last executing test programs: 13.249952673s ago: executing program 2 (id=173): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x80, 0x1, 0xb46c, 0xe65c, "1134586ddc89decf4a70dfef9f2d0295fbaaaa6b", 0x4, 0x93c}) poll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x1) r1 = syz_open_pts() ioctl$TIOCSTAT(r1, 0x20007465, 0x0) r2 = socket(0x18, 0x3, 0x0) setsockopt(r2, 0x1000000029, 0x3e, &(0x7f0000000000)="5ab7776a", 0x4) r3 = socket$inet6(0x18, 0x3, 0x0) dup2(r2, r3) getsockopt(r3, 0x29, 0x2e, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f00000008c0)=0x7) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000180)=0x10) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000080)={0x80000000, 0x1, 0x2, 0x7fffffff, "a70fe37aebc8b306eaf002a53b81652e63c6b0eb", 0x7, 0x8}) 7.553423487s ago: executing program 5 (id=299): r0 = dup(0xffffffffffffff9c) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000040)={0x5116, 0x400, {0xfffffffffffffffa, 0x3}}) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0x80206910, &(0x7f00000001c0)) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) sendto$inet(r2, &(0x7f0000001240)="b7", 0xffffff31, 0x1, 0x0, 0x0) 7.437829994s ago: executing program 4 (id=304): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x7de8309, 0x2, 0x0, 0x0, 0xffffffffa22e6c7c, 0xfffffffffffffffe, 0x200000000000003}, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f00000001c0)={{0x3, 0x400000000000000}, {0x89, 0x80000}}, &(0x7f0000000300)) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]}) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="6aab0d39fa00000000000000000000009715aa25f7185fa89a94c93c7a3c453476b664559cb2bd57f8093e57c7e87382279792ed101fe9aa692a21276d832294ca2fa364a6509eb41f5ae7bbcb2ab3c877071ccc84d25a51f2067854b3a4b2263a12e526feb6eb73ee69218d", 0x6c}], 0x1, 0x4) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f0000000140)='./file0\x00', 0x100, 0x2c) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000100)={@remote, @empty, [], {@generic={0x807}}}) 7.340125154s ago: executing program 5 (id=310): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0xffffffffffffffff}, 0xe0ffffffffffffff}) r0 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) r1 = socket(0x11, 0x3, 0x0) read(r1, &(0x7f0000000100)=""/30, 0x1e) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000080)={0xf66c, 0xfffffffe, 0x7fffffff, 0xfffff51f, "3cee7cae307e08001fb91b000000da64612c3300", 0xfff, 0xfffe}) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000200)="e36495a3ac2038483e6ba4dcde", 0xd}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1ffa, 0x0) r3 = socket(0x18, 0x1, 0x0) close(r3) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) r5 = getpgrp() fcntl$setown(r3, 0x6, r5) fcntl$setown(r4, 0x6, r5) msgsnd(0xffffffffffffffff, &(0x7f0000000300)={0x1, "5879aa4c1f351e73f84f6ed3a984af95ec948bd9b8b4c31adb1331f70500"}, 0x26, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(&(0x7f0000000440)='./file1\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') unveil(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='x\x00') rename(&(0x7f0000003340)='./file0\x00', 0x0) 7.339218872s ago: executing program 4 (id=311): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) r0 = getpgrp() fcntl$setown(0xffffffffffffffff, 0x6, r0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000000002}, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r1, &(0x7f0000000000), 0x10) write(r1, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd6009000000200600030000000000000037f87ccdc0c4a92cff0000000001ea443d080000000001004e204e22", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB='[B']) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000040)="2c6a7edc62", 0x5}], 0x1) sendto$inet(r1, &(0x7f0000000140)="2f622cd42e3af598501e77579164b0452e7fc2cd8da10136783f137fa14b721d9d363a2a95b148b005ee99a72c7c2f69f72504c7f741a7fa6b5f", 0x3a, 0xa, &(0x7f0000000180)={0x2, 0x0}, 0xc) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) ktrace(0x0, 0x1, 0x0, 0xffffffffffffffff) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) write(r2, &(0x7f0000000040)="f5f7e49da201f23f7d579e7d2ed51225c1cfffb3ecb9ea43b074a0797a12b924243c3357981a6e7d8f787c7ba45ecfd44944106e0f23fc6d109d0a0b5d7be2bc4b3ccb0b3bd914d7bf6efe8f92dfeb4206d37b821d6bd5674bf38a7969389d256be4de7e2a3441b86f07235de64b72157be7e31827ee9bfe313c548c0d717bccb8ecc31e361152fdf0b8c07122b553d9a877a64ce8", 0x95) 7.214955783s ago: executing program 4 (id=316): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2}, {0x0, 0xfffffffe}, {}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x8}, {}, {0x0, 0xc8}, {0x5, 0x2}, {}, {0x3}, {}, {0x3}, {}, {}, {0x0, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {}, {}, {0x1, 0xfffffffc}, {0x406e0f656ed361f}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x57fd}]}) poll(&(0x7f0000000000), 0x200000000000002c, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000040)=0x200, 0x4) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="2a5f4cd9b73c31d629e8d68e605e5940744ef138960b671d42c56f79fcb70549247e5504e02f85a6099eff9291731e94399a7e966e783d4073ecd5dc8e540f32190bb47050aee3907495ecf7708d1c295a0836f79ba03ea13db12836c2441989726ffbf7fd1da55bfe2caaf081a1ef55599935c0e60cb0866ee48d420b77a6e269bc30b2650349e16792252c6be8bcc6e9ce2b941299ab505e4779fa1960bb7cf924dcbc53c82e76bcd80731a694d12e8a139d8ecef6f5560939054b7842d25cd7396377f39bcfe2a2383feea17b87393c92b90742631718b1877d8d83d5f66587e3e129433ead750143a4c51aa46e78e3b1a54a4634eea2846511719b1637b19ea8c96a95332abd69014f53e91a7319a36efb4052387dc6330aa00b5680142650e8dab5eb6b83ff7d0bbf1293338a8d3e8a6dcd7ed4916279eac230dda46e6fcdebe8a4c12d598883d9392da05791e153d905ce1930aebfc5dfc0fc22a88777c9fbc24c0b021189c3503466bf850f59e6649dd0b40d935ba155a9d7e065df6d90a500be9d7e1e77607d495898a8d6c9c48dda88533e75e760dceae91d670f97ebbe68b845c72eb698a9e0389b15cfe768cd4e524dbe939bc2d8363ae3b71a454a0a0378cd1f36565ab9d1b92263688195df65151ee9b8158c7a5280019a38", 0x1df}], 0x1) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$TIOCSETA(r1, 0xc4504442, &(0x7f0000000000)={0x1, 0xffffffff, 0x62, 0x0, "631f322eebb178926cc9795a6b4700", 0xfffffffc}) connect$unix(r0, &(0x7f0000000000), 0x10) r2 = socket$inet6(0x18, 0x1, 0x0) poll(&(0x7f0000000200)=[{r2, 0x4}], 0x1, 0x0) 7.091558848s ago: executing program 4 (id=318): r0 = socket(0x6, 0x5, 0x0) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000000)=0x3, 0x4) (async) recvmmsg(r0, &(0x7f00000002c0)={0x0}, 0x10, 0x801, 0x0) 7.090894296s ago: executing program 4 (id=320): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$WSKBDIO_SETKEYREPEAT(r0, 0x800c5707, &(0x7f0000000040)={0x800, 0xfffffffc, 0x1}) 5.896898898s ago: executing program 2 (id=321): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, &(0x7f00000011c0)='\x00\x00', 0x2) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f00000000c0)=ANY=[@ANYRES16=r0]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$vm(&(0x7f0000000880)={0x2, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x18, 0x1, 0x0) r2 = semget$private(0x0, 0x3, 0x80) semop(r2, &(0x7f0000000040)=[{0x1, 0x4, 0x1000}, {0x2, 0x0, 0x1800}, {0x0, 0x2}], 0x3) r3 = dup(r0) close(r3) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) open$dir(&(0x7f0000000040)='./file0\x00', 0x80, 0x44) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5f00) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) r6 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r6) r7 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r7, 0x0) ioctl$VNDIOCSET(r5, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$TIOCSETA(r4, 0xc0205603, &(0x7f0000000040)={0xe64, 0x0, 0x3, 0x8000000, "97f337576a00fdb90200", 0x2000, 0x35d0}) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) r8 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r8) 5.896453873s ago: executing program 1 (id=322): sysctl$vfs_fuse(&(0x7f0000003200)={0xa, 0x12, 0x1}, 0x3, &(0x7f0000003240)="30bda535", &(0x7f0000003280)=0x4, 0x0, 0x0) sysctl$vfs_fuse(&(0x7f0000000000)={0xa, 0x12, 0x2}, 0x3, &(0x7f0000000040)="cd8543de204d2f48b57aa8483af7bc3da9d9ec1f7880330ec2b2a8bc5d366ac21a4c1727919d109332fec695486c4f31c3e7a654e132dcd2ff6ac2c602fe005f19342c9fe8853078ca6f7463f89f28510118866f6b06b6330ad6d9e87c3a", &(0x7f00000000c0)=0x5e, &(0x7f0000000100)="044d73fd4df0085288182d89f7d1149e80f9794ee115f5f3b926748884bad0453d32ad8c8cffe93e641a106d28be0a0e89d189db390602187c2ca43464d7d5a50622c9402865ec564fd02d09c202219806367fad22fda831f53d54e86a4cbd5ff45b072fbd342d280af15d03faf281660ac0f759d08f6dfeac", 0x79) 5.880885589s ago: executing program 4 (id=324): ioctl$KDSETRAD(0xffffffffffffffff, 0x20004b43) ioctl$VT_GETACTIVE(0xffffffffffffffff, 0x40047607, &(0x7f0000000000)) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) ioctl$WSDISPLAYIO_GETSCREEN(r0, 0xc0245755, &(0x7f0000000080)={0x3, './file0\x00', './file0\x00'}) ioctl$KDDISABIO(r0, 0x20004b3d) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f00000000c0)={0x2, 0x2}) ioctl$WSKBDIO_SETMODE(r0, 0x80045713, &(0x7f0000000100)=0x1) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000140), 0x401, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00', 0x9, &(0x7f00000001c0)='./file0\x00', 0x8}) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000240)={0x1, 0x6}) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000280)={'./file0\x00', 0x39, 0x3, 0x6, 0x1, 0xffff, 0x4, 0x8001, 0x1, 0x2, 0xfffffffffffff610, 0x2}) ioctl$WSDISPLAYIO_SVIDEO(r0, 0x80045745, &(0x7f0000000300)=0x1) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x8, 0x0) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{0x0, 0x4, 0x7, 0x3ff}, {0x4, 0x8, 0x6, 0x4}]}) r3 = syz_open_pts() ioctl$TIOCSTAT(r3, 0x20007465, &(0x7f0000000400)) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) r4 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000480), 0x8000, 0x0) ioctl$WSDISPLAYIO_LDFONT(r4, 0x8058574d, &(0x7f00000004c0)={'./file0\x00', 0x2, 0x5, 0x4, 0x0, 0x7f, 0xfffffff8, 0x3, 0x1, 0x1, 0x77c, 0xcf0a}) getitimer(0x0, &(0x7f0000000540)) r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r5, 0xc014575e, &(0x7f00000005c0)={0x5b, './file0\x00'}) r6 = getpid() ktrace(&(0x7f0000000600)='./file0\x00', 0x0, 0x40000100, r6) ioctl$BIOCGETIF(r2, 0x4020426b, &(0x7f0000000640)={""/16, @ifru_metric}) close(r0) ioctl$WSDISPLAYIO_DELFONT(r5, 0x8058574f, &(0x7f0000000680)={'./file0/file0\x00', 0x5c, 0x3, 0x2, 0x1, 0x100, 0x2, 0x35, 0x2, 0x2, 0x2, 0x1}) r7 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000700), 0x10, 0x0) ioctl$SPKRTONE(r7, 0x80085301, &(0x7f0000000740)={0x40, 0x3}) dup(r4) 5.749499862s ago: executing program 1 (id=325): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]}) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="6aab0d39fa00000000000000000000009715aa25f7185fa89a94c93c7a3c453476b664559cb2bd57f8093e57c7", 0x2d}], 0x1, 0x4) sysctl$kern(0x0, 0x0, &(0x7f0000000000)="02170300000e00001a2af175e75360a2472fc39c", &(0x7f0000000080)=0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe4, &(0x7f0000000100)={@remote, @empty, [{[], {0x8100, 0x0, 0x1, 0x3}}], {@generic={0x807, "da713d87c3345fb73644c3aa67a4a0921b3573fa31a7f95bcb8f5baa03e422f2f01befbddc6cd7b87a7831c2ba9af5808b06ddf84c17749b02e8ad417ee223849804e494626e7f7d5beda0ac119421a1b87457df68cabf450522f50fbd152f9ca19ca2afe96d5fc75ed438cf4cf70f2256b65d544db5fc227eb8723d00767a3f36eeda4606df5d95d668f32f8f944342dd6b1f784091f3914713d7082a5e966e7258806c4a2c9b343ac01a62b1ec63a733fe1fba42127461ef673692289d1d2042bebc2657fcba27661a53c771e6b08afc2d"}}}) 5.747810882s ago: executing program 0 (id=326): r0 = openat$bpf(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x0) unveil(&(0x7f0000000140)='.\x00', &(0x7f00000000c0)='r\x00') ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000300)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0xffffffff}, {0x1, 0x4}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) execve(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="a91d572018dfc112b211c9b7f9dbdc4e9c7752845816984bb622d74a83050000000fd383c857ce942c438f2ea02b33f59d83749b711951efa88a2a6dcd049f666033a9f518c180b3eefaedee0d0f34a08b", 0x51}], 0x1) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x2, 0x3, 0x2) ioctl$FIONREAD(r2, 0x80206910, &(0x7f00000001c0)) syz_emit_ethernet(0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff80350015"]) acct(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000001c0)='./file0\x00', 0x4, 0x4509) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x6380) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000040)={&(0x7f0000000100)='./file0\x00', 0xffff, &(0x7f0000000080)='./file0\x00', 0x8}) r4 = dup2(r1, r1) ioctl$BIOCIMMEDIATE(r4, 0x80044270, &(0x7f0000000040)=0x3) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{}, {0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x4}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 4.73471954s ago: executing program 1 (id=327): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x450a) r0 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) pread(r0, &(0x7f0000000080)="0dced3", 0x3, 0xfff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000017c0), 0x1, 0x0) writev(r1, &(0x7f00000040c0)=[{&(0x7f0000003b00)="cc", 0x1}, {&(0x7f0000003bc0)="1b", 0x1}], 0x2) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) 4.558022593s ago: executing program 3 (id=328): pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0xd4e688a67930cd) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="94", 0xffd0}], 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @broadcast}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x20, {[@window={0x3, 0x3}, @window={0x3, 0x3, 0x5b}]}}}}}}}) close(r0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) write(r1, &(0x7f0000000680)="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", 0x1000) execve(0x0, 0x0, 0x0) 4.557595047s ago: executing program 6 (id=329): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]}) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="6aab0d39fa00000000000000000000009715aa25f7185fa89a94c93c7a3c453476b664559cb2bd57f8093e57c7e87382279792ed101fe9aa692a21276d832294ca2fa364a6509eb41f5ae7bbcb2ab3c877071ccc84d25a51f2067854b3a4b2263a12e526feb6eb73ee69218d6a80b7c46699e865aa2ace413f86393390131b0b959b49292fb667beb87538a4bb1e8dec4e400b9076e27c6c69dab5aded4678d87c6bec43047a5f28e24e4f28ee6ef8f81b79a18b", 0xb4}], 0x1, 0x4) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe4, &(0x7f0000000100)={@remote, @empty, [{[], {0x8100, 0x0, 0x1, 0x3}}], {@generic={0x807, "da713d87c3345fb73644c3aa67a4a0921b3573fa31a7f95bcb8f5baa03e422f2f01befbddc6cd7b87a7831c2ba9af5808b06ddf84c17749b02e8ad417ee223849804e494626e7f7d5beda0ac119421a1b87457df68cabf450522f50fbd152f9ca19ca2afe96d5fc75ed438cf4cf70f2256b65d544db5fc227eb8723d00767a3f36eeda4606df5d95d668f32f8f944342dd6b1f784091f3914713d7082a5e966e7258806c4a2c9b343ac01a62b1ec63a733fe1fba42127461ef673692289d1d2042bebc2657fcba27661a53c771e6b08afc2d"}}}) 4.555835551s ago: executing program 5 (id=330): writev(0xffffffffffffff9c, &(0x7f0000001140)=[{&(0x7f0000000000)="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", 0x1000}, {&(0x7f0000001000)="4581d24a4f526bbb0191ddefa699d8b6c840488acc4127a751fd36e27147ad89d43edce2f5cc02d0bfeae18216243dd7499c185a502502c30372f5d9d6943aef81d5a4a9c509aa629b95e19e6ec48a157b67281eba61734262af8a3bb74987a1104f3aa5244ba366c0b62cf329d5fa81df2c24ab0ce6ae7fa185e0aa94911a0f17da03afbd74cdde903d50995ee972c43cbd19d95483b737cf753d6d24a250c4b96b017195e45730c437c7980dc3bf7fbfb52b872acb0beab758e9c17d2a4d089b9bcb67a0dd22aa2bb87537da70361a6b8d7b25129b92c721998ba4e069f9", 0xdf}, {&(0x7f0000001100)="a4e04ccfccc84d63f575d12606f513786c62e560e90ade92e3c532e5e7b4eb5b79", 0x21}], 0x3) bind$unix(0xffffffffffffffff, &(0x7f0000001180)=@file={0x1, './file0\x00'}, 0xa) r0 = socket$unix(0x1, 0x4, 0x0) writev(r0, &(0x7f00000012c0)=[{&(0x7f00000011c0)="168af7418f788356c6726fb59a59fb9e995604148be926adfdc9b8ec0764cf0eb2b51dbd26ce51a15ad6087bcee118253c6f260095066ae9a791b1917b961f6d16842821c07d9f227f01e3e60472f89c70b467a59e28998533eedee8b141945f85b920c455286e73eecb9d6e4a65652617622cbcb4780cac26164fa5d5be25d7c83c0ffbd0a463947a161d0bfdc6d08451b747130078845e32e3a8c092a37c3155ef3506dcab9c13b214d4f23c05d87f15939ef45e6dcd6c741cc8a4776c0c08cd630b3fa89cf50ca93cbe04fae204d18b801a8af7", 0xd5}], 0x1) r1 = semget(0x2, 0x2, 0x5) semctl$SETVAL(r1, 0x1, 0x8, &(0x7f0000001300)=0x7) fcntl$setstatus(r0, 0x4, 0x4) r2 = semget$private(0x0, 0x4, 0x200) getpeername$unix(r0, &(0x7f0000001340)=@file={0x0, ""/515}, &(0x7f0000001580)=0x205) getsockopt$inet_opts(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000015c0)=""/154, &(0x7f0000001680)=0x9a) r3 = accept$inet(0xffffffffffffffff, &(0x7f00000016c0), &(0x7f0000001700)=0xc) getsockname$inet(r3, &(0x7f0000001740), &(0x7f0000001780)=0xc) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0xc) getgroups(0x3, &(0x7f0000001800)=[0xffffffffffffffff, 0x0, 0x0]) r8 = geteuid() semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000001840)={{0x2, r4, r7, r8, 0x0, 0x83, 0x8}, 0x5, 0x3, 0x95a}) r9 = semget(0x2, 0x3, 0x200) semop(r9, &(0x7f00000018c0)=[{0x2, 0x0, 0x1800}, {0x3, 0x2, 0x1000}, {0x2, 0x8, 0x1000}, {0x0, 0x9}, {0x0, 0x5, 0x800}, {0x4, 0x5, 0x1000}, {0x0, 0x1, 0x1000}, {0x3}], 0x8) r10 = open$dir(&(0x7f0000001900)='./file0\x00', 0x80, 0x10) faccessat(r10, &(0x7f0000001940)='./file0\x00', 0x1cc, 0x4) setrlimit(0x5, &(0x7f0000001980)={0xf5f, 0x6a0}) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000019c0)=""/42) r11 = openat(r10, &(0x7f0000001a00)='./file0\x00', 0x200, 0x1) ioctl$TIOCCBRK(r11, 0x2000747a) semget(0x3, 0x3, 0x511) ioctl$TIOCSCTTY(r11, 0x20007461) r12 = msgget$private(0x0, 0x286) msgrcv(r12, &(0x7f0000001a40)={0x0, ""/24}, 0x20, 0x2, 0x1000) syz_emit_ethernet(0x3e, &(0x7f0000001a80)={@local, @local, [], {@arp={0x806, @generic={0x1, 0x8044, 0x6, 0xc, 0x1, @remote, "757a2a367f571fede2efa2e2", @remote, "86c89b728c7251ef320b5967d064f4de"}}}}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000001ac0)={{0x8001, r4, r5, r8, r6, 0x144, 0xe2}, 0x9, 0x11, 0x536b}) 3.221964383s ago: executing program 7 (id=331): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)='#', 0x1}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) pwrite(r1, &(0x7f00000000c0)="a7", 0x1, 0x40007) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x2c97, 0xc9, 0x40, 0x8}, {0x6, 0x9, 0x6, 0x8}, {0x7fff, 0x5, 0x1, 0x8}, {0xfff, 0x9, 0x46, 0xe}]}) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]}) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="6aab0d39fa00000000000000000000009715aa25f7185fa89a94c93c7a3c453476b664559cb2bd57f8093e57c7e87382279792ed101fe9aa692a21276d832294ca2fa364a6509eb41f5ae7bbcb2ab3c877071ccc84d25a51f2067854b3a4b2263a12e526feb6eb73ee69218d", 0x6c}], 0x1, 0x4) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x4) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaabb001300000000080707b7e8fe82559ffd78b0802d44a4b30d34c2d6845f324591c806668e7c3ddfc873b863e0593fa46cb845254f60b2e5e5ee453ccefca68f0be739b6df000ebd837cdf59de44aead990adef069933b7df3435caaaaaa7e3321401ba1b6f73590dfdfa264f68cc68de00c14562b66ccae468869cb4d15b682c15e7622d932ba87dfb334163954fdac0b153633b89c73fc22fe65413ea6462a4c963aa7"]) 3.11850036s ago: executing program 1 (id=332): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r1 = syz_open_pts() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmmsg(r2, &(0x7f0000000600)={0x0, 0x800}, 0x10, 0x840, 0x0) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/239, 0xef}], 0x1, 0x0}, 0x40) fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x800000000000000, 0x1000300000000}) fcntl$lock(r1, 0x8, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x100000000}) sysctl$kern(&(0x7f0000000000)={0x1, 0x53}, 0x2, &(0x7f0000000380), 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x710, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x310, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x13}, 0x4, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) setuid(0xffffffffffffffff) r4 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r4, 0x80206913, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) pledge(&(0x7f0000000040)='\x00', 0x0) dup(r2) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f0000000280)=[{0x1, 0x0, 0x4, 0x7ffffffc}, {0x84, 0xff, 0x7, 0xfffffff9}, {0x6, 0x3d, 0x7, 0x20000c00}]}) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x2, 0x2, 0x8, 0x9}) write(r0, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) 3.10576169s ago: executing program 2 (id=333): setsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, &(0x7f0000000080)={0x4}, 0x8) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async, rerun: 64) chmod(&(0x7f0000000100)='./file0/file0/..\x00', 0x3a) (async, rerun: 64) setreuid(0x0, 0xee01) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 32) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) (async) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async, rerun: 32) r0 = socket(0x1, 0x1, 0x8) (rerun: 32) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000080)=0x2) (async) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) (async) munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) (async, rerun: 64) r2 = openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) syz_emit_ethernet(0xd7, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a821008100490086dd6000000000992a000000000000000000000000000000f200fe8000000000000000000000000000aa02009078010000006000000000000600fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000000000000fcb6d7a57553819f789684885f8262cd87e7e53d0f951675635194b5dc49cff8528fe1bacb94b461854ba0dc08a38cdf90337dae3d51fdd54e9dd15bfacb67e1eec6619a1cb9732295c8b262633581f299e764c70b78d6d804d370bb794d21045a"]) r3 = syz_open_pts() close(r3) (async, rerun: 32) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async, rerun: 32) r4 = openat$klog(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) write(r4, &(0x7f00000000c0)='K', 0xffffffffffffff89) (async, rerun: 64) fcntl$dupfd(r3, 0x0, r2) (rerun: 64) 3.08874156s ago: executing program 6 (id=334): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async, rerun: 32) sysctl$kern(&(0x7f00000001c0)={0x1, 0x32}, 0x2, &(0x7f0000000100)="c6e7e7fa", &(0x7f0000000280)=0x4, &(0x7f00000003c0)="05000000", 0x4) (rerun: 32) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0x1}, {0x40, 0x3, 0xfe, 0x5}, {0x6, 0x0, 0x4, 0xfffffffe}]}) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000000)={@remote, @empty, [], {@generic={0x8100}}}) 3.086518918s ago: executing program 7 (id=335): ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x800, "fc686b340da1e4795af94547bd1305d65c21963c", 0xfffffffc, 0x7}) sysctl$kern(&(0x7f0000000000)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000200)={0x4, 0x2, 0x0, 0x1e}, 0x4, &(0x7f0000000000), 0x0, 0x0, 0x0) 2.94958254s ago: executing program 0 (id=336): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]}) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="6aab0d39fa00000000000000000000009715aa25f7185fa89a94c93c7a3c453476b664559cb2bd57f8093e57c7e87382279792ed101fe9aa692a21276d832294ca2fa3", 0x43}], 0x1, 0x4) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe4, &(0x7f0000000100)={@remote, @empty, [{[], {0x8100, 0x0, 0x1, 0x3}}], {@generic={0x807, "da713d87c3345fb73644c3aa67a4a0921b3573fa31a7f95bcb8f5baa03e422f2f01befbddc6cd7b87a7831c2ba9af5808b06ddf84c17749b02e8ad417ee223849804e494626e7f7d5beda0ac119421a1b87457df68cabf450522f50fbd152f9ca19ca2afe96d5fc75ed438cf4cf70f2256b65d544db5fc227eb8723d00767a3f36eeda4606df5d95d668f32f8f944342dd6b1f784091f3914713d7082a5e966e7258806c4a2c9b343ac01a62b1ec63a733fe1fba42127461ef673692289d1d2042bebc2657fcba27661a53c771e6b08afc2d"}}}) 2.940754467s ago: executing program 7 (id=337): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000740)="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", 0x179}], 0x1) r1 = socket$unix(0x1, 0x1, 0x0) getpeername$unix(r1, &(0x7f0000000040)=@abs, &(0x7f0000000080)=0x8) execve(0x0, 0x0, 0x0) 2.939562872s ago: executing program 0 (id=338): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r1 = fcntl$dupfd(r0, 0xa, r0) ioctl$WSKBDIO_SETMODE(r1, 0x8004570b, &(0x7f00000001c0)=0x1) syz_extract_tcp_res(&(0x7f0000000080), 0x0, 0x46) (async) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) (async) r2 = open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000001840)=[{0x0, 0x5b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) (async) writev(0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async) mprotect(&(0x7f000032f000/0x4000)=nil, 0x4000, 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_extract_tcp_res$synack(&(0x7f0000000280), 0x1, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x2, 0x1, 0x0) shutdown(r3, 0x0) (async) connect$unix(r3, &(0x7f0000000000), 0x10) (async) ioctl$KDSETLED(r2, 0x20004b42, &(0x7f0000000180)=0x2) (async) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x100, 0x8) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ftruncate(r4, 0x20008002) r5 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x20000, 0x2) preadv(r5, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x1, 0x0) (async) r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) ftruncate(r6, 0x80002) (async) sendto$inet(r3, &(0x7f0000000040)="b7", 0x1, 0x7, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket(0x18, 0x3, 0x0) setsockopt(r7, 0x1000000000029, 0x9, &(0x7f00000000c0)="03000000", 0x4) 2.812155588s ago: executing program 6 (id=339): kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x39, 0x10}], 0x0, 0x0, 0x0, 0x0) (async) r0 = kqueue() kevent(0xffffffffffffffff, &(0x7f0000000140)=[{{}, 0xfffffffffffffff9, 0x5, 0x10}], 0x0, 0x0, 0x0, 0x0) (async) kevent(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=[{{r0}, 0xffffffffffffffff, 0xc1}], 0x0, 0x0) (async) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) (async) getitimer(0x7, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000003a40)=""/4096, 0x1000}, {&(0x7f0000000440)=""/4111, 0x100f}, {&(0x7f0000002a40)=""/4096, 0x1000}], 0x3, 0x3) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000400)=[{0x54, 0x1, 0x1, 0x7}, {0x30, 0x0, 0x2, 0x8f}, {0x6, 0x0, 0x2, 0x1}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async) write(r3, &(0x7f0000000080)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) (async) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) ioctl$WSKBDIO_SETENCODING(r4, 0x80045710, &(0x7f00000001c0)=0x2) (async) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="cfc8b3", 0x3}], 0x100000000000006b) utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x1}, {0x7, 0xfeed}}, 0x0) 2.810149361s ago: executing program 3 (id=340): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async, rerun: 64) symlink(&(0x7f0000000440)='./file1\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (rerun: 64) unlink(&(0x7f0000000300)='.\x00') (async) setreuid(0x0, 0xee01) setuid(0x0) unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000006c0), 0x8, 0x0) renameat(r0, &(0x7f0000000700)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) unveil(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='x\x00') (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) r1 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r1, 0xffff, 0x1003, 0x0, 0x0) (async, rerun: 32) r2 = kqueue() (rerun: 32) kevent(r2, &(0x7f0000000780)=[{{r0}, 0xfffffffffffffff8, 0x20, 0x1, 0x3, 0x7ff}, {{r2}, 0xfffffffffffffffa, 0x18, 0x1, 0x4, 0x8}, {{}, 0x8000000000000000, 0x8, 0x1, 0x8}, {{r1}, 0xfffffffffffffffe, 0x40, 0x80000000, 0x2, 0xc000000000000000}], 0x30, 0x0, 0x57f, 0x0) (async) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e) (async) execve(0x0, 0x0, 0x0) (async) kevent(r2, 0x0, 0x5, &(0x7f0000000600), 0x80, 0x0) (async) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/102, 0x66}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500a33000000000000190780000010c009078000000004500007d0000000000060000e00000017f0000210000000000"]) (async) r3 = socket(0x2, 0x3, 0xfe) bind(r3, &(0x7f0000000000), 0x10) (async) connect$unix(r3, &(0x7f0000000000), 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0xa, 0x0, 0x0) unveil(&(0x7f0000000400)='./file1\x00', &(0x7f0000000480)='r\x00') 2.802999772s ago: executing program 0 (id=341): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VNDIOCCLR(r0, 0x80384601, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00', 0x200000000, &(0x7f00000001c0)='./file0\x00', 0x8}) (async, rerun: 64) ioctl$VNDIOCGET(r0, 0x81946467, &(0x7f00000006c0)={'./file0\x00'}) (async, rerun: 64) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r1, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x16}, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$ddb(&(0x7f0000000000), 0x2, 0x0, 0x0, &(0x7f0000001080), 0x34) (async, rerun: 64) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) (rerun: 64) r3 = dup(r2) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000100)={0x2}) (async) r4 = socket(0x18, 0x2, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f000013d000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f000063a000/0x4000)=nil, &(0x7f000013c000/0x4000)=nil}, {&(0x7f0000590000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xfffffffffffffffc}, {&(0x7f000048b000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f000069d000/0x4000)=nil, &(0x7f0000049000/0x3000)=nil, 0x2}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00003d7000/0x4000)=nil, &(0x7f0000159000/0x4000)=nil}, {&(0x7f00003ee000/0x2000)=nil, &(0x7f0000729000/0x1000)=nil}, {&(0x7f000015b000/0x3000)=nil, &(0x7f00004f6000/0x3000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f000013e000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f00005fd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x5}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000696000/0x1000)=nil, &(0x7f0000620000/0x3000)=nil, 0x1000000000}], './file0\x00', 0xfffffffc}) (async) close(r4) (async) r5 = socket(0x800000018, 0x1, 0x0) bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) r6 = socket(0x800000018, 0x1, 0x0) bind$unix(r6, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) 2.801610854s ago: executing program 6 (id=342): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) dup(r1) (async) ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f0000000100)=0x7) (async) truncate(0x0, 0x6000000000) (async) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000240)=0x1) (async) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) write(r0, &(0x7f0000000140)="7f23a3c23cce2575e1dd92c25678", 0xfef3) (async) r2 = syz_open_pts() open(&(0x7f0000000040)='./file0\x00', 0x20000, 0x8d) (async) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000300)="406f0506", 0x4}], 0x1) (async) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000200)=0x3) (async) execve(0x0, 0x0, 0x0) 2.711545663s ago: executing program 5 (id=343): madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$net_pipex(&(0x7f0000000040)={0x4, 0x23, 0x2}, 0x3, &(0x7f0000000640)="302e753581bc421c593ef8120eecd00e82a8b785a787c7bd685beb0f915e3cbf88ef8a70391c29fd93bfe4515dba996214183e93ada1b807e8ca3e6db5379c37ab1484d1d0c2d5bed41b9c1973420eda5a5e4560a131eaf8bcff21bf53d360b44abf4faa180facdf370c8b2040c77998ce453bdf713abd72c1f67eb8d798eb7db31bcf542bc2c3deff2c8ba501b0dcfa8cff000001000000000064b7d468e50b4d", &(0x7f0000000200)=0x9c, &(0x7f0000000700)="0722afac364705a10ab9d9939e06279c361c318bd0c1c3499ff3a10c1fd2bcdfb69081bbf4be540296b9d89ccae89b0aab626ccf348d609ce587e77eb0f03540f23787696880bf0a0f3a32c1da63671a4ba02aaa0789d35a46b0a4753bd727530daeeab61b6338f3e172d52a39d78bb881eacbf2d832769eb65b45b518f81d78afd31d1453a3aad76ed99f1d217183fc5613c961e85941fdbfa7503c10eeae202260a8651355fc3a17c15d3ce8525b1b65e9836b7b6cc8acecf503cfec0f071e174b16be54a427f5fcbb3c0e4baff4e8f5bef1ae67bed2df6ca9abe6727d55b66e29c39f4beb83abd2a89d189866a09f83f0e6d8", 0xf4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}}, 0x3, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x9) getsockname(r1, &(0x7f0000000580)=@in, 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r2, &(0x7f00000005c0)="8f670dd2cb2ec4", 0x7, 0x1, &(0x7f0000000600)=@abs={0x1, 0x0, 0x1}, 0x8) 2.709330351s ago: executing program 2 (id=344): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]}) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="6aab0d39fa00000000000000000000009715aa25f7185fa89a94c93c7a3c453476b664559cb2bd57f8093e57c7", 0x2d}], 0x1, 0x4) sysctl$kern(0x0, 0x0, &(0x7f0000000000)="02170300000e00001a2af175e75360a2472fc39c", &(0x7f0000000080)=0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe4, &(0x7f0000000100)={@remote, @empty, [{[], {0x8100, 0x0, 0x1, 0x3}}], {@generic={0x807, "da713d87c3345fb73644c3aa67a4a0921b3573fa31a7f95bcb8f5baa03e422f2f01befbddc6cd7b87a7831c2ba9af5808b06ddf84c17749b02e8ad417ee223849804e494626e7f7d5beda0ac119421a1b87457df68cabf450522f50fbd152f9ca19ca2afe96d5fc75ed438cf4cf70f2256b65d544db5fc227eb8723d00767a3f36eeda4606df5d95d668f32f8f944342dd6b1f784091f3914713d7082a5e966e7258806c4a2c9b343ac01a62b1ec63a733fe1fba42127461ef673692289d1d2042bebc2657fcba27661a53c771e6b08afc2d"}}}) 2.704730591s ago: executing program 3 (id=345): socket$inet6(0x18, 0xe, 0x0) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x1, 0x10000000000001}}) (async, rerun: 32) syz_emit_ethernet(0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="fffd640000000000000000000a"]) (async, rerun: 32) sysctl$kern(&(0x7f0000000000)={0x6, 0xb}, 0x5, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) (rerun: 64) accept$unix(r0, 0x0, &(0x7f00000001c0)) (async) getsockopt$sock_int(r0, 0xffff, 0x1007, &(0x7f0000000280), &(0x7f0000000580)=0x4) sysctl$kern(&(0x7f0000000000), 0x2, &(0x7f0000000080)="c5898ae1bf033a614c683da9fa04ed61bf103f0099f238047079de427da91e781bd1", &(0x7f00000000c0)=0x22, &(0x7f0000000140), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) setitimer(0x0, &(0x7f0000002400)={{}, {0x3}}, 0x0) (rerun: 32) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x11, 0x1, &(0x7f00000000c0)="14e63adf", 0x4) (async, rerun: 64) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{}, 0xffffffffffffffff}) (async, rerun: 64) r2 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$FIONREAD(r2, 0x8040691a, &(0x7f00000001c0)) chdir(&(0x7f0000000240)='./file0\x00') (async) r3 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000040)='#!', 0x2}, {&(0x7f0000000200)="00ca4ff5", 0x4}], 0x2) (async) r4 = socket(0x2, 0x1, 0x0) ioctl$TIOCCDTR(r3, 0x20007478) (async) setsockopt$sock_int(r4, 0xffff, 0x1021, 0x0, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 2.703812117s ago: executing program 7 (id=346): r0 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f0000000000), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9, 0x404}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$VMM_IOC_CREATE(r2, 0xc2585601, &(0x7f00000003c0)={0x10, 0x7, [{&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x4}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x6}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x800}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x4}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x6}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x77e}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x1ff}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0xffffffff}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x8}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x100000000}], './file0\x00', 0x2}) sendmsg(r1, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) r3 = socket$inet(0x2, 0x4, 0x5) write(r3, &(0x7f00000000c0)="38424e3162345604ad7adba65d51b7e6bfef52db8e901ce18ea282b15d9daa00aa4202d25b177e4925a28c37756b93292228fc9e4d59fb4791ede2c976f33e04565a5c9c15", 0x45) 2.703182882s ago: executing program 2 (id=347): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x41, 0x0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f00000010c0)=[{r2, 0x4}], 0x1, 0x4) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r3, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) setsockopt(r1, 0x0, 0x9001, 0x0, 0x8df) fsync(r1) openat$wsdisplay(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket(0x1, 0x2, 0x0) mknod(0x0, 0x2000, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r5 = syz_open_pts() close(r5) r6 = syz_open_pts() ioctl$TIOCSETAF(r6, 0x802c7416, &(0x7f0000000100)={0x40978b, 0xffff, 0xfffffc00, 0x80a19d, "bb08f9460080685910508b00"}) writev(r5, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) ioctl$TIOCCBRK(r4, 0x2000747a) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) sysctl$net_inet_ip(0x0, 0x0, &(0x7f0000000100)="d7a8aac106fa1bee91c724b89283c1477dab85e783af4189a1eaf5f6e8251b1147b330f604ff639b9acd6202c9d8", 0x0, 0x0, 0x0) socket(0x1, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r2, 0x8020697a, &(0x7f0000000000)) r7 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r7, 0xc0106924, &(0x7f00000001c0)) socket(0x18, 0x3, 0x4) socket(0x18, 0x4000, 0x0) 2.576222554s ago: executing program 3 (id=348): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) chmod(&(0x7f00000000c0)='./file1\x00', 0xb8) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getuid() clock_gettime(0x3, 0xfffffffffffffffe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(r1, 0xc0205609, &(0x7f0000000280)={0x2, 0x0, {[0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xd094, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x4], [0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x6, 0xf615], [0x471b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2], [0x6a4, 0x0, 0x104, 0x0, 0x0, 0x1], [{0x800}, {0x3, 0x57e, 0x4}, {0x0, 0x0, 0x0, 0x4}, {0x4f7f, 0x57, 0x80003e8}, {0x0, 0x3, 0x101, 0x7}, {0x0, 0xffff05da, 0x40, 0x10000}, {0x0, 0x100000}, {0xaf7d, 0x8}], {0x0, 0x78, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0x0, 0x3}}}) socketpair(0x2, 0x1, 0x1, &(0x7f0000000000)) fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x2, 0x1, 0x8000003, 0x269000000}) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x12}, 0x4, &(0x7f00000000c0)="9b180bc3", &(0x7f0000000000)=0x4, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) r3 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x269000000, 0xffffffffffffffff}) setreuid(0x0, 0xee01) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) setsockopt$sock_int(r4, 0xffff, 0x1002, &(0x7f0000000000), 0x4) mknod(&(0x7f0000000080)='./file0\x00', 0x1ffa, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffbfffff, 0x100, {0x800000000000000, 0x3}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x18, 0x1, 0x0) setsockopt(r5, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r5, 0x1000000029, 0xd, &(0x7f0000000080)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r4, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0x0) unveil(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='c\x00') 2.575671023s ago: executing program 5 (id=349): sysctl$vfs_nfs(&(0x7f0000000140)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000000)="ee4600bace677da7b76a0036c098fa6a5079220ce4e117eb75b23ee45f9852a756ff7369baa8994dba1698a0af182635ec1b64d0d87ced5de9d48138ee6490c0cbc16c163a4c47026c0d897b32135f7282e18d151e1ed0abb00321d7bc5d10c8a5963ab7beb04e9a3a66cc1baf41b61f7c4188d7d194193156d327bdfd46d02253195585dcfd31c671d738ad64da041f41040305eea64fed5678a8e3772b4bc060cdc0ccbec3f97343fb4639c6c01b29316c4fd5e7fc7449c554488068f6de", &(0x7f0000000740)=0x1, 0x0, 0x4c) setreuid(0x0, 0xee01) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) unveil(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='x\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x14}, 0x40000188, &(0x7f0000000100)='D\x00\x00\x00', &(0x7f0000000000)=0x4, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000002000, 0xffffffffffffffff}) semop(0x0, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xb44e, 0x0, {0x0, 0x4000000000000003}}) socket(0x2, 0x2, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x0, &(0x7f0000000240)}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) ioctl$BIOCFLUSH(r0, 0x20004268) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]}) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="6aab0d39fa00000000000000000000009715aa25f7185fe700000000", 0x1c}], 0x1, 0x4) sysctl$kern(0x0, 0x0, &(0x7f0000000000)="02170300000e00001a2af175e75360a2472fc39c", &(0x7f0000000080)=0x14, 0x0, 0x0) mprotect(&(0x7f00001ad000/0x4000)=nil, 0x4000, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[]) sysctl$vfs_nfs(&(0x7f0000000200)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000440)="f6b4d3fa2e72ee7cc9f10b65aaee4bc1c3e300d54b7529b66d77339f008892c16aead43d05abcc6975d17092f58ed35cf70ae7fffef736777c880a4219c7e6e734cfc87c070852acb180b4cfe0b0f0f70e2ce8ed6625badae185b491ed4a8057ce9c41b5fb88088dbb5a8a3377bcc0c2eb1ebd7f1f8198baebef07ad7228a97cab9719295a84ad3b368ea4d884920715fb3fe6c2e03567e51adfb6d43782", &(0x7f0000000280)=0x9e, &(0x7f0000000380)="356a3c27f5bb871a0c1e046b7bfa3cba062efa2ed4baf83ace54ffc474609c2a32baf07f7f5231cd69e0ad3794052a61b6985e451eddc0f6094ef908a6836b601b220c66e6abca81614d35d5da1d95d2eceb5839ffdbf5a41055040e08e1b1744f45adf531c198cee5aae3d3686c6ae9f73aba79b359885966625ba3b0f2a1900f8a102e69d5cb08417728881559107169045a96f800ee99f86eac", 0x9b) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x200}, 0xffffffffffffdffe, 0x0, 0x200000}) r2 = socket(0x18, 0x2, 0x0) close(r2) r3 = socket(0x18, 0x1, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000140)="22d1637cc610dd1b33e0888caa018de784b1a7aa7394bec254f41aa9a5d37d7a092d1df8405befefff0c8d841f8ce88686ad83a976512952b90c9a0a0f58bc16d43b3a96ccc87600a5727afd796a85629bb0b73f06ce210896f544f22d3ccaf4ca382bf9c82cd0723521a3398d3487b2aac8285579d7fc5833a6b550c9565c1344d86b93e9f4b593d060360353cb158d025e", 0x92, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r3, 0x801169ab, &(0x7f00000001c0)) 2.574816479s ago: executing program 3 (id=350): syz_emit_ethernet(0x0, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) (async) sysctl$net_inet_carp(&(0x7f0000000000), 0x4, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_pts() close(r0) sysctl$hw(&(0x7f0000000340)={0x6, 0x18}, 0x2, 0x0, 0x0, &(0x7f00000002c0)="d6000000", 0x4) (async) openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) poll(0x0, 0x0, 0x805) (async) mknod(0x0, 0x80, 0x202) (async) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f00000000c0)={0x9, 0x5, {0x2, 0xffffffffffffffff}}) (async) syz_open_pts() (async) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) readv(r2, &(0x7f0000000380), 0x0) (async) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000400)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943ae4bb757a5bf3644e12d4a9dc532d6fa584a55658a6ace3950b7fa6aa9f3a8deb8067262948dad4d93dc58a450c76", 0x50}], 0x1) (async) r3 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = dup(r4) ioctl$BIOCSBLEN(r4, 0xc0044266, &(0x7f0000000100)=0x8) (async) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async) syz_emit_ethernet(0x32, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0806000f806d06000003000000000000aaaaaaaaaaaa9c06585b33a47ff96ea4fd077126f54a"]) ioctl$BIOCSRTIMEOUT(r5, 0x8010426d, &(0x7f0000000300)={0x8, 0x4}) (async) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000000040)=""/17, 0x11}], 0x2) (async) setreuid(0x0, 0xee01) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) (async) execve(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) (async) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000280)={&(0x7f00000001c0)='./file0\x00', 0x8, &(0x7f0000000240)='./file0\x00', 0x8}) (async) syz_emit_ethernet(0x400e, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa7011f5b3752786dd60756899000c3aebfb0300000000000053000000000000bbfe7100000000001000000000000000aac8"]) 2.475954578s ago: executing program 7 (id=351): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]}) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="6aab0d39fa00000000000000000000009715aa25f7185fa89a94c93c7a3c453476b664559cb2bd57f8093e57c7e87382279792ed101fe9aa692a21276d832294ca2fa364a6509eb41f5ae7bbcb2ab3c877071ccc84d25a51f2067854b3a4b2263a12e526feb6eb73ee69218d6a80b7c46699e865aa2ace413f86393390131b0b959b49292fb667beb87538a4bb1e8dec4e400b9076e27c6c69dab5aded4678d87c6bec43047a5f28e24e4f28ee6ef8f81b79a18b372eff2eb112", 0xba}], 0x1, 0x4) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe4, &(0x7f0000000100)={@remote, @empty, [{[], {0x8100, 0x0, 0x1, 0x3}}], {@generic={0x807, "da713d87c3345fb73644c3aa67a4a0921b3573fa31a7f95bcb8f5baa03e422f2f01befbddc6cd7b87a7831c2ba9af5808b06ddf84c17749b02e8ad417ee223849804e494626e7f7d5beda0ac119421a1b87457df68cabf450522f50fbd152f9ca19ca2afe96d5fc75ed438cf4cf70f2256b65d544db5fc227eb8723d00767a3f36eeda4606df5d95d668f32f8f944342dd6b1f784091f3914713d7082a5e966e7258806c4a2c9b343ac01a62b1ec63a733fe1fba42127461ef673692289d1d2042bebc2657fcba27661a53c771e6b08afc2d"}}}) 2.474919974s ago: executing program 0 (id=352): clock_gettime(0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x3, 0xffffffff) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x2, 0x4) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000280), 0x1, 0x0) read(r2, &(0x7f00000001c0)=""/176, 0xb0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setegid(r5) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0xffffffffffffffff, r5, r4, 0x0, 0x49}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x207}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) writev(0xffffffffffffffff, 0xffffffffffffffff, 0x9) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$TIOCSFLAGS(r6, 0x8004745c, &(0x7f0000000040)) r7 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) readv(r7, &(0x7f0000000ac0)=[{&(0x7f0000000080)=""/31, 0x1f}], 0x1) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffffffffffffff8035000108000604"]) r8 = socket(0x18, 0x3, 0x0) setsockopt(r8, 0x1000000029, 0x2e, &(0x7f00000000c0)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r8, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) r9 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r9, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) syz_emit_ethernet(0xdd, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000cf000000000011907800000000ffffffff4e214e23", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="20200100907804000402000008000000090000000300000007000000078000000100000002000074900000000000000600000005001fbb0076a3902a8bbba47f4b159c6fe766d829cb797d4256c9986cd8071bad4184219f2d80d7c3c023657855d07726fa68611289c5026bd40004320cbc04a643eecd811d32e764e9bdf7aee1427adcbbc6eddf7bf7ffff7100209baba61bd90f5d5213e80d4a81ef2e93ef34559e335391496100000000000000"]) 2.472246515s ago: executing program 2 (id=353): r0 = socket$unix(0x1, 0x5, 0x0) getsockname$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000080)=0x94bf) r1 = dup2(r0, r0) faccessat(r1, &(0x7f00000000c0)='./file0\x00', 0x110, 0x2) syz_emit_ethernet(0x98, &(0x7f0000000100)={@local, @remote, [], {@ipv4={0x800, {{0x17, 0x4, 0x3, 0x3, 0x8a, 0x64, 0x7, 0x5, 0x8, 0x0, @loopback, @empty, {[@rr={0x7, 0x1b, 0x5, [@empty, @rand_addr=0x10001, @rand_addr=0x8f, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @broadcast]}, @generic={0x89, 0x3, "e3"}, @ssrr={0x89, 0x1f, 0xff, [@empty, @broadcast, @broadcast, @loopback, @empty, @empty, @empty]}, @end, @end, @ra={0x94, 0x6, 0x8}, @end, @end]}}, @generic="4f1a0aba3109709f7da64e5bf2fa9604c4e4cc4f8cddf98b120ff1fa2c9e1a1024644f2dace8ceea21c0003ed425"}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000200)=0xa) mknod(&(0x7f0000000240)='./file0\x00', 0x1000, 0x2) setsockopt(r1, 0x9, 0x9, &(0x7f0000000280)="f3735b46369b6e5f6f6a512f73060ae7c506bd5d173854e2ae9bb7ede5fed59251f88509e725a317af95ff1a1dba7e0cebcd78cbf07637b0e35e5e8028f3c8cc9da4143992ba58dfeefca64730f49899e56136dc61f3f87eb7d145618c2501ff7fd5c9a21484600e1efad001cabdfeb7b7cbbd1f6655581539d07adc2e677212268615847a3e609627da4817195ebd75007f8ef1e2ca0caafbcff6fd96ad435de2b2211aef7e1de14659192b045f55e60cf7fc5b", 0xb4) shutdown(r0, 0x1) openat$pci(0xffffffffffffff9c, &(0x7f0000000340), 0x8, 0x0) fchflags(r2, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000380)="a771b7e05a24192c7c4313e63b353aa692e5c72eb264146d32da95f9f9ef6c0385c1c9dff88c230063c676458ff91643b6869f3d276e8f5a1ee871050fb9a9eee7b580cbd7cffc3080e38d95e7884da137c4604137e28c453c19f52bfbdfe40d957ee53eef69304da34cdac1a91f08", 0x6f, 0x1, 0x0, 0x0) ioctl$VMM_IOC_CREATE(r1, 0xc2585601, &(0x7f0000000400)={0x10, 0x80000001, [{&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x8000000000000001}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fed000/0x12000)=nil, 0xac}, {&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x3}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff7000/0x9000)=nil, 0x9}, {&(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x9}, {&(0x7f0000ff4000/0x1000)=nil, &(0x7f0000fea000/0x4000)=nil, 0xf}, {&(0x7f0000fee000/0x4000)=nil, &(0x7f0000fee000/0x1000)=nil, 0xcba}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000feb000/0x3000)=nil, 0x3}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x8}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0xa000)=nil, 0x8}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fef000/0x4000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8}, {&(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, 0x7}], './file0\x00'}) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000600), 0x8, 0x0) r5 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000680), 0x40, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000006c0)={&(0x7f0000000640)='\x00', r5}) r6 = accept$unix(r2, &(0x7f0000000700)=@abs, &(0x7f0000000740)=0x8) flock(r6, 0x9) ioctl$DIOCMAP(r4, 0xc0106477, &(0x7f00000007c0)={&(0x7f0000000780)='./file0\x00', r3}) socket$unix(0x1, 0x5, 0x0) mknod$loop(&(0x7f0000000800)='./file0\x00', 0x8, 0x1) pwrite(r4, &(0x7f0000000840)="780d6cdf4cf9364934c27e9358931cdda85eb8460b4e13bd5da0f73fe05f454c215a0b541816626b8a557f952418eaa52c6d", 0x32, 0x7) socket$inet6(0x18, 0x5, 0x9) open$dir(&(0x7f0000000880)='./file0\x00', 0x2, 0x29) r7 = dup(r2) mknodat(r7, &(0x7f00000008c0)='./file0\x00', 0x20, 0x4) readv(r1, &(0x7f0000000980)=[{&(0x7f0000000900)=""/118, 0x76}], 0x1) setsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f00000009c0)=0x400, 0x4) 1.437289151s ago: executing program 6 (id=354): r0 = msgget$private(0x0, 0x0) setreuid(0xee00, 0x0) r1 = getuid() open(0x0, 0x0, 0x0) setreuid(0x0, r1) msgrcv(r0, 0x0, 0x0, 0x3, 0x1000) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0xf4, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) kqueue() msgctl$IPC_RMID(r0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x6}], 0x1, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 1.221988399s ago: executing program 7 (id=355): socket(0x2, 0x2, 0x0) (async) r0 = socket(0x2, 0x2, 0x0) open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) sendto(r0, &(0x7f0000001400)="c8fd9d53cfb7d064d79b0a62ccac2a907db625916fa706d7258a4dc21d52c3a9c9ecb4ddfc7536c025e552", 0x2b, 0xf, &(0x7f0000001440)=@in={0x2, 0x0}, 0xc) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x3, 0x5, 0x6, 0x6c0}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x3, 0x5, 0x6, 0x6c0}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$TIOCSETA(r1, 0xc0104419, &(0x7f0000000200)={0x400, 0x0, 0x20000000, 0x0, "00a2224ff1004684d30000000500006b8444d100", 0x9, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) open$dir(&(0x7f0000001200)='./file0\x00', 0x20, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) preadv(r2, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/93, 0x5d}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/52, 0x34}, {&(0x7f0000001280)=""/249, 0xf9}, {&(0x7f0000001180)=""/111, 0x6f}], 0x6, 0xead) (async) preadv(r2, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/93, 0x5d}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/52, 0x34}, {&(0x7f0000001280)=""/249, 0xf9}, {&(0x7f0000001180)=""/111, 0x6f}], 0x6, 0xead) ioctl$TIOCCHKVERAUTH(r4, 0x2000741e) ioctl$FIONREAD(r4, 0x800c745b, &(0x7f0000000080)) (async) ioctl$FIONREAD(r4, 0x800c745b, &(0x7f0000000080)) 1.221479517s ago: executing program 1 (id=356): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffbfffff, 0x100, {0x800000000000000, 0x3}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x8025, 0x3ff, &(0x7f0000000080)="ebffcb0014b9fd812eaa4e713048e69931929648", 0xfffffffffffffe24) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 1.221157577s ago: executing program 3 (id=357): r0 = socket$inet(0x2, 0x4003, 0x0) sysctl$hw(&(0x7f0000001440), 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) (async, rerun: 32) sysctl$hw(&(0x7f00000004c0)={0x6, 0x7}, 0x2, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="455606d67a9be38142dcd7f2555ca6efc2d1f0fcb86bc1bb93efb7af2e83957e26f5c7c6f8e3e209225e5a83798ce28afc0cc2203fe3e3c7f6d1fec20c58ac573600d60dbd49289216170ddde51c5df0e00ec9b82d2346391c780ae583271036352e1865d9132d8b45df9d04ab4b83b09a307746e21306ddd4ae60c7679aa1bbdca0b04d4ea383324c67a3f0e25c608a5428679f680f59f91c3185d9c08486289005076349e7b97436873dc69ce0b2269edf56d0e86fed0bfed6c4ffa3b4bdc30752fd655d532f28c9f688a90c9358533b71b1c9a9d119b52bbc0140", 0xdc) (async, rerun: 32) mprotect(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x4) (async) sysctl$hw(&(0x7f0000000340)={0x6, 0x16}, 0x2, &(0x7f0000000380)="7cefb98616c619ee610fadf6a4702b888794186b0a10503c4b7dd5bea6598cef4d251281f76584fddd960f82698f0287b58010047d96bc21b0530c707f4979fce00a7e49b4c5", &(0x7f0000000400)=0x46, &(0x7f0000000440)="a82162ef4bed3537c2eba2aa8fa43d591bc3e83ab33a1c4c176530cc5885875cd0e2d4297a9aaca475d6393f024288f5654d5f2882376c29818c371e66437a9da285b319a22766526d2e2ec0ac51bad3f08e1b", 0x53) sysctl$kern(&(0x7f0000000040)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000001440)="cca410df", 0x4) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000300)={&(0x7f0000000180)=[{0x7, 0x9}, {0x2, 0x4}], 0x2}) (async) setsockopt(r0, 0x0, 0x5, 0x0, 0x0) (async) r2 = socket(0x11, 0x3, 0x0) (async) r3 = socket(0x11, 0x3, 0x8) sendto$unix(r3, &(0x7f0000000100)="b10005016000009f05000e0007000000001813fecea10500fef96ecfc72fd3357ae302b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af6300372821020000000000008bfbb770c116a972c881ea772ec5890400000000ff0000361b1257aea8c500002002fbff0c1300008a09000000000008e37195f800040700000080042000"/177, 0xb1, 0x0, 0x0, 0x0) (async) sendto$unix(r2, &(0x7f0000000040)="b1000501000000ae05000701070000000000000000000500fef96ecfc72fd335feffffffffffffffd2d236acf20bf404be01000000f7c8cf5f882b297be1aa050400ce94e2f0ad3ebbc257e4411f139b672f335c22db830c032bfa896443c321182100df720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300000100be1f25a2e791505c47f8343712cc1100000000000080000000007f62b60be8b900"/177, 0xb1, 0x0, 0x0, 0x0) (async) setsockopt$sock_timeval(r2, 0xffff, 0x1005, &(0x7f0000000000)={0x800000006, 0x3}, 0x10) sysctl$kern(&(0x7f00000001c0)={0x1, 0x8}, 0x2, &(0x7f0000000200)="8c0063a31b7addd2ab02819dc03b8eb8b3c652277d0f9565a9c4bc10c87836551009b198e1e618030c27abc47af02517612be7e5fcfaa2429c", &(0x7f0000000240)=0x39, &(0x7f0000000280)="0ad795b556242d7af4257d64a8483c226ef3316fc6e4c973878b561de11f0c38b932e681de95d05d0ef1304c15c6e0e195abef4cc6537da7be763abba200b1a8170761b9f039d4bbb763f693868c58d85b254e4853a941679f89b94a7c8cc889a8cf59b96d3d55410061b63a60731aacc8b7997c64", 0x75) 55.957455ms ago: executing program 5 (id=358): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b100050300000400000000000101000000000000cea10500fef96ec0c72fd3357ae30200007804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3eea3c57699a6443a42102000000720fd18b08fbb670c1f5a872c803006e2ec58904000000000080fbfe0c2300008abfba0900000008e371a3f8343732051eeab71d89e0000405f8ffffff1300000001000000aa5ac30a874bcbe4d9000000fcffffff00000000000000000000000008000000", 0xb1, 0x0, 0x0, 0x0) (async) sendto$unix(r0, &(0x7f0000000000)="b100050300000400000000000101000000000000cea10500fef96ec0c72fd3357ae30200007804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3eea3c57699a6443a42102000000720fd18b08fbb670c1f5a872c803006e2ec58904000000000080fbfe0c2300008abfba0900000008e371a3f8343732051eeab71d89e0000405f8ffffff1300000001000000aa5ac30a874bcbe4d9000000fcffffff00000000000000000000000008000000", 0xb1, 0x0, 0x0, 0x0) r1 = fcntl$getown(r0, 0x5) r2 = getuid() setreuid(0xffffffffffffffff, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000180), &(0x7f0000000140)=0xc) (async) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000080)='./file1\x00', 0x0, r4) (async) chown(&(0x7f0000000080)='./file1\x00', 0x0, r4) r5 = getuid() getgroups(0x1, &(0x7f0000000280)=[0x0]) getpid() (async) r7 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, r7) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, r7) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000002c0), 0xc) (async) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0}, 0xc) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r11, 0xffff, 0x1022, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) getsockopt$sock_cred(r11, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) chmod(&(0x7f0000000580)='./file2\x00', 0x40) setregid(0x0, r12) setregid(0x0, r12) sendmsg$unix(r0, &(0x7f0000000500)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000000240)=[{&(0x7f0000000100)="38b1c58998fae12aab6f330ca38329c417", 0x11}, {&(0x7f0000000140)="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", 0xfb}], 0x2, &(0x7f0000000400)=[@cred={0x20, 0xffff, 0x0, r1, r2, r4}, @cred={0x20, 0xffff, 0x0, 0xffffffffffffffff, r5, r6}, @cred={0x20, 0xffff, 0x0, r7, r8, 0xffffffffffffffff}, @rights={0x28, 0xffff, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x20, 0xffff, 0x1, [r0, r0, r0]}, @cred={0x20, 0xffff, 0x0, r9, r10, r12}], 0xc8, 0x4}, 0x407) 982.432µs ago: executing program 6 (id=359): sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) r0 = socket(0x2, 0x4001, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/236, 0xec}, 0x0) (async) sendmsg(r1, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) (async) r3 = dup(r0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r4) (async) r5 = dup2(r3, r4) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xe, 0x0, 0x37) (async) sysctl$kern(&(0x7f0000000300)={0x2, 0xc}, 0x2, 0x0, 0x0, &(0x7f0000001440), 0x0) (async) r6 = socket(0x11, 0x3, 0x0) sendto$unix(r6, &(0x7f0000000000)="b100050300000400000000000101000000000000cea10500fef96ec0c72fd3357ae30200007804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3eea3c57699a6443a42102000000720fd18b08fbb670c1f5a872c803006e2ec58904000000000080fbfe0c2300008abfba0900000008e371a3f8343732051eeab71d89e0000405f8ffffff1300000001000000aa5ac30a874bcbe4d9000000fcffffff00000000000000000000000008000000", 0xb1, 0x0, 0x0, 0x0) (async) r7 = socket(0x11, 0x3, 0x0) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) (async) setreuid(0x0, 0xee01) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x40001ff, 0x0, {0x0, 0x3}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = socket(0x18, 0x1, 0x0) setsockopt(r9, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r9, 0x1000000029, 0xb, &(0x7f0000000000), 0x0) (async) fchflags(r8, 0x0) (async) accept$unix(r7, &(0x7f0000000600)=@abs, &(0x7f0000000640)=0x8) sendmsg$unix(r7, &(0x7f00000006c0)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000580)=[{&(0x7f0000000180)="1ac05932cb9f18af944f419ae6e4e86465adb065d43a4f1b54a104885d966caa29ea6a8940460dac115238f0c00237268772508c6a5d035391c9e69b271105454ccab12515335adc5b9fd12f603399a68ad01c8599f03999d11c3016a61a0de3e449a6c2940b8cb852088be4a401981277c7f6657de2cc50f787d7fc9a2c1d2de89971ab5eb6868170df3c22142ec4d40dfc23c1d2995fef2385c06640256fad93c5d79c05ac", 0xa6}, {&(0x7f0000000280)="163886db8819b396815e00cf077b088e4891ce0c6a46a8da948b0d7af17e2207390e66dbbf39d0a67d4ec9669ed97b3b9a70e82223a2d9c65ba5f68e9974", 0x3e}, {&(0x7f00000002c0)="1f83ae34917d8918dc20a9ee6f178c7f3da796ebb8a1c73378e927ec80f18295fc6740fa997f70ebfd5fa75ca6281c", 0x2f}, {&(0x7f0000000740)="df44639da5393d3a9b968e9472ab5ed56f5fb6d39b4cd39b6fad101f9b40c4ae0e8d2cd121e9199d57a71c7c306532a5104a011bc3f86a0a124e44e223b169a89e2d60985390d3cfc74a595be7b1789fd61d9fc664f3e05e538faebd15c70db4e2fd3ba082daced5f8c1bc02f70c79b184a7eea0a22a652a0fd7a2f893", 0x7d}, {&(0x7f0000000340)="47f7b1a7af627325f1135f77ee0c2068", 0x10}, {&(0x7f0000000700)="d535346510e9d0c0af954c0a34d6499883df7be44f82", 0x16}, {&(0x7f00000003c0)="bc54c55a8914e3ff8cb55fa6ed81b5efe52ffa435af069ff6419826a3b252157b32d9fa8a47f424a4fba5d15bb95604f6694192ab3b73095dbd66d9fb6f622fd643db94aa69c0b23f9962c3686c22acdea143688ab2eaa6c7ac36eaf6ecaa4ef4c2f46940e3e49d3d2718d8ab7a4b46fd408bd63033e9490390634e758f9eb2f837fd598c544efd0c1960ae04b587eaf676d1f8125d9b071cac498e8b0192f42be53add1c2e48a4bd44ccd7cd9e67fd3c332c9afb00723edfd0a0ea0b8855a4dd5c55c5df57ce42088e6", 0xca}, {&(0x7f00000007c0)="5d95f65113611bb50c05840d4d534f959818e8063f830c4937b7b3dfd5e9e6767e7ebc7a419eea4e38bd27da7bddd6c81178afc18030c20ee5f30a71a4a90506b7cb1d8605b56b08a07a045526e28a9fbbfd0d6f99a84cb015c07b9d8103cf3e946a9876914960a0a2032303252680a01a6e687da2f78666f417d5e805f966d6cb5f59b0e4", 0x85}], 0x8, &(0x7f0000000680), 0x0, 0x4}, 0x4) sendto$unix(r7, &(0x7f0000000000)="b10005136000009f05003e0800000000331c13fecea10500fef96ecfc72fd3357a068d02bc31a3a5673039d2d236acf20b7804be38164991f7cccf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8faff0037282112000000720fd38bfbb770c1f5a872c881e2772ec5a10400000000000000361b1257aea8c5d0002012000000000000880d6633c556ae9b287948a62310db415f779642cdcd71a3f8343712051e", 0xb1, 0x0, 0x0, 0x0) (async) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) (async) getgroups(0x5, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) fchownat(r5, &(0x7f00000004c0)='./file0\x00', r10, r11, 0x2) 561.922µs ago: executing program 1 (id=360): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) fcntl$setstatus(r1, 0x4, 0x4) connect$unix(r1, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getdents(r2, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "cbe4c8", 0x44, 0x0, 0x0, @mcast2, @mcast1, {[@dstopts={0x0, 0x1, '\x00', [@jumbo, @pad1]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@mcast2]}], @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x2, 0x4001, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r4) r5 = socket(0x2, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000), 0x10) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000080), 0x66) r6 = socket(0x2, 0x4001, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) close(r7) poll(&(0x7f0000000040)=[{r0, 0x4}, {r0, 0x4}, {r0, 0x99}, {r1, 0x100}, {r0, 0x4}, {r1, 0x8}], 0x6, 0xfffffbff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 0s ago: executing program 0 (id=361): ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r1, 0x8004745d, &(0x7f0000000000)) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) socket(0x18, 0x3, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, &(0x7f0000000000)={0xfffbfffffffffffb, 0x100000002}, 0x10) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000000)="0f001e03", 0x4) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000000c0)={0x5, &(0x7f0000000100)=[{0x8c, 0x6, 0x5b, 0x3}, {0x2, 0x3, 0x5d}, {0x7, 0x3, 0x8, 0x5}, {0x4, 0x1, 0xe4, 0x6}, {0x8000, 0x7f, 0x6, 0x7000003}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts. OpenBSD/amd64 (ci-openbsd-multicore-7.us-central1-b.c.syzkaller.internal) (tty00) login: vnd0: sloppy read from proc 80320 (syz-executor): blkno 0 bcount 65535 vnd0: sloppy read from proc 80320 (syz-executor): blkno 64 bcount 2048 vnd0: sloppy read from proc 80320 (syz-executor): blkno 1024 bcount 2048 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error panic: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/multicore/kernel/sys/net/rtable.c", line 131 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 157317 22083 0 0 0 0 syz-executor * 85591 57622 0 0 0x4000000 1K syz-executor db_enter() at db_enter+0x25 panic(ffffffff830f70ba) at panic+0x1e5 __assert(ffffffff830a8638,ffffffff82fe93c8,83,ffffffff830ea088) at __assert+0x29 rtable_init() at rtable_init rtable_add(5) at rtable_add+0x2d9 route_output(fffffd805efc5400,ffff800010fded08) at route_output+0x520 route_send(ffff800010fded08,fffffd805efc5400,0,0) at route_send+0xd7 sosend(ffff800010fded08,0,ffff800037274e28,0,0,0) at sosend+0xa40 sendit(ffff8000ffff11e0,5,ffff800037274f20,0,ffff800037274fd0) at sendit+0x721 sys_sendto(ffff8000ffff11e0,ffff800037275080,ffff800037274fd0) at sys_sendto+0x8d syscall(ffff800037275080) at syscall+0xbb6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdf26ba1f030, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/multicore/kernel/sys/net/rtable.c", line 131 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff830f70ba) at panic+0x1e5 __assert(ffffffff830a8638,ffffffff82fe93c8,83,ffffffff830ea088) at __assert+0x29 rtable_init() at rtable_init rtable_add(5) at rtable_add+0x2d9 route_output(fffffd805efc5400,ffff800010fded08) at route_output+0x520 route_send(ffff800010fded08,fffffd805efc5400,0,0) at route_send+0xd7 sosend(ffff800010fded08,0,ffff800037274e28,0,0,0) at sosend+0xa40 sendit(ffff8000ffff11e0,5,ffff800037274f20,0,ffff800037274fd0) at sendit+0x721 sys_sendto(ffff8000ffff11e0,ffff800037275080,ffff800037274fd0) at sys_sendto+0x8d syscall(ffff800037275080) at syscall+0xbb6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdf26ba1f030, count: -12 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff800037274a30 rbx 0xffff800029b7cdbf rdx 0 rcx 0xffff8000ffff11e0 rax 0xffff800029b7bff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x856fe8c5b29b4eb r11 0x41f9c85a0e199156 r12 0xffff800029b7cbc0 r13 0 r14 0 r15 0x1 rip 0xffffffff817ca965 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff800037274a20 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=85591 pid=57622 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=81, usrpri=82, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffff0028,0xffff8000ffff1700 process=0xffff80003726f1e0 user=0xffff800037270000, vmspace=0xfffffd806ec9b388 estcpu=32, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 86696 516539 45198 0 3 0 futex syz-executor 86696 34081 45198 0 3 0x4000000 futex syz-executor 99601 85293 38437 0 2 0 syz-executor 99601 139651 38437 0 3 0x4000080 fsleep syz-executor 19767 292420 25156 0 2 0 syz-executor 19767 473005 25156 0 3 0x4000080 fsleep syz-executor 16163 467687 29129 0 2 0 syz-executor 16163 254237 29129 0 3 0x4000080 fsleep syz-executor 22083 157317 51138 0 7 0 syz-executor 22083 282303 51138 0 2 0x4000000 syz-executor 22083 483519 51138 0 3 0x4000080 fsleep syz-executor 57622 511779 85893 0 3 0 futex syz-executor *57622 85591 85893 0 7 0x4000000 syz-executor 57622 523873 85893 0 2 0x4000000 syz-executor 57622 419195 85893 0 2 0x4000000 syz-executor 63849 238800 93278 0 2 0 syz-executor 63849 68758 93278 0 2 0x4000000 syz-executor 63849 256288 93278 0 3 0x4000080 fsleep syz-executor 18642 349663 0 0 3 0x14200 acct acct 53797 50207 0 0 3 0x14200 bored sosplice 62994 29376 0 0 3 0x14280 nfsidl nfsio 62157 157105 0 0 3 0x14280 nfsidl nfsio 83871 241580 0 0 3 0x14280 nfsidl nfsio 61478 43775 0 0 3 0x14280 nfsidl nfsio 4198 295063 0 0 3 0x14280 nfsidl nfsio 87360 364390 0 0 3 0x14280 nfsidl nfsio 44685 221660 0 0 3 0x14280 nfsidl nfsio 50921 78671 0 0 3 0x14280 nfsidl nfsio 48703 272682 0 0 3 0x14280 nfsidl nfsio 18770 94489 0 0 3 0x14280 nfsidl nfsio 23701 389156 0 0 3 0x14280 nfsidl nfsio 31598 35114 0 0 3 0x14280 nfsidl nfsio 8684 340688 0 0 3 0x14280 nfsidl nfsio 46912 30665 0 0 3 0x14280 nfsidl nfsio 65462 291879 0 0 3 0x14280 nfsidl nfsio 91822 511663 0 0 3 0x14280 nfsidl nfsio 58112 312146 0 0 3 0x14280 nfsidl nfsio 52011 133939 0 0 3 0x14280 nfsidl nfsio 14564 472196 0 0 3 0x14280 nfsidl nfsio 60016 31038 0 0 3 0x14280 nfsidl nfsio 94776 200530 1 0 3 0x100083 ttyin getty 93278 32394 67229 0 3 0x82 nanoslp syz-executor 25156 15737 67229 0 3 0x82 nanoslp syz-executor 51138 442381 67229 0 3 0x82 nanoslp syz-executor 80596 367924 67229 0 3 0x82 wait syz-executor 85893 421253 67229 0 3 0x82 nanoslp syz-executor 38437 136270 67229 0 3 0x82 nanoslp syz-executor 45198 433521 67229 0 3 0x82 nanoslp syz-executor 29129 450382 67229 0 3 0x82 nanoslp syz-executor 67229 497864 86203 0 3 0x82 kqread syz-executor 86203 313542 73301 0 3 0x10008a sigsusp ksh 73301 477166 5849 0 3 0x98 kqread sshd-session 5849 165967 25257 0 3 0x92 kqread sshd-session 25257 498544 1 0 3 0x88 kqread sshd 56975 45079 7533 74 3 0x1100092 bpf pflogd 7533 414133 1 0 3 0x80 sbwait pflogd 25731 63406 35755 73 3 0x1100090 kqread syslogd 35755 65159 1 0 3 0x100082 sbwait syslogd 26086 468607 1 0 3 0x100080 kqread resolvd 46969 226395 46921 77 3 0x100092 kqread dhcpleased 96759 375980 46921 77 3 0x100092 kqread dhcpleased 46921 127463 1 0 3 0x80 kqread dhcpleased 98347 62202 0 0 3 0x14200 bored smr 73988 514768 0 0 3 0x14200 pgzero zerothread 29637 496352 0 0 3 0x14200 aiodoned aiodoned 48224 315336 0 0 3 0x14200 syncer update 3729 324991 0 0 3 0x14200 cleaner cleaner 3519 393395 0 0 3 0x14200 reaper reaper 52865 207109 0 0 3 0x14200 pgdaemon pagedaemon 20892 267922 0 0 3 0x14200 bored viomb 15546 439198 0 0 3 0x40014200 acpi0 acpi0 32070 444216 0 0 3 0x40014200 idle1 28629 141850 0 0 3 0x14200 bored softnet3 15806 145684 0 0 3 0x14200 bored softnet2 14316 177753 0 0 3 0x14200 bored softnet1 94173 287882 0 0 3 0x14200 bored softnet0 34706 307225 0 0 3 0x14200 bored systqmp 84370 477515 0 0 3 0x14200 bored systq 60780 201242 0 0 3 0x14200 tmoslp softclockmp 60083 337702 0 0 3 0x40014200 tmoslp softclock 84175 69651 0 0 3 0x40014200 idle0 1 339522 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 57622 (syz-executor) thread 0xffff8000ffff11e0 (85591) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff836331e0) #0 witness_lock+0x5bb #1 __mp_acquire_count+0x58 #2 mi_switch+0x4b7 #3 yield+0x6a #4 malloc+0xe5 #5 rtmap_grow+0xb2 #6 rtable_add+0x2d9 #7 route_output+0x520 #8 route_send+0xd7 #9 sosend+0xa40 #10 sendit+0x721 #11 sys_sendto+0x8d #12 syscall+0xbb6 #13 Xsyscall+0x128 exclusive rwlock sbufsnd r = 0 (0xffff800010fdeeb0) #0 witness_lock+0x5bb #1 rw_enter+0x41b #2 sblock+0xb7 #3 sosend+0x2ff #4 sendit+0x721 #5 sys_sendto+0x8d #6 syscall+0xbb6 #7 Xsyscall+0x128 Process 57622 (syz-executor) thread 0xffff8000ffff07c0 (523873) exclusive rwlock sbufsnd r = 0 (0xffff800010fde980) #0 witness_lock+0x5bb #1 rw_enter+0x41b #2 sblock+0xb7 #3 sosend+0x2ff #4 sendit+0x721 #5 sys_sendto+0x8d #6 syscall+0xbb6 #7 Xsyscall+0x128 Process 57622 (syz-executor) thread 0xffff8000371e8038 (419195) exclusive rwlock futex r = 0 (0xffffffff834e7950) #0 witness_lock+0x5bb #1 sys_futex+0x69 #2 syscall+0xbb6 #3 Xsyscall+0x128 Process 63849 (syz-executor) thread 0xffff8000371e9c10 (68758) exclusive rwlock fdlock r = 0 (0xfffffd806b5a0250) #0 witness_lock+0x5bb #1 doopenat+0x173 #2 syscall+0xaf8 #3 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10223 11130K 11462K 166960K 11875 0 pcb 18 14K 16K 166960K 213 0 rtable 210 6K 7K 166960K 383 0 pf 37 18K 19K 166960K 59 0 ifaddr 40 6K 7K 166960K 52 0 ifgroup 59 2K 2K 166960K 73 0 sysctl 2 0K 0K 166960K 2 0 counters 66 36K 37K 166960K 74 0 ioctlops 0 0K 4K 166960K 1607 0 iov 0 0K 12K 166960K 88 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1401 88K 88K 166960K 1757 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 6 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 16 0 dirhash 12 2K 2K 166960K 33 0 ACPI 1690 195K 286K 166960K 12468 0 file desc 18 65K 93K 166960K 494 0 sigio 0 0K 0K 166960K 5 0 proc 72 91K 128K 166960K 590 0 subproc 104 6K 6K 166960K 104 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 56 0 in_multi 84 6K 7K 166960K 115 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 235 1049K 1049K 166960K 235 0 exec 0 0K 1K 166960K 442 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 254 73K 77K 166960K 6378 0 UVM aobj 14 2K 2K 166960K 18 0 pinsyscall 43 86K 104K 166960K 1602 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 22 0 NDP 13 0K 2K 166960K 33 0 temp 44 6820K 6887K 166960K 21320 0 kqueue 13 20K 34K 166960K 80 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 58 0 52 1 0 1 1 0 8 0 rtentry 112 114 0 20 4 0 4 4 0 8 0 unpcb 144 383 0 364 7 5 2 6 0 8 1 syncache 336 8 0 8 3 2 1 1 0 8 1 tcpcb 808 221 0 215 12 7 5 7 0 8 4 arp 120 19 0 3 1 0 1 1 0 8 0 inpcb 336 644 0 631 14 10 4 7 0 8 2 nd6 136 25 0 5 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1168 2 0 2 1 1 0 1 0 8 0 pffrag 232 1 0 1 1 1 0 1 0 482 0 pffrnode 88 1 0 1 1 1 0 1 0 8 0 pffrent 40 3 0 3 1 1 0 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 52 0 12 1 0 1 1 0 8 0 pfstkey 128 52 0 12 2 0 2 2 0 8 0 pfstate 376 51 0 12 5 0 5 5 0 8 0 pfrule 1344 21 0 15 2 0 2 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 456 0 62 29 1 28 29 0 8 0 art_table 32 457 0 62 4 0 4 4 0 8 0 art_node 16 113 0 28 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 1 1 0 1 1 0 8 0 semapl 112 14 0 4 1 0 1 1 0 8 0 shmpl 112 15 0 4 1 0 1 1 0 8 0 dirhash 1024 31 0 14 3 0 3 3 0 8 0 dino2pl 256 2265 0 757 95 0 95 95 0 8 0 ffsino 272 2265 0 757 102 0 102 102 0 8 0 nchpl 144 2973 0 2444 63 33 30 63 0 8 7 uvmvnodes 80 2606 0 0 54 0 54 54 0 8 0 vnodes 216 2606 0 0 145 0 145 145 0 8 0 namei 1024 10903 0 10903 3 2 1 2 0 8 1 percpumem 16 51 0 4 1 0 1 1 0 8 0 kstatmem 264 34 0 8 3 1 2 3 0 8 0 scxspl 216 10920 0 10920 10 2 8 8 1 8 8 plimitpl 152 165 0 147 1 0 1 1 0 8 0 sigapl 424 823 0 751 10 1 9 9 0 8 0 futexpl 64 5395 0 5389 1 0 1 1 0 8 0 knotepl 120 562 0 0 18 0 18 18 0 8 0 kqueuepl 216 141 0 132 3 1 2 3 0 8 1 pipepl 320 146 0 119 3 0 3 3 0 8 0 fdescpl 496 783 0 751 6 1 5 5 0 8 0 filepl 152 4564 0 4309 24 11 13 20 0 8 2 lockfpl 104 187 0 184 1 0 1 1 0 8 0 lockfspl 48 81 0 78 1 0 1 1 0 8 0 sessionpl 144 28 0 19 1 0 1 1 0 8 0 pgrppl 48 40 0 23 1 0 1 1 0 8 0 ucredpl 104 612 0 598 1 0 1 1 0 8 0 zombiepl 144 804 0 803 1 0 1 1 0 8 0 processpl 1160 823 0 751 7 1 6 6 0 8 0 procpl 648 1490 0 1407 8 0 8 8 0 8 0 srpgc 96 2 0 2 1 1 0 1 0 8 0 sosppl 168 1 0 1 1 0 1 1 0 8 1 sockpl 664 1091 0 1052 19 13 6 14 0 8 2 mcl64k 65536 5 0 0 1 0 1 1 0 8 0 mcl16k 16384 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 9 0 0 2 0 2 2 0 8 0 mcl4k 4096 129 0 0 17 0 17 17 0 8 0 mcl2k 2048 25 0 0 4 0 4 4 0 8 1 mtagpl 96 8 0 0 1 0 1 1 0 8 0 mbufpl 256 404 0 0 25 0 25 25 0 8 0 bufpl 280 3987 0 100 278 0 278 278 0 8 0 anonpl 24 144446 0 140118 84 34 50 58 0 185 2 amapchunkpl 152 20093 0 19509 36 8 28 28 0 158 0 amappl16 200 2909 0 2877 26 19 7 15 0 8 0 amappl15 192 7 0 7 1 1 0 1 0 8 0 amappl14 184 126 0 114 1 0 1 1 0 8 0 amappl13 176 11 0 10 1 0 1 1 0 8 0 amappl12 168 1436 0 1404 4 1 3 3 0 8 0 amappl11 160 50 0 36 1 0 1 1 0 8 0 amappl10 152 5 0 5 1 1 0 1 0 8 0 amappl9 144 217 0 217 1 1 0 1 0 8 0 amappl8 136 32 0 29 1 0 1 1 0 8 0 amappl7 128 106 0 94 1 0 1 1 0 8 0 amappl6 120 162 0 161 1 0 1 1 0 8 0 amappl5 112 137 0 125 1 0 1 1 0 8 0 amappl4 104 328 0 309 1 0 1 1 0 8 0 amappl3 96 3557 0 3456 3 0 3 3 0 8 0 amappl2 88 1087 0 1002 3 0 3 3 0 8 0 amappl1 80 9816 0 9241 16 2 14 14 0 8 0 amappl 88 5946 0 5757 5 0 5 5 0 92 0 dma65536 65536 65 0 65 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 17 0 4 1 0 1 1 0 8 0 uaddrrnd 24 783 0 751 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 783 0 751 1 0 1 1 0 8 0 vmmpekpl 168 8240 0 8203 3 0 3 3 0 8 0 vmmpepl 168 55130 0 53196 107 12 95 100 0 357 5 vmsppl 448 782 0 751 6 2 4 5 0 8 0 rwobjpl 56 20801 0 17231 53 1 52 52 0 8 0 pdppl 4096 1573 0 1502 111 40 71 85 0 8 0 pvpl 32 15820 0 0 130 2 128 128 0 265 0 pmappl 248 782 0 751 3 0 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 434 0 68 11 0 11 11 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83472ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83632fd8) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x5b Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x72b84d870980, count: 9 ddb{0}> trace x86_ipi_db(ffffffff83472ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83632fd8) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x5b Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x72b84d870980, count: -6 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff830f70ba) at panic+0x1e5 __assert(ffffffff830a8638,ffffffff82fe93c8,83,ffffffff830ea088) at __assert+0x29 rtable_init() at rtable_init rtable_add(5) at rtable_add+0x2d9 route_output(fffffd805efc5400,ffff800010fded08) at route_output+0x520 route_send(ffff800010fded08,fffffd805efc5400,0,0) at route_send+0xd7 sosend(ffff800010fded08,0,ffff800037274e28,0,0,0) at sosend+0xa40 sendit(ffff8000ffff11e0,5,ffff800037274f20,0,ffff800037274fd0) at sendit+0x721 sys_sendto(ffff8000ffff11e0,ffff800037275080,ffff800037274fd0) at sys_sendto+0x8d syscall(ffff800037275080) at syscall+0xbb6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdf26ba1f030, count: 3 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff830f70ba) at panic+0x1e5 __assert(ffffffff830a8638,ffffffff82fe93c8,83,ffffffff830ea088) at __assert+0x29 rtable_init() at rtable_init rtable_add(5) at rtable_add+0x2d9 route_output(fffffd805efc5400,ffff800010fded08) at route_output+0x520 route_send(ffff800010fded08,fffffd805efc5400,0,0) at route_send+0xd7 sosend(ffff800010fded08,0,ffff800037274e28,0,0,0) at sosend+0xa40 sendit(ffff8000ffff11e0,5,ffff800037274f20,0,ffff800037274fd0) at sendit+0x721 sys_sendto(ffff8000ffff11e0,ffff800037275080,ffff800037274fd0) at sys_sendto+0x8d syscall(ffff800037275080) at syscall+0xbb6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdf26ba1f030, count: -12