kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Fri Jul 31 00:06:35 PDT 2020 OpenBSD/amd64 (ci-openbsd-multicore-6.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.0.38' (ECDSA) to the list of known hosts. 2020/07/31 00:06:46 fuzzer started 2020/07/31 00:06:50 dialing manager at 10.128.15.235:22447 2020/07/31 00:06:50 syscalls: 381 2020/07/31 00:06:50 code coverage: enabled 2020/07/31 00:06:50 comparison tracing: enabled 2020/07/31 00:06:50 extra coverage: support is not implemented in syzkaller 2020/07/31 00:06:50 setuid sandbox: enabled 2020/07/31 00:06:50 namespace sandbox: support is not implemented in syzkaller 2020/07/31 00:06:50 Android sandbox: support is not implemented in syzkaller 2020/07/31 00:06:50 fault injection: support is not implemented in syzkaller 2020/07/31 00:06:50 leak checking: support is not implemented in syzkaller 2020/07/31 00:06:50 net packet injection: enabled 2020/07/31 00:06:50 net device setup: support is not implemented in syzkaller 2020/07/31 00:06:50 concurrency sanitizer: support is not implemented in syzkaller 2020/07/31 00:06:50 devlink PCI setup: support is not implemented in syzkaller 2020/07/31 00:06:50 USB emulation: support is not implemented in syzkaller 2020/07/31 00:06:50 hci packet injection: support is not implemented in syzkaller 00:06:56 executing program 0: socket(0x1, 0x3, 0x9) r0 = getpid() pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) ioctl$WSDISPLAYIO_DELFONT(r1, 0x8058574f, &(0x7f0000000040)={'./file0\x00', 0xfff, 0x6, 0xdd, 0x0, 0x1, 0x401, 0x21, 0x2, 0x1, 0x4, 0x1}) r3 = syz_open_pts() ioctl$TIOCGWINSZ(r3, 0x40087468, &(0x7f00000000c0)) r4 = socket(0x6, 0x8001, 0x9) r5 = geteuid() r6 = getgid() fchown(r4, r5, r6) ioctl$TIOCSCTTY(r2, 0x20007461) getgid() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000100)={0xffffffff, 0x0, 0xf80, 0xffff0000, "b87d0995cf7573208acdf2f9d5a017106b14d8cc", 0x9}) r7 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x0, 0x22) ioctl$WSDISPLAYIO_SETSCREEN(r7, 0x80045756, &(0x7f0000000180)=0x7fffffff) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$TIOCSETA(r8, 0x802c7414, &(0x7f00000001c0)={0x100, 0xff, 0x0, 0x8, "0c8fd6cb3c7cebee38bd38a2e04579185802d98c", 0x9, 0x1}) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) r10 = getppid() sendmsg$unix(r9, &(0x7f00000006c0)={&(0x7f0000000240)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000000340)=[{&(0x7f0000000280)="635daea9ad49db641eb03132d439a9c957911dd791d1918eddbd97f9712a42a710f10e607579f57c", 0x28}, {&(0x7f00000002c0)="3f545de1ece060f4de75bf907a86bdc8ea10d80b08302a027db0c035b617317b72bccae529614dc83f236062127adfe25529e7e13ed68a2e02adc10ee43466d0c936804c5591b3deeaf1116c9e22eb45d0500c97a3b8e7e449c05c1c9d251584c2009379f0525c15de", 0x69}], 0x2, &(0x7f00000005c0)=[@cred={0x20, 0xffff, 0x0, r10, r5}, @rights={0x28, 0xffff, 0x1, [0xffffffffffffffff, r4, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, @rights={0x10}, @cred={0x20, 0xffff, 0x0, r0, 0x0, r6}, @cred={0x20, 0xffff, 0x0, 0x0, r5}, @rights={0x28, 0xffff, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @rights={0x30, 0xffff, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, r4]}], 0xf0}, 0x40c) 00:06:56 executing program 1: readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/132, 0x84) open$dir(&(0x7f0000000100)='./file0\x00', 0x8, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0, 0x3) r0 = open(&(0x7f0000000180)='\x00', 0x80, 0x0) r1 = accept$unix(r0, &(0x7f00000001c0)=@abs, &(0x7f0000000200)=0x8) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000240)=0x401) link(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00') kqueue() ioctl$VMM_IOC_INTR(r0, 0x800c5606, &(0x7f0000000300)={0x1, 0x800, 0x2}) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/wskbd0\x00', 0x20000, 0x0) msgget$private(0x0, 0x4a0) chdir(&(0x7f0000000380)='./file1\x00') r2 = openat$tty(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/tty\x00', 0x200, 0x0) close(r2) ioctl$WSDISPLAYIO_GETSCREENTYPE(r0, 0xc028575d, &(0x7f0000000400)={0x0, 0x1000, './file2\x00', 0x7, 0x8, 0x8, 0x248}) close(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x90, 0x0) ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000480)={0x81, 0x1, 0x2, 0x919, "30fdf8a859e4f5da362ae469f85ecc8199bf3b9d", 0x7fffffff, 0x80000001}) unlink(&(0x7f00000004c0)='./file2\x00') 00:06:57 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bpf\x00', 0x4000000005, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000100)=0x1) setreuid(0xffffffffffffffff, r2) r3 = semget$private(0x0, 0x4, 0x1) semctl$GETNCNT(r3, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r3, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r3, &(0x7f0000000240)=[{0x6cfc18e8446a4025, 0x8, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r4 = getgid() r5 = getgid() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x150, 0x9}, 0x8, 0x1, 0x9}) semctl$GETPID(0x0, 0x4, 0x4, &(0x7f0000000300)=""/217) r6 = getuid() setreuid(0xee00, r6) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f00000001c0)=0x2) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r4, r6, r5, 0x150, 0x9}, 0x8, 0x1, 0x9}) chown(&(0x7f0000000000)='./file0\x00', r2, r4) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000002c0)={0x3, &(0x7f0000000080)=[{0x2d}, {0x25, 0x0, 0x0, 0x7fff}, {0x6, 0x0, 0x0, 0x924}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) write(r0, &(0x7f0000000180)="3c9ebb8a65237a19000000000000", 0xe) 00:06:57 executing program 1: ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, [{}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x2}]}) r0 = socket(0x800000018, 0x3, 0x102) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) 00:06:57 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x8613c) r0 = open(&(0x7f0000000040)='./bus\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)="220e2a", 0x3) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{}, 0x10040044001000e, 0x400008001, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4002000102000000}) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="7d524bbcdb006224616b89dd98216ce0616119124d5cf9c2e084684494d15d2ddce7f9a83a8f9b0e10327afd5437e5d6c8825399d954b7783bc8dbdb41264f69597bfda7f956c1ba48dec13783ee128847bb58a561750ea52c652a36685ec3c55502aacf9b53522cd75b4b67b19ce56a4ed591ecc1888c2d4a6a3ca148a5a457b1d3010000008addcb00485764a7aabbb388d3b546d1c37d308e51c8e91cb9089a1fa3802e445e8160c3d11d329905c8d785caf089b87cc7c00621f86e5d3778960863b854", 0xc5}, {&(0x7f00000000c0)="dacf304ee9d88401080a162e7981c3fc0422e5b45d49b496cee12467e24786fd3a1fcc520f71cecb630654f7813b7de54196", 0x32}], 0x2, 0x0, 0x0) 00:06:57 executing program 1: clock_settime(0x3, &(0x7f0000000840)={0x9, 0x7}) getegid() 00:06:57 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) unveil(0x0, &(0x7f0000001580)='c\x00') r0 = socket(0x2, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TIOCFLUSH(r2, 0xc0106924, &(0x7f00000000c0)=0x6e) r3 = socket(0x6, 0x2, 0x0) fcntl$dupfd(r3, 0xa, r2) ioctl$SPKRTUNE(r2, 0x20005302, &(0x7f0000000000)={0x3ff, 0xfffffffa}) ioctl$WSKBDIO_GETENCODING(r2, 0x4004570f, &(0x7f0000000040)) 00:06:57 executing program 0: sysctl$kern(&(0x7f0000000000)={0x1, 0x12}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0x66, &(0x7f0000000040)={0x100, 0x1, 0x8f, 0x4e1a, 0x7}, 0xc) 00:06:57 executing program 0: unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='c\x00') mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, &(0x7f0000000240)=@un=@file={0xd80f49edce43012d, './file0\x00'}, 0xa) open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x80) 00:06:57 executing program 1: r0 = socket(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x842) socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r5, r4) socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r7, r6) sendmsg$unix(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000000340)=[{&(0x7f0000000100)="e0dc6e36e0b89d3c69bf3052fa6715f1cc0c0e25fe3cc0e85ffd45fbbc40339e002c2b433a5db1494fab8fa9e9602980d05b5ed2a421b263d9fc8494d16bd0ef211c6d61de3811c02d24f4038ca51b593c555ac2474e5d00edd9f510bbc0dd4bc62d57a8a4e028163907e52badb7d6871c187369446d6a3d38b4178ab2060952f98adad1d93c88d4cd1f3a69c8d0404738fc8219bedf50d8c15b685bb49df94ec750a4bbe0e6e150847bab9e28d8f765e7ad9b27afed24b28ca13e4302ec1365d5f72cac0ba9e649893f5786c6c48bf8530426f3bf5b933a63e82861d2180e", 0xdf}, {&(0x7f0000000200)="e2bcda5c1cdfc7fea75a167474986765c4cddd4825e6966544a3456be91b32d96bc4cd9898d01251ae7f2ad5642a1722c986fbab1c62de6294b9a41886324f97407f04684759fb3d88b8ad951f6fe43b04", 0x51}, {&(0x7f0000000080)="0000172d", 0x4}, {&(0x7f0000000280)="4a7bc2783a4ffc8b00b40ebb0d10c8513307a20a97941feeed5b2305570f58b9e677ccbab2c9fd944a8bdea456cc8ff67ae34edc078dd05d9f0aed6575acb34644245289b7147d313dfa6e9b134474721c16c703e1175c9274796b0426d169906a9fa5e54b6571566fb8e3c196c4ee1c029e5dea09950e25b03329fe2dd4ac536a75220f0d916261f2ab5c2410a5f8eb50619e6e9c679a8ffe5cfb5118f271a7411f29fd8672d5bb1b1232fb", 0xac}], 0x4, &(0x7f0000000440)=[@rights={0x20, 0xffff, 0x1, [r1, r0, r7, r4]}], 0x20}, 0x0) r8 = accept(0xffffffffffffffff, &(0x7f0000000040)=@in6, &(0x7f00000000c0)=0xc) setsockopt$sock_linger(r8, 0xffff, 0x80, &(0x7f0000000400)={0x3, 0x940c}, 0x8) 00:06:57 executing program 0: ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, "003700200b0f000005000000ac3900059d00"}) ioctl$WSKBDIO_SETBELL(0xffffffffffffffff, 0x80105703, 0x0) r0 = socket(0x18, 0x2, 0x0) socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x842) accept(r1, &(0x7f0000000140)=@in, &(0x7f0000000180)=0x67) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000040)=0x14) r2 = socket(0x18, 0x1, 0x0) r3 = socket(0x2, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$TIOCFLUSH(r5, 0xc0106924, &(0x7f00000000c0)=0x6e) r6 = socket(0x18, 0x2, 0x0) fcntl$dupfd(r6, 0xa, r5) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x8, &(0x7f0000000200)=0x9, 0x4) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) ioctl$VT_ACTIVATE(r7, 0x20007605, &(0x7f0000000080)=0x3) shutdown(r2, 0x2) 00:06:57 executing program 1: kqueue() socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r3) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x2, 0x2, 0x0) bind(r4, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) r5 = socket(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r6 = dup2(r4, r5) ioctl$WSDISPLAYIO_WSMOUSED(r6, 0x80185758, &(0x7f00000000c0)={0x3d, 0x5, {0x100000001, 0x80}}) connect$unix(r5, &(0x7f0000000000)=ANY=[], 0x10) recvfrom$inet6(r2, &(0x7f0000000180)=""/160, 0xa0, 0x442, &(0x7f0000000040)={0x18, 0x0, 0x9, 0x4}, 0xc) write(r4, &(0x7f0000002bc0)="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", 0xb39) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000080), 0x4) r7 = dup(0xffffffffffffff9c) fchmod(r7, 0x1) 00:06:57 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r1 = socket(0x2, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$TIOCFLUSH(r3, 0xc0106924, &(0x7f00000000c0)=0x6e) r4 = socket(0x18, 0x2, 0x0) fcntl$dupfd(r4, 0xa, r3) ioctl$VT_GETMODE(r3, 0x40087603, &(0x7f0000000000)) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000180)={0x3, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0x101}, {0x34, 0x0, 0x0, 0x81}, {0x6, 0x0, 0x0, 0x3f}]}) pwrite(r0, &(0x7f0000000040)="fbaf8a8d1a029be96914f6357e3a", 0xe, 0x0, 0x0) 00:06:57 executing program 1: openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000100)='/dev/wskbd\x00', 0x40, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pf\x00', 0x0, 0x0) ioctl$FIOASYNC(r0, 0xc0084463, &(0x7f0000000000)) socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x3) r2 = getpgid(0x0) semctl$SETVAL(0x0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(0x0, &(0x7f0000000240)=[{0x6cfc18e8446a4025, 0x8, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r3 = getgid() r4 = getgid() setreuid(0xee00, 0x0) semctl$SETVAL(0x0, 0x4, 0x8, &(0x7f00000001c0)=0x2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r3, 0x0, r4, 0x150, 0x9}, 0x8, 0x1, 0x9}) fcntl$getflags(r1, 0x1) semop(0x0, &(0x7f0000000180)=[{0x0, 0x20, 0x800}, {0x4, 0x4, 0x1000}, {0x3, 0x4, 0x1800}, {0x5}, {0x4, 0xffff, 0x1800}], 0x5) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x3, 0x0, 0x1, 0xffffffffffffffc1, r2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r5 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x1000000381, 0x0) r6 = dup(r5) ioctl$WSKBDIO_SETMODE(r6, 0x8010570e, &(0x7f0000000000)) 00:06:58 executing program 0: syz_emit_ethernet(0x6c, &(0x7f0000000080)={@broadcast, @local, [{[], {0x8100, 0x1, 0x0, 0x3}}], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x32, 0x6c, 0xff, @rand_addr="0000000000040000f917a3e90000c2a0", @mcast1, {[], @generic="a5c471e480d88b091fb7bed873ff23102fa7ffba7bdbb0d0369922822d78d4684a45d36fe05da53350251efb9f7df165f5e7"}}}}}) 00:06:58 executing program 0: ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000000c0)={0x0, &(0x7f0000000300)}) socket(0x2, 0x2, 0x2) r0 = socket(0x18, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x8, 0xc, &(0x7f0000000180)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000001c0)="e999166c7d1eca2bfeadcf615f56732880a390effb8623ac1c90347297e86f04418fc4a18ba84da22ff364fb0a1e72c6516d7cedbb980511d6d90ee4f88342830bb3c3b7dee756631add4790030448a7a66f8b4ed3762068e1fe8cd98e9e8ffbb991f0cbb79b0d33109ef9c15d07704136d67642ac86fd4918c733674a85da4fc4504885d4d40462ffa407a0401cf8ad1adcb48c033a729fef7f4f9265dbbf349bae901a8745a3fec54e28e62a7cc4dd5dd39d912d7e67ce751679ed171c75f1c9ec6f1db7c921cf4cffd74d85db78", 0xcf}, {&(0x7f0000000580)="11d41c497ef952474731e71ec3bf7789e36c63ac3735a9de162c18a0728747e8ae5b24c96673b00ae2aa4b8c3799b17b904b0b3e74738bd6d20041e05720ba3dccdba69341ac310e58cb6010f8cc75595f19c25d6647690f0692a18107e1119828c22f785362cbc7e727e77ed9af8ebd01c78c561b752042b51eaa0e3eb96555c0dcbd614912ede2979bc6f7a79046fd6ec0fcc109e829c4d158", 0x9a}, {&(0x7f0000000080)="c58a0da75c1f76f74c50c90f3583dcd57dbf0e6486b1b215a3eefed3d20e8016da20a7693dbb3ddf54f1a719", 0x2c}, {&(0x7f0000000640)="c44b4cd29f187154b8188e0e78bd924bd98b8830770b6d7d7df1f5cfa7b96b78860bfc41eb052fb51dabd604a764fe68054bdfa047773566eef482e9d540860ca4cc6271393f819288", 0x49}, {&(0x7f0000000800)="6851b84888590100000000000000e12c818862ca66d38d145048ddbb432d3c1fec4a1a6f3354e0e4244c01dc19825533a32ed829a6b97384f09859841a03a1903edf8ca0a364b53f78dddac15cc64651eeab30c5423c4b124f677099f152537014cfa34119d80df810590eb9249667c8142318705f34c47c6fc85f5fe0b9e1180c2de4de28525f0e3efa878c47c0bd44f6f2d53edda1ad0ac9f98f4ab597534f93727e0c8ea4e8c7598585e9184a2fc433b018520c6a813aa89c215331", 0xbd}, {&(0x7f00000002c0)="34d6ed6a47206d25785d376841749d6d554eae32056d19273fb4c51a53f5a226ea3bfc1f1fb6c4", 0x27}], 0x6) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = fcntl$dupfd(r0, 0xa, r1) ioctl$VMM_IOC_TERM(r2, 0x80045604, &(0x7f0000000000)={0x1}) accept(r2, &(0x7f0000000140)=@un=@abs, &(0x7f0000000040)=0x8) ioctl$TIOCFLUSH(r2, 0xc0106924, &(0x7f00000000c0)=0xffff) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000008c0)={0x0, 0x1, {[0xa, 0xff, 0x0, 0x100000001, 0x1, 0xfffffffffffffffd, 0x800000000000007, 0xffff, 0x0, 0x40, 0x3, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x3, 0xffffffffffffffff, 0x3, 0x35], [0x800000000, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40], [0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x3], [0x3ffffffffe, 0x3, 0x80001, 0x8, 0x0, 0x3fe], [{0x0, 0x0, 0x36b, 0x9}, {0x0, 0xffffffff, 0x0, 0x1}, {0x0, 0xfffffffd, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x21, 0x0, 0x40, 0x2}, {0x7fff}, {0x1, 0x1000000, 0x0, 0xffffffffffffffff}, {0x9}], {0xfffc, 0x1000, 0x8000, 0x100000000}, {0x0, 0xffffffff, 0x7}}}) r3 = socket(0x18, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = socket(0x18, 0x2, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TIOCFLUSH(r6, 0x81206919, &(0x7f0000000300)) ioctl$TIOCFLUSH(r4, 0x8080691a, &(0x7f0000000300)) 00:06:58 executing program 1: unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') sysctl$kern(&(0x7f0000000000)={0x1, 0x46}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x8, 0x10286) ioctl$TIOCFLUSH(0xffffffffffffffff, 0xc0106924, &(0x7f00000000c0)=0x6e) r1 = socket(0x18, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0xa, 0xffffffffffffffff) ioctl$TIOCFLUSH(r2, 0x8080691a, &(0x7f0000000300)) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000001c0)={0x6, 0x2, 0x0, 0xc1, "460bf63b0d4b9d54b76d13603a0eab8be0e196ce", 0x4, 0x9}) semop(r0, &(0x7f0000019280), 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0xc, 0x1000}, {0x4, 0x6, 0x1800}, {0x4, 0x100, 0x3c00}, {0x1, 0xffff, 0x1000}, {0x4, 0x3, 0x1000}, {0x4, 0x3, 0x800}, {0x4, 0x1ff, 0x1000}, {0x1, 0x7, 0x1000}, {0x0, 0x7}, {0x0, 0x2, 0x1000}], 0xa) semctl$GETPID(r0, 0x1, 0x4, 0x0) r3 = syz_open_pts() close(r3) ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f00000000c0)={0x0, 0xc3, 0x7, 0x1fc80d8c, "b4d515ccde7d971b0000000000000c0800"}) write(r3, &(0x7f0000000140)="2078f7b678807d89e032dc19f570fe00bac871767dbcbbff8330c22685419d5e0110188e90cd9c8e50599ba24cd7c19fe1397a431644e5976fe4bce3b20b21c3f3719d1d5de4b7586a0669ce8487b011b77b381db394acba77de08", 0x5b) ioctl$TIOCGFLAGS(0xffffffffffffffff, 0x4004745d, &(0x7f0000000240)) ioctl$TIOCFLUSH(r3, 0x80047410, &(0x7f0000000100)=0x7fff) semop(r0, &(0x7f0000000000)=[{0x1, 0x9, 0xc00}, {0x0, 0x8}, {0x4, 0x0, 0x800}, {0x0, 0x5, 0x1800}, {0x0, 0xffff, 0x800}], 0x5) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000280)=[0x9]) semop(r0, &(0x7f0000000200)=[{0x2, 0x80}, {0x3, 0xfdc5, 0x1000}, {0x1, 0x7, 0x800}, {0x0, 0x20}, {0x1, 0x4}], 0x5) 00:06:58 executing program 0: setrlimit(0x8, &(0x7f0000000040)={0x7, 0x2e}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x0, 0x7, 0xfffffffffffffff8, 0xfc80d8c, "00000000000000200800001700"}) writev(r0, &(0x7f0000001940)=[{&(0x7f0000000940)="e4da7d5c400069df5bcc46333048d057d8c85f69dad1d802a0b0bef6405c783ccb67d33f494fca8e316f48bfa6d26f9664379d8650976d1b5bd89776d68c9b05f0416640df359ef5642a3eaaf17c005efa14639be6fb52185ae303944e53ab89db3f480fed6cb0d2b15aeb5271bfa9e862952ab48af1b43f9fcff0d1468bf5f68d0c6b2df1859a0df3b427f9fe99bdad15a12609bc421c8cf9ef6690b68ca6a14fc51f5239476af915b8bb584019713fa11a3c333f85cc54355c3c7cbd6a1aecc812e9725a138e66ef3840520c5d3b1b6e08", 0xd2}], 0x1) 00:06:58 executing program 0: semctl$IPC_STAT(0x0, 0x0, 0x2, 0xfffffffffffffffe) r0 = semget$private(0x0, 0x5, 0x400) semop(r0, &(0x7f00000002c0)=[{0x4, 0x1, 0x1800}, {0x3, 0x9, 0x800}, {0x3, 0x1, 0x3800}, {0x3, 0xfffc, 0x800}, {0x0, 0x401, 0x1000}], 0x5) semop(0x0, &(0x7f0000000140)=[{0x0, 0xffffffff, 0xc00}, {0x2, 0x3, 0x1000}], 0x2) semctl$GETPID(r0, 0x1, 0x4, &(0x7f0000000000)=""/37) r1 = semget$private(0x0, 0x5, 0x204) semop(r1, &(0x7f0000000100)=[{0x3, 0x5022, 0x1000}, {0x1, 0x0, 0x1800}], 0x2) semop(r1, &(0x7f0000000380)=[{0x0, 0xffffffffffffffff, 0x1800}, {0x2, 0x20}, {0x3, 0x0, 0x800}, {0x4, 0x5}, {0x0, 0x7, 0x1800}], 0x5) semctl$SETALL(r1, 0x0, 0x9, &(0x7f00000001c0)=[0x4, 0x6, 0x7]) semctl$GETZCNT(r1, 0x5, 0x7, &(0x7f0000000480)=""/246) semctl$SETVAL(r1, 0x0, 0x8, &(0x7f0000000040)=0x800) semctl$GETALL(r1, 0x0, 0x6, &(0x7f00000001c0)=""/246) semop(r1, &(0x7f0000000180)=[{0x4, 0x234, 0x1000}, {0x0, 0x8000, 0x800}, {0x1, 0x0, 0x800}, {0x0, 0x0, 0x1800}], 0x4) semget(0x2, 0x3, 0x117) r2 = socket(0x18, 0x4001, 0x0) getsockopt(r2, 0x29, 0x3f, 0x0, 0x0) r3 = msgget$private(0x0, 0x200) msgsnd(r3, &(0x7f0000000580)=ANY=[], 0xd6, 0x800) open(&(0x7f0000000140)='./file0\x00', 0x10000, 0xd6) bind$inet(r2, &(0x7f0000000100)={0x2, 0x2}, 0xc) 00:06:58 executing program 0: sysctl$vfs_fuse(&(0x7f0000000040)={0xa, 0x12, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x200, 0x5, 0x8251, 0x4, 0x9, 0x8, 0x3, 0x101}, &(0x7f0000000080)={0x8b, 0x1, 0xfffffffffffffff7, 0x3, 0x20, 0x3, 0x6, 0x8}, &(0x7f00000000c0)={0xfff, 0x5, 0x1e8e, 0x2, 0x0, 0x1, 0x10000, 0xe6}, &(0x7f0000000100)={0x5, 0x1}) 00:06:59 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x4000000001, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x60}, {0x80}, {0x0, 0x0, 0x0, 0x7cf}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x4000000001, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x4c}, {0x48}, {0x6, 0x0, 0x0, 0x1ff}]}) pwrite(r1, &(0x7f0000000100)="b1e91bee8fad27050cdafd2413b0", 0xe, 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) pwrite(r0, &(0x7f0000000100)="b1e91bee8fad27050cdaeb0413b0", 0xe, 0x0, 0x0) 00:06:59 executing program 0: sysctl$hw(&(0x7f0000000080)={0x6, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x1) semctl$GETNCNT(r0, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r0, &(0x7f0000000240)=[{0x6cfc18e8446a4025, 0x8, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r1 = getgid() r2 = getgid() r3 = getuid() setreuid(0xee00, r3) semctl$SETVAL(r0, 0x4, 0x8, &(0x7f00000001c0)=0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r2, 0x150, 0x9}, 0x8, 0x1, 0x9}) semctl$GETPID(r0, 0x2, 0x4, &(0x7f00000000c0)=""/188) semctl$SETALL(0x0, 0x0, 0x9, 0x0) 00:06:59 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60e20100000000000000000000000001000000000000000000000000000600024e224e23000890780000000000000000"]) 00:06:59 executing program 0: socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r1, r0) socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x842) dup2(r0, r2) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002c00e6ffffff4e234e2200"/38, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000003030000"]) r3 = semget$private(0x0, 0x4, 0x1) semctl$GETNCNT(r3, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r3, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r3, &(0x7f0000000240)=[{0x6cfc18e8446a4025, 0x8, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r4 = getgid() r5 = getgid() r6 = getuid() setreuid(0xee00, r6) semctl$SETVAL(r3, 0x4, 0x8, &(0x7f00000001c0)=0x2) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r4, r6, r5, 0x150, 0x9}, 0x8, 0x1, 0x9}) semop(r3, &(0x7f0000000040)=[{0x1, 0x8f15, 0x1000}, {0x0, 0x3, 0x1000}, {0x3, 0x6, 0x1800}], 0x3) 00:06:59 executing program 0: r0 = socket(0x2, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TIOCFLUSH(r2, 0xc0106924, &(0x7f00000000c0)=0x6e) r3 = socket(0x18, 0x2, 0x0) fcntl$dupfd(r3, 0xa, r2) ioctl$VMM_IOC_WRITEREGS(r2, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [], [0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0xf7ffffffffffffff], [0x0, 0x0, 0x4]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) r4 = dup(0xffffffffffffffff) accept(r4, &(0x7f00000000c0)=@in6, &(0x7f0000000100)=0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x16}, 0x4, &(0x7f0000000040)="64814758b68ff6c3ff686dab0be32355fd60f2c534b4da6a16ddbb520101fae99a4235230f08867bcf6e", &(0x7f0000000080)=0x2a, 0xfffffffffffffffe, 0x0) r5 = socket(0x18, 0x2, 0x0) r6 = fcntl$dupfd(r5, 0xa, r5) ioctl$TIOCFLUSH(r6, 0x8080691a, &(0x7f0000000300)) 00:06:59 executing program 1: sysctl$net_inet_esp(&(0x7f0000000040)={0x4, 0x23, 0x2, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x5, 0x204) sysctl$vfs_ffs(&(0x7f0000000180)={0xa, 0x1, 0x10}, 0x3, &(0x7f0000000240)="e99a50be761731f0c17e2c4f5f83b18efa6bcbdb1868930fc50d629d298c602690f7dc872ebc45b7e7326214f74b789e96199e165462b2ca31fb5f79aac5e45b57df9203650e8e1964998723b279", &(0x7f00000001c0)=0x4e, &(0x7f00000002c0)="3695d3a06ccef82889bf416dc9aba428da88faee3b801e63f3623cfd9744b347ccdcc68b139e1f8d1dbeebe0aa82cbb716b9c39724", 0x35) semop(r0, &(0x7f0000000100)=[{0x0, 0x5022, 0x1000}, {0x1, 0x0, 0x800}], 0x2) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000580)=""/10) semctl$SETVAL(r0, 0x2, 0x8, &(0x7f0000000480)=0x7) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000140)=""/11) semctl$GETNCNT(r0, 0x0, 0x3, &(0x7f0000000040)=""/80) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x24}, {0x34, 0x0, 0x0, 0x40000000}, {0x6}]}) syz_emit_ethernet(0xe, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000100)=0x1) setreuid(0xffffffffffffffff, r3) setuid(r3) semop(r0, &(0x7f0000000340)=[{0x1, 0x1, 0x1000}, {0x4, 0x80, 0x1000}, {0x1, 0x9, 0x1800}, {0x4, 0x1f, 0x1800}, {0x2, 0x2}, {0x0, 0x7ff}, {0x2, 0x5, 0x1800}, {0x4, 0xc5, 0x800}, {0x0, 0x8000, 0x1800}, {0x1, 0x100, 0x1000}, {0x1, 0x7, 0x1000}, {0x3, 0x4}, {0x0, 0x5, 0x800}, {0x4, 0x3}], 0xe) semctl$SETVAL(r0, 0x164e5ec6a5296866, 0x8, &(0x7f0000000000)=0x8) 00:06:59 executing program 1: setrlimit(0x8, &(0x7f0000000040)={0x7, 0x8}) r0 = syz_open_pts() close(r0) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x36}, 0x4, &(0x7f00000000c0)="91de8b43b998d25e449fa6e4709ea8b9078b4d2139e246aea04dbd1ce1027a0bcd624c0e0753f7b95e18040945f16200aca653d855239303df830ed5ab62914a699f746de578bb623f981e68e262f36568e993ce4d153189114a501269acfc2b727be5cff39603c36a59c1e67aa45ad9d28b9dbca70b243f06657126e19e7a6bf64c1e9065ffab117e8c351fe8b6295d571d1d968e2d04623fdcfa54368f848271af5cabba9fcf327d1696fc1e9493b0aa0e624ba22b9041d61746e60500c32f14608c8c6a7d81c7ef56a676705b064a9f9ac2c8bb73aed10d6b544cd03f499f7ca7", &(0x7f00000001c0)=0xe2, &(0x7f0000000280)="285762f3136258d0bee8088df9af25e262c739fde5ca525100a8284c0edcb56db6de3c1cd288b55687dd4ff4928d856089a371dc9f03f5e5290e1e263b72b49cf4149c7712cf0beb6f29e643dc61b926cb0cc5800cfb8df6e7d5891faf88e18be035a906f4a8127d7fe9c870c486a3b9918dd4b0a756fbe2a9e38f2bdaf8ca", 0x7f) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000080)={0xffff, 0x0, 0x5, 0xfffffff9, "6600fa1d03182eab7fff0e091fe600008000"}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000001140)="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", 0x39e}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="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", 0x172}], 0x1) 00:06:59 executing program 0: r0 = msgget$private(0x0, 0x558) msgrcv(r0, &(0x7f0000000180)={0x0, ""/107}, 0x73, 0x3, 0x0) msgrcv(r0, &(0x7f0000000040)={0x0, ""/167}, 0xaf, 0x1, 0x1000) setitimer(0x0, &(0x7f0000000000)={{0x0, 0xe1f505}, {0x0, 0x2710}}, 0x0) 00:06:59 executing program 1: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [], [0x0, 0x0, 0x0, 0x9, 0xfffdffffffffffff], [0x0, 0x0, 0x482]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r1, r0) dup(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x2, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bpf\x00', 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TIOCFLUSH(r3, 0x8080691a, &(0x7f0000000300)) 00:06:59 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4d}, {0x35}, {0x6}]}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80, 0x0) ioctl$VMM_IOC_READREGS(r1, 0xc2485607, &(0x7f0000000180)) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="003918c0baf6930717da334f6bc764a0ae193bddb488ac4600ebc075a6521e1763ca"]) 00:06:59 executing program 1: sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x5}, 0x5a, 0x0, 0x0, &(0x7f0000000140), 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x4000000001, 0x0) r1 = semget$private(0x0, 0x4, 0x1) semctl$GETNCNT(r1, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r1, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r1, &(0x7f0000000240)=[{0x6cfc18e8446a4025, 0x8, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r2 = getgid() r3 = getgid() r4 = getuid() setreuid(0xee00, r4) semctl$SETVAL(r1, 0x4, 0x8, &(0x7f00000001c0)=0x2) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r2, r4, r3, 0x150, 0x9}, 0x8, 0x1, 0x9}) r5 = socket$inet(0x2, 0x4, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f00000006c0)=[{&(0x7f00000000c0)="d2548fb316046163387a89967c373f15", 0x10}, {&(0x7f0000000140)="1a6ccfaf1f5d0c56a6681c206999f522b959fe6f146149e1444b9e19bfae3f9fa80f9b9e11664c474d0511e4b3fe2d58a6c32f21a435e5b85c59bde742ad2a094ed9a2de2553df7b9864e6e1d9ad3bbf5b40cd1d47c9a0a5911b12a0d6c335843e6ffc44892dd0a7e001c666327112688f8afe18437aa254ee0665a7d99422dcd9f15108db31e6e1a592400078278ac595f3", 0x92}, {&(0x7f0000000340)="47082a9fdc46805590b544fe288839d9df6a68054778f374993679dbf62d3d1c48afeb16914ed05e8f7a99d1b8e61ce12a7ac3289acf988f0cce846be74262b5d28b2fae978ba8be5e3f65d07fe07750e315fb25c575467344f916ec17b8ea79e3083b4fe962ba60b9b9a634fa7c100eeb4c5fdac77629600b46f88bef38ccf47ab09b3856e80b703839e60ea14da531cc7ee5c77128a9be874ad49d09e107255fff0430f649051ff5767446e58190df18fdedb53687aa6b37782b21d02eaf5997d415a5a70d2041ca998a9a34d27ab102", 0xd1}, {&(0x7f0000000940)="9bf90d2981eb3732c889d402a1415d556958efdaa136791896d188f43bd0d254bde89e288f30319bbcc6e7e8930a650544a83d7333d031b8275a8599ba32bca08ace0a908b35bf94c9d552756edab15bf9868f8aa11c45cbdf4f59d74a5063bdf9fd31a8cffd1d270020bb54cc2b0263d2610149c539f108588521294180673a7f3b378e2c78238108c44931a73f4d9919b0c41d624ebe74cb74428cb2821252f3f789d9c7aa63d3432087c7d11974e2b80918c38fe0323dbad38a90b4b0d142e5016a3741d0f5686a8840295f867ef40edeb4f60452fdb3", 0xd8}, {&(0x7f0000000200)="9872520d01944d5ad7738429", 0xc}, {&(0x7f0000000280)="e5c959a19469ec769c6768ca9297f1804d0c65ee7a7ec1c776b936ed52e399a4e6dbfae3fff777b5b8bb69209347cd669a3b4ee98e63664e0bed07f9dc3c48b776bddaf32c2b11", 0x47}, {&(0x7f0000000540)="52987f0a3e9beb3ac70ea3caec2681eaaef32b718645a24e3a5fc4d8b32ba4cec510742e900e5e7f4516bab32160b8009c0aabcfc9f793d4799e3e6a22a0d6c6cbabd70f7809fced3badd1", 0x4b}, {&(0x7f00000005c0)="d928d48bcee440b45769316c1f43810091c74470774b09429e299b0f4595120c245e54dc29b4a208908b3c9e99a4a1c4561854617b1bba5f01b24294410fb251992591144c1a801c885d1be45e69ce8dbfc977a7a07448e1d9233e5bac436a5451f8f01a3f146c8e12f0a0ada1f7644fae13911ab824085b55d116b97c5be016d6a8ae605582cfbe75c8bd0027d166cd38aff31cfbf4313fd6b35adfab701f21733f053dbe9d28d58cfa3b531985ac6b6e01647c3fc2bed9968ebbc8a862b3bc1062c37eba4f38eef5830fddb44ad70c674c", 0xd2}], 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="2000000000000000ffff000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000ffff000001000000d1f520ea6725013df9ef4bd4e51ca3e44f2e43bd34bd0c84cdd7370f785542f5df5adecc4b2aabb2f5000000000000000000000089d840f0119561a50000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002000000000000000ffff000001000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001800000000000000ffff000001000000", @ANYRES32=r5, @ANYRES32, @ANYBLOB="1800000000000000ffff000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x10f, 0x3}, 0x2) setgid(r3) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x4c}, {0x48}, {0x6, 0x0, 0x0, 0x1ff}]}) pwrite(r0, &(0x7f0000000100)="b1e91bee8fad27050cdafd2413b0", 0xe, 0x0, 0x0) ioctl$BIOCGSTATS(r0, 0x4008426f, &(0x7f0000000040)) syz_open_pts() 00:07:00 executing program 0: sysctl$kern(&(0x7f0000000000)={0x1, 0x50}, 0x3, &(0x7f00000000c0)="7343c9f13a1a65a5dc41e7000055b9e7c7e60c80a00111703c8ad427b38b2f8aa720381c97827991a34f07000000aa8428b796be7c3b0dec5cf124fe012d6fc07aeaae1028cd4c8391f916efee16d809a6a0b0b5f077d55f10bf208a1501000000000000c315c5459032ba78cf06e3e6dff86da9ac815ad539c221d0d8894615ff18fc678944d0f65ab486924ff505c7690ded14f9ca833b67ff074a41b9c62e63182ec537052a6472066ce21532deaac00c6ee5dd8cca0bd9c132e66331f794", 0x0, 0x0, 0x61) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r0, 0x0, 0x0) r1 = getgid() r2 = getgid() r3 = getuid() setreuid(0xee00, r3) semctl$SETVAL(0x0, 0x4, 0x8, &(0x7f00000001c0)=0x2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r3, r2, 0x150, 0x9}, 0x8, 0x1, 0x9}) r4 = socket$inet(0x2, 0x4, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f00000006c0)=[{&(0x7f00000000c0)="d2548fb316046163387a89967c373f15", 0x10}, {&(0x7f0000000140)="1a6ccfaf1f5d0c56a6681c206999f522b959fe6f146149e1444b9e19bfae3f9fa80f9b9e11664c474d0511e4b3fe2d58a6c32f21a435e5b85c59bde742ad2a094ed9a2de2553df7b9864e6e1d9ad3bbf5b40cd1d47c9a0a5911b12a0d6c335843e6ffc44892dd0a7e001c666327112688f8afe18437aa254ee0665a7d99422dcd9f15108db31e6e1a592400078278ac595f3", 0x92}, {&(0x7f0000000340)="47082a9fdc46805590b544fe288839d9df6a68054778f374993679dbf62d3d1c48afeb16914ed05e8f7a99d1b8e61ce12a7ac3289acf988f0cce846be74262b5d28b2fae978ba8be5e3f65d07fe07750e315fb25c575467344f916ec17b8ea79e3083b4fe962ba60b9b9a634fa7c100eeb4c5fdac77629600b46f88bef38ccf47ab09b3856e80b703839e60ea14da531cc7ee5c77128a9be874ad49d09e107255fff0430f649051ff5767446e58190df18fdedb53687aa6b37782b21d02eaf5997d415a5a70d2041ca998a9a34d27ab102", 0xd1}, {&(0x7f0000000440)="9bf90d2981eb3732c889d402a1415d556958efdaa136791896d188f43bd0d254bde89e288f30319bbcc6e7e8930a650544a83d7333d031b8275a8599ba32bca08ace0a908b35bf94c9d552756edab15bf9868f8aa11c45cbdf4f59d74a5063bdf9fd31a8cffd1d270020bb54cc2b0263d2610149c539f108588521294180673a7f3b378e2c78238108c44931a73f4d9919b0c41d624ebe74cb74428cb2821252f3f789d9c7aa63d3432087c7d11974e2b80918c38fe0323dbad38a90b4b0d142e5016a3741d0f5686a8840295f867ef40edeb4f60452fdb3", 0xd8}, {&(0x7f0000000200)="9872520d01944d5ad7738429", 0xc}, {&(0x7f0000000280)="e5c959a19469ec769c6768ca9297f1804d0c65ee7a7ec1c776b936ed52e399a4e6dbfae3fff777b5b8bb69209347cd669a3b4ee98e63664e0bed07f9dc3c48b776bddaf32c2b11", 0x47}, {&(0x7f0000000540)="52987f0a3e9beb3ac70ea3caec2681eaaef32b718645a24e3a5fc4d8b32ba4cec510742e900e5e7f4516bab32160b8009c0aabcfc9f793d4799e3e6a22a0d6c6cbabd70f7809fced3badd1", 0x4b}, {&(0x7f00000005c0)="d928d48bcee440b45769316c1f43810091c74470774b09429e299b0f4595120c245e54dc29b4a208908b3c9e99a4a1c4561854617b1bba5f01b24294410fb251992591144c1a801c885d1be45e69ce8dbfc977a7a07448e1d9233e5bac436a5451f8f01a3f146c8e12f0a0ada1f7644fae13911ab824085b55d116b97c5be016d6a8ae605582cfbe75c8bd0027d166cd38aff31cfbf4313fd6b35adfab701f21733f053dbe9d28d58cfa3b531985ac6b6e01647c3fc2bed9968ebbc8a862b3bc1062c37eba4f38eef5830fddb44ad70c674c", 0xd2}], 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="2000000000000000ffff000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000ffff000001000000d1f520ea6725013df9ef4bd4e51ca3e44f2e43bd34bd0c84cdd7370f785542f5df5adecc4b2aabb2f5000000000000000000000089d840f0119561a50000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002000000000000000ffff000001000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001800000000000000ffff000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1800000000000000ffff000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x10f, 0x3}, 0x2) r5 = msgget$private(0x0, 0xa2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000100)=0x1) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000300)={{0x3f, 0x0, 0x0, r8}, 0x0, 0x10000, r7, 0x0, 0x0, 0x10000, 0x0, 0x4390}) r9 = msgget$private(0x0, 0xa2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r10, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000100)=0x1) msgctl$IPC_SET(r9, 0x1, &(0x7f0000000300)={{0x3f, 0x0, 0x0, r12}, 0x0, 0x10000, r11, 0x0, 0x0, 0x10000, 0x0, 0x4390}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0xfff, 0x0, 0x0, 0x0, r2, 0x82, 0x7ff}, 0x9, 0x6, r7, r11, 0xffff, 0x1, 0x100000000, 0x4315}) 00:07:00 executing program 1: sysctl$net_pipex(&(0x7f0000000040)={0x4, 0x21, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) 00:07:00 executing program 1: ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000000c0)={0x0, &(0x7f0000000300)}) r0 = socket(0x2, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCFLUSH(r1, 0xc0106924, &(0x7f00000000c0)=0x6e) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000080)=0x6) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/173, 0xad}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/159, 0x9f}], 0x3) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000340)={0x0, 0x0, {[0xa, 0x100000000080, 0x0, 0xec, 0x0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x8], [0x0, 0x3, 0x1, 0x0, 0x0, 0x1], [{0x0, 0x0, 0x36b, 0x100}, {0x0, 0xffffffff}, {0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x4, 0x40000000000000}, {0x1aca, 0x0, 0x0, 0x8f2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x6}], {0x0, 0x1000}, {0xfffd, 0x0, 0x4000, 0x4}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x2, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x2, 0x1b) fcntl$dupfd(r2, 0x0, r2) r3 = socket(0x18, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0xa, r3) ioctl$TIOCFLUSH(r4, 0x81206919, &(0x7f0000000300)) 00:07:00 executing program 0: mknod(&(0x7f0000000140)='./bus\x00', 0x3a0914c44f7b202c, 0x501) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000100)=0xc) setuid(r2) syz_open_pts() r3 = syz_open_pts() ioctl$TIOCEXCL(r3, 0x2000740d) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x20) semctl$GETNCNT(0x0, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(0x0, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(0x0, &(0x7f0000000240)=[{0x6cfc18e8446a4025, 0x8, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r5 = getgid() r6 = getgid() r7 = getuid() setreuid(0xee00, r7) semctl$SETVAL(0x0, 0x4, 0x8, &(0x7f00000001c0)=0x2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r5, r7, r6, 0x150, 0x9}, 0x8, 0x1, 0x9}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x8, r2, 0x0, 0x0, r5, 0x1, 0x100}, 0xffff2b0e, 0x3, r1, 0xffffffffffffffff, 0x4, 0xd1, 0x4}) getuid() ioctl$WSDISPLAYIO_DELSCREEN(r4, 0x80085754, &(0x7f0000000080)={0x75c, 0x3}) 00:07:00 executing program 0: setrlimit(0x8, &(0x7f0000000040)={0x7, 0x95}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() r2 = dup2(r1, r1) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="3220c0fce8910485c7cfa8960d520a", 0xf}], 0x1) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f00000000c0)=0x10000) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000000)=0x1) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000100)="7bced0c0ac7a04f6099115b1c8d5fc96b421e350e8b54faa43bfbcc8bd50ed707c65d7e2b36614858b43a3ba9ab78c1508c70c96c32134b0f936f2648b20fe2ab7aabbf412ba20b249645bc9439a98c3767c3f3f88933145ef2665443a14238038a92dd2d671f4335cde3c61981020c50a332e10de2ae731010ba4143ca95ce14ac9775904b93d1ccf0d", 0x8a}], 0x1) socketpair(0x20, 0x3, 0x8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000000280)=0x81, 0x4) write(r0, &(0x7f0000000080)="2078f7b69541d6d97099188e90cd9c8e765f9ba2c14c0333177edf6d0f3295f5a5e8b04efdd700"/53, 0x241c5379a0e79b8e) 00:07:00 executing program 0: sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x26}, 0x4, &(0x7f0000000300), 0x0, 0x0, 0x0) r0 = getgid() r1 = getgid() r2 = getuid() setreuid(0xee00, r2) semctl$SETVAL(0x0, 0x4, 0x8, &(0x7f00000001c0)=0x2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r1, r2, r1, 0x150, 0x9}, 0x8, 0x1, 0x9}) r3 = getegid() r4 = semget$private(0x0, 0x4, 0x1) semctl$GETNCNT(r4, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r4, 0x0, 0x8, &(0x7f0000000200)=0x4000000072) semop(r4, &(0x7f0000000240)=[{0x6cfc18e8446a4025, 0x8, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r5 = getgid() r6 = getgid() r7 = getuid() setreuid(0xee00, r7) semctl$SETVAL(r4, 0x4, 0x8, &(0x7f00000001c0)=0x2) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r5, r7, r6, 0x150, 0x9}, 0x8, 0x1, 0x9}) r8 = getegid() setgroups(0x6, &(0x7f0000000040)=[0x0, 0x0, r0, r3, r5, r8]) 00:07:01 executing program 1: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x790, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff], [0x0, 0x0, 0x0, 0x9, 0x7fffffff0], [0x0, 0x0, 0x401]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) ioctl$TIOCFLUSH(r1, 0x8080691a, &(0x7f0000000300)) 00:07:01 executing program 0: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000)='/dev/diskmap\x00', 0x800, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000200)={0x0, 0x0, {0x0, 0x1}}) r1 = socket(0x18, 0x1, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x5, 0x400, 0x0, 0x800000, "000000dbddb97b00", 0x7}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x10004) ioctl$VT_GETMODE(r2, 0x40087603, &(0x7f0000000180)) close(r1) r3 = socket(0x18, 0x400000002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) close(r3) write(0xffffffffffffffff, &(0x7f0000000040)="670dc3", 0x3) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) ioctl$TIOCGTSTAMP(0xffffffffffffffff, 0x4010745b, &(0x7f0000000140)) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vmm\x00', 0x0, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000100)={&(0x7f0000000040)='./bus\x00', r4}) dup2(r0, r4) login: panic: tcp_output: template len != hdrlen - optlen Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 257946 86931 0 0x2 0 1 syz-executor.0 *401547 77409 0 0x12 0 0 sshd db_enter() at db_enter+0x18 panic(ffffffff8241f9f3) at panic+0x164 tcp_output(ffff800000ad7aa0) at tcp_output+0x2c4b tcp_usrreq(fffffd806eaf7c88,9,fffffd8069ba4b00,0,0,ffff800020e40d50) at tcp_usrreq+0xa55 sosend(fffffd806eaf7c88,0,ffff800020e04a98,0,0,80) at sosend+0x671 dofilewritev(ffff800020e40d50,4,ffff800020e04a98,0,ffff800020e04b80) at dofilewritev+0x1b6 sys_write(ffff800020e40d50,ffff800020e04b30,ffff800020e04b80) at sys_write+0x83 syscall(ffff800020e04c00) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffc4110, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic tcp_output: template len != hdrlen - optlen ddb{0}> trace db_enter() at db_enter+0x18 panic(ffffffff8241f9f3) at panic+0x164 tcp_output(ffff800000ad7aa0) at tcp_output+0x2c4b tcp_usrreq(fffffd806eaf7c88,9,fffffd8069ba4b00,0,0,ffff800020e40d50) at tcp_usrreq+0xa55 sosend(fffffd806eaf7c88,0,ffff800020e04a98,0,0,80) at sosend+0x671 dofilewritev(ffff800020e40d50,4,ffff800020e04a98,0,ffff800020e04b80) at dofilewritev+0x1b6 sys_write(ffff800020e40d50,ffff800020e04b30,ffff800020e04b80) at sys_write+0x83 syscall(ffff800020e04c00) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffc4110, count: -9 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff800020e04600 rbx 0xffff800020e046b0 rdx 0x8b rcx 0x2 rax 0x1 r8 0xffffffff81cae1ef kprintf+0x16f r9 0x1 r10 0x2 r11 0xe8cd7cfb8f973b6e r12 0x3000000008 r13 0xffff800020e04610 r14 0x100 r15 0x1 rip 0xffffffff81a0eff8 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800020e045f0 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{0}> show proc PROC (sshd) pid=401547 stat=onproc flags process=12 proc=0 pri=24, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff800020e3f760,0xffff800020e3f020 process=0xffff8000ffffef98 user=0xffff800020dff000, vmspace=0xfffffd806e9145c8 estcpu=0, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 6365 475587 0 0 3 0x14200 bored sosplice 95396 474282 54667 0 2 0x2 syz-executor.1 86931 257946 54667 0 7 0x2 syz-executor.0 54667 412590 33122 0 3 0x82 thrsleep syz-fuzzer 54667 404368 33122 0 3 0x4000082 nanosleep syz-fuzzer 54667 465421 33122 0 2 0x4000002 syz-fuzzer 54667 413809 33122 0 3 0x4000082 kqread syz-fuzzer 54667 48187 33122 0 3 0x4000082 thrsleep syz-fuzzer 54667 330085 33122 0 3 0x4000082 thrsleep syz-fuzzer 54667 381333 33122 0 3 0x4000082 thrsleep syz-fuzzer 54667 36483 33122 0 3 0x4000082 thrsleep syz-fuzzer 33122 159272 77409 0 3 0x10008a pause ksh *77409 401547 49806 0 7 0x12 sshd 89199 379471 1 0 3 0x100083 ttyin getty 49806 436529 1 0 3 0x80 select sshd 18701 272963 99108 74 3 0x100092 bpf pflogd 99108 250005 1 0 3 0x80 netio pflogd 42128 296828 19882 73 3 0x100090 kqread syslogd 19882 509427 1 0 3 0x100082 netio syslogd 2795 20899 1 77 3 0x100090 poll dhclient 34206 300942 1 0 3 0x80 poll dhclient 53498 475534 0 0 3 0x14200 bored smr 69387 397612 0 0 3 0x14200 pgzero zerothread 90124 60359 0 0 3 0x14200 aiodoned aiodoned 96043 320990 0 0 3 0x14200 syncer update 59237 136597 0 0 3 0x14200 cleaner cleaner 75741 75436 0 0 3 0x14200 reaper reaper 56561 433156 0 0 3 0x14200 pgdaemon pagedaemon 7179 133787 0 0 3 0x14200 bored crynlk 75539 430345 0 0 3 0x14200 bored crypto 26655 421813 0 0 3 0x40014200 acpi0 acpi0 76029 252679 0 0 3 0x40014200 idle1 71349 414006 0 0 3 0x14200 bored softnet 31901 178262 0 0 3 0x14200 bored systqmp 19001 12316 0 0 3 0x14200 bored systq 59831 50276 0 0 3 0x40014200 bored softclock 95963 227018 0 0 3 0x40014200 idle0 1 330698 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks CPU 1: exclusive mutex namei r = 0 (0xffffffff828bf808) #0 witness_lock+0x4c7 #1 mtx_enter_try+0x102 #2 mtx_enter+0x4b #3 pool_put+0x64 #4 namei+0x9f8 #5 vn_open+0x117 #6 doopenat+0x28b #7 syscall+0x4a4 #8 Xsyscall+0x128 Process 86931 (syz-executor.0) thread 0xffff800020ddc4e8 (257946) exclusive rrwlock inode r = 0 (0xfffffd80793ae3c8) #0 witness_lock+0x4c7 #1 rw_enter+0x453 #2 rrw_enter+0x88 #3 VOP_LOCK+0x4b #4 vn_lock+0x81 #5 vget+0x1c8 #6 cache_lookup+0x2bb #7 ufs_lookup+0x1bc #8 VOP_LOOKUP+0x5b #9 vfs_lookup+0x7a6 #10 namei+0x63c #11 vn_open+0x117 #12 doopenat+0x28b #13 syscall+0x4a4 #14 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff828c0930) #0 witness_lock+0x4c7 #1 syscall+0x400 #2 Xsyscall+0x128 Process 77409 (sshd) thread 0xffff800020e40d50 (401547) exclusive rwlock netlock r = 0 (0xffffffff82759528) #0 witness_lock+0x4c7 #1 solock+0x5a #2 sosend+0x559 #3 dofilewritev+0x1b6 #4 sys_write+0x83 #5 syscall+0x4a4 #6 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9478 6400K 6658K 78643K 10636 0 pcb 13 8K 8K 78643K 17 0 rtable 105 3K 3K 78643K 201 0 ifaddr 49 11K 11K 78643K 56 0 sysctl 2 0K 0K 78643K 2 0 counters 43 33K 33K 78643K 43 0 ioctlops 0 0K 4K 78643K 1476 0 iov 0 0K 2K 78643K 2 0 mount 1 1K 1K 78643K 1 0 vnodes 1220 77K 77K 78643K 1239 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 2 1K 1K 78643K 2 0 sem 12 0K 0K 78643K 22 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1824 197K 290K 78643K 13058 0 file desc 4 9K 25K 78643K 73 0 proc 60 63K 95K 78643K 449 0 subproc 32 2K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 in_multi 33 2K 2K 78643K 33 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 37 175K 175K 78643K 37 0 exec 0 0K 1K 78643K 207 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 147 24K 24K 78643K 1183 0 UVM aobj 3 2K 2K 78643K 3 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 4 0 NDP 7 0K 0K 78643K 11 0 temp 81 3854K 3918K 78643K 2121 0 kqueue 3 4K 4K 78643K 3 0 SYN cache 2 16K 16K 78643K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 0 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 19 0 17 1 0 1 1 0 8 0 rtentry 112 45 0 1 2 0 2 2 0 8 0 unpcb 120 133 0 123 2 0 2 2 0 8 1 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpqe 32 54 0 54 2 1 1 1 0 8 1 tcpcb 544 20 0 13 1 0 1 1 0 8 0 inpcb 296 92 0 84 2 0 2 2 0 8 1 nd6 48 6 0 0 1 0 1 1 0 8 0 pfosfp 40 846 0 423 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 11 0 0 1 0 1 1 0 8 0 pfstkey 112 11 0 0 1 0 1 1 0 8 0 pfstate 328 11 0 0 1 0 1 1 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 188 0 0 12 0 12 12 0 8 0 art_table 32 189 0 0 2 0 2 2 0 8 0 art_node 16 44 0 4 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 2 1 0 1 1 0 8 1 semupl 112 2 0 2 1 0 1 1 0 8 1 semapl 112 18 0 8 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1474 0 70 88 0 88 88 0 8 0 ffsino 272 1474 0 70 94 0 94 94 0 8 0 nchpl 144 1741 0 135 60 0 60 60 0 8 0 uvmvnodes 72 1531 0 0 28 0 28 28 0 8 0 vnodes 208 1531 0 0 81 0 81 81 0 8 0 namei 1024 4619 0 4618 1 0 1 1 0 8 0 percpumem 16 32 0 0 1 0 1 1 0 8 0 scxspl 192 4927 0 4926 2 1 1 2 0 8 0 plimitpl 152 21 0 13 1 0 1 1 0 8 0 sigapl 424 289 0 258 4 0 4 4 0 8 0 futexpl 56 703 0 703 1 0 1 1 0 8 1 knotepl 112 62 0 42 1 0 1 1 0 8 0 kqueuepl 144 6 0 4 1 0 1 1 0 8 0 pipepl 304 80 0 69 2 0 2 2 0 8 1 fdescpl 496 273 0 258 3 0 3 3 0 8 0 filepl 152 1455 0 1353 5 0 5 5 0 8 1 lockfpl 104 9 0 8 1 0 1 1 0 8 0 lockfspl 48 4 0 3 1 0 1 1 0 8 0 sessionpl 112 18 0 7 1 0 1 1 0 8 0 pgrppl 48 18 0 7 1 0 1 1 0 8 0 ucredpl 96 111 0 102 1 0 1 1 0 8 0 zombiepl 144 258 0 258 1 0 1 1 0 8 1 processpl 992 289 0 258 5 0 5 5 0 8 0 procpl 624 389 0 351 4 0 4 4 0 8 0 sosppl 128 2 0 2 1 0 1 1 0 8 1 sockpl 400 244 0 224 5 0 5 5 0 8 2 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 4 0 0 1 0 1 1 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 156 0 0 19 0 19 19 0 8 0 mtagpl 96 8 0 0 1 0 1 1 0 8 0 mbufpl 256 172 0 0 11 0 11 11 0 8 0 bufpl 280 3350 0 127 231 0 231 231 0 8 0 anonpl 16 41951 0 24962 70 1 69 69 0 124 0 amapchunkpl 152 1413 0 1127 13 0 13 13 0 158 0 amappl16 192 1056 0 276 40 0 40 40 0 8 1 amappl15 184 1 0 0 1 0 1 1 0 8 0 amappl14 176 46 0 41 2 1 1 1 0 8 0 amappl13 168 28 0 25 1 0 1 1 0 8 0 amappl12 160 16 0 14 1 0 1 1 0 8 0 amappl11 152 74 0 58 1 0 1 1 0 8 0 amappl10 144 21 0 16 1 0 1 1 0 8 0 amappl9 136 375 0 372 1 0 1 1 0 8 0 amappl8 128 337 0 305 2 0 2 2 0 8 0 amappl7 120 115 0 103 1 0 1 1 0 8 0 amappl6 112 47 0 42 1 0 1 1 0 8 0 amappl5 104 150 0 136 1 0 1 1 0 8 0 amappl4 96 503 0 475 1 0 1 1 0 8 0 amappl3 88 135 0 127 1 0 1 1 0 8 0 amappl2 80 1246 0 1181 2 0 2 2 0 8 0 amappl1 72 16313 0 15887 23 8 15 18 0 8 5 amappl 80 675 0 600 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 273 0 258 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 273 0 258 1 0 1 1 0 8 0 vmmpekpl 168 6229 0 6198 2 0 2 2 0 8 0 vmmpepl 168 41243 0 39370 118 3 115 115 0 357 27 vmsppl 368 272 0 258 2 0 2 2 0 8 0 pdppl 4096 553 0 516 6 0 6 6 0 8 0 pvpl 32 145491 0 125466 167 0 167 167 0 265 4 pmappl 232 272 0 258 2 0 2 2 0 8 1 extentpl 40 53 0 36 1 0 1 1 0 8 0 phpool 112 253 0 3 8 0 8 8 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x18 panic(ffffffff8241f9f3) at panic+0x164 tcp_output(ffff800000ad7aa0) at tcp_output+0x2c4b tcp_usrreq(fffffd806eaf7c88,9,fffffd8069ba4b00,0,0,ffff800020e40d50) at tcp_usrreq+0xa55 sosend(fffffd806eaf7c88,0,ffff800020e04a98,0,0,80) at sosend+0x671 dofilewritev(ffff800020e40d50,4,ffff800020e04a98,0,ffff800020e04b80) at dofilewritev+0x1b6 sys_write(ffff800020e40d50,ffff800020e04b30,ffff800020e04b80) at sys_write+0x83 syscall(ffff800020e04c00) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffc4110, count: -9 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp x86_ipi_db(ffff800020d70ff0) at x86_ipi_db+0x1a x86_ipi_handler() at x86_ipi_handler+0xc6 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 witness_checkorder(ffffffff828c0930,9,0) at witness_checkorder+0x22 __mp_lock(ffffffff828c0728) at __mp_lock+0xa1 __mp_acquire_count(ffffffff828c0728,1) at __mp_acquire_count+0x51 tsleep(fffffd806fa728f0,11,ffffffff8247b5a0,0) at tsleep+0x19b biowait(fffffd806fa728f0) at biowait+0xa6 bwrite(fffffd806fa728f0) at bwrite+0x215 ffs_update(fffffd80793ae330,1) at ffs_update+0x2c2 ufs_mkdir(ffff800020ed9d40) at ufs_mkdir+0x665 VOP_MKDIR(fffffd806826ac30,ffff800020ed9ea0,ffff800020ed9ef0,ffff800020ed9dd0) at VOP_MKDIR+0xc6 domkdirat(ffff800020ddc4e8,ffffff9c,7f7fffff5180,1ff) at domkdirat+0x121 syscall(ffff800020eda070) at syscall+0x4a4 end trace frame: 0xffff800020eda0f0, count: 0 ddb{1}> trace x86_ipi_db(ffff800020d70ff0) at x86_ipi_db+0x1a x86_ipi_handler() at x86_ipi_handler+0xc6 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 witness_checkorder(ffffffff828c0930,9,0) at witness_checkorder+0x22 __mp_lock(ffffffff828c0728) at __mp_lock+0xa1 __mp_acquire_count(ffffffff828c0728,1) at __mp_acquire_count+0x51 tsleep(fffffd806fa728f0,11,ffffffff8247b5a0,0) at tsleep+0x19b biowait(fffffd806fa728f0) at biowait+0xa6 bwrite(fffffd806fa728f0) at bwrite+0x215 ffs_update(fffffd80793ae330,1) at ffs_update+0x2c2 ufs_mkdir(ffff800020ed9d40) at ufs_mkdir+0x665 VOP_MKDIR(fffffd806826ac30,ffff800020ed9ea0,ffff800020ed9ef0,ffff800020ed9dd0) at VOP_MKDIR+0xc6 domkdirat(ffff800020ddc4e8,ffffff9c,7f7fffff5180,1ff) at domkdirat+0x121 syscall(ffff800020eda070) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7fffff51f0, count: -15