebd9335d0a79cd2eaf1aec95bad38776b84d691b20c1566c1c9623ae818c88f4a2239958e81bc78a97e4a171b63c3643f846a86fa9468221388b233ddd4def4662c3903c940fdadc03a883a23508dd3b373e00a838d4c48cd36cc3af695a04b9e74fd12fdf8c5639669691"]) (async, rerun: 32) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) (async, rerun: 32) r4 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x8, 0x100) faccessat(r4, &(0x7f0000000840)='./file0\x00', 0x8, 0x0) (async, rerun: 32) r5 = socket$unix(0x1, 0x5, 0x0) (async, rerun: 32) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) (async) r6 = syz_open_pts() close(r6) (async) syz_open_pts() writev(r6, &(0x7f0000001bc0)=[{&(0x7f00000000c0)="57a62b619011b34398c8af608700000000af12e8c4355e2cd36a", 0x1a}, {&(0x7f00000002c0)="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", 0x560}, {&(0x7f0000000200)="20e558e8c3dd22cdf5e40614791da4ef970d19ecde934f80e9a854b18d50274f36b2b87bc5d17636fda6eb822602772524a905af060000002309", 0x3a}], 0x3) (async) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x3}, 0x8) (async) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000019c0)={0xf9, 0xfffffffe, {[0x4d4, 0x8, 0x5, 0x100000000, 0x1000, 0x90, 0x6, 0x0, 0xfffffffffffffffa, 0xba51, 0x1, 0x3, 0x9, 0x20000000001, 0x4, 0x4, 0xfffffffffffffff7, 0x100000000181b], [0x5, 0x10000000000005, 0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x80000004, 0x3, 0x0, 0x0, 0x9], [0x8, 0x2, 0x793cf237, 0xfffffffffffffffc, 0x1, 0x7fff, 0xfffefffffffffbfe], [0x3, 0x1ffffffffff, 0xfffffffffffffffe, 0x7, 0xfffffffffffffffe], [{0x0, 0x400, 0x4, 0x93}, {0x5, 0x2, 0x1, 0x5}, {0x0, 0xfffefffd, 0xfffffffe, 0xffc}, {0xd, 0xfffffffe, 0x6, 0xfffffffffffffffe}, {0x200, 0x400, 0xd, 0x40}, {0x1, 0x2000, 0x40003, 0x1}, {0xfffc, 0xc, 0x7}, {0x0, 0x95b, 0x200, 0xc}], {0x4, 0x5, 0x4, 0x1000849}, {0x206, 0x10, 0x8000004, 0x1}}}) (async, rerun: 32) r7 = socket(0x11, 0x3, 0x0) (rerun: 32) sendto$unix(r7, &(0x7f0000000200)="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", 0xb1, 0xe, 0x0, 0x78) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (rerun: 32) 310.120982ms ago: executing program 1 (id=227): setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) r0 = syz_open_pts() close(0xffffffffffffffff) close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x18000, 0x4b6b, 0xfff9, 0x21d8b78b, "0700a460990d070a7f00000000002fcaaed20500", 0x3db, 0x42}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000001640)="5ec7a85451dc56749d7c52a4917db1bf18ae1b206606da88b1e2cffb7305cfc379f35aa5fc2ea55ded639ea1388458cb9c8c8de12f749b35b537fe46e2545eaa084a48af37daae71491f9252b17a18faaab293ec902199ff8c860b453cbb9f964749b3afb3dd6240e83fc7689c913639bbb32a745eb61f0cd2ab1d16dfdb2e366f625eb24f4fc652988ab508354b2cc67b2c1320c50d9168ebcd68fb52133c050d", 0xa1}], 0x1) 309.319751ms ago: executing program 6 (id=228): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f00000001c0)={'./file0\x00', 0xa, 0x2, 0x1ff, 0x0, 0x7fffff7f, 0x3, 0x697, 0x0, 0x0, 0x6, 0x6}) (async) ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f00000001c0)={'./file0\x00', 0xa, 0x2, 0x1ff, 0x0, 0x7fffff7f, 0x3, 0x697, 0x0, 0x0, 0x6, 0x6}) msgget$private(0x0, 0x7fc) (async) r1 = msgget$private(0x0, 0x7fc) msgrcv(r1, &(0x7f0000000080)={0x0, ""/182}, 0xbe, 0x3, 0x1000) msgsnd(r1, &(0x7f0000000140)={0x3}, 0x8, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x100, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x100, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffe, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000616000/0x3000)=nil}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00008d0000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x9}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x8a9}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x1}, {&(0x7f0000a1a000/0x4000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x100006}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00003a2000/0x1000)=nil, 0x2}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xb}, {&(0x7f0000637000/0x3000)=nil, &(0x7f000069b000/0x3000)=nil, 0xc}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x5}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x80000}, {&(0x7f000062d000/0x3000)=nil, &(0x7f0000668000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000714000/0x2000)=nil, 0x8000000000000001}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000140000/0xc00000)=nil, 0x7fffd}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x5}], './file0\x00', 0x1fe}) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffe, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000616000/0x3000)=nil}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00008d0000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x9}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x8a9}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x1}, {&(0x7f0000a1a000/0x4000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x100006}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00003a2000/0x1000)=nil, 0x2}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xb}, {&(0x7f0000637000/0x3000)=nil, &(0x7f000069b000/0x3000)=nil, 0xc}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x5}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x80000}, {&(0x7f000062d000/0x3000)=nil, &(0x7f0000668000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000714000/0x2000)=nil, 0x8000000000000001}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000140000/0xc00000)=nil, 0x7fffd}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x5}], './file0\x00', 0x1fe}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x1df) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x6, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}}, @icmp=@echo={0x8, 0x0, 0x0, 0x3, 0x4}}}}}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x6, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}}, @icmp=@echo={0x8, 0x0, 0x0, 0x3, 0x4}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x81946466, &(0x7f0000000140)={0x0, 0x1, 0x0}) open(0x0, 0x2, 0x0) ioctl$VNDIOCGET(r2, 0x20006473, 0x0) (async) ioctl$VNDIOCGET(r2, 0x20006473, 0x0) sysctl$kern(&(0x7f0000000240)={0x1, 0x46}, 0x2, &(0x7f0000000280)="1b9b32e1df1f1b36fc52fbbae90eb0b16212d338d4cb2e64b84e28828d9a380422cd0b3aa4360e240f593983d47f8accec2eed3973599b8642557eacd00002ef2a74df91b38412ec7dda52a3d55a083e108783f651efc3e0ee4ab21a55ab756a91fd9ab980f6d47997bdf72a6943a3399591c3da176844e18435686a20b2c9d1ff1a9012bedeccfcf6795521c7cbd192a67d885a6e874c340af94e3bb5389dad6da1d11ca987492fe67673c108125c6fd46f00adf09095a956da162990bb", &(0x7f0000000340)=0xbe, &(0x7f0000000380)="6bf774a05db1dba0f562e68ca1e38e7ec3d77f3fe6f704335b552077ca998e7034856a1ddb04abaea184d8818964210fdb32d0577926a2c8254475e0e48d073c88985ad34b0d6921cc93ac98dc426663698291d5cdb09d070d81f95cb057f0982ecdd341", 0x64) open(&(0x7f0000000040)='./bus\x00', 0x20000, 0x12b) (async) r4 = open(&(0x7f0000000040)='./bus\x00', 0x20000, 0x12b) open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x6b7d) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='W\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x18, 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) close(r4) 299.933992ms ago: executing program 0 (id=229): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f00000000c0)="b1000503600000041600000007000000e0ff8106cfa1e4fffdf96ecfc73fd3357ae36caa0416fa4f376b36acf00b7805be301e4991f7c8cf5f3fc303ebe1aa5323edeb51e2f0ca3ebbc257699a1f1302000000000000007d026ba8af6300371c2102000000720fd38bfbb770c1f5a8aec872ea772ec58904000000008d9800361b1257aba9c500022012010001de5000"/177, 0xb1, 0x80a, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f00000000c0)=0x7) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYRES16=r1]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x1, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a) mknod(0x0, 0x2000, 0xd02) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f00000002c0)={&(0x7f0000000180)='./bus\x00', 0x565, 0x0}) execve(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000340)='/dev/rvnd0c\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000680)=[&(0x7f0000000400)='*-:\x00', &(0x7f0000000440)='/dev/rvnd0c\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000540)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000580)='}\x00', &(0x7f00000005c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000600)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000640)=',V:]@\x00']) setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f0000000180)=0x5, 0x4) sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18, 0x401}, 0x0) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000100)) r4 = socket(0x11, 0x3, 0x0) getsockopt$sock_int(r4, 0xffff, 0x1021, 0x0, 0x0) dup(r4) r5 = socket$inet(0x2, 0x3, 0x8) getsockopt(r5, 0x0, 0x67, 0x0, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) syz_extract_tcp_res(&(0x7f0000000140)={0x41424344}, 0x5, 0x8000) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x89, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x22, 0x7b, 0x68, 0x3, 0x9, 0x67, 0x0, @empty, @loopback}, @tcp={{0x1, 0x2, r6, r7, 0x1, 0x0, 0x17, 0x20, 0x400, 0x0, 0x9, {[@generic={0x4, 0x12, "4fa7c4ff7a72b468c14d74cd00ac81d4"}, @eol, @md5sig={0x13, 0x12, "eb40fd228987aafdfca2020b278c0680"}, @sack={0x5, 0xe, [0x8, 0x942, 0x101]}, @generic={0x13, 0x11, "bf5f40da1f1df3a345c90af86ce6ee"}, @mss={0x2, 0x4, 0x2}]}}, {"36d8aba37a4b9370bf353d"}}}}}}) 298.264867ms ago: executing program 2 (id=230): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000003, 0xffffffffffffffff}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) r1 = socket(0x18, 0x3, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000040)={0x7, 0x6}, 0x10) getsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 288.239108ms ago: executing program 5 (id=231): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) r2 = socket(0x2, 0x2, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) sendmsg$unix(0xffffffffffffffff, 0x0, 0x406) connect$unix(r2, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r3 = open(0x0, 0x0, 0x11b) setreuid(0x0, 0xee01) ioctl$TIOCCONS(r3, 0x80047462, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fchmod(0xffffffffffffffff, 0xf7fb079a74590f3) r4 = socket(0x2, 0x1, 0x0) bind(r4, &(0x7f0000000000), 0x10) listen(r4, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x615, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x11, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x2, 0x1, 0x0) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) connect$unix(r5, &(0x7f0000000000), 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000380)={0x0, 0x8}, 0xa66f1f68c3106312, 0x0) 222.030942ms ago: executing program 1 (id=232): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) open(&(0x7f0000000280)='./bus\x00', 0x10000, 0x0) (async) r0 = open(&(0x7f0000000280)='./bus\x00', 0x10000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x61, 0x80, 0x17, 0x3}, {0x40, 0x1, 0x1, 0x3}, {0x400e, 0x4, 0x53, 0x800207fc}]}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket(0x11, 0x3, 0x0) (async) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000508000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be2864a886f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42121000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b5d6caea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab71d89e00004070000000013000000", 0xb1, 0x0, 0x0, 0x0) pread(r0, &(0x7f0000000000)="2beba8c5bfaaff44b437dfbb000000", 0x50cc3a, 0x80000000) 179.3611ms ago: executing program 2 (id=233): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240), 0x0) 176.737522ms ago: executing program 2 (id=234): r0 = socket(0x2, 0x2, 0x0) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) r1 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) ftruncate(r1, 0xffffffff) (async) chmod(&(0x7f00000001c0)='./file1/file0\x00', 0x20) (async) close(r1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) syz_emit_ethernet(0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa1f5a688e7"]) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[]) (async) connect$unix(r0, &(0x7f0000000000), 0x10) (async) chmod(&(0x7f0000000040)='.\x00', 0x35e) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setitimer(0x0, &(0x7f0000000000)={{0x6, 0x1}, {0x4, 0x8000000000000000}}, &(0x7f0000000040)) (async) setuid(0x0) (async) mkdir(&(0x7f0000000240)='./file1/file0\x00', 0x84) (async, rerun: 32) unveil(&(0x7f0000000280)='./file1/file0\x00', &(0x7f0000000200)='W\x00') (async, rerun: 32) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) setuid(0xee01) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x5, 0x2a2, 0xffffffffffffffff, 0x0, 0x8000000000000003, 0x80000000000000c, 0x100000001, 0x40}) (async, rerun: 32) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x7fff, 0x7, 0xd5, "00000000000000000000001500", 0x3, 0x2}) (rerun: 32) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_INTR(r3, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x2005}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) (async) ioctl$TIOCSETA(r2, 0xcd504404, &(0x7f0000000000)={0x20000b, 0x2, 0x1, 0x2f, "cd0000008000000000000000001500", 0x400c8003, 0x6}) (async) pwrite(r0, &(0x7f0000000000)="58eb22d8d54a87e7cfaf8792041e0c7d3916463db2887959479ccbc48518830d1702aee0f252c1a26cb596b559cd", 0x2e, 0x5) (async) r4 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SPKRTONE(r4, 0x80085301, &(0x7f0000000340)={0x8105}) 156.98578ms ago: executing program 5 (id=235): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x2) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x5) ioctl$FIONREAD(r1, 0xc020691b, &(0x7f0000000100)) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r3 = kqueue() rename(0x0, &(0x7f0000000240)='./file0\x00') kevent(r3, &(0x7f0000000080), 0xe4a, 0x0, 0x4000a9fa, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000380)={0x1, &(0x7f0000000400)=[{0x5c, 0x5, 0x25, 0x5}, {0x3, 0x10, 0xfd, 0x9}, {0x6, 0x4, 0x53, 0x80000000}]}) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x549, "225e196f00000000000000000edd0000f400", 0xfffffffc, 0x400}) open(0x0, 0x40, 0x20) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050400", 0x5, 0x400, 0x0, 0x0) unveil(&(0x7f0000000080)='.\x00', 0x0) r5 = socket(0x11, 0x3, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) select(0x40, &(0x7f0000000040)={0x40009, 0x5, 0x4008, 0x5, 0x3, 0x1000000000090, 0x0, 0x5}, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r6, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$unix(r5, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 156.48015ms ago: executing program 1 (id=236): ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xc2585601, 0x0) setsockopt$inet_opts(0xffffffffffffff9c, 0x0, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) execve(0x0, 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x8, [{0x0, 0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x3}, {}, {0x0, 0x5f}, {}, {0x2, 0x2}, {}, {}, {0x0, 0x1fd}, {0x3}, {0x2, 0xffc}, {0x0, 0x2}, {}, {0x2, 0x2}, {0x3}, {0x2}, {0x0, 0x7ff}, {0x5, 0xffffffff}, {}, {0x3}, {0x0, 0x400}, {}, {0x2, 0x3}, {0x2, 0xfffffffd}, {}, {0x2}, {}, {0x1, 0xa}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37) 156.216672ms ago: executing program 0 (id=237): r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x1}, 0xc) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6c, 0x0, 0xffffffffffffff78}, 0x1041) (async) getrlimit(0x3, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10, 0x8) ioctl$PCIOCGETROM(r1, 0xc0107005, &(0x7f0000000180)={{}, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) (async) r2 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) (async) pipe2(&(0x7f0000000100), 0x10004) (async) ioctl$FIONREAD(r1, 0x80606954, &(0x7f0000000200)) (async) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c0000", 0x6) 86.651055ms ago: executing program 6 (id=238): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) sysctl$kern(&(0x7f0000000180)={0x1, 0x52}, 0x2, &(0x7f0000000180), &(0x7f0000000140), 0x0, 0x0) sysctl$kern(&(0x7f0000000440)={0x1, 0x49}, 0x2, &(0x7f00000009c0), &(0x7f0000000a40), &(0x7f0000000c00), 0x0) openat$pf(0xffffffffffffff9c, 0x0, 0x10000, 0x0) mkdirat(r0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28) r1 = openat$vnd(0xffffffffffffff9c, 0x0, 0x10, 0x0) open$dir(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8040, 0x390) ioctl$VNDIOCGET(r1, 0x41946472, &(0x7f0000000480)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffff, 0x8000, 0x575}) lseek(0xffffffffffffffff, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6608816a00180630fe8000000000000000000000000000bbf68000000000000000000000000000aa4e234e20", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB="600200bd90780087038304"]) sendmsg$unix(0xffffffffffffffff, 0x0, 0x400) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffaa) sysctl$net_inet_tcp(&(0x7f00000001c0), 0x4, &(0x7f0000000200)="ad1564972069b9731021561f3ef5d4ec25d727e7732b456c60cb7e5b377a006d830ea335483769256c762f947a42ec18cb7d8ba5fa5d7ebee77c2c", &(0x7f00000000c0)=0x3b, &(0x7f0000000100)="e7f374", 0x3) 2.759592ms ago: executing program 4 (id=239): openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x3}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0xff}, {0x2}, {0x3}, {0x3, 0xfffffffd}, {}, {}, {0x0, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {0x0, 0x3}, {}, {0x1, 0xfffffffc}, {0x2}, {}, {}, {0x2}, {0x0, 0x3}, {}, {}, {}, {}, {0x1, 0x57fd}]}) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 841.477µs ago: executing program 2 (id=240): r0 = socket(0x18, 0x8000, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040), 0x0) setsockopt(r0, 0x1000000000029, 0xc, 0x0, 0x0) mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000002740)='./file0\x00', 0x8000, 0x1f6) connect$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x2}, 0x8) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0x7, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = socket(0x1e, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)="79040f91f15da040473675618dcd42b074", 0x11) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r3, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCCLR(r4, 0xc0a86b04, &(0x7f0000000200)={0x0, 0x10000, 0x0}) ioctl$FIONREAD(r2, 0x8014695a, &(0x7f00000001c0)) 555.993µs ago: executing program 0 (id=241): clock_gettime(0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000000)={0x7, 0x7fffffff}, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000100)={0x6, 0x8}) r1 = openat$pf(0xffffffffffffff9c, 0x0, 0x10000, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x80, 0x0) r2 = openat$vmm(0xffffffffffffff9c, 0x0, 0x8, 0x0) ioctl$VMM_IOC_INTR(r2, 0xca605601, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) r4 = socket(0x18, 0x1, 0x6) setsockopt$sock_int(r4, 0xffff, 0x100, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000000080), 0x0, 0x0, 0x0) ioctl$BIOCSRTIMEOUT(r1, 0x8010426d, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x84, 0xfe, 0xa}, {0x1, 0x12, 0x6, 0x1001}, {0x29e, 0xa, 0x0, 0x40003}]}) setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) r5 = syz_open_pts() r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETMAP(r6, 0x8010570e, &(0x7f0000000040)={0x2, &(0x7f00000002c0)=[{0x1fc4, 0x9, 0x8000, 0x9, 0x6}, {0x8001, 0x2, 0x7, 0x4b, 0x8}]}) close(r5) syz_open_pts() r7 = socket(0x2, 0x4001, 0x0) r8 = dup(r7) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000616000/0x3000)=nil}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00008d0000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x9}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x8a9}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x1}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x100006}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0x2}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xb}, {&(0x7f0000637000/0x3000)=nil, &(0x7f000069b000/0x3000)=nil, 0xc}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00000c9000/0x1000)=nil, 0x5}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x80000}, {&(0x7f000062d000/0x3000)=nil, &(0x7f0000668000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x8000000000000001}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000140000/0xc00000)=nil, 0x80000}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x5}], './file0\x00', 0x200}) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaa94aaaaaaaaaaaaaaaaaa86dd600000c0002a00f900000000000000000000ffffac1400aa00fe00000100514210b21eadce5c00044e204e20", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="500480039078fffe"]) ioctl$FIONREAD(r8, 0xc0106924, &(0x7f00000001c0)) sysctl$hw(&(0x7f00000000c0)={0x6, 0x12}, 0x2, 0x0, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) 175.707µs ago: executing program 2 (id=242): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x5c, 0x80, 0xfe, 0x1}, {0x1, 0x71, 0x2, 0x6}, {0x400e, 0x1, 0x53, 0x6}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x91, 0x0, 0x7}, {0x40, 0xf, 0xff, 0x7}, {0x6, 0x80, 0x8}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) 0s ago: executing program 2 (id=243): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) open$dir(&(0x7f00000000c0)='./file2\x00', 0x200, 0x0) (async) unveil(&(0x7f0000000400)='./file2\x00', &(0x7f0000000440)='c\x00') syz_emit_ethernet(0x8a, &(0x7f0000000300)={@local, @random="5fbb8af09d7c", [], {@ipv6={0x86dd, {0x6, 0x6, "00ed00", 0x54, 0x33, 0x8, @local={0xfe, 0x80, '\x00', 0x0}, @rand_addr='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', {[@hopopts={0x6, 0x1, '\x00', [@jumbo, @padn={0x1, 0x1, [0x0]}]}, @hopopts={0x64, 0x4, '\x00', [@ra={0x5, 0x2, 0xffc0}, @padn, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn, @generic={0xf6, 0x2, '\x00\x00'}]}], @tcp={{0x2, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x4, 0x0, 0x4}}}}}}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error load: 2.05 cmd: getty 329 [ttyin] 0.00u 0.00s 0% 329k free inode //107114 had 31104 blocks mode = 020000, inum = 107123, fs = / panic: ffs_valloc: dup alloc Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *117418 87620 0 0 0x4000000 1K syz-executor 281246 6854 0 0 0x4000000 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff8336ef54) at panic+0x1e5 ffs_inode_alloc(fffffd806fe52cf0,2000,fffffd80097fb6e8,ffff80003c42c250) at ffs_inode_alloc+0x94e ufs_makeinode(2000,fffffd805c228a50,ffff80003c42c468,ffff80003c42c498) at ufs_makeinode+0xcd ufs_mknod(ffff80003c42c310) at ufs_mknod+0x5b VOP_MKNOD(fffffd805c228a50,ffff80003c42c468,ffff80003c42c498,ffff80003c42c398) at VOP_MKNOD+0x101 domknodat(ffff8000fffe7778,ffffff9c,200000000280,2000,1e5f) at domknodat+0x469 syscall(ffff80003c42c630) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb9aeefc56e0, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: ffs_valloc: dup alloc ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8336ef54) at panic+0x1e5 ffs_inode_alloc(fffffd806fe52cf0,2000,fffffd80097fb6e8,ffff80003c42c250) at ffs_inode_alloc+0x94e ufs_makeinode(2000,fffffd805c228a50,ffff80003c42c468,ffff80003c42c498) at ufs_makeinode+0xcd ufs_mknod(ffff80003c42c310) at ufs_mknod+0x5b VOP_MKNOD(fffffd805c228a50,ffff80003c42c468,ffff80003c42c498,ffff80003c42c398) at VOP_MKNOD+0x101 domknodat(ffff8000fffe7778,ffffff9c,200000000280,2000,1e5f) at domknodat+0x469 syscall(ffff80003c42c630) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb9aeefc56e0, count: -9 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c42bfe0 rbx 0xffff8000299eeddf rdx 0xffff8000014575c0 rcx 0xffff8000fffe7778 rax 0xffff8000299edff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x154ebd4528ff2cfe r11 0x471ffe50163d1bd0 r12 0xffff8000299eebe0 r13 0 r14 0 r15 0x1 rip 0xffffffff81089aa5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c42bfd0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=117418 pid=87620 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=50, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000fffe4fb8,0xffff8000fffe7cb8 process=0xffff8000393ec4f0 user=0xffff80003c427000, vmspace=0xfffffd806c209200 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 77415 457412 87111 0 2 0 syz-executor 77415 445782 87111 0 2 0x4000000 syz-executor 87620 233613 59312 0 2 0 syz-executor *87620 117418 59312 0 7 0x4000000 syz-executor 31817 321188 48516 0 2 0 syz-executor 31817 31057 48516 0 3 0x4000080 fsleep syz-executor 76169 278322 66240 0 2 0 syz-executor 76169 141577 66240 0 3 0x4000080 fsleep syz-executor 6854 431318 72492 0 2 0 syz-executor 6854 281246 72492 0 7 0x4000000 syz-executor 36971 420724 45009 0 2 0 syz-executor 36971 513139 45009 0 3 0x4000080 fsleep syz-executor 76374 438618 12505 0 3 0x80 nanoslp syz-executor 76374 102732 12505 0 3 0x4000080 kqread syz-executor 76374 36446 12505 0 3 0x4000080 fsleep syz-executor 91017 419741 0 0 3 0x14200 bored sosplice 12505 477085 58837 0 2 0x2 syz-executor 66240 418498 58837 0 3 0x82 nanoslp syz-executor 45009 262694 58837 0 3 0x82 nanoslp syz-executor 59312 154497 58837 0 3 0x82 nanoslp syz-executor 87111 417077 58837 0 3 0x82 nanoslp syz-executor 48516 338682 58837 0 3 0x82 nanoslp syz-executor 86242 23296 58837 0 3 0x2 biowait syz-executor 72492 132748 58837 0 3 0x82 nanoslp syz-executor 58837 486513 74698 0 3 0x82 kqread syz-executor 74698 46786 75876 0 3 0x10008a sigsusp ksh 75876 365053 55780 0 3 0x98 kqread sshd-session 55780 256772 13034 0 3 0x92 kqread sshd-session 329 89839 1 0 3 0x100083 ttyopn getty 13034 2511 1 0 3 0x88 kqread sshd 30511 467854 38744 74 3 0x1100092 bpf pflogd 38744 401126 1 0 3 0x80 sbwait pflogd 90226 101356 39330 73 3 0x1100090 kqread syslogd 39330 173765 1 0 3 0x100082 sbwait syslogd 18957 410292 1 0 3 0x100080 kqread resolvd 65024 332698 80760 77 3 0x100092 kqread dhcpleased 79504 437461 80760 77 3 0x100092 kqread dhcpleased 80760 198273 1 0 3 0x80 kqread dhcpleased 67335 167381 0 0 3 0x14200 bored smr 60714 368780 0 0 2 0x14200 zerothread 61215 219405 0 0 3 0x14200 aiodoned aiodoned 45795 209482 0 0 3 0x14200 syncer update 46639 253067 0 0 3 0x14200 cleaner cleaner 65951 418471 0 0 3 0x14200 reaper reaper 89691 490386 0 0 3 0x14200 pgdaemon pagedaemon 85676 355627 0 0 3 0x14200 bored viomb 38847 17468 0 0 3 0x40014200 acpi0 acpi0 30150 219898 0 0 3 0x40014200 idle1 82644 319493 0 0 3 0x14200 bored softnet1 91544 304364 0 0 3 0x14200 bored softnet0 80408 420884 0 0 3 0x14200 bored systqmp 43301 335990 0 0 3 0x14200 bored systq 97160 364064 0 0 3 0x14200 tmoslp softclockmp 38182 5374 0 0 3 0x40014200 tmoslp softclock 73374 317070 0 0 3 0x40014200 idle0 1 431170 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 87620 (syz-executor) thread 0xffff8000fffe7778 (117418) exclusive rrwlock inode r = 0 (0xfffffd806fe52eb8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_makeinode+0xcd #8 ufs_mknod+0x5b #9 VOP_MKNOD+0x101 #10 domknodat+0x469 #11 syscall+0xb17 #12 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806fe52d90) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 domknodat+0xb4 #8 syscall+0xb17 #9 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff838ae6d8) #0 witness_lock+0x5f1 #1 syscall+0xaf4 #2 Xsyscall+0x128 Process 86242 (syz-executor) thread 0xffff80002a272fa0 (23296) exclusive rrwlock inode r = 0 (0xfffffd807475e118) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806c4130d0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10245 11226K 11236K 166960K 11650 0 pcb 18 13K 14K 166960K 105 0 rtable 240 9K 9K 166960K 418 0 pf 37 18K 21K 166960K 76 0 ifaddr 44 7K 7K 166960K 57 0 ifgroup 55 2K 2K 166960K 67 0 sysctl 4 1K 9K 166960K 9 0 counters 68 36K 37K 166960K 82 0 ioctlops 0 0K 4K 166960K 1530 0 iov 0 0K 12K 166960K 14 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1370 86K 87K 166960K 1574 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 8 0 VM map 2 1K 1K 166960K 2 0 sem 10 0K 0K 166960K 13 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 93K 166960K 375 0 sigio 0 0K 0K 166960K 5 0 proc 72 115K 164K 166960K 542 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 37 0 in_multi 103 7K 7K 166960K 117 0 ether_multi 1 0K 0K 166960K 4 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 235 1049K 1049K 166960K 235 0 exec 0 0K 1K 166960K 400 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 244 167K 181K 166960K 5468 0 UVM aobj 10 2K 2K 166960K 10 0 pinsyscall 42 84K 104K 166960K 1542 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 20 0 NDP 12 0K 2K 166960K 34 0 temp 47 8648K 8712K 166960K 19027 0 kqueue 15 24K 28K 166960K 65 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 57 0 54 1 0 1 1 0 8 0 rtentry 176 125 0 21 6 0 6 6 0 8 0 unpcb 144 155 0 136 2 0 2 2 0 8 0 syncache 336 6 0 6 1 0 1 1 0 8 1 tcpqe 32 2 0 2 1 1 0 1 0 8 0 tcpcb 736 198 0 191 8 1 7 7 0 8 5 arp 136 21 0 3 1 0 1 1 0 8 0 inpcb 328 513 0 502 12 5 7 12 0 8 5 nd6 152 26 0 0 1 0 1 1 0 8 0 pkpcb 40 2 0 2 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 7 0 7 1 0 1 1 0 8 1 pfstscr 40 2 0 2 1 0 1 1 0 8 1 pffrag 232 3 0 1 1 0 1 1 0 482 0 pffrnode 88 2 0 1 1 0 1 1 0 8 0 pffrent 40 6 0 3 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfanchor 1288 3 0 0 1 0 1 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfstitem 24 40 0 1 1 0 1 1 0 8 0 pfstkey 128 42 0 3 2 0 2 2 0 8 0 pfstate 384 42 0 3 4 0 4 4 0 8 0 pfrule 1344 25 0 20 2 1 1 2 0 8 0 rttmr 136 1 0 1 1 1 0 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 574 0 107 31 1 30 31 0 8 0 art_table 40 575 0 107 5 0 5 5 0 8 0 art_node 32 125 0 31 1 0 1 1 0 8 0 sysvmsgpl 40 5 0 1 1 0 1 1 0 8 0 semupl 112 2 0 2 2 1 1 1 0 8 1 semapl 112 10 0 2 1 0 1 1 0 8 0 shmpl 112 7 0 0 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 2027 0 516 95 0 95 95 0 8 0 ffsino 296 2027 0 516 117 0 117 117 0 8 0 nchpl 144 2543 0 843 64 0 64 64 0 8 0 rtmask 32 1 0 1 1 0 1 1 0 8 1 vnodes 216 2231 0 0 124 0 124 124 0 8 0 namei 1024 8733 0 8731 2 1 1 2 0 8 0 percpumem 16 56 0 7 1 0 1 1 0 8 0 kstatmem 264 38 0 12 3 0 3 3 0 8 1 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 scxspl 216 15890 0 15889 10 2 8 8 1 8 7 plimitpl 152 110 0 92 1 0 1 1 0 8 0 sigapl 424 696 0 648 7 1 6 7 0 8 0 knotepl 120 310 0 0 10 0 10 10 0 8 0 kqueuepl 224 102 0 89 2 0 2 2 0 8 1 pipepl 344 141 0 114 3 0 3 3 0 8 0 fdescpl 528 679 0 648 3 0 3 3 0 8 0 filepl 160 3907 0 3685 19 3 16 19 0 8 5 lockfpl 104 82 0 79 1 0 1 1 0 8 0 lockfspl 48 35 0 32 1 0 1 1 0 8 0 sessionpl 144 24 0 15 1 0 1 1 0 8 0 pgrppl 48 32 0 15 1 0 1 1 0 8 0 ucredpl 104 470 0 457 1 0 1 1 0 8 0 zombiepl 144 648 0 648 1 0 1 1 0 8 1 processpl 1232 696 0 648 5 0 5 5 0 8 0 procpl 664 1133 0 1077 6 0 6 6 0 8 0 sosppl 168 3 0 3 2 1 1 1 0 8 1 sockpl 752 797 0 764 17 6 11 17 0 8 6 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 113 0 0 15 0 15 15 0 8 0 mcl2k 2048 25 0 0 4 0 4 4 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 159 0 0 10 0 10 10 0 8 0 bufpl 280 6703 0 566 439 0 439 439 0 8 0 anonpl 32 11718 0 0 95 0 95 95 0 246 0 amapchunkpl 152 17543 0 17052 33 0 33 33 0 158 6 amappl16 200 3096 0 3064 26 11 15 24 0 8 8 amappl15 192 20 0 20 1 1 0 1 0 8 0 amappl14 184 10 0 10 1 1 0 1 0 8 0 amappl13 176 433 0 432 1 0 1 1 0 8 0 amappl12 168 1056 0 1014 3 0 3 3 0 8 0 amappl11 160 90 0 90 1 1 0 1 0 8 0 amappl10 152 51 0 37 1 0 1 1 0 8 0 amappl9 144 242 0 242 1 1 0 1 0 8 0 amappl8 136 39 0 36 1 0 1 1 0 8 0 amappl7 128 85 0 84 1 0 1 1 0 8 0 amappl6 120 277 0 264 1 0 1 1 0 8 0 amappl5 112 82 0 71 1 0 1 1 0 8 0 amappl4 104 440 0 410 1 0 1 1 0 8 0 amappl3 96 2775 0 2684 4 1 3 3 0 8 0 amappl2 88 804 0 728 2 0 2 2 0 8 0 amappl1 80 10736 0 10144 15 1 14 15 0 8 0 amappl 88 4664 0 4499 5 0 5 5 0 92 0 uvmvnodes 80 2231 0 0 46 0 46 46 0 8 0 dma32768 32768 1 0 1 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 7 0 7 2 1 1 1 0 8 1 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 9 0 0 1 0 1 1 0 8 0 uaddrrnd 24 679 0 648 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 679 0 648 1 0 1 1 0 8 0 vmmpekpl 168 7397 0 7362 3 0 3 3 0 8 0 vmmpepl 168 51999 0 50090 105 0 105 105 0 357 11 vmsppl 488 678 0 648 5 1 4 5 0 8 0 rwobjpl 80 20004 0 16842 70 0 70 70 0 8 0 pdppl 4096 1366 0 1296 106 34 72 86 0 8 2 pvpl 32 20296 0 0 164 0 164 164 0 265 0 pmappl 256 678 0 648 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 286 0 39 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83798ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838ae4d0) at __mp_lock+0x190 intr_handler(ffff80003ac14b70,ffff80000007aa80) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __mp_lock(ffffffff838ae4d0) at __mp_lock+0x192 vn_write(fffffd806bfcb2c0,ffff80003ac14da8,0) at vn_write+0x4e dofilewritev(ffff8000fffe4a88,c8,ffff80003ac14da8,0,ffff80003ac14e60) at dofilewritev+0x242 sys_write(ffff8000fffe4a88,ffff80003ac14f10,ffff80003ac14e60) at sys_write+0xa2 syscall(ffff80003ac14f10) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x565d8e96f50, count: 3 ddb{0}> trace x86_ipi_db(ffffffff83798ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838ae4d0) at __mp_lock+0x190 intr_handler(ffff80003ac14b70,ffff80000007aa80) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __mp_lock(ffffffff838ae4d0) at __mp_lock+0x192 vn_write(fffffd806bfcb2c0,ffff80003ac14da8,0) at vn_write+0x4e dofilewritev(ffff8000fffe4a88,c8,ffff80003ac14da8,0,ffff80003ac14e60) at dofilewritev+0x242 sys_write(ffff8000fffe4a88,ffff80003ac14f10,ffff80003ac14e60) at sys_write+0xa2 syscall(ffff80003ac14f10) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x565d8e96f50, count: -12 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff8336ef54) at panic+0x1e5 ffs_inode_alloc(fffffd806fe52cf0,2000,fffffd80097fb6e8,ffff80003c42c250) at ffs_inode_alloc+0x94e ufs_makeinode(2000,fffffd805c228a50,ffff80003c42c468,ffff80003c42c498) at ufs_makeinode+0xcd ufs_mknod(ffff80003c42c310) at ufs_mknod+0x5b VOP_MKNOD(fffffd805c228a50,ffff80003c42c468,ffff80003c42c498,ffff80003c42c398) at VOP_MKNOD+0x101 domknodat(ffff8000fffe7778,ffffff9c,200000000280,2000,1e5f) at domknodat+0x469 syscall(ffff80003c42c630) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb9aeefc56e0, count: 6 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8336ef54) at panic+0x1e5 ffs_inode_alloc(fffffd806fe52cf0,2000,fffffd80097fb6e8,ffff80003c42c250) at ffs_inode_alloc+0x94e ufs_makeinode(2000,fffffd805c228a50,ffff80003c42c468,ffff80003c42c498) at ufs_makeinode+0xcd ufs_mknod(ffff80003c42c310) at ufs_mknod+0x5b VOP_MKNOD(fffffd805c228a50,ffff80003c42c468,ffff80003c42c498,ffff80003c42c398) at VOP_MKNOD+0x101 domknodat(ffff8000fffe7778,ffffff9c,200000000280,2000,1e5f) at domknodat+0x469 syscall(ffff80003c42c630) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb9aeefc56e0, count: -9