last executing test programs: 2.914657506s ago: executing program 4 (id=5): syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa67d669d30045da001c0068f20005119078e0000001ac1400aa0f00907800af0081"]) 2.873102763s ago: executing program 4 (id=9): syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd68595b8100102c0400000000010000000000000000000000ff020000000000000000000000000001320001"]) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1384) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x1c) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f00000000c0)=0x9) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000002a80), 0x80, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000002b00)={&(0x7f0000002ac0)='./file0\x00', 0x5, 0x0}) 2.583212891s ago: executing program 4 (id=10): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x7, 0x65, 0x5, 0x7}, {0xa4, 0x7}, {0xfffe, 0x20, 0xd7, 0xfffffff7}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000001600)=ANY=[]) sysctl$kern(&(0x7f00000002c0)={0x1, 0xa}, 0x2, &(0x7f0000000300)="08dddf", &(0x7f00000003c0)=0x3, 0x0, 0x0) sysctl$hw(&(0x7f0000001640)={0x6, 0x18}, 0x2, 0x0, 0x0, &(0x7f00000017c0)="800388e2", 0x4) r1 = shmget$private(0x0, 0x3000, 0x2e, &(0x7f0000ffc000/0x3000)=nil) shmat(r1, &(0x7f0000000000/0x800000)=nil, 0x1000) shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x40000000008000, 0x9}, {0x0, 0x101}}, 0x0) 2.58229814s ago: executing program 5 (id=6): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt(r0, 0x0, 0x2, &(0x7f0000000000)="0784fc81", 0x4) sendmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x3, 0xffffffff, "5e4e6e0b7b6ed4af3b27c6d80d99d63e", 0xe}, 0x1c, 0x0, 0x0, 0x0}, 0x400) close(r0) getsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) getentropy(&(0x7f0000000040), 0x0) ioctl$BIOCGSTATS(0xffffffffffffff9c, 0x4008426f, &(0x7f0000000100)) 2.581635848s ago: executing program 7 (id=13): seteuid(0xffffffffffffffff) socketpair(0x24, 0x2, 0x0, 0x0) symlink(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='./file1\x00') r0 = socket$inet(0x2, 0x8003, 0x1) getsockopt(r0, 0x0, 0xd, 0x0, 0x0) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000040)=@in={0x10, 0x2, 0x3, 0xfffffffb}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000080)="f22d7c012397e9e273dc77d90bccdd087c4948238f95b7830e1dc237012adb17ce98413ad137fe0b9b69ebf9266f2eb9d589dd8d2c7d6ae0c5a13f669d551676ac759b95fd3c5ef713525feb6f9de198ec2e6d6d78e6d601cd0675b5de7c7633e64a7130544bc911aca4002e344aab574e5d8708a8274493c9ecb5a6748d4aa39d469137e0a64bb9000a0048b9b3abc5e40efb5d7cd94d0ab34ace6dcf734ee4", 0xa0}, {&(0x7f00000001c0)}, {0x0}], 0x3, &(0x7f0000000300)=[{0x54, 0xfffd, 0x5, "1372368288afc3f1ffea416c280366ce8368070808784349c69e52ee80465043e8a11545e89b14662db17dd3775ef3774adf3c15ba5686f10be6658c3845a33e60af0b3e8ef60176"}], 0x54}, 0x4) mknod(&(0x7f0000000000)='./file0\x00', 0x4, 0x5dc2) r1 = setsid() fcntl$setown(0xffffffffffffffff, 0x6, r1) open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) readlink(&(0x7f0000000000)='./file1\x00', 0x0, 0x50) 2.447888946s ago: executing program 1 (id=15): r0 = kqueue1(0x10000) kevent(r0, 0x0, 0xffffffff, 0x0, 0x4, 0x0) unveil(0x0, &(0x7f0000000240)='r\x00') r1 = socket$inet(0x2, 0x3, 0x2) setsockopt(r1, 0x0, 0x64, &(0x7f0000000100), 0x0) r2 = socket$inet(0x2, 0x1003, 0x24) connect$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x0, 0xfffffffa}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x2, 0x3}, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt(r3, 0x0, 0x4, &(0x7f0000000100)="01000000", 0x4) 2.447367444s ago: executing program 4 (id=16): r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) getgroups(0x7, &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) r2 = socket$inet6(0x18, 0x3, 0x7) connect(r2, 0x0, 0x0) ioctl$VMM_IOC_READREGS(0xffffffffffffffff, 0xc2485607, &(0x7f0000000200)={0x4, 0x706e, 0x4, {[0x5, 0x0, 0x2, 0x1c4, 0x8000000000000001, 0x9, 0x1, 0x0, 0x9, 0x81, 0x2, 0x3ff, 0x4, 0x4, 0x4, 0x6, 0x80, 0x9], [0x8000000000000000, 0x9, 0x10001, 0x6, 0x7, 0x2, 0x9, 0x7, 0x1ff, 0x9], [0x101, 0x20000000000009, 0x4, 0x6, 0xbf8, 0x4, 0xfffffffffffffff1], [0x5, 0x1fe0000000000, 0x6, 0xc43, 0xffffffffffffffff, 0x28], [{0x1, 0x200000, 0x10000, 0xf}, {0x1ff, 0xfff, 0xffff}, {0x5, 0x4783, 0x8, 0xffffffff80000000}, {0x8e, 0xc, 0x9, 0x8}, {0x6, 0x3b, 0x10000, 0x99}, {0x2, 0x9, 0x93d, 0x2e0}, {0x8, 0xfff, 0x9, 0x2}, {0xcb9, 0x6, 0x81c00, 0x4000000a39}], {0x3ff, 0xe, 0x400d49, 0xbbb4}, {0x4, 0x18fe, 0xfffffffa, 0x9}}}) openat$wskbd(0xffffffffffffff9c, &(0x7f0000002300), 0x1, 0x0) socket$inet6(0x18, 0x2, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x1a0}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x1}], 0x55, 0x1) ioctl$FIONBIO(r2, 0x8004667e, 0x0) r3 = getthrid() fcntl$setown(r0, 0x6, r3) setregid(r1, 0x0) r4 = getpid() ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x1400, r4) sysctl$hw(&(0x7f0000000000)={0x6, 0x19}, 0x2, 0x0, 0x0, &(0x7f0000000100), 0x0) getgroups(0x40000000000001f6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r7, r6, r5) r8 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) closefrom(r9) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) syz_open_pts() ioctl$TIOCSETAW(r8, 0x802c7415, &(0x7f0000000000)={0x0, 0x5, 0x9, 0x3b6d67bc, "fe01fe060081896b088600", 0x2, 0x7}) write(r8, &(0x7f0000000040)="0108", 0x2) seteuid(0xffffffffffffffff) r10 = getegid() setregid(r10, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x100000) 2.446051027s ago: executing program 5 (id=18): open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) (async) r0 = socket$inet(0x2, 0x3, 0x7) sendto(r0, 0x0, 0x0, 0xc, &(0x7f0000000080)=@in={0x10, 0x2, 0x1, 0x7}, 0x8) getthrid() (async, rerun: 64) r1 = getppid() (rerun: 64) ktrace(&(0x7f0000000040)='./file0\x00', 0x2, 0x300, r1) (async) getrlimit(0x0, &(0x7f0000000000)) (async, rerun: 64) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='w\x00') (async, rerun: 64) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mkdir(&(0x7f0000000900)='.\x00', 0x0) 2.297488214s ago: executing program 1 (id=21): ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000000)={0x3, 0x61fa, 0x4, 0xb17b, "a71fa4ed8d3b13b3008b0f60495c48cd27aba779", 0x6, 0x8}) (async, rerun: 64) sysctl$kern(&(0x7f0000000000)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x33}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$hw(0x0, 0x0, &(0x7f0000000580)="5433be0b47cf96550c3e484377d9d5849018fde200000000000000000000003f", 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async) ioctl$FIOASYNC(r0, 0xc0286988, &(0x7f0000000580)=0x7) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x59}, 0x3, &(0x7f0000000180)="ee8f409198157e3b0d482cd811439e57ce10400116e4853368b7858dd5313a55267eae31dfdeb4695f32fe7b7ad86f86b9026db90f9b45d9c0dfe6f336cdbed0b1e9503fb71d22c07e97988cb677f6e039bda806b77d270400"/104, &(0x7f0000000080)=0x5b, 0x0, 0xfffa) 2.296697777s ago: executing program 1 (id=24): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) (async) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) (async) r1 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x0) (async) r2 = socket$inet6(0x18, 0x3, 0x3a) r3 = dup(r2) sendto$inet6(r3, &(0x7f0000000040)="d3095a6a6ea1212e74d0a9695eeadc6b2e87a57fa8de5905613d82b4971bfd0d6a9a52c2031c141976221c69d3f5e49294d7061ba8687ea74541b99eda5513c2c4679fb1b928562962295be197a7066fee402838a868aac5044e934161edbd31fd9396c915e9aaa153fc1af00bd5a133a0a5f2b172faa796b8fe2c3e1ae30ef150acfa5e6b1886183333c6d33f00000000", 0x91, 0x400, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x2d5, "ff01e50000000000347ea9b400", 0x7}, 0x1c) fstatat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2) (async) mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) (async) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) (async) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 2.121777725s ago: executing program 4 (id=25): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x112) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x128) getsockname$unix(r1, &(0x7f0000000040)=@abs, &(0x7f0000000080)=0x8) mmap(&(0x7f00000cf000/0x3000)=nil, 0x3000, 0x1, 0x2813, r0, 0x8000) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000780), 0x10, 0x0) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x129, 0x2, 0x1, 0x9}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = syz_open_pts() r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r6 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x522, 0x0) mkfifo(&(0x7f0000001800)='./file0\x00', 0x8) r7 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x3c) open$dir(0x0, 0x40, 0x1bc) fcntl$setstatus(r7, 0x4, 0xc) r8 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r9) fcntl$lock(r6, 0x8, &(0x7f0000000040)={0x2, 0x0, 0xa1, 0x100000001}) closefrom(r6) ioctl$DIOCRGETADDRS(r5, 0xc4504446, &(0x7f0000000180)={{'./file0/file0\x00', './file0\x00', 0x52, 0xff}, 0x0, 0xffff0000, 0x0, 0x1, 0x3, 0x2ea, 0x7fffffff, 0x40, 0x6}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2812, r4, 0x8000000000000000) r10 = socket(0x11, 0x3, 0x9) sendmsg(r10, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0c00000000000100050000000c000000ffff000000000002"], 0x18}, 0x2) getpeername$unix(r3, 0x0, &(0x7f00000003c0)) sysctl$kern(&(0x7f0000000f80)={0x1, 0x21}, 0x2, 0x0, 0x0, 0x0, 0x0) r11 = openat$pf(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) ioctl$BIOCGRSIG(r0, 0x40044273, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$DIOCRCLRTABLES(r11, 0xc450443c, &(0x7f0000000d00)={{'./file0\x00', './file0\x00', 0x0, 0x4}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6, 0x3, 0x40, 0x9}) 2.121261307s ago: executing program 2 (id=26): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x2d28) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000280)="8aac092902c3f58ee58a9ebf16b38bc45082f9c3747fd18c53e8e56926b0ad83e11bcb2771a84b8f742e1e805279bfee254eb6f11722076c49cb93085d3a61cfe622147cef77a0d48747dc6ebeecd1fa9a5d3607648faaae39127074de76e675423bf4f1e6ad97bb0d98759c280d444f721174d8ec688aff0d1422c0eb5de85a18f7759bccb0902797898770d4fc6d7825cb13c2fb617ba8b677ca972393", 0x9e}], 0x1, 0x9) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r2, 0xffff, 0x4, 0x0, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/57}], 0x1000000000000302) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004ee2004000680000003a907800000001ffffffff070f03ac1400bbe0000001ac1400aa01000000000000001400aa9404000594040008000087f21b9371d67a173d3692f4194214dfd3ccc53829c81c7014f415a694ca3589aaa3a6b04f959c794b5598e9af46a1d4090e58f5756cfc24869b4308075f3adbe658a9a93cdeaaab54ee8dea2565bffc8ccd06865c18ffea20c346dd8910a319d408a1244d5aadc064bc83148ecba6034f24eb4dd695880eeca02516c07daa88f4009cc41000c30baa153b", @ANYBLOB="eebb9be17eab96a3939cfc0b8336849a105e8da44af902550b0f7fde8196ced1be2911af1b6b0e6600b64f55132eae5905c595a16c7d00000000000020aa118a743ef635e598"]) 2.120962869s ago: executing program 6 (id=27): sysctl$kern(&(0x7f0000000000)={0x1, 0x4c}, 0x2, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (rerun: 32) kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{r0}, 0xfffffffffffffffe, 0x9, 0x2, 0x600000000000000, 0x85}, {{r0}, 0xfffffffffffffffa, 0x80, 0x2, 0x81, 0x4cf}], 0x7, 0x0, 0x6, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) r1 = kqueue1(0x10000) kevent(r1, &(0x7f0000000000)=[{{}, 0xfffffffffffffff6, 0x3, 0x2, 0x5, 0x64}], 0x3ff, &(0x7f0000000040)=[{{}, 0xfffffffffffffff6, 0x30, 0x4, 0x34e, 0x100}], 0xb192, 0x0) (async) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000001000), 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$DIOCADDRULE(r2, 0xcd604404, &(0x7f0000000280)={0x3, 0x7, 0x2, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, "7459066d56f5912d06648daabb96bb9ad66a927be222cabdb37b78f6c4843e5c7b04e34c0fc4a4f1ad881bc7c661a06f28319b50d8a82345616ef49bbf235212f274d96636e5132169001ed1852fe6a3dc968265ce0ebc2a9f934f48a347fa98747498e1a5ccb80d1446bf4b69d1cfb0720ae532a3fce6e381cbb4e263dc7ff2027bd1cb7cb177d5ec16e2d50522105bc23c1a461b6aff2dc09d796a77b2681d09d857cfc0e4c0bbe07bc7d1850864bb2627d4ab714aab1ef0ece410e97de8101cc78dfe67990f8cf9dfffc1f0c025cfd410ad9ef2bb347a61df63e5e8d44053b3d1eb14574e3c904cef862d1dd9b1086fbe39127c0f2fa7a7471f8c5d56e8951f9b40c1fe0110597a97919e9b8e4526af4219a5ff62de844d3d5c0f9e99e222dd50394c4c0dcaa3122cdae84c44731d8ba918677675ae1dfbc7eccff81c50e7448ff6746971c8d8c998f02c0a21fe24e38ebe465f973ca76d9f047ebd6896fbd4bcd0871ba0d388ecacb7b275c876344162f93e035d89a16930a0da6662271a7e42a73440436f3afc4ba4f068c4f8dbf04b8459e69eb4f16633bda9a66591a1c0a8f4057d2417518054808eb625d53c502f4a986a4febd90ed45fee2f79b29c8ccc194ddbf57defdd381c2ce90a06302a8a3d4d4a6f3c39738708cf7e87b53afba49d2cef212d56ca95084480375a5c2a1391b597b4f508806d1f6b7c8979988570fde353bf164173498a4412bc86203d3dbe7c976135b98af50b5836d8031c2a204749a20f9dac72dae45cbfe649c059986ab05943f38cb1deb7c9b58544b86c5a9f161f791bc480bcf181b5693611729ccb6aa4f8253a7d4ab816424a0b727de9fb153bf1c4430cfa4abf1478036d666738b2aae55d870364a27b37b324f13924af0903a84e372a84f8673c07d2504b199280dd6488d0a9f0e76413bad6ea50c9b1bb3ef9c01df1840443d88c086e37430dc2143a4eb7e5d09d24d6b1be49b1e910f064225cff1fce1fc9bfff2a25a672febd4ac1d9feba921a800869fc08abfc56baffc1442950565d0df28ee2777615ebb996ef4eedf444ff7ff7e854643482e351995870d684483ea474e1449fc05a1b6e2dfede062e585a74c1fbcda3e7ca3c2515a6ed2e988ab7fb185ba8d72dd8bf3a04d78afe8cd5bfcd31ff3afd9144adc1fe95d3407c370cd5a2678db476a66c1c264f21c30ba0494ed89dff55adb25dc96bb451a0d10ee953a58771bab4978efb7719761180680ae859f79ae1bd9fb385c0748870b4de4defbfaad1b09b518b257fb1c54afe1654f1838cef16df428efbf1a63d5269991df18512dfba780e1011527ba12dbcf502c1ac6e88dd2b07ca2862e8c23a639c8212ec4ce5ffacaa27134deec4c630c0a9862be71aa8674ea73f01b9fcd54a5f8383440045ed5430553c59b3b2ab5c0e000372842fa31f6a1b68ddae40ce4274d3b6a4cc25a4937f1a4da085317faae4376e1e277dd16bd9a8f764abedbc3f4b84437ec82bf82e2518869451e061b6a05a3582ce95a37ccb04af5b312d5494941a40048b5c641022f94476f49e54ad9ca3885e1bff13247489bfdc3c90940c96e45c0b5ebd3c936c2ef42ba16edc95dc661f2ca8a49bdbfce0310b14c5e8ec64c4cacea2b7f37a284f0dc8b401394f6ba7037504623d0a3a68aa9f9a764607f098095aba9e61b2aaac32f317e1ba9d21b05f3b91845ca374234b0217bead2806b5173ab0dbee4463ba740ec06fc69f0618b9c6113e1f235bb32bbc9c25ef4a2827e58dfd3765c2f9cf85a48a8aa6c631c3963e1beb95b605ec94361ad1a42f6152d88f7bf267e72c2d2fa32c65259edf98a9676316d68ea3707f70fd85514ec9adf76e484c24436a97f2b93daaa84e5acb8dad7bd1d7f584e01748d97a30b813ae4dc465450c"}) (async, rerun: 32) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000044c0), 0x2, 0x0) (rerun: 32) ioctl$DIOCADDQUEUE(r3, 0xc148445d, &(0x7f0000000200)={0x2, 0x81, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x6, 0xcaea}, {0x80000000, 0x5a5}, 0x9}, {{0x6, 0x6}, {0xffffffffffffffff, 0x101}, 0xde}, {{0x908, 0x6}, {0x8000000000000001, 0x3}, 0x7ff}, {0x4, 0x6, 0x2, 0x2ee}, 0x0, 0x6, 0x41, 0x0, 0xfffeffff}}) 2.120732083s ago: executing program 0 (id=1): sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = syz_open_pts() syz_open_pts() syz_emit_ethernet(0x4a, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd63b0400e0014ae0500000000000000000000000000000001ff02000000000000000000000000000100100000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000490780007"]) openat$speaker(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) setitimer(0x0, 0x0, &(0x7f00000000c0)) r1 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="410946ec", 0x4}], 0x1) closefrom(r1) fcntl$dupfd(r0, 0x0, r0) minherit(&(0x7f0000215000/0x2000)=nil, 0x2000, 0x0) sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) sysctl$net_mpls(&(0x7f0000000000)={0x4, 0x21, 0x7}, 0x3, &(0x7f0000000280), 0x0, &(0x7f0000000540), 0x0) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) syz_open_pts() sysctl$kern(&(0x7f0000000000)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) setitimer(0x1, &(0x7f0000000040)={{0x4, 0x6}, {0x8000000000000000, 0x3}}, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f00000000c0)='\x00\x00\x00\x00', 0x4) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$VNDIOCGET(r2, 0x44946472, &(0x7f0000000200)={'./file0\x00', 0xffffff8a, 0x1, 0x65}) 2.120494959s ago: executing program 2 (id=28): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000002180)=[{&(0x7f00000001c0)="8a2fc8efa1aff7ec420444edf2537cb020b1c1989ed194277772ac3a8a4a59607bd681d554be419a191f5e5cc0d623050d43", 0x32}], 0x1) sysctl$hw(&(0x7f0000000000)={0x6, 0x14}, 0x2, &(0x7f0000000040)="a7c720461d8c3999", &(0x7f0000000100)=0x8, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$SPKRTONE(r0, 0x80085301, &(0x7f0000000040)={0x7fff, 0x2}) 1.980464839s ago: executing program 6 (id=29): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) r0 = socket$unix(0x1, 0x7, 0x0) shutdown(r0, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = socket(0x2, 0x5, 0xf) r2 = accept4(r1, &(0x7f00000000c0)=@in6, &(0x7f0000000100)=0x1c, 0x2000) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x400, 0xc4) r4 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0x6) linkat(r3, &(0x7f0000000180)='./file1\x00', r4, &(0x7f0000000200)='./file0\x00', 0x4) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000300)={0x0, r5, r6}, 0xc) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) chmod(&(0x7f0000000340)='./file0\x00', 0x3) closefrom(r2) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) ioctl$BIOCGETIF(r7, 0x4020426b, &(0x7f0000000440)={""/16, @ifru_data=&(0x7f00000003c0)="4635c74ceadaafb60b323f95f394b6d9e5496bda0237af17ad67aeddcd40349c8a8b148a8d723fe2ee0aa3a2ddeda0a8e9dbe547e6a280d4f5b3db0947ea08990779ed64fec52d8491209d77178bf53d99c5ff79dd8005c865986a99dc1803dc91e32cd9aafa333720147cc684148edee4f02a3d075127e32d1dc9d3afc2"}) chflags(&(0x7f0000000480)='./file1\x00', 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000004c0)={0x10, 0x2, r7}) ioctl$VT_RELDISP(r8, 0x20007604, &(0x7f0000000500)) sendto(r0, &(0x7f0000000540)="068425d0a0cf1dadba34626ea41657b6a7dc2e8ac62d9ebefe318014363dbdb56b7d75d3ef84e280f2f43a70ba5ceb7d5bc1f1d68d44054be268a13e6901da7685fafc76c37f01154af70b9f9f8ace960a609dde5a453c5f4e78f7510ffe9fbe72ac3aec7c99822725721cc0b6df8b29d0f89b94d7c280f37245e736e0de7ddd36797164e059bce2ca8ab420f8fd4463c30f3c179c77980c78343c3cd540af2a9a74054924f8b5f05a664930", 0xac, 0x1, &(0x7f0000000600)=@un=@abs={0x2, 0x1, 0x0, 0x3}, 0x8) ioctl$TIOCSWINSZ(r8, 0x80087467, &(0x7f0000000640)={0xb, 0x4, 0x3, 0x8d}) write(0xffffffffffffff9c, &(0x7f0000000680)="6418267924abfbede32cba801dfacb64aab9727e467759cca3ca293300f5f3bef853de5d", 0x24) r9 = fcntl$getown(r7, 0x5) setsockopt$sock_cred(r8, 0xffff, 0x1022, &(0x7f00000006c0)={r9, r5, r6}, 0xc) bind$unix(r0, &(0x7f0000000700)=@file={0x6, 0x0, './file1\x00'}, 0xa) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000780)={&(0x7f0000000740)=[0xffffa973, 0x2, 0xf, 0x7, 0x5, 0x5, 0x7], 0x7, 0x10004}) ioctl$DIOCRGETASTATS(r8, 0xc4504447, &(0x7f0000000880)={{'./file0\x00', './file0\x00', 0x57, 0x9}, &(0x7f00000007c0)=[{@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x3, 0x7, 0x2, 0xd, 0x2, 0x8, 0x8}, {@broadcast, '\x00', './file1\x00', 0x6, 0x2, 0x0, 0x3, 0x7, 0xb8, 0x4}, {@multicast2, '\x00', './file1\x00', 0x0, 0x4, 0x1a, 0xa, 0x7f, 0x2, 0x1}], 0x0, 0x3, 0x1, 0xfff, 0x6, 0x9, 0x4, 0x7ff}) getgroups(0x1, &(0x7f0000000d00)=[r6]) ppoll(&(0x7f0000000d40)=[{r4, 0x20}, {r4, 0x10}, {r7, 0x100}, {r2, 0x43}, {r4, 0x80}, {r1}, {r2, 0x4}, {r7, 0x20}], 0x8, &(0x7f0000000d80)={0x7bc, 0x6}, &(0x7f0000000dc0)={0x8}) open(&(0x7f0000000e00)='./file0\x00', 0x40, 0x50) 1.979859688s ago: executing program 1 (id=30): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$DIOCRGETTABLES(r0, 0xc450443f, &(0x7f0000001540)={{'./file0\x00', './file0\x00', 0x4, 0x1}, &(0x7f0000000040)=[{'./file0\x00', './file0\x00', 0x2, 0xe0}, {'./file0\x00', './file0\x00', 0x66, 0xa9}, {'./file0\x00', './file0\x00', 0x14, 0xfa}, {'./file0\x00', './file0\x00', 0x30, 0x9a}, {'./file0\x00', './file0\x00', 0x1, 0x81}], 0x9, 0x5, 0x0, 0x1, 0x3, 0x7, 0x50, 0x7}) r1 = socket$inet6(0x18, 0x4000, 0x7) getsockname(r1, &(0x7f00000019c0)=@un=@abs, &(0x7f0000001a00)=0x8) ioctl$DIOCRADDADDRS(r0, 0xc4504443, &(0x7f0000001b00)={{'./file0\x00', './file0\x00', 0x61, 0x6}, &(0x7f0000001a40)=[{@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x8, 0x3, 0x18, 0x4, 0x4, 0xfa, 0x8}, {@broadcast, '\x00', './file0\x00', 0x4a07, 0x7, 0x0, 0x8, 0x5, 0x8, 0x1}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x4, 0x25d, 0x30, 0x5, 0x7f, 0xb7, 0x5}], 0xf9, 0x3, 0x2, 0x6, 0x9, 0x4b, 0x8, 0x3}) (async) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f0000001fc0)={&(0x7f0000001f80)='./file0\x00', r0, 0x3}) (async) r2 = socket$inet6(0x18, 0x1000, 0x85) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000002000)={0x0, 0x0}, &(0x7f0000002040)=0xc) (async) mkdir(&(0x7f0000002080)='./file0\x00', 0x12) (async) r4 = accept(r2, &(0x7f00000020c0)=@in, &(0x7f0000002100)=0x10) (async) getsockname(r1, &(0x7f0000002140)=@in6, &(0x7f0000002180)=0x1c) (async) rmdir(&(0x7f00000021c0)='./file0\x00') r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000002200), 0x8, 0x0) r6 = dup2(r2, r5) ioctl$WSKBDIO_COMPLEXBELL(r6, 0x80105702, &(0x7f0000002240)={0x9, 0x50cc734c, 0xa, 0x7}) r7 = dup3(r1, r4, 0x0) (async) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) connect$unix(r7, &(0x7f0000002280)=@file={0x9, 0x0, './file0\x00'}, 0xa) (async) dup(r1) (async) closefrom(r6) (async) close(r5) (async) mkdir(&(0x7f00000022c0)='./file0\x00', 0x6) (async) fcntl$setflags(r2, 0x2, 0x5) (async) ioctl$DIOCRADDADDRS(r0, 0xc4504443, &(0x7f0000002480)={{'./file0\x00', './file0\x00', 0x47, 0x40}, &(0x7f0000002300)=[{@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x4, 0x1, 0x0, 0x34, 0x4, 0x8, 0x1}, {@empty, '\x00', './file0\x00', 0x350, 0x8, 0x18, 0x9, 0x0, 0x6, 0x4}, {@loopback, '\x00', './file0\x00', 0x120, 0x401, 0x18, 0x8, 0xff, 0x5, 0x6}, {@empty, '\x00', './file0\x00', 0x10, 0xae0, 0x18, 0x8, 0x5, 0xf, 0x4d}, {@rand_addr=0x6e28, '\x00', './file0\x00', 0x1, 0xb5, 0x18, 0xfb, 0x8, 0x3f, 0x7}, {@empty, '\x00', './file0\x00', 0x7, 0xfff, 0x0, 0xf, 0x7, 0x6, 0xea}, {@multicast2, '\x00', './file0/file0\x00', 0x6, 0x7, 0x18, 0x6, 0x0, 0x1, 0x5}], 0x0, 0x7, 0x1, 0x0, 0xa, 0x5, 0x60, 0x7}) (async) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) (async) pipe(&(0x7f0000002900)={0xffffffffffffffff}) dup(r8) seteuid(r3) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x2, 0x8, 0x2, 0x3, 0x2, 0xfff, 0x4, 0x8, 0x4c}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000002a80)={r9, 0x0, 0x0, 0x401, 0x6, 0x35, 0x800, 0x0, 0x10000, 0x61f8, 0x4, 0x6}) 1.979492763s ago: executing program 7 (id=31): openat$pf(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xef) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x400, 0x0) (async, rerun: 32) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (rerun: 32) open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) (async) open$dir(0x0, 0x200, 0x0) (async) r1 = kqueue1(0x10000) kevent(r1, &(0x7f00000000c0)=[{{r1}, 0xfffffffffffffff9, 0x1, 0x0, 0xffffffff80000000, 0x80000000}], 0x86, 0x0, 0xffff4b4d, 0x0) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) r2 = syz_open_pts() ioctl$TIOCSTOP(r2, 0x2000746f) (async) pselect(0x40, &(0x7f0000000080)={0xe0, 0xfffffffffffffffd, 0x101, 0x9, 0x2, 0xffffffff, 0x9, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = semget$private(0x0, 0x4, 0x40) (rerun: 32) semctl$SETALL(r3, 0x0, 0x9, &(0x7f00000000c0)) (async) semop(r3, &(0x7f0000000040)=[{0x0, 0xffff, 0x1000}], 0x1) (async, rerun: 64) pipe(&(0x7f0000000280)={0xffffffffffffffff}) (async, rerun: 64) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x28dd) (async) r5 = open(&(0x7f0000000180)='./file0\x00', 0x20, 0x1de) ppoll(&(0x7f0000000100)=[{r5, 0x4}], 0x1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) closefrom(r6) (async) r7 = socket$inet6(0x18, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0x99e, '\x00', 0x9}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x1, "33c47abfc18117708bcaa36c04a4c8b8", 0xfffffffb}, 0x1c) (async) syz_emit_ethernet(0x66, &(0x7f0000000200)={@broadcast, @local, [], {@ipv6={0x86dd, {0xf, 0x6, "755803", 0x30, 0x3a, 0x0, @mcast1, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0xf, '\x00', {0x8, 0x6, '\x00', 0x6, 0x2b, 0x7c, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}}}}}}}}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) getsockopt$sock_int(r8, 0xffff, 0x800, &(0x7f0000000200), &(0x7f0000000240)=0x4) 1.978241785s ago: executing program 0 (id=32): r0 = syz_open_pts() r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) r2 = kqueue1(0x10000) kevent(r2, &(0x7f00000000c0)=[{{r1}, 0xfffffffffffffffc, 0x1, 0x2, 0x8000000000000000, 0x9}], 0x40, 0x0, 0x1, 0x0) kevent(r2, 0x0, 0x0, &(0x7f0000000440), 0x3, 0x0) ktrace(&(0x7f0000000100)='./file0\x00', 0x0, 0x100, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) closefrom(r3) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) setsid() r4 = syz_open_pts() r5 = dup2(r4, r4) ioctl$TIOCSCTTY(r5, 0x20007461) write(r0, &(0x7f0000000000)="57f5e6cdf60bab423018b49c2ef68488500b02d440008a609f229033ea80a2ccd70d747953307bcd771c", 0x2a) r6 = kqueue1(0x0) kevent(r6, &(0x7f00000000c0)=[{{r6}, 0xffffffffffffffff, 0x41, 0x80, 0x1, 0x1ab7}], 0x2, 0x0, 0x1, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0xfffffffffffffff6, 0x9, 0x96f799025b5b12ad, 0x5, 0x3}], 0x4, 0x0, 0xffff4b4d, 0x0) r7 = kqueue() kevent(r7, &(0x7f0000000140)=[{{r2}, 0xb, 0xe2, 0x40, 0x8, 0xe}], 0xf00, 0x0, 0xffff4b51, 0x0) 1.953464937s ago: executing program 2 (id=34): pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) closefrom(r1) r2 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x0, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x0, 0x8a, "0a5be30e01a3d3d1793c1db58465282f", 0x308}, 0x1c) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_cred(r3, 0xffff, 0x1023, &(0x7f00000003c0)={0x0, 0xffffffffffffffff}, 0x20) pselect(0x40, &(0x7f0000000000)={0x0, 0x21a, 0x8, 0x6, 0x1834, 0x140, 0x5, 0x5}, 0x0, &(0x7f0000000100)={0x7ffb, 0x657, 0x10001, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x7fffffff, 0x7fff}, 0x0, 0x0) syz_emit_ethernet(0x189, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd67d6c7c301532cc5fe8000003f00000000000000000000bb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51400005907800034a9fba"]) 1.808025472s ago: executing program 2 (id=36): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)=[@rights={0x10, 0xffff, 0x1, [0xffffffffffffffff]}], 0x10, 0x40a}, 0x404) (async) r2 = socket$inet6(0x18, 0x3, 0x3a) r3 = dup(r2) sendto$inet6(r3, &(0x7f0000000340)="d3735a6a6ea10c2180ac220d7d5974a001b332432904f3636ffdeaa8cc7ba5f245bbca1e77ad0521ee593c91a2ffcce63bbdfa2d783123fdc9246e4f37aeedd3aa8ddf599bea491c39a0f5eb53ff037008129aae571724afcd0d01a0b27838c0d882d8676e41bc7d55cdf3a516f8c994e5260362436031ad4841e10420be4c4d161f475119de63d518a20ed3551444efc9bde6f33801b21b9a3bea", 0x9b, 0x2, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x2, "febfe132beaada1fcc9fa0df76735576"}, 0x1c) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) accept(0xffffffffffffffff, &(0x7f0000000300)=@un=@file={0x0, 0x0, ""/4103}, &(0x7f0000001340)=0x1009) recvmmsg(r1, &(0x7f0000002ac0)={{0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=""/253, 0xfd}, 0x4}, 0x38, 0x42, 0x0) 1.8076272s ago: executing program 3 (id=37): kill(0x0, 0x0) getgroups(0x7, &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r0, r1, 0x0) setegid(0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x0) chflagsat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x40) r3 = getppid() mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x674) r4 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0x0) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) semctl$SETVAL(0x0, 0x2, 0x8, 0x0) r5 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) r6 = getppid() fcntl$lock(r4, 0x9, &(0x7f0000000080)={0x2, 0x2, 0x9, 0xfffffffffffffffc, r6}) shmat(r5, &(0x7f0000000000/0x800000)=nil, 0x1000) ioctl$TIOCSETA(r4, 0x80047470, &(0x7f0000000500)={0x3, 0xffffffff, 0x519, 0x6, "4522ab1c59b3f1beca704340880e1a5213513f4c", 0x2c1, 0x4}) getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) sysctl$kern(&(0x7f0000000040)={0x1, 0x31}, 0xa, 0x0, 0x0, 0x0, 0xfffffffffffffc47) fcntl$setown(r2, 0x6, r3) wait4(r3, &(0x7f0000000000), 0x1, &(0x7f0000000200)) 1.807258529s ago: executing program 2 (id=38): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x28dd) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6f15184a003d3a0100000000fe000000000017000000000054cd318c7e7974600108f43a1bc1bc6a8f009078000000046c9778ec"]) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)="074656977ad200128a0659ee7b79e3473ac520ff79db1dc7f349f5d77b02bb6f211e2f78a6b62358affb5b1e78129c8b39e1cb293fa4b8bc24e260e78560ead2d8e14d4c", 0x44}], 0x1) unveil(0x0, &(0x7f0000000080)='w\x00') mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000100)={0x10, 0xfffffffffffff1e9, [{&(0x7f00003b5000/0x3000)=nil, &(0x7f00003af000/0x3000)=nil, 0x1}, {&(0x7f0000039000/0x3000)=nil, &(0x7f0000343000/0x4000)=nil, 0x800}, {&(0x7f000007d000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x4f}, {&(0x7f0000162000/0x1000)=nil, &(0x7f00002aa000/0x4000)=nil, 0x101}, {&(0x7f00002ef000/0x1000)=nil, &(0x7f00003fc000/0x1000)=nil, 0x6}, {&(0x7f000014f000/0x4000)=nil, &(0x7f000027b000/0x1000)=nil, 0x9}, {&(0x7f0000174000/0x1000)=nil, &(0x7f0000090000/0x1000)=nil, 0x1}, {&(0x7f0000262000/0x4000)=nil, &(0x7f000023e000/0x2000)=nil, 0xde4}, {&(0x7f0000398000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, 0x7}, {&(0x7f00003cc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xae}, {&(0x7f0000012000/0x2000)=nil, &(0x7f000019a000/0x3000)=nil, 0x553bc39f}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f00002b4000/0x4000)=nil, 0x3}, {&(0x7f00003f3000/0x1000)=nil, &(0x7f000037b000/0x1000)=nil}, {&(0x7f00000fe000/0x4000)=nil, &(0x7f0000282000/0x1000)=nil, 0x100}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000088000/0x4000)=nil, 0x7f}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0x10000)=nil, 0x101}], './file0\x00', 0x4, 0x8e7, 0x0, 0xe, [0x7, 0x7, 0xf, 0x1000, 0x6, 0x4, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0x7, 0x1e, 0x4, 0x8001, 0x0, 0x3, 0x6, 0x6, 0x5d, 0x0, 0x6, 0xf9f11b5, 0x100, 0x1, 0xd, 0x7ff, 0x3, 0x3d1b310, 0x800, 0x8, 0x9, 0x3, 0x5, 0xff, 0x1b7, 0x5, 0x1, 0xffffff1d, 0x3, 0x81, 0x2, 0xcc, 0x8, 0x8, 0x9c7c, 0x1a, 0x9, 0x6edb24ae, 0xf, 0xe69a, 0x6, 0x5, 0x0, 0x401, 0x3ff, 0x4f4, 0x8, 0x8, 0xc, 0x1, 0x5, 0x0, 0xfffffffd, 0x401, 0x7fff, 0x7, 0x6, 0x6, 0xfff, 0x5, 0xfffffff8, 0x4, 0x9, 0xbe2, 0x7, 0x5, 0x0, 0x5, 0x9, 0x8, 0x93, 0x1, 0x7fffffff, 0x34, 0xe884, 0x80000001, 0x8, 0x8, 0x0, 0xf, 0x5, 0xfffffff7, 0x4, 0x7, 0x7, 0x750, 0x5, 0x400, 0x6, 0x8, 0x4, 0x8, 0x3, 0x3, 0x4, 0xfffffffb, 0x3, 0x6, 0x1c0a, 0xb, 0x40, 0x7, 0xd, 0x9, 0x6, 0xef6c, 0x3, 0x7, 0xffffb6af, 0xd91, 0x6, 0x3, 0x7, 0x9, 0x5, 0x2, 0x8000, 0x8, 0x100, 0x7, 0x3, 0xfc, 0x9c, 0xb1, 0x40, 0x7, 0x6, 0xffff, 0x8, 0x84, 0xf713, 0x6, 0x2, 0x1, 0x10001, 0x5ab6, 0x8, 0x2, 0x4, 0x7, 0x6, 0x4, 0x4, 0x0, 0x7, 0x9, 0x7, 0xfff, 0x7, 0x7, 0x1, 0x20, 0x100, 0x7, 0xfff, 0x4, 0x9, 0x1, 0xfffffff7, 0x4a1, 0xbb, 0x9, 0xf6, 0x9, 0x400, 0x5, 0x0, 0x7f, 0x8, 0x3, 0x4, 0x4, 0x4, 0xc6c7, 0x6, 0x5, 0x3ff, 0x6, 0x49, 0x80, 0x6, 0x2, 0x1, 0x3, 0x2f, 0x4000000, 0xffffffff, 0x2, 0x21, 0xae73, 0x3ff, 0xffffffff, 0x0, 0x8, 0x8, 0x744, 0x8, 0x88, 0xc, 0x0, 0x8, 0x5, 0x3, 0xc9, 0x8, 0xb, 0x7ff, 0x1141, 0x7, 0x2, 0x8, 0xc, 0x9, 0x7fffffff, 0x2, 0x10, 0x9, 0x2, 0x8, 0x5fd, 0xb, 0x0, 0xe, 0x1, 0x4, 0x2a8e, 0x7, 0x7f, 0x5, 0x81, 0x3, 0x3ff, 0x80000000, 0x5, 0x7, 0x8001, 0xdb67, 0xffff0001, 0x5, 0x100, 0xb5, 0x3, 0x8, 0x1, 0x2f6, 0x5, 0x9, 0xf, 0x0, 0x5, 0x0, 0x4, 0x2, 0x4, 0x7, 0x5, 0x7f, 0x6, 0x9, 0x5, 0xfffffff9, 0x6, 0x3, 0x81, 0x1, 0x6, 0xd1, 0x3ff, 0x2, 0x8, 0x1, 0x997, 0x200, 0x4, 0x2, 0xffff0000, 0x9, 0x3ff, 0x1, 0xa0, 0x7, 0x6, 0x4, 0xfffffffd, 0x0, 0x6, 0x1, 0xc00, 0x35c, 0x8, 0x7, 0xd, 0xf6, 0x8, 0xd, 0x6, 0xfff, 0x7, 0x8, 0x3, 0x5, 0x4, 0x2c4, 0x80, 0x4, 0x6, 0x6, 0x5, 0x0, 0x0, 0x1, 0x3, 0x10, 0x5b240f9d, 0x82, 0x3, 0x40, 0x1, 0x10001, 0x80000000, 0x1, 0xf0f, 0x3, 0x0, 0x40, 0xe5, 0x2, 0x6, 0x1, 0x9, 0xffffffff, 0x7, 0x9, 0x0, 0x4, 0x6a6a, 0x9, 0x5, 0x5, 0x2, 0x4bc52e5, 0x5, 0x3, 0x9, 0x8, 0x7, 0xfffffffd, 0x7f, 0x2, 0x8, 0x9, 0x3, 0x4f4, 0x1, 0x7, 0xffffffff, 0x1ff, 0x10001, 0x57fa, 0x9, 0x101, 0x210, 0x3, 0x9, 0x8, 0x0, 0x2, 0x3ff, 0x2, 0x1, 0xffff1c04, 0x7, 0x8001, 0x80, 0x5a43, 0xffffffad, 0x7fffffff, 0x1, 0x6, 0x7fffffff, 0x604, 0x9, 0x6, 0x5, 0x2, 0x10001, 0x3ff, 0xfffffffc, 0x8, 0x0, 0x32, 0x4, 0x0, 0x6, 0x8000, 0x80, 0x4, 0x4, 0x8, 0x1000, 0x9, 0x400, 0xff, 0xa210, 0x31a, 0x101, 0x3, 0x5, 0x0, 0x7, 0xffff, 0xac2, 0x0, 0x5, 0x0, 0x4, 0x2e, 0x6, 0x10000, 0x0, 0x7, 0x12a69169, 0x1, 0xc9, 0xd000000, 0x101, 0x5, 0x8, 0x5db, 0xc06, 0x80000000, 0x8000, 0x5, 0x9, 0x0, 0xfff, 0x2, 0x3, 0xf4, 0x2, 0xd8000000, 0x2, 0x400, 0x2, 0x8, 0x4, 0x5, 0xffffffff, 0x8, 0x7fff, 0x400, 0xfffffff9, 0x58, 0x80000001, 0x79, 0x3, 0xffffffad, 0x0, 0x1, 0x1, 0x2, 0x2, 0x4, 0x4, 0x1c000, 0x3, 0x8001, 0x5, 0x6, 0xffff, 0x1000, 0x3, 0x6, 0x1ff, 0x401, 0xf, 0x0, 0x4, 0xffff0000, 0x0, 0xfffff801, 0x8, 0x7fffffff, 0x1, 0x8001, 0xa7a, 0x7, 0xfffffffa, 0xfffffff8, 0x81, 0x7f, 0x3, 0x100, 0xc, 0x8, 0x4, 0x0, 0x3, 0x4, 0x800, 0x7fffffff]}) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='w\x00') 1.806761818s ago: executing program 7 (id=39): seteuid(0xffffffffffffffff) execve(0x0, &(0x7f0000000180)=[&(0x7f0000000080)='//\x00'], 0x0) r0 = getegid() getgroups(0x0, &(0x7f0000000040)) socket$inet6(0x18, 0x2, 0x0) seteuid(0xffffffffffffffff) r1 = semget$private(0x0, 0x2, 0x4) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000005200)={{0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x18}, 0x0, 0x1, 0x0, 0x0, 0x94, 0x0, 0x1}) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000480)={{0x0, r0, 0x0, r0, 0x40, 0x2afc, 0x0, 0x0, 0x454}, 0x0, 0x3, 0x0, 0x0, 0x6aae, 0x0, 0x4eb6}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000240)="89143646442d8da97e6c6deb95d52e9c7eeeb628", 0x14) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000340)="080506d80b10f1e891bfd42a4d875d7875a68ff6f9de5fb477f929fa3cb8b50efca35b8248", 0x25) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) seteuid(0xffffffffffffffff) (async) execve(0x0, &(0x7f0000000180)=[&(0x7f0000000080)='//\x00'], 0x0) (async) getegid() (async) getgroups(0x0, &(0x7f0000000040)) (async) socket$inet6(0x18, 0x2, 0x0) (async) seteuid(0xffffffffffffffff) (async) semget$private(0x0, 0x2, 0x4) (async) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000005200)={{0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x18}, 0x0, 0x1, 0x0, 0x0, 0x94, 0x0, 0x1}) (async) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000480)={{0x0, r0, 0x0, r0, 0x40, 0x2afc, 0x0, 0x0, 0x454}, 0x0, 0x3, 0x0, 0x0, 0x6aae, 0x0, 0x4eb6}) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) socket$inet(0x2, 0x3, 0x4) (async) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000240)="89143646442d8da97e6c6deb95d52e9c7eeeb628", 0x14) (async) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000340)="080506d80b10f1e891bfd42a4d875d7875a68ff6f9de5fb477f929fa3cb8b50efca35b8248", 0x25) (async) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) 1.629428837s ago: executing program 3 (id=40): r0 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x0, 0x0, r2, r3, 0x1b2, 0x6, 0x0, 0x0, 0x6}, 0x1, 0x0, 0x0, 0xc0, 0x0, 0x5, 0x0, 0x9, 0x4, 0x9, 0x80000dcf}) seteuid(0xffffffffffffffff) shmctl$IPC_STAT(r0, 0x2, 0x0) getgroups(0x7, &(0x7f00000002c0)=[0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0]) r7 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) r8 = dup(r7) ioctl$TIOCSTAT(r8, 0x4004570c) r9 = open$dir(&(0x7f0000000100)='./file0\x00', 0x20, 0x5e) r10 = geteuid() fchownat(r9, &(0x7f0000000140)='./file0/file0\x00', r10, r4, 0x6) setregid(r6, r5) mknod(&(0x7f0000000280)='./file0\x00', 0xc000, 0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r11) open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x3c) ioctl$AUDIO_STOP(r11, 0x2000747a) r12 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$DIOCXROLLBACK(r11, 0xc0104453, &(0x7f0000002200)={0x7, 0x5, &(0x7f00000005c0)=[{0x1, '.\x00', 0x6}, {0x0, '.\x00', 0x4}, {0x1, './file0\x00', 0x9}, {0x1, './file0\x00', 0x5}, {0x1, './file0\x00', 0xffffffff}, {0x0, './file0\x00', 0x5}, {0x0, './file0/file0\x00', 0x9}]}) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) minherit(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) minherit(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3) ioctl$BIOCSETF(r12, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x5, 0xf9, 0x4}, {0x4, 0x4, 0x1, 0x1000}, {0xd9e6, 0x9, 0x2, 0x436}]}) ioctl$BIOCSETIF(r12, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) close(r12) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xffff6383) open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x2) syz_open_pts() 1.629138717s ago: executing program 1 (id=41): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = kqueue1(0x10000) kevent(r3, &(0x7f0000000040)=[{{r3}, 0xfffffffffffffffa, 0xc3, 0x2, 0x1, 0xfffffffffffffffd}], 0x6, 0x0, 0x4, 0x0) kevent(r3, &(0x7f0000000480), 0xf00, 0x0, 0xffff4b51, 0x0) r4 = syz_open_pts() syz_open_pts() fcntl$dupfd(r4, 0x0, r4) r5 = openat$speaker(0xffffffffffffff9c, &(0x7f00000005c0), 0x8001, 0x0) ioctl$SPKRTUNE(r5, 0x20005302, &(0x7f0000000600)={0xffff141d, 0xb79edb55}) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) kqueue1(0x0) dup(r1) mkfifo(&(0x7f0000000100)='./file0\x00', 0x8) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) r8 = dup3(r0, r7, 0x0) r9 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$BIOCSETF(r9, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x30, 0x65, 0x10, 0x7}, {0x4, 0x7, 0xdd, 0x6}, {0xfffe, 0x10, 0xd7, 0xfffffff7}]}) ioctl$BIOCGSTATS(r6, 0x4008426f, &(0x7f0000000080)) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYRES8=r3, @ANYRESDEC=r6, @ANYRESDEC=r2, @ANYRES16=r8, @ANYRES32=r3, @ANYRESHEX=r2]) 1.628686207s ago: executing program 5 (id=42): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x341a) r1 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) writev(r2, &(0x7f0000000540)=[{&(0x7f00000002c0)="19a09f0a202db400721b86085f2ccb05793b8c2b5fa2ca44d6760feccbaa42ce584b73722125bc3a0080e544a9b04f43186c91c63608e995b3d891c8ad165b0e2cebe705c495fb883d9a0ee0f6322059b4849c86a134181c25a27029cb4bb58bed6036028e825ee65c50a83bc4bd6fc38a7fd17560c33a9dfc8426ab42d5ee3c103260c22f1bbafef85817e66f751b2ef60db074ed32ddf37f8837129e1d0932a736e1e37fe5f22b4b34e675b4aee91a87e4aec94d3a43fc21647990417e880d1ab087e5b33e87957fe8594f241d045da1778302517ed54c8fb04a1d5bae76611af2c334", 0xd6}, {&(0x7f0000000280)="ffdb9f10984e2f8961967223f4996de5a537e34107c1a402be3523e39bce454ce4eee6b86dc96ab382f89e", 0xff98}], 0x2) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x4, 0x2010, r1, 0x2000) truncate(&(0x7f0000000000)='./file0\x00', 0xffff) open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000380)='./file0\x00', 0xaa) mkfifo(&(0x7f0000001740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0\x00') syz_emit_ethernet(0x56, &(0x7f00000016c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800407d0048006600b008039078ac1400aaff000001070b0100000000ac1400bb070b767f000001ffffffff891399ac1400aaac1400aaffffffffe0000002000000100090780008014f"]) ioctl$TIOCSPGRP(r3, 0x40047477, &(0x7f0000000000)) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) syz_open_pts() ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x100}], 0x1}) 1.628267574s ago: executing program 4 (id=43): r0 = socket$inet(0x2, 0x1, 0x6) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000100)=0x3c) getgroups(0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r2, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) closefrom(r4) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) r5 = syz_open_pts() ioctl$TIOCSTOP(r5, 0x2000746f) r6 = socket$inet6(0x18, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0x1c, 0x18, 0x1, 0x41, "fffe00000080007f7400", 0xc0000}, 0x3d) ioctl$TIOCSETAW(r5, 0x802c7415, &(0x7f0000000000)={0x1007, 0x4, 0xffffffc0, 0xffffffff, "7e604ed9982e63d80806000000000700", 0x1000002, 0xcfb}) write(r3, &(0x7f0000000040)='~', 0x1) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mknod(0x0, 0x2000, 0xffff4386) open$dir(0x0, 0x10000, 0x2) close(r7) open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x3c) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) r8 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000664000/0x3000)=nil) shmat(r8, &(0x7f0000000000/0x800000)=nil, 0x1000) sendmsg$unix(0xffffffffffffffff, 0x0, 0x400) ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f00000000c0)={0x80000003, 0x0, 0x0, 0x3, "7353e100", 0x10, 0x80}) setresuid(0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000700)={0x10, 0x2, 0x2, 0xac1400a6}, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) 1.627815827s ago: executing program 5 (id=44): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x2d28) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) write(r0, &(0x7f0000000040)="91fa", 0x2) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r2 = getppid() fcntl$setown(r1, 0x6, r2) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r3 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_int(r3, 0xffff, 0x40, &(0x7f0000000100), &(0x7f0000000140)=0x4) fcntl$setown(r1, 0x6, 0x0) r4 = socket$inet(0x2, 0x3, 0x7) openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) sendmmsg(r4, &(0x7f0000002280)={{&(0x7f0000000100)=@in={0x10, 0x2, 0x2, 0x1800000}, 0x10, &(0x7f00000021c0)=[{&(0x7f0000000140)="ec5c4a8a8fb538ff7ff92ca3321b772eefabcaf39304a0448e18b1cfb045dd7012b00888c80aa3e25e701ffae097633d67f3b9cd294f0c796b624932b66e0a772c090f43ac9c9f57714d4eba776fdd15389399207d198576751e97d8cf1d185e251f27b21a808a3f8d6846856909591b3d9be58a544edc8c6df080a671089df6285e5c96d050ca6b23a9875ba8ff705699c8106953bdc76bc8b48ff2dedca663f3747d8dcbfe98cd2f852500"/184, 0xb8}, {&(0x7f0000000200)="9185e2ab", 0x4}, {&(0x7f0000000240)="69ddbd51b98d18e6582637f889826c8a59e3a22ea7e23d55ba44a4bcc9c9e3096d99b25ec028befe4d40d795b8c26e0cb8699090243259154eed83fa0b4847ed5beb83a00ff3b9327cc1645e57e3608e6dbafefe93214dbd8cfb4e5df6a0fe5b8a520f2ca580d2eb4c2d42217eda217904173306cd14c4002f0c27bb16bca742d6a71b1aa5039d8d797edb255b6e5407480e2d3f0175678690fa58cf82d6de6f90672ef85fb6b60f0240dfbff5a7f1923bbc13701bad817ece8271f5efbbaaa3e4aac64c6f6dfe10b07aea7658393f3ec31af1ab996d37112dddd68f55ef", 0xde}, {&(0x7f0000000340)="c878321d80bb9a2627fddacf6376e856b4c78100fb567b4e1a2ef981dd7ced46d047f281f0669041ae6003e59cb9789e20b7f38db921e17e2c", 0x39}, {&(0x7f0000000380)="985e5e741d86467ded465157af971ece473c22d77cedd9f98e8aaf21fe4b8a3c1dc20a07457b84172a1cc70df2374cea3d4e5f70137c53dafae2d8b51b9d7d91ba0c292c8bd886956c248721220cb83836f34a0541cf346bb1f79f95648c595048b5d1fed82c76af01eb8cd538aab43a420601b0083c462235da1fa72069c5de47ca9e92d7c4663e806e9429c215d0fe7182a962246bce3cedcf67dfb386bd2f0858f91a03c6b752791da079ae1ad53357af64710ef9d3c6", 0xb8}, {&(0x7f0000000440)="4367e9f5ed85424f8170b690020aba85cca54db4a48d829993b6e1fda8939f5273f6441639f5829e9b713551c18d639d00b8238714be7962779a1e247feee1e736b2b7fefa0dfa", 0x47}, {&(0x7f0000001140)="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", 0x8bf}], 0x7, 0x0}}, 0x38, 0x400) 1.598494827s ago: executing program 3 (id=45): shmget(0x0, 0x4000, 0x22, &(0x7f0000ffa000/0x4000)=nil) r0 = geteuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) r3 = socket$inet6(0x18, 0x8000, 0x8) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x61, "fff10000ed13160000b2526800000020"}, 0x1c) getsockname$inet6(r3, 0x0, &(0x7f0000000080)) lchown(&(0x7f0000000080)='./file0\x00', 0x0, r2) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)) r4 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) sysctl$hw(&(0x7f0000000000)={0x6, 0x11}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, r7, 0x1b2, 0x2, 0x0, 0x0, 0x6}, 0x9, 0x0, 0x0, 0xc0, 0x0, 0x5, 0x40000000004, 0x9, 0x4, 0x9, 0x80000dcf}) r8 = getthrid() pipe2(&(0x7f0000001880)={0xffffffffffffffff}, 0x4) ioctl$FIOASYNC(r9, 0x8004667d, &(0x7f0000004800)=0xf06) r10 = syz_open_pts() dup2(r10, r10) r11 = fcntl$getown(r10, 0x5) fcntl$setown(r9, 0x6, r11) r12 = shmget$private(0x0, 0x4000, 0x444, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r12, 0x1, &(0x7f0000000280)={{r0, r7, r6, r7, 0x140, 0x6, 0x0, 0x0, 0xc}, 0x0, r8, r11, 0xb, 0x0, 0x9, 0x1, 0x4, 0xffffffff, 0x9, 0x334}) getegid() lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, r2) getrusage(0xffffffffffffffff, &(0x7f0000000140)) openat$pci(0xffffffffffffff9c, &(0x7f0000001780), 0x10, 0x0) 431.020022ms ago: executing program 3 (id=46): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (rerun: 64) closefrom(r1) sendmsg$unix(r0, &(0x7f0000004600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x40c}, 0x400) (async, rerun: 32) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) (rerun: 32) ioctl$DIOCNATLOOK(r2, 0xc0504417, &(0x7f0000000640)={@v6=@local={0xfe, 0x80, '\x00', 0x0}, @v4=@multicast2, @v6=@rand_addr="24d3be0f3061d93aefa424577225332f", @v4=@rand_addr=0x6, 0x7, 0x4c7f, 0x9, 0x9, 0x2, 0x6325, 0x18, 0x0, 0x3}) (async, rerun: 64) getgroups(0x40000000000001f6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) (rerun: 64) setresgid(r5, r4, 0x0) (async) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) fcntl$lock(r6, 0xb, 0x0) ioctl$BIOCGDIRFILT(r6, 0x4004427c, &(0x7f0000000080)) (async) setgid(r3) (async) r7 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) closefrom(r7) (async, rerun: 64) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x7) (rerun: 64) open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x21) (async) ioctl$TIOCSTAT(r7, 0x20007465) (async, rerun: 64) ioctl$TIOCSETAF(r7, 0x802c7416, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x80004a, "90d431362579980f500000000000001700", 0x0, 0x9}) (async, rerun: 64) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5d42) (async) ktrace(0x0, 0x1, 0x1400, 0x0) 430.437161ms ago: executing program 7 (id=47): munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x522, 0x0) mkfifo(&(0x7f0000001800)='./file0\x00', 0x8) r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x3c) open$dir(0x0, 0x40, 0x1bc) fcntl$setstatus(r1, 0x4, 0xc) r2 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000d00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045da003c0068000005019078e0000001ac1400bb4e234e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a1040b8690780005507a7e171879dccaa40c2874e0bb698c82850000"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r3) fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x2, 0x0, 0xa1, 0x100000001}) closefrom(r0) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000780), 0x10, 0x0) ioctl$BIOCSRTIMEOUT(r5, 0x8010426d, &(0x7f0000000040)={0x10000000000, 0x13a0}) ioctl$VMM_IOC_RUN(r4, 0xc0285602, &(0x7f0000000580)={0x3, 0x3ff, {0x7f, 0x6, 0x8}, 0x2d, &(0x7f0000000300)={{0xc1, 0x4, 0xb, 0x0, 0x1, 0x4, 0x5, 0x37}, {[0x8001, 0x1, 0x8, 0x9, 0x81, 0x101, 0x6, 0x7fffffffffffffff, 0xde3, 0x9, 0xa75, 0x2, 0x401, 0xe02d, 0x6, 0xd004, 0x30e3, 0x7], [0x8, 0x8, 0x3, 0x5, 0x7fff, 0x6, 0x200, 0x0, 0x4, 0x10001], [0x1, 0x2, 0x89, 0x9, 0x4, 0x0, 0xc], [0x4, 0xfffffffffffffff4, 0x8, 0x98d1, 0xfffffffffffffbff, 0x1], [{0x0, 0x1, 0x4, 0x40}, {0x6, 0x6, 0xfffffffc, 0xcfb1}, {0x8, 0x80000001, 0x40000098, 0x1000}, {0xc, 0x5, 0x5, 0x1}, {0x7a23, 0xffffffff, 0x3, 0xbe}, {0x9, 0x9, 0x3, 0x6}, {0xe770, 0x3ff, 0x1, 0x8}, {0x3, 0xd, 0x142034f8, 0x2}], {0x8, 0x0, 0x6, 0xa5}, {0x4, 0x2, 0xf12}}, 0x7ffffffc}, 0x4, 0xc7}) 429.962738ms ago: executing program 0 (id=48): r0 = open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0x2, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x2}, {{0x9, 0x5}, {0x2f1c, 0x526}, 0x4}, {{0xc, 0x2}, {0x9, 0x1000}, 0x40000000}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x4}}) fchflags(r0, 0x8) open$dir(&(0x7f0000000800)='./file0\x00', 0x200, 0xfdf98e28ba4af85) r1 = openat$pf(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DIOCRDELADDRS(r1, 0xc4504444, 0x0) ioctl$DIOCADDRULE(r1, 0xcd604404, &(0x7f0000001e80)={0x6, 0x8, 0x3d, './file0\x00', './file0\x00', 0x0, "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"}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x1d7) mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x4, 0x2011, r2, 0x0) ioctl$WSDISPLAYIO_GETSCREENTYPE(r2, 0xc028575d, &(0x7f00000001c0)={0x3, 0x4, './file0\x00', 0x400, 0x3, 0x8, 0x6}) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x5204, 0x8001) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) ioctl$DIOCGETLIMIT(r4, 0xc0084427, &(0x7f0000001e40)={0x7, 0xfffffffb}) syz_emit_ethernet(0x12b, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa7260090a8760080047e0011d006800800c679078ac1400aaac1400aa94040007940400044e224e20", @ANYRES32=0x41424344, @ANYRES32=r3, @ANYBLOB="81080001907800070003030e0307d68833a20f00ab6168ff6877edf605eee5b22c66ea59ce4fbd7d10b549364ed84c8eeb6022257d17c712d54a586636e01fac1b562f55f6e194f4dd5aa157cab7ef825a8c1cc3227b4917bad481390f7c30f2a873b40663437e6a69f5627bdaeca8d4cf18e42d250d483d2bed603da962fb321f73ba71628919f534ecad836857de4165b8bb6a6e17c32a62e3b12df727ef33a86725253d535b9fc0aac233541991030cc373b1aff3faa15d9f5e34eba018b43c74e2ad43cb76155d20fd4106f2910bb03417c5b2e06ecdd17923044d343d1b5f3e48d0afa1764654"]) open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) (async) ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0x2, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x2}, {{0x9, 0x5}, {0x2f1c, 0x526}, 0x4}, {{0xc, 0x2}, {0x9, 0x1000}, 0x40000000}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x4}}) (async) fchflags(r0, 0x8) (async) open$dir(&(0x7f0000000800)='./file0\x00', 0x200, 0xfdf98e28ba4af85) (async) openat$pf(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) ioctl$DIOCRDELADDRS(r1, 0xc4504444, 0x0) (async) ioctl$DIOCADDRULE(r1, 0xcd604404, &(0x7f0000001e80)={0x6, 0x8, 0x3d, './file0\x00', './file0\x00', 0x0, "77395ac60ccd7c55dc8b0f1be1722ec1030b481fc514d28d816238c9265939a4c469835335dab1eb9db11749047146384bc73cead948af9126fb4bcbdada5648a008e7c29ea8093e77f0dc8dfdc48173926c6ec3a238d15fca07db07ec4a6f31cd26043743e2d290d81183786162caceb735f415cc807ba5f98ff14046a05ebb12700953faf38f858cb61558ea835c96b953fedd93538eaf6fda839f868d031e402fd10049cd6aa13471e229f86f283de82376ffbce828e91563870a019c010d21b2cc3a30f67f59f870d5d0a8cd5bd48760417f114a08dd2b3666ca58db950653cd88143c3d4d65484605e82e186c8773537ceba9e482a01fe6fe55b098fe320f4c8fae654f82bee41e9624a98afb7fb20f07e912931ad38274c8cbb1d2334a667013b33e5c9f3948fbe0053a47986eac5dd513008177451eceb4fad90d572b028265c7fd64b2c8ccf1ff2e194f644a276587d39a5bae333cfede0c9f54e6efa9c0f15ba66f67146fa4cfa0f77f754bcde7e88065490c00b58f6970d2d5cf5c06f9219de091f4068d761accf6b1bac46c6d822d64b5424cc9c3a543265a08b960cd1592b35268edfd1f842130b3be8c1b40a76d26db54d44031f8a3183eab736d3855764e384983c5c50a36d6b2b5c4661abf4ca8b20e617bf765ff079ace1c93cc905187d7ae7a1e2160a7c978df107829cc61f41bd7867a8a50fac00946dc55240b0e3e0483d08a966dc212c516e20d478fb21a664770d11ebbf7f46cbe6aedcdba2fb8f7e02a31ffa130a097cb88c7479fcf3bea9cca2977f02f9e692d79fe3072d490ac906b7b5b6603e5aff691ba419825d0c22f77569eb70ab6aed4dc84812b94a016b18abf4b1abf7ecd15eafbf2e0b67078fce877a86df5fa302439b5503a1e5b1635a9b1ccd96de1180d1b2342e4fbe590231a02d842f4a74cfa5acc542f21d56df4b93da651a308a8cd9b26cf90b7cb85b132f4d826706ba0e48bb32077ea50f96b2ce6c3a95a05e20d63a8624e22f7cadd4313b60651d7356dc8346f6eb94037379b18904f50836431887091a924a515861d54a1c0e634cc971f3f4929162e5fbc0bf75db34969e9472f00cb23c7f766ee98de095cff7d6f015e94da82c0a899bf3fe0a7ef63c5504046cb2f4dcc79c0d50c6097caf90c369d1f55505bdb0d884fe5112f601e480af1a0cc7a1b1cb8124db0517ab1179ce4e205de4af0fe7553801396ecc36195b22d87eb8c6b3d27bbea33ff8716cb91b1187b5a0fa51f130fb244e357ada83d929fd1978a633b9fd25c537865c7b37a38430f9e890ae15f9859ef0b01075c440c9721c05427ca7c83a130b81cb2f0f7ee98775b172b3626329921d7c3781df0e0ebb2739ca0dd345cf921bc4f347c2fd43e135cca002eb4ebd06aba2d83fc0391f9da35b79cd26f8284015ebdd376aa8b1d915585245d760d02833dd8c3f099f258b2fd3df000cb88145cb5675641720040eab35ee84033b23334677954272a72b7fb3a3746a7f7fe936cd4125b81d4a3283bf32dc03e9371eb47164822b150f7e40fca6f612920288fe746c4d78859203c8dcf02505b1f0ad9c6f04d6dfd0a64bcc3523251e4b7ce541c1b55a6bb243508e51c33a0b8b7625d3adfc2f9dee109afdadbbcd4874c1105000000095ff4e8303dd7aede69ac6370c9fe5036aedaa38f0faf8ec30cbd0a19e81ba3ebe8c8e02e0e607cd2db30be0cd993693ccd9baf231b10c945b9724e141aa102aebafcf36905aaee95bc15943df0bed706d343fc222a49fdecc62e65d87240633cc1a8b060dc1f78274361e63defe22840f65b63482e907e7e0bd2d7d207495dae1ac1e64b05ae95780518b679393cdd83fd6a643a176820fc68d7e70d6861aa5213ca87962a5b301bdd00"}) (async) open(&(0x7f0000000140)='./file0\x00', 0x800, 0x1d7) (async) mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x4, 0x2011, r2, 0x0) (async) ioctl$WSDISPLAYIO_GETSCREENTYPE(r2, 0xc028575d, &(0x7f00000001c0)={0x3, 0x4, './file0\x00', 0x400, 0x3, 0x8, 0x6}) (async) syz_extract_tcp_res(&(0x7f0000000000), 0x5204, 0x8001) (async) openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) (async) ioctl$DIOCGETLIMIT(r4, 0xc0084427, &(0x7f0000001e40)={0x7, 0xfffffffb}) (async) syz_emit_ethernet(0x12b, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa7260090a8760080047e0011d006800800c679078ac1400aaac1400aa94040007940400044e224e20", @ANYRES32=0x41424344, @ANYRES32=r3, @ANYBLOB="81080001907800070003030e0307d68833a20f00ab6168ff6877edf605eee5b22c66ea59ce4fbd7d10b549364ed84c8eeb6022257d17c712d54a586636e01fac1b562f55f6e194f4dd5aa157cab7ef825a8c1cc3227b4917bad481390f7c30f2a873b40663437e6a69f5627bdaeca8d4cf18e42d250d483d2bed603da962fb321f73ba71628919f534ecad836857de4165b8bb6a6e17c32a62e3b12df727ef33a86725253d535b9fc0aac233541991030cc373b1aff3faa15d9f5e34eba018b43c74e2ad43cb76155d20fd4106f2910bb03417c5b2e06ecdd17923044d343d1b5f3e48d0afa1764654"]) (async) 385.904986ms ago: executing program 6 (id=49): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x0, 0x0}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYRES16]) 385.302973ms ago: executing program 6 (id=50): sysctl$vfs_nfs(&(0x7f0000001d80)={0xa, 0x27, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x41, "febf08001feb0000dd00", 0x10000}, 0x24) 197.530856ms ago: executing program 7 (id=51): r0 = msgget$private(0x0, 0x12) msgsnd(r0, &(0x7f00000003c0)={0x3}, 0x8, 0x0) (async) msgsnd(r0, &(0x7f00000003c0)={0x3}, 0x8, 0x0) getgroups(0x264, &(0x7f0000001240)) msgrcv(r0, &(0x7f00000016c0)={0x0, ""/226}, 0xea, 0x0, 0x1000) 197.013516ms ago: executing program 7 (id=52): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000080)={0xb, 0x9, 0x4, 0x7fffffff, "58c4c37c48993c4599403ab3e9b376e2e445461e", 0x3, 0x100}) r0 = kqueue1(0x10000) r1 = socket$inet6(0x18, 0x1, 0x0) setsid() r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCSFILDROP(r3, 0x80044279, &(0x7f0000000040)=0x2) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb080045da00300066000005019078e0000001ac1400aa0304907800060000451d00860068dc6545165220000000007f000001"]) r4 = syz_open_pts() r5 = dup2(r4, r4) ioctl$TIOCSCTTY(r5, 0x20007461) openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r6 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) close(r4) writev(r6, &(0x7f0000000300)=[{0x0}], 0x1) shutdown(r1, 0x1) getsockname(r1, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0x8e, &(0x7f0000000500)=ANY=[]) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$FIOSETOWN(r7, 0x8004667c, &(0x7f0000002580)=0x1) kevent(r0, &(0x7f0000000080)=[{{r0}, 0xfffffffffffffff6, 0x8b, 0x80, 0xffffffffffff1762, 0x4}, {{r0}, 0xfffffffffffffff6, 0x9, 0x78000001, 0x5, 0x8}], 0x86, 0x0, 0xffff4b4d, 0x0) closefrom(r0) ioctl$WSKBDIO_SETDEFAULTBELL(0xffffffffffffff9c, 0x80105705, &(0x7f0000000000)={0x7, 0xeaf, 0x0, 0x8001}) r8 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r8, r8) readv(r8, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/230, 0xe6}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000200)=""/237, 0xed}, {&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000380)=""/104, 0x68}, {&(0x7f0000000400)=""/66, 0x42}], 0x7) 190.674385ms ago: executing program 0 (id=53): mkfifo(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x2, 0x7}, 0x10) sysctl$hw(&(0x7f0000000100)={0x6, 0x1b}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0x18}}, 0x38, 0x400) readlink(&(0x7f00000013c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 188.545705ms ago: executing program 0 (id=54): mkdir(&(0x7f0000000400)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x148) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)=[@rights={0x10, 0xffff, 0x1, [0xffffffffffffffff]}], 0x10, 0x40a}, 0x404) recvmmsg(r1, &(0x7f0000002ac0)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/253, 0xfd}, 0x4}, 0x38, 0x1c00, 0x0) symlink(&(0x7f0000000180)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 187.419983ms ago: executing program 2 (id=55): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$VMM_IOC_INFO(r0, 0xc0185603, &(0x7f0000000100)={0x0, 0x8, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0xb, &(0x7f0000000080)=[0x0, r1, 0x0, 0x0, r1, 0x0, 0x0, r1, r1, r1, r1]) setresgid(r5, r4, 0x0) getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(0x0, r7, 0x0) r9 = socket$inet6(0x18, 0x3, 0x0) setsockopt$sock_int(r9, 0xffff, 0x1000, &(0x7f00000002c0)=0x6, 0x4) bind$inet6(r9, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x11, "00000000000000000000000000000010", 0x1000004}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYRES8=r6, @ANYRES8=r3, @ANYRESDEC=r8, @ANYRES8=r6]) r10 = getpid() getgroups(0x7, &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(0x0, r12, r11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r13, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setreuid(r14, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5597) open(&(0x7f0000000040)='./file0\x00', 0x2, 0xea) setegid(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r15, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setreuid(0x0, r16) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x404) ktrace(&(0x7f0000000040)='./file0\x00', 0x2, 0x20, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x12}, 0x4, &(0x7f00000023c0), &(0x7f0000000000)=0x19, 0x0, 0xfffffffffffffe99) setegid(r2) setpgid(r10, r10) 168.160209ms ago: executing program 3 (id=56): syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0806000108"]) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DIOCNATLOOK(r0, 0xc0504417, &(0x7f0000001a00)={@v4=@rand_addr=0xfff, @v4=@rand_addr=0x200, @v4=@local={0xac, 0x14, 0x0}, @v6=@mcast1, 0x401, 0x8, 0x800, 0x200, 0x8, 0x5, 0x18, 0x1, 0x2}) 113.330683ms ago: executing program 0 (id=57): sysctl$hw(&(0x7f0000000040)={0x6, 0xe}, 0x2, &(0x7f0000000080)="24aed0b0d4", &(0x7f0000000100)=0xffffffffffffffd7, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) setitimer(0x1, &(0x7f0000000080)={{0xfffffffffffffff9, 0x3}, {0x2, 0x7}}, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) r0 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x800000)=nil, 0x1000) r1 = socket$inet(0x2, 0x3, 0x2) seteuid(0xffffffffffffffff) setsockopt(r1, 0x0, 0x1d, &(0x7f0000000140)="9a350700", 0x4) r2 = dup(0xffffffffffffffff) ioctl$DIOCRCLRASTATS(r2, 0xc4504448, &(0x7f00000003c0)={{'./file1\x00', './file0\x00', 0x31, 0xf}, &(0x7f0000000200)=[{@multicast1, '\x00', './file1\x00', 0x6, 0xe, 0x1a, 0x63, 0x3, 0x1, 0x2}, {@empty, '\x00', './file1\x00', 0x4, 0x10, 0x1a, 0x10, 0x4, 0x6, 0x7}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0xe, 0x8, 0x18, 0x2, 0x88, 0x0, 0x1}, {@multicast1, '\x00', './file1\x00', 0x0, 0x5, 0x0, 0x1, 0x2, 0x4}, {@local={0xac, 0x14, 0x0}, '\x00', './file2\x00', 0xfffffffc, 0xe0, 0x2, 0xff, 0x10, 0x51, 0x2}, {@multicast2, '\x00', './file2\x00', 0x9, 0x5, 0x2, 0x81, 0x9, 0xb, 0x10}, {@local={0xac, 0x14, 0x0}, '\x00', './file0/file0\x00', 0x2, 0x4, 0x2, 0x64, 0x2, 0x5, 0x5}, {@remote={0xac, 0x14, 0x0}, '\x00', './file1\x00', 0x7ff, 0x3, 0x2, 0x2, 0x3, 0x5, 0x1}], 0x9, 0x8, 0x5, 0x1ff, 0x3, 0x8, 0x2, 0x10}) 104.028716ms ago: executing program 1 (id=58): r0 = openat$dri(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x800, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0x2, 0xec6, 0x8, 0x3ff, {0x8, 0x1ff, 0x0, 0x40, 0x1, 0x100, 0x9, 0x6, 0xd, 0xfff9, 0x0, 0xdc3c, 0x5168, 0x5, "da7a8fe12d49d61efc5775ba59698806d9045483b9ca6a81659f54af257df1ae"}}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000100)=r1) sysctl$kern(&(0x7f0000001fc0)={0x1, 0x38}, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0) 1.844187ms ago: executing program 3 (id=59): ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0xed, 0x5, 0x0, 0x1, "e700", 0x7}) sysctl$kern(&(0x7f0000000000)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0xb}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) clock_getres(0x4, &(0x7f0000000000)) r0 = getpgid(0xffffffffffffffff) r1 = socket$inet6(0x18, 0x3, 0x0) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0xd, "00000000000000000000ffff00000008", 0x1000004}, 0x1c) kill(r0, 0xe4707da0524aff91) 1.371233ms ago: executing program 6 (id=60): socket$inet6(0x18, 0x2, 0x0) (async) open(&(0x7f0000000180)='./file0\x00', 0x200, 0x1f0) (async) r0 = open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000001f80), 0x8, 0x0) ioctl$DIOCNATLOOK(r1, 0xc0504417, &(0x7f0000000640)={@v6=@loopback, @v6=@local={0xfe, 0x80, '\x00', 0x0}, @v4=@loopback, @v4=@local={0xac, 0x14, 0x0}, 0x7, 0x4c7f, 0x3, 0x0, 0x2, 0x6325, 0x18, 0x11, 0x3}) open$dir(&(0x7f00000002c0)='./file0\x00', 0x12, 0x3c) (async) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt(r2, 0x0, 0x15, &(0x7f0000000140)="9a350700", 0x4) (async) ioctl$DIOCGETRULESET(r0, 0xc444443b, &(0x7f00000006c0)={0xb8, './file0\x00', './file0\x00'}) (async) closefrom(r2) (async) sysctl$ddb(&(0x7f0000000080)={0x9, 0x3}, 0x2, &(0x7f0000000000)="2ba60004", &(0x7f00000010c0)=0x4, 0x0, 0x0) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000100)=[{0x80, 0x40, 0x70, 0x35c}, {0xc, 0xe, 0x5, 0x206}, {0x216, 0x2, 0x2, 0x6}]}) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f00000001c0)=[{0x7c, 0x8, 0x2, 0x1fd}, {0x7, 0x40, 0x1, 0x411}, {0x6, 0x1, 0x0, 0x101}]}) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[]) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) fcntl$setstatus(r3, 0x4, 0x8) 628.181µs ago: executing program 5 (id=61): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$audio(r0, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) read$audioctl(r2, &(0x7f0000000240)=""/244, 0xf4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect(0x40, &(0x7f0000000080)={0xe0, 0x0, 0x101, 0x9, 0x1, 0x7, 0x9, 0x3}, &(0x7f0000000340)={0xff, 0xffffffffffffff00, 0x20000000000007ff, 0x7, 0x0, 0x400000002, 0x2, 0xa}, 0x0, 0x0, 0x0) (async) read(r4, &(0x7f0000000180)=""/82, 0x52) (async, rerun: 32) closefrom(r3) (rerun: 32) pipe(&(0x7f0000000000)) pselect(0x40, &(0x7f0000000080)={0xdc, 0x0, 0x2, 0x5, 0x2, 0x9, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x0) (async) ioctl$BIOCGBLEN(r3, 0x40044266, &(0x7f0000000040)) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000140)=[{0x80, 0x65, 0x5, 0x5}, {0x80, 0x7, 0x81}, {0xfffe, 0x0, 0x1c, 0x3}]}) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000d00), 0x40000, 0x0) (async) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (rerun: 32) ioctl$DIOCRCLRTABLES(r5, 0xc450443c, &(0x7f0000000d00)={{'./file0\x00', './file0\x00', 0x10, 0x4}, 0x0, 0x0, 0x0, 0x1, 0x113000, 0x6, 0x3, 0x40, 0x9}) (async) r6 = socket$inet6(0x18, 0x2, 0x0) read$audio(r0, &(0x7f0000000380)=""/187, 0xbb) bind$inet6(r6, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x1, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) connect$inet6(r6, &(0x7f0000000200)={0x1c, 0x18, 0x0, 0x3fe, "000000000000000096492a9a00", 0x88}, 0x1c) (async) sendto$inet6(r6, 0x0, 0x0, 0xa, &(0x7f00000000c0)={0x1c, 0x18, 0x1, 0xffff0001, "8600000000000001000000401000", 0xa}, 0x1c) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) (async, rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[]) (rerun: 64) 349.486µs ago: executing program 6 (id=62): r0 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0xffffffffffffff90) getsockname$inet6(r0, 0x0, &(0x7f0000000240)) 0s ago: executing program 5 (id=63): sysctl$ddb(&(0x7f0000000080)={0x9, 0x2}, 0x2, &(0x7f0000000000)="2ba60004", &(0x7f00000010c0)=0x4, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000000c0)="dea61a4d1cedf5f1055f9fe020375689e520e46b18e3acbc0d5f164611cc94cf1d1cf24a5c3d9e7972630139702a686e3b073201f9a26df11c948ee6c414ded266", 0x41}], 0x1, 0x8) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040), &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. pckbd_enable: command error load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k load: 1.35 cmd: getty 10414 [ttyin] 0.00u 0.03s 0% 323k panic: sleep: syz-executor[13882] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "biowait") Stopped at db_enter+0x17: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND 455525 35566 0 0 0 0 syz-executor *312443 13882 0 0 0x4000010 1K syz-executor db_enter() at db_enter+0x17 panic(ffffffff84d8d160) at panic+0x270 sleep_setup(ffff800001bd7220,11,ffffffff84692f80) at sleep_setup+0x3b2 tsleep_nsec(ffff800001bd7220,11,ffffffff84692f80,ffffffffffffffff) at tsleep_nsec+0x29c biowait(ffff800001bd7220) at biowait+0xe6 bwrite(ffff800001bd7220) at bwrite+0x4e1 ffs_update(ffff800001d10058,1) at ffs_update+0x619 ffs_truncate(ffff800001d10058,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 ufs_inactive(ffff80003af4c440) at ufs_inactive+0x2cb VOP_INACTIVE(ffff800001cb7dd8,ffff80003bb96a88) at VOP_INACTIVE+0x1bb vrele(ffff800001cb7dd8) at vrele+0x16a ktrsettrace(ffffffff85e2cd80,80000814,ffff800001c57bf8,ffff800000119340) at ktrsettrace+0x16c ktrops(ffff80003bb96a88,ffffffff85e2cd80,0,80000814,ffff800001c57bf8,ffff800000119340) at ktrops+0x338 doktrace(ffff800001c57bf8,4,814,0,ffff80003bb96a88) at doktrace+0xa72 end trace frame: 0xffff80003af4c930, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: sleep: syz-executor[13882] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "biowait") ddb{1}> show kasan kasan: no report recorded this boot ddb{1}> trace db_enter() at db_enter+0x17 panic(ffffffff84d8d160) at panic+0x270 sleep_setup(ffff800001bd7220,11,ffffffff84692f80) at sleep_setup+0x3b2 tsleep_nsec(ffff800001bd7220,11,ffffffff84692f80,ffffffffffffffff) at tsleep_nsec+0x29c biowait(ffff800001bd7220) at biowait+0xe6 bwrite(ffff800001bd7220) at bwrite+0x4e1 ffs_update(ffff800001d10058,1) at ffs_update+0x619 ffs_truncate(ffff800001d10058,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 ufs_inactive(ffff80003af4c440) at ufs_inactive+0x2cb VOP_INACTIVE(ffff800001cb7dd8,ffff80003bb96a88) at VOP_INACTIVE+0x1bb vrele(ffff800001cb7dd8) at vrele+0x16a ktrsettrace(ffffffff85e2cd80,80000814,ffff800001c57bf8,ffff800000119340) at ktrsettrace+0x16c ktrops(ffff80003bb96a88,ffffffff85e2cd80,0,80000814,ffff800001c57bf8,ffff800000119340) at ktrops+0x338 doktrace(ffff800001c57bf8,4,814,0,ffff80003bb96a88) at doktrace+0xa72 sys_ktrace(ffff80003bb96a88,ffff80003af4cab0,ffff80003af4ca20) at sys_ktrace+0x1f6 syscall(ffff80003af4cab0) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7299fa68600, count: -17 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003af4bd30 rbx 0xffff80003af4bda0 rdx 0 rcx 0xffff800028fe3ff0 rax 0xffff80000016d800 r8 0x101010101010101 r9 0x8080808080808080 r10 0xffff80003af4bb20 r11 0xffffffff83e54b70 x86_bus_space_io_read_1 r12 0xffffffff84d8d160 .str.9 r13 0xffff800028fe4c08 r14 0xffff800028fe4e07 r15 0x1 rip 0xffffffff82f1b577 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff80003af4bd30 ss 0x10 db_enter+0x17: popq %rbp ddb{1}> show proc PROC (syz-executor) tid=312443 pid=13882 tcnt=3 stat=onproc flags process=0 proc=4000010 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003bb962c0,0xffff80003bb97260 process=0xffff800045ffb038 user=0xffff80003af41000, vmspace=0xffff800001c419a0 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 35566 455525 40058 0 7 0 0 syz-executor 35566 519127 40058 0 3 0 0x4000080 fsleep syz-executor 49443 406916 44962 0 2 0 0 syz-executor 49443 171648 44962 0 2 0 0x4000000 syz-executor 49443 209406 44962 0 3 0 0x4000080 fsleep syz-executor 56104 63361 79259 0 2 0 0 syz-executor 56104 237897 79259 0 3 0 0x4000080 fsleep syz-executor 56104 275277 79259 0 3 0 0x4000080 fsleep syz-executor 13882 124890 39818 0 2 0 0 syz-executor *13882 312443 39818 0 7 0 0x4000010 syz-executor 13882 262128 39818 0 3 0 0x4000080 fsleep syz-executor 4594 134369 8867 0 2 0 0 syz-executor 4594 402912 8867 0 3 0 0x4000080 fsleep syz-executor 4594 83581 8867 0 3 0 0x4000080 fsleep syz-executor 4594 160369 8867 0 3 0 0x4000080 fsleep syz-executor 75888 468454 52289 0 2 0x10 0 syz-executor 75888 53328 52289 0 3 0x10 0x4000080 fsleep syz-executor 49297 516773 87872 0 2 0 0 syz-executor 49297 58778 87872 0 3 0 0x4000080 fsleep syz-executor 87872 168731 94759 0 3 0x2 0x80 nanoslp syz-executor 40058 236652 94759 0 3 0x2 0x80 nanoslp syz-executor 44962 102286 94759 0 3 0x2 0x80 nanoslp syz-executor 97332 263183 94759 0 3 0x2 0x80 nanoslp syz-executor 79259 333034 94759 0 3 0x2 0x80 nanoslp syz-executor 52289 378646 94759 0 3 0x2 0x80 nanoslp syz-executor 8867 275854 94759 0 3 0x2 0x80 nanoslp syz-executor 39818 391348 94759 0 3 0x2 0x80 nanoslp syz-executor 94759 405472 79127 0 3 0x2 0x80 kqread syz-executor 79127 152600 56000 0 3 0x100002 0x88 sigsusp ksh 56000 320732 67482 0 3 0x10 0x88 kqread sshd-session 67482 24493 71591 0 3 0x12 0x80 kqread sshd-session 10414 443758 1 0 3 0x100003 0x80 ttyin getty 71591 39465 1 0 3 0 0x88 kqread sshd 33787 266797 85516 74 3 0x1100012 0x80 bpf pflogd 85516 480108 1 0 3 0 0x80 sbwait pflogd 62965 198362 1361 73 3 0x1100010 0x80 kqread syslogd 1361 60737 1 0 3 0x100002 0x80 sbwait syslogd 95225 351466 1 0 3 0x100000 0x80 kqread resolvd 55540 250521 6408 77 3 0x100012 0x80 kqread dhcpleased 66637 13098 6408 77 3 0x100012 0x80 kqread dhcpleased 6408 392501 1 0 3 0 0x80 kqread dhcpleased 45404 114383 0 0 3 0x14000 0x200 bored smr 57330 452961 0 0 2 0x14000 0x200 zerothread 1801 70184 0 0 3 0x14000 0x200 aiodoned aiodoned 69595 399599 0 0 3 0x14000 0x200 syncer update 76187 304804 0 0 3 0x14000 0x200 cleaner cleaner 60518 447390 0 0 3 0x14000 0x200 reaper reaper 32690 158887 0 0 3 0x14000 0x200 pgdaemon pagedaemon 61716 107117 0 0 3 0x14000 0x200 bored viomb 95533 492979 0 0 3 0x14000 0x40000200 acpi0 acpi0 77834 516579 0 0 3 0x14000 0x40000200 idle1 55264 43757 0 0 3 0x14000 0x200 bored softnet1 91063 228049 0 0 3 0x14000 0x200 bored softnet0 61770 342073 0 0 3 0x14000 0x200 bored systqmp 80340 474648 0 0 3 0x14000 0x200 bored systq 24271 417740 0 0 3 0x14000 0x200 tmoslp softclockmp 80077 70337 0 0 3 0x14000 0x40000200 tmoslp softclock 27931 280682 0 0 3 0x14000 0x40000200 idle0 1 373955 0 0 3 0x80002 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 35566 (syz-executor) thread 0xffff800029932fa8 (455525) exclusive rwlock uobjlk r = 0 (0xffff800001c4b800) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 uvm_fault+0x333 #3 upageflttrap+0xe0 #4 usertrap+0x4f9 #5 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xffff800000d878a0) #0 witness_lock+0x632 #1 rw_do_enter_read+0x55d #2 uvmfault_lookup+0x1a2 #3 uvm_fault_check+0x43 #4 uvm_fault+0x1e7 #5 upageflttrap+0xe0 #6 usertrap+0x4f9 #7 recall_trap+0x8 Process 13882 (syz-executor) thread 0xffff80003bb96a88 (312443) exclusive rrwlock inode r = 0 (0xffff800001d100f8) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 vn_lock+0xca #5 vrele+0x113 #6 ktrsettrace+0x16c #7 ktrops+0x338 #8 doktrace+0xa72 #9 sys_ktrace+0x1f6 #10 syscall+0x1089 #11 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff85d52380) #0 witness_lock+0x632 #1 syscall+0x1048 #2 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11059 12387K 12389K 166960K 12195 0 pcb 17 24K 24K 166960K 24 0 rtable 237 12K 13K 166960K 357 0 pf 34 22K 22K 166960K 78 0 ifaddr 43 12K 12K 166960K 45 0 ifgroup 55 2K 2K 166960K 55 0 sysctl 1 1K 13K 166960K 5 0 counters 70 42K 42K 166960K 70 0 ioctlops 0 0K 4K 166960K 1527 0 iov 0 0K 16K 166960K 1 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1329 85K 86K 166960K 1436 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 3 6K 6K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 37 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 292K 166960K 11964 0 file desc 18 65K 93K 166960K 195 0 sigio 0 0K 0K 166960K 1 0 proc 70 128K 177K 166960K 560 0 subproc 72 9K 9K 166960K 73 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 5 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 43 303K 303K 166960K 43 0 exec 0 0K 2K 166960K 393 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 241 221K 240K 166960K 3606 0 UVM aobj 9 4K 4K 166960K 9 0 pinsyscall 1067 1740K 1740K 166960K 1381 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 12 0K 2K 166960K 28 0 temp 35 9162K 9174K 166960K 4293 0 kqueue 13 40K 53K 166960K 39 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 37 0 34 1 0 1 1 0 8 0 rtentry 176 111 0 1 5 0 5 5 0 8 0 unpcb 144 204 0 187 6 0 6 6 0 8 5 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 11 0 6 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 87 0 79 2 0 2 2 0 8 1 nd6 152 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 1 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 20 0 0 1 0 1 1 0 8 0 pfstkey 128 20 0 0 1 0 1 1 0 8 0 pfstate 448 20 0 0 3 0 3 3 0 8 0 pfrule 1360 54 0 49 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 452 0 0 29 0 29 29 0 8 0 art_table 40 453 0 0 5 0 5 5 0 8 0 art_node 32 111 0 11 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 1 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 72 35 0 25 1 0 1 1 0 8 0 shmpl 112 6 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1666 0 194 93 0 93 93 0 8 0 ffsino 296 1666 0 194 114 0 114 114 0 8 0 nchpl 144 1949 0 248 64 0 64 64 0 8 0 vnodes 216 1820 0 0 102 0 102 102 0 8 0 namei 1024 6331 0 6331 2 0 2 2 0 8 2 percpumem 16 51 0 0 1 0 1 1 0 8 0 kstatmem 264 27 0 0 2 0 2 2 0 8 0 scxspl 216 7074 0 7073 3 1 2 2 1 8 1 plimitpl 152 34 0 16 1 0 1 1 0 8 0 sigapl 424 521 0 473 7 0 7 7 0 8 1 knotepl 120 118 0 0 4 0 4 4 0 8 0 kqueuepl 224 41 0 30 1 0 1 1 0 8 0 pipepl 344 184 0 157 6 0 6 6 0 8 3 fdescpl 528 505 0 473 3 0 3 3 0 8 0 filepl 160 2204 0 1985 17 0 17 17 0 8 6 lockfpl 104 42 0 40 1 0 1 1 0 8 0 lockfspl 48 19 0 17 1 0 1 1 0 8 0 sessionpl 144 28 0 18 1 0 1 1 0 8 0 pgrppl 48 36 0 18 1 0 1 1 0 8 0 ucredpl 104 141 0 126 1 0 1 1 0 8 0 zombiepl 144 474 0 473 1 0 1 1 0 8 0 processpl 1232 521 0 473 5 0 5 5 0 8 1 procpl 664 625 0 565 6 0 6 6 0 8 1 sosppl 176 2 0 2 1 0 1 1 0 8 1 sockpl 752 332 0 304 17 0 17 17 0 8 14 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 122 0 0 16 0 16 16 0 8 0 mcl2k 2048 17 0 0 3 0 3 3 0 8 0 mextrefs 64 18 0 0 1 0 1 1 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 132 0 0 8 0 8 8 0 8 0 bufpl 272 2386 0 105 153 0 153 153 0 8 0 anonpl 32 3820 0 0 31 0 31 31 0 222 0 amapchunkpl 152 10066 0 9562 21 0 21 21 0 158 1 amappl16 200 1861 0 1836 5 2 3 5 0 8 1 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 444 0 443 1 0 1 1 0 8 0 amappl13 176 127 0 115 1 0 1 1 0 8 0 amappl12 168 762 0 731 2 0 2 2 0 8 0 amappl11 160 14 0 13 1 0 1 1 0 8 0 amappl10 152 65 0 51 1 0 1 1 0 8 0 amappl9 144 291 0 291 1 1 0 1 0 8 0 amappl8 136 102 0 100 1 0 1 1 0 8 0 amappl7 128 148 0 135 1 0 1 1 0 8 0 amappl6 120 206 0 205 1 0 1 1 0 8 0 amappl5 112 118 0 107 1 0 1 1 0 8 0 amappl4 104 312 0 290 1 0 1 1 0 8 0 amappl3 96 1862 0 1742 4 0 4 4 0 8 0 amappl2 88 557 0 498 2 0 2 2 0 8 0 amappl1 80 10798 0 10185 15 0 15 15 0 8 2 amappl 88 2850 0 2679 4 0 4 4 0 92 0 uvmvnodes 80 101 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 8 0 0 1 0 1 1 0 8 0 uaddrrnd 24 505 0 473 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 505 0 473 1 0 1 1 0 8 0 vmmpekpl 168 6418 0 6387 2 0 2 2 0 8 0 vmmpepl 168 41641 0 39677 88 1 87 87 0 357 1 vmsppl 488 504 0 473 5 0 5 5 0 8 1 rwobjpl 80 15359 0 14316 24 0 24 24 0 8 1 pdppl 4096 1018 0 946 98 24 74 86 0 8 2 pvpl 32 10236 0 0 84 1 83 83 0 265 0 pmappl 256 504 0 473 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 120 420 0 27 13 0 13 13 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x19: leave x86_ipi_db(ffffffff851e9ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x8 __mp_lock(ffffffff85d51b80) at __mp_lock+0x290 intr_handler(ffff80003bbaed40,ffff800000170180) at intr_handler+0x113 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __mp_lock(ffffffff85d51b80) at __mp_lock+0x272 uvm_fault(ffff800000d877a0,8125a819000,0,1) at uvm_fault+0x338 upageflttrap(ffff80003bbaf1b0,8125a819000) at upageflttrap+0xe0 usertrap(ffff80003bbaf1b0) at usertrap+0x4f9 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7cf19c3bb7a0, count: 3 ddb{0}> trace x86_ipi_db(ffffffff851e9ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x8 __mp_lock(ffffffff85d51b80) at __mp_lock+0x290 intr_handler(ffff80003bbaed40,ffff800000170180) at intr_handler+0x113 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __mp_lock(ffffffff85d51b80) at __mp_lock+0x272 uvm_fault(ffff800000d877a0,8125a819000,0,1) at uvm_fault+0x338 upageflttrap(ffff80003bbaf1b0,8125a819000) at upageflttrap+0xe0 usertrap(ffff80003bbaf1b0) at usertrap+0x4f9 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7cf19c3bb7a0, count: -12 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x17: popq %rbp db_enter() at db_enter+0x17 panic(ffffffff84d8d160) at panic+0x270 sleep_setup(ffff800001bd7220,11,ffffffff84692f80) at sleep_setup+0x3b2 tsleep_nsec(ffff800001bd7220,11,ffffffff84692f80,ffffffffffffffff) at tsleep_nsec+0x29c biowait(ffff800001bd7220) at biowait+0xe6 bwrite(ffff800001bd7220) at bwrite+0x4e1 ffs_update(ffff800001d10058,1) at ffs_update+0x619 ffs_truncate(ffff800001d10058,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 ufs_inactive(ffff80003af4c440) at ufs_inactive+0x2cb VOP_INACTIVE(ffff800001cb7dd8,ffff80003bb96a88) at VOP_INACTIVE+0x1bb vrele(ffff800001cb7dd8) at vrele+0x16a ktrsettrace(ffffffff85e2cd80,80000814,ffff800001c57bf8,ffff800000119340) at ktrsettrace+0x16c ktrops(ffff80003bb96a88,ffffffff85e2cd80,0,80000814,ffff800001c57bf8,ffff800000119340) at ktrops+0x338 doktrace(ffff800001c57bf8,4,814,0,ffff80003bb96a88) at doktrace+0xa72 end trace frame: 0xffff80003af4c930, count: 0 ddb{1}> trace db_enter() at db_enter+0x17 panic(ffffffff84d8d160) at panic+0x270 sleep_setup(ffff800001bd7220,11,ffffffff84692f80) at sleep_setup+0x3b2 tsleep_nsec(ffff800001bd7220,11,ffffffff84692f80,ffffffffffffffff) at tsleep_nsec+0x29c biowait(ffff800001bd7220) at biowait+0xe6 bwrite(ffff800001bd7220) at bwrite+0x4e1 ffs_update(ffff800001d10058,1) at ffs_update+0x619 ffs_truncate(ffff800001d10058,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 ufs_inactive(ffff80003af4c440) at ufs_inactive+0x2cb VOP_INACTIVE(ffff800001cb7dd8,ffff80003bb96a88) at VOP_INACTIVE+0x1bb vrele(ffff800001cb7dd8) at vrele+0x16a ktrsettrace(ffffffff85e2cd80,80000814,ffff800001c57bf8,ffff800000119340) at ktrsettrace+0x16c ktrops(ffff80003bb96a88,ffffffff85e2cd80,0,80000814,ffff800001c57bf8,ffff800000119340) at ktrops+0x338 doktrace(ffff800001c57bf8,4,814,0,ffff80003bb96a88) at doktrace+0xa72 sys_ktrace(ffff80003bb96a88,ffff80003af4cab0,ffff80003af4ca20) at sys_ktrace+0x1f6 syscall(ffff80003af4cab0) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7299fa68600, count: -17