last executing test programs: 5.273042785s ago: executing program 3 (id=43): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) closefrom(r1) pselect(0x40, &(0x7f0000001740)={0x8, 0x5, 0x80000000, 0x0, 0xedda, 0x7, 0x2, 0xb71}, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000001900)=[{r0, 0x80}], 0x1, 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) recvfrom(r1, &(0x7f0000000080)=""/98, 0x62, 0x2802, &(0x7f0000000100)=@in={0x10, 0x2, 0x3, 0xffffffff}, 0x10) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x12}, 0x4, &(0x7f00000023c0), &(0x7f0000000000)=0x19, 0x0, 0xfffffffffffffe99) kill(0x0, 0x13) syz_emit_ethernet(0xea, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd67d6c7c300b42cc5fe8000000000000000000000000000bbfe8000000000000000000000000000bb3a000001"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) closefrom(r1) (async) pselect(0x40, &(0x7f0000001740)={0x8, 0x5, 0x80000000, 0x0, 0xedda, 0x7, 0x2, 0xb71}, 0x0, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000001900)=[{r0, 0x80}], 0x1, 0x0, 0x0) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) recvfrom(r1, &(0x7f0000000080)=""/98, 0x62, 0x2802, &(0x7f0000000100)=@in={0x10, 0x2, 0x3, 0xffffffff}, 0x10) (async) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x12}, 0x4, &(0x7f00000023c0), &(0x7f0000000000)=0x19, 0x0, 0xfffffffffffffe99) (async) kill(0x0, 0x13) (async) syz_emit_ethernet(0xea, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd67d6c7c300b42cc5fe8000000000000000000000000000bbfe8000000000000000000000000000bb3a000001"]) (async) 5.191696205s ago: executing program 2 (id=49): syz_emit_ethernet(0x14f, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa884869a0e6ef0119034000000000000000000000000000000001fe8000000000000000000000000000aa4e213120", @ANYRES32, @ANYRES32, @ANYBLOB="11100008907800061309a60f49b9e75f90050a20aec21e00000002001200000000000000000000000000000000000a51b7c54d2bb9b58400b52e86d68d637f9a299b5b6a1de41784b073b44842f9a416c39ab314b4ec0b56a5a4ccca858914a01fad7762bb4df02bd2bc4fec4aea57e1825910303b903ecfc5d3993cbfc9fddcf60ebc89cd2fed686c9d3a393352a2f6a09a647060ecd13dc16d46adb38c9011d1fca46322e94ca14caf71baf0f3fc6e0dca810e4260f983a54b75cad26097888a9c3a94dafdbd47cb5f74582701451ab810336a1961e3c3b7"]) r0 = socket$inet(0x2, 0x2, 0x0) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) utimes(0x0, &(0x7f0000000080)={{0x7, 0x55}, {0xfff, 0x800}}) r1 = shmget(0x3, 0x3000, 0x404, &(0x7f0000ffc000/0x3000)=nil) nanosleep(&(0x7f0000000180)={0x0, 0x8}, &(0x7f00000000c0)) r2 = fcntl$getown(0xffffffffffffff9c, 0x5) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0x120, 0x9, 0x0, 0x0, 0x2}, 0x7fb, 0x0, r2, 0x8, 0x0, 0x4, 0x37d, 0x0, 0xfffffffffffffc9c, 0x4, 0x5}) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) kevent(r3, 0x0, 0xfffff000, 0x0, 0x2, 0x0) setsockopt$sock_cred(r0, 0xffff, 0x1023, &(0x7f0000000140)={r2, 0xffffffffffffffff}, 0xc) pselect(0x40, &(0x7f0000000000)={0x3, 0x9, 0x9, 0xec, 0xb, 0x8, 0x5, 0x9}, &(0x7f0000000040)={0x3, 0x1, 0x7, 0xd1, 0x9, 0x2, 0x8000000000000001, 0x8}, &(0x7f0000000080)={0x401, 0x5, 0xe, 0x3, 0x9, 0xd00000, 0xa, 0x8000}, &(0x7f00000000c0)={0x1, 0x5}, &(0x7f0000000100)) 4.917742821s ago: executing program 2 (id=56): pipe(&(0x7f0000000000)={0xffffffffffffffff}) write(r0, &(0x7f0000000080)="1c4c97c81d", 0x5) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@random="5ddfe2ffe700", @broadcast, [], {@ipv4={0x800, {{0x8, 0x4, 0x3, 0x5, 0x2c, 0x64, 0x3ff, 0xc, 0xf0, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, {[@timestamp={0x44, 0xc, 0x7, 0x1, 0x6, [{[@multicast2], 0x8}]}]}}, @icmp=@mask_request={0x11, 0x0, 0x0, 0xea43, 0x1, 0xbcc9252f}}}}}) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000440)="29d25f48fa", 0x4000}], 0x1) execve(0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) (async) write(r0, &(0x7f0000000080)="1c4c97c81d", 0x5) (async) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@random="5ddfe2ffe700", @broadcast, [], {@ipv4={0x800, {{0x8, 0x4, 0x3, 0x5, 0x2c, 0x64, 0x3ff, 0xc, 0xf0, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, {[@timestamp={0x44, 0xc, 0x7, 0x1, 0x6, [{[@multicast2], 0x8}]}]}}, @icmp=@mask_request={0x11, 0x0, 0x0, 0xea43, 0x1, 0xbcc9252f}}}}}) (async) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000440)="29d25f48fa", 0x4000}], 0x1) (async) execve(0x0, 0x0, 0x0) (async) 4.91710866s ago: executing program 0 (id=58): r0 = syz_open_pts() r1 = dup2(r0, r0) ioctl$TIOCSETAF(r1, 0x80047460, &(0x7f0000000a00)={0x5d5, 0x2, 0x3, 0x7ff, "101b4de661f650e3a02777680ca2a9cf653197f2", 0x5, 0x98}) getgroups(0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r3, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000140)=0xc) setresuid(r5, r5, 0x0) setreuid(0x0, 0xffffffffffffffff) ioctl$KDENABIO(r1, 0x20004b3c) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DIOCRGETADDRS(r6, 0xc4504446, &(0x7f0000000180)={{'./file0\x00', './file0\x00', 0x16, 0xff}, 0x0, 0x34, 0x0, 0x201, 0x1, 0x2ea, 0x7, 0x0, 0x6}) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x300, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000140)) ioctl$DIOCRDELADDRS(r7, 0xc4504444, 0x0) seteuid(0xffffffffffffffff) kill(0xffffffffffffffff, 0x0) r8 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = dup2(r8, r8) mkfifo(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) open$dir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x80) syz_emit_ethernet(0x128, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaabaaaa63f6557d72b786dd6540883a6a566871be362d11006f34e4"]) ioctl$DIOCXBEGIN(r9, 0xc00c7006, &(0x7f0000001900)={0x0, 0x2, 0x0}) 4.777660241s ago: executing program 3 (id=60): r0 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) closefrom(r1) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) r2 = syz_open_pts() ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000000)={0x60c8, 0x3, 0xffffffc0, 0xffffffff, "fe83b68400", 0x2, 0xcfe}) write(r0, &(0x7f0000000080)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b", 0x3a) getrusage(0x1, &(0x7f00000000c0)) 4.76985464s ago: executing program 4 (id=62): mkfifo(&(0x7f0000001380)='./file0\x00', 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) open(&(0x7f0000000200)='./file0\x00', 0x9da, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000001600)={{0x5, 0xffffffff}, {0x7fffffffffffffff, 0x2}}, 0x0) closefrom(r0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000002a80), 0x80, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000002b00)={&(0x7f0000002ac0)='./file0\x00', 0x5, 0x0}) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0xfa, 0x1, './file0\x00'}, 0xa) semget(0x0, 0x3, 0x0) bind(r2, &(0x7f0000000140)=@in={0x10, 0x2, 0x0, 0x3}, 0x10) 4.702130609s ago: executing program 0 (id=65): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x28dd) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x2, 0x0, 0x5, 0x2000100000005}) openat$vnd(0xffffffffffffff9c, &(0x7f0000000500), 0x20, 0x0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) fcntl$lock(r1, 0x8, &(0x7f0000000040)={0x3, 0x0, 0xfffffffffffffffd, 0x2000100000001}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0xea) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000100)=0x2ffd) 4.485903803s ago: executing program 2 (id=67): r0 = syz_open_pts() r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DIOCRGETADDRS(r1, 0xc4504446, &(0x7f0000000180)={{'./file0\x00', './file0\x00', 0x0, 0xff}, 0x0, 0x34, 0x0, 0x201, 0x1, 0x2ea, 0x7, 0x0, 0x6}) openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) closefrom(r2) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) r3 = syz_open_pts() ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f0000000000)={0x1007, 0x3, 0xffffffc0, 0xffffffff, "fe83fe7a9542a14123a70000001efe02bfabb686", 0x2, 0xcfe}) write(r0, &(0x7f0000000080)="7ef5b69389691e5c96", 0x9) 4.485426615s ago: executing program 7 (id=68): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000200)=ANY=[@ANYBLOB="aa9ae6784a3aaaaaaaaaaaaaaaaaaaaabb86dd6688ad25fef7030200000000000000000000000000000000000000000000000000000000000000014e234e22861ca077fe094fbd01178546acef391aede8d8aabbd1099c86d7ed169a89a3d7da01be44891389ef8d511dd2601584bedf6c7ae4393f55311f65cdd6cea015e7eb0d65a85efed80eb0f281aee0b4616eec520bbadc456f4ef2418a7a6d5ee1512af1e3c38b040af16b32c1", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004000690780000"]) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) pselect(0x40, &(0x7f0000000080)={0x40000e0, 0x0, 0x101, 0xd, 0x0, 0x5, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x0) pselect(0x40, &(0x7f0000000080)={0xe0, 0x0, 0x101, 0x9, 0x2, 0xffffffff, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x0) 3.207497452s ago: executing program 5 (id=69): nanosleep(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x4a) fstat(r0, &(0x7f0000000e80)) r1 = open(&(0x7f0000000180)='./file0\x00', 0xa60, 0xcf) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r2 = getthrid() setpgid(r2, r2) socket$inet(0x2, 0x1, 0x6) pselect(0x40, &(0x7f0000000080)={0xff, 0x3ff, 0x5, 0x8, 0x9, 0xb, 0x3, 0x80000009}, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x7, 0x65, 0x45, 0x5}, {0x7c, 0x7, 0x4, 0x6}, {0xfffe, 0x20, 0x1c, 0x3}]}) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000001600)=ANY=[]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) sysctl$net_inet_tcp(&(0x7f0000002380)={0x4, 0x2, 0x6, 0x17}, 0x4, &(0x7f00000023c0)="5520db9f", &(0x7f0000000100)=0x4, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x59}, 0x2, &(0x7f00000000c0), &(0x7f0000000080), 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f00000004c0)={0xaa, [{0x2, 0x5}, {0x1, 0x5}, {0x1, 0x3}, {0x3, 0x1}, {0x0, 0x3}, {0x2, 0x7f}, {0x1, 0x6}, {0x3, 0xa}, {0x1, 0x9}, {0x3, 0x1}, {0x1, 0x46}, {0x3, 0x1}, {0x2}, {0x3, 0x7}, {0x2, 0x6}, {0x1, 0x7}, {0x2, 0x7}, {0x2, 0x3}, {0x1, 0x8}, {0x1, 0x663}, {0x2, 0x5}, {0x1, 0x70f7}, {0x2, 0xfffff001}, {0x3}, {0x3, 0xfffffffa}, {0x1, 0x6b}, {0x1, 0x3}, {0x3}, {0x1, 0x611}, {0x2, 0x31d}, {0x3, 0xfffffeff}, {0x2, 0x6}]}) r5 = socket$inet(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000040)={0x10, 0x2, 0x3, 0x80000000}, 0x10) sendmmsg(r5, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x400) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01864c1, &(0x7f00000000c0)={0x0, 0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffff800}) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0x68, &(0x7f0000000280)={{0x1c, 0x18, 0x3, 0x5, "0303cf0f8b310adbc8b080f57f6f72f4"}, {0x1c, 0x18, 0x3, 0x7f, "5815bda33a2dbd401ec39989462979cc", 0x8000}, 0x0, [0x4, 0x6f98, 0x400, 0x40, 0x6, 0x7, 0xdf33, 0x400]}, 0x5c) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000d00), 0x40000, 0x0) write(r7, &(0x7f0000000040)="7ed980a5c6b759bdcfd19d9d95e8485f347f687fab", 0x15) ioctl$BIOCSETWF(r7, 0x80104277, &(0x7f0000000000)={0x5c}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, &(0x7f0000000240)={r8, 0x53, &(0x7f00000001c0)=""/83}) 3.207063624s ago: executing program 4 (id=70): pselect(0x40, &(0x7f0000000080)={0xff, 0x3ff, 0x5, 0x8, 0x9, 0xb, 0x3, 0x80000009}, 0x0, 0x0, 0x0, 0x0) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x40000000000000a8, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) closefrom(r0) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) futimens(0xffffffffffffffff, &(0x7f0000000640)=[{0xece4, 0xd81}, {0x7fff, 0x793}]) getdents(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x59}, 0x3, &(0x7f0000000180)="ee8f409198157e3b0d482cd811439e57ce10400116e4853368b7858dd5313a55267eae31dfdeb4695f32fe7b7ad86f86b9026db90f9b45d9c0dfe6f336cdbed0b1e9503fb71d22c07e97988cb677f6e039bda806b77d270400"/104, &(0x7f0000000080)=0x5b, 0x0, 0xfffa) 3.206782823s ago: executing program 3 (id=71): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x200) open$dir(&(0x7f0000000040)='./file0\x00', 0x40000, 0x8) r0 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x4a) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x1, 0x0, 0xfffffffffffffffd, 0x11e}) fstat(r0, &(0x7f00000000c0)) 3.206505029s ago: executing program 7 (id=72): symlink(&(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') readlink(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 3.098025368s ago: executing program 7 (id=74): sysctl$net_inet_ipip(&(0x7f0000000000), 0x4, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000080), 0xffffffffffffffeb) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sysctl$net_inet_ipip(&(0x7f00000000c0)={0x4, 0x2, 0x4, 0x1}, 0x4, &(0x7f0000000100)="298e280f399ea3d4bab375700ab409bd", &(0x7f00000001c0)=0x10, &(0x7f0000000200)="8c24f087125fddccfcdab1043fc86061376d961df65883a29b8c95cd588a73bae97a5e6dab181387320f93426495ab8fda61e870799105df870a8620138a28448da4b0a1c62bb53b0c6404dec985f7316ec6aeacf76e5cad4f1142a4e6b297880d1a5fdc1936d6303afc3ac9c6fe00d7a16d7c05287c0f63910b28928ee6a1327a3874e25104c72c1be79043407d7b3b4d753dddc52b75aa4b4d53c0b32e1016d2916bbd6da769c478de2197ccb4a41ad4f5eb49934742802de77e08e14fac41bbca86e9f044d2e75121a92d7ef20e8f5d1ea4651eaac8c479cee22447abd195ad520783d952df38aa9625b48a12fff26bc2798e11ba07", 0xf7) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x29d) open$dir(&(0x7f0000000040)='./file0\x00', 0x40000, 0x8) pwritev(r1, &(0x7f0000000480)=[{&(0x7f0000000140)="d69c2becbc99845a92ddaf872c7bacbd87c27ea7f581aeb5d1ea527219b88f9ab07c26fd6049e9ea2a375651483575a6d51f33eee6908eee042f8a9c540d405ac8816e36", 0x44}], 0x1, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv6={0x8864, {0x9, 0x6, "a0e6ef", 0x14, 0x3, 0x40, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x0, 0x2, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0x13, 0x0, 0xe55}}}}}}}) sysctl$net_inet_ipip(&(0x7f0000000000), 0x4, 0x0, 0x0, 0x0, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000080), 0xffffffffffffffeb) (async) openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) sysctl$net_inet_ipip(&(0x7f00000000c0)={0x4, 0x2, 0x4, 0x1}, 0x4, &(0x7f0000000100)="298e280f399ea3d4bab375700ab409bd", &(0x7f00000001c0)=0x10, &(0x7f0000000200)="8c24f087125fddccfcdab1043fc86061376d961df65883a29b8c95cd588a73bae97a5e6dab181387320f93426495ab8fda61e870799105df870a8620138a28448da4b0a1c62bb53b0c6404dec985f7316ec6aeacf76e5cad4f1142a4e6b297880d1a5fdc1936d6303afc3ac9c6fe00d7a16d7c05287c0f63910b28928ee6a1327a3874e25104c72c1be79043407d7b3b4d753dddc52b75aa4b4d53c0b32e1016d2916bbd6da769c478de2197ccb4a41ad4f5eb49934742802de77e08e14fac41bbca86e9f044d2e75121a92d7ef20e8f5d1ea4651eaac8c479cee22447abd195ad520783d952df38aa9625b48a12fff26bc2798e11ba07", 0xf7) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x29d) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0x40000, 0x8) (async) pwritev(r1, &(0x7f0000000480)=[{&(0x7f0000000140)="d69c2becbc99845a92ddaf872c7bacbd87c27ea7f581aeb5d1ea527219b88f9ab07c26fd6049e9ea2a375651483575a6d51f33eee6908eee042f8a9c540d405ac8816e36", 0x44}], 0x1, 0x6) (async) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv6={0x8864, {0x9, 0x6, "a0e6ef", 0x14, 0x3, 0x40, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x0, 0x2, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0x13, 0x0, 0xe55}}}}}}}) (async) 3.09756281s ago: executing program 5 (id=75): rmdir(&(0x7f0000000040)='./file0\x00') 3.097288486s ago: executing program 3 (id=76): syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @local, [], {@ipv6={0x86dd, {0xf, 0x6, "010004", 0x14, 0x6, 0x4, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x12, 0x0, 0x59}}}}}}}) 3.094612697s ago: executing program 5 (id=77): munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0xffffffd0) setitimer(0x2, &(0x7f0000000000)={{0x7fffffff, 0x2}, {0x1000, 0xfff}}, 0x0) 3.094223584s ago: executing program 2 (id=78): r0 = syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x2, 0x19, 0x3, 0x0, "aed499933b087c2ae7a1e9a74835d5325b0ffe90", 0x6c9, 0xde1}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$DIOCGETQUEUES(r1, 0xc148445e, &(0x7f0000000300)={0xfffffff8, 0x7, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0xfffffffffffffff7, 0x5}, {0xe, 0x2}}, {{0x2783be12, 0x2}, {0x1, 0x3}, 0x7ff}, {{0xa71, 0x2}, {0x51a9, 0xaf}}, {0x0, 0x7, 0xfffffffb, 0x6}, 0x0, 0x9, 0x7, 0x2, 0xfffffff7}}) 2.948929517s ago: executing program 2 (id=80): rmdir(&(0x7f0000000240)='.\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0xa60, 0xcf) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) getgroups(0x7, &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setregid(0x0, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) getgroups(0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r6, r5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setreuid(0x0, r8) getresuid(0x0, &(0x7f00000000c0)=0x0, 0x0) setresuid(0x0, 0x0, r9) setresuid(r4, 0x0, r9) setresuid(r8, 0x0, r9) pwritev(r1, &(0x7f0000000480)=[{&(0x7f0000000100)="2d4508d8", 0x4}], 0x1, 0x8000) r10 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$WSKBDIO_GETENCODINGS(r10, 0x80047476, &(0x7f0000000080)={0x4c, 0x0}) madvise(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x5) 2.948347604s ago: executing program 5 (id=81): open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x112) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="f62ffcb76fbd80cc139f4d4607979298cea8e19e5e8dc5be4c2152ffffffffffffffff085b2fc38ebbe99f5544917c4b512f5b5572b2baff27120b2409c8fb59eb84dcf2146664947c81ae2da896d63fbac2b29b0935be7e2cb21ff6638392a520f905000000434849f6239a09cf2c78154e3a8f15ebd15571a7421c6985fd4986d375a43e5392c4d99aaf09998f7ea6ea54d1a1c935ab494102dd34b7874eba3f50df0f9a5a7d5af7b521df", 0x8f}, {&(0x7f0000000140)="44e3cf992d707a4d45812da47accf86d325cfe554f57502cf68024c0c4ff1bccfc370abfd4d991f6857d3a00154bd6c85c7622aa088285a9caa4db1bb3e43a6bbd8fa014a376a5f659027fb4d6a17361d477e353e200d184584e5c619292cea06033236b9011745db3105196cc917ada1461daccb383644cfc5f7215e6a12e7d21025c5894baf77a9a834201254f8e83ccfdbf785403a6dd12f813f94bdc11165bfc42b35dcd0fa79ff8ae2daf2f3c857fb4779f9fa4f4f07e8a6e03bfd51527ebd26e3a5a02ea53207bfc282ede", 0xffffffce}], 0x2, 0x0, 0x68}, 0x400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pselect(0x40, &(0x7f0000000080)={0xe0, 0x0, 0x101, 0x9, 0x0, 0x5, 0x9, 0x3}, &(0x7f00000000c0)={0xff, 0xffffffffffffff00, 0x7ff, 0x5, 0x0, 0xf, 0x2, 0xa}, 0x0, 0x0, 0x0) sysctl$hw(&(0x7f0000000000)={0x6, 0x1d}, 0x2, &(0x7f0000000040)="bb83", &(0x7f0000000100)=0x2, 0x0, 0x0) 2.862510509s ago: executing program 4 (id=85): setrlimit(0x8, &(0x7f0000000000)={0x0, 0x37e1790c}) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x71c, 0x0) execve(0x0, 0x0, &(0x7f00000002c0)=[&(0x7f0000000180)=')$/\x00-\x86Qw\xaaN\xd3[\x04\x95\xf7*\x12\x8f\xa4\v\x13$P\xe9\xb1\xf0M\x0f`,\f\x10\xdb\nh(\xff\xabD\x90\x06\x98\xeb\x9f\x9caB%\x92\xf2@\xc8\xe6w\xbd\xb1u\x82\x00*e\xdf\"\xbfF\xf7\xba\b\xb8\x12\xe4\xa6F\x00_k\xc2\x91t\xc8\xa6D\xae3\xbf\xd2(\f\x8b\x14\xcc\x1ckB\xc1$\xbb#\x80|\xb8{\xa6`\xdbYd\xa4?\xd1@\xca\xcf\xa0\xe7\xf3\xf3\x04\f\xe7\x82\x8d*wW\xb3Vw\x0f\xf4uI4\xe9\x0f_\x03~q\xfd\x18\xb9G\xba\b\x176?g\x8c\x12\b\xb724\b\"\xf7\x9c\x16\xfeq\xf3\xf6I>\xd0']) (async) sysctl$net_inet6_icmp6(&(0x7f0000000280)={0x4, 0x18, 0x3a, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) (async) getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1004, 0x0, 0x0) (async) syz_open_pts() 2.860911536s ago: executing program 0 (id=86): mkfifo(&(0x7f00000020c0)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, 0xfffffffffffffffe, 0x38, 0x402) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000001340), 0x200, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000013c0)={&(0x7f0000001380)='./file0\x00', r1, 0x1}) (async) closefrom(r0) (async) acct(&(0x7f0000000000)='./file0\x00') 1.683007447s ago: executing program 4 (id=90): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x400c0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_int(r1, 0xffff, 0x40, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$DIOCRCLRTSTATS(r0, 0xc4504441, &(0x7f0000000980)={{'./file3\x00', './file3\x00', 0x77, 0x29}, 0x0, 0x428, 0x0, 0xd, 0x10000, 0x6, 0x0, 0x2e, 0x1}) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) seteuid(0xffffffffffffffff) r3 = syz_open_pts() ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000280)=0x5) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000200)="6b0d3614001b8ff18cd7bb5e0260c1c736d235af98786d6c", 0x18}], 0x1) sysctl$vfs_nfs(&(0x7f0000000000), 0x4000000000000005, &(0x7f0000000140)="84f9ca1e9d22291213ea3914bc162973c6c39dd46b7f3362585b5ef4989cc9e325ce918b23765b4b88f0484641bb3204fe247ba79e9217c5cf9e6d3af689a21bf7b5c4e019fe8e698c0869b5a2cba59e8a7d4b632fecd156432a4438789ede036f985fdd959dd245f4fc03b6e331cfcb3ccb184e0c04737339c269a7ccf68f5a8614f2476b932f132e30f4609f46913e1012f77449", &(0x7f0000000040)=0x42, 0x0, 0x5e) openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x400c0, 0x0) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) socket$unix(0x1, 0x2, 0x0) (async) getsockopt$sock_int(r1, 0xffff, 0x40, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$DIOCRCLRTSTATS(r0, 0xc4504441, &(0x7f0000000980)={{'./file3\x00', './file3\x00', 0x77, 0x29}, 0x0, 0x428, 0x0, 0xd, 0x10000, 0x6, 0x0, 0x2e, 0x1}) (async) openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) seteuid(0xffffffffffffffff) (async) syz_open_pts() (async) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000280)=0x5) (async) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000200)="6b0d3614001b8ff18cd7bb5e0260c1c736d235af98786d6c", 0x18}], 0x1) (async) sysctl$vfs_nfs(&(0x7f0000000000), 0x4000000000000005, &(0x7f0000000140)="84f9ca1e9d22291213ea3914bc162973c6c39dd46b7f3362585b5ef4989cc9e325ce918b23765b4b88f0484641bb3204fe247ba79e9217c5cf9e6d3af689a21bf7b5c4e019fe8e698c0869b5a2cba59e8a7d4b632fecd156432a4438789ede036f985fdd959dd245f4fc03b6e331cfcb3ccb184e0c04737339c269a7ccf68f5a8614f2476b932f132e30f4609f46913e1012f77449", &(0x7f0000000040)=0x42, 0x0, 0x5e) (async) 1.681341664s ago: executing program 1 (id=91): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r0, 0x80105727, &(0x7f0000000100)={&(0x7f0000000000)=[{0x100, 0x8}, {0x26, 0x3}], 0x2}) (async) r1 = semget$private(0x0, 0x2, 0x8) semop(r1, &(0x7f0000000040)=[{0x1, 0x1ff, 0x1000}, {0x1, 0x80, 0x1000}, {0x1, 0x7ff, 0x800}], 0x3) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000000000)={{0x0, 0xffffffffffffff74, &(0x7f0000000680), 0x1000000000000365, 0x0}}, 0x38, 0x8) 1.680661841s ago: executing program 0 (id=92): r0 = geteuid() setuid(r0) (async) seteuid(r0) kqueue() r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000002540), 0x182, 0x0) ioctl$DIOCRCLRASTATS(r1, 0xc4504448, &(0x7f0000006ac0)={{'./file1\x00', './file1\x00', 0x9, 0x9}, 0x0, 0x34, 0x0, 0x5, 0x9, 0x7, 0x7fffffff, 0x0, 0x401}) (async) chown(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) 1.619810709s ago: executing program 3 (id=93): r0 = syz_open_pts() r1 = dup2(r0, r0) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) (async) fcntl$lock(r1, 0x7, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) (async) acct(&(0x7f0000000080)='./file0\x00') (async) acct(0x0) 1.619295521s ago: executing program 5 (id=94): setegid(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0xa) setgroups(0x0, 0x0) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) r0 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x800000)=nil, 0x1000) sysctl$vm(&(0x7f0000000240)={0x2, 0x2}, 0x2, &(0x7f0000000280)="b3682e32453a6379b4bebc69685cef30025de745d690a4a3", &(0x7f0000000e00)=0x18, 0x0, 0x0) r1 = semget$private(0x0, 0x1, 0xa) setitimer(0x0, 0x0, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) fcntl$getflags(r2, 0x3) seteuid(0xffffffffffffffff) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000100)=""/160) mknod$loop(0x0, 0x4, 0x0) semctl$SETVAL(r1, 0x1, 0x8, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x148) mkdir(&(0x7f0000000400)='./file0\x00', 0x148) semop(r1, 0x0, 0x0) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x1c) getsockname$inet6(r3, &(0x7f0000000080), &(0x7f0000000100)=0x1c) seteuid(0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 1.618012122s ago: executing program 1 (id=96): ioctl$BIOCPROMISC(0xffffffffffffffff, 0x20004269) (async) ioctl$BIOCPROMISC(0xffffffffffffffff, 0x20004269) syz_emit_ethernet(0x2e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045da00200068000005119078e00034000db058216d3b74e96300011e00000b11009078000801000000008a79a4afbaf0ff4a5a6a77f8ab0066e1f75d6ac3adc5cebf3954295961649c54f065ab0e8fa02af58c800bd10000009494ca05cf00"]) syz_emit_ethernet(0xfff9, &(0x7f0000000100)=ANY=[]) r0 = syz_open_pts() pwritev(r0, &(0x7f0000000900)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x7) (async) pwritev(r0, &(0x7f0000000900)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x7) unveil(0x0, &(0x7f0000000100)='c\x00') pledge(&(0x7f0000000000)='\x00', &(0x7f0000000080)='\'\x00') pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$audio(r1, &(0x7f0000000040)="3a0400000000000000", 0x9) 1.617744367s ago: executing program 0 (id=97): setitimer(0x1, &(0x7f0000000040)={{0x8003, 0xd}, {0xe, 0x104}}, 0x0) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.616758709s ago: executing program 4 (id=98): syz_emit_ethernet(0xce, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd67d6c7c300982cc5fe800000000000000000000000bbfe800000000000007a424f0d3b24004000fcffffffbb"]) (async, rerun: 64) syz_extract_tcp_res(&(0x7f0000000000), 0xfffffffe, 0x3ff) (async, rerun: 64) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 517.550096ms ago: executing program 7 (id=99): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x6000) recvmmsg(r0, &(0x7f0000000240)={{&(0x7f0000000040)=@un=@file={0x0, 0x0, ""/263}, 0x109, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/11, 0xb}], 0x1, &(0x7f0000000200)=""/26, 0x1a}, 0x4}, 0x38, 0x3001, &(0x7f0000000280)={0x8, 0xe}) (async) recvmmsg(r0, &(0x7f0000000240)={{&(0x7f0000000040)=@un=@file={0x0, 0x0, ""/263}, 0x109, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/11, 0xb}], 0x1, &(0x7f0000000200)=""/26, 0x1a}, 0x4}, 0x38, 0x3001, &(0x7f0000000280)={0x8, 0xe}) syz_emit_ethernet(0x52, &(0x7f0000000d40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaac0aaaaaafb86dd6688ad25fef7030200000000000000000000000000000009040000"]) 427.069341ms ago: executing program 2 (id=100): r0 = socket$inet6(0x18, 0x2, 0x0) r1 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0x1c, 0x18, 0x0, 0x401, "000000000000000096492a9a00", 0x88}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe000000000000000000800900", 0xfffffff5}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(r2, &(0x7f0000000180)=""/90, 0x5a, 0x1801, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0xa, r3) read$audio(r4, &(0x7f0000000040)=""/66, 0xffffff88) open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x180) getsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000100), &(0x7f0000000140)=0x10) r5 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) r6 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x0, "fffe0003000000000000008000", 0xfffffff5}, 0x1c) r7 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r7, 0xffff, 0x1000, &(0x7f0000000080)=0x6, 0x4) bind$inet6(r7, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0xd, "00000000fe000000030f00", 0x8}, 0x1c) writev(r0, &(0x7f0000000100), 0x1000000000000056) 418.546176ms ago: executing program 4 (id=101): sysctl$net_inet_tcp(&(0x7f0000000540)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x1, 0x41, "febf00000080007f7400", 0xc0001}, 0x1c) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x300, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001280)={0xffffffffffffffff}) socket$inet6(0x18, 0x1, 0x6) sendmsg$unix(r1, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32], 0x14, 0x40a}, 0x404) pselect(0xf, 0x0, 0x0, &(0x7f0000000100)={0x7ffc, 0x654, 0x10001, 0x8, 0x2, 0x200000005, 0x7fffffff, 0x7fff}, 0x0, 0x0) r2 = syz_open_pts() r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000001c80), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r3, 0x80085761, &(0x7f0000001d40)={0x3, 0x80004}) recvfrom$unix(r3, &(0x7f0000000580)=""/254, 0xfe, 0x800, 0x0, 0x0) sysctl$ddb(&(0x7f0000000000)={0x9, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000d00), 0x20, 0x0) dup2(r4, r2) ioctl$TIOCSPGRP(r2, 0x8010427e, &(0x7f0000000000)) ioctl$FIOGETOWN(0xffffffffffffffff, 0x4004667b, &(0x7f0000000040)) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x3}, 0xf, 0x0, 0x0, 0x0, 0xfffffffffffffe70) sysctl$kern(&(0x7f0000000000)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x18, 0x2, 0x80000000, "40b54343c009fadfd90963f03c7f80eb", 0x10001}, 0x1c) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000001700), 0x8840, 0x0) ioctl$DIOCRADDADDRS(r5, 0xc4504443, &(0x7f00000000c0)={{'./file0\x00', './file1\x00', 0x0, 0x7}, 0x0, 0x34, 0x0, 0x2, 0x9, 0x6, 0xffffffff, 0x6, 0x7}) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040), &(0x7f0000000100), 0x0, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x20, 0x6) 418.212383ms ago: executing program 1 (id=102): pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000ed138d070000006800000020", 0xfdfffff5}, 0x1c) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x406) ktrace(0x0, 0x4, 0x4, 0x0) pread(0xffffffffffffffff, 0x0, 0x0, 0x1) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) pselect(0x2b, 0x0, &(0x7f0000000040)={0x81, 0x100000000000cb, 0x7fd, 0x5f1, 0x3, 0xf, 0x3, 0x10000}, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000001580)={0x1c, 0x18, 0x3, 0x400, "c1aac0c17de4f475b6908b2a8cb12cc0", 0x9}, 0x1c) r2 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x0, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) closefrom(r3) r4 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x0, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0x1c, 0x18, 0x0, 0x8a, "0a5be30e01a3d3d1793c1db58465282f", 0x308}, 0x1c) setsockopt$sock_cred(r4, 0xffff, 0x1023, &(0x7f00000003c0), 0xc) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x40}], 0x1, &(0x7f0000000200)={0x7fffffffffffffff, 0x10001}, 0x0) 417.820104ms ago: executing program 5 (id=103): rmdir(&(0x7f0000000240)='.\x00') (async) r0 = open(&(0x7f0000000180)='./file0\x00', 0xa60, 0xcf) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) (async, rerun: 64) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x0) (async, rerun: 64) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async) ioctl$TIOCMSET(r1, 0x8004746d, &(0x7f0000000000)) (async, rerun: 64) pwritev(r1, &(0x7f0000000480)=[{&(0x7f0000000100)="2d4508d8", 0x4}], 0x1, 0x8000) (async, rerun: 64) madvise(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x5) 333.654174ms ago: executing program 1 (id=104): ioctl$BIOCSRSIG(0xffffffffffffffff, 0x80044272, &(0x7f0000000e00)=0x9) mkfifo(&(0x7f00000020c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000001340), 0x200, 0x0) r3 = msgget(0x2, 0x203) seteuid(0xffffffffffffffff) msgsnd(r3, 0x0, 0x0, 0x0) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f00000013c0)={&(0x7f0000001380)='./file0\x00', r1, 0x1}) closefrom(r0) seteuid(0xffffffffffffffff) unveil(0x0, &(0x7f0000000340)='w\x00') mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r4 = socket$inet6(0x18, 0x3, 0x53) fcntl$dupfd(r1, 0xa, r2) sysctl$kern(&(0x7f0000000000)={0x1, 0x2c}, 0xa, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_int(r4, 0xffff, 0x800, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = socket$inet6(0x18, 0x8003, 0x4) ioctl$DIOCGETRULES(0xffffffffffffffff, 0xcd604406, &(0x7f0000000080)={0x7, 0x6483, 0x8001, '\x00', './file0\x00', 0x0, "46cd2574234d3f268fa77c5bcb4125a4ce6770dfbb769cb16db94cd9db283e9a5e66d95ddacd3d0585114fac4443a34ec4a60c5ae8715b4835cfc9aba65d3d8c87eec98612923442dc85fdafd9280e5027ed6d48b8be93ef6b8e876d99df3e0f02af94a1ee216d06c8065e0894c7c390fd554fd69711c5b72ed9db5c4ed36fcdfd20b5325d19f702b7900396664c309ab5bf644cc70a1e34aa0da90a68ad7c617f94646bdf6198381925610b633cc000547959850a62d6e7f1876aa776e81afc525bf536124054553739b30e69256737a1ae2cb1bb9c7cdd553ec75ed7cd59fa6eb2e0b6a2216d647f00ab02b0852ea2f2aaeeaed9d3203fc90f86af37411aed70d4a2b525fc491d7c879cd18355044225ff8bd5330d4a1bdff8e25df9abed12510d8223461c9de26412d43fb8c5c97376f8b97595df70a1276c7a63e10f0910cb87991fd713e80842ae4af19c872bf34d76d9bdf36d4456a19e4455194251649f3c5cd8c7a52ada81c0de8a7508da1f1f12f83707d191b9faac98490521ed9138abf1307a7edc4b74c5bada77c004d853218910595e585dddd1409b3c3813fe2c52119befda6ec95564ceb7664c9b598c9edb8d3685b46bec94b72ce34534739f01288af25c99730de48be864267c41dd36f7d60edd52a18167ff3f226364508a7ecb51c52966fd5ea134b98aaa12ccb6f6afbed3302803e7d8f995ff44cb221907a83fe0998b20376205c95abe3699c8c189ff349d5eb1c81654ddf0da6da11d6c4d633863019cf655b24dad592027d2b1cb16689552272e028923e2b1c05f6d2f8868b3af2d9f5ef19d6c3e5ffcd95baf6f17a137de88df9b55c6eb349272c072ebfc0a3293d4fd1df90f973fe61fcc101b174e63569894cd99b9b2b3a33886f96fd20445d617cb4a59dd8ca96fb2374506d9a2d6c6111a3d706038b44c8cc61da79ca38da034e3db8119c34a893aeb9a9bc95982c9da57ddd26897a55c9d092040caaea38b7c724a9c4cf3a7d531c8eed8bf9bb714c84de940d9bcd3f37a61926955f005df0a3184fd658c53fd1a0feeca935be35e110a07ac9d66060b92601b628f206b69412848e45dd1bf44209c728db3a2b7817ca8a2097cb274ba88f4bdf79c4089f396eb7c25be0357120e4f4a1d0800b44057dbbeb4891b06538edab3676d38d5f9d228da0439a91153b2095cde623bd4eef7aee5a1d4ad584d6dadfe659413ea545b107b6dd91bf077b7714c471e09554e73cce07bf3bb8552382d4e336234ec46bbaa680d527f7c2619313f6e05b274e6fe8345ad3bec96b93a39d165ddec8bde08bf652f0ce764a89903a0db9b09e7e341d327319a5b15af28764872626e835d4b9a3667477071c47bb00258479c405d85290b93a16de1380eddb91f533d7803888d07c3b899c1ab479beba3c2b34863bddb7120399e9f512a6d208aba6dcaacb375d9bf12e9026098313ca89914d4d755d5e074c7a20533e322c4fd7f103c2a8f60338b6da22eb697bfec940579922b74fdeabb472167a79d8d1a9be23266b29ff90f783f332ed30a8589723b9e60d9e1aa226f047d75346db9b29cbffcc6f52659b4affb93e4f1152e36fd9932719b1d7165595db489919524beaf7f810bf145c87f2e284cdbad25eaf9659bf7871475be348cf0033fdb9449baa722b5e01345ef21b2eb9ae96f14eaa9e80615ca14bea3152b1a417ad6690bee9ce6ce9dbce15fcc37c8da42357b389260c1c6c51bf21934f01afa14aa4b7420d55c8d735728cf83e8204add936f53e393c22903891dc6fd67fb6de64d716442884650547d47985c8be48327d93dc508e9e33d37a40490474256b7459f69b87107573c9f514aa0722c686e7837fbd2fb83983624047878a10d474196a8182a2941840b599d5cf9fa50489a1f82b7"}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd"]) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc050756a, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81}) dup2(r4, r4) 333.249176ms ago: executing program 3 (id=105): r0 = syz_open_pts() mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5dc2) r1 = dup3(r0, r0, 0x4) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000040)) open(&(0x7f0000001980)='./file0\x00', 0x80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect(0x40, &(0x7f0000001280)={0x7f, 0x0, 0x101, 0x9, 0x400000000, 0x5, 0x9, 0x7}, &(0x7f0000001240)={0xff, 0xffffffffffffff01, 0x1000000007ff, 0x8, 0x0, 0x7, 0x9, 0x9}, 0x0, 0x0, 0x0) poll(&(0x7f0000001200)=[{r2, 0x10}], 0x1, 0x37) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x4, 0x1, './file0\x00'}, 0xa) connect$unix(r4, &(0x7f0000000000)=@file={0xfc, 0x1, './file0\x00'}, 0xa) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000040)=@file={0xb, 0x1, './file0\x00'}, 0xa) closefrom(r3) futimens(r0, &(0x7f0000000080)=[{0x3, 0x5}, {0xfffffffffffffffd, 0x9}]) 332.732459ms ago: executing program 7 (id=106): munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) minherit(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x70) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x1, 0x100) setsockopt(r1, 0x8, 0x5, &(0x7f0000000080)="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", 0x1000) sysctl$net_inet_udp(&(0x7f0000001080)={0x4, 0x2, 0x11, 0x5}, 0x4, &(0x7f00000010c0)="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", &(0x7f00000020c0)=0x1000, &(0x7f0000002100)="27c05d4b98359a6b1cb6dc1f2dc2dfcc00dc6ee978346b606834154e5773f52f967c00b0e6591b5ddffb92b4966f2f90f9cac98a551e24455a23585721dba5278e66c3e46beb243782db1b6539adef7af884ee3bb476a02b85e940213803f8be1af5f5bd7c82eb99e8dc452199fb3b09252abeda91e5852dd86e68be34093b45dbafa0f8cff995eb5d6c8b3abf88d8013b4929d9883d9c3dc524b37ecedcfad4a115a740753d00a646b886146f61e4818972113050ff6a9ec9cb3433dd95dcce15db6e7f3578775a37716b3223a33930ce8ca43e849f4a8b960ecfc51e640f0b1ac0d7efb17202fb69d45219612327b27216ae", 0xf3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000002200)={0x8, 0x8, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000002240)={0x7, 0xb, r2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r2, 0xc01864c1, &(0x7f0000002280)={0x0, 0x2, 0xffffffffffffffff, 0x0, 0x9}) closefrom(r3) r4 = socket$unix(0x1, 0x0, 0x0) pipe(&(0x7f00000022c0)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000002300)=[{r0, 0x20}, {r1, 0x1}, {r3}, {r5, 0x4}, {r0, 0x20}], 0x5, &(0x7f0000002340)={0x5, 0x4a}, 0x0) r6 = openat$klog(0xffffffffffffff9c, &(0x7f0000002380), 0x80, 0x0) fchflags(r6, 0x10000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000023c0)={0x7, 0xc, r4}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000002440)={&(0x7f0000002400)="03f0b4f8f9a43186183449", 0xb}) r8 = open(&(0x7f0000002480)='./file0\x00', 0x800, 0x22) ioctl$DIOCXEND(r8, 0xc0044464, &(0x7f00000024c0)=0x1) ioctl$DIOCGETRULESETS(r7, 0xc444443a, &(0x7f0000002500)={0x5, './file0\x00', './file0\x00'}) connect(r4, &(0x7f0000002980)=@in={0x10, 0x2, 0x3, 0x6}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r9, &(0x7f0000002a00)=@in, &(0x7f0000002a40)=0x10, 0x4000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000002a80)={0x0, 0x1}) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000002ac0), 0x100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r2, 0xc01864c2, &(0x7f0000002b00)={0x0, 0x3, r10, 0x0, 0xffffffffffffffff}) r11 = getuid() r12 = getegid() fchownat(r3, &(0x7f0000002b40)='./file0\x00', r11, r12, 0x2) 330.877137ms ago: executing program 1 (id=107): munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x522, 0x0) (async) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x522, 0x0) mkfifo(&(0x7f0000001800)='./file0\x00', 0x8) (async) mkfifo(&(0x7f0000001800)='./file0\x00', 0x8) r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x3c) open$dir(0x0, 0x40, 0x1bc) fcntl$setstatus(r1, 0x4, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000000180)=0x5, 0x4d) (async) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000000180)=0x5, 0x4d) r4 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r5) fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x2, 0x0, 0xa1, 0x100000001}) (async) fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x2, 0x0, 0xa1, 0x100000001}) closefrom(r0) unveil(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='w\x00') 330.530714ms ago: executing program 0 (id=108): r0 = semget$private(0x0, 0x3, 0x424) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0xffff, 0x1025, &(0x7f0000000180), &(0x7f00000002c0)=0x65) (async) symlink(&(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)='./file1\x00') r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$BIOCGDIRFILT(r2, 0x80047476, &(0x7f0000000080)) readlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=""/176, 0xb0) r3 = open(&(0x7f0000000180)='./file0\x00', 0xa60, 0xcf) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) (async) nanosleep(&(0x7f0000000000)={0x40008000000, 0x92b9736}, 0x0) execve(0x0, 0x0, 0x0) (async) r4 = openat(r1, &(0x7f00000002c0)='./file0\x00', 0x4828a, 0x80) ioctl$DIOCKILLSTATES(r3, 0x0, &(0x7f00000005c0)={{0x2022, 0x0, 0x2}, 0x0, '\x00', 0x3, {@addrmask={@v6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, @v4=@rand_addr=0x4, 0x0, 0x0, 0xe}, [0x4, 0x519], 0x5, 0x1, 0x3}, {@addrmask={@v4=@remote={0xac, 0x14, 0x0}, @v6=@loopback, 0x0, 0x0, 0x7}, [0x7, 0x5], 0x6, 0x4, 0x8e}, './file0\x00', './file0\x00', 0x7fff, 0x3517}) (async) pwritev(r4, &(0x7f0000000580)=[{0x0, 0xe}], 0x1, 0x53) (async) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2]) (async) socket$inet(0x2, 0x3, 0x2) (async) r5 = socket$inet(0x2, 0x3, 0x4) getsockopt(r5, 0xfffffff6, 0x6, 0x0, 0x0) (async) r6 = syz_open_pts() ioctl$TIOCGETD(r6, 0x4004741a, &(0x7f0000000000)) (async) r7 = socket$inet(0x2, 0x3, 0x2) (async) sysctl$kern(&(0x7f0000000240)={0x1, 0x39}, 0x2, 0x0, 0x0, 0x0, 0x0) setsockopt(r7, 0x0, 0x14, &(0x7f0000000000), 0x0) (async) setsockopt(r7, 0x0, 0x4, 0x0, 0x0) (async) recvfrom(r3, &(0x7f0000000400)=""/129, 0x81, 0x20c1, &(0x7f00000004c0)=@un=@file={0x0, 0x0, './file1\x00'}, 0xa) r8 = syz_open_pts() (async) syz_open_pts() ioctl$TIOCSTAT(r8, 0x20007465) (async) dup(0xffffffffffffff9c) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000000)=""/113) 79.872252ms ago: executing program 6 (id=109): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt(r0, 0x0, 0x1e, &(0x7f0000000100)="9a355644", 0x4) (async) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) (async) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000679000/0x3000)=nil) shmat(r1, &(0x7f0000000000/0x800000)=nil, 0x1000) clock_gettime(0x3, 0x0) madvise(&(0x7f0000001000/0x9000)=nil, 0x9000, 0x2) (async) sendsyslog(&(0x7f0000000040)="022425ea1ac11993bedae65a842d6a2fa301a8e85267ceb4217e239f92c01b627e1bef58a41204c044d6ff696b923d1d1c39fef0f71f9a5b95a1fbe1238ca6351d6c4cbdb72e4bf693bd5411c8b434b834069f9309d762c9662d8001000000f06d5532b20819fd210900125104fba86fec73e1ada10b90c9ca513d0be89374f2d8de97de536b2e7b5557f6957eb0331ce143e13012b3bba16fb0ae10f59821040e546a919114d4978a73213f56e6a1a7b4a49b09862986875ea1b0b14a", 0xfffffc78, 0x26) 76.072438ms ago: executing program 6 (id=110): open$dir(&(0x7f0000000800)='./file0\x00', 0x200, 0xfdf98e28ba4af85) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) acct(&(0x7f0000000000)='./file0\x00') open$dir(&(0x7f0000000800)='./file0\x00', 0x200, 0xfdf98e28ba4af85) (async) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) acct(&(0x7f0000000000)='./file0\x00') (async) 72.141653ms ago: executing program 6 (id=111): r0 = socket$inet6(0x18, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8, &(0x7f0000000800)={0x1c, 0x18, 0x2, 0xa, "00000000000000000000ffff00", 0xa}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f00000010c0), &(0x7f0000001100)=0xffffffffffffff67) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8, 0x100) getsockopt(r3, 0x6, 0x5, &(0x7f0000000080)=""/213, &(0x7f0000000180)=0xd5) r4 = setsid() r5 = getegid() setresgid(r5, 0x0, r5) setsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000001c0)={r4, 0xffffffffffffffff, r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r6, 0xffff, 0x1021, 0x0, 0x0) 71.678335ms ago: executing program 6 (id=112): mkfifo(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) r0 = getthrid() setpgid(0x0, r0) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 70.908739ms ago: executing program 6 (id=113): sysctl$vm(&(0x7f0000000000)={0x2, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) getgroups(0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r1, r0, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x3a}, 0x2, 0x0, 0x0, &(0x7f0000000240), 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setreuid(0x0, r3) (async) r4 = socket$inet6(0x18, 0x3, 0x7) setsockopt(r4, 0x29, 0x2f, 0x0, 0x0) (async) setsid() (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x150) (async) unveil(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000000)='x\x00') execve(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) shutdown(0xffffffffffffffff, 0x2) (async) r5 = semget$private(0x0, 0x3, 0x2b1) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x0, 0x9}, 0x0, 0x6, 0x0, 0x0, 0xc, 0x0, 0x2f}) (async) semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f0000000100)=""/47) semctl$GETVAL(r5, 0x0, 0x5, &(0x7f0000000340)=""/107) semctl$GETALL(r5, 0x0, 0x6, &(0x7f0000000040)=""/118) (async) r6 = syz_open_pts() fchdir(r6) (async) kqueue() r7 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x4a) fcntl$lock(r7, 0x8, &(0x7f0000000080)={0x0, 0xa6041973de421b7d, 0x2, 0x10000ffffbffe}) (async) getsockname$inet(0xffffffffffffff9c, &(0x7f0000000100), &(0x7f0000000140)=0x10) socket$inet(0x2, 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x1b}, 0x2, &(0x7f0000000240), &(0x7f0000000140), 0x0, 0x0) 1.733119ms ago: executing program 6 (id=114): ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x100, 0x3, &(0x7f0000000080)=[0xfffffff9, 0x7fff, 0x9], 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = socket$inet6(0x18, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xa}, 0x38, 0x1040, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1007, &(0x7f00000000c0)=0xed, 0x4) (async) setsockopt$sock_int(r0, 0xffff, 0x1007, &(0x7f00000000c0)=0xed, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 1.343976ms ago: executing program 7 (id=115): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x10001, 0xca, 0xc], 0x4, 0x4, 0x0, 0xffffffffffffffff}) r1 = openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x40800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01864c2, &(0x7f00000000c0)={0x0, 0x0, r1, 0x0, 0x1}) mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) (async) mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 0s ago: executing program 1 (id=116): socket$inet(0x2, 0x1, 0x6) open(&(0x7f0000000180)='./file0\x00', 0xa60, 0xcf) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000, 0x8) connect$inet(r1, &(0x7f0000000140)={0x10, 0x2, 0x2, 0x8}, 0x10) write(r0, 0x0, 0x0) pselect(0x40, &(0x7f0000000080)={0xff, 0x3ff, 0x5, 0x8, 0x9, 0xb, 0x3, 0x80000009}, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) flock(r0, 0xe) clock_gettime(0x2, &(0x7f0000003680)) accept$inet(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x10001) r3 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) r4 = kqueue1(0x10000) kevent(r4, 0x0, 0x9, &(0x7f0000000240)=[{{r3}, 0xffffffffffffffff, 0x2, 0x10, 0x4, 0x1ff}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) closefrom(r5) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x2, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ktrace(0x0, 0x4, 0x210a, 0x0) sendmsg$unix(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="e26e", 0x2}], 0x1, 0x0, 0x0, 0x9}, 0x0) writev(r6, &(0x7f0000001900)=[{&(0x7f0000000400)="75d5830932cd07e25f588e2da039643d0532c6a2d09af638d2d3169f76d0b796b2ec9c55413ad5d8177447777c674de3d98395ccd92accb5506eba1b47c25ade0fddbec6f84c2828b9780990ef0fe641a4e454806e6ca2eccfcd6d0e0118b77b87e38ecea4346ca2a063fa1c3fff948ff729faaee7d31e106ef6b47c2a7cccb4976aad8a36862b629670c6867f3687", 0x8f}], 0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) recvfrom$unix(r7, &(0x7f00000000c0)=""/46, 0x2e, 0x2002, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) socket$unix(0x1, 0x5, 0x0) socket(0x11, 0x3, 0x9) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x84, 0xf3, 0x6, 0x4}, {0x6, 0x8, 0x3, 0x7}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.64' (ED25519) to the list of known hosts. Connection to 10.128.1.64 closed by remote host. OpenBSD/amd64 (ci-openbsd-kasan-3.us-central1-a.c.syzkaller.internal) (tty00) login: KASAN: invalid write of 104 bytes at 0xffff8000018c93b0 from pc 0xffffffff83503e22 KASAN: first bad byte at 0xffff8000018c9414 (+100); shadow 0x04: partial granule (out-of-bounds) KASAN: 0xffff8000018c9414 is 13332 bytes inside the 16384-byte malloc slot [0xffff8000018c6000..0xffff8000018ca000) KASAN: allocated at: #0 malloc+0xda0 #1 sysctl_sysvipc+0x237 #2 kern_sysctl_dirs+0x407 #3 kern_sysctl+0x1ce #4 sys_sysctl+0x54f #5 syscall+0x1089 #6 Xsyscall+0x128 KASAN: pc: sysctl_sysvipc+0x422 KASAN: call trace: #0 kasan_memcpy+0x1ca #1 sysctl_sysvipc+0x422 #2 kern_sysctl_dirs+0x407 #3 kern_sysctl+0x1ce #4 sys_sysctl+0x54f #5 syscall+0x1089 #6 Xsyscall+0x128 KASAN: shadow of 0xffff8000018c9300..0xffff8000018c9580 (1 cell = 8 bytes): 0xffff8000018c9300: 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0xffff8000018c9380: 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 >0xffff8000018c9400: 08 08[04]fb fe fe fe fe fe fe fe fe fe fe fe fe 0xffff8000018c9480: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe 0xffff8000018c9500: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe KASAN: legend: 00 valid; 01..07 partial; fb malloc redzone; fc malloc freed; fd pool freed; fe kmem; fa global; f1..f4/f8 stack/scope panic: Caught invalid memory access at ffff8000018c93b0 size 104 op 1 Stopped at db_enter+0x17: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND *198704 9446 0 0 0x4000000 0K syz-executor 268077 65203 0 0x2 0x1 1 syz-executor db_enter() at db_enter+0x17 panic(ffffffff8463360e) at panic+0x270 kasan_memcpy(ffff8000018c93b0,ffff8000017d9398,68) at kasan_memcpy+0x1ec sysctl_sysvipc(ffff80003371f7c8,1,200000000040,ffff80003371f7a0) at sysctl_sysvipc+0x422 kern_sysctl_dirs(33,ffff80003371f7c8,1,200000000040,ffff80003371f7a0,0,1,1ffff000066e3e70) at kern_sysctl_dirs+0x407 kern_sysctl(ffff80003371f7c4,2,200000000040,ffff80003371f7a0,0,0,ffff80003371fa10) at kern_sysctl+0x1ce sys_sysctl(ffff80003370c020,ffff80003371fa10,ffff80003371f980) at sys_sysctl+0x54f syscall(ffff80003371fa10) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc9dd6358d00, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: Caught invalid memory access at ffff8000018c93b0 size 104 op 1 ddb{0}> trace db_enter() at db_enter+0x17 panic(ffffffff8463360e) at panic+0x270 kasan_memcpy(ffff8000018c93b0,ffff8000017d9398,68) at kasan_memcpy+0x1ec sysctl_sysvipc(ffff80003371f7c8,1,200000000040,ffff80003371f7a0) at sysctl_sysvipc+0x422 kern_sysctl_dirs(33,ffff80003371f7c8,1,200000000040,ffff80003371f7a0,0,1,1ffff000066e3e70) at kern_sysctl_dirs+0x407 kern_sysctl(ffff80003371f7c4,2,200000000040,ffff80003371f7a0,0,0,ffff80003371fa10) at kern_sysctl+0x1ce sys_sysctl(ffff80003370c020,ffff80003371fa10,ffff80003371f980) at sys_sysctl+0x54f syscall(ffff80003371fa10) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc9dd6358d00, count: -9 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80003371efd0 rbx 0xffff80003371f040 rdx 0 rcx 0xffffffff84f6aff0 cpu_info_full_primary+0x1ff0 rax 0xffff800000168780 r8 0x101010101010101 r9 0x8080808080808080 r10 0xffff80003371edb8 r11 0xffffffff82eaa450 x86_bus_space_io_read_1 r12 0xffffffff8463360e .str.31+0x9cb8e r13 0xffffffff84f6bc08 cpu_info_full_primary+0x2c08 r14 0xffffffff84f6be07 cpu_info_full_primary+0x2e07 r15 0x1 rip 0xffffffff8309ec97 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff80003371efd0 ss 0x10 db_enter+0x17: popq %rbp ddb{0}> show proc PROC (syz-executor) tid=198704 pid=9446 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003370c2b8,0xffff800029923778 process=0xffff800045ff0028 user=0xffff800033714000, vmspace=0xffff800001c91208 estcpu=36, cpticks=20, pctcpu=0.0, user=0, sys=20, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 66396 231619 83987 0 2 0 syz-executor 16579 227577 18486 0 2 0 syz-executor 16579 65472 18486 0 2 0x4000000 syz-executor 34043 267779 21082 0 2 0 syz-executor 34043 338320 21082 0 3 0x4000080 fsleep syz-executor 83730 167309 0 0 3 0x14200 acct acct 11489 337233 9216 0 2 0 syz-executor 11489 36560 9216 0 3 0x4000080 nanoslp syz-executor 11489 451265 9216 0 3 0x4000080 fsleep syz-executor 84727 23915 37728 0 2 0xc80 syz-executor 84727 129439 37728 0 2 0x4000000 syz-executor 84727 4315 37728 0 3 0x4000080 fsleep syz-executor 84727 147052 37728 0 3 0x4000080 fsleep syz-executor 9446 278262 65203 0 2 0 syz-executor * 9446 198704 65203 0 7 0x4000000 syz-executor 94646 287918 66171 0 2 0 syz-executor 94646 181502 66171 0 3 0x4000080 piperd syz-executor 94646 1771 66171 0 3 0x4000080 fsleep syz-executor 15497 478568 1 0 3 0x100083 ttyin getty 64602 58634 0 0 3 0x14280 nfsidl nfsio 12068 344672 0 0 3 0x14280 nfsidl nfsio 28288 106399 0 0 3 0x14280 nfsidl nfsio 73350 248795 0 0 3 0x14280 nfsidl nfsio 89998 489191 0 0 3 0x14280 nfsidl nfsio 17234 508677 0 0 3 0x14280 nfsidl nfsio 12912 420328 0 0 3 0x14280 nfsidl nfsio 78221 325436 0 0 3 0x14280 nfsidl nfsio 72310 426589 0 0 3 0x14280 nfsidl nfsio 72106 71611 0 0 3 0x14280 nfsidl nfsio 19412 11233 0 0 3 0x14280 nfsidl nfsio 21270 25562 0 0 3 0x14280 nfsidl nfsio 84661 221704 0 0 3 0x14280 nfsidl nfsio 71426 96455 0 0 3 0x14280 nfsidl nfsio 52332 467989 0 0 3 0x14280 nfsidl nfsio 12660 485321 0 0 3 0x14280 nfsidl nfsio 77840 80777 0 0 3 0x14280 nfsidl nfsio 43805 221706 0 0 3 0x14280 nfsidl nfsio 26945 278301 0 0 3 0x14280 nfsidl nfsio 85839 478354 0 0 3 0x14280 nfsidl nfsio 83987 17407 77546 0 2 0xc82 syz-executor 21082 494652 77546 0 2 0xc82 syz-executor 37728 509471 77546 0 2 0xc82 syz-executor 65203 268077 77546 0 7 0x3 syz-executor 96912 366808 77546 0 2 0x10000002 syz-executor 66171 298877 77546 0 2 0xc82 syz-executor 18486 448853 77546 0 2 0xc82 syz-executor 9216 34814 77546 0 2 0xc82 syz-executor 77546 384262 1 0 3 0x82 kqread syz-executor 35685 78875 1 74 3 0x1100092 bpf pflogd 53214 373901 1 73 2 0x1100090 syslogd 66753 483187 0 0 3 0x14200 bored smr 92829 155979 0 0 2 0x14200 zerothread 4297 117440 0 0 3 0x14200 aiodoned aiodoned 36860 165926 0 0 3 0x14200 syncer update 81073 334892 0 0 3 0x14200 cleaner cleaner 70726 512308 0 0 3 0x14200 reaper reaper 25591 89952 0 0 3 0x14200 pgdaemon pagedaemon 69223 370533 0 0 3 0x14200 bored viomb 23403 47911 0 0 3 0x40014200 acpi0 acpi0 5171 250688 0 0 3 0x40014200 idle1 59011 47456 0 0 3 0x14200 bored softnet1 84996 318841 0 0 2 0x14200 softnet0 97941 285877 0 0 3 0x14200 bored systqmp 40774 521792 0 0 3 0x14200 bored systq 32268 57335 0 0 2 0x14200 softclockmp 28406 427619 0 0 3 0x40014200 tmoslp softclock 45805 441069 0 0 3 0x40014200 idle0 1 443614 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 84727 (syz-executor) thread 0xffff800029923238 (129439) exclusive rrwlock inode r = 0 (0xffff800001ceb7b8) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 vn_lock+0xca #5 vn_write+0x200 #6 dofilewritev+0x3ef #7 sys_pwritev+0x1b3 #8 syscall+0x1089 #9 Xsyscall+0x128 Process 9446 (syz-executor) thread 0xffff80003370c020 (198704) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff854280c0) #0 witness_lock+0x632 #1 sysctl_vslock+0x72 #2 kern_sysctl_dirs+0x2d2 #3 kern_sysctl+0x1ce #4 sys_sysctl+0x54f #5 syscall+0x1089 #6 Xsyscall+0x128 exclusive rwlock sysctllk r = 0 (0xffffffff85260178) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 sysctl_vslock+0x37 #3 kern_sysctl_dirs+0x2d2 #4 kern_sysctl+0x1ce #5 sys_sysctl+0x54f #6 syscall+0x1089 #7 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11050 12558K 12771K 166960K 12234 0 pcb 19 24K 24K 166960K 34 0 rtable 237 12K 13K 166960K 351 0 pf 34 22K 38K 166960K 54 0 ifaddr 43 12K 12K 166960K 47 0 ifgroup 55 2K 2K 166960K 64 0 sysctl 3 1K 13K 166960K 8 0 counters 70 42K 43K 166960K 74 0 ioctlops 0 0K 4K 166960K 1529 0 iov 0 0K 16K 166960K 4 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1299 84K 84K 166960K 1422 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 2 2K 10K 166960K 11 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 15 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 93K 166960K 247 0 sigio 0 0K 0K 166960K 2 0 proc 22 46K 177K 166960K 577 0 subproc 72 9K 9K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 ip_moptions 0 0K 0K 166960K 1 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 4 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 49 344K 344K 166960K 49 0 exec 0 0K 2K 166960K 390 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 148 141K 257K 166960K 4184 0 UVM aobj 131 8K 8K 166960K 132 0 pinsyscall 1047 1735K 1735K 166960K 1407 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 12 0K 2K 166960K 30 0 temp 41 9178K 9482K 166960K 6291 0 kqueue 4 13K 48K 166960K 42 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 33 0 33 1 0 1 1 0 8 1 rtentry 176 111 0 1 5 0 5 5 0 8 0 unpcb 144 224 0 213 2 0 2 2 0 8 1 syncache 336 4 0 4 2 2 0 1 0 8 0 tcpcb 736 20 0 18 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 120 0 111 2 0 2 2 0 8 1 nd6 152 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 68 0 67 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 22 0 0 1 0 1 1 0 8 0 pfstkey 128 22 0 0 1 0 1 1 0 8 0 pfstate 448 22 0 0 3 0 3 3 0 8 0 pfrule 1360 22 0 17 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 453 0 0 29 0 29 29 0 8 0 art_table 40 454 0 0 5 0 5 5 0 8 0 art_node 32 111 0 11 1 0 1 1 0 8 0 semupl 112 2 0 2 1 0 1 1 0 8 1 semapl 72 12 0 2 1 0 1 1 0 8 0 shmpl 112 129 0 1 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1761 0 286 93 0 93 93 0 8 0 ffsino 296 1761 0 286 114 0 114 114 0 8 0 nchpl 144 2126 0 418 64 0 64 64 0 8 0 vnodes 216 1890 0 0 105 0 105 105 0 8 0 namei 1024 6698 0 6698 1 0 1 1 0 8 1 percpumem 16 53 0 2 1 0 1 1 0 8 0 kstatmem 264 31 0 4 2 0 2 2 0 8 0 scxspl 216 7652 0 7652 4 3 1 3 1 8 1 plimitpl 152 36 0 24 1 0 1 1 0 8 0 sigapl 424 586 0 527 8 0 8 8 0 8 0 knotepl 120 111 0 0 4 0 4 4 0 8 0 kqueuepl 224 46 0 43 1 0 1 1 0 8 0 pipepl 344 144 0 116 3 0 3 3 0 8 0 fdescpl 528 549 0 528 3 0 3 3 0 8 0 filepl 160 2282 0 2087 11 0 11 11 0 8 2 lockfpl 104 42 0 39 1 0 1 1 0 8 0 lockfspl 48 21 0 18 1 0 1 1 0 8 0 sessionpl 144 32 0 27 1 0 1 1 0 8 0 pgrppl 48 43 0 30 1 0 1 1 0 8 0 ucredpl 104 254 0 247 1 0 1 1 0 8 0 zombiepl 144 528 0 527 1 0 1 1 0 8 0 processpl 1232 586 0 527 6 0 6 6 0 8 0 procpl 664 794 0 725 7 0 7 7 0 8 0 sosppl 176 2 0 2 1 0 1 1 0 8 1 sockpl 752 381 0 361 5 0 5 5 0 8 3 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl9k128 9344 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 135 0 0 17 0 17 17 0 8 0 mcl2k 2048 21 0 0 3 0 3 3 0 8 0 mextrefs 64 18 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 165 0 0 11 0 11 11 0 8 0 bufpl 272 2539 0 105 163 0 163 163 0 8 0 anonpl 32 5459 0 0 44 0 44 44 0 222 0 amapchunkpl 152 11669 0 11310 25 0 25 25 0 158 8 amappl16 200 1667 0 1649 6 3 3 5 0 8 1 amappl15 192 9 0 9 2 2 0 1 0 8 0 amappl14 184 457 0 457 1 0 1 1 0 8 1 amappl13 176 124 0 121 1 0 1 1 0 8 0 amappl12 168 823 0 804 2 0 2 2 0 8 0 amappl11 160 6 0 6 3 2 1 1 0 8 1 amappl10 152 91 0 87 1 0 1 1 0 8 0 amappl9 144 279 0 279 1 0 1 1 0 8 1 amappl8 136 104 0 103 1 0 1 1 0 8 0 amappl7 128 163 0 158 1 0 1 1 0 8 0 amappl6 120 155 0 155 1 0 1 1 0 8 1 amappl5 112 97 0 94 1 0 1 1 0 8 0 amappl4 104 328 0 319 1 0 1 1 0 8 0 amappl3 96 2182 0 2102 3 0 3 3 0 8 0 amappl2 88 553 0 536 2 0 2 2 0 8 0 amappl1 80 10843 0 10663 16 1 15 15 0 8 5 amappl 88 3436 0 3314 4 0 4 4 0 92 0 uvmvnodes 80 103 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 131 0 1 3 0 3 3 0 8 0 uaddrrnd 24 549 0 528 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 549 0 528 1 0 1 1 0 8 0 vmmpekpl 168 6650 0 6611 2 0 2 2 0 8 0 vmmpepl 168 44123 0 43131 87 0 87 87 0 357 34 vmsppl 488 548 0 528 5 0 5 5 0 8 1 rwobjpl 80 15622 0 14988 25 0 25 25 0 8 1 pdppl 4096 1107 0 1056 97 42 55 87 0 8 4 pvpl 32 13190 0 0 107 0 107 107 0 265 0 pmappl 256 548 0 528 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 435 0 47 12 0 12 12 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x17 panic(ffffffff8463360e) at panic+0x270 kasan_memcpy(ffff8000018c93b0,ffff8000017d9398,68) at kasan_memcpy+0x1ec sysctl_sysvipc(ffff80003371f7c8,1,200000000040,ffff80003371f7a0) at sysctl_sysvipc+0x422 kern_sysctl_dirs(33,ffff80003371f7c8,1,200000000040,ffff80003371f7a0,0,1,1ffff000066e3e70) at kern_sysctl_dirs+0x407 kern_sysctl(ffff80003371f7c4,2,200000000040,ffff80003371f7a0,0,0,ffff80003371fa10) at kern_sysctl+0x1ce sys_sysctl(ffff80003370c020,ffff80003371fa10,ffff80003371f980) at sys_sysctl+0x54f syscall(ffff80003371fa10) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc9dd6358d00, count: -9 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x19: leave x86_ipi_db(ffff800028ff3ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff854278c0) at __mp_lock+0x272 ktrsysret(ffff800045ffdca0,5b,0,ffff800029a6c9c0) at ktrsysret+0x14d syscall(ffff800029a6ca50) at syscall+0x473 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7e45c3559b50, count: 8 ddb{1}> trace x86_ipi_db(ffff800028ff3ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff854278c0) at __mp_lock+0x272 ktrsysret(ffff800045ffdca0,5b,0,ffff800029a6c9c0) at ktrsysret+0x14d syscall(ffff800029a6ca50) at syscall+0x473 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7e45c3559b50, count: -7 ddb{1}>