last executing test programs: 6.914049992s ago: executing program 5 (id=9): r0 = socket(0x2, 0x1, 0x0) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$DIOCADDRULE(r1, 0xcd604404, &(0x7f0000000240)={0x5, 0x1, 0x4eb, './file0/file0\x00', './file0\x00', 0x0, "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"}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x100, 0xb, 0x1, 0x8fe, 0xc9, 0x5, 0x3, 0x10, [{0xfffff000, 0xa2, 0x7d507ce4, 0x1000000f}, {0x1, 0x2000b7fe, 0x2, 0x10000}, {0x100006, 0xc7, 0x8, 0x2}, {0x2, 0xff, 0x8, 0x6}, {0x30000, 0x3, 0x5, 0x7}, {0x2, 0x83, 0x14000009, 0x10}, {0x5, 0xbffffff9, 0x1, 0x7}, {0x24009, 0x1, 0xfdf2, 0x7}, {0x7f, 0x6, 0xb3, 0xd}, {0xbffffffc, 0x7, 0x7ffe, 0x7}, {0x401, 0xfffd, 0x48c}, {0x2cb, 0x2, 0x8, 0x4}, {0x2000df, 0x29, 0x8005, 0x3ff}, {0x92, 0x40, 0xfffffff5, 0xffffffb8}, {0x10, 0x9, 0x26, 0x40002}, {0xfffffffd, 0x7, 0x3, 0x4}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$BIOCGHDRCMPLT(r2, 0x40044274, &(0x7f0000000040)) ioctl$FIONREAD(r0, 0x80206916, &(0x7f00000001c0)) (async) ioctl$BIOCSRTIMEOUT(r2, 0x8010426d, &(0x7f0000000080)={0xffffffffffffffff, 0x6}) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@broadcast, @random="8c95ca6a2f2c", [], {@ipv6={0x86dd, {0x0, 0x6, "99cea6", 0x28, 0x3a, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr="46f9ae03e3a3f04e7aa143eef783025b"}}}}}}) 6.852885414s ago: executing program 5 (id=12): pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x10004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="bf", 0x1}, {&(0x7f0000000800)="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", 0xfffffeb3}, {&(0x7f00000001c0)="062bae13407c52042e62eb6d5297ff69d904f0698442ba3993376dd6806a2c411c98edb65566ed23951cdcb7dc5459ba6f838a564d13209dec66ecaa3c6c7efea869fdd25ccd61ad399b0844172f4d249d7dbccccd72"}], 0x2) r1 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x10, r1, 0x0) futimes(r1, &(0x7f0000000000)=[{0xd, 0x40040080080008d}, {0x80, 0x80000000000008}]) select(0x40, &(0x7f0000000000)={0x8, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x8}, &(0x7f0000000380)={0xffb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) 6.851965167s ago: executing program 5 (id=14): syz_emit_ethernet(0x36, &(0x7f0000000240)={@random="012000010100", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "6a0802", 0x0, 0x3c, 0x29, @rand_addr, @local={0xfe, 0x80, '\x00', 0x0}}}}}) mkdir(&(0x7f0000000040)='./file2\x00', 0x1ce) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup(r1) setsockopt$inet_opts(r2, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) sendmsg(r2, &(0x7f00000007c0)={&(0x7f0000000000)=@in6={0x1c, 0x18, 0x1, 0x3438, "98f4060000000000ca7d325acc8c61fa", 0x52369ecb}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="48a27d96c72cd645", 0x8}], 0x1, 0x0}, 0x8) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) mknod(&(0x7f0000000100)='./file2\x00', 0x80, 0x6) mkdir(&(0x7f0000000080)='./file2/file0\x00', 0xc2) socketpair$unix(0x1, 0x91df554cb5f173d9, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x0, 0x0}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000240)={@random="012000010100", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "6a0802", 0x0, 0x3c, 0x29, @rand_addr, @local={0xfe, 0x80, '\x00', 0x0}}}}}) (async) mkdir(&(0x7f0000000040)='./file2\x00', 0x1ce) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket$inet(0x2, 0x2, 0x0) (async) dup(r1) (async) setsockopt$inet_opts(r2, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) (async) sendmsg(r2, &(0x7f00000007c0)={&(0x7f0000000000)=@in6={0x1c, 0x18, 0x1, 0x3438, "98f4060000000000ca7d325acc8c61fa", 0x52369ecb}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="48a27d96c72cd645", 0x8}], 0x1, 0x0}, 0x8) (async) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) (async) mknod(&(0x7f0000000100)='./file2\x00', 0x80, 0x6) (async) mkdir(&(0x7f0000000080)='./file2/file0\x00', 0xc2) (async) socketpair$unix(0x1, 0x91df554cb5f173d9, 0x0, &(0x7f0000000000)) (async) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x0, 0x0}, 0x8) (async) 6.332106558s ago: executing program 2 (id=25): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) sysctl$kern(0x0, 0x0, &(0x7f0000000000)="4ba7841143", &(0x7f0000000040)=0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r1, 0x20007461) ioctl$TIOCSETD(r0, 0x8004745f, &(0x7f0000000000)=0x1d) 6.170087018s ago: executing program 6 (id=31): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x47) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="b3e3d5e7cc7944ab7d90d22dce7de053a24c70a8741c3f32e4884348aeaf569b0c30ebdb22b2fed42b0c7217d3e55ef022578901b7242c3cc4fe904726820e3e46b92496145cd7418500dcd3502a9090f59cc777cbc734cf8b31277d84fe806aaf105202fe7d89788b3ac1f0cee2b186a8bead6a149a70eac66d1c88b0007a6b7d87f30e6520ccaa8315dc108d94525aa5d1b50d9259f4b2a8573b3840195585e2d6c9628923505ce0459d5ea72654fbef31d8f3d910", 0xb6}, {&(0x7f0000000100)="2954ed52523e2717a3", 0x9}, {&(0x7f0000000140)="1b325646b3d9bd9f29e56a3c970788ebc09538e2566ccff3e05935f7b370a70244148f89939a3b031d79653aa7cb5e805d9dfaf0c6010d940af7dfb9624d94bb940af736a324e673", 0x48}, {&(0x7f0000000240)="1ed00fd0218c3d00d714e45bb2befb0a6dd456c86c6c8a74f340ed81e413981f14bac71448eea3e5e7da6f46b8cf6eba88358858531d990b35051573415227f24f9a51f21d01568b0ee4f95a03bb9de85986184c1b25786261e4d369599c077866173816f80d2398d736e3038967e2", 0x6f}], 0x4) read(r1, &(0x7f00000001c0)=""/125, 0x7d) 6.116693058s ago: executing program 6 (id=33): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) r1 = kqueue() ioctl$DIOCRGETASTATS(r1, 0xc4504447, &(0x7f0000000140)={{'./file0\x00', './file0\x00', 0x62, 0xff}, &(0x7f0000000080)=[{@multicast2, '\x00', './file0\x00', 0x1, 0x7fff, 0x2, 0x8, 0x1, 0x80, 0x4}, {@rand_addr=0x3ff, '\x00', './file0\x00', 0xba239f9, 0x7, 0x1, 0x2, 0x3, 0x7, 0xaf}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x1, 0x3, 0x0, 0x3, 0x8, 0x7, 0x3}], 0x2, 0x3, 0x990d, 0x3, 0x7, 0x383, 0x0, 0x7fff}) kevent(r1, &(0x7f00000013c0)=[{{r0}, 0xfffffffffffffffc, 0x95, 0x10, 0xcc, 0x2}], 0x8, 0x0, 0x15, 0x0) 6.111468702s ago: executing program 6 (id=36): openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x50000, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) open(&(0x7f0000000380)='./bus\x00', 0x1, 0xd4) (async) r0 = open(&(0x7f0000000380)='./bus\x00', 0x1, 0xd4) ioctl$FIONREAD(r0, 0x2000747a, 0x0) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/191, 0xbf) (async) read(r1, &(0x7f0000000200)=""/191, 0xbf) semget(0x0, 0x1, 0x281) (async) r2 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000180), &(0x7f0000000140)=0xc) (async) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r7 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_GETMAP(r7, 0xc010570d, &(0x7f0000000100)={0xde, 0x0}) unveil(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='w\x00') setresgid(0x0, r6, 0x0) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000780)={{0x0, r6, r5, r6, 0x8f, 0x9}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) r8 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) pwritev(r8, &(0x7f0000002440)=[{&(0x7f00000001c0)='g', 0x1}], 0x1, 0x628) (async) pwritev(r8, &(0x7f0000002440)=[{&(0x7f00000001c0)='g', 0x1}], 0x1, 0x628) setgroups(0x0, 0x0) (async) setgroups(0x0, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x7f, 0x1, './bus\x00'}, 0x8) getgroups(0x7, &(0x7f0000000280)=[r5, r5, 0xffffffffffffffff, r5, r5, r5, r5]) setuid(0xffffffffffffffff) semctl$SETVAL(r2, 0x3, 0x8, 0x0) semget(0x0, 0x2, 0x204) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) 6.105861674s ago: executing program 2 (id=38): setuid(0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x2) ioctl$FIONREAD(r0, 0xc0287533, &(0x7f0000000000)) r1 = syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x8) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$KDENABIO(r2, 0x20004b3c) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) r3 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)='#!', 0x2}, {&(0x7f0000000300)="9bb7", 0x2}], 0x2) ioctl$WSMUXIO_LIST_DEVICES(r2, 0xc1045763, &(0x7f0000000080)={0x7, [{0x3, 0xd}, {0x1, 0x7}, {0x3, 0x3}, {0x2, 0x4}, {0x1, 0x10000}, {0x2, 0x9}, {0x2, 0x8}, {0x2, 0x40000000}, {0x2, 0x23dca7e4}, {0x3, 0x7ff}, {0x3, 0x9}, {0x1, 0x8}, {0x3, 0xb0c}, {0x2, 0x9}, {0x2, 0xffffffff}, {0x2, 0x2}, {0x1, 0x1}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x7}, {0x2, 0x3}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0x1}, {0x3, 0x10000}, {0x1, 0x5}, {0x3, 0x8}, {0x1, 0x401}, {0x2, 0x41}, {0x1, 0x7}, {0x3}, {0x3}]}) r4 = semget$private(0x0, 0xf, 0x0) bind(r3, &(0x7f00000001c0)=@in6={0x1c, 0x18, 0x0, 0xdeae, "0b12249cc865ac2135598f6db6070e18", 0x7}, 0x1c) semctl$GETALL(r4, 0x0, 0x6, &(0x7f0000000000)=""/169) syz_open_pts() 6.039840166s ago: executing program 6 (id=40): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f0000000180)="01000000", 0x4) (async) r1 = socket$inet(0x2, 0x3, 0x2) (async) socket$inet(0x2, 0x1000, 0x7) (async) chmod(&(0x7f00000007c0)='.\x00', 0x35f) setuid(0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) (async) chdir(&(0x7f0000000000)='./file0\x00') (async) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) rename(&(0x7f00000003c0)='.\x00', 0x0) setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0xc}, 0x2, &(0x7f0000000200)="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", &(0x7f0000000080)=0x172, 0x0, 0x0) (async) setreuid(0xffffffffffffffff, 0x0) (async) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000000)=""/77, &(0x7f0000000100)=0x4d) 5.782376549s ago: executing program 2 (id=42): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x5}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000445000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000445000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00'}) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000005c0)="dc", 0x1}], 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x2) sysctl$kern(&(0x7f0000000080)={0x1, 0x4f}, 0x4000000000000003, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00070100000000", 0xc) close(r0) 5.644917558s ago: executing program 2 (id=45): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x9}, 0x4) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/236, 0xec}], 0x1, 0x0}, 0x473aca9c51e0e662) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async) ioctl$WSDISPLAYIO_DELFONT(0xffffffffffffffff, 0x8058574f, &(0x7f00000000c0)={'./file0\x00', 0xfffffffe, 0xff, 0xfe, 0x3, 0x10, 0x9, 0x2, 0x1, 0x0, 0x8, 0x3}) (async) r0 = syz_open_pts() close(r0) (async) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8000006, 0x8, 0xfffffffe, 0xffffff8f, "08ed95990000000000000000ffffffffffffffe6", 0x800b, 0x8}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r2 = socket$inet(0x2, 0x8003, 0xfc) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f00000000c0)="0000000128f4088e7408d703b187b73656eb2017c1e7563d4cdc547de4651358e83235e9982bfa1dd53c651f2036ccf4140208d20f9dff725b12d0890514be7b6ab118afeb51e855ef45f82a2f655528a2723d66ec74458aa8c1d724190e8eca5ace6abdc2afb0f53b494e2ef1c37e20edceba27300c66cb8ba7c3cd267742b52507", 0xffffff0a}], 0x1000000000000168) 5.633703121s ago: executing program 5 (id=14): syz_emit_ethernet(0x36, &(0x7f0000000240)={@random="012000010100", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "6a0802", 0x0, 0x3c, 0x29, @rand_addr, @local={0xfe, 0x80, '\x00', 0x0}}}}}) mkdir(&(0x7f0000000040)='./file2\x00', 0x1ce) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup(r1) setsockopt$inet_opts(r2, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) sendmsg(r2, &(0x7f00000007c0)={&(0x7f0000000000)=@in6={0x1c, 0x18, 0x1, 0x3438, "98f4060000000000ca7d325acc8c61fa", 0x52369ecb}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="48a27d96c72cd645", 0x8}], 0x1, 0x0}, 0x8) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) mknod(&(0x7f0000000100)='./file2\x00', 0x80, 0x6) mkdir(&(0x7f0000000080)='./file2/file0\x00', 0xc2) socketpair$unix(0x1, 0x91df554cb5f173d9, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x0, 0x0}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000240)={@random="012000010100", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "6a0802", 0x0, 0x3c, 0x29, @rand_addr, @local={0xfe, 0x80, '\x00', 0x0}}}}}) (async) mkdir(&(0x7f0000000040)='./file2\x00', 0x1ce) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket$inet(0x2, 0x2, 0x0) (async) dup(r1) (async) setsockopt$inet_opts(r2, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) (async) sendmsg(r2, &(0x7f00000007c0)={&(0x7f0000000000)=@in6={0x1c, 0x18, 0x1, 0x3438, "98f4060000000000ca7d325acc8c61fa", 0x52369ecb}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="48a27d96c72cd645", 0x8}], 0x1, 0x0}, 0x8) (async) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) (async) mknod(&(0x7f0000000100)='./file2\x00', 0x80, 0x6) (async) mkdir(&(0x7f0000000080)='./file2/file0\x00', 0xc2) (async) socketpair$unix(0x1, 0x91df554cb5f173d9, 0x0, &(0x7f0000000000)) (async) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x0, 0x0}, 0x8) (async) 5.051930256s ago: executing program 3 (id=57): open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) getresuid(&(0x7f0000000100), &(0x7f0000000180)=0x0, &(0x7f0000000200)) setuid(r0) lstat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff) r1 = socket(0x2, 0x8002, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x7ff, &(0x7f00000001c0), 0x15, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0xe0) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) r4 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r4) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) select(0x22, &(0x7f00000003c0)={0x0, 0x2000000000000000, 0x2, 0xe, 0x0, 0xfffffffffffffffd, 0x0, 0x40000000}, &(0x7f0000000080)={0x800000000000003, 0x8, 0x0, 0xffffffffffffdfff}, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x285b9c) open(&(0x7f0000000080)='./file0\x00', 0x10, 0xe0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) r5 = open(&(0x7f0000000040)='./bus\x00', 0x800, 0x0) ioctl$DIOCRGETASTATS(r5, 0xc4504447, &(0x7f0000000600)={{'./file1\x00', './bus\x00', 0x18, 0x1}, &(0x7f0000000400)=[{@broadcast, '\x00', './file0\x00', 0xef3, 0x8, 0x1e, 0x7, 0x1, 0x40, 0x2}, {@broadcast, '\x00', './file1\x00', 0x6, 0x2, 0x0, 0x1, 0x7, 0xff}, {@multicast2, '\x00', './bus\x00', 0xe08, 0x1000, 0x18, 0x76, 0xd, 0x7f, 0x7}, {@local={0xac, 0x14, 0x0}, '\x00', './bus\x00', 0x7, 0x3, 0x2, 0x1, 0xfa, 0x40, 0x3d}, {@empty, '\x00', './file1\x00', 0x5, 0xcf, 0x0, 0x2, 0x6e, 0x2, 0x4}, {@rand_addr=0x4, '\x00', './bus\x00', 0x4, 0x3, 0x0, 0xe, 0x1, 0xc, 0x7}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x2, 0x7fff, 0x0, 0x4, 0x1, 0x0, 0x1}, {@empty, '\x00', './file1\x00', 0x3, 0x0, 0x2aa73d43beaf9515, 0x1, 0x81, 0x7f, 0x7}, {@empty, '\x00', './file0\x00', 0x5, 0x2, 0x18, 0xe0, 0x67, 0x6, 0x3}], 0x6, 0x9, 0xe, 0x7, 0x14cd3325, 0x2, 0x7a, 0x40}) select(0x40, &(0x7f0000000140)={0x9, 0x4, 0x200, 0x2, 0xe, 0x101, 0x2, 0x80000001}, 0x0, &(0x7f00000001c0)={0x7fffffffffffffff, 0x3, 0x1ff, 0x7ff, 0x230, 0x5, 0xffffffffffffffff, 0x4}, 0x0) access(&(0x7f00000000c0)='./bus\x00', 0x2) 4.908433934s ago: executing program 4 (id=61): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000340)={{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/27, 0x1b}], 0x1, 0x0}, 0x1}, 0x38, 0x2802, 0x0) (async) r1 = setsid() lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = semget(0x0, 0x1, 0x281) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r7 = shmget$private(0x0, 0x2000, 0x3b4, &(0x7f0000001000/0x2000)=nil) r8 = shmat(r7, &(0x7f0000001000/0x3000)=nil, 0x0) shmctl$IPC_RMID(r7, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000001480), 0x0, 0x7ffffffffffffffc) (async) madvise(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4) shmdt(r8) (async) setresgid(0x0, r6, 0x0) (async) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000780)={{0x0, r6, r5, r6, 0x8f, 0x9}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) r9 = openat$pf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) r10 = getpgrp() fstat(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) getgroups(0x6, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0]) sendmsg$unix(r0, &(0x7f00000003c0)={&(0x7f0000000080)=@file={0xfe, 0x1, './file0\x00'}, 0xa, &(0x7f0000000140)=[{&(0x7f00000000c0)="69889c7ebee1cc86df4d4a4c91acee294fb3a5", 0x13}, {&(0x7f0000000100)="ff0b45e039276e36b49034ae0c620b9790694647399bea4a8651babbe0ab68dfc6eacd421f1dbd0274dd79c3f9e6c4d71dd3091927161370a3afb402f6b9ff32", 0x40}], 0x2, &(0x7f0000000340)=[@cred={0x18, 0xffff, 0x0, r1, r2, r5}, @rights={0x10, 0xffff, 0x1, [r9]}, @cred={0x18, 0xffff, 0x0, r10, r11, r12}, @rights={0xc}], 0x4c, 0xa}, 0x404) r13 = socket$inet(0x2, 0x1, 0x0) setsockopt(r13, 0x5, 0x9, 0x0, 0x0) (async) r14 = socket(0x18, 0x1, 0x0) setsockopt(r14, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) setsockopt(r14, 0x1000000000029, 0x9, &(0x7f0000000000), 0x0) (async) openat$klog(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x2000, &(0x7f0000000000)=0x7fff, 0x4) sendto$unix(0xffffffffffffffff, &(0x7f0000000200)="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", 0x171, 0x0, 0x0, 0x0) (async) listen(0xffffffffffffffff, 0x9) 4.898916241s ago: executing program 0 (id=64): mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) dup(r0) open$dir(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b0000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x409}, 0x6) ioctl$TIOCSETA(r1, 0xc4504444, &(0x7f0000000740)={0x2f, 0xb, 0x1, 0x20000003, "0400091000000000000048000000000000002f00", 0xb, 0xfffffffe}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) poll(&(0x7f00000000c0)=[{r2, 0x6e}], 0x1, 0x0) close(0x3) sysctl$kern(&(0x7f00000000c0)={0x1, 0x9}, 0x2, &(0x7f0000000100)="b3cb9e4c", &(0x7f0000000140)=0x4, &(0x7f0000000180)="1f441c33", 0x4) 4.861004445s ago: executing program 3 (id=65): socket$inet(0x2, 0x5, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000000)="bf3b684c5ae963b4567084e096cf973983ff0f0000000000009405095e7acbf4419893cfd424b75262dc5ade2ab6278ab80849177964f55be2796672f9ed186987b8c19d9295a17b98020f600200"/91, 0x5b}], 0x100000000000033c}, 0x1) 4.76582452s ago: executing program 3 (id=69): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="8f6f0400e655aaaaaaaaaabb86dd605f6ad900183a01f68000000000000000000000000000bbfe80000000b1630000000000000000aa82"]) r0 = kqueue() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket(0x10, 0x1, 0xff) r3 = openat$dri(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x100, 0x0) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20, 0x0) r5 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) kevent(r0, &(0x7f0000000000), 0x811, &(0x7f0000000140)=[{{0xffffffffffffff9c}, 0xfffffffffffffff8, 0x10, 0x1, 0x302e8b0b, 0x1}, {{r1}, 0xffffffffffffffec, 0x8, 0x0, 0xffffffffffffffff, 0x4}, {{r2}, 0xfffffffffffffff8, 0x16, 0xfffff, 0x4, 0x1}, {{r3}, 0x0, 0x13, 0x80000000, 0x8, 0x4}, {{r4}, 0xfffffffffffffffc, 0x5a, 0x80000000, 0x10001, 0x4000}, {{0xffffffffffffff9c}, 0xfffffffffffffffb, 0x0, 0x1, 0x9, 0xc76}, {{0xffffffffffffff9c}, 0xfffffffffffffffd, 0xe7, 0x20000000, 0x3, 0x4}, {{r5}, 0x3, 0x61, 0x20000011, 0xe, 0x9}], 0xfffff801, &(0x7f0000000240)={0x5, 0x9}) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x16) 4.746225139s ago: executing program 1 (id=72): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x4) poll(&(0x7f00000000c0)=[{r1, 0x6e}], 0x1, 0x0) poll(&(0x7f0000000080)=[{r1, 0x7d}], 0x1, 0x0) ioctl$DIOCSETREASS(r0, 0xc004445c, &(0x7f0000000040)=0x1) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x0, [{0x0, 0xfffffffd}, {0x1, 0x8}, {0x3}, {0x2}, {0x0, 0x8}, {0x1, 0x3}, {}, {0x3}, {0x0, 0x1}, {0x1, 0x7}, {0x0, 0x2}, {}, {0x2}, {0x0, 0x3}, {0x2}, {0x3}, {0x1, 0x1}, {0x3}, {0x1, 0xfffffff8}, {}, {}, {0x0, 0x4}, {}, {}, {0x3}, {}, {0x1, 0x2}, {}, {0x3, 0x2}, {0x2}, {0x1, 0xd}, {0x1}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000001e00)=0xc) setresgid(r3, r3, r3) ktrace(&(0x7f0000000180)='./file0\x00', 0x2, 0x1, r3) r4 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff}) fcntl$lock(r4, 0xc, &(0x7f0000000640)={0xc9259fcf54c978f0, 0x0, 0x200000007a}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x5a}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x48, 0x0, 0x37) ioctl$DIOCRSETTFLAGS(r0, 0xc450444a, &(0x7f0000000280)={{'./file0\x00', './file0\x00', 0x1, 0xfb}, 0x0, 0x428, 0xa30c333, 0x83da, 0x1, 0xf2e, 0x400, 0x2, 0x3}) 3.716559364s ago: executing program 0 (id=73): ioctl$WSDISPLAYIO_ADDSCREEN(0xffffffffffffffff, 0x80245753, &(0x7f0000000040)={0x3, './file0\x00', './file0\x00'}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000340)={0x1000, {[0x0, 0x0, 0x0, 0x7fffffffffffffd, 0x0, 0x0, 0x58e2, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc69c], [], [0x7, 0x0, 0x2], [{}, {0x8000}]}}) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DIOCRGETTABLES(r0, 0xc450443f, &(0x7f0000002800)={{'./file0/file0\x00', './file0\x00', 0x36, 0xfb}, 0x0, 0x2, 0x0, 0x6, 0xffff3c6e, 0x0, 0x3, 0x0, 0x200}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x3, &(0x7f0000000080)="bd0f192e", &(0x7f00000000c0)=0x4b, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3a}, 0x2, &(0x7f0000000100)="c9ccc145", &(0x7f0000001100)=0x4, &(0x7f0000001140), 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0xc0285108, &(0x7f0000000400)={'tap', 0x0}) 3.639324991s ago: executing program 4 (id=74): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0206917, &(0x7f00000001c0)) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) syz_open_pts() select(0x40, &(0x7f0000000000)={0x100000000, 0x4, 0x9, 0x5c, 0x1, 0x4, 0xd98, 0x4}, 0x0, 0x0, 0x0) r1 = getppid() getpgid(r1) poll(&(0x7f0000000000), 0x35, 0x0) setrlimit(0x7, &(0x7f0000000980)={0x4, 0x61}) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r2, 0x80105727, &(0x7f0000000140)={&(0x7f0000000080)=[{0x7, 0x8}, {0x7, 0x8}], 0x2}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() ioctl$FIOASYNC(r3, 0x80047470, &(0x7f0000000000)=0x2) ioctl$FIOASYNC(r4, 0x80047460, &(0x7f00000000c0)=0x7) ioctl$TIOCSETAW(r4, 0x802c7415, &(0x7f0000000180)={0x801, 0x3, 0xffffffdb, 0x1, "778d938520e312dfff841b000000e80000f800", 0xffffffd9, 0x973}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) pwritev(r6, &(0x7f0000000300)=[{&(0x7f0000000000)="68cf71fd32196ded60772620060733606f442bf398b9c2c37b3932f026a449e36b79343d14557e95da4d4fd1eca5d494eb6a140a4547e6ecc716036e0bcef00b44080d5634dfc1ea4184d68440dab745c06e23fcd6508fb5e412d496fc581f61f57a421549803c49749d2a11321c13f0b49dc3a687659271b38aee091e5241daf11fadfa5b9f9531849f5c448b9343b87ea161972fd0bfeafb224b9dbdf5b7705a5304247355163bd104cc626d70c514d7f1add75a402df5daaacff8b807dec5f16d50c7d491916bb837448743483e592f56d8c1a06da3cd1a274e1af5f0cd00fbf7c6fc3a69db", 0xe7}, {&(0x7f0000000100)="5ff0250425efda99bea840421a6f0aa15de93b04d92dd2e66bdb9503322b74e227b5d4f32d71861d1858dcfbf2985e26d5aa347818a3e073253eaa6db810044e484576ea1cc6182522fa7e216e60114e6955eab3c7e79fe1dadf8f3aae982c3c8e6ed313e46b7b065b6d9d537c1347b0f1e903b361fcf1d7fc46c6795ac45ce429165dbbfc6d2a70fc2506af3f5ea349463b37b1227b7433526a503a828798362ebe4d1989cc3cc4f36377f66c8effc79adc5446db15a1f3f157010d2d55c9cd40b5cda48cc4b2698c95d01b15142dbf8452988fc9", 0xd5}, {&(0x7f0000000200)="da7f17795a5e71759a8ccd051d72aefc23d11138ded85dec92f5203ee03a72404c568c7f42cab7b6657a67000fdfdf07071be777fb658b08e1ea0b0258c4c7493b6470bd", 0x44}], 0x3, 0xfffffffffffffffc) writev(r6, &(0x7f0000000300), 0x27a) fcntl$setstatus(r5, 0x4, 0x40) mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x205b92) r7 = open(&(0x7f0000000280)='./file0\x00', 0x1, 0x40) ioctl$FIONREAD(r7, 0x4004667f, 0x0) read(r5, 0x0, 0x0) r8 = dup2(r7, r4) close(r8) mknodat(r5, &(0x7f0000000040)='./file0\x00', 0x1000, 0x80000001) 3.638470069s ago: executing program 1 (id=75): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x14}, 0x2, 0x0, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r1, 0x20007461) ioctl$TIOCSETD(r0, 0x8004745f, &(0x7f0000000000)=0x1d) 3.638011457s ago: executing program 6 (id=40): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f0000000180)="01000000", 0x4) (async) r1 = socket$inet(0x2, 0x3, 0x2) (async) socket$inet(0x2, 0x1000, 0x7) (async) chmod(&(0x7f00000007c0)='.\x00', 0x35f) setuid(0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) (async) chdir(&(0x7f0000000000)='./file0\x00') (async) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) rename(&(0x7f00000003c0)='.\x00', 0x0) setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0xc}, 0x2, &(0x7f0000000200)="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", &(0x7f0000000080)=0x172, 0x0, 0x0) (async) setreuid(0xffffffffffffffff, 0x0) (async) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000000)=""/77, &(0x7f0000000100)=0x4d) 3.637936623s ago: executing program 7 (id=76): syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800455c00300066000000019078ac1400bbe000009c0601907800080000456cfffc00000000080200f0e0000001ac1400aa"]) 3.62730201s ago: executing program 0 (id=77): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() write(r1, &(0x7f00000000c0)="ffb3dd36ef971f", 0x7) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000040)=0x3) r3 = socket$inet(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000c40)={0x10, 0x2, 0x1, 0x80}, 0x10) closefrom(r3) unveil(0x0, &(0x7f0000000100)='w\x00') ioctl$TIOCSETA(r0, 0xc4504448, &(0x7f0000000740)={0x3, 0x5b89, 0x2, 0xe, "63742200000000000000009280c9795a6b47c1d1", 0x8006}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r5 = socket(0x11, 0x5, 0x0) sendto$unix(r5, &(0x7f0000000300)="b100050100000005000000012a000000331c13fecea70500fef96ecfc72fd3357a020000004e30ffd2d236acf20bf404be01000000f7c8cf5f882b297be1aa050400d1a409000000bbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2325768abfba09a214cc8adfbfab11ce0000080ce37193f834370b0000eb376640c9f2746700"/177, 0xb1, 0x2, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x82, 0x0, 0xc8, 0x4}, {0x94, 0xcb, 0xfc, 0x22c1}, {0x6, 0x76, 0xf8, 0xfffff802}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = accept$unix(r5, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x8) getsockopt$sock_int(r6, 0xffff, 0x1008, &(0x7f00000001c0), &(0x7f0000000200)=0x4) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaad09b049f6b6386dd6036dab700302bd4a55702eadfc9c553517dd04fcce15c79ff02000000000000000000000000000101029078f9000000605f7f0000000000ff02000000000000000000000000000100"/102]) shmget(0x3, 0x4000, 0x6a0, &(0x7f0000189000/0x4000)=nil) 3.402511862s ago: executing program 7 (id=78): r0 = syz_open_pts() r1 = kqueue() mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x100, &(0x7f0000000180)=[{{r2}, 0xffffffffffffffff, 0x13, 0x80}], 0x6, 0x0) closefrom(r1) setsid() connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x1, "fe80000400000000414a0f47a500fdff", 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x3, 0x84) sendto(r4, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, '\x00\x00\x00\x00\x00:\x00', 0xffffffc0}, 0x1c) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYRES16=r0]) ioctl$TIOCSCTTY(r0, 0x20007461) r5 = socket(0x18, 0x3, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1023, 0x0, 0x0) r6 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sysctl$hw(&(0x7f0000000040)={0x6, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCNOTTY(r6, 0x20007471) 3.237350938s ago: executing program 0 (id=79): setresuid(0x0, 0xee01, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0xffff, 0x1024, &(0x7f0000000380)={0x0}, &(0x7f0000000100)=0xc) kill(r2, 0x3) setresuid(r0, 0x0, r2) r3 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r3, 0x0, 0x0, 0x404, &(0x7f00000001c0)={0x10, 0x2, 0x1, 0xe0000003}, 0xd) socket(0x1e, 0x3, 0x0) setresuid(0x0, 0xee01, 0x0) (async) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) (async) socket$unix(0x1, 0x2, 0x0) (async) getsockopt$sock_cred(r1, 0xffff, 0x1024, &(0x7f0000000380), &(0x7f0000000100)=0xc) (async) kill(r2, 0x3) (async) setresuid(r0, 0x0, r2) (async) socket$inet(0x2, 0x2, 0x0) (async) sendto$inet(r3, 0x0, 0x0, 0x404, &(0x7f00000001c0)={0x10, 0x2, 0x1, 0xe0000003}, 0xd) (async) socket(0x1e, 0x3, 0x0) (async) 3.23480739s ago: executing program 1 (id=80): ioctl$WSKBDIO_GETBACKLIGHT(0xffffffffffffff9c, 0x400c5711, &(0x7f0000000000)) (async) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) ioctl$WSKBDIO_GETKEYREPEAT(r0, 0x400c5708, &(0x7f0000000080)) (async) ioctl$WSKBDIO_SETDEFAULTBELL(r0, 0x80105705, &(0x7f00000000c0)={0x8, 0x8000, 0x35b2, 0xe0d}) mkfifoat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x193) (async) ioctl$WSKBDIO_GETDEFAULTBELL(r0, 0x40105706, &(0x7f0000000140)) (async) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000180), &(0x7f00000001c0)=0x1c) getsockname$inet6(r1, &(0x7f0000000200), &(0x7f0000000240)=0x1c) (async) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$WSDISPLAYIO_GETPARAM(r2, 0xc0205759, &(0x7f00000002c0)={0x2, 0x2, 0x6, 0x100}) ioctl$WSKBDIO_COMPLEXBELL(r0, 0x80105702, &(0x7f0000000300)={0x2, 0x7, 0x8, 0x2}) (async) ioctl$WSKBDIO_GETKEYREPEAT(r0, 0x400c5708, &(0x7f0000000340)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x8, 0x2, 0x8, 0x10000, 0x8, 0x5, 0xe2, 0xffffff80], 0x8, 0x30000, 0x0, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x6, 0x7fffffff, 0xeeeeeeee}) (async) recvmmsg(r1, &(0x7f00000016c0)={{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f0000000580)=""/15, 0xf}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001600)=""/144, 0x90}, 0x7ff}, 0x38, 0x2, &(0x7f0000001700)={0x5, 0xfd2}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000001740)='./file0\x00', 0x80, 0x40) ioctl$KDSETMODE(r4, 0x20004b0a, &(0x7f0000001780)) (async) r5 = socket$inet(0x2, 0x1, 0xa) (async) ioctl$WSKBDIO_SETDEFAULTBELL(r4, 0x80105705, &(0x7f00000017c0)={0x6, 0x0, 0x7, 0x2}) (async) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4) writev(r3, &(0x7f0000002c40)=[{&(0x7f0000001800)="a28c26dce224e1179e5da2a11bcdd21fbc5c38a7bd5af3ca36e4b9bc038a05019f223f0ec5045eddf31ca6d4", 0x2c}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)}, {&(0x7f0000002880)}, {&(0x7f00000028c0)="94fa9fcbd8bb06ad623c75b7ad4bd4578bb418846d5e819ba30b03d1d06d7b7c1b0b3012ccb8d90a87b0b31618d1fe36e538802f2358a375a268b988bc62995e657a5ade94a9d6252bbe771c66bfd620259f81b1dbb424f04e2ba50d866bd4cd434040d3df43f42725676d30f71a85661e5ee0af320e54e1059ed946084f9235cd06f7175c9d18fb4431165c742ca58db42434424924f6bb64634b91", 0x9c}, {&(0x7f0000002980)}, {&(0x7f00000029c0)="06542ae711380d7c6623a5aff33eb3a903a5f3c879d97d912bdf43a4a05a87955a8fdcdb2afece5006312fbae9be9677437a72a376eaaab0716fabc3f36021e7d3f94ecd3bd0fc8218ae21b477618b0aca3e3948c831d53a1433b8bb8aa4796ca9a8a076337e339b10fe505405fdf28c3bd6615a60b72442866939b827c34f3a581da9f2ceb6b8a8c7341b0d186be75790123da53aba9119e4a77bf9ff60aa7f453e4625238285f94af19148461deb197c2032af4740fc270f227adc47e54d264e16589f39a9b04f356458fb388fbd7f1e2b21cff102bba44527", 0xda}, {&(0x7f0000002ac0)="92e452d9716e780974a19243af2b596b4a395991288fcac89a4d1a8c0917ba72de96365c19bf45944ff82e325b789984735bb94e9ee3c2a2c22a699861ead8bf2200c4f39ed2f7f4aff93e3126fd94f25480e4ca6c10ed5d396efac2ee25f5b5d98017a4073c61266853d3961c4373f266144acea63b", 0x76}, {&(0x7f0000002b40)="510c6526d9bee21aee7b3d613fdea54c9626a7071ec7cfb836b0670e6fc1ddc343e8b20027b675b91256fcb7785dd6bdebed76785272e4ce2bafc44f904e6ab0ca3f345780bd390a6a475393759f90b926625393e30cc5bcb998f804a232090da3763b8c36a2e4da188ae555dc385caa7d71dfbc6d4e33d29a65abbb74d93adcb4", 0x81}, {&(0x7f0000002c00)="d1d377539a", 0x5}], 0xa) r6 = socket(0x20, 0x4000, 0x8) (async, rerun: 64) r7 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000002d00), 0x10000, 0x0) (rerun: 64) write(r1, &(0x7f0000002d40)="3726d165eff359c436f3c8eddb977e18e837cde436e37a9d3cb8c64c67c7b39b8d2de2d7e9c82a979a907b6f3fdd80e07325ac27d9f94dd3853a768fc9c05a77fb260929e9a16b8556371acb8369fdb459ee2b331d8bcc9e64e19188fd69411a9ff88d4c342efeb82f0ad5ccfc96c3f2213129b9b722dec105ebabbf22564d914044e999bfab134919e1ba11740b3155d16e5aee", 0x94) (async) mknod$loop(&(0x7f0000002e00)='./file0\x00', 0x100, 0x1) (async, rerun: 32) ioctl$DIOCCLRSTATES(r4, 0x0, &(0x7f0000002e40)={{0xc860, 0x5}, 0x18, '\x00', 0x200, {@addrmask={@v6=@rand_addr="6146af3df081ec04db19759412820df3", @v6=@ipv4={'\x00', '\xff\xff', @rand_addr}, 0x0, 0x0, 0x1}, [0x9, 0x1], 0x2, 0x5, 0x1}, {@any={'\x00', 0x0, 0x1, 0xe}, [0x5, 0x9], 0x3, 0x7, 0x2}, './file0\x00', './file0\x00', 0x1a000000, 0x7}) (async, rerun: 32) link(&(0x7f0000002f40)='./file0\x00', &(0x7f0000002f80)='./file0\x00') (async, rerun: 32) close(r5) (async, rerun: 32) r8 = fcntl$dupfd(r6, 0xa, r7) ioctl$DIOCXCOMMIT(r8, 0xc0104452, &(0x7f0000005440)={0x9, 0x200, &(0x7f0000002fc0)=[{0x0, '\x00', 0x7}, {0x1, './file0\x00', 0x5}, {0x0, './file0\x00'}, {0x1, './file0\x00', 0x6}, {0x0, './file0\x00', 0x5}, {0x0, './file0\x00', 0x1}, {0x0, './file0\x00'}, {0x0, './file0\x00', 0xf}, {0x1, './file0\x00', 0x3}]}) 3.234454467s ago: executing program 2 (id=45): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x9}, 0x4) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/236, 0xec}], 0x1, 0x0}, 0x473aca9c51e0e662) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async) ioctl$WSDISPLAYIO_DELFONT(0xffffffffffffffff, 0x8058574f, &(0x7f00000000c0)={'./file0\x00', 0xfffffffe, 0xff, 0xfe, 0x3, 0x10, 0x9, 0x2, 0x1, 0x0, 0x8, 0x3}) (async) r0 = syz_open_pts() close(r0) (async) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8000006, 0x8, 0xfffffffe, 0xffffff8f, "08ed95990000000000000000ffffffffffffffe6", 0x800b, 0x8}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r2 = socket$inet(0x2, 0x8003, 0xfc) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f00000000c0)="0000000128f4088e7408d703b187b73656eb2017c1e7563d4cdc547de4651358e83235e9982bfa1dd53c651f2036ccf4140208d20f9dff725b12d0890514be7b6ab118afeb51e855ef45f82a2f655528a2723d66ec74458aa8c1d724190e8eca5ace6abdc2afb0f53b494e2ef1c37e20edceba27300c66cb8ba7c3cd267742b52507", 0xffffff0a}], 0x1000000000000168) 3.234111771s ago: executing program 3 (id=81): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000380)={0x10002, [{0x1, 0xfe}, {0x0, 0xfffffffa}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0xc8}, {0x5}, {0x0, 0xff}, {0x2}, {0x2, 0x204}, {0x1, 0x7}, {}, {0x0, 0x80000000}, {0x0, 0x7}, {0x2, 0x774}, {0x1, 0x7}, {0x3, 0x2000000}, {0x0, 0x3}, {0x3, 0x70}, {0x1, 0x4}, {0x3, 0x7f}, {0x0, 0x3}, {0x2, 0x40000005}, {0x1, 0x7}, {0x2, 0x2003}, {0x3, 0x2}, {0x1}, {0x3}, {0x3}, {0x2, 0x57fb}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r0 = socket(0x2, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x2, 0x0) ioctl$DIOCGETSYNFLWATS(0xffffffffffffffff, 0xc0084463, &(0x7f0000000040)) ioctl$FIONREAD(r1, 0xc0206923, &(0x7f00000001c0)) r2 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000040)=0x3, 0x4) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x18, 0x1, 0x8, '\x00', 0x3}, 0x1c) ioctl$FIONREAD(r0, 0x8020690c, &(0x7f00000001c0)) 3.229793126s ago: executing program 5 (id=14): syz_emit_ethernet(0x36, &(0x7f0000000240)={@random="012000010100", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "6a0802", 0x0, 0x3c, 0x29, @rand_addr, @local={0xfe, 0x80, '\x00', 0x0}}}}}) mkdir(&(0x7f0000000040)='./file2\x00', 0x1ce) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup(r1) setsockopt$inet_opts(r2, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) sendmsg(r2, &(0x7f00000007c0)={&(0x7f0000000000)=@in6={0x1c, 0x18, 0x1, 0x3438, "98f4060000000000ca7d325acc8c61fa", 0x52369ecb}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="48a27d96c72cd645", 0x8}], 0x1, 0x0}, 0x8) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) mknod(&(0x7f0000000100)='./file2\x00', 0x80, 0x6) mkdir(&(0x7f0000000080)='./file2/file0\x00', 0xc2) socketpair$unix(0x1, 0x91df554cb5f173d9, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x0, 0x0}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000240)={@random="012000010100", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "6a0802", 0x0, 0x3c, 0x29, @rand_addr, @local={0xfe, 0x80, '\x00', 0x0}}}}}) (async) mkdir(&(0x7f0000000040)='./file2\x00', 0x1ce) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket$inet(0x2, 0x2, 0x0) (async) dup(r1) (async) setsockopt$inet_opts(r2, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) (async) sendmsg(r2, &(0x7f00000007c0)={&(0x7f0000000000)=@in6={0x1c, 0x18, 0x1, 0x3438, "98f4060000000000ca7d325acc8c61fa", 0x52369ecb}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="48a27d96c72cd645", 0x8}], 0x1, 0x0}, 0x8) (async) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) (async) mknod(&(0x7f0000000100)='./file2\x00', 0x80, 0x6) (async) mkdir(&(0x7f0000000080)='./file2/file0\x00', 0xc2) (async) socketpair$unix(0x1, 0x91df554cb5f173d9, 0x0, &(0x7f0000000000)) (async) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x0, 0x0}, 0x8) (async) 3.229639798s ago: executing program 7 (id=82): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) mknod(&(0x7f0000000100)='./bus\x00', 0x2062, 0x7) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8, 0xf8) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) pwrite(r1, 0x0, 0x0, 0xfffffffffffffff4) r2 = kqueue() bind$unix(r0, &(0x7f0000000080)=@file={0xb, 0x1, './file1\x00'}, 0xa) r3 = dup3(r2, r1, 0x10000) kevent(r2, &(0x7f00000013c0)=[{{r3}, 0xfffffffffffffff7, 0x95, 0x1, 0x8000cc, 0x2}], 0x8, 0x0, 0x15, 0x0) 1.881730605s ago: executing program 4 (id=83): r0 = syz_open_pts() ioctl$FIOGETOWN(r0, 0x4004667b, &(0x7f0000000000)) read$audio(0xffffffffffffffff, &(0x7f00000012c0)=""/4096, 0x1000) chflags(&(0x7f0000001280)='.\x00', 0x1) r1 = syz_open_pts() setsid() (async) ioctl$TIOCSCTTY(r1, 0x20007461) r2 = openat$tty(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$TIOCCHKVERAUTH(r2, 0x2000741e) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TIOCSETA(r3, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0xfffffffe, 0x5, "210d0000000200fc0006000000000200007fffff", 0x7ffffffe}) (async) ioctl$DIOCSTOP(r3, 0x20004402) 1.672189458s ago: executing program 7 (id=84): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x47) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="b3e3d5e7cc7944ab7d90d22dce7de053a24c70a8741c3f32e4884348aeaf569b0c30ebdb22b2fed42b0c7217d3e55ef022578901b7242c3cc4fe904726820e3e46b92496145cd7418500dcd3502a9090f59cc777cbc734cf8b31277d84fe806aaf105202fe7d89788b3ac1f0cee2b186a8bead6a149a70eac66d1c88b0007a6b7d87f30e6520ccaa8315dc108d94525aa5d1b50d9259f4b2a8573b3840195585e2d6c9628923505ce0459d5ea72654fbef31d8f3d910", 0xb6}, {&(0x7f0000000100)="2954ed52523e2717a394", 0xa}, {&(0x7f0000000140)="1b325646b3d9bd9f29e56a3c970788ebc09538e2566ccff3e05935f7b370a70244148f89939a3b031d79653aa7cb5e805d9dfaf0c6010d940af7dfb9624d94bb940af736a324e673", 0x48}, {&(0x7f0000000240)="1ed00fd0218c3d00d714e45bb2befb0a6dd456c86c6c8a74f340ed81e413981f14bac71448eea3e5e7da6f46b8cf6eba88358858531d990b35051573415227f24f9a51f21d01568b0ee4f95a03bb9de85986184c1b25786261e4d369599c077866173816f80d2398d736e3038967e2", 0x6f}], 0x4) read(r1, &(0x7f00000001c0)=""/125, 0x7d) 1.670916453s ago: executing program 1 (id=85): setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r0 = syz_open_pts() close(r0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x0, './file1\x00', [{[@v6=@empty, @v6=@ipv4={'\x00', '\xff\xff', @multicast1}], [0x1, 0xff]}, {[@v6=@rand_addr="be762f745a650c4fc824f39777cbdbf1", @v6=@loopback], [0x46], 0x4, 0x14}], {{0x246, 0x48, 0xba, 0x9}, 0x6543, 0x409, 0xfff00000, 0x8001, 0x8, 0x17, 0x7}, {{0x0, 0x7, 0x5, 0x5}, 0x51fe1b1d, 0xc86, 0x10007, 0x4, 0x3ff, 0xf2}, @v6=@empty, 0x54d5, 0xa, 0x2, 0xf23b, 0x5, [[0x8, 0xffffffff], [0x3958, 0x6]], [[0xfc000002, 0x4], [0xfffffff7, 0x3]], 0xb, [0x80001d9, 0x79], 0x1, 0x18, 0x39, 0x1, 0x0, 0x3, 0xe, 0x83, 0x5, 0x8, 0x1, 0xce57, "0600"}}) select(0x0, 0x0, &(0x7f0000000040)={0x50}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0xfffffffe, 0x3, "210d0000000200000006000000000200007fffff", 0x7ffffffe}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x8010, r1, 0x0) utimensat(r1, 0x0, &(0x7f0000000080)={{0x5, 0x8001}, {0xffffffffffffffff, 0x1ff}}, 0x2) syz_open_pts() mknod$loop(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) sysctl$kern(&(0x7f0000000080)={0x1, 0x4f}, 0x4000000000000003, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800006700000011907800000000ac14ffff4e204e2300000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780002"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000840)={{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0}, 0xffffff43}, 0x38, 0x2, &(0x7f0000000880)={0x9, 0x8}) r5 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) writev(r5, &(0x7f0000000300), 0x27a) sendmmsg(r3, 0x0, 0x0, 0x410) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f0000000040)="ea5baa4e7f000001", 0x8) closefrom(r6) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x1040978b, 0x7ba, 0xf7ff7bfc, 0x80a19d, "bb08000a00f1a86ddbc8418bd1008000", 0x1040103, 0x7}) write(r0, &(0x7f00000000c0)="ffb3dd36ef971f2d7daf558a20d0f3af986d85be9ec8df6ecdb923e7087f8ab0946f690315cd460e31843f6a729e077212cf241e529b3e4efc5bc6ada8e42a7ec59b6ba64f132537a4f501b70c2702a72a8fb8e57deeef453e3164e765fcfe019fa17b19815415abd04b0fde82aa57ce536e8efd099fd8b472ada904004ef1", 0xff0c) 1.441139546s ago: executing program 3 (id=86): getitimer(0x1, 0x0) 1.433372038s ago: executing program 4 (id=87): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) open(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x615, 0x100) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000080)={&(0x7f0000000000)=[{0x3, 0x7}, {0x22, 0x400}], 0x2}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050100", 0x5, 0x6, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef16ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139bf82f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb6a998df192f9781ea6e2ec58904007b6400008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) symlink(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) fstat(r2, &(0x7f00000005c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r5 = kqueue() kevent(r5, 0x0, 0x0, 0x0, 0xa, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000380)=[{{r5}, 0xffffffffffffffff, 0x4, 0xfffe3, 0x1, 0x8}, {{r5}, 0xfffffffffffffff6, 0x6f, 0x80000000, 0xa6, 0xfe9}], 0x9, 0x0, 0x5, 0x0) kevent(r5, &(0x7f0000000080)=[{{r5}, 0xfffffffffffffff9, 0x17, 0x10}], 0x29f, 0x0, 0x8001, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x8000005, 0xffe, 0x8, 0x3, 0xf7, 0x10, [{0x8, 0xb, 0xfffff116, 0x80000001}, {0x3, 0x400, 0x4, 0x401}, {0x4, 0x4baa, 0x3, 0xd}, {0x1a, 0x3, 0xf, 0x100}, {0x3, 0xfffff800, 0x5, 0xffffffff}, {0x7890, 0xfffb, 0x8, 0x2}, {0x3, 0x800, 0x3, 0xfffffffa}, {0x204, 0xffffffff, 0x27ff9, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x3ff}, {0x3, 0x11, 0x1, 0x8bfd}, {0xfffffffd, 0x0, 0x1, 0x6}, {0x9, 0x4, 0x800000, 0x5}, {0x601, 0x4, 0x40000b, 0x2}, {0x3, 0x6e2, 0xffff, 0x6f5fc48f}, {0x3, 0x80000000, 0x3, 0x10009}, {0x8ff9, 0x1, 0x100000, 0x2000400}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9) r6 = kqueue1(0x10000) dup(r6) bind$inet(r2, &(0x7f00000001c0)={0x10, 0x2, 0x3, 0xe0000000}, 0x10) ioctl$TIOCSETA(r0, 0xcd60441a, &(0x7f0000000080)={0x1, 0x2, 0x7, 0x2f, "2000030100010000000000000068a95a010400", 0x6}) ioctl$DIOCCLRSTATES(r0, 0x0, &(0x7f0000000000)={{0x9, 0x9, 0x2}, 0x1a, '\x00', 0x5, {@table={'./file0\x00', 0x0, 0x3, 0x6}, [0x8, 0xa4], 0x6, 0x3, 0x7fff}, {@addrmask={@v6=@mcast1, @v6=@remote={0xfe, 0x80, '\x00', 0x0}, 0x0, 0x0, 0xa1}, [0x0, 0x200], 0x3, 0x1, 0x3ff}, './file0\x00', './file0\x00', 0x8, 0x70}) setitimer(0x1, &(0x7f0000000240)={{0xfffffffe}, {0xffffffff}}, 0x0) 1.431411871s ago: executing program 6 (id=40): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f0000000180)="01000000", 0x4) (async) r1 = socket$inet(0x2, 0x3, 0x2) (async) socket$inet(0x2, 0x1000, 0x7) (async) chmod(&(0x7f00000007c0)='.\x00', 0x35f) setuid(0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) (async) chdir(&(0x7f0000000000)='./file0\x00') (async) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) rename(&(0x7f00000003c0)='.\x00', 0x0) setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0xc}, 0x2, &(0x7f0000000200)="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", &(0x7f0000000080)=0x172, 0x0, 0x0) (async) setreuid(0xffffffffffffffff, 0x0) (async) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000000)=""/77, &(0x7f0000000100)=0x4d) 1.42860988s ago: executing program 3 (id=88): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000001640), 0x40, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000f00)=ANY=[@ANYRESHEX=0x0]) sync() r1 = socket(0x2, 0x8002, 0x0) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f0000000f40)={0x0, 0x0}) ioctl$WSKBDIO_GETKEYREPEAT(r0, 0x400c5708, 0x0) r2 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0xc0206923, 0x0) ioctl$WSKBDIO_SETDEFAULTBELL(r0, 0x80105705, &(0x7f0000001700)={0xffff, 0xfffff9d6, 0x4, 0x4}) sysctl$hw(&(0x7f0000000000)={0x6, 0x8}, 0x2, &(0x7f0000000200)="fea6818277d5c47f5dbad24690c71ac942040fd491", &(0x7f00000001c0)=0x15, &(0x7f0000000200), 0x0) r3 = socket$inet(0x2, 0x1, 0x6) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000100)) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) unveil(0x0, &(0x7f0000000300)='w\x00') r5 = socket(0x18, 0x8002, 0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) closefrom(r6) 1.427549432s ago: executing program 7 (id=89): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000000)="80", 0x1) (async) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000000)="80", 0x1) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/25, 0x19) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0xc}, 0x4, &(0x7f0000000080)="26b50142a414c7e94644cd87fbfe52a1b6f49884a099548ed59b1c139fb935c62b0c822588362152f988d89f06090a3347b614f016cb47062651bd46801ff9d7874931deced77bf636aebc9d9f371d2215f4c51a29f4f3e2be025b927c3df642a4256823b36c73498df6d1f33cdf2275ce5ea83b312c145d68fecf3b0ae0a36fc3ef0e0c30be6f6769af2505e2e0c81f5e2a3044bc3605d17da648251dc9fd568ca38050987aa5", &(0x7f0000000140)=0xa7, &(0x7f0000000180), 0x0) (async) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0xc}, 0x4, &(0x7f0000000080)="26b50142a414c7e94644cd87fbfe52a1b6f49884a099548ed59b1c139fb935c62b0c822588362152f988d89f06090a3347b614f016cb47062651bd46801ff9d7874931deced77bf636aebc9d9f371d2215f4c51a29f4f3e2be025b927c3df642a4256823b36c73498df6d1f33cdf2275ce5ea83b312c145d68fecf3b0ae0a36fc3ef0e0c30be6f6769af2505e2e0c81f5e2a3044bc3605d17da648251dc9fd568ca38050987aa5", &(0x7f0000000140)=0xa7, &(0x7f0000000180), 0x0) 142.224699ms ago: executing program 1 (id=90): setrlimit(0x8, &(0x7f0000000000)={0x41, 0x5f}) r0 = syz_open_pts() sysctl$net_inet_tcp(&(0x7f0000000080), 0x4, &(0x7f0000000140)="58253ad86e95f865af2a065006825d070d1ddb717f847432020c6daf0d40bbcd43aa56695afa339921637f84731af37cf859913cef6fdc22999604b3ff9a170f5d4786e588a88e7e1374c5", &(0x7f00000001c0)=0x4b, &(0x7f0000000200)="937afb590777707918da51ba9d3ed87e0ac47e7ac522be5e715ff9feaf01f0f09944d913489677c4dd4e28b46dc4a9b723761fd87eb97825aeaa282f2ff6bddc908d5723d9c75d7561ab942855b11c0b56d1c26db52a46520bbddbb945d8c4315aa305b2236dbe11408b3be17006cb9e2f2e9f41c3e5a7e9fa6dda9791a26f76bce0b70138c181cff867f777b56a82d2cc18d60a2c2bf596f14001585a9555175ccf8ef243a4ba651246838452c7e75d62c5", 0xb2) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1704) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) close(r0) r1 = syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000100)={0x77ffffff, 0x8, 0x7fffffff, 0xffff7df8, "ec7600b72802100006faef0a00", 0x80000002, 0x6}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000d80)="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", 0x179}], 0x1) 141.712036ms ago: executing program 4 (id=91): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)='#!', 0x2}], 0x1) setrlimit(0x8, &(0x7f0000000980)) write(r0, &(0x7f0000000180)="092020090900db0000ff4278ad535c2a415642000000005624b77b6a0a", 0x1d) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) close(r1) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r2 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000080)=0x9) open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x96) getsockname(r1, 0x0, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 141.511193ms ago: executing program 0 (id=79): setresuid(0x0, 0xee01, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0xffff, 0x1024, &(0x7f0000000380)={0x0}, &(0x7f0000000100)=0xc) kill(r2, 0x3) setresuid(r0, 0x0, r2) r3 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r3, 0x0, 0x0, 0x404, &(0x7f00000001c0)={0x10, 0x2, 0x1, 0xe0000003}, 0xd) socket(0x1e, 0x3, 0x0) setresuid(0x0, 0xee01, 0x0) (async) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) (async) socket$unix(0x1, 0x2, 0x0) (async) getsockopt$sock_cred(r1, 0xffff, 0x1024, &(0x7f0000000380), &(0x7f0000000100)=0xc) (async) kill(r2, 0x3) (async) setresuid(r0, 0x0, r2) (async) socket$inet(0x2, 0x2, 0x0) (async) sendto$inet(r3, 0x0, 0x0, 0x404, &(0x7f00000001c0)={0x10, 0x2, 0x1, 0xe0000003}, 0xd) (async) socket(0x1e, 0x3, 0x0) (async) 6.594474ms ago: executing program 0 (id=92): openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getitimer(0x1, 0xfffffffffffffffe) (async, rerun: 32) openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) (async, rerun: 32) r0 = semget(0x0, 0x1, 0x281) (async, rerun: 32) link(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000740)='./file0\x00') (async, rerun: 32) mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x5900) (async) r1 = open(&(0x7f0000000000)='./file1\x00', 0x8000, 0x3f3) ioctl$BIOCSETIF(r1, 0x80084904, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETIF(r1, 0x40384900, 0x0) (async) open(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, 0x0) (async) truncate(0x0, 0x30000) ioctl$TIOCSETVERAUTH(0xffffffffffffffff, 0x8004741c, 0x0) (async) ioctl$DIOCGETSTATE(r1, 0xc1084413, 0x0) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, 0x0) (async) r2 = open(0x0, 0x80000000000206, 0x0) link(&(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f00000000c0)={0x2, 0x7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setresgid(0x0, r5, 0x0) (async) semget(0x0, 0x1, 0x281) (async) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000780)={{0x0, r4, r4, r5, 0x8f, 0x7f, 0x5}, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x200000000005}) (async) setuid(0xffffffffffffffff) (async) semget(0x0, 0x4, 0x2c1) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 64) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) madvise(&(0x7f00003a2000/0xc00000)=nil, 0xc00000, 0x6) 1.108656ms ago: executing program 1 (id=93): openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x800000004, [{&(0x7f000014c000/0x4000)=nil, &(0x7f00000b7000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000124000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000795000/0x2000)=nil, 0xb93a}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00006d4000/0x2000)=nil, 0xfdfffffffffffff7}, {&(0x7f0000312000/0x2000)=nil, &(0x7f0000025000/0x3000)=nil, 0x4001}, {&(0x7f000064c000/0x4000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000123000/0x3000)=nil, &(0x7f000014d000/0x4000)=nil, 0x4}, {&(0x7f00002f3000/0x3000)=nil, &(0x7f000063b000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000026000/0x4000)=nil, 0x6}, {&(0x7f00001dc000/0x1000)=nil, &(0x7f00001db000/0x3000)=nil, 0xc6}, {&(0x7f0000392000/0x1000)=nil, &(0x7f00003a6000/0x3000)=nil, 0x1000}, {&(0x7f00006b8000/0x4000)=nil, &(0x7f0000116000/0x1000)=nil, 0x6}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x51c}, {&(0x7f000068b000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xc0}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000754000/0x4000)=nil, 0x4000009e}], './file0\x00', 0xfffffffa}) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x4, 0x1, './file0\x00'}, 0xa) recvmsg(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/236, 0xec}], 0x1, 0x0}, 0x473aca9c51e0e662) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8000006, 0x8, 0xfffffffe, 0xffffff8f, "08ed95990000000000000000ffffffffffffffe6", 0x800b, 0x8}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffe53) accept4(0xffffffffffffffff, 0x0, 0x0, 0x2000) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r2 = socket$inet(0x2, 0x8003, 0xfc) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fb, 0x9, 0x3, 0x8fe, 0x40000, 0x5, 0x3, 0x10, [{0xfffff000, 0x2, 0x6, 0x71800}, {0x3, 0x2000b7fe, 0x6, 0x40020000}, {0x0, 0xc7, 0x208, 0xfffffffc}, {0x2, 0x80ff, 0x200, 0x5}, {0x10000, 0x3, 0x5, 0x7}, {0x2002, 0x83, 0x14000009, 0xf}, {0x6, 0xbffffff9, 0x1, 0x6d}, {0x2400a, 0x3, 0xfdf0}, {0x1, 0x6, 0x3, 0x9}, {0x401, 0x0, 0x18001, 0x7}, {0x401, 0xfff9, 0x48a, 0x13}, {0xcc, 0x7584, 0x8, 0x8}, {0x2000df, 0x2b, 0x5, 0x3ff}, {0x2, 0xfffffffc, 0xfffffff5, 0x3}, {0x6, 0x5, 0x26, 0x40000003}, {0xfffffffd, 0xd654, 0xffffffff, 0x6}]}) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1e5f) r3 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x95) setuid(0xffffffffffffffff) ioctl$BIOCSETWF(r3, 0x80184404, &(0x7f0000000000)={0xffffffffffffffa0, 0x0}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 630.802µs ago: executing program 2 (id=45): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x9}, 0x4) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/236, 0xec}], 0x1, 0x0}, 0x473aca9c51e0e662) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async) ioctl$WSDISPLAYIO_DELFONT(0xffffffffffffffff, 0x8058574f, &(0x7f00000000c0)={'./file0\x00', 0xfffffffe, 0xff, 0xfe, 0x3, 0x10, 0x9, 0x2, 0x1, 0x0, 0x8, 0x3}) (async) r0 = syz_open_pts() close(r0) (async) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8000006, 0x8, 0xfffffffe, 0xffffff8f, "08ed95990000000000000000ffffffffffffffe6", 0x800b, 0x8}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r2 = socket$inet(0x2, 0x8003, 0xfc) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f00000000c0)="0000000128f4088e7408d703b187b73656eb2017c1e7563d4cdc547de4651358e83235e9982bfa1dd53c651f2036ccf4140208d20f9dff725b12d0890514be7b6ab118afeb51e855ef45f82a2f655528a2723d66ec74458aa8c1d724190e8eca5ace6abdc2afb0f53b494e2ef1c37e20edceba27300c66cb8ba7c3cd267742b52507", 0xffffff0a}], 0x1000000000000168) 558.395µs ago: executing program 4 (id=94): syz_open_pts() (async) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0x201) (async) open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) 144.911µs ago: executing program 5 (id=14): syz_emit_ethernet(0x36, &(0x7f0000000240)={@random="012000010100", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "6a0802", 0x0, 0x3c, 0x29, @rand_addr, @local={0xfe, 0x80, '\x00', 0x0}}}}}) mkdir(&(0x7f0000000040)='./file2\x00', 0x1ce) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup(r1) setsockopt$inet_opts(r2, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) sendmsg(r2, &(0x7f00000007c0)={&(0x7f0000000000)=@in6={0x1c, 0x18, 0x1, 0x3438, "98f4060000000000ca7d325acc8c61fa", 0x52369ecb}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="48a27d96c72cd645", 0x8}], 0x1, 0x0}, 0x8) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) mknod(&(0x7f0000000100)='./file2\x00', 0x80, 0x6) mkdir(&(0x7f0000000080)='./file2/file0\x00', 0xc2) socketpair$unix(0x1, 0x91df554cb5f173d9, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x0, 0x0}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000240)={@random="012000010100", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "6a0802", 0x0, 0x3c, 0x29, @rand_addr, @local={0xfe, 0x80, '\x00', 0x0}}}}}) (async) mkdir(&(0x7f0000000040)='./file2\x00', 0x1ce) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket$inet(0x2, 0x2, 0x0) (async) dup(r1) (async) setsockopt$inet_opts(r2, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) (async) sendmsg(r2, &(0x7f00000007c0)={&(0x7f0000000000)=@in6={0x1c, 0x18, 0x1, 0x3438, "98f4060000000000ca7d325acc8c61fa", 0x52369ecb}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="48a27d96c72cd645", 0x8}], 0x1, 0x0}, 0x8) (async) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) (async) mknod(&(0x7f0000000100)='./file2\x00', 0x80, 0x6) (async) mkdir(&(0x7f0000000080)='./file2/file0\x00', 0xc2) (async) socketpair$unix(0x1, 0x91df554cb5f173d9, 0x0, &(0x7f0000000000)) (async) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x0, 0x0}, 0x8) (async) 0s ago: executing program 7 (id=95): syz_emit_ethernet(0x1000e, &(0x7f0000000000)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x16, 0x0, 0x2ee0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @generic='4t'}}}}) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaefffffffffff080049f0002800631c0500329078ac1400aa0000000144100820f1a9527d211b6b5e7c000000000000006bb4ebbbe93c1b99676c5c960a6c5c06624ae940840c7eb2a768db5cb63aacaaeabd231a50593cc384fe138981cacba237eda574c300"/120]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.114' (ED25519) to the list of known hosts. uvn_flush: obj=0xfffff6006ced1a10, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! malloc(): allocation too large, type = 127, size = 6806414744 pckbd_enable: command error Data modified on freelist: word -35183673684040 of object 0xffff800000c40a50 size 0x10 previous type free (invalid addr 0xaeca0c0d620eb018) kernel: protection fault trap, code=0 Stopped at malloc+0x855: movq 0x8(%rbx),%r14 ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> show kasan No such command ddb{1}> trace malloc(10,7f,1) at malloc+0x855 ktrsyscall(ffff800045fef4d8,a,8,ffff80002a37cd20) at ktrsyscall+0x19a syscall(ffff80002a37cd20) at syscall+0x305 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7228c7c0ebf0, count: -4 ddb{1}> show registers rdi 0xaeca0c0d620ef018 rsi 0x4000 __ALIGN_SIZE+0x3000 rbp 0xffff80002a37cb60 rbx 0xaeca0c0d620eb018 rdx 0 rcx 0xffff800045fef4d8 rax 0xffff80002999dff0 r8 0 r9 0 r10 0 r11 0x4c55ea2d97806aa1 r12 0x4000 __ALIGN_SIZE+0x3000 r13 0xffffffff83a09750 kmemstats+0x1fc0 r14 0xa30c333 __kernel_phys_end+0x670c333 r15 0xaeca0c0d620ef018 rip 0xffffffff81218fc5 malloc+0x855 cs 0x8 rflags 0x10286 __ALIGN_SIZE+0xf286 rsp 0xffff80002a37caa0 ss 0x10 malloc+0x855: movq 0x8(%rbx),%r14 ddb{1}> show proc PROC (syz-executor) tid=298957 pid=52466 tcnt=1 stat=onproc flags process=2 proc=1 runpri=50, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045fefca0,0xffff800045fe6a90 process=0xffff800045feb560 user=0xffff80002a377000, vmspace=0xfffff6000b1f75b8 estcpu=36, cpticks=9, pctcpu=0.2, user=0, sys=9, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 87258 419372 31357 0 7 0 0 syz-executor 16163 272139 63993 0 2 0 0 syz-executor 16163 208884 63993 0 3 0 0x4000080 fsleep syz-executor 33663 413586 2542 0 2 0 0 syz-executor 33663 501171 2542 0 2 0 0x4000000 syz-executor 33663 229301 2542 0 3 0 0x4000080 fsleep syz-executor 33663 225839 2542 0 2 0 0x4000000 syz-executor 33663 277 2542 0 3 0 0x4000080 fsleep syz-executor 33663 105231 2542 0 2 0 0x4000000 syz-executor 12432 31284 59283 0 2 0 0 syz-executor 12432 310285 59283 0 2 0 0x4000000 syz-executor 12432 400175 59283 0 2 0 0x4000000 syz-executor 64290 19045 47821 0 2 0 0 syz-executor 64290 377990 47821 0 2 0 0x4000000 syz-executor 82657 492044 53347 0 2 0x2 0 syz-executor 37621 428861 26582 0 4 0x2000 0x80000 syz-executor 37621 145742 26582 0 3 0x2000 0x4080000 smrbar syz-executor 37621 503209 26582 0 3 0x2000 0x4000000 suspend syz-executor 63993 122387 53347 0 3 0x2 0x80 nanoslp syz-executor 2542 196963 53347 0 3 0x2 0x80 nanoslp syz-executor 47821 70796 53347 0 2 0x2 0 syz-executor 67673 321423 0 0 3 0x14000 0x200 acct acct *52466 298957 53347 0 7 0x2 0x1 syz-executor 31357 73567 53347 0 3 0x2 0x80 nanoslp syz-executor 26582 238448 53347 0 3 0x2 0x80 nanoslp syz-executor 59283 229440 53347 0 3 0x2 0x80 nanoslp syz-executor 53347 141653 72132 0 2 0x2 0 syz-executor 72132 267715 45365 0 3 0x100002 0x88 sigsusp ksh 45365 102296 84828 0 3 0x10 0x88 kqread sshd-session 84828 278112 12560 0 3 0x12 0x80 kqread sshd-session 21006 140344 1 0 3 0x100003 0x80 ttyin getty 12560 339991 1 0 3 0 0x88 kqread sshd 76167 73139 79875 74 3 0x1100012 0x80 bpf pflogd 79875 104450 1 0 3 0 0x80 sbwait pflogd 69841 202690 87592 73 3 0x1100010 0x80 kqread syslogd 87592 150843 1 0 3 0x100002 0x80 sbwait syslogd 75681 421648 1 0 3 0x100000 0x80 kqread resolvd 43205 381702 5196 77 3 0x100012 0x80 kqread dhcpleased 51016 169699 5196 77 3 0x100012 0x80 kqread dhcpleased 5196 361732 1 0 3 0 0x80 kqread dhcpleased 48433 73829 0 0 3 0x14000 0x200 bored smr 96031 205928 0 0 2 0x14000 0x200 zerothread 59833 116485 0 0 3 0x14000 0x200 aiodoned aiodoned 56219 140507 0 0 3 0x14000 0x200 syncer update 62122 386059 0 0 3 0x14000 0x200 cleaner cleaner 66130 233069 0 0 3 0x14000 0x200 reaper reaper 45893 128132 0 0 3 0x14000 0x200 pgdaemon pagedaemon 67589 15120 0 0 3 0x14000 0x200 bored viomb 96883 370540 0 0 3 0x14000 0x40000200 acpi0 acpi0 8940 288270 0 0 3 0x14000 0x40000200 idle1 69995 162905 0 0 3 0x14000 0x200 bored softnet1 65769 494600 0 0 3 0x14000 0x200 bored softnet0 77213 300961 0 0 3 0x14000 0x200 smrbar systqmp 10428 251372 0 0 3 0x14000 0x200 bored systq 88208 4948 0 0 3 0x14000 0x200 tmoslp softclockmp 13557 518920 0 0 3 0x14000 0x40000200 tmoslp softclock 25649 378713 0 0 3 0x14000 0x40000200 idle0 1 361631 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks CPU 1: exclusive mutex /syzkaller/managers/multicore/kernel/sys/kern/kern_malloc.c:96 r = 0 (0xffffffff838f6e78) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 malloc+0x2ef #3 ktrsyscall+0x19a #4 syscall+0x305 #5 Xsyscall+0x128 Process 87258 (syz-executor) thread 0xffff800045fee7e0 (419372) exclusive rwlock vmmaplk r = 0 (0xfffff6000b1f7a88) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x430 #7 recall_trap+0x8 Process 37621 (syz-executor) thread 0xffff800045fe6fb0 (145742) exclusive rwlock clonelk r = 0 (0xffffffff839a5dc8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 if_clone_destroy+0x93 #3 ifioctl+0x59d #4 sys_ioctl+0x674 #5 syscall+0xbd4 #6 Xsyscall+0x128 Process 77213 (systqmp) thread 0xffff800045ffe530 (300961) shared rwlock systqmp r = 0 (0xffffffff839053e8) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11060 12156K 12156K 166960K 12210 0 pcb 17 12K 12K 166960K 32 0 rtable 229 9K 9K 166960K 640 0 pf 33 17K 18K 166960K 62 0 ifaddr 39 6K 7K 166960K 79 0 ifgroup 51 2K 2K 166960K 87 0 sysctl 3 1K 9K 166960K 7 0 counters 68 36K 37K 166960K 86 0 ioctlops 0 0K 4K 166960K 1521 0 iov 0 0K 16K 166960K 5 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1295 81K 82K 166960K 1509 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 11 0K 0K 166960K 13 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 57K 118K 166960K 365 0 proc 72 115K 164K 166960K 788 0 subproc 72 4K 4K 166960K 153 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 28 0 in_multi 88 5K 6K 166960K 189 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 4 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 73 334K 334K 166960K 73 0 exec 0 0K 1K 166960K 502 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 216 159K 178K 166960K 4779 0 UVM aobj 4 2K 2K 166960K 5 0 pinsyscall 41 82K 106K 166960K 1762 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 3 0 NDP 17 0K 2K 166960K 52 0 temp 37 9118K 9139K 166960K 13230 0 kqueue 13 20K 24K 166960K 40 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 60 0 57 1 0 1 1 0 8 0 rtentry 176 203 0 103 6 0 6 6 0 8 0 unpcb 144 70 0 53 1 0 1 1 0 8 0 syncache 336 4 0 4 1 1 0 1 0 8 0 tcpcb 736 32 0 27 1 0 1 1 0 8 0 arp 136 35 0 19 1 0 1 1 0 8 0 inpcb 328 253 0 243 7 0 7 7 0 8 6 nd6 152 49 0 27 1 0 1 1 0 8 0 kcovpl 48 17 0 9 1 0 1 1 0 8 0 pfstscr 40 1 0 0 1 0 1 1 0 8 0 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 2 0 1 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 36 0 0 1 0 1 1 0 8 0 pfstkey 128 36 0 0 2 0 2 2 0 8 0 pfstate 448 35 0 0 4 0 4 4 0 8 0 pfrule 1360 22 0 17 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 823 0 354 30 0 30 30 0 8 0 art_table 40 824 0 354 5 0 5 5 0 8 0 art_node 32 203 0 103 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 1 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 72 11 0 2 1 0 1 1 0 8 0 shmpl 120 2 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1759 0 269 94 0 94 94 0 8 0 ffsino 296 1759 0 269 115 0 115 115 0 8 0 nchpl 144 2094 0 358 65 0 65 65 0 8 0 vnodes 216 1963 0 0 110 0 110 110 0 8 0 namei 1024 8595 0 8595 3 1 2 2 0 8 2 percpumem 16 59 0 9 1 0 1 1 0 8 0 kstatmem 264 43 0 18 2 0 2 2 0 8 0 scxspl 216 7503 0 7503 9 3 6 6 1 8 6 plimitpl 152 72 0 54 1 0 1 1 0 8 0 sigapl 424 670 0 623 7 0 7 7 0 8 1 knotepl 120 292 0 0 9 0 9 9 0 8 0 kqueuepl 224 53 0 44 1 0 1 1 0 8 0 pipepl 344 162 0 135 3 0 3 3 0 8 0 fdescpl 528 653 0 623 3 0 3 3 0 8 0 filepl 160 2549 0 2332 12 0 12 12 0 8 2 lockfpl 104 42 0 39 1 0 1 1 0 8 0 lockfspl 48 22 0 19 1 0 1 1 0 8 0 sessionpl 144 38 0 29 1 0 1 1 0 8 0 pgrppl 48 55 0 38 1 0 1 1 0 8 0 ucredpl 104 292 0 279 1 0 1 1 0 8 0 zombiepl 144 623 0 623 1 0 1 1 0 8 1 processpl 1240 670 0 623 5 0 5 5 0 8 0 procpl 664 849 0 791 6 0 6 6 0 8 1 sockpl 752 390 0 360 10 0 10 10 0 8 7 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 129 0 0 17 0 17 17 0 8 0 mcl2k 2048 29 0 0 4 0 4 4 0 8 0 mextrefs 64 29 0 0 1 0 1 1 0 8 0 mtagpl 96 4 0 0 1 0 1 1 0 8 0 mbufpl 256 187 0 0 12 0 12 12 0 8 0 bufpl 272 2651 0 105 170 0 170 170 0 8 0 anonpl 32 5099 0 0 41 0 41 41 0 247 0 amapchunkpl 152 13301 0 12870 28 0 28 28 0 158 10 amappl16 200 1885 0 1866 5 3 2 5 0 8 0 amappl15 192 49 0 49 1 1 0 1 0 8 0 amappl14 184 541 0 540 1 0 1 1 0 8 0 amappl13 176 145 0 133 1 0 1 1 0 8 0 amappl12 168 944 0 915 2 0 2 2 0 8 0 amappl11 160 22 0 21 1 0 1 1 0 8 0 amappl10 152 170 0 156 1 0 1 1 0 8 0 amappl9 144 277 0 277 1 1 0 1 0 8 0 amappl8 136 151 0 148 1 0 1 1 0 8 0 amappl7 128 175 0 161 1 0 1 1 0 8 0 amappl6 120 239 0 238 1 0 1 1 0 8 0 amappl5 112 101 0 91 1 0 1 1 0 8 0 amappl4 104 350 0 328 1 0 1 1 0 8 0 amappl3 96 2368 0 2283 3 0 3 3 0 8 0 amappl2 88 758 0 686 2 0 2 2 0 8 0 amappl1 80 12025 0 11421 15 0 15 15 0 8 1 amappl 88 3870 0 3725 5 0 5 5 0 92 1 uvmvnodes 80 108 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 4 0 1 1 0 1 1 0 8 0 uaddrrnd 24 653 0 623 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 653 0 623 1 0 1 1 0 8 0 vmmpekpl 168 7221 0 7176 3 0 3 3 0 8 0 vmmpepl 168 51415 0 49570 87 0 87 87 0 357 5 vmsppl 488 652 0 623 5 0 5 5 0 8 1 rwobjpl 80 17649 0 16643 24 0 24 24 0 8 1 pdppl 4096 1313 0 1246 111 36 75 87 0 8 8 pvpl 32 11685 0 0 96 1 95 95 0 265 0 pmappl 256 652 0 623 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 462 0 41 13 0 13 13 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff8395bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 mtx_enter(ffffffff838f6e68) at mtx_enter+0x37b malloc(20,62,2) at malloc+0x2ef amap_alloc1(40,2,0) at amap_alloc1+0x291 amap_copy(fffff6000b1f7988,fffff6006c9a6020,2,1,aff64b5e000,aff64b5e001) at amap_copy+0x257 uvm_fault_check(ffff800031394c10,ffff800031394c48,ffff800031394c80,0) at uvm_fault_check+0x473 uvm_fault(fffff6000b1f7988,aff64b5e000,0,1) at uvm_fault+0x106 upageflttrap(ffff800031394db0,aff64b5ef48) at upageflttrap+0xa9 usertrap(ffff800031394db0) at usertrap+0x430 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7051f55d3a70, count: -12 ddb{0}> machine ddbcpu 1 Stopped at malloc+0x855: movq 0x8(%rbx),%r14 ddb{1}> trace malloc(10,7f,1) at malloc+0x855 ktrsyscall(ffff800045fef4d8,a,8,ffff80002a37cd20) at ktrsyscall+0x19a syscall(ffff80002a37cd20) at syscall+0x305 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7228c7c0ebf0, count: -4