last executing test programs: 19.502670848s ago: executing program 3 (id=27): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffe, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x1a0) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mprotect(&(0x7f0000674000/0x3000)=nil, 0x3000, 0x0) lseek(r0, 0x400, 0x2) open$dir(&(0x7f0000000040)='./file1\x00', 0x20000, 0x0) (async) open$dir(&(0x7f0000000040)='./file1\x00', 0x20000, 0x0) closefrom(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 16.096459199s ago: executing program 3 (id=27): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffe, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x1a0) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mprotect(&(0x7f0000674000/0x3000)=nil, 0x3000, 0x0) lseek(r0, 0x400, 0x2) open$dir(&(0x7f0000000040)='./file1\x00', 0x20000, 0x0) (async) open$dir(&(0x7f0000000040)='./file1\x00', 0x20000, 0x0) closefrom(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 16.095696003s ago: executing program 6 (id=32): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r0 = socket(0x2, 0x8002, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) (async) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x101) (async, rerun: 64) mknod(&(0x7f00000000c0)='.\x00', 0x8000, 0x637d) (async, rerun: 64) open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe0) (async) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r1) (async) poll(&(0x7f00000000c0), 0x0, 0x8) (async) r2 = syz_open_pts() ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000080)=0x6574) (async) syz_open_pts() syz_open_pts() r3 = socket(0x2, 0x8002, 0x0) r4 = fcntl$dupfd(r3, 0x1, r3) closefrom(r4) (async) kqueue() syz_emit_ethernet(0x2e, &(0x7f0000000100)={@empty, @empty, [{[], {0x8100, 0x1, 0x1, 0x3}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="fd67a8616c88", @broadcast, @random="3781c4652fca", @remote={0xac, 0x14, 0x0}}}}}) syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaa2ffffffffffff0800450000680000200200009078ac1400bb7f0000014e234e200008907800e46eed18fc569e9a2b0fd89b685e8701d73fd49fb1411ed5cd9771e6b00b46ed037ea225e63e1f3a3b6549aee8196f9f9b661f82c636ffd8d2582b219899b334b1c88e26b934a52a7c41d8"]) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4287e) (async) r5 = open(&(0x7f0000000300)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7815) (async) setgroups(0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000080)={0x3, 0xe, 0x200, 0x1, 0x2}) (async) mprotect(&(0x7f0000190000/0x4000)=nil, 0x4000, 0x5) (async) ioctl$FIONREAD(r5, 0x800474c4, &(0x7f0000000080)) (async, rerun: 32) write(r5, &(0x7f0000000040)="5fd4eda2e6fcd4cf310d884a415e", 0xe) (rerun: 32) 13.162404177s ago: executing program 4 (id=116): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r0 = kqueue1(0x10000) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x3) kevent(r0, &(0x7f0000000c40)=[{{r1}, 0xfffffffffffffffe, 0x1, 0xa0000001, 0x0, 0x9}], 0x8, &(0x7f0000000d00)=[{{r1}, 0xfffffffffffffffe, 0xa2, 0x2, 0x8, 0x3}], 0x9, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0xfffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000000c0)="d4b455b0249fed2573d0af9d864cefa9db1ba5d605dd90833ce92b090f1c62ba9156a4317bef4f42050f3fc38aba43f04735ad6c33eeb48bf57acd23014f8d1758876acfa73249eaf8946f06997f8d8f98ccb8d23e790d5ee2a1962077d4fe40bf21e53eb79aa159013aaf3163166387874a397ab32263231bff0b471fb7eb39b1657e96bbdfd61dc5406fe66f860e87ba1de640fb686dc7e0dd7e33c9336eb2a032413b72c83906e9ae9f881501dcd44630baa5b72056a52429c5792c075258a4ec9ed4daddf5955f039473ce7da8875d4ad41f50ddb1", 0xd7}, {&(0x7f00000001c0)="2087167f15602f3971b1f7632c3f53670802e87b2ebb225f8a1caa8d37428a2792c131ffac4931261638d24191aa46931b15f94f3d1c7a7300630fdc9cf853aebed183978806e0a5d84cf5de21ed94a7b7302b85c64b482fb312895ab0ab8b49d77a636f97e9f961cf9efabb485b21ef004bea8c6fed5e27598ba3ce5463de3b443d0ae427c3b312f04ad4dd952bea3da0ce20ce30c81111e12deed678e7cb802a6a979c9cb87a2a67c1184b8ab2d855aecae52ff7ef42a55ebd6b7b06f4d4d210d29bfc86e1a7eca9f07e313cac2944fac2df703407cce43c6acb1dde4952f8ccf3ebca9e082900c520a15f65de06", 0xef}, {&(0x7f00000002c0)="b091323b2240c677324f10c2afc54b5f834942f94f94732ab605cb466b791110636c6840daa624aed876cc5245428c61f9f7c2300c4b854c9337c05a3617ed1fedaef4335848f129db72749b99cdf7853d411f9e59875e054a5a56edf1f99184f1a982571f671be3d0b9352c560795eb768c9aad6354622e45881563c02483a59073c539673f0c37dfd573f2c11d9b5e77f16444a2b4d87d2b91f3c8338ed9cb8afa8d03df59e9f6286460d2141546b0ea8388c21eb5435c1d3d187df60b44b524da8de4ed28969ab0ccd6802ca579b01a72464f", 0xd4}, {&(0x7f00000003c0)="06efb466ff8943d9a952288c1eae5fbee86a8b901f4ebf647296deb1f328b123f3046c77df83022a300a4e522553637a7942058380de1291c38c9ccbe4a1a0d78257086dd5031fabbbe692d0fc1636d56f9323ccac24e9addb44d21f09721be19777127db601e4cba163d6cb0860c7f03c6deadd", 0x74}, {&(0x7f0000000440)="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", 0xfb}, {&(0x7f0000000540)="aecdd8b66c02def50925e7929cd2c8e42d27d042ac597b29d9e66e4f1b1793b89aea8dc40f45de18125d585db4ae420a99ee22e5146c47e458b43ff189134f3dcb20c0047529d55409923b03447cd701b77871d362996f144050a75351ed0c18887d6270d5cc54676516a86143afb57b4108765005e46a20d5c59b77970976a8fd0fb7bcffd05e322453000d55cb31a9c94a74151aebf62bc652f4a566caeae9150b8c6755a1ce025a504c63aac80d4bd314990bdd1b7dcb9a1a95d2f727d2cc8fa39e7809c989c4784866fd4fe2fa", 0xcf}], 0x6, 0x3) ppoll(0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x2000, 0x3b4, &(0x7f0000001000/0x2000)=nil) r4 = shmat(r3, &(0x7f0000001000/0x3000)=nil, 0x2000) shmdt(r4) open(&(0x7f0000000000)='./file0\x00', 0x80, 0x150) 13.16069372s ago: executing program 6 (id=32): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r0 = socket(0x2, 0x8002, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) (async) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x101) (async, rerun: 64) mknod(&(0x7f00000000c0)='.\x00', 0x8000, 0x637d) (async, rerun: 64) open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe0) (async) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r1) (async) poll(&(0x7f00000000c0), 0x0, 0x8) (async) r2 = syz_open_pts() ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000080)=0x6574) (async) syz_open_pts() syz_open_pts() r3 = socket(0x2, 0x8002, 0x0) r4 = fcntl$dupfd(r3, 0x1, r3) closefrom(r4) (async) kqueue() syz_emit_ethernet(0x2e, &(0x7f0000000100)={@empty, @empty, [{[], {0x8100, 0x1, 0x1, 0x3}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="fd67a8616c88", @broadcast, @random="3781c4652fca", @remote={0xac, 0x14, 0x0}}}}}) syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaa2ffffffffffff0800450000680000200200009078ac1400bb7f0000014e234e200008907800e46eed18fc569e9a2b0fd89b685e8701d73fd49fb1411ed5cd9771e6b00b46ed037ea225e63e1f3a3b6549aee8196f9f9b661f82c636ffd8d2582b219899b334b1c88e26b934a52a7c41d8"]) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4287e) (async) r5 = open(&(0x7f0000000300)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7815) (async) setgroups(0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000080)={0x3, 0xe, 0x200, 0x1, 0x2}) (async) mprotect(&(0x7f0000190000/0x4000)=nil, 0x4000, 0x5) (async) ioctl$FIONREAD(r5, 0x800474c4, &(0x7f0000000080)) (async, rerun: 32) write(r5, &(0x7f0000000040)="5fd4eda2e6fcd4cf310d884a415e", 0xe) (rerun: 32) 12.422410993s ago: executing program 4 (id=118): open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) (async) setresuid(0xee00, 0xee00, 0x0) (async) setuid(0x0) (async, rerun: 64) chmod(&(0x7f0000000280)='./file0\x00', 0x3a) (async, rerun: 64) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r0 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r0, 0x8060693c, &(0x7f0000000080)) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c2) (async) truncate(&(0x7f00000003c0)='./file0\x00', 0x440030900) (async) access(&(0x7f0000000000)='./file0\x00', 0x2) 12.197401517s ago: executing program 3 (id=27): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffe, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x1a0) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mprotect(&(0x7f0000674000/0x3000)=nil, 0x3000, 0x0) lseek(r0, 0x400, 0x2) open$dir(&(0x7f0000000040)='./file1\x00', 0x20000, 0x0) (async) open$dir(&(0x7f0000000040)='./file1\x00', 0x20000, 0x0) closefrom(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 11.864517664s ago: executing program 0 (id=79): sendsyslog(&(0x7f0000004240)="3c2b3c7be6070663ff8229e129123179b62a94f3c332c35752de1059888dae162754155e454003486092af84a9de93c2210a0dec44ca061286a2700820c04d963bcee0a5c09c8e6be14df61c21fccd2e7a83435f77c261030c554f27173644ab80faa1346f2e377f071cf1b5604b5fc09601ca2bd9aa9e77b9bfb8ba6a90d5c45fcd2759ddaf5a7e79982f36d4caf8914b05cfddc693c128d7076e3042b4ed23f03f2b177614ef4dc868e7ae4ef889627f15e7d69afb3b1658a85971d38fce7111bcd0b1ae929f084927c15e279218f408d38af252fe28416ba9bdb77d63f96256d45f593ad140cdce2800b6", 0xec, 0x26) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) (async) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1e5f) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0) (async) mlock(&(0x7f0000378000/0x3000)=nil, 0x3000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68) (async) unlink(&(0x7f0000000040)='./file0\x00') r1 = socket(0x1, 0x4000, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) (async) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000200), 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) (async) r4 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r4, 0x8020697f, &(0x7f0000000100)) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) r6 = getuid() setresuid(r6, r6, r6) (async) open(&(0x7f0000000100)='./file0\x00', 0x18289, 0x110) (async) truncate(&(0x7f0000000000)='./file0\x00', 0xafffe) (async) kill(0xffffffffffffffff, 0x14) (async) ktrace(&(0x7f0000000940)='./file0\x00', 0x0, 0xa80, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x88) preadv(r7, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0) 11.653134258s ago: executing program 2 (id=37): setgid(0xffffffffffffffff) r0 = getegid() setresgid(r0, r0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async, rerun: 64) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, {[0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4], [], [], [{}, {}, {}, {0x0, 0x8000}, {}, {}, {0x0, 0x0, 0x8000}], {}, {0x0, 0x0, 0xf2}}}) (async, rerun: 64) r2 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async, rerun: 32) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) (async, rerun: 32) ioctl$FIONREAD(r2, 0x8040691a, &(0x7f0000000100)) (async) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r3, 0x0) r4 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0xa0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000001e00)=0xc) setresgid(r7, r7, r7) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000780)={{0x0, r7, r6, r7, 0x8f, 0x6}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) (async) semop(0x0, &(0x7f0000000340)=[{0x1, 0x671c, 0x1000}, {0x3, 0x2, 0x800}, {0x2, 0x0, 0x1000}, {0x0, 0x8001, 0x800}, {0x2, 0x1, 0x1800}], 0x5) (async, rerun: 64) setgid(r0) (async, rerun: 64) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) (async) closefrom(r4) (async) sysctl$net_inet_tcp(&(0x7f00000002c0)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, &(0x7f0000000280)="e925604f5c0e6885b80778f7850bdf06000000ae262ea992d6b0c7dfb5fe6c7b89ae678fee9fe28aa38e9e8299e4f81bff3a4cb30bbc", 0xffffffffffffffab) (async) r8 = socket(0x2, 0x8002, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450d) (async, rerun: 32) r9 = open(&(0x7f0000000200)='./bus\x00', 0x1, 0x20) (async, rerun: 32) r10 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) closefrom(r10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x40e, &(0x7f0000000040)=@un=@abs={0xc8, 0x0, 0x0, 0x3}, 0x40) (async, rerun: 64) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (rerun: 64) accept$unix(r1, 0x0, &(0x7f0000000180)) ioctl$DIOCCLRSTATES(r9, 0x0, &(0x7f0000000080)={{0xf78, 0xff, 0x3}, 0x2, '\x00', 0x1, {@addrmask={@v4=@remote={0xac, 0x14, 0x0}, @v6=@mcast2, 0x0, 0x0, 0x7}, [0x3ff, 0xb], 0x81, 0x1, 0x80}, {@any={'\x00', 0x0, 0x145a3d7a6b88ade9, 0xd}, [0x8, 0x7ff], 0x7, 0x5, 0x6}, './file1/file0\x00', './file1\x00', 0x13, 0x40}) 11.652927631s ago: executing program 6 (id=32): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r0 = socket(0x2, 0x8002, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) (async) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x101) (async, rerun: 64) mknod(&(0x7f00000000c0)='.\x00', 0x8000, 0x637d) (async, rerun: 64) open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe0) (async) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r1) (async) poll(&(0x7f00000000c0), 0x0, 0x8) (async) r2 = syz_open_pts() ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000080)=0x6574) (async) syz_open_pts() syz_open_pts() r3 = socket(0x2, 0x8002, 0x0) r4 = fcntl$dupfd(r3, 0x1, r3) closefrom(r4) (async) kqueue() syz_emit_ethernet(0x2e, &(0x7f0000000100)={@empty, @empty, [{[], {0x8100, 0x1, 0x1, 0x3}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="fd67a8616c88", @broadcast, @random="3781c4652fca", @remote={0xac, 0x14, 0x0}}}}}) syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaa2ffffffffffff0800450000680000200200009078ac1400bb7f0000014e234e200008907800e46eed18fc569e9a2b0fd89b685e8701d73fd49fb1411ed5cd9771e6b00b46ed037ea225e63e1f3a3b6549aee8196f9f9b661f82c636ffd8d2582b219899b334b1c88e26b934a52a7c41d8"]) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4287e) (async) r5 = open(&(0x7f0000000300)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7815) (async) setgroups(0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000080)={0x3, 0xe, 0x200, 0x1, 0x2}) (async) mprotect(&(0x7f0000190000/0x4000)=nil, 0x4000, 0x5) (async) ioctl$FIONREAD(r5, 0x800474c4, &(0x7f0000000080)) (async, rerun: 32) write(r5, &(0x7f0000000040)="5fd4eda2e6fcd4cf310d884a415e", 0xe) (rerun: 32) 10.124511852s ago: executing program 4 (id=118): open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) (async) setresuid(0xee00, 0xee00, 0x0) (async) setuid(0x0) (async, rerun: 64) chmod(&(0x7f0000000280)='./file0\x00', 0x3a) (async, rerun: 64) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r0 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r0, 0x8060693c, &(0x7f0000000080)) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c2) (async) truncate(&(0x7f00000003c0)='./file0\x00', 0x440030900) (async) access(&(0x7f0000000000)='./file0\x00', 0x2) 9.712713876s ago: executing program 0 (id=79): sendsyslog(&(0x7f0000004240)="3c2b3c7be6070663ff8229e129123179b62a94f3c332c35752de1059888dae162754155e454003486092af84a9de93c2210a0dec44ca061286a2700820c04d963bcee0a5c09c8e6be14df61c21fccd2e7a83435f77c261030c554f27173644ab80faa1346f2e377f071cf1b5604b5fc09601ca2bd9aa9e77b9bfb8ba6a90d5c45fcd2759ddaf5a7e79982f36d4caf8914b05cfddc693c128d7076e3042b4ed23f03f2b177614ef4dc868e7ae4ef889627f15e7d69afb3b1658a85971d38fce7111bcd0b1ae929f084927c15e279218f408d38af252fe28416ba9bdb77d63f96256d45f593ad140cdce2800b6", 0xec, 0x26) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) (async) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1e5f) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0) (async) mlock(&(0x7f0000378000/0x3000)=nil, 0x3000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68) (async) unlink(&(0x7f0000000040)='./file0\x00') r1 = socket(0x1, 0x4000, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) (async) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000200), 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) (async) r4 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r4, 0x8020697f, &(0x7f0000000100)) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) r6 = getuid() setresuid(r6, r6, r6) (async) open(&(0x7f0000000100)='./file0\x00', 0x18289, 0x110) (async) truncate(&(0x7f0000000000)='./file0\x00', 0xafffe) (async) kill(0xffffffffffffffff, 0x14) (async) ktrace(&(0x7f0000000940)='./file0\x00', 0x0, 0xa80, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x88) preadv(r7, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0) 9.712456036s ago: executing program 1 (id=124): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$FIOASYNC(r1, 0x80047470, &(0x7f0000000000)=0x2) ioctl$FIOASYNC(r2, 0x80047460, &(0x7f00000000c0)=0x7) ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000180)={0x6a34, 0x3, 0x4, 0x71c7, "778d938520e312dfff841b000000e80000f800", 0xffffffd9, 0x973}) ioctl$WSDISPLAYIO_SBURNER(r0, 0x800c5751, &(0x7f0000000000)={0x3, 0xd24, 0xa}) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f00000000c0)={0x3, 0x101d}) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async) syz_open_pts() (async) close(r1) (async) syz_open_pts() (async) ioctl$FIOASYNC(r1, 0x80047470, &(0x7f0000000000)=0x2) (async) ioctl$FIOASYNC(r2, 0x80047460, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000180)={0x6a34, 0x3, 0x4, 0x71c7, "778d938520e312dfff841b000000e80000f800", 0xffffffd9, 0x973}) (async) ioctl$WSDISPLAYIO_SBURNER(r0, 0x800c5751, &(0x7f0000000000)={0x3, 0xd24, 0xa}) (async) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f00000000c0)={0x3, 0x101d}) (async) 9.462875614s ago: executing program 1 (id=125): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0x802069ad, &(0x7f00000001c0)) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0x1, 0x1, 0x7}, {0x1, 0xc8, 0xfc, 0x8}, {0x6, 0x9, 0x1, 0xfffff802}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000000000000000802450fffb00020000100009078ac1400bbffffffff83f9ac08989d3128e006694d49f5c09b"]) 8.252559404s ago: executing program 1 (id=126): r0 = socket(0x11, 0x3, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x4) (async) sysctl$hw(&(0x7f0000000000)={0x4, 0x1f}, 0x3, 0x0, 0x0, 0x0, 0x2) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef16ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139bf82f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb6a998df192f9781ea6e2ec58904007b6400008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) r1 = accept4(r0, &(0x7f0000000040)=@in6, &(0x7f0000000080)=0x1c, 0x4000) r2 = kqueue() kevent(r2, &(0x7f00000001c0)=[{{r2}, 0xffffffffffffffff, 0x23, 0x1, 0x3c, 0x8}], 0x1, &(0x7f0000000100)=[{{r2}, 0xfffffffffffffff9, 0x1, 0x10, 0xfffffffffffffffc, 0x1dfb}], 0x5, 0x0) (async) r3 = socket(0x18, 0x3, 0x1) getsockopt(r3, 0x29, 0xa, 0x0, 0x0) socketpair(0x1e, 0x3, 0x2, 0x0) kevent(r2, &(0x7f0000000080), 0x20e97, 0x0, 0xfffffffe, 0x0) r4 = socket(0x18, 0x3, 0x0) getsockopt$sock_int(r4, 0xffff, 0x10, &(0x7f00000000c0), &(0x7f0000000440)=0x4) (async) r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) (async) listen(r6, 0x1) (async) connect$unix(r6, &(0x7f0000000000)=@file={0x3, 0x0, './file1\x00'}, 0xa) (async) r7 = socket(0x1, 0x3, 0x0) ioctl$FIONREAD(r7, 0xc0106924, &(0x7f00000001c0)) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000002c0)="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", 0xfffffdaf) (async) closefrom(r9) (async) close(r8) (async) execve(0x0, &(0x7f0000000340)=[&(0x7f0000000100)='tap'], 0x0) (async) r10 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r10, 0xc028698a, &(0x7f0000000100)) (async) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x8, 0x2, 0xf5}]}) (async) fcntl$dupfd(r0, 0xc, r1) 8.251577201s ago: executing program 2 (id=37): setgid(0xffffffffffffffff) r0 = getegid() setresgid(r0, r0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async, rerun: 64) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, {[0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4], [], [], [{}, {}, {}, {0x0, 0x8000}, {}, {}, {0x0, 0x0, 0x8000}], {}, {0x0, 0x0, 0xf2}}}) (async, rerun: 64) r2 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async, rerun: 32) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) (async, rerun: 32) ioctl$FIONREAD(r2, 0x8040691a, &(0x7f0000000100)) (async) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r3, 0x0) r4 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0xa0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000001e00)=0xc) setresgid(r7, r7, r7) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000780)={{0x0, r7, r6, r7, 0x8f, 0x6}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) (async) semop(0x0, &(0x7f0000000340)=[{0x1, 0x671c, 0x1000}, {0x3, 0x2, 0x800}, {0x2, 0x0, 0x1000}, {0x0, 0x8001, 0x800}, {0x2, 0x1, 0x1800}], 0x5) (async, rerun: 64) setgid(r0) (async, rerun: 64) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) (async) closefrom(r4) (async) sysctl$net_inet_tcp(&(0x7f00000002c0)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, &(0x7f0000000280)="e925604f5c0e6885b80778f7850bdf06000000ae262ea992d6b0c7dfb5fe6c7b89ae678fee9fe28aa38e9e8299e4f81bff3a4cb30bbc", 0xffffffffffffffab) (async) r8 = socket(0x2, 0x8002, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450d) (async, rerun: 32) r9 = open(&(0x7f0000000200)='./bus\x00', 0x1, 0x20) (async, rerun: 32) r10 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) closefrom(r10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x40e, &(0x7f0000000040)=@un=@abs={0xc8, 0x0, 0x0, 0x3}, 0x40) (async, rerun: 64) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (rerun: 64) accept$unix(r1, 0x0, &(0x7f0000000180)) ioctl$DIOCCLRSTATES(r9, 0x0, &(0x7f0000000080)={{0xf78, 0xff, 0x3}, 0x2, '\x00', 0x1, {@addrmask={@v4=@remote={0xac, 0x14, 0x0}, @v6=@mcast2, 0x0, 0x0, 0x7}, [0x3ff, 0xb], 0x81, 0x1, 0x80}, {@any={'\x00', 0x0, 0x145a3d7a6b88ade9, 0xd}, [0x8, 0x7ff], 0x7, 0x5, 0x6}, './file1/file0\x00', './file1\x00', 0x13, 0x40}) 8.251511444s ago: executing program 3 (id=27): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffe, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x1a0) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mprotect(&(0x7f0000674000/0x3000)=nil, 0x3000, 0x0) lseek(r0, 0x400, 0x2) open$dir(&(0x7f0000000040)='./file1\x00', 0x20000, 0x0) (async) open$dir(&(0x7f0000000040)='./file1\x00', 0x20000, 0x0) closefrom(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 8.251450489s ago: executing program 4 (id=118): open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) (async) setresuid(0xee00, 0xee00, 0x0) (async) setuid(0x0) (async, rerun: 64) chmod(&(0x7f0000000280)='./file0\x00', 0x3a) (async, rerun: 64) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r0 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r0, 0x8060693c, &(0x7f0000000080)) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c2) (async) truncate(&(0x7f00000003c0)='./file0\x00', 0x440030900) (async) access(&(0x7f0000000000)='./file0\x00', 0x2) 8.251415896s ago: executing program 5 (id=12): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000080)={&(0x7f0000000000)=[{0x20, 0xa}, {0x23, 0x4}], 0x2}) (async) mknod(&(0x7f00000002c0)='./file1\x00', 0x2000, 0x268) (async, rerun: 32) access(&(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x156) (async) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000080)={0x0, 0x0}) 8.251212598s ago: executing program 6 (id=32): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r0 = socket(0x2, 0x8002, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) (async) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x101) (async, rerun: 64) mknod(&(0x7f00000000c0)='.\x00', 0x8000, 0x637d) (async, rerun: 64) open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe0) (async) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r1) (async) poll(&(0x7f00000000c0), 0x0, 0x8) (async) r2 = syz_open_pts() ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000080)=0x6574) (async) syz_open_pts() syz_open_pts() r3 = socket(0x2, 0x8002, 0x0) r4 = fcntl$dupfd(r3, 0x1, r3) closefrom(r4) (async) kqueue() syz_emit_ethernet(0x2e, &(0x7f0000000100)={@empty, @empty, [{[], {0x8100, 0x1, 0x1, 0x3}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="fd67a8616c88", @broadcast, @random="3781c4652fca", @remote={0xac, 0x14, 0x0}}}}}) syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaa2ffffffffffff0800450000680000200200009078ac1400bb7f0000014e234e200008907800e46eed18fc569e9a2b0fd89b685e8701d73fd49fb1411ed5cd9771e6b00b46ed037ea225e63e1f3a3b6549aee8196f9f9b661f82c636ffd8d2582b219899b334b1c88e26b934a52a7c41d8"]) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4287e) (async) r5 = open(&(0x7f0000000300)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7815) (async) setgroups(0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000080)={0x3, 0xe, 0x200, 0x1, 0x2}) (async) mprotect(&(0x7f0000190000/0x4000)=nil, 0x4000, 0x5) (async) ioctl$FIONREAD(r5, 0x800474c4, &(0x7f0000000080)) (async, rerun: 32) write(r5, &(0x7f0000000040)="5fd4eda2e6fcd4cf310d884a415e", 0xe) (rerun: 32) 6.759896294s ago: executing program 0 (id=79): sendsyslog(&(0x7f0000004240)="3c2b3c7be6070663ff8229e129123179b62a94f3c332c35752de1059888dae162754155e454003486092af84a9de93c2210a0dec44ca061286a2700820c04d963bcee0a5c09c8e6be14df61c21fccd2e7a83435f77c261030c554f27173644ab80faa1346f2e377f071cf1b5604b5fc09601ca2bd9aa9e77b9bfb8ba6a90d5c45fcd2759ddaf5a7e79982f36d4caf8914b05cfddc693c128d7076e3042b4ed23f03f2b177614ef4dc868e7ae4ef889627f15e7d69afb3b1658a85971d38fce7111bcd0b1ae929f084927c15e279218f408d38af252fe28416ba9bdb77d63f96256d45f593ad140cdce2800b6", 0xec, 0x26) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) (async) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1e5f) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0) (async) mlock(&(0x7f0000378000/0x3000)=nil, 0x3000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68) (async) unlink(&(0x7f0000000040)='./file0\x00') r1 = socket(0x1, 0x4000, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) (async) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000200), 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) (async) r4 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r4, 0x8020697f, &(0x7f0000000100)) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) r6 = getuid() setresuid(r6, r6, r6) (async) open(&(0x7f0000000100)='./file0\x00', 0x18289, 0x110) (async) truncate(&(0x7f0000000000)='./file0\x00', 0xafffe) (async) kill(0xffffffffffffffff, 0x14) (async) ktrace(&(0x7f0000000940)='./file0\x00', 0x0, 0xa80, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x88) preadv(r7, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0) 6.552631072s ago: executing program 1 (id=126): r0 = socket(0x11, 0x3, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x4) (async) sysctl$hw(&(0x7f0000000000)={0x4, 0x1f}, 0x3, 0x0, 0x0, 0x0, 0x2) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef16ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139bf82f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb6a998df192f9781ea6e2ec58904007b6400008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) r1 = accept4(r0, &(0x7f0000000040)=@in6, &(0x7f0000000080)=0x1c, 0x4000) r2 = kqueue() kevent(r2, &(0x7f00000001c0)=[{{r2}, 0xffffffffffffffff, 0x23, 0x1, 0x3c, 0x8}], 0x1, &(0x7f0000000100)=[{{r2}, 0xfffffffffffffff9, 0x1, 0x10, 0xfffffffffffffffc, 0x1dfb}], 0x5, 0x0) (async) r3 = socket(0x18, 0x3, 0x1) getsockopt(r3, 0x29, 0xa, 0x0, 0x0) socketpair(0x1e, 0x3, 0x2, 0x0) kevent(r2, &(0x7f0000000080), 0x20e97, 0x0, 0xfffffffe, 0x0) r4 = socket(0x18, 0x3, 0x0) getsockopt$sock_int(r4, 0xffff, 0x10, &(0x7f00000000c0), &(0x7f0000000440)=0x4) (async) r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) (async) listen(r6, 0x1) (async) connect$unix(r6, &(0x7f0000000000)=@file={0x3, 0x0, './file1\x00'}, 0xa) (async) r7 = socket(0x1, 0x3, 0x0) ioctl$FIONREAD(r7, 0xc0106924, &(0x7f00000001c0)) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000002c0)="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", 0xfffffdaf) (async) closefrom(r9) (async) close(r8) (async) execve(0x0, &(0x7f0000000340)=[&(0x7f0000000100)='tap'], 0x0) (async) r10 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r10, 0xc028698a, &(0x7f0000000100)) (async) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x8, 0x2, 0xf5}]}) (async) fcntl$dupfd(r0, 0xc, r1) 6.552391753s ago: executing program 2 (id=37): setgid(0xffffffffffffffff) r0 = getegid() setresgid(r0, r0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async, rerun: 64) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, {[0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4], [], [], [{}, {}, {}, {0x0, 0x8000}, {}, {}, {0x0, 0x0, 0x8000}], {}, {0x0, 0x0, 0xf2}}}) (async, rerun: 64) r2 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async, rerun: 32) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) (async, rerun: 32) ioctl$FIONREAD(r2, 0x8040691a, &(0x7f0000000100)) (async) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r3, 0x0) r4 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0xa0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000001e00)=0xc) setresgid(r7, r7, r7) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000780)={{0x0, r7, r6, r7, 0x8f, 0x6}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) (async) semop(0x0, &(0x7f0000000340)=[{0x1, 0x671c, 0x1000}, {0x3, 0x2, 0x800}, {0x2, 0x0, 0x1000}, {0x0, 0x8001, 0x800}, {0x2, 0x1, 0x1800}], 0x5) (async, rerun: 64) setgid(r0) (async, rerun: 64) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) (async) closefrom(r4) (async) sysctl$net_inet_tcp(&(0x7f00000002c0)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, &(0x7f0000000280)="e925604f5c0e6885b80778f7850bdf06000000ae262ea992d6b0c7dfb5fe6c7b89ae678fee9fe28aa38e9e8299e4f81bff3a4cb30bbc", 0xffffffffffffffab) (async) r8 = socket(0x2, 0x8002, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450d) (async, rerun: 32) r9 = open(&(0x7f0000000200)='./bus\x00', 0x1, 0x20) (async, rerun: 32) r10 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) closefrom(r10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x40e, &(0x7f0000000040)=@un=@abs={0xc8, 0x0, 0x0, 0x3}, 0x40) (async, rerun: 64) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (rerun: 64) accept$unix(r1, 0x0, &(0x7f0000000180)) ioctl$DIOCCLRSTATES(r9, 0x0, &(0x7f0000000080)={{0xf78, 0xff, 0x3}, 0x2, '\x00', 0x1, {@addrmask={@v4=@remote={0xac, 0x14, 0x0}, @v6=@mcast2, 0x0, 0x0, 0x7}, [0x3ff, 0xb], 0x81, 0x1, 0x80}, {@any={'\x00', 0x0, 0x145a3d7a6b88ade9, 0xd}, [0x8, 0x7ff], 0x7, 0x5, 0x6}, './file1/file0\x00', './file1\x00', 0x13, 0x40}) 6.350600487s ago: executing program 4 (id=118): open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) (async) setresuid(0xee00, 0xee00, 0x0) (async) setuid(0x0) (async, rerun: 64) chmod(&(0x7f0000000280)='./file0\x00', 0x3a) (async, rerun: 64) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r0 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r0, 0x8060693c, &(0x7f0000000080)) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c2) (async) truncate(&(0x7f00000003c0)='./file0\x00', 0x440030900) (async) access(&(0x7f0000000000)='./file0\x00', 0x2) 6.33301017s ago: executing program 7 (id=129): sendmmsg(0xffffffffffffffff, &(0x7f0000003dc0)={{&(0x7f0000000300)=@in={0x10, 0x2, 0x0, 0x8}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000003c0)="7e0cc9ca7dce3b5f98671c746a38f41b1b04799049f246688109f4c197c114aa7201556c71e9665dbce2b69a3916687a4325eaa2d1caa41481be4a43e5fb035e82f068664233154e6cca6d072fbf2bc276f1781c770acfc0589f3d120c355807d9be5e7718578d0402883d6bde12312df9967a96da486952704920b5f1421d4a81c414e022310405", 0x88}], 0x1, &(0x7f0000001a00)=[{0x480, 0x1, 0x0, "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"}, {0x38, 0x1, 0x5, "95e700ba7616cea67f815425d9dfcbbce3f37d4a3ed2d969be1eabb4f67e7f562a2f81c4e694010b0ff3a068"}, {0xc, 0x1, 0xe3}, {0x14, 0x1, 0x7, "01eb8f0721b45aec"}, {0xc, 0xffff, 0xff}, {0x68, 0xffff, 0x7, "ceab51174fc20e54f98528600ca91558cf87667aa05335f1b5c42e818da06a7c9746b178008995dbc87deb25d394501c182518221f9707b9eb260a51020feef08090fa1ede5f8392466068985f59f4fe31755a92d464cb2eb4f6b05c"}], 0x54c}}, 0x38, 0x405) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BIOCLOCK(r1, 0x20004276) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc) ioctl$TIOCSETA(r0, 0xcd60441a, &(0x7f0000000000)={0x2, 0x2, 0x4, 0x2f, "2000030100010000000000000068a95a01040028", 0x9, 0x23}) 6.130032743s ago: executing program 5 (id=12): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000080)={&(0x7f0000000000)=[{0x20, 0xa}, {0x23, 0x4}], 0x2}) (async) mknod(&(0x7f00000002c0)='./file1\x00', 0x2000, 0x268) (async, rerun: 32) access(&(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x156) (async) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000080)={0x0, 0x0}) 5.474474137s ago: executing program 7 (id=130): sysctl$kern(&(0x7f00000000c0)={0x1, 0x47}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x194d, 0x0, 0x2f) r0 = semget(0x0, 0x5, 0x24b) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x4, 0xf9, 0x4, 0x1, 0xffff, 0x3, 0x3d, 0x2, 0x1, 0x100002000640, 0x2000000009}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7815) r3 = getpid() fcntl$setown(r2, 0x6, r3) poll(&(0x7f0000000000)=[{0xffffffffffffff9c, 0x4}], 0x1fffffffffffff27, 0x4) r4 = fcntl$getown(r2, 0x5) fcntl$setown(r2, 0x6, r4) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000040)={0x80, 0xffff63d6, 0xe9, 0x2, 0xc, 0xfffffffb, 0x1, 0x10, [{0x0, 0x80000002, 0x5, 0x80000002}, {0xe9, 0xe7, 0x1000002, 0x6}, {0x10cd5, 0x4bad, 0x9, 0x4}, {0x8, 0x10000, 0x4000000f, 0x8cce}, {0x4, 0x2000008, 0x6, 0x1}, {0x388d, 0xffffffff, 0x85, 0x5}, {0x2, 0xa00, 0x20004, 0xffffffff}, {0x208, 0xfffffffd, 0x5, 0xffffe2e8}, {0x10007, 0xffc, 0x8, 0x7ffb}, {0x3f8, 0xfefffffd, 0x1ff, 0x12}, {0x82, 0x0, 0x201, 0xfffffff4}, {0xc, 0xfffffffe, 0x650, 0x200a68}, {0x401, 0x6, 0xa6ab, 0xa5}, {0x6, 0xfffffffe, 0x6}, {0xffffffff, 0x7, 0x81, 0x7}, {0x89be2, 0x1, 0x1, 0x800}]}) poll(&(0x7f0000000180)=[{r1, 0x80}, {0xffffffffffffffff, 0x4}, {r1, 0x40}], 0x3, 0x4b3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r1, 0x80d04466, &(0x7f0000000140)={0x9, 0xa525, 0x4, 0x107492, "08e500", 0x20004118, 0x6}) r5 = semget$private(0x0, 0x4, 0x100) semop(r5, &(0x7f0000000640)=[{0x2, 0x1, 0x1000}], 0x1) semctl$IPC_RMID(r5, 0x0, 0x0) semop(r0, &(0x7f0000000300)=[{0x1, 0xff, 0x1800}, {0x1, 0x7, 0x1000}], 0x2) 5.474023665s ago: executing program 6 (id=32): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r0 = socket(0x2, 0x8002, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) (async) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x101) (async, rerun: 64) mknod(&(0x7f00000000c0)='.\x00', 0x8000, 0x637d) (async, rerun: 64) open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe0) (async) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r1) (async) poll(&(0x7f00000000c0), 0x0, 0x8) (async) r2 = syz_open_pts() ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000080)=0x6574) (async) syz_open_pts() syz_open_pts() r3 = socket(0x2, 0x8002, 0x0) r4 = fcntl$dupfd(r3, 0x1, r3) closefrom(r4) (async) kqueue() syz_emit_ethernet(0x2e, &(0x7f0000000100)={@empty, @empty, [{[], {0x8100, 0x1, 0x1, 0x3}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="fd67a8616c88", @broadcast, @random="3781c4652fca", @remote={0xac, 0x14, 0x0}}}}}) syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaa2ffffffffffff0800450000680000200200009078ac1400bb7f0000014e234e200008907800e46eed18fc569e9a2b0fd89b685e8701d73fd49fb1411ed5cd9771e6b00b46ed037ea225e63e1f3a3b6549aee8196f9f9b661f82c636ffd8d2582b219899b334b1c88e26b934a52a7c41d8"]) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4287e) (async) r5 = open(&(0x7f0000000300)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7815) (async) setgroups(0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000080)={0x3, 0xe, 0x200, 0x1, 0x2}) (async) mprotect(&(0x7f0000190000/0x4000)=nil, 0x4000, 0x5) (async) ioctl$FIONREAD(r5, 0x800474c4, &(0x7f0000000080)) (async, rerun: 32) write(r5, &(0x7f0000000040)="5fd4eda2e6fcd4cf310d884a415e", 0xe) (rerun: 32) 5.250377575s ago: executing program 3 (id=27): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffe, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x1a0) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mprotect(&(0x7f0000674000/0x3000)=nil, 0x3000, 0x0) lseek(r0, 0x400, 0x2) open$dir(&(0x7f0000000040)='./file1\x00', 0x20000, 0x0) (async) open$dir(&(0x7f0000000040)='./file1\x00', 0x20000, 0x0) closefrom(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 4.246337254s ago: executing program 0 (id=79): sendsyslog(&(0x7f0000004240)="3c2b3c7be6070663ff8229e129123179b62a94f3c332c35752de1059888dae162754155e454003486092af84a9de93c2210a0dec44ca061286a2700820c04d963bcee0a5c09c8e6be14df61c21fccd2e7a83435f77c261030c554f27173644ab80faa1346f2e377f071cf1b5604b5fc09601ca2bd9aa9e77b9bfb8ba6a90d5c45fcd2759ddaf5a7e79982f36d4caf8914b05cfddc693c128d7076e3042b4ed23f03f2b177614ef4dc868e7ae4ef889627f15e7d69afb3b1658a85971d38fce7111bcd0b1ae929f084927c15e279218f408d38af252fe28416ba9bdb77d63f96256d45f593ad140cdce2800b6", 0xec, 0x26) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) (async) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1e5f) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0) (async) mlock(&(0x7f0000378000/0x3000)=nil, 0x3000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68) (async) unlink(&(0x7f0000000040)='./file0\x00') r1 = socket(0x1, 0x4000, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) (async) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000200), 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) (async) r4 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r4, 0x8020697f, &(0x7f0000000100)) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) r6 = getuid() setresuid(r6, r6, r6) (async) open(&(0x7f0000000100)='./file0\x00', 0x18289, 0x110) (async) truncate(&(0x7f0000000000)='./file0\x00', 0xafffe) (async) kill(0xffffffffffffffff, 0x14) (async) ktrace(&(0x7f0000000940)='./file0\x00', 0x0, 0xa80, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x88) preadv(r7, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0) 4.042651697s ago: executing program 1 (id=126): r0 = socket(0x11, 0x3, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x4) (async) sysctl$hw(&(0x7f0000000000)={0x4, 0x1f}, 0x3, 0x0, 0x0, 0x0, 0x2) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef16ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139bf82f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb6a998df192f9781ea6e2ec58904007b6400008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) r1 = accept4(r0, &(0x7f0000000040)=@in6, &(0x7f0000000080)=0x1c, 0x4000) r2 = kqueue() kevent(r2, &(0x7f00000001c0)=[{{r2}, 0xffffffffffffffff, 0x23, 0x1, 0x3c, 0x8}], 0x1, &(0x7f0000000100)=[{{r2}, 0xfffffffffffffff9, 0x1, 0x10, 0xfffffffffffffffc, 0x1dfb}], 0x5, 0x0) (async) r3 = socket(0x18, 0x3, 0x1) getsockopt(r3, 0x29, 0xa, 0x0, 0x0) socketpair(0x1e, 0x3, 0x2, 0x0) kevent(r2, &(0x7f0000000080), 0x20e97, 0x0, 0xfffffffe, 0x0) r4 = socket(0x18, 0x3, 0x0) getsockopt$sock_int(r4, 0xffff, 0x10, &(0x7f00000000c0), &(0x7f0000000440)=0x4) (async) r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) (async) listen(r6, 0x1) (async) connect$unix(r6, &(0x7f0000000000)=@file={0x3, 0x0, './file1\x00'}, 0xa) (async) r7 = socket(0x1, 0x3, 0x0) ioctl$FIONREAD(r7, 0xc0106924, &(0x7f00000001c0)) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000002c0)="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", 0xfffffdaf) (async) closefrom(r9) (async) close(r8) (async) execve(0x0, &(0x7f0000000340)=[&(0x7f0000000100)='tap'], 0x0) (async) r10 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r10, 0xc028698a, &(0x7f0000000100)) (async) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x8, 0x2, 0xf5}]}) (async) fcntl$dupfd(r0, 0xc, r1) 4.042421819s ago: executing program 2 (id=37): setgid(0xffffffffffffffff) r0 = getegid() setresgid(r0, r0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async, rerun: 64) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, {[0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4], [], [], [{}, {}, {}, {0x0, 0x8000}, {}, {}, {0x0, 0x0, 0x8000}], {}, {0x0, 0x0, 0xf2}}}) (async, rerun: 64) r2 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async, rerun: 32) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) (async, rerun: 32) ioctl$FIONREAD(r2, 0x8040691a, &(0x7f0000000100)) (async) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r3, 0x0) r4 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0xa0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000001e00)=0xc) setresgid(r7, r7, r7) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000780)={{0x0, r7, r6, r7, 0x8f, 0x6}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) (async) semop(0x0, &(0x7f0000000340)=[{0x1, 0x671c, 0x1000}, {0x3, 0x2, 0x800}, {0x2, 0x0, 0x1000}, {0x0, 0x8001, 0x800}, {0x2, 0x1, 0x1800}], 0x5) (async, rerun: 64) setgid(r0) (async, rerun: 64) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) (async) closefrom(r4) (async) sysctl$net_inet_tcp(&(0x7f00000002c0)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, &(0x7f0000000280)="e925604f5c0e6885b80778f7850bdf06000000ae262ea992d6b0c7dfb5fe6c7b89ae678fee9fe28aa38e9e8299e4f81bff3a4cb30bbc", 0xffffffffffffffab) (async) r8 = socket(0x2, 0x8002, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450d) (async, rerun: 32) r9 = open(&(0x7f0000000200)='./bus\x00', 0x1, 0x20) (async, rerun: 32) r10 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) closefrom(r10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x40e, &(0x7f0000000040)=@un=@abs={0xc8, 0x0, 0x0, 0x3}, 0x40) (async, rerun: 64) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (rerun: 64) accept$unix(r1, 0x0, &(0x7f0000000180)) ioctl$DIOCCLRSTATES(r9, 0x0, &(0x7f0000000080)={{0xf78, 0xff, 0x3}, 0x2, '\x00', 0x1, {@addrmask={@v4=@remote={0xac, 0x14, 0x0}, @v6=@mcast2, 0x0, 0x0, 0x7}, [0x3ff, 0xb], 0x81, 0x1, 0x80}, {@any={'\x00', 0x0, 0x145a3d7a6b88ade9, 0xd}, [0x8, 0x7ff], 0x7, 0x5, 0x6}, './file1/file0\x00', './file1\x00', 0x13, 0x40}) 4.04235744s ago: executing program 4 (id=118): open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) (async) setresuid(0xee00, 0xee00, 0x0) (async) setuid(0x0) (async, rerun: 64) chmod(&(0x7f0000000280)='./file0\x00', 0x3a) (async, rerun: 64) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r0 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r0, 0x8060693c, &(0x7f0000000080)) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c2) (async) truncate(&(0x7f00000003c0)='./file0\x00', 0x440030900) (async) access(&(0x7f0000000000)='./file0\x00', 0x2) 4.042312351s ago: executing program 5 (id=12): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000080)={&(0x7f0000000000)=[{0x20, 0xa}, {0x23, 0x4}], 0x2}) (async) mknod(&(0x7f00000002c0)='./file1\x00', 0x2000, 0x268) (async, rerun: 32) access(&(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x156) (async) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000080)={0x0, 0x0}) 4.042139486s ago: executing program 7 (id=131): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) (async) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb5219f1000b913f1, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb5219f1000b913f1, 0x10) nanosleep(&(0x7f0000000140)={0x80000000008885, 0xb0c}, &(0x7f00000001c0)) ktrace(&(0x7f0000000100)='./file0\x00', 0x4, 0xd27d43220c7ff9d, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r0, 0xc0206981, &(0x7f00000001c0)) r1 = socket$inet(0x2, 0x1, 0x4) connect$inet(r1, &(0x7f0000000100)={0x10, 0x2, 0x2, 0x8000}, 0x10) 3.256062934s ago: executing program 5 (id=132): sysctl$kern(&(0x7f0000000440)={0x1, 0x30}, 0x2, 0x0, 0x0, &(0x7f0000000540), 0x0) (async) open(0x0, 0x80000000000206, 0x4ebfac6bbaf7909) r0 = semget$private(0x0, 0x4, 0x122) semop(r0, &(0x7f0000000080)=[{0x3, 0x6}, {0x3, 0xffff, 0x101b2ebd87da5016}], 0x2) (async, rerun: 64) r1 = semget$private(0x0, 0x6, 0x0) (rerun: 64) semop(r1, &(0x7f00000011c0)=[{0x3, 0x9, 0x1800}], 0x1) semctl$SETVAL(r1, 0x0, 0x8, 0x0) (async) r2 = socket(0x2, 0x1, 0x0) sysctl$net_inet_tcp(&(0x7f0000000240)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, &(0x7f0000000340), 0x0) (async, rerun: 32) ppoll(&(0x7f00000000c0)=[{r2, 0x20}], 0x1, 0x0, 0x0) (async, rerun: 32) sysctl$kern(&(0x7f0000000000)={0x1, 0x4e}, 0x2, &(0x7f0000000480)="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", &(0x7f0000001480)=0x1000, &(0x7f0000000100)="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", 0x12b) 3.254921383s ago: executing program 7 (id=133): r0 = syz_open_pts() r1 = socket(0x2, 0x8002, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) socket(0x18, 0x3, 0x84) getsockopt$sock_cred(r2, 0xffff, 0x1022, 0x0, 0x0) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/1, 0x1}], 0x1) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x80, 0x4, 0xfbfffffe, 0xfffffffe, "dd6c1f460000ff20004092d6126e4ed671e500", 0x800}) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x4000, 0x0, 0x1, 0x401, "b766a407210ff8456e1b2000000107001000", 0x1, 0x209}) ioctl$TIOCSBRK(r0, 0x2000747b) 1.704811553s ago: executing program 0 (id=79): sendsyslog(&(0x7f0000004240)="3c2b3c7be6070663ff8229e129123179b62a94f3c332c35752de1059888dae162754155e454003486092af84a9de93c2210a0dec44ca061286a2700820c04d963bcee0a5c09c8e6be14df61c21fccd2e7a83435f77c261030c554f27173644ab80faa1346f2e377f071cf1b5604b5fc09601ca2bd9aa9e77b9bfb8ba6a90d5c45fcd2759ddaf5a7e79982f36d4caf8914b05cfddc693c128d7076e3042b4ed23f03f2b177614ef4dc868e7ae4ef889627f15e7d69afb3b1658a85971d38fce7111bcd0b1ae929f084927c15e279218f408d38af252fe28416ba9bdb77d63f96256d45f593ad140cdce2800b6", 0xec, 0x26) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) (async) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1e5f) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0) (async) mlock(&(0x7f0000378000/0x3000)=nil, 0x3000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68) (async) unlink(&(0x7f0000000040)='./file0\x00') r1 = socket(0x1, 0x4000, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) (async) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000200), 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) (async) r4 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r4, 0x8020697f, &(0x7f0000000100)) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) r6 = getuid() setresuid(r6, r6, r6) (async) open(&(0x7f0000000100)='./file0\x00', 0x18289, 0x110) (async) truncate(&(0x7f0000000000)='./file0\x00', 0xafffe) (async) kill(0xffffffffffffffff, 0x14) (async) ktrace(&(0x7f0000000940)='./file0\x00', 0x0, 0xa80, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x88) preadv(r7, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0) 1.502786718s ago: executing program 1 (id=126): r0 = socket(0x11, 0x3, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x4) (async) sysctl$hw(&(0x7f0000000000)={0x4, 0x1f}, 0x3, 0x0, 0x0, 0x0, 0x2) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef16ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139bf82f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb6a998df192f9781ea6e2ec58904007b6400008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) r1 = accept4(r0, &(0x7f0000000040)=@in6, &(0x7f0000000080)=0x1c, 0x4000) r2 = kqueue() kevent(r2, &(0x7f00000001c0)=[{{r2}, 0xffffffffffffffff, 0x23, 0x1, 0x3c, 0x8}], 0x1, &(0x7f0000000100)=[{{r2}, 0xfffffffffffffff9, 0x1, 0x10, 0xfffffffffffffffc, 0x1dfb}], 0x5, 0x0) (async) r3 = socket(0x18, 0x3, 0x1) getsockopt(r3, 0x29, 0xa, 0x0, 0x0) socketpair(0x1e, 0x3, 0x2, 0x0) kevent(r2, &(0x7f0000000080), 0x20e97, 0x0, 0xfffffffe, 0x0) r4 = socket(0x18, 0x3, 0x0) getsockopt$sock_int(r4, 0xffff, 0x10, &(0x7f00000000c0), &(0x7f0000000440)=0x4) (async) r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) (async) listen(r6, 0x1) (async) connect$unix(r6, &(0x7f0000000000)=@file={0x3, 0x0, './file1\x00'}, 0xa) (async) r7 = socket(0x1, 0x3, 0x0) ioctl$FIONREAD(r7, 0xc0106924, &(0x7f00000001c0)) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000002c0)="7c84cf179279b50eda5dd1951a661d2e3a20851082c188f8b3d8a063d2025ff0d27a44bc29bdcac27fcb7aaa95cb2007be22c5553cd2f66a1f419a83d4275218a89d7a7803f069d851ff628dd309c40f6e3c932af00cb6219ae6e21d2c28d492cd5404b16dfa627d93b1e8ad2ea49d2344c1a3b234bd6f1c70fd4252844a6e6ab7b8997bc55fa22ce951ee038d289078b95510b0f2473ce1348434f0ec4a885ee84fd08fc50f08ca7991af3f8c322b496466f804c4b700cc9391855bd0ee339196de2b5ec2d8425c711d3f9e051eb055d45c693d7549712f5284a9fbca7d15c5bf1a9c8e3b3c1a43983056782e046c29e3d57082f7743b8bf6d994cd3c26c85609eaa11e6f7bc4", 0xfffffdaf) (async) closefrom(r9) (async) close(r8) (async) execve(0x0, &(0x7f0000000340)=[&(0x7f0000000100)='tap'], 0x0) (async) r10 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r10, 0xc028698a, &(0x7f0000000100)) (async) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x8, 0x2, 0xf5}]}) (async) fcntl$dupfd(r0, 0xc, r1) 1.502560691s ago: executing program 2 (id=37): setgid(0xffffffffffffffff) r0 = getegid() setresgid(r0, r0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async, rerun: 64) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, {[0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4], [], [], [{}, {}, {}, {0x0, 0x8000}, {}, {}, {0x0, 0x0, 0x8000}], {}, {0x0, 0x0, 0xf2}}}) (async, rerun: 64) r2 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async, rerun: 32) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) (async, rerun: 32) ioctl$FIONREAD(r2, 0x8040691a, &(0x7f0000000100)) (async) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r3, 0x0) r4 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0xa0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000001e00)=0xc) setresgid(r7, r7, r7) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000780)={{0x0, r7, r6, r7, 0x8f, 0x6}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) (async) semop(0x0, &(0x7f0000000340)=[{0x1, 0x671c, 0x1000}, {0x3, 0x2, 0x800}, {0x2, 0x0, 0x1000}, {0x0, 0x8001, 0x800}, {0x2, 0x1, 0x1800}], 0x5) (async, rerun: 64) setgid(r0) (async, rerun: 64) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) (async) closefrom(r4) (async) sysctl$net_inet_tcp(&(0x7f00000002c0)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, &(0x7f0000000280)="e925604f5c0e6885b80778f7850bdf06000000ae262ea992d6b0c7dfb5fe6c7b89ae678fee9fe28aa38e9e8299e4f81bff3a4cb30bbc", 0xffffffffffffffab) (async) r8 = socket(0x2, 0x8002, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450d) (async, rerun: 32) r9 = open(&(0x7f0000000200)='./bus\x00', 0x1, 0x20) (async, rerun: 32) r10 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) closefrom(r10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x40e, &(0x7f0000000040)=@un=@abs={0xc8, 0x0, 0x0, 0x3}, 0x40) (async, rerun: 64) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (rerun: 64) accept$unix(r1, 0x0, &(0x7f0000000180)) ioctl$DIOCCLRSTATES(r9, 0x0, &(0x7f0000000080)={{0xf78, 0xff, 0x3}, 0x2, '\x00', 0x1, {@addrmask={@v4=@remote={0xac, 0x14, 0x0}, @v6=@mcast2, 0x0, 0x0, 0x7}, [0x3ff, 0xb], 0x81, 0x1, 0x80}, {@any={'\x00', 0x0, 0x145a3d7a6b88ade9, 0xd}, [0x8, 0x7ff], 0x7, 0x5, 0x6}, './file1/file0\x00', './file1\x00', 0x13, 0x40}) 1.502461904s ago: executing program 3 (id=27): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffe, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x1a0) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mprotect(&(0x7f0000674000/0x3000)=nil, 0x3000, 0x0) lseek(r0, 0x400, 0x2) open$dir(&(0x7f0000000040)='./file1\x00', 0x20000, 0x0) (async) open$dir(&(0x7f0000000040)='./file1\x00', 0x20000, 0x0) closefrom(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 1.502266283s ago: executing program 5 (id=134): r0 = socket(0x18, 0x1, 0x5) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000100)={0x200, 0xfffffffc, 0x4000002, 0x402, "711871990acd58441b6dda2d9e60b749b838d21f", 0xf1d, 0x21cf}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) sysctl$hw(&(0x7f0000000000)={0x6, 0x2}, 0x2, &(0x7f0000001480)="f1a42138cd18f3b0a16bc56a730bda8b263c0f70544fe00a08731bf3c827cd", &(0x7f0000000100)=0x1f, 0x0, 0x0) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) sysctl$net_inet6_ip6(&(0x7f00000000c0)={0x4, 0x18, 0x29, 0x32}, 0x4, &(0x7f0000000100)="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"/314, 0x0, 0x0, 0x0) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$DIOCKILLSTATES(r2, 0x0, &(0x7f0000000280)={{0x0, 0x2}, 0x2, '\x00', 0x1, {@addrmask={@v4=@multicast2, @v6=@mcast2}, [0x8], 0x4, 0x4, 0x4}, {@table={'./file0\x00', 0x0, 0x3, 0x8b}, [0xfc, 0x6c], 0x0, 0x6, 0x4}, './file0\x00', './file0\x00', 0x5, 0x19}) ioctl$BIOCSFILDROP(r2, 0x80044279, &(0x7f0000000380)) 1.501809023s ago: executing program 6 (id=32): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r0 = socket(0x2, 0x8002, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) (async) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x101) (async, rerun: 64) mknod(&(0x7f00000000c0)='.\x00', 0x8000, 0x637d) (async, rerun: 64) open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe0) (async) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r1) (async) poll(&(0x7f00000000c0), 0x0, 0x8) (async) r2 = syz_open_pts() ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000080)=0x6574) (async) syz_open_pts() syz_open_pts() r3 = socket(0x2, 0x8002, 0x0) r4 = fcntl$dupfd(r3, 0x1, r3) closefrom(r4) (async) kqueue() syz_emit_ethernet(0x2e, &(0x7f0000000100)={@empty, @empty, [{[], {0x8100, 0x1, 0x1, 0x3}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="fd67a8616c88", @broadcast, @random="3781c4652fca", @remote={0xac, 0x14, 0x0}}}}}) syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaa2ffffffffffff0800450000680000200200009078ac1400bb7f0000014e234e200008907800e46eed18fc569e9a2b0fd89b685e8701d73fd49fb1411ed5cd9771e6b00b46ed037ea225e63e1f3a3b6549aee8196f9f9b661f82c636ffd8d2582b219899b334b1c88e26b934a52a7c41d8"]) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4287e) (async) r5 = open(&(0x7f0000000300)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7815) (async) setgroups(0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000080)={0x3, 0xe, 0x200, 0x1, 0x2}) (async) mprotect(&(0x7f0000190000/0x4000)=nil, 0x4000, 0x5) (async) ioctl$FIONREAD(r5, 0x800474c4, &(0x7f0000000080)) (async, rerun: 32) write(r5, &(0x7f0000000040)="5fd4eda2e6fcd4cf310d884a415e", 0xe) (rerun: 32) 1.501505803s ago: executing program 7 (id=135): syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="db516acb59ccbd85aa8baaaa49470bc8450500000000000000009078ac1400bbffffffff4e214e220008"]) r0 = syz_open_pts() ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f0000000000)={0xff, 0x0, 0x3, 0x1}) syz_emit_ethernet(0x24, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0]) r1 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @multicast2, @multicast1}, @icmp=@redirect={0x5, 0x1, 0x0, @multicast2, {0x5, 0x4, 0x2, 0x2, 0xe21, 0x67, 0x0, 0x6, 0x11, 0x3, @multicast1, @local={0xac, 0x14, 0x0}}}}}}}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000dc0), 0x80, 0x0) r4 = getppid() setpgid(0x0, r4) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x400, r4) ioctl$DIOCNATLOOK(r3, 0xc0504417, &(0x7f0000005040)={@v4=@broadcast, @v4=@broadcast, @v4=@loopback, @v4=@local={0xac, 0x14, 0x0}, 0x7ff, 0x1, 0x6, 0x326, 0x9, 0x2c, 0x2, 0xf, 0x3}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x8010, r2, 0x0) r5 = syz_open_pts() fcntl$lock(r5, 0x8, &(0x7f0000000040)={0x6, 0x2000003, 0x0, 0x3}) fcntl$lock(r5, 0x9, &(0x7f0000000000)={0x8, 0xa, 0x0, 0x1}) fcntl$lock(r5, 0x9, &(0x7f00000000c0)={0x6, 0xe, 0x200, 0x2, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0xe, 0xff, r2}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r6 = syz_open_pts() close(r6) r7 = syz_open_pts() ioctl$TIOCSETA(r7, 0x802c7414, &(0x7f00000000c0)={0x3, 0x174, 0x2001, 0xfffffffb, "ff77000009f57f00000000000000fbffffff00", 0x2, 0x480}) writev(r6, &(0x7f0000000340)=[{&(0x7f00000001c0)="a8935fb6f9b26790b405852f891ef04c4945799db33d3c2d4ddc5d19b45ec615a75d26bb0d84f1dcf601abe92fd4d9cd61c859ecda7f", 0x36}], 0x1) ioctl$DIOCNATLOOK(r2, 0xc0504417, &(0x7f0000000100)={@v4, @v4=@multicast1, @v6=@empty, @v4, 0x5e6, 0x3, 0x2, 0x0, 0x0, 0x9, 0x0, 0x6, 0x1}) ftruncate(r1, 0x65d) bind$unix(r1, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) open(&(0x7f00000000c0)='./file0\x00', 0x18289, 0x142) 659.550075ms ago: executing program 0 (id=79): sendsyslog(&(0x7f0000004240)="3c2b3c7be6070663ff8229e129123179b62a94f3c332c35752de1059888dae162754155e454003486092af84a9de93c2210a0dec44ca061286a2700820c04d963bcee0a5c09c8e6be14df61c21fccd2e7a83435f77c261030c554f27173644ab80faa1346f2e377f071cf1b5604b5fc09601ca2bd9aa9e77b9bfb8ba6a90d5c45fcd2759ddaf5a7e79982f36d4caf8914b05cfddc693c128d7076e3042b4ed23f03f2b177614ef4dc868e7ae4ef889627f15e7d69afb3b1658a85971d38fce7111bcd0b1ae929f084927c15e279218f408d38af252fe28416ba9bdb77d63f96256d45f593ad140cdce2800b6", 0xec, 0x26) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) (async) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1e5f) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x8, 0x0) (async) mlock(&(0x7f0000378000/0x3000)=nil, 0x3000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68) (async) unlink(&(0x7f0000000040)='./file0\x00') r1 = socket(0x1, 0x4000, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) (async) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000200), 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) (async) r4 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r4, 0x8020697f, &(0x7f0000000100)) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) r6 = getuid() setresuid(r6, r6, r6) (async) open(&(0x7f0000000100)='./file0\x00', 0x18289, 0x110) (async) truncate(&(0x7f0000000000)='./file0\x00', 0xafffe) (async) kill(0xffffffffffffffff, 0x14) (async) ktrace(&(0x7f0000000940)='./file0\x00', 0x0, 0xa80, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x88) preadv(r7, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0) 122.653679ms ago: executing program 5 (id=136): setuid(0xffffffffffffffff) r0 = syz_open_pts() r1 = openat$bpf(0xffffffffffffff9c, 0x0, 0xfe, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) ioctl$BIOCSDIRFILT(r2, 0x8004427d, &(0x7f0000000000)=0x9) syz_emit_ethernet(0x16, &(0x7f0000000080)={@local, @broadcast, [{[{0x88a8, 0x7, 0x0, 0x3}], {0x8100, 0x2}}], {@generic={0x803f}}}) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)) 121.973221ms ago: executing program 7 (id=137): socket$inet6(0x18, 0x2, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) (async, rerun: 32) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) (async) r2 = setsid() fcntl$setown(r1, 0x6, r2) (async) fcntl$setown(r1, 0x6, 0x0) (async) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x18, 0x0, 0x7, "0000000000070000000010d30200", 0xd7}, 0x1c) 0s ago: executing program 2 (id=37): setgid(0xffffffffffffffff) r0 = getegid() setresgid(r0, r0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async, rerun: 64) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, {[0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4], [], [], [{}, {}, {}, {0x0, 0x8000}, {}, {}, {0x0, 0x0, 0x8000}], {}, {0x0, 0x0, 0xf2}}}) (async, rerun: 64) r2 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async, rerun: 32) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) (async, rerun: 32) ioctl$FIONREAD(r2, 0x8040691a, &(0x7f0000000100)) (async) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r3, 0x0) r4 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0xa0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000001e00)=0xc) setresgid(r7, r7, r7) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000780)={{0x0, r7, r6, r7, 0x8f, 0x6}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) (async) semop(0x0, &(0x7f0000000340)=[{0x1, 0x671c, 0x1000}, {0x3, 0x2, 0x800}, {0x2, 0x0, 0x1000}, {0x0, 0x8001, 0x800}, {0x2, 0x1, 0x1800}], 0x5) (async, rerun: 64) setgid(r0) (async, rerun: 64) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) (async) closefrom(r4) (async) sysctl$net_inet_tcp(&(0x7f00000002c0)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, &(0x7f0000000280)="e925604f5c0e6885b80778f7850bdf06000000ae262ea992d6b0c7dfb5fe6c7b89ae678fee9fe28aa38e9e8299e4f81bff3a4cb30bbc", 0xffffffffffffffab) (async) r8 = socket(0x2, 0x8002, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450d) (async, rerun: 32) r9 = open(&(0x7f0000000200)='./bus\x00', 0x1, 0x20) (async, rerun: 32) r10 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) closefrom(r10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x40e, &(0x7f0000000040)=@un=@abs={0xc8, 0x0, 0x0, 0x3}, 0x40) (async, rerun: 64) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (rerun: 64) accept$unix(r1, 0x0, &(0x7f0000000180)) ioctl$DIOCCLRSTATES(r9, 0x0, &(0x7f0000000080)={{0xf78, 0xff, 0x3}, 0x2, '\x00', 0x1, {@addrmask={@v4=@remote={0xac, 0x14, 0x0}, @v6=@mcast2, 0x0, 0x0, 0x7}, [0x3ff, 0xb], 0x81, 0x1, 0x80}, {@any={'\x00', 0x0, 0x145a3d7a6b88ade9, 0xd}, [0x8, 0x7ff], 0x7, 0x5, 0x6}, './file1/file0\x00', './file1\x00', 0x13, 0x40}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> show kasan No such command ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(ffffffff83983180,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(ffffffff83983168,0) at rw_do_enter_write+0xba uvn_io(fffffd800f99fa60,ffff80002ab5c678,1,202,0) at uvn_io+0x54c uvn_get(fffffd800f99fa60,0,ffff80002ab5c748,ffff80002ab5c72c,0,1,24c7ce6a0c4c608b,1) at uvn_get+0x31d uvm_fault_lower_io(ffff80002ab5c960,ffff80002ab5c998,ffff80002ab5c7e0,ffff80002ab5c7c8) at uvm_fault_lower_io+0x2ce uvm_fault_lower(ffff80002ab5c960,ffff80002ab5c998,ffff80002ab5c8e0) at uvm_fault_lower+0x28d uvm_fault(fffffd806cd8c5d8,200000001000,0,1) at uvm_fault+0x274 kpageflttrap(ffff80002ab5cb10,200000001200) at kpageflttrap+0x2f4 kerntrap(ffff80002ab5cb10) at kerntrap+0x19d alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b _copyin() at _copyin+0x5b pfioctl(14900,c4504441,ffff800001659800,1,ffff800045feb4e0) at pfioctl+0x1377 VOP_IOCTL(fffffd806cf441e0,c4504441,ffff800001659800,1,fffffd80097fd4e0,ffff800045feb4e0) at VOP_IOCTL+0xac vn_ioctl(fffffd806c5da728,c4504441,ffff800001659800,ffff800045feb4e0) at vn_ioctl+0xf8 sys_ioctl(ffff800045feb4e0,ffff80002ab5d6c0,ffff80002ab5d610) at sys_ioctl+0x674 syscall(ffff80002ab5d6c0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc4675e34fe0, count: -18 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80002ab5c430 rbx 0 rdx 0 rcx 0xffff800045feb4e0 rax 0xffff80002999dff0 r8 0xffff80002ab5c310 r9 0x8080808080808080 r10 0xd1a1cad137dda9ed r11 0xdd0778178964bdc6 r12 0xfffffd80040da2c0 r13 0xfffffd80048c91b8 r14 0x3 r15 0xffffffff8353aa56 substchar+0x608e rip 0xffffffff83200c75 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002ab5c420 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=200049 pid=45290 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045feb248,0xffff80002a32b790 process=0xffff80003c3cd858 user=0xffff80002ab58000, vmspace=0xfffffd806cd8c5d8 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 5167 226608 10523 0 2 0x100000 0 sh 31318 178760 39331 0 7 0x100000 0 sh 39331 102160 13199 0 3 0x100002 0x88 sigsusp sh 10523 256048 76377 0 3 0x100002 0x88 sigsusp sh 6872 183617 0 0 3 0x14000 0x200 acct acct 23257 245595 56356 0 3 0x2 0 clonelk ifconfig 56356 10106 81913 0 3 0x100002 0x88 sigsusp sh 76377 502881 21726 0 3 0x2 0x80 wait syz-executor 45290 188964 60769 0 2 0 0 syz-executor *45290 200049 60769 0 7 0 0x4000000 syz-executor 45290 235170 60769 0 3 0 0x4000080 fsleep syz-executor 45290 351892 60769 0 3 0 0x4000080 fsleep syz-executor 81913 373841 21726 0 3 0x2 0x80 wait syz-executor 13199 108963 21726 0 3 0x2 0x80 wait syz-executor 96508 198718 21726 0 3 0x2 0x80 nanoslp syz-executor 60769 454520 21726 0 3 0x2 0x80 nanoslp syz-executor 21726 12434 1 0 3 0x2 0x80 nanoslp syz-executor 42585 485323 5720 0 3 0x10 0x88 kqread sshd-session 5720 449751 97743 0 3 0x12 0x80 kqread sshd-session 50180 143836 1 0 3 0x100003 0x80 ttyin getty 97743 455973 1 0 3 0 0x88 kqread sshd 10839 105900 70632 74 3 0x1100012 0x80 bpf pflogd 70632 491175 1 0 3 0 0x80 sbwait pflogd 10535 425862 27075 73 3 0x1100010 0x80 kqread syslogd 27075 497271 1 0 3 0x100002 0x80 sbwait syslogd 64612 95789 1 0 3 0x100000 0x80 kqread resolvd 40980 225520 60673 77 3 0x100012 0x80 kqread dhcpleased 23893 391176 60673 77 3 0x100012 0x80 kqread dhcpleased 60673 212282 1 0 3 0 0x80 kqread dhcpleased 66621 306249 0 0 3 0x14000 0x200 bored smr 88897 265967 0 0 2 0x14000 0x200 zerothread 84911 227737 0 0 3 0x14000 0x200 aiodoned aiodoned 44291 228498 0 0 3 0x14000 0x200 syncer update 29114 450850 0 0 3 0x14000 0x200 cleaner cleaner 93235 339997 0 0 3 0x14000 0x200 reaper reaper 80853 167694 0 0 3 0x14000 0x200 pgdaemon pagedaemon 97804 128704 0 0 3 0x14000 0x200 bored viomb 34371 186402 0 0 3 0x14000 0x40000200 acpi0 acpi0 73838 479090 0 0 3 0x14000 0x40000200 idle1 22322 321924 0 0 3 0x14000 0x200 bored softnet1 72576 174823 0 0 3 0x14000 0x200 bored softnet0 1557 45397 0 0 3 0x14000 0x200 smrbar systqmp 68993 507333 0 0 3 0x14000 0x200 bored systq 24789 512431 0 0 3 0x14000 0x200 tmoslp softclockmp 49601 24729 0 0 3 0x14000 0x40000200 tmoslp softclock 12231 427494 0 0 3 0x14000 0x40000200 idle0 1 473411 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 45290 (syz-executor) thread 0xffff800045feb4e0 (200049) exclusive rwlock pf_lock r = 0 (0xffffffff839d8e68) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 pfioctl+0x1342 #3 VOP_IOCTL+0xac #4 vn_ioctl+0xf8 #5 sys_ioctl+0x674 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive rwlock pfioctl_rw r = 0 (0xffffffff839d8ef8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 pfioctl+0x1d4 #3 VOP_IOCTL+0xac #4 vn_ioctl+0xf8 #5 sys_ioctl+0x674 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83afcc00) #0 witness_lock+0x5f1 #1 vn_ioctl+0x4d #2 sys_ioctl+0x674 #3 syscall+0xbd4 #4 Xsyscall+0x128 Process 1557 (systqmp) thread 0xffff800045ffe530 (45397) shared rwlock systqmp r = 0 (0xffffffff839ed2b8) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11047 12075K 12279K 166960K 13152 0 pcb 17 12K 12K 166960K 56 0 rtable 145 6K 9K 166960K 2751 0 pf 33 17K 24K 166960K 314 0 ifaddr 28 5K 8K 166960K 380 0 ifgroup 43 2K 2K 166960K 405 0 sysctl 2 1K 9K 166960K 9 0 counters 64 36K 37K 166960K 270 0 ioctlops 1 2K 4K 166960K 1608 0 iov 0 0K 16K 166960K 7 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1302 82K 82K 166960K 2236 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 7 0 VM map 2 1K 1K 166960K 2 0 sem 27 3K 3K 166960K 76 0 dirhash 15 2K 2K 166960K 18 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 89K 166960K 1533 0 sigio 0 0K 0K 166960K 4 0 proc 79 131K 180K 166960K 2763 0 subproc 63 3K 4K 166960K 801 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 18 0 in_multi 52 3K 6K 166960K 964 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 32 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 55 254K 254K 166960K 55 0 exec 0 0K 1K 166960K 1416 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 210 161K 184K 166960K 11438 0 UVM aobj 7 2K 2K 166960K 7 0 pinsyscall 41 82K 103K 166960K 4729 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 2 0 NDP 13 0K 2K 166960K 277 0 temp 34 9119K 9151K 166960K 17873 0 kqueue 13 20K 24K 166960K 57 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 197 0 194 1 0 1 1 0 8 0 rtentry 176 980 0 924 6 1 5 6 0 8 0 unpcb 144 579 0 562 6 5 1 6 0 8 0 syncache 336 5 0 5 2 2 0 1 0 8 0 tcpcb 736 38 0 33 1 0 1 1 0 8 0 arp 136 176 0 166 1 0 1 1 0 8 0 inpcb 328 505 0 496 2 1 1 2 0 8 0 nd6 152 259 0 247 1 0 1 1 0 8 0 pkpcb 40 9 0 9 2 1 1 1 0 8 1 kcovpl 48 89 0 82 1 0 1 1 0 8 0 ppxss 1192 19 0 19 1 0 1 1 0 8 1 pppxif 1576 1 0 1 1 1 0 1 0 8 0 pfstscr 40 4 0 4 2 2 0 1 0 8 0 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 2 0 1 1 0 1 1 0 8 0 pfosfp 40 1428 0 1428 5 5 0 5 0 8 0 pfosfpen 112 1428 0 1428 21 21 0 21 0 8 0 pfrktable 1344 1 0 0 1 0 1 1 0 8 0 pfsrclim 320 1 0 1 1 0 1 1 0 8 1 pfanchor 1288 15 0 14 1 0 1 1 0 8 0 pftag 88 2 0 0 1 0 1 1 0 8 0 pfstitem 24 52 0 20 1 0 1 1 0 8 0 pfstkey 128 56 0 24 2 0 2 2 0 8 0 pfstate 448 54 0 22 5 0 5 5 0 8 0 pfrule 1360 35 0 28 2 1 1 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 3986 0 3700 35 11 24 31 0 8 0 art_table 40 3988 0 3700 5 0 5 5 0 8 0 art_node 32 980 0 913 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 1 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 72 74 0 49 1 0 1 1 0 8 0 shmpl 120 4 0 0 1 0 1 1 0 8 0 dirhash 1024 21 0 2 3 0 3 3 0 8 0 dino2pl 256 2043 0 386 104 0 104 104 0 8 0 ffsino 296 2043 0 386 128 0 128 128 0 8 0 nchpl 144 2531 0 463 77 0 77 77 0 8 0 rtmask 32 4 0 4 1 1 0 1 0 8 0 vnodes 216 2943 0 0 164 0 164 164 0 8 0 namei 1024 19803 0 19803 5 3 2 2 0 8 2 percpumem 16 151 0 103 1 0 1 1 0 8 0 kstatmem 264 213 0 192 3 1 2 3 0 8 0 scsiplug 72 1 0 1 1 1 0 1 0 8 0 scxspl 216 23639 0 23639 10 9 1 8 1 8 1 plimitpl 152 138 0 123 1 0 1 1 0 8 0 sigapl 424 1689 0 1642 7 1 6 7 0 8 0 knotepl 120 298 0 0 10 0 10 10 0 8 0 kqueuepl 224 67 0 58 1 0 1 1 0 8 0 pipepl 344 379 0 352 4 0 4 4 0 8 0 fdescpl 528 1672 0 1642 3 0 3 3 0 8 0 filepl 160 6173 0 5973 18 7 11 18 0 8 1 lockfpl 104 77 0 75 1 0 1 1 0 8 0 lockfspl 48 39 0 37 1 0 1 1 0 8 0 sessionpl 144 115 0 106 1 0 1 1 0 8 0 pgrppl 48 205 0 189 1 0 1 1 0 8 0 ucredpl 104 270 0 257 1 0 1 1 0 8 0 zombiepl 144 1645 0 1642 1 0 1 1 0 8 0 processpl 1240 1689 0 1642 5 1 4 5 0 8 0 procpl 664 2236 0 2186 6 0 6 6 0 8 1 sockpl 752 1299 0 1270 20 16 4 17 0 8 1 mcl64k 65536 6 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k128 9344 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 117 0 0 15 0 15 15 0 8 0 mcl2k 2048 30 0 0 4 0 4 4 0 8 0 mextrefs 64 29 0 0 1 0 1 1 0 8 0 mtagpl 96 4 0 0 1 0 1 1 0 8 0 mbufpl 256 217 0 0 14 0 14 14 0 8 0 bufpl 272 10495 0 4364 409 0 409 409 0 8 0 anonpl 32 7278 0 0 59 0 59 59 0 247 0 amapchunkpl 152 30670 0 30281 28 9 19 28 0 158 2 amappl16 200 2837 0 2827 13 4 9 9 0 8 6 amappl15 192 112 0 112 1 1 0 1 0 8 0 amappl14 184 1374 0 1370 1 0 1 1 0 8 0 amappl13 176 288 0 276 1 0 1 1 0 8 0 amappl12 168 2234 0 2207 2 0 2 2 0 8 0 amappl11 160 3 0 3 1 1 0 1 0 8 0 amappl10 152 85 0 71 1 0 1 1 0 8 0 amappl9 144 276 0 276 1 1 0 1 0 8 0 amappl8 136 427 0 424 1 0 1 1 0 8 0 amappl7 128 302 0 288 1 0 1 1 0 8 0 amappl6 120 944 0 939 1 0 1 1 0 8 0 amappl5 112 98 0 87 1 0 1 1 0 8 0 amappl4 104 527 0 507 1 0 1 1 0 8 0 amappl3 96 5820 0 5738 3 0 3 3 0 8 0 amappl2 88 1476 0 1403 2 0 2 2 0 8 0 amappl1 80 21503 0 20914 15 1 14 15 0 8 1 amappl 88 9354 0 9219 5 0 5 5 0 92 1 uvmvnodes 80 108 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 6 0 0 1 0 1 1 0 8 0 uaddrrnd 24 1672 0 1642 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1672 0 1642 1 0 1 1 0 8 0 vmmpekpl 168 14759 0 14701 4 0 4 4 0 8 0 vmmpepl 168 116388 0 114678 94 10 84 93 0 357 5 vmsppl 488 1671 0 1642 5 0 5 5 0 8 0 rwobjpl 80 34939 0 33938 26 1 25 25 0 8 1 pdppl 4096 3351 0 3284 181 114 67 83 0 8 0 pvpl 32 13091 0 0 107 1 106 107 0 265 0 pmappl 256 1671 0 1642 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 791 0 133 19 0 19 19 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff839b2ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0xf softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff83afc400) at __mp_lock+0x192 syscall(ffff80003c3ba000) at syscall+0xaf4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c34bac66360, count: -10 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(ffffffff83983180,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(ffffffff83983168,0) at rw_do_enter_write+0xba uvn_io(fffffd800f99fa60,ffff80002ab5c678,1,202,0) at uvn_io+0x54c uvn_get(fffffd800f99fa60,0,ffff80002ab5c748,ffff80002ab5c72c,0,1,24c7ce6a0c4c608b,1) at uvn_get+0x31d uvm_fault_lower_io(ffff80002ab5c960,ffff80002ab5c998,ffff80002ab5c7e0,ffff80002ab5c7c8) at uvm_fault_lower_io+0x2ce uvm_fault_lower(ffff80002ab5c960,ffff80002ab5c998,ffff80002ab5c8e0) at uvm_fault_lower+0x28d uvm_fault(fffffd806cd8c5d8,200000001000,0,1) at uvm_fault+0x274 kpageflttrap(ffff80002ab5cb10,200000001200) at kpageflttrap+0x2f4 kerntrap(ffff80002ab5cb10) at kerntrap+0x19d alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b _copyin() at _copyin+0x5b pfioctl(14900,c4504441,ffff800001659800,1,ffff800045feb4e0) at pfioctl+0x1377 VOP_IOCTL(fffffd806cf441e0,c4504441,ffff800001659800,1,fffffd80097fd4e0,ffff800045feb4e0) at VOP_IOCTL+0xac vn_ioctl(fffffd806c5da728,c4504441,ffff800001659800,ffff800045feb4e0) at vn_ioctl+0xf8 sys_ioctl(ffff800045feb4e0,ffff80002ab5d6c0,ffff80002ab5d610) at sys_ioctl+0x674 syscall(ffff80002ab5d6c0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc4675e34fe0, count: -18