last executing test programs: 3.207698965s ago: executing program 1 (id=891): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x1}, 0x8) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000001200), 0x8, 0x0) unlinkat(r1, &(0x7f0000001240)='./bus\x00', 0x0) symlink(0x0, 0x0) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, 0x0) kqueue() writev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000100)="cc60d3d79a1a7122a5fb9de9ea6ca0b30fb2942ef7652736f10f86d45ae419b2ecf7af93d33b3de1f2c56c0d93da7484095d0d543baf7f0161a025c9c02a561f9a", 0x41}, {&(0x7f0000001200)}], 0x2) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x4}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f00000011c0)={0x2, 0x6}, 0x8) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000000)={0x4e13, 0xab, 0x7ff, 0x20351e, "1a0000000200f900", 0x0, 0x1}) writev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="7f2e14cf137276fc0a7482cc94affcbbaea076fe4cd6238f5700ba49cdcaf9be1a44e3abcb090b5f9198de5b9011f218034c31be525b22c1f138ef80875cfe03ad8134e24f00e5478a0fb694a65fe42e97b1f95cc24cfb0dd3e5dfad67060bae4f268765feca42689f33715a7c5e4187467ab2af26a7c10902", 0x79}], 0x1) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x140) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$VNDIOCSET(r5, 0x80045102, &(0x7f0000000140)={0x0, 0x5433, 0x0}) ioctl$FIOGETOWN(r2, 0x4004667b, &(0x7f0000000000)) 3.165615854s ago: executing program 1 (id=896): mknod$loop(0x0, 0x2000, 0x1) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000681000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f00003b9000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f000013c000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f00007c2000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f00007e3000/0x2000)=nil, &(0x7f0000188000/0x2000)=nil, 0x200000000}, {&(0x7f000069d000/0x4000)=nil, &(0x7f0000049000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f00007b1000/0x1000)=nil}, {&(0x7f00003d7000/0x4000)=nil, &(0x7f0000159000/0x4000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f000016c000/0x1000)=nil}, {&(0x7f000015b000/0x3000)=nil, &(0x7f00004f6000/0x3000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f000000e000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000696000/0x1000)=nil, &(0x7f00005e8000/0x2000)=nil}], './file0\x00', 0xffffffff}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) 2.050057172s ago: executing program 1 (id=905): preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x134, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f0000000080)='./bus\x00', 0x80, 0x1) madvise(&(0x7f0000001000/0xd000)=nil, 0xd000, 0x4) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x40047477, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1f, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0) close(r1) pread(r0, &(0x7f0000000040)="3cd15db7c30016", 0x50cc00, 0x0) 2.02768652s ago: executing program 0 (id=907): r0 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x0) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000100)="cc60d3d79a1a7122a5fb9de9ea6ca0b30fb2942ef7652736f10f86d45ae419b2ecf7af93d33b3de1f2c56c0d93da7484095d0d543baf7f0161a025c9c02a561f9a76d06f1eaec7d8df99d6c28b10fa891e47d6c3bba690a611889032ac7b3581d7c92d1c546e59764f069048316871794f0615dd4d8bb1057a61fb177be649004fb56a7d46c856a20d73f050bf29d58b803a676cc3761e8a47857f51d90a4465f9c605ab2829d78ea2571900", 0xac}, {&(0x7f0000000080)="b389e5ae", 0x4}, {&(0x7f0000000200)="5f6a8de84b4c523a583f91557c748a02cda4cedf13579996073843ec5cbabaadcec85d62a8a897a78307f3d2c30eea6356105ec8aaba86930f1aed0b3d111d", 0x3f}, {&(0x7f0000000240)="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", 0xf12}], 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) execve(0x0, &(0x7f00000013c0)=[&(0x7f00000001c0)='[,\x00'], 0x0) setrlimit(0x1, &(0x7f00000011c0)) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, 0x0, 0x0, 0x2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8) setrlimit(0x2, &(0x7f0000000ac0)={0x60000000, 0x80000000000000}) r3 = socket(0x18, 0x2, 0x0) r4 = socket(0x18, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r4, 0x1000000000029, 0x40, &(0x7f0000000980)="01000000", 0x4) r5 = socket(0x2, 0x2, 0x0) r6 = dup(r5) setsockopt$inet_opts(r6, 0x0, 0x24, &(0x7f0000000040)="fd0cc085", 0x4) sendmsg$unix(r5, &(0x7f0000000440)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x0}, 0x8, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000002"], 0x18}, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) write(r3, &(0x7f0000000380)="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", 0x7c0) 1.957548563s ago: executing program 0 (id=915): openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x5, &(0x7f0000000080)=[{0x6, 0x7d, 0x68, 0xfe}, {0x4, 0xc6, 0x63, 0x5}, {0xffff, 0x2e, 0x5, 0x5a}, {0x8001, 0x5, 0x5, 0x1}, {0x0, 0x80, 0x80, 0x7ff}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd6009000000200600030000000000000037f87ccdc0c4a92cff0000000001ea443d080000000001004e204e22", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB='[B']) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000040)="177cbb99", 0x4}], 0x1) writev(0xffffffffffffffff, &(0x7f0000002180)=[{&(0x7f0000000040)="9ccb60", 0x3}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) write(r0, &(0x7f0000000380)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) (async) write(r0, &(0x7f0000000380)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) 1.856376646s ago: executing program 0 (id=918): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000681000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f00003b9000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f000013c000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f00007c2000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f00007e3000/0x2000)=nil, &(0x7f0000188000/0x2000)=nil, 0x200000000}, {&(0x7f000069d000/0x4000)=nil, &(0x7f0000049000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f00007b1000/0x1000)=nil}, {&(0x7f00003d7000/0x4000)=nil, &(0x7f0000159000/0x4000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f000016c000/0x1000)=nil}, {&(0x7f000015b000/0x3000)=nil, &(0x7f00004f6000/0x3000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f000000e000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000696000/0x1000)=nil, &(0x7f00005e8000/0x2000)=nil}], './file0\x00', 0xffffffff}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) 1.811965091s ago: executing program 0 (id=924): writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000240)="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", 0x549}], 0x1) sendmsg(0xffffffffffffff9c, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x410}, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x13, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) 1.727832954s ago: executing program 0 (id=928): sysctl$kern(&(0x7f0000001840)={0x1, 0x58}, 0x2, &(0x7f0000001880)='90\aC', &(0x7f0000001900)=0x4, &(0x7f0000001940), 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(r0, 0xc444443b, &(0x7f0000000100)={0x9, 0x0, 0xfffffffc, 0x0, "97a2224ff1c12d49ebb178926cc95a5a6b47c1d1", 0x2, 0x3}) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0xffffffff) 1.723093948s ago: executing program 3 (id=930): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) clock_settime(0x2, &(0x7f00000064c0)={0x100, 0x8}) r0 = open(0x0, 0x800, 0x0) r1 = getpid() fcntl$setown(r0, 0x6, r1) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000000)=@in, 0xc, &(0x7f0000000280)=[{&(0x7f0000000040)=""/120, 0x78}, {&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f0000000100)=""/49, 0x31}, {&(0x7f0000000140)=""/156, 0x9c}, {&(0x7f0000000200)=""/97, 0x61}], 0x5, &(0x7f0000000300)=""/124, 0x7c}, 0x800) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getgid() getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000840), &(0x7f0000000880)=0xc) r2 = socket(0x2, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="23b30925c0da23211e7bf4abd439a5476c02", 0x12}], 0x1}, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r2, 0x8020690c, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x100000001}) r3 = socket(0x800000018, 0x3, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa7fd67572210786dd6007558300183701fe8000000000000000000000000000aaff020000000000000000000000000001"]) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000008c0), &(0x7f0000000900)=0xc) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000940), &(0x7f0000000980)=0xc) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000009c0), 0xc) r4 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SPKRTUNE(r4, 0x20005302, &(0x7f0000000000)={0x1, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r7 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000002240), 0x10000, 0x0) pread(r7, &(0x7f00000024c0)="d6bb2234", 0x4, 0xffffffffffffa279) lchown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r6) 1.66490492s ago: executing program 1 (id=932): sendmsg(0xffffffffffffff9c, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x410}, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x13, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) 1.664039473s ago: executing program 0 (id=934): r0 = socket(0x2, 0x400000000002, 0x0) setsockopt(r0, 0x0, 0x23, &(0x7f0000000040), 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff0001, 0x0, 0xffffffffffffffff, 0x4000000008, 0x0, 0x0, 0x5], [0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x2000000, 0x0, 0x1fe, 0x0, 0x400, 0x7], [0x0, 0x1ce0c38, 0x7, 0xfffffffffffffffc], [0x2000, 0x0, 0x0, 0x0, 0x0, 0x3], [{}, {0x0, 0xfb4c}, {0x0, 0x0, 0xfffffffe}, {0x1000, 0x0, 0x1a1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffe}, {0x4, 0xfffffffc}], {0xfffc, 0x1000, 0x3, 0x1}, {0x0, 0xa0000, 0x4, 0x4800000000000000}}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff86479c7b6af186dd6000000000103aff20f4372e0865915f577ee80000008000ff000000000000000001860090780e048f"]) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) select(0x0, 0x0, 0x0, &(0x7f0000000100)={0xad2d, 0x1c, 0x0, 0x3, 0x1, 0x8000000000000000, 0x1, 0xb}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0xa) sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040), &(0x7f0000000080)={0xcb}, &(0x7f0000000180)) execve(0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2a02) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000540)="195b2e08", 0x4}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) connect$unix(r4, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) connect$unix(r4, &(0x7f0000000380)=@abs={0x1, 0x0, 0x0}, 0x8) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) getsockopt(0xffffffffffffffff, 0x0, 0x15, 0xffffffffffffffff, 0x0) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f00000000c0)="9b1809c3dd7d3f81670e53473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0xfff9, 0x0, 0x0) 1.624349056s ago: executing program 3 (id=938): r0 = socket$inet(0x2, 0x2, 0x0) close(r0) (async, rerun: 64) r1 = socket$inet(0x2, 0x2, 0x0) (rerun: 64) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000240)="ea00eb0100000000", 0x8) (async) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) (async) ioctl$WSDISPLAYIO_GBURNER(0xffffffffffffffff, 0x400c5752, &(0x7f00000000c0)) (async) r2 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000080)=0x9) open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) clock_settime(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x7fff}) (async) r3 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r3, 0x802069a8, &(0x7f00000001c0)) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, 0x0, 0x0) 1.608005319s ago: executing program 1 (id=942): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="7f5769", 0x3}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0/file0\x00') rename(&(0x7f0000000140)='./file0/file0/..\x00', 0x0) open(0x0, 0x710, 0x18a) setreuid(0xee00, 0x0) open$dir(0x0, 0x0, 0x0) socket(0x18, 0x3, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x6, 0x0, [{&(0x7f0000695000/0x3000)=nil, &(0x7f0000685000/0x3000)=nil, 0xd}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0x3}, {&(0x7f0000672000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x7fffffff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil}, {&(0x7f00004f6000/0x4000)=nil, &(0x7f0000018000/0x1000)=nil}, {&(0x7f0000154000/0x4000)=nil, &(0x7f00006ed000/0x1000)=nil}, {&(0x7f00004ea000/0x1000)=nil, &(0x7f000069d000/0x4000)=nil, 0x2fe}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f000029c000/0x4000)=nil, 0x8000}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004f7000/0x2000)=nil, &(0x7f000010e000/0x1000)=nil, 0x8}], './bus\x00'}) mknod(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x3) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$VNDIOCSET(r1, 0xc0285108, &(0x7f0000000140)={0x0, 0x0, 0x0}) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000500), 0x2) write(r2, 0x0, 0x0) ioctl$BIOCGRSIG(r0, 0x40044273, &(0x7f0000000100)) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100dd2d018000000000005e00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x84, 0x2b, 0x1, 0x1b}, {0x64, 0x3, 0x22, 0x1}, {0x406, 0x46, 0x80, 0x20000000}]}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaab0b29af7e2c7318dc56227aca424c7a2e46f05f9ef004500001c0000000000019078e00000"]) sysctl$vm_swapencrypt(&(0x7f0000000180)={0x2, 0x5, 0x1}, 0x3, &(0x7f00000001c0)="33bd93521c6f19ee0dca6a9b939ee0ef0abd20de896eec5848bd69371d45f209b7d04e0cec1e93989df17627e225b5b3354b405178be2519e3a2a7d1c80b3c271c44b39b14c81c31dd3d560cd7e27a831a6cff12188dd5fb5ebdfe0dd26509", &(0x7f0000000240)=0x5f, &(0x7f0000000280)="40069e09aaadb18c513da9e01608517fe96f02b2b0bf9c6e1d468fe6b295a217d8248d5bfec19684834cfc81e1f2e9334bfa8935758a9ee520c54c7fbe59464ea9a7f3768162c4b925650dbfa0d4eb1e4ec35b745769f1ab8f81d713567af9a53d234fdb5ba29dc7a5b54c9001489c2ecf47525b8eb616ff8fd1e6e7feb946fed6e40ed50aac51118f445911f983060a897726d13a6805933008", 0x9a) 1.574922009s ago: executing program 3 (id=944): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) select(0x40, &(0x7f0000000000)={0xffffffffffffffff}, 0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) select(0x40, &(0x7f0000000040), &(0x7f0000000180)={0x4000000000000028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000140)=0xfffffffffffffda6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) chroot(&(0x7f0000000080)='./file0\x00') r2 = socket(0x2, 0x2, 0x0) bind(r2, &(0x7f0000000000), 0x10) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 1.527520676s ago: executing program 4 (id=946): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x0, 0x0}) write(r0, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) 1.526669019s ago: executing program 1 (id=948): sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = socket(0x18, 0x1, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000000c0)={0x3, &(0x7f0000000300)=[{0x34, 0x0, 0x2, 0xffffffff}, {0x60, 0x7, 0x0, 0x9}, {0x6, 0x0, 0x1, 0xaf}]}) write(r1, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) r2 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r2) open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/236, 0xec}, 0x0) rename(&(0x7f00000000c0)='./file0\x00', 0x0) chroot(&(0x7f0000000740)='.\x00') sendmsg(r3, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) 1.506659847s ago: executing program 2 (id=950): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000ac0)={0x2, 0xb75, 0xfffffff9, 0x200499, "d88c28fa9a97def5ca0988d11454000900d13a00", 0x8010000, 0x81}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0xffff, 0x2000, &(0x7f0000000080)=0x45f, 0x2) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$TIOCSETA(r0, 0xcd504404, &(0x7f0000000040)={0x0, 0x101, 0x0, 0x0, "d66a90ebb178926c79486b47c1d100", 0x0, 0x80000001}) 1.498887602s ago: executing program 4 (id=951): r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000200)=[{0x3, 0x80}, {0x50}, {0x6, 0x0, 0x22, 0x4}]}) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@random="69e1629b6174", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "6d9efb", 0x14, 0x67, 0x0, @rand_addr="00000000000000000100000a00", @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x2, 0x2, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x20, 0x3ff, 0x0, 0x9}}}}}}}) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/7, 0x7}, {&(0x7f00000000c0)=""/157, 0x9d}, {&(0x7f0000000180)=""/206, 0xce}, {&(0x7f0000000280)=""/56, 0x38}, {&(0x7f00000002c0)=""/174, 0xae}, {&(0x7f0000000380)=""/78, 0x4e}, {&(0x7f0000000400)=""/71, 0x47}], 0x7) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$kern(&(0x7f0000000000)={0x1, 0xa}, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$ddb(&(0x7f0000000000), 0x2, 0x0, 0x0, &(0x7f0000001080), 0x34) 1.460800799s ago: executing program 3 (id=953): sysctl$kern(&(0x7f00000001c0)={0x1, 0x4d}, 0x2, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x9) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) poll(&(0x7f0000000000)=[{r0, 0x4}, {r0, 0x1}, {r0, 0x10}, {r0, 0x8}, {r0, 0x80}, {r1, 0x100}], 0x6, 0xffffff60) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000200)={0x1, 0xc3, 0x66bd, 0x67, "5293e238b89163a2092858b10fb28da3175ffd63", 0x401, 0x8001}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x7, 0x2, 0x2, 0xa0000217}, 0x4, 0x0, 0x0, 0x0, 0x1e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = syz_open_pts() ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000040)=0x8) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000140)=0x8) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x101, &(0x7f0000000180)=[{{r2}, 0xffffffffffffffff, 0x13}, {{r2}, 0xffffffffffffffff, 0x62}], 0x6, 0x0) ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000100)=0xb) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x15d) rmdir(&(0x7f0000000040)='./file0\x00') ioctl$VNDIOCSET(r5, 0xc0104407, &(0x7f00000001c0)={0x0, 0x0, 0x0}) 1.459604998s ago: executing program 2 (id=956): r0 = socket(0x1e, 0x3, 0x0) getrlimit(0xbffd9d2c7b091ee2, 0x0) sendmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="65aef2d699c3cdfde368d14267081473d3f14b93f53d13e5e8119af7e61c3ad98c0003ed38895920b9a6eaad7cf1de268a41f75e5ba9baa2f781413d8abd4a58f842c0785048cc0fdfa5abe974f928045525980e599380f447c90297bea9e94beeea7aac0ce2ac4f1fb6d58d05eae5da9f23098b8a693e8891e20ee16184e05a68673f2d636982cd8a53a766d23225", 0x8f}, {&(0x7f0000000400)="4fe95501c54c80ac66d4b279f768c4c50ae8eb2c2a2ae84377828e0eb1a61d4c4fb2562a3e3ca92b97935d61bc3b9e68bf9466c6cb0ff27a3da2dc044d366c36d0ce2ef62928dd8e59dd6cff880ca967803c02e3302602020c83478f01a318706df4f582b69d5642f77638506dd777a4a9439c6b3f7d32679dcc1db8e9ed2c3df8127fc7f2ea898872161fe97fda21fbe6fdd85a6477522356022a41416635ed2218009b049b3018249fe4ec460f211066f45f847488310b035e5b1634e6cb684a355f1b7abf0efcecc6aa45d223048a8d50bee7ec8ff5cbc2f45393d22cdd8a0ef240f22a7e247d1a175e49", 0xec}, {&(0x7f0000000500)="540236251c86cfbf69dbad186fc6b5fb90657f9c7460c524f5e9930042c0ca9da647e700079ff1b8abf2e2fae998a7ebd13950f1d320319bb4a11dad0ced8f2f4ce5b5207c8bb1b7b2dd2827e5f48106bc8ab8919b9f665a19156405c84acbe5f9ba1565d836ebb2953fb25b48bfe38e5cb1f335", 0x74}], 0x3}, 0x8) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0x8014695a, &(0x7f00000001c0)) bind$unix(r1, &(0x7f0000000040)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) setreuid(0xee00, 0x0) r3 = getuid() chown(&(0x7f0000000200)='./file0\x00', r3, 0xffffffffffffffff) setreuid(0xee00, r3) open$dir(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x240) r4 = socket$unix(0x1, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000300)={&(0x7f00000002c0)={&(0x7f0000000080)=@in6, 0xc, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000140)=""/94, 0x5e}, {&(0x7f00000001c0)=""/41, 0x29}], 0x3, &(0x7f0000000280)=""/37, 0x25}, 0x8ff0}, 0x10, 0x1000, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) 1.416045757s ago: executing program 3 (id=958): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSHDRCMPLT(r0, 0x80044275, &(0x7f0000000680)=0xfffffffd) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x20) rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x64, 0x1, 0x0, 0x4}, {0x48, 0xfd, 0xfc, 0x2}, {0x6, 0x0, 0x69, 0xf0e}]}) write(r0, &(0x7f0000000580)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) 1.41322185s ago: executing program 2 (id=961): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000a40)=""/198, 0xc6}], 0x1, 0x1000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) munmap(&(0x7f0000001000/0x400000)=nil, 0x400000) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) munmap(&(0x7f0000181000/0x2000)=nil, 0x2000) rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') 1.410565514s ago: executing program 4 (id=962): mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000) (async) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x5, &(0x7f0000000280)=[{0x1d, 0x1, 0x0, 0xfffff4b2}, {0x25, 0x0, 0x2, 0x7ffffffc}, {0x40, 0xff, 0xfa, 0x2}, {0x6, 0x0, 0xae, 0xe}, {0x6, 0x40, 0x7, 0x800}]}) (async) write(r0, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async) open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x20, 0x100) 334.522552ms ago: executing program 4 (id=963): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000681000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f00003b9000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f000013c000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f00007c2000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f00007e3000/0x2000)=nil, &(0x7f0000188000/0x2000)=nil, 0x200000000}, {&(0x7f000069d000/0x4000)=nil, &(0x7f0000049000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f00007b1000/0x1000)=nil}, {&(0x7f00003d7000/0x4000)=nil, &(0x7f0000159000/0x4000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f000016c000/0x1000)=nil}, {&(0x7f000015b000/0x3000)=nil, &(0x7f00004f6000/0x3000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f000000e000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000696000/0x1000)=nil, &(0x7f00005e8000/0x2000)=nil}], './file0\x00', 0xffffffff}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) (fail_nth: 1) 302.427917ms ago: executing program 4 (id=966): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f0000000340)=[{0x5, 0x1}, {0x34, 0x0, 0x2, 0x3ee}, {0x1, 0x6}]}) write(r0, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) 293.402223ms ago: executing program 7 (id=969): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write(r0, 0x0, 0x0) 282.986835ms ago: executing program 2 (id=970): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x4, &(0x7f0000000340)=[{0x5, 0x1}, {0x34, 0x0, 0x2, 0x3ee}, {0x1, 0x6}, {0x4006, 0x0, 0xa, 0x6}]}) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setreuid(0xee00, 0x0) r1 = getuid() setreuid(0x0, r1) chflags(&(0x7f0000000200)='./file0\x00', 0x10001) ioctl$BIOCSRSIG(0xffffffffffffffff, 0x80044272, &(0x7f0000000040)=0x9) ioctl$BIOCGDLTLIST(r0, 0xc010427b, &(0x7f0000000140)={0x0, &(0x7f0000000080)}) write(r0, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) 280.928444ms ago: executing program 4 (id=971): writev(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000000)="7582c25d5a014a30", 0x8}], 0x1) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000140)=0x8a) recvfrom$unix(r2, &(0x7f00000000c0)=""/75, 0x4b, 0x1800, 0x0, 0x0) write(r1, &(0x7f0000000080)="7f", 0x1) 258.693723ms ago: executing program 7 (id=973): socket(0x22, 0x8000, 0x5) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_ethernet(0x3e, &(0x7f0000000140)={@random="69e1629b6174", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "6b9efb", 0x8, 0x50, 0x0, @rand_addr="feffffff00000800ff4f0000000a0002", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x0, 0x3, 0x8}}}}}}}) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file0\x00') r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x10, 0x1c0) sysctl$vm_swapencrypt(&(0x7f00000001c0), 0x3, &(0x7f0000000000)="ca4aaf66", &(0x7f0000000080)=0x4, 0x0, 0x0) munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) writev(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="6f86185acfd482d77e44f567d7c2dbf9531a3b3de9c33cbe26cdd8766c946bf1f570de30e0889c434c75a3a0e5a3fe8b56d7a8ab81852824503e54ac728b2256725f71e72c24ff6b9738084c7938152f0bc90451702997d1aa010825caa3479ed7f57ace0c086e70e6191d9e3574f766284bcffa63b2eb354ba5c3cf0f3a9a88dc71f0c4cf5bc9c404fba9c3e2e3e17e", 0x90}, {&(0x7f0000000440)="455f3ce1748a5a8a20a995c20e203c7abe526083859cbceb8867235187e29af5514194bba47df988441f7cfcf4804aa996eccd90b776d7f07008b5e79c7531fa9e1449b67a4bab74a157cba6910a026e3d7ff53fa3c87a95a50748dec018d3b763e56760c59da423c89e497e08de8b0097dc6a60ad764c4b745f89f2922428dc198682312428448a299b3e0f122aba9868a467d474d30d05a8ae77501752fdb8b7a562d67fd2043b92ce3d6b92c39fd777fb715be2438b917d6080a5219e917475a4b0734d305d386a660683c0dbf2a6fe11c95e77517c4e0133d2a1f7fb99998120e61571bd2633ea3abe15c0b09e836d5b65b0e3d2cf02d55347d8235da5e8f079d05cda6beb5a20b25dd848855517450a4d8744c0278bac65f4e313a497b9f23cc18363138804987a1aae21537971bda2af10a6f0e2298c24b740a2e15d1b3e01a26a3a174c77057cd69903bdea17b952b6f082904551b2557577f4f8220906015a705ca7d9b827ac985ccb55dbc81bf15ed6d83384c91d12f0a0e3d23cece654e2c2ad52443a495207b1e692183fdbe0143863b982d8c72c1f015b5e9ac52317057b4e15de77e5ab1bfa92505bf8b5e41bb64db0698674d3a6f257be25ece699fff172134bf4e9a5db24f23932bd8141c1aa9f2f6425dfa1d4e3e6e840f6a3b0d2d78436dcce9689b6566124be411267c14136c6a7bd9a6569b0f42bc9413df6c092d4c63d673ade9fc110388cb1b2f5ca4085723c965b29d7277b8f242c0dbfd85a90b2300ea5ca042a580a0abf04c13625364e49d4a95b4929e8bcdc56e2ad677f6b6fb5e62435e79923845fcf3e54be0402807789587907302323677fd9c773f36a41e3a5d538f132627d60455a8de4f466ade86e74cb2992e5107457c50f72a87f6f1f515ad489c89153daf1d483ca", 0x293}], 0x3) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 257.881449ms ago: executing program 3 (id=974): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1024, &(0x7f0000001840)={0x0}, &(0x7f0000001880)=0xc) getpgid(r1) close(r0) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x40) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x10}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a", 0x6f}], 0x2) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000006c0)={0xfffffffd, 0x3ff, 0xffffdffd, 0xfffffff7, "dfff0d8003908c00000000000b572c6d00e500", 0xffffbffc, 0x3}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) r4 = kqueue() r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000280)='&', 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x0, 0x4, 0x100000001}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r8 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r8, 0x8020699f, &(0x7f00000001c0)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4195169dbfff, 0x0, 0x1010, 0xffffffffffffffff, 0x0) recvmmsg(r7, &(0x7f0000000880)={&(0x7f0000000840)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/237, 0xed}], 0x1, 0x0}, 0x10}, 0x10, 0x42, 0x0) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000180)={0x0, 0x0}) ioctl$TIOCSETA(r5, 0xcd504407, 0x0) kevent(r4, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) semget(0x2, 0x2, 0x8) r9 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r9, 0x80206910, &(0x7f00000001c0)) 211.349441ms ago: executing program 2 (id=976): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt(r0, 0x4, 0x8, 0x0, 0x0) sysctl$kern(&(0x7f0000000480)={0x1, 0xb}, 0x2, 0x0, 0x0, 0x0, 0x0) 172.099376ms ago: executing program 2 (id=979): r0 = socket(0x800000018, 0x2, 0x0) r1 = syz_open_pts() fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x10002fffffffd}) fcntl$setflags(r0, 0x2, 0x1) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x287e) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x4, 0x0}) setreuid(0x0, 0xee01) r3 = syz_open_pts() ioctl$TIOCSTAT(r3, 0x20007465, 0x0) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000080)=0x9) close(r3) execve(0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x142) open(&(0x7f0000000100)='./file0\x00', 0x80, 0x5f62b36307a8c1ea) sysctl$kern(&(0x7f0000000040)={0x1, 0x36}, 0x2, 0x0, 0x0, &(0x7f0000001440)="cca410df", 0x4) 171.7599ms ago: executing program 5 (id=980): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) r0 = semget(0x3, 0x0, 0x41) r1 = getuid() setreuid(0x0, r1) r2 = getuid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000000c0)={{0xca, r1, 0x0, r2, r3, 0x4, 0x12}, 0x3, 0x1, 0x1}) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x1, 0x0) close(r4) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) (async) semget(0x3, 0x0, 0x41) (async) getuid() (async) setreuid(0x0, r1) (async) getuid() (async) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040), 0xc) (async) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000000c0)={{0xca, r1, 0x0, r2, r3, 0x4, 0x12}, 0x3, 0x1, 0x1}) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x18, 0x1, 0x0) (async) close(r4) (async) socket(0x18, 0x2, 0x0) (async) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) sendmsg$unix(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async) 170.088202ms ago: executing program 7 (id=981): sendmsg(0xffffffffffffff9c, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x410}, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x13, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) 140.461621ms ago: executing program 7 (id=983): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000681000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f00003b9000/0x3000)=nil, 0x2}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f000013c000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f00007c2000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f00007e3000/0x2000)=nil, &(0x7f0000188000/0x2000)=nil, 0x200000000}, {&(0x7f000069d000/0x4000)=nil, &(0x7f0000049000/0x3000)=nil}, {&(0x7f0000696000/0x2000)=nil, &(0x7f00007b1000/0x1000)=nil}, {&(0x7f00003d7000/0x4000)=nil, &(0x7f0000159000/0x4000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f000016c000/0x1000)=nil}, {&(0x7f000015b000/0x3000)=nil, &(0x7f00004f6000/0x3000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f000000e000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil, 0x1}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000696000/0x1000)=nil, &(0x7f00005e8000/0x2000)=nil}], './file0\x00', 0xffffffff}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0x80206932, &(0x7f0000000100)) getsockname(r0, &(0x7f0000000000)=@in, &(0x7f0000000040)=0xc) openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) 107.365403ms ago: executing program 6 (id=984): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x35, 0x0, 0x0, 0x1}, {0x1, 0x3, 0xfe, 0x10004}, {0x6, 0x0, 0x0, 0xfffffffe}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x138, &(0x7f00000000c0)=ANY=[]) 106.795609ms ago: executing program 5 (id=985): r0 = socket(0x2, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x1000000029, 0x31, &(0x7f00000000c0)="b2116988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7879de45ed3fc33719ca6dd678cec8a918458b2c10a1f8c66653b276e180e9cb9b21f9982230f5", 0x44) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) ioctl$FIONREAD(r0, 0x80206979, &(0x7f00000001c0)) write(r1, &(0x7f0000000200)="3f2eeefa61a50a0f6447d09181fbc66603a951155f33348d0d7cff956c7b91135d22c55b8ed7f3daf5ed8b8bc9c996bec9481058557b42bf59b7822b17ba4bf542eae5dee0c58704f40da828f52cadea18549422b835333b2ac3a0de5c375b4c4e0bc4db532371b85b9dece92230f2a0d3b1df92a06c12fbec8f3904b88c47b8fb057e4f796019dd", 0x88) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000100)='tap'], 0x0) r4 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r4, 0xc028698a, &(0x7f0000000100)) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) r5 = socket(0x1, 0x1, 0x0) ioctl$FIONREAD(r5, 0x8020690c, &(0x7f00000001c0)) getsockopt$sock_timeval(r3, 0xffff, 0x1005, &(0x7f0000000480), &(0x7f00000004c0)=0x10) recvmmsg(r2, &(0x7f0000000480)={0x0}, 0x10, 0x0, &(0x7f0000000500)={0x2007fffc, 0xa}) r6 = open(&(0x7f0000000000)='./file0\x00', 0x20, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x10, r6, 0x0) socket(0x2, 0x2, 0x0) (async) setsockopt(0xffffffffffffffff, 0x1000000029, 0x31, &(0x7f00000000c0)="b2116988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7879de45ed3fc33719ca6dd678cec8a918458b2c10a1f8c66653b276e180e9cb9b21f9982230f5", 0x44) (async) kqueue() (async) kevent(r1, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) (async) ioctl$FIONREAD(r0, 0x80206979, &(0x7f00000001c0)) (async) write(r1, &(0x7f0000000200)="3f2eeefa61a50a0f6447d09181fbc66603a951155f33348d0d7cff956c7b91135d22c55b8ed7f3daf5ed8b8bc9c996bec9481058557b42bf59b7822b17ba4bf542eae5dee0c58704f40da828f52cadea18549422b835333b2ac3a0de5c375b4c4e0bc4db532371b85b9dece92230f2a0d3b1df92a06c12fbec8f3904b88c47b8fb057e4f796019dd", 0x88) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000100)='tap'], 0x0) (async) socket(0x18, 0x3, 0x0) (async) ioctl$FIONREAD(r4, 0xc028698a, &(0x7f0000000100)) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) (async) socket(0x1, 0x1, 0x0) (async) ioctl$FIONREAD(r5, 0x8020690c, &(0x7f00000001c0)) (async) getsockopt$sock_timeval(r3, 0xffff, 0x1005, &(0x7f0000000480), &(0x7f00000004c0)=0x10) (async) recvmmsg(r2, &(0x7f0000000480)={0x0}, 0x10, 0x0, &(0x7f0000000500)={0x2007fffc, 0xa}) (async) open(&(0x7f0000000000)='./file0\x00', 0x20, 0x8) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x10, r6, 0x0) (async) 106.560282ms ago: executing program 7 (id=986): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000681000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f00003b9000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f000013c000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f00007c2000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f00007e3000/0x2000)=nil, &(0x7f0000188000/0x2000)=nil, 0x200000000}, {&(0x7f000069d000/0x4000)=nil, &(0x7f0000049000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f00007b1000/0x1000)=nil}, {&(0x7f00003d7000/0x4000)=nil, &(0x7f0000159000/0x4000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f000016c000/0x1000)=nil}, {&(0x7f000015b000/0x3000)=nil, &(0x7f00004f6000/0x3000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f000000e000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000696000/0x1000)=nil, &(0x7f00005e8000/0x2000)=nil}], './file0\x00', 0xffffffff}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) 101.872294ms ago: executing program 6 (id=987): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000340)=[{0x7c, 0x8, 0x5, 0x600}, {0x64, 0x0, 0xfa, 0x1}, {0x6, 0x2, 0xb4, 0xffffffff}]}) write(r0, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) (fail_nth: 1) 94.876101ms ago: executing program 7 (id=988): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) sendto$inet(r0, &(0x7f0000001240)="b7", 0xffffff31, 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000540)={&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) setreuid(0xee00, 0x0) ktrace(&(0x7f00000002c0)='./file0\x00', 0x4, 0x100, 0x0) setreuid(0xee00, 0x0) r1 = getpgrp() ktrace(&(0x7f0000000180)='./file0\x00', 0x6, 0xd32, r1) 69.556915ms ago: executing program 5 (id=989): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000340)=[{0x7c, 0x8, 0x5, 0x600}, {0x64, 0x0, 0xfa, 0x1}, {0x6, 0x2, 0xb4, 0xffffffff}]}) write(r0, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) 69.155151ms ago: executing program 6 (id=990): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f0000000240)=""/243, 0xf3}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000180)=""/7, 0x7}], 0x4, 0x10001) clock_gettime(0x4, &(0x7f0000000040)) ioctl$BIOCGDLTLIST(r0, 0xc010427b, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[0x4, 0x7fffffff, 0x0, 0xf]}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r2, 0x40}], 0x1, 0x0) r3 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$DIOCMAP(r3, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000140)='.\x00', r2, 0x3}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) poll(&(0x7f0000000100)=[{}], 0x1, 0x0) ioctl$TIOCCHKVERAUTH(r1, 0x2000741e) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000340)=[{0x7c, 0x6, 0x5, 0x600}, {0x64, 0x0, 0xfa, 0x4}, {0x6, 0x2, 0xb4, 0xffffffff}]}) symlink(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) write(r0, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) 53.388397ms ago: executing program 5 (id=991): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0xea2661cd404be461, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="b886b4e47f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = socket(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r1, &(0x7f0000000240)=@un=@abs={0x0, 0x0, 0x3}, 0x8) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) r3 = socket(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x1005, &(0x7f0000000000)={0x2000000000000, 0x8}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r3, &(0x7f0000000100)=@file={0x0, './bus\x00'}, 0x8) getsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$unix(r2, &(0x7f0000000000), 0x10) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r5 = syz_open_pts() close(r5) r6 = syz_open_pts() ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000001980)={0x3fe, 0xfa9, 0xd, 0xb, "bfff000000000000008000", 0x0, 0xc}) writev(r5, &(0x7f0000000a40)=[{&(0x7f0000000440)="2e06b5a54fdc15d0e5ba5cd619e395d842161263a5bcf8d360b109113dd229c0dd47d6ff4f038bc8f40206bf8a1ef55ba04d8d4e4174e29e744d8606170795a2edaf3456112807f6d55fd9c3815257c10e07e8f0be3a7366f8123a42cb43f4302bf6b149e9b9bab6116b11b8ae693250f7fa8080cd8a2fc7c7e4ebf5c106c80fd386c7786c0421183de7b10dbde8040d96f51522423ca8e0f709", 0x9a}], 0x1) close(r1) unveil(&(0x7f0000000080)='.\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = open(&(0x7f0000000080)='./bus\x00', 0x1, 0x0) preadv(r7, &(0x7f0000000200)=[{0x0}, {&(0x7f00000001c0)=""/49}], 0x2f, 0x6) 47.005617ms ago: executing program 6 (id=992): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) 28.466185ms ago: executing program 5 (id=993): sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf7afec37082", &(0x7f0000000000)=0x19, 0x0, 0x0) 27.3246ms ago: executing program 6 (id=994): setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f00000000c0)={0x29f5736a, 0x10007fff, 0x9, 0xfffffff8, "8b03e702800100787d902b56d864d3c3a3f4d3c9", 0x29}) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000100)="7f0c034d2c137b3da2dfcee5f3abc1fc0e7b9d7a91e34ecd6af02753b0a5d08ebfb583d61bd62cd5d83a5f2cb0ee50ccb8e4e30f053f61278771453d0d5d7074f8421c9bb7508c130b91c3547e7ee93687a0e1605ad2e4662c614cbd98db4bcc52f6e08ddc4d8cdf5119493d9ae145b4662ff9085f9dcdb7597546c8bd49552ed4987fee945c82358bc7c08a1754ca248a9cb96c3898bb35a686a54a68c9907ee6c6a809bc5bb307", 0xa8}, {&(0x7f0000000080)="add823", 0x3}], 0x2) 1.140839ms ago: executing program 5 (id=995): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x85, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x104, 0x7}, 0x7, 0x7}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000681000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f00003b9000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f000013c000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f00007c2000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f00007e3000/0x2000)=nil, &(0x7f0000188000/0x2000)=nil, 0x200000000}, {&(0x7f000069d000/0x4000)=nil, &(0x7f0000049000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f00007b1000/0x1000)=nil}, {&(0x7f00003d7000/0x4000)=nil, &(0x7f0000159000/0x4000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f000016c000/0x1000)=nil}, {&(0x7f000015b000/0x3000)=nil, &(0x7f00004f6000/0x3000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f000000e000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000696000/0x1000)=nil, &(0x7f00005e8000/0x2000)=nil}], './file0\x00', 0xffffffff}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0xff, 0x1}], 0x5, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x81, 0x8, 0x2, 0xffffffff}, {0x60, 0x2, 0x10, 0x9}, {0x6, 0x0, 0x1, 0xaf}]}) write(r1, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) 0s ago: executing program 6 (id=996): munmap(&(0x7f0000feb000/0x14000)=nil, 0x14000) (async) mquery(&(0x7f0000fef000/0x3000)=nil, 0x3000, 0x4, 0x0, 0xffffffffffffffff, 0x1) (async) r0 = socket(0x18, 0x2, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r1 = socket(0x18, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0xffff, 0x10, &(0x7f0000000100), 0x0) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async, rerun: 64) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4000}, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000000, 0x9}) (rerun: 64) close(r0) (async) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) (async, rerun: 32) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async, rerun: 32) r4 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) (async, rerun: 32) bind$unix(r4, &(0x7f0000000080)=@file={0x0, './bus\x00'}, 0x8) (rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x3}, 0x10, 0x0, &(0x7f0000002640)={0x33d, 0x304c9091}) (async) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) (async) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) fcntl$dupfd(r5, 0x3, 0xffffffffffffffff) (async) poll(&(0x7f0000000140)=[{r3, 0x100}, {r5, 0x4}, {r3, 0x1}, {r2, 0x20}, {r3, 0x2}], 0x5, 0x1) r6 = kqueue() kevent(r6, 0x0, 0xe4a, 0x0, 0x8000, 0x0) (async) ioctl$BIOCGRSIG(0xffffffffffffffff, 0x40044273, &(0x7f0000000040)) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) syz_emit_ethernet(0x138, 0x0) (async) execve(0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x6, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.253' (ED25519) to the list of known hosts. pckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) login: denied attempt to set clock forward to 13622315181289262 denied attempt to set clock forward to 13622315181289262 nd6_resolve: something odd happens pckbd_enable: command error panic: pool_do_put: shmpl: double pool_put: 0xfffffd807aa750e0 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *425999 80920 0 0 0x4000000 1 syz-executor db_enter() at db_enter+0x25 panic(ffffffff8307769b) at panic+0x1e5 pool_do_put(ffffffff8351e038,fffffd807aa750e0) at pool_do_put+0x1be pool_put(ffffffff8351e038,fffffd807aa750e0) at pool_put+0xb3 shm_delete_mapping(fffffd806bf396e8,ffff80000129d008) at shm_delete_mapping+0x1ac syscall(ffff8000371f6e60) at syscall+0xaf8 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd1b52849b30, count: 8 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: pool_do_put: shmpl: double pool_put: 0xfffffd807aa750e0 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8307769b) at panic+0x1e5 pool_do_put(ffffffff8351e038,fffffd807aa750e0) at pool_do_put+0x1be pool_put(ffffffff8351e038,fffffd807aa750e0) at pool_put+0xb3 shm_delete_mapping(fffffd806bf396e8,ffff80000129d008) at shm_delete_mapping+0x1ac syscall(ffff8000371f6e60) at syscall+0xaf8 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd1b52849b30, count: -7 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff8000371f6b90 rbx 0xffff800029b7cdbf rdx 0 rcx 0xffff800033d867b8 rax 0xffff800029b7bff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xa3d2e040c85a37f1 r11 0x59e8e56c5bec9ada r12 0xffff800029b7cbc0 r13 0 r14 0 r15 0x1 rip 0xffffffff81276185 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff8000371f6b80 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=425999 pid=80920 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800033d86a40,0xffffffff835d3460 process=0xffff8000357b31f8 user=0xffff8000371f1000, vmspace=0xfffffd806bf396e8 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 80920 487553 40966 0 3 0x80 fsleep syz-executor 80920 1843 40966 0 3 0x4000080 fsleep syz-executor *80920 425999 40966 0 7 0x4000000 syz-executor 73020 219175 85321 0 3 0x80 fsleep syz-executor 73020 216527 85321 0 3 0x4000080 kqread syz-executor 26639 108449 72339 0 3 0x80 fsleep syz-executor 26639 329069 72339 0 3 0x4000080 netcon syz-executor 9811 149064 68493 0 3 0x80 fsleep syz-executor 9811 172816 68493 0 3 0x4000080 tunread syz-executor 1750 203090 95495 0 3 0x80 fsleep syz-executor 1750 123027 95495 0 3 0x4000080 sbwait syz-executor 52420 264370 19098 0 3 0x80 fsleep syz-executor 52420 150035 19098 0 3 0x4000080 sbwait syz-executor 46808 476128 61996 0 3 0x80 fsleep syz-executor 46808 517691 61996 0 3 0x4000080 sbwait syz-executor 8804 417630 14095 0 3 0x80 fsleep syz-executor 8804 37241 14095 0 3 0x4000080 kqsel syz-executor 57297 393426 0 0 3 0x14200 acct acct 74432 302421 1 0 3 0x100083 ttyin getty 84269 379127 0 0 3 0x14200 bored sosplice 72339 420684 75834 0 3 0x82 nanoslp syz-executor 85321 259408 75834 0 3 0x82 nanoslp syz-executor 40966 187086 75834 0 3 0x82 nanoslp syz-executor 19098 114285 75834 0 3 0x82 nanoslp syz-executor 95495 431876 75834 0 3 0x82 nanoslp syz-executor 68493 382975 75834 0 3 0x82 nanoslp syz-executor 61996 24649 75834 0 3 0x82 nanoslp syz-executor 14095 290044 75834 0 3 0x82 nanoslp syz-executor 75834 218116 24559 0 3 0x82 kqread syz-executor 24559 62220 93143 0 3 0x10008a sigsusp ksh 93143 231011 1724 0 3 0x98 kqread sshd-session 1724 78165 20658 0 3 0x92 kqread sshd-session 20658 45894 1 0 3 0x88 kqread sshd 11931 476007 24488 74 3 0x1100092 bpf pflogd 24488 58792 1 0 3 0x80 sbwait pflogd 27309 249932 321 73 3 0x1100090 kqread syslogd 321 305871 1 0 3 0x100082 sbwait syslogd 95096 497488 1 0 3 0x100080 kqread resolvd 27570 457840 727 77 3 0x100092 kqread dhcpleased 43987 455125 727 77 3 0x100092 kqread dhcpleased 727 117450 1 0 3 0x80 kqread dhcpleased 67196 78760 0 0 3 0x14200 bored smr 60698 149388 0 0 3 0x14200 pgzero zerothread 7541 355256 0 0 3 0x14200 aiodoned aiodoned 2756 420593 0 0 3 0x14200 syncer update 71498 412427 0 0 3 0x14200 cleaner cleaner 24140 14411 0 0 3 0x14200 reaper reaper 75540 460832 0 0 3 0x14200 pgdaemon pagedaemon 502 381410 0 0 3 0x14200 bored viomb 86681 34646 0 0 3 0x40014200 acpi0 acpi0 59973 105356 0 0 3 0x40014200 idle1 62982 671 0 0 3 0x14200 bored softnet3 45928 258020 0 0 3 0x14200 bored softnet2 23771 30154 0 0 3 0x14200 bored softnet1 66876 518188 0 0 3 0x14200 bored softnet0 20308 333666 0 0 3 0x14200 bored systqmp 3441 381195 0 0 3 0x14200 bored systq 38497 436560 0 0 3 0x14200 tmoslp softclockmp 4433 516189 0 0 3 0x40014200 tmoslp softclock 41009 354382 0 0 7 0x40014200 idle0 1 151052 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 0: exclusive mutex &sched_lock r = 0 (0xffffffff83634370) #0 witness_lock+0x5bb #1 mtx_enter_try+0x178 #2 mtx_enter+0x60 #3 sleep_setup+0xc6 #4 rwsleep+0xcb #5 futex_wait+0x372 #6 sys_futex+0x149 #7 syscall+0xbb6 #8 Xsyscall+0x128 CPU 1: exclusive mutex shmpl r = 0 (0xffffffff8351e048) #0 witness_lock+0x5bb #1 mtx_enter_try+0x178 #2 mtx_enter+0x60 #3 pool_put+0x9f #4 shm_delete_mapping+0x1ac #5 syscall+0xaf8 #6 Xsyscall+0x128 Process 80920 (syz-executor) thread 0xffff800033d86a40 (1843) exclusive rwlock futex r = 0 (0xffffffff834d6c80) #0 witness_lock+0x5bb #1 sys_futex+0x69 #2 syscall+0xbb6 #3 Xsyscall+0x128 Process 80920 (syz-executor) thread 0xffff800033d867b8 (425999) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff835157e0) #0 witness_lock+0x5bb #1 __mp_acquire_count+0x58 #2 mi_switch+0x4b7 #3 sleep_finish+0x21e #4 rw_enter+0x348 #5 vm_map_lock_ln+0x143 #6 uvm_unmap+0x81 #7 shm_delete_mapping+0xa0 #8 syscall+0xaf8 #9 Xsyscall+0x128 exclusive mutex shmpl r = 0 (0xffffffff8351e048) #0 witness_lock+0x5bb #1 mtx_enter_try+0x178 #2 mtx_enter+0x60 #3 pool_put+0x9f #4 shm_delete_mapping+0x1ac #5 syscall+0xaf8 #6 Xsyscall+0x128 Process 9811 (syz-executor) thread 0xffff8000ffffdbe8 (172816) exclusive rrwlock inode r = 0 (0xfffffd807a9e54e8) #0 witness_lock+0x5bb #1 rw_enter+0x41b #2 rrw_enter+0xbe #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 spec_open+0x302 #6 VOP_OPEN+0x8b #7 vn_open+0x708 #8 vndioctl+0xcb1 #9 VOP_IOCTL+0xac #10 vn_ioctl+0xf6 #11 sys_ioctl+0x67c #12 syscall+0xbb6 #13 Xsyscall+0x128 Process 1750 (syz-executor) thread 0xffff80002a04a528 (123027) exclusive rwlock sbufrcv r = 0 (0xffff8000012fbd70) #0 witness_lock+0x5bb #1 rw_enter+0x41b #2 sblock+0xb7 #3 soreceive+0x295 #4 recvit+0x40a #5 sys_recvmmsg+0x3d3 #6 syscall+0xbb6 #7 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10207 11187K 11584K 166960K 12470 0 pcb 17 14K 16K 166960K 179 0 rtable 198 7K 8K 166960K 423 0 pf 45 19K 23K 166960K 105 0 ifaddr 39 6K 7K 166960K 64 0 ifgroup 67 2K 2K 166960K 93 0 sysctl 3 0K 1K 166960K 5 0 counters 68 36K 37K 166960K 86 0 ioctlops 0 0K 4K 166960K 1595 0 iov 1 4K 16K 166960K 32 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1373 86K 87K 166960K 2148 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 9K 166960K 11 0 VM map 2 1K 1K 166960K 2 0 sem 17 3K 3K 166960K 26 0 dirhash 12 2K 3K 166960K 48 0 ACPI 1690 195K 286K 166960K 12468 0 file desc 18 65K 89K 166960K 1129 0 sigio 0 0K 0K 166960K 10 0 proc 72 91K 128K 166960K 584 0 subproc 104 6K 6K 166960K 105 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 81 0 in_multi 76 5K 7K 166960K 140 0 ether_multi 1 0K 0K 166960K 8 0 mrt 1 0K 0K 166960K 6 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 79 360K 360K 166960K 79 0 exec 0 0K 1K 166960K 492 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 242 73K 82K 166960K 11472 0 UVM aobj 16 4K 4K 166960K 19 0 pinsyscall 43 86K 102K 166960K 2207 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 1 0K 0K 166960K 50 0 NDP 14 0K 2K 166960K 44 0 temp 43 6816K 6943K 166960K 25364 0 kqueue 14 22K 28K 166960K 144 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 78 0 74 1 0 1 1 0 8 0 rtentry 112 122 0 36 4 0 4 4 0 8 0 unpcb 144 420 0 395 6 4 2 4 0 8 1 syncache 336 5 0 5 3 3 0 1 0 8 0 tcpcb 808 241 0 231 8 0 8 8 0 8 6 arp 120 19 0 6 1 0 1 1 0 8 0 inpcb 336 859 0 841 18 8 10 13 0 8 8 nd6 136 27 0 8 1 0 1 1 0 8 0 pkpcb 40 6 0 6 2 1 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1168 6 0 6 2 1 1 1 0 8 1 pfstscr 40 45 0 42 2 1 1 1 0 8 0 pffrag 232 6 0 1 1 0 1 1 0 482 0 pffrnode 88 6 0 1 1 0 1 1 0 8 0 pffrent 40 52 0 47 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfstitem 24 96 0 34 1 0 1 1 0 8 0 pfstkey 128 138 0 67 3 0 3 3 0 8 0 pfstate 376 112 0 53 7 0 7 7 0 8 0 pfrule 1344 48 0 39 2 0 2 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 470 0 113 29 4 25 29 0 8 0 art_table 32 472 0 113 4 0 4 4 0 8 0 art_node 16 117 0 41 1 0 1 1 0 8 0 sysvmsgpl 40 133 0 133 1 0 1 1 0 8 1 semupl 112 2 0 2 1 1 0 1 0 8 0 semapl 112 20 0 5 1 0 1 1 0 8 0 shmpl 112 16 0 3 1 0 1 1 0 8 0 pool(shmpl): free list modified: page 0xfffffd807aa75000; item ordinal 0; addr 0xfffffd807aa750e0 (p 0xfffffd807aa75000); offset 0x1c=0xdeafbeac dirhash 1024 42 0 25 3 0 3 3 0 8 0 dino2pl 256 3170 0 1663 96 0 96 96 0 8 0 ffsino 272 3170 0 1663 102 0 102 102 0 8 0 nchpl 144 4581 0 2893 63 0 63 63 0 8 0 uvmvnodes 80 3795 0 0 78 0 78 78 0 8 0 vnodes 216 3795 0 0 211 0 211 211 0 8 0 namei 1024 13408 0 13408 2 1 1 1 0 8 1 percpumem 16 57 0 9 1 0 1 1 0 8 0 kstatmem 264 46 0 18 4 2 2 3 0 8 0 scxspl 216 14329 0 14329 11 5 6 8 1 8 6 plimitpl 152 103 0 85 1 0 1 1 0 8 0 sigapl 424 1432 0 1380 7 1 6 7 0 8 0 futexpl 64 13122 0 13113 1 0 1 1 0 8 0 knotepl 120 550 0 0 17 0 17 17 0 8 0 kqueuepl 216 219 0 206 3 2 1 3 0 8 0 pipepl 320 141 0 113 3 0 3 3 0 8 0 fdescpl 496 1411 0 1379 5 0 5 5 0 8 0 filepl 152 5956 0 5683 20 4 16 16 0 8 5 lockfpl 104 353 0 351 1 0 1 1 0 8 0 lockfspl 48 136 0 134 1 0 1 1 0 8 0 sessionpl 144 24 0 15 1 0 1 1 0 8 0 pgrppl 48 34 0 17 1 0 1 1 0 8 0 ucredpl 104 867 0 853 1 0 1 1 0 8 0 zombiepl 144 1380 0 1380 2 1 1 1 0 8 1 processpl 1160 1432 0 1380 5 1 4 5 0 8 0 procpl 648 2712 0 2651 6 0 6 6 0 8 0 srpgc 96 2 0 2 1 1 0 1 0 8 0 sosppl 168 5 0 5 2 2 0 1 0 8 0 sockpl 664 1367 0 1320 20 8 12 15 0 8 8 mcl64k 65536 10 0 0 2 0 2 2 0 8 0 mcl16k 16384 11 0 0 2 0 2 2 0 8 0 mcl12k 12288 5 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 6 0 0 1 0 1 1 0 8 0 mcl4k 4096 155 0 0 20 0 20 20 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 26 0 0 4 0 4 4 0 8 0 mtagpl 96 61 0 0 2 0 2 2 0 8 0 mbufpl 256 273 0 0 16 0 16 16 0 8 0 bufpl 280 5027 0 110 352 0 352 352 0 8 0 anonpl 24 233837 0 230344 78 24 54 58 0 185 25 amapchunkpl 152 37295 0 36781 31 7 24 26 0 158 4 amappl16 200 5520 0 5493 31 24 7 15 0 8 4 amappl15 192 10 0 10 1 1 0 1 0 8 0 amappl14 184 146 0 131 1 0 1 1 0 8 0 amappl13 176 14 0 14 1 1 0 1 0 8 0 amappl12 168 2062 0 2030 3 1 2 2 0 8 0 amappl11 160 54 0 40 1 0 1 1 0 8 0 amappl10 152 9 0 9 1 1 0 1 0 8 0 amappl9 144 167 0 167 1 1 0 1 0 8 0 amappl8 136 18 0 16 1 0 1 1 0 8 0 amappl7 128 108 0 96 1 0 1 1 0 8 0 amappl6 120 164 0 162 1 0 1 1 0 8 0 amappl5 112 147 0 136 1 0 1 1 0 8 0 amappl4 104 304 0 285 1 0 1 1 0 8 0 amappl3 96 7081 0 6979 3 0 3 3 0 8 0 amappl2 88 1689 0 1604 3 1 2 3 0 8 0 amappl1 80 10705 0 10129 14 0 14 14 0 8 0 amappl 88 10992 0 10814 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 18 0 3 1 0 1 1 0 8 0 pool(aobjpl): free list modified: page 0xfffffd807adf7000; item ordinal 0; addr 0xfffffd807adf7798 (p 0xfffffd807adf7000); offset 0xc=0xdeaf4151 uaddrrnd 24 1411 0 1379 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1411 0 1379 1 0 1 1 0 8 0 vmmpekpl 168 11011 0 10973 3 0 3 3 0 8 0 vmmpepl 168 90721 0 88800 102 12 90 94 0 357 5 vmsppl 440 1410 0 1379 6 2 4 5 0 8 0 rwobjpl 56 29127 0 24376 68 1 67 67 0 8 0 pdppl 4096 2829 0 2758 109 38 71 83 0 8 0 pvpl 32 16488 0 0 133 0 133 133 0 265 0 pmappl 248 1410 0 1379 3 0 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 422 0 57 11 0 11 11 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff8341cff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 acpicpu_idle() at acpicpu_idle+0x41e sched_idle(ffffffff8341cff0) at sched_idle+0x558 end trace frame: 0x0, count: 10 ddb{0}> trace x86_ipi_db(ffffffff8341cff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 acpicpu_idle() at acpicpu_idle+0x41e sched_idle(ffffffff8341cff0) at sched_idle+0x558 end trace frame: 0x0, count: -5 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff8307769b) at panic+0x1e5 pool_do_put(ffffffff8351e038,fffffd807aa750e0) at pool_do_put+0x1be pool_put(ffffffff8351e038,fffffd807aa750e0) at pool_put+0xb3 shm_delete_mapping(fffffd806bf396e8,ffff80000129d008) at shm_delete_mapping+0x1ac syscall(ffff8000371f6e60) at syscall+0xaf8 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd1b52849b30, count: 8 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8307769b) at panic+0x1e5 pool_do_put(ffffffff8351e038,fffffd807aa750e0) at pool_do_put+0x1be pool_put(ffffffff8351e038,fffffd807aa750e0) at pool_put+0xb3 shm_delete_mapping(fffffd806bf396e8,ffff80000129d008) at shm_delete_mapping+0x1ac syscall(ffff8000371f6e60) at syscall+0xaf8 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd1b52849b30, count: -7