kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Wed Feb 19 22:47:18 PST 2020 OpenBSD/amd64 (ci-openbsd-main-9.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.0.215' (ECDSA) to the list of known hosts. 2020/02/19 22:47:33 fuzzer started 2020/02/19 22:47:39 dialing manager at 10.128.15.235:16300 2020/02/19 22:47:39 syscalls: 337 2020/02/19 22:47:39 code coverage: enabled 2020/02/19 22:47:39 comparison tracing: enabled 2020/02/19 22:47:39 extra coverage: support is not implemented in syzkaller 2020/02/19 22:47:39 setuid sandbox: enabled 2020/02/19 22:47:39 namespace sandbox: support is not implemented in syzkaller 2020/02/19 22:47:39 Android sandbox: support is not implemented in syzkaller 2020/02/19 22:47:39 fault injection: support is not implemented in syzkaller 2020/02/19 22:47:39 leak checking: support is not implemented in syzkaller 2020/02/19 22:47:39 net packet injection: enabled 2020/02/19 22:47:39 net device setup: support is not implemented in syzkaller 2020/02/19 22:47:39 concurrency sanitizer: support is not implemented in syzkaller 2020/02/19 22:47:39 devlink PCI setup: support is not implemented in syzkaller 22:47:43 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x30004) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x800, 0x0) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa) open$dir(&(0x7f0000000100)='./file0\x00', 0x10, 0x1) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xa0) r2 = socket$inet(0x2, 0x0, 0xa5) ioctl$FIOSETOWN(r2, 0x8004667c, &(0x7f0000000240)=0x3) socket(0x10, 0x4, 0x20) getpid() pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x10000) ioctl$TIOCGFLAGS(r3, 0x4004745d, &(0x7f00000002c0)) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0xc) getsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000380)=""/27, &(0x7f00000003c0)=0x1b) r5 = dup(0xffffffffffffffff) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000440)={0x6, &(0x7f0000000400)=[{0x9, 0x40, 0x0, 0x8001}, {0x1ff, 0x20, 0x40, 0xffffffff}, {0x8001, 0x3, 0x6, 0xc820}, {0x0, 0x9, 0x1f, 0x2}, {0x517b, 0x1f, 0x8, 0x1}, {0x7, 0xb1, 0x1d, 0xb2}]}) r6 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TIOCMBIS(r6, 0x8004746c, &(0x7f0000000480)=0x46b) open(&(0x7f00000004c0)='./file0\x00', 0x8, 0x0) r7 = shmget(0x3, 0x6000, 0x402, &(0x7f0000ff9000/0x6000)=nil) r8 = getuid() getgroups(0x6, &(0x7f0000000500)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) r12 = getuid() getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000005c0)={0x0}, 0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0xc) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000640)={{0x1db, r8, r10, r12, r13, 0x8, 0x800}, 0x7, 0x2, r14, r15, 0x81, 0x6, 0x9}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) r18 = getegid() getgroups(0x7, &(0x7f0000000740)=[0x0, r17, r18, r16, r11, r11, r9]) 22:47:43 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) ioctl$VT_RELDISP(r0, 0x20007604, &(0x7f0000000040)) flock(r0, 0x8) r1 = kqueue() r2 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty\x00', 0x1, 0x0) r3 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/diskmap\x00', 0x0, 0x0) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140)='/dev/wskbd0\x00', 0x80, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$inet(0x2, 0x4, 0x7f) r7 = accept$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f00000001c0)=0x8) r8 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000200)) kevent(r1, &(0x7f0000000100)=[{{r2}, 0xfffffffffffffff8, 0x10, 0x2, 0x8001, 0x57}, {{r3}, 0xfffffffffffffffc, 0x3, 0x4, 0x55, 0xffffffff}], 0x7, &(0x7f0000000240)=[{{r4}, 0xffffffffffffffff, 0x6d, 0x0, 0x2, 0x5}, {{r5}, 0xfffffffffffffff9, 0x20, 0x40000000, 0x7, 0x80000000}, {{r6}, 0xfffffffffffffffd, 0x6, 0xf0000000, 0x2, 0xfffffffffffeffff}, {{r0}, 0xffffffffffffffff, 0x23, 0x0, 0x7f, 0x1000}, {{r7}, 0xfffffffffffffffd, 0xb0, 0x1, 0x2, 0x18a7c6db}, {{r0}, 0xfffffffffffffffb, 0x2, 0x2, 0x61cb, 0x1ea}, {{r8}, 0xfffffffffffffffb, 0x93, 0x4, 0x6, 0x25}, {{r0}, 0xfffffffffffffff9, 0x1, 0x0, 0x73, 0x9}], 0x1, &(0x7f0000000340)={0x5166, 0x1}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x10000, 0x188) ioctl$VT_GETACTIVE(r9, 0x40047607, &(0x7f00000003c0)) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) setsockopt$sock_linger(r9, 0xffff, 0x80, &(0x7f0000000440)={0x20, 0x7}, 0x8) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x40, 0x0) getsockopt(r11, 0x4, 0x9, &(0x7f00000004c0)=""/66, &(0x7f0000000540)=0x42) r12 = msgget$private(0x0, 0x8) msgrcv(r12, &(0x7f0000000580)={0x0, ""/81}, 0x59, 0x0, 0x800) kqueue() r13 = dup2(0xffffffffffffffff, r10) ioctl$SPKRTONE(r13, 0x80085301, &(0x7f0000000600)={0x5, 0x1}) chflagsat(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0, 0x0) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x200, 0x0) getsockopt$inet_opts(r14, 0x0, 0x0, &(0x7f00000006c0)=""/211, &(0x7f00000007c0)=0xd3) r15 = openat$null(0xffffffffffffff9c, &(0x7f0000000800)='/dev/null\x00', 0x8000, 0x0) linkat(r15, &(0x7f0000000840)='./file0\x00', r11, &(0x7f0000000880)='./file0\x00', 0x4) r16 = semget(0x1, 0x0, 0x518) semctl$SETALL(r16, 0x0, 0x9, &(0x7f00000008c0)=[0x800, 0x2, 0x0, 0x400]) 22:47:44 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x60e, 0x0) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='r\x00') lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket(0x18, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000000), 0xc) login: pckbd_enable: command error 22:47:44 executing program 1: ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x180) bind(r0, &(0x7f0000000080)=@in6={0x18, 0x3, 0x5, 0x3ff}, 0xc) r1 = socket(0x2, 0x3, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$TIOCFLUSH(r2, 0x80206932, &(0x7f0000000300)) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x3ff, 0x107ffffffe, "73ffff4d4d7ee400000100000000000000000010"}) ioctl$TIOCSBRK(r3, 0x2000747b) r4 = socket(0x18, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TIOCFLUSH(r5, 0x8080691a, &(0x7f0000000300)) accept(r5, 0x0, &(0x7f00000000c0)) 22:47:44 executing program 1: mknod(&(0x7f00000001c0)='./bus\x00', 0x200000000006010, 0xe02) r0 = open$dir(&(0x7f0000000040)='./bus\x00', 0x402, 0x0) stat(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000080)) r1 = socket(0x18, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCFLUSH(r2, 0x8080691a, &(0x7f0000000300)) ioctl$BIOCGETIF(r2, 0x4020426b, &(0x7f0000000200)={""/16, @ifru_index}) pwrite(r0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x7ff, 0x0, "b0d4000200fe4cf8000100"}) r3 = socket(0x18, 0x3, 0x6) r4 = semget$private(0x0, 0x7, 0x80) unveil(&(0x7f0000000240)='./bus/file0\x00', &(0x7f0000000280)='x\x00') semop(r4, &(0x7f0000001140)=[{0x3, 0x9, 0x800}, {0x2, 0x10001, 0x876502529fd64b2e}, {0x1, 0x400bb2, 0x1800}, {0x0, 0x10000, 0x1800}, {0x2, 0xdb7, 0x1800}], 0x5) semctl$GETALL(r4, 0x0, 0x6, &(0x7f0000000100)=""/242) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$TIOCGFLAGS(r2, 0x4004745d, &(0x7f00000002c0)) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) r5 = socket(0x18, 0x2, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TIOCFLUSH(r6, 0x8080691a, &(0x7f0000000300)) connect(r6, &(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x0}, 0x8) r7 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) pwritev(r7, &(0x7f00000003c0), 0x273, 0x0, 0x0) pckbd_enable: command error 22:47:45 executing program 0: mknod(&(0x7f0000000100)='./bus\x00', 0x80002007, 0x5cc2) ktrace(&(0x7f0000000000)='./bus\x00', 0x1, 0x40000300, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x46bfb) r2 = getpid() fcntl$setown(r0, 0x6, r2) write(r1, &(0x7f0000000080)="9c", 0xffffffab) execve(0x0, 0x0, 0x0) r3 = msgget(0x2, 0x101) r4 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r4, 0x0, 0x0) shmctl$IPC_SET(r4, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r6 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r6, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r6, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r6, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r6, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r7 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r7, r8, r5, 0xf3, 0x40000000000d}, 0xfffffffffffffffd, 0x1, 0x9}) r9 = getgid() r10 = getppid() r11 = fcntl$getown(0xffffffffffffffff, 0x5) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r5, r8, r9, 0x1e4, 0x8}, 0x5, 0x5, r10, r11, 0xfffffffffffffe01, 0x9, 0x7ff}) r12 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r12, 0x0, 0x0) shmctl$IPC_SET(r12, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r12, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r14 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r14, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r14, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r14, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r14, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r15 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) semctl$IPC_SET(r14, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r15, r16, r13, 0xf3, 0x40000000000d}, 0xfffffffffffffffd, 0x1, 0x9}) r17 = getgid() r18 = getppid() r19 = fcntl$getown(0xffffffffffffffff, 0x5) shmctl$IPC_SET(r12, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r13, r16, r17, 0x1e4, 0x8}, 0x5, 0x5, r18, r19, 0xfffffffffffffe01, 0x9, 0x7ff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) r21 = getgid() r22 = fcntl$getown(0xffffffffffffff9c, 0x5) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000180)={{0x4, r8, r13, r20, r21, 0x40, 0x7}, 0x7, 0x400, 0xffffffffffffffff, r22, 0xdce, 0x5, 0xcad}) r23 = socket(0x18, 0x2, 0x0) r24 = fcntl$dupfd(r23, 0x0, r23) ioctl$TIOCFLUSH(r24, 0x8080691a, &(0x7f0000000300)) ioctl$KDSETLED(r24, 0x20004b42, &(0x7f0000000040)=0x5) 22:47:45 executing program 1: r0 = socket(0x10000000011, 0x10000004003, 0x0) sendto$unix(r0, &(0x7f0000000180)="b1000513600000000000000000400000000004fecea11ea8fef96ecfc73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00e3630667a586196a07949a2cf4c8b2ca3ebbc257699a1f132e27acb5d610000d7d026ba8af63ff37281c18e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01b1257aea8c500000002000000000000020208a371a3f8000400000000000000010000000000000000", 0xb1, 0x0, 0x0, 0xffffffd6) r1 = accept(r0, &(0x7f0000000000)=@in, &(0x7f0000000040)=0xc) connect$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x1}, 0x8) 22:47:45 executing program 1: socket(0x11, 0x4, 0xff) 22:47:46 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f0000000140)=[{0x54}, {0x44}, {0x20000000000006}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) syz_emit_ethernet(0x17d, &(0x7f0000000340)="b6") openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) ioctl$TIOCNXCL(r1, 0x2000740e) 22:47:46 executing program 1: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6418214c], [0x0, 0x0, 0x0, 0x9, 0xf9ffffffffffffff], [0x0, 0x0, 0x5, 0x0, 0x200], [{}, {}, {}, {0x2}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x5}]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCFLUSH(r1, 0x8080691a, &(0x7f0000000300)) 22:47:46 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x4000000001, 0x0) r1 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty\x00', 0x80, 0x0) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000100)={0x1f, 0x1, 0x7, 0x4, "b65e6dc04dbc36943317be20c95cc85a625a9b31", 0x2f3a, 0x1}) r2 = socket(0x18, 0x2, 0x0) r3 = syz_open_pts() close(r3) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="1a2eeea85f965e1c7cf20e2da943349f13077f9c2c18705ca75e9ca5a7211b265f7d7e659346d304f84697b954f5c520c46b7f12d26b1b2bd9737b6ee0415198f83d6ed410a25ee1d9e6ae4aaec9d20c757697ad09b7ab45fdbeb471242dc8f0d7602a4781f9d5361f207a2ded39608fbf0fa29b9830bda38f7b4723f06c675672afbb17ebd37af15339b2e42593330652f4caf5733181ea7290abd745415bab9070066b8857a32998fa5c35c248df954ba16f9e75d19967829a5cde", 0xbc}], 0x1) fcntl$setown(r3, 0x6, 0xffffffffffffffff) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$TIOCFLUSH(r4, 0x8080691a, &(0x7f0000000300)) ioctl$WSDISPLAYIO_SBURNER(r4, 0x800c5751, &(0x7f0000000280)={0x9, 0x1, 0x4}) r5 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180)='/dev/diskmap\x00', 0x8000, 0x0) r6 = syz_open_pts() ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x3ff, 0x107ffffffe, "73ffff4d4d7ee400000100000000000000000010"}) ioctl$DIOCMAP(r5, 0xc0106477, &(0x7f0000000240)={&(0x7f00000001c0)='./file0\x00', r6, 0x2}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1d}, {0x3d}, {0x6, 0x0, 0x0, 0x8000000000102}]}) pwrite(r0, &(0x7f0000000140)="fbaf8a8d1a029be9374ebcb5e2a6", 0xe, 0x0, 0x0) 22:47:46 executing program 0: setrlimit(0x8, &(0x7f0000000000)={0x7, 0x95}) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000100)='/dev/diskmap\x00', 0x400, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)="58b69fce6b9904443230e82bd104f2c19c59322f79d49199df601d44550177669dd6c704be8b32234ed5e93d02e707588f710ab26a96a7fb641c9386a1e09b91ecc129aaecdc8c06effcae17cb0bd90c428903c2f13a6493f4302ae9180d9bba283813e8c5cccf2e7c3ed26d3603b25f7f35c5b07b72d786c6c52dbb51485a42d4b303e80d4b54fd84eeadc20ebe08e5e640963b236b95379c909a2c85400948be", 0xa1}, {&(0x7f0000000200)="452d094d8640160ae230277458005bce6499ce7f54b47aac84156b1675764fa5c95256792339c46cee3b73226133daaff9a33a0fb70d9fd52a28a74d0512d8ee9ea2219d0220872f9fb1a298a3cbce2fbbefac87f2d9dfb6d11674ebb156737975d53ef8978611d8d2dcdfc78c6aec530cb0df8176cf2f5718010afc28a6d741367059fff912776418c035cc6b9e3580ce5880f4fd0f1930fd64b99787bedbbd4d6e10549bec094031496852f2b459d33fa92573e03bd9b40481587383aaaf685af0619ac1d99b03194324367b7c2113e8da34", 0xd3}, {&(0x7f0000000300)="560608a7b79897bf06187fd88299ff8ac9b4fa98c7ff7e37953c724e082545dcf51b4e9983ac1d311eb63860", 0x2c}], 0x3, 0x0, 0x2) r1 = syz_open_pts() close(r1) syz_open_pts() r2 = openat$pci(0xffffffffffffff9c, &(0x7f0000000400)='/dev/pci\x00', 0x200, 0x0) ioctl$PCIOCGETROM(r2, 0xc0107005, &(0x7f0000000480)={{}, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyCcfg\x00', 0x80, 0x0) ioctl$KDSETLED(r3, 0x20004b42, &(0x7f00000000c0)=0x5) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000040)={0x0, 0x0, 0x7ff, 0x3ffd, "22bdad04ff7dffe1000000d9b649fabf6107893e"}) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000001740)="a489d39b7359036751a377755f5d14820c84d991cadaa23d54774e3944b83b07f19e6caddc74bf61f43dae8a3f56b56b816b5894617bf751f4182bceccb3770139e35da643fa", 0x46}], 0x1) pipe2(&(0x7f0000000380)={0xffffffffffffffff}, 0x4) ioctl$TIOCSBRK(r4, 0x2000747b) 22:47:46 executing program 1: open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)="00d7ab06", 0x4) bind(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="01440f"], 0x1) r0 = syz_open_pts() close(r0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1a2eeea85f965e1c7cf20e2da943349f13077f9c2c18705ca75e9ca5a7211b265f7d7e659346d304f84697b954f5c520c46b7f12d26b1b2bd9737b6ee0415198f83d6ed410a25ee1d9e6ae4aaec9d20c757697ad09b7ab45fdbeb471242dc8f0d7602a4781f9d5361f207a2ded39608fbf0fa29b9830bda38f7b4723f06c675672afbb17ebd37af15339b2e42593330652f4caf5733181ea7290abd745415bab9070066b8857a32998fa5c35c248df954ba16f9e75d19967829a5cde", 0xbc}], 0x1) r1 = syz_open_pts() close(r1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="1a2eeea85f965e1c7cf20e2da943349f13077f9c2c18705ca75e9ca5a7211b265f7d7e659346d304f84697b954f5c520c46b7f12d26b1b2bd9737b6ee0415198f83d6ed410a25ee1d9e6ae4aaec9d20c757697ad09b7ab45fdbeb471242dc8f0d7602a4781f9d5361f207a2ded39608fbf0fa29b9830bda38f7b4723f06c675672afbb17ebd37af15339b2e42593330652f4caf5733181ea7290abd745415bab9070066b8857a32998fa5c35c248df954ba16f9e75d19967829a5cde", 0xbc}], 0x1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x3ff, 0x107ffffffe, "73ffff4d4d7ee400000100000000000000000010"}) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYBLOB="e588e057ecc0fc21b70f7c6a843fce658e0528ef844794a2142733229beb9f00db995dde24178cb818050f4d6a923374a8afc7196bc7b951b7aebc9564c611c62ff428498d3d6c6e5f38a0", @ANYPTR], @ANYPTR, @ANYRES64=r0, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR, @ANYPTR, @ANYPTR64, @ANYBLOB="f023e9c46ab750f995790f23ce175a214ed78f3f5de24e06bc1fa3adca5a6333972393b29fb5c5250b70bf7320e98bd99ade810cd24bc389787163b0fe65830b62f2502c994733f1898b8d4da323dd9af5efd0a6188c170158ca88e248ffe89559670d8c2dd0e6af9eebb0082e32b0a5a7fa5a51ff603c77dd195e7f", @ANYRES32=r1, @ANYPTR64, @ANYRESOCT=r2], @ANYPTR]], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x3, 0x0) connect$unix(r3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f00000000c0)="0714000000000025ff149b33ff0f000000000000", 0x14) write(r3, 0x0, 0x0) 22:47:46 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f000060cff8)='/', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x8) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 22:47:46 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x40}, {}, {0x6, 0x0, 0x0, 0x20000000}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000140)="7e020000002200dda68c0e000000") 22:47:46 executing program 0: r0 = syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f00000000c0)={0x0, 0x0, 0x90d6, 0x0, "d700060000000000005b00000000000000e74de4"}) write(r0, &(0x7f0000000180)="582720efabd16ebae63225259560f8e5815f73f2a044fd33055552fbd7e41789632dfc94ff334a5619515a4c8ab06198824b3da025bbd47b3bf579456fc7d4096e8c8b6b87cb2d72b8bcdb9ad8a4f5f728193ef16ab93f12fc4d5f16b136a5d00d1628b53a", 0x65) write(r0, &(0x7f0000000040), 0xfffffec2) r1 = syz_open_pts() close(r0) dup(r1) socket$unix(0x1, 0x5, 0x0) open$dir(&(0x7f0000000340)='./file0\x00', 0x400000002c5, 0x0) syz_open_pts() r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0x9, 0x0}, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f00000000c0)=0x7, 0x4) geteuid() r4 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x146) ioctl$BIOCSFILDROP(r4, 0x80044279, &(0x7f0000000100)=0x100) 22:47:46 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x4c}, {0x3c}, {0x4006}]}) syz_emit_ethernet(0xe, &(0x7f0000000240)="985238a669ab541d1369151a49be") unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='x\x00') 22:47:46 executing program 1: r0 = getuid() r1 = msgget$private(0x0, 0x481) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r3 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r3, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r3, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r3, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r3, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r4 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r4, r5, r2, 0xf3, 0x40000000000d}, 0xfffffffffffffffd, 0x1, 0x9}) getgroups(0x2, &(0x7f0000000080)=[r2, 0xffffffffffffffff]) r7 = socket(0x18, 0x2, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$TIOCFLUSH(r8, 0x8080691a, &(0x7f0000000300)) getsockopt$SO_PEERCRED(r8, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xc) r10 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r10, 0x0, 0x0) shmctl$IPC_SET(r10, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r10, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r12 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r12, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r12, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r12, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r12, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r13 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) semctl$IPC_SET(r12, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r13, r14, r11, 0xf3, 0x40000000000d}, 0xfffffffffffffffd, 0x1, 0x9}) r15 = getgid() r16 = getppid() r17 = fcntl$getown(0xffffffffffffffff, 0x5) shmctl$IPC_SET(r10, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r11, r14, r15, 0x1e4, 0x8}, 0x5, 0x5, r16, r17, 0xfffffffffffffe01, 0x9, 0x7ff}) r18 = getpid() msgctl$IPC_SET(r1, 0x1, &(0x7f00000001c0)={{0x35, r0, r6, r0, r9, 0x101}, 0x4, 0x0, r16, r18, 0x9f3, 0x2, 0x40, 0x5}) syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffe5ff000000aaaaaa0086dd60a4f00800183c00fe80e4ff000000000000000000000000000000000000000020000001ba4832cd6f91f5f3fac80c8d1c767029dceb932b8528a118a1358552b6e07078cdf882d68ac166b048aa977457a597216ac0c52f2f055632ecb6dbbdd5a2f2a58aee501460dbd1816a85da9218a561aa4e7e95735b2a00"/146]) pipe2(&(0x7f0000000040), 0x4) syz_emit_ethernet(0x400e, &(0x7f0000000000)="c7a895006f53dd000005ffff86dd") 22:47:46 executing program 1: ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = msgget(0x2, 0x4) msgsnd(r2, &(0x7f0000000080)={0x2, "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"}, 0x102, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bpf\x00', 0x10, 0x0) ioctl$BIOCGFILDROP(r3, 0x40044278, &(0x7f0000000040)) ioctl$TIOCFLUSH(r1, 0x80206931, &(0x7f0000000300)) 22:47:46 executing program 0: setrlimit(0x8, &(0x7f0000000040)={0x7, 0x95}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSTOP(r0, 0x2000746f) r2 = socket(0x18, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TIOCFLUSH(r3, 0x8080691a, &(0x7f0000000300)) setsockopt$sock_timeval(r3, 0xffff, 0x1005, &(0x7f0000000000)={0x2, 0xffffffff}, 0x10) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x0, 0x8001, 0x1, 0x8, '^\x00'}) write(r0, &(0x7f0000000140)="04", 0x1) 22:47:46 executing program 1: r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt$sock_linger(r1, 0xffff, 0x1021, &(0x7f0000000040)={0x5}, 0x8) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x5}}) r2 = socket(0x18, 0x1, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8004) setsockopt$sock_timeval(r3, 0xffff, 0x1006, &(0x7f0000000140)={0x2, 0x5e20}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) close(r2) r4 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000080)='/dev/diskmap\x00', 0x18200, 0x0) dup(r4) r5 = socket(0x24, 0x5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) dup2(r0, r2) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13f9fd812eaa4e713040e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) socket$unix(0x1, 0x1, 0x0) 22:47:46 executing program 1: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x40f3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x401, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf332, 0x0, 0x4], [0x0, 0x5, 0x0, 0x0, 0x10000000000000, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0xfffffffffe], [0xffffffffffffff7e, 0x0, 0x0, 0x9, 0xfdffffffffffffff], [0x0, 0x0, 0x51e, 0x0, 0x0, 0x200], [{}, {}, {0x0, 0x1ff, 0x0, 0x1000000000000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}], {0x0, 0x4, 0x6, 0x1}, {0x0, 0x7daa178}}}) r0 = socket(0x18, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCFLUSH(r1, 0x8080691a, &(0x7f0000000300)) r2 = socket(0x18, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TIOCFLUSH(r3, 0x8080691a, &(0x7f0000000300)) r4 = accept(r3, &(0x7f00000000c0)=@in, &(0x7f0000000100)=0xc) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f0000000140)={0x0, 0x1, 0x6, 0x981d, 0x8}, 0xc) ioctl$KDSETMODE(r1, 0x20004b0a, &(0x7f0000000080)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyCcfg\x00', 0x80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x18, 0x2, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TIOCFLUSH(r6, 0x8080691a, &(0x7f0000000300)) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80, 0x100) getsockopt$SO_PEERCRED(r7, 0xffff, 0x1022, &(0x7f0000000040), 0xc) 22:47:46 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x4000000001, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x6c}, {0x60}, {0x6, 0x0, 0x0, 0x7fff}]}) setsockopt(0xffffffffffffff9c, 0x1, 0x4b9, &(0x7f0000000180)="f549ce92bc8f6c9342a15082063738c485097531f666", 0x16) pwrite(r0, &(0x7f0000000240)="d000000000000000000000000008", 0xe, 0x0, 0x0) r1 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty\x00', 0x200, 0x0) ioctl$TIOCMSET(r1, 0x8004746d, &(0x7f0000000140)=0x50000000) 22:47:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000000)=0x3, 0x4) dup2(r1, r0) 22:47:46 executing program 1: setrlimit(0x8, &(0x7f0000000140)={0x7, 0x95}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0x0, 0x1f, 0x800, 0xfffffffffffffffa, "0366288fef097f0c033c02df7179000076efffaf"}) writev(r0, &(0x7f0000002280)=[{&(0x7f0000001280)="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", 0x189}], 0x1) r1 = socket(0x18, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCFLUSH(r2, 0x8080691a, &(0x7f0000000300)) r3 = msgget$private(0x0, 0x20000003c4) msgrcv(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/571], 0xc, 0x2, 0x1000) msgrcv(r3, &(0x7f0000001c80)={0x0, ""/242}, 0xfa, 0x1, 0x1000) r4 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x3ff, 0x107ffffffe, "73ffff4d4d7ee400000100000000000000000010"}) r5 = syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x3ff, 0x107ffffffe, "73ffff4d4d7ee400000100000000000000000010"}) r6 = syz_open_pts() close(r6) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="1a2eeea85f965e1c7cf20e2da943349f13077f9c2c18705ca75e9ca5a7211b265f7d7e659346d304f84697b954f5c520c46b7f12d26b1b2bd9737b6ee0415198f83d6ed410a25ee1d9e6ae4aaec9d20c757697ad09b7ab45fdbeb471242dc8f0d7602a4781f9d5361f207a2ded39608fbf0fa29b9830bda38f7b4723f06c675672afbb17ebd37af15339b2e42593330652f4caf5733181ea7290abd745415bab9070066b8857a32998fa5c35c248df954ba16f9e75d19967829a5cde", 0xbc}], 0x1) msgsnd(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="b78bf94b34931afbdc0d4540483d57400f7a82f9a00073857dd99441cd104234edc963db3ec64960e75234a0bcf914ac4b1f9bba4f692b0f85a64191ef56e6fa58771452184277e4e16084129f0e17002621bcc4a632c591b9eed6d8e78f4e2f6c777031ffbfce7b71231e86e07d7fe6c58143d96edb98c1bed95b", @ANYBLOB="8cb3a17a8b66c1b80898fcb8fa60653354569f4e42d1686ad4d956642f8646e3f10abcb867185229b5a8d4046dc2376507db6530d7be752ea33094a0d7c0515e56bab5bb87e66e74d4191d215ab6fe3092862726e8665a8d18f317a6704e684f2ff884c90a709e11dc15e950f63f7004f0bd64849e18c855aa03945db3a6182d00403d31d3c56fd69bfbdf81361a1a77055109e8e02c0d7eed35a5616b22217936afa7536dfbb22e2fc1", @ANYPTR64=&(0x7f0000000600)=ANY=[@ANYRES16=r6], @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYBLOB="338ea11d60d823586eec4998247598be94196084455503d9f02671f9b26d", @ANYBLOB="a8a4e6c2fe2c1f45096ba85bd45d24360e0051b61b336c344bf2d16579afe3f0e9d68aa1c7674d4fbc986f703ac08c8960bfd76f39d8763fee3f0820c6dd82aea18318c3a942448941e9d7a09d715b27a692b7eed616265126e3a24f913cd9162c1c484c32334321277945f64dd8b2eb4eee22ba5f360513f88b705fe3d26c6eeefbbc2c0ae275790900645a78d18d36cf76165ca6"], @ANYRESDEC=r4, @ANYRESOCT, @ANYRES64], 0x7, 0x800) msgsnd(r3, 0x0, 0x0, 0x1800) msgsnd(r3, &(0x7f0000000040)={0x1, "48696a280567b1a6342fcc8ec5d56f596329414fa22f5c0ed193424179fc5bd8017a071300"}, 0x2d, 0x800) r7 = msgget(0x0, 0x2) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) chown(&(0x7f0000000000)='./file0\x00', 0x0, r10) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000280)=0xc) r12 = getegid() r13 = fcntl$getown(0xffffffffffffff9c, 0x5) r14 = open(&(0x7f00000001c0)='./file1\x00', 0x40, 0x0) writev(r14, &(0x7f0000000080)=[{&(0x7f0000000040)="96", 0x1}], 0x1) pwritev(r14, &(0x7f0000000100)=[{&(0x7f0000000180), 0xff20}], 0x1000000000000002, 0x0, 0x0) r15 = getppid() wait4(r15, &(0x7f0000000c80), 0x0, &(0x7f0000000b80)) fcntl$setown(r14, 0x6, r15) msgctl$IPC_SET(r7, 0x1, &(0x7f0000000340)={{0xffffffff, r8, r10, r11, r12, 0x4, 0xbc33}, 0x5, 0x20, r13, r15, 0x9, 0x1, 0x9, 0x7fffffff}) msgsnd(r3, &(0x7f0000000180)={0x3, "bf5323372957728cba754c958321c60f9b3fdac049809d67dc512beaa434bcd8a5c288ec97a9aa98eed358fac78a2a73fec0771ea3e84d32b985db3e647b7562d06ac83f3915596430ed2c3bea8ceffd1689df1a3985758eeb06bfdacf012d689f4ce93db1daec2ef8060bf09bae0abce742d81b3ff44ef21b155b06434ba61bb2f591f1aeed3ae762116131254daea34937ba49a3383d747c5306558a83a441b9a204246db5c1c7121fd431b4c063241fdd720ef5d3578dbe69f9823520f619c64fd69c7c079ced8d27fab3ecfa"}, 0xd6, 0x800) 22:47:46 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x70e, 0x0) pwritev(r0, &(0x7f0000002440)=[{&(0x7f0000000340)="e799a8145c6b38ab1be8938b9e900aee0fc7e01d0489f4ea1dc1062103bd0a1d1fc028684e750a18389e324ada6bb1f6f7d59d92fb360989b9f0c3f958bef5746da192cd8facae373a89922ccc3c2a2a6b2b87db587e04fa381e197dc3edeb396d2b8f2af57a587cc1acd772b76f5da767a76cf112f9eed1631754897d48eece82e12eacfec62f08371da154749499dca404f8562f05ffb9ba5675d8a508e802f907d36f7fb8f883aefdff2df2846e5b49a7b3b71d3d57eec85a7dd83f13453eac3a6ec704c11f7def491814fdb96e8ee081ef242eeb4e34d7eb3865d5a557a0d8009cf383d44435d423bb38de221b5cd06eba", 0x10a}], 0x1, 0x0, 0x5fcb) pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="d6", 0x1}], 0x1, 0x0, 0x0) fsync(r0) r1 = socket(0x18, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = semget(0x0, 0x3, 0x285) r4 = getuid() getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r7 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r7, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r7, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r7, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r7, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r8 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) semctl$IPC_SET(r7, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r8, r9, r6, 0xf3, 0x40000000000d}, 0xfffffffffffffffd, 0x1, 0x9}) r10 = socket(0x18, 0x2, 0x0) fcntl$dupfd(r10, 0x0, r10) getsockopt$SO_PEERCRED(r10, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000180)={{0x3f, r4, r5, r9, r11, 0x20}, 0x9, 0x1, 0x40}) ioctl$TIOCFLUSH(r2, 0x8080691a, &(0x7f0000000300)) ioctl$BIOCIMMEDIATE(r2, 0x80044270, &(0x7f0000000040)=0x8) 22:47:46 executing program 0: r0 = kqueue() r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0) r2 = kqueue() r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wskbd0\x00', 0x40, 0x0) r4 = socket(0x18, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TIOCFLUSH(r5, 0x8080691a, &(0x7f0000000300)) r6 = syz_open_pts() close(r6) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="1a2eeea85f965e1c7cf20e2da943349f13077f9c2c18705ca75e9ca5a7211b265f7d7e659346d304f84697b954f5c520c46b7f12d26b1b2bd9737b6ee0415198f83d6ed410a25ee1d9e6ae4aaec9d20c757697ad09b7ab45fdbeb471242dc8f0d7602a4781f9d5361f207a2ded39608fbf0fa29b9830bda38f7b4723f06c675672afbb17ebd37af15339b2e42593330652f4caf5733181ea7290abd745415bab9070066b8857a32998fa5c35c248df954ba16f9e75d19967829a5cde", 0xbc}], 0x1) r7 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000040)='/dev/diskmap\x00', 0x28030, 0x0) r8 = syz_open_pts() close(r8) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000080)="1a2eeea85f965e1c7cf20e2da943349f13077f9c2c18705ca75e9ca5a7211b265f7d7e659346d304f84697b954f5c520c46b7f12d26b1b2bd9737b6ee0415198f83d6ed410a25ee1d9e6ae4aaec9d20c757697ad09b7ab45fdbeb471242dc8f0d7602a4781f9d5361f207a2ded39608fbf0fa29b9830bda38f7b4723f06c675672afbb17ebd37af15339b2e42593330652f4caf5733181ea7290abd745415bab9070066b8857a32998fa5c35c248df954ba16f9e75d19967829a5cde", 0xbc}], 0x1) kevent(r5, &(0x7f0000000300)=[{{r6}, 0xfffffffffffffffd, 0x24, 0x1, 0x8001, 0xa3}, {{r6}, 0xfffffffffffffff9, 0x84, 0x20000000, 0x20, 0xfffffffffffffff7}, {{r1}, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x1f}, {{r2}, 0xfffffffffffffffa, 0x9, 0x2, 0xbfe2, 0x3}, {{r7}, 0xfffffffffffffffe, 0x10, 0x8, 0x10000, 0x10000}, {{r8}, 0xfffffffffffffffb, 0x42, 0x1, 0x4, 0xb4c}, {{r3}, 0xfffffffffffffffd, 0x56, 0x8, 0x0, 0xff}, {{r1}, 0xfffffffffffffffd, 0x4, 0xf0000000, 0x4, 0x6dfd}], 0x7, 0x0, 0x0, 0x0) kevent(r0, &(0x7f0000000200), 0x34, 0x0, 0xc68, 0x0) kevent(r2, &(0x7f00000002c0)=[{{r1}, 0xffffffffffffffff, 0x112}], 0x190, 0x0, 0x7fff, 0x0) pckbd_enable: command error 22:47:47 executing program 1: r0 = socket(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="62020207e0000001"], 0x1) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000080)=0x7, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r0, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) r1 = socket(0x18, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCFLUSH(r2, 0x8080691a, &(0x7f0000000300)) connect$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x3}, 0x8) r3 = socket(0x2, 0x8002, 0x0) r4 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x200, &(0x7f0000000080), 0x4) bind(r4, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) connect$unix(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="620500000000000000d1"], 0x10) write(r3, 0x0, 0x0) 22:47:47 executing program 1: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000000)='./file0/file0\x00', 0x0) open$dir(&(0x7f0000000180)='./file2\x00', 0x8, 0x41) r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000002c0)='./file0/file0/fi\x00', 0x0) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000080)='./file1\x00', 0x0) unveil(&(0x7f00000000c0)='./file1/../file0/../file0\x00', &(0x7f0000000100)='r\x00') open$dir(&(0x7f0000000140)='./file0/file0/fi\x00', 0xb58, 0x0) 22:47:48 executing program 0: mknod(&(0x7f0000000100)='./bus\x00', 0x3a0914c44f7b202c, 0xd02) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x100) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x110, 0x0, 0xc600000000000000) pckbd_enable: command error 22:47:48 executing program 1: setrlimit(0x8, &(0x7f0000000040)={0x7, 0x95}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSTOP(r1, 0x2000746f) read(r1, &(0x7f0000000740)=""/4096, 0x1000) msgsnd(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000000000068f887b0447e983de55c5711ed4bdf9112c779e71f76c972e8372936dda42335ef13a6cc00e284185451fb99e78a91ab16b67c769793c8a1fa9956bf61bf9bbcca0bd9be72edd969b8807123d0b63306004ecfcf24de3e0000d2367d3206304513d8fef9460b7a15c3a9d674c51ee732e14abaf680c8c789c24ad010cc8dbe053debaf7a5899ff8fa8ebbd8dec2309cc"], 0x1, 0x0) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x550f, "2ea86ecce46adcd569ef64e16eb595607fcfd711"}) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000000)=0x1) write(r0, &(0x7f0000000080)="2078f7b69541d6d97099188e90cd9c8e765f9ba2c14c0333177edf6d0f3295f5a5e8b04efdd700"/53, 0x241c5379a0e79b8e) 22:47:48 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x18, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TIOCFLUSH(r3, 0x8080691a, &(0x7f0000000300)) ioctl$WSMOUSEIO_GETPARAMS(r3, 0x80105727, &(0x7f0000000080)={&(0x7f0000000000)=[{0x47, 0x4}, {0x100, 0x8001}], 0x2}) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read(r0, &(0x7f0000001740)=""/4096, 0x1000) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffcc}], 0x1, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) fcntl$setstatus(r5, 0x4, 0x80) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000140), &(0x7f0000000180)=0xc) pwritev(r5, &(0x7f00000003c0), 0x273, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x10, r4, 0x0, 0x0) write(r1, &(0x7f0000000100)='w', 0x1) r6 = syz_open_pts() close(r6) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="1a2eeea85f965e1c7cf20e2da943349f13077f9c2c18705ca75e9ca5a7211b265f7d7e659346d304f84697b954f5c520c46b7f12d26b1b2bd9737b6ee0415198f83d6ed410a25ee1d9e6ae4aaec9d20c757697ad09b7ab45fdbeb471242dc8f0d7602a4781f9d5361f207a2ded39608fbf0fa29b9830bda38f7b4723f06c675672afbb17ebd37af15339b2e42593330652f4caf5733181ea7290abd745415bab9070066b8857a32998fa5c35c248df954ba16f9e75d19967829a5cde", 0xbc}], 0x1) dup2(r6, 0xffffffffffffffff) r7 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_WRITEREGS(r7, 0xc5005601, &(0x7f0000000580)={0x1, 0x0, 0x1, {[0x0, 0x0, 0x0, 0x20000000, 0x6], [], [0x0, 0x400000000000000], [0x0, 0x64c]}}) pipe(&(0x7f00000012c0)) connect$unix(0xffffffffffffff9c, &(0x7f0000000200)=@abs={0x1, 0x0, 0x0}, 0x8) 22:47:49 executing program 1: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffff], [0x0, 0x1, 0x401]}}) r0 = syz_open_pts() close(r0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1a2eeea85f965e1c7cf20e2da943349f13077f9c2c18705ca75e9ca5a7211b265f7d7e659346d304f84697b954f5c520c46b7f12d26b1b2bd9737b6ee0415198f83d6ed410a25ee1d9e6ae4aaec9d20c757697ad09b7ab45fdbeb471242dc8f0d7602a4781f9d5361f207a2ded39608fbf0fa29b9830bda38f7b4723f06c675672afbb17ebd37af15339b2e42593330652f4caf5733181ea7290abd745415bab9070066b8857a32998fa5c35c248df954ba16f9e75d19967829a5cde", 0xbc}], 0x1) r1 = syz_open_pts() close(r1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="1a2eeea85f965e1c7cf20e2da943349f13077f9c2c18705ca75e9ca5a7211b265f7d7e659346d304f84697b954f5c520c46b7f12d26b1b2bd9737b6ee0415198f83d6ed410a25ee1d9e6ae4aaec9d20c757697ad09b7ab45fdbeb471242dc8f0d7602a4781f9d5361f207a2ded39608fbf0fa29b9830bda38f7b4723f06c675672afbb17ebd37af15339b2e42593330652f4caf5733181ea7290abd745415bab9070066b8857a32998fa5c35c248df954ba16f9e75d19967829a5cde", 0xbc}], 0x1) r2 = fcntl$dupfd(r0, 0xa, r1) ioctl$VT_WAITACTIVE(r2, 0x20007606, &(0x7f0000000080)=0x80000001) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x2, 0x0) r4 = syz_open_pts() ioctl$TIOCMBIS(0xffffffffffffffff, 0x8004746c, &(0x7f0000000180)=0x80000000) setgroups(0x3, &(0x7f0000000080)=[0x0, 0x0, 0xffffffffffffffff]) getgroups(0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x18, 0x1, 0x0) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) close(r4) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="1a2eeea85f965e1c7cf20e2da943349f13077f9c2c18705ca75e9ca5a7211b265f7d7e659346d304f84697b954f5c520c46b7f12d26b1b2bd9737b6ee0415198f83d6ed410a25ee1d9e6ae4aaec9d20c757697ad09b7ab45fdbeb471242dc8f0d7602a4781f9d5361f207a2ded39608fbf0fa29b9830bda38f7b4723f06c675672afbb17ebd37af15339b2e42593330652f4caf5733181ea7290abd745415bab9070066b8857a32998fa5c35c248df954ba16f9e75d19967829a5cde", 0xbc}], 0x1) ioctl$TIOCSTSTAMP(r4, 0x8008745a, &(0x7f0000000140)={0x9, 0x1ff}) r6 = fcntl$dupfd(r3, 0x0, r3) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x208, 0x0) write(r7, &(0x7f0000000040)="433585cc2dd2b31e2d6e9f777b7120263c548c8feba0ae474bdf7ab1", 0x1c) ioctl$TIOCFLUSH(r6, 0x8080691a, &(0x7f0000000300)) 22:47:49 executing program 1: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [], [0x0, 0x0, 0x0, 0x9, 0xf7fffffffbffffff], [0x0, 0x0, 0x482]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCFLUSH(r1, 0x8080691a, &(0x7f0000000300)) r2 = accept(0xffffffffffffffff, &(0x7f0000000000)=@in6, &(0x7f0000000040)=0xc) dup(r2) 22:47:49 executing program 1: r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vmm\x00', 0x0, 0x0) mlock(&(0x7f0000000000/0x3000)=nil, 0x3000) ioctl$VMM_IOC_WRITEREGS(r0, 0xc5005601, &(0x7f0000000580)={0x1, 0x0, 0x1, {[0x0, 0x0, 0x0, 0x20004000, 0x200000], [], [], [], [{}, {}, {}, {}, {0xffff}]}}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r1, 0x0, 0x0) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x3ff, 0x107ffffffe, "73ffff4d4d7ee400000100000000000000000010"}) r3 = socket(0x18, 0x2, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = syz_open_pts() close(r4) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="1a2eeea85f965e1c7cf20e2da943349f13077f9c2c18705ca75e9ca5a7211b265f7d7e659346d304f84697b954f5c520c46b7f12d26b1b2bd9737b6ee0415198f83d6ed410a25ee1d9e6ae4aaec9d20c757697ad09b7ab45fdbeb471242dc8f0d7602a4781f9d5361f207a2ded39608fbf0fa29b9830bda38f7b4723f06c675672afbb17ebd37af15339b2e42593330652f4caf5733181ea7290abd745415bab9070066b8857a32998fa5c35c248df954ba16f9e75d19967829a5cde", 0xbc}], 0x1) r5 = syz_open_pts() close(r5) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="1a2eeea85f965e1c7cf20e2da943349f13077f9c2c18705ca75e9ca5a7211b265f7d7e659346d304f84697b954f5c520c46b7f12d26b1b2bd9737b6ee0415198f83d6ed410a25ee1d9e6ae4aaec9d20c757697ad09b7ab45fdbeb471242dc8f0d7602a4781f9d5361f207a2ded39608fbf0fa29b9830bda38f7b4723f06c675672afbb17ebd37af15339b2e42593330652f4caf5733181ea7290abd745415bab9070066b8857a32998fa5c35c248df954ba16f9e75d19967829a5cde", 0xbc}], 0x1) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r6, 0x0, 0x0) shmctl$IPC_SET(r6, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r8 = semget$private(0x0, 0x4, 0x1b2) semctl$GETNCNT(r8, 0x4, 0x3, &(0x7f0000000580)=""/170) semctl$SETVAL(r8, 0x0, 0x8, &(0x7f0000000240)=0x72) semctl$GETVAL(r8, 0x4, 0x5, &(0x7f0000000800)=""/210) semop(r8, &(0x7f0000000400)=[{0x3, 0x100000001, 0x1000}, {0x0, 0x4, 0x1000}], 0x2) r9 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, r9, r10, r7, 0xf3, 0x40000000000d}, 0xfffffffffffffffd, 0x1, 0x9}) r11 = getgid() r12 = getppid() r13 = fcntl$getown(0xffffffffffffffff, 0x5) shmctl$IPC_SET(r6, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r7, r10, r11, 0x1e4, 0x8}, 0x5, 0x5, r12, r13, 0xfffffffffffffe01, 0x9, 0x7ff}) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) sendmsg$unix(r3, &(0x7f0000000400)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x3}, 0x8, &(0x7f0000000180)=[{&(0x7f0000000200)="7dff0ae3a6f77aa60f04ce5d92f9491f8ff93841fce0bda202fd40507eb67dcc0a9c09447d7c72dda91cf4c9f26d95160f04b49ef153c76c2b45a086aa5560469ab59cdaa7eb4a75db1bb1a2f18c481a4ebfaa2faecc90ccea93a70a487775d62206f4504c00607b086a114a58f79e89b82a8162899ae234d8864f647c2e4dc43ad488b0256ca9fe0c4aef6e88087e88f6b7c065d0d51606ae9dd34161527eb12e3948ce19bf37e89e6ba6338c1ea93c7c5fa40c27e219230f55b617ea5f9c050e6119312a7dcd562ee13ae8", 0xcc}], 0x1, &(0x7f0000000380)=[@rights={0x18, 0xffff, 0x1, [r4]}, @rights={0x18, 0xffff, 0x1, [r5, 0xffffffffffffffff]}, @cred={0x20, 0xffff, 0x0, r12, r14, 0xffffffffffffffff}], 0x50}, 0x6) r15 = fcntl$dupfd(r2, 0xa, 0xffffffffffffffff) ioctl$BIOCGRTIMEOUT(r15, 0x4010426e, &(0x7f0000000000)) r16 = syz_open_pts() close(r16) writev(r16, &(0x7f00000001c0)=[{&(0x7f0000000080)="1a2eeea85f965e1c7cf20e2da943349f13077f9c2c18705ca75e9ca5a7211b265f7d7e659346d304f84697b954f5c520c46b7f12d26b1b2bd9737b6ee0415198f83d6ed410a25ee1d9e6ae4aaec9d20c757697ad09b7ab45fdbeb471242dc8f0d7602a4781f9d5361f207a2ded39608fbf0fa29b9830bda38f7b4723f06c675672afbb17ebd37af15339b2e42593330652f4caf5733181ea7290abd745415bab9070066b8857a32998fa5c35c248df954ba16f9e75d19967829a5cde", 0xbc}], 0x1) fcntl$setstatus(r16, 0x4, 0x40) 22:47:49 executing program 0: mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0x86139) r0 = open(&(0x7f0000000080)='./bus\x00', 0x5, 0x0) write(r0, &(0x7f0000000040)="670dc3", 0x3) write(r0, &(0x7f0000000140)="09917b2f2d25d3e5e3df3765279232c01f1eb7dfe6000b7a", 0x18) ioctl$BIOCGHDRCMPLT(r0, 0x40044274, &(0x7f0000000000)) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80, 0x0) fcntl$getown(r1, 0x5) 22:47:49 executing program 1: select(0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x6}, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, "00000000000000000000f2ffffffffffffff4000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, "010000000000000000ffffff7f00"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x29, 0xc, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) r3 = socket(0x18, 0x2, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0xa) r5 = openat$tty(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty\x00', 0x8000, 0x0) ioctl$TIOCGTSTAMP(r5, 0x4010745b, &(0x7f0000000180)) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f0000000080)={{0x18, 0x1, 0x1, 0x6c}, {0x18, 0x3, 0xe2b7, 0x8}, 0x83d, [0x80000000, 0x8, 0x3f, 0x7, 0x3, 0x10001, 0x3, 0x28]}, 0x3c) close(r2) socket(0x400000000018, 0x3, 0x3a) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r2, &(0x7f0000000040)="100a2956b9223776", 0x21d) panic: receive 3: so 0xfffffd8064569320, so_type 3, m 0xfffffd805c89fa00, m_type 0 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *217459 59191 0 0 0 0 dhclient db_enter() at db_enter+0x18 panic(ffffffff821abe2f) at panic+0x15c soreceive(fffffd8064569320,0,ffff80001d372638,0,0,ffff80001d372544) at soreceive+0x16e7 soo_read(fffffd805eb12690,ffff80001d372638,0) at soo_read+0x53 dofilereadv(ffff80001d339758,6,ffff80001d372638,0,ffff80001d372720) at dofilereadv+0x1a1 sys_read(ffff80001d339758,ffff80001d3726d0,ffff80001d372720) at sys_read+0x83 syscall(ffff80001d3727a0) at syscall+0x507 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffd9220, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic receive 3: so 0xfffffd8064569320, so_type 3, m 0xfffffd805c89fa00, m_type 0 ddb> trace db_enter() at db_enter+0x18 panic(ffffffff821abe2f) at panic+0x15c soreceive(fffffd8064569320,0,ffff80001d372638,0,0,ffff80001d372544) at soreceive+0x16e7 soo_read(fffffd805eb12690,ffff80001d372638,0) at soo_read+0x53 dofilereadv(ffff80001d339758,6,ffff80001d372638,0,ffff80001d372720) at dofilereadv+0x1a1 sys_read(ffff80001d339758,ffff80001d3726d0,ffff80001d372720) at sys_read+0x83 syscall(ffff80001d3727a0) at syscall+0x507 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffd9220, count: -8 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80001d372380 rbx 0xffff80001d372430 rdx 0x2 rcx 0 rax 0 r8 0xffff80001d372340 r9 0x1 r10 0 r11 0x37d758570ba14644 r12 0x3000000008 r13 0xffff80001d372390 r14 0x100 r15 0x1 rip 0xffffffff819e0b28 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff80001d372370 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb> show proc PROC (dhclient) pid=217459 stat=onproc flags process=0 proc=0 pri=24, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff80001d339ea8,0xffff80001d339c48 process=0xffff8000ffffa710 user=0xffff80001d36d000, vmspace=0xfffffd806bc09660 estcpu=0, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 7216 73003 38257 0 2 0 syz-executor.0 7216 36487 38257 0 2 0x4000000 syz-executor.0 70068 339457 25631 0 2 0 syz-executor.1 97862 400966 0 0 3 0x14200 bored sosplice 38257 241464 9953 0 3 0x82 nanosleep syz-executor.0 25631 125866 9953 0 3 0x82 nanosleep syz-executor.1 9953 255719 40459 0 3 0x82 thrsleep syz-fuzzer 9953 281943 40459 0 3 0x4000082 thrsleep syz-fuzzer 9953 492124 40459 0 3 0x4000082 kqread syz-fuzzer 9953 388396 40459 0 3 0x4000082 thrsleep syz-fuzzer 9953 202296 40459 0 3 0x4000082 thrsleep syz-fuzzer 9953 396061 40459 0 3 0x4000082 thrsleep syz-fuzzer 9953 236439 40459 0 3 0x4000082 thrsleep syz-fuzzer 9953 197596 40459 0 3 0x4000082 thrsleep syz-fuzzer 40459 36757 39387 0 3 0x10008a pause ksh 39387 228901 16010 0 3 0x92 select sshd 12796 439631 1 0 3 0x100083 ttyin getty 16010 223493 1 0 3 0x80 select sshd 18553 165834 59784 73 3 0x100090 kqread syslogd 59784 199940 1 0 3 0x100082 netio syslogd 24249 283504 1 77 2 0x100010 dhclient *59191 217459 1 0 7 0 dhclient 54293 91958 0 0 2 0x14200 zerothread 21729 134423 0 0 3 0x14200 aiodoned aiodoned 92373 345785 0 0 3 0x14200 syncer update 5819 308560 0 0 3 0x14200 cleaner cleaner 24416 183849 0 0 3 0x14200 reaper reaper 59690 461934 0 0 3 0x14200 pgdaemon pagedaemon 70325 516582 0 0 3 0x14200 bored crynlk 15416 240260 0 0 3 0x14200 bored crypto 61422 326758 0 0 3 0x40014200 acpi0 acpi0 12316 484348 0 0 3 0x14200 bored softnet 91446 522418 0 0 3 0x14200 bored systqmp 652 158532 0 0 3 0x14200 bored systq 429 417993 0 0 3 0x40014200 bored softclock 68201 286312 0 0 3 0x40014200 idle0 3813 50989 0 0 3 0x14200 bored smr 1 9731 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9461 6327K 6711K 78643K 10615 0 pcb 13 8K 8K 78643K 21 0 rtable 107 3K 3K 78643K 195 0 ifaddr 48 11K 11K 78643K 54 0 counters 21 16K 16K 78643K 21 0 ioctlops 0 0K 2K 78643K 19 0 iov 0 0K 12K 78643K 6 0 mount 1 1K 1K 78643K 1 0 vnodes 1218 77K 77K 78643K 1241 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 2 0K 0K 78643K 2 0 sem 12 0K 0K 78643K 18 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1794 195K 288K 78643K 12646 0 file desc 6 17K 25K 78643K 71 0 sigio 0 0K 0K 78643K 2 0 proc 47 38K 63K 78643K 373 0 subproc 32 2K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 in_multi 46 2K 2K 78643K 46 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 49 228K 228K 78643K 49 0 exec 0 0K 1K 78643K 183 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 105 38K 38K 78643K 1014 0 UVM aobj 10 2K 2K 78643K 10 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 5 0 NDP 6 0K 0K 78643K 10 0 temp 72 3009K 3073K 78643K 1908 0 kqueue 3 4K 8K 78643K 8 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 0 1 0 1 1 0 8 0 rtpcb 80 21 0 19 1 0 1 1 0 8 0 rtentry 112 46 0 1 2 0 2 2 0 8 0 unpcb 120 39 0 31 1 0 1 1 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpqe 32 75 0 75 1 0 1 1 0 8 1 tcpcb 544 16 0 12 1 0 1 1 0 8 0 inpcb 280 98 0 91 2 0 2 2 0 8 1 nd6 48 6 0 0 1 0 1 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 194 0 0 13 0 13 13 0 8 0 art_table 32 196 0 0 2 0 2 2 0 8 0 art_node 16 45 0 4 1 0 1 1 0 8 0 sysvmsgpl 40 8 0 6 1 0 1 1 0 8 0 semupl 112 5 0 5 1 0 1 1 0 8 1 semapl 112 16 0 6 1 0 1 1 0 8 0 shmpl 112 8 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1474 0 75 46 0 46 46 0 8 0 ffsino 240 1474 0 75 83 0 83 83 0 8 0 nchpl 144 1762 0 150 61 0 61 61 0 8 1 uvmvnodes 72 1530 0 0 28 0 28 28 0 8 0 vnodes 208 1530 0 0 81 0 81 81 0 8 0 namei 1024 4424 0 4424 1 0 1 1 0 8 1 vcpupl 1984 1 0 0 1 0 1 1 0 8 0 vmpool 528 1 0 0 1 0 1 1 0 8 0 scxspl 192 5432 0 5432 1 0 1 1 0 8 1 plimitpl 152 22 0 15 1 0 1 1 0 8 0 sigapl 432 242 0 228 2 0 2 2 0 8 0 futexpl 56 1167 0 1167 1 0 1 1 0 8 1 knotepl 112 58 0 39 1 0 1 1 0 8 0 kqueuepl 144 10 0 8 1 0 1 1 0 8 0 pipelkpl 16 79 0 69 1 0 1 1 0 8 0 pipepl 120 158 0 139 1 0 1 1 0 8 0 fdescpl 432 243 0 228 2 0 2 2 0 8 0 filepl 120 1387 0 1291 4 0 4 4 0 8 1 lockfpl 104 13 0 12 1 0 1 1 0 8 0 lockfspl 48 5 0 4 1 0 1 1 0 8 0 sessionpl 112 17 0 7 1 0 1 1 0 8 0 pgrppl 48 17 0 7 1 0 1 1 0 8 0 ucredpl 96 180 0 173 1 0 1 1 0 8 0 zombiepl 144 228 0 228 1 0 1 1 0 8 1 processpl 896 258 0 228 4 0 4 4 0 8 0 procpl 624 316 0 278 4 0 4 4 0 8 1 sosppl 128 3 0 3 1 0 1 1 0 8 1 sockpl 400 158 0 141 3 0 3 3 0 8 1 mcl64k 65536 2 0 2 1 0 1 1 0 8 1 mcl8k 8192 2 0 2 1 0 1 1 0 8 1 mcl4k 4096 14 0 14 2 1 1 1 0 8 1 mcl2k 2048 61568 0 61522 15 2 13 13 0 8 6 mtagpl 80 6 0 2 2 1 1 1 0 8 0 mbufpl 256 97776 0 97606 12 1 11 11 0 8 0 bufpl 280 4141 0 163 285 0 285 285 0 8 0 anonpl 16 41411 0 24784 69 1 68 68 0 107 0 amapchunkpl 152 1340 0 1201 8 0 8 8 0 158 2 amappl16 192 1198 0 282 47 0 47 47 0 8 0 amappl15 184 1 0 0 1 0 1 1 0 8 0 amappl14 176 18 0 14 2 1 1 1 0 8 0 amappl13 168 31 0 29 1 0 1 1 0 8 0 amappl12 160 7 0 6 1 0 1 1 0 8 0 amappl11 152 59 0 47 1 0 1 1 0 8 0 amappl10 144 38 0 32 1 0 1 1 0 8 0 amappl9 136 353 0 350 1 0 1 1 0 8 0 amappl8 128 268 0 250 1 0 1 1 0 8 0 amappl7 120 129 0 117 1 0 1 1 0 8 0 amappl6 112 20 0 18 2 1 1 1 0 8 0 amappl5 104 225 0 213 1 0 1 1 0 8 0 amappl4 96 432 0 404 1 0 1 1 0 8 0 amappl3 88 104 0 99 1 0 1 1 0 8 0 amappl2 80 1142 0 1072 3 1 2 3 0 8 0 amappl1 72 13944 0 13523 27 13 14 20 0 8 5 amappl 80 560 0 517 1 0 1 1 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 9 0 0 1 0 1 1 0 8 0 uaddrrnd 24 244 0 228 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 244 0 228 1 0 1 1 0 8 0 vmmpekpl 168 5765 0 5736 2 0 2 2 0 8 0 vmmpepl 168 36766 0 34727 120 8 112 112 0 357 23 vmsppl 272 243 0 228 2 0 2 2 0 8 0 pdppl 4096 494 0 457 6 0 6 6 0 8 1 pvpl 32 135143 0 115511 163 0 163 163 0 265 4 pmappl 200 243 0 228 1 0 1 1 0 8 0 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 151 0 6 5 0 5 5 0 8 0