last executing test programs: 2.260093416s ago: executing program 5 (id=1394): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x4}, 0x404) recvmmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x63}}, 0x10, 0x0, 0x0) unveil(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='c\x00') 1.404027783s ago: executing program 5 (id=1420): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f00000000c0)='x\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ftruncate(r1, 0x20008002) r2 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000880)=[{&(0x7f0000000240)=""/77, 0x4d}], 0x1, 0x8000002) r3 = kqueue() r4 = open$dir(&(0x7f00000000c0)='\x00', 0x0, 0x0) kevent(r3, &(0x7f0000000040), 0x7fffffff, 0x0, 0x0, 0x0) seteuid(0xffffffffffffffff) r5 = socket(0x2, 0x2, 0x0) setrlimit(0x7, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) setsockopt$sock_int(r0, 0xffff, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bind(r5, &(0x7f0000000000), 0x10) r6 = getuid() getgroups(0x1, &(0x7f0000000200)=[0x0]) chown(&(0x7f00000001c0)='./file1\x00', r6, r7) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4]) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) r8 = msgget(0x1, 0x1) msgsnd(r8, &(0x7f0000000240)={0x0, "9a37d2ca806c1811d26a06c7b3f8185c41bb585ed4d7e2ca4784766e922bc3d3c9a05b6ed627064ca8b37beb50db3344278e026d8121"}, 0x3e, 0x800) chroot(&(0x7f0000000100)='./file0/file0\x00') r9 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$BIOCGDIRFILT(r9, 0x20007461, 0x0) 1.371865418s ago: executing program 4 (id=1422): syz_emit_ethernet(0x49, &(0x7f0000000240)=ANY=[@ANYBLOB="f7770062f8ac00000000000086dd601e00000001000000f0372e0865911f0600000000000000ff020000000000000000000000000001c97f6c00ea"]) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00') 1.368191215s ago: executing program 6 (id=1424): r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x2, 0x6, 0x0, 0x0) 1.359962254s ago: executing program 5 (id=1426): r0 = socket(0x11, 0x8003, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) getsockopt(r1, 0x0, 0x6e, 0x0, 0x0) kevent(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x36ca, &(0x7f0000000080)={0x2000001c00000, 0x1fffffffffff}) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x7, 0x0, 0x80000001, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) fchdir(r3) ioctl$WSDISPLAYIO_GMODE(r3, 0x4004574b, &(0x7f00000000c0)) recvmmsg(r0, &(0x7f0000000cc0)={0x0, 0x8}, 0xfffffffffffffdb3, 0x880, &(0x7f0000000000)={0x100000000, 0x7fffffff}) mknod(&(0x7f0000000040)='./bus\x00', 0x20, 0x205318) open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) 1.261059785s ago: executing program 6 (id=1427): r0 = semget(0x2, 0x4, 0x200) semop(r0, &(0x7f0000000000)=[{0x2, 0x0, 0x1c00}, {0x3, 0x5, 0xbb52cfbc38ca1d6c}, {0x3, 0x5, 0x800}, {0x2, 0x7fff, 0x1000}], 0x4) r1 = geteuid() setreuid(r1, 0x0) r2 = getgid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, r5) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000340)={{0x7fffffff, r1, r2, r3, r5, 0x20, 0x80}, 0x0, 0x81, 0x4}) clock_settime(0x100000000000000, &(0x7f0000000000)={0xfe1ecc7f}) r6 = socket$inet(0x2, 0x2, 0x81) recvmmsg(r6, &(0x7f0000000240)={&(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/199, 0xc7}, {&(0x7f0000000140)=""/33, 0x21}], 0x2, &(0x7f00000001c0)=""/49, 0x31}, 0x9}, 0x10, 0x0, &(0x7f0000000280)) 1.259788218s ago: executing program 2 (id=1428): symlink(&(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00') r0 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1023, 0x0, 0x0) accept$unix(r0, &(0x7f0000000080)=@file={0x0, ""/257}, &(0x7f00000001c0)=0x103) unlink(&(0x7f0000000200)='./file0\x00') 1.258004434s ago: executing program 4 (id=1429): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x27, 0x0, 0x2, 0xfffffffc}, {0xb1, 0x10, 0x2}, {0x16, 0x7, 0x7f, 0x400f}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)='X#', 0x2}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="f969afaadacc73312091501d94a34b71000000005c6fd13194245ebbd0a75af987565625f7169b9d609e0b49", &(0x7f0000000080)=0x2c, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x6, 0xb}, 0x5, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x3, 0x0) bind(r1, &(0x7f0000000000), 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x5e, &(0x7f00000005c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "062500", 0x28, 0xc, 0x0, @rand_addr="0000000000000000000000a82400", @loopback, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @loopback}}}}}}) 1.25713399s ago: executing program 5 (id=1430): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket$inet(0x2, 0x3, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500003000000000002c907800000020e0001002"]) (async) r1 = socket(0x2, 0x2, 0x0) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) (async, rerun: 32) r3 = geteuid() (rerun: 32) setreuid(r2, r3) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) (async, rerun: 32) setsockopt(r0, 0x0, 0x6, &(0x7f0000000040)="f7ffef00", 0x1) (rerun: 32) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0) 1.197145107s ago: executing program 0 (id=1431): ioctl$WSDISPLAYIO_LDFONT(0xffffffffffffffff, 0x8058574d, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x60) r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x1, 0x0) ftruncate(r1, 0x80002) r2 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) preadv(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x11, 0x0) 1.196703066s ago: executing program 6 (id=1432): open(&(0x7f0000000000)='./file0\x00', 0x205, 0x118) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x5, 0x1fffffffffffffff, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) close(r1) r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) select(0x40, &(0x7f00000000c0)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0xfff}, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_pts() close(r3) r4 = socket$unix(0x1, 0x5, 0x0) accept(r4, 0x0, 0x0) syz_open_pts() writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r3, &(0x7f0000000180), 0x10000000000000a4) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x32, 0x1b}, 0x80000000000004, 0x3d3, 0xffffffffffffffff, 0x0, 0x8000000000000000, 0x9, 0x0, 0xffe}) r5 = socket(0x800000018, 0x1, 0x0) bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1e6, 0xfffb}, 0x0, 0x0, 0x5}) r6 = socket(0x800000018, 0x1, 0x0) bind$unix(r6, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) ioctl$FIONBIO(r1, 0x80487008, &(0x7f0000000140)=0x1) 1.195922494s ago: executing program 5 (id=1433): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)='+\x00'], &(0x7f0000000240)=[&(0x7f0000000100)='/dev/speaker\x00', &(0x7f0000000140)='/dev/speaker\x00', &(0x7f0000000180)=':\x00', &(0x7f00000001c0)='$\\{&^:\',@,@/\x00', &(0x7f0000000200)='\x00']) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f00000002c0)={{0x18, 0x2, 0x7fff, 0x9}, {0x18, 0x2, 0x100, 0x2}, 0xfff, [0x6, 0x1, 0x916, 0xea7, 0xf, 0xffff6a6c, 0x42, 0xd1]}, 0x3c) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000300), 0x20, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000340), 0x0) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) fcntl$setown(r1, 0x6, r3) recvfrom$inet6(r1, &(0x7f0000000400)=""/9, 0x9, 0x60, 0x0, 0x0) bind$unix(r1, &(0x7f0000000440)=@abs={0x1, 0x0, 0x0}, 0x8) acct(&(0x7f0000000480)='./file0/file0\x00') r5 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x10000, 0x0) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) poll(&(0x7f0000000580)=[{r2, 0x181}, {r0, 0x80}, {r1, 0x1}, {r5, 0x10}, {r2, 0x8}, {r6, 0x2}, {r0, 0x1}, {r2, 0x8}, {r2, 0x10}, {r7, 0x2}], 0xa, 0x3) r8 = open(&(0x7f0000000600)='./file0\x00', 0x20000, 0x4) fcntl$lock(r7, 0x9, &(0x7f0000000640)={0x3, 0x2, 0x2, 0x7, r3}) pwrite(r0, &(0x7f0000000680)="82210c9435ee", 0x6, 0xffffffffffffff7f) r9 = dup2(r5, r5) write(r1, &(0x7f00000006c0)='{', 0x1) socket(0x1, 0x5, 0x5) r10 = accept$unix(r1, 0x0, &(0x7f0000000700)) bind$unix(r10, &(0x7f0000000740)=@abs={0x1, 0x0, 0x0}, 0x8) mknod(&(0x7f0000000780)='./file0\x00', 0x2000, 0xfffffff9) setuid(r4) ioctl$WSMOUSEIO_SETMODE(r8, 0x80045726, &(0x7f00000007c0)) close(r1) getegid() ioctl$WSDISPLAYIO_DELSCREEN(r9, 0x80085754, &(0x7f0000000800)={0x7, 0x2}) 1.195795875s ago: executing program 2 (id=1434): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x20, 0x2, 0xfd) setsockopt(r0, 0x8000, 0x5, &(0x7f0000000000)='\t\x00\x00\x00', 0x4) sysctl$hw(&(0x7f0000000000)={0x6, 0x12}, 0x2, 0x0, 0x0, &(0x7f0000000040), 0xfffffffffffffde9) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000040)="73aea18993d45f739cabc156b65aa441f4c4cd36a8e2e52fa559ccf63e4db12eb1fe35b5a8126c5490d5d6a4ad864268e29e2312783dd0c831db5650713e8e2fdf27e8fccabcc2d6ecc9aad2a40f75afff3c97117cca2ec3590a939325c32079f82d8d4a54ab70fcd6c5ac0a376e5357734f5b41bd0c417eff17517ca58c06b9944bf4934304308dc7c632960839f1c13349b4a537b077d5ab", 0x99) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) ioctl$VMM_IOC_INFO(r1, 0xc0185603, &(0x7f0000000180)={0x2b, 0x0, &(0x7f0000000140)=""/43}) 1.19565147s ago: executing program 1 (id=1435): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) open(&(0x7f0000000180)='./file0\x00', 0x75f493fec6515f78, 0x0) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) utimes(0x0, &(0x7f00000025c0)={{0xa53d, 0x101}, {0x6, 0xfffffffffffffffa}}) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x30, r0, 0xbb) (async) r1 = socket(0x2, 0x2, 0x0) (async) r2 = socket(0x2, 0x400000000002, 0x0) setsockopt(r2, 0x0, 0x20, &(0x7f0000000180)="03000000", 0x4) r3 = dup2(r2, r1) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRESHEX=r3, @ANYBLOB="fd360b98f8fd85ee849fd1", @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRES16=r1]) 1.093040869s ago: executing program 7 (id=1436): select(0x40, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4000000000000, 0xfffffffffffffffc, 0x0, 0x5}, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x10, 0x0, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sysctl$kern(&(0x7f0000000040)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000001440)="cca410df", 0x4) select(0x40, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4000000000000, 0xfffffffffffffffc, 0x0, 0x5}, 0x0, 0x0, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x18, 0x1, 0x0) (async) close(r0) (async) socket(0x18, 0x2, 0x0) (async) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x10, 0x0, 0x0) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000001440)="cca410df", 0x4) (async) 1.092592738s ago: executing program 2 (id=1437): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000000)='#!', 0x2}], 0x1) write(r1, &(0x7f0000000300)="1e", 0x1) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f0000000000)=0x2) (async) ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f0000000000)=0x2) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) (async) r4 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) kevent(r3, &(0x7f00000004c0)=[{{r3}, 0xfffffffffffffffb, 0x1, 0x40000000, 0x80000001, 0xe}, {{r1}, 0xfffffffffffffffd, 0x0, 0x2, 0x10, 0x72f}, {{r0}, 0xfffffffffffffff8, 0x44, 0xfffff, 0x4, 0x8}, {{r0}, 0xfffffffffffffff9, 0xa0, 0x20, 0x44c, 0xffffffff}, {{r4}, 0xffffffffffffffff, 0x60, 0x8, 0xffff, 0x9}, {{r1}, 0xfffffffffffffffc, 0x60, 0x10, 0x34a7, 0x2}, {{r0}, 0xfffffffffffffffa, 0x10, 0x2, 0x2, 0x9}], 0xfffff000, &(0x7f0000000200)=[{{r1}, 0xfffffffffffffff9, 0x0, 0x2, 0x3, 0x7}, {{r3}, 0xffffffffffffffff, 0x0, 0x4, 0x100000000000, 0x1}], 0xf, &(0x7f0000000240)={0x4, 0x1}) sysctl$hw(&(0x7f00000001c0)={0x6, 0x10}, 0x2, 0x0, 0x0, &(0x7f0000000340)="498ec29c123ac86631cad21cb89a3dad9b736bce3903f880962c500dad62bc1bc12055242df107a88bb60e21cbc87ee4dd2d249fb16fd763e58b6259c5aae1596788fbcbe9deca799d76d9c47b88274ae51aa59d60ef3f02045a3e00335b89608dabefe582e117ac3f62668ee9a89aae897f613d2100483e0e52c1515613d5599dbce1b781ec3f952ee65e772400a7429d21dfa4a385c56d91659021fc13d3e9b712e4882ebd733743108a25dba86845b28bc506b1a5e64bf56d7100ed5d54d66dee9dc983", 0xc5) write(r2, &(0x7f00000000c0)="c3", 0xffffffed) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000040)={0xb8a, 0x5, {[0xba, 0xddfc, 0x2, 0x7ff, 0xdb21, 0x7, 0xffffffffffffffff, 0x7, 0xf, 0x4000000000006a11, 0x3, 0x8000, 0x3, 0x8d, 0x8, 0xff16, 0x639d, 0x7], [0x3, 0x4, 0x7, 0x2, 0x1, 0x6, 0xc, 0x9, 0x2, 0x8579], [0xffffffffffffffff, 0x4, 0x80000000, 0x8d, 0x819, 0x80, 0x40], [0xc, 0x5, 0x3, 0x5, 0x6, 0xdafefa9], [{0x7, 0x6, 0xb9d2, 0x1}, {0x5, 0x5a4, 0x8, 0x3d6}, {0x9, 0x44d7, 0x4}, {0x0, 0x558, 0x7e, 0xd}, {0x0, 0x8, 0x6, 0x7}, {0x0, 0x8, 0xfffffff6, 0x5}, {0x7, 0x9, 0xc, 0x8}, {0xa, 0x0, 0x6, 0x450}], {0x80, 0x6321d673, 0xc, 0x3}, {0x4, 0x0, 0x7}}}) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000040)={0xb8a, 0x5, {[0xba, 0xddfc, 0x2, 0x7ff, 0xdb21, 0x7, 0xffffffffffffffff, 0x7, 0xf, 0x4000000000006a11, 0x3, 0x8000, 0x3, 0x8d, 0x8, 0xff16, 0x639d, 0x7], [0x3, 0x4, 0x7, 0x2, 0x1, 0x6, 0xc, 0x9, 0x2, 0x8579], [0xffffffffffffffff, 0x4, 0x80000000, 0x8d, 0x819, 0x80, 0x40], [0xc, 0x5, 0x3, 0x5, 0x6, 0xdafefa9], [{0x7, 0x6, 0xb9d2, 0x1}, {0x5, 0x5a4, 0x8, 0x3d6}, {0x9, 0x44d7, 0x4}, {0x0, 0x558, 0x7e, 0xd}, {0x0, 0x8, 0x6, 0x7}, {0x0, 0x8, 0xfffffff6, 0x5}, {0x7, 0x9, 0xc, 0x8}, {0xa, 0x0, 0x6, 0x450}], {0x80, 0x6321d673, 0xc, 0x3}, {0x4, 0x0, 0x7}}}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="6c25a03ae7b27b4e7fc0924a22334b9b619f09f993c214bf34de94ee6f878793a443c48892901b940ff2189ae976bd635aa66dd55818d1ca20a7f88c2ad799df41ea701f32e36ab928f0ea3b00ddc5613e3590c04b342a5ec356d4f406e612653d7338e1b59ec0f00de4b65b3f18", 0x6e, 0x0, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="6c25a03ae7b27b4e7fc0924a22334b9b619f09f993c214bf34de94ee6f878793a443c48892901b940ff2189ae976bd635aa66dd55818d1ca20a7f88c2ad799df41ea701f32e36ab928f0ea3b00ddc5613e3590c04b342a5ec356d4f406e612653d7338e1b59ec0f00de4b65b3f18", 0x6e, 0x0, 0x0, 0x0) r5 = socket(0x18, 0x3, 0x0) socket(0x1, 0x2, 0x0) (async) r6 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000100)) execve(0x0, &(0x7f00000002c0), 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1) socket(0x18, 0x3, 0x0) (async) socket(0x18, 0x3, 0x0) 1.089834593s ago: executing program 0 (id=1438): syz_emit_ethernet(0x7e, &(0x7f0000000380)={@local, @local, [{[{0x88a8, 0x2, 0x1}], {0x8100, 0x5}}], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x68, 0x67, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @empty, {[@noop]}}, @icmp=@source_quench={0x4, 0x0, 0x0, 0x0, {0x12, 0x4, 0x0, 0x0, 0xfffc, 0xffff, 0x0, 0x0, 0x0, 0x0, @loopback, @local={0xac, 0x14, 0x0}, {[@lsrr={0x83, 0x17, 0x5, [@multicast1, @broadcast, @empty, @local={0xac, 0x14, 0x0}, @multicast2]}, @generic={0x88, 0x2}, @ssrr={0x89, 0xf, 0x7, [@loopback, @rand_addr=0x200, @broadcast]}, @lsrr={0x83, 0xb, 0x9, [@remote={0xac, 0x14, 0x0}, @multicast2]}]}}}}}}}) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) close(r1) execve(0x0, 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, 0x0) pread(r0, &(0x7f0000000980)='q', 0x1, 0x3c) ftruncate(0xffffffffffffffff, 0x5) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000002c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x25, 0x0, 0x8, 0x8000001}, {0x16, 0x7, 0x7f, 0x8001}]}) sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="a900000071ac0058105a91501d94a3f64b26bfce05392f13cd6523e6fdd3112a60c95d258330a19cd513020d3b58a0a599ea62073684c73281c1dbc0", &(0x7f0000000080)=0x3c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) write(r3, &(0x7f0000000180)="deeaaa1561071731da107149c4da694112906e044f5aeb0000000000000008e5f89a988c63e438a5a6f5511944631c62f2ce0343701a96048e36e1ee46faa0657e96d40a45f920f30fd22275769e6aed6b18f287dfd69c109fe156c8e4f1c121248cab6eacdb3695a4fe0febb47a7641ed19a86cae00", 0xfffffee6) write(r2, &(0x7f0000000700)="d80b00"/14, 0xe) syz_emit_ethernet(0x3b, &(0x7f0000000000)={@random="00e5e4c34789", @random="42691f3f42f6", [{[{0x88a8, 0x2, 0x1, 0x2}], {0x8100, 0x5, 0x0, 0x2}}], {@arp={0x806, @generic={0x1, 0x813c, 0x6, 0x1, 0x4, @local, '0', @remote, "93d01a4267f6bd8c767635edb0891da3"}}}}) syz_emit_ethernet(0x19, &(0x7f0000000100)={@local, @empty, [{[], {0x8100, 0x4, 0x1, 0x1}}], {@generic={0x804, "f752f9ff34a7c8"}}}) 1.089558257s ago: executing program 1 (id=1439): setsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, &(0x7f0000000080)={0x2e49}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd01) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x51}, 0x2, 0x0, 0x0, &(0x7f0000001440), 0x0) (async) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000002140)=""/4112, 0x1000}, {&(0x7f0000001140)=""/4092, 0x1000}], 0x1000000000000037) (async) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0xdd) rename(&(0x7f0000000080)='./file2/file0\x00', 0x0) 1.08790467s ago: executing program 7 (id=1440): sysctl$net_inet_ipip(&(0x7f0000001b40)={0x4, 0x2, 0x4, 0x1}, 0x2, 0x0, 0x0, &(0x7f0000001cc0)="1eb2ac3d", 0x2) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$BIOCGBLEN(r1, 0x40044266, &(0x7f0000000040)) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) r2 = socket(0x18, 0x3, 0x0) setsockopt(r2, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4) setsockopt$sock_int(r2, 0xffff, 0x800, &(0x7f0000000180)=0x2, 0x4) accept$inet6(r2, &(0x7f00000002c0), &(0x7f0000000400)=0xc) (async) accept$inet6(r2, &(0x7f00000002c0), &(0x7f0000000400)=0xc) recvmsg(r2, &(0x7f0000000240)={0x0, 0x50, 0x0, 0x22, &(0x7f00000003c0)=""/61, 0xfffffffffffffe51}, 0x41) (async) recvmsg(r2, &(0x7f0000000240)={0x0, 0x50, 0x0, 0x22, &(0x7f00000003c0)=""/61, 0xfffffffffffffe51}, 0x41) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000300)=[{0x25, 0x0, 0x2, 0xfffffffc}, {0xb1, 0x10, 0x12}, {0x16, 0x7, 0x7f, 0x6}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)="0000000000500907e9171d34be6b752c25302a4d459d738dadb16dbf337e2c138294ac17ccc14d93", 0x28}], 0x10000302) (async) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)="0000000000500907e9171d34be6b752c25302a4d459d738dadb16dbf337e2c138294ac17ccc14d93", 0x28}], 0x10000302) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000540)="6cff7ac84867c5953c9231929d27e92939e18ab7262f61c1c19b76b61fa95d0c45954e4099260b50816e56fe5e3940cbbc4ec18253504dedf484684dae292358151fd55ea20d0a2d62ffd78c0c8e9b4527dd1c221527258ea6a790c5122c9590c4f263dd6904dd0900f9d50faf0b725ab3574cc916744fbbdf4934e59ddee325e0357bc437f78123e89c4b04eb6d167ff03b67a2738b1b3413e736ad6562f1007d0187fc3e949dac84c75187cf084779660601974284ee21e9714ba9830a0374960e91428f3070fe931b9f71bd38972dc39cf9ebb6ced89a9ac0785d69687abf82d2451769c8b12e4f862169d2f63d0a847402f2", 0xf4}, {&(0x7f0000000340)="f7bbd8297bed162d0131708d8aece9200ce271ccc173e43d899e5b37d426540c98ac74624b8d018d42f6aa03701a99a97df90632e1529e8dcd53b036df81dc2aaeef0d858fcbb5e305f4ce52f40db5ac41f366af5d41afdc9296f3da416ce48e221aff31c1a79c0fe41f983503bcc482808522a025d653abb19150", 0x7b}, {&(0x7f0000000640)="97b5515c994eb06f5f753e86d9f3772fe758175526fb9c6f1f7563e6b8d21f5c32da4e725224b4c7c109ae583565fd02a38f3bc757f7759c39eb4641dc7a20d61250b57ea4f560fd93c8eb87b664716c3a4f", 0x52}, {&(0x7f0000000740)="c01b12cc427cd7d7eaa84b5e322cb8cb9872cf7037152333fadb67c0061dbeb5d5d70870c853c8dcb142575f1e52b6b6276688e65385bdc64a6d9ef9f7f39011ef2e78445407d38e26500ed9bfa7584b09e8e2c38f2b11ec8ce272ac85503e52f7326577ae78988258e53574b7b8ccd77cbef4116b0f0fb1b5c8f4c67440179a31ba89df2b4e7fdb57f28827dbb261d0c7ed97f4a3499210bb23a83179cab44c91cee891c648c6a94f5b331e85441cfbd8c0ce345ff147e09101765ee836bfb397adeaaf2a328d475c46c87cd44d9cbe73a9c692788b82bb16742d675f3d4e4ade30426206308b74587a25283236", 0xee}, {&(0x7f00000000c0)="09a132cab039a5bae324b31b50ae53b3a46c70ee7c43d4807be5bcf52e", 0x1d}, {&(0x7f0000000840)="5efaf6f222b1529c22a0cc821bc804d083dfe5f027518bd56d6683f51a05f5633a3afa7046554fd9f0d6f40ca31a083df66fd060ba8cbf5d8df28d1be165dcba73397bb9eb1665d0b5807ed853c3f7bdc7207af153c70ad743b14b472011b7b0619be036314bdd9ac2aee7a2073eee414eb4311bef8412a4831f6fbd301841151ed0b6e05cbe0c6643dba934be242e923bd1d57d42a4c9e4e178b5ca253f17981fd076d3bcf3c91a6af5dc9b7e4a4fdd2a5e5c02b2a27dbf12dda10cd74445426262cdb51e00df3c6afc75bdc8b34b1bb458a3", 0xd3}, {&(0x7f0000000940)="5dfd8358bb897a3c7f0b86cd524625c9c178143fa7a9b758837df45c4de45c01a0f60d7bda0478eafd032203e1af7456364caf633ed34b548b61427d7059d8da8472f8547a1af56dedb89744e994485db688d811f6bebd71fd6a00742540b223cf6faf0326a98a470f683b8a38bce771f030cac741d4abcf25f7cd3f7bf8", 0x7e}], 0x7) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="7b50d9ec95", &(0x7f0000000080)=0x5, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x8, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) close(r4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KDMKTONE(r3, 0x20004b08, &(0x7f0000000180)=0x20e) (async) ioctl$KDMKTONE(r3, 0x20004b08, &(0x7f0000000180)=0x20e) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, &(0x7f0000000100), 0x0, 0x0, 0x0) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000200)={0x1, &(0x7f0000000480)=[{0x7, 0x22, 0x5, 0x1}]}) (async) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000200)={0x1, &(0x7f0000000480)=[{0x7, 0x22, 0x5, 0x1}]}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) (async) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r0, &(0x7f0000000700)="d80b00"/14, 0xe) syz_extract_tcp_res(&(0x7f0000000000), 0xfffffffa, 0x8001) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) 843.171481ms ago: executing program 1 (id=1441): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x81, 0x0, 0x4, 0x4}, {0x7, 0x0, 0xff, 0x444}, {0x6, 0x0, 0x0, 0x401}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000002c0)="0002", 0x2}], 0x1) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f00000001c0)="00020000000a", 0xfe93) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x64, 0x22, 0x6, 0xb}, {0x87, 0xe, 0xbb, 0x2012}, {0x6, 0xed, 0x12, 0x800}]}) write(r1, &(0x7f00000002c0)="d81ad3ede1f3bd8558d5c7364888", 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r2, 0x1000000029, 0xd, &(0x7f00000000c0)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f95f", &(0x7f0000000080)=0x3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r0, &(0x7f0000000700)="d80b00"/14, 0xe) 841.392364ms ago: executing program 7 (id=1443): pwritev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)="42bd8049c214041324", 0x9}], 0x1, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r0 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) setrlimit(0x4, &(0x7f0000000300)={0x1, 0x200000000000002}) open(&(0x7f00000002c0)='./bus\x00', 0x800, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x100) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x1}, 0x3, &(0x7f0000001c00), &(0x7f0000000040)=0x44, 0x0, 0x0) sysctl$kern(&(0x7f0000000180)={0x1, 0x2d}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSPGRP(r1, 0x40047477, &(0x7f0000000280)) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f00000001c0)={'./file2aaaaaaaaaaaaaaaaaaaaaaaaa', 0x5, 0x8, 0xb, 0x1, 0x5, 0xf6a4, 0x9, 0x2, 0x0, 0x80000001, 0x8000000000000001}) sysctl$kern(&(0x7f0000000040)={0x1, 0x47}, 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x40}, 0x3, &(0x7f0000000180)="71f91e347102a709ae1732f96ea5ac00586246242ba0150b421ba871a4f2086503cf318a4ebcd70a501d94a34b8e", &(0x7f0000000080)=0x1, 0x0, 0x20) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00') unveil(&(0x7f0000000140)='.\x00', &(0x7f00000000c0)='r\x00') open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x38, 0x3, 0x0, 0x0, 0x62, 0x0, @local={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, {[@ra={0x94, 0x6, 0x4}, @noop, @noop]}}, @icmp=@parameter_prob={0xc, 0x2, 0x0, 0x0, 0xfc, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, @broadcast, @multicast1}}}}}}) 775.737768ms ago: executing program 1 (id=1444): r0 = socket(0x18, 0x2, 0x0) socket(0x2, 0x4001, 0x0) r1 = socket$inet(0x2, 0x4, 0xff) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) sysctl$hw(&(0x7f00000001c0)={0x6, 0x1c}, 0x2, 0x0, 0x0, &(0x7f0000000080), 0x0) setsockopt(r1, 0x0, 0xa, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000140)) 774.567708ms ago: executing program 0 (id=1445): sysctl$vm(&(0x7f0000000000)={0x2, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x27, 0x0, 0x2, 0xfffffffc}, {0xb1, 0x10, 0x2}, {0x16, 0x7, 0x7f, 0x400f}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)='X', 0x1}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="f969afaadacc73312091501d94a34b71000000005c6fd13194245ebbd0a75af987565625f7169b9d609e0b4927cab28f2769b43df6bd7881952832ccb0afe61320de54c663201382cf2fdd411d94e7b0c71978c04bb50ddb91d979475a12fe81de", &(0x7f0000000080)=0x61, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x5e, &(0x7f00000005c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "062500", 0x28, 0xc, 0x0, @rand_addr="0000000000000000000000a82400", @loopback, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @loopback}}}}}}) syz_emit_ethernet(0x4de, &(0x7f0000000680)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "6d9efb", 0x4a8, 0x67, 0x0, @rand_addr="00000000010000000000000afffffffe", @loopback, {[@routing={0x88, 0xc, 0x0, 0x0, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, @rand_addr="95a8e3f69261b11bfb779408877c5d94", @mcast1, @loopback]}, @hopopts={0x4}, @routing={0xc, 0x4, 0x0, 0x9, 0x0, [@mcast2, @mcast2]}, @dstopts={0x2b, 0x33, '\x00', [@pad1, @generic={0x5, 0xe4, "af20e4b21154e61fbb43d551c50b7bec06f120fe504d4df35619925b72a6b1656feb28597a452998fa7670c7e96a891d6ffe777cb844100410886327f4331b6b7014666b21692ac200f83283494936a2e78e688b24a12df0663b29bf2e8d3ccbab810b49c1ef16b67262e6271040c842f03cde08a1a439e382f0920b9d06cf2a5bbbf68f7e27c398dab6a1feba46ece491f2e3afc9dd415f72d449774cb6d7531708f6d0e12b3c1a52dbbd75db6ecc1ca45fe9dec04ea9d29642012029d0a721f39288cb0be11b5d12fc1fb0cad4845a210fbb369574dfe4b35dfd15d19d936c7f56a1b7"}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x80}, @generic={0x2, 0x8e, "ed197aa389e457f4964bef7ff489c04e6627466843c434adf00a7bdd4e1845eb275580125c799e8a837b4dda49ef9e1fa1b70dece49089c3b020b00734a60eb098995dd84e35eebbf81112e75783b6e677a4b2bf6e58471b44f252e4f2887854c4a848f436483155e7cc43b331e26c10d119db5da37942f6ea9bda53c43a5dfad197b5e36606161fe8c31c6053fc"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0xb8}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @fragment={0xff, 0x0, 0x9, 0x0, 0x0, 0x7, 0x67}, @routing={0x2, 0x10, 0x0, 0x5, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}, @mcast1, @mcast1, @rand_addr="0a1067686fc379684e0d60984f1c5249", @loopback, @mcast1, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, @mcast2]}, @routing={0x3b, 0x6, 0x0, 0x3, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, @mcast1]}, @dstopts={0x3b, 0x2a, '\x00', [@jumbo={0xc2, 0x4, 0xfffffffb}, @generic={0xb8, 0x67, "565fc4a440455a1a7548fad6b96271745fda9cf4b7bee3a0b78bcf79630797a5c8060ca443d36dc21e639a2e80b46dbf8cb4840f61456b1ee1a709374103e5fe768ce764a5386ddb66358c5d5551c48c4d773f6da7c6e8322ccb64d605f6476f980f077e9aba42"}, @generic={0x6, 0x4, "7f2f6066"}, @generic={0x4, 0xd4, "c434ce0964f6f448087dccd18f338ee73b9918980cfb6e10485a5374564a79e158b738cb44ef1f505e5fb1a0aa956d67c99527f7b6628136f30ad298f4e60d1133d0e4558287c61c9a8fe2befbc04a14228a66af4a4aeb6055850654dd8bf30a12e2c764e9ee173d0c80bf3db9e1944070c45810cff0101731dc8ba4def1139a8ee2150488e54537eba88cead8e3981d809fbd7d913aeda2c6c46a15023b69db83a1c4448dd171d6bca4829368fbd89a8baff87c778a7b6309ba1470002e9eb93ce6fdbc7649d3e334bb28f875bb76190362bfd5"}, @pad1, @pad1]}, @dstopts={0x0, 0x2, '\x00', [@ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x11, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x1, [0x0]}, @pad1]}], @udp={{0x2, 0x3, 0x8}}}}}}}) 774.013704ms ago: executing program 4 (id=1446): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="b886b4e47f", 0xfffffffffffffee7}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r0, &(0x7f0000000000), 0x10) listen(r0, 0x0) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='x\x00') listen(r0, 0x0) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00') mknodat(r2, &(0x7f0000000540)='./file0\x00', 0x6000, 0x20006c1) socket(0x21, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$vmm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="b886b4e47f", 0xfffffffffffffee7}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) socket(0x2, 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) bind(r0, &(0x7f0000000000), 0x10) (async) listen(r0, 0x0) (async) socket(0x2, 0x1, 0x0) (async) connect$unix(r1, &(0x7f0000000000), 0x10) (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='x\x00') (async) listen(r0, 0x0) (async) open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) (async) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00') (async) mknodat(r2, &(0x7f0000000540)='./file0\x00', 0x6000, 0x20006c1) (async) socket(0x21, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) openat$vmm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) (async) 681.298085ms ago: executing program 1 (id=1447): socketpair(0x1e, 0x4, 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0xb) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x2}, {0x18, 0x1, 0xa, 0x40}, 0x6365, [0x0, 0x0, 0xd8b, 0x0, 0x7, 0x7ff, 0x200, 0x7]}, 0x3c) socketpair(0x1e, 0x4, 0x0, 0x0) (async) socket$inet6(0x18, 0x3, 0xb) (async) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x2}, {0x18, 0x1, 0xa, 0x40}, 0x6365, [0x0, 0x0, 0xd8b, 0x0, 0x7, 0x7ff, 0x200, 0x7]}, 0x3c) (async) 680.470986ms ago: executing program 0 (id=1448): ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000180)={&(0x7f0000000140)=[{0x8, 0xf5}, {0x2, 0x1ff}, {0x47, 0x5}, {0x0, 0x10000}], 0x4}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000140)="9725db874b5776d5676fed1ea73f98a0c434268a8320db3eab6b66f85fc6c3e3784eea0a60bdf4f4428f0b0f73d3d47237f91da5d2059c1266e040db88848df71ab56420822a1aba3070fb930a29ddebb11cfe86730eec721e0af6bcf4d00a107421406cd3f2d2d584822e5a2dca988b787135219952d8f7402de7b9291c788fea559f86c9ffda5f03d0c9559630", 0x8e}], 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r0, 0x8020697a, &(0x7f00000001c0)) sysctl$ddb(&(0x7f0000000000)={0x9, 0x6}, 0x2, &(0x7f0000000040)="34967ba6", &(0x7f0000000080)=0x4, &(0x7f00000000c0), 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') syz_open_pts() r1 = socket(0x18, 0x3, 0x0) getsockopt$sock_int(r1, 0xffff, 0x800, &(0x7f0000000080), &(0x7f00000000c0)=0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$VMM_IOC_CREATE(r2, 0xc2585601, &(0x7f0000000340)={0x10, 0x6, [{&(0x7f000004e000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x5}, {&(0x7f000001e000/0x3000)=nil, &(0x7f0000691000/0x3000)=nil, 0x100000001}, {&(0x7f00003e9000/0x3000)=nil, &(0x7f00004a7000/0x4000)=nil, 0x5}, {&(0x7f00002e9000/0xc000)=nil, &(0x7f0000ff3000/0xc000)=nil, 0xd}, {&(0x7f000058f000/0x2000)=nil, &(0x7f00000f5000/0x3000)=nil, 0x4}, {&(0x7f0000237000/0x2000)=nil, &(0x7f0000792000/0x2000)=nil, 0xffff}, {&(0x7f0000369000/0x1000)=nil, &(0x7f000043e000/0x4000)=nil, 0x1}, {&(0x7f00003dc000/0x3000)=nil, &(0x7f0000630000/0x3000)=nil, 0x4}, {&(0x7f00004d3000/0x4000)=nil, &(0x7f0000502000/0x9000)=nil, 0x9}, {&(0x7f0000104000/0x4000)=nil, &(0x7f000008d000/0x2000)=nil, 0x7}, {&(0x7f00003f9000/0x1000)=nil, &(0x7f000013a000/0x2000)=nil, 0x8}, {&(0x7f0000777000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f00003e7000/0x1000)=nil, 0x5}, {&(0x7f0000354000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x97c6}, {&(0x7f000015f000/0x3000)=nil, &(0x7f0000756000/0x1000)=nil, 0x6}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f000061d000/0xe000)=nil, 0x7}], './file0\x00', 0x401}) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) 680.172918ms ago: executing program 3 (id=1449): mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x202) openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0xc0621bcdcc472764, 0x0) sysctl$vfs_nfs(&(0x7f0000000140)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000000)="ee4600bace677da7b76a0036c098fa6a5079220ce4e117eb75b23ee45f9852a756ff7369baa8994dba1698a0af182635ec1b64d0d87ced5de9d48138ee6490c0cbc16c163a4c47026c0d897b32135f7282e18d151e1ed0abb00321d7bc5d10c8a5963ab7beb04e9a3a66cc1baf41b61f7c4188d7d194193156d327bdfd46d02253195585dcfd31c671d738ad64da041f41040305eea64fed5678a8e3772b4bc060cdc0ccbec3f97343fb4639c6c01b29316c4fd5e7fc7449c554488068f6de", &(0x7f0000000740)=0x1, 0x0, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x202) link(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='./file0\x00') open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 680.000855ms ago: executing program 6 (id=1450): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETA(r0, 0xc008441e, &(0x7f00000000c0)={0x7, 0xfffffffd, 0x0, 0x0, "468355f93f25e6e9000000000000075a6b47c0d1", 0xfffffffc}) ioctl$TIOCSBRK(r0, 0x2000747b) 498.276575ms ago: executing program 6 (id=1451): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r0, 0x80105727, &(0x7f0000000140)={&(0x7f0000000080)}) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) (async) r1 = socket(0x18, 0x3, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r4 = msgget$private(0x0, 0x4b) msgrcv(r4, 0x0, 0x0, 0x3, 0x1000) (async) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) (async) msgctl$IPC_SET(r4, 0x1, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) (async) setreuid(0x0, 0xee01) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) r5 = semget$private(0x0, 0x4, 0x349) semctl$IPC_RMID(r5, 0x0, 0x0) (async) fcntl$lock(r3, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20001fffffffd}) (async) ioctl$TIOCGETA(0xffffffffffffffff, 0x402c7413, 0x0) (async) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$lock(r6, 0x9, &(0x7f00000003c0)={0x0, 0x0, 0x7fffffffffffffff, 0x1ffffffff}) ioctl$VNDIOCCLR(r2, 0x80384601, &(0x7f00000003c0)={&(0x7f0000000180)='./file0\x00', 0x21, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ff}) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000a80)={'tap', 0x0}) (async) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x8, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0x7, 0x7f, 0x4011}]}) (async) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)="3cb3ff3d3828e64ae9f989a016dd6442873668ee8adcc9b969e224607d7ffe92d33fb4686dde621f269fe9ea1b8af91cab9430d34183940367c16a16693eb1450796a0339b21e40aa9df6048", 0x4c}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000500)="a9000000f1ac0058105a91501d94a3f64b26bfce05392f13cd6523e6fdd3112a60c95d256dd48ae298050000", &(0x7f0000000080)=0x2c, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000400)={0x0, 0x0}) 497.186701ms ago: executing program 7 (id=1452): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x2, 0xfffffffc}, {0xb1, 0x10, 0x2}, {0x16, 0x7, 0x7f, 0x400f}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$unix(0x1, 0x5, 0x0) dup2(r1, r2) bind$unix(r3, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r3, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffff7dffd, 0x0, 0x7, 0x0, 0x4, 0x0, 0x8000000000000000, 0x2}, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000480)="582383ba32", 0x5}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="f969afaadacc73312091501d94a34b71000000005c6fd13194245ebbd0a75af987565625f7169b9d609e0b4927cab28f2769b43df6bd7881952832ccb0afe61320de54c663201382cf2fdd41d979475a12fe81de3738a8b932a39f52f5f7ba3a21", &(0x7f0000000080)=0x61, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[]) 497.037201ms ago: executing program 3 (id=1453): getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000100)={0x0}, 0xc) ktrace(&(0x7f0000000080)='./file0\x00', 0x1, 0x104, r0) (async, rerun: 32) sendto$unix(0xffffffffffffffff, &(0x7f00000001c0)="b1000501600000000200000007000000110002000000000000f96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236de351e21e000000c257699a5f139b020000005d223e7d026ba80163003728210200d38bfbb770c1f5a872c881ea6e69e0bb76d907c400000000361f1257aea8c500002002f2ff0c2300008abfba0900000008e3710002000000000000b71d89e000040781e4b2feff0000fa00000000", 0xb1, 0x0, 0x0, 0x0) (rerun: 32) sysctl$net_inet_tcp(&(0x7f0000000000)={0x7, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIONBIO(0xffffffffffffffff, 0x8004667e, &(0x7f0000000040)=0x8) (async) sysctl$kern(&(0x7f0000000000)={0x6}, 0x5, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x400000000000000a, &(0x7f0000000240)="71f9000071ac00dd6070af6fb10c63498e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x1c, 0x0, 0x0) 496.344755ms ago: executing program 2 (id=1454): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0xc82, 0x5c) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x4) (async) r0 = syz_open_pts() ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f00000000c0)) 411.420333ms ago: executing program 2 (id=1455): sysctl$kern(&(0x7f0000000040)={0x1, 0x11}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff665b1a1b03d58e36ad61da0187a4a13892aa03e28848"]) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="6fcba96e64d77dfe77d06091c8341acb34f68c0a", 0x14}], 0x1) readv(r1, &(0x7f0000000600), 0x10000000000002a5) openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) socket(0x20, 0x4, 0x43) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4) 401.931199ms ago: executing program 0 (id=1456): syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr}, @udp={{0x0, 0x2, 0x8}}}}}}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x2, 0xfffffffc}, {0xb1, 0x10, 0x2}, {0x16, 0x7, 0x7f, 0x400f}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000002240)="582383ba32ce44e08e23b16f3aec414a7aadc2068e", 0x15}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000100)='\x00\x00\x00', &(0x7f0000000080)=0x3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000300)=ANY=[]) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 395.057142ms ago: executing program 4 (id=1457): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x81, 0x0, 0x4, 0x4}, {0x1, 0x0, 0x1, 0x444}, {0x6, 0x0, 0x0, 0x401}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f0000000000)="740529c56ac700538dc2bc83bda5f871c2ff008000", &(0x7f0000000080)=0x15, 0x0, 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r0, &(0x7f0000000700)="d80b00"/14, 0xe) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0x8026d4) open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x81, 0x0, 0x4, 0x4}, {0x1, 0x0, 0x1, 0x444}, {0x6, 0x0, 0x0, 0x401}]}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000000)="740529c56ac700538dc2bc83bda5f871c2ff008000", &(0x7f0000000080)=0x15, 0x0, 0x6) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) (async) write(r0, &(0x7f0000000700)="d80b00"/14, 0xe) (async) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0x8026d4) (async) open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) (async) 393.896687ms ago: executing program 3 (id=1458): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000a80)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x8, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0x7, 0x7f, 0x8001}]}) (async) sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="a900000071ac0058105a91501d94a3f64b26bfce05392f13cd6523e6fdd3112a60c95d258330a19cd513020d3b58a0a599ea62073684c73281c1dbc0425fb23ab905ad20d4b8ecc93c65c23a4e74d096f330dd1fadf7734869c2fa6b", &(0x7f0000000080)=0x5c, 0x0, 0x0) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x1100, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0xfffffffffffffe55, 0x0}) (async) ioctl$BIOCSRSIG(r1, 0x80044272, &(0x7f0000000140)=0xe) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[]) 333.73843ms ago: executing program 0 (id=1459): setuid(0xee01) r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000007c0)={0x0, 0x1, 0xffefbff6, 0x0, "0000ffffffffff9b752d0200"}) writev(r0, &(0x7f0000000140)=[{}, {&(0x7f0000000800)="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", 0x46c}], 0x2) writev(r0, &(0x7f0000000100)=[{&(0x7f00000003c0)="7659aeb94832406f050635f0b67c483a24febaee7e5f3d48e6cb95bdcc0fc869e646ecfa588c53283c4dd3ed77706f3868", 0x31}], 0x1) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, "d7e6bb63f835ba0f0224428f455eca5bc615922a", 0xa2}) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000080)) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x10c) stat(&(0x7f0000000080)='./file0\x00', 0xfffffffffffffffe) r1 = socket(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setitimer(0x0, &(0x7f0000000080)={{0x0, 0x4}, {0x0, 0x7}}, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x400000, 0x83}, {0x1ffffffffffd, 0x6}}, 0x0) bind(r1, &(0x7f0000000000), 0x10) 332.578097ms ago: executing program 1 (id=1460): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r0, 0x0) (async) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r1, 0x0) (async) r2 = syz_open_pts() (async) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) r3 = openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) mquery(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x0, r3, 0xfffffffffffffff9) syz_emit_ethernet(0x4a, &(0x7f0000000b00)={@local, @remote, [], {@ipv6={0x86dd, {0x8, 0x6, "7facaa", 0x14, 0x3c, 0x0, @empty, @mcast2, {[], @tcp={{0x1, 0x0, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0xfffd, 0x0, 0x5d}}}}}}}) (async) poll(&(0x7f0000000ac0)=[{r2}], 0x1, 0x108882) (async) ioctl$TIOCFLUSH(r2, 0x80047410, &(0x7f0000000240)=0x28) 332.015033ms ago: executing program 2 (id=1461): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000003c0)={0x8, 0x5a46, {[0x2faa, 0x80000001, 0x10, 0x65, 0xc, 0x46, 0x8, 0x4, 0x6, 0x0, 0x6, 0x80000000, 0x2, 0xb, 0x69ca, 0x2, 0x3ff, 0x800006], [0xffffffffffff0000, 0x40000000, 0x0, 0x4, 0x200000000000b2b6, 0x6c7d, 0xffffffffffffffff, 0x8000000000000001, 0xfffffffffffffff9, 0x1000080], [0x7, 0xe, 0x9, 0x1, 0x81, 0x8, 0x7], [0x10000, 0x7, 0x5, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x7], [{0x2f, 0x4, 0x6, 0xd}, {0x9, 0x2, 0x7fffffff, 0x9}, {0x2, 0x8, 0x9, 0x1}, {0x1, 0x4, 0x1, 0xfd}, {0x1, 0x0, 0x0, 0x6}, {0xf, 0x0, 0xe3, 0x9}, {0x100, 0xffffff8e, 0xa, 0x1}, {0xc, 0x7, 0x7, 0x8}], {0x6, 0x7fffffff, 0x7, 0x6}, {0x56d7, 0xfffffff4, 0xfff, 0x80000000}}}) setrlimit(0x8, &(0x7f0000000180)={0xa, 0x8000}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000100)={0x809789, 0x2, 0x1, 0x80e19f, "bf08000100f1a55910812cc900", 0x81, 0xff}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYRES8]) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETA(r2, 0x20004102, 0x0) execve(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x0) close(r3) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000240)="ea4552", 0x2) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00aa6600000000", 0x8) ioctl$TIOCSTSTAMP(r1, 0x8008745a, &(0x7f0000000000)={0x1, 0x1000}) execve(0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x0) close(r5) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0x8) setsockopt$inet_opts(r5, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00aa6600000000", 0x8) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) 331.478471ms ago: executing program 4 (id=1462): chflags(&(0x7f0000000000)='./file0\x00', 0x0) r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000000040)=@abs, &(0x7f0000000080)=0x8) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x1}, 0x8) r1 = accept$unix(r0, 0x0, &(0x7f0000000100)) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x400, 0x2) (async) r3 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x100, 0x4) linkat(r2, &(0x7f0000000180)='./file0\x00', r3, &(0x7f0000000200)='./file0\x00', 0x0) r4 = socket$unix(0x1, 0x2, 0x0) (async) getsockopt$sock_timeval(r1, 0xffff, 0x1005, &(0x7f0000000240), &(0x7f0000000280)=0x10) r5 = openat$klog(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r6 = openat$klog(0xffffffffffffff9c, &(0x7f0000000540), 0x100, 0x0) (async) r7 = openat$klog(0xffffffffffffff9c, &(0x7f0000000580), 0x8, 0x0) r8 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000005c0), 0x40, 0x0) r9 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000600), 0x100, 0x0) (async) r10 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000640), 0x8000, 0x0) sendmsg$unix(r0, &(0x7f00000007c0)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f00000004c0)=[{&(0x7f0000000300)="c28b8cf6bcdf7b6279fcf47705958aea78cd33af91e2df8293d9b5b9a6fc70d2f96ec9462f5f973a3ef0aadc45518a073dba15ec9a6ce445a24f8d7d76e8fcf9dc84158b752385be8ab9752faf4759697695a378ba320fd2d759a17d5d5578dda109bbbf14763f4c488b32f6fe7d4688c5a33a3585168e45ed732949e1673f54b7ceed2ed352dbc3946f8671523696d8cf43f7a4bc2c2f03fdab9c45081f5f34b62cabbf0b73d0eb0d97243ac7d28df9251e3d258c4f6a3d0b6a1da3ce40ed9c64b17028ba5ff710b23ca9e682f3e0a6e526c8ef2dfe32c84a3de9c542", 0xdd}, {&(0x7f0000000400)="07c26f9425816b991ac31447bfd02414fe20e26f63adec2fdd575e604b0122a252626957", 0x24}, {&(0x7f0000000440)="ffe57802892ce26f71ff9645cf343f8c524ecdef2bfcd459a36670c9d97b09f1b736ee194389a946a7081827bf271fdf517acc76eedc4d960c9189f1fe11f673064517eaa77eeb0cd59960ffd8bbbf6cf8c4e1d315ed5d9d959dd3aa55d7cb31178d3257a6dfc64ee40febcada7f4186a551a96304525ce09859", 0x7a}], 0x3, &(0x7f0000000680)=[@rights={0x20, 0xffff, 0x1, [r0, r5, r4, r1]}, @cred={0x20, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @rights={0x30, 0xffff, 0x1, [r1, r4, r1, r6, r0, r4, r1, r3]}, @rights={0x20, 0xffff, 0x1, [r7, r1, r2]}, @rights={0x28, 0xffff, 0x1, [r8, r0, r9, r2, r0]}, @rights={0x30, 0xffff, 0x1, [0xffffffffffffffff, r3, r0, r1, r10, r4, r2]}, @rights={0x30, 0xffff, 0x1, [r1, r2, r0, r2, r1, r2, r2]}], 0x118, 0x4}, 0x400) socket(0x10, 0x4000, 0x4) (async) close(r6) (async) ioctl$SPKRTONE(r10, 0x80085301, &(0x7f0000000800)={0x6, 0x5b}) r11 = accept$inet6(0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880)=0xc) (async) r12 = open$dir(&(0x7f00000008c0)='./file0\x00', 0x80, 0x0) (async) r13 = socket$inet6(0x18, 0x1, 0x9) poll(&(0x7f0000000900)=[{r5, 0x10}, {r11, 0x10}, {r10, 0x4}, {r1, 0x1}, {r12, 0x100}, {r13, 0x1}, {r5, 0x20}], 0x7, 0x6) unveil(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='c\x00') (async) r14 = getpgrp() fcntl$lock(r8, 0x8, &(0x7f00000009c0)={0x3, 0x0, 0x60, 0x766, r14}) (async) r15 = socket$inet(0x2, 0x5, 0x10) getsockname$inet(r15, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) (async) open(&(0x7f0000000a80)='./file0\x00', 0x800, 0x0) dup2(r13, r2) 331.027008ms ago: executing program 5 (id=1463): mkdir(&(0x7f0000000040)='./file0\x00', 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) chown(&(0x7f0000000140)='./file0\x00', 0x0, r0) r1 = kqueue() kevent(r1, &(0x7f0000000140)=[{{r1}, 0xfffffffffffffff9, 0x5, 0x10}], 0x0, 0x0, 0x4, 0x0) kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) r2 = socket(0x18, 0x1, 0x0) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105728, &(0x7f0000000700)={&(0x7f00000006c0)=[{0x2, 0x1}, {0x101}, {}], 0x3}) r4 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r4) open$dir(&(0x7f0000000080)='./file0\x00', 0x80, 0x3) chroot(&(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x3}, 0x0) recvmsg(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) socket(0x10, 0x4, 0x0) sendto$unix(r5, &(0x7f0000000240)="b1000502000000000000200001010000ffffffffffffff7ffef96ec0c72fd3357ae30200004e3003002000acf20b7804be38164991f7c8cf5f882b297b00aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720f568bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40e, 0x0, 0x0) socket(0x2, 0x4001, 0x0) close(0xffffffffffffffff) lseek(0xffffffffffffffff, 0x7, 0x1) 277.686006ms ago: executing program 3 (id=1464): mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x205) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) bind(r0, &(0x7f0000000100)=@un=@file={0x1, './file1\x00'}, 0xa) (async, rerun: 32) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000140)={0x0}, 0xc) (rerun: 32) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0x69, &(0x7f00000001c0)={{0x18, 0x0, 0x7, 0xfffff8c2}, {0x18, 0x3, 0x2, 0x6}, 0xf739, [0xffffffff, 0x80000001, 0x9, 0x8, 0x9, 0x2, 0x1, 0x2]}, 0x3c) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x2, 0x1, r2}) (async) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 275.50922ms ago: executing program 7 (id=1465): r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/183, 0x82}], 0x1) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000a40)=""/198, 0xc6}], 0x1, 0x1000) 274.311391ms ago: executing program 6 (id=1466): kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x6b, 0x11}], 0x203, 0x0, 0x2, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000180)=[{{}, 0xfffffffffffffff9, 0x4, 0x13, 0x1}], 0x0, 0x0, 0x7, 0x0) r0 = kqueue() kevent(r0, 0x0, 0x0, &(0x7f0000000080)=[{{r0}, 0xffffffffffffffff, 0x69, 0x80000002, 0x9, 0xd}], 0x80000ff, 0x0) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000a80)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0xfbff, 0xf7, 0x8, 0xa}, {0x5d7, 0x69, 0x2, 0x200008}, {0x2000, 0x81, 0x1, 0x5b89}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)="3cb3ff3d0128e6fabd6a729dfaf32560c4e68810c552d8f6fb71416bd026c2dbbd09bc555867cd9c1ac0de69be5e8eb9c778390a252d", 0x36}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000800)="c90058105a91501d949f27982ebfce05392f13417c96ec51fe3a1660c95d256dd48ae2f8f49346c6df08302e85ab5ab9d6eb624dff6d4f4e5a558f0e11934b6090dc03309680b0bd79ec759fc6656fe3638236f60865ed14e286b3214ed730523a758b3c708c1fdc44df854d11ba6e4ea61989fbc5b3b5d3f054c047", &(0x7f0000000080)=0x7c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0xfffffffffffffe55, 0x0}) syz_emit_ethernet(0xe, &(0x7f00000006c0)=ANY=[]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r2 = syz_open_pts() ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000000)={0x29f57365, 0x10007fff, 0x9, 0xfffffff8, "8b030003000100787d902b56d864d3c3a3f4d3c9", 0x29}) ioctl$TIOCSTAT(r2, 0x20007465, &(0x7f0000000a40)) socket(0x18, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1, 0x0, 0x1}, 0x8) r3 = socket(0x18, 0x3, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x67, &(0x7f0000000100)={0x0, 0x0, 0xfc, 0x4587}, 0xc) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000a80)={'tap', 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0x400000000000000}) r5 = socket(0x18, 0x3, 0x0) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r5, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) semop(0x0, &(0x7f00000001c0), 0x0) socket(0x2, 0x3, 0x0) 16.257943ms ago: executing program 3 (id=1467): shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) (async, rerun: 32) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async, rerun: 32) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r0, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) 15.367119ms ago: executing program 3 (id=1468): sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) setrlimit(0x4, &(0x7f0000000000)={0x2, 0x8000000000000000}) 13.020604ms ago: executing program 7 (id=1469): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000a80)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x3, 0x8, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0x7, 0x7f}]}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="3cb3ff3d3828e64a", 0x8}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="a900000071ac0058105a91501d94a3f64b26a9ce05f900000000000000002f13cd6523e6fd06112a60c96124af047f4e1bf651d164582a7bd14c5d258330a19cd52f020d3b58a0a5", &(0x7f0000000080)=0x48, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0xfffffffffffffe55, 0x0}) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[]) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSDISPLAYIO_USEFONT(r3, 0x80585750, &(0x7f0000000280)={'./file0\x00', 0x8, 0x3, 0x9, 0x1, 0x2, 0xc8, 0x4, 0x1, 0x2, 0x3}) r4 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r4, 0x80286989, &(0x7f00000001c0)) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt(r5, 0x0, 0x401, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000a80)={'tap', 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x3, 0x8, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0x7, 0x7f}]}) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="3cb3ff3d3828e64a", 0x8}], 0x1) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="a900000071ac0058105a91501d94a3f64b26a9ce05f900000000000000002f13cd6523e6fd06112a60c96124af047f4e1bf651d164582a7bd14c5d258330a19cd52f020d3b58a0a5", &(0x7f0000000080)=0x48, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0xfffffffffffffe55, 0x0}) (async) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[]) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) (async) socket(0x1, 0x2, 0x0) (async) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) kqueue() (async) kevent(r2, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) (async) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$WSDISPLAYIO_USEFONT(r3, 0x80585750, &(0x7f0000000280)={'./file0\x00', 0x8, 0x3, 0x9, 0x1, 0x2, 0xc8, 0x4, 0x1, 0x2, 0x3}) (async) socket(0x2, 0x2, 0x0) (async) ioctl$FIONREAD(r4, 0x80286989, &(0x7f00000001c0)) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt(r5, 0x0, 0x401, 0x0, 0x0) (async) 0s ago: executing program 4 (id=1470): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x4001, 0x0) r2 = dup(r1) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = socket(0x2, 0x2, 0x0) bind(r4, &(0x7f0000000000), 0x10) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x81, 0x0, 0x4, 0x4}, {0x4, 0x0, 0x1, 0x444}, {0x6, 0x0, 0x0, 0x401}]}) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="7405dc006ac70073ab96bc83bd00000000b3000000", &(0x7f0000000080)=0x15, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r5, &(0x7f0000000700)="d80b00"/14, 0xe) connect$unix(r4, &(0x7f0000000000), 0x10) write(r3, &(0x7f0000000580)="d695f284e46e9f02b48086721f4c04000000bc1aa44cc75e582d267d748119b2083956437f50438e58c11c238d1e2d037e9c435806e487e922ebffff5f66c5b8c869019660c1205e97cd7926e90c76e6a53d3dc4e305105c6be18c06753d404110df3ceda5aa71d81f8a176de686850c0507b5c96dce764990fd9e500289d4161b9b45e3eba310ce9b1c88f9af3672631a5ed0dde95d51299066e57854394436a6b1243d7cf23386f3989e56833acc356ed425a5af7ec1a343e834f12f85eba048fd830b430fac1cadf3431f43550831e11c02b7a34ecdbd5a81fff0bdc73741d05227efa6214ab1e7b69a2422e8babe4eba7cf35407f1c9a394fd8eb3da3ccc86840ceb56ce42c637aed8acd400000000000000032ab19457527ebf905fb5c8e80187305e89c528b21060094d2e499115f6f27e388b76e66d5a8b53d14e02986845f639ab8994e69354588ec2897500378a7754667b3f392bc5ea2f2bdbad9d718fdf6277a6460b643ff59549a48deab5", 0x171) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000080), 0x4) write(r0, &(0x7f0000000000)="52e67e48049dd4836c1be51bc22808bc88940018c738790305fd41f9e71152bc4c45b884051a7c8d1190740f0b0b32018729f8701adbc014490f2e25c732bb74f12c074f41fe1921ad9fc2c3237e05b47799abf7bf3124438eb9dffb92cd34f3176c846cc2ab34c009e72dd7a4c1681eb7f57dcc761047715a179c30652943f5538b49ad84a21634541578feb703aa7e86d719a9268527bda628a751831f6469c499c0070ccc255080fd0ef5de7dcd57d7deba458efde957740479fdbf7dc0f619050c", 0xc3) kernel console output (not intermixed with test programs): OpenBSD/amd64 (ci-openbsd-multicore-7.us-central1-b.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.1.155' (ED25519) to the list of known hosts. login: pckbd_enable: command error                                                                                                                                  pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-multicore-7.us-central1-b.c.syzkaller.internal) (tty00) login: fuse: Cannot find fusebuf pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error denied attempt to set clock forward to 13622315181289262 WARNING: thread `nfsio' (96017) exits with status -1 WARNING: thread `nfsio' (123759) exits with status -1 WARNING: thread `nfsio' (155683) exits with status -1 WARNING: thread `nfsio' (413567) exits with status -1 WARNING: thread `nfsio' (309993) exits with status -1 WARNING: thread `nfsio' (67852) exits with status -1 WARNING: thread `nfsio' (194941) exits with status -1 WARNING: thread `nfsio' (374351) exits with status -1 WARNING: thread `nfsio' (24347) exits with status -1 WARNING: thread `nfsio' (27555) exits with status -1 WARNING: thread `nfsio' (489670) exits with status -1 WARNING: thread `nfsio' (214010) exits with status -1 WARNING: thread `nfsio' (209594) exits with status -1 WARNING: thread `nfsio' (443171) exits with status -1 WARNING: thread `nfsio' (320816) exits with status -1 WARNING: thread `nfsio' (86206) exits with status -1 WARNING: thread `nfsio' (443145) exits with status -1 WARNING: thread `nfsio' (485451) exits with status -1 WARNING: thread `nfsio' (409067) exits with status -1 WARNING: thread `nfsio' (409728) exits with status -1 denied attempt to set clock forward to 7815273878500213503 malloc(): allocation too large, type = 127, size = 6442450944 pppx: unable to set addresses for pppx1, error=17 wStopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806f184750,9,0) at witness_checkorder+0x1047 rw_do_enter_write(fffffd806f184738,1) at rw_do_enter_write+0xb7 rrw_enter(fffffd806f184738,1) at rrw_enter+0xc6 VOP_LOCK(fffffd805ccc4b48,2001) at VOP_LOCK+0xa6 vn_lock(fffffd805ccc4b48,2001) at vn_lock+0xa4 vfs_getcwd_common(fffffd805ccc4b48,fffffd805ccc4b48,0,0,200,0,b18256c286b4ac5f) at vfs_getcwd_common+0xd1 vn_isunder(fffffd805ccc4b48,fffffd805ccc4b48,ffff8000ffff0f90) at vn_isunder+0x56 unp_externalize(fffffd806b399100,33,0) at unp_externalize+0x286 soreceive(ffff8000014bd8c0,ffff80003b0e2318,ffff80003b0e22c8,0,ffff80003b0e2308,ffff80003b0e248c,6abd0abc54e5394b) at soreceive+0xc73 recvit(ffff8000ffff0f90,6,ffff80003b0e2460,0,ffff80003b0e2510) at recvit+0x40a sys_recvmsg(ffff8000ffff0f90,ffff80003b0e25c0,ffff80003b0e2510) at sys_recvmsg+0x1bf syscall(ffff80003b0e25c0) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8053774ec10, count: -14 ddb{1}> show registers rdi 0 rsi 0x80000 acpi_pdirpa+0x6be71 rbp 0xffff80003b0e1da0 rbx 0xfffffd8004709350 rdx 0xffff8000014415c0 rcx 0xffff8000ffff0f90 rax 0x7ffff acpi_pdirpa+0x6be70 r8 0xffff80003b0e1c80 r9 0x8080808080808080 r10 0x5cf60363c9da6a46 r11 0x28dbba4e1f8d95c1 r12 0 r13 0xfffffd8003f20f00 r14 0x3 r15 0xffffffff rip 0xffffffff8183fd15 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003b0e1d90 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=264610 pid=43735 tcnt=4 stat=onproc flags process=1000000 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffff07e0,0xffff80002a3087c8 process=0xffff8000fffecdf0 user=0xffff80003b0dd000, vmspace=0xfffffd806b1fb1f0 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 96093 248418 55000 0 7 0 syz-executor 14119 93096 39935 0 2 0 syz-executor 14119 292318 39935 0 2 0x4000000 syz-executor 56459 493188 1579 0 2 0 syz-executor 56459 275387 1579 0 2 0x4000080 syz-executor 9046 427636 20500 0 2 0 syz-executor 9046 365055 20500 0 3 0x4000080 fsleep syz-executor 9046 66376 20500 0 2 0x4000000 syz-executor 54015 287920 19844 0 2 0 syz-executor 54015 380145 19844 0 2 0x4000000 syz-executor 54015 137435 19844 0 3 0x4000080 fsleep syz-executor 54015 197699 19844 0 3 0x4000080 fsleep syz-executor 43735 239862 16020 0 2 0x1000000 syz-executor *43735 264610 16020 0 7 0x5000000 syz-executor 43735 275248 16020 0 3 0x5000080 fsleep syz-executor 43735 117631 16020 0 3 0x5000080 fsleep syz-executor 14178 348883 84231 0 3 0x80 nanoslp syz-executor 14178 56775 84231 0 3 0x4000080 fsleep syz-executor 14178 324087 84231 0 3 0x4000080 kqpoll syz-executor 14178 264015 84231 0 3 0x4000080 fsleep syz-executor 81827 366588 92728 60929 2 0x10 syz-executor 81827 462775 92728 60929 3 0x4000090 ttyout syz-executor 81827 226442 92728 60929 3 0x4000090 ttyout syz-executor 81827 161142 92728 60929 3 0x4000090 fsleep syz-executor 81827 231604 92728 60929 3 0x4000090 ttyout syz-executor 92728 100540 18231 0 3 0x82 nanoslp syz-executor 24269 386200 0 0 3 0x14280 nfsidl nfsio 14202 154351 0 0 3 0x14280 nfsidl nfsio 33589 10760 0 0 3 0x14280 nfsidl nfsio 53292 43511 0 0 3 0x14280 nfsidl nfsio 89815 480650 0 0 3 0x14280 nfsidl nfsio 72808 365992 0 0 3 0x14280 nfsidl nfsio 4839 379570 0 0 3 0x14280 nfsidl nfsio 15350 394853 0 0 3 0x14280 nfsidl nfsio 31514 274623 0 0 3 0x14280 nfsidl nfsio 63699 380248 0 0 3 0x14280 nfsidl nfsio 91308 252927 0 0 3 0x14280 nfsidl nfsio 37225 59656 0 0 3 0x14280 nfsidl nfsio 6536 326738 0 0 3 0x14280 nfsidl nfsio 19429 423500 0 0 3 0x14280 nfsidl nfsio 96754 307399 0 0 3 0x14280 nfsidl nfsio 90538 381729 0 0 3 0x14280 nfsidl nfsio 77624 147942 0 0 3 0x14280 nfsidl nfsio 80792 345047 0 0 3 0x14280 nfsidl nfsio 76063 371985 0 0 3 0x14280 nfsidl nfsio 59459 225996 0 0 3 0x14280 nfsidl nfsio 93295 471748 1 0 3 0x100083 ttyin getty 2486 513043 0 0 3 0x14200 bored sosplice 20500 422788 18231 0 3 0x82 nanoslp syz-executor 19844 463122 18231 0 3 0x82 nanoslp syz-executor 16020 507063 18231 0 3 0x82 nanoslp syz-executor 1579 240776 18231 0 3 0x82 nanoslp syz-executor 55000 254882 18231 0 3 0x82 nanoslp syz-executor 39935 38762 18231 0 3 0x82 nanoslp syz-executor 84231 393909 18231 0 3 0x82 nanoslp syz-executor 18231 229865 72296 0 3 0x82 kqread syz-executor 72296 15641 96216 0 3 0x10008a sigsusp ksh 96216 127411 60636 0 3 0x98 kqread sshd-session 60636 206878 65894 0 3 0x92 kqread sshd-session 65894 41002 1 0 3 0x88 kqread sshd 66393 355958 53179 74 3 0x1100092 bpf pflogd 53179 481318 1 0 3 0x80 sbwait pflogd 6241 91903 97967 73 3 0x1100090 kqread syslogd 97967 86997 1 0 3 0x100082 sbwait syslogd 7767 104087 1 0 3 0x100080 kqread resolvd 35329 110358 36679 77 3 0x100092 kqread dhcpleased 12617 301131 36679 77 3 0x100092 kqread dhcpleased 36679 182790 1 0 3 0x80 kqread dhcpleased 37739 450709 0 0 3 0x14200 bored smr 8440 182445 0 0 3 0x14200 pgzero zerothread 56797 422478 0 0 3 0x14200 aiodoned aiodoned 52693 278206 0 0 3 0x14200 syncer update 16164 273750 0 0 3 0x14200 cleaner cleaner 42773 211031 0 0 3 0x14200 reaper reaper 90470 21770 0 0 3 0x14200 pgdaemon pagedaemon 43031 119370 0 0 3 0x14200 bored viomb 25654 74803 0 0 3 0x40014200 acpi0 acpi0 1954 402939 0 0 3 0x40014200 idle1 61987 278510 0 0 3 0x14200 bored softnet3 82841 425807 0 0 3 0x14200 bored softnet2 22042 178654 0 0 3 0x14200 bored softnet1 73197 325059 0 0 3 0x14200 bored softnet0 78436 269956 0 0 3 0x14200 bored systqmp 11931 119071 0 0 3 0x14200 bored systq 93623 113177 0 0 3 0x14200 tmoslp softclockmp 50205 499904 0 0 3 0x40014200 tmoslp softclock 51199 37270 0 0 3 0x40014200 idle0 1 138678 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 96093 (syz-executor) thread 0xffff80002a3902b0 (248418) shared rwlock vmmaplk r = 0 (0xfffffd806b1fbbd8) #0 witness_lock+0x5bb #1 rw_do_enter_read+0x3af #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4b #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x2d8 #7 recall_trap+0x8 Process 9046 (syz-executor) thread 0xffff80003c4fb9e0 (427636) exclusive rwlock vmmaplk r = 0 (0xfffffd806b1fb4b8) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 vm_map_lock_ln+0x12e #3 uvm_map_protect+0xe1 #4 sys_mprotect+0x34c #5 syscall+0xbc6 #6 Xsyscall+0x128 Process 43735 (syz-executor) thread 0xffff8000ffff0f90 (264610) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83923ad8) #0 witness_lock+0x5bb #1 unp_externalize+0x14e #2 soreceive+0xc73 #3 recvit+0x40a #4 sys_recvmsg+0x1bf #5 syscall+0xbc6 #6 Xsyscall+0x128 exclusive rwlock sbufrcv r = 0 (0xffff8000014bd9a0) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 sblock+0xb7 #3 soreceive+0x28e #4 recvit+0x40a #5 sys_recvmsg+0x1bf #6 syscall+0xbc6 #7 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10241 11119K 11557K 166960K 14749 0 pcb 17 16K 16K 166960K 347 0 rtable 221 11K 11K 166960K 533 0 pf 38 18K 22K 166960K 199 0 ifaddr 38 6K 8K 166960K 112 0 ifgroup 55 2K 2K 166960K 213 0 sysctl 4 1K 1K 166960K 4 0 counters 64 36K 37K 166960K 226 0 ioctlops 0 0K 4K 166960K 1631 0 iov 0 0K 32K 166960K 191 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1460 92K 92K 166960K 3006 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 26 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 57 0 dirhash 12 2K 2K 166960K 42 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 232K 166960K 1637 0 sigio 0 0K 0K 166960K 21 0 proc 72 91K 116K 166960K 728 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 213 0 in_multi 78 5K 7K 166960K 155 0 ether_multi 1 0K 0K 166960K 8 0 mrt 0 0K 0K 166960K 6 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 241 1076K 1076K 166960K 241 0 exec 0 0K 1K 166960K 967 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 1K 166960K 3 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 248 73K 86K 166960K 17077 0 UVM aobj 46 5K 5K 166960K 51 0 pinsyscall 43 86K 102K 166960K 2805 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 101 0 NDP 12 0K 2K 166960K 80 0 temp 78 8644K 8731K 166960K 67758 0 kqueue 18 23K 30K 166960K 320 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 287 0 284 5 3 2 3 0 8 1 rtentry 112 153 0 61 4 0 4 4 0 8 0 unpcb 144 948 0 927 7 3 4 4 0 8 3 syncache 336 20 0 20 4 3 1 1 0 8 1 tcpqe 32 5 0 5 4 3 1 1 0 8 1 tcpcb 808 559 0 548 19 14 5 11 0 8 3 arp 120 23 0 5 1 0 1 1 0 8 0 inpcb 376 1991 0 1970 33 24 9 15 0 8 6 nd6 136 34 0 12 1 0 1 1 0 8 0 pkpcb 40 20 0 20 4 3 1 1 0 8 1 kcovpl 48 9 0 1 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 1 0 1 0 8 0 ppxss 1168 61 0 61 4 3 1 1 0 8 1 pppxif 1472 8 0 8 4 3 1 1 0 8 1 pfstscr 40 2 0 1 2 1 1 1 0 8 0 pffrag 232 31 0 17 1 0 1 1 0 482 0 pffrnode 88 28 0 16 1 0 1 1 0 8 0 pffrent 40 61 0 47 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 4 0 1 1 0 1 1 0 8 0 pfanchor 1288 4 0 0 1 0 1 1 0 8 0 pftag 88 2 0 0 1 0 1 1 0 8 0 pfstitem 24 102 0 28 1 0 1 1 0 8 0 pfstkey 128 105 0 31 3 0 3 3 0 8 0 pfstate 376 103 0 30 8 0 8 8 0 8 0 pfrule 1344 32 0 22 2 1 1 2 0 8 0 art_heap8 4096 4 0 0 4 0 4 4 0 8 0 art_heap4 256 662 0 283 32 7 25 31 0 8 0 art_table 32 666 0 283 4 0 4 4 0 8 0 art_node 16 148 0 66 1 0 1 1 0 8 0 sysvmsgpl 40 22 0 15 1 0 1 1 0 8 0 semupl 112 2 0 2 1 1 0 1 0 8 0 semapl 112 54 0 44 1 0 1 1 0 8 0 shmpl 112 48 0 5 2 0 2 2 0 8 0 dirhash 1024 37 0 20 3 0 3 3 0 8 0 dino2pl 256 4307 0 2807 95 0 95 95 0 8 0 ffsino 280 4307 0 2807 109 0 109 109 0 8 0 nchpl 144 6645 0 4962 63 0 63 63 0 8 0 rtmask 32 12 0 12 4 3 1 1 0 8 1 uvmvnodes 80 5580 0 0 114 0 114 114 0 8 0 vnodes 216 5580 0 0 310 0 310 310 0 8 0 namei 1024 25953 0 25952 4 3 1 2 0 8 0 percpumem 16 127 0 81 1 0 1 1 0 8 0 pfiaddrpl 120 1 0 0 1 0 1 1 0 8 0 kstatmem 264 122 0 98 2 0 2 2 0 8 0 scsiplug 72 2 0 2 2 2 0 1 0 8 0 scxspl 216 19542 0 19542 12 11 1 8 1 8 1 plimitpl 152 467 0 449 1 0 1 1 0 8 0 sigapl 424 1992 0 1921 11 2 9 9 0 8 0 futexpl 64 23478 0 23470 1 0 1 1 0 8 0 knotepl 120 333 0 0 10 0 10 10 0 8 0 kqueuepl 216 544 0 530 4 3 1 2 0 8 0 pipepl 328 377 0 350 11 8 3 8 0 8 0 fdescpl 504 1912 0 1880 5 0 5 5 0 8 0 filepl 152 14581 0 14349 28 13 15 17 0 8 5 lockfpl 104 689 0 687 2 1 1 2 0 8 0 lockfspl 48 186 0 184 1 0 1 1 0 8 0 sessionpl 144 40 0 31 1 0 1 1 0 8 0 pgrppl 48 101 0 84 1 0 1 1 0 8 0 ucredpl 104 2033 0 2019 1 0 1 1 0 8 0 zombiepl 144 2349 0 2349 2 1 1 1 0 8 1 processpl 1176 1992 0 1921 6 0 6 6 0 8 0 procpl 656 4533 0 4445 9 1 8 8 0 8 0 srpgc 96 2 0 2 1 1 0 1 0 8 0 sosppl 168 8 0 8 3 3 0 1 0 8 0 sockpl 688 3258 0 3215 37 26 11 15 0 8 6 mcl64k 65536 20 0 0 3 0 3 3 0 8 0 mcl16k 16384 3 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 7 0 0 1 0 1 1 0 8 0 mcl4k 4096 113 0 0 14 0 14 14 0 8 0 mcl2k 2048 88 0 0 11 0 11 11 0 8 0 mtagpl 96 215 0 0 6 0 6 6 0 8 0 mbufpl 256 1421 0 0 88 0 88 88 0 8 0 bufpl 280 6057 0 144 423 0 423 423 0 8 0 anonpl 24 254282 0 249245 104 57 47 47 0 184 13 amapchunkpl 152 55638 0 55024 57 25 32 37 0 158 7 amappl16 200 4981 0 4922 52 40 12 15 0 8 8 amappl15 192 8 0 8 1 1 0 1 0 8 0 amappl14 184 148 0 136 1 0 1 1 0 8 0 amappl13 176 3 0 3 1 1 0 1 0 8 0 amappl12 168 2602 0 2571 4 1 3 3 0 8 0 amappl11 160 49 0 35 1 0 1 1 0 8 0 amappl10 152 7 0 6 1 0 1 1 0 8 0 amappl9 144 250 0 250 2 2 0 1 0 8 0 amappl8 136 25 0 21 1 0 1 1 0 8 0 amappl7 128 131 0 118 1 0 1 1 0 8 0 amappl6 120 204 0 201 1 0 1 1 0 8 0 amappl5 112 133 0 123 1 0 1 1 0 8 0 amappl4 104 385 0 365 1 0 1 1 0 8 0 amappl3 96 11442 0 11320 4 0 4 4 0 8 0 amappl2 88 815 0 752 2 0 2 2 0 8 0 amappl1 80 16318 0 15744 15 1 14 15 0 8 0 amappl 88 16530 0 16338 5 0 5 5 0 92 0 dma16384 16384 2 0 2 2 2 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 2 0 1 1 0 1 1 0 8 0 dma256 256 7 0 7 2 2 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 7 0 7 2 2 0 1 0 8 0 dma32 32 8 0 8 2 2 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 50 0 5 1 0 1 1 0 8 0 uaddrrnd 24 1912 0 1880 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1912 0 1880 1 0 1 1 0 8 0 vmmpekpl 168 18377 0 18337 3 0 3 3 0 8 0 vmmpepl 168 124625 0 122644 119 22 97 98 0 357 6 vmsppl 456 1911 0 1880 6 1 5 5 0 8 0 rwobjpl 64 40528 0 33908 109 2 107 107 0 8 0 pdppl 4096 3832 0 3760 116 44 72 86 0 8 0 pvpl 32 16502 0 0 135 1 134 134 0 265 0 pmappl 248 1911 0 1880 3 0 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 411 0 80 10 0 10 10 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff837f3ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 __mp_lock(ffffffff839238d0) at __mp_lock+0x1a3 intr_handler(ffff80003c581b30,ffff800000069c00) at intr_handler+0xe1 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f spllower(0) at spllower+0xb8 rw_do_enter_write(fffffd806d076c08,1) at rw_do_enter_write+0xb7 uvm_fault_lower_lookup(ffff80003c581ef8,ffff80003c581f30,ffff80003c581e70) at uvm_fault_lower_lookup+0x53 uvm_fault_lower(ffff80003c581ef8,ffff80003c581f30,ffff80003c581e70) at uvm_fault_lower+0x86 uvm_fault(fffffd806b1fbad8,251f9a39000,0,4) at uvm_fault+0x272 upageflttrap(ffff80003c582080,251f9a39ff0) at upageflttrap+0xa9 usertrap(ffff80003c582080) at usertrap+0x2d8 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x753f6d54cc90, count: -15 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806f184750,9,0) at witness_checkorder+0x1047 rw_do_enter_write(fffffd806f184738,1) at rw_do_enter_write+0xb7 rrw_enter(fffffd806f184738,1) at rrw_enter+0xc6 VOP_LOCK(fffffd805ccc4b48,2001) at VOP_LOCK+0xa6 vn_lock(fffffd805ccc4b48,2001) at vn_lock+0xa4 vfs_getcwd_common(fffffd805ccc4b48,fffffd805ccc4b48,0,0,200,0,b18256c286b4ac5f) at vfs_getcwd_common+0xd1 vn_isunder(fffffd805ccc4b48,fffffd805ccc4b48,ffff8000ffff0f90) at vn_isunder+0x56 unp_externalize(fffffd806b399100,33,0) at unp_externalize+0x286 soreceive(ffff8000014bd8c0,ffff80003b0e2318,ffff80003b0e22c8,0,ffff80003b0e2308,ffff80003b0e248c,6abd0abc54e5394b) at soreceive+0xc73 recvit(ffff8000ffff0f90,6,ffff80003b0e2460,0,ffff80003b0e2510) at recvit+0x40a sys_recvmsg(ffff8000ffff0f90,ffff80003b0e25c0,ffff80003b0e2510) at sys_recvmsg+0x1bf syscall(ffff80003b0e25c0) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8053774ec10, count: -14