last executing test programs: 7.881581285s ago: executing program 1 (id=442): r0 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r0, 0x80206916, 0x0) open$dir(0x0, 0x20000, 0x1a0) openat$wskbd(0xffffffffffffff9c, &(0x7f0000001340), 0x400, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r2 = socket(0x2, 0x3, 0x0) close(r2) r3 = socket(0x18, 0x2, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1}, {}, {}, {}, {}, {}, {}, {0x1, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x1000}, {0x3}, {}, {0x2, 0x3}, {0x3}, {}, {0x0, 0x7ff}, {0x5}, {}, {0x3}, {0x0, 0x400}, {}, {0x2}, {0x0, 0xfffffffd}, {}, {0x2}, {}, {0x2, 0xa}, {0x1}]}) close(r3) r4 = socket(0x800000018, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r5 = socket(0x18, 0x2, 0x0) r6 = dup2(r3, r5) setsockopt(r6, 0x1000000029, 0x23, &(0x7f00000000c0)="b211d7170d816684c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e7aae9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) write(r2, 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000180)=[{0x28, 0x1, 0x1}, {0x1, 0xff, 0xf7, 0xdcf}, {0x6, 0x4, 0x0, 0x2}]}) write(r1, &(0x7f0000000040)="66ce8505f68cca7d8f3f2cb42049", 0xe) r7 = getppid() wait4(r7, 0x0, 0x1, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54}) r8 = syz_open_pts() close(r8) syz_open_pts() ioctl$TIOCSETD(r8, 0x8004745f, &(0x7f0000000000)=0x1d) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 7.672836162s ago: executing program 1 (id=446): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) ioctl$BIOCGDIRFILT(r1, 0x4004427c, &(0x7f0000000000)) poll(&(0x7f0000000080)=[{r0, 0x40}], 0x1, 0x4fe) execve(0x0, 0x0, 0x0) 7.547696912s ago: executing program 1 (id=452): r0 = socket(0x18, 0x3, 0x0) close(r0) r1 = socket(0x18, 0x3, 0x3a) (async) accept$unix(r0, 0x0, &(0x7f0000000080)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0x2}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async, rerun: 32) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f0000000040)={{0x18, 0x0, 0x80000000, 0xe}, {0x18, 0x2, 0xffffff01, 0xcf8}, 0x357c, [0x5, 0x3c59400, 0x40, 0x10001, 0x7, 0x7, 0x88, 0x80000001]}, 0x3c) (rerun: 32) openat(0xffffffffffffff9c, 0x0, 0x200, 0x0) (async) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) mknod(0x0, 0x2000, 0x5900) (async) mknodat(0xffffffffffffff9c, 0x0, 0x2000, 0x801) (async) kevent(0xffffffffffffffff, 0x0, 0xe4a, 0x0, 0xa9fa, 0x0) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, 0x0, 0x0) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0) (async) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r2, 0x1000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) (async) sendmsg(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[{0x10, 0x1, 0x2}], 0x10}, 0x400) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) mquery(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4, 0x0, r0, 0x9) 7.490165242s ago: executing program 1 (id=455): poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_open_pts() sendto$unix(0xffffffffffffffff, &(0x7f0000000140)="b1000503000004000000000007000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad09000000000000009b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab71d", 0xa4, 0x0, 0x0, 0x0) getgid() getpgid(0x0) r0 = socket(0x18, 0x3, 0x0) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b180bc3eb987aa9feb1", 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@random="69e1629b6174", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "6b9efb", 0x14, 0xff, 0x0, @rand_addr="cb690000c74a9b56c1757d4c00", @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x1, 0x2, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x1ff, 0x0, 0x6000}}}}}}}) r1 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x80286987, &(0x7f00000001c0)) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1}, {}, {}, {}, {}, {}, {}, {0x1, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x1000}, {0x3}, {}, {0x2, 0x3}, {0x3}, {}, {0x0, 0x7ff}, {0x5}, {}, {0x3}, {0x0, 0x400}, {}, {0x2}, {0x0, 0xfffffffd}, {}, {0x2}, {}, {0x2, 0xa}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37) 6.554016382s ago: executing program 1 (id=484): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) r0 = socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0xee4bce5bb233ab95) select(0x40, &(0x7f0000000040)={0x9, 0x9, 0x5, 0x8e3, 0x1, 0x40000000000, 0x120000}, 0x0, 0x0, 0x0) close(r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x44, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="d3c9fd3215d8b060778a79a12562d3bd2e5224371fd87d5a41c40f68ba9b7f851f2adc50c0386414b7c46949ebb363e9fe5d75d1fe608fe7db744a43015e46b9e0daa071aca9387dd426b96eb7057f9a86c090c409b045a99e36976e0c0d8f5b812e0b128f9c1123ced56370420124becbbcde344db2dd86fa7a2c864876adc8d1d77aa88022feb541673bd34b1ae1160be8069d761a6d3b3bae35ebf92cc4", @ANYRES16=r2], 0x10}, 0x0) 4.912452278s ago: executing program 1 (id=515): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd) (async) truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x100, &(0x7f0000000180)=[{{r1}, 0xffffffffffffffff, 0x13}], 0x6, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0xfe, 0x0, 0x81}]}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0xfe, 0x0, 0x81}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040)={0x700}, &(0x7f0000000080)={0xcb}, &(0x7f0000000180)) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) 1.92405343s ago: executing program 7 (id=604): mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe03) select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SPKRTONE(0xffffffffffffffff, 0x80085301, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x3, [{&(0x7f00001d0000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil, 0x5}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f00000bc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f000020f000/0x3000)=nil, &(0x7f0000826000/0x1000)=nil, 0x40}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x6f9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x400000000fff}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0xdbbf}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, &(0x7f0000429000/0x4000)=nil}], './file0\x00'}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r1, 0xc0104419, &(0x7f0000000040)={0x5, 0x64c, 0x0, 0xfffffff7, "97a2224ff1c146498fe2b6b7a693119b6b47c1d1", 0x3fb, 0x3}) open(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0) 1.846200531s ago: executing program 5 (id=609): mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6d9) r0 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x51) ioctl$TIOCFLUSH(r0, 0x80047476, &(0x7f0000000080)=0x82) r1 = socket(0x21, 0x0, 0x4) bind$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) 1.80352072s ago: executing program 5 (id=612): unveil(&(0x7f0000000040)='./file1\x00', 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0xa63, 0x5}, {0xfffffffffffffffb, 0x8000100000000002}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000080)='c\x00') 1.802974723s ago: executing program 6 (id=614): r0 = socket$inet(0x2, 0x5, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x180}, 0x4) mprotect(&(0x7f0000076000/0x3000)=nil, 0x3000, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x25) ioctl$TIOCFLUSH(r1, 0x80047476, &(0x7f0000000000)=0x8) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) pread(r2, &(0x7f0000000040)="3cd15db7c30016", 0x50cc00, 0x0) sysctl$vm(&(0x7f00000001c0)={0x2, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(0xffffffffffffffff, 0xc014575e, &(0x7f0000000080)={0xfffff15f, './file0\x00'}) 1.80112285s ago: executing program 5 (id=615): recvmsg(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000023c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0}, 0x800) r0 = semget(0x1, 0x4, 0x281) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}, 0x73d, 0x6, 0x8000000000000000}) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000100)=[0x7, 0x7]) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000002c0), &(0x7f0000000300)=0xfffffffffffffe98) getgid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) socket(0x18, 0x3, 0x3a) mknod(&(0x7f0000000380)='./file0\x00', 0x2000, 0x6) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r1}) unveil(0x0, 0x0) unveil(&(0x7f0000000a80)='./file0/file0\x00', 0x0) execve(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x32}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) socket(0x18, 0x3, 0x0) socket(0x1, 0x2, 0x0) sysctl$hw(&(0x7f0000000040)={0x6, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) chflagsat(r2, &(0x7f0000000180)='./file1\x00', 0x1, 0x2) 1.72220066s ago: executing program 3 (id=617): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r0 = syz_open_pts() mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}]}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r1, 0x8, &(0x7f0000000280)={0x3, 0x0, 0x3b5, 0x1000381210089}) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x3, 0x0, 0x4c1, 0x369000000, 0xffffffffffffffff}) r2 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) lseek(r2, 0x5, 0x2) fcntl$lock(r2, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x3b5, 0x1000381210089}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r3 = kqueue() sysctl$hw(&(0x7f0000001180)={0x7, 0x10}, 0x2, 0x0, 0x0, &(0x7f00000003c0), 0x0) kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = syz_open_pts() ioctl$TIOCSETA(0xffffffffffffff9c, 0x802c7414, &(0x7f0000000340)={0x200, 0x1, 0xfffffffe, 0x2, "fb5373f224f208dc490000ef00004000", 0x840003, 0x9}) syz_open_pts() ioctl$TIOCSTAT(r4, 0x20007465, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$WSDISPLAYIO_USEFONT(r5, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x258f, 0x8003ea, 0xfff6, 0x0, 0x7ff, 0x40000402, 0x1, 0x0, 0x2, 0x0, 0x4000000000f1a}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="8ad0852952805c46945cd968cc860cf8bb71cb39918c59eb9b7a409201436b91677b5ac1aa962304cd13521fb0e5f713a486dafcbe47da1a69d69ae3e25ffb5325a4c36201d56a766c7101009cccd3b3ff360c7402752447fcdda4f67449d2870998b030f36ba661eaff355cd20f6d1403bfb7748cffc7900f568c8d738e912bef2912ff0037674875c3dddb0c099dc2cd5a30be1a7cd855157000ebb8cc81fd8bb273800ac36d243f0a057a61263efbee8a93c0f7ded8300dc29fddac6bc592b5691b21a3239d0682aa8d000000000000000800000000e4eba4477eaf3ea5bc148bc55747", 0xe5}], 0x1) r6 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x2) close(r0) r7 = syz_open_pts() ioctl$TIOCSETA(r7, 0x802c7414, &(0x7f0000000380)={0x7fffffff, 0x7bee, 0x8001, 0xffffff8a, "24261f1e6a0000007fe21ab3a148c702945300", 0x5, 0x400004}) writev(r0, &(0x7f0000000440)=[{&(0x7f00000005c0)="7b573f9d30da087facf1d55406ebec84c951087d94f0257b52fdb637748347e1ec406a150678b990a0061f981c", 0x2d}], 0x1) mprotect(&(0x7f0000585000/0x4000)=nil, 0x4000, 0x6) read(r7, &(0x7f0000000180)=""/192, 0xc0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x0, 0xffffff49, 0x7, 0x5bc, "225e00d1554709aa0900fa4ab1896c04aec100"}) 1.716735215s ago: executing program 5 (id=618): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) sysctl$net_inet_tcp(&(0x7f00000001c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000d40)="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", &(0x7f00000002c0)=0x210, &(0x7f0000000300), 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x100, 0x2bb) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0xae) (async) getsockopt(r0, 0x56, 0x3, &(0x7f0000000040)=""/127, &(0x7f0000000240)=0x7f) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x385, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x0, 0x99}, {0xce9, 0xffffffff, 0x4f8, 0x6f}, {0x6, 0x803, 0x14, 0xa}, {0x2, 0x82, 0x2, 0x5}, {0x6e75, 0x8001, 0xd3b, 0x4}, {0x1cb, 0x10001, 0xd, 0x4}, {0x8, 0x9, 0x6, 0x2}, {0xb8c, 0x7, 0x7, 0x4}, {0xf, 0xfffffffa, 0x1, 0x6}, {0x6, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xab, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f00000001c0)={&(0x7f00000002c0)=[{0x101}, {0x0, 0x3}], 0x2}) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SPKRTONE(r2, 0x80085301, &(0x7f00000000c0)={0x0, 0x82}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 1.616987238s ago: executing program 5 (id=619): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x2, 0x7, 0x8, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x765f}, {0x7, 0x6, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0xafd}, {0x1, 0x800, 0x7}, {0x401, 0x7fffffff, 0xe, 0x7}, {0x2, 0x6, 0xffff, 0x99}, {0xcdf, 0x1, 0x4f4, 0x6f}, {0xa, 0x8803, 0x14, 0xb}, {0x2, 0x81, 0x4, 0x9}, {0x6, 0x8001, 0x4, 0x88}, {0x4, 0x10001, 0x9, 0xaeb}, {0x2, 0x9, 0x10001, 0x5}, {0xb8c, 0x4004, 0x5, 0x6}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0x7, 0x205, 0x1}, {0x0, 0x1, 0x8000, 0x30000}]}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) r0 = syz_open_pts() flock(r0, 0x2) (async) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) (async) r1 = socket(0x18, 0x3, 0x50) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6c, 0xdc, 0x4, 0x409}, {0x40, 0xd, 0x20, 0x441}, {0x1ae, 0x0, 0x0, 0xffffff7e}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x40) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xfffb, 0x6, 0xbd}]}) (async) ioctl$FIONREAD(r1, 0x8020699f, &(0x7f00000001c0)) (async) syz_extract_tcp_res(&(0x7f0000000000), 0x7, 0x5) 1.616709184s ago: executing program 6 (id=620): ioctl$SPKRTUNE(0xffffffffffffffff, 0x20005302, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4) getpid() pipe(0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x5) ktrace(0x0, 0x5, 0x128, r0) sysctl$kern(&(0x7f0000000040)={0x1, 0x4d}, 0x2, 0x0, 0x0, 0x0, 0x0) 1.614544283s ago: executing program 6 (id=621): r0 = semget$private(0x0, 0x0, 0x141) semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000000)=0x80) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{0x0, 0x3, 0x1, 0x9}, {0x615b, 0x9, 0xdb, 0x2}, {0xc7, 0xfd, 0x3, 0xffff}, {0x1, 0x8, 0x40, 0xd}, {0x8, 0x1, 0x1, 0x6}, {0x4, 0xe, 0x40, 0x1}, {0x5, 0x5, 0x6, 0x71d}, {0x6, 0x8, 0x5b, 0x7000000}, {0x8, 0x3, 0xf, 0x7ff}]}) r2 = semget(0x0, 0x4, 0x608) r3 = getuid() r4 = getgid() r5 = geteuid() r6 = getgid() semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000140)={{0x5, r3, r4, r5, r6, 0x90f27aac19949cb4, 0x82}, 0x6, 0x9, 0x8}) getgroups(0x3, &(0x7f0000000280)=[r4, r4, r6]) sendmsg$unix(r1, &(0x7f0000000300)={&(0x7f00000001c0)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000000240)=[{&(0x7f0000000200)="e78496642bbf3e285d", 0x9}], 0x1, &(0x7f00000002c0)=[@rights={0x20, 0xffff, 0x1, [r1, r1, r1]}, @cred={0x20, 0xffff, 0x0, 0xffffffffffffffff, r5, r8}], 0x40}, 0x1) r10 = getpgrp() ktrace(&(0x7f0000000340)='./file0\x00', 0x2, 0x0, r10) ioctl$WSDISPLAYIO_GMODE(r1, 0x4004574b, &(0x7f0000000380)) fcntl$setown(r1, 0x6, r10) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x810, r1, 0xffffffffffffffcb) setregid(r9, r8) semop(r0, &(0x7f00000003c0)=[{0x1, 0x2, 0x1400}, {0x3, 0x2}, {0x1, 0x6, 0x1000}, {0x1, 0x5, 0x800}, {0x3, 0xfff8, 0x1000}, {0x1, 0x8, 0x1000}, {0x4e3f7874849e2a22, 0x1ff}], 0x7) ioctl$BIOCPROMISC(r1, 0x20004269) fchmodat(r1, &(0x7f0000000400)='./file0\x00', 0x4c, 0x4) setgroups(0x3, &(0x7f0000000440)=[r8, r7, r6]) r11 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) setegid(r7) flock(r11, 0xb) fcntl$lock(r11, 0x8, &(0x7f00000004c0)={0x3, 0x1, 0xffffffffffff826d, 0x3, r10}) sendto$unix(r1, &(0x7f0000000500)="dfb1d7999f6857b10ab7303009ea9c484bce3f89785b0ea2211eab86281becad5be8597e5baea853b16dfc6e6309d53bab5c19fd77b8859a69ed1352599ef836dbb50e57b7a356e46efa95108d9a620a9b06f3251d1f12b3322f67d8dfc325f3348d07909e5ddff6969e6f4ef6a52c0d8c559a5df27540f6cab7ebe773aade831a55fc8c0eeb3cb4a289cb7e811d5f4fc1a244dffb5215d7c9d0bb1ecc83ea2745053a680b8bd2f7903a0f50acb0e29beb5a1b0553ae54282c2a98ac4bbe977153280671656419507fcb453275cc07dab6b31ff9", 0xd4, 0x4, &(0x7f0000000600)=@abs={0x0, 0x0, 0x3}, 0x8) open(&(0x7f0000000640)='.\x00', 0x200, 0x185) r12 = msgget(0x2, 0x8) msgctl$IPC_SET(r12, 0x1, &(0x7f0000000680)={{0x3, r3, r8, 0xffffffffffffffff, r7, 0x4, 0x2}, 0x9, 0x4, 0x0, r10, 0x7f, 0x3, 0x0, 0x7fff}) 1.614223703s ago: executing program 0 (id=622): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x11, 0x3, 0x7) open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) (async, rerun: 32) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 32) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0xff5c, 0x5, 0x35, 0xffffe9fe}]}) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sysctl$hw(&(0x7f0000000000)={0x6, 0xc}, 0x2, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x8000000000000000}) (async) r2 = socket(0x18, 0x2, 0x0) openat$vmm(0xffffffffffffff9c, 0x0, 0x10000, 0x0) (async) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendto$unix(r1, &(0x7f0000000480)="b10005136000009f05003e0800000000331c13fecea10500fef96ecfc72fd3357a068d02bc31a3a5673039d2d236acf20b7804be38164991f7cccf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8faff0037282112000000720fd38bfbb770c1f5a872c881e2772ec5a10400000000000000361b1257aea8c5d0002012000000000000880d6633c556ae9b287948a62310db415f779642cdcd71a3f8343712051e", 0xb1, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x2}, 0x2, &(0x7f0000000080), &(0x7f0000000040), 0x0, 0x0) 1.613868467s ago: executing program 3 (id=623): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async) r1 = socket(0x18, 0x3, 0x0) (async) setuid(0xffffffffffffffff) ioctl$FIONREAD(r1, 0xc1126939, &(0x7f0000000100)) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1f95d27d48731892, 0x0, 0x1}, 0x8) (async) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0x1762) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) bind$unix(r2, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) (async, rerun: 64) chmod(&(0x7f0000000080)='./file0\x00', 0x3a) (rerun: 64) setuid(0xee01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x7, 0x10001, 0x80000004, 0x80000001, 0x80000000, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x0, 0x8, 0xfffffff9}, {0x8, 0x5, 0x0, 0xafd}, {0x1, 0x800, 0x7}, {0x401, 0x7fffffff, 0xe, 0xfffffffd}, {0x2, 0x6, 0x3, 0x1}, {0x5, 0x1, 0x4f8, 0x6d}, {0xa, 0x804, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0x0, 0x6}, {0x4, 0xffffaac4, 0x9, 0xaeb}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8c, 0x4, 0x5, 0x6}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xb, 0x7, 0x6}, {0x0, 0x1, 0x4, 0x30000}]}) (async) r4 = socket(0x18, 0x2, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r4, 0xc038694e, &(0x7f00000001c0)) (async) stat(&(0x7f0000000080)='./bus\x00', &(0x7f00000001c0)) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000240), 0x20, 0x0) ioctl$TIOCSETA(r5, 0xc4504449, &(0x7f0000000740)={0x31, 0xffff, 0x40a9, 0x20000003, "0400000000800000ebb178d952d6d31962fff0d1", 0x9, 0x2}) (async, rerun: 64) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000000)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0x10011, 0x0, 0x0) (rerun: 64) 418.001477ms ago: executing program 7 (id=625): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x400000000002, 0x0) setsockopt(r0, 0x0, 0x1f, &(0x7f0000000080), 0x0) r1 = socket(0x18, 0x2, 0x0) setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54}) r2 = syz_open_pts() mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000640)=""/152, 0x98}], 0x1000000000000006, 0x6) close(r2) r4 = syz_open_pts() r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, 0x0, 0x0) bind(r1, &(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0xa) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x44, 0x1, 0xfe, 0x1916}, {0x3, 0x3, 0x4f, 0x3}, {0x6, 0x4, 0x7, 0x800}]}) write(r6, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) fcntl$dupfd(r2, 0x0, r4) ioctl$FIONREAD(r1, 0x8020690e, &(0x7f00000001c0)) 417.040267ms ago: executing program 0 (id=626): r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x310, 0x4000}, 0x100000000006, 0x861, 0xffffffffffffffff, 0x0, 0x80000000000000, 0xfffffffe, 0xb, 0x7}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0xfffffffffffffffd, 0x10000000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x3, 0x3a) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4301) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r2, &(0x7f0000000140)="bfbb12aef196d43f19", 0x9) openat(r0, &(0x7f0000000000)='./file0\x00', 0x40, 0x135) 416.210838ms ago: executing program 7 (id=629): r0 = syz_open_pts() r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x4) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x18240, 0x1) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0) ioctl$TIOCDRAIN(r0, 0x2000745e) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0x2, 0x7ffffffffffffffb, 0x20002fffffffa}) fcntl$getown(r0, 0x5) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x84, 0x81, 0x0, 0x1}, {0x40, 0x1, 0x7, 0x200}, {0x6, 0x0, 0x0, 0x4}]}) r4 = semget(0x0, 0x1, 0x281) semctl$GETALL(r4, 0x0, 0x6, &(0x7f0000000140)=""/116) ioctl$BIOCFLUSH(0xffffffffffffffff, 0x20004268) syz_emit_ethernet(0x36, &(0x7f0000000240)={@random="91a6e34dd8bb", @broadcast, [], {@ipv6={0x86dd, {0x5, 0x6, "233cdc", 0x0, 0x2b, 0xaa, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast1}}}}) syz_emit_ethernet(0x43, &(0x7f0000000300)={@random="b0716ebaf582", @random="ad032233c856", [], {@generic={0x9000, "60749c8f1b431b7a7e6d80af09931875dd45a975c5116e4700a18caf4de005d8e3e8670713372b896ba436490e19c561939d69961a"}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x2012, r7, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r7, 0x0) recvmmsg(r6, &(0x7f00000002c0)={0x0}, 0x10, 0x0, &(0x7f00000003c0)={0x8, 0x101}) close(r6) r8 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(r8, 0xc4504442, 0x0) ioctl$FIOASYNC(r8, 0x8004667d, 0x0) sendmsg$unix(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="0f52", 0x2}], 0x1, 0x0, 0x0, 0xb}, 0x0) connect(r1, &(0x7f0000000100)=@in6={0x18, 0x3, 0x7b1, 0x4}, 0xc) 344.060826ms ago: executing program 0 (id=630): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000140)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x2, &(0x7f0000000000)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0xfffffffffffffd51) 339.703755ms ago: executing program 0 (id=632): r0 = socket(0x11, 0x4, 0x0) sendto$unix(r0, &(0x7f0000000000)="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", 0x1d0, 0x0, 0x0, 0x0) socket(0x11, 0x4, 0x0) (async) sendto$unix(r0, &(0x7f0000000000)="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", 0x1d0, 0x0, 0x0, 0x0) (async) 330.859262ms ago: executing program 7 (id=633): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6d4) open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000480)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18, 0xffffffffffffff8b}], 0x10000000000002b8, 0x0) r0 = socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) setreuid(0x0, 0xee01) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x28, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000240)={0x38c, 0x0, 0x0, 0xc086, 0x9}, 0xc) recvfrom(r0, &(0x7f00000000c0)=""/124, 0x7c, 0x1802, &(0x7f0000000040)=@in={0x2, 0x1}, 0xc) 293.96132ms ago: executing program 0 (id=634): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f00000000c0)="b10005010000009f0500070107000000121c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abfba0900000008e37193f8343712050500b71dc000090005080000fca65361ba84913f0100"/177, 0xb1, 0x409, 0x0, 0x0) getsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x8) 293.629398ms ago: executing program 2 (id=635): sysctl$kern(&(0x7f00000000c0)={0x1, 0x14}, 0x2, &(0x7f0000000100)="4ba7841143", &(0x7f0000000040)=0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x8000, 0x40, 0x90, 0x800440}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x40, &(0x7f0000000000)={0x7, 0x6, 0x79, 0x6, 0x1, 0x80004, 0x7f, 0x3}, &(0x7f0000000040)={0xb5, 0x5, 0xffffffffffffffff, 0x6, 0x6, 0x7, 0xe, 0xceeb}, 0x0, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x42}, 0x2, 0x0, 0x0, &(0x7f0000000140), 0x0) 291.748203ms ago: executing program 2 (id=636): sendmsg$unix(0xffffffffffffff9c, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000500)="370dc7cc4e61858942", 0x9}], 0x1, 0x0, 0x0, 0x9}, 0x8) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f0000000180)=""/199, 0xc7}, {&(0x7f0000000280)=""/23, 0x17}, {&(0x7f00000002c0)=""/79, 0x4f}, {&(0x7f0000000340)=""/6, 0x6}, {&(0x7f0000000380)=""/97, 0x61}], 0x6, &(0x7f0000000480)=""/16, 0x10}, 0x40) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) socketpair(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001dc0)={0x0}, 0x10, 0x0, 0x0) r3 = syz_open_pts() chroot(&(0x7f0000000740)='.\x00') ioctl$TIOCCONS(r3, 0x80047462, &(0x7f0000009cc0)=0xb34) ioctl$TIOCSETA(r1, 0xc450443c, &(0x7f00000000c0)={0x72f, 0x1, 0xd, 0x3, "c9f7d246000000023b0bca8f00875a6e80f775d2", 0xfffffffc, 0x6}) 244.984943ms ago: executing program 2 (id=637): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sysctl$hw(&(0x7f0000000040)={0x6, 0x9}, 0x2, &(0x7f00000003c0)="7c2e454d5134f6fa297b90fa7997de1e2030030000000000000070ae25c0c031c7ea9fcdb05c1e5755cb33f56dab1d1f983b74998a4da69f271d2bb2d44e0ca9010c718cfb588d59bf4b67dc45d46bf644b84167d784cc5decd7f56bb6a27533777505d5c5d78ef56c35a1c5c1bc7ce7544dd4959b52d90cc24c0499026b370f4d69023be80ad67b82cfb55e3aa91781fc8eccd44770b18ab76238e26270423d7e95ba523f3f13e39713954ac78b0267c37b624c8d94a3af0a2497295a6a3575fedcdff374214d6a3b92329267de5ea6b8c996be032987c6", &(0x7f0000000080)=0xd8, 0x0, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r1 = socket(0x18, 0x3, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x34}, 0x4, &(0x7f0000000140), 0x0, 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f00000000c0)="b10005166000009f0000000000070000001c130500000000fef96ecfc72fd3357ae380b37b673039d2d236acf60b7804be78164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc215000000eeffffff028ea8af630037282102000000720fd38bfbb770c1f572c881ea772ec592040000000000ff0c2300008abfba0900000008e371a3f8343712051eeab71d89e0442c5e52000080042000"/177, 0xb1, 0x0, 0x0, 0x0) ioctl$SPKRTUNE(r0, 0x20005302, &(0x7f0000000180)={0x2000000, 0xa}) 241.305082ms ago: executing program 3 (id=638): r0 = socket(0x18, 0x4001, 0x0) r1 = getegid() getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, 0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r2, 0xffffffffffffffff, 0x0, r1, 0x0, 0xfffe}, 0x0, 0x4}) r3 = socket(0x18, 0x3, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r4, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) getsockopt(r4, 0x0, 0x69, 0x0, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r3, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$unix(r0, &(0x7f0000000040)=@file={0x0, ""/10}, &(0x7f0000000080)=0xc) 231.936793ms ago: executing program 6 (id=639): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) shutdown(r0, 0x0) sendto(r0, &(0x7f0000000080)="0101", 0xfd84, 0xe1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4004}, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x7, 0xa, 0xb}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x55) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x10, r1, 0xeffffffffffff000) mlock(&(0x7f0000001000/0x2000)=nil, 0x2000) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) r2 = socket(0x18, 0x2, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) writev(r2, &(0x7f00000006c0)=[{0x0}], 0x1) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000440)="2e06b5a54fdc15d0e5ba5cd619e395d842161263a5bcf8d360b109113dd229c0dd47d6ff4f038bc8f40206bf8a1ef55ba04d8d4e4174e29e744d8606170795a2edaf3456112807f6d55fd9c3815257c10e07e8f0be3a7366f8123a42cb43f4302bf6b149e9b9bab6116b11b8ae693250f7fa8080cd8a2fc7c7e4ebf5c106c80fd386c7786c0421183de7b10dbde8040d96f51522423ca8e0f70989e1530cd2eaf7faaad41584384bf407ed7bed944e099fd18b59c86af22bb45fe92b05087191e530bc83a9e0975fc2a0f5988e9ae663b4fe25f69d661eb4ad0842a7be35dbe21e8911da844c7dce8d80f66713e13d96b30d5b4a13fb15282cf2a61a24880049b94a6e46bce752ff3230cd36789c42b37db904fd77060a84ca071839da23ef66bb45a18c9face3b3982d2edef1234405ec89e3ac812208780a2866cf52a8bbbe80b77e07f53d751ea0da7185414c403df8282d22a45b8a5ee7dc9b534106d98bb65aea3af32dea9a7a9881e7fdfbb46801408f1b94018abf7d5816d4e0344ab9dd8a6d43a2503180582f6d553e1a81fe4e8d68fafcd095560e83feda2fcd68d73fc71d7ff20511859f1b895d1a3f42970f1fb4dd61487901de9d5efcb92d63466e92bbe485aaf63988e255cbb607ac7ff9ee30732dd2482be6280b8946e32cf0ec48fc7c89e53c4aecb4af7af69e0dc04dd17405ce02898adf547f851e885964f836ec6b04d77f14d85025e415a01553d6b7e5dd946be3ea735515a624f74e2c09b863881e4412135ecbdd1f1ec73762d2b1bcb0f04f0bd1369f9c374d73fb9cc7465bbdb5e77078870423340ea32c9f49980888427f49eb9d4daf99a87d6d6e44aecd7dfeba2c6f1844b2b537d6de1ba1c8bd90f7ec014b4c84a9bfba26bb92b0d740de1e20c97ec18417a1f3d68fea076ad9aeb884efa6cedf35845dd4bc6eae82e37a2304c76ab6e7467f2d868e76df28b7dbba656b0998da5d54a00e706e8dc0699e961bfe8b6cef550c66eb7e5a40ef12896fb571be1d73d817d17e177f06c0679c784feb85129836c8724bf0c3e6026a3eb831c5335475950287c988059987f9198a074e7d92cdcf6c196d91f9368490b5d5f7033374c27b2aed8732fb84933a8fbe2bcaa68b68eea3400b5b022a2fae01ef3df9bf1ba0739b54faaa56ebe38c40fc6d1d99522c07af188a", 0x34e}], 0x1) ioctl$TIOCSETA(r3, 0xc0504417, &(0x7f0000000740)={0x0, 0x1, 0x7d, 0x80, '@\x00\b\t\x00', 0x790f, 0x23}) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$TIOCSETA(r4, 0xc4504444, &(0x7f0000000740)={0xfffff944, 0x400ffef, 0x40a9, 0x20000003, "0400000000800000ebb178d952d6d31962fff0d1", 0xafd3, 0x1}) 114.849831ms ago: executing program 3 (id=640): syz_emit_ethernet(0x1036, &(0x7f0000000040)={@random="fd4a18b6b56a", @random="01ee8fd95ae3", [{[], {0x8100, 0x5, 0x0, 0x41}}], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x22, 0x1024, 0x67, 0x0, 0x2, 0x2, 0x0, @remote={0xac, 0x14, 0x0}, @rand_addr=0x5, {[@noop, @ra={0x94, 0x6, 0xab2f}]}}, @udp={{0x0, 0x2, 0x8}, {"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"}}}}}}) 100.375968ms ago: executing program 0 (id=641): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) ioctl$FIONBIO(r1, 0xc0307004, &(0x7f0000000080)) syz_open_pts() mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) kqueue() (async) kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) open(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (async) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) (async) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) (async) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) (async) ioctl$FIONBIO(r1, 0xc0307004, &(0x7f0000000080)) (async) syz_open_pts() (async) 95.172792ms ago: executing program 2 (id=642): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000840)="cc60d3d79a1a7122a5fb9de9ea6ca0b30fb2942ef7652736f10f86d45ae419b2ecf7af93d33b3de1f2c56c0d93da7484095d0d543baf7f0161a025c9c02a561f9a76d06f1eaec7d8df99d6c28b10fa891e47d6c3bba690a611889032ac7b3581d7c92d1c546e59764f06e8a7cc6e01beb781f6669048316871794f0615dd4d8bb1057a61fb177be649004fb56a7d46c856a20d73f050bf29d58b803a676cc3761e8a47857f51d90a4465f9c6", 0xac}, {&(0x7f0000001200)="b389e5aeb7b42eab8dd0017236f060f918503740799f35d7e2e733fc1ce9e45cfb279a7aeb65ad9859d427a701bb4c25773931def673bea9bf786061c13935cf58279287d41ec345ac1598b7b4e5c36a3d5ecc1893e17e380a226ad0d75529c4623ddfb51dbafffe78145aed33f3c482faf44cd4fbeadc3a67a824d08a4333b14f7a032ce11d5530043711766c9b6de2be6f02696bd39a7bab01735c492d971dbc56c0ac859c5c750dabb6962382008fbeb3d9d6eedc7eb2b0cdc5a6dcc08472c67d346a4c6c2944d777d2414c65d905235d3e", 0xd3}, {&(0x7f0000000200)="5f6a8de84b4c523a583f91557c748a02cda4cedf13579996073843ec5cbabaadcec85d62a8a897a78307f3d2c30eea6356105ec8aaba86930f1aed0b3d111d", 0x3f}, {&(0x7f0000000240)="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", 0x5d0}], 0x4) open(&(0x7f0000000000)='./file0\x00', 0x205, 0x180) openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) pipe(&(0x7f0000000400)) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80, 0x2) select(0x40, &(0x7f0000000040)={0x6, 0x77, 0xb, 0xffffffffffffdba8, 0x7, 0xb42, 0x3e3, 0x200}, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0x7, 0x0, 0x8000, 0x7, 0x3, 0x10, 0x2e}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x2011, r0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000440)="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", 0x34d}], 0x1) ioctl$TIOCSETA(r1, 0xc0504417, &(0x7f0000000740)={0x0, 0x0, 0xfffffffe, 0x5, "000000000000522ebc03c72000eb27e8f500", 0x3765, 0x80}) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x0) 93.646625ms ago: executing program 3 (id=643): sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0xd}, 0x4, &(0x7f0000000a00)="83eb7b60", &(0x7f0000000000)=0x4, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0xd}, 0x4, &(0x7f0000000a00)="83eb7b60", &(0x7f0000000000)=0x4, 0x0, 0x0) (async) 92.92509ms ago: executing program 6 (id=644): r0 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = kqueue() kevent(r2, &(0x7f0000000000)=[{{}, 0xfffffffffffffffe, 0x95, 0x2, 0xc, 0x3}, {{r2}, 0xfffffffffffffff8, 0x3a, 0xd00ffffb, 0x9, 0x8}, {{r1}, 0x1, 0x40, 0x1, 0x9}], 0x101, &(0x7f0000000000), 0xdbf, 0x0) ioctl$FIONREAD(r0, 0xc0206921, &(0x7f00000001c0)) r3 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r3, 0x8020690c, &(0x7f00000001c0)) 80.367684ms ago: executing program 7 (id=645): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000002c0)={0x400000, 0xdd19, 0x101, 0x6, "6e2f622a6ad49c60b582dacdbd2cbbf61619f44d", 0x22, 0x10001}) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x48a0}]}) (async) r2 = socket(0x18, 0x2, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="77bd673bb5b8cc0c16ed080500000000000000d7f4601faa903493e339865dce0f225da73c1eede2526d", 0x2a}], 0x1) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}, 0xe090, 0x0, 0x6}) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r3, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) (async) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$unix(r2, &(0x7f0000000040)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x20, 0x401}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="c5ea33001aace440f62e18562095cdc75d2268be003fb9f7c1615513b5392c076b163afd44f0a0b2", 0x28}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="80f9f485ea68776f8609f1d712016eef3246d31c7bb940d92843709d9d89eec0092759e7f13ef62511c397ad466ff9fc7395567d02c7cdd0a84032fc6d14851ba2bc4b7f124af649900023f56c2115a4847eb33a19a86457ae61b7441f4b30300b", &(0x7f0000000080)=0x61, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2e, &(0x7f0000000200)={@random="fd0e82c89452", @empty, [{[], {0x8100, 0x6, 0x0, 0x1}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x22, 0x1c, 0x67, 0x0, 0x2, 0x2, 0x0, @remote={0xac, 0x14, 0x0}, @rand_addr=0x5}, @icmp=@info_request={0xf, 0x0, 0x0, 0xb, 0x2}}}}}) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x48a0}]}) (async) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) (async) sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="00a0a78d17a82026dec3e59be543bfcb4c969ba6cd231f6af7b034835f8c9d7703c616f7e2205117bc333f12", &(0x7f0000000080)=0x2c, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) (async) getsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, &(0x7f0000000300), &(0x7f0000000340)=0x8) (async) write(r4, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 79.607253ms ago: executing program 2 (id=646): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x32, 0xa2f}, 0x80000002000007, 0x7, 0xffffffffffffffff, 0x0, 0x6, 0x400000000009, 0x800}) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x7c, 0x2, 0x0, 0xb38f}, {0x6, 0x0, 0x0, 0xb}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000500)="c5eabfedf9e2011c5dc17154e0ec16c8c7d3335c92715c9933a32ab20d8e87b6a6f18ff125a6cae4", 0x28}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="000000d860a82060dec3e59be543bfcb44937703c616f7e2205117c9cbd7c500c9faa616", &(0x7f0000000080)=0x24, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getpgid(0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast, @local, [], {@ipv6={0x86dd, {0x2, 0x6, "ff4a2e", 0x30, 0x0, 0x1b, @mcast2, @loopback, {[], @icmpv6=@dest_unreach={0x1, 0x3, 0x0, 0x1, '\x00', {0x6, 0x6, "fed222", 0x200, 0x89, 0xf2, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote={0xfe, 0x80, '\x00', 0x0}}}}}}}}) sysctl$net_inet_icmp(&(0x7f0000000a00)={0x4, 0x2, 0x1, 0x7}, 0x4, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) ioctl$SPKRTONE(r0, 0x80085301, &(0x7f00000000c0)={0xffffffff, 0x7f}) setsockopt(r2, 0x7, 0x2, &(0x7f0000000180)="636e9b45eb497d15db3d4c2aa3e414f7e6e7f221528c33df4f0f75de929b2533f390f7a8", 0x24) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 75.353826ms ago: executing program 5 (id=619): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x2, 0x7, 0x8, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x765f}, {0x7, 0x6, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0xafd}, {0x1, 0x800, 0x7}, {0x401, 0x7fffffff, 0xe, 0x7}, {0x2, 0x6, 0xffff, 0x99}, {0xcdf, 0x1, 0x4f4, 0x6f}, {0xa, 0x8803, 0x14, 0xb}, {0x2, 0x81, 0x4, 0x9}, {0x6, 0x8001, 0x4, 0x88}, {0x4, 0x10001, 0x9, 0xaeb}, {0x2, 0x9, 0x10001, 0x5}, {0xb8c, 0x4004, 0x5, 0x6}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0x7, 0x205, 0x1}, {0x0, 0x1, 0x8000, 0x30000}]}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) r0 = syz_open_pts() flock(r0, 0x2) (async) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) (async) r1 = socket(0x18, 0x3, 0x50) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6c, 0xdc, 0x4, 0x409}, {0x40, 0xd, 0x20, 0x441}, {0x1ae, 0x0, 0x0, 0xffffff7e}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x40) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xfffb, 0x6, 0xbd}]}) (async) ioctl$FIONREAD(r1, 0x8020699f, &(0x7f00000001c0)) (async) syz_extract_tcp_res(&(0x7f0000000000), 0x7, 0x5) 45.008262ms ago: executing program 3 (id=647): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x10, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x6e}], 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000180)={0x80000001, 0x4, 0x46, 0x2, "790494511f427c09572256ce88a1b52b8ca87342", 0x8, 0x7fff}) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105727, &(0x7f00000000c0)={&(0x7f0000000100)=[{0x4, 0x8}, {0x22, 0x5}], 0x2}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2}, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r3, 0x0) ktrace(&(0x7f0000000140)='./file0\x00', 0x4, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) (async) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) (async) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000100)='./file0\x00', 0x10, 0x0) (async) poll(&(0x7f00000000c0)=[{r1, 0x6e}], 0x1, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) (async) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000180)={0x80000001, 0x4, 0x46, 0x2, "790494511f427c09572256ce88a1b52b8ca87342", 0x8, 0x7fff}) (async) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105727, &(0x7f00000000c0)={&(0x7f0000000100)=[{0x4, 0x8}, {0x22, 0x5}], 0x2}) (async) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2}, 0xc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r3, 0x0) (async) ktrace(&(0x7f0000000140)='./file0\x00', 0x4, 0x0, 0xffffffffffffffff) (async) 35.962779ms ago: executing program 6 (id=648): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xfeffffffffffffff}) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1002, &(0x7f00000000c0)=0x80, 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4) r0 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) 410.045µs ago: executing program 2 (id=649): mknod(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x4401) open(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x11) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) (async) r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) r1 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x4000011e, r1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r0, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x9, 0x6}, {0x9, 0x1ff}}, 0x0) (async) setitimer(0x0, &(0x7f0000000000)={{0x9, 0x6}, {0x9, 0x1ff}}, 0x0) symlink(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 7 (id=650): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x8a26824efa6ef103) socket(0x18, 0x1, 0x0) r3 = socket(0x18, 0x1, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000340)='./file0\x00', 0xd100, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x200, 0x0) syz_open_pts() ioctl$TIOCSETAF(r2, 0x802c7416, 0x0) getuid() r4 = socket(0x18, 0x2, 0x0) sendmsg$unix(r4, 0x0, 0x2) recvfrom$unix(r3, &(0x7f0000000180)=""/69, 0x45, 0x1, 0x0, 0x0) r5 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r6 = kqueue() kevent(r2, 0x0, 0x8, &(0x7f0000000140)=[{{r5}, 0xfffffffffffffffb, 0x19, 0x1, 0x3, 0x9}], 0x10, 0x0) kevent(r6, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) kevent(r6, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) acct(&(0x7f0000000080)='./file0\x00') pwrite(r1, 0x0, 0x0, 0x21b) r7 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r7, 0x81206919, &(0x7f0000000100)) sendto$unix(r7, &(0x7f0000000000)="ac1939afb9c978847a473c8dfb278c6cd53ca69a0061805aa63407da711cedaec054613303f540c1105ab0a013bc89ff", 0x30, 0x9, &(0x7f0000000040)=@abs={0x1, 0x0, 0x1}, 0x8) ioctl$TIOCSETA(r0, 0xc0284414, &(0x7f0000000240)={0x10000, 0x2, 0x0, 0x80, "561a8ebd000200", 0x10001, 0xe62}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error tap6: trying to send packet on wrong domain. if 22 vs. mbuf 0 sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 panic: kernel diagnostic assertion "rdomain == rtable_l2(rdomain)" failed: file "/syzkaller/managers/multicore/kernel/sys/net/route.c", line 1315 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 280578 43664 0 0 0 0 syz-executor *516669 43664 0 0 0x4000000 1K syz-executor db_enter() at db_enter+0x25 panic(ffffffff8345c9ee) at panic+0x1e5 __assert(ffffffff8340b2d0,ffffffff83374b54,523,ffffffff83443dab) at __assert+0x29 rt_ifa_del(ffff8000014ec000,800100,ffff8000014ec058,16) at rt_ifa_del+0x4ad in_ioctl_change_ifaddr(8040691a,ffff80003c445c10,ffff800001490000) at in_ioctl_change_ifaddr+0x69a ifioctl(ffff8000014956c0,8040691a,ffff80003c445c10,ffff8000fffeaf80) at ifioctl+0x1571 sys_ioctl(ffff8000fffeaf80,ffff80003c445df0,ffff80003c445d40) at sys_ioctl+0x5c3 syscall(ffff80003c445df0) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf5381559230, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "rdomain == rtable_l2(rdomain)" failed: file "/syzkaller/managers/multicore/kernel/sys/net/route.c", line 1315 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8345c9ee) at panic+0x1e5 __assert(ffffffff8340b2d0,ffffffff83374b54,523,ffffffff83443dab) at __assert+0x29 rt_ifa_del(ffff8000014ec000,800100,ffff8000014ec058,16) at rt_ifa_del+0x4ad in_ioctl_change_ifaddr(8040691a,ffff80003c445c10,ffff800001490000) at in_ioctl_change_ifaddr+0x69a ifioctl(ffff8000014956c0,8040691a,ffff80003c445c10,ffff8000fffeaf80) at ifioctl+0x1571 sys_ioctl(ffff8000fffeaf80,ffff80003c445df0,ffff80003c445d40) at sys_ioctl+0x5c3 syscall(ffff80003c445df0) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf5381559230, count: -9 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c445860 rbx 0xffff8000299dedcf rdx 0xffff800001489300 rcx 0xffff8000fffeaf80 rax 0xffff8000299ddff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x8edce7b8baf833ab r11 0x6ceb82aa50bcc2e4 r12 0xffff8000299debd0 r13 0 r14 0 r15 0x1 rip 0xffffffff82015ad5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c445850 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=516669 pid=43664 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000fffea540,0xffff8000fffeb220 process=0xffff80003c404990 user=0xffff80003c440000, vmspace=0xfffffd8067b34200 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 99268 85327 62726 0 2 0 syz-executor 99268 102133 62726 0 3 0x4000000 biowait syz-executor 44805 312156 80297 0 2 0 syz-executor 44805 213016 80297 0 3 0x4000000 biowait syz-executor 44805 257194 80297 0 3 0x4000080 fsleep syz-executor 43664 280578 6717 0 7 0 syz-executor *43664 516669 6717 0 7 0x4000000 syz-executor 582 284111 39438 0 2 0 syz-executor 582 93916 39438 0 3 0x4000080 fsleep syz-executor 10928 190039 19410 0 3 0x3000 suspend syz-executor 10928 37942 19410 0 2 0x4081000 syz-executor 10928 96360 19410 0 2 0x4081000 syz-executor 19410 212822 26552 0 3 0x82 nanoslp syz-executor 52290 446304 0 0 3 0x14200 acct acct 12729 476515 88396 0 3 0x3000 suspend syz-executor 12729 325589 88396 0 3 0x4081000 biowait syz-executor 80297 365843 26552 0 3 0x82 nanoslp syz-executor 84314 284922 0 0 3 0x14200 bored sosplice 52924 489751 58859 0 3 0x100082 sbwait arp 58859 386182 89028 0 3 0x10008a sigsusp sh 62726 100142 26552 0 3 0x82 nanoslp syz-executor 6717 109528 26552 0 3 0x82 nanoslp syz-executor 89028 57424 26552 0 3 0x82 wait syz-executor 39438 358820 26552 0 3 0x82 nanoslp syz-executor 88396 155422 26552 0 3 0x82 wait syz-executor 89684 474646 26552 0 3 0x82 nanoslp syz-executor 26552 312569 61324 0 3 0x82 kqread syz-executor 61324 375830 16087 0 3 0x10008a sigsusp ksh 16087 93116 36446 0 3 0x98 kqread sshd-session 36446 437900 13255 0 3 0x92 kqread sshd-session 64503 293896 1 0 3 0x100083 ttyin getty 13255 248984 1 0 3 0x88 kqread sshd 4813 433562 40892 74 3 0x1100092 bpf pflogd 40892 25608 1 0 3 0x80 sbwait pflogd 82763 275021 53812 73 3 0x1100090 kqread syslogd 53812 408373 1 0 3 0x100082 sbwait syslogd 11303 521790 1 0 3 0x100080 kqread resolvd 18830 306565 78549 77 3 0x100092 kqread dhcpleased 45038 175698 78549 77 3 0x100092 kqread dhcpleased 78549 368237 1 0 3 0x80 kqread dhcpleased 79398 308538 0 0 3 0x14200 bored smr 33915 134851 0 0 3 0x14200 pgzero zerothread 21199 437945 0 0 3 0x14200 aiodoned aiodoned 52752 393890 0 0 3 0x14200 syncer update 54839 376360 0 0 3 0x14200 cleaner cleaner 23957 460126 0 0 3 0x14200 reaper reaper 85705 430805 0 0 3 0x14200 pgdaemon pagedaemon 94674 316573 0 0 3 0x14200 bored viomb 89956 138004 0 0 3 0x40014200 acpi0 acpi0 29186 249403 0 0 3 0x40014200 idle1 42302 385279 0 0 3 0x14200 bored softnet3 72568 437742 0 0 3 0x14200 bored softnet2 43873 60287 0 0 3 0x14200 bored softnet1 47228 485506 0 0 3 0x14200 bored softnet0 97857 413412 0 0 3 0x14200 bored systqmp 53636 183651 0 0 3 0x14200 bored systq 87701 232845 0 0 3 0x14200 tmoslp softclockmp 23818 212481 0 0 3 0x40014200 tmoslp softclock 97760 300624 0 0 3 0x40014200 idle0 1 150602 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 99268 (syz-executor) thread 0xffff8000fffea2b0 (102133) exclusive rrwlock inode r = 0 (0xfffffd806de9ff60) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x283 #7 ufs_makeinode+0xcb #8 ufs_create+0x4e #9 VOP_CREATE+0xff #10 vn_open+0x491 #11 doopenat+0x32e #12 syscall+0xbc6 #13 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806e0331d8) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 vn_open+0x1f4 #8 doopenat+0x32e #9 syscall+0xbc6 #10 Xsyscall+0x128 Process 44805 (syz-executor) thread 0xffff8000fffeb210 (213016) exclusive rrwlock inode r = 0 (0xfffffd806e062d18) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x283 #7 ufs_makeinode+0xcb #8 ufs_symlink+0x54 #9 VOP_SYMLINK+0x11a #10 dosymlinkat+0x1dd #11 syscall+0xb08 #12 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd80671bd2e0) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 dosymlinkat+0xee #8 syscall+0xb08 #9 Xsyscall+0x128 Process 43664 (syz-executor) thread 0xffff8000fffeaf80 (516669) exclusive rwlock netlock r = 0 (0xffffffff837dd4c0) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 in_ioctl_change_ifaddr+0xbe #3 ifioctl+0x1571 #4 sys_ioctl+0x5c3 #5 syscall+0xbc6 #6 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 1 (0xffffffff83a18368) #0 witness_lock+0x5bb #1 ifioctl+0x47f #2 sys_ioctl+0x5c3 #3 syscall+0xbc6 #4 Xsyscall+0x128 Process 12729 (syz-executor) thread 0xffff80003c4202c0 (325589) exclusive rrwlock inode r = 0 (0xfffffd80671bd520) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vn_write+0x190 #6 dofilewritev+0x23c #7 sys_write+0xa2 #8 syscall+0xbc6 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10226 11100K 11484K 166960K 12149 0 pcb 17 12K 12K 166960K 128 0 rtable 151 7K 7K 166960K 455 0 pf 41 18K 81K 166960K 105 0 ifaddr 34 5K 7K 166960K 85 0 ifgroup 66 2K 3K 166960K 137 0 sysctl 4 1K 9K 166960K 15 0 counters 76 37K 37K 166960K 144 0 ioctlops 0 0K 4K 166960K 1575 0 iov 0 0K 14K 166960K 43 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1392 87K 88K 166960K 2019 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 14 0 VM map 2 1K 1K 166960K 2 0 sem 19 5K 5K 166960K 25 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 19 69K 93K 166960K 807 0 sigio 0 0K 0K 166960K 18 0 proc 72 91K 140K 166960K 630 0 subproc 72 4K 4K 166960K 90 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 114 0 in_multi 48 3K 6K 166960K 148 0 ether_multi 1 0K 0K 166960K 6 0 mrt 0 0K 0K 166960K 3 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 97 440K 440K 166960K 97 0 exec 0 0K 1K 166960K 593 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 247 161K 174K 166960K 9236 0 UVM aobj 21 4K 4K 166960K 24 0 pinsyscall 45 90K 108K 166960K 1983 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 38 0 NDP 17 0K 1K 166960K 56 0 temp 52 8669K 8737K 166960K 28936 0 kqueue 14 22K 28K 166960K 126 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 70 0 66 1 0 1 1 0 8 0 rtentry 176 139 0 77 5 0 5 5 0 8 0 unpcb 144 687 0 666 13 7 6 6 0 8 5 syncache 336 8 0 8 4 3 1 1 0 8 1 tcpcb 808 272 0 268 8 7 1 8 0 8 0 arp 128 23 0 14 1 0 1 1 0 8 0 inpcb 384 744 0 735 16 11 5 12 0 8 4 nd6 144 29 0 19 1 0 1 1 0 8 0 pkpcb 40 6 0 6 3 2 1 1 0 8 1 kcovpl 48 10 0 2 1 0 1 1 0 8 0 mppekey 1024 4 0 4 2 2 0 1 0 8 0 ppxss 1192 27 0 24 4 3 1 1 0 8 0 pppxif 1504 6 0 4 2 1 1 1 0 8 0 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 2 0 1 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 56 0 15 1 0 1 1 0 8 0 pfstkey 128 56 0 15 2 0 2 2 0 8 0 pfstate 384 56 0 15 5 0 5 5 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 544 0 291 29 8 21 27 0 8 5 art_table 32 546 0 291 4 0 4 4 0 8 0 art_node 16 137 0 81 1 0 1 1 0 8 0 sysvmsgpl 40 6 0 2 1 0 1 1 0 8 0 semupl 112 5 0 5 2 2 0 1 0 8 0 semapl 112 20 0 3 1 0 1 1 0 8 0 shmpl 112 21 0 3 1 0 1 1 0 8 0 dirhash 1024 21 0 4 3 0 3 3 0 8 0 dino2pl 256 2815 0 1306 95 0 95 95 0 8 0 ffsino 288 2815 0 1306 109 0 109 109 0 8 0 nchpl 144 3913 0 2213 63 0 63 63 0 8 0 rtmask 32 2 0 2 1 0 1 1 0 8 1 uvmvnodes 80 3263 0 0 67 0 67 67 0 8 0 vnodes 216 3263 0 0 182 0 182 182 0 8 0 namei 1024 13071 0 13068 3 2 1 2 0 8 0 percpumem 16 87 0 34 1 0 1 1 0 8 0 kstatmem 264 82 0 46 4 1 3 3 0 8 0 acpiwqpl 32 2 0 2 1 0 1 1 1 8 1 scsiplug 72 6 0 6 4 3 1 1 0 8 1 scxspl 216 13964 0 13961 10 9 1 8 1 8 0 plimitpl 152 108 0 89 1 0 1 1 0 8 0 sigapl 424 1119 0 1066 9 2 7 7 0 8 0 knotepl 120 521 0 0 16 0 16 16 0 8 0 kqueuepl 224 238 0 227 3 2 1 3 0 8 0 pipepl 336 154 0 127 3 0 3 3 0 8 0 fdescpl 520 1097 0 1064 3 0 3 3 0 8 0 filepl 160 6145 0 5914 26 10 16 17 0 8 4 lockfpl 104 183 0 180 1 0 1 1 0 8 0 lockfspl 48 82 0 79 1 0 1 1 0 8 0 sessionpl 144 29 0 20 1 0 1 1 0 8 0 pgrppl 48 49 0 32 1 0 1 1 0 8 0 ucredpl 104 857 0 844 1 0 1 1 0 8 0 zombiepl 144 1263 0 1260 1 0 1 1 0 8 0 processpl 1208 1119 0 1066 5 0 5 5 0 8 0 procpl 656 2284 0 2223 7 1 6 6 0 8 0 srpgc 96 15 0 15 3 2 1 1 0 8 1 sosppl 168 8 0 8 3 2 1 1 0 8 1 sockpl 728 1521 0 1487 33 17 16 16 0 8 12 mcl64k 65536 4 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 123 0 0 16 0 16 16 0 8 0 mcl2k 2048 38 0 0 5 0 5 5 0 8 0 mtagpl 96 14 0 0 1 0 1 1 0 8 0 mbufpl 256 289 0 0 18 0 18 18 0 8 0 bufpl 280 4419 0 128 307 0 307 307 0 8 0 anonpl 32 7497 0 0 61 0 61 61 0 246 0 amapchunkpl 152 29053 0 28536 35 13 22 26 0 158 2 amappl16 200 3167 0 2917 29 15 14 14 0 8 0 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 145 0 132 1 0 1 1 0 8 0 amappl13 176 34 0 34 2 2 0 1 0 8 0 amappl12 168 1783 0 1749 3 1 2 2 0 8 0 amappl11 160 50 0 36 1 0 1 1 0 8 0 amappl10 152 20 0 20 1 1 0 1 0 8 0 amappl9 144 244 0 243 1 0 1 1 0 8 0 amappl8 136 26 0 23 1 0 1 1 0 8 0 amappl7 128 126 0 112 1 0 1 1 0 8 0 amappl6 120 200 0 196 1 0 1 1 0 8 0 amappl5 112 149 0 139 1 0 1 1 0 8 0 amappl4 104 347 0 326 1 0 1 1 0 8 0 amappl3 96 5798 0 5680 4 0 4 4 0 8 0 amappl2 88 712 0 647 2 0 2 2 0 8 0 amappl1 80 12280 0 11643 16 1 15 15 0 8 0 amappl 88 8348 0 8178 6 1 5 5 0 92 1 dma4096 4096 2 0 2 2 2 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 2 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 23 0 3 1 0 1 1 0 8 0 uaddrrnd 24 1097 0 1064 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1097 0 1064 1 0 1 1 0 8 0 vmmpekpl 168 10332 0 10290 3 0 3 3 0 8 0 vmmpepl 168 75214 0 72922 113 10 103 103 0 357 2 vmsppl 480 1096 0 1064 5 0 5 5 0 8 0 rwobjpl 72 25364 0 20880 83 0 83 83 0 8 0 pdppl 4096 2202 0 2128 114 38 76 86 0 8 2 pvpl 32 14143 0 0 114 0 114 114 0 265 0 pmappl 256 1096 0 1064 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 421 0 63 11 0 11 11 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83870ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a18160) at __mp_lock+0x192 intr_handler(ffff80002a31c070,ffff800000079f00) at intr_handler+0xe1 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x7b84acdab110, count: 9 ddb{0}> trace x86_ipi_db(ffffffff83870ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a18160) at __mp_lock+0x192 intr_handler(ffff80002a31c070,ffff800000079f00) at intr_handler+0xe1 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x7b84acdab110, count: -6 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff8345c9ee) at panic+0x1e5 __assert(ffffffff8340b2d0,ffffffff83374b54,523,ffffffff83443dab) at __assert+0x29 rt_ifa_del(ffff8000014ec000,800100,ffff8000014ec058,16) at rt_ifa_del+0x4ad in_ioctl_change_ifaddr(8040691a,ffff80003c445c10,ffff800001490000) at in_ioctl_change_ifaddr+0x69a ifioctl(ffff8000014956c0,8040691a,ffff80003c445c10,ffff8000fffeaf80) at ifioctl+0x1571 sys_ioctl(ffff8000fffeaf80,ffff80003c445df0,ffff80003c445d40) at sys_ioctl+0x5c3 syscall(ffff80003c445df0) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf5381559230, count: 6 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8345c9ee) at panic+0x1e5 __assert(ffffffff8340b2d0,ffffffff83374b54,523,ffffffff83443dab) at __assert+0x29 rt_ifa_del(ffff8000014ec000,800100,ffff8000014ec058,16) at rt_ifa_del+0x4ad in_ioctl_change_ifaddr(8040691a,ffff80003c445c10,ffff800001490000) at in_ioctl_change_ifaddr+0x69a ifioctl(ffff8000014956c0,8040691a,ffff80003c445c10,ffff8000fffeaf80) at ifioctl+0x1571 sys_ioctl(ffff8000fffeaf80,ffff80003c445df0,ffff80003c445d40) at sys_ioctl+0x5c3 syscall(ffff80003c445df0) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf5381559230, count: -9