last executing test programs: 765.603014ms ago: executing program 2 (id=3): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x80, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x402}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x80, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x402}]}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xf1527667046cedc3, 0x2}, 0x7fffffff, 0xfffffffffffffffe, 0x800}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) (async) close(r0) socket(0x18, 0x2, 0x0) (async) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x2a, &(0x7f0000000040)="84ae975e", 0x4) (async) setsockopt(r1, 0x1000000000029, 0x2a, &(0x7f0000000040)="84ae975e", 0x4) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000740)='.\x00') execve(0x0, &(0x7f0000000000)=[&(0x7f0000000100)='//\x00'], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f0000000240)="a612165d535a3672ab3eed65745ca3329e519b6ef46dcae877db092ba08a89dbb5f7d8062fdf8896", &(0x7f0000000080)=0x28, 0x0, 0x0) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000240)="a612165d535a3672ab3eed65745ca3329e519b6ef46dcae877db092ba08a89dbb5f7d8062fdf8896", &(0x7f0000000080)=0x28, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r2, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe) sysctl$ddb(&(0x7f0000000040)={0x9, 0x5}, 0x2, &(0x7f0000000240)="acd2bccd", &(0x7f0000000140)=0x4, &(0x7f0000000180), 0x0) setreuid(0x0, 0xee01) (async) setreuid(0x0, 0xee01) clock_settime(0x100000000000000, 0x0) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000000c0)={0x0}, 0xc) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x5266, 0x9, r3}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x7b) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x7b) 520.543631ms ago: executing program 2 (id=9): setreuid(0xee00, 0x0) r0 = getuid() setuid(r0) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x23, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x12}, 0x4, 0x0, &(0x7f0000000100), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x17}, 0x4, &(0x7f0000000080), &(0x7f0000000100), 0x0, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x102, 0xfffffff6, 0xfffffffe, 0x1, 0x8a, 0x8, 0x3e, 0x2, 0x0, 0x100000000000002, 0x3}) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) setrlimit(0x8, &(0x7f0000000040)={0xbf6, 0x10050}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0xc0104407, &(0x7f0000000000)={0x0, 0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaa"]) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6d4) r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) ioctl$VMM_IOC_WRITEREGS(r4, 0x82485608, 0x0) ioctl$FIOASYNC(r4, 0x80047470, &(0x7f00000000c0)=0x5) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x80}], 0x1, 0x0) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x10005, 0x0}) 518.880112ms ago: executing program 1 (id=2): r0 = socket(0x2, 0x2, 0x0) sendto$unix(r0, &(0x7f0000000000)="2b9222064c31d2f3a55a84b990887984d93725f0f2babe29d748718df15000c13b6e8bd67b5e7ebe7440df973e5c0f2e718f997cdec94311f85b3d0c7726991282f3b13c4e2b41ac168830bebf9788eacfaeef32839a4fa34f063c98fed95dc1ae69976fc41d96c4f3146a5ae0ada9c115cb239578c4044f5fd18018e0631e12f1f77ce4877b5276dcffbd72f1d705e6f6841869d3bd1808f3913b00ca4f0e71aaa7c33ec8fe718d205da5c2bde05f76752574a0183028dc0621d56f5888652b3129e2e5fbedbb1cbf73f8fdb9b35e425b33299b220281a65d968daca558be9aa4009d537a7c46685d2df2c0748751cbec63c4b9f12a", 0xf6, 0x8, 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x4, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f000013c000/0x4000)=nil}, {&(0x7f0000692000/0x3000)=nil, &(0x7f0000a1e000/0x1000)=nil, 0xfffffffffffffff9}, {&(0x7f00007e3000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000009}, {&(0x7f00005ce000/0x2000)=nil, &(0x7f0000049000/0x3000)=nil, 0x7fff}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f00004ed000/0x1000)=nil, 0xeffffffffffffffd}, {&(0x7f000089c000/0x1000)=nil, &(0x7f0000159000/0x4000)=nil, 0x40000000}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000729000/0x1000)=nil}, {&(0x7f000015b000/0x3000)=nil, &(0x7f0000496000/0x3000)=nil, 0x3}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f000067e000/0x2000)=nil}, {&(0x7f000000e000/0x4000)=nil, &(0x7f000062e000/0x2000)=nil}, {&(0x7f0000000000/0xc00000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000129000/0x2000)=nil, &(0x7f0000001000/0x800000)=nil}], './file0\x00', 0x3}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1, 0x0, 0x37) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x428}, 0x2) r1 = socket(0x800000018, 0x1, 0x0) sendto(0xffffffffffffffff, 0x0, 0x58, 0x0, &(0x7f0000000080)=@in6={0x18, 0x3, 0x0, 0x1ff}, 0xc) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000000)=0x3ff, 0x4) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) getsockname$unix(r1, 0x0, &(0x7f00000010c0)) getsockopt(r0, 0x0, 0x20, 0x0, 0x0) socket(0x2, 0x2, 0x0) (async) sendto$unix(r0, &(0x7f0000000000)="2b9222064c31d2f3a55a84b990887984d93725f0f2babe29d748718df15000c13b6e8bd67b5e7ebe7440df973e5c0f2e718f997cdec94311f85b3d0c7726991282f3b13c4e2b41ac168830bebf9788eacfaeef32839a4fa34f063c98fed95dc1ae69976fc41d96c4f3146a5ae0ada9c115cb239578c4044f5fd18018e0631e12f1f77ce4877b5276dcffbd72f1d705e6f6841869d3bd1808f3913b00ca4f0e71aaa7c33ec8fe718d205da5c2bde05f76752574a0183028dc0621d56f5888652b3129e2e5fbedbb1cbf73f8fdb9b35e425b33299b220281a65d968daca558be9aa4009d537a7c46685d2df2c0748751cbec63c4b9f12a", 0xf6, 0x8, 0x0, 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x4, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f000013c000/0x4000)=nil}, {&(0x7f0000692000/0x3000)=nil, &(0x7f0000a1e000/0x1000)=nil, 0xfffffffffffffff9}, {&(0x7f00007e3000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000009}, {&(0x7f00005ce000/0x2000)=nil, &(0x7f0000049000/0x3000)=nil, 0x7fff}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f00004ed000/0x1000)=nil, 0xeffffffffffffffd}, {&(0x7f000089c000/0x1000)=nil, &(0x7f0000159000/0x4000)=nil, 0x40000000}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000729000/0x1000)=nil}, {&(0x7f000015b000/0x3000)=nil, &(0x7f0000496000/0x3000)=nil, 0x3}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f000067e000/0x2000)=nil}, {&(0x7f000000e000/0x4000)=nil, &(0x7f000062e000/0x2000)=nil}, {&(0x7f0000000000/0xc00000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000129000/0x2000)=nil, &(0x7f0000001000/0x800000)=nil}], './file0\x00', 0x3}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1, 0x0, 0x37) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x428}, 0x2) (async) socket(0x800000018, 0x1, 0x0) (async) sendto(0xffffffffffffffff, 0x0, 0x58, 0x0, &(0x7f0000000080)=@in6={0x18, 0x3, 0x0, 0x1ff}, 0xc) (async) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000000)=0x3ff, 0x4) (async) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) (async) getsockname$unix(r1, 0x0, &(0x7f00000010c0)) (async) getsockopt(r0, 0x0, 0x20, 0x0, 0x0) (async) 518.711253ms ago: executing program 3 (id=4): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0, 0x3}) socketpair(0x1e, 0x4, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) execve(0x0, 0x0, 0x0) 518.439442ms ago: executing program 6 (id=10): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r0, 0xc00c7006, &(0x7f0000000080)=0x100) setrlimit(0x8, &(0x7f0000000980)) openat$speaker(0xffffffffffffff9c, 0x0, 0x1, 0x0) 510.961952ms ago: executing program 2 (id=11): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) setgid(0xffffffffffffffff) (async) setgroups(0x0, 0x0) fchmod(r2, 0x7) (async) setuid(0xffffffffffffffff) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) recvmmsg(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)=""/194, 0xc2}, {&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f0000000240)=""/68, 0x44}, {&(0x7f00000002c0)=""/84, 0x54}, {&(0x7f0000000340)=""/239, 0xef}], 0x5, &(0x7f00000004c0)=""/85, 0x55}, 0x6}, 0x10, 0x1803, &(0x7f0000000580)={0x7ed, 0x3}) r3 = syz_open_pts() setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) (async) r4 = syz_open_pts() close(r4) (async) pledge(0x0, &(0x7f0000002840)='tty \x00 \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x03\x00\x00\x00H\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15+\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0/\x80vI\x94\x0f6>]\x84a\xf7\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8\t\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00') (async) r5 = syz_open_pts() ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000100)={0x9789, 0x8, 0xfffffff8, 0x80a19f, "081aa9003721fcb06e74f6527939001d00000008", 0x0, 0x4}) writev(r4, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) (async) ioctl$FIOASYNC(r3, 0x80047460, &(0x7f00000000c0)=0x4) (async) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x22, 0x0) close(r6) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x12, r6, 0x0) (async) ioctl$TIOCCDTR(r3, 0x20007478) (async) ioctl$TIOCCHKVERAUTH(r3, 0x2000741e) r7 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x1e) fcntl$lock(r7, 0x7, 0x0) (async) listen(r0, 0x4) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, 0x0, 0x8000000000000000, 0x4000000000000, 0xfffffffffffffffc, 0x0, 0x5}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) 510.619849ms ago: executing program 7 (id=8): r0 = open(0x0, 0x611, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x10, r1, 0x0) r2 = dup(r0) r3 = fcntl$getown(r0, 0x5) fcntl$setown(r2, 0x6, r3) clock_gettime(0x0, &(0x7f0000000140)) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) open(&(0x7f00000002c0)='./file0\x00', 0x710, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r4, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) 510.360008ms ago: executing program 6 (id=12): pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) renameat(r0, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00') (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xc008441e, &(0x7f0000000000)={0x5, 0x2, 0x100000, 0x4000, "97a2224ff1c10200000000000000795a6b47c1d1", 0x5, 0x4}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0) (async) madvise(&(0x7f00003e0000/0x12000)=nil, 0x12000, 0x6) 509.936169ms ago: executing program 2 (id=13): r0 = socket(0x18, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1025, &(0x7f0000000040), &(0x7f0000000080)=0x4) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) chmod(&(0x7f00000000c0)='./file1\x00', 0x13) setpgid(0x0, 0x0) setpgid(0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2006, 0x4f4b) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$VNDIOCSET(r1, 0x80045102, &(0x7f0000000140)={0x0, 0x0, 0x0}) setuid(0xee01) r2 = socket(0x18, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r2, 0x80206931, &(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0xc0) r4 = syz_open_pts() close(r4) syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000380)={0xf67c, 0xf200000, 0x9, 0x56d, "9cdc452e307e3904002f360000002f9e60cd3304", 0x6, 0x8001}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000001780)="bb6a12de96b93bf117983163d7f9a543d5549144d4ca9cdfe4c4c4dea9bc9434888cf93b22bdad65f2deb0f36f838c2c5cc459f6638f5deac132d3c37e31828b1796ea3cf6fb8b72e9219b1e3d27c13670a5de33962293e9f15433bc0972d8ae063401a9cbe1e8317a13b6bf9fd5103487fed28dfceff066803bb743ffd5d16c1aba434b0e2bb92c50409d8bb397ec74cf728db1636d7f817a7530226174fb145f92840264adea6752f807996eac4b1b484cbd0ff4dece4b0d6078ca6a115f2ebc04eeeb4147455bb056a1b33e69403dafbe091e7eb492f7b428e6a3984a4fd81ea679aab9b948e7893cc65612ce1024fe871f63ec75df9d592b6e38d7c42c80e7815ecd19ae29980beb4bc005906cca596809a6facf566e7d640dba15c2853297cb28583fdd67ce57dcb302990558dd9e3673fbddf45b87304a4e5231c46b04f8382e5ed39d46677e80137618507bb86f28e5784ffbfc1e7d6a8fa84856faa8439d99bf677715f3652953166c6419e0b00ae8b619fced12dff94e94fe01e4c0e78ec5d916d82cf65f29a90378bee875c3303df850f465a107f074daf88c6126b19446d5cb5f471aa155e685179e003928a36833330ac3d10b2416a7be9f1f956da2154d7e4a521a4bf61af7fbf8eea6aa2698314824fb6d22291b071ef8886748b6f5e5d176ee90d59ba58d63bbad39ecf8735e98c516bfa6fcd818916dba3506c86229310e591fef2653b624f554c638ce90c65f433c6f9626a4ee219e76c1610584d8c4db020b877517f73fe561e279f151466e63c23336c3366cbd7d1c319c2a52089c1a096dc5ddeac9e67bdd21b9722b0f49b352b2156bbbcde140d1e81a49736c0c34a465d8d2224b61b337b1128f46f41c5789643d376a79d60354e13ae23e1a8adc7a1f956b11e47f3bf7e04b5a77e674351653b795994ee2ab550b78e6a547df24dc787ab6f7a8dba219d5d8bee9a8e7f292b38dd021c76e481814efe7433e446792c1a498200597251f5b4db0a2eb05eb640d5e960446b027492e4336d92f1dbcf36efbd48d88869f72fd986b176ae0e5d68015d8ff5378ca0ea64085671faab30e637cb5f0b7e6dd7a1aaed13274895fcb5e0dda689afc80a5aa67ec0df9079df3fa79b5a5598119539fa8059dce279dfaa985312ed03f276e9da9d003205693624a539ab0ab4b5ad7479fd50217341d028acc93f699f27e87c86c7a77bb7c140cbabbbb658a2350bd36f5d55f36f23ecb6f8e301200b32f", 0x37e}], 0x1) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setuid(0xffffffffffffffff) ioctl$BIOCLOCK(r5, 0x20004276) ioctl$BIOCVERSION(r5, 0x2000427e, 0x0) r6 = msgget(0x0, 0x110) msgctl$IPC_SET(r6, 0x1, &(0x7f00000000c0)) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) 283.154233ms ago: executing program 7 (id=14): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) ftruncate(r0, 0x8531) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast1, @multicast1}}}}}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 267.863083ms ago: executing program 1 (id=15): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getppid() fcntl$setown(r0, 0x6, r2) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2f, 0x0, 0x37) fcntl$setstatus(r0, 0x4, 0xc0) write(r1, &(0x7f00000002c0)="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", 0xfffffdaf) execve(0x0, 0x0, 0x0) 105.915945ms ago: executing program 6 (id=16): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f00000000c0)=""/179, 0xb3}, {&(0x7f00000002c0)=""/229, 0xe5}], 0x3, 0x4) (async) mquery(&(0x7f00001cf000/0x3000)=nil, 0x3000, 0x4, 0x0, r0, 0x4) 104.416436ms ago: executing program 1 (id=17): syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="8f6f56ede655aebfeea6d8c486dd605f6ad900383a7f00000000000000002300000063b2894800000000000000000000aa"]) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSKBDIO_GETMAP(r0, 0x80047476, &(0x7f0000000000)={0x0, 0x0}) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) bind(r1, &(0x7f0000000040)=@un=@file={0x1, './file0\x00'}, 0xa) 103.970696ms ago: executing program 5 (id=6): bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1f95d27d48731892, 0x0, 0x1}, 0x8) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3}, {0x0, 0xfffffffc}, {}, {}, {0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x4}, {0x3}, {}, {0x3}, {}, {}, {0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x2}, {0x2}, {0x3}, {}, {}, {}, {}, {0x2}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x5a}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x48, 0x0, 0x37) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000300)}], 0x2) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffff"]) r0 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r0, 0x80206982, &(0x7f00000001c0)) syz_emit_ethernet(0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="fffffffffffffffffb6f805d88c7"]) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r2 = dup(0xffffffffffffffff) ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f0000000100)) ioctl$BIOCIMMEDIATE(r2, 0x80044270, &(0x7f00000001c0)=0x3) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) pread(r2, &(0x7f00000002c0)="69c4a504afb20e1d56d5f4bec16cb0bd7fdf2d40c4c77dd1ef23227efe9498ae", 0x20, 0x80) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x4040000000000000}) r3 = socket(0x18, 0x1, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[]) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0) r4 = getppid() msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x1, 0x68, r4, r4, 0x0, 0x4}) pipe(&(0x7f0000000400)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r5, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r6 = fcntl$getown(r5, 0x5) ktrace(&(0x7f0000000200)='./file0\x00', 0x0, 0xc1e, r6) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00070100000000", 0xc) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x1100, 0xffffffffffffffff) 102.515356ms ago: executing program 6 (id=18): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x4000}, 0x6, 0x861, 0xffffffffffffffff, 0x0, 0x0, 0x100000000, 0x9, 0xb}) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000000)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0x10011, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x5, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) r0 = socket(0x1, 0x2, 0x0) close(r0) r1 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) fcntl$lock(0xffffffffffffffff, 0xa, &(0x7f0000000080)={0x1, 0x0, 0xf7, 0x100000401}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x37, &(0x7f0000000040)="03000000", 0x4) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0x0}, 0x8) r3 = socket(0x800000018, 0x1, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x4085, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x104, 0x7}, 0x7, 0x7}) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) open(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x2}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) sysctl$net_inet_tcp(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000100)={0x4, 0x2, 0x6, 0x11}, 0x4, &(0x7f0000000140)="d0ed44b7b9a805b85af7adf44192fa6d1eb46d5356bad317cb97308239dee99b5c3a7393a18e44ea4870d5481b10f07531b05edf73dc8e2f16142e159522677c623cb0c4f0006af2da6a4af6e11961b469273767f3adb5f4d6e00f5152c91ff98699cf12d7d9c65b1285da53d727f86ab33860063b10bbd89e7c2e690cb7f194d32d373a5defb05999bf286a4c62a5e663c0b782ac268b19c64d2af286d20cf7416b9bfef460ebcb90814085b133f48bfed81bac3034ed921d2ec9d540e49412eb0a026b23bdaedf3210b5c0eac27c1148b3169f662ee1de5beff9d08ccbc14a77242d40670c8d2d82dadbf5c38d", &(0x7f0000000240)=0xee, &(0x7f0000000280)="6c5e8fa86a0ce26dfe289112d60f72dc0c891636b80c2d1a1e5fbfd889fec8881977a958bcb7ee83e2553d89d09490d6c2c6ff36cbd45d76f14add1b781e746a7d8cc9f1bf86052234df3919d42ba1818b4e0ac815747d3d9de6cb8d84e0d58b9bfc01fc1560769d9f020e3440bfee6922d2a5f0caca6ae688244348c6b2f3adf0ae7ba7d95f452067ca4c368319ee71add92df76b29cdc716cdeb9783fd6aed6bfc8fe8f6bd6e6419c57aa6d6f6569bb49e588eca6521a0f1cc195993b19efb59285cfbafec68bc5125758fba07cfa269a328a46d3ea4c82c877c8c44fc2fc18364ba6df76c8b90557f9a019fa0fc52927e09f0ca30bf239e7da59cd7b243b7b3420b6a92c0f119b42ed73074a2a5f1b993c225196da63e381dfc5ef4842ad6011a68df03e922be502de6821940732dc64488bde96dfefc8dc8b196a794031d23a91fba5c94548a77bd3deef25585c389d344d05622bcf706bb2bf16df392aa0c47292546d1d35b5a74a67b7b55cd1a4355a406b56f582392e09509a25f745bbd788c790795629a68c2022ce322ed6740923cc09121cf1a6882db3cabb5ca4c5120b5bc26823dfcdcacef5213e6391ab25cfdf9dbd028b85afadedc5a3f1d8d02a74b0d82a14531f244953852194b6d0e31022357c171420f294c6dfa6e4030a8a5b4e37d0cbbd232393e6e21182a66fbe0546bc7912bb4fba2e140e80261b4d53ea59409907de916254fb294181ddeb6a8a3f6362341329e6662ccbc727bc09de9c7b0b7369c701379029071e08f2d4124d717bf36fad87e3aef639361f48acd2c726a9c455cf7cc199372e11fb8315e8ab5ade8df6e2f7f3a4a2ace06c0f122197caedd398fbb2097cd0201e0d09f34227ee23273ebf2bb1a4c307a44dde792ecad61bea4f33a79cf6a659d32353621bcaf584d650c53e546dd7b4b588c6bf30a83fb46974403faa29baf684c36559b5ce9ca30a4bfdbe2a8397432e972d517b358135a516ec8bb692e1f9b48a9405fa89715d8ed88ce55358c5cea46c73c1c89d8db829ce1d90d5b5fd087e8dfed09d59d200d4ad3d2a01dd0c26c8c0596638ac94a2836f644797548b8373e9e16522dcc70fa2a316fb52f7ee2633214770713a352e39edf935713f61cd48c15e563c68e35ee5bffc9f79005478da0a11292fb92cf834ac65057193b8f0390b38609d61d3d9a5b69fb7472b66b2424d76c7369f5476ed9f8235d576bbfcd74f77985e53e951b8377c8d91cf6c2872bb7d1b99d0282cc55323b1fa19c6670ee71a42c1aaa97cebca080032a6512faa15059df41770beca1f084102235cfd0d01c163e37dbd91e038e4abe259409a3faf7429dc4822f9c04ff1a4f8924b5c90004b52abcba0e82b27500a95072d17e0fa466b8ec229fab3a88f0905861707ed8ad07ce584a69fd52b64a5ce8980b855135310ebe91c4a24b46b07e8f70e4a8a6a7b8f26184a41b50ee503e5852a3f754cca1bd9e3b4f123f5c23b34b67d0fcafa022a90936fb1355e1efbda481f08a14bcbd8b17a90b41aa2e320235fe265fb7069df3e6675961aefec1f2395a2491654588c5af6b26cd18447f20c4244a8442038e15165f2b6bb00b968abf242832493495634d95f6ccb7f38a41dbac67a31659f8f690b4c1b8c62db0760f0430c765793fd09f8546dd2bb46d9a969c4732b3d2aee494ee5fea5bd170be5b4d04d691c23e2fbae6b813aebeaee28c2795ea73992b651ca6b5a388f6ba349cb99ef9a6e796a1d81d78b275edeecf13b60f03b445c52367446f05b78d6d376dd3adc80a43a112525491004255b0ecf8980157bca7d08df789c26862262958b704a2ce1a7bbe6b4b74dff68919aaba6d78edeca1942b4955b3143d9a0eb15840a75216c3ebbcac81e5b997f42eef4b1c7408d86a02c6932838b756147cce50d3f76bb3654e6a28bd318f8f57f278373af19163307b97b6921f6551fe87faaf9ea6887d98ba0aa1b96842ca4a4363aa80dcf9b5472e975bf2828451cb81eb1a46233a074529ebf48860370b7e1684c9b29e08c17bec8215eddc1fa2462629df5002c16b09204617d9dc5c39e27f2ec72a1a1b78cd0a47236d4f013c8a7697cbd94faec1a14552c8679e720ad5c4165cd0022a8d6b4a13b14b70ec3553f6f0183526b0b1540d25079b733011f53c9e8f6c3da47de52181d8ed2c73948f8d14d681013cfb4fff44950f2726c6687c75b37c6dcda3d2cfa67b2559f7926b89c2fa2c3ef6fd90084d176bf55f4ec58b9e0abab1252ac4cbba15f7ebe30b4d3e8ad8e427fa5a0e9b108424ecda029dc4fa5ec0b7a0115a1d40cbac614ce07ea830d189dde9e62fd13935f2e232a5ad223b45176fa3371dbb6313d8b47c97ab3a01072c71660e7104b9af05fdc32e80fe8320196d83f20ee31cd15be2c2e60a4009be24d6306d0604b2318114a938e7c647ed039b86036e97355c7705470c447909eeec534c64ac636e94b9631cb93014b7737840f3c51a993be37d29563937863a256101ca9006aa1bb236924d18eac19087b57c58648402f1b9f6fa5d8ce265fbf9dd7013354024503cbea53f21523d70a1fe16ecb0957b64603bc4cbaebd23b0126d1b66738a68717e999e0c6c7f5a59d5b13c42aa43562bb55cdbfa17dc32c20cde677a306e65dd0c6a88ec2561fe2b8270e57fb601df29080ee6543c28c61db2626285ba8c19898b408b58d5f928629d4977c98a7a5b1b8ee9061fccb35f7b7ced69866723da68e5f9914b70c69a861d7c354ad0103897e2e7bc54d8aa4f4e56188420e940780bd902eb7119d8837843afb53960e99dbb4451e666a8c0e175e6948c181fbe7939eec5bad09250a82489cae508939343bf60173db5e73a1b2ffe97b24838ee058ec344b435d550bb50ecc469c2457c88c0098f5635943f13a0e08976e86184ca1acb965334400b112d2514f8e8e1408847be8cc0e1c997ea0949f0add78df5e844ccffaecea172d380811498a8d2be9e19bdef85d45f6270728ffc62ed96b8685dc6298dedef537bc22e4a82e55f52f03eca39dd1c7bb375d5ac84ade1cfb54574393035adbdb99e799a1f3006578a3394afe5371dc35fbc238edc3f745a92c87387834855e557516a352e13944a32ddef5fd0dc9d99af51726a45768f586c21bdbccec2bff19da5ae0e0eb9967b078043b73b4fccf0c109540221989b693222d2ad27848b13cafc278c5638c335db228d11a241527bcd51af50fb30f37a984df3c45edb6b36e5be3c486c1aa4561b0ad7e9a5069a3f15597974c3f4d7c84a2eba411d388e1c5b8601a47b107a57f9b92791d1de5f79ba14001978615d9444ae1d0021a87a12de4f5d818ae472f12730cbc1f555e70627adf8e182de28ae7cd95150503d9dbe20f3f8280b54c67298aa2153c18619d0554e749f9f5db72683a22cfd7078fe6fb92317d4c3705d774a1aa6b0fefbe36ae169b0e7b586a391c0fcb12d4ef1a49d1db992d4ca1eeab8b0be7ecf637e5f31171a5e489da84403b00fea59e8bd02fe98dbd4e350c52d90379629cba323fee8b7ba57117193742294900c83439324c61924a79e79eb2316c44db1bbb447503e73457814f6dc9fe70f430786a3eeb21815536f2b85450103b2302fdb81b2b31685331455cd8c03e5ce26e4d9d4172073c38e9d2929fc55c16505730c2784e14efed16c9630942f39d033a8ed4ba171b021df9ecafe80f5f0d8030f343ed790b42d0d4df433d21c61f7b5f410762a2b38c27799bd4b4424a4373de2e0a685d1dcd2c1d4829ef4b64a3cb276b8a6f6c724e182738998873ff7afcb60b9bd5241965ac26d08819afe535f8fe6a55fcd9c563d61ebc57f5e596230dabaa1b32251070e90488e36b8b4a3200d85a75c506db2acd948a8ca830896f3eeda23360438b5746d8759903294e2d6accf590050e0b7873154774177ebfe552840f1bb615784823cb283deee45b6de37d53503092ca890dd7ba6288b27d1c5ffa3d8634187626988beb4a2159d6e246fecfd9d40a351bb3441220e63080a6612de1f28a107e17d1790bec2c56687e438b39b90b397ac4a265dc2cef4ca0a5b5e454b2e9d1d3e02d13099fbf2fb8d3dccc86e10a90d75726956b90fd828386bce9f9916116a41913ceb5cb2230c6ed3f27e001935a22d63d4664f92194cb00464444797066f8239e29ceceaf51c83a6cccc826137641fe5b843f7ecf48c26832b50dbfb47d3c30336426ea4a70dd63b812a0ade51e072fa06b854e2fd2a4d4d4261472e7521c2002179e80682aa8c3820eb4b9c3574f2d98b424bcaeea9defc7d5dcd55e4bac12137180afee508acfb07568ee35ffe743d14117da1c8a6f6755d0638b3633b44c2ee25194f6c8ed7e1af588b95653f1f3d3e6b0e79cfa5d5044e3b8f209b295b0b1345b2b682869c9b729622b34d67200624b50aaae6db2ad595f367e2e1f10bf2c33b549f6ddbda4d62e4e939e1b6339271fcb6dffcf6adbd6da74a21c4bf93a987bf234613bdf75f50a874b136852dcf2e65145907e4727346ffa684fb83a0fecf6a96e4c1521ce3ad518fe908b79061d8ac9a6ddfe6f587b6010a5af2ec922d32ad77c9095584db773bc706267f953a9cf48db3c84c44131e62d18fb02eb334ce88574899486700c3fa083df59a034574aa116f4579595799d9a99dddcbceb44693c3e6c841096ee323bc9af13af8230dfd986857473886b5a90ab135660d0585a24836566cc704fa0463892115e81d0b96f09d570282c6bcd38f90ce1bb38dc597fc410eb27c82d3a83bdf0153b08d608a872aa281dcc5dc6451830ad1e95db9a893f9f09cba61abcaf7710f8981e86e6a63e0c63fa0d9f13b482ac1431fbb50269fcb7d6a1b1ca96a448ac5157bc7ebaacd874e1e230a3e70d115b91802455fed28dabf8fc8aa27e290591ca8cec65c92398aaecbad7b28f87f2d0647b9619172a88d686d24c2502511b468685ffc83ecbc4ff241c1527b1152d8706711d126f9a6b1c0361f37921f7c0632dd91879a1e1b7194494ccb440b910ead78d4e5e16095078cc92026241b3be102fdb086f83d7fb872eec534bebe1f036eb53e2f657ba13f752e82bab0bf875b92a76013bdd9854561a4b909654232d9aae4160996f39d7247e33aa2b1076fc404c0f43fcf1061eaebedaef9dfa1fd209ac375e8a66a896c324e7ce41c6a47b0827f0ffe6f374a5c9fe6111768e37e5bac534c700e87b9cf6f9e2150327cd0ae6ae1805e265fa06e70536f6957398be0b420218e0d9e61500eebba96a060241e7cd91f26fa69980eb5e9655e9e8ec4714b289a9102b031a7668819105f113261e339d92b5e4751a483152b91699a46d674fb11e7bba732d00de9a112faefc3895e9d3740373b52ad9532aa663638a4788ad2db61f23102dcc3b12dfa1cd4f59ac63edaad917cce75ee8250d6272e752dcd952ae3337006880ef6ca3c7086c5458303f0db23f32e698cba41a11d814f378945dc2f9c15221f8ec8a47d046d802874ad298ab4a863e2eba03bd37c5aa54d90d3753ad293f62a2bf45b911c9c3cef5b93e682e53ed3e1b36ad4328d261c7c178f8494a1b76da0c867ea0c1ccc6d9f7094715707fe2411d1f164dd23c10d9fc91d6e46f522a0ae21ecd5421193188d3364ae811994c803d1eab096faf1e32ef06637d8ce8e6288aa704b102996ffd4fbcd1008fc6590f8e606620b4ca83bf3a403f52952fe13cf0f9e32d4fcae250bebefc3fd91892e81ee31f3df82cb047ca260e2962d5f15123d5eddd148c6", 0x1000) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) open(0x0, 0x615, 0x0) sysctl$hw(&(0x7f0000000000)={0x6, 0x6}, 0x2, 0x0, 0x0, &(0x7f0000000180), 0x0) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r4, 0x80105727, &(0x7f0000000080)={0x0}) 101.668318ms ago: executing program 1 (id=19): r0 = socket(0x20, 0x1, 0xff) setsockopt(r0, 0x1000000029, 0x2f, &(0x7f0000000000)="5ab7776a", 0x4) getitimer(0x0, &(0x7f0000001240)) sysctl$kern(&(0x7f0000000240)={0x1, 0x24}, 0x2, &(0x7f0000000080)="26a421d47b3b58567d0354402b1e831286988f2a83074b78f079fa1efe890a25908adc1d2bfcd68a6af0a625c966274a765cbce62e128e4fea8f4560a42178c5ac68e196d3d38ce01126cc35ccf03d989c3171119226bd67ff79e89f4d1760b62e2c0b87a6d6a90cbbedb147176b93631239b1d47bfd01d836", &(0x7f0000000100)=0x79, &(0x7f0000000140)="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", 0xfa) getsockname$unix(r0, &(0x7f0000000040)=@abs, &(0x7f0000000280)=0x8) 100.035961ms ago: executing program 0 (id=1): sysctl$net_inet_esp(&(0x7f00000005c0)={0x4, 0x2, 0x2}, 0x9, 0x0, 0x0, 0x0, 0x1b) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x5555}, {0x81, 0x0, 0x0, 0xeffffffc}, {0x4006, 0x0, 0x0, 0x402}]}) (async) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="d29ef49c87f88f570000402c5a13f18acfaa1e74b1aa0d1b8812692fd879709e859afe9fa779c2781444db29fc9b744a", 0x30}], 0x1) (async) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="000000d860a82060dec3e59be543bfcb4493770300b5aee6b8f9a2e7f76682e05e9be469e7022a4f3dffa419ba", &(0x7f0000000080)=0x2d, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@empty, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast}, @udp={{0x0, 0x3, 0x8}}}}}}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x2, 0x7f, 0xf, 0x444}, {0x0, 0x5, 0x0, 0x7}, {0x1, 0x0, 0x3, 0x401}]}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[]) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 88.527907ms ago: executing program 1 (id=20): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x1) fcntl$setstatus(r0, 0x4, 0x80) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 86.302474ms ago: executing program 6 (id=21): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r0 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x100) sysctl$net_inet_tcp(&(0x7f0000000100)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f00000001c0)={'./file2aaaaaaaaaaaaaaaaaaaaaaaaa', 0x5, 0x8, 0xb, 0x1, 0x5, 0xf6a4, 0x9, 0x2, 0x0, 0x80000001, 0x8000000000000001}) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (async) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) (async) open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x100) (async) sysctl$net_inet_tcp(&(0x7f0000000100)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f00000001c0)={'./file2aaaaaaaaaaaaaaaaaaaaaaaaa', 0x5, 0x8, 0xb, 0x1, 0x5, 0xf6a4, 0x9, 0x2, 0x0, 0x80000001, 0x8000000000000001}) (async) 5.599955ms ago: executing program 2 (id=22): r0 = syz_open_pts() ioctl$TIOCSTOP(r0, 0x2000746f) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0xff, 0xfffffffc}, {0x6, 0x0, 0x0, 0x402}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="d29ef49c87f88f570000402c5a13f18acfaa1e74b1aa0d1b8812692fd879709e859afe9fa779c27814", 0x29}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="000000d860a82060dec3e59be543bfcb4493770300", &(0x7f0000000080)=0x15, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000008004500001c00a2509f2a2ea10000000011907800000000ffffffff4e20"]) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0\x00', 0x4, 0x7fd) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f00000001c0)={&(0x7f00000000c0)='./file0\x00', 0x5, 0x0}) r3 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x2) link(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='./file0\x00') getdents(r3, 0x0, 0x0) fchmod(r3, 0x10) execve(0x0, 0x0, 0x0) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0x8, &(0x7f0000000140)="ebffcb55a3b9fd812faa4e713248e699319296be0fe6be80b0dcfb979948", 0x1e) setsockopt(r4, 0x1000000000029, 0xa, 0x0, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f00000001c0)=[{0x81, 0x1, 0x1, 0xfffff4b2}, {0x28, 0x0, 0x2, 0x8001}, {0x6, 0x4, 0x7, 0x1}]}) write(0xffffffffffffffff, &(0x7f0000000200)="d81ad3d204000000000000001a30", 0xe) ioctl$FIOASYNC(r4, 0x8004667d, &(0x7f0000000040)=0x260) mknod(&(0x7f0000000000)='./file1\x00', 0x6000, 0x8) ioctl$TIOCCBRK(r0, 0x2000747a) ioctl$TIOCSTOP(r0, 0x2000746f) 5.045804ms ago: executing program 7 (id=23): open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) r0 = getpid() r1 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)='#!', 0x2}], 0x1) write(r1, &(0x7f0000000180)="09cf20090900db0000ff4278ad535c2a415642005624b77b6a0a", 0x1a) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/253, 0xfd) ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x40000910, r0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x308, r0) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f00000002c0)={&(0x7f00000000c0)='./file0\x00', 0x7, &(0x7f0000000280)='./file0\x00', 0x8}) 4.748069ms ago: executing program 6 (id=24): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) symlink(&(0x7f0000000340)='./file0/file1\x00', &(0x7f0000000380)='./file0/file1\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) accept(r0, 0x0, 0x0) rename(&(0x7f00000003c0)='./file0/file1\x00', &(0x7f0000000400)='./file0\x00') 0s ago: executing program 2 (id=25): syz_emit_ethernet(0x21, &(0x7f0000000100)={@random="e33a176ed024", @empty, [], {@arp={0x8035, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @remote={0xac, 0x14, 0x0}, @empty, @rand_addr=0x6e}}}}) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$BIOCGSTATS(r0, 0x4008426f, &(0x7f0000000100)) (async) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYRES32]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts. uvm_fault(0xfffffd806bd26ad0, 0xf, 0, 1) -> e kernel: page fault trap, code=0 Stopped at ktrops+0x58: movq 0x10(%r14),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND * 93202 55228 0 0 0x4000000 0K syz-executor 336072 4810 0 0x2 0x1 1 syz-executor ktrops(ffff8000ffff4f88,ffffffffffffffff,0,80000b1c,fffffd806b3c37a0,fffffd807f7d2548) at ktrops+0x58 doktrace(fffffd806b3c37a0,4,b1c,0,ffff8000ffff4f88) at doktrace+0x6dd sys_ktrace(ffff8000ffff4f88,ffff800035cacd10,ffff800035cacc60) at sys_ktrace+0x11c syscall(ffff800035cacd10) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x1bb06454b80, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: uvm_fault(0xfffffd806bd26ad0, 0xf, 0, 1) -> e ddb{0}> trace ktrops(ffff8000ffff4f88,ffffffffffffffff,0,80000b1c,fffffd806b3c37a0,fffffd807f7d2548) at ktrops+0x58 doktrace(fffffd806b3c37a0,4,b1c,0,ffff8000ffff4f88) at doktrace+0x6dd sys_ktrace(ffff8000ffff4f88,ffff800035cacd10,ffff800035cacc60) at sys_ktrace+0x11c syscall(ffff800035cacd10) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x1bb06454b80, count: -5 ddb{0}> show registers rdi 0xffff80002c095000 rsi 0x1182 __ALIGN_SIZE+0x182 rbp 0xffff800035caca30 rbx 0xfffffd807f7d2548 rdx 0xffff80002c095000 rcx 0x1181 __ALIGN_SIZE+0x181 rax 0xffffffff817fce83 ktrops+0x43 r8 0xfffffd806b3c37a0 r9 0xfffffd807f7d2548 r10 0x20e3e5a6443c00c1 r11 0x60ab36ef00d4acab r12 0xffff8000ffff4f88 r13 0xffffffffffffffff r14 0xffffffffffffffff r15 0x80000b1c __kernel_virt_to_phys+0xb1c rip 0xffffffff817fce98 ktrops+0x58 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff800035cac9b0 ss 0x10 ktrops+0x58: movq 0x10(%r14),%r14 ddb{0}> show proc PROC (syz-executor) tid=93202 pid=55228 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=17, usrpri=62, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffff5218,0xffff8000ffff4038 process=0xffff8000ffff2978 user=0xffff800035ca7000, vmspace=0xfffffd806bd26ad0 estcpu=12, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 7102 398458 22282 0 2 0 syz-executor 7102 300664 22282 0 3 0x4000080 fsleep syz-executor 7102 348442 22282 0 3 0x4000080 fsleep syz-executor 55228 203576 25208 0 2 0 syz-executor *55228 93202 25208 0 7 0x4000000 syz-executor 91602 419807 21842 0 2 0x480 syz-executor 91602 136567 21842 0 3 0x4000080 fifor syz-executor 91602 62846 21842 0 3 0x4000080 fsleep syz-executor 91602 151987 21842 0 3 0x4000080 fsleep syz-executor 2226 145607 55431 0 3 0x100082 sbwait arp 55431 71395 61227 0 3 0x10008a sigsusp sh 4810 336072 89766 0 7 0x3 syz-executor 51487 325924 89766 0 2 0x2 syz-executor 25208 449392 89766 0 2 0x482 syz-executor 61227 42366 89766 0 3 0x82 wait syz-executor 21842 241423 89766 0 3 0x82 nanoslp syz-executor 69400 349352 89766 0 2 0x2 syz-executor 15035 173819 89766 0 2 0x482 syz-executor 22282 298804 89766 0 2 0x482 syz-executor 89766 217487 56612 0 2 0x82 syz-executor 56612 440090 26812 0 3 0x10008a sigsusp ksh 26812 27023 86574 0 3 0x98 kqread sshd-session 86574 362989 72820 0 3 0x92 kqread sshd-session 90564 272654 1 0 3 0x100083 ttyin getty 72820 32056 1 0 3 0x88 kqread sshd 17964 496067 18430 74 3 0x1100092 bpf pflogd 18430 129943 1 0 3 0x80 sbwait pflogd 72211 272338 38273 73 3 0x1100090 kqread syslogd 38273 514599 1 0 3 0x100082 sbwait syslogd 63117 470980 1 0 3 0x100080 kqread resolvd 48376 218012 1842 77 3 0x100092 kqread dhcpleased 34366 19096 1842 77 3 0x100092 kqread dhcpleased 1842 262904 1 0 3 0x80 kqread dhcpleased 71319 115171 0 0 3 0x14200 bored smr 40737 348367 0 0 2 0x14200 zerothread 93613 359834 0 0 3 0x14200 aiodoned aiodoned 92437 212376 0 0 3 0x14200 syncer update 2183 258013 0 0 3 0x14200 cleaner cleaner 16911 116220 0 0 3 0x14200 reaper reaper 32164 378293 0 0 3 0x14200 pgdaemon pagedaemon 69909 484864 0 0 3 0x14200 bored viomb 76443 192471 0 0 3 0x40014200 acpi0 acpi0 33353 310076 0 0 3 0x40014200 idle1 24592 358906 0 0 3 0x14200 bored softnet3 68320 3773 0 0 3 0x14200 bored softnet2 89723 254486 0 0 3 0x14200 bored softnet1 9253 92516 0 0 2 0x14200 softnet0 32456 27759 0 0 3 0x14200 bored systqmp 76282 402280 0 0 3 0x14200 bored systq 6888 304511 0 0 3 0x14200 tmoslp softclockmp 50558 219285 0 0 3 0x40014200 tmoslp softclock 89631 364425 0 0 3 0x40014200 idle0 1 275439 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 55228 (syz-executor) thread 0xffff8000ffff4f88 (93202) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839fc958) #0 witness_lock+0x5bb #1 __mp_acquire_count+0x58 #2 mi_switch+0x4b7 #3 sleep_finish+0x24f #4 getblk+0x197 #5 bread+0x47 #6 ffs_update+0x198 #7 ufs_inactive+0x2e5 #8 VOP_INACTIVE+0x107 #9 vrele+0x129 #10 ktrsettrace+0xe7 #11 ktrops+0x271 #12 doktrace+0x6dd #13 sys_ktrace+0x11c #14 syscall+0xb08 #15 Xsyscall+0x128 Process 51487 (syz-executor) thread 0xffff80002a2f91f8 (325924) exclusive rrwlock inode r = 0 (0xfffffd806bd58ca8) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x283 #7 ufs_mkdir+0x113 #8 VOP_MKDIR+0x102 #9 domkdirat+0x179 #10 syscall+0xb08 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806c08fce0) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 domkdirat+0x8b #8 syscall+0xb08 #9 Xsyscall+0x128 Process 69400 (syz-executor) thread 0xffff80002a390f78 (349352) exclusive rrwlock inode r = 0 (0xfffffd806bd58ed8) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 ufs_ihashget+0x185 #7 ffs_vget+0x8c #8 ufs_lookup+0x19f8 #9 VOP_LOOKUP+0x6e #10 vfs_lookup+0x8fa #11 namei+0x7aa #12 dounlinkat+0xc1 #13 syscall+0xb08 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806c08fdf8) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 dounlinkat+0xc1 #8 syscall+0xb08 #9 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10197 11153K 11154K 166960K 11286 0 pcb 17 12K 12K 166960K 17 0 rtable 219 6K 6K 166960K 333 0 pf 37 18K 18K 166960K 48 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 60 2K 2K 166960K 60 0 sysctl 1 1K 1K 166960K 1 0 counters 66 36K 36K 166960K 66 0 ioctlops 0 0K 4K 166960K 1482 0 iov 0 0K 2K 166960K 1 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1340 84K 84K 166960K 1371 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 57K 93K 166960K 148 0 sigio 0 0K 0K 166960K 1 0 proc 72 91K 127K 166960K 524 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 1 0 in_multi 89 6K 6K 166960K 89 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 37 175K 175K 166960K 37 0 exec 0 0K 1K 166960K 372 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 224 153K 163K 166960K 3123 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 42 84K 106K 166960K 1247 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 3 0 NDP 27 1K 1K 166960K 27 0 temp 35 8682K 8746K 166960K 4004 0 kqueue 13 20K 22K 166960K 24 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 35 0 31 1 0 1 1 0 8 0 rtentry 168 103 0 1 5 0 5 5 0 8 0 unpcb 144 40 0 21 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 808 16 0 10 1 0 1 1 0 8 0 arp 120 17 0 0 1 0 1 1 0 8 0 inpcb 376 78 0 69 2 0 2 2 0 8 1 nd6 136 21 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 17 0 0 1 0 1 1 0 8 0 pfstkey 128 17 0 0 1 0 1 1 0 8 0 pfstate 376 17 0 0 2 0 2 2 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 411 0 0 26 0 26 26 0 8 0 art_table 32 412 0 0 4 0 4 4 0 8 0 art_node 16 102 0 9 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1591 0 79 95 0 95 95 0 8 0 ffsino 280 1591 0 79 109 0 109 109 0 8 0 nchpl 144 1797 0 105 63 0 63 63 0 8 0 uvmvnodes 80 1683 0 0 35 0 35 35 0 8 0 vnodes 216 1683 0 0 94 0 94 94 0 8 0 namei 1024 5515 0 5514 2 0 2 2 0 8 1 percpumem 16 47 0 0 1 0 1 1 0 8 0 kstatmem 264 26 0 0 2 0 2 2 0 8 0 scxspl 216 5817 0 5817 3 1 2 2 1 8 2 plimitpl 152 30 0 13 1 0 1 1 0 8 0 sigapl 424 455 0 407 7 0 7 7 0 8 0 futexpl 64 343 0 339 1 0 1 1 0 8 0 knotepl 120 55 0 0 2 0 2 2 0 8 0 kqueuepl 216 20 0 11 1 0 1 1 0 8 0 pipepl 328 108 0 81 3 0 3 3 0 8 0 fdescpl 504 437 0 407 5 0 5 5 0 8 0 filepl 152 1526 0 1310 9 0 9 9 0 8 0 lockfpl 104 12 0 10 1 0 1 1 0 8 0 lockfspl 48 7 0 5 1 0 1 1 0 8 0 sessionpl 144 22 0 13 1 0 1 1 0 8 0 pgrppl 48 32 0 15 1 0 1 1 0 8 0 ucredpl 104 88 0 75 1 0 1 1 0 8 0 zombiepl 144 408 0 407 1 0 1 1 0 8 0 processpl 1176 455 0 407 5 0 5 5 0 8 0 procpl 656 492 0 438 6 0 6 6 0 8 0 sockpl 688 153 0 121 4 0 4 4 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 114 0 0 15 0 15 15 0 8 0 mcl2k 2048 26 0 0 4 0 4 4 0 8 0 mtagpl 96 5 0 0 1 0 1 1 0 8 0 mbufpl 256 192 0 0 12 0 12 12 0 8 0 bufpl 280 2307 0 123 156 0 156 156 0 8 0 anonpl 24 109041 0 105830 60 0 60 60 0 184 33 amapchunkpl 152 8921 0 8495 28 0 28 28 0 158 6 amappl16 200 2252 0 2237 11 0 11 11 0 8 9 amappl15 192 5 0 5 1 0 1 1 0 8 1 amappl14 184 154 0 141 1 0 1 1 0 8 0 amappl13 176 2 0 2 1 0 1 1 0 8 1 amappl12 168 1082 0 1051 4 1 3 3 0 8 1 amappl11 160 48 0 34 1 0 1 1 0 8 0 amappl10 152 28 0 28 1 0 1 1 0 8 1 amappl9 144 253 0 253 1 0 1 1 0 8 1 amappl8 136 23 0 21 1 0 1 1 0 8 0 amappl7 128 108 0 95 1 0 1 1 0 8 0 amappl6 120 173 0 169 1 0 1 1 0 8 0 amappl5 112 136 0 127 1 0 1 1 0 8 0 amappl4 104 323 0 302 1 0 1 1 0 8 0 amappl3 96 1375 0 1278 4 1 3 3 0 8 0 amappl2 88 633 0 568 2 0 2 2 0 8 0 amappl1 80 8375 0 7763 15 0 15 15 0 8 0 amappl 88 2434 0 2287 4 0 4 4 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 437 0 407 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 437 0 407 1 0 1 1 0 8 0 vmmpekpl 168 5376 0 5339 2 0 2 2 0 8 0 vmmpepl 168 35092 0 33229 98 0 98 98 0 357 4 vmsppl 456 436 0 407 5 0 5 5 0 8 0 rwobjpl 64 14697 0 12081 47 0 47 47 0 8 1 pdppl 4096 882 0 814 102 16 86 86 0 8 18 pvpl 32 16797 0 0 136 0 136 136 0 265 0 pmappl 248 436 0 407 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 271 0 18 8 0 8 8 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace ktrops(ffff8000ffff4f88,ffffffffffffffff,0,80000b1c,fffffd806b3c37a0,fffffd807f7d2548) at ktrops+0x58 doktrace(fffffd806b3c37a0,4,b1c,0,ffff8000ffff4f88) at doktrace+0x6dd sys_ktrace(ffff8000ffff4f88,ffff800035cacd10,ffff800035cacc60) at sys_ktrace+0x11c syscall(ffff800035cacd10) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x1bb06454b80, count: -5 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff800029a9bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839fc750) at __mp_lock+0x192 ktrsysret(ffff80002a2f9c38,4,0,ffff80002a494b80) at ktrsysret+0xe1 syscall(ffff80002a494c30) at syscall+0xa43 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x730c20a76a60, count: 8 ddb{1}> trace x86_ipi_db(ffff800029a9bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839fc750) at __mp_lock+0x192 ktrsysret(ffff80002a2f9c38,4,0,ffff80002a494b80) at ktrsysret+0xe1 syscall(ffff80002a494c30) at syscall+0xa43 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x730c20a76a60, count: -7