last executing test programs: 6.059405437s ago: executing program 5 (id=6): openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f0000000280)="0900001eb0af0e829ba5aa8d40a5dfd1530800", &(0x7f0000000300)=0x13, 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x24, 0x0, 0xff, 0x7}, {0x40, 0x15, 0x24, 0x2}, {0xfffe, 0x0, 0xd7, 0xfffffff7}]}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x24, 0x0, 0xff, 0x7}, {0x40, 0x15, 0x24, 0x2}, {0xfffe, 0x0, 0xd7, 0xfffffff7}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000002c0)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000002c0)={'tap', 0x0}) kqueue1(0x10000) (async) r1 = kqueue1(0x10000) kevent(r1, 0x0, 0xffffffff, 0x0, 0x4, 0x0) unveil(0x0, &(0x7f0000000240)='r\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000080)=0xa, 0x0) (async) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000080)=0xa, 0x0) fsync(r1) r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TIOCCONS(r3, 0x80047462, &(0x7f0000000100)=0xd6) (async) ioctl$TIOCCONS(r3, 0x80047462, &(0x7f0000000100)=0xd6) bind$unix(r3, &(0x7f0000000200)=@file={0x7, 0x1, './file0\x00'}, 0xa) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r4 = socket$inet(0x2, 0x3, 0x3) ioctl$FIOASYNC(r4, 0xc0206925, &(0x7f0000000580)=0x7) (async) ioctl$FIOASYNC(r4, 0xc0206925, &(0x7f0000000580)=0x7) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x8) r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VNDIOCSET(r5, 0xc0384600, &(0x7f0000002b00)={&(0x7f0000002ac0)='./file0\x00', 0x5, 0x0}) (async) ioctl$VNDIOCSET(r5, 0xc0384600, &(0x7f0000002b00)={&(0x7f0000002ac0)='./file0\x00', 0x5, 0x0}) mprotect(&(0x7f00002e1000/0x3000)=nil, 0x3000, 0x0) seteuid(0xffffffffffffffff) socket$inet(0x2, 0x4, 0x7f) openat$bpf(0xffffffffffffff9c, &(0x7f0000000780), 0x10, 0x0) (async) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000780), 0x10, 0x0) ioctl$BIOCSETWF(r6, 0x8010427f, 0x0) mkfifo(0x0, 0x71) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$DIOCADDRULE(0xffffffffffffffff, 0xcd604404, 0x0) openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 6.002965365s ago: executing program 6 (id=7): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) closefrom(r0) r1 = socket$inet6(0x18, 0x1, 0x6) setsockopt(r1, 0x29, 0xffff, 0x0, 0x0) munmap(&(0x7f0000005000/0x2000)=nil, 0x2000) pledge(0x0, &(0x7f0000000040)='/dev/bpf\x00\x14v\xeb!|a\x10]\xee\x84M\x1a\x8d\xe1\xd5V\x94\xf8h\x9fK\xd9r\xff$\x8d\xe0\xd1\xb4\x0e') futimes(r0, 0x0) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x3) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f0000000140), 0x0) pledge(&(0x7f0000000080)='/dev/bpf\x00\x14v\xeb!|a\x10]\xee\x84M\x1a\x8d\xe1\xd5V\x94\xf8h\x9fK\xd9r\xff$\x8d\xe0\xd1\xb4\x0e', &(0x7f00000000c0)='/dev/bpf\x00\x14v\xeb!|a\x10]\xee\x84M\x1a\x8d\xe1\xd5V\x94\xf8h\x9fK\xd9r\xff$\x8d\xe0\xd1\xb4\x0e') setsockopt(r0, 0x29, 0x32, 0x0, 0x0) 5.726024527s ago: executing program 6 (id=10): mkdir(&(0x7f0000000400)='./file0\x00', 0x148) chmod(&(0x7f00000000c0)='./file0\x00', 0x19b) getgroups(0x7, &(0x7f0000000040)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r1, r0, 0x0) r2 = socket$inet6(0x18, 0x3, 0x7) setsockopt(r2, 0x29, 0x2a, 0x0, 0x0) setgroups(0x0, 0x0) semget$private(0x0, 0x3, 0x600) seteuid(0xffffffffffffffff) unveil(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='w\x00') 5.725469938s ago: executing program 6 (id=11): syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @local, [], {@ipv6={0x86dd, {0xf, 0x6, "ff0700", 0x38, 0x3a, 0x0, @rand_addr="00d5e6b7b40700000200001000", @local={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x88}], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0xf, '\x00', {0x8, 0x6, "804f69", 0x6, 0x2b, 0x7c, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2}}}}}}}) pselect(0x40, &(0x7f0000000000)={0x49f, 0x3, 0x8000000000000001, 0x1, 0x9, 0x7, 0x8, 0x2fef}, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x6, 0x0, 0x0, 0x0, 0x0) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000001c80), 0x1, 0x0) (async) pselect(0x40, &(0x7f0000000000)={0x49f, 0x5, 0x27, 0x400000000000001, 0x1, 0xfffffffffffffffa, 0x8, 0xc}, 0x0, 0x0, 0x0, 0x0) 5.724629079s ago: executing program 6 (id=12): r0 = syz_open_pts() read(r0, &(0x7f0000000b40)=""/81, 0x51) r1 = syz_open_pts() r2 = socket$inet(0x2, 0x3, 0x68) setsockopt$sock_int(r2, 0xffff, 0x1021, &(0x7f0000000040)=0x9ee, 0x3) pselect(0x40, &(0x7f0000000040)={0x5, 0xfffffffffffff81c, 0x5, 0x4, 0x4, 0x8, 0x7, 0x4344}, &(0x7f0000000080)={0x3, 0x10001, 0xe58, 0x545, 0x3, 0x1, 0x8, 0xffffffffffffffff}, &(0x7f00000000c0)={0x7fffffffffffffff, 0x4, 0x8000, 0x4, 0x101, 0x9, 0xddbc, 0xdc1}, 0x0, &(0x7f0000000100)={0x10}) syz_emit_ethernet(0x76, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6f75184a00403a0000d5e6b7b40700000200001000000000fe8000000000000000000000000000aa030090780f0000006800000000062b7cfe8000000000000000000000000000aafe8000000000000000000000000000aa3a000359bcd7286781"]) socket$inet6(0x18, 0x3, 0x0) r3 = socket$inet6(0x18, 0x3, 0x0) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4}) r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSKBDIO_GETENCODINGS(r5, 0xc0105715, &(0x7f00000000c0)={0x400000000000038c, &(0x7f00000010c0)=[0x0]}) ioctl$DIOCRGETTABLES(r4, 0xc450443f, &(0x7f0000003580)={{'./file0\x00', './file0\x00', 0x8, 0x4}, &(0x7f0000000bc0)=[{'./file0\x00', './file0\x00', 0x52, 0x15}, {'./file0\x00', './file0\x00', 0x10, 0xf3}, {'./file0\x00', './file0\x00', 0x1, 0x80}, {'./file0\x00', './file0/file0\x00', 0x69, 0x5e}, {'./file0\x00', './file0/file0\x00', 0x8, 0x96}, {'./file0\x00', './file0\x00', 0x0, 0x9}, {'./file0\x00', './file0\x00', 0x5c, 0x3}, {'./file0\x00', './file0\x00', 0x0, 0x5}, {'./file0\x00', './file1\x00', 0x0, 0x6}, {'./file0\x00', './file0\x00', 0x1, 0x7}], 0xb1, 0xa, 0x5087, 0x1, 0xa88, 0x1, 0x50, 0x5}) syz_emit_ethernet(0x4a, &(0x7f00000006c0)=ANY=[@ANYRES8=0x0, @ANYRES64=r3, @ANYRES32=0x41424344, @ANYBLOB="508001009a78007f"]) select(0x40, &(0x7f0000000140)={0xfffffffffffffff7, 0x1, 0x2, 0x6, 0x8, 0x6, 0x15ba8000000000, 0xb}, &(0x7f0000000180)={0x6, 0x7ff, 0x1, 0x1, 0x195, 0x8, 0x4e, 0x800}, &(0x7f00000001c0)={0x1, 0x7, 0xffff7ffe, 0x6c, 0x3, 0x81, 0x7, 0x6}, &(0x7f0000000280)={0x8000000000000000, 0x6}) acct(&(0x7f0000000000)='./file0\x00') flock(r1, 0x1) pselect(0x40, &(0x7f00000002c0)={0x82, 0x8, 0x1000000000006, 0x4, 0x8, 0x7c65, 0x8006, 0x2}, &(0x7f0000000300)={0x4, 0x6, 0x7, 0x1, 0x3c, 0x4, 0x2, 0x5}, &(0x7f0000000340)={0xfffffffffffffffc, 0x2, 0x2, 0xffffffff, 0x4800000000000, 0x8, 0x9, 0x400040000}, &(0x7f0000000380)={0x5, 0x1729}, &(0x7f00000003c0)={0x7}) connect$inet6(r3, &(0x7f0000000400)={0x1c, 0x18, 0x1, 0xc06, "d75138bc01db845aa0c2da3f7bf84574", 0xc}, 0x1c) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000480)="14d966f61b0c2c7f2f956ace96c51ecab4694d058c04745b1530216974343d165a503468b17f89b4be6d1dda62451535c5443e7d88ec2c4c1024a8354c6c5c0fafb951d77e88190114cacddf28022d66cb5c0f66f120b58ff835b85e111540568666a4be37e4375341d81af68f85cecc699db872438690f6956c1dc2e0fb52d32f59cc3d93cd08ff8c839f73857bf973dc73bcafca364372940226ec7b783af5e8bf5e266ee1234adc248fd450511570af85b578a73714967fdc87f81b63df4cd56b", 0xc2}, {&(0x7f0000000580)="b11332c0b65d08f80d202ab520aa2e93e3e1a7594c205633ceafcb20b88aa67d243d71d88bef419f09a9f55732a3defd11dd3e697525306c4212da518eb75c4ac8f988cfed2a6d2d32fe3e476f7928d15b8825c4a3f90a4b3112aedc20dcc88995561450ca7eed98077138f8a71fb94e32fa2656184def47f8531b7a73fae53d8b87834b26ddd59493d49c2496ebe7ce2ba6beb9fc06c150cfc40863520b8b36ed1d92483b2ba500e0cc17dfb5edf5ef8bc225d2572618e3ce5d4731cf0f4459597d9dd511779b0da3", 0xc9}, {&(0x7f0000000700)="29c82f588fce7e0c3bdbdd818df7da59847da672695bea4dc951e7a93028e5253fd4a6a30b7314c83795012b5c3db3b8e453bc0e0e47511444251199ea1609349ef6e0f99979ce5b864a7a9427b6572cd240b1c8d70e231fd662b527f1eabc5c847e0d", 0x63}], 0x3) pwrite(r0, &(0x7f00000007c0)="670646180e5fc9164222167e7df28b56b6df82d8ed5af6d6671a53d3f756e9768b8c07f4fbaad55323cb9d866e9a7871b1589790aa4932c269a59fda3df62768141d9f7478408193f031895df904238c6f4d973185a68ec17e47c40869b3c3c2b50146b87290e249d91a03e0aef3c33768ea6ec728f9531f062862fdea87af4bcafd0c8adb5eb5ece22d2486fa28a750705796439f05ddbe3106050debbe466201dc8aae02980652fbfacff58e9a93cae8810ae70c49a22545c2de2d61e7d37cbaabeceeef25", 0xc6, 0x7fff) 4.40745973s ago: executing program 5 (id=17): nanosleep(&(0x7f0000000000)={0x0, 0x8001}, 0x0) clock_getres(0x0, &(0x7f0000000040)) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) sysctl$kern(0x0, 0x0, &(0x7f0000000040)="d77e", 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, &(0x7f0000000080)={0x0, 0x0}) 4.269461134s ago: executing program 5 (id=27): r0 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x4, 0x2011, r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x5, 0x6, "e481e2", 0x18, 0x0, 0x0, @empty, @ipv4, {[], @icmpv6=@mld={0x82, 0x0, 0x0, 0x30, 0x1, @remote={0xfe, 0x80, '\x00', 0x0}}}}}}}) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0x15b) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x0) syz_emit_ethernet(0x1315, &(0x7f00000001c0)={@empty, @local, [], {@ipv6={0x86dd, {0xf, 0x6, "000004", 0x12df, 0x3a, 0x6, @rand_addr="2a3b1ae57db8883fa6958273532df404", @local={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x33, 0x2, 0x0, 0xfb, 0x0, [@empty]}], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @local={0xfe, 0x80, '\x00', 0x0}, [{0x2, 0x1d, "6a5e5b2e5bb0a6d69fb6184ac118237afdebf0ba64cd2279a9e283dac1de582bec3aa113f9b66b3b342a881cef4c9b0baef431eeef37a1f4b6aa9cd7dcaa449d0e9ce7108d6ce65699b55617fa1d2c1d385488640f3ca593d86a6acb11baaa8bf95e64e7584de64cc949df27dea755aa2380dbb25eea5d97dfb22cdb8dba6301278eb23f3cbc8c49d20a2196bf7da1627be3a38b1f4e2d4a53322811bfa734a6697bca742848c8aca2b5ce861a38e58bd6876b9ef77f4dc3a0d0cbd1575552f1ac5617f0cf7b4338419649f6f19c8b15494647b9962938c30ae4faeb1583aa025857bd0ec760a365ff"}, {0x18, 0x11, "ac67d74902cbc6eb3179a2b1122dcf9a9d12107679ed28d61437655bf6ffb4004cd883ccc6f142f277f536d693fba264aacb5b9a05b9d401c6a9f08de556a109bdf765476fbe63c4d6cc8c8d4299d2d4d6108857a9f02d5f8a9ceeff0c53786dced820186b05ad0c381b335bd3f2d7eaee041f2c2c2f47802b5484b02fc7fbcb99f0b964d79856bffc6f"}, {0x4, 0x13, "4ddd11b80e4b53a1756f937d4b7b7a1574b7bac4514bdf820624c03fc53ee7d7b3375decc62fc9c821d0c15f09d9a709e02982ba0bce8ad050f189f5ba45f314e9371c7fd9ac013e5f125ae0bca1c0396d542884c324715c3cd33b916df8cc547edc76ae68c413dcc902300d9146ff9573a49cbbe8f9c1ca81724242f6d9e4017c8cb97e6b7f9501a556f04fd32c1ef842246a9dd174"}, {0x1f, 0xf, "e1cc5f7cfb43f4b24fa9cc587613b6ee0d2df00f1417ee92ce6a06d60fcb730a1f67e016280808ffbf482f838b0c067c9ca699fbb9db5096ee9bc37900d6793e00367062d72d344e741bac84acef337d1ceb1651e7d9f4d991f952c02a0dd85e720d2027b7d391cd5e8e0492f326f7d24664ae2f44420fffa846ed47"}, {0x4, 0x200, "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"}, {0x3, 0x2, "a1cbcf4180379b13e0a040500405"}]}}}}}}) 4.024961576s ago: executing program 5 (id=33): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) r0 = socket$inet(0x2, 0x3, 0x14) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r1, 0x0) fstat(r1, &(0x7f0000000840)) ioctl$FIOASYNC(r0, 0x802069b2, &(0x7f0000000580)=0x7) 4.02389736s ago: executing program 5 (id=35): mknod(&(0x7f0000000a40)='./file1/file0\x00', 0x0, 0x4005) r0 = open(&(0x7f0000001980)='./file0\x00', 0x1, 0x1cc) ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xca605601, &(0x7f0000000000)={0x10, 0x6, [{&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffff80000000}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x6}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x5}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x7fffffff}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xd}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x93e}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x10001}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xc32}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x4}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, 0x6}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x8000}], './file0\x00', 0xe, 0x7, 0x6, 0x1646, [0x3, 0x0, 0x3, 0x5, 0x3, 0x6, 0xd, 0x2, 0x9, 0x8, 0x0, 0x180000, 0x0, 0x100000, 0x3, 0x4, 0x8, 0x60000000, 0x509e, 0x9, 0x4, 0x8001, 0x0, 0x9, 0x6ae, 0x49, 0x200, 0x6, 0xf7, 0x0, 0x5db, 0x6, 0x80, 0xdc, 0x6, 0x8, 0x7, 0x5, 0x7, 0x6, 0x7ff, 0x100, 0x7, 0x3, 0x7, 0x401, 0x6, 0x7, 0x9, 0xfffffffd, 0x6, 0x9, 0x5, 0xffffffff, 0x8, 0x28, 0x9, 0xe0000, 0x32, 0x4, 0x5, 0x5, 0xc621, 0x1, 0x8, 0xfff, 0x2, 0xea, 0x6, 0x7ff, 0x4, 0x4, 0x2, 0xc, 0xbae, 0x4, 0x8, 0xaae8, 0x3, 0x4c600, 0x7, 0x200e, 0x400, 0x7, 0x8, 0x28743703, 0x2, 0x2, 0x401, 0x7f, 0x8, 0x5, 0x9, 0x200, 0x2, 0x307, 0x4, 0x6, 0x1c08, 0x2, 0x2, 0xb, 0xc0e3, 0x8, 0x6, 0x0, 0x1000, 0xb04, 0x7fff, 0x1, 0x2, 0x7fffffff, 0x2, 0xe98, 0x8, 0x5, 0x7f, 0x1, 0x5d68, 0x1, 0x95c, 0x80000000, 0x5, 0x2, 0x2, 0x58, 0x6, 0x1, 0x4, 0xe3c5, 0x4, 0x1000075, 0x5, 0xffff3c4a, 0xfff, 0xa18, 0x6, 0x10000, 0x6, 0xfff, 0x9, 0x0, 0x7, 0x10000, 0x2, 0x6, 0x5, 0x0, 0x0, 0x7, 0x1ff, 0xf, 0xe9, 0x6, 0x10000, 0xa04, 0x4b97, 0x0, 0x80000000, 0x1, 0x9, 0x6, 0x6, 0xe, 0x1000, 0x6, 0xb69, 0x5, 0x7b0c, 0xfffffff7, 0x4, 0x5, 0xc1bc, 0x1, 0x9, 0x890, 0x9, 0x7, 0x1a, 0x7fff, 0xfffffff7, 0xf6, 0x6000, 0x1, 0x2, 0x6, 0x4, 0x9, 0xf, 0x3, 0x2, 0x1ff, 0x9, 0xcf, 0x0, 0x21af6d0f, 0x2, 0xe0, 0x80000001, 0xf07, 0x8, 0x6, 0x8, 0xfffffff9, 0x9, 0x4, 0x6, 0xc6, 0x6, 0x9, 0x400, 0x15c, 0x4, 0x4, 0x0, 0x6, 0x6, 0xfffffffd, 0xa, 0x5, 0x6, 0x1ff, 0x9, 0x7, 0x8, 0xc865, 0x6d78cf1d, 0x0, 0xee0, 0xfffffff7, 0x6, 0x5, 0x8, 0x2, 0x4, 0xf, 0x0, 0x1, 0x71, 0x4, 0xcf47, 0x2, 0x4, 0x3ff, 0x7, 0x5, 0x0, 0x1, 0x2f0, 0x9, 0x4, 0x6, 0x7, 0x4, 0x8, 0x7, 0x6, 0x8000, 0xffffff80, 0x3ff, 0x8, 0x7, 0xf, 0x4, 0x9, 0x201, 0x92c, 0x6, 0x86cd, 0x7, 0x3, 0x91, 0x4, 0x5ab, 0x9, 0x10, 0x7, 0x3, 0x0, 0xffffffe7, 0x40, 0x4, 0x1, 0x2, 0xc, 0x7f, 0x3ff, 0x0, 0x4, 0xffff, 0x3, 0x662, 0x1000, 0xbd, 0x4, 0x5, 0x1ff, 0x1, 0x3, 0x2, 0x401, 0x1, 0xfffffff8, 0xc, 0x2, 0x2, 0xe8, 0x4, 0x6, 0x6, 0xfffffffb, 0x4, 0x200, 0x1, 0x4573, 0x2, 0xbd06, 0x5, 0xa8c, 0x80000000, 0xffffffff, 0x198f, 0x6, 0x8, 0x2ee, 0x7, 0x8, 0x7, 0x101, 0x80000000, 0x3, 0x3, 0x8, 0x5, 0x4, 0x2, 0x9, 0x801, 0x0, 0x2, 0x8, 0xc, 0x6, 0xf5, 0x5, 0x1000, 0x5, 0x39d00000, 0x4, 0x5, 0x3, 0x4a2, 0x9, 0x2daeb3f1, 0x0, 0x8, 0x100, 0x9649, 0x0, 0x6, 0x1, 0x7, 0x3ff, 0x97, 0x1000, 0x5, 0xff, 0xd, 0x19a2, 0x8, 0x3, 0x69b, 0x8, 0x7, 0x6, 0x458, 0x4, 0x3, 0x10000, 0x6, 0x101, 0x7, 0xfffffff8, 0x5, 0x0, 0x7, 0xf, 0x621e, 0x7, 0x3ff, 0x788, 0x8, 0x5, 0x1007, 0x87, 0x8, 0x80, 0xfff, 0x2, 0x8450, 0xcaa0, 0xca54, 0x9, 0x1000, 0x80000000, 0x2, 0x8001, 0x6, 0x1, 0x1, 0x8, 0x7fffffff, 0xb56, 0x6, 0xff, 0x3, 0xfff, 0x9e7, 0x8000, 0x2, 0x7fff, 0x2, 0x0, 0x1, 0x4, 0x800, 0x1d71, 0xffffffff, 0xf13, 0x3, 0x2, 0x8, 0x8, 0x6, 0x5, 0x8, 0x70a0, 0x5, 0xfffffff8, 0x8, 0x3, 0x9, 0x3, 0xd10a, 0xff, 0xc8d3, 0x3ff, 0x9, 0xffffc000, 0x81, 0x8, 0x9, 0x4, 0x3, 0x8, 0x4, 0x80000001, 0x2, 0x1, 0x2, 0x400, 0x10000, 0x80000001, 0x5, 0x958, 0x1, 0x3, 0x3, 0x7, 0x9, 0xfffffff8, 0x8, 0x3fd, 0x5, 0xea38, 0x1000, 0x0, 0x5, 0x75, 0x7947, 0x7fff, 0xf6, 0x0, 0x7, 0x8, 0xd886, 0x8000, 0x7, 0x40, 0x8, 0x4, 0x81, 0x7, 0x7, 0xf2e, 0x4, 0x1, 0x401, 0x9, 0x200, 0xf, 0x2, 0xac2, 0x385, 0x2, 0x16, 0x960, 0xdf, 0x2, 0x400078, 0xfffffff9, 0x401]}) syz_emit_ethernet(0x62, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6f0b2400002c0601fec2b4f340297221e7ce2d18c78d4ceafe800000000000a000000000004000aa4e214e23a7142737c7e0994302e63ccd6a33d3ee14873dc51f3fa037a6a6caf22da41c02073f65c3cbb8bd6db40b9ec0a40e46bdb661f4d2b27d9a0425201d32813e96296659e8ad9db42dcea8fd927f5facb47a59b02b7e6401b4e3879277e22a8c382dbcd195da0b95968b928ac004d7593599a1350595", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b10200009078005903030403000602806c7c0000040be6022764adbf69473400"]) kevent(r0, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x707a411afb5a32bf, 0x11, 0x637d00fffffffffd, 0x8000000000000005}], 0xde, 0x0, 0x1, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) ioctl$DIOCADDRULE(0xffffffffffffffff, 0xcd604404, &(0x7f0000000f80)={0x4, 0x7, 0x2, './file0\x00', './file0\x00', 0x0, "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"}) madvise(&(0x7f0000001000/0x9000)=nil, 0x9000, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004200)) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x12}, 0x4, &(0x7f00000023c0), &(0x7f0000000000)=0x19, 0x0, 0xfffffffffffffe99) open(&(0x7f0000000200)='./file0\x00', 0x8000, 0x49) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r1 = open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) ioctl$DIOCGETQUEUES(r1, 0x80184404, &(0x7f0000000040)={0x1, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x1}, {{0xd, 0x5}, {0x2f1c, 0x526}, 0x4}, {{0xc, 0x2}, {0x9, 0x1000}, 0x40000000}, {0x7, 0xfffffffc, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x4}}) ioctl$DIOCGETQUEUES(r1, 0x80044403, &(0x7f0000000040)={0x8, 0x9, {'\x00', './file1\x00', './file1\x00', './file0\x00', {{0x7, 0x2}, {0x9, 0x7}, 0x4}, {{0x9, 0x1}, {0x7, 0x7ff}, 0x3}, {{0x8, 0x2}, {0xc, 0x1000}, 0x3ffffffd}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x1, 0x2, 0x9, 0x4}}) r2 = syz_open_pts() socket$unix(0x1, 0x5, 0x0) syz_open_pts() write(r2, &(0x7f0000000440)="77d5b655ea62eae9fde7030010676cd8db1ec996edd7d7ed03270ef0f2b2f8297c9c837e826358306748c03ff3a4f60b27612626ed9f65562b0cd05d53855b4f2721389eec7f78a46506a93a1dbbcba0ad5ecea394ce2444dcb26e3aa69c90f6f3bafd6d404e9294a5dd200461874bf6abc0c3497219a891e864705443b712cc97f923861bcd", 0x86) 2.722793365s ago: executing program 1 (id=43): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind(r1, &(0x7f00000000c0)=@un=@file={0x0, 0x1, './file0\x00'}, 0xa) listen(r1, 0x472) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0x9) connect$unix(r0, &(0x7f00000000c0)=@file={0xfc, 0x1, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f0000000040)=@abs={0x9, 0x0, 0x0, 0x1}, 0x8) 2.721458014s ago: executing program 1 (id=46): ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffff9c, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x55}, 0x1, 0x0, 0x0, 0x0, 0x39) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) setitimer(0x0, 0x0, 0xffffffffffffffff) (async) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040), &(0x7f0000000100), &(0x7f00000000c0), 0x0) 1.388432904s ago: executing program 1 (id=54): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xffff6383) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x2) r1 = syz_open_pts() r2 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) closefrom(r3) setrlimit(0x8, &(0x7f0000001ec0)={0xa, 0x37e17907}) r4 = syz_open_pts() ioctl$TIOCSTOP(r2, 0x2000746f) ioctl$TIOCSETAW(r4, 0x802c7415, &(0x7f0000000000)={0x4e, 0x1, 0xffffffc0, 0x2526, "fe00002dae2780c8d9cb40ffffffffffffff00", 0x1000006, 0xcfe}) bind(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f0000000200)='\x00', 0x1) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) closefrom(r6) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f00000003c0)={0x401, 0x1, 0x80000017, 0x346, "93bd7bebc37c0000000000000005fddc68787553", 0x4, 0x80000000}) write(r1, &(0x7f0000000100)="7ef5b69389", 0x5) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f00000000c0)={0x7, 0x6, 0x9, 0xb, "ec953dce41d570d5b31a63a5a08b31db57b5579c", 0x2, 0x4}) r7 = dup2(r5, r5) ioctl$TIOCCLRVERAUTH(r7, 0x2000741d) closefrom(r0) 1.384233289s ago: executing program 4 (id=58): r0 = kqueue1(0x10000) kevent(r0, &(0x7f0000000000)=[{{r0}, 0xfffffffffffffff9, 0x65, 0x2, 0x3, 0x200}, {{r0}, 0xfffffffffffffff6, 0x5, 0x40000000, 0xc, 0x56a}, {{r0}, 0xfffffffffffffff9, 0x2, 0x4, 0x100, 0x3}], 0xf00, 0x0, 0xffff4b54, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = fcntl$dupfd(r1, 0xa, r1) ioctl$AUDIO_STOP(r2, 0x20004127) ioctl$DIOCRGETADDRS(r1, 0xc4504446, &(0x7f0000000180)={{'./file0\x00', './file0\x00', 0x8, 0x8}, &(0x7f0000000100)=[{@rand_addr=0x336, '\x00', './file0\x00', 0x3, 0x9, 0x1a, 0x23, 0x7, 0x8, 0x2}, {@multicast2, '\x00', './file0\x00', 0x1, 0x531, 0x18, 0x1, 0x4, 0x5, 0x2}], 0x4, 0x2, 0x4, 0x3, 0x1, 0x3, 0x2, 0x4}) sysctl$kern(&(0x7f0000000200)={0x1, 0x11}, 0x2, 0x0, 0x0, 0x0, 0x0) 1.227643486s ago: executing program 1 (id=61): r0 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xef) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) (async) ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x400, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) (async) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) lstat(&(0x7f0000000000)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000001900)=[0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0]) setregid(r2, 0x0) (async, rerun: 32) r3 = getpid() (rerun: 32) ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x1400, r3) truncate(&(0x7f0000000080)='./file0\x00', 0x100000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) 1.227100514s ago: executing program 4 (id=62): ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0xc0205609, &(0x7f0000000040)={0x6, 0x807, 0x4, {[0x8, 0x4, 0x806f6, 0x7, 0x1, 0xfffffffffffffffa, 0x6, 0x6, 0x1e, 0x10001, 0x3, 0x8000dde0, 0xffffffff, 0x1, 0x1, 0x2, 0x1, 0x5], [0x5, 0x7, 0xfffffffffffffffa, 0x6, 0x10000, 0x9, 0x3, 0x100000000, 0x6, 0x800], [0x6, 0x7, 0x4, 0x3ff, 0x1, 0x9, 0x1], [0x7ff, 0x9, 0x1, 0x7cee, 0x4000000000000, 0x7], [{0x1, 0x5, 0xfffffefd, 0x80}, {0x2, 0x4, 0x6, 0x64}, {0x5, 0x4, 0x6, 0x2c2}, {0x9, 0x84, 0x30, 0x7}, {0x4, 0xb0, 0x7, 0x4}, {0x9557, 0x6, 0x5, 0x101}, {0x47, 0x8004, 0x4, 0x8}, {0x4, 0xffffffff, 0x20, 0xc}], {0x40, 0x8, 0x3, 0x3}, {0xc8, 0x9, 0x9}}}) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f00000000c0)={0x0}) 1.13548378s ago: executing program 4 (id=63): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x1, 0x8, 0x5, 0x1}, {0x34, 0x43, 0x8, 0xf}, {0x6, 0x5, 0xff, 0x8}]}) open(&(0x7f0000000400)='.\x00', 0x80, 0x12) pselect(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x100000002, 0x400000000000005, 0x1, 0x0, 0x8000, 0x6}, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x37}, 0x6, &(0x7f0000000040)="624e27f6ecc28cf85e9960b325d5c24b0b6796a9b3af7f564015992ca8fc233ed4a7d2637c12a874feb3773130c9c6fce482474af3ad6b37286ecd681b798c8806c5653162b0000069cf22a7439e9d4d7c5a9e7c4c534af6f6461be335fb1fca7a10b7bdb26939687f1c5b9ea3008799ab22d1def7312a9fc163061561db3ea057d9c963f83590827c25adf2ea4145dd0f8aec95fa4c0e37435102f4b978cb1355d4886dbb4841c4b16eb14fd26aa864cfdd125a7af53e02bf6fdd8fdcde8731625c8a654cb34c30078a843c767440c085bef207d8e32df7e22c97dbf28d553d80aa96f3", &(0x7f0000000400)=0xe4, &(0x7f0000000440)="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", 0xfe6) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) select(0x40, &(0x7f0000000140)={0x2, 0x185, 0x6, 0x0, 0x8, 0x9, 0x4}, &(0x7f00000001c0)={0x8001, 0x100000001, 0x2, 0x2, 0x101, 0x2, 0x649d, 0x2}, &(0x7f0000000200)={0x1ff, 0x8, 0x8, 0x3, 0x7f, 0x5, 0x7f}, &(0x7f0000000240)={0x4, 0x1}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0xa, 0x28, 0x66, 0x0, 0x6, 0x2f, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0x7ff, 0x0, 0x3}}}}}}) 1.13498575s ago: executing program 4 (id=64): kqueue1(0x10000) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="abd7453f9950b84fba95b1b61c60075cc39796a11012ada0e0c3c9396b6f8cbd63e10842750ec4f55b1fa662e657103d5890ab8dc4aed3a9f3299eb13292cc984adf77932110f25b7b468f0f33bf3be0d978a872ee2bf014773bfd80c5921ba7f32c7c3374b6e4c8cba3721f117a5b51b43393950b024f68e1a0d073088b14502e", 0x81}], 0x1) (async) execve(0x0, &(0x7f0000000240)=[&(0x7f0000000140)='//\x80UQ\x96\b\x00\x00\x00C\v\x16\xd6K2\xe1e\x8d\xf7\x9fK,\xdd*\x9eB=\xde*\xff\xdf\r\xd9\xa5\xa0k)\x027k\xda\xdf\xb7DO\xbd\xe42\xb5,\x05\x96\x81a)\xdbT$\'\x10\x8d1\x8cU\x1b\xd7\"t8\xda\xbc\x19\xfc\xca\xf46d\xed\xaf\xf8\x8ah\xba*\xce\x98\x85\xc1\xbdk'], 0x0) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async, rerun: 64) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='x\x00') (async, rerun: 64) open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) (async) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5be7) (async) kqueue1(0x0) (async) r0 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0x1c2) poll(&(0x7f0000000100)=[{r0, 0x4}], 0x1, 0x946) (async) socket$inet(0x2, 0x1, 0x6) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect(0x40, &(0x7f0000000080)={0xe0, 0x0, 0x101, 0x9, 0x0, 0x5, 0x9, 0x3}, &(0x7f00000000c0)={0xff, 0xffffffffffffff00, 0x7ff, 0x5, 0x0, 0xf, 0x2, 0xa}, 0x0, 0x0, 0x0) execve(0x0, &(0x7f0000000240)=[&(0x7f0000000140)='//\x00UQ\x96\b\x00\x00\x00C\v\x0f\xd6K2\xe1e\x8d\xf7\x9fK,\xdd*\x9eB=\xde*\xff\xdf\r\xd9\xa5\xa0k)\x027k\xda\xdf\xb7DO\xbd\xe42\xb5,\x05\x96\x81a)\xdbT$\'\x10\x8d1\x8cU\x1b\xd7\"t8\xda\xbc\x19\xfc\xca\xf46d\xed\xaf\xf8\x8ah\xba*\xce\x98\x85\xc1\xbdk'], 0x0) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async, rerun: 32) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='x\x00') (rerun: 32) 1.133871881s ago: executing program 1 (id=66): mkfifo(&(0x7f0000001380)='./file0\x00', 0x8) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000002a80), 0x200, 0x0) access(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000000)={&(0x7f0000002ac0)='./file0\x00', 0x5, 0x0}) 964.673692ms ago: executing program 4 (id=71): open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) r0 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x18, 0x2, 0xfffffffe, '\x00', 0x7f}, 0x1c) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@in6, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/30, 0x1e}, {&(0x7f0000000140)=""/153, 0x99}, {&(0x7f0000000200)=""/95, 0x5f}, {&(0x7f0000000280)=""/200, 0xc8}, {&(0x7f0000000380)=""/55, 0x37}], 0x5, &(0x7f0000000440)=""/167, 0xa7}, 0x2) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x1104, 0xffffffffffffffff) pselect(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xc2d5, 0xffffffffffffffff}, 0x0) 767.109085ms ago: executing program 3 (id=79): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xffff6383) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x2) closefrom(r0) 642.212708ms ago: executing program 0 (id=82): r0 = socket$inet6(0x18, 0x3, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/32, 0x20, 0x1002, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0xd7, "2c522f402c884c2f166af2ad24e1b285", 0x3}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2, &(0x7f0000000300)={0x1c, 0x18, 0x3, 0x7fffffff, "ff020000006708b75f627e7f45005576", 0x8}, 0x1c) 582.84525ms ago: executing program 0 (id=85): r0 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0x1c, 0x18, 0x2, 0x1, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) r1 = socket$inet(0x2, 0x3, 0x0) setsockopt(r1, 0x0, 0x9, &(0x7f0000000000), 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaa0864e4161c82333a3880f44c305b0045f5001400685a2fad98ad6ab1fb574f7078b5b4a254"]) connect$inet6(r0, &(0x7f0000000200)={0x1c, 0x18, 0x0, 0x3fe, "0000000000000100cf122a9a002000", 0x88}, 0x1c) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r2 = socket$inet(0x2, 0x3, 0x14) ioctl$FIOASYNC(r2, 0x802069de, &(0x7f0000000580)=0x7) setsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f0000000080)=0x8, 0x4543) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x14, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) closefrom(r5) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000d00), 0x20, 0x0) ioctl$BIOCLOCK(r6, 0x20004276) ioctl$BIOCIMMEDIATE(r6, 0x80044270, &(0x7f0000000040)=0x6f1) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_cred(r7, 0xffff, 0x1023, &(0x7f00000003c0)={0x0, 0xffffffffffffffff}, 0x20) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x858a, "bc28ce756701431dbc82ca1a240aa623", 0x3}, 0x1c) 581.020775ms ago: executing program 7 (id=86): syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x3, 0x28, 0x64, 0x5, 0x5, 0xc, 0x0, @rand_addr=0x3, @remote={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x101, 0x0, 0x8000}}}}}}) 580.263473ms ago: executing program 3 (id=87): mkfifo(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) execve(0x0, &(0x7f0000000240)=[&(0x7f0000000140)='//\x00UQ\x96\b\x00\x00\x00C\v\x0f\xd6K2\xe1e\x8d\xf7\x9fK,\xdd*\x9eB=\xde*\xff\xdf\r\xd9\xa5\xa0k)\x027k\xda\xdf\xb7DO\xbd\xe42\xb5,\x05\x96\x81a)\xdbT$\'\x10\x8d1\x8cU\x1b\xd7\"t8\xda\xbc\x19\xfc\xca\xf46d\xed\xaf\xf8\x8ah\xba*\xce\x98\x85\xc1\xbdk'], 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$DIOCRADDADDRS(0xffffffffffffffff, 0xc4504443, &(0x7f00000000c0)={{'./file0\x00', './file1\x00', 0x0, 0x7}, 0x0, 0x34, 0x0, 0x2, 0x9, 0x6, 0xffffffff, 0x6, 0x7}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000001700), 0x8840, 0x0) sysctl$net_pipex(&(0x7f00000004c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$DIOCRADDADDRS(r0, 0xc4504443, &(0x7f00000000c0)={{'./file0\x00', './file0\x00', 0x1, 0x7}, 0x0, 0x6, 0x0, 0x2, 0x9, 0x10000006, 0x9, 0x2, 0x7}) mkfifo(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) 516.689006ms ago: executing program 7 (id=89): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001280)={0xffffffffffffffff}) r1 = socket$inet6(0x18, 0x2, 0x0) setsid() r2 = syz_open_pts() r3 = dup2(r2, r2) ioctl$TIOCSCTTY(r3, 0x20007461) r4 = openat$tty(0xffffffffffffff9c, &(0x7f0000000340), 0x20, 0x0) ioctl$TIOCCLRVERAUTH(r4, 0x2000741d) sendmsg$unix(r0, &(0x7f0000002640)={0x0, 0x49, 0x0, 0x0, &(0x7f00000000c0)=[@rights={0x14, 0xffff, 0x1, [0xffffffffffffffff, r1]}], 0x14, 0x1}, 0x404) mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) r5 = open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) ioctl$DIOCGETQUEUES(r5, 0x80184404, &(0x7f0000000040)={0x100, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x8, 0x13}, 0x2}, {{0x9, 0x8}, {0x2f1c, 0x526}, 0x4}, {{0x4000000000000c, 0xfffffffe}, {0x9, 0x1000}, 0x1}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0xd2d7, 0x6, 0x7, 0x4000004}}) ioctl$DIOCGETQUEUES(r5, 0x80044403, &(0x7f0000000040)={0x8, 0x9, {'\x00', './file1\x00', './file1\x00', './file0\x00', {{0x7, 0x2}, {0x9, 0x7}, 0x4}, {{0x9, 0x1}, {0x7, 0x7ff}, 0x3}, {{0x8, 0x2}, {0xc, 0x1000}, 0x3ffffffd}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x1, 0x2, 0x9, 0x4}}) socketpair(0x24, 0x2, 0x0, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x14f, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8848"]) r7 = accept$inet6(r1, &(0x7f0000000000), &(0x7f0000000040)=0x1c) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0x68, &(0x7f0000000100)={{0x1c, 0x18, 0x2, 0xfffeffff, "85d146eb85f221b0aa747870f535edf1", 0x95e}, {0x1c, 0x18, 0x1, 0x5e9f, "d2f9b12183336b7cfeb7a1ca3c2d93c9", 0xdac}, 0x152, [0x8, 0xc, 0x7fffffff, 0x8001, 0x3, 0x2, 0x8, 0xfffffffd]}, 0x5c) bind(r6, &(0x7f00000000c0)=@un=@file={0x0, 0x1, './file0\x00'}, 0xa) listen(r7, 0x472) closefrom(r0) 514.593699ms ago: executing program 0 (id=90): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x4, &(0x7f0000000100)=[{0xc2d, 0x2, 0xd8, 0x9}, {0x200, 0x81, 0x6}, {0x3, 0x2, 0x1}, {0x800, 0x9, 0x1, 0x3}]}) sysctl$kern(0x0, 0x4000027f, &(0x7f0000000080)="d71fa45b011115410408e95e1a0175d59bfd3a2c3264e0aeab24658ab1a5977e", 0x0, 0x0, 0x0) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000002300), 0x1, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$WSKBDIO_SETMAP(r1, 0x8010570e, &(0x7f0000000040)={0x0, 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x4, &(0x7f0000000100)=[{0xc2d, 0x2, 0xd8, 0x9}, {0x200, 0x81, 0x6}, {0x3, 0x2, 0x1}, {0x800, 0x9, 0x1, 0x3}]}) (async) sysctl$kern(0x0, 0x4000027f, &(0x7f0000000080)="d71fa45b011115410408e95e1a0175d59bfd3a2c3264e0aeab24658ab1a5977e", 0x0, 0x0, 0x0) (async) openat$wskbd(0xffffffffffffff9c, &(0x7f0000002300), 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) ioctl$WSKBDIO_SETMAP(r1, 0x8010570e, &(0x7f0000000040)={0x0, 0x0}) (async) 359.483383ms ago: executing program 0 (id=92): r0 = socket$inet(0x2, 0x1, 0x6) connect$inet(r0, &(0x7f0000000700)={0x10, 0x2, 0x2, 0xac1400a6}, 0x10) r1 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_opts(r1, 0x0, 0x24, 0x0, 0x0) ioctl$DIOCRGETASTATS(0xffffffffffffffff, 0xc4504447, &(0x7f0000001600)={{'./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file1aaaaaaaaaaaaaaaaaaaaaaaaa', 0x2, 0x8}, 0x0, 0xa0, 0x0, 0x7, 0x2b, 0x8, 0x5, 0x0, 0x7}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000001700), 0x8840, 0x0) ioctl$DIOCIGETIFACES(r2, 0xc0404469, &(0x7f00000017c0)={'./file0\x00', 0x0, 0x100, 0x20003, 0x38}) setsid() mknod(0x0, 0x2000, 0x7) execve(0x0, 0x0, 0x0) r3 = socket$inet6(0x18, 0x3, 0x7) setsockopt(r3, 0x29, 0x65, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) sysctl$kern(&(0x7f0000000000)={0x1, 0x47}, 0x2, &(0x7f0000000040)="1f32407beaa9b7806f7bb0222cb7ee80d13eff8b80176797c46f68f49d150d8bb9c374aa26685b298ffcf7bc6a0ed5bdeaa3378cb2176ea43848e0a6398e24f795015b4d3552da4ea57e14bccf0f39f38185629a8bf4b04e05eb86c22152fea2ceb9470c90cbbba8dd502f6ed40b08561db43ba61e9f2fa5c9b7aaa000deaffb3186c708c2bd58f9110ba241297e0e", &(0x7f0000000100)=0x8f, &(0x7f0000000140)="9b03b1389e31f3acfd62b8437af932c4bb27ad1396370d29da76eaebf07597c3dbedb2d87bbfa0b8397c6739f7459e71a64c6c83cfaf9cb0943bd808c9a5649b21d57acd530353723cf74f5106df2238f5aaec1de793ceb38979fc77953f1ebf920a5ed8f07ec37b50de8a1eb8d0470a057672230f82a07c228fbe26b56d0a12eefdf15683123dabb5d10d7e0e1e5d2953009f82dd13cb", 0x97) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) closefrom(r5) 355.865478ms ago: executing program 3 (id=93): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$audio(r1, &(0x7f0000000040)=""/66, 0xfd4d) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) preadv(r2, &(0x7f00000003c0)=[{0x0}], 0x1, 0xfffffffffffffffc) (async) sysctl$vm(&(0x7f0000000080)={0x2, 0x7}, 0x2, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) (async) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x18, 0x0, 0x5, "056a99402bc2d453b109ce70b8628a3d", 0x5}, 0x1c) (async) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) (async) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000440)="29d25f48fa", 0xfffffe54}], 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x4011, r0, 0x1eaf) 355.13117ms ago: executing program 2 (id=95): recvmmsg(0xffffffffffffffff, &(0x7f0000002e40)={{0x0, 0x0, &(0x7f0000002dc0), 0x0, 0x0}, 0x7}, 0x38, 0x7000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000002b40)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x406) r1 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x20, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) closefrom(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000004c0)={0x1, 0x1, 0x7fffffffffffffff, 0x9, 0xffffffffffffffff}) setrlimit(0x2, &(0x7f00000001c0)={0x60000000, 0x100000001}) syz_open_pts() write(r1, &(0x7f0000000140)="24f5f3ee345acedf918a081723861446eb5622de68d2a5a0baff99b7aa0bb5fe7455e5fab8e35924eb1aa3149a29fcb6b88f256f4fc3ee2d330be133bb", 0x3d) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0xe1) rename(0x0, 0x0) dup2(r1, r4) read(r4, &(0x7f00000002c0)=""/149, 0x95) 306.062883ms ago: executing program 0 (id=96): r0 = socket$inet6(0x18, 0x3, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) r1 = open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) sendmsg$unix(r1, &(0x7f00000009c0)={&(0x7f00000001c0)=@file={0x6, 0x0, './file1\x00'}, 0xa, &(0x7f0000000900)=[{&(0x7f0000000240)="5570f2db41a90e4174928e3479fb1ed4f387ec221d79f5433a6ed0df3d099854fc029ca8c5c89c34024dc78d1fe7592b9bc955620cbfaddc9755ed0db3b5cb2750b96f921117e38d514b894f26bd4b1e06de2230ce0279d440666a8e58f4242854661b", 0x63}, {&(0x7f0000000340)="247fd963852c9621869f4eafe142e4f7138ee42502bedf4ff5c958", 0x1b}, {&(0x7f0000000540)="57195e567bbef4b0ff3259714c6fd85aaefca87c30787894f1faae99de6ddc17010bd6adaa4593bd7377dfe4baf7d6ce2df9382050219522280c3a36617c297d832eb9cf0cb235e3944d152b052f4a9d0d614d04cff92f74abec2c11118ad97860e79ecfefc2381d8a2dded7f183d47b19c7880a68518437a25bd3393a57300ccfdc93317e7a183ba77ed5f5ded1e926be7958bc58143500e10436b4937a51197a0930ce34da94a7efd2d32ccbabf35eddb6e7d83b00", 0xb6}, {&(0x7f0000000600)="f441cee293b05e3d81376e61251f1fa6dc4d32117dc82e52970920d32c93470e56d81eb0b7dcc7342fbd496a1a0a1035c1601d1620", 0x35}, {&(0x7f0000000640)="4d41b61fe44f9d39683506c854df99b14531f9e1fdd4fe1a45395e7639c65c8beed0a6cad639900ead3c5a0c3769ab1523093f826fc0f04d128dc1a99e27fbd2eaa54ae8f4ff5637ebe49e9287d03d6fd68cc075c4ef165e70b101bd21a6a6bc11417936bf22482b65e009ebbec0bb06306a7a15adb4be4a5d952ec74dde61aaa0f6f1d3e1e509ba186ee71c23b23a127d70d5c0ec1448f64ad4fc471f4fb7a7e343", 0xa2}, {&(0x7f0000000700)="ffbabc3f485cda13ad1b4a9827d044b4ca13f8d016d45ee6f86ba29767c758aa05fbcd7f283460cc058be838c1d2bd57f0240db7b8a49db0ee614c8ccf5dca4e7c82b9933fa3a203580ad761d87eb361600d432d2acca69cd9f9402972f7b83afa471acd165d20b3c939b63e824303e6716f859293d0d01db7ec", 0x7a}, {&(0x7f0000000780)="c84fcf0a87b4e66c8918e6cbd7736f7b22f25426604d5acc43392e6737ae8ef749", 0x21}, {&(0x7f00000007c0)="18e4713ae127c424f217f66a7fad6e219678be8b334e73cab534836571e57782ce66543a0ac4cbd8febf1b68bc382a6f227b84d72d78c4196eb7aead9af28e42a5b8f8f6739ba465df6c814da136669f58809afc28dff2f2df344b9dc1f7560f3c5430803578709cd3e561b34f0d5e5d9408d16b4d8b25b1ba7d989cf6c97328750025e1285f385f59534166578990c88f29ab5619b735481e5371422923418e9280e0f0f2fccebdbd3ddfbe4dd7e38923008f881e748c291683301e3092e86241117ae1bd47f7b5530371f8a7d24de1e91aedfae1081412a6f09d16be444b73a764c7617664807cf46d90cd83ee6fefb16402187e06e0141e6f7d904f4e", 0xfe}, {&(0x7f00000008c0)="b626797cfa15f69c666bd86264b0fd34da458f51019bb2c74058ac8964fd0c5afeaec454882e0d7bfb657d476eb9769d14a0b2b043", 0x35}], 0x9, 0x0, 0x0, 0x400}, 0x400) utimes(0x0, 0x0) ioctl$DIOCGETSTATE(r1, 0xc1084413, &(0x7f0000000400)={{0xffffffffffffff00, './file0\x00', [{[@v4=@remote={0xac, 0x14, 0x0}, @v6=@mcast1], [0x7, 0xf9], 0x4, 0x18}, {[@v4=@rand_addr=0x6, @v6=@remote={0xfe, 0x80, '\x00', 0x0}], [0x7, 0x101], 0x5}], {{0x6, 0xe, 0x1, 0xbb}, 0x6f, 0x235, 0x4, 0x50d, 0xb, 0xc, 0x1}, {{0x7, 0x8, 0x45, 0x2}, 0xf966, 0x2, 0x1, 0x3e25, 0xf, 0x0, 0x7}, @v4=@multicast2, 0x9, 0x7fffffff, 0x8, 0xfffffff9, 0x0, [[0x3, 0x5], [0x10000]], [[0xd, 0x10001], [0x9351, 0x600]], 0x800, [0xa7, 0x7], 0x1cc5, 0x18, 0x0, 0x2, 0x56, 0xf7, 0x29, 0x1, 0xf, 0x4, 0x10, 0x2, "015a"}}) ioctl$DIOCGETQUEUES(r1, 0x80184404, &(0x7f0000000040)={0x100, 0x1, {'\x00', './file1\x00', './file1\x00', './file0\x00', {{0x7, 0x2}, {0x8, 0x13}, 0x2}, {{0x9, 0x8}, {0x2f1c, 0x526}, 0x4}, {{0x4000000000000c, 0x2}, {0x9, 0x1000}, 0x4}, {0x7, 0x0, 0x3, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x4000004}}) ioctl$DIOCGETQUEUES(r1, 0x80044403, &(0x7f0000000040)={0x8, 0x9, {'\x00', './file1\x00', './file1\x00', './file0\x00', {{0x7, 0x2}, {0x9, 0x7}, 0x4}, {{0x9, 0x1}, {0x7, 0x7ff}, 0x3}, {{0x8, 0x2}, {0xc, 0x1000}, 0x3ffffffd}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x1, 0x2, 0x9, 0x4}}) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f00000002c0)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0xd, "00000000fe000000030f00", 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0x1c, 0x18, 0x1, 0xca, "afb3341358eada9f7b7971cbafeeb650", 0x1}, 0x1c) sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) closefrom(r2) 297.716875ms ago: executing program 2 (id=97): sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x3a}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000140)={@broadcast, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x2, 0x36, 0x34, 0x68, 0x0, 0x5, 0x1, 0x0, @multicast1, @remote={0xac, 0x14, 0x0}, {[@ssrr={0x89, 0x3, 0x1}]}}, @icmp=@dest_unreach={0x3, 0x7, 0x0, 0x0, 0x30, 0xc2ac, {0x5, 0x4, 0x1, 0x3a, 0x6, 0x67, 0x0, 0x40, 0x2e, 0x8, @multicast2, @multicast2}}}}}}) sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0xb}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x3a}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) syz_emit_ethernet(0x42, &(0x7f0000000140)={@broadcast, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x2, 0x36, 0x34, 0x68, 0x0, 0x5, 0x1, 0x0, @multicast1, @remote={0xac, 0x14, 0x0}, {[@ssrr={0x89, 0x3, 0x1}]}}, @icmp=@dest_unreach={0x3, 0x7, 0x0, 0x0, 0x30, 0xc2ac, {0x5, 0x4, 0x1, 0x3a, 0x6, 0x67, 0x0, 0x40, 0x2e, 0x8, @multicast2, @multicast2}}}}}}) (async) sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0xb}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) (async) 296.494844ms ago: executing program 3 (id=98): ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000000)={0x4, 0xec49, 0x4, 0xb17b, "a71fa4ed8d3b13b3008b0f60495c48cd27aba779", 0x6, 0x8}) sysctl$kern(&(0x7f0000000000)={0x1, 0x3f}, 0x7, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0x18, 0x8003, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x3a, 0x12, 0x0, 0x0) syz_emit_ethernet(0x243, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa03aaaaaaaa86dd6f75184a020d3a7c39bc48e57db8883fa6958273532df404fe8000000000000000000000000000aa02009078000000086a0e1d10ffff0281fe80000000020000ff010000000000aa"]) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x2, 0x7, 0xf}]}) 295.860147ms ago: executing program 7 (id=99): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffff9c, 0xc06864ce, &(0x7f0000000080)={0x0, 0x80000000, 0x8001, 0xe071419, 0x1, [0x0], [0x7ff, 0x4, 0x8, 0xffffffff], [0x1, 0xffffffff, 0xfffffffd, 0x80000001], [0x0, 0xfffffffffffffff8, 0x4, 0x1]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pread(r4, &(0x7f0000000180)="1005dda5fad6981dd3d6210ccf4ef5ec4370e6ec3ba251a4988a13627a03209d1bcf33336e4a1b7cbd53b27bd3120d600eb83cac27c646217e67c21776430f178c585f3c8fad0c78a93d6c332eb13c2d42c933b7e96a55b8827e948729c58a6b18738c3c0a88c3dc4e9f173ea91966b4362331", 0x73, 0x6) r6 = open(&(0x7f0000000200)='./file0\x00', 0x8000, 0x40) sendto$inet6(r6, &(0x7f0000000240)="f692cb3c905407a3ee38d493a601eb55e69abbf7a5483df7eb8209caf314f42e6682d1f24ec50541240d2ce92073bfd6a681d77002bed47cbc6d82bf0c3d1e8ebb6a2a19a74bf193b93ee92513b4dbbb734af09246dd5446698d9c5d350e6d", 0x5f, 0x404, &(0x7f00000002c0)={0x1c, 0x18, 0x3, 0x6, "fc0e76ed6e34643b87c9dc1f99ebcc1a", 0x2}, 0x1c) chmod(&(0x7f0000000300)='./file0\x00', 0x104) ioctl$DRM_IOCTL_MODE_CLOSEFB(0xffffffffffffff9c, 0xc00864d0, &(0x7f0000000340)={r2}) fcntl$getown(r6, 0x5) ioctl$VT_ACTIVATE(r6, 0x20007605, &(0x7f0000000380)=0xfffffff0) minherit(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) ftruncate(r1, 0xfffffffffffffffe) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f00000003c0)={r0}) syz_emit_ethernet(0xc6, &(0x7f0000000400)={@local, @random="0b9438fddb4d", [], {@generic={0x0, "3fe17580b0ce17ebc925ab2ded6de8362b493f2299cc982093e05b313d7b06eeb5c40f8ae473f03abf087865059911b2637ffe5df8fb7f58571f051d93ccbe7380250604a4902eefa2e59c77f8bc8bedd380b12ad13d58d5fdc67ea5c8fb926ed72105e7db61ddcd28a24b834f4a410093fab23e9ca28e35dae11a59f46549ef5e25fa9425a47cf1880274b2c6895c8615d1f6734e68208a1dd2ffd04ac987cd1280444d9f14cf6314d649244ed8f5503e19c7a387d4e143"}}}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r6, 0xc01864c2, &(0x7f0000000500)={0x0, 0x1, r5, 0x0, 0x1}) ioctl$KDGETLED(r6, 0x40044b41, &(0x7f0000000540)) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r6, 0xc00464c9, &(0x7f0000000580)={r7}) setsockopt(r5, 0x4, 0x5, &(0x7f00000005c0)="8601561ede2dac81f511fcb5b558952608a2a957bdaad055b9af081b7846ae16ef2c43e1dcbcae1f5cbdd1fd3a3f516ef83cf682ad0dd02a93ba1373a675fc0d3a8ee535b1d9074cc42edc0b5544d0d328adbb9882754a10398959592ad0dbef560b34aa743dd115508225a1269c5e106265db5cb98b5bb339c5accca8b9a162c30aacf22c8d59127af03f53ba1c870344dbfd68c29217281ecd369f1ca283ad82e4422a2c3a29962e7d2903f20651bf56d792d1bd3d62d68e5966dff2563a0f76516cbc03d925ff2cc822e3d5bad5af2b7003a007dafa98875184e3ce7e12a94df3f0", 0xe3) ioctl$TIOCSTAT(r6, 0x20007465) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000006c0)={0xffffffff, 0x0, 0x8, 0x101}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000740)={&(0x7f0000000700)=[0x4, 0xfa9, 0x9, 0x2, 0x9, 0x5, 0x6], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000780)={0x400, 0xff, 0xd24, 0x9}) setsockopt$sock_int(r4, 0xffff, 0x10, &(0x7f00000007c0)=0x9, 0x4) mquery(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x3) ioctl$DIOCKILLSTATES(r6, 0x0, &(0x7f0000000800)={{0x100000000, 0x2}, 0x18, '\x00', 0x7, {@table={'./file0\x00', 0x0, 0x3, 0x6}, [0x4, 0x4], 0x0, 0x2, 0x1ff}, {@table={'./file0\x00'}, [0x3, 0xf651], 0x8, 0x6, 0x8}, './file0/file0\x00', './file0\x00', 0x1, 0x10}) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000940)={0x1, 0x0, &(0x7f0000000900)=[0x0]}) dup2(r5, r6) connect$inet(r6, &(0x7f0000000980)={0x10, 0x2, 0x1, 0x9}, 0x10) 205.988132ms ago: executing program 1 (id=100): r0 = syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f00000003c0)={0x401, 0x1, 0x80000017, 0x346, "93bd7bebc37c0000000000000005fddc68787553", 0x4, 0x80000000}) write(r0, &(0x7f0000000100)="7ef5b69389", 0x5) 205.192812ms ago: executing program 3 (id=101): r0 = socket$unix(0x1, 0x5, 0x0) clock_gettime(0x2, 0x0) bind(r0, &(0x7f00000000c0)=@un=@file={0x0, 0x1, './file0\x00'}, 0xa) listen(r0, 0x472) chroot(&(0x7f0000000180)='./file0\x00') r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0xd, 0x1, './file0\x00'}, 0xa) closefrom(r1) unveil(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='c\x00') sysctl$vm_swapencrypt(&(0x7f00000001c0), 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000002b40)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x8) pipe(&(0x7f0000000000)) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) pselect(0x40, &(0x7f0000000080)={0xe0, 0x0, 0x101, 0x9, 0x2, 0xffffffff, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCIMMEDIATE(r4, 0x80044270, &(0x7f0000000000)=0x400) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) socket$inet(0x2, 0x2, 0x0) pselect(0x40, &(0x7f0000000040)={0x4000000000000000, 0xffff, 0x8, 0xfd, 0x10, 0x81, 0x6, 0x3}, &(0x7f00000000c0)={0x5, 0x6, 0x9, 0x5, 0x1ff, 0xd6, 0x100, 0xbb5}, &(0x7f0000000240)={0x8, 0x7fff, 0x1, 0x9, 0x0, 0x8, 0x6, 0x9}, &(0x7f0000000140)={0xffff, 0x30000000000000}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000cc0)=ANY=[]) recvfrom$unix(r3, &(0x7f0000000000)=""/166, 0xa6, 0x1040, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000680)={{&(0x7f0000000080)=@in, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/75, 0x4b}, {&(0x7f0000000180)}, {&(0x7f0000000240)=""/132, 0x84}, {&(0x7f0000000300)=""/163, 0xa3}, {&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/107, 0x6b}, {&(0x7f0000000500)=""/49, 0x31}, {&(0x7f0000000540)=""/99, 0x63}], 0x8, &(0x7f0000000640)=""/49, 0x31}, 0xd}, 0x38, 0x2800, &(0x7f00000006c0)={0x9}) accept4(r0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x36) ioctl$FIOASYNC(0xffffffffffffffff, 0x8004667d, &(0x7f0000000040)=0x4) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r5 = socket$inet6(0x18, 0x2, 0x0) lseek(r5, 0x1, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x12}, 0x4, &(0x7f00000023c0), &(0x7f0000000000)=0x19, 0x0, 0xfffffffffffffe99) 204.540833ms ago: executing program 2 (id=102): r0 = kqueue1(0x10000) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) kevent(r0, 0x0, 0x5, 0x0, 0x1, &(0x7f00000001c0)={0x5, 0x100000002}) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='w\x00') open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) kqueue1(0x10000) (async) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) (async) kevent(r0, 0x0, 0x5, 0x0, 0x1, &(0x7f00000001c0)={0x5, 0x100000002}) (async) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='w\x00') (async) open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) (async) 201.497446ms ago: executing program 7 (id=103): r0 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0x42) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0x3, 0x6, 0x401, {[0x6, 0x2, 0x80000001, 0x0, 0x7, 0x200, 0x80000001, 0x9, 0x0, 0x0, 0x1ff, 0xffff, 0x7fff, 0x692, 0x0, 0x22, 0x2, 0xf], [0x3, 0x7fffffff, 0x7, 0x6, 0x8001, 0x101, 0x18000000, 0x2, 0x5, 0x1], [0x2, 0x2, 0x1, 0x80, 0x3, 0xfffffffffffffffe, 0x1000], [0x10000, 0xd, 0x8000, 0x2, 0xd9, 0x9], [{0x400, 0x8, 0xce, 0x400}, {0x3, 0x2, 0x3, 0x400}, {0x1, 0x547, 0x4e0ec4e4, 0x6}, {0x6, 0xeb82, 0x7fffffff, 0x1b}, {0xd, 0x40000007, 0x6, 0x7}, {0x0, 0x1, 0x2, 0x1}, {0x4, 0xa, 0x1, 0x5}, {0x1, 0x6fb, 0x10000, 0x2}], {0x7fff, 0x0, 0xc687, 0x2}, {0x11b, 0x4, 0x80000000, 0xfffffffffffffffc}}}) r2 = socket$inet(0x2, 0x3, 0xfe) r3 = open$dir(0x0, 0x20000, 0x82) symlinkat(0x0, r3, 0x0) setsockopt$inet_opts(r2, 0x0, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$DIOCRCLRTABLES(r1, 0xc088444f, &(0x7f0000000180)={{'./file0\x00', './file0\x00', 0x77, 0x9}, 0x0, 0x0, 0x0, 0x2, 0x1, 0x40000005, 0x10, 0x8, 0xfffffffc}) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x300, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0x42) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) (async) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0x3, 0x6, 0x401, {[0x6, 0x2, 0x80000001, 0x0, 0x7, 0x200, 0x80000001, 0x9, 0x0, 0x0, 0x1ff, 0xffff, 0x7fff, 0x692, 0x0, 0x22, 0x2, 0xf], [0x3, 0x7fffffff, 0x7, 0x6, 0x8001, 0x101, 0x18000000, 0x2, 0x5, 0x1], [0x2, 0x2, 0x1, 0x80, 0x3, 0xfffffffffffffffe, 0x1000], [0x10000, 0xd, 0x8000, 0x2, 0xd9, 0x9], [{0x400, 0x8, 0xce, 0x400}, {0x3, 0x2, 0x3, 0x400}, {0x1, 0x547, 0x4e0ec4e4, 0x6}, {0x6, 0xeb82, 0x7fffffff, 0x1b}, {0xd, 0x40000007, 0x6, 0x7}, {0x0, 0x1, 0x2, 0x1}, {0x4, 0xa, 0x1, 0x5}, {0x1, 0x6fb, 0x10000, 0x2}], {0x7fff, 0x0, 0xc687, 0x2}, {0x11b, 0x4, 0x80000000, 0xfffffffffffffffc}}}) (async) socket$inet(0x2, 0x3, 0xfe) (async) open$dir(0x0, 0x20000, 0x82) (async) symlinkat(0x0, r3, 0x0) (async) setsockopt$inet_opts(r2, 0x0, 0x1, 0x0, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) ioctl$DIOCRCLRTABLES(r1, 0xc088444f, &(0x7f0000000180)={{'./file0\x00', './file0\x00', 0x77, 0x9}, 0x0, 0x0, 0x0, 0x2, 0x1, 0x40000005, 0x10, 0x8, 0xfffffffc}) (async) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x300, 0x0) (async) 123.331744ms ago: executing program 7 (id=104): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xffff6383) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x2) closefrom(r0) 121.939413ms ago: executing program 2 (id=105): syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x3, 0x28, 0x64, 0x5, 0x5, 0xc, 0x0, @rand_addr=0x3, @remote={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x101, 0x0, 0x8000}}}}}}) 121.327598ms ago: executing program 2 (id=106): r0 = socket$inet6(0x18, 0x3, 0x1) r1 = socket$inet(0x2, 0x8003, 0x1) getsockopt(r1, 0x0, 0x6d, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x81, '\x00', 0x7}, 0x1c) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x1, 0x350, "6a450e1b6a519a71b2"}], 0x18}, 0x404) 3.629394ms ago: executing program 4 (id=107): r0 = socket$inet(0x2, 0x8000, 0x1) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x0}, 0x10) closefrom(r0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) r2 = socket$inet6(0x18, 0x3, 0x7) sysctl$net_inet_ip(&(0x7f0000000140)={0x4, 0x2, 0x0, 0x16}, 0x4, &(0x7f00000001c0)="ec12aa50b00005e077", &(0x7f0000000200)=0x9, &(0x7f0000000240)="14f2253d8c10bb778aad3cd9547a02a4370b7fcec08537d97d478bb588d7d43b0129890764", 0x25) getsockname(r2, &(0x7f0000000080)=@in6, &(0x7f0000002580)=0x1c) sendsyslog(&(0x7f0000000100)="4ea52f2e4208f49d49dec4c4e593b1a81476493dea1358d5c492419139a4a5a99a6585d1094ab6789eb4199badfa8f", 0x2f, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) mkdir(&(0x7f0000000080)='./file0\x00', 0x205) openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsid() r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0xc1, 0x0, 0xff, 0x7}, {0xfffe, 0x0, 0xd7, 0xfffffff7}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) fchdir(r0) 3.15918ms ago: executing program 2 (id=108): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) kqueue1(0x10000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="f62ffcb7", 0x4}], 0x1}, 0x400) pselect(0x40, &(0x7f0000000000)={0x45, 0x8, 0x6, 0x7, 0x100, 0x49f9, 0x8, 0xfffffffffffff175}, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSDIRFILT(r0, 0x8004427d, &(0x7f0000000100)) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='c\x00') mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='x\x00') open$dir(&(0x7f0000000140)='./file0/file0\x00', 0x80, 0x1) 1.616582ms ago: executing program 0 (id=109): getitimer(0x2, &(0x7f0000000000)) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) r1 = kqueue1(0x10000) kevent(r1, &(0x7f0000000200)=[{{r0}, 0xffffffffffffffff, 0x1, 0x20, 0x6, 0x3}], 0x81, 0x0, 0x7, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) 1.052268ms ago: executing program 7 (id=110): r0 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, r2, 0x1f2, 0x2, 0x0, 0x0, 0x6}, 0x9, 0x0, 0x0, 0xc0, 0x0, 0x5, 0x40000000004, 0x9, 0x4, 0x9, 0x80000dcf}) bind$unix(r1, &(0x7f0000000040)=@file={0x6, 0x1, './file0\x00'}, 0xa) (async) seteuid(0xffffffffffffffff) (async) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x1000) 0s ago: executing program 3 (id=111): mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x7fff) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x7fff) open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x3c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. Connection to 10.128.0.151 closed by remote host. pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-kasan-3.us-central1-b.c.syzkaller.internal) (tty00) login: KASAN: invalid read of 4 bytes at 0xffffffff850a97f4 from pc 0xffffffff835df31d KASAN: first bad byte at 0xffffffff850a97f4 (+0); shadow 0xfa: global redzone (out-of-bounds) KASAN: 0xffffffff850a97f4 is 16 bytes to the right of the 4-byte global 'mem_no' (/syzkaller/managers/kasan/kernel/sys/arch/amd64/amd64/conf.c) KASAN: pc: checkalias+0x47d KASAN: call trace: #0 __asan_load4_noabort+0x82 #1 checkalias+0x47d #2 ffs_vinit+0x227 #3 ffs_vget+0x748 #4 ufs_lookup+0x15c1 #5 VOP_LOOKUP+0xda #6 vfs_lookup+0xfbd #7 namei+0xe19 #8 domknodat+0x103 #9 syscall+0x1089 #10 Xsyscall+0x128 KASAN: shadow of 0xffffffff850a9680..0xffffffff850a9900 (1 cell = 8 bytes): 0xffffffff850a9680: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0xffffffff850a9700: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa >0xffffffff850a9780: fa fa fa fa fa fa fa fa 00 fa fa fa 00 fa[fa]fa 0xffffffff850a9800: 00 fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00 0xffffffff850a9880: 00 00 00 00 00 00 00 00 00 fa fa fa fa fa fa fa KASAN: legend: 00 valid; 01..07 partial; fb malloc redzone; fc malloc freed; fd pool freed; fe kmem; fa global; f1..f4/f8 stack/scope panic: Caught invalid memory access at ffffffff850a97f4 size 4 op 0 Stopped at db_enter+0x17: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND *269299 29419 0 0 0x4000000 1K syz-executor 392274 55497 0 0x2 0 0 syz-executor db_enter() at db_enter+0x17 panic(ffffffff84636510) at panic+0x270 __asan_load4_noabort(ffffffff850a97f4) at __asan_load4_noabort+0xa3 checkalias(ffff8000018a1c08,7fff) at checkalias+0x47d ffs_vinit(ffff800000d80800,ffff8000306ebc80) at ffs_vinit+0x227 ffs_vget(ffff800000d80800,665e,ffff8000306ebe40) at ffs_vget+0x748 ufs_lookup() at ufs_lookup+0x15c1 VOP_LOOKUP(ffff8000018a16f8,ffff8000306ec4b0,ffff8000306ec4e0) at VOP_LOOKUP+0xda vfs_lookup(ffff8000306ec480) at vfs_lookup+0xfbd namei(ffff8000306ec480) at namei+0xe19 domknodat(ffff800045ff7ca8,ffffff9c,200000000040,2000,7fff) at domknodat+0x103 syscall(ffff8000306ec790) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x1381bdf7db0, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: Caught invalid memory access at ffffffff850a97f4 size 4 op 0 ddb{1}> show kasan KASAN: invalid read of 4 bytes at 0xffffffff850a97f4 from pc 0xffffffff835df31d KASAN: first bad byte at 0xffffffff850a97f4 (+0); shadow 0xfa: global redzone (out-of-bounds) KASAN: 0xffffffff850a97f4 is 16 bytes to the right of the 4-byte global 'mem_no' (/syzkaller/managers/kasan/kernel/sys/arch/amd64/amd64/conf.c) KASAN: pc: checkalias+0x47d KASAN: call trace: #0 __asan_load4_noabort+0x82 #1 checkalias+0x47d #2 ffs_vinit+0x227 #3 ffs_vget+0x748 #4 ufs_lookup+0x15c1 #5 VOP_LOOKUP+0xda #6 vfs_lookup+0xfbd #7 namei+0xe19 #8 domknodat+0x103 #9 syscall+0x1089 #10 Xsyscall+0x128 KASAN: shadow of 0xffffffff850a9680..0xffffffff850a9900 (1 cell = 8 bytes): 0xffffffff850a9680: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0xffffffff850a9700: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa >0xffffffff850a9780: fa fa fa fa fa fa fa fa 00 fa fa fa 00 fa[fa]fa 0xffffffff850a9800: 00 fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00 0xffffffff850a9880: 00 00 00 00 00 00 00 00 00 fa fa fa fa fa fa fa KASAN: legend: 00 valid; 01..07 partial; fb malloc redzone; fc malloc freed; fd pool freed; fe kmem; fa global; f1..f4/f8 stack/scope ddb{1}> trace db_enter() at db_enter+0x17 panic(ffffffff84636510) at panic+0x270 __asan_load4_noabort(ffffffff850a97f4) at __asan_load4_noabort+0xa3 checkalias(ffff8000018a1c08,7fff) at checkalias+0x47d ffs_vinit(ffff800000d80800,ffff8000306ebc80) at ffs_vinit+0x227 ffs_vget(ffff800000d80800,665e,ffff8000306ebe40) at ffs_vget+0x748 ufs_lookup() at ufs_lookup+0x15c1 VOP_LOOKUP(ffff8000018a16f8,ffff8000306ec4b0,ffff8000306ec4e0) at VOP_LOOKUP+0xda vfs_lookup(ffff8000306ec480) at vfs_lookup+0xfbd namei(ffff8000306ec480) at namei+0xe19 domknodat(ffff800045ff7ca8,ffffff9c,200000000040,2000,7fff) at domknodat+0x103 syscall(ffff8000306ec790) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x1381bdf7db0, count: -13 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff8000306eb910 rbx 0xffff8000306eb980 rdx 0 rcx 0xffff800028fe3ff0 rax 0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xffff8000306eb6f8 r11 0xffffffff831c6730 x86_bus_space_io_read_1 r12 0xffffffff84636510 __rodata_start+0x9e510 r13 0xffff800028fe4c08 r14 0xffff800028fe4e07 r15 0x1 rip 0xffffffff82e89947 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff8000306eb910 ss 0 db_enter+0x17: popq %rbp ddb{1}> show proc PROC (syz-executor) tid=269299 pid=29419 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045ff67e8,0xffff800045ff7a20 process=0xffff800045ff2b70 user=0xffff8000306e1000, vmspace=0xffff800001c9fb90 estcpu=36, cpticks=14, pctcpu=0.0, user=0, sys=14, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 29419 464095 61061 0 2 0 0 syz-executor *29419 269299 61061 0 7 0 0x4000000 syz-executor 29419 352752 61061 0 3 0 0x4000080 fsleep syz-executor 38899 371410 12185 0 2 0 0 syz-executor 38899 207876 12185 0 3 0 0x4000080 fsleep syz-executor 14896 73970 29898 0 2 0 0 syz-executor 14896 407982 29898 0 3 0 0x4000080 fsleep syz-executor 14896 180661 29898 0 3 0 0x4000080 fsleep syz-executor 46570 163120 14111 0 2 0 0 syz-executor 46570 316300 14111 0 3 0 0x4000080 fsleep syz-executor 77823 273601 1 0 3 0x100003 0x80 ttyin getty 55497 392274 2441 0 7 0x2 0 syz-executor 51786 343717 2441 0 3 0x2 0x80 wait syz-executor 45050 475490 2441 0 3 0x2 0x80 wait syz-executor 14111 162751 2441 0 3 0x2 0x80 nanoslp syz-executor 61061 498921 2441 0 3 0x2 0x80 nanoslp syz-executor 29898 487733 2441 0 3 0x2 0x80 nanoslp syz-executor 17724 85259 2441 0 3 0x2 0x80 nanoslp syz-executor 12185 87769 2441 0 3 0x2 0x80 nanoslp syz-executor 2441 152490 1 0 3 0x2 0x80 kqread syz-executor 34280 308735 1 0 3 0x2 0x88 kqread sshd 67835 108693 13262 74 3 0x1100012 0x80 bpf pflogd 13262 175436 1 0 3 0 0x80 sbwait pflogd 60035 380750 44913 73 3 0x1100010 0x80 kqread syslogd 44913 470243 1 0 3 0x100002 0x80 sbwait syslogd 66382 290843 1 0 3 0x100000 0x80 kqread resolvd 77715 15461 99337 77 3 0x100012 0x80 kqread dhcpleased 35540 200874 99337 77 3 0x100012 0x80 kqread dhcpleased 99337 154878 1 0 3 0 0x80 kqread dhcpleased 40714 453091 0 0 3 0x14000 0x200 bored smr 340 380844 0 0 2 0x14000 0x200 zerothread 83549 135609 0 0 3 0x14000 0x200 aiodoned aiodoned 85056 167813 0 0 3 0x14000 0x200 syncer update 72150 308575 0 0 3 0x14000 0x200 cleaner cleaner 76408 399495 0 0 3 0x14000 0x200 reaper reaper 9776 432072 0 0 3 0x14000 0x200 pgdaemon pagedaemon 89793 466435 0 0 3 0x14000 0x200 bored viomb 76920 298263 0 0 3 0x14000 0x40000200 acpi0 acpi0 52509 350029 0 0 3 0x14000 0x40000200 idle1 27101 393482 0 0 3 0x14000 0x200 bored softnet1 87012 277943 0 0 3 0x14000 0x200 bored softnet0 62911 499820 0 0 3 0x14000 0x200 bored systqmp 5521 319124 0 0 3 0x14000 0x200 bored systq 44387 323990 0 0 3 0x14000 0x200 tmoslp softclockmp 20364 47215 0 0 3 0x14000 0x40000200 tmoslp softclock 16863 340265 0 0 3 0x14000 0x40000200 idle0 1 241097 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 29419 (syz-executor) thread 0xffff800045ff7ca8 (269299) exclusive rrwlock inode r = 0 (0xffff800001d41a38) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 ufs_ihashins+0xda #5 ffs_vget+0x2e9 #6 ufs_lookup+0x15c1 #7 VOP_LOOKUP+0xda #8 vfs_lookup+0xfbd #9 namei+0xe19 #10 domknodat+0x103 #11 syscall+0x1089 #12 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xffff800001d416c0) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 vn_lock+0xca #5 vfs_lookup+0x1f7 #6 namei+0xe19 #7 domknodat+0x103 #8 syscall+0x1089 #9 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff85435b40) #0 witness_lock+0x632 #1 __mp_acquire_count+0x48 #2 sleep_finish+0x423 #3 rw_do_enter_write+0x21f #4 rrw_enter+0xf0 #5 VOP_LOCK+0x17e #6 vn_lock+0xca #7 vfs_lookup+0x1f7 #8 namei+0xe19 #9 domknodat+0x103 #10 syscall+0x1089 #11 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11058 12249K 12437K 166960K 12264 0 pcb 19 26K 27K 166960K 53 0 rtable 241 12K 13K 166960K 361 0 pf 34 22K 24K 166960K 52 0 ifaddr 43 12K 12K 166960K 48 0 ifgroup 55 2K 2K 166960K 61 0 sysctl 1 1K 13K 166960K 5 0 counters 70 42K 43K 166960K 76 0 ioctlops 0 0K 4K 166960K 1503 0 iov 0 0K 2K 166960K 2 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1300 84K 84K 166960K 1429 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 2 2K 6K 166960K 6 0 VM map 2 1K 1K 166960K 2 0 sem 5 0K 0K 166960K 5 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 292K 166960K 11964 0 file desc 17 61K 93K 166960K 241 0 proc 73 144K 193K 166960K 593 0 subproc 72 9K 9K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 ip_moptions 0 0K 0K 166960K 4 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 4 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 61 425K 425K 166960K 61 0 exec 0 0K 2K 166960K 399 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 14 124K 124K 166960K 15 0 UVM amap 216 219K 264K 166960K 3888 0 UVM aobj 10 4K 4K 166960K 11 0 pinsyscall 1061 1752K 1754K 166960K 1434 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 1 0 NDP 12 0K 2K 166960K 31 0 temp 36 9166K 9176K 166960K 4306 0 kqueue 13 40K 48K 166960K 44 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 36 0 33 1 0 1 1 0 8 0 rtentry 176 113 0 1 6 0 6 6 0 8 0 unpcb 144 126 0 110 1 0 1 1 0 8 0 syncache 336 4 0 4 2 1 1 1 0 8 1 tcpcb 736 21 0 18 1 0 1 1 0 8 0 arp 136 19 0 0 1 0 1 1 0 8 0 inpcb 328 167 0 158 4 0 4 4 0 8 3 nd6 152 25 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 3 0 3 1 0 1 1 0 8 1 pffrag 232 3 0 0 1 0 1 1 0 482 0 pffrnode 88 3 0 0 1 0 1 1 0 8 0 pffrent 40 4 0 1 1 0 1 1 0 8 0 pfosfp 40 1429 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1429 0 714 21 0 21 21 0 8 0 pfstitem 24 26 0 0 1 0 1 1 0 8 0 pfstkey 128 26 0 0 1 0 1 1 0 8 0 pfstate 448 26 0 0 3 0 3 3 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 454 0 0 29 0 29 29 0 8 0 art_table 40 455 0 0 5 0 5 5 0 8 0 art_node 32 113 0 11 1 0 1 1 0 8 0 semapl 72 3 0 0 1 0 1 1 0 8 0 shmpl 112 8 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1739 0 266 93 0 93 93 0 8 0 ffsino 296 1739 0 266 114 0 114 114 0 8 0 nchpl 144 2096 0 387 64 0 64 64 0 8 0 vnodes 216 1871 0 0 104 0 104 104 0 8 0 namei 1024 6592 0 6591 2 0 2 2 0 8 1 percpumem 16 54 0 3 1 0 1 1 0 8 0 kstatmem 264 33 0 6 2 0 2 2 0 8 0 scxspl 216 7393 0 7393 5 3 2 3 1 8 2 plimitpl 152 37 0 22 1 0 1 1 0 8 0 sigapl 424 568 0 524 7 0 7 7 0 8 1 knotepl 120 81 0 0 3 0 3 3 0 8 0 kqueuepl 224 54 0 44 1 0 1 1 0 8 0 pipepl 344 149 0 122 3 0 3 3 0 8 0 fdescpl 528 552 0 524 3 0 3 3 0 8 0 filepl 160 2266 0 2046 11 0 11 11 0 8 1 lockfpl 104 46 0 44 1 0 1 1 0 8 0 lockfspl 48 24 0 22 1 0 1 1 0 8 0 sessionpl 144 29 0 21 1 0 1 1 0 8 0 pgrppl 48 37 0 21 1 0 1 1 0 8 0 ucredpl 104 192 0 180 1 0 1 1 0 8 0 zombiepl 144 527 0 524 1 0 1 1 0 8 0 processpl 1232 568 0 524 5 0 5 5 0 8 0 procpl 664 741 0 691 5 0 5 5 0 8 0 sockpl 752 331 0 303 7 0 7 7 0 8 3 mcl64k 65536 5 0 0 1 0 1 1 0 8 0 mcl16k 16384 3 0 0 1 0 1 1 0 8 0 mcl9k128 9344 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 130 0 0 17 0 17 17 0 8 0 mcl2k 2048 18 0 0 3 0 3 3 0 8 0 mextrefs 64 21 0 0 1 0 1 1 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 242 0 0 16 0 16 16 0 8 0 bufpl 272 2470 0 106 158 0 158 158 0 8 0 anonpl 32 3934 0 0 32 0 32 32 0 222 0 amapchunkpl 152 11292 0 10849 21 0 21 21 0 158 2 amappl16 200 1985 0 1959 5 3 2 5 0 8 0 amappl15 192 5 0 5 1 1 0 1 0 8 0 amappl14 184 467 0 467 1 0 1 1 0 8 1 amappl13 176 128 0 117 1 0 1 1 0 8 0 amappl12 168 827 0 800 2 0 2 2 0 8 0 amappl11 160 23 0 23 1 1 0 1 0 8 0 amappl10 152 65 0 51 1 0 1 1 0 8 0 amappl9 144 274 0 274 1 1 0 1 0 8 0 amappl8 136 103 0 100 1 0 1 1 0 8 0 amappl7 128 167 0 155 1 0 1 1 0 8 0 amappl6 120 158 0 158 1 0 1 1 0 8 1 amappl5 112 109 0 100 1 0 1 1 0 8 0 amappl4 104 315 0 296 1 0 1 1 0 8 0 amappl3 96 2184 0 2079 4 0 4 4 0 8 0 amappl2 88 564 0 511 2 0 2 2 0 8 0 amappl1 80 11515 0 11071 17 2 15 16 0 8 4 amappl 88 3125 0 2975 4 0 4 4 0 92 0 uvmvnodes 80 103 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 10 0 1 1 0 1 1 0 8 0 uaddrrnd 24 552 0 524 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 552 0 524 1 0 1 1 0 8 0 vmmpekpl 168 6793 0 6759 2 0 2 2 0 8 0 vmmpepl 168 44994 0 43387 87 0 87 87 0 357 11 vmsppl 488 551 0 524 5 0 5 5 0 8 1 rwobjpl 80 16407 0 15500 24 0 24 24 0 8 1 pdppl 4096 1113 0 1048 101 34 67 89 0 8 2 pvpl 32 10033 0 0 83 2 81 82 0 265 0 pmappl 256 551 0 524 3 0 3 3 0 8 0 extentpl 40 47 0 29 1 0 1 1 0 8 0 phpool 120 440 0 38 13 0 13 13 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x19: leave x86_ipi_db(ffffffff851c3ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff85435340) at __mp_lock+0x272 softintr_dispatch(0) at softintr_dispatch+0x215 dosoftint(0) at dosoftint+0x7b Xsoftclock() at Xsoftclock+0x27 __asan_load4_noabort(ffffffff85435b38) at __asan_load4_noabort+0x9 __mp_lock(ffffffff85435340) at __mp_lock+0x27a syscall(ffff800029ac8d50) at syscall+0x1048 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x73fcf41d8c80, count: 4 ddb{0}> trace x86_ipi_db(ffffffff851c3ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff85435340) at __mp_lock+0x272 softintr_dispatch(0) at softintr_dispatch+0x215 dosoftint(0) at dosoftint+0x7b Xsoftclock() at Xsoftclock+0x27 __asan_load4_noabort(ffffffff85435b38) at __asan_load4_noabort+0x9 __mp_lock(ffffffff85435340) at __mp_lock+0x27a syscall(ffff800029ac8d50) at syscall+0x1048 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x73fcf41d8c80, count: -11 ddb{0}>