last executing test programs: 6.184137851s ago: executing program 3 (id=4): symlink(&(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = kqueue1(0x0) kevent(0xffffffffffffffff, &(0x7f0000000100), 0x400001, 0x0, 0x400, 0x0) kevent(r0, &(0x7f0000000000), 0xf03, 0x0, 0xffff4b54, 0x0) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x2, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x80) socket$inet(0x2, 0x1, 0x6) openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) open(&(0x7f0000000180)='./file0\x00', 0xa60, 0xcf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x112) socket$unix(0x1, 0x2, 0x0) socket$inet(0x2, 0x1000, 0x6) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$inet(0x2, 0x1, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x3b}, 0x2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x4, &(0x7f0000000000)=0x6, 0x4) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x59}, 0x2, &(0x7f00000000c0), &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x8, 0x0, 0x0, 0x0, 0xfffffe06) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000540)={&(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xb, &(0x7f0000000500)='./file0\x00', 0x8}) sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x6, 0x0, 0x0, 0x0, 0x0) chflagsat(r1, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) fcntl$getflags(r3, 0x3) 4.763980369s ago: executing program 2 (id=3): open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) r0 = getppid() kill(r0, 0x0) ktrace(&(0x7f00000000c0)='./file0\x00', 0x0, 0xd00a36e3d1347c42, r0) setsid() r1 = syz_open_pts() r2 = dup2(r1, r1) ioctl$TIOCSCTTY(r2, 0x20007461) r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000340), 0x20, 0x0) readv(r3, &(0x7f0000001700)=[{&(0x7f0000000200)=""/169, 0xa9}], 0x1) r4 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0xfffffffd, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0x1c, 0x18, 0x3, 0x400, "000000000000f400", 0x9}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x8, &(0x7f0000000140)={0x1c, 0x18, 0x0, 0x9954, "72f46ad4801fd4b5fe31ececd2f5bf3d", 0x9}, 0x1c) close(r2) truncate(&(0x7f0000000080)='./file0\x00', 0x4000) 4.482605124s ago: executing program 7 (id=17): r0 = socket$inet(0x2, 0x2, 0x0) mkfifo(&(0x7f00000000c0)='./file0\x00', 0xa) r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x3c) fcntl$lock(r1, 0x7, &(0x7f0000000300)={0x1, 0x0, 0x4, 0x4}) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x3, 0x80000000}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/234, 0xea}], 0x1) sendmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="f62ffcb7", 0x4}], 0x1}, 0x400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r4, 0x6, 0x0) sendmmsg(r0, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x400) 4.422200005s ago: executing program 0 (id=21): mkfifo(&(0x7f0000001380)='./file0\x00', 0x8) ktrace(&(0x7f0000000100)='./file0\x00', 0x1, 0x100, 0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000002a80), 0x80, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000002b00)={&(0x7f0000002ac0)='./file0\x00', 0x5, 0x0}) chmod(&(0x7f0000000200)='./file0\x00', 0x18a) r1 = syz_open_pts() ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000000)) unveil(0x0, &(0x7f0000000000)='x\x00') r2 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0x0) ioctl$DIOCCHANGERULE(0xffffffffffffffff, 0xcd60441a, &(0x7f0000000d80)={0x6, 0x9372, 0x7, './file0/../file0/file0\x00', './file0/../file0\x00', 0x0, "e023f1530c0114a54fa810fa8166d989d20953d3a7ea386eee5bb03eccdc749056002f99af0969c028c35f7b019fc569b594bef91fa9d0837e724f5b9064610a9a42b4773e4593f35f69e0c18bf4b60d13a4400633d333e91a0959d2b1b43cb5c92eb9d0875683a7b11a6321d3f69788369c41643c81a1b2bf249cf9e868fd263288bacce3ae456a2ae50018c80c15e442841221af95bd9449e3b3e75f5c9ad39627aadd39f15c5857044e64b79d8ed31adcc7c5296243e3728147cf1f11ba72f170a77425eabd0e6367123b11b2d4bb8882fb30c54398cd3cb6215b5ff486bc78400f51b95f028e4bef6c9fa4a9f31a05a1892176e40f8768c2fcef5559e1f59b313be447c68d34adc5584bc6995ab35b11d30cf9c860b5402f60fe437ee3cbfab095b7ce6eede22a83b42011b93adb70a9a51509a949bbe18556a4145046a775db202f920d0de8a3a9e9ccec2f478bedaff5efdc8623e62dae1bc131b28bab0c82bbd256aa37dbf85a0dfda9bc25abd70fe9add44500e6a777d8a74aa1a1764e562f48b2f4436974938545621f401f5367b2a1f0fa4aec361b7e902d7661f151a7660f7abf178d14d4f6fc5c64701f00bf6c8099be25e7fdce9611c21ecc82ad5d2fe7a035b96762ed777b735f0f8733cdb2ed2512ffe4f84023fa5b0a526a7d6a676b01cba199b530b1d5fea5921144ffb295174211cd7994ad3a1aae9b43bfc758b7087545cd6ac61df68a565e29d275098a218341eae233efb2c1dd863f0c37d73aeff9e8324a3ccac774bd65cab39c00b070b6006304ad678fc52dd813573221d4127c7f8f0323d5256396c518368b38469b93376ea63d0f7fe6a9ad28afdf0302f1f02c738e3ea99c270a3b5eb5605563bc8f192636a899d9d91e4d7cac07a999b63d0629aa06f3d947100a570b0c504ff18378c2dcc4ee16a9c42ada6208dff0e783eeaa5517dc0984e383749691ae99e2aea832976da6a8b19919394eba90f3d61d66d60260f06a0859a7021fefc26c6842e7798bfee760e470864210ee9a959c6a7d29caf958ec0771ee94ee8f8b1700bf60ea7c6818103299792839eeddeb87749a69d1c8f965d8a981b520878c821a4c58b84fb1963d0844c94f9a7ae92e74de91a552f56e016496980ec108679c7e87c725e96c982abcfa7ade0ac2eeb90f73444b52704c0b38b848deb4e15398b82103e851ff132b7e458b604a72707f0c29c7e534ff88d518415c093982ecfcca51a66ca2ef3cec1b0bd6360e4b1724d1a97143a9ebc9aa9214f9be25511cb24200f9e8ae00aa072a8eb780322b3be25cff6b1b6cc690db46f14f188a57f7bb770a6a1c5871d80dbb108f90f6526305441a89a18da46a4f65d744f14937686439d6030d4eda083b0baad0f5594e377461acac5b0c11434a7f258fd9a9c28f8a90e656b4444889856268633f3c549f06d6184c74be72657575a2b87ae8a56f76aaac5b973868d9bb84a42c2f13506e2db7d4b3bba6c72d099c17cbfd1d4c680f4173c28ae576f0ca0bb7001579297368681f217d559a4196d04e0bbeddbd5806fc2040bee000ab67b9d4fc08a50d985c0dfeef6eaf6ef69d81dd6e5ed653fc91034e14aa1823b14ab29e80694011bddbf6b384f1a86db7b0aa81d589d20ffb87dbd10d75f1107b8ed86b2851f047252e2fc28ffc0c83250d9defa6ed0b6a71d776946d12597b457785f31afff78d5ae8aca37df85a020e0018f76e44f04cb520945d40c049267e446db253f1f8f2d01fa240ffae1441b44f4b1601db02a99e29f7d96e881ffb27ed0eaafff2e189b3770e7f90accb21510e68e6ddf9d0ebee82b47f4be4e1641b160e8fdc06357898459311825ef828d2e1152ca74b1ed5bdd7709e4e3fb98e27127a225adcecb8e20479bf9c8c833d63f83bfa4cee"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000440)="29d25f48fa", 0xfffffe54}], 0x1) writev(r4, &(0x7f0000001ac0)=[{&(0x7f00000007c0)='(', 0x1}], 0x1) sendmsg$unix(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="ef61e55c3b0674c8f204f9223a559c41b92b5b01e44e33e75efac56f058c520e2f6ca7045e45300b994fa0", 0x2b}, {&(0x7f00000000c0)="43bdbf83b4cb5eb9f759c6df62da194a258c6c6391dff4e51c50191a1a8e63ca681e9f49923b3b1096532d6ef574a61c3a98f767e12c872c39db2a", 0x3b}, {&(0x7f0000000100)="425746c89f97391d0653e4877c42929f3ffa94ddcc0045f8d0202984396f6d72d075941f51b06723f0f280d5d84278ee781e599fe65ac6645b2ac33631aa60d6c116eb7a014199e568d4adfb", 0x47}], 0x1000000000000184, 0x0, 0x0, 0x1}, 0x4) setrlimit(0x8, &(0x7f0000000180)={0x34fd, 0xdf7c}) ioctl$TIOCSPGRP(r2, 0x40047477, &(0x7f0000000040)) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0x95) seteuid(0xffffffffffffffff) r6 = getpgrp() setsid() kill(r6, 0x13) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={0x8, 0x6, r5}) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYRESOCT=r2]) 4.40660649s ago: executing program 3 (id=22): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sysctl$hw(&(0x7f0000000100)={0x6, 0xc}, 0x2, &(0x7f0000000140)="66ec6380", &(0x7f00000001c0)=0x4, 0x0, 0x0) accept$unix(r0, &(0x7f0000000380)=@file={0x0, 0x0, ""/4089}, &(0x7f00000013c0)=0xffb) (async, rerun: 64) mkfifo(&(0x7f0000001380)='./file0\x00', 0x194) (async, rerun: 64) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x0, 0x40, 0x0, 0x2000003}, {0x5, 0x6, 0x5}, {0x6, 0xe, 0x5, 0xfe}]}) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[]) (async) seteuid(0xffffffffffffffff) (async) unveil(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='w\x00') (async) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 4.273724234s ago: executing program 3 (id=24): r0 = syz_open_pts() r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) closefrom(r2) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = getpid() fcntl$setown(r3, 0x6, r4) r5 = geteuid() r6 = getegid() r7 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) r8 = getpgrp() r9 = getuid() sendmsg$unix(r2, &(0x7f0000000500)={&(0x7f0000000080)=@abs={0x7, 0x1, 0x0, 0x2}, 0x8, &(0x7f0000000400)=[{&(0x7f0000000100)}, {&(0x7f00000001c0)="8ce71c326d5b9433915336bfa3de71318c1e43ac722e776652bd58d3bd0547c310d56a2af86ecd5e56e6113519174e6699045d843607eee8dd79311483ddc80fd2de7d96b10ca3d5278910429d3c90f999b99c7ab373b150d087260e9a165ec77d6a517e66dd15f0730129b9fa5a9c091e08ca5f1c32a3083dfedd7acab400b9d24694ca394887ccc99d6e01926f16ae49b93f59de4f687318de1ec3de7aad0384b7722f781ced6052c9aad36edc8134", 0xb0}, {&(0x7f0000000300)="7615d38717722602bdfa43fd7d8a9ad8f2f17841133447ed6ab1f9dc912ceabae8dbb1d272c9", 0x26}, {&(0x7f0000000340)="7d43ad5da403c28690afb2cb40f16810af325ab80b0c05bc7a1199e546738fee9a2f457d4907d884422940d393b06e8089584ede29de8206f056eb8e6c96115dc3e8fe21ed1dffad16d92ca2f78d4ed3614db1780b8cfdfda0ee2a9d760a0f16f014090a11bad0917507433280cfc2f9ece3059969994b03f79b50b32d5988a914", 0x81}], 0x4, &(0x7f0000000480)=[@cred={0x18, 0xffff, 0x0, r4, r5, r6}, @rights={0x2c, 0xffff, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffff9c, r0, r7, r1, r2, r2]}, @cred={0x18, 0xffff, 0x0, r8, r9}], 0x5c, 0xc}, 0xb) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000280)=0x7) r10 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETF(r10, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x7, 0x65, 0x45, 0x5}, {0x7c, 0x7, 0x4, 0x6}, {0xfffe, 0x20, 0x1c, 0x3}]}) write(r0, &(0x7f00000002c0)="57f5e6cdd60bab423018b49c2ef68488500b02d440000a", 0x17) r11 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) r12 = getpid() shutdown(r11, 0x2) ktrace(0x0, 0xe2fc5e0623494925, 0x814, r12) 4.272688361s ago: executing program 5 (id=25): pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) closefrom(r1) r2 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x0, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x0, 0x8a, "0a5be30e01a3d3d1793c1db58465282f", 0x308}, 0x1c) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_cred(r3, 0xffff, 0x1023, &(0x7f00000003c0)={0x0, 0xffffffffffffffff}, 0x20) pselect(0x40, &(0x7f0000000000)={0x0, 0x21a, 0x8, 0x6, 0x1834, 0x140, 0x5, 0x5}, 0x0, &(0x7f0000000100)={0x7fff, 0x654, 0x10001, 0xffffffffffffffff, 0x2, 0x3, 0x7fffffff, 0x7fff}, 0x0, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) closefrom(r4) close(0xffffffffffffffff) fsync(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sysctl$kern(&(0x7f0000000040)={0x1, 0x31}, 0xa, 0x0, 0x0, 0x0, 0xfffffffffffffc47) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) setpgid(0x0, r6) pipe(&(0x7f0000000280)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4}) (async) closefrom(r1) (async) socket$inet6(0x18, 0x2, 0x0) (async) bind$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x0, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x0, 0x8a, "0a5be30e01a3d3d1793c1db58465282f", 0x308}, 0x1c) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$sock_cred(r3, 0xffff, 0x1023, &(0x7f00000003c0)={0x0, 0xffffffffffffffff}, 0x20) (async) pselect(0x40, &(0x7f0000000000)={0x0, 0x21a, 0x8, 0x6, 0x1834, 0x140, 0x5, 0x5}, 0x0, &(0x7f0000000100)={0x7fff, 0x654, 0x10001, 0xffffffffffffffff, 0x2, 0x3, 0x7fffffff, 0x7fff}, 0x0, 0x0) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) closefrom(r4) (async) close(0xffffffffffffffff) (async) fsync(r4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x31}, 0xa, 0x0, 0x0, 0x0, 0xfffffffffffffc47) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) setpgid(0x0, r6) (async) 4.272088727s ago: executing program 7 (id=26): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xffff6383) (async) r0 = openat$klog(0xffffffffffffff9c, &(0x7f00000006c0), 0x80, 0x0) minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfb85e0665ac52ed3) (async) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000001ec0)) (async) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x2) (async) r2 = socket$inet(0x2, 0x2, 0x0) seteuid(0xffffffffffffffff) (async) r3 = syz_open_pts() ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000280)=0x5) (async) setsockopt$inet_opts(r2, 0x0, 0x18, 0x0, 0x0) (async) pselect(0x40, &(0x7f0000000000)={0x49f, 0x1, 0x8000000000000001, 0x1, 0x9, 0x6, 0x8, 0x8}, 0x0, 0x0, 0x0, 0x0) (async) sendto(r2, &(0x7f0000000080)="3877bb64020d68bebe83615fb87434779deefc724c0bdbead441da9bfcf2c0c3b962eff48f998094ba4db84ef32b0b00162649ae79f7517d238638cb907488b318d1421fddf72de4e34f623bba64b49bb97969d370abe33cc7996a7a82c6c3f80f3fa9278abd79522f75841c7dbe90283e0e223f12398ae90d94fbf04bd49b01fb6c623a66a71ec05b185f0c89f3ab8bf11dc0658fa3b6e24670048674b8bef3e55fae73d8826cd68775f1fff9ee8cbbfeae98e5cdca8d8d135c82dec14434f8824d28f3ce8242225c49ab60f5d03b8186f3a7d3193f7bf3034c30967f7bd4b377d0b0a8e7cd298577fa2328d6ecf4a8a5271748a647", 0xf6, 0x407, &(0x7f0000000180)=@in={0x10, 0x2, 0x1, 0x5}, 0x10) (async) closefrom(r1) 4.132786316s ago: executing program 5 (id=27): umask(0xbc) getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r1, r0, 0x0) umask(0x46) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@abs={0x2, 0x0, 0x0, 0x0}, 0x8) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x4, 0x8) syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x2, 0x36, 0x40, 0x268, 0x0, 0x5, 0x6, 0x0, @multicast2, @remote={0xac, 0x14, 0x0}, {[@end, @noop]}}, @tcp={{0x3, 0x0, r3, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x9, 0x0, 0x100, {[@generic={0x3, 0x12, "18968709000700000000020000000000"}]}}}}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000180)='./file0\x00', r5, 0x0) seteuid(r5) sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0xfc, 0x1, './file0\x00'}, 0xa) 4.132394603s ago: executing program 1 (id=28): ioctl$DIOCRSETADDRS(0xffffffffffffffff, 0xc4504445, &(0x7f00000000c0)={{'./file0\x00', './file0\x00', 0x44, 0x53}, &(0x7f0000000040)=[{@multicast2, '\x00', './file0\x00', 0x9, 0x2, 0x2, 0x8, 0xd, 0x8, 0x2c}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x7, 0x8, 0x18, 0x80, 0x3, 0x6, 0x46}], 0x2, 0x2, 0xc, 0x8, 0xfff, 0x7, 0x0, 0x8}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x35, 0x0, 0x2c, 0x6}, {0x2c, 0x6, 0x7, 0x3}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004e80)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, 0x0, 0x0) 4.010046565s ago: executing program 1 (id=30): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$WSMOUSEIO_SRES(r0, 0x80045721, &(0x7f0000000040)=0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xfffffff8, 0xffff8000, 0x4], 0x3, 0x10000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01864c2, &(0x7f0000000100)={0x0, 0x0, r0, 0x0, 0xfffffffffffff34d}) r2 = dup(r1) ioctl$WSDISPLAYIO_GBURNER(r2, 0x400c5752, &(0x7f0000000140)) kevent(r2, &(0x7f0000000180)=[{{r1}, 0xfffffffffffffffa, 0x10, 0x800fffdf, 0x9, 0x5e83a378}, {{r0}, 0xfffffffffffffffc, 0xa0, 0x4, 0xda, 0xffffffff}, {{r1}, 0xfffffffffffffffe, 0x8, 0x4, 0x0, 0x6}], 0x4, &(0x7f0000000200)=[{{r2}, 0xfffffffffffffffe, 0x4b, 0x2, 0x1, 0x5}], 0x68, &(0x7f0000000240)={0x83e, 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r2, 0xc01864c2, &(0x7f0000000280)={0x0, 0x5, r1, 0x0, 0xffffffffffff0001}) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000300)={&(0x7f00000002c0)=[{0x8b, 0x2}, {0x7, 0x9}, {0xaf, 0xfc000000}, {0x45, 0x1}, {0x83, 0x10000}, {0x87}, {0x86, 0x4}], 0x7}) ioctl$BIOCFLUSH(0xffffffffffffffff, 0x20004268) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000380)={'tap', 0x0}) ioctl$WSDISPLAYIO_DELSCREEN(r2, 0x80085754, &(0x7f00000003c0)={0x9, 0x1}) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000640)={0x1c, 0x18, 0x2, 0xfffff56e, "32e68cf610c4045854d691343d202111", 0x7}, 0x1c) ioctl$WSKBDIO_SETBELL(r3, 0x80105703, &(0x7f0000000680)={0x4, 0x1000, 0x7, 0x81}) ioctl$VNDIOCCLR(r2, 0x80384601, &(0x7f0000000780)={&(0x7f0000000700)='./file0\x00', 0x5, &(0x7f0000000740)='./file0\x00', 0x8}) syz_emit_ethernet(0x78, &(0x7f00000007c0)={@random="ab60745521b2", @broadcast, [], {@generic={0x1600, "2ba6f544b17b303588f7707caefdae8577834194fcbbb93e276c7caf31afbfe07b77a3cd58dd9a993f8334064583397ecae0c96f3bc15d5b9d2e603c519b9186bc6a8bc8509c48314d9a064a24bd8cffa0c9fee74fa3ac4c766f607572bfcbaa9a5a29f9763c18402664"}}}) ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f0000000840)=0x8) ioctl$WSKBDIO_SETBELL(r2, 0x80105703, &(0x7f0000000880)={0x4, 0xfffff379, 0x5, 0xd}) ioctl$BIOCSDLT(r2, 0x8004427a, &(0x7f00000008c0)=0xfffffffa) pwrite(0xffffffffffffffff, &(0x7f0000000b00)="1a3406074fc8229f6621c5a922c126d07ab80a5cd5c4241b787bbd5c46ae5326197e0fb148d4ba295bdcec57bc35c955c44d9fc3359905d0453d9648478ed1d18f08e8e2a0292c1583b92fac54ac7fe60f3d49d1a16da23d3f0e8ab58701fc57ab598e", 0x63, 0x8) semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000b80)=[0x9, 0x893e]) 4.009818695s ago: executing program 4 (id=31): r0 = socket$inet(0x2, 0x1003, 0x24) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x2d28) r1 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0x0) read(r1, &(0x7f0000000140)=""/79, 0x4f) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000001c80), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000001d40)={0x1, 0x1}) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x0, 0xfffffffa}, 0x10) 4.009492262s ago: executing program 7 (id=32): open(&(0x7f0000000000)='./file0\x00', 0x200, 0x63) sysctl$kern(&(0x7f0000000040)={0x1, 0x3b}, 0x2, &(0x7f0000000080)="be96c206fb44c5db18eefa09f71a5d5461c2c082c7b02b0932418a509232b6dbc6769c105c31907bdf2251d9a15729d50300f34b849f355fbd90ca9833aa2dd269c4d80650c8b2aecc5858dc742aa8022fca9e903eef795422b94265ffc03639d99bf4f9a9f5cc9c37e52584c4cef4123a6a562fd39681346e195b9edfcd85ba5062a1188d5ab3f127", &(0x7f0000000140)=0x89, &(0x7f0000000180), 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4000) syz_emit_ethernet(0x56, &(0x7f0000000300)={@local, @local, [], {@ipv6={0x86dd, {0xf, 0x6, "61184a", 0x20, 0x6, 0x1, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x2, 0x2, 0x8}, {"cac7b94a86028ed6d6535d2243d0609e29473a29b9fcaab6"}}}}}}}) r0 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) unlink(&(0x7f00000000c0)='./file0\x00') r1 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0x42) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0xa010, r1, 0x0) 4.009095968s ago: executing program 7 (id=33): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6510000000ffff000001000000", @ANYRES32], 0x10, 0x40a}, 0x404) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$DIOCCLRSTATUS(r2, 0xc0284416, &(0x7f0000000100)={'./file0\x00', &(0x7f00000000c0)=""/28, 0x3, 0xd5, 0xfffffff7, 0x32}) (async) seteuid(0xffffffffffffffff) (async) r3 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) (async) r4 = socket$inet6(0x18, 0x3, 0x3a) dup(r4) (async) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x11, 0x5, 0x0, 0x0, 0x9}, 0x40db, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x6, 0xffffffffffffffff, 0xf5df, 0x6d9, 0x8, 0x2}) (async) shmctl$IPC_RMID(r3, 0x0) write(r0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000002ac0)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x4}, 0x38, 0x1c00, 0x0) 2.851450916s ago: executing program 7 (id=34): symlink(&(0x7f0000000180)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$inet6(0x18, 0x2, 0x0) r1 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f00000002c0)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x11, "00000000000000000000000000000010", 0x1000004}, 0x1c) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f00000002c0)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x7, "00000000fe0000000000000000000001", 0x1000004}, 0x1c) sysctl$net_pipex(&(0x7f0000000100)={0x4, 0x23, 0x3}, 0x3, &(0x7f0000000580)="78550fd3c823c35326fa52274080efdfc7459880b22c325967ba15bc87f8494f4ac28d1069ea61f8bd6062554188115d08c523faaa7afe2ce6d8d27a739410bf32f642891c1b8e6ad52a685857934e77b57f362057b3d65be6f3e47413ac03cef8a66b5c4e7c58dfb0e71f85397b4172c30c33ebcb531a978d", &(0x7f0000000600)=0x79, &(0x7f0000000640)="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", 0xfa) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) fchmod(r2, 0x24) r3 = socket$inet(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000080)={0x10, 0x2, 0x0, 0x80}, 0x10) sendmsg(r3, &(0x7f00000003c0)={&(0x7f00000000c0)=@in={0x10, 0x2, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0}, 0x400) socket$inet6(0x18, 0x2, 0x9) syz_open_pts() ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000000080)={&(0x7f0000000000)=[{0x21, 0xfffffffd}, {0x20, 0x4}], 0x2}) setsockopt$sock_int(r1, 0xffff, 0x1025, &(0x7f00000000c0), 0x4) unveil(&(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000400)='c\x00') 2.850551817s ago: executing program 5 (id=35): ioctl$DIOCGETQUEUES(0xffffffffffffffff, 0xc0104401, &(0x7f0000000040)={0x8, 0x1, {'\x00', './file1\x00', './file0\x00', './file0\x00', {{0x6, 0x2}, {0x6, 0x2}, 0x4}, {{0x5, 0x2}, {0x7, 0x801}, 0x4}, {{0x9, 0x2}, {0x9, 0x1000}, 0x40000000}, {0x7, 0x20, 0x0, 0x4004}, 0x0, 0x10000, 0x6, 0x7, 0x4}}) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r0 = socket$unix(0x1, 0x2, 0x0) r1 = kqueue1(0x4) kevent(r1, &(0x7f0000000000)=[{{r0}, 0xffffffffffffffff, 0x91, 0x1, 0x54993e53, 0x8000}], 0xa2, 0x0, 0xfffffff8, 0x0) (async) r2 = socket$inet(0x2, 0x3, 0x57) setsockopt(r2, 0x0, 0x1d, &(0x7f0000000140)="9a350700", 0x4) (async) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) (async) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_pts() mquery(&(0x7f0000104000/0x4000)=nil, 0x4000, 0x2, 0x0, r4, 0x8) sysctl$kern(&(0x7f0000000000)={0x1, 0x59}, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffde3) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x8, 0x6, "c0fb9b", 0x14, 0x2b, 0x7, @rand_addr="89607067d12d8bb5f75c3fbb97283fe5", @remote={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x3, 0x2, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x802, 0x0, 0xa1ad}}}}}}}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x3}, 0x3, &(0x7f0000000040), 0x0, 0x0, 0x0) (async) socketpair(0x0, 0x5, 0xf, 0x0) fcntl$setstatus(r3, 0x4, 0x4) 1.775489327s ago: executing program 2 (id=36): r0 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) closefrom(r1) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DIOCXBEGIN(r2, 0xc0104451, &(0x7f0000000f00)={0x3, 0x401, &(0x7f00000002c0)=[{0x0, './file0\x00', 0xc}, {0x1, './file0\x00', 0x3}, {0x1, './file0\x00', 0x3ff}]}) (async) ioctl$DIOCXBEGIN(r2, 0xc0104451, &(0x7f0000000f00)={0x3, 0x401, &(0x7f00000002c0)=[{0x0, './file0\x00', 0xc}, {0x1, './file0\x00', 0x3}, {0x1, './file0\x00', 0x3ff}]}) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000280)={0x10080001, 0xffffffff, 0xfffffc01, 0xfffffff7, "2f4a0100090000000000a1e71aab00", 0x8acd3, 0x1}) write(r0, &(0x7f00000001c0)="97348c2c1102d4b56465370759a5e2f2d667aabf429921f8dfed8549da53f211b05a139150b97dc8c3914842eed8ac4a9809", 0x32) (async) write(r0, &(0x7f00000001c0)="97348c2c1102d4b56465370759a5e2f2d667aabf429921f8dfed8549da53f211b05a139150b97dc8c3914842eed8ac4a9809", 0x32) 1.769098008s ago: executing program 3 (id=37): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000002a80), 0x80, 0x0) socket$inet6(0x18, 0x2, 0xfd) sysctl$kern(&(0x7f0000000080)={0x1, 0x1a}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa63f6557d72b786dd65e481e2ffd8030000ffff00000000000000000000000000ff020000000000000000000000000001"]) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$WSKBDIO_SETMAP(r1, 0x8010570e, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x45, 0x6, 0x8, 0x2, 0x7}, {0x4, 0x990, 0xde9d, 0x5}, {0xcfba, 0x92, 0x4, 0x6, 0x6}]}) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000002b00)={&(0x7f0000002ac0)='./file0\x00', 0x5, 0x0}) 702.146013ms ago: executing program 4 (id=38): r0 = syz_open_pts() r1 = dup2(r0, r0) write(r1, &(0x7f0000000280)="b22746aa", 0x4) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000240)=0x2) (async) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000240)=0x2) mkdir(&(0x7f0000000640)='./file0\x00', 0x40) sysctl$hw(&(0x7f0000000000)={0x6, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$hw(&(0x7f0000000000)={0x6, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x674) open(&(0x7f0000001980)='./file0\x00', 0x80, 0x0) (async) r2 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0x0) ioctl$TIOCSETA(r2, 0x80047466, &(0x7f0000000500)={0x3, 0xffffffff, 0x519, 0x2, "4594b481dc798ff64a704340880e1a5213513f4c", 0x2c1, 0x4}) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x5) sendsyslog(&(0x7f00000000c0)="3f19c3b7ba697f578152dfa43a1f691eaee757e4b9f520f8ffd9153911138e8b2e80ccdc390b34c14d070ab08eaf3d25f18168e0b013910719ea98cf0893d5f7389196553a6ecd", 0x47, 0x3f) ioctl$TIOCGFLAGS(r2, 0x4004745d, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0x18, 0x8003, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x67, 0x0, 0x0) (async) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x67, 0x0, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') (async) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[{0x70, 0xffff, 0x0, "101a5ee859825d7beb4a5224385c602851414a8e375a5ac40028f8b09c2d605abe36a461f892f0fcee29d31e67ca2d1089be7c35ec12778212d4a9a88f2d6cd86b541f773f7c568d099adc9617723ecf1b010b95be3049b0031977e9794ec9a157fa3d"}], 0x70}, 0x400) syz_emit_ethernet(0x8f, &(0x7f0000000140)={@remote, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x2, 0x81, 0x61, 0x1, 0x10, 0x33, 0x0, @rand_addr=0x10000, @rand_addr=0x80, {[@rr={0x7, 0x3, 0x5}]}}, @udp={{0x2, 0x2, 0x8}, {"b8e0482a044432df26a82fea61fba11ad0a99fa5f7eb3972527819648b6bd719ded16c0bf34856d272f8bb101c351b52c6f7dd22ff9f8e6cfc051f3d4581a72ad9e97926b63763ee2f57065ff0fd5a000ecb7de0ccd038ab814c31267c052bb53b"}}}}}}) (async) syz_emit_ethernet(0x8f, &(0x7f0000000140)={@remote, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x2, 0x81, 0x61, 0x1, 0x10, 0x33, 0x0, @rand_addr=0x10000, @rand_addr=0x80, {[@rr={0x7, 0x3, 0x5}]}}, @udp={{0x2, 0x2, 0x8}, {"b8e0482a044432df26a82fea61fba11ad0a99fa5f7eb3972527819648b6bd719ded16c0bf34856d272f8bb101c351b52c6f7dd22ff9f8e6cfc051f3d4581a72ad9e97926b63763ee2f57065ff0fd5a000ecb7de0ccd038ab814c31267c052bb53b"}}}}}}) r4 = open$dir(&(0x7f0000000280)='./file1\x00', 0x0, 0x220) ioctl$DIOCGETRULES(r2, 0xcd604406, &(0x7f00000019c0)={0x7, 0x9, 0x6, './file1\x00', './file0\x00', 0x0, "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"}) getdents(r4, &(0x7f0000000680)=""/4096, 0x1000) 680.996272ms ago: executing program 0 (id=39): open$dir(0x0, 0x200, 0x80) ktrace(0x0, 0x4, 0x814, 0x0) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000016c0)=[{0x0}], 0x1) pselect(0xf, 0x0, 0x0, &(0x7f0000000100)={0x7ffc, 0x654, 0x10001, 0x8, 0x2, 0x200000005, 0x7fffffff, 0x7fff}, 0x0, 0x0) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x3}, 0xf, 0x0, 0x0, 0x0, 0xfffffffffffffe70) sysctl$kern(&(0x7f0000000000)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040), &(0x7f0000000100), 0x0, 0x100000) 573.22397ms ago: executing program 6 (id=40): r0 = getegid() setresgid(r0, 0x0, r0) getgroups(0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0]) (async) getgroups(0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="85150f3cc2c45519c3666d5377291415aa139a3a570c", 0x16}, {&(0x7f0000000140)="63401670c71d938b2c33532313787ad505dfa6bf2f55633880ead3f69606d6746c7d28d2267eb702216f95db2339a5a4eece10bb5c9d74124cf2789e27e01d5845cdfb10d3d265df42ded652bfa8229d9ea07ffd9442be62398ce64eb2a990e77bc66b0b0f3e0e954021321697a9a5", 0x6f}, {&(0x7f00000001c0)="1c9a05ef0a65e32fc90826d9fbb17de36da08343b402814d765ab8400e8d8ecec2013fc383daf4f3e3a8828d18a26cb40238bd2ffafa3288144f22a440455e62e6984fa74bd0a1b113af768d97761e01421a0a7fd4f6e8578583c752f66c55d7202c32a9e5fe6b22887de05965e4afa71ad3ac5dc13c1d8e99679d631e02da6aa2978afb0d2007fe05f6b22181235dc91d29606c58a5a544e4954a6e325071ac53435c57aca996438a4820cc627703b9bde3a2c4463418567d1e377b3d43f4ce91fcaa35955f2c6da3a77d90964656ea67f2252e", 0xd4}, {&(0x7f00000002c0)="9718fc031293994cb35b141a102c5b7922cabbeaa761bb2f", 0x18}], 0x4, &(0x7f0000001480)=[@rights={0x10, 0xffff, 0x1, [r2]}], 0x10, 0x8}, 0x0) (async) sendmsg$unix(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="85150f3cc2c45519c3666d5377291415aa139a3a570c", 0x16}, {&(0x7f0000000140)="63401670c71d938b2c33532313787ad505dfa6bf2f55633880ead3f69606d6746c7d28d2267eb702216f95db2339a5a4eece10bb5c9d74124cf2789e27e01d5845cdfb10d3d265df42ded652bfa8229d9ea07ffd9442be62398ce64eb2a990e77bc66b0b0f3e0e954021321697a9a5", 0x6f}, {&(0x7f00000001c0)="1c9a05ef0a65e32fc90826d9fbb17de36da08343b402814d765ab8400e8d8ecec2013fc383daf4f3e3a8828d18a26cb40238bd2ffafa3288144f22a440455e62e6984fa74bd0a1b113af768d97761e01421a0a7fd4f6e8578583c752f66c55d7202c32a9e5fe6b22887de05965e4afa71ad3ac5dc13c1d8e99679d631e02da6aa2978afb0d2007fe05f6b22181235dc91d29606c58a5a544e4954a6e325071ac53435c57aca996438a4820cc627703b9bde3a2c4463418567d1e377b3d43f4ce91fcaa35955f2c6da3a77d90964656ea67f2252e", 0xd4}, {&(0x7f00000002c0)="9718fc031293994cb35b141a102c5b7922cabbeaa761bb2f", 0x18}], 0x4, &(0x7f0000001480)=[@rights={0x10, 0xffff, 0x1, [r2]}], 0x10, 0x8}, 0x0) getgroups(0x1, &(0x7f0000000140)=[0x0]) (async) getgroups(0x1, &(0x7f0000000140)=[0x0]) setresgid(0x0, r1, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') seteuid(0xffffffffffffffff) (async) seteuid(0xffffffffffffffff) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) writev(0xffffffffffffffff, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000dc0), 0x10000, 0x0) ioctl$DIOCRDELTABLES(r5, 0xc450443e, &(0x7f0000002300)={{'./file0\x00', './file0\x00', 0x0, 0x1}, 0x0, 0x428, 0x42, 0x80006, 0x3, 0x7, 0xc, 0x2, 0x9}) ioctl$WSMOUSEIO_SETPARAMS(r4, 0x80105728, &(0x7f0000000080)={&(0x7f00000000c0)}) openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) r6 = open$dir(0x0, 0x8, 0x100) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdir(0x0, 0x204) rename(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') fchownat(r6, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x2) pipe2(&(0x7f0000000100), 0x4) (async) pipe2(&(0x7f0000000100), 0x4) sched_yield() r7 = getegid() setregid(r7, 0x0) 571.263672ms ago: executing program 4 (id=41): open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(0x0, r0, 0x0) setgroups(0x0, 0x0) seteuid(0xffffffffffffffff) truncate(&(0x7f0000000080)='./file0\x00', 0x100000) 569.889095ms ago: executing program 5 (id=42): getgroups(0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) munlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) setresgid(r1, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setreuid(0x0, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r5, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) openat$pci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setresuid(0xffffffffffffffff, r6, r6) 568.862743ms ago: executing program 0 (id=43): mkdir(&(0x7f0000000640)='./file0\x00', 0x40) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='c\x00') mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x120) unveil(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000340)='c\x00') flock(0xffffffffffffffff, 0x4) sysctl$net_inet6_icmp6(0x0, 0x0, &(0x7f0000000080)="232a30dd8a376583b075fa3a4bb394ad72da2c56454312b4af917df6e384776c89cebc6477c7cb5f0f5f171b201151", &(0x7f00000000c0)=0x2f, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x100, 0x112) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x2000, 0x0, 0x0) sysctl$hw(&(0x7f0000000200)={0x6, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) 494.838708ms ago: executing program 2 (id=44): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000480), 0x8000, 0x0) ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f0000000540)=0x7) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, &(0x7f0000000040)="283e36a0", 0x4) (async) r1 = socket$inet6(0x18, 0x3, 0x3a) r2 = dup(r1) sendto$inet6(r2, &(0x7f0000000240)="d3095a6a6ea10c21", 0x8, 0x400, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x2d5, "ff01e50000000000347ea9b400"}, 0x1c) (async) seteuid(0xffffffffffffffff) (async) r3 = socket$inet6(0x18, 0x1, 0x6) setsockopt(r3, 0x29, 0x23, 0x0, 0x0) (async) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) fcntl$lock(r4, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x2000100000001}) sysctl$vfs_nfs(&(0x7f0000000080), 0x3, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) mkdir(&(0x7f0000000640)='./file0\x00', 0x40) (async) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000080)='./file2\x00') (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x150) (async) unveil(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='r\x00') (async) unveil(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000000)='x\x00') (async) chroot(&(0x7f0000000000)='./file1\x00') (async) setuid(r5) r6 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SPKRTUNE(r6, 0x20005302, &(0x7f0000000000)={0xffffffff, 0x2}) (async) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x20, 0x0) (async) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)="d0247fd2", 0x4) 493.993775ms ago: executing program 0 (id=45): r0 = socket$unix(0x1, 0x5, 0x0) bind(r0, &(0x7f00000000c0)=@un=@file={0x0, 0x1, './file0\x00'}, 0xa) listen(r0, 0x472) poll(&(0x7f0000000040)=[{r0, 0x1}], 0x1, 0x6) sysctl$hw(&(0x7f0000000040), 0x2, &(0x7f0000000140)="47a99b9d7f7c9b63b7847610f8b28c1c0d50eeef6d83ca02203dc937cddd228c8e1035afb809ba779a212244d1ca28829375bcd5b8f47edcff794da170fcafc0c061ef043991eea10b014507012ad8b10288a8de1bee8e6784cfa6479c8d5f3bc207f52657e77790fef5d042a5250889ddf95cc6a3569e52b5bf9e5ea150ae462a810559ab014f65fea85a8aab04f625f45ea25e117fe44ee368e5d158070000000000000000000000000000acac7756ff092e064b2c5312c470be730c4e5c2488b5e6a18df070144bf4868a8db973afb9fcc0dae5330553ba93635635fe3cd5696dd21c1084d4", 0x0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) (async) bind(r0, &(0x7f00000000c0)=@un=@file={0x0, 0x1, './file0\x00'}, 0xa) (async) listen(r0, 0x472) (async) poll(&(0x7f0000000040)=[{r0, 0x1}], 0x1, 0x6) (async) sysctl$hw(&(0x7f0000000040), 0x2, &(0x7f0000000140)="47a99b9d7f7c9b63b7847610f8b28c1c0d50eeef6d83ca02203dc937cddd228c8e1035afb809ba779a212244d1ca28829375bcd5b8f47edcff794da170fcafc0c061ef043991eea10b014507012ad8b10288a8de1bee8e6784cfa6479c8d5f3bc207f52657e77790fef5d042a5250889ddf95cc6a3569e52b5bf9e5ea150ae462a810559ab014f65fea85a8aab04f625f45ea25e117fe44ee368e5d158070000000000000000000000000000acac7756ff092e064b2c5312c470be730c4e5c2488b5e6a18df070144bf4868a8db973afb9fcc0dae5330553ba93635635fe3cd5696dd21c1084d4", 0x0, 0x0, 0x0) (async) 493.502275ms ago: executing program 6 (id=46): r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r1 = syz_open_pts() ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000100)) pwritev(r0, &(0x7f0000001700)=[{0x0}], 0x1, 0x7fffffffffffffff) 493.169958ms ago: executing program 1 (id=47): issetugid() issetugid() (async) r0 = accept$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, 0x0, 0x0) (async) r1 = openat$vnd(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$VNDIOCGET(r1, 0xc4104603, &(0x7f0000000100)={'./file0\x00', 0x5, 0x3, 0x9}) getgid() (async) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$WSKBDIO_SETDEFAULTBELL(r2, 0x80105705, &(0x7f0000000600)={0x2, 0x0, 0x6, 0xa}) (async, rerun: 32) getsockname$inet6(r2, &(0x7f0000000000), &(0x7f0000000040)=0x1c) (async, rerun: 32) ioctl$WSKBDIO_GETBELL(0xffffffffffffffff, 0x40105704, 0x0) (async) ioctl$WSKBDIO_GETMAP(0xffffffffffffffff, 0xc010570d, 0x0) 433.137448ms ago: executing program 6 (id=48): sysctl$ddb(&(0x7f0000000080)={0x9, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x154, &(0x7f0000000240)=ANY=[@ANYBLOB="83ff10bb4e91aaaaaaaaaaaa0800460801460064000110f090780001000000000080820200004e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="512000049078000766710ba4a63c04babaf19b4904836af1346415a7a590cb6b47fca09d60166c157a323577479e71855a1e72566e3d7971f8acae80b0280d0f4256ff90151d64f99a3ceaee8cec98440d3781e356a02c2200006cc969fc7cb8282ec7b78e44cee0a66f3c71f7fbf15a00000000000000000b26378c03cff000d1281b0e1789d072c0147c107b9954f2268d158e362194800c7376cedcdc509edc0caec7c7aa2ecfca000000009b129b91c3b75ce695b26e2a0b3e063133bf1b808717158b3c6f77ebe40a2eb29a7889787bb812462ed7c433a6e549d5329b892be6d42439b800a4af61cbfeaa9c54ab3d94b5581a9132108637177ecd1cbd153ede9fe1ae23a1932fc390457c9d277b0fefce5ad93d31255cb43407c3b28c27ba261338f8eb5eaae2b745"]) 432.381557ms ago: executing program 2 (id=49): open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000400), 0x400, 0x0) ioctl$DIOCGETRULESETS(r0, 0xc444443a, &(0x7f00000004c0)={0x5, './file0\x00', './file0\x00'}) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x300, 0x0) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) r1 = shmget$private(0x0, 0x4000, 0x444, &(0x7f00003ce000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x800000)=nil, 0x1000) r2 = msgget(0x2, 0x203) msgrcv(r2, 0x0, 0x0, 0x2, 0x0) syz_open_pts() msgctl$IPC_SET(r2, 0x1, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0x140, 0x8, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xc88b, 0x9, 0x800, 0x0, 0x0, 0xff, 0x0, 0xc, 0x0, 0xb}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) syz_emit_ethernet(0x46, &(0x7f0000000940)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x4, 0x6, "31f05f", 0x10, 0x89, 0x91, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[@fragment={0x2f, 0x0, 0x8, 0x0, 0x0, 0xf, 0x66}], @udp={{0x1, 0x3, 0x8}}}}}}}) r7 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r7, 0xffff, 0x1000, &(0x7f00000002c0)=0x6, 0x4) bind$inet6(r7, &(0x7f0000000080)={0x1c, 0x18, 0x3, 0x5, "47faa2547e5e41ddf71db40c1a8fa3bc", 0xffff8575}, 0x1c) syz_emit_ethernet(0xfff9, &(0x7f0000000000)=ANY=[]) setpgid(r5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) getgroups(0x1, &(0x7f0000000440)=[r3]) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000280)={{0xffffffffffffffff, r9, r6, 0xffffffffffffffff, 0x20, 0x100, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8, r5, r8, 0x0, 0x0, 0x862, 0x0, 0x198}) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000000c0)="dea61a4d1cedf5f1055f9fe020375689e520e46b18e3acbc0d5f164611cc94cf1d1cf24a5c3d9e7972630139702a686e3b073201f9a26df11c948ee6c414ded266", 0x41}], 0x1, 0x8) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) setsid() r10 = getppid() getsid(r10) sysctl$kern(&(0x7f0000000000)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) 431.708376ms ago: executing program 4 (id=50): r0 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) ioctl$DIOCGETSTATES(r0, 0xc0104419, &(0x7f0000000500)={0x3, &(0x7f00000001c0)=[{0x0, ""/16, [{[@v6, @v4=@loopback]}, {[@v4=@multicast2, @v6=@mcast1]}], {}, {}, @v6}, {0x0, ""/16, [{[@v6=@empty, @v6]}, {[@v4=@multicast1, @v4=@multicast1]}], {}, {}, @v6=@ipv4={""/10, ""/2, @loopback}}, {0x0, ""/16, [{[@v4=@multicast1, @v6=@mcast2]}, {[@v6, @v6=@local]}], {}, {}, @v4=@remote}]}) (async) ioctl$BIOCGDIRFILT(r0, 0x4004427c, &(0x7f0000000000)) (async) r1 = syz_open_pts() (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) closefrom(r2) (async) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) (async) r3 = syz_open_pts() ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f0000000000)={0xb, 0x3, 0xffffffc0, 0x3b6d67bd, "fe83fe7a9542a14123a70000001efe02bfabb686", 0x2, 0xcfe}) (async) write(r1, &(0x7f0000000080)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b075e183605afc43ad280026ded2b7971029639e597b485195e5d32eae6278a90279f47ef4e2372eb827e81a78d1a45db81fe437659e3c3542c7cdec1f29217c850b606ee10cdfa632a2ad5bdb31b95", 0x89) ktrace(&(0x7f0000000180)='./file0\x00', 0x0, 0x8, 0x0) (async) ktrace(&(0x7f0000000040)='./file0/file0\x00', 0x4, 0x40000102, 0x0) 430.373005ms ago: executing program 1 (id=51): ioctl$DIOCRADDADDRS(0xffffffffffffffff, 0xc4504443, &(0x7f00000000c0)={{'./file0\x00', './file1\x00', 0x0, 0x7}, 0x0, 0x34, 0x0, 0x2, 0x9, 0x6, 0xffffffff, 0x6, 0x7}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000001700), 0x8840, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f00000003c0)={0x9bee, 0x7fffffff, 0x4, 0xfffffffe, "24f34c79e2d0788542e74468c09ddcbd38657fa0", 0xaec, 0xfffc}) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_cred(r2, 0xffff, 0x1023, &(0x7f00000003c0)={0x0, 0xffffffffffffffff}, 0x20) ioctl$VNDIOCCLR(r1, 0x80384601, &(0x7f0000000080)={&(0x7f0000000000)='./file1\x00', 0x7d4, &(0x7f0000000040)='./file0\x00', 0x8}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) sysctl$net_inet_tcp(&(0x7f0000004a40)={0x4, 0x2, 0x6, 0x16}, 0x4, 0x0, 0x0, &(0x7f0000000000)='_l\x00\x00', 0x4) ioctl$DIOCRADDADDRS(r0, 0xc4504443, &(0x7f00000000c0)={{'./file0\x00', './file1\x00', 0x1, 0x7}, 0x0, 0x100006, 0x0, 0x2, 0x8, 0x20000000, 0x10000009, 0x6, 0x6}) 344.362353ms ago: executing program 6 (id=52): ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0xd07b843b7f7eac92, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0x42) sendmmsg(r0, &(0x7f0000002400)={{&(0x7f0000000040)=@un=@abs={0x3, 0x0, 0x0, 0x0}, 0x8, &(0x7f0000002340)=[{&(0x7f0000000080)="a7a1503642f7f6121434b888da425a855da0dae692c64165eba6a37f12656314745935dbdb893106359d06cbe77835a5f69438031373dceff8c2b553bdd9e64d2796c357c64749553f8745aa2c84b0e769f7d44112b7e704a22c52cec431dba0854fb64dba04aa69ad42ef7378a240c3c53aadc4a4cbbe5b615fbf12fd167809751a2eb0e599408510093e0c5428b40d2b1d63bd", 0x94}, {&(0x7f00000001c0)="4fea5b3cd523f9c42978bef42c235e8c86171f07129754d8e54de6e066623daaecbee77f05e8ca352d599dc2b6e3ad629b003c9692fb02ed88c46e2db6fe933ca451e70319dc9c14edfa593980c3b1ebe250a89568b4691b8c44930e711e1669fab935bc71fb4e58c5a33bc9d1530dc791c4b2dba2021b08e84065a0a0a066a2abbae3bbee079a0fd96f03ac0c78138870a32be1d85cee1885e33a8fdb8f9c02b1ee861dce9ac5505a9b2a8f367995707eff55ecdef1d2041860ec58c544a6e6779afc75448f2caf4c4dfb525c3deb2a39e27e5fc5b91c504a1af0beae9ebe16cccabbcfb8eb28d47020b7bf204c5d923679bf5507e2605a5bec6417b4a5617918447d281932792f28f12c0f16ff74a3bf35b39d0191d55d6fe32eed9d7c7b2467b9341b8b1d5bc55006a25ee537c9c598836f8534a3979cf19142ff24191b292113140036fffb00177097b8f3828da570a72072e8ed0f97a051afee3aa45ad1cf3da8bd204cd6ebfd2c834dcae07f7216c61ba26e885a3286fdf789f2cb9e909d1a4367effa0b6a0d8940a42f4d7c9d464990b3cb7bbfedea5a0a04aefa446cf18eb3a1a37bf281b4f1b94e9f9844b25bea8d40490f11ee5299c1e933457008173a147f74a5d566acb9b0229abd3ab9fbac52855086eab10ded27e1e5237f5015df86fd712a1d31c5a350cc9938d0c54b6ad186b63120cecb0458bad293284c8af82e1212e1c9ae81f1afbbddfbeeb6b9a08a27549de261981fc56e21cde67945ec878162336c75e3be997ca8a126e4d1a9a9a8932d5d1f8b8ab46603b0f52427f84281824a1ba0110cbff2e4be5aa03a2b5221545eb3082b35d355dbf8b9dc90cce3f696e1b138105f46db129930e0e9ef44bb547425bc39e30ceaaf078a6c31fd45208b38be888c23c0ad6da02e3a90d9b1d663f2e7932e7cb6f7a3c38a20ee2e4ca98f678fade744938bc75fe627bd9a241b550c967ec547ff2a6db6013e6b90a6ff3b9767d7918e63923d400d02cdca16b78290aebea7125a51c30160e574df67408cea96c321119a335af8acf0f441c15f595f43a214ff332b5b363b81b3d1879f207c827b69f6938f346804a64ce0e40d04e5e6e10e6e49750084e26650b515ceb7814d2fae937222ac0cf8205cc44b4d3b7e84b68fd37c481a67b7f3af8c796293bc02ce3f424ad4b261432c9ee64d4a64e3a4778d76237498463772e5b8536b53ce8ddcfa5844ea54509c7911436ae5876b3e211b3f4de3588ebd989a1e0ad0d8b03a76c3db42f22178cd23efa08279c323d5b019ce23e4c788c9504da5dae7d65ef2ff03c635a9793068fbc70fa034969fff30fe9732ce2f2131b664655744682cf894ab4994ca0aec2817048733158896c9edd58918555edcd1aa1c113206b18dfabb48e8b68a9f3f9ea62f049233bb4cd8801e2b15482e9f659d7fa7e264da4ce1f794cd4ed3c3a0e9966b4112d0af326ad4152bdfc7d5a4711ce1606059b3d94c929bbf90e4323a3ede12a33b6555a1325a1cd57557462c5c0d00e2c1bc7858b0495adfa01680eb2c035d81133093b48acdd398fd1c68dbadce24ccf9602c2d9126683d32017087fdf01370e0a808362f26fbbfc665b73ac9e26599c5cc18f4e122dfb4bbf5857f738e4243c69efe36d0c501774246a3179df41b322105c3dfc3e7bcd9c108a22129047ba0c72f468a671e34d71b10a2330cf8c7ab05371648d7108f4572456760021ba5a920acb88de83278b83344d19559591449a8bf4e471e5611953685f58c176183cee795f899212938fedf5a4d29608dd47cae229a4af9c0c4b1b7dda814c62237a3c2377170cba63e94f8bb89c4de542712414d68160afc6378bd1d08e2a63ee6f717e2e96198f3a4f61154e69320b2bd7ae3c750eb64536bb609d050f21c504ec1421b1cbbfbc4498d0afc4dbb6ddfd4e52034ac152ff4c3672731856c82f9af09d9fd45120e9f94b2b2328552ed4da6293e97295566deba6de27372b05a25a6b0e6004b9cab70f65cfcd65c3d72221bbba5595a01040f084b4cf4a7e6433bdb697c85e86857505edf4e594ed9940fbccf0b1afdd366617678c16f603eac1d3c31908da35569f34fdc28cbd324f89c39b079f95df203ab0ebaab55bd9eb848fa97c36ce224f73825347afe0ebfdd65075eb6bef3eb9824ef6da8588ab625289d75b145c19a7bf857f780e6ffd9ca2a888fe72b646a0576f0d35e03a8b2dce3dc5b28c9e33204e0857bce1cfad98dc34f18fdc970e41de0db5b80b09485394fb750ad9f13286c827f81ff376fb5909bf731251c67fdb290929760ce9c3652d921e7b6cf6716ea441fa32efcd6f689645a0f638dd791a4aa5e2597e56cc33000f1e18f94395bb083b42fc5289fcebd5a08676d5e59fbe6055096737dc18840d0a32feb390ee5ced8a80567b4d055b56808d5c9a8b3798fbf8e90e0bee14bcaa77f9c7714512df961213dde79aa2a2012b601fda982847749a70ad1ae4a46b33be0ff4f782f2db8042350014e6d5b93d47a1b9c874ca50bb312e63d1c2038c35905ce8dfc485b09cdfc0b7e4a8c96afecd3a2acc78e99aa0a3dc93ce84601f470d4a93ca0b84c9c7d2f23183099010cf12c841a761002881676bc01c3a9113b119237aef663910e55debab5cedaf4120ecc667348ea0de93134365fa74c36d7c83fba69978d32a4f1248b53ea927b8b79eb62341ee672124dbcddc136df7d346f5b71f24dee708549a06f797d788d75ee7ad4a8df7f9eaf1c3abdff151bbc1f0c1c4b828a1a54c02f935b92c0392f6815b5c463984f3dd9923fcf37ec21534e6472e2d30fbac218237241c26610ce9970d1be34a16ab80bb3cf04b050290550c6c39d0249452df56da5a4e02eebbc69cff68659a979343dc04f6f44a935b0976e3ef7a185efa3f66a9360408bf6b5477f2810e98bcfafbc7f45bd7bde8839b4ec1e6430501df78cf9e66595100d3f9e2e204da29993bcf8aa38da79d5ce524a0689eff0fc9b083bad4bf0bb10838676426f48f6a2e1fcb6fec387134085ff1caf837dab34e365054028b51d5e8117615f5827e5cd0192a995c5838ffb9c6f5e67d4142c1850ea5298c98bf9bb106c418488593b62310b5061a521200d03b2dd2d3e2874bc08ec202f9d39f56fcaab57173d4167ea88cde553c7f3292ef68b0889fc6b93caae3981f9366ecc0ee2aab7a874d56faaa05f6c77480a262f2941ce8a5160526dfd1a3bbfe3942c501fe760592e31fc5c442b3245041822a2b72b8d0dfee2bf678e480ce5c6b72315feea199f43089f55fe7e6384fa741e21d7c15dc71ba0243bb8c911debd24372509a94b6bee1c0db2d494413403b814df56c07b7f2d6fc6d2c74cc01bfa3928e6306226c42226773ca2a7bb4d94880ddb4846df7b11fc443ffdeac9b20941d19fd635ecf05230453acd8d6f4209659d64607687350894c89e1a9e0fd8b9ddb428fda8618aebef8a3d1bd901c954cb4fa2cc4b7dd3bc37509ef33f612f1c5beffb0215c1a993b1715ec9f11d5566fce141a6a27497d2a7d9f41d2dbe0ade1adebca98204f3ec3189793dc1873ed6f8a5ac8b1719121a66225e1a25a90de7c2889fbc9f2f495ffa3fd20bac36757de3a9480c3ef47ca4b1bb16b0055bc6a096d95bd11f4142d1627a0ea468db4cb5fda444684d4e8c8216175a1717a2d5c6bdda2ff070312e8550418ef3c47de0e26e74602b59700f08f06553dfc902e6d9e4e6ff9cbf90710586193f06040c108a3fe35d97c8d065bcc4ab66df99114fadd514049190c6078cfa8714eeba6a0f7085205ad98b210a55838063325a8756a89e75aaa4ffa4a883ab2e5c5a124847b232b2827a47afea7adbeb254556864cba0fdbd229438ded1bb2d9319ba93e24b62f9b74fa1ec544273fe654c4cf32460b835b62590702ccbeb874da86c6c2848d6e167a2b08e9d907184ada648f5951c9d0b3b519cc9ca26c56c854696b864f2e08d08b529acc6e72d3b748be2cdcd4ae725374f3645532be0b9b44e3965822b9cac5d0e6d9a93dae652d2948266111ba820b87ee1ff6c361f2c1b7ba848eebe0ecec0471bffb838ed7bd3ea92e8360740fbe93488bb29e40044ca97f120f07fffb869d2b29cc8e54c5eea88713ead2c8ae54e147b167146d5b19a9e5421e0bc3ccf7ebc6ee57e2a8b03640ddff982833a7ab290325f60f26623555f7738e8b0ebc7ecc6b1f7ed218497df5a81b2d4381db19e3e5a10cd110f1188ecc01a31bd4c8eb241808be9eea60f2d61c645b476588cf72a9e60f18756d79b4e233113baba9e8bbd9e03d0a6086568e79969e7b61429614238c92d5c8925665b36559ae1c1873800097a058d9bcf5bc94cb9ba2aa1d03d2a113445f1fe432813adb8242d090b4f91667fb28d99700b871a2a0373d97866f52ebcd956e37df6aebd0653809602e979e083211298450dcdd639176ae688ca9a3a0095a7dceaac8ebdfa301441e57cad13c075750fb1bfdafdad8af9ed85658bd6c6b9ef1cfd49211625fa0d06cf2bd2e963dea2b84b630c08818e4c89dfce75bf71ddd32e93f29045be07b96a708d6827334ff008bb6151efa5a676ff5bc1a8bfb918458318883fab42cb7836438b0abb506c895bb58f728de5051f0e9cd7cb4de104a997274e1908773cbcc85e2a8fdcbf1649bf6d0ab0e6a8ab9da21538cbb7d88c0b68fe2b1a0c1dd51ae14c5115bd2770db1b4b89bbb3ab213bdf8eb9cc38e84bc0bb2ee9065d2ef51d24692fdf167586b9e0638f7506c228dc62cf30d001833bae04d72867f33262ea55412b2773bc5d5aeb91244fa45212f09bd1547643aab9f67f2d8ba4764b2c07e7ef4df43700f7b2e351768f5c7b4527397924b2f276ec662eb3fff9407fd927a64a93d3166aa19041ef91cb972741a22dbf4e1dc25599edcec3c70b44f73f8d1b5a26da7577aabb5ef28e95888bb558b543b5061351274044d3535282d025a63f692e744588ae54947da1097e587f465d846806113ca7424ae653e3a46e9131ee7d4936b0cc1b8fbcfb252e029afa67377afe5cef4da17c7d04bc81f9df5987659edbfab3a4fa10933848bccce055f2cc7f8aab367a387ffc943859d5f5587dba81c04a5822d6e1cfd890af4c11955daa2b83ce4007fced918ba1b2a62a8ce36afe8ccee3d23944036dbeb1c1eaf87703c68353f0a118d67051ec5a953f33e487c3e16df0493855b5cae6c85e3075ddd815195f287d02f5f61b65244770a85e32890a9b32a4f475d63a4b1a1343e3b2a00d4fb29fffc1951e388e4ec1eab7e7a517392ea0e3683232dc91ad446c621615e5e460eb0b1f87a5fb813c9fc890074e21f0d8c698c6270204be41000dda032ba4f5054b0f77cb51ed9eb72f6855760589575179efef5f8dadf26c6522bb2b11acf308a88e9f3a23bf9b7adc1a5454e7b4e315902f4dba37de66ac37905658d327479bb3dbea8d392b77f3ff88688c46577a460ba30384358c06b63edb14670a825d1e2b5cdc7e191de1a92688de6dbbc4bb607d6641ac4a9c4c885b41c83ef8a3ba34a77fed92323e87cadfa6f5e9c354ec407b618c24220a0da005c67b037331901a563c09e384aed133e7535daa3707f42fc4bf36f35985807bf6605d1b1d63691c2e6e43095cfe924e5c862e4903db24b37eed4abd2642783290e4db43b9099d7cd95ae9d75fbe7117e870644a0553da2b61d2be02e91c8addb7d4efd97072e4e34fb2fef4eb01fdfec0e935704dbf781b7ffc9fb9aae3a935ee711a8335539719a713dda", 0x1000}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f00000021c0)="64c9af4ff879751d93e300520bb5c7ed48fca3c8e4eb053b933e5f7bda98a3d4e150411a8d594522999ecb61463d51ce21c0e1d7d44869714eb341ede7dbf18044be6880b7c8b3a79c4554f9bbb614ae8756bfb407ca2302c70ce151d736", 0x5e}, {&(0x7f0000002240)="ff739aabb8414dee3b275bfc7e8943c7bb4e71a375fd1f026310aff4175fc5ca3941426c245935f740ac9f2f3b762af81211c5d6de6b2d38ff57fba7c36ce84b98975506a0b5c3a935e5ae02c314224c8e95971d556b20ffc53734c9503013785da2cbae721b156f95e46e2d738481f830aa7dc228bcdfeba9ef4d88417f3c6f9014fcd26063650895bfd71aa57aed517cc6e19d49055a8c1e688d6eea3355f396e97ebdfdcba2ce72bb57947003a1a48144e9718e1ff29547807b109967659276f70fc9131a8838654b1471b86d32c1d611ed00eacaca65a3d1b546a34690f2fc15e14c4c13c8e83efd9e288f18ee0cdfe681fc30", 0xf5}], 0x5, &(0x7f00000023c0)=ANY=[@ANYBLOB="1000000001000000ff030000e9696807200000000100000007000000b6e6a8458e4da6a95539cb327e2162ded4000000"], 0x30}}, 0x38, 0x9) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x2010, r0, 0x0) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) r1 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000000000/0x800000)=nil, 0x0) sysctl$kern(&(0x7f00000001c0)={0x1, 0x5}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) readv(r2, &(0x7f0000001240)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0xd2f, 0xe6f0, 0x4f5, 0xb, 0x3ff, 0x7, 0xfffffff6, 0x5, 0xcd6}) pipe(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) poll(&(0x7f0000000040)=[{r5, 0x80}], 0x1, 0x7) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000002580)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002500)}) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x2, 0x6, 0x2, 0x5}, {0x0, 0x5a, 0xa2, 0x8000}, {0xff7e, 0x6, 0xc2, 0x3}]}) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[]) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x11}, 0x4, 0x0, 0x0, &(0x7f0000000040)="283e36a0", 0x4) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x40, 0xff, 0x40}, {0x6, 0x4e, 0x6, 0x101}]}) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) munmap(&(0x7f00007a8000/0x1000)=nil, 0x1000) syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[]) ioctl$VNDIOCCLR(0xffffffffffffffff, 0x80384601, &(0x7f0000002480)={&(0x7f0000000140)='./file0\x00', 0x10, &(0x7f0000002440)='./file0\x00', 0x8}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x0) 343.938479ms ago: executing program 1 (id=53): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x28dd) getgroups(0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x148) r0 = open$dir(&(0x7f00000009c0)='./file0\x00', 0x10000, 0x12) acct(&(0x7f0000000000)='./file0\x00') r1 = socket$inet(0x2, 0x3, 0x2) setsockopt(r1, 0x0, 0x68, 0x0, 0x0) fcntl$dupfd(r0, 0xc, r0) open$dir(&(0x7f0000000040)='./file0\x00', 0x40000, 0x10) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x2, 0xf1) ioctl$FIOASYNC(r2, 0x80047476, &(0x7f0000000180)=0x80000004) 343.004918ms ago: executing program 5 (id=54): r0 = open$dir(&(0x7f00000005c0)='./file0\x00', 0x200, 0x0) (async, rerun: 64) shmget$private(0x0, 0x2000, 0x1ee, &(0x7f0000ffe000/0x2000)=nil) (rerun: 64) open$dir(&(0x7f0000000240)='./file0/file0\x00', 0x200, 0x0) (async) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) (async) r1 = shmget$private(0x0, 0x4000, 0x493, &(0x7f0000ffb000/0x4000)=nil) syz_emit_ethernet(0x76, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) (async, rerun: 32) shmat(r1, &(0x7f0000000000/0x800000)=nil, 0x1000) (async, rerun: 32) open(&(0x7f0000000180)='./file0\x00', 0x100, 0xba8d6e55dd352871) (async) truncate(&(0x7f0000000080)='./file0\x00', 0x100000) (async, rerun: 32) truncate(&(0x7f0000000000)='./file0\x00', 0x88100) (async, rerun: 32) ktrace(&(0x7f0000000200)='./file0/file0\x00', 0x4, 0x814, 0x0) (async) truncate(&(0x7f0000000080)='./file0\x00', 0x100000) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5cc2) open$dir(&(0x7f00000002c0)='./file0\x00', 0x800, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) select(0xff4e, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0x8}) unveil(0x0, &(0x7f0000000680)='r\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x33af) (async) pipe2(&(0x7f0000001880)={0xffffffffffffffff}, 0x4) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000004800)=0xf06) setsid() (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) (async) msync(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x4) (async) r3 = syz_open_pts() r4 = dup2(r3, r0) ioctl$TIOCSCTTY(r4, 0x20007461) (async) r5 = fcntl$getown(r3, 0x5) fcntl$setown(r2, 0x6, r5) (async) r6 = geteuid() setuid(r6) 337.495737ms ago: executing program 3 (id=55): pselect(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0xa60, 0xcf) symlinkat(0x0, r0, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x1, 0x814, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x0) symlink(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000600)='./file0\x00') getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r2, r1, 0x0) r3 = kqueue() kevent(r3, &(0x7f0000000040)=[{{r3}, 0xfffffffffffffff9, 0x1, 0x2, 0x1, 0x9}], 0xf, 0x0, 0x5215, 0x0) ppoll(&(0x7f0000000080)=[{r3, 0x10}, {r3, 0x1}], 0x2, 0x0, 0x0) kevent(r3, &(0x7f0000000000)=[{{r3}, 0xffffffffffffffff, 0x1, 0x80, 0x80, 0x76b}], 0x630f, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000480)=[{r3, 0x40}, {r3, 0xc}, {r3, 0x1}], 0x3, 0x0, 0x0) setgroups(0x0, 0x0) seteuid(0xffffffffffffffff) rename(&(0x7f0000000040)='./file0\x00', 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x4, 0x2011, r4, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0xcf) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x0) mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) munmap(&(0x7f0000fea000/0x13000)=nil, 0x13000) 160.759081ms ago: executing program 5 (id=56): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x20, 0x0) semget$private(0x0, 0x1, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) closefrom(0xffffffffffffffff) socket$inet(0x2, 0x1, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x5, 0x0) pselect(0x40, &(0x7f0000000080)={0xff, 0x3ff, 0x5, 0x8, 0x9, 0xb, 0x3, 0x80000009}, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000000)) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x4, &(0x7f0000000000)=0x6, 0x4) socket$inet6(0x18, 0x5, 0x9) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x59}, 0x2, &(0x7f00000000c0), &(0x7f0000000080), 0x0, 0x0) setsockopt(r1, 0x6, 0x8, 0x0, 0x0) ioctl$WSMOUSEIO_SRES(r0, 0x80045721, &(0x7f0000000100)) 159.7306ms ago: executing program 4 (id=57): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000240)="89143646442d8da97e6c6deb95d52e9c7eeeb628", 0x14) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000640)="a613cbf67eddd25ed76fe68d", 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) closefrom(r2) ppoll(&(0x7f0000001900)=[{r1, 0x80}], 0x1, 0x0, 0x0) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x2}, 0x33f, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x54}, 0x7, 0x0, 0x0, 0x0, 0x31) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DIOCXBEGIN(r3, 0xc0107002, &(0x7f0000001900)={0x0, 0x5, 0x0}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) setrlimit(0x2, 0xffffffffffffffff) 156.788682ms ago: executing program 4 (id=58): pselect(0xf, 0x0, 0x0, &(0x7f0000000100)={0x7ffc, 0x654, 0x10001, 0x8, 0x2, 0x200000005, 0x7fffffff, 0x7fff}, 0x0, 0x0) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x3}, 0xf, 0x0, 0x0, 0x0, 0xfffffffffffffe70) r0 = syz_open_pts() r1 = open(&(0x7f0000000400)='.\x00', 0x80, 0x12) mkfifo(&(0x7f00000020c0)='./file0\x00', 0xa2) mkfifo(&(0x7f0000001380)='./file1\x00', 0x32) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') ioctl$DIOCXROLLBACK(r1, 0xc0104453, &(0x7f0000002000)={0x3f80fe03f8130c, 0x1, &(0x7f00000013c0)=[{0x0, './file1\x00', 0xc}, {0x1, './file1\x00', 0x7}, {0x0, './file1\x00', 0x6}]}) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000100)={0x2, 0xffbf77ed, 0xc, 0xfffffc03, "ff433c44ee6803daa58b8102b93dec84f90ae8fa", 0x7, 0x2}) ioctl$TIOCSTAT(r0, 0x20007465) sysctl$kern(&(0x7f0000000000)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0xa, r0) futimens(r2, &(0x7f0000000040)=[{0xffffffffffffc417, 0x800}, {0x80000000, 0x1}]) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r3 = msgget(0x2, 0x203) msgsnd(r3, 0x0, 0xffa6088b2a02887e, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x100000000) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040), &(0x7f0000000100), 0x0, 0x0) 156.143461ms ago: executing program 7 (id=59): r0 = kqueue1(0x10000) kevent(r0, 0x0, 0x0, &(0x7f0000000540), 0x40, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) kevent(0xffffffffffffffff, &(0x7f00000004c0)=[{{r1}, 0xffffffffffffffff, 0xbd, 0xfffff, 0x0, 0x8}], 0x81a, 0x0, 0x2, 0x0) (async) kevent(0xffffffffffffffff, &(0x7f00000004c0)=[{{r1}, 0xffffffffffffffff, 0xbd, 0xfffff, 0x0, 0x8}], 0x81a, 0x0, 0x2, 0x0) kevent(r0, &(0x7f0000000000), 0x86, 0x0, 0xfdff4b4d, 0x0) kqueue() (async) r2 = kqueue() pipe(&(0x7f0000000a80)) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000002140), 0x40000, 0x0) ioctl$FIOGETOWN(r3, 0x40047477, 0x0) pselect(0x40, &(0x7f0000000080)={0xe0, 0xfffffffffffffffd, 0x101, 0x9, 0x2, 0xffffffff, 0x9, 0x2000000000000000}, &(0x7f00000000c0)={0xaa, 0xffffffffffffff00, 0x800, 0x6, 0x0, 0xf, 0x20000400, 0x10001}, 0x0, 0x0, 0x0) closefrom(r2) 6.788969ms ago: executing program 6 (id=60): getgroups(0x7, &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x5, 0x2, 0x400}, {0xd8c6, 0x9, 0x3, 0x2}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x34, 0x68, 0x0, 0x1, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x9, 0x0, 0x100, {[@timestamp={0x8, 0xa, 0x6, 0x80000000}]}}}}}}}) setregid(0x0, r0) r2 = getegid() setresgid(r2, 0x0, r2) r3 = syz_open_pts() ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000000)={0x3, 0x1, 0x100, 0x7ff, "10d93bc4570afa7d22c0b8003769919e2bba9876", 0xfffffffc, 0xff}) r4 = socket$inet6(0x18, 0x3, 0x3a) r5 = dup(r4) sendto$inet6(r5, &(0x7f0000000340)="d3735a6a6ea10c2180ac220d7d5974a001b332432904f3636ffdeaa8cc7ba5f245bbca1e77ad0521ee593c91a2ffcce63bbdfa2d783123fdc9246e4f37aeedd3aa8ddf599bea491c39a0f5eb53ff037008129aae571724afcd0d01a0b27838c0d882d8676e41bc7d55cdf3a516f8c994e5260362436031ad4841e10420be4c4d161f475119de63d518a20ed3551444efc9bde6f33801b21b9a3beaddc71b5913", 0xa0, 0x2, &(0x7f0000000300)={0x1c, 0x18, 0x3, 0x2, "febfe132beaada1fcc9fa0df76735576"}, 0x1c) seteuid(0xffffffffffffffff) r6 = getppid() kill(r6, 0x1f) 2.771718ms ago: executing program 1 (id=61): mkdir(&(0x7f0000000400)='./file0\x00', 0x148) (async, rerun: 64) r0 = open$dir(&(0x7f0000000140)='./file0/file0\x00', 0x2, 0x190) (rerun: 64) r1 = getsid(0xffffffffffffffff) ktrace(&(0x7f0000000100)='./file1\x00', 0x1, 0x0, r1) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') (async, rerun: 64) mkdir(&(0x7f0000000080)='./file0\x00', 0x204) (rerun: 64) rename(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') (async, rerun: 32) rename(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') (rerun: 32) seteuid(0xffffffffffffffff) unveil(&(0x7f0000000b80)='./file1\x00', &(0x7f0000000bc0)='c\x00') (async) fchownat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x2) 1.0836ms ago: executing program 0 (id=62): sysctl$net_inet_tcp(&(0x7f0000000100)={0x4, 0x2, 0x6, 0x6}, 0x4, &(0x7f0000000440), 0x0, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x16}, 0x4, &(0x7f0000000040)="d99cd56a0579579792c7aa5892857dd1b393a2c19f3b9d1b2b6790fe77444a5ce85314e97875b3a76342de1a096290c1f3968615368c2b64cabaa44d7ff256f8ba4c584257d0e5cb7dd358e91fb22d15d1839cc419b7428dd1a62099cd32c3ffcdb57a2c16dc665cf6501dab37bfe9031da43265207d3191aeddbba6b7dfff97ae8a1ec357dc80328b35bfa28c8069f28a97b72272cfd6d418b448fae5181997e6efa0da396da2a060", &(0x7f0000000140)=0xa9, &(0x7f0000000180)="c7b618e61ed777c8c81598cb16e3c0adb6f098fcf99374afdb2cef63e3631bc84280c6180e1f9e60920ed1261af408fe6f3aab04831a0b75118e64f181bc41175c39af28291a5c19dbf7e4fa61245792e8a38be88f16fe2fff3df7835598372803c1e7ed16793cb1bf79386cc490c3f802b3178965617f6f444cae089dcc0cfcbdb54147f6944fc0d323dfc57007d9f32f990cccc950218cd10f5e67d82f7b4ffbec0b45fb9424b33b8ad2208358163bfc2e374901895d39cbb3c901dfa0ec2588acca2a4c69ca7c5a68c3854019e13f58fe828afecc", 0xd6) 686.865µs ago: executing program 6 (id=63): mkdir(&(0x7f0000000640)='./file0\x00', 0x40) r0 = socket$inet6(0x18, 0x2, 0x0) r1 = socket$inet6(0x18, 0x3, 0x7) getsockname(r1, &(0x7f0000000080)=@in6, &(0x7f0000002580)=0x1c) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x18, 0x3, 0x400, "00000000000000000000000000000400", 0x9}, 0x1c) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x204) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') 0s ago: executing program 0 (id=64): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$WSMOUSEIO_SRES(r0, 0x80045721, &(0x7f0000000040)=0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xfffffff8, 0xffff8000, 0x4], 0x3, 0x10000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01864c2, &(0x7f0000000100)={0x0, 0x0, r0, 0x0, 0xfffffffffffff34d}) r2 = dup(r1) ioctl$WSDISPLAYIO_GBURNER(r2, 0x400c5752, &(0x7f0000000140)) kevent(r2, &(0x7f0000000180)=[{{r1}, 0xfffffffffffffffa, 0x10, 0x800fffdf, 0x9, 0x5e83a378}, {{r0}, 0xfffffffffffffffc, 0xa0, 0x4, 0xda, 0xffffffff}, {{r1}, 0xfffffffffffffffe, 0x8, 0x4, 0x0, 0x6}], 0x4, &(0x7f0000000200)=[{{r2}, 0xfffffffffffffffe, 0x4b, 0x2, 0x1, 0x5}], 0x68, &(0x7f0000000240)={0x83e, 0x7}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r2, 0xc01864c2, &(0x7f0000000280)={0x0, 0x5, r1, 0x0, 0xffffffffffff0001}) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000300)={&(0x7f00000002c0)=[{0x8b, 0x2}, {0x7, 0x9}, {0xaf, 0xfc000000}, {0x45, 0x1}, {0x83, 0x10000}, {0x87}, {0x86, 0x4}], 0x7}) ioctl$BIOCFLUSH(0xffffffffffffffff, 0x20004268) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000380)={'tap', 0x0}) ioctl$WSDISPLAYIO_DELSCREEN(r2, 0x80085754, &(0x7f00000003c0)={0x9, 0x1}) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000640)={0x1c, 0x18, 0x2, 0xfffff56e, "32e68cf610c4045854d691343d202111", 0x7}, 0x1c) ioctl$WSKBDIO_SETBELL(r3, 0x80105703, &(0x7f0000000680)={0x4, 0x1000, 0x7, 0x81}) ioctl$VNDIOCCLR(r2, 0x80384601, &(0x7f0000000780)={&(0x7f0000000700)='./file0\x00', 0x5, &(0x7f0000000740)='./file0\x00', 0x8}) syz_emit_ethernet(0x78, &(0x7f00000007c0)={@random="ab60745521b2", @broadcast, [], {@generic={0x1600, "2ba6f544b17b303588f7707caefdae8577834194fcbbb93e276c7caf31afbfe07b77a3cd58dd9a993f8334064583397ecae0c96f3bc15d5b9d2e603c519b9186bc6a8bc8509c48314d9a064a24bd8cffa0c9fee74fa3ac4c766f607572bfcbaa9a5a29f9763c18402664"}}}) ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f0000000840)=0x8) ioctl$WSKBDIO_SETBELL(r2, 0x80105703, &(0x7f0000000880)={0x4, 0xfffff379, 0x5, 0xd}) ioctl$BIOCSDLT(r2, 0x8004427a, &(0x7f00000008c0)=0xfffffffa) pwrite(0xffffffffffffffff, &(0x7f0000000b00)="1a3406074fc8229f6621c5a922c126d07ab80a5cd5c4241b787bbd5c46ae5326197e0fb148d4ba295bdcec57bc35c955c44d9fc3359905d0453d9648478ed1d18f08e8e2a0292c1583b92fac54ac7fe60f3d49d1a16da23d3f0e8ab58701fc57ab598e", 0x63, 0x8) semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000b80)=[0x9, 0x893e]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts.  Ÿ € ./file0pckbd_enable: command error KASAN: invalid write of 20 bytes at 0xffff8000018d0110 from pc 0xffffffff82cb67aa KASAN: first bad byte at 0xffff8000018d0112 (+2); shadow 0x02: partial granule (out-of-bounds) KASAN: 0xffff8000018d0112 is 2 bytes inside the 16-byte malloc slot [0xffff8000018d0110..0xffff8000018d0120) KASAN: allocated at: #0 malloc+0xda0 #1 sysctl_sysvipc+0x619 #2 kern_sysctl_dirs+0x30f #3 kern_sysctl+0x1ce #4 sys_sysctl+0x54f #5 syscall+0x1089 #6 Xsyscall+0x128 KASAN: pc: sysctl_sysvipc+0x63a KASAN: call trace: #0 kasan_memcpy+0x1ca #1 sysctl_sysvipc+0x63a #2 kern_sysctl_dirs+0x30f #3 kern_sysctl+0x1ce #4 sys_sysctl+0x54f #5 syscall+0x1089 #6 Xsyscall+0x128 KASAN: shadow of 0xffff8000018d0000..0xffff8000018d0280 (1 cell = 8 bytes): 0xffff8000018d0000: 03 fb 08 fb 08 fb 08 fb 08 fb 08 fb 07 fb 08 fb 0xffff8000018d0080: 04 fb 08 fb 07 fb 08 fb 08 fb 08 fb 08 fb 08 fb >0xffff8000018d0100: 08 fb[02]fb fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 0xffff8000018d0180: fc 08 fc 08 08 fb fc 08 fc 08 fc 08 fc 08 fc 08 0xffff8000018d0200: fc 08 fc 08 fc 08 fc 08 fc 08 08 fb 08 fb 06 fb KASAN: legend: 00 valid; 01..07 partial; fb malloc redzone; fc malloc freed; fd pool freed; fe kmem; fa global; f1..f4/f8 stack/scope panic: Caught invalid memory access at ffff8000018d0110 size 20 op 1 Stopped at db_enter+0x17: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND 272906 10644 0 0 0x4000000 0K syz-executor *504447 85838 0 0 0x4000000 1 syz-executor db_enter() at db_enter+0x17 panic(ffffffff846367f9) at panic+0x270 kasan_memcpy(ffff8000018d0110,ffff80003bb8b490,14) at kasan_memcpy+0x1ec sysctl_sysvipc(ffff80003bb8bb08,1,200000000040,ffff80003bb8bae0) at sysctl_sysvipc+0x63a kern_sysctl_dirs(33,ffff80003bb8bb08,1,200000000040,ffff80003bb8bae0,0,1,1ffff000077716d8) at kern_sysctl_dirs+0x30f kern_sysctl(ffff80003bb8bb04,2,200000000040,ffff80003bb8bae0,0,0,ffff80003bb8bd60) at kern_sysctl+0x1ce sys_sysctl(ffff800045ff4a88,ffff80003bb8bd60,ffff80003bb8bcc0) at sys_sysctl+0x54f syscall(ffff80003bb8bd60) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb47383d15e0, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: Caught invalid memory access at ffff8000018d0110 size 20 op 1 ddb{1}> show kasan KASAN: invalid write of 20 bytes at 0xffff8000018d0110 from pc 0xffffffff82cb67aa KASAN: first bad byte at 0xffff8000018d0112 (+2); shadow 0x02: partial granule (out-of-bounds) KASAN: 0xffff8000018d0112 is 2 bytes inside the 16-byte malloc slot [0xffff8000018d0110..0xffff8000018d0120) KASAN: allocated at: #0 malloc+0xda0 #1 sysctl_sysvipc+0x619 #2 kern_sysctl_dirs+0x30f #3 kern_sysctl+0x1ce #4 sys_sysctl+0x54f #5 syscall+0x1089 #6 Xsyscall+0x128 KASAN: pc: sysctl_sysvipc+0x63a KASAN: call trace: #0 kasan_memcpy+0x1ca #1 sysctl_sysvipc+0x63a #2 kern_sysctl_dirs+0x30f #3 kern_sysctl+0x1ce #4 sys_sysctl+0x54f #5 syscall+0x1089 #6 Xsyscall+0x128 KASAN: shadow of 0xffff8000018d0000..0xffff8000018d0280 (1 cell = 8 bytes): 0xffff8000018d0000: 03 fb 08 fb 08 fb 08 fb 08 fb 08 fb 07 fb 08 fb 0xffff8000018d0080: 04 fb 08 fb 07 fb 08 fb 08 fb 08 fb 08 fb 08 fb >0xffff8000018d0100: 08 fb[02]fb fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 0xffff8000018d0180: fc 08 fc 08 08 fb fc 08 fc 08 fc 08 fc 08 fc 08 0xffff8000018d0200: fc 08 fc 08 fc 08 fc 08 fc 08 08 fb 08 fb 06 fb KASAN: legend: 00 valid; 01..07 partial; fb malloc redzone; fc malloc freed; fd pool freed; fe kmem; fa global; f1..f4/f8 stack/scope ddb{1}> trace db_enter() at db_enter+0x17 panic(ffffffff846367f9) at panic+0x270 kasan_memcpy(ffff8000018d0110,ffff80003bb8b490,14) at kasan_memcpy+0x1ec sysctl_sysvipc(ffff80003bb8bb08,1,200000000040,ffff80003bb8bae0) at sysctl_sysvipc+0x63a kern_sysctl_dirs(33,ffff80003bb8bb08,1,200000000040,ffff80003bb8bae0,0,1,1ffff000077716d8) at kern_sysctl_dirs+0x30f kern_sysctl(ffff80003bb8bb04,2,200000000040,ffff80003bb8bae0,0,0,ffff80003bb8bd60) at kern_sysctl+0x1ce sys_sysctl(ffff800045ff4a88,ffff80003bb8bd60,ffff80003bb8bcc0) at sys_sysctl+0x54f syscall(ffff80003bb8bd60) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb47383d15e0, count: -9 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003bb8b250 rbx 0xffff80003bb8b2c0 rdx 0 rcx 0xffff800028ff3ff0 rax 0xffff80000016e980 r8 0x101010101010101 r9 0x8080808080808080 r10 0xffff80003bb8b038 r11 0xffffffff81565e60 x86_bus_space_io_read_1 r12 0xffffffff846367f9 .str.4+0x9df59 r13 0xffff800028ff4c08 r14 0xffff800028ff4e07 r15 0x1 rip 0xffffffff823f2eb7 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff80003bb8b250 ss 0x10 db_enter+0x17: popq %rbp ddb{1}> show proc PROC (syz-executor) tid=504447 pid=85838 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=82, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045ff47f0,0xffff80003bb56fd0 process=0xffff80003bbd8028 user=0xffff80003bb80000, vmspace=0xffff800001c7e020 estcpu=32, cpticks=52, pctcpu=0.32, user=0, sys=52, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 10644 518842 44712 0 2 0 syz-executor 10644 272906 44712 0 7 0x4000000 syz-executor 6211 148012 77857 0 2 0 syz-executor 6211 437156 77857 0 2 0x4000000 syz-executor 29545 3601 95227 0 3 0x3010 suspend syz-executor 29545 133367 95227 0 2 0x4081010 syz-executor 19856 415322 69578 0 2 0 syz-executor 19856 438074 69578 0 3 0x4000080 fsleep syz-executor 19856 65458 69578 0 3 0x4000080 fsleep syz-executor 19856 360633 69578 0 3 0x4000080 fsleep syz-executor 85838 225331 9240 0 2 0 syz-executor *85838 504447 9240 0 7 0x4000000 syz-executor 81839 498828 86970 0 2 0xc80 syz-executor 81839 386395 86970 0 3 0x4000080 kqread syz-executor 81839 433736 86970 0 3 0x4000080 fsleep syz-executor 50491 176706 42270 0 2 0xc90 syz-executor 50491 291221 42270 0 3 0x4000090 kqsel syz-executor 50491 100411 42270 0 3 0x4000090 fsleep syz-executor 10727 77815 29255 0 2 0 syz-executor 10727 27605 29255 0 3 0x4000080 msgwait syz-executor 51146 512757 0 0 3 0x14280 nfsidl nfsio 86758 331062 0 0 3 0x14280 nfsidl nfsio 92355 136127 0 0 3 0x14280 nfsidl nfsio 88568 86471 0 0 3 0x14280 nfsidl nfsio 41454 336758 0 0 3 0x14280 nfsidl nfsio 17234 237529 0 0 3 0x14280 nfsidl nfsio 38049 490514 0 0 3 0x14280 nfsidl nfsio 71418 90438 0 0 3 0x14280 nfsidl nfsio 72011 153633 0 0 3 0x14280 nfsidl nfsio 95112 464420 0 0 3 0x14280 nfsidl nfsio 91620 299777 0 0 3 0x14280 nfsidl nfsio 97929 333118 0 0 3 0x14280 nfsidl nfsio 13894 447719 0 0 3 0x14280 nfsidl nfsio 88075 367920 0 0 3 0x14280 nfsidl nfsio 74720 159458 0 0 3 0x14280 nfsidl nfsio 21297 155192 0 0 3 0x14280 nfsidl nfsio 21345 200341 0 0 3 0x14280 nfsidl nfsio 63892 97437 0 0 3 0x14280 nfsidl nfsio 68487 420142 0 0 3 0x14280 nfsidl nfsio 81132 440272 0 0 3 0x14280 nfsidl nfsio 69578 406458 38976 0 2 0xc82 syz-executor 77857 462164 38976 0 2 0xc82 syz-executor 86970 230087 38976 0 2 0xc82 syz-executor 9240 486971 38976 0 2 0xc82 syz-executor 42270 162681 38976 0 2 0xc82 syz-executor 29255 321929 38976 0 2 0xc82 syz-executor 95227 313703 38976 0 2 0xc82 syz-executor 44712 102872 38976 0 2 0xc82 syz-executor 38976 27982 64884 0 2 0x2 syz-executor 64884 269024 3830 0 3 0x10008a sigsusp ksh 3830 78800 73708 0 3 0x98 kqread sshd-session 73708 329145 81753 0 3 0x92 kqread sshd-session 15616 117665 1 0 3 0x100083 ttyin getty 81753 334387 1 0 3 0x88 kqread sshd 45596 229578 36634 74 3 0x1100092 bpf pflogd 36634 507767 1 0 3 0x80 sbwait pflogd 71313 340823 74033 73 2 0x1100090 syslogd 74033 472179 1 0 3 0x100082 sbwait syslogd 56880 232532 1 0 3 0x100080 kqread resolvd 84298 44058 2060 77 3 0x100092 kqread dhcpleased 88533 46148 2060 77 3 0x100092 kqread dhcpleased 2060 223858 1 0 3 0x80 kqread dhcpleased 56091 512792 0 0 2 0x14a00 smr 92371 510245 0 0 2 0x14200 zerothread 93177 63040 0 0 3 0x14200 aiodoned aiodoned 38277 127542 0 0 2 0x14e00 update 67324 464955 0 0 3 0x14200 cleaner cleaner 52466 306131 0 0 3 0x14200 reaper reaper 70561 397513 0 0 3 0x14200 pgdaemon pagedaemon 69798 173229 0 0 3 0x14200 bored viomb 5750 147811 0 0 3 0x40014200 acpi0 acpi0 4496 138301 0 0 3 0x40014200 idle1 60002 297738 0 0 3 0x14200 bored softnet1 77124 354106 0 0 3 0x14200 bored softnet0 39582 180073 0 0 2 0x14200 systqmp 65680 137293 0 0 3 0x14200 bored systq 58836 429135 0 0 2 0x14200 softclockmp 52996 101891 0 0 3 0x40014200 tmoslp softclock 29004 488774 0 0 3 0x40014200 idle0 1 368965 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 10644 (syz-executor) thread 0xffff800045ff42c0 (272906) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff85e461c0) #0 witness_lock+0x632 #1 doopenat+0x445 #2 sys_openat+0xaa #3 syscall+0x1089 #4 Xsyscall+0x128 Process 6211 (syz-executor) thread 0xffff80003bb562c8 (437156) exclusive rrwlock inode r = 0 (0xffff800001c29590) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 ufs_ihashins+0xda #5 ffs_vget+0x2e9 #6 ffs_inode_alloc+0x576 #7 ufs_mkdir+0x25d #8 VOP_MKDIR+0x1a8 #9 domkdirat+0x1f9 #10 syscall+0x1089 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xffff800001c29468) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 vn_lock+0xca #5 vfs_lookup+0x1f7 #6 namei+0xe19 #7 domkdirat+0xe1 #8 syscall+0x1089 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11105 12489K 12489K 166960K 12237 0 pcb 17 24K 24K 166960K 24 0 rtable 237 12K 13K 166960K 351 0 pf 34 22K 23K 166960K 53 0 ifaddr 43 12K 12K 166960K 47 0 ifgroup 55 2K 2K 166960K 62 0 sysctl 1 1K 13K 166960K 71 0 counters 70 42K 43K 166960K 74 0 ioctlops 0 0K 4K 166960K 1486 0 iov 0 0K 16K 166960K 3 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1293 83K 83K 166960K 1384 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 3 6K 6K 166960K 6 0 VM map 2 1K 1K 166960K 2 0 sem 4 0K 0K 166960K 5 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 292K 166960K 11964 0 file desc 18 65K 93K 166960K 194 0 sigio 0 0K 0K 166960K 1 0 proc 74 144K 177K 166960K 564 0 subproc 72 9K 9K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 7 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 247 1680K 1680K 166960K 247 0 exec 0 0K 2K 166960K 383 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 246 245K 262K 166960K 3603 0 UVM aobj 74 5K 5K 166960K 74 0 pinsyscall 1067 1741K 1741K 166960K 1350 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 1 0 NDP 12 0K 2K 166960K 30 0 temp 38 9162K 9186K 166960K 4494 0 kqueue 21 65K 65K 166960K 47 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 33 0 30 1 0 1 1 0 8 0 rtentry 176 111 0 1 5 0 5 5 0 8 0 unpcb 144 125 0 101 2 0 2 2 0 8 1 syncache 336 4 0 4 1 1 0 1 0 8 0 tcpcb 736 51 0 44 4 0 4 4 0 8 3 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 134 0 124 4 0 4 4 0 8 2 nd6 152 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 1 0 1 1 0 1 1 0 8 1 pffrag 232 2 0 0 1 0 1 1 0 482 0 pffrnode 88 2 0 0 1 0 1 1 0 8 0 pffrent 40 2 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 25 0 0 1 0 1 1 0 8 0 pfstkey 128 25 0 0 1 0 1 1 0 8 0 pfstate 448 25 0 0 3 0 3 3 0 8 0 pfrule 1360 22 0 17 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 453 0 0 29 0 29 29 0 8 0 art_table 40 454 0 0 5 0 5 5 0 8 0 art_node 32 111 0 11 1 0 1 1 0 8 0 semapl 72 3 0 1 1 0 1 1 0 8 0 shmpl 112 71 0 0 3 0 3 3 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1659 0 184 93 0 93 93 0 8 0 ffsino 296 1659 0 184 114 0 114 114 0 8 0 nchpl 144 1952 0 247 64 0 64 64 0 8 0 vnodes 216 1763 0 0 98 0 98 98 0 8 0 namei 1024 6587 0 6586 1 0 1 1 0 8 0 percpumem 16 53 0 2 1 0 1 1 0 8 0 kstatmem 264 31 0 4 2 0 2 2 0 8 0 scxspl 216 7064 0 7064 4 3 1 3 1 8 1 plimitpl 152 32 0 15 1 0 1 1 0 8 0 sigapl 424 531 0 463 9 1 8 8 0 8 0 knotepl 120 67 0 0 3 0 3 3 0 8 0 kqueuepl 224 45 0 27 2 0 2 2 0 8 0 pipepl 344 206 0 177 9 0 9 9 0 8 6 fdescpl 528 495 0 463 3 0 3 3 0 8 0 filepl 160 2375 0 2139 20 2 18 20 0 8 8 lockfpl 104 36 0 32 1 0 1 1 0 8 0 lockfspl 48 20 0 16 1 0 1 1 0 8 0 sessionpl 144 28 0 19 1 0 1 1 0 8 0 pgrppl 48 39 0 22 1 0 1 1 0 8 0 ucredpl 104 272 0 256 1 0 1 1 0 8 0 zombiepl 144 464 0 463 1 0 1 1 0 8 0 processpl 1232 531 0 463 6 0 6 6 0 8 0 procpl 664 648 0 568 8 1 7 7 0 8 0 sosppl 176 2 0 2 1 0 1 1 0 8 1 sockpl 752 294 0 257 8 0 8 8 0 8 4 mcl64k 65536 4 0 0 1 0 1 1 0 8 0 mcl16k 16384 11 0 0 2 0 2 2 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k128 9344 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 116 0 0 15 0 15 15 0 8 0 mcl2k 2048 13 0 0 2 0 2 2 0 8 0 mextrefs 64 18 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 147 0 0 9 0 9 9 0 8 0 bufpl 272 2497 0 106 160 0 160 160 0 8 0 anonpl 32 3769 0 0 31 0 31 31 0 222 0 amapchunkpl 152 9992 0 9474 22 1 21 21 0 158 0 amappl16 200 1806 0 1781 5 3 2 5 0 8 0 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 427 0 426 1 0 1 1 0 8 0 amappl13 176 124 0 112 1 0 1 1 0 8 0 amappl12 168 743 0 712 2 0 2 2 0 8 0 amappl11 160 74 0 73 1 0 1 1 0 8 0 amappl10 152 118 0 103 1 0 1 1 0 8 0 amappl9 144 275 0 273 1 0 1 1 0 8 0 amappl8 136 101 0 99 1 0 1 1 0 8 0 amappl7 128 155 0 142 1 0 1 1 0 8 0 amappl6 120 169 0 168 1 0 1 1 0 8 0 amappl5 112 100 0 89 1 0 1 1 0 8 0 amappl4 104 292 0 272 1 0 1 1 0 8 0 amappl3 96 1841 0 1719 4 0 4 4 0 8 0 amappl2 88 540 0 481 2 0 2 2 0 8 0 amappl1 80 10609 0 9988 15 0 15 15 0 8 2 amappl 88 2864 0 2691 4 0 4 4 0 92 0 uvmvnodes 80 104 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 73 0 0 2 0 2 2 0 8 0 uaddrrnd 24 495 0 463 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 495 0 463 1 0 1 1 0 8 0 vmmpekpl 168 6477 0 6436 2 0 2 2 0 8 0 vmmpepl 168 41126 0 39146 90 3 87 87 0 357 0 vmsppl 488 494 0 463 5 0 5 5 0 8 1 rwobjpl 80 15123 0 13998 24 0 24 24 0 8 0 pdppl 4096 999 0 926 101 26 75 87 0 8 2 pvpl 32 11520 0 0 95 2 93 93 0 265 0 pmappl 256 494 0 463 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 120 434 0 30 13 0 13 13 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x19: leave x86_ipi_db(ffffffff84f17ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x29 acpitimer_delay(3e8) at acpitimer_delay+0x30e pckbc_poll_cmd1(ffff800000d31100,0,ffff80003bcc7140) at pckbc_poll_cmd1+0x5c7 pckbc_poll_cmd(ffff800000d31100,0,ffff80003bcc7280,1,0,0,1ffff00007798e4c) at pckbc_poll_cmd+0x164 pckbd_enable(ffff800000170500,1) at pckbd_enable+0x1fc wskbd_do_open(ffff800000d2a400,ffff800000d2a450) at wskbd_do_open+0x1a5 wskbdopen(4300,1,2000,ffff800045ff42c0) at wskbdopen+0x1fb spec_open(ffff80003bcc74a0) at spec_open+0x482 VOP_OPEN(ffff800001a04030,1,ffff8000001194e0,ffff800045ff42c0) at VOP_OPEN+0x10a vn_open(ffff80003bcc78f0,1,0) at vn_open+0x9da doopenat(ffff800045ff42c0,ffffff9c,200000000400,0,0,0,ffff800045ff42c0) at doopenat+0x460 end trace frame: 0xffff80003bcc7ad0, count: 0 ddb{0}> trace x86_ipi_db(ffffffff84f17ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x29 acpitimer_delay(3e8) at acpitimer_delay+0x30e pckbc_poll_cmd1(ffff800000d31100,0,ffff80003bcc7140) at pckbc_poll_cmd1+0x5c7 pckbc_poll_cmd(ffff800000d31100,0,ffff80003bcc7280,1,0,0,1ffff00007798e4c) at pckbc_poll_cmd+0x164 pckbd_enable(ffff800000170500,1) at pckbd_enable+0x1fc wskbd_do_open(ffff800000d2a400,ffff800000d2a450) at wskbd_do_open+0x1a5 wskbdopen(4300,1,2000,ffff800045ff42c0) at wskbdopen+0x1fb spec_open(ffff80003bcc74a0) at spec_open+0x482 VOP_OPEN(ffff800001a04030,1,ffff8000001194e0,ffff800045ff42c0) at VOP_OPEN+0x10a vn_open(ffff80003bcc78f0,1,0) at vn_open+0x9da doopenat(ffff800045ff42c0,ffffff9c,200000000400,0,0,0,ffff800045ff42c0) at doopenat+0x460 sys_openat(ffff800045ff42c0,ffff80003bcc7c60,ffff80003bcc7bc0) at sys_openat+0xaa syscall(ffff80003bcc7c60) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7710feb70f0, count: -17 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x17: popq %rbp db_enter() at db_enter+0x17 panic(ffffffff846367f9) at panic+0x270 kasan_memcpy(ffff8000018d0110,ffff80003bb8b490,14) at kasan_memcpy+0x1ec sysctl_sysvipc(ffff80003bb8bb08,1,200000000040,ffff80003bb8bae0) at sysctl_sysvipc+0x63a kern_sysctl_dirs(33,ffff80003bb8bb08,1,200000000040,ffff80003bb8bae0,0,1,1ffff000077716d8) at kern_sysctl_dirs+0x30f kern_sysctl(ffff80003bb8bb04,2,200000000040,ffff80003bb8bae0,0,0,ffff80003bb8bd60) at kern_sysctl+0x1ce sys_sysctl(ffff800045ff4a88,ffff80003bb8bd60,ffff80003bb8bcc0) at sys_sysctl+0x54f syscall(ffff80003bb8bd60) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb47383d15e0, count: 6 ddb{1}> trace db_enter() at db_enter+0x17 panic(ffffffff846367f9) at panic+0x270 kasan_memcpy(ffff8000018d0110,ffff80003bb8b490,14) at kasan_memcpy+0x1ec sysctl_sysvipc(ffff80003bb8bb08,1,200000000040,ffff80003bb8bae0) at sysctl_sysvipc+0x63a kern_sysctl_dirs(33,ffff80003bb8bb08,1,200000000040,ffff80003bb8bae0,0,1,1ffff000077716d8) at kern_sysctl_dirs+0x30f kern_sysctl(ffff80003bb8bb04,2,200000000040,ffff80003bb8bae0,0,0,ffff80003bb8bd60) at kern_sysctl+0x1ce sys_sysctl(ffff800045ff4a88,ffff80003bb8bd60,ffff80003bb8bcc0) at sys_sysctl+0x54f syscall(ffff80003bb8bd60) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb47383d15e0, count: -9