last executing test programs: 12.531356673s ago: executing program 5 (id=36): r0 = open(&(0x7f0000000080)='./file0\x00', 0x70e, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000400)="56cf5daafc6597872431ff6c668c28adc33a60651a078a116b3548a8be66444658a069b71e92feadcd7b3434dadfc4fc3fd4ef7525b58b0086932b0a93463511a8889f58073c33282b2afa1967c7908d4d0aea830b68a43711d6c4457ec4a41a772d6ae311730b7823d96ef1c25a7bae68954da1ffde05cf138758ef54d053a94bce1d28f7ea235a66647b6db6eda0d5e78db16b66fae3f13fb8d25610c09b96003d8776b05dcc0dd56881e848483a0826bb010e52d7207026a59074a6a4c0f7677a7a35a8d29e875aebabef354e082b69112d486781c897abf6bb9a1be014c358af0deaaf1701cf", 0xe8}, {&(0x7f00000000c0)="46c4f10bc87c57f494288740223f05da53bade43d96cee8b67a2bda851f346b3ec9514ee7d0936290b45282695c91e2a70b65200f542ea22fd10e92e681b7d17f388cd46b789f244bb552adb6aef00b7e486f48e4cc1313a28f16195c6202c2ccb8c51bdae1106", 0x67}, {&(0x7f0000000180)="6a4f939b9120a9a9809353ee8ab94d9d91982e88125e29ab412d900938c67b9869bc54c26b6074d2a35d9d398f962d89ba53ee17d2e213e3ab6f3979ec0a52db259bf5213f9f085a6ea854d0a9429e9c8ae4502adb1d8605e2001f6891d3e9f68939bddd0f20ca0424c518bf522d50f4df260b3dad2d000ce1940d5d2b0d02d0b498ae6e324cc6fde7a660bf569c4837d7a408a2ce2e3394d529632e37105b9cc837618031080e760d63a1683936e78eb6058a2c73956f99378324d8e2b6ec205f4cbc3f685ea145ede3ba5a469c6cade196c9e9c6e452e9ae5a7c2930f8c6616a72bcc7a0dfb30cf9e1fcd28bc84ef0", 0xf0}, {&(0x7f0000000580)="e3b2156dbd9692b49e19f37cd58d0a936f8b3bcdeaab6e6e81205275c9f96bec019eceb8d1ab8b4223651e2f00aecd567c4e0158978cd10c6ff7a99d4b22cee5f1454fa432575f47f92067bd93b98472da81026395a03cdbacca75ee65a4ed34318093c82c3a86abcc780d18841f73143bfd3fc98aa8d91b42da40a226b28f0e692fa4a7105d63767b6e2c21b5a00206f3a14dbf11cc13fcc30502c58b7d3e46bf3e1e37eeaaf68a081908e671d36e3e63d27e923a65caf62c2b4e1416259d5f7a5bf7db4f23f19874bc01d809e59e903c67fd677e31a4e19efc76afe755fbbb037fd7e2432865a156bfd65ee03553d157a4647a5b887136d1e8f587a7354dda1c733fa5eddd5344a5e4abd2a82e44f662bd05cf4b0170fea22a81953a7ddefdda2378d0e1d82878a4ab2b989df08f340a2b0f850bd1a0cd2c45622f182f16e8d393418a26dd435bffb3b2fec8268cbde5a82ad699c1a321783448581e2980a49f064c8fb4524f4ee2d5ec6558b43889c5512a3d49bf8d743586c6aba91c4dfb279926eb0bb838e2540956d80ce3075179caa3774a6dfb9d06119bb5db088e19d9d5b5316a80058ce9ce58deea27735f865e4678a597fec6454bb8a57155249919805984743b8433880014449e4fe37b6e9b26fbff153cb0eaa20df6b730f1db3d69670a48123e020cabff4664800469ed4f45d4caea8925f7f2080e36843df69f85d7f95085eb9f6ee243924fde44c3e88015a8de23c5e2fbab6fd7463e9ede2de5e1deb202ed905deee7c0fe991f23ebbdddd3167e44d65a3b74155e814279e265a738b5049802389e0229cff7e223e2b58f1415ef2c3472a9d5a0217e836f70fa16e76d2b75423b6bb11ee629bcef30dbd4363a23c1d06e344ab65fc3a13928940afbe9d401b0d954b5c7597673c94928f2bd78dcc5a8dafda6a2fadac8f896c96fd5ceaab4f4bd6dce2f6f607b699adc394bd1a65cb2565ebcbd83d85ba4e01a2773b32c42cb3f53633cc4e46a5f96594ae42c4e57c70ec8a33bf72d5d4caa13423658628bb71e17c4c396ba36e47d8b2978d75b0f02070f708bc4a2c7c3a70b87347ec074913f00d979e1a4c2a0c81d18125e1b7b18cabcf759b7ed3ebe1fdf5b65ccd0bb3a9ffc8379bde4ceda452b4c5f0f56e38c8dd49ecf16f95423a2c2a021fb7c1f9a953099554ab252991d47e003c0263a6aea2d25a95f1dd2ff97225a7cf26833d2191d7b7ece6574e52c76ca61e8de29176dbc01eb9cc4279712a9abb60e629c667b99cde7a6eef8ac65371915cd8aa22ef63c84cef6705f475c8bb2189bbb38c55b8cfc6ec88698aea1c0a0089671cb2c2806c6ed58ef051b6fe76bee9e21f43e8743c31572bb6221f60a58703341a1785205fe0c5912df91f8bd44559d6531abd065a0af1efe7fd7164e8a8ca3540091c8bacc9fcb24d310ba32bd93f8dce7f8d060ed5bb237014e22ee842ccc7d86badcf8a54ace053edc2122a28d4ee34e0419de0095a99a68ad5945db5a7a0880a6ddadf23aaaafbf0c44ac3595724e58f0378d1a024f1a624173e8966a0b85a2178d9d3ecfda88a8f11ff5413188acc6a84c2ec07488a3e1ba7fadca399fb74b2f7e89f5c1bc6c43a2cb0e557c64d66f8705547cff85bbe81255ef7cc2345338f6a1f0ae2b69e867db120d70cf19668cdbccf86654c5d99341fcec9fc807c8f0aa6e312d1dec4cf609a9b7a80e330cb30798da24ac1615df35f6441ea5125ff16273d1f922d913f58ab50006414535f17bcd07cd5883ccdc29baea7abc32620d0ba976079b8ae7f715a1852458375848bdfe97e93cff478d6eecf37d8f39548e3e568d1e70330ddce2694a6138590e49c50d3f356a2e3965d4356b06cfdba6aa5dcdbc1af8c206e713c09c7b34bd05c09fbda17089f4e0933c986d240cf081516000a818dfa417de094dfa1d152a7f16e117671620749c28710f3808a04d04c4916543877761c662019ada1296095bf2ea2c0103b3a58b4789cd176e65d34863fc5ba42392f8d9df8bd4f511783f53eecd263a45f9debc828523f21130f554d07709f1a2c57297d82a63566891303b9a0ac8eab0fb8361322380731991ec5d2320c39ac6c0713dacf1dfa2fa2d08aec56cfc40b99f11d2bf5ac2cf16d4cbe863e8b751d5c4c8e21339b46d0316786a286998a6e4d022239698d6418ebac9038571c3c584422c0562fd5558e21bb02e9316811aa3902c952ed2edc1ba9479fa879bcb0c4c8e7c0eca5d917ac0a3340d517ac26e6c38f642defd624a291f88bd9788598a403cadc8f14e6f55011de9d87a22c1ee04ca16a66500f8d226e993b03af3d9bcb2e526b2794a93b2c557839c09de7065d93112ca73bc4675348d9f8a01cf971e3cad6265988b3503ace0b42c399a8a76a673ad5a1b52746b5f1cfde16a7c6b650a208187ada27b642399ddbcfd1da5c9662a69535258d82e9008497c6a1893bdac6d67c703fd31d6f07d685be529743f994b7c5a4f02e15b642f8041a4665cab6c228879add168329e303a58c32fe11da69b9d5c24102554350bde6814979ac5c3d11c182d3f4f7f50c2c77d0a1e4be7719b570b3b584174fdf47ba19106e87b3d7da42120e4d2f40300ca6b7554a39865cf5b583784480c36f2064118fbf0c90af720ed577f8386a36078d07a961f43c640833b37de42ece43b727816d1afdf5f37d8f289ce4a590a80f8dc7648330e27e11e8b87aeb59981a1fd2df9d79b8a5d9b37f9de3459c2aaf2925f29bf7008a8318ef6a230f95a109d62058d3943a2554b8a8b64694c91808a9c14c382e381867ebcaaf8bdda8404719ea24d62602d40c8f1cc54ed32eac599633c66971a977152f8af50d1159f3cc4c5cb5841cd98d292255be524f7f2d3a4826f0fcba1a2a44ade0affd0c4796394840bd0cc2183e31833768788678de666467972dc814ac147324e3baeb268113c1fea9dcdb811a8e3d904fd1afa3ca106a2400e8e46a11b4f4f647ce2b4e8c8cfe82d532ca6795d2eb26f91ecf24b22ae5d2eabb0a1d5992c1bb6862ec112416d63fd423e5ba485f345e5398d3624089569058f98eb53708bcd06c5769005ee847a7f784155809da3efe8e91828763db6ae4fa8bb4607c354de16f7407f82e232af2ae7834ab14456fa7f441186fa78fa75dc274e28476d6cf1ef8c5d3c737b133bd6089c3f9566ac3136f48c709fdb880da880bdc8395e529264889b6267776423650bfeb65744d3b7913b86d4c280f0f0fe66e3b8740b7fed41ad5a8f570fd185edeb7a30abc226d18cac7a35e81340518228769587ae4c6b85cf5fb7f79530e2b192069a2eb7290e364c6d85a3e679980513120c525d243d2906df755f6c214746a76b39b2c4a3c8fc36e41453180327ab5c354a4c14fb8ad77fb7412756011772c5457665a6b64548f5d5ae11d408ea6d1c8e25cd40ddfe803e7b0134198336fb0c771429d014adedeb976a9305b8eff0d41cdaba4ff9fc276d31255f6843f8c74a988550ffe34235957ac622e25a032ac007c711f2c891315d86fe6b35eb728cadd72e877f455f7bbed6b746f374f0b11e3bab66778538b8e5a926f241d9b5067f1b4726d5964c7199e15e0d590ac34d257c075e88d3c95ac134e0e45fe3f57e38aa850ebf950a52aaf9eb10e1abe54870cffcb62a7fd0c94a86ff3959b1e39ee589a4d64f9f18c072014a7c90f96c4848ac9d0b80b0d85f07610dc167ab45f146e1aadfe4827f234dfed24903ee905612480edefca3aec8ccfa5d78e79d0ef8787eb92d6447721260e645278d9d7a8a4e479037acd90581f7a83ebf4ef3f2873ad49fcdb019e1fb9a38b7a23abbc4458953192f791f7929d09f803362ede6431d7a9638e802688e14607d480ec672a378ec6d1f7c1a9ac864578d078f455846681cac4c0438adcabe94ab06009ff00125992a9f134c4c25f14edca5cb6ef369f373bb490a666e21d10d1f63a8f0285ec1c5230a7bb3ad43b2186441400935abd16f2e4cb482520e6b482f59ded5c01dcd60f1f37ab18597afe66c67241d81ede5af6563635bb6c455ba26dbc16659635cadc30329e204a15cd569c2e0b45e7847fe03e2df384113e5dc238db158aaacd4fe55b55ed1c42d7ddd56e11a89dc7cd042f4d004ce305a4201e270b8391f366e0e056779d0cd417217dddb57704f0d91e9764860bb0f51ee7c4c2438e6f806994726fdf2ee42e8db109723c481026bb0c205ded3421baf0de5f299368a99437867c6ab3373d9e8455587d449263838e9ee5214d5c163909e1268610f79b274d48ee9ec2a03b8eb46c0c8c489379afd793ac3fbb4c03a37bd5ce1e15eba5ec886ce2e0b42078edc53f76d88a7a0b773f7471522eebde942be793a469c4334f5b39880201446b4b09469b3654451616ef4fce87139da2c436d662d5fdb15cea0299116dce89b149b6e7bac68b4776cd97fa4d4999975549d83bbe2c3cda40283f44e5d8cb5a8920348c6c08271a7d7e3565a0c144b69246e2669ed388cffd14d4bcdf91e50d4987be1423b3c219bd704c012e5540692904043bc936ed4c4b998ba2ef4f6f9381b17b3fb3db4d07ed83fe843260b80711190e7ad599b1255d814b4bea10281810ae8a96a5dda37448212c132942af3a58639ce8a7c1571c4b087807a26ffeddb425a39dcd1b6550201ed49745c9a060cff5324fe6202804e7c235092693c1a2de90bd63d8f44cf44fe7b421c06170daa95a23cd03f7b4f194430606566923d89864e9a4b81ca8cf48a9c1260e58558c2107345406fb305355387071f9bfbbe85ff1e914a0cf9cecf7ec113e4da204256bde6a98edf5558ddd52e9ea3ae4f4d47b806b5e7fc22cd0250d3f3239b110f08b7fe4c771f9f5831c4a443484d87c5d000d35593d011550dedb7fcb0305d7a0699ee36081dfda37bff33b283150e370a34ed15ac7f7423333c0097bd11d42f3b4b00f3d689ef", 0xdc2}], 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) socketpair(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001dc0)={0x0}, 0x10, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0), 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 12.495055062s ago: executing program 5 (id=38): r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000300)={0x1, 0x3}) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0x69, &(0x7f0000000240)={{0x18, 0x3, 0x9, 0xc}, {0x18, 0x2, 0x7, 0x70}, 0x7, [0x9, 0xbb, 0x2, 0x2, 0x7, 0x0, 0x3, 0x8001]}, 0x3c) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$TIOCSETA(r1, 0xc0284416, &(0x7f0000000000)={0xa00, 0x0, 0x741, 0x0, "97000000efffffff00", 0x900, 0x8}) sysctl$net_inet_gre(&(0x7f0000000000)={0x4, 0x2, 0x2f, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$vfs_ffs(&(0x7f00000002c0)={0x4, 0x1, 0x7b90627584a75963}, 0x3, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x18, 0x3, 0x3a) r3 = msgget$private(0x0, 0x4) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000000)=""/250) setsockopt(r2, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f0000000200)={0x9, 0x0, 0x0, 0x5332, 0x3}, 0xc) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc1206949, &(0x7f00000001c0)) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r6 = socket(0x18, 0x3, 0x0) setuid(0xffffffffffffffff) r7 = msgget$private(0x0, 0x4e1) msgctl$IPC_RMID(r7, 0x0) ioctl$FIONREAD(r6, 0x8080691a, &(0x7f0000000100)) pwrite(r6, &(0x7f0000000140)="9266a3657cec37f0ae947c2bed1fc2332c73e78bf891a7da586aa4cba37632042071d43e35d7db6f966690d6e0f4931620d0d48e7de2609484a4e60e410b6bd82ccd98c66eea637640217c8e8645aec37089e741ff17f0f322e5010857b166", 0x5f, 0x3) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) r8 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) minherit(&(0x7f00006bc000/0x1000)=nil, 0x1000, 0x0) ioctl$TIOCSETA(r8, 0xc0884450, &(0x7f0000000040)={0xfffffffd, 0xe4c2, 0xd8c, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x0, 0xe}) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x34}, 0x4, &(0x7f0000000140), 0x0, 0x0, 0x0) 12.437750981s ago: executing program 5 (id=41): kevent(0xffffffffffffffff, &(0x7f0000000280)=[{{}, 0xfffffffffffffff9, 0x39, 0x10, 0xfffffffffffffffd, 0x3}], 0x0, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000001c0), 0x84, 0x0, 0x9319, 0x0) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x1}, 0x2, 0x0, 0x0, &(0x7f0000000080), 0x0) 12.390699898s ago: executing program 5 (id=45): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/204, 0xcc}], 0x1) (async) r2 = syz_open_pts() ioctl$TIOCSTAT(r2, 0x20007465, 0x0) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x7) (async, rerun: 64) ioctl$TIOCDRAIN(r2, 0x2000745e) (rerun: 64) syz_open_pts() (async) writev(r1, &(0x7f0000000080), 0x0) 7.128490884s ago: executing program 5 (id=174): r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/250) msgget$private(0x0, 0x0) (async) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/250) (async) 7.049569868s ago: executing program 5 (id=178): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2}) openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_pts() (async) r2 = syz_open_pts() syz_open_pts() syz_open_pts() fchflags(r2, 0x0) (async) fchflags(r2, 0x0) setrlimit(0x3, &(0x7f0000000740)={0x100000, 0x100000}) (async) setrlimit(0x3, &(0x7f0000000740)={0x100000, 0x100000}) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/202, 0xca}], 0x1, 0x0}, 0x40) sendmmsg(r1, &(0x7f0000000200)={0x0}, 0x10, 0x0) ioctl$WSMUXIO_ADD_DEVICE(0xffffffffffffffff, 0x4004667b, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$VNDIOCCLR(r4, 0x80384601, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', 0x6, &(0x7f0000000180)='./file0\x00', 0x8}) ioctl$BIOCGHDRCMPLT(r3, 0x40044274, &(0x7f0000000080)) (async) ioctl$BIOCGHDRCMPLT(r3, 0x40044274, &(0x7f0000000080)) syz_open_pts() (async) syz_open_pts() 3.767261562s ago: executing program 6 (id=246): writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="5bc100eb5b", 0x5}, {&(0x7f0000000300)="a2f5ad7ca659220f07551c7dffafc8fbf50912cf091fdac0b96076adde04534863058a52630178b48bdf999ced7a85a305c4d59fd8cccac54691f52827e8098945a532f6c62d745720", 0x49}], 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x8000000000008000}, {0x1, 0x8000}}, 0x0) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x8000, 0x121) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) mquery(&(0x7f00000f5000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x9) setsockopt(r2, 0x1000000029, 0x31, &(0x7f0000000200)="b2111f170d816685c8e360f2faae3cd7f3a2840ed6f5aad2dd197a177c1eedc9073dc90142a8429cbe7868de45ed3fc33719ca6df71ece5b4ba3c8a918beef2c10a1f8de1a5a6f4fe180e9cb9b21f9982230f575295d4888a9b6921796b2dd92fc9175680b37ba06002c15e6d7c91b8ed900ab006ddfb67869b51a2216114d0000000000000100"/144, 0x90) sendmsg(r1, &(0x7f00000005c0)={&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x10}, 0x0) nanosleep(&(0x7f00000025c0), 0x0) r3 = getpid() ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000080)={0x3, 0x3, {0x4, 0xffffffff}}) ktrace(&(0x7f00000002c0)='./file0/file0\x00', 0x1, 0x40000e38, r3) r4 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) fcntl$setown(r4, 0x6, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x8, 0x0) sysctl$net_inet_ip(&(0x7f0000000180)={0x4, 0x2, 0x0, 0x17}, 0x4, 0x0, 0x0, &(0x7f0000000480)="1e151e444b079a30646db4463b0000", 0xf) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r5, 0x0) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r6 = syz_open_pts() close(r6) r7 = socket(0x11, 0x3, 0x0) sendto$unix(r7, &(0x7f0000000140)="b10005136000009f05003e0800000000331c13fecea10500fef96ecfc72fd3357a068d02bc31a3a5673039d2d236acf20b7804be38164991f7cccf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8faff0037282112000000720fd38bfbb770c1f5a872c881e2772ec5a10400000000000000361b1257aea8c5d0002012000000000000880d6633c556ae9b287948a62310db415f779642cdcd71a3f8343712051e", 0xb1, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r8 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$FIONBIO(r8, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0x4) 3.766922809s ago: executing program 6 (id=247): r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x6, 0x8, &(0x7f0000000040), 0x0) unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') 3.688994631s ago: executing program 6 (id=248): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x248e, 0x1, 0xffff, 0x1, 0x24, 0xe, 0x0, 0x1, 0x2, 0x801, 0x8000f1a}) r0 = socket(0x18, 0x2, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005016000009f05000000070000007d9113fecea10500fef96ecfc72fd3357a068da3a5673039d2d236acf20b7804be38164991f7cccf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f45335c223e7d026ba8af630037282112000000720fd38bfbb770c1f5a872c881", 0x72, 0x0, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x2, 0x8, 0xd5, "00000000000000000000001500", 0x3, 0xff}) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) ioctl$VMM_IOC_INTR(r1, 0xca605601, &(0x7f0000000040)={0xb, 0x0, 0x200d}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1a90, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x18b, 0x3fd}, 0x400000000001006, 0x1000, 0xffffffffffffffff, 0x0, 0x3ffffffff, 0x10005, 0x8490}) r2 = socket(0x18, 0x2, 0x0) close(r2) r3 = socket(0x800000018, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000000c0)={0x0}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r4 = socket(0x800000018, 0x1, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r2, 0x20}], 0x1, 0x10000) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, 0x0, 0x0) poll(&(0x7f0000000040)=[{}], 0x38, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x89, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x104, 0x7}, 0x7, 0x2}) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r5 = socket(0x1, 0x2, 0x0) select(0x40, &(0x7f0000000200)={0x5, 0x8, 0xf57, 0xc4, 0x2, 0x9, 0x87, 0x2}, &(0x7f0000000240)={0x100000001, 0x0, 0x3, 0x3, 0x9671, 0x3, 0x94b000000000, 0xff80000000000000}, &(0x7f0000000280)={0x5c6, 0x424, 0x4, 0x8000000000000001, 0xffffffffffffffff, 0x4}, &(0x7f00000002c0)={0x0, 0x2}) setitimer(0x0, &(0x7f0000000000)={{0x8, 0x1}, {0x9, 0xb}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getitimer(0x0, 0x0) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) 2.542304032s ago: executing program 2 (id=257): openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x8, 0x0) mknod(0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) close(r0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000100)={0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x8, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$FIONREAD(r1, 0x8020690c, &(0x7f00000001c0)) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x1, 0x0) fcntl$lock(r2, 0x8, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) socket(0x11, 0x0, 0x0) sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x800000018, 0x2, 0x0) shmctl$IPC_RMID(0x0, 0x0) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x29, 0xe, &(0x7f0000000000)="02000000", 0x4) fchmod(r4, 0x4) dup2(r4, r3) listen(r3, 0x0) 2.536136048s ago: executing program 6 (id=259): syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900483a0000000000000000000000000000000000fe8000000000000000000000000000aa02009078000000006006c33e00000000fe8000000000000000000000000000aaff0200000000af7d6fc8dd369b25c50000000000000000000188010000000000000100c2"]) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900483a0000000000000000000000000000000000fe8000000000000000000000000000aa02009078000000006006c33e00000000fe8000000000000000000000000000aaff0200000000af7d6fc8dd369b25c50000000000000000000188010000000000000100c2"]) (async) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) (async) 2.46068234s ago: executing program 3 (id=261): mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x202) mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x202) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus\x00') sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000040)="0003521e", &(0x7f0000000000)=0x4, &(0x7f0000000100)="89dac0066da8b0f25550f3bd1bfa0c237dbfc06cb1305c916cf88274514ec3bbadcc1a7be55741c78cfeb6c2cd71e8264f0570f2fb5454663be3ca28edca54480000000023022edfebab519a1789c8a565a7937ff450bd249288ab91dee2c97f2ec00ca3b4bb4e44228a2fc462bd20f5c0c07286d2b447b7ca08aa1e337fffa8be25c1c8be991ff130d1a3d6", 0x8c) 2.455943522s ago: executing program 3 (id=264): sysctl$kern(&(0x7f0000000080)={0x1, 0x50}, 0x2, &(0x7f00000000c0)="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", &(0x7f0000000000)=0x235, &(0x7f0000000300)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555c020f0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdcfa0bd1c59ba3ccbad6c8af80516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110e701b5aca715b809db12bb3a673713716cdf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c70000008000000000fa455013521f98686e472b70b560f7021f567a", 0xee) 1.241494774s ago: executing program 2 (id=265): socket(0x18, 0x2, 0x0) ktrace(&(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r1, 0x8, &(0x7f0000000000)={0x0, 0x1, 0xfffffffffdfffffd, 0x1000300010008}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) flock(r1, 0x1) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) syz_emit_ethernet(0x66, &(0x7f00000011c0)={@broadcast, @random="e04b1c561ac4", [], {@ipv6={0x86dd, {0x0, 0x6, "36e282", 0x30, 0x3b, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "5adf00", 0x0, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast1}}}}}}}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r3, 0x20006473, 0x0) r4 = socket(0x18, 0x2, 0x0) r5 = kqueue() sysctl$hw(0x0, 0x0, &(0x7f0000000100)="9076304e", 0x0, 0x0, 0x0) kevent(r5, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) ioctl$FIONREAD(r4, 0x8020697a, &(0x7f00000001c0)) close(r4) r6 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) acct(&(0x7f0000000180)='./file0\x00') select(0x40, &(0x7f0000000040)={0xfd}, 0x0, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(r6, 0x80185760, &(0x7f0000000140)={0x0, 0x0, {0x9}}) select(0x2f, &(0x7f0000000040), &(0x7f0000000080)={0x4000000000000008}, 0x0, 0x0) 1.228331154s ago: executing program 6 (id=266): setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54}) (async) r0 = syz_open_pts() close(r0) (async) syz_open_pts() (async) chmod(&(0x7f0000000040)='./file0\x00', 0x3a) (async) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd6009000000200600030000000000000037f87ccdc0c4a92cff0000000001ea443d080000000001004e204e22", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB='[B']) (async) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000040)="2c6a7edc62", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) (async) ioctl$TIOCSETD(r0, 0x8004745f, &(0x7f0000000000)=0x1d) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') 1.227295811s ago: executing program 0 (id=268): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x25, 0xd, 0x0, 0x4}, {0x6, 0x30, 0x2}]}) (async) r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x400000000002, 0x0) setsockopt(r1, 0x0, 0x21, &(0x7f0000000180)="b1f5d915", 0x4) dup2(r1, r0) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffa22e6c7c}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) bind(r0, &(0x7f0000000000), 0x10) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) (async) sendmsg$unix(r2, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) (async) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="741e5c96840caf00000000000504000cce20095d8a6acf00537ac20ea10385", &(0x7f0000000080)=0x1f, 0x0, 0x0) (async) sysctl$net_inet_udp(&(0x7f0000000000), 0x4, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) sysctl$kern(&(0x7f0000000000), 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) clock_getres(0x0, &(0x7f00000000c0)) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x74, 0x0, 0x37) 1.226316842s ago: executing program 6 (id=269): r0 = socket(0x11, 0x3, 0x0) socket(0x10, 0x3, 0xd) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0xfffffffc}, {0xb1, 0x10, 0x2}, {0x16, 0x7, 0x7f, 0x400f}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="d12ec4dc6aab4a7f", 0x8}], 0x1, 0x1000000) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e", &(0x7f0000000080)=0x3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @mcast2, {[], @udp={{0x0, 0x2, 0x8}}}}}}}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[{0x9, 0xc0, 0x6, 0x2}, {0x6, 0x6, 0xb0, 0xddb7}, {0x1, 0x10, 0x4, 0x9b}, {0x1, 0xf, 0x7, 0xd0}, {0x7ff, 0x9, 0x99, 0xf3c}]}) r2 = syz_open_pts() mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x7ffffffe, 0x4020003, "ff0107002015c8a32d00000065c0bdf9c6f04aaf", 0x2422, 0x24}) ioctl$TIOCSTAT(r2, 0x20007465, 0x0) sendto$unix(r0, &(0x7f0000000000)="b10005016000009f0500000007000000331c13fecea10500fef96ecfc72fd3357a068da3a5673039d2d236acf20b7804be38164991f7cccf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af630037282112000000720fd38bfbb770c1f5a872c881e2772ec5a10400000000000000361b1257aea8c5d0002012020000000000880d6633c556ae9be371a3f8343712051eeab71d89000407000000800420000000", 0xb1, 0x0, 0x0, 0x0) 1.225044559s ago: executing program 0 (id=270): syz_emit_ethernet(0x4e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000182c000000000000000000000000000000006a00000000000008"]) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="6dd8a48ff65faaaaaaaaaabb86dd6b26ad4f00000480fe80ec000000000000000000000000bb00000000000000000000ffff"]) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x4, &(0x7f0000000080)=[{0x25, 0x0, 0x1, 0x80000005}, {0xffff, 0xff, 0x21, 0x3}, {0x84, 0x20, 0x80, 0xc}, {0x6, 0x7f, 0x7, 0x1}]}) write(r0, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x4000191c, 0x0) syz_extract_tcp_res(&(0x7f0000000680), 0xffffd098, 0x9) link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.223671973s ago: executing program 3 (id=272): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x400000000000001e, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="01", 0x1) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSKBDIO_GETMAP(r0, 0xc010570d, &(0x7f0000000000)={0x0, 0x0}) syz_emit_ethernet(0x6a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000059006700000004009078000000004000fffcffff0000000000007f000001ac1400aa9400100001890f070000000080000200ffffffff830b09ac1400bbe0000002000000"]) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x2e) r1 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000280)={0x3, 0x0, 0x4000000000000001, 0x1000381010089}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) writev(r2, &(0x7f00000008c0)=[{&(0x7f00000007c0)='C', 0x1}], 0x1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r2, 0x0) pwrite(r2, &(0x7f0000001080)='q', 0x1, 0x9) execve(0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f00000006c0)={0x0, 0x4}, 0x10, 0x4) utimes(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)={{0xd7, 0x9}, {0x1, 0x7f}}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x400000000000001e, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) (async) sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="01", 0x1) (async) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) ioctl$WSKBDIO_GETMAP(r0, 0xc010570d, &(0x7f0000000000)={0x0, 0x0}) (async) syz_emit_ethernet(0x6a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000059006700000004009078000000004000fffcffff0000000000007f000001ac1400aa9400100001890f070000000080000200ffffffff830b09ac1400bbe0000002000000"]) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x2e) (async) open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) (async) fcntl$lock(r1, 0x9, &(0x7f0000000280)={0x3, 0x0, 0x4000000000000001, 0x1000381010089}) (async) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async) writev(r2, &(0x7f00000008c0)=[{&(0x7f00000007c0)='C', 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r2, 0x0) (async) pwrite(r2, &(0x7f0000001080)='q', 0x1, 0x9) (async) execve(0x0, 0x0, 0x0) (async) sendmmsg(r2, &(0x7f00000006c0)={0x0, 0x4}, 0x10, 0x4) (async) utimes(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)={{0xd7, 0x9}, {0x1, 0x7f}}) (async) 1.05099455s ago: executing program 0 (id=273): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00001f8000/0x1000)=nil, 0x1000, 0x4) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)={{0x8968, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1026}, 0x80000005a7, 0x4, 0x1000000000008}) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$WSDISPLAYIO_LSFONT(r0, 0xc058574e, &(0x7f0000000340)) r1 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) madvise(&(0x7f00002f6000/0x2000)=nil, 0x2000, 0x7) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) fsync(r2) syz_emit_ethernet(0xe8, &(0x7f0000000100)=ANY=[@ANYRES32=r2]) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x18881, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0284457, 0x0) sysctl$hw(&(0x7f0000001180)={0x7, 0x1}, 0x40000000000002dc, 0x0, 0x0, &(0x7f0000000240)="a95301095221178776abe00c0669b643d9af2a0f98260500903480f27b556a0b57a93d8e01c9b3bed51ab6ee32dbc875758c2ed93ce3073d00dadbbd8ee82d2b212eaee2cd82e68c2e3a614b6cabfaf7520d9cddfb3b19c2b66eed7ce68e1205bf98b61afc69dd857a44203ce717fad20b41504b9d3b76ddb632691df1bdd263bf6c77373cd39c7411fc363b6502e20c70261e0733831e9eb857e6a51455d616b3d145aa32c7052c5bccecc1e8b7f8a57b195f6f635a3b297af4fef47fe75c031f40ef02790a08abc7deafa9157b50e2", 0xc7) r4 = semget(0x0, 0x4, 0x8) semctl$GETNCNT(r4, 0x2, 0x3, &(0x7f0000000180)=""/61) ioctl$TIOCSETA(r3, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffd, 0x5, "52c9795a6b476ed1fffffffffffffff000000008", 0x2000000, 0x271}) 1.044928246s ago: executing program 0 (id=277): socket(0x18, 0x2, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x287e) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r0, 0x27}], 0x1, 0x0) close(r0) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) acct(&(0x7f0000000040)='./file0\x00') ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x310, 0x0) 912.410539ms ago: executing program 3 (id=279): r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x800, 0x0, 0x0) r1 = socket(0x18, 0x1, 0x5) setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff}) r2 = getpid() r3 = open$dir(&(0x7f0000000200)='./file0\x00', 0x10000, 0x12) r4 = getuid() fchown(r3, r4, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000180)={r2, r4, r5}, 0xc) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0xffffffffffffff7b}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r6 = socket(0x2, 0x3, 0x0) sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x2, 0xf0}, 0x4, 0x0, 0x0, 0x0, 0x0) seteuid(0xffffffffffffffff) r7 = syz_open_pts() ioctl$TIOCSETD(r7, 0x8004741b, &(0x7f00000000c0)=0x8) sysctl$hw(&(0x7f0000001180)={0x7, 0xf}, 0x2, 0x0, 0x0, &(0x7f00000003c0), 0x4) r8 = socket(0x18, 0x1, 0x0) setsockopt(r8, 0x1000000000029, 0x27, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) open(&(0x7f0000000080)='./file0\x00', 0x400, 0x125) r9 = msgget$private(0x0, 0x0) msgsnd(r9, &(0x7f00000000c0)=ANY=[], 0x27, 0x0) shutdown(r1, 0x0) syz_emit_ethernet(0x138, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r6, &(0x7f0000000000), 0x10) 902.343757ms ago: executing program 1 (id=280): munmap(&(0x7f00005d1000/0x2000)=nil, 0x2000) r0 = shmget$private(0x0, 0x3000, 0x24, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f00003f9000/0x4000)=nil, 0x2800) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x96dba8100d9a48bd) shmat(r0, &(0x7f000010a000/0x4000)=nil, 0x3000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000003c00), 0x820, 0x0) fcntl$lock(r1, 0x9, 0xffffffffffffffff) r2 = syz_open_pts() ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000040)=0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000140)=0x8) setuid(0xee01) chdir(&(0x7f0000000100)='./file0\x00') ioctl$TIOCDRAIN(r2, 0x2000745e) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x2, 0x3, 0x0) dup2(r4, r5) setsockopt$sock_int(r5, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) write(r5, &(0x7f0000001680)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0x1001c) ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105728, &(0x7f00000001c0)={&(0x7f00000000c0)=[{0x101}], 0x1}) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) symlink(&(0x7f0000000240)='./file3\x00', &(0x7f00000002c0)='./file2\x00') shmctl$SHM_LOCK(r0, 0x3) openat$vmm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='./file3\x00') 901.647381ms ago: executing program 1 (id=282): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x45d48) ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x40000846, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x80206999, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x2008, 0x412dfc) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000000)={&(0x7f00000000c0)='./file0\x00', 0xcd, 0x0}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x45d48) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x40000846, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) socket(0x1, 0x2, 0x0) (async) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async) socket(0x18, 0x3, 0x0) (async) ioctl$FIONREAD(r1, 0x80206999, &(0x7f0000000100)) (async) mknod(&(0x7f0000000180)='./file0\x00', 0x2008, 0x412dfc) (async) openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000000)={&(0x7f00000000c0)='./file0\x00', 0xcd, 0x0}) (async) 836.297363ms ago: executing program 3 (id=284): sysctl$kern(&(0x7f0000000040)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000000080), 0x0) (async) mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000) (async) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000000000)={0x0, 0x2}, 0x10, 0xe) (async) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)=""/132, 0x84}, {&(0x7f0000000500)=""/30, 0x1e}, {&(0x7f0000000540)=""/63, 0x3f}, {&(0x7f0000000580)=""/60, 0x3c}], 0x4, 0x0}, 0x840) (async) r3 = shmget$private(0x0, 0x4000, 0x317, &(0x7f00003e5000/0x4000)=nil) setuid(0xffffffffffffffff) syz_emit_ethernet(0x2e, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0]) socket(0x18, 0x2, 0x0) (async) r4 = socket(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000180)={0x0}, 0x10, 0x0, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BIOCSETIF(r5, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) (async) select(0x40, &(0x7f0000000140)={0x3ff, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000080)={0x16, 0x0, 0x2, 0x20000000000000, 0x7, 0x4, 0x10000000000000}, 0x0, 0x0, 0x0) (async) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffdfffb, 0x0, 0x7}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) sysctl$net_inet_tcp(&(0x7f0000000040)={0x7, 0x2, 0x2, 0xa0000217}, 0x4, 0x0, 0x0, 0x0, 0x1e) (async) r6 = socket(0x11, 0x3, 0x0) sendto$unix(r6, &(0x7f0000000180)="b10005166000009f050000002010000000000000cea10500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4de57804be38164991f7c8cf5f882b297be1aa5b23edeb51d851f307000000599a1f139b672f4d335d223e7db3008b95665bc6fc211800000000018000000000000000000181ea772ec5890405b3b9c2668396f4cd1257aea8c500002002fbfc0cba0800000008e37f71a3f834173712051eea080089e000040381ecb66400000000000000", 0xb1, 0x40e, 0x0, 0xffffffffffffff8c) (async) socket(0x18, 0x2, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) (async) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r8 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCMAP(r8, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r7, 0x2}) close(r7) (async) acct(&(0x7f0000000040)='./file0\x00') 703.569649ms ago: executing program 3 (id=287): recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/528}, 0x212, 0x0, 0x0, 0x0}, 0xfffffffd}, 0x10, 0x0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x40, 0x0) setsockopt(0xffffffffffffffff, 0x1000000029, 0x3f, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x10, 0x4ebfac6bbaf7929) writev(r0, 0x0, 0x0) r1 = semget$private(0x0, 0x2, 0x440) semop(r1, &(0x7f00000000c0)=[{0x0, 0x2, 0x1800}, {0x0, 0x3fe, 0x1000}], 0x2) socket(0x18, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x1, 0x1, 0x3a) r2 = semget(0x0, 0x1, 0x200) semop(r2, &(0x7f00000000c0)=[{0x3, 0xb, 0x2800}, {0x1, 0x8, 0x800}], 0x2) select(0x40, &(0x7f0000000140)={0x3ff}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000000080)={0x0}, 0x10, 0x0) 471.810258ms ago: executing program 1 (id=299): writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r3 = open(&(0x7f0000000040)='./file0\x00', 0x8, 0x12f) getdents(r3, 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r5 = socket(0x2, 0x1, 0xfd) ioctl$FIONREAD(r5, 0x80206916, &(0x7f00000001c0)) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r6 = socket(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000040)="ed", 0x1) recvmmsg(r8, &(0x7f0000000880)={&(0x7f0000000580)={0x0, 0x38, &(0x7f0000000ac0)=[{&(0x7f00000005c0)=""/196, 0xc4}], 0x57, 0x0}}, 0x10, 0x42, 0x0) readv(r8, &(0x7f0000000300), 0x41) recvfrom(r8, 0x0, 0x0, 0x1046, 0x0, 0x0) close(r7) ioctl$FIONREAD(r6, 0x802069dd, &(0x7f00000001c0)) ioctl$BIOCGSTATS(r4, 0x4008426f, &(0x7f0000000080)) close(r0) 307.695906ms ago: executing program 4 (id=300): mknod(&(0x7f0000000280)='./file0\x00', 0x40, 0x8) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r1 = socket(0x800000018, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x1, 0x1, 0xffffffffffffffff, 0x20001ffffffff}) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1a0) fcntl$setown(r2, 0x6, 0x0) 306.195974ms ago: executing program 4 (id=301): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x3ff) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x81) socket(0x800000018, 0x1, 0x0) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x5, r1, r2, 0x0, 0x0, 0x18, 0x1}, 0x6, 0x400001, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x9}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x2, 0x2, 0x2, 0x7}) r4 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, 0x100000002}) bind$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0xa) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2}, 0x7, 0x85d, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x3, 0x4}) r5 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) 304.856134ms ago: executing program 2 (id=302): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, 0x0, 0x0, 0x2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000480)=""/253, 0xfd}], 0x1, 0x0}, 0x6}, 0x10, 0x40, 0x0) close(r1) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r1, r1) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r2, 0x0) execve(0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) accept$inet6(r3, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x1000000029, 0x1a, &(0x7f0000000000)="02000000", 0x4) syz_emit_ethernet(0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd606a9efb00075000cb697a653e2c6f000000500000000000fe80000000000000000000000000493900aa5701ffeb5eeb70"]) r5 = socket(0x2, 0x3, 0x64) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0xfffffffc}, {0xb1, 0x10, 0x2}, {0x16, 0x7, 0x7f, 0x400f}]}) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f95f84cf71b59c7afec375", &(0x7f0000000080)=0xc, 0x0, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r6, &(0x7f0000000200)="d806010016de3e086e6555330780bc54bb37d5a900000100004700000002", 0x1e) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f00000002c0)={&(0x7f0000000280)='./bus\x00', 0x8001, 0x0}) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x8) preadv(r7, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) bind(r5, &(0x7f0000000180)=@un=@abs={0x0, 0x0, 0x0}, 0x8) chmod(0x0, 0x10) syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x38, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x6, 0x3a, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @loopback, [@hopopts={0x1}]}}}}}}}) 304.097042ms ago: executing program 2 (id=303): r0 = socket(0x18, 0x1, 0x0) socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x40, &(0x7f0000000000), 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) 303.326055ms ago: executing program 4 (id=304): setuid(0xee01) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000001c0), 0x8, 0x0) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000240)={'./file0\x00', 0x3, 0x800, 0x100, 0x1, 0xae, 0x4, 0xffffffc0, 0x0, 0x1, 0xff, 0x8001}) (async) r1 = syz_open_pts() ioctl$TIOCSPGRP(r1, 0x40047477, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = dup(r2) open(&(0x7f00000002c0)='./bus\x00', 0x20000, 0x0) (async) ioctl$BIOCSBLEN(r3, 0xc0044266, &(0x7f0000000300)) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async) pread(r3, &(0x7f00000000c0)="69c4a504afb20e1d56d5f4bec16cb0bd7fdf2d40c4c77dd1ef23227efe9498ae", 0x20, 0x80) (async) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000000040)=""/17, 0x11}], 0x2) (async) ioctl$BIOCSRTIMEOUT(r3, 0x8010426d, &(0x7f0000000140)={0x0, 0xe}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[]) (async) sysctl$kern(&(0x7f0000000080)={0x1, 0xa}, 0x2, &(0x7f0000001940), 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x10004, &(0x7f0000000300)=ANY=[]) (async) socket(0x20, 0x4000, 0x6) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) (async) r4 = socket(0x18, 0x3, 0x0) close(r4) (async) r5 = socket(0x800000018, 0x2, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0xf56c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x30, 0x8}, 0xfffffffffffffffb, 0x7, 0x0, 0x0, 0x8, 0x6, 0x6, 0xcb5}) (async) bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x7}, 0xfffffffffffffd2f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r6 = dup2(r4, 0xffffffffffffffff) sendmsg$unix(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async) setgid(0xffffffffffffffff) (async) mknod(&(0x7f0000000200)='./bus\x00', 0xbffab6d3d3d32fb2, 0x205) 260.102666ms ago: executing program 1 (id=305): setreuid(0xee00, 0x0) writev(0xffffffffffffff9c, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = getuid() setreuid(0xee00, r0) unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='c\x00') setreuid(0xee00, 0x0) (async) writev(0xffffffffffffff9c, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) getuid() (async) setreuid(0xee00, r0) (async) unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='c\x00') (async) 252.488351ms ago: executing program 2 (id=306): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) minherit(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) r0 = kqueue() kevent(r0, &(0x7f0000000080)=[{{r0}, 0xffffffffffffffff, 0x8a, 0x2, 0x20b2, 0x7}, {{r0}, 0x0, 0x0, 0x4, 0x100, 0x4}, {{0xffffffffffffff9c}, 0xfffffffffffffffa, 0x5c, 0x20000000, 0x8, 0x7ff}, {{r0}, 0xfffffffffffffff8, 0x1, 0x4, 0x400000066, 0x8}], 0x408d, &(0x7f0000000600), 0x8000, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) r3 = socket(0x1e, 0x3, 0x0) getpeername$unix(r3, 0x0, &(0x7f0000000100)) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x310, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1001, &(0x7f0000001740)={0x6, 0x3b9aca00}) ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f0000000000)={0x15b2f5012f9d0c2f, &(0x7f0000000140)=[{0x4}, {0x3, 0x0, 0x0, 0x1000082}, {0x2, 0xa6, 0x9, 0x6}, {0x1, 0x6, 0x67, 0x800}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) ioctl$TIOCSETA(r1, 0xcd50441a, &(0x7f0000000040)={0x4, 0x2, 0x3e, 0x0, "0057003e00080000000000000400", 0x3, 0xff}) syz_emit_ethernet(0x92, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f00003e8000/0x2000)=nil, 0x2000, 0x3) r4 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000080)="0315f1d89ec5a317a9357682", 0xc) munlock(&(0x7f0000ff6000/0x4000)=nil, 0x4000) socket(0x2, 0x2, 0x0) ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000140)={0xb, 0x3d6, 0x216, 0x1926, "d5c42567e637b8868c9c330405890a414e2a89c3", 0x6, 0x80000001}) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x4) open(&(0x7f00000002c0)='./file0\x00', 0x710, 0x0) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x20) close(r5) 252.155213ms ago: executing program 0 (id=307): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0xf) setreuid(0xee00, 0x0) r0 = getuid() r1 = msgget$private(0x0, 0x14) r2 = getegid() r3 = shmget$private(0x0, 0x3000, 0x5a5, &(0x7f0000ffd000/0x3000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000100)={{0x2, 0x0, 0x0, 0x0, r5, 0x0, 0x4}, 0x1, 0x4, 0x0, 0x0, 0x2940, 0x101, 0x5}) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000180)={0x0}, 0xc) msgctl$IPC_SET(r1, 0x1, &(0x7f00000001c0)={{0x14, r0, r2, r0, r5, 0x110, 0xffff}, 0xffffffffffffffff, 0x9, r6, 0xffffffffffffffff, 0x2, 0x9, 0x1000, 0x1}) r7 = getuid() chown(&(0x7f0000000040)='./file0\x00', r7, 0xffffffffffffffff) setreuid(0xee00, r0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r8 = open$dir(&(0x7f0000000100)='./file0\x00', 0x20000, 0x0) mknodat(r8, &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x20, 0x2) select(0xe, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x40000, 0x100, 0x3560000000000, 0x0, 0x80000000000000}, &(0x7f0000000300)={0xcea, 0x20000, 0x80000002, 0x1, 0x1, 0x80, 0x80000000000001, 0xfffffffffffffffe}, 0x0, 0x0) rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') 250.010302ms ago: executing program 4 (id=308): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$WSDISPLAYIO_DELFONT(r0, 0x8058574f, &(0x7f0000000040)={'./file0\x00', 0xf, 0xd18, 0x0, 0x0, 0x3, 0xcb95, 0x8000, 0x2, 0x2, 0x1, 0x9}) syz_emit_ethernet(0x41, &(0x7f0000000400)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0xb, 0x11, 0x0, @rand_addr="fed3060006000000cd0c535a9800", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x0, 0x2, 0x8}, {"be3dae"}}}}}}}) 28.687535ms ago: executing program 1 (id=309): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x310, 0x0) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x2010, r0, 0x80000000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SPKRTONE(r3, 0x80085301, &(0x7f00000000c0)={0xfffffffd, 0x9}) (async) readv(r2, 0x0, 0x0) (async) write(r1, &(0x7f00000000c0)="c3", 0xffffffed) (async) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x34}, 0x4, 0x0, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) (async) open(0x0, 0x80000000000206, 0x4ebfac6bbaf7878) (async) r4 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_int(r4, 0xffff, 0x0, 0x0, 0x0) (async) close(0xffffffffffffffff) 28.17038ms ago: executing program 4 (id=310): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x81, 0x0, 0x4, 0x4}, {0x4, 0x0, 0x1, 0x444}, {0x6, 0x0, 0x0, 0x401}]}) sysctl$kern(&(0x7f0000000400)={0x1, 0x28}, 0x2, 0x0, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000180)={0x40978b, 0x10001, 0xfffffc03, 0x80a1a0, "bb08000100f167d910508bc49d7323000000007e"}) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) execve(0x0, 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xa) close(r2) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x4) setuid(0xee01) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r4, 0x80206982, &(0x7f00000001c0)) ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f0000000140)={0xffffffff, 0x0, 0xfffffff0, 0x1, "8b030003000100787d902b56d864d3c3a3f4d3c9"}) bind$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x1}, 0x8) sendto$unix(r3, &(0x7f0000000040)="b1000501600000000200000007000000110002000000000000f96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236de351e21e000000c257699a5f139b020000005d223e7d026ba80163003728210200d38bfbb770c1f5a872c881ea6e69e0bb76d907c400000000361f1257aea8c500002002f2ff0c2300008abfba0900000008e3710002000000000000b71d89e000040781e4b2feff0000fa00000000", 0xb1, 0x409, 0x0, 0x0) 23.306677ms ago: executing program 1 (id=311): open(&(0x7f0000000180)='./file0\x00', 0x75f493fec6515f78, 0x0) (async) listen(0xffffffffffffffff, 0x4) shutdown(0xffffffffffffffff, 0x2) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000000), 0x10) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) (async) socket$inet(0x2, 0x2, 0x0) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0xd61a87e96fe4a75a, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) getpid() (async) setitimer(0x0, &(0x7f0000000080)={{0x0, 0x4}, {0x1, 0x6}}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000), 0x0) setitimer(0x0, 0x0, &(0x7f0000000200)) (async) utimes(0x0, 0x0) r2 = semget(0x0, 0x1, 0x2f3) semop(r2, &(0x7f0000000080), 0x26) (async, rerun: 64) semctl$IPC_RMID(r2, 0x0, 0x0) (rerun: 64) 4.001311ms ago: executing program 2 (id=312): openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) bind(r0, &(0x7f0000000000)=@in6={0x18, 0x1, 0x9, 0x221}, 0xc) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0xfffffffc}, {0xb1, 0x10, 0x2}, {0x16, 0x7, 0x7f, 0x400f}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="01", 0x1) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSKBDIO_GETMAP(r2, 0xc010570d, &(0x7f0000000000)={0x0, 0x0}) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x50, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @mcast2, {[], @udp={{0x0, 0x2, 0x8}}}}}}}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000140)="0200001ec66f9ed4030e23f8", 0xc}, {&(0x7f0000000040)="146137728a3122e62ff4af6d88b9620237ceb4c1e64feb16e7fe5d9d0855495ae0015fb761ae929776cd8e0d56bda9e04f6ed66dbf015d4b0c5883bf8adc8a8bf5070088516c1b28fcc8a1bec33b5231e236c15d55a99dc4887bef0c52e353f86e5055dba44a0eacf46ce9dc3f8432be0e51ff014738cb145c1b604143e4b45ed9c2ce3182", 0x85}], 0x2) 1.253178ms ago: executing program 0 (id=313): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0xf900000000000002, 0x2, 0x4}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) sysctl$kern(&(0x7f00000001c0)={0x1, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) r1 = socket(0x2, 0x2, 0x0) dup2(r1, r0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) sysctl$kern(&(0x7f0000000180)={0x1, 0x48}, 0x2, &(0x7f00000001c0), 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) read(r3, 0x0, 0x0) (async) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000040)='./file0/file0\x00', 0x46abc7a5, &(0x7f0000000080)='./file0/file0/file0\x00', 0x14}) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0/file0\x00', 0x0, 0xfffffde2, 0xffff, 0x0, 0x24, 0xf, 0x1, 0x0, 0x0, 0x1, 0xf1a}) r4 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) (async) r5 = socket(0x18, 0x3, 0x0) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) setitimer(0x0, &(0x7f0000000140)={{0x4, 0x240000009}, {0x7fefffffffffffff, 0x7014}}, 0x0) getsockname$unix(r2, &(0x7f0000000200)=@file={0x0, ""/505}, &(0x7f0000000400)=0x1fb) (async) ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000100)) 0s ago: executing program 4 (id=314): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x2, 0xf) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x6}, 0x10, 0x800, 0x0) setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x9, 0x8, 0x4, 0x6, "b8cdb906bc833ae1371727904be306a088881562", 0x0, 0x6272}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. pckbd_enable: command error uvn_flush: obj=0xfffffd80619e40d8, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error uvn_flush: obj=0xfffffd8061a23ac8, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error kernel: protection fault trap, code=0 Stopped at sys_semop+0x45b: movzwl 0(%rax),%r15d ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic the kernel did not panic ddb{0}> trace sys_semop(ffff8000394cf9d8,ffff80003c5022c0,ffff80003c502210) at sys_semop+0x45b syscall(ffff80003c5022c0) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x704aff2fd50, count: -3 ddb{0}> show registers rdi 0 rsi 0 rbp 0xffff80003c5021e0 rbx 0 rdx 0 rcx 0xffff8000394cf9d8 rax 0xdeaf4152deaf4152 r8 0x7f7fffffc000 r9 0 r10 0xba9c14df98839f2 r11 0x4425eb9308d9fcdb r12 0xffff80000149e504 r13 0 r14 0xffff80003c5022c0 r15 0 rip 0xffffffff82fe591b sys_semop+0x45b cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c5020c0 ss 0x10 sys_semop+0x45b: movzwl 0(%rax),%r15d ddb{0}> show proc PROC (syz-executor) tid=486282 pid=81729 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=80, usrpri=80, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000394ce558,0xffff8000394cfc78 process=0xffff80003c526240 user=0xffff80003c4fd000, vmspace=0xfffffd806beab738 estcpu=30, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 96399 316121 19050 0 7 0 syz-executor 96399 335100 19050 0 2 0x4000000 syz-executor 81729 272941 9542 0 2 0 syz-executor *81729 486282 9542 0 7 0x4000000 syz-executor 81729 81702 9542 0 2 0x4000000 syz-executor 81729 276484 9542 0 2 0x4000000 syz-executor 27483 190585 7665 0 3 0x80 nanoslp syz-executor 27483 518936 7665 0 3 0x4000080 kqsel syz-executor 27483 370787 7665 0 3 0x4000080 fsleep syz-executor 73560 1889 0 0 3 0x14280 nfsidl nfsio 68529 292202 0 0 3 0x14280 nfsidl nfsio 76410 265737 0 0 3 0x14280 nfsidl nfsio 64026 110689 0 0 3 0x14280 nfsidl nfsio 60613 243194 0 0 3 0x14280 nfsidl nfsio 24341 300261 0 0 3 0x14280 nfsidl nfsio 88786 499790 0 0 3 0x14280 nfsidl nfsio 39014 218398 0 0 3 0x14280 nfsidl nfsio 23272 380379 0 0 3 0x14280 nfsidl nfsio 3415 500552 0 0 3 0x14280 nfsidl nfsio 94488 449415 0 0 3 0x14280 nfsidl nfsio 87391 487961 0 0 3 0x14280 nfsidl nfsio 53343 230340 0 0 3 0x14280 nfsidl nfsio 9262 281671 0 0 3 0x14280 nfsidl nfsio 93729 70348 0 0 3 0x14280 nfsidl nfsio 92566 2482 0 0 3 0x14280 nfsidl nfsio 53649 501882 0 0 3 0x14280 nfsidl nfsio 11504 75052 0 0 3 0x14280 nfsidl nfsio 26580 245115 0 0 3 0x14280 nfsidl nfsio 88594 78834 0 0 3 0x14280 nfsidl nfsio 76805 417022 31370 0 3 0x3800 suspend syz-executor 76805 103459 31370 0 4 0x4081800 syz-executor 70698 221894 0 0 3 0x14200 bored sosplice 65722 154940 22934 0 3 0x100082 sbwait arp 22934 12631 11170 0 3 0x10008a sigsusp sh 11170 207567 11999 0 3 0x82 wait syz-executor 56997 124167 11999 0 2 0x482 syz-executor 31370 303862 11999 0 3 0x82 wait syz-executor 27306 422766 11999 0 2 0x2 syz-executor 7665 6232 11999 0 2 0x482 syz-executor 19050 229852 11999 0 2 0x482 syz-executor 9542 233857 11999 0 3 0x82 nanoslp syz-executor 25837 266576 11999 0 2 0x2 syz-executor 11999 16647 6062 0 2 0x2 syz-executor 6062 79777 84378 0 3 0x10008a sigsusp ksh 84378 329175 51701 0 3 0x98 kqread sshd-session 51701 376117 78876 0 3 0x92 kqread sshd-session 58393 264968 1 0 3 0x100083 ttyopn getty 78876 445018 1 0 3 0x88 kqread sshd 69565 52258 7367 74 3 0x1100092 bpf pflogd 7367 141712 1 0 3 0x80 sbwait pflogd 11443 323960 91041 73 3 0x1100090 kqread syslogd 91041 458457 1 0 3 0x100082 sbwait syslogd 12138 284649 1 0 3 0x100080 kqread resolvd 66558 19053 93803 77 3 0x100092 kqread dhcpleased 69292 203389 93803 77 3 0x100092 kqread dhcpleased 93803 74650 1 0 3 0x80 kqread dhcpleased 47925 48420 0 0 3 0x14200 bored smr 46151 463442 0 0 2 0x14200 zerothread 25793 400428 0 0 3 0x14200 aiodoned aiodoned 90091 490903 0 0 3 0x14200 syncer update 43293 462381 0 0 3 0x14200 cleaner cleaner 19384 151995 0 0 3 0x14200 reaper reaper 45990 56549 0 0 3 0x14200 pgdaemon pagedaemon 65572 123150 0 0 3 0x14200 bored viomb 97820 284968 0 0 3 0x40014200 acpi0 acpi0 95495 276993 0 0 3 0x40014200 idle1 70199 218954 0 0 3 0x14200 bored softnet3 57585 247156 0 0 3 0x14200 bored softnet2 71146 158178 0 0 3 0x14200 bored softnet1 43613 465292 0 0 2 0x14200 softnet0 17037 333772 0 0 3 0x14200 bored systqmp 98727 296096 0 0 3 0x14200 bored systq 31178 113676 0 0 3 0x14200 tmoslp softclockmp 44565 467951 0 0 2 0x40014200 softclock 21659 491799 0 0 3 0x40014200 idle0 1 472840 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 96399 (syz-executor) thread 0xffff8000394cea78 (335100) exclusive rwlock vmmaplk r = 0 (0xfffffd806beab118) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 vm_map_lock_ln+0x12e #3 uvmfault_lookup+0xe8 #4 uvm_fault_check+0x987 #5 uvm_fault+0x106 #6 upageflttrap+0xa9 #7 usertrap+0x2d8 #8 recall_trap+0x8 Process 81729 (syz-executor) thread 0xffff8000394cf9d8 (486282) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff838f2bb0) #0 witness_lock+0x5bb #1 __mp_acquire_count+0x58 #2 mi_switch+0x4b7 #3 yield+0x6a #4 malloc+0xe5 #5 sys_semop+0x234 #6 syscall+0xb08 #7 Xsyscall+0x128 Process 81729 (syz-executor) thread 0xffff8000394cfc68 (81702) exclusive rwlock futex r = 0 (0xffffffff8385c338) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 sys_futex+0x69 #3 syscall+0xbc6 #4 Xsyscall+0x128 Process 27306 (syz-executor) thread 0xffff80002a39d728 (422766) exclusive rrwlock inode r = 0 (0xfffffd806f180520) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x283 #7 ufs_mkdir+0x113 #8 VOP_MKDIR+0x102 #9 domkdirat+0x179 #10 syscall+0xb08 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806c33b538) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 domkdirat+0x8b #8 syscall+0xb08 #9 Xsyscall+0x128 Process 25837 (syz-executor) thread 0xffff80002a39cf78 (266576) exclusive rrwlock inode r = 0 (0xfffffd80619d1ed8) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x283 #7 ufs_mkdir+0x113 #8 VOP_MKDIR+0x102 #9 domkdirat+0x179 #10 syscall+0xb08 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd807a585418) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 domkdirat+0x8b #8 syscall+0xb08 #9 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10198 11036K 11361K 166960K 11736 0 pcb 17 15K 16K 166960K 114 0 rtable 195 7K 9K 166960K 387 0 pf 34 17K 22K 166960K 85 0 ifaddr 37 6K 7K 166960K 59 0 ifgroup 51 2K 2K 166960K 91 0 sysctl 2 1K 1K 166960K 2 0 counters 62 36K 36K 166960K 88 0 ioctlops 0 0K 4K 166960K 1573 0 iov 0 0K 18K 166960K 23 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1333 84K 84K 166960K 1572 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 8 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 15 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 97K 166960K 437 0 sigio 0 0K 0K 166960K 3 0 proc 72 91K 128K 166960K 568 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 36 0 in_multi 77 5K 6K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 79 360K 360K 166960K 79 0 exec 0 0K 1K 166960K 417 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 223 72K 91K 166960K 5755 0 UVM aobj 21 2K 2K 166960K 23 0 pinsyscall 43 86K 109K 166960K 1506 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 12 0 NDP 11 0K 1K 166960K 36 0 temp 58 8639K 8764K 166960K 18597 0 kqueue 13 20K 28K 166960K 69 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 50 0 46 1 0 1 1 0 8 0 rtentry 112 123 0 38 4 0 4 4 0 8 0 unpcb 144 183 0 164 2 1 1 2 0 8 0 syncache 336 3 0 3 1 1 0 1 0 8 0 tcpcb 808 67 0 61 1 0 1 1 0 8 0 arp 120 21 0 5 1 0 1 1 0 8 0 inpcb 376 409 0 398 8 6 2 8 0 8 0 nd6 136 25 0 3 1 0 1 1 0 8 0 pkpcb 40 5 0 5 3 2 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1168 6 0 6 1 1 0 1 0 8 0 pffrag 232 4 0 2 1 0 1 1 0 482 0 pffrnode 88 4 0 2 1 0 1 1 0 8 0 pffrent 40 6 0 4 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 6 0 2 1 0 1 1 0 8 0 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 pfstitem 24 42 0 1 1 0 1 1 0 8 0 pfstkey 128 42 0 1 2 0 2 2 0 8 0 pfstate 376 42 0 1 5 0 5 5 0 8 0 pfrule 1344 23 0 17 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 504 0 136 27 3 24 27 0 8 0 art_table 32 505 0 136 4 0 4 4 0 8 0 art_node 16 121 0 45 1 0 1 1 0 8 0 sysvmsgpl 40 7 0 2 1 0 1 1 0 8 0 semupl 112 1 0 0 1 0 1 1 0 8 0 semapl 112 11 0 2 1 0 1 1 0 8 0 shmpl 112 20 0 2 1 0 1 1 0 8 0 dirhash 1024 21 0 4 3 0 3 3 0 8 0 dino2pl 256 2126 0 628 95 0 95 95 0 8 0 ffsino 280 2126 0 628 109 0 109 109 0 8 0 nchpl 144 2774 0 1095 63 0 63 63 0 8 0 uvmvnodes 80 2337 0 0 48 0 48 48 0 8 0 vnodes 216 2337 0 0 130 0 130 130 0 8 0 namei 1024 8956 0 8954 2 1 1 2 0 8 0 percpumem 16 58 0 13 1 0 1 1 0 8 0 pfiaddrpl 120 2 0 0 1 0 1 1 0 8 0 kstatmem 264 44 0 22 2 0 2 2 0 8 0 scsiplug 72 2 0 2 1 1 0 1 0 8 0 scxspl 216 8750 0 8750 4 3 1 2 1 8 1 plimitpl 152 105 0 87 1 0 1 1 0 8 0 sigapl 424 756 0 686 9 0 9 9 0 8 0 futexpl 64 4825 0 4823 1 0 1 1 0 8 0 knotepl 120 312 0 0 10 0 10 10 0 8 0 kqueuepl 216 140 0 130 3 2 1 3 0 8 0 pipepl 328 125 0 98 3 0 3 3 0 8 0 fdescpl 504 717 0 686 6 0 6 6 0 8 0 filepl 152 3464 0 3240 13 3 10 13 0 8 0 lockfpl 104 101 0 99 1 0 1 1 0 8 0 lockfspl 48 42 0 40 1 0 1 1 0 8 0 sessionpl 144 22 0 13 1 0 1 1 0 8 0 pgrppl 48 30 0 13 1 0 1 1 0 8 0 ucredpl 104 435 0 422 1 0 1 1 0 8 0 zombiepl 144 690 0 688 1 0 1 1 0 8 0 processpl 1168 756 0 686 6 0 6 6 0 8 0 procpl 656 1295 0 1218 8 0 8 8 0 8 0 srpgc 96 2 0 2 1 1 0 1 0 8 0 sockpl 688 654 0 620 9 5 4 9 0 8 0 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 5 0 0 1 0 1 1 0 8 0 mcl4k 4096 128 0 0 16 0 16 16 0 8 0 mcl2k 2048 29 0 0 4 0 4 4 0 8 0 mtagpl 96 10 0 0 1 0 1 1 0 8 0 mbufpl 256 218 0 0 14 0 14 14 0 8 0 bufpl 280 2993 0 131 205 0 205 205 0 8 0 anonpl 24 79491 0 76122 30 5 25 30 0 184 0 amapchunkpl 152 17173 0 16701 28 6 22 28 0 158 0 amappl16 200 635 0 604 7 4 3 6 0 8 0 amappl14 184 119 0 106 1 0 1 1 0 8 0 amappl13 176 2 0 2 1 1 0 1 0 8 0 amappl12 168 1345 0 1313 4 1 3 3 0 8 0 amappl11 160 48 0 34 1 0 1 1 0 8 0 amappl10 152 21 0 20 1 0 1 1 0 8 0 amappl9 144 253 0 253 1 1 0 1 0 8 0 amappl8 136 20 0 17 1 0 1 1 0 8 0 amappl7 128 103 0 89 1 0 1 1 0 8 0 amappl6 120 164 0 160 1 0 1 1 0 8 0 amappl5 112 135 0 126 1 0 1 1 0 8 0 amappl4 104 315 0 295 1 0 1 1 0 8 0 amappl3 96 3316 0 3206 4 0 4 4 0 8 0 amappl2 88 623 0 558 2 0 2 2 0 8 0 amappl1 80 8612 0 8017 15 1 14 15 0 8 0 amappl 88 5348 0 5186 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 2 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 22 0 2 1 0 1 1 0 8 0 uaddrrnd 24 717 0 686 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 717 0 686 1 0 1 1 0 8 0 vmmpekpl 168 7469 0 7428 3 0 3 3 0 8 0 vmmpepl 168 47923 0 46074 90 4 86 89 0 357 0 vmsppl 456 716 0 686 5 0 5 5 0 8 0 rwobjpl 64 16563 0 13238 54 0 54 54 0 8 0 pdppl 4096 1442 0 1372 104 30 74 88 0 8 4 pvpl 32 13215 0 0 109 2 107 107 0 265 0 pmappl 248 716 0 686 3 0 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 287 0 39 8 0 8 8 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace sys_semop(ffff8000394cf9d8,ffff80003c5022c0,ffff80003c502210) at sys_semop+0x45b syscall(ffff80003c5022c0) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x704aff2fd50, count: -3 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{1}> trace x86_ipi_db(ffff800029aabff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x700153051e50, count: -3