kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Thu Dec 5 15:07:58 PST 2019 OpenBSD/amd64 (ci-openbsd-multicore-9.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.10.59' (ECDSA) to the list of known hosts. 2019/12/05 15:08:09 fuzzer started 2019/12/05 15:08:13 dialing manager at 10.128.15.235:31312 2019/12/05 15:08:13 syscalls: 337 2019/12/05 15:08:13 code coverage: enabled 2019/12/05 15:08:13 comparison tracing: enabled 2019/12/05 15:08:13 extra coverage: support is not implemented in syzkaller 2019/12/05 15:08:13 setuid sandbox: enabled 2019/12/05 15:08:13 namespace sandbox: support is not implemented in syzkaller 2019/12/05 15:08:13 Android sandbox: support is not implemented in syzkaller 2019/12/05 15:08:13 fault injection: support is not implemented in syzkaller 2019/12/05 15:08:13 leak checking: support is not implemented in syzkaller 2019/12/05 15:08:13 net packet injection: enabled 2019/12/05 15:08:13 net device setup: support is not implemented in syzkaller 2019/12/05 15:08:13 concurrency sanitizer: support is not implemented in syzkaller 2019/12/05 15:08:13 devlink PCI setup: support is not implemented in syzkaller 15:08:18 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0xa, 0xffffffffffffffff) ioctl$VMM_IOC_READREGS(r0, 0xc2485607, &(0x7f0000000000)) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000280)={0x0}, 0xfffffffffffffffe) fcntl$lock(r0, 0x9, &(0x7f00000002c0)={0x2, 0x0, 0x8281, 0x2, r1}) r2 = open(&(0x7f0000000300)='./file0\x00', 0x80, 0x19a) r3 = socket$inet(0x2, 0x9, 0x2) bind(r3, &(0x7f0000000340)=@in6={0x18, 0x3, 0xfffff000, 0xe8}, 0xc) poll(&(0x7f0000000380), 0x0, 0x2) fchmod(r3, 0x8) r4 = openat$klog(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/klog\x00', 0x8, 0x0) fcntl$getown(0xffffffffffffff9c, 0x5) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000480)={0x2, 0xde85526}, 0x8) r7 = openat$pci(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/pci\x00', 0x8, 0x0) fcntl$dupfd(r3, 0xa, r7) unveil(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='W\x00') execve(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=[&(0x7f00000005c0)='W\x00', &(0x7f0000000600)='/dev/klog\x00'], &(0x7f00000007c0)=[&(0x7f0000000680)='&\\\x00', &(0x7f00000006c0)='%{\'\xef)\\.\x00', &(0x7f0000000700)='^\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='.\x00']) r8 = open(&(0x7f0000000800)='./file0\x00', 0x80, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000001b80)={0x0}, 0xc) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, 0xc) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/zero\x00', 0x20000, 0x0) r12 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/wskbd\x00', 0x80, 0x0) r13 = open(&(0x7f0000001c80)='./file0\x00', 0x0, 0x40) r14 = accept(0xffffffffffffffff, 0x0, &(0x7f0000001cc0)) r15 = syz_open_pts() r16 = getpgrp() getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000001d00)={0x0, 0x0, 0x0}, &(0x7f0000001d40)=0xc) r18 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000001d80)='/dev/wskbd0\x00', 0xa, 0x0) r19 = getuid() sendmsg$unix(r8, &(0x7f0000001e80)={&(0x7f0000000840)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000001b40)=[{&(0x7f0000000880)="e44097e684907ae2b4e63fddb6eae212b8793be5c207ad26493e290bc2c5759fa5d031b957e29c807ee737436b665b47b87ea0ac2aec6b349a576a64e438d6a443c583ff50126d253119fdf4cdd5590391bed46eba761f9b3eea49f035002124eda069d3be055480e071cc0483dca557ce05dacc1dd0c47d2ece2a2be0dba4db64627d556037da8df8c0d56cf29cf4aba1dd08a75e7f8084964061d502cc9278d70c88e23c2b0541d34f046fe3438c57cc869866d91800f3", 0xb8}, {&(0x7f0000000940)="ad1213d3ff81a30ac15e91dff2224f521afb4db04052848b718413040ae13f56f1330fbc468894a98e18afacd6d59929674bf95123cb35bc3693d38104b47ddbbf71a46d5a323160d35dc174b9dcc910e78d5fa1fbc2d8587e8535bde744a294f75812f485ca232cd3a2cc75b852d901bdc4e6835ceb3930f414894564b2abd016795bf365dbebf11f1a6f26f9dc5e7197e66be80121da20031b5fd24d4eb0c1dec19afd1a21227210065a80163c10d11cf28719cecd1b3488730a8ebaa952e08513654d8dc1b4a98509b49af0bf5783af0920e8b9e9a5d31469e76a1011", 0xde}, {&(0x7f0000000a40)="9416aef0b91d6fa646c25dc91655531bad02bb4a5405017165f61cdd9907ec2dd75e6b42e72bcc2dac16968579d40310f73f9748e3691670947a71ccc7710ecb53e8710c979c069c07845392a9396c38b731082b46a34e51d86453818006350d74012badac80fc02fbcf849a59cafd5cbb3353214accd71c09cf102036483c5778b097e14d8b7d33cddab8228457effdc4c6936d1b56be309e3eb38f6846de457bc218275f648de65d870abb3fa6a75c950c8b20acaa773a409a01e4f7cc7ecd708324cc41b9c1a494954286348e8e78c9a4adb6935c083418b380c954661b94e26826bf9efed48b6b0f8a0ca1e095", 0xef}, {&(0x7f0000000b40)="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", 0x1000}], 0x4, &(0x7f0000001dc0)=[@cred={0x20, 0xffff, 0x0, r9, r5, r10}, @rights={0x28, 0xffff, 0x1, [r11, r12, r13, r14, r15]}, @cred={0x20, 0xffff, 0x0, r16, 0x0, r17}, @rights={0x30, 0xffff, 0x1, [r3, r7, r4, r0, r18, r2, r7]}, @cred={0x20, 0xffff, 0x0, r1, r19, r6}], 0xb8}, 0x6418a22461462222) 15:08:18 executing program 1: r0 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x3000) shmdt(r0) r1 = socket$inet(0x2, 0x4000, 0x1) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000000)=""/230, 0xe6}, {&(0x7f0000000100)=""/156, 0x9c}, {&(0x7f00000001c0)=""/153, 0x99}, {&(0x7f0000000280)=""/177, 0xb1}], 0x4) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x10000, 0x86) ioctl$BIOCLOCK(r2, 0x20004276) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f00000003c0)={'./file0\x00', 0x3, 0x1, 0xffffffff, 0x1, 0x3f, 0x7, 0x616e, 0x4, 0x0, 0xffff, 0x40}) ioctl$WSMOUSEIO_SRES(r2, 0x80045721, &(0x7f0000000440)=0xff) r3 = open(&(0x7f0000000480)='./file0\x00', 0x10000, 0x80) r4 = openat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x40, 0x164) mkdirat(r4, &(0x7f0000000500)='./file0\x00', 0x4) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0xc) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6) msgget(0x3, 0x0) r7 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ttyCcfg\x00', 0x20000, 0x0) ioctl$WSDISPLAYIO_GMODE(r7, 0x4004574b, &(0x7f00000005c0)) r8 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ttyCcfg\x00', 0x20000, 0x0) writev(r8, &(0x7f00000007c0)=[{&(0x7f0000000640)="5743c1836abc3f87a97e0e4df5c59e7dae2f2b64dc9c4d8034e879f8be0ba1c47fa40c7de90df08328490d7bbcc3bb5686a31c55f0ecd13f18a91c50f61fc18974e9d1fd71b4eec76b8b1e9161ca6e81c74b4033b1c1dc576e212ff0309d3aa1ecf8caaf978838a00856cf0a1f5798b31ed2", 0x72}, {&(0x7f00000006c0)="436238ac3c86339a8a71ba4dba49eca570d0ae7bec9588610c2d57a57f6f0277afb9611cc94f0a98046907a3a2a2ad10aea8c9c9c1713eddda0c7d5b4b557ce25eab23c1158a7dbc704452a3a69b5c806aa587bf61e16b3d7f6267c846a6230f3d16a680a87f09f1faab5c02f3ef31e6815fa1516175df0f522920047e6e974b9a55e1260d509a2c1044f19c37fcc5c87f5e6616c0c851981b2b4e14c9bd2e49d5abc98215c58fb9df4b84f905776c948755815720b510fdd48942fc64d047664698e3f865db71b781", 0xc9}], 0x2) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) pipe2(&(0x7f0000000800)={0xffffffffffffffff}, 0x10000) ioctl$TIOCFLUSH(r9, 0x80047410, &(0x7f0000000840)=0x7) r10 = open(&(0x7f0000000880)='./file0\x00', 0x10004, 0x10) ioctl$DIOCMAP(r10, 0xc0106477, &(0x7f0000000900)={&(0x7f00000008c0)='./file0\x00', r3, 0x2}) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r11 = openat$pci(0xffffffffffffff9c, &(0x7f0000000940)='/dev/pci\x00', 0x8729c9d1812f72f3, 0x0) r12 = openat$pci(0xffffffffffffff9c, &(0x7f0000000980)='/dev/pci\x00', 0x8000, 0x0) dup2(r11, r12) r13 = semget(0x0, 0x2, 0x0) getgroups(0x5, &(0x7f00000009c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) semctl$IPC_SET(r13, 0x0, 0x1, &(0x7f0000000a00)={{0x80000000, r5, r6, r5, r14, 0x8}, 0x9, 0x4, 0x619b}) 15:08:21 executing program 1: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="62020207e0000001"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x3, 0x1) connect$unix(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="630957a6b2eb8647c6f8ffffff00"], 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200, 0x0) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f00000000c0)={'./file0\x00', 0x5, 0x4, 0x9, 0x0, 0x6, 0x1, 0x40, 0x1, 0x2, 0x0, 0xb264}) write(r0, 0x0, 0x0) 15:08:21 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x4000000001, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5c}, {0x4c}, {0x6, 0x0, 0x0, 0x4cd3}]}) pwrite(r0, &(0x7f0000000180)="f781ea80e21bb6f576c45af84a28", 0xe, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x20}, {0x1d}, {0x6}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x20}, {0x1d}, {0x6}]}) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x8, &(0x7f00000001c0)=[{0x111, 0x8, 0x3, 0x4}, {0xa08, 0x7, 0x8, 0x1}, {0x4be9, 0x5, 0x8}, {0x4010, 0x20, 0x8, 0x8}, {0x0, 0x2, 0x20, 0x131}, {0x75b, 0x1, 0x40, 0x1}, {0xffff, 0x4, 0x7f, 0x3ff}, {0x0, 0x4a, 0x80}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="869e4e19fdbc4eb304d4d15b7542e76c000dee803e72d9abb91378ac3dac3f92f140fde8e4ef54", 0x27}], 0x1, 0x0, 0x5) 15:08:21 executing program 1: r0 = socket(0x2, 0x8001, 0x0) connect$unix(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="8202b804d7fbf0b536878abfd86630000000d09cba411423999fc3111a8ded097e0400000000926114f05afb9f1ebe3e09108751519886b630d2b0e1afbe78c2fcf7131d782b2d1d20596327e9bf4fe491b57b4cb2d744b21a8eedc850fed0dbd3eb2b751f188c17c6bf41f88cd87637d789440dcecbbd67f6bb5f31519a2adadbde7890d9eab9ac884e1ce0824724ee5684a3aaac51fc4124f200a313a3eca56f56e7b94fad0d53864d40394a347d6602c47cd33b9854bb80c3c316f6843f0f3f569971daa524"], 0x10) shutdown(r0, 0x1) mknod(&(0x7f0000000100)='./bus\x00', 0x3a0914c44f7b202c, 0xd02) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xfffffe91}], 0x1, 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x100, &(0x7f000000c000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x1000) shmctl$IPC_RMID(r2, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 15:08:21 executing program 0: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x20}, {0x1d}, {0x6}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) fchdir(r1) r2 = kqueue() kevent(r2, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffffe, 0xffffffffffffffff}], 0x80, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 15:08:21 executing program 0: mmap(&(0x7f00003f8000/0x400000)=nil, 0x400000, 0x7, 0x810, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x20}, {0x1d}, {0x6}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) fcntl$setflags(r0, 0x2, 0x1) mprotect(&(0x7f0000535000/0x3000)=nil, 0x3000, 0x0) select(0x0, 0x0, 0x0, &(0x7f00006c7fc0), 0x0) chdir(&(0x7f0000739ffe)='..') 15:08:22 executing program 0: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCSTSTAMP(r0, 0x8008745a, &(0x7f0000000140)={0x4, 0x4}) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0xcda3, 0x6, 0x800000000006]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = syz_open_pts() r2 = open(&(0x7f0000000780)='./file1\x00', 0x0, 0x0) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000002c0), 0xffffffffffffff3b) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000080), &(0x7f0000000040)=0xfffffef8) ioctl$TIOCSETD(0xffffffffffffff9c, 0x8004741b, &(0x7f0000000040)=0x9) fcntl$setflags(r1, 0x2, 0x1) dup2(r1, r1) ioctl$TIOCMSET(r1, 0x8004746d, &(0x7f0000000000)=0x40) socket(0x0, 0x0, 0x0) r3 = socket(0x2, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TIOCFLUSH(r4, 0x8020691f, &(0x7f0000000300)) 15:08:22 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x2c}, {0x400000061}, {0x6}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffff9c, 0x80104267, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{0x7ffb, 0x0, 0x5, 0x200}, {0x3, 0x7f, 0x6, 0x1d}, {0x1, 0x2, 0x1, 0xd911}, {0x2e, 0x4, 0x7f, 0x7}, {0x1, 0x7, 0x20, 0x94c2}, {0x2, 0x1, 0x3}, {0x4, 0x8, 0xff, 0x3ff}]}) syz_emit_ethernet(0x49b, &(0x7f0000000000)) 15:08:22 executing program 0: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x0, 0xab8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210], [0xfffffffffffffffe], [0x4], [{}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x2000000000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x2, 0x1, 0x0) r0 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000000)=0x3, 0x4) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x3, 0x10001}, 0x10) ioctl$TIOCFLUSH(0xffffffffffffffff, 0x8040691a, &(0x7f0000000300)) 15:08:22 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000300)=[{0x20}, {0x4}, {0x6}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000280)="8c685f3ad1239438a7dde00ddb1d") mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0x86135) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0xd3) write(0xffffffffffffffff, &(0x7f0000000180)="582720efabd16ebae63225259560f8e5815f73f2a044fd33055552fbd5e41789632dfc94ff334a5619515a4c8ab06198", 0x30) write(r1, &(0x7f0000000140)="220e22", 0x3) openat$diskmap(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/diskmap\x00', 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bpf\x00', 0x0, 0x0) r2 = semget$private(0x0, 0x7, 0x20) semop(r2, &(0x7f0000000100)=[{0x3, 0x7, 0x1000}, {0x3, 0x80}, {0x1, 0x800, 0x800}, {0x0, 0x10001, 0x1000}, {0x3, 0x401, 0x800}, {0x0, 0x6, 0x800}, {0x1}, {0x4, 0x5c, 0x800}, {0x0, 0x4, 0x1000}, {0x1, 0x8, 0x800}], 0xa) semop(r2, &(0x7f0000000340), 0x21) geteuid() ioctl$BIOCGHDRCMPLT(r0, 0x40044274, &(0x7f00000000c0)) openat$diskmap(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/diskmap\x00', 0x0, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r4 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/diskmap\x00', 0x0, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) dup2(r5, r4) r6 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/diskmap\x00', 0x0, 0x0) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r8 = dup2(r7, r6) ioctl$BIOCSETF(r8, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x64}, {0x1c}, {0x6}]}) openat$diskmap(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/diskmap\x00', 0x0, 0x0) r9 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r9, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) 15:08:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x2, 0xc003, 0x6) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x20}, {0x1d}, {0x6}]}) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r3 = open(&(0x7f0000000780)='./file1\x00', 0x0, 0x0) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f00000002c0), 0xffffffffffffff3b) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000080), &(0x7f0000000040)=0xfffffef8) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) connect$unix(r4, &(0x7f0000000100)=ANY=[], 0x0) write(r1, &(0x7f0000000080)="9e3eaa56000000000004bf9aab4230408600000000d0459370410510fa651c1ece0efdd308e6b7ca", 0x28) write(r1, &(0x7f0000000040)="e25aae490000000001000000df142d545d8489199ccf9c9fbcf3820a946261a5f2c8ef255b5dcf7f5d77fb3d3ea0b0f93794cbba", 0x34) dup2(r1, r0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4) r5 = dup(r0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/d/bpf\x00', 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000040), 0xfcec, 0x0, 0x0, 0x0) 15:08:22 executing program 0: r0 = semget$private(0x0, 0x2, 0x200) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x7f}}) r1 = semget(0x2, 0x3, 0x18) semctl$GETNCNT(r1, 0x1, 0x3, &(0x7f00000000c0)=""/232) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="3182e58941000001"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x1, 0x0) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0x10) setsockopt(r3, 0x2ec51bed, 0x10000, &(0x7f0000000240)="b08732b5b0c398fd69b8989696d4b0b5affc2a93e2b89a0bc8da21393f770ef4330f803b6d5eebd6aa6849c5c9b1c4218ef5e6dbc8efba088bd66a53d83a76c42ea94e305e5b4dcbfa9e2753261241e1345f001b8602269b3ab56ecc0ff11f62815936854e0c53ef9ea3487acea74a8c60cfe52de6", 0x75) bind(r2, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) r4 = dup(r2) listen(r4, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1004, &(0x7f0000000040), 0x4) r5 = socket(0x2, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="6a8bc9634e19767b0784"], 0x10) write(r5, &(0x7f00000002c0)="e2", 0x1) sendto$unix(r5, &(0x7f00000011c0)='\x00', 0x1f4ea3ae, 0x1, 0x0, 0xfffffd7e) r6 = accept$unix(r4, 0x0, 0x0) recvfrom$unix(r6, &(0x7f0000001200)=""/4096, 0x1000, 0x2, 0x0, 0x0) 15:08:23 executing program 1: r0 = kqueue() pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) kevent(r0, &(0x7f00000000c0)=[{{r1}, 0xffffffffffffffff, 0x7}], 0x6, 0x0, 0x0, 0x0) r3 = kqueue() getsockopt$sock_int(r2, 0xffff, 0x115, &(0x7f0000000040), &(0x7f0000000080)=0x4) kevent(r3, &(0x7f0000000000), 0x20, 0x0, 0x10000, 0x0) poll(&(0x7f0000000040), 0x0, 0x1) dup2(r0, r2) 15:08:23 executing program 1: ioctl$TIOCCONS(0xffffffffffffffff, 0x80047462, 0x0) mmap(&(0x7f000071c000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x800, 0x0) ioctl$TIOCSDTR(r0, 0x20007479) open(&(0x7f00009b7000)='./bus\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) mlock(&(0x7f000097f000/0x200000)=nil, 0x200000) mmap(&(0x7f0000847000/0x600000)=nil, 0x600000, 0x0, 0x1010, 0xffffffffffffffff, 0x0, 0x0) 15:08:23 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x4000000001, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{}, {0x8000024}, {0x6, 0x0, 0x0, 0xfb}]}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) pwrite(r0, &(0x7f0000000240)="fbaf8a8d1a029be96914f6357e3a", 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) 15:08:23 executing program 1: setrlimit(0x8, &(0x7f0000000040)={0x7, 0x95}) r0 = syz_open_pts() close(r0) r1 = socket(0x800000018, 0x1, 0x0) ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f00000016c0)={0x9, 0x1000, 0x9, 0x9, "6771dea8bdf555b42901a077d8f02df51ee642d5", 0xa2, 0x4}) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000000)=0x3, 0x4) connect(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="0669d1510099dddf9398b25ffa4bd84658a8c8c9d4167cd5963a6a8004000000000000001031cde9641d89d0c7baff3676c7cbea09d4c1c43918f3ade7fa87f5c3d227f7cd1f0c387fff63ce0a26501e1ee8b16c8f62335c981a45bcff87c268487aece2d75c7c5dbc"], 0xa) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000007c0), 0xc) sendmsg(r1, &(0x7f0000001680)={&(0x7f0000000000)=@in={0x2, 0x1}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000180)="d79670ba2a1ee778b479b50b04db220ff69d13c72766d52121079d8afe8358a181d97f76b477370997d4c6575056d5c7f4c20e13bcad416357a4ceb2457e074c5823c16488ede68268e0bfe8344aa1bd07856e9320d2d3380804e28071e3f1a3eb44d240ba1e6e4c6f4a8aa33f719b6a0d9a0eea8cf1d129b263de18463c21e41aeca4", 0x83}, {&(0x7f0000000240)="c2642b17d151f809b1febbbb303871d712946871b19377250ffaeedc90aed8bb88e08ad34ef1887fea3e6db9ae2e91e52832a64f557b9de7ac5b1caacc6e4ef50617b7d0cb74455d5a059368b26491dc1d53dc5c8244ce811d1ab07b775a527bdec82ab11dcecea8210525db9feb7370d20268cd0a444ac73783ea2df3a4d8603d08831a1c9f96bd01b3c71a27fb65559542a2dffe58b8d54c5a2a3ae978ab5c381ea938ae85df279df7a57c504f3f4b5c1d0890ec6e875adcdf28c059bb50c286666754b62191fef0aebfd45de712523a70434065040372bd2f6780a041b4457563222bbc3426b5f617b84b64782cbc728244", 0xf3}, {&(0x7f00000000c0)="9412d2e6331f711ffa01eabd25e3f0686bbdb9595a1d8ac1c1ed", 0x1a}, {&(0x7f0000000340)="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", 0x1000}], 0x4, &(0x7f0000001340)=[{0x110, 0x1, 0x6, "38b2609c2de7d0a194e6ed0c803572b091aca93bcee061464beac9621392d92204ec7c78db104109fc2f3f0575e539eaf02073eb24d05e769e45e8b1648b9330dd3ce734f32d57cc7700537529cc90dcdce08e53c19c5c079cfbc2a60fe8b540df58b63844efbda69b565e3d1f08acd32ebba64d5db19b21b657631d509fb1e508c786661990febbd9b66f05eff1cab3ea3bc99143a10c95aa7f8e3d56390d1d205a7e7f5dddab7ed2ca74e5478a41fbc988fe52bfd5785041f57267877f84be73fbcb0fd9aaa2f86513c7d2998452df7cc66fce60d6651989ed84cb6c6888208b9c6fa6046a890b550cd37213d97e361bc3208fe5406e982a"}, {0x80, 0xffff, 0xb1, "058aab3fd0a4fe1394da36916dd0e891361957a4572e7e602625dcea7ec1cda7b94bb32f206beed11330a2e337c9f0b3075f22e569e2e8ddb347530507368fd44814c9dc76e61d819abd963822aedf8adbcc3141cca0897b0a485b2a252e84839e7bdc8dcc8c2e7e79af"}, {0x68, 0x1, 0x68, "dd62c3a9fd5a9da32d7c1c8fbdaf3fea3d6c1d2699180a4efdadd92eeb58445c97b5762c636eefe74b705ccbfaf63fcb4948f581eccaf79837b8b274a16b851dde7e8937534c5ff6950039f073ec9c5aa83437"}, {0x100, 0xffff, 0xff, "cb6d73260915dcf49eafd1ea4795802f192e84fd568704676888d744a1a6c2e3246f722a0a58c779588922e6bc40a5889a6642bdd0f19e3c80ee7b899138e2ccceec8bc9402fe6e6c92a3a5d4f03a929b17dbab4615b54f61d82e6bb238c95c0626c3139ddc6b5793504f4cbd91569f8b478a1d649ed9fdeba75c7196b08ba7a12da42ee94f64899bfdbc75a7d60172fd921bfedbad908d361fc64e5e4c6c7572f9fc1579cb3909dfbdb8ca16f74b4a13dc8c29cad9a1ece89c7fddb932e0298f14fc9ff4e03d6003e422a05a5a6ecacba856445530844fc43a8e7cd6468f6b9e5da32fd356145812fdc"}, {0x40, 0x1, 0x2, "5d660ef3ad53469c5aa6cb4fbaaa47e51dcd8cbbe4e79a9c2d971bbdefba5f3edaf451a586e150de80f2"}], 0x338}, 0x803) r2 = syz_open_pts() ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000080)={0x0, 0x54d, 0x5, 0x200000000511c, "047c2ce62e0dbcdcc58b62c200000100"}) write(r0, &(0x7f0000000140)='\r', 0x1) 15:08:23 executing program 0: ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{}, {0x2033}]}) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x400000002, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x2c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x3}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x1ff, 0x0, "000000000000000100002000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close(r1) socket(0x400000000018, 0x3, 0x3a) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r1, &(0x7f0000000140)="ad18f05de2f4ef18", 0x23c) syz_extract_tcp_res(&(0x7f0000000040), 0x80000001, 0x2) 15:08:23 executing program 1: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x80000000, 0x0, 0x0, {[0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2], [0x0, 0x0, 0x0, 0x9, 0xfffffdffffffffff], [0x0, 0x0, 0x401], [], {}, {0x0, 0x0, 0x6, 0x1}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCFLUSH(r0, 0x8080691a, &(0x7f0000000300)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$TIOCSETVERAUTH(r1, 0xc0107002, &(0x7f0000000000)=0x280000) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000002c0), 0xffffffffffffff3b) ioctl$TIOCSWINSZ(r1, 0x80087467, &(0x7f0000000000)={0xff80, 0x0, 0x5, 0x6}) 15:08:23 executing program 0: r0 = socket(0x2, 0x8001, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0xbd5699bc1ec0282, './file0\x00'}, 0x10) r1 = socket(0x2, 0x4001, 0x0) connect$unix(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="82020063c4a143dce4a7efe1970da711ecdd57be971e2f66"], 0x10) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="82020c00000001000000c67824afe43355666981830000"], 0x10) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000080)=0x4, 0x4) r3 = dup2(r1, r1) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000100)=0x3, 0x4) close(r3) 15:08:23 executing program 1: r0 = syz_open_pts() ioctl$TIOCCBRK(r0, 0x2000747a) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) openat(r2, &(0x7f0000000100)='./file0\x00', 0x8, 0x2) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x367) r4 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x192) ioctl$TIOCSTAT(r4, 0x20007465, 0x0) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000006c0), &(0x7f00000005c0)=0x2) r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyCcfg\x00', 0x80, 0x0) kevent(r3, &(0x7f00000010c0)=[{{r1}, 0xfffffffffffffffd, 0x40, 0x1, 0xffff, 0xfffffffffffff1f5}, {{r1}, 0xfffffffffffffffa, 0x41, 0x80, 0x8, 0x2000000000000004}, {{r3}, 0xfffffffffffffffd, 0xf, 0x20000005, 0x2, 0x3ff}], 0xf, &(0x7f0000000400)=[{{r1}, 0xfffffffffffffffe, 0x89, 0xc0000020, 0xfffffffffffffb63, 0x3}, {{r1}, 0xfffffffffffffffb, 0x36, 0x1, 0x4a3, 0x8423}, {{r1}, 0xfffffffffffffffb, 0xc4, 0x20000000, 0x4, 0x3ff}, {{r1}, 0xfffffffffffffff9, 0x80, 0xfffff, 0x856d, 0x2000000020}, {{r5}, 0xffffffffffffffff, 0x80, 0xf0000000, 0x7, 0xc676}, {{r4}, 0xfffffffffffffffb, 0x4, 0x80000000, 0x8, 0x1}], 0x7ffffffe, &(0x7f0000000300)={0x4, 0x51}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000004c0)={0x3, &(0x7f00000000c0)=[{0x25}, {0x1, 0xfffffffffffffffd}, {0x6}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x1, 0x3, 0x7) r8 = accept$inet(r7, &(0x7f0000000500), &(0x7f00000003c0)=0xc) pread(r8, &(0x7f0000000740)="30bd0ed8a8fbacfa229175f41097765352de6868853b399350a5be2b22100535b3a842c4dbe30ad593b356762f850d0e419f78e5b3e1fa5cd0d3c457b01b777064aa89f49960bb031412a5f426729409ffa859a5b6c30c", 0x57, 0x0, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x0, 0x0) symlink(&(0x7f0000000640)='./file0\x00', &(0x7f0000000e80)='./file0\x00') write(0xffffffffffffffff, &(0x7f0000000100), 0x431) ioctl$BIOCSFILDROP(0xffffffffffffffff, 0x80044279, &(0x7f0000000700)=0x400000000003) recvmsg(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/31, 0x66}], 0x1000007e, 0x0}, 0x40) listen(r6, 0x57b) r9 = open$dir(&(0x7f00000005c0)='./file0\x00', 0x88, 0x800000000120) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x9374cae5ff247a48) getgroups(0x8, &(0x7f0000000400)=[0x0, 0x0, 0xffffffffffffffff, 0x0, r11, 0xffffffffffffffff, r11, 0x0]) fchown(r9, r10, r12) seteuid(r10) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000240), 0x9374cae5ff247a48) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) getsockopt$SO_PEERCRED(r13, 0xffff, 0x1022, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0xfffffffffffffe25) lchown(&(0x7f00000004c0)='./file0\x00', r14, r15) chown(&(0x7f0000000180)='./file0\x00', r14, r15) r16 = semget$private(0x0, 0x1, 0x4006c2) semctl$GETALL(r16, 0x0, 0x6, &(0x7f0000000240)=""/108) 15:08:23 executing program 0: mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) mknod(&(0x7f0000000100)='./bus\x00', 0x3a0914c44f7b202c, 0xd02) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1, 0xffffffffffffffff) write(r0, &(0x7f00000007c0)="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", 0x841) r1 = semget(0xffffffffffffffff, 0x6, 0x400) r2 = open$dir(&(0x7f0000000000)='./bus\x00', 0x3, 0x800000000168) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0xfffffeac) getgroups(0x8, &(0x7f0000000400)=[0x0, 0x0, 0xffffffffffffffff, 0x0, r4, 0xffffffffffffffff, r4, 0x0]) fchown(r2, r3, r5) semctl$SETVAL(r1, 0x0, 0x8, &(0x7f0000000200)=0x8) execve(0x0, &(0x7f0000000580)=[&(0x7f00000006c0)='c\x00'], 0x0) mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x4) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='rc') semop(r1, &(0x7f0000000080)=[{0x4, 0x0, 0x1800}, {0x3, 0x401, 0x1800}], 0x2) semctl$SETVAL(r1, 0x3, 0x8, &(0x7f0000000440)=0x6) r6 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyCcfg\x00', 0x20, 0x0) symlink(&(0x7f0000000640)='./file1\x00', &(0x7f0000000680)='./bus\x00') ioctl$WSDISPLAYIO_DELFONT(r6, 0x8058574f, &(0x7f0000000380)={'./file0\x00', 0x4, 0x7, 0x1000, 0x87b107538646d9b, 0x80000000, 0x1, 0x6, 0x0, 0x1, 0x1, 0x3f}) seteuid(r3) r7 = open(&(0x7f0000000280)='./bus\x00', 0x90, 0x100) mknodat(r0, &(0x7f0000000600)='./bus\x00', 0x1040, 0xc) faccessat(r7, &(0x7f0000000300)='./bus\x00', 0x18, 0x3) pwritev(r7, &(0x7f00000013c0)=[{&(0x7f0000000540)="8c232e8c9f7e96999b8a", 0xa}], 0x1, 0x0, 0x2) geteuid() pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$BIOCFLUSH(r8, 0x20004268) getsockopt$SO_PEERCRED(r8, 0xffff, 0x1022, &(0x7f00000004c0), 0xfeed) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) shutdown(r9, 0x0) poll(&(0x7f0000000000)=[{r9, 0x1a5}], 0x2000000000000160, 0x0) getsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f0000000500), &(0x7f0000000440)=0xffffffffffffff46) getsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f0000000480)={0x0, 0x0}, &(0x7f0000000500)=0xc) setreuid(r10, 0xffffffffffffffff) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='c\x00') ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000340)={0x7, 0x602f, 0x0, 0x9c, "93125284112a03000000e6ef63cfa075b336581a", 0x6, 0xf461}) 15:08:23 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x612, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x20}, {0x74}, {0x6}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000080)="080d34413fb2c507153a05b8a2a9") r1 = socket(0x11, 0x4003, 0x0) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x11, 0x3, &(0x7f0000000500)="d41401b2", 0x4) sendto$unix(r1, &(0x7f0000000000)="b1000513600000000000000000000000000004fecea11ea8fef96ecfc73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37281c18e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01b1257aea8c500000002000000000000020208a371a3f8000400000000000000010000000000000000", 0xb1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, &(0x7f00000000c0), 0x4a2) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000280)) r3 = socket$inet(0x2, 0x2, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$TIOCSBRK(r4, 0x2000747b) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f00000004c0)='\x00', 0x1) setsockopt$inet_opts(r3, 0x0, 0x200000000000d, &(0x7f0000000140)="eaff125c009f0000", 0x8) socket$inet(0x2, 0x1, 0x1) pipe(&(0x7f0000000300)) r5 = open(&(0x7f0000000040)='./bus\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)="02ab69072a00"/17, 0xffffff6f) pwritev(r5, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0, 0x0) fcntl$getown(r5, 0x5) r6 = socket(0x800000018, 0x3, 0x102) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000400), &(0x7f0000000340)=0xc) socket(0x800000018, 0x3, 0x102) open(&(0x7f00000003c0)='./file0\x00', 0x80, 0x0) open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x60e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r7, 0x0, 0x0) r8 = msgget$private(0x0, 0x96) msgsnd(r8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x176, 0x800) 15:08:23 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSDLT(r0, 0x8004427a, &(0x7f0000000200)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'\x00\xa9\xad', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x15}, {0x87}, {0x4006}]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10, 0x0) recvfrom$inet6(r2, &(0x7f0000000040)=""/62, 0x3e, 0x40, 0x0, 0x935c8304b77d48f1) syz_emit_ethernet(0xe, &(0x7f0000000a80)="b6bc1fc92479ff2b783f6e8a9c81") r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000240)) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSFILDROP(r3, 0x80044279, &(0x7f00000001c0)=0x2) 15:08:23 executing program 0: r0 = syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000880)={0x0, 0x0, 0x90d2, 0x1080, "00e74de400", 0x0, 0xffffd}) write(r0, &(0x7f00000002c0)="14202bc87290167d61e1f5ecabcb0e0ff7fcc134ea11325884c3a32bb898c44482eab9c7a74a83e5047087f90eeb2d7e658d3d0f1dd368f2a7c5da70a76f7df19c4f7bf4423bf515898c99aaafc5b4f2436bc457ade89efaea7b434a86f133395739acf9f96f3737ebc319", 0xfffffdd5) syz_open_pts() ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000280)) r1 = socket(0x800000018, 0x1, 0x0) r2 = syz_open_pts() fchdir(r2) setsockopt$sock_int(r1, 0xffff, 0x1000, 0x0, 0x0) write(r1, &(0x7f00000000c0)="0f9dd1f4b3c031cbeee9c9d34c9437b95cce90f854327f2c3ef755186d67b1e90e8dd3ec375be45501c4b5483d7da68dc9e953cf338bf295735ac00d0c3ecf65cdec5c585822c89184998bbe218eba0df4df067dff5fe6d97ca1451b75f2be0a675c01eed0576c4a73a8830d1a32b3299db28b8f27e7e58eb435be89baad67c4468d194e05fee535c5acabd2ed14e75e5cf22090930384ddf637fdcf75dfeb31b4fc840b08a11318cc0a24ccfa6424b60bafad49d128b81231517bc6c4a3389b2155c86d2b8a66cf28188a30553ee3881639b99fe0ba83d36c36a4d71ff538aa35249f981f91e0cb330902bd090d4124f0f3b8ac", 0xf4) syz_open_pts() r3 = socket(0x18, 0x2, 0x0) dup(r3) r4 = socket(0x18, 0x2, 0x0) r5 = dup2(r4, r4) r6 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) ioctl$TIOCCONS(r6, 0x80047462, &(0x7f00000000c0)=0x8a31) ioctl$KDDISABIO(r6, 0x20004b3d) ioctl$VMM_IOC_RUN(r5, 0xc050756a, &(0x7f0000000040)={0xfffffffd, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, 0x0, 0x0) kqueue() r7 = msgget$private(0x0, 0x401) msgsnd(r7, &(0x7f0000000040)=ANY=[], 0x0, 0x1000) r8 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/wsmouse0\x00', 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r8, 0x80105727, &(0x7f0000000400)={&(0x7f0000000480)=[{0x101, 0x8}], 0x1}) pwrite(r8, &(0x7f00000002c0)="a3019d759bdccc0f96b77012f8b3e4f6216754248545e14aefe9c9736aac32f8247b4eaf70a50ae1e63362b6f0132ab55948ca9cb9d9bc78742697f597a7e522023f1baeec52c16c4248a179532fc58d5dd93144a0f3d6731f9583ae2fd2ec04acaaf274c2289a641e0adbc82865a875427d874b21f368f13f27170e12f115d5b093322d9830bfe6af60cd728fa8dc007134d0eb8ad3d4c18f1aeba76e4362cf48", 0xa1, 0x0, 0x0) ioctl$FIOASYNC(r8, 0x8004667d, &(0x7f0000000380)=0x2) msgrcv(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000001067ee9ef11350f5df87fd065eca00000000000000000000000000000000831f51f1f32fd93d3b5fc9c5ddf80000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000001c0000000000000000000000000000000000000000000000ffffff7f00"/184], 0xfffffffffffffe9f, 0x1, 0x1000) msgctl$IPC_RMID(r7, 0x0) 15:08:23 executing program 1: r0 = socket(0x2, 0xc003, 0x2f) setsockopt(r0, 0x0, 0x22, &(0x7f0000000000)="caf5b415", 0x4) sendmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000080)=@file={0x90177ed105bf02c4, './file0\x00'}, 0x10, 0x0}, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x20000000000011, 0x3, &(0x7f0000000100)="0000065d", 0x2) r2 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000000)=0x3, 0x4) sendto$unix(r1, &(0x7f00000001c0)="67a32df7bc854e61ca141d4f388927261cdee900bddd561066854bdf635c0da05719bf3d49bb94168ca64fd43e37c81498d07a1bffa071b6a494719067017a68f90b9aeca4ac1c3c35fefedc03fd2df7486b668c06e49d2a5181f4af0fce272080ad2c5ab800217f551200cfc3a0d16b650dd0d66933964218b38bdbc3fa73966b7489ce3e2c29080000008d59cd68bd754b9218e2452bd4687762", 0x9b, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x8) 15:08:23 executing program 1: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210], [0xff]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCFLUSH(r1, 0x8040691a, &(0x7f0000000300)) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000000)=0x3) 15:08:23 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f000060cff8)='/', 0x0, 0x0) lseek(r0, 0x0, 0x6, 0x0) getdents(r0, &(0x7f0000000000)=""/104, 0x27a) socket$inet6(0x18, 0x8000, 0x6) 15:08:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket(0x2, 0xc003, 0x0) connect$unix(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x10) dup2(r2, r1) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4) socket(0x2, 0x3, 0x0) r3 = dup(r1) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket(0x18, 0x1, 0x0) close(r5) connect$unix(r5, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r5, &(0x7f0000000100)="8c65", 0x13f) setsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f0000000040)="eaff125c00000000", 0x8) setsockopt$inet_opts(r4, 0x0, 0x200000000000d, 0x0, 0x738d853e6c79527f) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x200000000000c, &(0x7f0000000040)="eaff125c00000000", 0x8) setsockopt$inet_opts(r6, 0x0, 0x200000000000d, 0x0, 0x0) r7 = dup2(r4, r6) connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x1}, 0xc) ioctl$TIOCCHKVERAUTH(r7, 0x2000741e) sendto$inet6(r3, &(0x7f0000000040), 0xfcec, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) dup(r0) setsockopt$inet_opts(r8, 0x0, 0x200000000000c, &(0x7f0000000040)="eaff125c00000000", 0x8) openat$klog(0xffffffffffffff9c, &(0x7f0000000380)='/dev/klog\x00', 0x20, 0x0) setsockopt$inet_opts(r8, 0x0, 0x200000000000d, 0x0, 0x0) r9 = fcntl$dupfd(r8, 0xa, 0xffffffffffffff9c) ioctl$BIOCGRSIG(r9, 0x40044273, &(0x7f0000000000)) r10 = open(&(0x7f0000000080)='./file0\x00', 0x280, 0x120) mknodat(r10, &(0x7f0000000100)='./file0\x00', 0xc004, 0x12) r11 = dup2(r3, 0xffffffffffffff9c) ioctl$TIOCSETAF(r11, 0x802c7416, &(0x7f0000000340)={0x401, 0x3, 0x112, 0x5, "fa9404896de4cf1d7536114881238fec99d094f0", 0x7, 0xffffd0a2}) shmget(0x3, 0x1000, 0x60, &(0x7f0000ffc000/0x1000)=nil) 15:08:23 executing program 1: ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x2, 0x0) ioctl$BIOCPROMISC(r0, 0x20004269) r1 = socket(0x2, 0x4001, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = syz_open_pts() fcntl$setflags(r2, 0x2, 0x1) dup2(r2, r2) r3 = syz_open_pts() fcntl$setflags(r3, 0x2, 0x1) r4 = dup2(r3, r3) symlinkat(&(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000040)='./file0\x00') getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) fchownat(r4, &(0x7f0000000180)='./file0\x00', r5, r6, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$TIOCSETVERAUTH(r7, 0xc0107002, &(0x7f0000000000)=0x280000) getsockopt$SO_PEERCRED(r7, 0xffff, 0x1022, &(0x7f00000002c0), 0x250) r8 = accept$inet(r7, &(0x7f00000000c0), &(0x7f0000000100)=0xc) recvfrom(r8, &(0x7f0000000340)=""/4096, 0x1000, 0x1, &(0x7f0000000140)=@un=@abs={0x1, 0x0, 0x0}, 0x8) ioctl$TIOCFLUSH(r4, 0x80206910, &(0x7f0000000080)=0x1133) 15:08:23 executing program 1: ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [], [0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0xfffffeffffffffff], [0x0, 0x0, 0x401]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCFLUSH(r1, 0x8080691a, &(0x7f0000000300)) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$TIOCSETVERAUTH(r2, 0xc0107002, &(0x7f0000000000)=0x280000) mmap(&(0x7f00004a6000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffff9c, 0x0, 0x3) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000002c0), 0xffffffffffffff3b) ioctl$TIOCSETVERAUTH(r2, 0x8004741c, &(0x7f0000000000)=0x7) 15:08:23 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x20}, {0x1d}, {0x6}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x20}, {0x1d}, {0x6}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r2 = dup2(r0, r1) ioctl$TIOCSTOP(r2, 0x2000746f) r3 = socket(0x18, 0x2, 0x0) chroot(&(0x7f0000000000)='./file0\x00') r4 = syz_open_pts() fcntl$setflags(r4, 0x2, 0x1) r5 = dup2(r4, r4) symlinkat(&(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000040)='./file0\x00') getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) fchownat(r5, &(0x7f0000000180)='./file0\x00', r6, r7, 0x0) ioctl$TIOCEXCL(r5, 0x2000740d) recvmsg(r3, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:08:23 executing program 1: open(&(0x7f0000001180)='./file0\x00', 0x611, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x100, 0x0) r0 = socket(0x18, 0xc003, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mknod$loop(&(0x7f0000000040)='./file0\x00', 0xa040, 0x1) getpeername$unix(r0, 0x0, &(0x7f0000002280)) 15:08:23 executing program 0: openat$tty(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty\x00', 0x40, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000340)="ac4b38e3537195643b", 0x9, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x14, r0) ioctl$TIOCFLUSH(r1, 0x8080691a, &(0x7f0000000300)) 15:08:23 executing program 0: r0 = syz_open_pts() fcntl$setflags(r0, 0x2, 0x1) r1 = dup2(r0, r0) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00') getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) fchownat(r1, &(0x7f0000000180)='./file0\x00', r2, r3, 0x0) ioctl$TIOCGWINSZ(r1, 0x40087468, &(0x7f00000003c0)) mknod(&(0x7f0000000100)='./bus\x00', 0x80002007, 0x5cc2) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f00000000c0)=[{0x87}, {0x6c}, {0x6}]}) r5 = dup(r4) ioctl$VT_OPENQRY(r5, 0x40047601, &(0x7f00000001c0)) r6 = open$dir(&(0x7f0000000400)='./bus\x00', 0x0, 0xca6ce3025bfd9cdb) open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = dup(r6) pipe(&(0x7f0000000080)) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bpf\x00', 0x10000, 0x0) ioctl$TIOCSETD(r7, 0x80184601, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r9 = socket(0x2, 0xc003, 0x0) connect$unix(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) dup2(r9, r8) setsockopt$sock_int(r8, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4) r10 = dup(r8) sendto$inet6(r10, &(0x7f0000000040), 0xfcec, 0x0, 0x0, 0x0) 15:08:24 executing program 1: mknod(&(0x7f00000000c0)='./bus\x00', 0x2080002002, 0x40004000000028ab) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1, 0x0) r1 = openat(r0, &(0x7f0000000080)='./bus\x00', 0x20, 0x8) r2 = shmget$private(0x0, 0x1000, 0x781de4785d843569, &(0x7f0000ffc000/0x1000)=nil) r3 = geteuid() r4 = shmget$private(0x0, 0x4000, 0x460, &(0x7f0000ffb000/0x4000)=nil) semctl$IPC_RMID(r4, 0x0, 0x0) shmctl$IPC_SET(r4, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r7 = getgid() r8 = getppid() fcntl$lock(r0, 0x8, &(0x7f0000000280)={0x2, 0x3, 0x1f, 0xffffffffffff7fff, r8}) r9 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r9, 0xffff, 0x1, &(0x7f0000000000)=0x3ff, 0x4) connect$unix(r9, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) fcntl$getown(0xffffffffffffff9c, 0x5) shmget$private(0x0, 0x1000, 0x88, &(0x7f0000ffc000/0x1000)=nil) r10 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) semctl$IPC_RMID(r10, 0x0, 0x0) shmctl$IPC_SET(r10, 0x1, 0xffffffffffffffff) shmctl$IPC_STAT(r10, 0x2, &(0x7f0000000040)=""/210) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) r13 = getgid() r14 = getppid() r15 = fcntl$getown(0xffffffffffffffff, 0x5) shmctl$IPC_SET(r10, 0x1, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, r11, r12, r13, 0x1e4, 0x8}, 0x5, 0x5, r14, r15, 0xfffffffffffffe01, 0x9, 0x7ff}) r16 = open(&(0x7f0000000040)='./bus\x00', 0x8000000000000001, 0x20) fcntl$setstatus(r16, 0x4, 0x8) writev(r16, &(0x7f0000000000)=[{&(0x7f0000000200)="000000186004008ba8002b27febffddf00000200000000ba0d31e99a000000000000f5ff8068000000000000", 0x2c}], 0x1) r17 = getpgid(0x0) fcntl$setown(r16, 0x6, r17) r18 = getuid() r19 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r19, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000640)=0xc) r21 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r21, &(0x7f0000000440)=ANY=[], 0x0, 0x0) r22 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) faccessat(r22, &(0x7f0000000040)='./bus\x00', 0x2a, 0x3) r23 = getpid() r24 = msgget$private(0x0, 0x206) getsockopt$sock_cred(r22, 0xffff, 0x1022, &(0x7f0000000a00)={0x0, 0x0}, &(0x7f0000000740)=0x95) r26 = getegid() r27 = getuid() getgroups(0x2, &(0x7f0000000780)=[0x0, 0xffffffffffffffff]) msgctl$IPC_SET(r24, 0x1, &(0x7f00000007c0)={{0xfffffffffffffffc, r25, r26, r27, r28, 0x1, 0xff}, 0x8, 0x6, r23, r23, 0x0, 0x2, 0x1f, 0x400}) msgsnd(r21, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgrcv(r21, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0000000000000000f2992d6dbec280c2e0c60c914b67b535f31de8ada2daa5d9d9bb551dc2759b444f633bce1803679e0d0841510f83b4c12ab4df664128f87be9eaeff52e75fc3c1c44c12d1059f97230c08a4e1c0a487e0f494abcfffc31d38c29863d9fe04097160ce28ef5009f8dbe65946c2ee49e3a4bb46970a0cea5246c972b60e4809585902721e20d5bc6958c8aad54d9975006a3b37e7fcdd49c0a9097abc74661334ae14d8d19ccd6bd3c1901b71c79d50d65250000000003dd00bd928d8232dc7ed70756ba8c6a172c40c728dbee41"], 0x1, 0xfffffffffffffffd, 0x1800) msgrcv(r21, &(0x7f0000000340)=ANY=[@ANYBLOB="f965000000a8b47736dbbfbe45eb"], 0xffffff64, 0x1, 0x0) r29 = geteuid() sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x2e9, 0x0, 0x0, &(0x7f0000000000), 0x28}, 0x405) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0xfffffd10) r31 = fcntl$getown(0xffffffffffffff9c, 0x5) msgctl$IPC_SET(r21, 0x1, &(0x7f0000000a40)={{0xffffffffffffffff, r29, r30, r20, r26, 0xc0, 0xffffffff00000001}, 0x103, 0xc07, 0xffffffffffffffff, r31, 0xa5, 0x3, 0x1000000100000000, 0x6}) r32 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x82, 0x0) r33 = dup(r32) ioctl$WSMOUSEIO_GTYPE(r33, 0x40045720, &(0x7f0000000240)) getsockopt$SO_PEERCRED(r16, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0}, 0x117) r35 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r35, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000640)=0xc) r37 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r37, &(0x7f0000000440)=ANY=[], 0x0, 0x0) r38 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) faccessat(r38, &(0x7f0000000040)='./file0\x00', 0x2a, 0x3) r39 = getpid() preadv(r38, &(0x7f0000000680)=[{&(0x7f0000000180)=""/252, 0xfc}, {&(0x7f0000000280)=""/156, 0xfffffffffffffe97}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000000400)=""/187, 0x74}, {&(0x7f0000000900)=""/11, 0xfffffffffffffef8}, {&(0x7f0000000500)=""/111, 0x6f}, {&(0x7f0000000580)=""/235, 0xfe30}], 0x7, 0x0, 0xfffffffffffffffe) r40 = msgget$private(0x0, 0x206) getsockopt$sock_cred(r38, 0xffff, 0x1022, &(0x7f0000000a00)={0x0, 0x0}, &(0x7f0000000740)=0x95) r42 = getegid() r43 = getuid() getgroups(0x2, &(0x7f0000000780)=[0x0, 0xffffffffffffffff]) msgctl$IPC_SET(r40, 0x1, &(0x7f00000007c0)={{0xfffffffffffffffc, r41, r42, r43, r44, 0x1, 0xff}, 0x8, 0x6, r39, r39, 0x0, 0x2, 0x1f, 0x400}) msgrcv(r37, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000df0000000000f3ff000800000000000000200000000000000000000000000000831f0000f32fd93d3b5fc9c5ddf80000000000000000000000000000000000e6ffffff0000000000000000000000000000000000006903000000000000001c0000000000f4ffffffffffffff00000000000000000000ffffff7f00000000000000000000000000000000008c00000000000000d61f954f8c61306ce371898c94906816a1b6f8a8444de6b4fe1a2d623a5d77169a0731c16f2d820bca6fc37aaaff99d17a644e3cffc848"], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r37, &(0x7f00000003c0)=ANY=[], 0x0, 0x400) r45 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r45, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x35}, {0x2d, 0x0, 0x8}, {0x7ffffffe}]}) ioctl$BIOCSETIF(r45, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) msgrcv(r37, &(0x7f0000000980)=ANY=[@ANYRES16=r45], 0x1, 0xfffffffffffffffd, 0x1800) msgrcv(r37, &(0x7f0000000240)=ANY=[@ANYBLOB="0000b25009a8b4e1"], 0xffffff64, 0x1, 0x0) r46 = geteuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r47, &(0x7f0000000380)={0x0, 0x2e9, 0x0, 0x0, &(0x7f0000000000), 0x28}, 0x405) getsockopt$SO_PEERCRED(r47, 0xffff, 0x1022, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0xfffffd10) r49 = fcntl$getown(0xffffffffffffff9c, 0x5) msgctl$IPC_SET(r37, 0x1, &(0x7f0000000a40)={{0xffffffffffffffff, r46, r48, r36, r42, 0xc0, 0xffffffff00000001}, 0x103, 0xc07, 0xffffffffffffffff, r49, 0xa5, 0x3, 0x1000000100000000, 0x6}) r50 = semget$private(0x0, 0x5, 0x8) semop(r50, &(0x7f0000000100)=[{0x0, 0x5022, 0x1000}, {0x1, 0x10001, 0x800}], 0x2) semop(r50, &(0x7f0000000000)=[{0x0, 0xffffffffffffffff, 0x1800}, {}, {0x3, 0x0, 0x800}, {0x2, 0xd, 0x1400}], 0x4) semctl$SETVAL(r50, 0x1, 0x8, &(0x7f0000000480)=0x7) semctl$SETVAL(r50, 0x5, 0x8, &(0x7f0000001dc0)=0x2) semctl$GETPID(r50, 0x4, 0x4, &(0x7f00000000c0)=""/63) semctl$IPC_SET(r50, 0x0, 0x1, &(0x7f00000005c0)={{0x7ff, r18, r30, r34, r42, 0x80, 0x80}, 0x8, 0x1, 0x101}) r51 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r51, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000640)=0xc) r53 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r53, &(0x7f0000000440)=ANY=[], 0x0, 0x0) r54 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) faccessat(r54, &(0x7f0000000040)='./file0\x00', 0x2a, 0x3) r55 = getpid() r56 = msgget$private(0x0, 0x206) getsockopt$sock_cred(r54, 0xffff, 0x1022, &(0x7f0000000a00)={0x0, 0x0}, &(0x7f0000000740)=0x95) r58 = getegid() r59 = getuid() getgroups(0x2, &(0x7f0000000780)=[0x0, 0xffffffffffffffff]) msgctl$IPC_SET(r56, 0x1, &(0x7f00000007c0)={{0xfffffffffffffffc, r57, r58, r59, r60, 0x1, 0xff}, 0x8, 0x6, r55, r55, 0x0, 0x2, 0x1f, 0x400}) msgsnd(r53, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgrcv(r53, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0000000000000000f2c60c914b67b535f31de8ada2daa5d9d9bb551dc2759b444f633bce1803679e0d0841510f83b4c12ab4df664128f87be9eaeff52e75fc3c0144c12d1059f97230c08a4e1c0a487e0f494abcfffc31d38c29863d9fe04097160ce28ef5009f8dbe65946c2ee49e3a4bb46970a0cea5246c972b60e4809585902721e20d5bc6958c8aad54d9975006a3b37e7fcdd49c0a9097abc74661334ae14d8d19ccd6bd3c1901b71c79d50d65250000000003dd00bd928d8232dc7ed70756ba8c6a172c40c728dbee41"], 0x1, 0xfffffffffffffffd, 0x1800) msgrcv(r53, &(0x7f0000000240)=ANY=[@ANYBLOB="5a588107c25afb3b"], 0xffffff64, 0x1, 0x0) r61 = geteuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r62, &(0x7f0000000380)={0x0, 0x2e9, 0x0, 0x0, &(0x7f0000000000), 0x28}, 0x405) getsockopt$SO_PEERCRED(r62, 0xffff, 0x1022, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0xfffffd10) r64 = fcntl$getown(0xffffffffffffff9c, 0x5) msgctl$IPC_SET(r53, 0x1, &(0x7f0000000a40)={{0xffffffffffffffff, r61, r63, r52, r58, 0xc0, 0xffffffff00000001}, 0x103, 0xc07, 0xffffffffffffffff, r64, 0xa5, 0x3, 0x1000000100000000, 0x6}) r65 = getuid() r66 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r66, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000640)=0xc) r68 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r68, &(0x7f0000000440)=ANY=[], 0x0, 0x0) r69 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) faccessat(r69, &(0x7f0000000040)='./file0\x00', 0x2a, 0x3) r70 = getpid() r71 = msgget$private(0x0, 0x206) getsockopt$sock_cred(r69, 0xffff, 0x1022, &(0x7f0000000a00)={0x0, 0x0}, &(0x7f0000000740)=0x95) r73 = getegid() r74 = getuid() getgroups(0x2, &(0x7f0000000780)=[0x0, 0xffffffffffffffff]) msgctl$IPC_SET(r71, 0x1, &(0x7f00000007c0)={{0xfffffffffffffffc, r72, r73, r74, r75, 0x1, 0xff}, 0x8, 0x6, r70, r70, 0x0, 0x2, 0x1f, 0x400}) msgsnd(r68, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x44b, 0x800) msgrcv(r68, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0000000000000000f2c60c914b67b535f31de8ada2daa5d9d9bb551dc2759b444f633bce1803679e0d0841510f83b4c12ab4df664128f87be9eaeff52e75fc3c0144c12d1059f97230c08a4e1c0a487e0f494abcfffc31d38c29863d9fe04097160ce28ef5009f8dbe65946c2ee49e3a4bb46970a0cea5246c972b60e4809585902721e20d5bc6958c8aad54d9975006a3b37e7fcdd49c0a9097abc74661334ae14d8d19ccd6bd3c1901b71c79d50d65250000000003dd00bd928d8232dc7ed70756ba8c6a172c40c728dbee41"], 0x1, 0xfffffffffffffffd, 0x1800) msgrcv(r68, &(0x7f0000000240)=ANY=[@ANYBLOB="f9ffb15043a8b4eb"], 0xffffff64, 0x1, 0x0) r76 = geteuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r77, &(0x7f0000000380)={0x0, 0x2e9, 0x0, 0xfe2c, &(0x7f0000000000), 0x28}, 0x405) getsockopt$SO_PEERCRED(r77, 0xffff, 0x1022, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0xfffffd10) r79 = fcntl$getown(0xffffffffffffff9c, 0x5) msgctl$IPC_SET(r68, 0x1, &(0x7f0000000a40)={{0xffffffffffffffff, r76, r78, r67, r73, 0xc0, 0xffffffff00000001}, 0x103, 0xc07, 0xffffffffffffffff, r79, 0xa5, 0x3, 0x1000000100000000, 0x6}) r80 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x82, 0x0) r81 = dup(r80) ioctl$WSMOUSEIO_GTYPE(r0, 0x40045720, &(0x7f0000000240)) getsockopt$SO_PEERCRED(r81, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0}, 0xc) r83 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r83, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000640)=0xc) r85 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r85, &(0x7f0000000440)=ANY=[], 0x0, 0x0) r86 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) faccessat(r86, &(0x7f0000000040)='./file0\x00', 0x2a, 0x3) r87 = getpid() preadv(r86, &(0x7f0000000680)=[{&(0x7f0000000180)=""/252, 0xfc}, {&(0x7f0000000280)=""/156, 0xfffffffffffffe97}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000000400)=""/187, 0x74}, {&(0x7f0000000900)=""/11, 0xfffffffffffffef8}, {&(0x7f0000000500)=""/111, 0x6f}, {&(0x7f0000000580)=""/235, 0xfe30}], 0x7, 0x0, 0xfffffffffffffffe) r88 = msgget$private(0x0, 0x206) getsockopt$sock_cred(r86, 0xffff, 0x1022, &(0x7f0000000a00)={0x0, 0x0}, &(0x7f0000000740)=0x95) r90 = getegid() r91 = getuid() getgroups(0x2, &(0x7f0000000780)=[0x0, 0xffffffffffffffff]) msgctl$IPC_SET(r88, 0x1, &(0x7f00000007c0)={{0xfffffffffffffffc, r89, r90, r91, r92, 0x1, 0xff}, 0x8, 0x6, r87, r87, 0x0, 0x2, 0x1f, 0x400}) msgrcv(r85, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000df0000000000f3ff000800000000000000200000000000000000000000000000831f0000f32fd93d3b5fc9c5ddf80000000000000000000000000000000000e6ffffff0000000000000000000000000000000000006903000000000000001c0000000000f4ffffffffffffff00000000000000000000ffffff7f00000000000000000000000000000000008c00000000000000d61f954f8c61306ce371898c94906816a1b6f8a8444de6b4fe1a2d623a5d77169a0731c16f2d820bca6fc37aaaff99d17a644e3cffc848"], 0xfffffffffffffe9f, 0x1, 0x1000) msgsnd(r85, &(0x7f00000003c0)=ANY=[], 0x0, 0x400) r93 = openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bpf\x00', 0x8, 0x0) ioctl$BIOCSETF(r93, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x35}, {0x2d, 0x0, 0x8}, {0x7ffffffe}]}) ioctl$BIOCSETIF(r93, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) msgrcv(r85, &(0x7f0000000980)=ANY=[@ANYRES16=r93], 0x1, 0xfffffffffffffffd, 0x1800) msgrcv(r85, &(0x7f0000000240)=ANY=[@ANYBLOB="0000b25009a8b4e1"], 0xffffff64, 0x1, 0x0) r94 = geteuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r95, &(0x7f0000000380)={0x0, 0x2e9, 0x0, 0x0, &(0x7f0000000000), 0x28}, 0x405) getsockopt$SO_PEERCRED(r95, 0xffff, 0x1022, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0xfffffd10) r97 = fcntl$getown(0xffffffffffffff9c, 0x5) msgctl$IPC_SET(r85, 0x1, &(0x7f0000000a40)={{0xffffffffffffffff, r94, r96, r84, r90, 0xc0, 0xffffffff00000001}, 0x103, 0xc07, 0xffffffffffffffff, r97, 0xa5, 0x3, 0x1000000100000000, 0x6}) r98 = semget$private(0x0, 0x5, 0x8) semop(r98, &(0x7f0000000100)=[{0x0, 0x5022, 0x1000}, {0x1, 0x10001, 0x800}], 0x2) semop(r98, &(0x7f0000000000)=[{0x0, 0xffffffffffffffff, 0x1800}, {}, {0x3, 0x0, 0x800}, {0x2, 0xd, 0x1400}], 0x4) semctl$SETVAL(r98, 0x1, 0x8, &(0x7f0000000480)=0x7) r99 = open(&(0x7f0000000780)='./file1\x00', 0x0, 0x0) getsockopt$SO_PEERCRED(r99, 0xffff, 0x1022, &(0x7f00000002c0), 0xffffffffffffff3b) r100 = semget$private(0x0, 0x4, 0x6f) semop(r100, &(0x7f00000003c0), 0x2b31) semctl$SETALL(r100, 0x0, 0x9, &(0x7f00000000c0)=[0x83, 0x10001, 0xd]) semop(r100, &(0x7f0000000240)=[{0x1, 0x6, 0x800}, {0x0, 0x40, 0x1800}, {0x0, 0x3, 0x7fc}, {0x3, 0x7, 0x1000}, {0x3, 0x68, 0x1000}, {0x3, 0xfffffffffffffffc, 0x1000}, {0x1, 0xfffffffffffffff8, 0x1000}, {0x2, 0xad, 0x1000}], 0x8) semop(r100, &(0x7f0000000840)=[{0x7, 0x0, 0x800}, {0x0, 0x50c, 0x4a56df42aae114ed}, {0x0, 0x5, 0xc00}], 0x3) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) getegid() r102 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$TIOCSETVERAUTH(r102, 0xc0107002, &(0x7f0000000000)=0x280000) getsockopt$SO_PEERCRED(r102, 0xffff, 0x1022, &(0x7f00000002c0), 0xffffffffffffff3b) getsockopt$sock_cred(r99, 0xffff, 0x1022, &(0x7f0000000080), &(0x7f0000000040)=0xfffffef8) r103 = semget$private(0x0, 0x2, 0x400) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r105 = getgid() semop(r103, &(0x7f00000002c0), 0x0) r106 = syz_open_pts() fcntl$setflags(r106, 0x2, 0x1) r107 = dup2(r106, r106) symlinkat(&(0x7f0000000000)='./file0\x00', r107, &(0x7f0000000040)='./file0\x00') getsockopt$SO_PEERCRED(r107, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) getsockopt$sock_cred(r107, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) fchownat(r107, &(0x7f0000000180)='./file0\x00', r108, r109, 0x0) r110 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r110, 0xffff, 0x1, &(0x7f0000000000)=0x3, 0x4) connect(r110, &(0x7f0000000880)=ANY=[@ANYBLOB="0669d1510099dddf9398b25ffa4bd84658a8c8c9d4167cd5963a6a8004000000000000001031cde9641d89d0c7baff3676c7cbea09d4c1c43918f3ade7fa87f5c3d227f7cd1f0c387fff63ce0a26501e1ee8b16c8f62335c981a45bcff87c268487aece2d75c7c5dbc"], 0xa) getsockopt$SO_PEERCRED(r110, 0xffff, 0x1022, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0xc) semctl$IPC_SET(r103, 0x0, 0x1, &(0x7f0000000480)={{0x20000008, r104, r111, r108, r105, 0x100010024, 0x7}, 0x9, 0x7, 0x3}) semctl$IPC_SET(r100, 0x0, 0x1, &(0x7f0000000100)={{0x4000003, r101, r105, r65, 0x0, 0x4, 0xd1}, 0x200, 0x401, 0x7}) semctl$SETVAL(r100, 0x5, 0x8, &(0x7f0000001dc0)=0x12) semctl$GETPID(r98, 0x4, 0x4, &(0x7f00000000c0)=""/63) semctl$IPC_SET(r98, 0x0, 0x1, &(0x7f00000005c0)={{0x7ff, r65, r78, r82, r90, 0x80, 0x80}, 0x8, 0x1, 0x101}) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000080)={{0x6, r18, r5, r6, r90, 0x4, 0x3f}, 0x2000000, 0x5, r17, 0x0, 0xfffffffffffff604, 0x8, 0x4000000007fd}) r112 = geteuid() r113 = getegid() r114 = getpgrp() r115 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r115, 0x0, 0x17, 0x0, 0x0) r116 = fcntl$getown(r115, 0x5) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000200)={{0x8, r3, r7, r112, r113, 0x100, 0x3}, 0x0, 0x3, r114, r116, 0xffffffff, 0x20, 0x5}) r117 = socket(0x9ecdb8e5d7e4b4dd, 0x3, 0x64) setsockopt$inet_opts(r117, 0x0, 0x3, &(0x7f00000004c0)="b4d2a5889295d5461bc2314138148b76e51a2d3ef4cb3355b8c3ab887499c718f82b287b83e941291ac41b6571592edc910559a0c6e8bd80095d29a73af241d0a345dd8d8d0051b6606a2182be6ecbec326041297e103af3fa3a35256f4c664e392422ac104065e3cfb3fb30f800c2d515a72f8bad42a3a0fc94f3cb66961fa7f176450aa0cb99d0dcce3c6054227bb47e7ecbba714f4cb2a71a0c847f80e7f6e03fc8f123a2df399ac94d0a91007c083b9d42787f2a046548e68e6cb8c6c4085fdad26893b4d424fad33c00"/218, 0xda) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000180)="46fdd76a5f4c3b71971e8b50ae3bac95838a37cf6243d5b0b1998170cf89e3e6123ea5dabb63bc42820fac98bf9eb6aeea39597d836edc23dc16e2447f81215e4993e926aba16c97c8d4709cd7d9eac52df7", 0x52) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="0000001862040179002b2c000000267e897f7780e9992d836000753dd4d1b01f195f81db318cefbd0900a24e14da000000e1838f74652d62e100c51bad5a8bf626d9dea3c2c37bb79d7d2c336ec5e00000000000000000", 0x57}], 0x1) login: fuse: Cannot find fusebuf panic: pool_do_get: shmpl free list modified: page 0xfffffd8062243000; item addr 0xfffffd8062243e00; offset 0x24=0x100ca Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *268839 71398 0 0 0x4000000 0K syz-executor.1 65752 72476 0 0 0x4000000 1 syz-executor.0 db_enter() at db_enter+0x18 panic(ffffffff8220d3b4) at panic+0x15c pool_do_get(ffffffff8263a120,1,ffff800023bb5a58) at pool_do_get+0x472 pool_get(ffffffff8263a120,1) at pool_get+0xeb shmget_allocate_segment(ffff800020ac1160,ffff800023bb5be8,169,ffff800023bb5c30) at shmget_allocate_segment+0x15e sys_shmget(ffff800020ac1160,ffff800023bb5be8,ffff800023bb5c30) at sys_shmget+0x13f syscall(ffff800023bb5cb0) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2474dc4eb90, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic pool_do_get: shmpl free list modified: page 0xfffffd8062243000; item addr 0xfffffd8062243e00; offset 0x24=0x100ca ddb{0}> trace db_enter() at db_enter+0x18 panic(ffffffff8220d3b4) at panic+0x15c pool_do_get(ffffffff8263a120,1,ffff800023bb5a58) at pool_do_get+0x472 pool_get(ffffffff8263a120,1) at pool_get+0xeb shmget_allocate_segment(ffff800020ac1160,ffff800023bb5be8,169,ffff800023bb5c30) at shmget_allocate_segment+0x15e sys_shmget(ffff800020ac1160,ffff800023bb5be8,ffff800023bb5c30) at sys_shmget+0x13f syscall(ffff800023bb5cb0) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2474dc4eb90, count: -8 ddb{0}> show registers rdi 0xffffffff813ee2e7 db_enter+0x17 rsi 0x36b9 __ALIGN_SIZE+0x26b9 rbp 0xffff800023bb58a0 rbx 0xffff800023bb5950 rdx 0x36ba __ALIGN_SIZE+0x26ba rcx 0xffff800021b8c000 rax 0xffff800021b8c000 r8 0xffffffff81cd657f kprintf+0x16f r9 0x1 r10 0x25 r11 0x8c97342d0e3a9c22 r12 0x3000000008 r13 0xffff800023bb58b0 r14 0x100 r15 0x1 rip 0xffffffff813ee2e8 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800023bb5890 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor.1) pid=268839 stat=onproc flags process=0 proc=4000000 pri=86, usrpri=86, nice=20 forw=0xffffffffffffffff, list=0xffff800020ac0290,0xffffffff82617120 process=0xffff800020aec000 user=0xffff800023bb0000, vmspace=0xfffffd807f0085c0 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 71398 509819 65132 0 2 0 syz-executor.1 *71398 268839 65132 0 7 0x4000000 syz-executor.1 72476 128119 45782 0 2 0 syz-executor.0 72476 65752 45782 0 7 0x4000000 syz-executor.0 89994 172040 0 0 3 0x14200 bored sosplice 65132 123358 1881 0 2 0x482 syz-executor.1 45782 320851 1881 0 2 0x482 syz-executor.0 1881 498994 73496 0 3 0x82 thrsleep syz-fuzzer 1881 372620 73496 0 3 0x4000082 thrsleep syz-fuzzer 1881 86811 73496 0 3 0x4000082 thrsleep syz-fuzzer 1881 436956 73496 0 3 0x4000082 thrsleep syz-fuzzer 1881 195214 73496 0 3 0x4000082 thrsleep syz-fuzzer 1881 303069 73496 0 3 0x4000082 kqread syz-fuzzer 1881 2535 73496 0 3 0x4000082 thrsleep syz-fuzzer 1881 43419 73496 0 3 0x4000082 thrsleep syz-fuzzer 1881 358905 73496 0 3 0x4000082 thrsleep syz-fuzzer 1881 117441 73496 0 3 0x4000082 thrsleep syz-fuzzer 73496 24559 18782 0 3 0x10008a pause ksh 18782 508227 80466 0 3 0x92 select sshd 42847 240373 1 0 3 0x100083 ttyin getty 80466 152580 1 0 3 0x80 select sshd 84252 82997 74163 74 3 0x100092 bpf pflogd 74163 402267 1 0 3 0x80 netio pflogd 24673 267324 45654 73 3 0x100090 kqread syslogd 45654 355047 1 0 3 0x100082 netio syslogd 81830 76402 1 77 3 0x100090 poll dhclient 80512 165627 1 0 3 0x80 poll dhclient 5104 28314 0 0 2 0x14200 zerothread 31241 107290 0 0 3 0x14200 aiodoned aiodoned 77470 225797 0 0 3 0x14200 syncer update 58164 26889 0 0 3 0x14200 cleaner cleaner 67427 324336 0 0 3 0x14200 reaper reaper 60635 441304 0 0 3 0x14200 pgdaemon pagedaemon 659 280694 0 0 3 0x14200 bored crynlk 45312 382641 0 0 3 0x14200 bored crypto 64835 178163 0 0 3 0x40014200 acpi0 acpi0 28669 316897 0 0 3 0x40014200 idle1 55458 345732 0 0 2 0x14200 softnet 32957 217014 0 0 3 0x14200 bored systqmp 80665 387496 0 0 3 0x14200 bored systq 89299 113776 0 0 3 0x40014200 bored softclock 12293 441895 0 0 3 0x40014200 idle0 85647 325655 0 0 3 0x14200 bored smr 1 277478 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex shmpl r = 0 (0xffffffff8263a130) #0 witness_lock+0x52e #1 mtx_enter_try+0x102 #2 mtx_enter+0x4b #3 pool_get+0xbf #4 shmget_allocate_segment+0x15e #5 sys_shmget+0x13f #6 syscall+0x4a4 #7 Xsyscall+0x128 CPU 1: exclusive mutex mbufpl r = 0 (0xffffffff8263a8b8) #0 witness_lock+0x52e #1 mtx_enter_try+0x102 #2 pool_cache_get+0xa3 #3 pool_get+0x91 #4 m_gethdr+0x4c #5 ip_fragment+0x13a #6 ip_output+0xfc1 #7 rip_output+0x252 #8 rip_usrreq+0x46a #9 sosend+0x645 #10 sendit+0x52b #11 sys_sendto+0x80 #12 syscall+0x4a4 #13 Xsyscall+0x128 Process 71398 (syz-executor.1) thread 0xffff800020ac1160 (268839) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82651ec8) #0 witness_lock+0x52e #1 syscall+0x400 #2 Xsyscall+0x128 exclusive mutex shmpl r = 0 (0xffffffff8263a130) #0 witness_lock+0x52e #1 mtx_enter_try+0x102 #2 mtx_enter+0x4b #3 pool_get+0xbf #4 shmget_allocate_segment+0x15e #5 sys_shmget+0x13f #6 syscall+0x4a4 #7 Xsyscall+0x128 Process 72476 (syz-executor.0) thread 0xffff800020ac0290 (65752) exclusive rwlock netlock r = 0 (0xffffffff824c24a8) #0 witness_lock+0x52e #1 solock+0x5a #2 sosend+0x51b #3 sendit+0x52b #4 sys_sendto+0x80 #5 syscall+0x4a4 #6 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9494 6469K 6982K 78643K 10731 0 pcb 13 8K 8K 78643K 25 0 rtable 108 3K 4K 78643K 229 0 ifaddr 54 12K 12K 78643K 60 0 counters 39 33K 33K 78643K 39 0 ioctlops 0 0K 4K 78643K 1469 0 iov 0 0K 2K 78643K 2 0 mount 1 1K 1K 78643K 1 0 vnodes 1232 77K 77K 78643K 1272 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 4 0 VM map 2 1K 1K 78643K 2 0 sem 10 0K 0K 78643K 14 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1809 196K 290K 78643K 12766 0 file desc 6 17K 25K 78643K 70 0 proc 59 63K 83K 78643K 447 0 subproc 32 2K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 12 0 in_multi 29 1K 2K 78643K 41 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 42 185K 185K 78643K 42 0 exec 0 0K 1K 78643K 211 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 117 22K 26K 78643K 1164 0 UVM aobj 2 2K 2K 78643K 4 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 2 0 NDP 8 0K 0K 78643K 13 0 temp 83 3009K 3073K 78643K 6739 0 SYN cache 2 16K 16K 78643K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 0 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 25 0 23 1 0 1 1 0 8 0 rtentry 112 53 0 9 2 0 2 2 0 8 0 unpcb 120 43 0 32 1 0 1 1 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpqe 32 256 0 256 1 0 1 1 0 8 1 tcpcb 544 40 0 36 1 0 1 1 0 8 0 inpcb 280 112 0 104 2 0 2 2 0 8 1 nd6 48 5 0 2 1 0 1 1 0 8 0 ppxss 1128 1 0 0 1 0 1 1 0 8 0 pffrag 232 3 0 2 1 0 1 1 0 482 0 pffrnode 88 3 0 2 1 0 1 1 0 8 0 pffrent 40 106 0 90 1 0 1 1 0 8 0 pfosfp 40 846 0 423 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 20 0 0 1 0 1 1 0 8 0 pfstkey 112 20 0 0 1 0 1 1 0 8 0 pfstate 328 20 0 0 2 0 2 2 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 249 0 45 14 0 14 14 0 8 0 art_table 32 250 0 45 2 0 2 2 0 8 0 art_node 16 52 0 11 1 0 1 1 0 8 0 sysvmsgpl 40 4 0 3 1 0 1 1 0 8 0 semupl 112 2 0 2 1 0 1 1 0 8 1 semapl 112 8 0 0 1 0 1 1 0 8 0 shmpl 112 2 0 2 1 0 1 1 0 8 1 pool(0xffffffff8263a120:shmpl): page inconsistency: page 0xfffffd8062243000; 34 on list, 0 missing, 35 items per page dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 1483 0 73 46 0 46 46 0 8 0 ffsino 272 1483 0 73 95 0 95 95 0 8 0 nchpl 144 1771 0 149 61 0 61 61 0 8 0 uvmvnodes 72 1568 0 0 29 0 29 29 0 8 0 vnodes 208 1568 0 0 83 0 83 83 0 8 0 namei 1024 4705 0 4705 1 0 1 1 0 8 1 percpumem 16 30 0 0 1 0 1 1 0 8 0 scxspl 192 5224 0 5224 2 1 1 2 0 8 1 plimitpl 152 17 0 9 1 0 1 1 0 8 0 sigapl 432 269 0 253 3 0 3 3 0 8 1 futexpl 56 907 0 907 1 0 1 1 0 8 1 knotepl 112 57 0 38 1 0 1 1 0 8 0 kqueuepl 104 10 0 8 1 0 1 1 0 8 0 pipepl 160 178 0 157 1 0 1 1 0 8 0 fdescpl 488 270 0 253 3 0 3 3 0 8 0 filepl 152 1563 0 1450 5 0 5 5 0 8 0 lockfpl 104 17 0 16 1 0 1 1 0 8 0 lockfspl 48 6 0 5 1 0 1 1 0 8 0 sessionpl 112 18 0 7 1 0 1 1 0 8 0 pgrppl 48 18 0 7 1 0 1 1 0 8 0 ucredpl 96 111 0 102 1 0 1 1 0 8 0 zombiepl 144 253 0 253 1 0 1 1 0 8 1 processpl 896 286 0 253 4 0 4 4 0 8 0 procpl 632 386 0 342 5 0 5 5 0 8 1 sosppl 128 3 0 3 1 0 1 1 0 8 1 sockpl 384 180 0 159 4 0 4 4 0 8 1 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 5 0 0 1 0 1 1 0 8 0 mcl2k 2048 171 0 0 21 0 21 21 0 8 0 mtagpl 80 4 0 0 1 0 1 1 0 8 0 mbufpl 256 378 0 0 24 0 24 24 0 8 0 bufpl 280 6330 0 1344 357 0 357 357 0 8 0 anonpl 16 48917 0 29820 90 1 89 89 0 125 12 amapchunkpl 152 1405 0 1245 8 0 8 8 0 158 1 amappl16 192 1502 0 454 62 4 58 62 0 8 5 amappl15 184 77 0 72 1 0 1 1 0 8 0 amappl14 176 31 0 30 1 0 1 1 0 8 0 amappl13 168 20 0 17 1 0 1 1 0 8 0 amappl12 160 2 0 1 2 1 1 1 0 8 0 amappl11 152 59 0 44 1 0 1 1 0 8 0 amappl10 144 16 0 12 1 0 1 1 0 8 0 amappl9 136 605 0 601 1 0 1 1 0 8 0 amappl8 128 125 0 101 1 0 1 1 0 8 0 amappl7 120 111 0 98 1 0 1 1 0 8 0 amappl6 112 57 0 50 1 0 1 1 0 8 0 amappl5 104 129 0 115 1 0 1 1 0 8 0 amappl4 96 521 0 488 2 1 1 2 0 8 0 amappl3 88 118 0 111 1 0 1 1 0 8 0 amappl2 80 1298 0 1212 3 1 2 3 0 8 0 amappl1 72 16281 0 15822 25 11 14 20 0 8 4 amappl 80 638 0 590 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 3 0 2 1 0 1 1 0 8 0 uaddrrnd 24 270 0 253 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 270 0 253 1 0 1 1 0 8 0 vmmpekpl 168 6046 0 6013 2 0 2 2 0 8 0 vmmpepl 168 42468 0 40144 137 5 132 132 0 357 30 vmsppl 368 269 0 253 2 0 2 2 0 8 0 pdppl 4096 547 0 506 6 0 6 6 0 8 0 pvpl 32 159731 0 137376 213 0 213 213 0 265 32 pmappl 232 269 0 253 2 0 2 2 0 8 1 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 175 0 3 5 0 5 5 0 8 0