last executing test programs: 5.962750107s ago: executing program 7 (id=264): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) read(r1, &(0x7f00000003c0)=""/4, 0x4) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.950933249s ago: executing program 7 (id=267): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x2, 0x0, 0x3, 0x0, 0x401}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x2, 0x0) close(r1) r2 = socket(0x2, 0x2, 0x0) bind(r2, &(0x7f0000000000), 0x10) connect$unix(r2, &(0x7f0000000000), 0x10) connect$unix(r1, &(0x7f0000000000), 0x10) r3 = socket(0x2, 0x2, 0x0) bind(r3, &(0x7f0000000000), 0x10) connect$unix(r3, &(0x7f0000000000), 0x10) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) 5.948206288s ago: executing program 7 (id=269): syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000540)="0315f1d8dec5a317a93546ba4e17eefd562df81946b1610ee8cea3f72e9b278c3453864cdb7ec53a5a977b207fc306ade7bf0222a03923469e7ea288f1f21ff144f16a20f820e559b93cbd327ed72805a8398b316337119821f8864836c88ea99377718dc002a6bc0ed465c8ffe2702c4e9eceffafb811ced7a1d93bdf3d0ec97cedd60ba1ce5226c9bf61d42cefe1624a79b4c3ceba799e443b1bc9b77a28943baba70ef8871b6d51a890e19f4c815cad00021b44c332118ff4da9528ffba66b133459388dd8100d174cf7bfc36c29b4a", 0xd1) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0xa) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xd1, 0xf, {0xfffffffffffffffe, 0x8}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000240)="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"/715, 0x2cb) r5 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_int(r5, 0xffff, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt(r4, 0x1000000000029, 0xa, &(0x7f0000000500), 0x0) ioctl$VMM_IOC_TERM(r3, 0x80045604, &(0x7f0000000180)={0x9db9}) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = open(&(0x7f00000009c0)='./bus\x00', 0x20, 0x2) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1a}, 0x4, 0x0, 0x0, &(0x7f00000001c0)='HM', 0x2) readv(r6, &(0x7f00000025c0), 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x47}, 0x2, &(0x7f0000000080)="b9d55a65edf95074454cbeef747750212b261340975c61c98fc44606f6c84c8106c596189f2824da6ce26ef22601faa932f8506c338734f736b71fe63c3db1e9d4", 0x0, 0x0, 0x0) mprotect(&(0x7f0000489000/0x3000)=nil, 0x3000, 0x1) ioctl$FIOASYNC(r1, 0x80047470, &(0x7f0000000000)=0x2) ioctl$FIOASYNC(r2, 0x80047460, &(0x7f00000000c0)=0x4) ioctl$TIOCSETAW(r2, 0x80047460, &(0x7f0000000040)={0x7, 0x8798, 0x8, 0xc, "d0ec170000000000cfffff9b0000a17d002000b1", 0xc8ba, 0xfffffffb}) 5.906744384s ago: executing program 7 (id=271): pipe(&(0x7f0000000000)={0xffffffffffffffff}) sysctl$hw(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="163a93f131bfd6303bc2fb393bd3dd9589ab74254165b1c708fe397d0deed6a7fea6d35c5bca26ce72a3abd2acd88fdfb1", 0x31) ioctl$WSDISPLAYIO_GBURNER(r0, 0x400c5752, &(0x7f0000000100)) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000001780)='./file0\x00', 0x3c, 0x160) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = kqueue() r3 = syz_open_pts() r4 = socket(0x2, 0x4001, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1005, &(0x7f0000000080)=0x1fc, 0x4) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) close(r5) ioctl$TIOCGETD(r3, 0x4004741a, &(0x7f0000000040)) kevent(r2, &(0x7f0000000100), 0x96, &(0x7f00000003c0), 0xfffb4161, 0x0) ioctl$TIOCSETA(r1, 0xcd504404, &(0x7f0000000580)={0x5, 0xa, 0x4000007, 0xf9, "ed10fd0f0000a13affffffffffff0c6002cc2600", 0x40048002, 0x20000006}) r6 = getppid() fcntl$setown(r0, 0x6, r6) write(r3, &(0x7f0000000400)="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", 0x17a) rmdir(&(0x7f00000000c0)='./file0\x00') close(r0) r7 = socket(0x20, 0x3, 0x1) pwritev(r7, &(0x7f0000000140)=[{&(0x7f0000000300)="50f3f629d33ffce5531dbd0c3b27bf1bde7a461e380400bb5a9d430837019993f8744ab9b44f0ef701d3014f02e4c595ac8a92e802f2e567e9d92482b3001a8b1137ccd40d7c46ef102cafb1b2e3ddb98d60dd40f6c49e441939727cba9469ce11f374aad6ff24b1b122840375e0caff6d3c4677f05c6bc7c3e4b24505e71858fce6365975f52399714f8ff75b0cd74611", 0x91}, {&(0x7f00000005c0)="a70c088de1a8cb6d525e6722c9ee9a7228bf03dc2b90036a2460ae602b12b4ec8db97fdc3ce5057fd39140aa96bcfd60dfd11d9b292cfd5d990977f21f9b9a2fad1e373815f732c5f68ad3c5c3763e77f2f95d7546f58cbf5262b1e5b39dd85bd79e6bf561b7cdb967eb550bcd3f4c3f0aeb17f5019653bb7f6651174a2de8fef03cdf31e9a3e590136c8980678e7d7336485c2a3cbbd4fc939fbd36c51ae465", 0xa0}], 0x2, 0xcfc7) 5.20297737s ago: executing program 4 (id=306): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) (async, rerun: 64) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async, rerun: 64) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) pread(r1, 0x0, 0x0, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) syz_emit_ethernet(0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000003410a6ef389b080600063c0306090003aaaaaaaaaabb23eae375e735e103c2aaaaaaaa3314e9e178205f1484"]) (async) r2 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r2, 0xffff, 0x1024, &(0x7f0000000240), &(0x7f00000001c0)=0xc) (async, rerun: 32) setsockopt(r2, 0x2, 0x1, &(0x7f0000000080)="c7727dd4a8d1729e9a32917c669f8db9d0fd47972d91c6db26984d47b5094a2ecdabc07f190ac3ea828b1d9f6ab77982fc17f54ca3298e3a92535c2d7322739eccea9114bdd65a3a9b97d1b416dc", 0x4e) (async, rerun: 32) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async, rerun: 64) sendto(0xffffffffffffffff, 0x0, 0x0, 0xc, &(0x7f0000000080)=@in6={0x18, 0x1, 0x0, 0x1ff}, 0xc) (rerun: 64) r4 = socket(0x800000018, 0x3, 0x0) semget$private(0x0, 0x0, 0x20) (async) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) setsockopt(r4, 0x1000000000029, 0x1b, &(0x7f0000000000)="c04a1190", 0x4) ioctl$WSKBDIO_SETMAP(r3, 0x8010570e, &(0x7f0000000000)={0x0, 0x0}) ioctl$WSKBDIO_GETBACKLIGHT(r3, 0x400c5711, &(0x7f0000000080)) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x1, 0x1, 0x1bfc00}, {0x70ae, 0xf8, 0x0, 0x7}]}) execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000100)='tap'], 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xdc, 0x19}, 0x1, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffff8, 0x9, 0x40000000000, 0xffe}) (async) r5 = socket(0x18, 0x2, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) close(r5) (async, rerun: 64) r6 = socket(0x800000018, 0x1, 0x0) (rerun: 64) bind$unix(r6, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) r7 = socket(0x800000018, 0x1, 0x0) bind$unix(r7, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 5.199153351s ago: executing program 4 (id=307): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TIOCSETA(r1, 0xc088444f, &(0x7f0000000580)={0x2ab, 0xa, 0x4000007, 0xf9, "ed10fd0f1100a13affffffffffff0c6002cc2600", 0x40048002, 0x20000006}) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) setuid(0xffffffffffffffff) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000680)="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", 0xfd}], 0x1, 0xffffffdffffff217) unveil(0x0, &(0x7f00000000c0)='W\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4, 0x0) r4 = getppid() fcntl$setown(r1, 0x6, r4) ioctl$TIOCEXCL(r3, 0x2000740d) open(&(0x7f0000000040)='./bus\x00', 0x8000, 0x1a2) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="8b11384532d7148c61d483aa9f5c731ad55c", 0x12}], 0x1) execve(0x0, 0x0, 0x0) 5.198758248s ago: executing program 4 (id=308): r0 = shmget$private(0x0, 0x4000, 0x300, &(0x7f0000ffa000/0x4000)=nil) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setregid(0x0, r3) r4 = getuid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, r6, r7, 0xffffffffffffffff, 0x0, 0x88, 0x6}, 0x6, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023}) r8 = getppid() ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188ef82cc93, r8) r9 = getpgid(0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f00000001c0)={{0x4, r1, r3, r4, r7, 0x112, 0x81}, 0x2, 0x80, r8, r9, 0x63, 0x4, 0x6}) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) r10 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$VNDIOCSET(r11, 0x80046309, &(0x7f0000000100)={0x0, 0x0, 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f) open(&(0x7f0000001780)='./file0\x00', 0x3c, 0x160) 5.095965399s ago: executing program 4 (id=312): pipe2(&(0x7f0000000000), 0x10000) 5.008219428s ago: executing program 4 (id=313): sysctl$hw(&(0x7f0000000040)={0x7, 0xf}, 0x2, &(0x7f0000000200)="a4896071", &(0x7f00000001c0)=0x4, 0x0, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0xfffffffffffffd94) r1 = syz_open_pts() ioctl$FIOGETOWN(r1, 0x4004667b, &(0x7f0000000ac0)) sysctl$kern(&(0x7f0000000140)={0x0}, 0x0, &(0x7f00000002c0)="27d7f0e4a64a36c0e98aa26beee01016c2aa58835bdb70718cd36a00bc4f626a0e8aae33a60cfa6df88bb6500e784af068c63522f224c5f408358bdf40866cb3a0ae816840e468a0b2c3c2bc0b6b4818d5cdd6d41e74eb7efb23c5ad06392e72d4effd79adfb5385e1f813964727d1937b044cfc7613dd21f328549932b3d51f328a076997c09992ece71ebf2c", &(0x7f0000000180)=0x8d, &(0x7f0000000380)="063e85215503b94b94e5a354a2d152d880c0d5626d7da9", 0x17) sysctl$hw(&(0x7f0000000000)={0x6, 0x9}, 0x2, &(0x7f0000000080)="7466dc8b6f3b3e362f4e5c76956309d113b2de33a7136461fd66cbfdb32186d434b6d49af616693abfb920690d9a3b36674a36dda604000000d51b87c1ad34ed7b817df7951a07936c8c6cde3ff79e3852aa6ab2b3a20e9d78f68adc448940bfbd19e925b8c7", &(0x7f0000000100)=0x66, &(0x7f0000000240)="3489a810a4d028a8379fcad3460a908d7cbb7a32f69e6678b521680350f040fc07b02fd3a68b9fd5afb3b9f63a17c96d6be279fd62c066fb4e93f27d0e976c4742f1cf1cf976c82898be172dd2db1974550c4bf575e77762f42f8a6d20195f832cdd", 0x62) write(r1, &(0x7f00000003c0)="2593ff394c62453e88f23a78155302b3155ea45726ca9172e4c79fe93aae3b2a9e20d43d0b6a5a88d55f66cfada254529f1aed6f41771fbed570", 0x3a) 2.396274827s ago: executing program 5 (id=412): r0 = socket(0x2, 0x1, 0x0) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x3, 0x0, {[0xfffffbeffffffffb, 0x0, 0x4787, 0x1002, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x0, 0xffffffffffffffa8, 0x400082, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x2, 0xffff, 0x7b98, 0x6, 0x0, 0xfffffffffffffffe, 0x2], [0x5ad8, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffa], [0x2000000100, 0x20000000000, 0xfffffffffffffffc, 0x8000000100000000, 0xfffffffffffffffe, 0x3], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5, 0x10}, {0x0, 0x0, 0xfffffffe, 0x81}, {0x3, 0xe13, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2006, 0x40000, 0x2000000000000000}, {0x6b7, 0x0, 0x1}, {0x8, 0x200, 0x0, 0x8}], {0x2, 0x6, 0x8}, {0x21, 0x6, 0x100000b0}}}) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x4, [{0x2, 0x800}, {}, {0x0, 0x7fff}, {}, {}, {0x0, 0x9}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x6}, {0x3}, {}, {}, {0x0, 0x5}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {}, {}, {0x0, 0x9}, {0x3, 0x2}, {}, {0x3, 0x800}, {}, {0x3}, {0x3}, {}, {0x2, 0x8001}, {0x0, 0x4}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) r1 = fcntl$dupfd(r0, 0xa, r0) ioctl$BIOCGDIRFILT(r1, 0x4004427c, &(0x7f0000000340)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = dup(r0) mknodat(r2, &(0x7f0000000000)='./file0\x00', 0x1000, 0x80000001) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f0000000000), 0x29f, 0x0, 0x8001, 0x0) 2.299830198s ago: executing program 5 (id=415): r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) bind$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setgid(r3) (async) lchown(&(0x7f0000000140)='./file0\x00', r2, r3) r4 = socket(0x6, 0x1, 0x9) lchown(&(0x7f0000000180)='./file0\x00', r2, r3) r5 = getgid() setgroups(0x7, &(0x7f00000001c0)=[r5, r3, r5, r3, r3, r3, r3]) getuid() (async) r6 = shmget(0x1, 0x1000, 0xa0, &(0x7f0000fff000/0x1000)=nil) (async) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0}, 0xc) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) shmctl$IPC_SET(r6, 0x1, &(0x7f00000002c0)={{0x59, r7, r9, r2, r3, 0xc0, 0xf}, 0x3, 0x5, r1, 0x0, 0x4, 0x7fff, 0x4}) accept(r4, &(0x7f0000000340)=@un=@file={0x0, ""/57}, &(0x7f0000000380)=0x3b) (async) setgid(r5) setrlimit(0x5, &(0x7f00000003c0)={0xb800000000000000, 0x3}) (async) r10 = semget(0x3, 0x1, 0x400) semctl$GETALL(r10, 0x0, 0x6, &(0x7f0000000400)=""/34) (async) semctl$GETZCNT(r10, 0x0, 0x7, &(0x7f0000000440)=""/6) (async) r11 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$SPKRTUNE(r11, 0x20005302, &(0x7f00000004c0)={0x2a, 0x1}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000500)={0x0, 0x23, {[0x6, 0x800000000000, 0x8, 0xb, 0x4, 0xb3e, 0x5, 0x5be68000000000, 0x3, 0x1, 0xfffffffffffffa8f, 0x0, 0x4f235078, 0x5, 0x0, 0x4, 0x0, 0xd15], [0x8000000000000001, 0x81, 0x1, 0x7ff, 0x1, 0x8001, 0x4b9338fd, 0x1, 0x6], [0x7ff, 0xe, 0x1, 0x0, 0x2, 0x6, 0xc9c9], [0x9bc, 0xfff, 0xffffffffffffffff, 0x9293d8c, 0xf670, 0x8], [{0xa, 0x4, 0x8000, 0x8000000000000000}, {0x9, 0x7, 0x8, 0x1}, {0x5b, 0x3ff, 0x5, 0x2}, {0xfffc, 0xd79, 0x80000000, 0xc170}, {0xa, 0x9, 0x4}, {0x7fff, 0x9, 0xdf56, 0x1}, {0x3, 0x5, 0xb, 0xf}, {0x5, 0x80000000, 0x0, 0x80000001}], {0xe8, 0x7ff, 0x9, 0x3}, {0x81, 0x3, 0x8d, 0x81}}}) r12 = geteuid() setreuid(r2, r12) (async) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0xc) semctl$IPC_SET(r10, 0x0, 0x1, &(0x7f0000000780)={{0x6, 0xffffffffffffffff, r13, r8, r3, 0x111, 0x8}, 0x7, 0x7f, 0xf}) (async) r14 = syz_open_pts() ioctl$TIOCSETD(r14, 0x8004741b, &(0x7f0000000800)=0x4) (async) getrlimit(0x4, &(0x7f0000000840)) 2.298248711s ago: executing program 5 (id=417): r0 = socket(0x18, 0x2, 0x0) clock_getres(0x4, 0xffffffffffffffff) r1 = kqueue() r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) kevent(r1, &(0x7f0000000140)=[{{r0}, 0xfffffffffffffffd, 0x40, 0x4, 0x7fffffff, 0x1}, {{r2}, 0xfffffffffffffffc, 0x5bae2f631bb3048b, 0x2, 0x3, 0xb}, {{r0}, 0x5, 0x48, 0x40, 0x2f, 0xfffffffffffffffc}, {{r0}, 0xffffffffffffffff, 0x190, 0x10, 0x7, 0x7}], 0x1, &(0x7f00000002c0)=[{{r0}, 0xfffffffffffffffb, 0x80, 0x40000000, 0x3196, 0x6}, {{r0}, 0xfffffffffffffff8, 0x10, 0xf0000000, 0x2, 0x58d}, {{r0}, 0xfffffffffffffffe, 0x14, 0x1, 0xb, 0x8}, {{r0}, 0xfffffffffffffffe, 0x83, 0x20000000, 0x9, 0x25}], 0xfffffffd, &(0x7f0000000240)={0x7, 0x7}) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000040)=""/167, 0xa7}], 0x2) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x10000, 0x0) ioctl$TIOCSETA(r4, 0xcd504406, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x5, "97a2224faf891c15ebb178926cc9795a6b47c1d1", 0x2}) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f00000001c0)="03000000", 0x4) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000400), 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000340)) 2.297875747s ago: executing program 5 (id=418): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) (async) setregid(0x0, 0xffffffffffffffff) (async) r2 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_STAT(r2, 0x2, 0xfffffffffffffffe) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x8, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) (async, rerun: 32) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) (rerun: 32) ioctl$WSKBDIO_GETMAP(r6, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r7 = fcntl$getown(r6, 0x5) (async) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r8, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) (async, rerun: 64) setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f0000000540), 0x0) (async, rerun: 64) ktrace(0x0, 0x1, 0x192c, r7) (async) r9 = getpgrp() (async) r10 = shmget$private(0x0, 0x3000, 0x758, &(0x7f0000ffb000/0x3000)=nil) ioctl$VNDIOCSET(r6, 0xc0384600, &(0x7f0000000340)={&(0x7f0000000200)='./file0\x00', 0xffff, &(0x7f0000000300)='./file0\x00', 0x8}) (async) shmctl$IPC_SET(r10, 0x1, &(0x7f0000000280)={{0x16c0, r3, r4, r5, 0x0, 0x18, 0x101}, 0x7, 0x4, r7, r9, 0x9, 0x2000000000000000, 0x4}) setuid(r3) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x5, 0x39, 0x3, 0x1}, {0x3c, 0xa, 0x83, 0x3}, {0x1, 0x5d, 0xde, 0x8004}, {0x1006, 0x8, 0x4, 0x11}]}) (async, rerun: 64) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) (rerun: 64) 2.173895734s ago: executing program 5 (id=421): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() read(r1, &(0x7f0000000140)=""/134, 0x86) setsockopt(0xffffffffffffffff, 0x8, 0xf, &(0x7f00000000c0)="6b1458fba1349b5dbd01267b5b4ae9fff5ad5009ca824ef6d2087944fab7ae616b81048cf2ea9e2c657a827d3822e6213504", 0x32) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0xbfffffff, 0x6, 0x0, 0xffffd6c8, "e435b3ff00000030c300046291bf9400", 0x543, 0x2}) select(0x40, &(0x7f0000000080)={0xc5, 0x5, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) r3 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x4, &(0x7f0000000200)="00fb534f", 0x4) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r3, 0x0, 0x0) 1.926865003s ago: executing program 1 (id=430): r0 = socket(0x18, 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000002}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x3, 0x0) r2 = getuid() chown(&(0x7f0000000040)='./file0\x00', r2, 0xffffffffffffffff) r3 = getgid() getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r5 = socket(0x2, 0x3, 0x0) close(r5) getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x200007, 0x80000000}) r7 = socket(0x18, 0x2, 0x0) close(r7) fchdir(r7) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)={{0x80, r2, r3, r4, r6, 0x122, 0x3}, 0x5, 0x100, 0x8000}) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) close(r0) socket(0x24, 0x2, 0x0) setsockopt(r0, 0x6, 0x42, &(0x7f00000001c0)="c11c2aea", 0x4) fchflags(r5, 0x0) 1.923285648s ago: executing program 1 (id=432): execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r0 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004806003400640003069d9078ffffffffffff7fff070b1eac1400aa7f000001000e009078000b0008000003fc0000000400000009"]) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = socket(0x18, 0x2, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) rename(&(0x7f00000003c0)='./file0/file0/..\x00', 0x0) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000340)={0x0, 0x0}) ioctl$TIOCSETA(r3, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x205, "210d000000020000000000000000004021800600", 0x2000000, 0x4}) ioctl$FIONREAD(r2, 0x81406944, &(0x7f00000001c0)) r4 = openat$klog(0xffffffffffffff9c, &(0x7f0000000140), 0x8, 0x0) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000029, 0xd, 0x0, 0x0) r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = socket(0x18, 0xc003, 0x3a) setsockopt(r7, 0x29, 0x6c, 0x0, 0x0) kevent(r3, &(0x7f0000000400)=[{{r4}, 0xfffffffffffffffd, 0x0, 0x1, 0x9, 0x6}, {{r2}, 0xfffffffffffffffe, 0x10, 0x2, 0x5c7b17e, 0x2}, {{r6}, 0xfffffffffffffff8, 0x0, 0x800000d0, 0x1ff, 0x1}, {{r2}, 0xfffffffffffffffe, 0x0, 0x2, 0xb7c1, 0x6}, {{r0}, 0xffffffffffffffff, 0x0, 0x80, 0x6, 0x154}, {{r1}, 0xfffffffffffffffc, 0x4, 0x4, 0x4}, {{r3}, 0xfffffffffffffffc, 0x10, 0x4, 0x8, 0x9}], 0x4, &(0x7f0000000500)=[{{r1}, 0xfffffffffffffffc, 0x34, 0x1, 0xd, 0x1}, {{r7}, 0xfffffffffffffffd, 0x14, 0x20, 0x9, 0xffff}, {{r0}, 0xfffffffffffffffc, 0x4, 0x2, 0x0, 0x8000000000000001}, {{r2}, 0xfffffffffffffffc, 0x10, 0x40, 0x5, 0xb}], 0x7, &(0x7f0000000380)={0x80000001, 0x7}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x56}) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) readv(r8, &(0x7f0000000700)=[{0x0}, {&(0x7f00000006c0)=""/4, 0x4}], 0x2) r9 = syz_open_pts() close(r9) syz_open_pts() ioctl$TIOCSETD(r9, 0x8004741b, &(0x7f0000000000)=0x8) writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000040)="cff5c05664da486cda974a82388ef359025250129bdb3b8c172b8359eb32d47209b2a02c3b553a10352e3b0b2e4247b103", 0x31}], 0x1) preadv(r8, &(0x7f0000000200)=[{&(0x7f0000000080)=""/47, 0x2f}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000240)=""/90, 0x5a}], 0x3, 0x83) 798.5941ms ago: executing program 2 (id=434): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async) ioctl$WSKBDIO_GETMAP(r0, 0xc010570d, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x5, 0x2c, 0x3, 0x5, 0x5}, {0x2, 0x80, 0x1, 0x6, 0x9}]}) (async, rerun: 32) getrusage(0x1, &(0x7f0000000000)) (async, rerun: 32) acct(&(0x7f00000000c0)='./file0\x00') 771.491874ms ago: executing program 2 (id=438): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = socket(0x18, 0x2, 0x0) close(r1) (async) socket(0x18, 0x1, 0x0) (async) setsockopt$sock_timeval(r1, 0xffff, 0x1005, &(0x7f0000000100)={0xfffffffffffffff2, 0xfdfffffffffffff8}, 0x10) (async) setsockopt(r1, 0x6, 0x4, &(0x7f0000000040)="03000000", 0x4) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) (async) ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r3, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000440)={0x0, 0x1, 0x400000000000, 0x300000006}) (async) sysctl$net_inet_icmp(&(0x7f0000001380)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f0000000000), 0x0, 0x0, 0x0) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async, rerun: 64) r4 = socket(0x18, 0x1, 0x0) (rerun: 64) setsockopt(r4, 0x1000000029, 0x2a, &(0x7f0000000000), 0x0) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000080)) ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000000)=0x4e2) 770.361111ms ago: executing program 2 (id=440): mknod(&(0x7f0000000040)='./bus\x00', 0x10, 0x1609) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 755.041179ms ago: executing program 1 (id=441): execve(0x0, &(0x7f00000003c0)=[0x0, &(0x7f0000000340)='/dev/rvnd0c\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='[%/\x00']) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f0000000340)='./file1\x00', 0x200, 0x33) (async) r0 = open(&(0x7f0000000340)='./file1\x00', 0x200, 0x33) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket(0x20, 0x4000, 0xfd) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIONREAD(r1, 0x40047309, &(0x7f00000001c0)) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000080)={&(0x7f0000000000)='./file1\x00', 0x4, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xf9}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) ioctl$FIONREAD(r3, 0xc020691b, &(0x7f0000000100)) (async) ioctl$FIONREAD(r3, 0xc020691b, &(0x7f0000000100)) 749.990729ms ago: executing program 2 (id=442): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x5) ioctl$FIOASYNC(r0, 0xc00c7007, &(0x7f00000000c0)) 716.748865ms ago: executing program 1 (id=444): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) fcntl$lock(r0, 0x9, &(0x7f00000003c0)={0x1, 0x0, 0x7fffffffffffffff, 0x1ffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x3, 0x1, 0x2, 0xb}) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x1003) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021", 0x8a, 0x8, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000180)="b101050460000000000000000041", 0xe, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0xfd, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x17f, 0x0, 0x0, 0xbc2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x86) 716.196359ms ago: executing program 5 (id=445): mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x1000507) open(&(0x7f0000000040)='./bus\x00', 0x4, 0x2c) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0xc}, 0x4, 0x0, 0x0, 0x0, 0x0) lchown(0x0, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000007}, {0x28, 0x6, 0x81, 0x4006}, {0x6, 0x9, 0x3, 0xfffffff4}]}) sysctl$hw(0x0, 0x0, &(0x7f0000000340)="47ff000800000000000000000f000000000000003c", &(0x7f0000000000)=0x15, 0x0, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) syz_open_pts() r2 = syz_open_pts() socket(0x2, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCIMMEDIATE(r3, 0x80044270, &(0x7f0000000300)=0xd467) syz_emit_ethernet(0x32, &(0x7f0000000200)=ANY=[]) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x7, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0x2, 0xf9, 0x3, 0x22, 0x102, 0x80, 0x4, 0x2}, 0x0, 0x0, 0x0) r4 = socket(0x18, 0x2, 0x0) sendmsg(r4, &(0x7f0000000400)={&(0x7f0000000040)=@in6={0x18, 0x0, 0x200, 0xa}, 0xc, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x20}, 0x0) getrlimit(0x3, &(0x7f00000003c0)) read(r2, &(0x7f0000000140)=""/134, 0x86) select(0x40, &(0x7f0000000480)={0xf, 0x1, 0x1, 0x2, 0x10001, 0x1000000e, 0x5, 0x7}, &(0x7f00000004c0)={0x2620, 0x0, 0x6, 0x80000001, 0x5, 0xdb, 0xff}, &(0x7f0000000500)={0x8, 0xd, 0x0, 0x2, 0xc20b, 0x9, 0x1000, 0x7}, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x59}, 0x2, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0x1, 0x6, 0x80, 0x6, 0x7, 0xdf60, 0xffffffffffffffff, 0x9, 0x6, 0x93, 0xfffffffffffffff9, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0xfffffffffffffffe, 0x404000000100], [0x5, 0x80000001, 0xffffff7ffffffff6, 0x20200001, 0x5e, 0x100000000007b94, 0x800, 0x9, 0xfffffffffffffffc, 0x1], [0x1, 0x8000, 0x40000000, 0xfffffffffffffffd, 0xb, 0x11000, 0xfbffffff00000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0xfffffffffffffffe, 0x90000000], [{0x0, 0x3, 0x0, 0x7d08}, {0x9, 0x22, 0x5, 0x20007fff}, {0x2, 0x0, 0xfffefffe, 0x27c}, {0x5, 0x4, 0x5, 0xff7fffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x5, 0x0, 0x5, 0xb}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x8, 0x80800006, 0x3}, {0xfffe, 0xfffffffb, 0x6d5, 0x6}}}) 715.69142ms ago: executing program 2 (id=446): sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98", 0xe0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', 0x7, &(0x7f0000000080)='./file0\x00', 0x8}) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x80, 0x190) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x100, 0x1) (async) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/62, 0x3e}, {&(0x7f0000000340)=""/166, 0xa6}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/113, 0x71}], 0x4) (async) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000500), 0x20000, 0x0) (async, rerun: 64) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000a80), 0x20, 0x0) (rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000ac0), &(0x7f0000000b00)=0xc) sysctl$kern(&(0x7f0000000180)={0x1, 0x39}, 0x2, &(0x7f00000001c0)="53d94cfdbba0f5afcd80432d295c63c8dafa27f6ac4cfeec09c672484b515cce778cb25fcdc2b4d1d4ca72ad5cd04dbf3794356f92f516427755bdd3157d5574f53e26e1bdcbe68012b994daee560e2a2c00b7c396b03e5284e8ac0c51eada10d0b206df193f5249c51a3486ce8463f7e1276666505099c9c5644ac86fd1462fcbd80929e1dd92f9758019bee2297dbc8e397bad32d96e1d", &(0x7f0000000280)=0x98, &(0x7f0000000740)="5c621b7cb03de03289cfa2753fc8223a74779c44223a65a755d97b958b0a5d28695c47ea08e137b43dc56a8aafb262204afb419e7932aeda0dc3eefc89be979399c3f63b8e35880aabf2c7a9558b591cb6e7591da83cefe2cf2694fcdfb3ea4f08227cfdca2a1c5b0cd998b9772594816aa239876feeedd3eb9d5b0a6477de6c75b698815fbaa23ba0a89a6b4857aa914e17f249bea57d5eeb26327da235990066c014c0e44635e1ba307881cccbb9887f8919a14243323e28c1d20db66168ec3ee97c7b6c353cb7fb7826ffe71041c9b79df01fff9eafc5464786133fcaa0d03593de2e7cf8811f0f7a59a76bea0794a3e3c8d06a8d0d5fc23e08", 0xfb) (async, rerun: 64) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000b40), 0xc) (rerun: 64) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x7f, 0xb, 0x5}, {0x54, 0x9, 0x4, 0xf}, {0x6, 0x7e, 0xbe, 0xffffff7f}]}) (async) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000580)={&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000540)='./file0\x00', 0x8}) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r2, &(0x7f0000000600)="d81ad30100060000000100000000", 0xe) (async) ioctl$TIOCSETA(r0, 0xc4504442, &(0x7f0000000000)={0x32, 0x6c6deb0d, 0x6, 0x4000, "97a2224ff1c14a06ebb178926cc9795a6b47c191", 0x1, 0xfffff7fe}) 620.48792ms ago: executing program 1 (id=452): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x2, 0x101) (async) r1 = getppid() wait4(r1, 0x0, 0x1, 0x0) (async) r2 = socket(0x18, 0x3, 0x3a) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000007}, {0x2c, 0xc, 0xd5, 0x4006}, {0x6, 0x9, 0x1, 0xfffffff2}]}) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="a99609ac3acc87fe", 0x8}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000080)="50041b02954c19322811880c53c2e0003e8074473c8a808703000000", &(0x7f0000000000)=0x1c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) (async) getsockopt(r2, 0x29, 0x1a, 0x0, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) 616.288583ms ago: executing program 2 (id=454): r0 = socket(0x2, 0x2, 0x0) (async) r1 = socket(0x2, 0x400000000002, 0x0) setsockopt(r1, 0x0, 0x7, &(0x7f0000000080)='?\x00\x00\x00', 0x4) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) setuid(0xee01) r3 = msgget$private(0x0, 0x460) msgctl$IPC_STAT(r3, 0x2, 0x0) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x1, 0x7f, 0x40000007}, {0x7e, 0xc, 0xd5, 0x20004006}, {0x6, 0x9, 0x1, 0xfffffff2}]}) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="a99609ac3acc87fead921464aa171c4fad74a025125b917189b503f63e1f2b6e7c64b1ff", 0x24}], 0x1) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async) write(r2, &(0x7f0000000600)="d81ad30100060000000100000000", 0xe) (async) r4 = dup2(r1, r0) (async) select(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0x90, 0xdc4, 0x564, 0x9cea, 0x0, 0x8000000000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000100)=ANY=[@ANYBLOB="ff02"]) bind(r0, &(0x7f0000000000), 0x10) r5 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) (async) connect$unix(r5, &(0x7f0000000000), 0x10) (async) setsockopt$sock_timeval(r4, 0xffff, 0x1005, &(0x7f0000000040)={0x800, 0xfffffffffffffff8}, 0x10) (async) write(r5, 0x0, 0x0) (async) unlink(&(0x7f0000000000)='./file0\x00') 615.781227ms ago: executing program 1 (id=455): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) sendmsg$unix(r2, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0xe) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80) ftruncate(r3, 0x40002) pwrite(r3, &(0x7f0000000100)="93d4", 0xfffffeca, 0x5) 332.663265ms ago: executing program 0 (id=469): chdir(0x0) (async) r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) (async, rerun: 64) r1 = kqueue() (rerun: 64) kevent(r1, &(0x7f0000000200)=[{{r0}, 0xfffffffffffffffe, 0x29, 0x80, 0x2, 0xc}, {{r0}, 0xfffffffffffffffe, 0x10a, 0x10, 0x4, 0x8000000000000000}], 0x8, 0x0, 0x15, 0x0) sysctl$hw(&(0x7f0000000140)={0x6, 0x6}, 0x2, &(0x7f0000000080)="9c260bd2", &(0x7f0000000240)=0x4, 0x0, 0x0) 232.800975ms ago: executing program 0 (id=471): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') (async) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0xbc) (async) unveil(&(0x7f0000000000)='./file0/file0/../file0/file0\x00', &(0x7f0000000100)='r\x00') (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$hw(&(0x7f0000000280)={0x6, 0x1c}, 0x2, &(0x7f00000002c0)="f29288", &(0x7f0000000380)=0x3, &(0x7f00000003c0), 0x0) (async) unveil(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f00000000c0)='r\x00') (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x14) (async) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) (async) chroot(&(0x7f0000000080)='./file0/file0\x00') rename(&(0x7f00000002c0)='./file0/file0/..\x00', &(0x7f0000000040)='./file0\x00') (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000200), 0x1, 0x0) (async) syz_emit_ethernet(0x81, &(0x7f0000000040)={@random="415fd77e1c92", @broadcast, [], {@ipv4={0x800, {{0xf, 0x4, 0x1, 0x25, 0x73, 0x64, 0x0, 0x4, 0x11, 0x0, @empty, @loopback, {[@lsrr={0x83, 0x17, 0x94, [@empty, @loopback, @rand_addr, @rand_addr=0x9, @multicast1]}, @ra={0x94, 0x6, 0x400}, @generic={0x7, 0x8, "1f3d447c391d"}, @noop, @noop, @noop]}}, @tcp={{0x0, 0x1, r1, r1, 0x0, 0x0, 0x9, 0x10, 0x200, 0x0, 0x7fff, {[@eol, @sack={0x5, 0x6, [0x1]}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @eol, @sack_perm={0x4, 0x2}]}}, {"213495c78f94eaecc306019dfde53ce0a0808f"}}}}}}) 232.298283ms ago: executing program 0 (id=473): open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000e80)=""/4091, 0xffaa) 222.828172ms ago: executing program 6 (id=475): r0 = socket(0x1e, 0x3, 0x0) write(r0, 0x0, 0x0) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x22}, 0x3, 0x0, 0x0, 0x0, 0x0) ktrace(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x2000, 0x0) r1 = open(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x4ebfac6bbaf78d0) writev(r1, &(0x7f00000004c0)=[{&(0x7f00000007c0)="7f4549b70cb7a21de87373791810aaa95d576a0ac7fca22709002987b881794ffa08bb11bafcdc202a2940aaae682605080088be73fd6c631e055d0000000000", 0x40}], 0x1) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x8e, 0x7f, 0x40000007}, {0x2c, 0xc, 0xd5, 0x4006}, {0x6, 0x9, 0x1, 0xfffffff2}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) sysctl$hw(0x0, 0x3ffffffffffffe80, &(0x7f0000000240)="50041b02003e80000000000000939ff45419a7022d00000000003c7c9a933366b304db9d5fea00000000000000", &(0x7f0000000000)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) sysctl$hw(&(0x7f00000000c0)={0x6, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x18, 0x3, 0x3a) getsockopt$sock_int(r3, 0xffff, 0x1004, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x200000a, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0xffff65d5, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x1ff, 0x3, 0x14, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x3, 0x803, 0x7, 0xa}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x6, 0x4}, {0x1, 0x10001, 0xc, 0x6}, {0x8, 0x9, 0x8, 0x2}, {0xb98, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000001}, {0x0, 0x20000001, 0xfff, 0x9}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$VNDIOCSET(r5, 0x80184405, &(0x7f00000001c0)={0x0, 0x0, 0x0}) write(r2, &(0x7f0000000600)="d81ad30100060000000100000000", 0xe) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 194.011569ms ago: executing program 0 (id=476): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0xf7, 0xff, 0x7}, {0x28, 0x7, 0xfd, 0x10001}, {0x6, 0x80, 0x9, 0xfffffffe}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x22, &(0x7f0000000100)=ANY=[]) r2 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1003, 0x0, 0x0) 184.189198ms ago: executing program 3 (id=477): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r0, 0x8020699f, &(0x7f00000001c0)) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0x81206919, &(0x7f0000000100)) shutdown(r1, 0x1) setitimer(0x1, &(0x7f0000000140)={{0x6, 0x400026d}, {0x6, 0xffffffff}}, 0x0) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="ebffff132f", 0x5) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x3, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) r4 = dup(r3) setsockopt$inet_opts(r4, 0x0, 0x15, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) r5 = dup(r4) setsockopt$inet_opts(r5, 0x0, 0x16, &(0x7f0000000080)="fd0cc085", 0x4) sendmsg$unix(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) getitimer(0x1, &(0x7f0000000000)) 182.761818ms ago: executing program 0 (id=478): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) (async) getgroups(0x3, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff]) fchown(r0, r2, r6) (async) setreuid(r2, r2) (async) setgroups(0x6, &(0x7f0000000100)=[r3, r3, r5, r5, r4, r3]) fcntl$setflags(r0, 0x2, 0x1) r7 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$WSKBDIO_GETDEFAULTBELL(r7, 0x40105706, &(0x7f0000000180)) (async) r8 = semget(0x0, 0x3, 0x80) getsockopt$SO_PEERCRED(r7, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xc) semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000000200)={{0x8, r2, r10, r2, 0xffffffffffffffff, 0xc0, 0xd3c3}, 0x2, 0x8, 0x9}) (async) sysctl$net_mpls(&(0x7f0000000280)={0x4, 0x21, 0x3}, 0x3, &(0x7f00000002c0)="0a7fc48db0b2057e95e7dfed3b67f51a947df4cd2c79a83ac08e964dd682afc74a9cf105483157f422767d993b8220ba0e7779b38a4dc735ff73f340d0391f014473cf5008f81e6187ed456bb087a1cc0dfd88253891294035a40c350d6eafe3a8fcd46df487be863fa2b9718699e75260928b7049fe2ab04817e9b8a3633b60e8a7b05a61306b310ec6f62934ac4656d08dcf139c9efb66c51f5bb95dd6f971dc4b3fa1e3a927b2618556e121c30f0941a66368a1a635cb259de3d16fd44a", &(0x7f0000000380)=0xbf, &(0x7f00000003c0)="e82f6960c9398a9ba698e26372bbf43671386506a9f5d7ae21c391e042ee2b38fcc0e89b8d7f641c82bf447d8b219fba677a4ff0d86fecc02056e5e6a93d5d384f7c9637cc56e9bbfcdc7a827494e81aae57f672d2f4ab48c90cdb08f27573525d670814573d1e379f1dcfff2f4857f1f134630eae17b026e077d8eeb2d5d48fd8c2f800c10bd79aa8d1757ba69f1a8594bb15c085a4007652c078f1024936b4b6e2c6c4a528e1c30416761c169e950df5641f3570dbc79cf9c1fdd0bc7e8b0cc3df84d07cf476566c49256468136ab562687cb7789b8196f57a0456d89775b82a369d74d9b1b6d8eed5cf02", 0xec) (async) r11 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000004c0), 0x20, 0x0) fcntl$setown(r11, 0x6, r1) (async) recvfrom$inet(r11, &(0x7f0000000500)=""/99, 0x63, 0x801, &(0x7f0000000580)={0x2, 0x0}, 0xc) (async) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000600)={0x8, &(0x7f00000005c0)=[{0x3, 0x7, 0x2, 0x4}, {0x89, 0x9, 0x8, 0x8001}, {0x7, 0x3, 0xfd, 0x9}, {0x2, 0xf7}, {0x7, 0xda, 0x1, 0x7}, {0xe, 0x2f, 0x8, 0x3c}, {0xa43, 0x5, 0x1, 0x9}, {0x8000, 0xff, 0x10, 0x401}]}) recvfrom$inet(r7, &(0x7f0000000640)=""/39, 0x27, 0x1, 0x0, 0x0) (async) getgid() (async) ioctl$VNDIOCSET(r11, 0xc0384600, &(0x7f0000000700)={&(0x7f0000000680)='./file0\x00', 0x4, &(0x7f00000006c0)='./file0\x00', 0x8}) (async) listen(r7, 0x5) (async) ioctl$BIOCGFILDROP(r7, 0x40044278, &(0x7f0000000740)) (async) ioctl$VNDIOCGET(r11, 0xc4104603, &(0x7f0000000780)={'./file0\x00', 0x4, 0x4, 0xffff}) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r11, 0x800c5709, &(0x7f0000000bc0)={0x8, 0x8, 0x6}) semctl$IPC_RMID(r8, 0x0, 0x0) (async) getgroups(0x4, &(0x7f0000000c00)=[r6, r6, r4, r4]) setregid(r10, r13) ioctl$BIOCGRTIMEOUT(r7, 0x4010426e, &(0x7f0000000c40)) (async) r14 = msgget$private(0x0, 0x40) msgctl$IPC_SET(r14, 0x1, &(0x7f0000000c80)={{0xac3, r2, r4, r2, r12, 0x40, 0x1ff}, 0x70f, 0x5, r9, r9, 0x4, 0x7, 0x6fcb, 0x3}) 182.501129ms ago: executing program 6 (id=479): mkdir(&(0x7f0000000380)='./file0\x00', 0x2bbdc8e5db237ea2) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x800, 0x800f, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x9}, {0x1000006, 0x0, 0x14, 0x5910}, {0x2000002, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1cc, 0x800, 0x8, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x6}, {0x1100c, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x5, 0x2a2, 0xffffffffffffffff, 0x0, 0x8000000000000003, 0x80000000000000c, 0x100000001, 0x40}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r2, 0x800c745b, &(0x7f0000000080)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffe53) open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x80) mknod(&(0x7f0000000300)='./file0/file0\x00', 0x100, 0x2802) 122.755107ms ago: executing program 0 (id=480): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pwritev(r2, 0x0, 0x0, 0x40080000000) (async) write(r2, &(0x7f0000000080)="225840c727021b06d4f48d71c9a5f1a1122fa517347f1679a8a88a60580c52831b3b9bd097c099b2e913c15112a388d3e72f4745f73f781ba16e04a6ad446bb642a93df112c94acf40a258b2a17362290914e87e33", 0x55) (async) writev(r2, &(0x7f0000000100)=[{0x0}], 0x1) (async) unveil(0x0, &(0x7f0000000000)='r\x00') write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) r3 = socket(0x11, 0x3, 0x0) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x7f}, {0x4, 0x7fe, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x800, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x0, 0xfff, 0x30004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) (async) ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000018c0)=""/4100, 0x1004}], 0x1, 0xffffffffffffffff) (async) sendto$unix(r3, &(0x7f0000000340)="b10005010000009f05003f0107000000211c13fecea79c5dfaf66e8d0300000000000000fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc25769a51f139b672f335c22db830c032bfa896443c32618210000720fd38bdb0000fd54c125191b1257aea8c500001602fbfe0c2300008abf090000000008e37193f834371205050052fbe03f49b11b7aaeb70000fca65361ba84913f0100000000000006000000", 0xb1, 0x408, 0x0, 0x0) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r5, &(0x7f0000000280)=[{&(0x7f0000001040)="ac", 0x1}], 0x4c) write(r5, &(0x7f0000000080)="c30516845e", 0xff55) (async) ioctl$FIOASYNC(0xffffffffffffff9c, 0x8004667d, &(0x7f0000000180)=0x5) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0x68, &(0x7f0000000140)={{0x18, 0x0, 0x8, 0xffffff01}, {0x18, 0x0, 0x1, 0x4}, 0x8, [0x6, 0x8, 0x1, 0x1000, 0x9, 0x9, 0xfffffffe, 0x401]}, 0x3c) close(r6) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 122.419358ms ago: executing program 6 (id=481): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20423, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x84, 0x2d, 0x7, 0x208}, {0x8050, 0xf, 0x5a, 0x9}, {0x16, 0x80, 0x6}]}) mknod(0x0, 0x2000, 0x1700) r2 = socket$unix(0x1, 0x5, 0x0) getsockopt(r2, 0x29, 0x25, 0x0, 0x0) r3 = open(0x0, 0x0, 0x84) ioctl$VNDIOCSET(r3, 0x8010426d, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) socket$inet6(0x18, 0x5, 0x9) kevent(r3, &(0x7f0000000200), 0x63fe5090, &(0x7f0000000240), 0x9, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, 0x0) ioctl$BIOCGRSIG(r0, 0x40044273, &(0x7f0000000040)) sysctl$net_inet_icmp(&(0x7f0000001380)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f0000000140), 0x0, 0x0, 0x0) 121.574698ms ago: executing program 3 (id=482): setgid(0xffffffffffffffff) setgroups(0x0, 0x0) (async) setuid(0xffffffffffffffff) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r3, 0x0, r2}}) r4 = socket(0x24, 0x2, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x2400, './file0\x00'}, 0x40) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) 120.676819ms ago: executing program 3 (id=483): r0 = geteuid() r1 = getgid() chown(&(0x7f0000000000)='./file0\x00', r0, r1) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc) fchown(0xffffffffffffffff, 0x0, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x1, 0x200023}) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000001c0), &(0x7f0000000200)=0xc) getgroups(0x5, &(0x7f0000000180)=[r2, r5, r6, r1, r1]) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '`b`', 0x10, 0x0, 0x1, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x3c, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @generic={0x0, 0x3, "126e0f"}]}]}}}}}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94100e4ac63c90dddc11f11cad5cc4", &(0x7f0000000080)=0x2, 0x0, 0x37) lchown(&(0x7f0000000040)='./file0\x00', r0, r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) dup2(r4, r3) setrlimit(0x8, &(0x7f0000000980)={0x46, 0x56}) open(0x0, 0x205, 0x0) getppid() 83.923373ms ago: executing program 6 (id=484): select(0x40, &(0x7f0000000000)={0x95, 0x4, 0x3, 0x1000000000000b, 0xb, 0xfc1, 0x4000000000200, 0xffffffffffffffff}, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x200003, 0x62}) r0 = syz_open_pts() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) execve(0x0, &(0x7f00000001c0)=[&(0x7f00000000c0)='/dev/speaker\x00'], 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x0, 0xcf, 0xd, 0x203519, "1bb7e60ab87aa57800000000d0d200000000fd00"}) r3 = getppid() wait4(r3, 0x0, 0x1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="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", 0x69d}, {&(0x7f0000000080)="e530e0dc410000fd57666c40001bac0a5a070dc41a0600000062450f9d3de4360e2e6bea95899a0300776884c9c959bbcc98bcbebe18a5", 0x37}], 0x2) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) r4 = socket(0x1, 0x2, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f000069c000/0x3000)=nil, &(0x7f000051f000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x2}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000692000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x100000000000}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x1}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0x400000000000000}, {&(0x7f000013f000/0x2000)=nil, &(0x7f00000c6000/0x3000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000069b000/0x3000)=nil, 0x9f}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x40003}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xac3}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f0000531000/0x2000)=nil, &(0x7f000069c000/0x4000)=nil, 0x2}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00006bf000/0x4000)=nil, &(0x7f0000010000/0x3000)=nil, 0x8}], './file0\x00'}) ioctl$FIONREAD(r4, 0xc0106978, &(0x7f00000001c0)) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) minherit(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) shmget(0x1, 0x1000, 0x126, &(0x7f00007f9000/0x1000)=nil) 83.422038ms ago: executing program 3 (id=485): r0 = getppid() (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0}, &(0x7f0000000140)=0xc) (async) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) listen(r3, 0x4) (async) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) ioctl$FIONBIO(r3, 0x8004667e, &(0x7f0000000100)=0xeede) accept$unix(r3, 0x0, 0x0) (async) syz_emit_ethernet(0xb9, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816a00830608fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e234e20", @ANYRES32=r2, @ANYRES32=0x41424344, @ANYBLOB="5002"]) (async) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001500)={0x0, 0x0, 0x0}, &(0x7f0000001540)=0xc) sendmsg$unix(0xffffffffffffff9c, &(0x7f00000015c0)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000001480)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000040)="d0de2b46c425a7809f63b345dda422a1f10e27a686ae5229b5761bd59fceaa19735264d83ce6a1929b7036f147cea4ddae86a4de0fcc3877352ad34ec29464f8247b6ba90073fc06ae08e7170640172245fafc93361991d2b05e2980feadff4d4ca350494fb844f34cf5fafbfd0f23a5d5a698155586c539693b0f643d2a275b1249f1cebe7fa24d38d3cf59f0cc2ce12e26e66548b980fbe324484c6caf6794b3c09f412492a39c53719c277d16578d6f5614181b9e76a868b34e5d510f1d1fa2721d305e6465c93621366bbef0024d66731eee5f1925f6cbfb9535", 0xdc}, {&(0x7f0000001180)="a88912e74c9a5c2df49737cb667b237034d9f5f4d8e8d60b8ac3dda043b8aac1c04d11235a69d3cbd259e2c34b48f1e167bc406604adc2feb1bc09d09776fa34b3c3fc7845d1323982c7af8be83d04912aa6ac5c21e059f8db9c2071fadc17d34f241ccc68f3143833eb5ef0ac3b495f02b57430f1ae37ea8f68ddbede0bdef417a5b303435274e7ce4c51e89978a4e42800a0b9491f16dd95677e67172a5b065c7791cf93e55499d9b99184c93cc48299ee5b8085b5f73e8c6029f01f40ba33669e562835800ebf4f8f8c81", 0xcc}, {&(0x7f0000001280)="8b930b712b67d61d6b358bc14bbe368c34fdf164c3291a8f0955799fa2037ac3baea1951837770179013a4631bd4b36a167a094cafe908df9f51034023dac920071ab154c9b26b0f7faac1dd314d956e6b92fd0ea2983823931362bbe30935c13dc5dc248514c5508cf51c22e4f153298d1c0118d2b8657ce44168b343bdbfe3ecf8ea5eb3b182a0c28578c34e29c385b3facc2e6d01e0376e90148bb92353130d24b9df2e735cb95f831508668f8213252fe1e1baf51656b88af21b229b822e80e526cd5a8af1a49e9d446726886823bd577b6578f630c0a979059e70afe6cf39b5e31c6fdf601ecbcf", 0xea}, {&(0x7f0000001380)="475ea0bca7145a0481f9b2fded954840f75f58dc79619be95e4f11e070adb80c7f4ee237d8375bbb7b1f1a11b72a86bd48ce5a310aa3897918b0dfc973918804df2ea11fcc340b1f41f61264c8e773bd0ba1e04c44a0efb2f7a388da83754c8c8f8a30b4bbdb5096ee440facd31b5d04af63edfcdae81227bd37aecbfcc6b019351953e1df37f954e4782a1ac216528ea3e15676f490200732d28a73b03dfee9c3b48c8c750ad1aa4d0db09459bd4429ca4d33ba8df0c10655d7ecc2316eb5ce71cd15d45a35dd3a9747288cb965d854ae80647be27047e568b715077494c3b3", 0xe0}], 0x5, &(0x7f0000001580)=[@cred={0x20, 0xffff, 0x0, r0, r2, r5}], 0x20, 0x6}, 0x3) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@random="91a6e34dd8bb", @random="9f96b0db5822", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @rand_addr}, @icmp=@time_exceeded={0xb, 0x1, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3, 0x101, 0x68, 0x0, 0x7, 0x3, 0x5e4, @empty, @multicast1}}}}}}) 77.01525ms ago: executing program 6 (id=486): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x100, 0x17f) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) utimes(0x0, &(0x7f00000000c0)={{0x0, 0xfffffffffffffff9}, {0x3, 0xe}}) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0xfff, 0xfffffffe, 0x5, 0x104, 0x80000003, 0x6, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x200008, 0x8, 0x9}, {0x1000, 0xd87, 0x6d, 0x5}, {0x8, 0x1800, 0x8}, {0x8, 0x200726, 0xfe, 0x5}, {0x2, 0x9a, 0x1003, 0x99}, {0xcdf, 0x7, 0x2, 0xd4}, {0x6, 0x6, 0x80000014, 0x8}, {0x9ed0, 0x1082, 0x5, 0x8}, {0x4, 0x8001, 0xd1b, 0x8c}, {0x1d1, 0xf7fd, 0x8, 0xffffffff}, {0x7ff, 0x9, 0x9, 0x9}, {0x81, 0x5, 0x8, 0x3}, {0x29a71717, 0xfffffffd, 0x985, 0x6}, {0xfffffff9, 0x7, 0x80}, {0x0, 0x20000001, 0x8, 0x30005}]}) mprotect(&(0x7f0000219000/0x2000)=nil, 0x2000, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r2 = socket(0x2, 0x2, 0x0) r3 = socket(0x2, 0x400000000002, 0x0) setsockopt(r3, 0x0, 0x23, &(0x7f0000000080)="c5f5d8ff", 0x4) r4 = dup2(r3, r2) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$FIONREAD(r4, 0x4004667f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x7bf, 0x0) bind(r2, &(0x7f0000000000), 0x10) r5 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r5, &(0x7f0000000000), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r7, 0x0) sendmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0xe}, 0x8) write(r5, 0x0, 0x0) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0x7, 0x0}) mkdir(&(0x7f0000000180)='./file0\x00', 0x8) 71.388888ms ago: executing program 7 (id=487): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x11, 0x3, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x1, 0x82, 0x24}, {0x35, 0x1, 0x1, 0x7}, {0x400e, 0x4, 0x53, 0xd}, {0x70ae, 0xf8, 0x0, 0x4}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) recvmmsg(r0, &(0x7f0000000100)={0x0}, 0x10, 0x2, 0x0) 17.797594ms ago: executing program 3 (id=488): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x1}, {&(0x7f0000fff000/0x1000)=nil}, {0x0, &(0x7f0000ffc000/0x3000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffd000/0x1000)=nil}, {0x0, &(0x7f0000002000/0x1000)=nil, 0x1}, {0x0, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x200000000000}, {&(0x7f0000000000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {0x0, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}], './file0\x00'}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x5a}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x48, 0x0, 0x37) sysctl$kern(0x0, 0x0, &(0x7f0000000380)="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", &(0x7f0000000080)=0x12e, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffff090094ea09066dbd86dd60db8344ffaa1100fed38d5ba86e09000000000000010014ff0200000000000000000000000000014e234e22ffaa90"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000040)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) 11.078432ms ago: executing program 4 (id=489): r0 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000180)=0x4, 0x4) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f00000002c0)={0x0, 0x100}, 0x8) r3 = getpid() setpgid(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r3}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r4, 0x80047476, &(0x7f0000000340)={0x0, 0x0}) ioctl$WSKBDIO_GETMAP(r4, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000003840)={{0x30000, 0x820}, {0x5, 0x73900000000000}}, 0x2) r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r7 = fcntl$getown(r2, 0x5) getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, r9, r10, 0xffffffffffffffff, 0x0, 0x88, 0x6}, 0x6, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023}) setsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000003c0)={r7, r8, r10}, 0xc) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0404469, &(0x7f0000000000)={0xc635, 0x408, 0x3fc, 0x2000, "0000100000fb1fffe70000d3b04d45f0388a19a0", 0x33c3300e, 0x2}) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$WSKBDIO_GETENCODINGS(r6, 0xc0105715, &(0x7f0000000000)) listen(r0, 0x1) r11 = socket(0x18, 0x4001, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000, 0xffffffffffffffff}) r12 = accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f0000000100)=0x8) connect$unix(r11, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x8) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) syz_emit_ethernet(0x0, 0x0) sendto$unix(r12, &(0x7f00000001c0)="a673740ca83a61a86b5e1713228d7e4670e4fdfa68286102138bdb6f07abde0cccab0097fa7a718cc63cffc49548b11f7b046d1513ce35de905eace45664b5e54d9a6b33c4de69504ccef129b385fcc3d9912820609fde270235b1a1a12c3a59ec8fa7e8daea5576265420cfe0431b2cb5d461b1f646e86f192a705a8e22e9206713b334f477312c19208d61de9e28cee601e20095702273cbd5d6a14aa88fc43755f0d87a57", 0xa6, 0x4, 0x0, 0x0) 1.289974ms ago: executing program 6 (id=490): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x55, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES32=r0], 0x28, 0x401}, 0x0) dup2(r1, r0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCGDLTLIST(r2, 0xc010427b, &(0x7f0000000080)={0x0, 0x0}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ftruncate(r1, 0xa) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000007}, {0x2c, 0xc, 0xd5, 0x4006}, {0x10, 0x9, 0x1, 0xfffffff2}]}) writev(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)="a99609ac3acc87fead921464aa171c4fad74a025125b917189b503f63e1f2b6e7c64b1ff60e43eac8d21bab7d0", 0x2d}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f00000002c0)="50041b02954c19322811880c53c2e0003e8074473c8a808703000000", &(0x7f0000000000)=0x1c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r3, &(0x7f0000000600)="d81ad30100060000000100000000", 0xe) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$BIOCGDIRFILT(0xffffffffffffff9c, 0x4004427c, &(0x7f00000003c0)) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000340)={0x0, &(0x7f0000000380)}) r5 = kqueue() kevent(r5, &(0x7f0000000040), 0x1, &(0x7f0000000100)=[{{r5}, 0xfffffffffffffff9, 0x1, 0x80000000, 0x0, 0xad}], 0x5, 0x0) kevent(r5, 0x0, 0xfffffffd, &(0x7f0000000240), 0x2, &(0x7f0000000080)={0x63a3, 0x4}) kevent(r5, &(0x7f0000000000), 0x3ff, 0x0, 0x80007fd, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1a0}, 0x3ff, 0x4, 0x4}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) open(&(0x7f0000000080)='./bus\x00', 0x10, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r7, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) close(r6) 330.154µs ago: executing program 7 (id=491): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x7, 0x10, 0xe, 0x6}, {0xff80, 0x3, 0x8, 0x5}]}) socket(0x1, 0x1, 0x0) (async) r1 = socket(0x1, 0x1, 0x0) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) (async) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) socket(0x1, 0x2, 0x0) (async) r2 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004606002c00640003069d9078ffffffffffffffff000000000e009078000b0008000003fc0000000400000395"]) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$FIONREAD(r1, 0xc02069a0, &(0x7f00000001c0)) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x0, 0x40000005}, {0x30, 0xf, 0x3, 0x8000}, {0x26, 0x9, 0x1, 0x2}]}) fchmod(r0, 0x8) socket(0x18, 0x3, 0x0) r4 = open(0x0, 0x10000, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x6, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x10000000, 0x7, 0x3, 0x71000}, {0x101, 0x400, 0x9}, {0x7, 0x8000b86, 0xffffff7c, 0x9}, {0x73f0, 0x6, 0x4, 0x2}, {0x401, 0x8, 0x2, 0x7}, {0x2, 0x6, 0x3, 0x96}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x6, 0x1, 0x14, 0xb}, {0xffffffff, 0x84, 0x4, 0x3}, {0x1, 0x7, 0x93, 0x1ff}, {0x5, 0xffff, 0x7ff, 0x7}, {0x9, 0x29, 0x9, 0x5}, {0xb8c, 0x401, 0x80000003, 0x405}, {0x21a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0xf8f, 0x6}, {0xfffffffd, 0x800bc3d, 0x4, 0x30009}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x4c}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) socket(0x1, 0x2, 0x0) (async) r5 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) (async) syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) r6 = kqueue() kevent(r6, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) socket(0x18, 0x3, 0x50) (async) r7 = socket(0x18, 0x3, 0x50) ioctl$FIONREAD(r7, 0x802069c1, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r7, 0x802069c1, &(0x7f00000001c0)) r8 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0xffff, 0x100, &(0x7f0000000080)=0x4, 0x4) (async) setsockopt$sock_int(r8, 0xffff, 0x100, &(0x7f0000000080)=0x4, 0x4) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 0s ago: executing program 3 (id=492): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x0, 0x0, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0x9}, {0x6, 0x0, 0x14, 0x8}, {0x2000002, 0x82, 0x5, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1cc, 0x800, 0xc, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x6}, {0x1100c, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) socket(0x1, 0x2, 0x0) (async) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000003c0), 0xc) (async) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000003c0)={0x0}, 0xc) fcntl$setown(0xffffffffffffffff, 0x6, r2) r3 = geteuid() setreuid(r3, 0x0) (async) setreuid(r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r5}, 0x4}) r6 = open$dir(&(0x7f0000000140)='.\x00', 0x200, 0x150) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000040)='./file0\x00', 0x80, 0x4) (async) r7 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x4) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x6, 0x9e, 0x200000a, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x10000000, 0x7, 0x3, 0x71000}, {0x101, 0x8, 0x9}, {0x7, 0x8000b86, 0xffffff7c, 0x9}, {0x73f0, 0x6, 0x4, 0x2}, {0x401, 0x8, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x6, 0x9, 0x16, 0xb}, {0xffffffff, 0x84, 0x4, 0x3}, {0x4, 0x7, 0x93, 0x1ff}, {0x1e0, 0xffff, 0x7ff, 0x7}, {0x9, 0x29, 0x9, 0x5}, {0xb8c, 0x401, 0x80000003, 0x405}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0xf8f, 0x6}, {0xfffffffd, 0x800bc3d, 0x4, 0x30005}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r7, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x4c}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}}}) lseek(r6, 0x8, 0x1) (async) lseek(r6, 0x8, 0x1) getdents(r6, &(0x7f0000000400)=""/4087, 0xff7) (async) getdents(r6, &(0x7f0000000400)=""/4087, 0xff7) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000680), 0xc) (async) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000680), 0xc) r8 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r8, 0xffff, 0x1024, &(0x7f0000000240), &(0x7f00000001c0)=0xc) kernel console output (not intermixed with test programs): OpenBSD/amd64 (ci-openbsd-multicore-5.us-central1-b.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts. login: load: 0.13 cmd: getty 5766 [ttyin] 0.00u 0.01s 0% 329k pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error vm_create: uvm_map failed: 12 uvm_fault(0xfffffd806c8f6b90, 0x0, 0, 1) -> e kernel: page fault trap, code=0 Stopped at dt_ioctl_record_stop+0x108: movq 0(%r14),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND 229875 71793 0 0 0 0 syz-executor dt_ioctl_record_stop(ffff800001489000) at dt_ioctl_record_stop+0x108 dtclose(21e5f,1,2000,ffff8000fffe94e0) at dtclose+0x109 spec_close(ffff80003c46bae0) at spec_close+0x466 VOP_CLOSE(fffffd806ab65118,1,fffffd80097fd000,ffff8000fffe94e0) at VOP_CLOSE+0x132 vn_closefile(fffffd805ed466b8,ffff8000fffe94e0) at vn_closefile+0x12b fdrop(fffffd805ed466b8,ffff8000fffe94e0) at fdrop+0x121 closef(fffffd805ed466b8,ffff8000fffe94e0) at closef+0x192 fdfree(ffff8000fffe94e0) at fdfree+0x116 exit1(ffff8000fffe94e0,0,0,1) at exit1+0x576 sys_exit(ffff8000fffe94e0,ffff80003c46be50,ffff80003c46bda0) at sys_exit+0x1a syscall(ffff80003c46be50) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7572eeb3c5e0, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd806c8f6b90, 0x0, 0, 1) -> e ddb{1}> trace dt_ioctl_record_stop(ffff800001489000) at dt_ioctl_record_stop+0x108 dtclose(21e5f,1,2000,ffff8000fffe94e0) at dtclose+0x109 spec_close(ffff80003c46bae0) at spec_close+0x466 VOP_CLOSE(fffffd806ab65118,1,fffffd80097fd000,ffff8000fffe94e0) at VOP_CLOSE+0x132 vn_closefile(fffffd805ed466b8,ffff8000fffe94e0) at vn_closefile+0x12b fdrop(fffffd805ed466b8,ffff8000fffe94e0) at fdrop+0x121 closef(fffffd805ed466b8,ffff8000fffe94e0) at closef+0x192 fdfree(ffff8000fffe94e0) at fdfree+0x116 exit1(ffff8000fffe94e0,0,0,1) at exit1+0x576 sys_exit(ffff8000fffe94e0,ffff80003c46be50,ffff80003c46bda0) at sys_exit+0x1a syscall(ffff80003c46be50) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7572eeb3c5e0, count: -12 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003c46ba10 rbx 0x1 rdx 0 rcx 0xffff8000fffe94e0 rax 0xffffffff838b5680 dt_prov_static r8 0xffffffffffffffff r9 0x1 r10 0x9c9209c8b7e58880 r11 0x2e421515b24c404c r12 0 r13 0 r14 0 r15 0xffff8000015c9300 rip 0xffffffff818a4fe8 dt_ioctl_record_stop+0x108 cs 0x8 rflags 0x10207 __ALIGN_SIZE+0xf207 rsp 0xffff80003c46b9e0 ss 0x10 dt_ioctl_record_stop+0x108: movq 0(%r14),%r14 ddb{1}> show proc PROC (syz-executor) tid=466621 pid=33740 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff8000fffe94e0 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff800037ff5cb0,0xffff80002a28b250 process=0xffff8000fffe6b70 user=0xffff80003c466000, vmspace=0xfffffd806c8f6b90 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 41986 212712 81734 0 2 0 syz-executor 71793 229875 83715 0 7 0 syz-executor 71793 57132 83715 0 3 0x4000080 fsleep syz-executor 11370 457826 43544 0 3 0x80 nanoslp syz-executor 11370 40301 43544 0 3 0x4000080 netacc syz-executor 11370 174823 43544 0 3 0x4000080 fsleep syz-executor 38217 402343 78113 0 3 0x3000 suspend syz-executor 38217 323864 78113 0 3 0x4081000 biowait syz-executor 38217 272949 78113 0 3 0x4081000 inode syz-executor 38217 215422 78113 0 3 0x4081000 inode syz-executor 38562 223530 28074 0 3 0x80 nanoslp syz-executor 38562 496398 28074 0 3 0x4000000 biowait syz-executor 38562 350477 28074 0 3 0x4000000 inode syz-executor 38562 78941 28074 0 3 0x4000000 inode syz-executor 38562 432798 28074 0 3 0x4000000 inode syz-executor 38562 300746 28074 0 3 0x4000080 fsleep syz-executor 54969 256259 27374 60929 3 0x90 nanoslp syz-executor 54969 292374 27374 60929 3 0x4000090 fsleep syz-executor 54969 276692 27374 60929 3 0x4000090 fsleep syz-executor 54969 288049 27374 60929 3 0x4000090 kqsel syz-executor 23283 58027 19688 0 3 0x80 nanoslp syz-executor 23283 120741 19688 0 3 0x4000080 kqread syz-executor 23283 503649 19688 0 3 0x4000080 ttyin syz-executor 23283 493888 19688 0 3 0x4000080 fsleep syz-executor 30419 255192 0 0 3 0x14200 acct acct 81734 48485 4477 0 3 0x82 nanoslp syz-executor 83715 188980 4477 0 3 0x82 nanoslp syz-executor 19688 367735 4477 0 3 0x82 nanoslp syz-executor 43544 328492 4477 0 3 0x82 nanoslp syz-executor 86302 173938 4477 0 3 0x82 nanoslp syz-executor 27374 523863 4477 0 3 0x82 nanoslp syz-executor 28074 55540 4477 0 3 0x82 nanoslp syz-executor 78113 289805 4477 0 3 0x82 nanoslp syz-executor 4477 293257 58684 0 3 0x82 kqread syz-executor 58684 263218 60386 0 3 0x10008a sigsusp ksh 60386 179385 33349 0 3 0x98 kqread sshd-session 33349 154056 95174 0 3 0x92 kqread sshd-session 5766 296074 1 0 3 0x100083 ttyopn getty 95174 401356 1 0 3 0x88 kqread sshd 18405 204821 80052 74 3 0x1100092 bpf pflogd 80052 226007 1 0 3 0x80 sbwait pflogd 71887 159006 755 73 3 0x1100090 kqread syslogd 755 265255 1 0 3 0x100082 sbwait syslogd 23635 423463 1 0 3 0x100080 kqread resolvd 33155 452958 36975 77 3 0x100092 kqread dhcpleased 93468 280125 36975 77 3 0x100092 kqread dhcpleased 36975 345506 1 0 3 0x80 kqread dhcpleased 96296 152702 0 0 3 0x14200 pause smr 14988 103789 0 0 3 0x14200 pgzero zerothread 47787 409353 0 0 3 0x14200 aiodoned aiodoned 62666 398013 0 0 3 0x14200 syncer update 40273 218669 0 0 3 0x14200 cleaner cleaner 13157 76291 0 0 3 0x14200 reaper reaper 47074 228259 0 0 3 0x14200 pgdaemon pagedaemon 7249 121084 0 0 3 0x14200 bored viomb 14073 37278 0 0 3 0x40014200 acpi0 acpi0 13913 200919 0 0 3 0x40014200 idle1 88754 519467 0 0 3 0x14200 bored softnet1 94917 101589 0 0 3 0x14200 bored softnet0 12037 81097 0 0 3 0x14200 bored systqmp 79892 76764 0 0 3 0x14200 bored systq 63131 182819 0 0 3 0x14200 tmoslp softclockmp 79152 149930 0 0 3 0x40014200 tmoslp softclock 59903 377056 0 0 3 0x40014200 idle0 1 381928 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 71793 (syz-executor) thread 0xffff800037ff5cb0 (229875) shared rwlock uobjlk r = 0 (0xfffffd806dcbd270) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvm_fault_lower_lookup+0x53 #3 uvm_fault_lower+0x89 #4 uvm_fault+0x274 #5 upageflttrap+0xa9 #6 usertrap+0x42f #7 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xfffffd800b0636b8) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x42f #7 recall_trap+0x8 Process 38217 (syz-executor) thread 0xffff8000fffe9248 (323864) exclusive rrwlock inode r = 0 (0xfffffd806e878368) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x242 #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 Process 38217 (syz-executor) thread 0xffff8000fffe8d18 (272949) exclusive rrwlock inode r = 0 (0xfffffd806e8590b0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 domknodat+0xb4 #8 syscall+0xb17 #9 Xsyscall+0x128 Process 38562 (syz-executor) thread 0xffff800037ff42c0 (496398) exclusive rrwlock inode r = 0 (0xfffffd8069d43588) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x242 #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 Process 38562 (syz-executor) thread 0xffff800037ff4558 (350477) exclusive rrwlock inode r = 0 (0xfffffd806f92ac70) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 uipc_bind+0x328 #8 sys_bind+0x2f6 #9 syscall+0xbd4 #10 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10258 11423K 11561K 166960K 12187 0 pcb 17 16K 17K 166960K 224 0 rtable 253 11K 11K 166960K 448 0 pf 36 18K 82K 166960K 118 0 ifaddr 43 7K 8K 166960K 82 0 ifgroup 55 2K 3K 166960K 133 0 sysctl 4 1K 9K 166960K 11 0 counters 70 37K 38K 166960K 288 0 ioctlops 0 0K 6K 166960K 1660 0 iov 0 0K 14K 166960K 143 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1399 88K 88K 166960K 1932 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 10 0K 0K 166960K 16 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 89K 166960K 623 0 sigio 1 0K 0K 166960K 11 0 proc 72 115K 180K 166960K 571 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 273 0 in_multi 99 7K 7K 166960K 128 0 ether_multi 1 0K 0K 166960K 7 0 mrt 2 0K 0K 166960K 5 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 241 1076K 1076K 166960K 241 0 exec 0 0K 1K 166960K 487 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 265 160K 183K 166960K 7652 0 UVM aobj 17 4K 4K 166960K 19 0 pinsyscall 43 86K 103K 166960K 1750 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 53 0 NDP 12 0K 2K 166960K 54 0 temp 56 8670K 8739K 166960K 12666 0 kqueue 15 24K 28K 166960K 104 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 98 0 94 2 0 2 2 0 8 1 rtentry 176 132 0 27 6 0 6 6 0 8 0 unpcb 144 279 0 251 2 0 2 2 0 8 0 syncache 336 3 0 3 1 1 0 1 0 8 0 tcpcb 736 123 0 116 2 1 1 2 0 8 0 arp 136 21 0 2 1 0 1 1 0 8 0 inpcb 328 768 0 754 7 0 7 7 0 8 5 nd6 152 28 0 0 2 0 2 2 0 8 0 pkpcb 40 4 0 4 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 mppekey 1024 2 0 2 1 1 0 1 0 8 0 ppxss 1192 100 0 100 1 0 1 1 0 8 1 pppxif 1504 5 0 5 1 0 1 1 0 8 1 pffrag 232 6 0 2 1 0 1 1 0 482 0 pffrnode 88 6 0 2 1 0 1 1 0 8 0 pffrent 40 13 0 9 1 0 1 1 0 8 0 pfosfp 40 1429 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1429 0 714 21 0 21 21 0 8 0 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 pfstitem 24 48 0 3 1 0 1 1 0 8 0 pfstkey 128 56 0 11 2 0 2 2 0 8 0 pfstate 448 50 0 6 5 0 5 5 0 8 0 pfrule 1344 23 0 17 2 1 1 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 552 0 102 31 1 30 31 0 8 1 art_table 40 554 0 102 5 0 5 5 0 8 0 art_node 32 132 0 38 1 0 1 1 0 8 0 sysvmsgpl 40 7 0 5 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 12 0 4 1 0 1 1 0 8 0 shmpl 112 14 0 1 1 0 1 1 0 8 0 dirhash 1024 21 0 4 3 0 3 3 0 8 0 dino2pl 256 2574 0 1068 96 0 96 96 0 8 0 ffsino 296 2574 0 1068 118 0 118 118 0 8 0 nchpl 144 3436 0 1734 64 0 64 64 0 8 0 rtmask 32 11 0 11 1 0 1 1 0 8 1 vnodes 216 2730 0 0 152 0 152 152 0 8 0 namei 1024 11423 0 11419 2 1 1 2 0 8 0 percpumem 16 159 0 109 1 0 1 1 0 8 0 vcpupl 3968 1 0 0 1 0 1 1 0 8 0 vmpool 840 2 0 1 1 0 1 1 0 8 0 kstatmem 264 76 0 50 3 0 3 3 0 8 1 scsiplug 72 4 0 4 1 1 0 1 0 8 0 scxspl 216 16841 0 16839 3 2 1 2 1 8 0 plimitpl 152 165 0 145 1 0 1 1 0 8 0 sigapl 424 934 0 885 7 1 6 7 0 8 0 knotepl 120 533 0 0 17 0 17 17 0 8 0 kqueuepl 224 312 0 300 6 1 5 5 0 8 4 pipepl 344 187 0 159 6 3 3 6 0 8 0 fdescpl 528 916 0 884 3 0 3 3 0 8 0 filepl 160 5440 0 5191 16 0 16 16 0 8 5 lockfpl 104 192 0 190 1 0 1 1 0 8 0 lockfspl 48 82 0 80 1 0 1 1 0 8 0 sessionpl 144 22 0 13 1 0 1 1 0 8 0 pgrppl 48 39 0 21 1 0 1 1 0 8 0 ucredpl 104 791 0 777 1 0 1 1 0 8 0 zombiepl 144 887 0 885 1 0 1 1 0 8 0 processpl 1232 934 0 885 5 0 5 5 0 8 0 procpl 664 1828 0 1762 6 0 6 6 0 8 0 sosppl 176 5 0 5 1 0 1 1 0 8 1 sockpl 752 1162 0 1116 11 0 11 11 0 8 6 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 114 0 0 15 0 15 15 0 8 0 mcl2k 2048 26 0 0 4 0 4 4 0 8 0 mtagpl 96 17 0 0 1 0 1 1 0 8 0 mbufpl 256 201 0 0 13 0 13 13 0 8 0 bufpl 280 6539 0 402 439 0 439 439 0 8 0 anonpl 32 9522 0 0 78 1 77 77 0 246 0 amapchunkpl 152 24915 0 24350 33 1 32 33 0 158 9 amappl16 200 3553 0 3346 19 7 12 15 0 8 1 amappl15 192 13 0 13 1 1 0 1 0 8 0 amappl14 184 7 0 6 1 0 1 1 0 8 0 amappl13 176 430 0 429 1 0 1 1 0 8 0 amappl12 168 1275 0 1232 3 0 3 3 0 8 0 amappl11 160 29 0 29 2 1 1 1 0 8 1 amappl10 152 52 0 38 1 0 1 1 0 8 0 amappl9 144 261 0 261 1 1 0 1 0 8 0 amappl8 136 39 0 36 1 0 1 1 0 8 0 amappl7 128 81 0 80 1 0 1 1 0 8 0 amappl6 120 278 0 264 1 0 1 1 0 8 0 amappl5 112 90 0 80 1 0 1 1 0 8 0 amappl4 104 418 0 389 1 0 1 1 0 8 0 amappl3 96 4665 0 4546 4 0 4 4 0 8 0 amappl2 88 527 0 466 2 0 2 2 0 8 0 amappl1 80 10908 0 10313 15 2 13 15 0 8 0 amappl 88 6841 0 6653 5 0 5 5 0 92 0 uvmvnodes 80 112 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 8 0 8 2 1 1 1 0 8 1 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 18 0 2 1 0 1 1 0 8 0 uaddrrnd 24 917 0 885 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 917 0 885 1 0 1 1 0 8 0 vmmpekpl 168 9042 0 9002 3 0 3 3 0 8 0 vmmpepl 168 64903 0 62727 100 2 98 98 0 357 3 vmsppl 488 916 0 885 5 1 4 5 0 8 0 rwobjpl 80 20151 0 18890 29 2 27 27 0 8 1 pdppl 4096 1846 0 1773 100 26 74 86 0 8 1 pvpl 32 16501 0 0 134 0 134 134 0 265 0 pmappl 256 918 0 886 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 284 0 33 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837f1ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a0fe48) at __mp_lock+0x192 intr_handler(ffff800038401ed0,ffff80000006b400) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f Xspllower() at Xspllower+0x1d pmap_enter(fffffd806c8feb00,110c2b0000,6cb8c000,1,20) at pmap_enter+0xd1c uvm_fault_lower_lookup(ffff800038402350,ffff800038402388,ffff8000384022d0) at uvm_fault_lower_lookup+0x3d6 uvm_fault_lower(ffff800038402350,ffff800038402388,ffff8000384022d0) at uvm_fault_lower+0x89 uvm_fault(fffffd800b0635b8,110c2ac000,0,1) at uvm_fault+0x274 upageflttrap(ffff8000384024f0,110c2ac110) at upageflttrap+0xa9 usertrap(ffff8000384024f0) at usertrap+0x42f recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x72f65eb8bc90, count: 1 ddb{0}> trace x86_ipi_db(ffffffff837f1ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a0fe48) at __mp_lock+0x192 intr_handler(ffff800038401ed0,ffff80000006b400) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f Xspllower() at Xspllower+0x1d pmap_enter(fffffd806c8feb00,110c2b0000,6cb8c000,1,20) at pmap_enter+0xd1c uvm_fault_lower_lookup(ffff800038402350,ffff800038402388,ffff8000384022d0) at uvm_fault_lower_lookup+0x3d6 uvm_fault_lower(ffff800038402350,ffff800038402388,ffff8000384022d0) at uvm_fault_lower+0x89 uvm_fault(fffffd800b0635b8,110c2ac000,0,1) at uvm_fault+0x274 upageflttrap(ffff8000384024f0,110c2ac110) at upageflttrap+0xa9 usertrap(ffff8000384024f0) at usertrap+0x42f recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x72f65eb8bc90, count: -14 ddb{0}> machine ddbcpu 1 Stopped at dt_ioctl_record_stop+0x108: movq 0(%r14),%r14 dt_ioctl_record_stop(ffff800001489000) at dt_ioctl_record_stop+0x108 dtclose(21e5f,1,2000,ffff8000fffe94e0) at dtclose+0x109 spec_close(ffff80003c46bae0) at spec_close+0x466 VOP_CLOSE(fffffd806ab65118,1,fffffd80097fd000,ffff8000fffe94e0) at VOP_CLOSE+0x132 vn_closefile(fffffd805ed466b8,ffff8000fffe94e0) at vn_closefile+0x12b fdrop(fffffd805ed466b8,ffff8000fffe94e0) at fdrop+0x121 closef(fffffd805ed466b8,ffff8000fffe94e0) at closef+0x192 fdfree(ffff8000fffe94e0) at fdfree+0x116 exit1(ffff8000fffe94e0,0,0,1) at exit1+0x576 sys_exit(ffff8000fffe94e0,ffff80003c46be50,ffff80003c46bda0) at sys_exit+0x1a syscall(ffff80003c46be50) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7572eeb3c5e0, count: 3 ddb{1}> trace dt_ioctl_record_stop(ffff800001489000) at dt_ioctl_record_stop+0x108 dtclose(21e5f,1,2000,ffff8000fffe94e0) at dtclose+0x109 spec_close(ffff80003c46bae0) at spec_close+0x466 VOP_CLOSE(fffffd806ab65118,1,fffffd80097fd000,ffff8000fffe94e0) at VOP_CLOSE+0x132 vn_closefile(fffffd805ed466b8,ffff8000fffe94e0) at vn_closefile+0x12b fdrop(fffffd805ed466b8,ffff8000fffe94e0) at fdrop+0x121 closef(fffffd805ed466b8,ffff8000fffe94e0) at closef+0x192 fdfree(ffff8000fffe94e0) at fdfree+0x116 exit1(ffff8000fffe94e0,0,0,1) at exit1+0x576 sys_exit(ffff8000fffe94e0,ffff80003c46be50,ffff80003c46bda0) at sys_exit+0x1a syscall(ffff80003c46be50) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7572eeb3c5e0, count: -12