last executing test programs: 1.13943555s ago: executing program 7 (id=8): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000180)="01004008", 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0xffffffff80000000) (async) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = fcntl$getown(r1, 0x5) fcntl$setown(r2, 0x6, r3) setresgid(0x0, 0xffffffffffffffff, 0xffffffffffffffff) (async) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e5000000", 0x4) (async) r4 = socket$inet6(0x18, 0x4000, 0x4) bind$inet6(r4, &(0x7f0000000000)={0x1c, 0x18, 0x1, 0x8, "da7a9de71944e2b6589d99d895524832", 0x7d54}, 0x1c) (async) r5 = syz_open_pts() fcntl$lock(r5, 0xb, 0x0) 1.136306791s ago: executing program 3 (id=4): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) r0 = open$dir(&(0x7f0000000140)='./bus\x00', 0x20, 0x1ae44c217401e030) (async) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1, 0x7}) (async) r1 = socket(0x18, 0xc003, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0xe, 0x3, 0x10}, 0xc) (async) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r2, 0x0, 0x64, &(0x7f0000000180)="01004008", 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f00000001c0)={{0x1c, 0x18, 0x1, 0x3, "570600000000000000d9c41308002549", 0x1003}, {0x1c, 0x18, 0x1, 0xfffffffb, "ba00", 0x7}, 0x1161, [0xffffffff, 0x8, 0xe784, 0x508, 0x7ff, 0x2, 0x400, 0x7fffffff]}, 0x5c) closefrom(r0) 1.117303713s ago: executing program 2 (id=3): mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x3201) (async) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) ioctl$TIOCFLUSH(r0, 0xc0187009, &(0x7f0000000080)) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f00000000c0)={0x1, 0x400}) (async) r1 = shmget$private(0x0, 0x2000, 0x88, &(0x7f0000001000/0x2000)=nil) (async) setuid(0xee01) shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc290560b, &(0x7f0000000100)={0x10, 0x5, [{&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x800}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x4000000000000000}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x7}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x5}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x40000eb}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xb1}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xffffffffffff0000}], './file0\x00', 0x3, 0x4, 0xfff, 0x0, [0x7, 0x1689d41c, 0x80000001, 0x401, 0x0, 0x20009, 0x9, 0x78, 0x9, 0xfffffffd, 0x7, 0x10001, 0x6, 0x6, 0x8001, 0x8, 0x3ff, 0x7, 0x1, 0x0, 0xfffffff7, 0x9, 0x7, 0x280000, 0x4, 0x1, 0x0, 0x2, 0x3, 0x7, 0x0, 0x6, 0x0, 0xfff, 0x4, 0x0, 0xffffffff, 0x0, 0x8, 0x100, 0xffffff80, 0x2, 0xdae, 0x7ff, 0x1, 0x80000003, 0x6, 0x101, 0x0, 0xfffffffd, 0x10000000, 0x8, 0x2, 0x5, 0x1, 0x6, 0x6, 0x46af0a69, 0x4a9, 0x80000000, 0x10001, 0x6, 0x9, 0x2, 0x7ff, 0xff, 0x3, 0x2, 0x6, 0x6, 0x1, 0x2, 0x6, 0x3, 0x5, 0x9, 0xbe, 0x7, 0xfffffffc, 0x2, 0xf8000000, 0x3, 0x4, 0xbbf, 0x6, 0x3, 0x80000009, 0x1000000, 0x0, 0xd, 0x4, 0xffaf, 0x6, 0x1, 0x9, 0xce, 0x8, 0x8, 0xa94a, 0x0, 0x987, 0x5, 0x6, 0xa9d4, 0xfffffff2, 0x8000, 0x1, 0x6, 0xcc6, 0x400, 0xfffffffd, 0xa19, 0x3, 0x6, 0x88, 0x80000001, 0x4, 0x1, 0x2, 0x9, 0x53f1, 0x1000, 0xfffffffd, 0xffffff25, 0x9, 0xc144, 0x7, 0x3, 0x9, 0x8, 0x470f, 0x1, 0x4, 0x6, 0xffff, 0x2, 0xfffffffc, 0x6, 0x5, 0x4, 0x5, 0x5a9c, 0x4, 0xeb6, 0x5, 0x3, 0x2, 0x2, 0x2, 0x8000, 0x8, 0xaa, 0x8c, 0x38, 0x6, 0x9, 0xb277, 0x400, 0x7, 0x7, 0xd4, 0x7, 0x4, 0x9, 0x75, 0x1ff, 0x1, 0x800, 0x800, 0x3, 0x1ff, 0x401, 0x1000, 0x4be, 0x7, 0x1, 0x100, 0x3, 0x2, 0x8, 0x239ed050, 0x7f, 0xff, 0x7, 0x9, 0x3ff, 0x4, 0x5317ce34, 0x0, 0x101, 0x80000080, 0x2, 0x10, 0x2, 0x6, 0x8, 0xb, 0x4, 0x9, 0x40, 0x3, 0x6, 0xffff, 0x0, 0x4, 0x1ff, 0x1ff, 0x16, 0x7, 0x4, 0xffffff01, 0x6, 0x5, 0x2, 0x4, 0x4, 0xffffffff, 0x788, 0x0, 0x6, 0x9, 0x1, 0x6, 0x6, 0x6, 0x6, 0xffff, 0x5310, 0x4, 0xd, 0x9, 0x8001, 0x5, 0x5, 0xfffffff7, 0xa, 0x400, 0x4, 0x5, 0x200, 0x6, 0x5, 0x4, 0x4, 0x3, 0x693, 0x40, 0x8, 0x6, 0x80000000, 0x1d209cda, 0x7, 0x4, 0x7fffffff, 0x63439b01, 0xfffffff8, 0xfffffff8, 0x7, 0x5, 0x9, 0x5, 0xfffff19c, 0x6, 0xed, 0x6, 0xf4d7, 0x9, 0x9, 0xffff, 0x6, 0x16947a10, 0x3, 0x7, 0x6, 0xc, 0x1, 0x10000, 0x6, 0x9, 0xffff0000, 0x9, 0x9, 0x81, 0x7fffffff, 0x1, 0xda6, 0xf27e, 0x8001, 0xf, 0x0, 0xe7, 0x93c9, 0x3, 0x4, 0x8, 0x1, 0x2, 0x5, 0x4, 0x0, 0xf, 0x2, 0xffffffff, 0x8, 0xffff, 0xdc1c, 0x44cf, 0x6, 0xfffffff8, 0x6, 0xe877, 0x5, 0x1, 0x5, 0x1014, 0x1, 0x0, 0x3dd, 0x2, 0xffff5ad4, 0x5, 0x2, 0xc, 0x2, 0xf49, 0x65, 0x3, 0x5, 0xef6, 0x2, 0x719, 0x99bd, 0x3, 0x2d5cc7e1, 0x7fffffff, 0x2, 0x1, 0x9, 0x1ff, 0x3, 0xc263, 0xdc81, 0xda, 0x9, 0x400, 0xaed3, 0x9, 0x1, 0xffffff7f, 0x1400000, 0x3, 0xb0, 0x8001, 0x4800000, 0x5, 0xe12, 0x5c, 0x7, 0x4, 0xffff932b, 0xb65, 0x4f, 0x9, 0x7fffffff, 0x787f, 0x8, 0x200000, 0xf, 0x6, 0x2, 0x7, 0x3a31, 0x0, 0x3, 0xc, 0x101, 0x7fffffff, 0xfffffff7, 0x3, 0x5, 0x7fffffff, 0x9, 0x2, 0x7, 0x5, 0xfffffe00, 0xa88, 0x7eec, 0x8000, 0x0, 0x100, 0x682, 0x36a5, 0x100, 0xd2, 0x81, 0x0, 0x0, 0x2, 0xde, 0xf2d, 0x4, 0x3a1, 0x87ab, 0x4, 0xe, 0x7, 0xffff, 0xc8, 0x7, 0x7, 0xfffffe00, 0x9, 0x8, 0xfffffff7, 0x6e04f75a, 0x0, 0x2, 0x4d, 0x4, 0x10000, 0x8, 0x6, 0x1, 0x10, 0x9, 0x8, 0x80, 0x1, 0x2, 0x1, 0x2003, 0x7, 0xcd, 0x6, 0xc6, 0xf3, 0x10, 0x7, 0x27a, 0x7, 0xff28, 0x2, 0xdb9, 0x7, 0x0, 0x10, 0xfff, 0x3, 0x6, 0xe, 0xa6d, 0xfc46, 0x1ff, 0x10000, 0xdee, 0xfffffff9, 0x7d08, 0x4aa, 0x7fffffff, 0x10, 0x6, 0x9, 0x8, 0x4, 0x9, 0x7, 0x4, 0x8, 0x2, 0x5b7, 0x7ff, 0x9d1, 0xfffffffe, 0x4, 0x8, 0x18, 0xff, 0x8, 0x9, 0xfffffffa, 0x1, 0x7fff, 0x8000, 0x401, 0x10000, 0x5, 0xfb3f, 0x2, 0x317b, 0x0, 0x2dd, 0x4, 0x10001, 0x3, 0xd4ef, 0x5, 0x1, 0x10001, 0x9, 0x7, 0xf, 0x1, 0x8, 0x100, 0x5, 0xff, 0x8, 0x3, 0xb2, 0x4, 0xba]}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0x8020699b, &(0x7f00000001c0)) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0xfd, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x17f, 0x0, 0x0, 0xbc2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000040)="ea5baa4e7f000001", 0x8) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000080)="d5ac159be99adeb562d10000", 0xc) (async) open$dir(&(0x7f0000001100)='./file0\x00', 0x1, 0x2) (async) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 1.105189461s ago: executing program 4 (id=5): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) setresuid(0xee00, 0xee00, 0x0) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000040)={0x0, 0x1, 0xfffffffffffffffc, 0x1000200000080}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DIOCGETSTATES(r0, 0xc0104419, &(0x7f0000000040)={0x0, 0x0}) setuid(0x0) truncate(&(0x7f0000000000)='./file0\x00', 0xafffe) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) getgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) setresgid(r2, r4, 0x0) setuid(0xffffffffffffffff) setresgid(0x0, r5, r3) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20003916, 0xffffffffffffffff) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async) setresuid(0xee00, 0xee00, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000040)={0x0, 0x1, 0xfffffffffffffffc, 0x1000200000080}) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$DIOCGETSTATES(r0, 0xc0104419, &(0x7f0000000040)={0x0, 0x0}) (async) setuid(0x0) (async) truncate(&(0x7f0000000000)='./file0\x00', 0xafffe) (async) open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) (async) getgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) (async) setresgid(r2, r4, 0x0) (async) setuid(0xffffffffffffffff) (async) setresgid(0x0, r5, r3) (async) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20003916, 0xffffffffffffffff) (async) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0) (async) 870.733307ms ago: executing program 4 (id=9): mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x18, 0x3, 0x50) ioctl$FIONREAD(r0, 0x802069a6, &(0x7f00000001c0)) 868.211647ms ago: executing program 5 (id=6): r0 = socket(0x2, 0x3, 0x0) setsockopt(r0, 0x0, 0x2, &(0x7f00000000c0)="63e1303d", 0x4) accept(r0, &(0x7f0000000000)=@in, &(0x7f0000000040)=0x10) 868.041809ms ago: executing program 2 (id=10): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCPROMISC(r0, 0x20004269) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x1a8) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20001916, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x1, "fe804a0f47a500fdff000000000400", 0x8}, 0x65) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4d) clock_getres(0x4, &(0x7f0000000140)) 865.642361ms ago: executing program 4 (id=11): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea705001000bf87efabd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad672f335c22db830c032bfa896443c32118210000728fd38bfb0000fd54c125191b1257", 0x6a, 0x404, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) semget$private(0x0, 0x1, 0x201) (async) r1 = semget$private(0x0, 0x1, 0x201) setreuid(0x0, 0xee01) (async) setreuid(0x0, 0xee01) semctl$GETNCNT(r1, 0x0, 0x3, 0x0) (async) semctl$GETNCNT(r1, 0x0, 0x3, 0x0) sysctl$hw(&(0x7f0000000000)={0x6, 0x8}, 0x2, &(0x7f0000000200)="fea6818277d5c47f5dbad24690c71ac942040fd491", &(0x7f00000001c0)=0x15, &(0x7f0000000200), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x11, 0x3, 0x0) (async) r2 = socket(0x11, 0x3, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r3, 0x801c693c, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r3, 0x801c693c, &(0x7f00000001c0)) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000001500), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) r4 = socket(0x18, 0x1, 0x0) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$DIOCNATLOOK(r5, 0xc0504417, &(0x7f0000000080)={@v6=@ipv4={'\x00', '\xff\xff', @multicast1}, @v4, @v6=@local={0xfe, 0x80, '\x00', 0x0}, @v6=@mcast2, 0x1a04, 0x8, 0x8001, 0x2, 0x0, 0x0, 0x18, 0x5, 0x3}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x80) r7 = kqueue() kevent(r7, &(0x7f00000000c0), 0x100, &(0x7f0000000180)=[{{r6}, 0xffffffffffffffff, 0x13, 0x80}, {{r6}, 0xffffffffffffffff, 0x62}], 0x6, 0x0) setsockopt(r4, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) (async) setsockopt(r4, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r4, 0x1000000000029, 0xa, 0x0, 0x0) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef16ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139bf82f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb6a998df192f9781ea6e2ec58904007b6400008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) 865.068825ms ago: executing program 5 (id=12): r0 = socket$inet(0x18, 0x3, 0x102) r1 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)='#!', 0x2}], 0x1) setrlimit(0x8, &(0x7f0000000980)={0x3, 0x10}) write(r1, &(0x7f0000000180)="092020090900db0000ff4278ad535c2a415642000000005624b77b6a0a", 0x1d) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x0, 0xff, "00000000000000000000000000000001", 0x101}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="6788020000003a9af6d85edf1124c348abdd612dd68e59adfeaf93231066391632859168", 0x24}, {&(0x7f0000000240)="ac79010400000000000036fb6f39353db56641efc3c797acf7103f23b20d28c53036bee20198dd6fe64df572f47776eef0b81744cc9b2ed2bbb1ec6a8852c89a74869b956cf0d6c441fb61f883a38a8f0ccce15a7c1f3cd01498aa2c71b97a28a503605dff4629d8f614fdce593b30f2e53c9c", 0x73}], 0x2, 0x0}, 0x402) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000002c0)="4d879ab2bedfe0a8cbfb6d2eea6e686d346e8f9a2394d396ff9b23eb6a5586e32fc997e49e835026a7bbabb9a855a6a547780c7de75034f29f3e82e3cf937718744b6f97cf81b871ad0118597e8e9aaa2974bb5d5d74d2e0e786bdbc54d2d7db269b4bcb763286c70e62f289eacd7be854ebe6d7b3fc0c8f1a3a34f024ed21bb3ff5cca38de810d2a17467229270f6acfe6db756cb85cc6de7e14689a0266e1e60ab655c6822ed39982ee1815a", 0xad) openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f0000001100), 0x4) socket$inet(0x18, 0x3, 0x102) (async) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) (async) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)='#!', 0x2}], 0x1) (async) setrlimit(0x8, &(0x7f0000000980)={0x3, 0x10}) (async) write(r1, &(0x7f0000000180)="092020090900db0000ff4278ad535c2a415642000000005624b77b6a0a", 0x1d) (async) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) sendmsg(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x0, 0xff, "00000000000000000000000000000001", 0x101}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="6788020000003a9af6d85edf1124c348abdd612dd68e59adfeaf93231066391632859168", 0x24}, {&(0x7f0000000240)="ac79010400000000000036fb6f39353db56641efc3c797acf7103f23b20d28c53036bee20198dd6fe64df572f47776eef0b81744cc9b2ed2bbb1ec6a8852c89a74869b956cf0d6c441fb61f883a38a8f0ccce15a7c1f3cd01498aa2c71b97a28a503605dff4629d8f614fdce593b30f2e53c9c", 0x73}], 0x2, 0x0}, 0x402) (async) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000002c0)="4d879ab2bedfe0a8cbfb6d2eea6e686d346e8f9a2394d396ff9b23eb6a5586e32fc997e49e835026a7bbabb9a855a6a547780c7de75034f29f3e82e3cf937718744b6f97cf81b871ad0118597e8e9aaa2974bb5d5d74d2e0e786bdbc54d2d7db269b4bcb763286c70e62f289eacd7be854ebe6d7b3fc0c8f1a3a34f024ed21bb3ff5cca38de810d2a17467229270f6acfe6db756cb85cc6de7e14689a0266e1e60ab655c6822ed39982ee1815a", 0xad) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f0000001100), 0x4) (async) 864.776212ms ago: executing program 1 (id=2): chmod(&(0x7f0000000000)='./file0\x00', 0x26) r0 = socket(0x11, 0x3, 0x0) getpeername(r0, 0xffffffffffffffff, &(0x7f00000001c0)) sysctl$net_inet_ip(&(0x7f0000000040), 0x4, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x26) (async) socket(0x11, 0x3, 0x0) (async) getpeername(r0, 0xffffffffffffffff, &(0x7f00000001c0)) (async) sysctl$net_inet_ip(&(0x7f0000000040), 0x4, 0x0, 0x0, 0x0, 0x0) (async) 843.200013ms ago: executing program 6 (id=13): syz_open_pts() (async) syz_open_pts() syz_open_pts() (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x100000181c, 0xfffffffffffffff7, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) closefrom(r0) r1 = syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000040)=0x9) (async) r2 = syz_open_pts() mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4) (async) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000080)=0x9) (async) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000440)="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", 0x629}], 0x1, 0x3) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc0205609, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0x45, 0x3fb}) (async) r3 = syz_open_pts() close(r3) (async) r4 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f00000000c0)={0x1100f66c, 0xfffffffd, 0x7f, 0x5fffff7f, "0904000000000100000000510456d900", 0x2003, 0x5}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x14}, 0x2, &(0x7f0000000100)="4ba7841143", &(0x7f0000000040)=0x5, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$hw(&(0x7f0000000100)={0x6, 0xd}, 0x2, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r5, 0x0, 0x0, 0xc0c, &(0x7f0000000100)={0x10, 0x2, 0x2, 0x7}, 0x10) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000240)={0x0, 0x56, &(0x7f00000001c0)=""/86}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000280)={r6}) (async) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x2) 842.22398ms ago: executing program 3 (id=14): select(0x40, &(0x7f0000000180)={0xfffffffffffffffb, 0x44809e9d, 0x1, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x7fd, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() setuid(0xffffffffffffffff) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000300)={0x2, &(0x7f00000000c0)=[{}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2000, 0x0, 0x37) kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x9, 0xf7, 0x4, 0x0, 0x4, 0x1, 0x3d, 0x2, 0x1, 0x100002000640, 0x9}) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r1 = open(&(0x7f0000000800)='./file1\x00', 0x8, 0x2) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x7, 0xfffffffa, 0x9, 0x1, 0x1000003, 0xff, 0x80000001, 0x2, 0x1, 0x100002000642, 0x2000000000000003}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x10000, 0x152) ftruncate(r2, 0x10001) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x1, 0x6, 0x5, 0xfffffff8}]}) r3 = socket$inet6(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9f93fcaaa4ea3654e789931929648", 0x14) sysctl$net_inet_divert(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmsg(r3, &(0x7f0000000240)={&(0x7f0000000b80)=@in6={0x1c, 0x18, 0x2, 0x7f, "00000000000000017000700100000001", 0x100}, 0x1c, 0x0, 0x0, 0x0}, 0x2) socket(0x11, 0x2, 0x0) ioctl$DIOCSETSYNFLWATS(r2, 0xc0084461, &(0x7f0000000040)={0xc27, 0x6}) 763.184711ms ago: executing program 7 (id=15): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0x66, &(0x7f0000000300)={0xff95, 0x0, 0x8, 0xcb44, 0x9}, 0xc) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) sysctl$kern(&(0x7f0000000b40)={0x1, 0x4b}, 0x2, &(0x7f0000000b80), 0x0, 0x0, 0x0) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x63, &(0x7f0000000180)=[{0x0, 0x9, 0x5, 0x9}, {0x35, 0x0, 0x2c, 0x1}, {0x2, 0x1, 0xd2, 0x6}, {0x8000, 0x9, 0x9, 0x9}, {0x991e, 0x4, 0xd5, 0xffff}]}) (async) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebf6cbdf13b9fd812eaa4e712e54e69931929648", 0x14) 748.329443ms ago: executing program 0 (id=1): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x285b9c) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x40, 0x16cf8ee, 0xfffffffffffffffd, 0x7, 0x181c, 0x8, 0x2000000000000084}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0xe0) syz_emit_ethernet(0x1000e, &(0x7f00000000c0)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x46, 0x6, 0x30, @rand_addr="00f8ff00", @local={0xfe, 0x80, '\x00', 0x0}, {[], @generic="3d259c06b15a443aa104000ce98378b65dde37b92d7200cff44a58083c8a09119fc163a34eb4a4de01040db565be4559cce243ac8387255f660d6c9d872a4cb56bf4c6693a11"}}}}}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x3}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x4}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0xd}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x9, 0xf7, 0x7fff, 0x0, 0x104, 0x1, 0x3d, 0x2, 0x1, 0x100002000640, 0x9}) ioctl$TIOCCHKVERAUTH(0xffffffffffffffff, 0x2000741e) pselect(0x40, &(0x7f00000001c0)={0x9b79, 0x8001, 0x7, 0xaa, 0x8, 0x80000000, 0x4}, &(0x7f0000000200)={0x2, 0x1000, 0x2, 0x1, 0x1, 0x1, 0x5000000, 0xf7c1}, &(0x7f0000000240)={0x1a0, 0x0, 0xbcfa, 0x0, 0x5, 0x5, 0x4, 0x2ea}, &(0x7f00000002c0)={0x3, 0x4}, &(0x7f0000000300)={0x10}) r2 = open(&(0x7f0000000800)='./file1\x00', 0x8, 0x2) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) 741.470936ms ago: executing program 3 (id=16): mkdir(&(0x7f0000000500)='./file0\x00', 0x20) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x109, 0x0, 0xc5, 0x4}]}) (async) r0 = socket$inet(0x2, 0x8003, 0xfc) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000)) setreuid(0xee00, 0x0) (async) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10000100000001}}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x30}, 0x2, &(0x7f0000001940), &(0x7f0000000040)=0xfffffffffffffed0, 0x0, 0x0) mprotect(&(0x7f0000090000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebf6cbdf13b9fd812eaa4e712e54e69931929648", 0x14) 682.697399ms ago: executing program 2 (id=17): r0 = accept(0xffffffffffffffff, &(0x7f0000001540)=@in6, &(0x7f0000001580)=0x1c) bind(r0, &(0x7f00000015c0)=@in6={0x1c, 0x18, 0x3, 0x3, "178ea77a7fe3b9d0eabca8f201c91fe2", 0x6}, 0x1c) chmod(&(0x7f0000000040)='.\x00', 0x35e) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6c, 0xc8, 0xfc, 0x8}, {0x0, 0x1, 0xb, 0x8}, {0x6, 0x5, 0x1, 0x1}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000100)=ANY=[]) mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x5900) r2 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1704) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() readv(r3, &(0x7f0000000700)=[{&(0x7f0000000340)=""/214, 0xd6}], 0x1) setsid() ioctl$TIOCSCTTY(r4, 0x20007461) ioctl$TIOCSETD(r3, 0x8004745f, &(0x7f0000000000)=0x1d) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, [], {@arp={0x8035, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @empty, @empty, @random="a96500", @rand_addr=0x7}}}}) openat$zero(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x80084904, &(0x7f0000000040)={'tap', 0x0}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc290560b, &(0x7f0000000100)={0x10, 0x7, [{&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x800}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xd154}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x4000000000000040}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000509000/0x13000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0xb}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x619}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0xeb}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xb1}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000515000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xffffffffffff0000}], './file0\x00', 0x3, 0x4, 0x1, 0x0, [0x7, 0x1689d41c, 0x80000001, 0x400, 0x0, 0x5, 0x9, 0x78, 0x9, 0xfffffffd, 0x7, 0x10003, 0x6, 0x6, 0x8001, 0x8, 0x3ff, 0x7, 0x1, 0x0, 0xfffffff7, 0x9, 0x7, 0x280000, 0x4, 0x1, 0x0, 0x3, 0x3, 0x7, 0x0, 0x6, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x8, 0x100, 0xffffff80, 0x2, 0xdae, 0x7ff, 0x1, 0x7fffffff, 0x6, 0x101, 0x0, 0x3, 0x10000000, 0x8, 0x2, 0x5, 0x1, 0x6, 0x6, 0x46af0a69, 0x4a9, 0x80000000, 0x10001, 0x1ff, 0x9, 0x2, 0x7ff, 0xff, 0x3, 0x224, 0x6, 0x6, 0x1, 0x5, 0x6, 0x3, 0x5, 0x7, 0x5, 0x7, 0xfffffffc, 0x2, 0xf8000000, 0x3, 0x4, 0xbbf, 0x4, 0x3, 0x9, 0x1000000, 0x0, 0xd, 0x4, 0xffaf, 0x6, 0x1, 0x9, 0x6, 0x8, 0x8, 0xa94a, 0x0, 0x987, 0x5, 0x6, 0xa9d4, 0xfffffff2, 0x8000, 0x1, 0x6, 0xcc6, 0x400, 0xfffffffd, 0xa19, 0x80, 0x6, 0x88, 0x80000001, 0x4, 0x1, 0x2, 0x9, 0x53f1, 0x1000, 0xfffffffd, 0xffffff25, 0x9, 0xc144, 0x7, 0x3, 0x9, 0x8, 0x470f, 0x3ff, 0x4, 0x6, 0xffff, 0x2, 0xfffffffc, 0x6, 0x5, 0x4, 0x5, 0x5a9c, 0x4, 0xeb6, 0x5, 0x3, 0x6, 0x2, 0x2, 0x8000, 0x8, 0xaa, 0x8c, 0x38, 0x6, 0x9, 0x9, 0x400, 0x7, 0x7, 0xd4, 0x7, 0x4, 0x9, 0x55, 0x1ff, 0x1, 0x800, 0x800, 0x3, 0x1ff, 0x401, 0x1000, 0x4be, 0x7, 0x1, 0x100, 0x3, 0x2, 0x8, 0x239ed050, 0x7f, 0xff, 0x7, 0x9, 0x3ff, 0x4, 0x5317ce34, 0xe7, 0x101, 0x80000000, 0x2, 0x10, 0x2, 0x4, 0x5, 0xc140f05, 0x4, 0x1, 0x40, 0x3, 0x6, 0xffff, 0x0, 0x4, 0x1ff, 0x1ff, 0x16, 0x7, 0x4, 0xffffff01, 0x6, 0x5, 0x2, 0x4, 0x4, 0xffffffff, 0x788, 0x0, 0x6, 0x9, 0x1, 0x6, 0x6, 0x6, 0x6, 0xffff, 0x5310, 0x4, 0xd, 0x9, 0x8001, 0x5, 0x5, 0xfffffff7, 0xa, 0x400, 0x4, 0x5, 0x9, 0x6, 0x5, 0x4, 0x4, 0x3, 0xc5, 0x40, 0x8, 0x6, 0x80000000, 0x1d209cda, 0x7, 0x4, 0x7fffffff, 0x63439b01, 0xfffffff8, 0xfffffff8, 0x7, 0x9, 0x9, 0x5, 0xfffff19c, 0x6, 0xed, 0x6, 0xf4d7, 0x9, 0x9, 0xffff, 0xadb, 0x16947a10, 0x3, 0x7, 0x6, 0xc, 0x1, 0x10000, 0x6, 0x9, 0xffff0000, 0x9, 0x9, 0x81, 0x7fffffff, 0x1, 0xda6, 0xf27e, 0x8001, 0xf, 0x0, 0xe7, 0x93c9, 0x3, 0x5, 0x9, 0x1, 0x2, 0x5, 0x4, 0x0, 0xb, 0x2, 0xffffffff, 0x8, 0xffff, 0xdc1c, 0x44cf, 0x6, 0xfffffff8, 0x2, 0xe877, 0x5, 0x1, 0x5, 0x1014, 0x5, 0x0, 0x3dd, 0x2, 0xffff5ad4, 0x5, 0x2, 0x200c, 0x2, 0xf49, 0x65, 0x4, 0x5, 0x400ef6, 0x2, 0x719, 0x99bd, 0x3, 0x2d5cc7e1, 0x7fffffff, 0x2, 0x1, 0x9, 0x1ff, 0x3, 0xc263, 0xdc81, 0xda, 0x9, 0x400, 0xaed3, 0x9, 0x1, 0xffffff7f, 0x1400000, 0x3, 0xb0, 0x8001, 0x4800000, 0x5, 0xe12, 0x5c, 0x7, 0x4, 0xffff932b, 0xb65, 0x4f, 0x9, 0x7fffffff, 0x787f, 0x8, 0x6b0, 0xf, 0x6, 0x2, 0x7, 0x3a2d, 0x0, 0x3, 0xc, 0x101, 0x7fffffff, 0xfffffff7, 0x3, 0x5, 0x7fffffff, 0x9, 0x2, 0x7, 0x5, 0xfffffe00, 0xa88, 0x7eec, 0x8000, 0x0, 0x100, 0x681, 0x36a5, 0x100, 0xd2, 0x81, 0x0, 0x0, 0x2, 0xde, 0xf2e, 0x4, 0x3a1, 0x87ab, 0x4, 0xe, 0x7, 0xffff, 0xc8, 0x7, 0x7, 0xfffffe00, 0x9, 0x8, 0xfffffff7, 0x6e04f75a, 0x0, 0x2, 0x4d, 0x4, 0x10000, 0x8, 0x6, 0x1, 0x8, 0x9, 0x8, 0x80, 0x1, 0x2, 0x1, 0x3, 0x7, 0x20cd, 0x6, 0xc6, 0xf3, 0x10, 0x7, 0x27a, 0x7, 0xff28, 0x2, 0xdb9, 0x7, 0x0, 0x10, 0xfff, 0x3, 0x6, 0xe, 0xa6d, 0xfc46, 0x1fc, 0x10000, 0xdee, 0xfffffff9, 0x7d08, 0x4aa, 0x7fffffff, 0x10, 0x6, 0x9, 0x2, 0x4, 0x7, 0x7, 0x10, 0x8, 0x8001, 0x5b7, 0x7ff, 0x9d1, 0x71f, 0x5, 0x8, 0x18, 0xff, 0x8, 0x9, 0xfffffffa, 0x1, 0x7fff, 0x6022, 0x401, 0x10000, 0x5, 0xfb3f, 0x2, 0x53, 0x0, 0x2dd, 0x4, 0x10001, 0x3, 0xd4ef, 0x5, 0x1, 0x10001, 0x9, 0x7, 0xf, 0x1, 0x8, 0x100, 0x5, 0xff, 0x8, 0x7, 0x5, 0x4, 0xba]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) poll(&(0x7f0000000000), 0x35, 0x0) syz_emit_ethernet(0x71, &(0x7f0000001100)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaabb3c0a40e90c8d2be8ae92b98970930a2cb3965d5a91f527d1f2f819210dc64bb7d09ae5d1559e79a5f1b5dcb19eaa79b90ee623ece4cea61aa516084c6059db5d08c882a721f1f99f68ddbdc3bcc8766df84edab83f403dccefa49617433d7c6313841d492bbc898389e13a86"]) preadv(0xffffffffffffff9c, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001640)=""/224, 0xe0}, {&(0x7f0000001180)=""/217, 0xd9}, {&(0x7f0000001280)=""/168, 0xa8}, {&(0x7f0000001340)=""/86, 0x56}, {&(0x7f0000001600)=""/26, 0x1a}, {&(0x7f0000001400)=""/94, 0x5e}, {&(0x7f0000001080)=""/49, 0x31}], 0x8, 0x40) 676.471482ms ago: executing program 7 (id=18): r0 = socket$inet(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002380)={{&(0x7f0000001200)=@un=@file={0x0, 0x0, ""/4093}, 0xfff, 0x0, 0x0, &(0x7f0000002280)=""/207, 0xcf}, 0xa}, 0x38, 0x802, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00070100000000", 0xc) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240), 0x0) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x0, 0x1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) 675.037025ms ago: executing program 6 (id=19): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r0, 0x1) r1 = socket(0x2, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5) 583.842955ms ago: executing program 1 (id=20): mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4287e) r0 = open(&(0x7f0000000300)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7815) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2, 0xff, 0x1, 0x9}, {0x30, 0xc9, 0x2, 0x8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0xc003, 0x3a) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0x10400007, "00000000000000ffffffbffffffff200", 0x100}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="6788010000003a9e", 0x8}], 0x1, 0x0}, 0xc) ioctl$FIONREAD(r0, 0x800474c4, &(0x7f0000000080)) write(r0, &(0x7f0000000000)="5fd4eda2e6fcd4cf310dcd4a", 0xc) 583.471413ms ago: executing program 4 (id=21): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = openat$dri(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x2, 0x0) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000014c0), 0x1, 0x0) ioctl$WSKBDIO_GETENCODINGS(r1, 0xc0105715, &(0x7f0000000440)={0x2, &(0x7f0000000780)=[0x0, 0x0]}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) r2 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r2, 0xc0406938, &(0x7f00000001c0)) r3 = socket(0x11, 0x3, 0x0) r4 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) setrlimit(0x8, &(0x7f0000000080)={0x42, 0x62}) r5 = syz_open_pts() close(r5) r6 = syz_open_pts() ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000340)={0x8000008, 0x8, 0x5, 0x46c, "00000000d6ffff00100001fa00004000000000ec", 0x7ff, 0xb}) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) execve(&(0x7f0000000640)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x10) writev(r4, &(0x7f0000001d80)=[{&(0x7f0000000d80)='mS', 0x2}], 0x1) sendto$unix(r3, &(0x7f0000000140)="b1000503002004000000a10500fef96ec44ed15b35d8827ae30200004e3039d2d236acf20b7804be38164991f7c8cf6ab56c055c9170f3000000009b67404d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a875645972138f1ea80400000000008000361b1257aea8c500002022fbfe0c2300048abfba0900000008e371a3f8bd3712051eeab71d1889e00084070000000013f868cc14a29984fd00"/177, 0xb1, 0x40e, 0x0, 0x0) 577.1702ms ago: executing program 6 (id=22): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) getgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) r1 = socket(0x18, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040), &(0x7f0000000080)=0x1c) setsockopt(r1, 0x1000000029, 0x3f, &(0x7f0000000000)="03000000", 0x4) sendmsg(r1, &(0x7f0000001a40)={&(0x7f0000000000)=@in={0x10, 0x2, 0x1, 0xfffffeff}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000140)="62608fd98c58a3ae", 0x8}], 0x1, 0x0}, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) utimes(0x0, &(0x7f0000000340)={{0x8, 0xfffffffffffffff7}, {0x0, 0x4}}) 474.808453ms ago: executing program 6 (id=23): getitimer(0x0, &(0x7f0000000340)) sysctl$vm_swapencrypt(&(0x7f00000000c0)={0x6, 0xb, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) 464.450783ms ago: executing program 6 (id=24): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0084463, &(0x7f00000000c0)={0x6, 0x744, 0x2, 0x4, "c9f7553284caf75d96cc43956b47c0d100", 0xc5, 0x200}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xffffffffffffffde) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) r1 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500003000000000002c907800000020e0001002"]) r2 = socket$inet(0x2, 0x3, 0x102) sendmsg(r2, &(0x7f0000000680)={&(0x7f0000000000)=@un=@abs={0x7f, 0x1, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="146655bc798308c1d77705b0c4473bfcc7000000"], 0x14}, 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x6dc) r3 = open(&(0x7f0000000380)='./file0\x00', 0x800, 0x228) kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{r1}, 0xfffffffffffffff8, 0x2, 0x2, 0x3a17, 0x93}, {{r1}, 0xfffffffffffffffb, 0x1a, 0x1, 0xd50f, 0xfffffffffffffff8}, {{r1}, 0x0, 0xb2, 0x8, 0xc, 0x5}], 0x10000, &(0x7f0000000080)=[{{r1}, 0xfffffffffffffff9, 0x0, 0x1, 0x2, 0xffffffffffffffc8}, {{r1}, 0xfffffffffffffffe, 0x40, 0x500fffeb, 0x5, 0x8}], 0x8, &(0x7f00000000c0)={0x7fffffffffffffff, 0x1ff}) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0x1b, 0x1}, 0x5, 0x0, 0x0, 0x0, 0x45) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) lseek(r1, 0x5, 0x2) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x285b9c) ioctl$DIOCRADDTABLES(r3, 0xc450443d, &(0x7f0000000f40)={{'./file0\x00', './file0\x00', 0x10, 0x9}, &(0x7f00000006c0)=[{'./file0\x00', './file0\x00', 0x12, 0x3d}, {'./file0\x00', './file0\x00', 0x71, 0x2}], 0x9, 0x2, 0x0, 0x1, 0xffffffff, 0x0, 0x20, 0x5}) r4 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$FIONBIO(r4, 0x80487008, &(0x7f0000000140)=0x1) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) 463.978536ms ago: executing program 6 (id=25): mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x202) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000100), 0x782, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)="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", 0x132}], 0x1) (async) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setuid(0xee01) r2 = syz_open_pts() ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000140)=0x9) (async) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1) 5.447194ms ago: executing program 5 (id=26): setrlimit(0x8, &(0x7f0000000080)={0x42, 0x62}) r0 = syz_open_pts() r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0xfe, 0x0) ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f00000000c0)=0x34) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, [], {@ipv6={0x8848, {0x0, 0x6, "d91f0c", 0x0, 0x3a, 0xff, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}}}}}) pread(r1, &(0x7f0000000600)="e7077b6629e0397383eaeac9193e79db7bbbad786e7bbb921dff532158d0b49a3e7de9f2d8fdefa9e6fddc16bcd369b9fc28dc5e", 0x34, 0x8000000000000005) close(r0) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x8000008, 0x8, 0x5, 0x46c, "00000000d6ffff00100001fa00004000000000ec", 0x7ff, 0xb}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) setrlimit(0x1, &(0x7f0000000000)={0x7, 0x7fff}) execve(&(0x7f0000000640)='./file0\x00', 0x0, 0x0) 1.335084ms ago: executing program 3 (id=27): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) r1 = getpgrp() fcntl$setown(r0, 0x6, r1) listen(r0, 0x1) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000, 0xb0) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$WSKBDIO_SETDEFAULTBELL(r3, 0x80045713, &(0x7f0000000040)={0xe, 0x4, 0x10001, 0x214}) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504446, &(0x7f00000000c0)={0x4, 0x4000805c, 0x4, 0xa, "d53fe9000000001000000000e5ffffffe80100", 0x3db, 0x7}) sysctl$kern(&(0x7f0000000480)={0x1, 0x2d}, 0x2, &(0x7f00000007c0)="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"/377, &(0x7f0000000440)=0x179, 0x0, 0x0) kill(0x0, 0x8d56e4fc3f0e22ce) utimensat(r2, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)={{}, {0x1, 0xffffffff7fffffff}}, 0x0) mmap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x2, 0x11, r0, 0x2) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaad09b049f6b6386dd6036d2b500383af900000000000000000000000000000000fe8000000000000000da432043422a0d84"]) setuid(0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r4 = socket(0x18, 0xc003, 0x3a) setsockopt(r4, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0x68, &(0x7f0000000300)={{0x1c, 0x18, 0x3, 0x8000002, "b66e88871dccfaf61d09b6342c00", 0x5d800}, {0x1c, 0x18, 0x3, 0xd6b4, "20f14fa63aba80403cd4054591fdcf3f", 0x8000}, 0x0, [0x1, 0x81, 0x10000, 0xb8, 0x83, 0x3, 0x9, 0xf]}, 0x46) r5 = socket$unix(0x1, 0x1, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r6 = getppid() getpgid(r6) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r7 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$FIONBIO(r7, 0xc0307004, &(0x7f0000000140)=0x1) getsockopt(r5, 0x62, 0x0, &(0x7f00000004c0)=""/214, &(0x7f0000000380)=0xd6) r8 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSDISPLAYIO_LSFONT(0xffffffffffffff9c, 0xc058574e, &(0x7f0000000280)={'./file0\x00', 0x686, 0x3, 0x8, 0x0, 0xd, 0x439a09a9, 0x8, 0x1, 0x2, 0x6, 0x60f}) ioctl$WSMUXIO_ADD_DEVICE(r8, 0x80085761, &(0x7f00000000c0)={0x3, 0x101d}) 571.054µs ago: executing program 2 (id=28): getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc) setreuid(r0, 0x0) syz_emit_ethernet(0x80, &(0x7f0000000580)=ANY=[@ANYBLOB="8d46e4c45991ffffffffffff86dd605f6a40004a00a902000000000000000000000000000000fe6f00000000000000000000000000aa0600000900000000a9baf889a8c524ab504d8229d4d0"]) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000000)=""/233) r3 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) getpeername$unix(r3, &(0x7f0000000600)=@file={0x0, 0x0, ""/4091}, &(0x7f0000001600)=0xffd) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) closefrom(r4) fchownat(r4, &(0x7f0000000140)='./file0\x00', r0, r1, 0x2) 0s ago: executing program 5 (id=29): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f75527d152ea276d4200fffffff3000000fafd3493776665d40000000034", 0x31}], 0x1, 0x0, 0x0, 0x7}, 0x0) ioctl$TIOCSETA(r0, 0xc4504449, &(0x7f0000000740)={0x0, 0x4000, 0x2f01, 0xf, "3901224200", 0x2007, 0x10}) r1 = socket(0x18, 0x8000, 0x4) getsockopt(r1, 0x8, 0x9, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. pppx: unable to set addresses for pppx1, error=17 panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 959 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 2199 21766 0 0 0 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff834c4361) at panic+0x1e5 __assert(ffffffff83500413,ffffffff83512481,3bf,ffffffff8353b541) at __assert+0x29 refcnt_finalize(ffff80003c4098a8,ffffffff834bbcd0) at refcnt_finalize+0x1e7 pppx_if_destroy(285b9c,ffff80003c4098a0) at pppx_if_destroy+0x3d pppxclose(285b9c,1,2000,ffff80003679fa10) at pppxclose+0xa0 spec_close(ffff80002eb8adc0) at spec_close+0x417 VOP_CLOSE(ffffee806b3bbd98,1,ffffee80097fd410,ffff80003679fa10) at VOP_CLOSE+0x132 vn_closefile(ffffee806bd66048,ffff80003679fa10) at vn_closefile+0x12b fdrop(ffffee806bd66048,ffff80003679fa10) at fdrop+0x121 closef(ffffee806bd66048,ffff80003679fa10) at closef+0x192 fdfree(ffff80003679fa10) at fdfree+0x116 exit1(ffff80003679fa10,0,0,1) at exit1+0x595 sys_exit(ffff80003679fa10,ffff80002eb8b130,ffff80002eb8b080) at sys_exit+0x1a end trace frame: 0xffff80002eb8b120, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 959 ddb{1}> show kasan No such command ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff834c4361) at panic+0x1e5 __assert(ffffffff83500413,ffffffff83512481,3bf,ffffffff8353b541) at __assert+0x29 refcnt_finalize(ffff80003c4098a8,ffffffff834bbcd0) at refcnt_finalize+0x1e7 pppx_if_destroy(285b9c,ffff80003c4098a0) at pppx_if_destroy+0x3d pppxclose(285b9c,1,2000,ffff80003679fa10) at pppxclose+0xa0 spec_close(ffff80002eb8adc0) at spec_close+0x417 VOP_CLOSE(ffffee806b3bbd98,1,ffffee80097fd410,ffff80003679fa10) at VOP_CLOSE+0x132 vn_closefile(ffffee806bd66048,ffff80003679fa10) at vn_closefile+0x12b fdrop(ffffee806bd66048,ffff80003679fa10) at fdrop+0x121 closef(ffffee806bd66048,ffff80003679fa10) at closef+0x192 fdfree(ffff80003679fa10) at fdfree+0x116 exit1(ffff80003679fa10,0,0,1) at exit1+0x595 sys_exit(ffff80003679fa10,ffff80002eb8b130,ffff80002eb8b080) at sys_exit+0x1a syscall(ffff80002eb8b130) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6fd31dd4df90, count: -16 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80002eb8ab80 rbx 0xffff80002999ee0f rdx 0 rcx 0xffff80003679fa10 rax 0xffff80002999dff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xbe907224678652f9 r11 0x49133306b68fe68e r12 0xffff80002999ec10 r13 0 r14 0 r15 0x1 rip 0xffffffff810f3995 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002eb8ab70 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=494666 pid=67774 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=75, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80003679fa10 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff800045feed10,0xffff80003679efc0 process=0xffff8000367a04f0 user=0xffff80002eb86000, vmspace=0xffffee806cec0b88 estcpu=25, cpticks=7, pctcpu=0.4, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 67962 47149 71643 0 2 0 0 syz-executor 21766 2199 22608 0 7 0 0 syz-executor 21766 38018 22608 0 2 0 0x4000000 syz-executor 78201 28602 70755 0 2 0 0 syz-executor 78201 142628 70755 0 3 0 0x4000000 smrbar syz-executor 31815 465551 40757 0 2 0 0 syz-executor 31815 331775 40757 0 3 0 0x4000080 fsleep syz-executor 39646 74322 13970 0 4 0x2000 0x80000 syz-executor 39646 519531 13970 0 2 0x2000 0x4080000 syz-executor 39646 399894 13970 0 3 0x2000 0x4000000 suspend syz-executor 74079 215785 58763 0 3 0 0x80 nanoslp syz-executor 74079 270897 58763 0 3 0 0x4000080 sbwait syz-executor 74079 425019 58763 0 3 0 0x4000080 fsleep syz-executor 74079 42687 58763 0 3 0 0x4000080 fsleep syz-executor 58763 352285 90157 0 3 0x2 0x80 nanoslp syz-executor 40757 157475 90157 0 3 0x2 0x80 nanoslp syz-executor 71643 76038 90157 0 3 0x2 0x80 nanoslp syz-executor 13970 275370 90157 0 3 0x2 0x80 nanoslp syz-executor 70755 492766 90157 0 3 0x2 0x80 nanoslp syz-executor 22608 140580 90157 0 3 0x2 0x80 nanoslp syz-executor 3691 290000 90157 0 3 0x2 0x80 nanoslp syz-executor 21098 181577 90157 0 3 0x2 0x80 nanoslp syz-executor 90157 227747 49563 0 3 0x2 0x80 kqread syz-executor 49563 372765 48371 0 3 0x100002 0x88 sigsusp ksh 48371 12740 72627 0 3 0x10 0x88 kqread sshd-session 72627 166862 41425 0 3 0x12 0x80 kqread sshd-session 55682 53796 1 0 3 0x100003 0x80 ttyin getty 41425 117206 1 0 3 0 0x88 kqread sshd 12235 492831 61360 74 3 0x1100012 0x80 bpf pflogd 61360 110555 1 0 3 0 0x80 sbwait pflogd 58198 267327 87548 73 3 0x1100010 0x80 kqread syslogd 87548 31978 1 0 3 0x100002 0x80 sbwait syslogd 72172 144245 1 0 3 0x100000 0x80 kqread resolvd 72128 443087 67818 77 3 0x100012 0x80 kqread dhcpleased 13040 29649 67818 77 3 0x100012 0x80 kqread dhcpleased 67818 221494 1 0 3 0 0x80 kqread dhcpleased 36643 385697 0 0 3 0x14000 0x200 bored smr 30823 94202 0 0 2 0x14000 0x200 zerothread 87969 99561 0 0 3 0x14000 0x200 aiodoned aiodoned 15364 395597 0 0 3 0x14000 0x200 syncer update 35724 271256 0 0 3 0x14000 0x200 cleaner cleaner 59359 408378 0 0 3 0x14000 0x200 reaper reaper 43891 412288 0 0 3 0x14000 0x200 pgdaemon pagedaemon 91798 315163 0 0 3 0x14000 0x200 bored viomb 25144 420426 0 0 3 0x14000 0x40000200 acpi0 acpi0 48990 450978 0 0 3 0x14000 0x40000200 idle1 48047 110996 0 0 3 0x14000 0x200 bored softnet1 81970 275149 0 0 3 0x14000 0x200 bored softnet0 98589 470567 0 0 3 0x14000 0x200 smrbar systqmp 55100 144002 0 0 3 0x14000 0x200 bored systq 14525 491436 0 0 3 0x14000 0x200 tmoslp softclockmp 17078 39942 0 0 3 0x14000 0x40000200 tmoslp softclock 86764 457832 0 0 3 0x14000 0x40000200 idle0 1 396871 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 98589 (systqmp) thread 0xffff800045ffea60 (470567) shared rwlock systqmp r = 0 (0xffffffff83961388) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11075 12162K 12214K 166960K 12174 0 pcb 19 12K 12K 166960K 25 0 rtable 241 7K 7K 166960K 367 0 pf 42 18K 18K 166960K 53 0 ifaddr 47 7K 8K 166960K 50 0 ifgroup 69 3K 3K 166960K 69 0 sysctl 1 1K 9K 166960K 5 0 counters 80 38K 38K 166960K 80 0 ioctlops 0 0K 4K 166960K 1485 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1295 81K 82K 166960K 1374 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 4 0K 0K 166960K 4 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 93K 166960K 159 0 sigio 1 0K 0K 166960K 1 0 proc 72 115K 164K 166960K 554 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 7 0 in_multi 100 6K 6K 166960K 103 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 5 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 61 281K 281K 166960K 61 0 exec 0 0K 1K 166960K 398 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 238 175K 184K 166960K 3474 0 UVM aobj 4 2K 2K 166960K 4 0 pinsyscall 43 86K 106K 166960K 1358 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 5 0 NDP 17 0K 2K 166960K 31 0 temp 34 9114K 9134K 166960K 7027 0 kqueue 14 22K 26K 166960K 32 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 42 0 38 1 0 1 1 0 8 0 rtentry 176 114 0 3 6 0 6 6 0 8 0 unpcb 144 47 0 28 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 16 0 11 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 94 0 82 2 0 2 2 0 8 0 nd6 152 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 2 0 0 1 0 1 1 0 8 0 pppxif 1576 2 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 31 0 0 1 0 1 1 0 8 0 pfstkey 128 31 0 0 1 0 1 1 0 8 0 pfstate 448 31 0 0 4 0 4 4 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 rttmr 136 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 458 0 0 29 0 29 29 0 8 0 art_table 40 459 0 0 5 0 5 5 0 8 0 art_node 32 114 0 12 1 0 1 1 0 8 0 semapl 72 2 0 0 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1609 0 135 93 0 93 93 0 8 0 ffsino 296 1609 0 135 114 0 114 114 0 8 0 nchpl 144 1837 0 130 64 0 64 64 0 8 0 vnodes 216 1701 0 0 95 0 95 95 0 8 0 namei 1024 6446 0 6444 3 0 3 3 0 8 2 percpumem 16 56 0 0 1 0 1 1 0 8 0 kstatmem 264 33 0 0 3 0 3 3 0 8 0 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 6358 0 6358 4 3 1 3 1 8 1 plimitpl 152 36 0 18 1 0 1 1 0 8 0 sigapl 424 489 0 441 7 0 7 7 0 8 1 knotepl 120 101 0 0 4 0 4 4 0 8 0 kqueuepl 224 31 0 21 1 0 1 1 0 8 0 pipepl 344 131 0 104 3 0 3 3 0 8 0 fdescpl 528 473 0 441 3 0 3 3 0 8 0 filepl 160 1724 0 1499 10 0 10 10 0 8 0 lockfpl 104 16 0 14 1 0 1 1 0 8 0 lockfspl 48 9 0 7 1 0 1 1 0 8 0 sessionpl 144 25 0 16 1 0 1 1 0 8 0 pgrppl 48 33 0 16 1 0 1 1 0 8 0 ucredpl 104 136 0 123 1 0 1 1 0 8 0 zombiepl 144 443 0 441 1 0 1 1 0 8 0 processpl 1232 489 0 441 5 0 5 5 0 8 0 procpl 664 532 0 476 6 0 6 6 0 8 0 sockpl 752 183 0 148 4 0 4 4 0 8 0 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 130 0 0 17 0 17 17 0 8 1 mcl2k 2048 26 0 0 4 0 4 4 0 8 0 mextrefs 64 26 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 211 0 0 14 0 14 14 0 8 0 bufpl 272 2357 0 105 151 0 151 151 0 8 0 anonpl 32 3724 0 0 30 0 30 30 0 247 0 amapchunkpl 152 9407 0 8912 22 0 22 22 0 158 0 amappl16 200 1548 0 1527 5 1 4 5 0 8 2 amappl15 192 2 0 2 1 1 0 1 0 8 0 amappl14 184 443 0 442 1 0 1 1 0 8 0 amappl13 176 141 0 128 1 0 1 1 0 8 0 amappl12 168 726 0 695 2 0 2 2 0 8 0 amappl11 160 10 0 10 1 1 0 1 0 8 0 amappl10 152 67 0 53 1 0 1 1 0 8 0 amappl9 144 283 0 283 1 1 0 1 0 8 0 amappl8 136 115 0 114 1 0 1 1 0 8 0 amappl7 128 151 0 138 1 0 1 1 0 8 0 amappl6 120 204 0 203 1 0 1 1 0 8 0 amappl5 112 106 0 96 1 0 1 1 0 8 0 amappl4 104 305 0 287 1 0 1 1 0 8 0 amappl3 96 1602 0 1505 3 0 3 3 0 8 0 amappl2 88 602 0 524 2 0 2 2 0 8 0 amappl1 80 10658 0 10054 15 0 15 15 0 8 2 amappl 88 2714 0 2549 5 0 5 5 0 92 0 uvmvnodes 80 99 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 1 1 1 0 8 1 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 473 0 441 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 473 0 441 1 0 1 1 0 8 0 vmmpekpl 168 5866 0 5829 2 0 2 2 0 8 0 vmmpepl 168 39894 0 37954 87 0 87 87 0 357 1 vmsppl 488 472 0 441 5 0 5 5 0 8 1 rwobjpl 80 14760 0 13742 24 0 24 24 0 8 1 pdppl 4096 953 0 882 103 26 77 85 0 8 6 pvpl 32 9913 0 0 80 0 80 80 0 265 0 pmappl 256 472 0 441 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 434 0 29 12 0 12 12 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83925ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83ad7300) at __mp_lock+0x19e softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x7c1f33aa2fb0, count: 8 ddb{0}> trace x86_ipi_db(ffffffff83925ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83ad7300) at __mp_lock+0x19e softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x7c1f33aa2fb0, count: -7 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff834c4361) at panic+0x1e5 __assert(ffffffff83500413,ffffffff83512481,3bf,ffffffff8353b541) at __assert+0x29 refcnt_finalize(ffff80003c4098a8,ffffffff834bbcd0) at refcnt_finalize+0x1e7 pppx_if_destroy(285b9c,ffff80003c4098a0) at pppx_if_destroy+0x3d pppxclose(285b9c,1,2000,ffff80003679fa10) at pppxclose+0xa0 spec_close(ffff80002eb8adc0) at spec_close+0x417 VOP_CLOSE(ffffee806b3bbd98,1,ffffee80097fd410,ffff80003679fa10) at VOP_CLOSE+0x132 vn_closefile(ffffee806bd66048,ffff80003679fa10) at vn_closefile+0x12b fdrop(ffffee806bd66048,ffff80003679fa10) at fdrop+0x121 closef(ffffee806bd66048,ffff80003679fa10) at closef+0x192 fdfree(ffff80003679fa10) at fdfree+0x116 exit1(ffff80003679fa10,0,0,1) at exit1+0x595 sys_exit(ffff80003679fa10,ffff80002eb8b130,ffff80002eb8b080) at sys_exit+0x1a end trace frame: 0xffff80002eb8b120, count: 0 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff834c4361) at panic+0x1e5 __assert(ffffffff83500413,ffffffff83512481,3bf,ffffffff8353b541) at __assert+0x29 refcnt_finalize(ffff80003c4098a8,ffffffff834bbcd0) at refcnt_finalize+0x1e7 pppx_if_destroy(285b9c,ffff80003c4098a0) at pppx_if_destroy+0x3d pppxclose(285b9c,1,2000,ffff80003679fa10) at pppxclose+0xa0 spec_close(ffff80002eb8adc0) at spec_close+0x417 VOP_CLOSE(ffffee806b3bbd98,1,ffffee80097fd410,ffff80003679fa10) at VOP_CLOSE+0x132 vn_closefile(ffffee806bd66048,ffff80003679fa10) at vn_closefile+0x12b fdrop(ffffee806bd66048,ffff80003679fa10) at fdrop+0x121 closef(ffffee806bd66048,ffff80003679fa10) at closef+0x192 fdfree(ffff80003679fa10) at fdfree+0x116 exit1(ffff80003679fa10,0,0,1) at exit1+0x595 sys_exit(ffff80003679fa10,ffff80002eb8b130,ffff80002eb8b080) at sys_exit+0x1a syscall(ffff80002eb8b130) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6fd31dd4df90, count: -16