last executing test programs: 6.93653092s ago: executing program 2 (id=100): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) select(0x40, &(0x7f0000000180)={0x1, 0x44809e9d, 0x1dad, 0x1, 0x7, 0x10000001817, 0x8146, 0x100000000}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r0 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chmod(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.435280612s ago: executing program 2 (id=114): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0xf900000000000002, 0x2, 0x4}) sysctl$kern(&(0x7f00000001c0)={0x1, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='x\x00') unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') syz_emit_ethernet(0x6e, 0x0) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) 5.434901348s ago: executing program 0 (id=115): pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setown(r0, 0x6, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x810, r1, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x1) 5.409961322s ago: executing program 0 (id=117): r0 = syz_open_pts() ioctl$TIOCSBRK(r0, 0x2000747b) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) (async) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) (async) r2 = socket(0x18, 0x3, 0x0) close(r2) (async) r3 = socket(0x6, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1000, 0x0, 0x0) nanosleep(0x0, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) r4 = socket(0x18, 0x3, 0x0) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async, rerun: 32) getsockname$inet(r4, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) (async, rerun: 32) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mquery(&(0x7f0000590000/0x2000)=nil, 0x2000, 0x2, 0x0, r2, 0x3) (async, rerun: 64) r5 = dup2(r2, r1) (async, rerun: 64) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9e, 0xffffffffffffffff, 0x90, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000140)={0x2ea4, 0x6, 0x40000800, 0x0, "d76c1f46000000ef1f0160fbf520000002000f00", 0xffffffff, 0x401}) (rerun: 32) r6 = kqueue() kevent(r6, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) r7 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x20) ioctl$FIONBIO(r7, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(r7, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x102, 0xff, 0xb9fe, 0x1, 0x7fd, 0x8, 0x3e, 0x1, 0x0, 0x100000000000002, 0x3}) (async) ioctl$FIONBIO(r7, 0x82907003, &(0x7f0000000140)=0x1) (async, rerun: 64) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) sendmsg$unix(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 5.407872393s ago: executing program 0 (id=119): close(0xffffffffffffffff) (async) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="73b9ccc3000000f70004000086dd6000000000183a01fe80000000000000000000000000000000018284e355429be5bdc91cdfe527ff8f"]) r0 = kqueue() ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x7, 0x101, 0x80000001, 0x7, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x35}, {0x7, 0xfffffffc, 0x10000008, 0xfffffff8}, {0x9, 0xf86, 0x0, 0xaf9}, {0x1, 0x800, 0x7}, {0x401, 0x7fffffff, 0xe, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0x1, 0x4f8, 0x101}, {0xa, 0x7ff, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0x88}, {0x8, 0x10001, 0x9, 0xaeb}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8c, 0x4, 0x5, 0x6}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0x4, 0x80000000, 0x6}, {0x0, 0x1, 0x4, 0x30000}]}) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) kevent(r0, &(0x7f0000000140)=[{{}, 0xfffffffffffffff9, 0x5, 0x10}], 0x0, 0x0, 0x4, 0x0) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) r1 = syz_open_pts() ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000080)={0xffffffff, 0x1, 0xfffffffe, 0x7fc, "2cf9892af9a590e4cb52e88608007673ca9e5fd7", 0x6}) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000940)="db600000c94d1fde1cfdcb476a698f3139485ee733332a63cd2bc22d1596ccb55432859e12916c26d95f0800000000000000f2cfacb109d80a909da9332f181a1a5cc8e1ae0392297125c40c467adb9310cafe51f53a0fc13bc7b1c6698df1a3ffa2547509", 0x65}, {0x0}], 0x2) (async) unveil(0x0, &(0x7f0000000140)='r\x00') (async) ioctl$TIOCSTART(r1, 0x2000746e) 5.149115366s ago: executing program 2 (id=120): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x7fffbfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefe}, 0x7, 0x40000000003, 0x3}) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x3, 0x1, 0x1ff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) unlink(&(0x7f0000000a80)='.\x00') r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="01000000", 0x4) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="7004f5b37527", [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x8, 0x3a, 0x0, @rand_addr="3be1e300e8ffffffffffffff00", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@echo_request}}}}}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x7fffbfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefe}, 0x7, 0x40000000003, 0x3}) (async) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x3, 0x1, 0x1ff}) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x18, 0x1, 0x0) (async) close(r0) (async) unlink(&(0x7f0000000a80)='.\x00') (async) socket(0x18, 0x2, 0x0) (async) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="01000000", 0x4) (async) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="7004f5b37527", [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x8, 0x3a, 0x0, @rand_addr="3be1e300e8ffffffffffffff00", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@echo_request}}}}}) (async) 5.147997785s ago: executing program 2 (id=121): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) chmod(&(0x7f00000000c0)='./file1\x00', 0x13) r0 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) (async) setgroups(0x0, 0x0) fchmod(r0, 0xf3) setuid(0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file1\x00', 0xa6) (async) mkdir(&(0x7f0000000000)='./file1\x00', 0xa6) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00') (async) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00') 5.140299369s ago: executing program 2 (id=122): mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) clock_settime(0x100000000000000, &(0x7f0000000000)={0xfd1ecc7d, 0x200}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) ioctl$VNDIOCCLR(r1, 0xc0a86b04, &(0x7f0000000200)={0x0, 0x10000, 0x0}) (async) ioctl$VNDIOCCLR(r1, 0xc0a86b04, &(0x7f0000000200)={0x0, 0x10000, 0x0}) acct(&(0x7f0000000040)='./file0\x00') (async) acct(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) 5.140066943s ago: executing program 2 (id=123): r0 = socket$inet(0x2, 0x3, 0x0) close(r0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f00000003c0)="ea00000100000000", 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSMUXIO_INJECTEVENT(r2, 0x80185760, &(0x7f0000000040)={0x2, 0x0, {0x0, 0x8}}) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00aa6600000000", 0x8) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) setrlimit(0x6, &(0x7f0000000000)={0x42, 0x60}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000180)={0x7fff, 0x7bed, 0xfffdff81, 0x1603507, "04e4ee0d090000000000000010e0ff7f0500", 0x5e9c}) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 1.292879603s ago: executing program 3 (id=203): setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="ebffff132f", 0x5) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x3, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) msync(&(0x7f00001c9000/0x4000)=nil, 0x4000, 0x2) r1 = dup(r0) setsockopt$inet_opts(r1, 0x0, 0x15, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x3}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0xff}, {0x2}, {0x3}, {0x3, 0xffeffffd}, {}, {}, {0x0, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {0x0, 0xfffffffd}, {0x0, 0x1}, {0x1, 0xfffffffc}, {0x2}, {}, {}, {0x2}, {0x0, 0x3}, {}, {}, {}, {}, {0x1, 0x57fd}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) write(r0, 0x0, 0x0) 1.206194234s ago: executing program 4 (id=207): r0 = socket(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000140)=0x401) shutdown(r0, 0x1) r2 = open(0x0, 0x611, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x40) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x10, r3, 0x0) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000080)=0x1) ioctl$BIOCSFILDROP(r3, 0x80044279, &(0x7f0000000000)=0xa) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) clock_gettime(0x4, &(0x7f0000000100)) 1.195292052s ago: executing program 3 (id=208): sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000000080)="02000000", 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000030000000000011907800000004ff900d9cc0019078000b00004509000200680027f1cf282e5e06699b694f1236"]) 1.065337743s ago: executing program 3 (id=209): r0 = openat$klog(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) clock_gettime(0x2, &(0x7f0000000ac0)) r1 = socket(0x18, 0x3, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f0000000240)={0x0, 0x1, 0x20, 0x1}, 0xc) sendmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYRES8=r1, @ANYRESOCT=r1, @ANYBLOB="2815f1a8df0a4108f5f97b7da47bbd5c169ea5c3068a2b2e2e349dd8287488168baedd24b59f0da59dd4ddfb95f6324325201bf6ebe9c9a103d49ae3fe8ae2f1f611ee82e587257c2a6f40148d5532f369b3790c12dc5a6119a477b474d03f96728dac658744a26667f0ce3337112e53fb44befa1f04e47c70ae20c0a931b1636a3d5aad62f42919ed14cb4a0a87d871c128e9432ebb348a69852a0dc0c74777460ce8be623d5ac8a2c029e7ba5d7c895901fedb4328109de6be73812410df1b69efa1f7029b7eb6847c78c245aa93d84025be8c9ffe504ed3bab41169b5c04247fa6ec67c9aea22b47df5a040321f3cd0f5f2a20bfb", @ANYRESDEC=r0, @ANYRES16=r1], 0x9, 0xa}, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r3, &(0x7f00000003c0)=@file={0x0, ""/505}, &(0x7f0000000140)=0x1fb) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/236, 0xec}, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xffff, 0xd, 0x3, 0x5}, {0x84, 0xde, 0x9, 0x409}, {0x41ae, 0x0, 0x11, 0x3}]}) syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[]) sendmsg(r2, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) 1.060488818s ago: executing program 4 (id=212): sysctl$kern(&(0x7f0000000140)={0x1, 0x4}, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async) r0 = syz_open_pts() close(r0) (async) mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0x3) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x47) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(0x0, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) (async, rerun: 32) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (rerun: 32) ioctl$BIOCSRTIMEOUT(r2, 0xc0307006, &(0x7f0000000080)={0x1, 0xd8}) ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000040)=0x7d) (async) r3 = syz_open_pts() setrlimit(0x8, &(0x7f0000000000)={0xc, 0xae5}) (async) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000040)=0x9) poll(&(0x7f00000000c0)=[{r3, 0x100}, {r3, 0x100}, {r0, 0x4}, {r0, 0x10}, {r3, 0x4}, {r0, 0x20}, {r3, 0x80}], 0x7, 0x8) setitimer(0x0, &(0x7f0000000080)={{0x200000000, 0x4}, {0xfffffffffffffffd, 0x6}}, 0x0) openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="c5ea33001aace440f62e18562095cdc75d2268be003fb9f7c1615513b5392c07", 0x20}], 0x1) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="71f61e5671ac0058bc5ab2501ddc32bd720294010001000000000021c37a82dcb9c25e5e0f7ed6ae5cddea13491b9f18cff62b37426f406402ae76b34302798d", &(0x7f0000000080)=0x40, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async, rerun: 64) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) (async, rerun: 64) write(r5, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) write(r0, &(0x7f00000003c0)="fe3b3a", 0x3) 992.43183ms ago: executing program 4 (id=215): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7, 0x7f, 0x9, 0x1bf}, {0x61, 0x0, 0xfc, 0x7}, {0x6, 0x0, 0x5, 0xa1}]}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[]) (async) ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, &(0x7f00000001c0)) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) open(0x0, 0x0, 0x80) (async) r3 = shmget$private(0x0, 0x1000, 0x59, &(0x7f0000ffe000/0x1000)=nil) shmat(r3, &(0x7f0000001000/0x3000)=nil, 0x2000) (async) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x1000) shmctl$IPC_RMID(0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x2, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) (async) kevent(0xffffffffffffffff, &(0x7f0000000100), 0x3ff, 0x0, 0x8000800, 0x0) (async) kevent(0xffffffffffffffff, 0x0, 0x101, &(0x7f0000000000), 0x5, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x0) 787.856171ms ago: executing program 5 (id=220): syz_emit_ethernet(0x3e, &(0x7f0000000140)={@random="91a6e34dd8bb", @random="9f96b0db5822", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @rand_addr}, @icmp=@time_exceeded={0xb, 0x1, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3, 0x101, 0x68, 0x0, 0x7, 0x3, 0x5e4, @empty, @multicast1}}}}}}) (async) r0 = socket(0x6, 0x1, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x5cda) (async) r1 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x0) ioctl$VNDIOCSET(r1, 0x80184601, &(0x7f0000000340)={0x0, 0x9, 0x0}) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000040)=0x5, 0x4) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000080)=0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x451d) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x10005, 0x0}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64) sysctl$hw(&(0x7f0000000040)={0x6, 0x12}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$WSDISPLAYIO_GMODE(r1, 0x4004574b, &(0x7f0000000100)) (async, rerun: 32) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000017c0), 0x1, 0x0) (rerun: 32) writev(r3, &(0x7f00000001c0)=[{0x0}], 0x1) (async) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x34}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSETA(r4, 0xcd504406, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97aa224ff1c14649ebb178926cc1c75a6b47c1d1"}) (async) socket(0x18, 0x1, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) (async, rerun: 64) r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async, rerun: 64) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSETA(r6, 0xcd504406, &(0x7f0000000740)={0x1, 0x0, 0x80, 0x8000, "87aa47c1d100", 0x0, 0x800}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000140)={0x5, 0x40000000, 0x40000800, 0x0, "d76c1f46000000ef1f0160fbf520000002000f00", 0xb, 0x401}) ioctl$TIOCSETA(r5, 0xcd504407, &(0x7f0000000740)={0xb6, 0xfc, 0xffbfd75e, 0x6, "97000019be81804c09a56000", 0x4, 0x56}) 730.407599ms ago: executing program 6 (id=223): r0 = socket$inet(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x3, 0xe1) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000040)='\x00', 0x1) r2 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r3 = socket(0x2, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000000700)={&(0x7f0000000880)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x9}, 0x6) ioctl$TIOCGTSTAMP(r2, 0x4010745b, &(0x7f0000000080)) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000080), 0x0) 729.908031ms ago: executing program 5 (id=224): pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="c24cd1", 0x3}], 0x1, 0x8) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x1000, 0x8000000000000}) r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x682eb13985c518e6, 0x7}, 0x8) sendto$unix(0xffffffffffffffff, &(0x7f00000001c0)="b100", 0x2, 0x40a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x20, 0x4, 0x0) sysctl$kern(&(0x7f0000000140), 0x2, &(0x7f0000000200)="dc2c6af361f6e16e7c511c1a6ec559dcb6339e0b70825df2b65c8cd8b98c04b365f523f92b6c9e2e31de16825f5d600023946daab689583cb1a292032dbfa6adce0c1dc176fc0a16c556453a1dfd1bb9e9e0c439da73caa83fdb161bbe81a063a375c20fa41bf9d04634f6cceb2f65e870e6ae57b4d583c968f99bd0632a8e137442d390df786e", &(0x7f0000000180)=0x87, &(0x7f00000002c0)="a7fc4f70a2e08e9e85cf8bad3cc7b88c67428146be93ee6ae2c37399ef3832b7019fdf2dde0635c8ec479684c05d2f1b357f04cb14", 0x35) setsockopt(r1, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 729.627387ms ago: executing program 4 (id=225): sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x34}, 0x4, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240), 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x10, 0xffffffffffffffff) write(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000880)={&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, 0x10, 0x42, 0x0) 556.969472ms ago: executing program 5 (id=227): r0 = socket(0x1e, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x8020697f, &(0x7f00000001c0)) socket(0x18, 0x3, 0x0) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$FIOASYNC(r1, 0x80047469, &(0x7f0000000040)=0xfffffffc) write(r1, 0x0, 0x0) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000e40)={0xa8, 0x7, 0x9, {[0x20000008001, 0x0, 0xc759, 0x919, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x7b, 0x0, 0x8000000000000, 0x0, 0x400, 0x0, 0x0, 0xffffffffffffb390, 0xfffffffffffffffb], [0xf, 0x0, 0x0, 0x0, 0x5, 0x1000, 0xfffffffffffffffc, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x1], [0x0, 0x0, 0xffffffffffffffff], [0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x2], [{0x0, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0xfffffffc, 0x2, 0x1}, {0x800, 0xfffffffd, 0x0, 0xfffffffffffffffc}, {0x0, 0x1000, 0x6}, {0x8fb, 0xa760, 0xc8, 0xffffffffffffffff}, {0x217d, 0x5, 0x0, 0xfffffffffffffffe}, {0x4, 0x0, 0x0, 0x3}, {0x0, 0xfffffffd}], {0x0, 0x0, 0x8}}}) r2 = kqueue() kevent(r2, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) 555.278851ms ago: executing program 4 (id=228): r0 = socket(0x800000018, 0x1, 0x0) sendto(0xffffffffffffffff, 0x0, 0x58, 0x0, &(0x7f0000000080)=@in6={0x18, 0x3, 0x0, 0x1ff}, 0xc) (async) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000000)=0x3ff, 0x4) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x4) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) (async) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) (async) close(r2) (async) renameat(r1, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') open(&(0x7f0000000280)='./file0\x00', 0x80000000000206, 0x0) (async) r3 = getpid() ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, r3) setitimer(0x0, &(0x7f0000000040)={{0x0, 0x1}, {0x3, 0x63d}}, 0x0) setitimer(0x0, 0x0, &(0x7f0000000440)) r4 = socket(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) r5 = socket(0x18, 0x2, 0x0) connect$unix(r5, &(0x7f0000000300)=@file={0x1, './file0/file0\x00'}, 0x10) (async) close(r5) (async) ioctl$FIONREAD(r4, 0x8040691a, &(0x7f00000001c0)) (async) r6 = open$dir(&(0x7f0000000200)='./file0\x00', 0x2, 0x5d) openat(r6, &(0x7f0000000240)='./file0/file0\x00', 0x8000, 0x62) (async) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @random="d0b5049f6b63", [], {@ipv6={0x86dd, {0x0, 0x6, "36ea07", 0x38, 0x3a, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "5adf00", 0x0, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr}, @mcast1, [@routing={0x3c, 0x0, 0x0, 0x3}]}}}}}}}) (async) getsockname$unix(r0, 0x0, &(0x7f00000010c0)) 552.670926ms ago: executing program 7 (id=229): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="c5ea33001aace440f62e18562095cdc75d2268be003fb9f7c1615513b5392c076b163afd44f0a0b24799fc29", 0x2c}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="71f61e5671ac0058bc5ab2501ddc32bd720294010001000000000021c37a82dcb9c25e5e0f7ed6ae5cddea13491b9f18cff62b37426f406402ae76b34302798d", &(0x7f0000000080)=0x40, 0x0, 0x0) r1 = socket$inet6(0x18, 0x8000, 0x1) setsockopt$sock_int(r1, 0xffff, 0x200, &(0x7f0000000000)=0x1000, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r2, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe) 552.017829ms ago: executing program 6 (id=230): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {}, {0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {0x3}, {0x0, 0xc76b}, {0x0, 0x2}, {0x3}, {0x1}, {}, {0x0, 0x88}, {}, {0x0, 0xdc9c}, {0x2}, {0x0, 0xfffffffd}]}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r1, 0x800474c4, &(0x7f00000000c0)) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYRESOCT]) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000000c0)="b92e2f", 0x3}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0xc9) sysctl$kern(&(0x7f0000000000)={0x1, 0x13}, 0x2, &(0x7f0000000180)="59cbfb190f0b577a6ca484609d7d58f40a8629cbb3c89bad21386afc86d64e732b23d2705c63b7fa7f9bba5f4666168f8658ac21ecc504d4cb0b93", &(0x7f00000001c0)=0x3b, &(0x7f0000000200)="120a7ef1f4b86df49b8a974c39920d61ea17e05b6f96f88f60c39eacee88d60194410202e07d5aefbf76e27c0613af0a0f30bbe65a4f688ad9bd4cceb837401f9669cc7d6cbfb2138df6e049fdba8ce332491b435f84650985f141", 0x5b) 551.517745ms ago: executing program 6 (id=231): open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) (async) r0 = getpid() (async) setgroups(0x0, 0x0) ktrace(&(0x7f00000002c0)='./file0\x00', 0x0, 0x100, r0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb4050000e30000ee9cd52840fafd3493776665d4cd12c63d34", 0xb}], 0x1, 0x0, 0x0, 0x406}, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000b80)="d50000000000000002", 0x9}, {0x0}], 0x2, 0x0, 0x0, 0x400}, 0x4) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) ioctl$TIOCSETA(r1, 0xc4504445, &(0x7f0000000740)={0x2f, 0x5, 0xa9, 0x0, "0400000000800000ebb178d952d6d31962fff0d1", 0x9, 0x2}) (async) setreuid(0xee00, 0x0) (async) ktrace(0x0, 0x5, 0x128, 0xffffffffffffffff) (async) sysctl$net_inet_tcp(&(0x7f0000000a40)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, &(0x7f0000000b40)="bf8c696d", 0x4) (async) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket(0x1, 0x3, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]}) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="8165", 0x2}], 0x1) (async) sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="2237c0b74dab5d00461a000000f8ffffdf540f2e0bc130b6aa516556e18dd8d9cb2adc5a21aa462200079207", &(0x7f0000000080)=0x2c, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) (async) write(r4, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x10}, 0x40c) (async) open$dir(&(0x7f0000000b80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x40) setuid(0xee01) (async) r5 = shmget$private(0x0, 0x2000, 0x513, &(0x7f00001e1000/0x2000)=nil) shmctl$IPC_SET(r5, 0x1, &(0x7f00000001c0)={{0xffffffff, 0x0, 0x0, 0x0, 0x140, 0x4}, 0x0, 0x8, 0x0, 0x0, 0x10000, 0x9, 0x80000000}) shmget$private(0x0, 0x3000, 0x717, &(0x7f0000012000/0x3000)=nil) 518.993307ms ago: executing program 7 (id=232): setuid(0xffffffffffffffff) (async) r0 = socket(0x11, 0x8003, 0x0) getsockopt(r0, 0x11, 0x4, 0x0, 0x0) (async) r1 = getppid() ktrace(0x0, 0x5, 0x40001124, r1) 518.408008ms ago: executing program 5 (id=233): r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x3402) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000300)='./file1\x00', 0xc2) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000340)='./file0\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000540)="19", 0x1}], 0x1) ioctl$WSDISPLAYIO_LDFONT(r1, 0x8058574d, &(0x7f0000000000)={'./file0\x00', 0x4, 0xff, 0x2, 0x1, 0x8, 0x3, 0x80000000, 0x0, 0x0, 0xe, 0x4}) open$dir(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) 517.921962ms ago: executing program 6 (id=234): setrlimit(0x8, &(0x7f0000000040)={0xa, 0x50}) setrlimit(0x7, &(0x7f00000000c0)={0x2, 0x6cd6aa2b}) (async, rerun: 32) syz_emit_ethernet(0x8e, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) (async, rerun: 32) r0 = syz_open_pts() close(r0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, r0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, 0x0, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x1, 0x0, 0xfffffffffffffffe, 0xa000000120000000, 0x800000000000000}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f00007e2000/0x4000)=nil, 0x4000, 0x5) (async) r1 = socket(0x2, 0x3, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x402}]}) (async, rerun: 32) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="65a0b59443c5eabfedf9e2011c5dc17154e0d316c8c7d3335c92715c", 0x1c}], 0x1) (async, rerun: 32) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000000008004500001c000000000011907800000000ffffffff4e204e2300089078e3af4cf38dd51d90d39e356cda5c297962fa71bace7dcd32087f25f1c058eb8bbb2bcc32ac3236281c564f1c60a1ff789c66b2b1a80be59b8b5485a407d06e4c21bd71a5e05c2cfb0ea471602607c9e79b7524a01c6255dd0bab87abb32f7c2d00000000116f1f97aa03234fa636916662d19847ebc7e0ad3fc35735060a93526ccbcdbaa2260b8e706999ceec"]) (async) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x3e, 0x0, 0x0) (async) bind(r1, &(0x7f0000000000), 0x10) connect$unix(r1, &(0x7f0000000000), 0x10) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) (async) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) lseek(r0, 0x6, 0x0) (async, rerun: 32) socket(0x6, 0x1, 0x0) (async, rerun: 32) syz_open_pts() 517.529477ms ago: executing program 7 (id=235): syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast1, @multicast1}}}}}}) clock_gettime(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000002d00)=0x9) r3 = getpgrp() r4 = socket(0x2, 0x400000000002, 0x0) dup2(r4, r1) fcntl$setown(r2, 0x6, r3) shutdown(r2, 0x2) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1490403e87825048, 0x810, 0xffffffffffffffff, 0x7) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x26, 0x10, 0x2, 0x1}, {0x16, 0x97, 0x7e, 0x4013}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="a616165d000000fc9b6ef46d06e8775492d82f8a89dbb53bd806a6e0cc9166f07b7d9ecd95becc3555fd76f7baba8027b9ba9fc1ede6dfce5d28030000004da3a9c53b528a87ddda", &(0x7f0000000080)=0x48, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r5, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe) close(r0) r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$WSKBDIO_SETMAP(r6, 0x8010570e, &(0x7f0000000080)={0x0, 0x0}) ioctl$VT_OPENQRY(r0, 0x40047601, &(0x7f00000000c0)) setsockopt$sock_int(r0, 0xffff, 0x1008, &(0x7f0000000000), 0x4) 398.42954ms ago: executing program 4 (id=236): syz_emit_ethernet(0xe, &(0x7f0000000700)={@broadcast, @random="655b5a1b03e2", [], {@generic={0x8848}}}) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() getrlimit(0x6, &(0x7f0000000000)) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="6fcba96e64d77dfe77d06091c8341acb34f68c0a", 0x14}], 0x1) readv(r1, &(0x7f0000000600), 0x10000000000002a5) 397.243402ms ago: executing program 5 (id=237): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x1, 0x8e, 0x4c, 0x7}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = socket(0x18, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000400)="cb48fff35a06020015e1e2a5e4f14e5ed155e4156c6d402d1ceea45a5ac3d5eed91bb10bc30f7a908abd8081cad5f1c9a421f1f4cfd1c2feea7c4aee3a60a98c8699ad2781367f732fa61a054dc68abfdf0aed567c96bec66cfd1288d83b113035a75afbfa0100000042840f490320bdbacfe7bd9244fa0ab32d93cb1519b2f66ff14cb750faf2d85833", 0x8a}], 0x1) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000480)) mlock(&(0x7f0000002000/0x3000)=nil, 0x3000) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) setsockopt(r0, 0x1000000000029, 0x3b, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa7fd67572210786dd600755"]) 395.466256ms ago: executing program 6 (id=238): r0 = socket(0x18, 0x2, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000001180)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0x100000}, {0x6, 0x0, 0x0, 0xfffffffe}]}) syz_emit_ethernet(0x10004, &(0x7f0000000000)=ANY=[]) setsockopt(r0, 0xa7, 0x7, &(0x7f0000000000)="4a126edbcf69f2f784e6945eb975a1d3f3d83d0ebd16784cd0111d9c740099016f211b06e00be1a72e05f8f87077710cd46d8994", 0x34) setsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f0000000080)=0x25, 0x4) 394.011339ms ago: executing program 7 (id=239): sysctl$kern(&(0x7f0000000040)={0x1, 0x55}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x57, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00') unveil(&(0x7f0000000180)='.\x00', &(0x7f00000000c0)='r\x00') execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 288.937149ms ago: executing program 0 (id=240): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0xc) r1 = socket(0x18, 0x3, 0x3a) r2 = dup(r1) ioctl$VMM_IOC_READREGS(r2, 0xc028756b, &(0x7f00000005c0)) sysctl$kern(&(0x7f0000000000)={0x1, 0x58}, 0x2, &(0x7f0000000880)="9bbab8a1", &(0x7f0000000540)=0x4, &(0x7f00000009c0), 0x0) link(&(0x7f0000000240)='./file0\x00', 0x0) 277.425885ms ago: executing program 6 (id=241): sysctl$net_inet6_icmp6(&(0x7f0000000400)={0x4, 0x18, 0x3a, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x49) setreuid(0xee00, 0x0) mknod(0x0, 0x2000, 0x287e) kevent(0xffffffffffffffff, &(0x7f0000000180)=[{{}, 0xfffffffffffffffc, 0x78af09b1f23c0e93, 0x20, 0xfffffffffffffffe, 0x200}], 0xfffffff6, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000140)=[{{}, 0xfffffffffffffff9, 0x5, 0x10}], 0x0, 0x0, 0x4, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0xffffffffffffffff}, 0x1008402}) mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) r2 = socket(0x800000018, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1e6, 0xfffb}, 0x0, 0x0, 0x8001}) r3 = socket(0x800000018, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r4, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) bind$unix(r1, &(0x7f0000000200)=@abs={0x1, 0x0, 0x2}, 0x8) shutdown(r1, 0x2) listen(r1, 0x81) r5 = socket$unix(0x1, 0x5, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) kevent(r0, 0x0, 0x80000000, &(0x7f0000000200), 0x6, 0x0) r6 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffb000/0x2000)=nil) shmat(r6, &(0x7f0000ffd000/0x1000)=nil, 0x1000) kevent(r0, &(0x7f00000001c0), 0xfffffffb, 0x0, 0x8000800, 0x0) ioctl$FIONREAD(r5, 0x4004667f, &(0x7f0000000040)) getuid() 276.795004ms ago: executing program 3 (id=242): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = kqueue() mknod(0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) socket(0x11, 0x0, 0x0) sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x800000018, 0x2, 0x0) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x29, 0xe, &(0x7f0000000000)="02000000", 0x4) dup2(r3, r2) listen(r2, 0x0) kevent(r1, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) r4 = socket(0x2, 0x2, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r5, 0xc0206983, &(0x7f00000001c0)) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setuid(0xffffffffffffffff) ioctl$BIOCLOCK(r6, 0x20004276) r7 = kqueue() r8 = syz_open_pts() kevent(r7, &(0x7f0000000080)=[{{}, 0xfffffffffffffffe, 0x90, 0x1, 0x5, 0x7}, {{r8}, 0xfffffffffffffffe, 0x20, 0x80000000, 0x6, 0x2}, {{r1}, 0xfffffffffffffffe, 0x98, 0x40, 0x4, 0x6}], 0xe, &(0x7f00000002c0)=[{{r0}, 0xfffffffffffffff8, 0x82, 0x0, 0x8}, {{r4}, 0xfffffffffffffff9, 0x0, 0x80, 0xfffffffffffffff1, 0x4234}, {{}, 0xfffffffffffffffd, 0x4, 0x2, 0xf, 0x77c2}, {{r5}, 0xfffffffffffffffd, 0x8, 0x2, 0x1, 0x810c}, {{r6}, 0xfffffffffffffff8, 0x3a, 0x40000000, 0x5}, {{r5}, 0xfffffffffffffff9, 0x10, 0x10, 0x81, 0x1000}, {{r5}, 0x0, 0x4, 0x20, 0x1ff, 0x846}, {{r6}, 0xffffffffffffffff, 0xc4, 0x2, 0x1, 0x1}, {{r6}, 0xfffffffffffffff8, 0x70, 0x1, 0x9, 0x2}], 0x80000001, &(0x7f0000000100)={0x5, 0x2}) ioctl$BIOCGDIRFILT(r6, 0x4004427c, &(0x7f0000000040)) 225.957821ms ago: executing program 7 (id=243): mknod(0x0, 0x100, 0xffffffff) socket$unix(0x1, 0x5, 0x0) (async) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r1 = socket(0x1, 0x4000, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, &(0x7f0000000280)) listen(r0, 0x4) (async) listen(r0, 0x4) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) socket(0x2, 0x3, 0x0) (async) r4 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f00000001c0)={0x1, &(0x7f0000000480)=[{0xb75, 0x7, 0x7, 0xe15}]}) (async) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f00000001c0)={0x1, &(0x7f0000000480)=[{0xb75, 0x7, 0x7, 0xe15}]}) r5 = socket(0x1, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) r6 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r6, 0x80105728, &(0x7f0000000080)={&(0x7f00000000c0)=[{0xad}, {0xc9, 0x7}], 0x2}) ioctl$WSMOUSEIO_GETPARAMS(r6, 0x80105727, &(0x7f0000000080)={&(0x7f0000000240)}) (async) ioctl$WSMOUSEIO_GETPARAMS(r6, 0x80105727, &(0x7f0000000080)={&(0x7f0000000240)}) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) r7 = kqueue() kevent(r7, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) (async) kevent(r7, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) ioctl$FIONREAD(r4, 0xc0206921, &(0x7f0000000140)) ioctl$BIOCSHDRCMPLT(r3, 0x80044275, &(0x7f0000000240)=0x401) r8 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r8, 0x80206916, &(0x7f00000001c0)) ioctl$TIOCGETA(r2, 0x402c7413, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) pwritev(r2, &(0x7f0000000500), 0x0, 0x1) connect$unix(r9, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000300)={0x7, &(0x7f00000002c0)=[{0x4, 0x1, 0x4}, {0x7, 0x0, 0xd2, 0x7fff}, {0x7, 0xae, 0x7, 0xfffffff8}, {0x4, 0x3, 0x4, 0x4}, {0x3ca, 0xf, 0x4, 0xa42}, {0x80, 0x1, 0x2, 0x2}, {0x1, 0xf, 0xa, 0x2}]}) dup(r1) (async) r10 = dup(r1) ioctl$TIOCEXCL(r10, 0x2000740d) (async) ioctl$TIOCEXCL(r10, 0x2000740d) accept$unix(r0, &(0x7f0000000080)=@file={0x0, ""/95}, &(0x7f0000000040)=0x61) recvfrom$unix(r1, &(0x7f0000000340)=""/180, 0xb4, 0x0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0xa) 224.820156ms ago: executing program 3 (id=244): utimes(0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0xb}, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffed3) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) chroot(&(0x7f0000000040)='./file0\x00') sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0xa}, 0x4, &(0x7f0000000500)="f9fb9d0d1fb124d1464f9be5114cac1137fc1ee3fc5e0da021910f18c4372e95617765da7259434b6202000000000000002d774d18ee410d441f5f462105e751dd3d8c8797ba688a890d6316293ee1455aeef8e074728ffdbec4965bb29553d4c52f627e254569a19eb2ae6b243eb4c96ca552a18671a33fc6be8176f0d44a97bcc9964b67c198834eff8cbb854dd4a998336ef144141c8448f34bff92b1221afc1a96c0463ed48b24fab55091e2283ad69a7058d355346db461282d3bee9133c6c1dd4aaf17ee4752082187ab1074b6d5143d51a6bd1afeace75886a65566672b3b3444aa4898af50e29fc56a157401bac672e1515c371622354f61ed6b9c86a88493925fdca357604717d0cfff0f543ab394c33d4e613a99ef61f90233a59b854884ef8bcb8d9ad2ee1b77d2b47404f8c53864a1f9adfe70c07c00ad3994f805c7e74242c8776ccc7d7e63ce20ff474fa3a61c0060a7df860000bcba2049e5d9043d9eb9f9d3d25271fb4bcae77e4b5723d13da291370d4c9061f25117fd0beceea99e265b79fedf3f7fb3f0539d6a632c303e54cff123d2bc54172f9854542677fe", &(0x7f0000000180)=0x1a3, &(0x7f0000000440)="02024149bb8467b11bb20dd11d98a2614ccfc9bba25db22ba646bb0f9aef022b300145c53782a2536fb1a73ff7d8bd7a424d0ce37f3cdb9497c9c79d1b7d5bfe7d9a72db1d51b21ba16a800d91eecad0b9a6363b2006e8c0ac515dd6d1e824e1357982157cf361c86ee930f306fc30234392d0dff3a1440004bf7d95506f35eb81dedc1d35ecf69deff981402316780e", 0x90) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x16}, 0x4, &(0x7f00000006c0)="9cce763c64220952943faf1a42671728768c76012ef23b8ff4ba2a47605b4beda2fcf1cab319ef582550886ab4be8f35565b5b9220b10f183f7b7da49cf5b5953a1a5c55fae0d564455702b7d3c73032cf023262b535ac2bd9092007e77a57f215d9c55adea470aff4b44a0532169ec08e9901323b67e41d66ec85bf4e8d9884d17b212f32d61f7e5e31a1518b5b75f1948e94de16cbeb2c15631fb645c7c999b8817a522ef338af0e9af8696b6b9a07c91128191dee31db52192fb954928bfc1ed66848aad8676d189c305831b15b4d7ab13b85", &(0x7f0000000100)=0xd4, &(0x7f00000001c0)="36ee7d4d600d670a7b3811990e581e739abada6a6e4ff55562ce12831298a589289ebe34c7dba87717124a2bbe94804729bde0013e88adbf88df8cdb5dc43efbbffdbbbefeacabc4ff3f9c189c9e4b0fe42927dfa8888887db3430b88c91639e701398da73d5463b45ca1231a65e03b6d55a792a4bf47c5beaa08287912e2480adde075399738d9b484304ec283517fe87111f8ca46d23db85a838a1fd3504b8c6c5834a158750515552d750937601d4", 0xb0) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x5, &(0x7f0000000500), 0x0, 0x0, 0x20) sysctl$net_inet_tcp(&(0x7f0000000280)={0x4, 0x2, 0x6, 0xc}, 0x4, &(0x7f00000002c0)="6ec9f697cdc2e368d7760a776010e4c8ae556f46f1a65f639b462f4c11c73d74a97c152821d5fcf7ce1e4f94668193163588b021608d2c38740e1268cd0f4af0ae67f9785e37543c4c01c4097099e5bf7fe01ca8c6cee363aedda68c1caa99c210f9b4d1d7666f1447ca7369e7400112bc2dd73df9fd143bff2c6949a4063a40c2fa0f11dd179cdbf9432736cca163f59e783ff55b153b073d3edf06180eda", &(0x7f0000000380)=0x9f, &(0x7f00000003c0)="66d1d84a400bf23cfc52ef9d67c23523573e2996bea4c9f2dc1cfb55a47b1879862619b9a0d737a8bf860f452373a5d63a28243c3276bb093456b516f4d1024a0416d7af8d9d859a50d9345f73b9bb43a3eef5af07e69839e2905fb76e41ae013a325a", 0x63) 7.649757ms ago: executing program 0 (id=245): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0xfffffffffffffe20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) r1 = socket(0x18, 0x1, 0x0) getsockopt(r1, 0x29, 0x7, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)={0x3, 0x7fffffff}) r2 = kqueue() kevent(r2, &(0x7f0000000040), 0x8, 0x0, 0x57d, 0x0) close(r2) close(r0) r3 = socket(0x6, 0x2, 0x3a) setsockopt(r0, 0x1000000029, 0x2e, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x40) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x19}, 0x0, 0xe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000000000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000140)=':::@-\xec!\x00', &(0x7f0000000180)=':4{^^1\x00', &(0x7f00000001c0)='.\x00', &(0x7f0000000200)='[#))\'\x00', &(0x7f0000000240)='%\x00', &(0x7f0000000280)='&%:*\x00'], &(0x7f00000003c0)=[&(0x7f0000000340)='*$\x00', &(0x7f0000000380)='}-.%\'\x00']) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r5, 0xffff, 0x1024, 0x0, 0x0) write(r3, &(0x7f00000002c0)="bfbb12aef196d43f19", 0x9) 2.436853ms ago: executing program 3 (id=246): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x7, 0x102, 0x80000001, 0x33a, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71004}, {0x7, 0x4, 0x8, 0xfffffff8}, {0x8, 0xf86, 0x0, 0xaf9}, {0x1, 0x800, 0x7}, {0xfff, 0x7fff, 0xd, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0x1cdf, 0x1, 0x4f8, 0x6d}, {0xa, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0x88}, {0x4, 0x10001, 0x9, 0xaeb}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8c, 0x4, 0x5, 0x6}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0x4, 0x7, 0x2006, 0x6}, {0x0, 0x1, 0x4, 0x30000}]}) (async) r0 = socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x1000000029, 0x1a, &(0x7f0000000000)="02000000", 0x4) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) ftruncate(r3, 0x79c8) (async) truncate(&(0x7f00000000c0)='./file0\x00', 0xa) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) (async) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sysctl$hw(&(0x7f0000002bc0)={0x6, 0xe}, 0x2, &(0x7f0000002c00)="4c3fb4305332b4", &(0x7f0000002d00)=0x7, 0x0, 0x0) (async) write(r4, &(0x7f0000000280)='F', 0x1) recvmmsg(r5, &(0x7f0000000880)={&(0x7f0000000840)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/229, 0xe5}], 0x1, 0x0}, 0x10}, 0x10, 0x42, 0x0) (async) readv(r5, &(0x7f0000000040)=[{0x0}], 0x1) poll(&(0x7f0000000000)=[{}], 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r6 = socket(0x2, 0x1, 0x0) setsockopt(r6, 0x0, 0x4, &(0x7f0000000000)="f4afe25e", 0x4) execve(0x0, 0x0, 0x0) 2.046614ms ago: executing program 0 (id=247): unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x0) faccessat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 1.495023ms ago: executing program 5 (id=248): r0 = syz_open_pts() (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r1, 0x0) (async) ftruncate(r1, 0x79c8) (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f0000001480)=[{0x0}], 0x1) (async, rerun: 32) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) (async, rerun: 32) writev(r1, &(0x7f0000001280)=[{&(0x7f0000000140)="d9abb9ae78cf03", 0x7}], 0x1) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000007c0)={0x3, 0x4, 0xffefbff6, 0x0, "0000ffffffffff9b752d0200", 0x0, 0x8}) (async, rerun: 32) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="8269cd28367f22fc85ef3a6eb30547a68400fffb8db76e74c03d6cc2eea2782146294dcbb86fb2c2ccc1624d4a3e35d69a1c9c89b74aacaa51d8dd7c50553dbd58a011716f9f1dcbf02eaf668240b786e4dbbd5f2fd65b9098e719c6f8fbd20506dfbadc0d", 0x65}], 0x1) (async, rerun: 32) write(r0, &(0x7f00000001c0)="ad56463e", 0x4) (async, rerun: 64) syz_open_pts() (rerun: 64) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, "d7e6bb63f835ba0f0224428f455eca5bc615922a", 0xa2}) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000080)) unveil(0x0, &(0x7f0000000000)='x\x00') sendto$unix(0xffffffffffffffff, &(0x7f0000000180)="b1000501600000000000000007000000330002000000000000f96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236de351e2f0ac3ebbc257699a5f139b67", 0x51, 0x0, 0x0, 0x0) (async) mknod(&(0x7f0000000500)='./file0\x00', 0x1000, 0x0) (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x41) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r2, 0x8020699d, &(0x7f00000001c0)) 0s ago: executing program 7 (id=249): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) (async) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) close(r0) (async, rerun: 32) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)="3d27033c4a8b7f3fbb603a7de0ca3911f6ea69", 0x13) (async, rerun: 32) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$WSDISPLAYIO_GETSCREENTYPE(r2, 0xc028575d, &(0x7f00000000c0)={0x6, 0xe, './file0\x00', 0xa334, 0x8, 0x0, 0x10001}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. #!•¡„å'ѧŠKýà×Ú&B?wZº6_ð·ÉU×GZÒ‚z[$–Kˆà6™oZèHîÒ¬J6./file0fuse: Cannot find fusebuf WpanARiNcI:NG :m tSxP L0 xfNOfTf fLffOWEfRfE8D3 9OfNb 0T8R0:AP lEocXkIiTn g a a0 gStopped at proc_trampoline+0xc7: movl $0,%gs:0x680 TID PID UID PRFLAGS PFLAGS CPU COMMAND 177233 94825 0 0 0 0 syz-executor *159505 32706 0 0 0 1 syz-executor proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x73a144695c50, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu0: mtx 0xffffffff839fb080: locking against myself ddb{1}> trace proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x73a144695c50, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff8000348b5a20 rbx 0 rdx 0 rcx 0xffff80003c4e1c60 rax 0x2a r8 0xffff8000348b5950 r9 0x1 r10 0xf386b66537a1d122 r11 0xc83b375e53bfe3c9 r12 0 r13 0xffffffff81918968 Xdoreti+0x18 r14 0 r15 0 rip 0xffffffff8114e4c7 proc_trampoline+0xc7 cs 0x8 rflags 0x246 rsp 0xffff8000348b59a0 ss 0x10 proc_trampoline+0xc7: movl $0,%gs:0x680 ddb{1}> show proc PROC (syz-executor) tid=159505 pid=32706 tcnt=3 stat=onproc flags process=0 proc=0 runpri=86, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c5b14c0,0xffff80003c4e02d0 process=0xffff80003b4dd718 user=0xffff8000348b0000, vmspace=0xfffffd806ba5a908 estcpu=36, cpticks=8, pctcpu=0.0, user=6, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 8953 304874 77386 0 2 0 syz-executor 8953 130154 77386 0 3 0x4000080 fsleep syz-executor 94825 177233 42783 0 7 0 syz-executor 94825 474409 42783 0 3 0x4000000 uobjlk syz-executor 94825 288813 42783 0 3 0x4000000 biowait syz-executor 94825 28516 42783 0 2 0x4000000 syz-executor *32706 159505 44976 0 7 0 syz-executor 32706 441178 44976 0 3 0x4000080 fsleep syz-executor 32706 200825 44976 0 2 0x4000000 syz-executor 88354 273746 39767 0 2 0 syz-executor 88354 116087 39767 0 2 0x4000000 syz-executor 88354 142492 39767 0 2 0x4000000 syz-executor 88354 14892 39767 0 3 0x4000080 fsleep syz-executor 38047 262758 29317 60928 2 0x10 syz-executor 38047 279519 29317 60928 3 0x4000090 kqread syz-executor 38047 503327 29317 60928 2 0x4000010 syz-executor 38047 399266 29317 60928 3 0x4000090 fsleep syz-executor 8955 425572 97331 0 3 0x80 nanoslp syz-executor 8955 255501 97331 0 3 0x4000080 ttyin syz-executor 8955 427884 97331 0 3 0x4000080 fsleep syz-executor 44843 59920 0 0 3 0x14200 bored sosplice 42842 260162 0 0 3 0x14280 nfsidl nfsio 89188 492952 0 0 3 0x14280 nfsidl nfsio 27598 462490 0 0 3 0x14280 nfsidl nfsio 25579 161258 0 0 3 0x14280 nfsidl nfsio 8461 483988 0 0 3 0x14280 nfsidl nfsio 33880 497069 0 0 3 0x14280 nfsidl nfsio 68681 402520 0 0 3 0x14280 nfsidl nfsio 39892 382731 0 0 3 0x14280 nfsidl nfsio 56259 275635 0 0 3 0x14280 nfsidl nfsio 89136 476377 0 0 3 0x14280 nfsidl nfsio 4988 102884 0 0 3 0x14280 nfsidl nfsio 26006 291563 0 0 3 0x14280 nfsidl nfsio 46313 133695 0 0 3 0x14280 nfsidl nfsio 871 518642 0 0 3 0x14280 nfsidl nfsio 7673 101744 0 0 3 0x14280 nfsidl nfsio 32570 466155 0 0 3 0x14280 nfsidl nfsio 55031 125612 0 0 3 0x14280 nfsidl nfsio 21935 185948 0 0 3 0x14280 nfsidl nfsio 30761 429857 0 0 3 0x14280 nfsidl nfsio 29481 227945 0 0 3 0x14280 nfsidl nfsio 61215 213043 0 0 3 0x14200 acct acct 28935 459069 2121 0 3 0x100082 sbwait arp 2121 421358 8861 0 3 0x10008a sigsusp sh 77386 289532 41873 0 3 0x82 nanoslp syz-executor 29317 13708 41873 0 3 0x82 nanoslp syz-executor 42783 49838 41873 0 3 0x82 nanoslp syz-executor 97331 56260 41873 0 3 0x82 nanoslp syz-executor 39767 347935 41873 0 3 0x82 nanoslp syz-executor 74813 389107 41873 0 3 0x82 wait syz-executor 8861 190566 41873 0 3 0x82 wait syz-executor 44976 450759 41873 0 3 0x82 nanoslp syz-executor 41873 354578 65210 0 3 0x82 kqread syz-executor 65210 190089 55324 0 3 0x10008a sigsusp ksh 55324 475048 52568 0 3 0x98 kqread sshd-session 52568 168191 99965 0 3 0x92 kqread sshd-session 72447 245945 1 0 3 0x100083 ttyin getty 99965 483581 1 0 3 0x88 kqread sshd 53821 400814 84171 74 3 0x1100092 bpf pflogd 84171 238026 1 0 3 0x80 sbwait pflogd 14214 501463 98318 73 3 0x1100090 kqread syslogd 98318 226393 1 0 3 0x100082 sbwait syslogd 20474 149877 1 0 3 0x100080 kqread resolvd 86624 38058 5112 77 3 0x100092 kqread dhcpleased 41297 183613 5112 77 3 0x100092 kqread dhcpleased 5112 144827 1 0 3 0x80 kqread dhcpleased 5756 203659 0 0 3 0x14200 bored smr 51380 238771 0 0 2 0x14200 zerothread 78454 433887 0 0 3 0x14200 aiodoned aiodoned 11637 235969 0 0 3 0x14200 syncer update 52385 121909 0 0 3 0x14200 cleaner cleaner 1960 1490 0 0 3 0x14200 reaper reaper 76311 278845 0 0 3 0x14200 pgdaemon pagedaemon 75577 142297 0 0 3 0x14200 bored viomb 59124 211363 0 0 3 0x40014200 acpi0 acpi0 84692 397279 0 0 3 0x40014200 idle1 80796 420957 0 0 3 0x14200 bored softnet3 54914 61291 0 0 3 0x14200 bored softnet2 79546 333225 0 0 3 0x14200 bored softnet1 75771 93041 0 0 3 0x14200 bored softnet0 82447 3208 0 0 3 0x14200 bored systqmp 966 235452 0 0 3 0x14200 bored systq 51055 20120 0 0 3 0x14200 tmoslp softclockmp 16187 163701 0 0 3 0x40014200 tmoslp softclock 75516 524088 0 0 3 0x40014200 idle0 1 508128 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 0: exclusive mutex &uvm.pageqlock r = 0 (0xffffffff839fb090) #0 witness_lock+0x5bb #1 mtx_enter_try+0x178 #2 mtx_enter+0x60 #3 uvn_get+0x679 #4 uvm_fault_lower_io+0x319 #5 uvm_fault_lower+0x278 #6 uvm_fault+0x272 #7 upageflttrap+0xa9 #8 usertrap+0x2d8 #9 recall_trap+0x8 CPU 1: exclusive mutex &map->flags_lock r = 0 (0xfffffd806ba5a348) #0 witness_lock+0x5bb #1 mtx_enter_try+0x178 #2 mtx_enter+0x60 #3 vm_map_lock_ln+0x13f #4 uvm_map_clean+0x11b #5 syscall+0xb08 #6 Xsyscall+0x128 Process 94825 (syz-executor) thread 0xffff80003c4e02c0 (177233) exclusive rwlock uobjlk r = 0 (0xfffffd806a528d68) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 uvn_io+0x667 #3 uvn_get+0x31d #4 uvm_fault_lower_io+0x319 #5 uvm_fault_lower+0x278 #6 uvm_fault+0x272 #7 upageflttrap+0xa9 #8 usertrap+0x2d8 #9 recall_trap+0x8 Process 94825 (syz-executor) thread 0xffff80003c4e1740 (474409) exclusive rwlock vmmaplk r = 0 (0xfffffd806ba5a2e8) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 vm_map_lock_ln+0x12e #3 uvm_map_clean+0x11b #4 syscall+0xb08 #5 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff838ffce0) #0 witness_lock+0x5bb #1 syscall+0xae6 #2 Xsyscall+0x128 Process 94825 (syz-executor) thread 0xffff80003c5b19e0 (288813) exclusive rrwlock inode r = 0 (0xfffffd806b6cf960) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 sys_ftruncate+0x1c4 #6 syscall+0xb08 #7 Xsyscall+0x128 Process 38047 (syz-executor) thread 0xffff80003c4e0550 (503327) exclusive rrwlock inode r = 0 (0xfffffd806b6cfa78) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 vn_open+0x13f #8 doopenat+0x32e #9 syscall+0xbc6 #10 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10195 11040K 11624K 166960K 11612 0 pcb 18 12K 12K 166960K 54 0 rtable 162 6K 7K 166960K 345 0 pf 33 17K 22K 166960K 63 0 ifaddr 32 5K 7K 166960K 50 0 ifgroup 47 2K 2K 166960K 66 0 sysctl 4 1K 1K 166960K 4 0 counters 60 35K 36K 166960K 82 0 ioctlops 0 0K 4K 166960K 1500 0 iov 1 12K 28K 166960K 11 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1345 85K 85K 166960K 1558 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 11 0 VM map 2 1K 1K 166960K 2 0 sem 9 0K 0K 166960K 11 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 19 69K 93K 166960K 374 0 sigio 0 0K 0K 166960K 3 0 proc 73 103K 128K 166960K 559 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 158 0 in_multi 64 4K 6K 166960K 95 0 ether_multi 1 0K 0K 166960K 3 0 mrt 0 0K 0K 166960K 3 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 91 413K 413K 166960K 91 0 exec 0 0K 1K 166960K 383 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 247 153K 162K 166960K 5205 0 UVM aobj 16 2K 4K 166960K 18 0 pinsyscall 45 90K 108K 166960K 1448 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 10 0 NDP 10 0K 1K 166960K 30 0 temp 36 8678K 8742K 166960K 5091 0 kqueue 14 22K 26K 166960K 72 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 46 0 42 1 0 1 1 0 8 0 rtentry 168 105 0 35 5 0 5 5 0 8 0 unpcb 144 162 0 144 2 0 2 2 0 8 1 syncache 336 4 0 4 1 1 0 1 0 8 0 tcpcb 808 89 0 83 5 3 2 5 0 8 1 arp 120 18 0 4 1 0 1 1 0 8 0 inpcb 376 261 0 250 5 3 2 5 0 8 0 nd6 136 21 0 6 1 0 1 1 0 8 0 pkpcb 40 3 0 3 2 1 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1168 8 0 8 1 1 0 1 0 8 0 pppxif 1480 1 0 1 1 1 0 1 0 8 0 pffrag 232 2 0 0 1 0 1 1 0 482 0 pffrnode 88 2 0 0 1 0 1 1 0 8 0 pffrent 40 2 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 1 0 0 1 0 1 1 0 8 0 pftag 88 3 0 1 1 0 1 1 0 8 0 pfstitem 24 39 0 0 1 0 1 1 0 8 0 pfstkey 128 39 0 0 2 0 2 2 0 8 0 pfstate 376 38 0 0 4 0 4 4 0 8 0 pfrule 1344 24 0 18 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 417 0 135 27 2 25 27 0 8 3 art_table 32 418 0 135 4 0 4 4 0 8 0 art_node 16 104 0 42 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 0 1 0 1 1 0 8 0 semapl 112 9 0 2 1 0 1 1 0 8 0 shmpl 112 15 0 2 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 2026 0 519 95 0 95 95 0 8 0 ffsino 280 2026 0 519 109 0 109 109 0 8 0 nchpl 144 2545 0 857 63 0 63 63 0 8 0 rtmask 32 2 0 2 1 1 0 1 0 8 0 uvmvnodes 80 2223 0 0 46 0 46 46 0 8 0 vnodes 216 2223 0 0 124 0 124 124 0 8 0 namei 1024 8095 0 8094 2 1 1 1 0 8 0 percpumem 16 55 0 11 1 0 1 1 0 8 0 kstatmem 264 32 0 12 2 0 2 2 0 8 0 scxspl 216 8009 0 8007 6 5 1 4 1 8 0 plimitpl 152 109 0 90 1 0 1 1 0 8 0 sigapl 424 695 0 622 10 1 9 9 0 8 0 futexpl 64 3977 0 3972 1 0 1 1 0 8 0 knotepl 120 317 0 0 10 0 10 10 0 8 0 kqueuepl 216 167 0 155 5 4 1 5 0 8 0 pipepl 328 117 0 90 3 0 3 3 0 8 0 fdescpl 504 655 0 622 5 0 5 5 0 8 0 filepl 152 3108 0 2880 14 3 11 14 0 8 2 lockfpl 104 215 0 212 2 0 2 2 0 8 1 lockfspl 48 37 0 34 1 0 1 1 0 8 0 sessionpl 144 23 0 14 1 0 1 1 0 8 0 pgrppl 48 36 0 19 1 0 1 1 0 8 0 ucredpl 104 378 0 363 1 0 1 1 0 8 0 zombiepl 144 663 0 662 1 0 1 1 0 8 0 processpl 1176 695 0 622 6 0 6 6 0 8 0 procpl 656 1139 0 1052 9 1 8 8 0 8 0 srpgc 96 6 0 6 1 0 1 1 0 8 1 sockpl 688 476 0 443 7 3 4 7 0 8 0 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 110 0 0 14 0 14 14 0 8 0 mcl2k 2048 23 0 0 3 0 3 3 0 8 0 mtagpl 96 14 0 0 1 0 1 1 0 8 0 mbufpl 256 192 0 0 12 0 12 12 0 8 0 bufpl 280 2588 0 123 177 0 177 177 0 8 0 anonpl 24 118854 0 115330 35 11 24 34 0 184 0 amapchunkpl 152 15915 0 15402 31 3 28 28 0 158 8 amappl16 200 2143 0 2113 5 3 2 5 0 8 0 amappl15 192 8 0 8 2 2 0 1 0 8 0 amappl14 184 113 0 100 1 0 1 1 0 8 0 amappl13 176 4 0 4 1 1 0 1 0 8 0 amappl12 168 1321 0 1287 4 1 3 3 0 8 0 amappl11 160 52 0 37 1 0 1 1 0 8 0 amappl10 152 3 0 3 1 1 0 1 0 8 0 amappl9 144 251 0 251 1 1 0 1 0 8 0 amappl8 136 26 0 23 1 0 1 1 0 8 0 amappl7 128 107 0 93 1 0 1 1 0 8 0 amappl6 120 189 0 185 1 0 1 1 0 8 0 amappl5 112 119 0 110 1 0 1 1 0 8 0 amappl4 104 314 0 294 1 0 1 1 0 8 0 amappl3 96 2942 0 2824 4 0 4 4 0 8 0 amappl2 88 631 0 565 2 0 2 2 0 8 0 amappl1 80 9283 0 8649 15 0 15 15 0 8 0 amappl 88 4485 0 4314 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 17 0 2 1 0 1 1 0 8 0 uaddrrnd 24 655 0 622 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 655 0 622 1 0 1 1 0 8 0 vmmpekpl 168 7189 0 7154 3 0 3 3 0 8 0 vmmpepl 168 47689 0 45621 98 6 92 97 0 357 1 vmsppl 456 654 0 622 5 0 5 5 0 8 0 rwobjpl 64 17553 0 14330 53 1 52 52 0 8 0 pdppl 4096 1318 0 1244 96 22 74 86 0 8 0 pvpl 32 13589 0 0 111 1 110 110 0 265 0 pmappl 248 654 0 622 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 272 0 33 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff8385cff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x37 comcnputc(800,61) at comcnputc+0xd0 cnputc(61) at cnputc+0x61 db_putchar(61) at db_putchar+0x65c kprintf() at kprintf+0x2aba db_printf(ffffffff833deca0) at db_printf+0x9b panic(ffffffff833d519f) at panic+0x103 mtx_enter_try(ffffffff839fb080) at mtx_enter_try+0x1bf mtx_enter(ffffffff839fb080) at mtx_enter+0x60 uvm_pageclean(fffffd8007f12a20) at uvm_pageclean+0x290 uvm_pagefree(fffffd8007f12a20) at uvm_pagefree+0x26 end trace frame: 0xffff80003c509a10, count: 0 ddb{0}> trace x86_ipi_db(ffffffff8385cff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x37 comcnputc(800,61) at comcnputc+0xd0 cnputc(61) at cnputc+0x61 db_putchar(61) at db_putchar+0x65c kprintf() at kprintf+0x2aba db_printf(ffffffff833deca0) at db_printf+0x9b panic(ffffffff833d519f) at panic+0x103 mtx_enter_try(ffffffff839fb080) at mtx_enter_try+0x1bf mtx_enter(ffffffff839fb080) at mtx_enter+0x60 uvm_pageclean(fffffd8007f12a20) at uvm_pageclean+0x290 uvm_pagefree(fffffd8007f12a20) at uvm_pagefree+0x26 uvn_get(fffffd805f62b3c0,1000,ffff80003c509a78,ffff80003c509a54,0,2,6c0bfc477460f13e,ffff80003c509cd0) at uvn_get+0x68b uvm_fault_lower_io(ffff80003c509c98,ffff80003c509cd0,ffff80003c509b00,ffff80003c509b08) at uvm_fault_lower_io+0x319 uvm_fault_lower(ffff80003c509c98,ffff80003c509cd0,ffff80003c509c10) at uvm_fault_lower+0x278 uvm_fault(fffffd806ba5a1e8,200000001000,0,2) at uvm_fault+0x272 upageflttrap(ffff80003c509e20,200000001280) at upageflttrap+0xa9 usertrap(ffff80003c509e20) at usertrap+0x2d8 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7a257da5b030, count: -21 ddb{0}> machine ddbcpu 1 Stopped at proc_trampoline+0xc7: movl $0,%gs:0x680 proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x73a144695c50, count: 14 ddb{1}> trace proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x73a144695c50, count: -1