last executing test programs: 3.968654758s ago: executing program 1 (id=137): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) msgget$private(0x0, 0xb) (async) r0 = getuid() setreuid(0xee00, r0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (rerun: 64) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, r2, 0x0, 0x0, 0x21, 0x4}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x9, 0x8000}) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)={{0x7ff, r0, 0x0, 0xffffffffffffffff, r2, 0x284, 0x59c3}, 0xffffffffffffffe5, 0x3, 0x9}) r3 = getegid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe5, 0x0, r3, 0x0, 0x0, 0x4, 0x3}, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x0, 0x6, 0x5}) (async) r4 = socket(0x18, 0x3, 0x0) (async) r5 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) (async) r6 = socket(0x2, 0x1, 0x0) write(r4, &(0x7f0000000100)="76ed63901f0e77e8833d611bfc0d8e5a9236e3187bec6f90068cbaf89c78abd07c9c3d5cb7ebe92ad800d2a464d379ecc44fad13d39c6a4f35e3ea26b64573c4348f4c15ffa993827a4eb53f5868933c2dd7dfa3557128f510f855acb34dc8f2b6b552028e424c4173bb819636bd09e418d5e2bb76544a136d7a10c1753cf2ee968dbc7400b78ffb", 0x88) (async, rerun: 32) getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f0000000280), 0xc) (rerun: 32) ioctl$WSMOUSEIO_GETPARAMS(r5, 0x80105727, &(0x7f00000002c0)={&(0x7f0000000240)=[{0x100, 0x4}, {0x8d, 0x7fffffff}, {0x84, 0x40}], 0x3}) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./bus\x00', 0x8001, 0x0}) (async) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x8) preadv(r7, &(0x7f0000000000), 0x0, 0x7) 3.868208243s ago: executing program 1 (id=139): r0 = accept$unix(0xffffffffffffff9c, &(0x7f00000003c0)=@file={0x0, ""/4104}, &(0x7f0000000000)=0x100a) sendmsg$unix(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0xfffffffffffffe0f, &(0x7f0000002c40)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x8}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) r1 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) write(r1, &(0x7f00000001c0)="7bcdf5836688fd01d40b03dfdb7caff46303d4bc090a872743ca87932c2cf0812badf3a4295e3ffb06d75f4692ed4e293c2b437603d207df03f759eaa1f20147c59bea8d7427daa4dd509ee91bf23b9427dac550863860479a96dc0775ac75f8e282fb89f37dcf7e784d8575b48e7f7735480b0e333ad17e50622d7e2bbd4e510e8ee5fd1bb1e2df130a3fd8c2295a155fdf5602c7d3be19b4361e0f3957f36fca4e969f7d537f5fa8d8de354bd4f2c6f38b1b514f2ea1d8a705f4bc2ae3a3afa776a4507f822c480d4f0efefe2f2984c4b0873dacb9a608ae44a893936a368256f77487f13874ca", 0xe8) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) setsockopt(0xffffffffffffffff, 0xc, 0x9, &(0x7f0000000040)="03", 0x1) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x3, 0x0, 0x1ff, 0xfffffffffffffffc}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) syz_emit_ethernet(0x138, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000), 0x0) setsockopt$inet_opts(r2, 0x0, 0x1, 0x0, 0x0) syz_open_pts() r3 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x198) ioctl$TIOCFLUSH(r3, 0x80047476, &(0x7f0000000080)=0x80000001) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x8, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f00000001c0)={0x39, &(0x7f0000000080)}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket(0x10, 0x2, 0x0) close(r5) r6 = socket(0x6, 0x2, 0x0) setsockopt(r6, 0x1000000000029, 0x9, &(0x7f0000000040)="00fb6c4f", 0x4) setsockopt(r6, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r5, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) 3.783888229s ago: executing program 1 (id=143): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="673bb5b8cc0c16ed08f1b8d24e2207f981aa6a78ef1d35e6abbbdabb26a52ad7f46003d52c000f06c166b28e8db79f701681", 0x32}], 0x1) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) kevent(r0, 0x0, 0xfffffff1, &(0x7f00000002c0)=[{{r0}, 0xfffffffffffffff9, 0x2, 0x40, 0x0, 0x40000000000005}, {{r0}, 0xfffffffffffffffc, 0xc0, 0x20000000, 0x4000000000005, 0x46ad}, {{}, 0xfffffffffffffff8, 0x1, 0x8, 0x1, 0x400000000000008}, {{r0}, 0xfffffffffffffffe, 0x6e, 0x4, 0xffffffff, 0xc3b}, {{}, 0xfffffffffffffffb, 0x6b28b7731859c8bc, 0x40000000, 0x9, 0x3}, {{r0}, 0xffffffffffffffff, 0x1d5, 0x80, 0xe, 0x10000}, {{r0}, 0xfffffffffffffff9, 0x14, 0x10, 0x5, 0x100000001}, {{r0}, 0xfffffffffffffffe, 0x38, 0x20000000, 0x103, 0xfffdfffffffffffb}], 0x282, 0x0) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x3) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file0\x00', 0x400030001) r1 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r1) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x538, r1) 3.745866431s ago: executing program 1 (id=150): syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="fffffffffffadecae5a2ff0000000000000800450000300000000000019078ac1400bbac1400aa0c00d078d91147b03db788000000a1a01e4252ba55191b6aebd53600"]) sysctl$net_inet6_ip6(&(0x7f0000000100)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, &(0x7f0000000080)="3bb36ff3", 0x4) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000480)={0x2df57366, 0xfffffdff, 0xd, 0xfffffffc, "0a6400b72860267eccc7020000060000008700", 0x100000f, 0x100000c}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000009c0)="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", 0x323}, {&(0x7f0000000300)="c534864e45fc0ce81257cd181a3474808171cf26", 0x14}, {&(0x7f00000005c0)="dda4cef2de77d12da098e4057635aaf4eec63f484af1831b27e35ed2e0254441718f0d3853", 0x25}], 0x3) open(0x0, 0x20, 0x149) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x60}) getrlimit(0x3, &(0x7f0000000080)) setrlimit(0x0, &(0x7f00000004c0)={0xb, 0x7}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x7f, 0xa, 0x0, 0x8}, {0x1, 0x2, 0x0, 0x1}, {0x8306}]}) syz_emit_ethernet(0x26, &(0x7f0000000040)=ANY=[]) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000340)='./file1\x00', 0x200, 0x33) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0) 3.489388703s ago: executing program 5 (id=152): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000004840), 0x1001, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000100)={&(0x7f0000000040)=[{0x100, 0x8}, {0x0, 0x3}, {0x81, 0x3ff}], 0x3}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETA(r1, 0xc008441e, &(0x7f0000000040)={0x0, 0xa, 0x4009, 0x0, "979ae90b00000000ffff00000020eb1e2b50ffff", 0x4, 0xbff}) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r2, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929649", 0x14) ioctl$LIOCSFD(r1, 0x80046c7f, &(0x7f0000000000)=r2) 3.488891046s ago: executing program 6 (id=153): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/247, 0xf7}, {&(0x7f0000000480)=""/194, 0xc2}, {&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000003c0)=""/153, 0x99}, {&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000680)=""/136, 0x88}], 0x6, 0x5) (async) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/247, 0xf7}, {&(0x7f0000000480)=""/194, 0xc2}, {&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000003c0)=""/153, 0x99}, {&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000680)=""/136, 0x88}], 0x6, 0x5) openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fcntl$getflags(r1, 0x1) socket$inet(0x2, 0x3, 0x0) (async) r2 = socket$inet(0x2, 0x3, 0x0) getsockopt(r2, 0x0, 0x5, 0x0, 0x0) socket(0x2, 0x5, 0x0) (async) socket(0x2, 0x5, 0x0) socket(0x18, 0x3, 0x17) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xff, 0x10001, 0x28, 0x8, 0x3, 0x8040, 0x10, [{0x8, 0x6, 0x10, 0x80000001}, {0x3, 0xe0000205, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x7120000}, {0x9, 0xe2, 0x7, 0x27}, {0x81, 0x40b, 0x3ff, 0xa6}, {0x1, 0xfffc, 0xa, 0xffffffff}, {0x5, 0x804, 0x1, 0x2}, {0xd, 0xb5, 0x28000, 0xb7}, {0x2, 0x8001, 0x6, 0x7ffa}, {0x3, 0x8, 0x6, 0x28bf9}, {0x0, 0x2, 0x8, 0x7}, {0x6, 0xc7ce, 0x1, 0x4}, {0x401, 0x10, 0x6, 0x6}, {0x9, 0x1006e4, 0x2, 0x6f5fc48b}, {0x3, 0x101, 0x1004, 0x75d98003}, {0x9be0, 0x2, 0x8, 0x2000068}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) munmap(&(0x7f0000000000/0x1000)=nil, 0x71c47) setitimer(0x1, 0xfffffffffffffffe, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x100) mknodat(r3, 0x0, 0xc000, 0x3361) open(0x0, 0x80000000000206, 0x4ebfac6bbaf7949) r4 = semget(0x0, 0x1, 0x281) semop(r4, &(0x7f0000000000), 0x23) (async) semop(r4, &(0x7f0000000000), 0x23) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x100) r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r6, 0x0) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r6, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x1d9) (async) r7 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x1d9) pwrite(r7, &(0x7f0000000100)="93d4", 0xfffffeca, 0x5) r8 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2950, 0x13d4) (async) mknod(&(0x7f0000000080)='./file0\x00', 0x2950, 0x13d4) ioctl$VNDIOCSET(r8, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) (async) ioctl$VNDIOCSET(r8, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) ioctl$VT_RELDISP(r5, 0x20007604, &(0x7f0000000140)=0x1) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f00000000c0)={0x101, 0x4, 0x8a38, 0xfffffffc, "070609000013160000050800", 0x0, 0x7f7}) (async) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f00000000c0)={0x101, 0x4, 0x8a38, 0xfffffffc, "070609000013160000050800", 0x0, 0x7f7}) ioctl$TIOCSTAT(r5, 0x20007465, 0x0) mmap(&(0x7f0000e7a000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x0) 3.480838543s ago: executing program 7 (id=156): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x451c) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd605f6ad90002000000800000fe8000000000000000000000000000aa"]) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) clock_getres(0x0, &(0x7f0000000000)) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000100)={&(0x7f0000000000)='./bus\x00', 0x9, &(0x7f0000000040)='./bus\x00', 0x6}) sysctl$net_inet_ip(&(0x7f0000000140)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000000180)="18e76da4d39093b30e30b47f1321999213bb09b565bb8057533957e9f9c2d8d841529aa17fd8d766888835aa02bfbbd50680945bf6cc76bd4ffbbd17b5d4bac0b9afe321936a6bb67aa97dda1e6ee278bb9a7a0214c0e23913cf42e710b20d0d224ae75c43a2cdee653d9d9b54fbcfef948070e6facfb7d936a0d4106c788df23b954ca563664b2f2ad937afa59c6958acb0ad02ed295edd5739099f2ec6a1229c9a3fb0ce0134591bbb19dfe309a4343a4d6591b5b0f1069652741469c6acbf7b44089286a4720da2949d4e21d7b63bac8299dcee57f4003551ccc8ba5794559ad73199e1db57992bb01af3e72ca2e336aa", &(0x7f0000000280)=0xf2, &(0x7f00000002c0)="f810698709f7adabc450cb97751389d601e547d123c3d74cb09e25a07e93f93e919d6ff5e2286c300b070bfc39837ee124d0ec5813eecb3f7eaadaedd3d93e22bf73eb86ca8afb320431", 0x4a) 3.413283798s ago: executing program 7 (id=158): mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000300000000", 0x8) r2 = socket(0x18, 0x3, 0x3d) getsockopt(r2, 0x29, 0x1a, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000040)) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x44) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000080)={&(0x7f00000002c0)}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) open(&(0x7f0000000080)='./bus\x00', 0x800, 0xa9) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) ioctl$TIOCSTART(r3, 0x2000746e) 3.412541313s ago: executing program 7 (id=160): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) select(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x423, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x0, 0x27, 0x4, 0x10071002}, {0x6, 0x9, 0x8, 0xeffffff9}, {0x102, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x1}, {0x2, 0x82, 0x4, 0x5}, {0x6a75, 0x8001, 0xd1b, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0x3ff, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x10c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000080)}], 0x2) sysctl$kern(&(0x7f00000000c0)={0x1, 0x46}, 0x2, &(0x7f0000000000)="71f91e3471ac0058a55a91501d94a34b8e5fcfc36e2dcc4430830883", &(0x7f0000000080)=0x1c, 0x0, 0x0) 3.260142398s ago: executing program 3 (id=161): r0 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) r1 = socket$inet(0x2, 0x3, 0xc2) getsockopt(r1, 0x0, 0x2, 0x0, 0x0) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) fchmod(r0, 0xf3) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000001900)="aaed0f6fe2944e2e", 0x8}, {0x0}], 0x2) setuid(0xffffffffffffffff) unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='x\x00') 3.259338681s ago: executing program 6 (id=163): sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x14}, 0x4, 0x0, 0x0, &(0x7f0000000040)="be0673a8", 0x4) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x451c) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 3.258677449s ago: executing program 6 (id=164): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)=[&(0x7f00000000c0)='p.@!\x00', &(0x7f0000000100)='\'\x00', &(0x7f00000001c0)=')\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='#&\x00', &(0x7f0000000280)='\xde\x00'], &(0x7f0000000400)=[&(0x7f0000000300)='!\x00', &(0x7f0000000340)='!\x00', &(0x7f0000000380)='&@}(\x00', &(0x7f00000003c0)='+(\'[*#^],$(+R\'(^\x00']) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x2) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x83b, 0xfff, 0xffff, 0x1, 0x21, 0x1, 0x4000001, 0x2, 0x1, 0x1, 0x2}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) fcntl$getown(r1, 0x5) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) close(r1) 3.15172779s ago: executing program 2 (id=166): syz_emit_ethernet(0xa0, &(0x7f0000000080)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x6a, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x0, 0x3a, 0x80, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, [@hopopts={0x88}], "1e8d0db36ba885ab0c17f0556f4e6854adcabcb06b69b8ac01f24c7f77d0e1c89ae87ea4d6b6854655436154bb9ef2a7bfe2"}}}}}}}) 3.150540724s ago: executing program 1 (id=167): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6d4) r0 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000000)=0x2) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x60}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000180)={0x0, 0x5, 0xffffdf82, 0xffffff8d, "ebed9599000000000000ff0c0dffffffffe600", 0x4000000, 0x20000}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r3 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000)) r4 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) select(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x423, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x0, 0x27, 0x4, 0x10071002}, {0x6, 0x9, 0x8, 0xeffffff9}, {0x102, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x1}, {0x2, 0x82, 0x4, 0x5}, {0x6a75, 0x8001, 0xd1b, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0x3ff, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x10c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000080)}], 0x2) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 3.14971773s ago: executing program 2 (id=168): r0 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000001140)="8a", 0x1}], 0x1, 0x20000000ffff) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) chmod(&(0x7f00000000c0)='./file0\x00', 0x16e) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') 3.139808649s ago: executing program 4 (id=170): ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000180)={&(0x7f00000000c0)=[{0x7}], 0x1}) sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x21}, 0x2, &(0x7f00000001c0)="8b3963dacd08890fe44bb88de5dd6952cad935b517cb61c62d47a7d72abb91f1fb8519e8223b250bd9a2bcbcce08ce0616093eb7b1c3dc1ed0fbb86a9c7c5a3451eebb2bfe8de31dd47fe23e0d0a67a3160f231d1e40eee4210f09ca4dabb0677271b8ad54628a3cf864b87f401e137c1272374345c0c0c239d0df1b79317a55f2934b06ccbfdadfe2ea393dd46d8f4f4c397b3be5d26c94da2baf4dae1f136cc1c158755c15ff0d95a604d90f368b12f383bf9c1cf061a52774684a3f", &(0x7f0000000080)=0xbd, &(0x7f0000000280)="4fd149ef84431cd362d54ddd26c1f2bc2294c3f8be0f25f1d9c471a66ce42044c92fa603ec53a245b5e1ebb6070bed6d6fec8eb4fda8f8f77510f6c97bb6b99a08c0bea0bd38aaa9b7eab28e783e6eeee5908aaeeb363bbfa8220834f1b7ac9619f2a83430c964776ab5fa8a0b89ab4ac00e7996c7f27c440595b74f5d059ec6a4b9a4fb534d6f67eb5eb276b4e260dc2a3cada66bb366f13762b19058f17603ac42b3f8ace663bbe8f2d38b4c1528ce2835943697955a96a77bd88e0abe6313f474d462f06f7314eb9e5e8ac76f185ce830d871010f956db6c6bd60afd687d8519f9c2a7e59cf8a94c8f4fc79ab92b7713ac046b28272e2eabc84fcad3caef88ed1667aa104d10a13ed281d2b21fa72dac4145387682107c623e2c5a289912f7024687f312b7a775223e169b7284e602ec824f7a6f6cf8e805d775a3886794152a41688920644eb8a4fed298d460d5baacc51bffd709398dc28640f4d77a4665620a2a8a3501b751b8e7e09941e51fb728467d669e4017211f43c36e71e9e0a02ca2f0c8275b99d96f2b48c502b9b17b48f43179d6d3111da042781f8716e9940040ab52f7b97b2a9c5488ef9aabb4f3961597f597213aa63c01c8f1d3d10ade71057d05ca36ffd526449e15d10d46d52ac25983f0f406ecc563adae4fcc00618142e65541ee31550f4d3c7c753ed96fb6fbedd19627bdf935f16a0ace01d04701e8f23d0ef7ad79b69fca310294f202fd117273b643da1ea2f66599881148dbee091d42e664a0c4104f75055f1d5caabab0a3aecc606a6269fd2007d23ea0fb9a42439f6b48b75925a6daee54b79fd01efc006ea372db953d58e3606f2125c2df3bbd5021944f56d2a068ad13f34c6fb191861b8c942f5398c35ebedb4621b2a188754290c2ab654fdaa4342d58b0ef7917f2cb57a6d2eae8dbb2f420ac6a4d7733001504817e9fb8c93a0c0665f532acab3f6ec6b3b3fd4b2fa3945a641d541e2968a48bdea7e5f5d4b2718c888d1bc60a71fc2d8e874930ab3a7e6fbd77926f6a779e6ae772bcd7fccefbd44d8eb43c5ba9a18ba101b7701852bb93d5799d8af676ac37d1e64d267ea62b5d5ae453a055526b82b85225274f80761733d449404340797af78294048b92ec9b0ddfdbd965193e3c3d401d2ff64a627dcca276a47d68894bb509a6f1b9b4bab0fdb5b4a79ead7bb6996753117571aeb944308cf686a620abb4241a67bf2ba580065ec214247433e24210b1850f0a914626fa4eb63984a8c334094191af6ec133b1590e34e102e4af89aab14cb57e2c9bc17deb20d1a1133f965f77d9bb648765066707028332d72e3e0f312609ce11864cdb574cd72574607e056ce52bb8e5897a1b359a9b8ff6f4930fc729c943346b7d38b9ceb6c29957b757e67479704d282138b08690e45e717c05130f501c4612bde18ef4d7be915af6cb9e0c0907fd5748c90fb322ec0ddd6278224eef708a0c682955692d5b1ca2728d8869c56551736e090f0ba9d7317d71e457f7b239d2a89b7f611ecfba6b2c6d824f6a5c72bfa1473c5962824f0eb0f9be4fa85bc482bc8134c7ad99dbbc7364132df2eba67443ab573dae690a5c6475d2d700dd58b3b6c8e24cdb31675a98930620f10a0469bea2d1a4ff59e851093d96733eb1b7310fe4bce35088706e2d56d2d05817a3d2e43ba18ce7313044961b3b9cd0cd2bc3b89ad93642cfe3546b6d94d1e18eb6d204c2bc8cf8c2e2b2089fc1ae3043da943bab2cccbe0fde10b990084f91ce0d708d2c5ca1d1b1822a402aa240b2276d90e9927eaff386b5e8efe01bcdec395c12ac17f08e2a343675451ef406cdbf9d6251649ce7392bc777ec75487e06f160fd029973ef6fdb19789b29cbbe33a433d51eeb00686973483228f03ebc44c6ae0e10274fbbbcb861460c2e250267bd1806951ae4c74fd93e76d0a746d4ce5e8711dda0d4e52d00055e74d5893a6d8361cda817e4a780eee27543e709e75293b9e3c196a4bba1f46f9387e8a036173b7c72265119761257e3241612e4883cf37c682ec5a954820e04370794b9f445d9c65d1724b898138d51dc08ca25934bfc72abda175ced6ab6f3c5a67c1f29e0ec1ffcf8ff0162c68d6bb5e611d1635d9f151e4594b961adb0f48daa645155051ffa9941fb178d7382c4b1b09fa28c0c26bed2a740998123265dd426ef2131d7aa4ae26f877f3d655fa8a6f35a7be932769526ec7c9a3782b922cc0aec4c62375a25dc6a3b5332a63274613ff3103027a3e16bf657ab87095dd1b9be3e033e0c610cb0cc01b644936b59bc3cd7bc310b6faa6f5f6e2a97ea3be70be948c985c43ed89389f7063e02781ca7d1026df2ffc2e4d52ba116f04168205ff7284f01999c76628f40f7b38b5c5f8c011a280a9299fb1dc962aa7bf86166942dc4528ce3f17638e9638d56fe5dca879b1ab2acefec4e0a086e6256f11dd9b651eb913670a4b02974bc54381ec2119c58bcad1023e545ce9fcaa400ccaede74e37c95101504d01503028809fa2e2f11e48d34b96ca8e2ded4e387feceb3d76adcfc3c735927fa776d7086ec41168ac941bbc102c08e8c5fa52c0468005801b146c4f8bc2d1d1ad0c21939583760d9ec5c132bde3034cab308c6ed24e4385cb48be243c2679544dafe74f79f1dbf36b1a9ca0bef775873b8d8bc9fe078d9e0aedb30ee89e0a8d20bd3fc4553b3b1a3c38131b6d087353beb3cfde676191bf0b7c1acc09197339803c02c19807399aa494025e493c8379a8699defca46bec926baa261c8fc7aa908028ae29fa5526e8374b64a920db7b1353d9ce48aa56f3bc3f5d1455203041b9e621fd15e345d3932dad5bc2f3da2a9871b01977f63c7e65a97508e2c45b90677c2fb940c668afc2e487d804c203916d0eeaac570a080e5536b69e717a833305f9f39d7b9b7c109fe034f28f786fcbc3d49eca6de1a344dc213560d5a1eed07b855eb68ecae57c0df7d32828465b422b60658b8ae7193bee8440ad6830ee2ade1cae104450b7b8fa1d542e6e4ff91677ec2b87f62ab56b935da0cb0bd399c24ad33047f9f5302170d3f9472a110085cfbe887e23d81cd67dbeafcda3ee2abd11a62680309ca88d8d30bad1dcf835789f9e5b6bb312de454368875353e0f4c4f856984023801fb5a8df33666727ff7219efee433614264c32c17014fa7d6fa41e9d5ae00c5b2273ab8d41bb1754f31526d59748ed575b66238a55fc5d6c80409d17b2b7ccf3529bfa76b3ad13755e46be20deca353927cf33f0b8ea54f8c389ca567267f35567c285f041794b6166c13d0e6865f46cb955d6e1cbc629002d2fe53880e2f27cb3b4d134dde270f99734af1b5ff2c74b69c3e0f17468384d5b2b673e62fd857515484dc3018566d4d9c109b300260f03148f23c7098091b767f39dd56ca27447313034d50961ddcc522611e00f44affa4d41d2c7a8f203573e1b5681d7b1d66b38e6b2d9c1dbabd422e5601a6d03b524c4f5321912fea4449d8a538e0342fac0d21506ed329332cb49688dc1132820ac5a0054741021e047c0d17dfdec33a6f9d5ca0fb3f326e581b29b8f4b9b31562577232b7d2a025cae888b18e701a0c950e0f5bf73b03a8015a42ad726f6af6c38dff4f7a4acd02ceb2feed6d6cf08b48a600ff68f65520b2073d6eda424cb125a591401d30496997bb310b76efb7e494a404c73844d9eca033ab591a54208e93efb295e564dc0a6cc9a0ea0cec490c92feb3ca878c9893a4bdeb83a41daba079d736a7f045182ffea07dfcb0d407bc17b23a46f58b998f901732bc82c9fca94178c1d617a45ef13ccacddab70a68e1f95665b49a5efc1485e99597bcc0d52a8ef97176b03873a0c8a0ef1020e2ab1646cedbf128647714ead6b05767f16097db03c6572a7b83e66dc9d844bce091d1d60cddad45dcb3a42e0cd809ff66c001bb3c05378bf81a715003ec431a5dbcbddfea2f453e65f06fa822718297452b4b3a796345e46c7141b74eaac816f771a2f7bfe88d43b0b03f82c5d49dec52a052cead692d176946fdf6ac482743884211634cdf4a1439e2beb9c90d9f64ea7e8d5a4a073c6c970aafb4a43c7dd545d1f0c4bcaf59011f36145f513482f8f98f9d9f0ff2f3d51631e71fdd5991eaca9de1f6f60095ab07dace466ab44ee336344e87ac10a962b2ee29926316864491f923757cc6d523f5cb6e8baf15be8fb736dd98959574cbe1e281e9389f087deb992d7be27e4ea7c88ee0ee65b08a4023429c478fc01761c06e938a690f8dad3218a40bee0614a8c19860ac8f2af744b12b9075ab2a0928d4fce8170fc241267b8326b44aa832d4a9b2d7b37f5aedeaea990e092f3e51d66e4f34b881c7a963cc74d8595cc9d2180da09ef54ed786d9487a7b6897c52fce46cfb4bc8fddb37baf8c0fef2a4d656d49d79e1820653de0f79ea568d57f961db45eaca6427b9c107ef7139c6aa6fe786f3f0c0af751afec3f3b947ec40c29a3cf2204c65e3fa2efe885d8439f0f5ae92b36e4ef5d4b34d3367cc28688361ec6f571728a78752a3d9b1bc8f38b7448ed3c9e8e5c3dbc30db651f8c132812ab3900ff38382b9922aad8c3c9dc4c601d016374873ed5bb4326298b1305b28a6e94bff88c806c61605f48df5a4f82d5b6a3fb50ffabbd259157a9db591dccc41db806b2d42b7969e101ad9224e7da5fc56824e981d2aca77e02fca5111f26c0586b474a7a77a38f7acf9601e0dce52067b54e823a0a68d82e9bc4634fdb1fb3f44d9cf40e67ce9394676a19508845450a0b82eafdc19598dd193cb1474cf462d95d87bb27a20564809b9cb47d90981bbdfb0d2407cf18c412e13cca318d00af8a6be9b1f75bb4bf67a65ee23353665150da540fa4c99bfc2bf4903a5385adcd26c42f292d9137848fbc1647df0e66d24b57a8b32a3b9818da14bc287513fac8e0e0f7ec533299bb9176ac55e449c28113ca70145f8a6cad911b3a7562d9cf3f3633334b94659866a50ec40a8209054735756e8e3ff734ba4596939766075f2b37689224e362c1446a2250cd51d5e3a2e81384753d844038f998388b2aba7d4f2aa64aa5d2ba72b5246a9c2921f49d756820fa2739e0272ed09e1233486f9dfd822823e10da319f68561b3686e3ee2345bb5e6fca09d91c5d84593fb8efcb24e6ddf076b010d83d7bf589d626591f5273783105e6fa7fcf24e6a35aabeadcee9f12c4b42dc8896c228de5614238e57d2c8980b87a746333b98af20d94acb18952096a908cb34a64e78db81a02a7ed3133a709bce424df67564865abbb0b58dfcf0ffb6555a6cb63428590bcfc5dfb9f840501f04f64a8448a7d1b140d3a855ec25e2ec74dbbec90f9d7aa012b902e82a29626a173af1b0cc39dc8b86910a40230e2ae7e018b76d5ef8e0b15b8af27ba71874062181211ef21fcf42dde079e88fdce813bdad681d63e3d15c0267761a9a518e1bd1e4a876b5dc4ef6af2ed37e0c09271987a8a541888d187d6c82ca4453a07d79228ccbc9ab4d2e3d0d863b0300ec6267bb281a0773c785d7b8e3695b78b692c8893daeb402d9bbfeaf818c524d937ecd8ad6133677c2e56c1587a3ce369e40ae864d4460c55dec41a6f043414b20648c19ee75d9c7a303c871628f1123a1a280a6c960cc8467b48cc8ec1fe0ac70c12bc37047b17610013ad84b48d04bf8fd23be247331c91664243d5cc58f44632902175faa09ebee05b3e59439f9a5c679f2913e76bbf5032db5f49766cf0eee588b97a872763f8950246a95f7", 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180), &(0x7f00000000c0), 0x0, 0x0) 3.137405544s ago: executing program 5 (id=171): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x43) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0xb}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) read(r1, &(0x7f0000000000)=""/43, 0x2b) 3.137199155s ago: executing program 3 (id=172): mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x40000800) r0 = open(&(0x7f0000000100)='./file0\x00', 0x10, 0x8) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x8) mknod(&(0x7f0000000000)='./file0\x00', 0x2060, 0xcd5331e3) syz_emit_ethernet(0xc8, &(0x7f0000000140)={@local, @remote, [], {@generic={0x805d, "354d7492b0a01338e3223be52f21656fa7c39106be8ca4bbb2a3af1681c2b846e88748b34d066cd4f086568b8bd6ff361d217c9292d599ab85e2d2dbdecf51670e14f635597febbdb1275ea1f0fc5989a1e197e645c2e1a9018ef11596e01b789023e8391e417a3ee997de33dba8a43002da6b1d4f9c1a12a4da6c2793730e50a969658caf16dbd09066d0e59cc4abcd7f85ec829af48e2e6a6a873c2965e811996b4b2d5d20cb3f8fcbdd3dcdcf81c4f995c55aafd0abe1df93"}}}) close(r0) unlink(&(0x7f0000000000)='./file0\x00') 2.970588143s ago: executing program 0 (id=173): r0 = socket(0x18, 0x2, 0x0) close(r0) (async) r1 = socket(0x18, 0x1, 0x0) ioctl$WSDISPLAYIO_SMODE(0xffffffffffffff9c, 0x8004574c, &(0x7f0000000080)) (async) setsockopt(r1, 0x1000000029, 0x4, &(0x7f0000000040)="03000000", 0x4) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) (async) r2 = syz_open_pts() ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f00000015c0)=0x8) (async) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000001800)=0x2) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev(r3, &(0x7f0000000380)=[{0x0}], 0x1, 0x1) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x2}, 0x8) execve(0x0, 0x0, 0x0) 2.970313194s ago: executing program 6 (id=174): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @random="00e0300eaaf8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffd, 0x0, 0x0, 0x1, 0x0, @broadcast, @multicast1}, @icmp=@echo_reply={0x0, 0x0, 0x0, 0x64, 0x2}}}}}) sysctl$hw(&(0x7f00000002c0)={0x6, 0x6}, 0x2, &(0x7f0000000040)="6c01046b", &(0x7f0000000000)=0x4, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x56}, 0x2, &(0x7f0000000240)="71f902005e099e6210b2d5cfb1fa7afec37082000000000000000000", &(0x7f0000000000)=0xfe1e, 0x0, 0xffffffffffffffc7) 2.970095256s ago: executing program 4 (id=175): sysctl$kern(&(0x7f0000000000)={0x1, 0x5}, 0x2, &(0x7f0000000c40), 0x0, 0x0, 0x0) 2.968696221s ago: executing program 0 (id=176): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x6, {0xffffffffffffffff}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r3 = open(&(0x7f0000000300)='./file0\x00', 0x1, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x3, 0x81ac, 0x80000001, 0x10, [{0x8, 0x7, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0xb}, {0x5, 0x800, 0x9, 0x5}, {0x2, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x98}, {0x6, 0xffffffff, 0x4f8, 0x6d}, {0x3, 0x800, 0x14, 0x8}, {0x2, 0x10000005, 0x5, 0x9}, {0x6a72, 0x8001, 0xd1b, 0x101}, {0x4, 0xfffe, 0x2, 0x5}, {0x8, 0xa, 0x8, 0x5}, {0xb8c, 0x6, 0x8, 0x5}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0xc, 0x5, 0x1, 0x10000000}, {0x80, 0x2, 0x825, 0x30004}]}) lseek(r3, 0x3, 0x1) recvmmsg(r1, &(0x7f0000000b80)={&(0x7f0000000b40)={&(0x7f0000000440)=@in, 0xc, &(0x7f0000000a00)=[{&(0x7f0000000480)=""/26, 0x1a}, {&(0x7f00000004c0)=""/64, 0x40}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000500)=""/35, 0x23}, {&(0x7f0000000540)=""/209, 0xd1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000740)=""/123, 0x7b}, {&(0x7f00000007c0)=""/162, 0xa2}, {&(0x7f0000000880)=""/67, 0x43}, {&(0x7f0000000900)=""/224, 0xe0}], 0xa, &(0x7f0000000ac0)=""/110, 0x6e}, 0x4}, 0x10, 0x1002, &(0x7f0000000bc0)={0x7, 0x9}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) syz_extract_tcp_res(0x0, 0x9, 0x800) select(0x40, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000001140)={0x0, 0x5, 0x6, 0x8}, 0x0, 0x0) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$WSKBDIO_GETMODE(r0, 0x40045714, &(0x7f0000000240)) sysctl$kern(&(0x7f0000000000)={0x1, 0x27}, 0x9, 0x0, 0x0, 0x0, 0xfffffe0c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60ad000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"]) syz_emit_ethernet(0x8e, &(0x7f0000000380)=ANY=[@ANYBLOB="e727dc071f0000000000000086dd60b907a6001c2c03cb697a653e336f000000500000000000ff0200000000000000000000000000013200002e000000004e204e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="35b2fa33575e6505cb2550607fe70b1c84e7ef19565def8459b9bf0d47a215b85402ca96adca4413023741691dc87115eb7313ee50f92106862067e06c18b2a3917506a3466c"]) r4 = kqueue() select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) kevent(r4, &(0x7f0000000200)=[{{}, 0xfffffffffffffff6, 0x9, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) kevent(r4, &(0x7f0000000040)=[{{}, 0xfffffffffffffff6, 0x4, 0xe00fffe0, 0x100, 0x13fff}], 0x1, 0x0, 0x5, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/132, 0x84}], 0x1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x5}]}) 2.968461033s ago: executing program 4 (id=177): stat(&(0x7f0000000040)='.\x00', &(0x7f0000000380)) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x83) (async, rerun: 32) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) (async, rerun: 32) sysctl$net_inet_tcp(&(0x7f00000001c0)={0x4, 0x2, 0x6, 0x2}, 0x4, &(0x7f0000001540)="0b001440", &(0x7f0000000200)=0x4, 0x0, 0x0) 2.949643917s ago: executing program 3 (id=178): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5908bb565b18d7c51f78b06ccffb4050080000000009d00000000fd3493776445d4cd12c63d34", 0x31}], 0x1}, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TIOCSETA(r0, 0xc4504444, &(0x7f0000000740)={0xe270, 0x10003, 0x3, 0x20000083, "0400", 0xfffffffd, 0x40000009}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) select(0x40, &(0x7f0000000100)={0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100000001}, &(0x7f00000024c0)={0x4, 0x0, 0x0, 0x4, 0x0, 0x2, 0x6}, 0x0, 0x0) 1.836033888s ago: executing program 4 (id=179): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x2810, r1, 0x0) (async) ftruncate(r1, 0x3) (async) ioctl$WSKBDIO_SETENCODING(r0, 0x80045710, &(0x7f0000000040)=0x2) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) listen(r2, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) accept$unix(r2, &(0x7f0000000000)=@file={0x0, ""/27}, &(0x7f0000000080)=0x7e) (async) pread(r0, &(0x7f0000000080)="abd4724075547a712f772328f2ffb4186f885af9cb03a291c453b99b50bd03398d90b8c097c756318720e90eb28952ab844f1ec8bc07d832a800393f8b760b3848bc204bf60448603b2b05ca096dd35c41adf8f4206bac2f5d8567d72f4bd53ea1b958a228a1591513d59de2952ace8361b4b8404fa317cd4d409bf41c3b334be1631d9513ea06007c13cda7f0c234ce1fe5301b748da7768667153c4f28f852a865ecf997", 0xa5, 0x5) 1.835086847s ago: executing program 2 (id=180): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) r2 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0x6f) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x9, 0x10009, 0x11b, 0x0, 0x80000001, 0x8, 0x5, 0x10, [{0x7, 0x107, 0x4, 0x71004}, {0x7, 0x4, 0x8, 0xfffff7f4}, {0x8, 0xf8a, 0x0, 0xaf9}, {0x1, 0x800, 0x7}, {0x200, 0x7fff, 0x4, 0x7}, {0x6, 0x206, 0x6, 0x98}, {0x1cde, 0x1, 0x4f8, 0xff}, {0x3, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8, 0xa, 0x88}, {0x2, 0x50001, 0xf, 0xae7}, {0x7ff, 0x400, 0xffff8001, 0x9}, {0xb8c, 0x2, 0x2, 0x206}, {0xa6d2, 0x7, 0x1, 0x8}, {0x1, 0x7, 0x2007}, {0x0, 0xfffffffc, 0x4, 0x2fffd}]}) poll(&(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = open(&(0x7f0000000000)='./file0\x00', 0xe, 0x30) (async) r4 = getpgrp() fcntl$setown(r3, 0x6, r4) ioctl$WSMUXIO_ADD_DEVICE(r3, 0x80085761, &(0x7f0000000480)={0x2, 0x9}) (async) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x180}], 0x1, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)=""/239, 0xef}], 0x301, 0x0}, 0x40) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000003, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x11f, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0x52adeb15, 0x7], [{0x4, 0x0, 0x0, 0x5}, {0xfffc, 0x26, 0x4000005}, {0x0, 0x8, 0xfffffffb, 0x80}, {0x5, 0x4, 0x7, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x2, 0x2000000000000000}, {0x0, 0x4d, 0xfffffff9}, {0x100, 0x100, 0xf, 0xb}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x45, 0x6d5, 0x6}}}) r5 = kqueue() kevent(r5, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) (async) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="44ca", 0x2}], 0x1) (async) r6 = socket$inet(0x2, 0x3, 0x102) chflagsat(r2, &(0x7f00000004c0)='./file0\x00', 0x10000, 0x0) (async) sendmsg(r6, &(0x7f0000000280)={&(0x7f0000000180)=@un=@abs={0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="100000a2a60000000800000005000000"], 0x10}, 0x0) (async) r7 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x102) read(r7, &(0x7f00000001c0)=""/24, 0x18) getpeername$inet6(r7, &(0x7f0000000340), &(0x7f00000003c0)=0xc) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="4daadca2a150ac", 0x7}], 0x1) seteuid(0x0) (async) write(r1, &(0x7f0000002600)="7cc97585253a5126a4ac0678c6d790b6c33b3e6e763c38371579343e19562401b7b74f0055ce1abc9e74072d11b74b65d267fefb275700f04cc1f8f490e5bb72db73bf3b59d1ae962bb0e2c9b3a30412087b7513d03b26bbcb131156c5b601d726737abaed6fc4125089b530cd1135475f8fb9431d3b5f1c987229bc588ee7fdc124c69fc4f8337a514e971c8b2da6c7bb34732e903bd7aa1143b450bd07e39bf8c1a49d7d5bff56c0c51ac6983a1c1820f7b3ae7e9d9e93525f7dcf8e322b9dbe76baa19915307b384bf3afecbab8a53cf1c3162610d96adc5a602165529e0406a344ac3058", 0xe6) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000080)) r8 = kqueue() kevent(r8, 0x0, 0x80000000, 0x0, 0x9, &(0x7f0000000240)={0x1, 0x8}) 1.719272992s ago: executing program 5 (id=181): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(r1, 0xc450443f, &(0x7f0000000080)={0x58, 0xeffffffc, 0x3, 0x10000000, "75a200000000f20f000000072f0fd7f000", 0x6, 0xfffffffb}) madvise(&(0x7f000074b000/0x3000)=nil, 0x3000, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="89dfb1358409bdd045f07a35fc4e1fb87e327d3678bea1cb8eb570c802edb938a0163b1641b4994f75ad0067fcf1c8424013aa0d93926170c9b9246d2011b484711a0fe76c55b0d67fa722580caee019ca3452642eb2a5168d52067be0fd5aeb8eeb01f75bed2787b403511e50b3f0dc689e8fe59704b6e9acf439afd20f2a380e0f8162d82a62a97ccc149bf2e2ea15c047ba8b4b5a4f", 0x97}], 0x1) execve(0x0, 0x0, 0x0) 1.71885627s ago: executing program 6 (id=182): syz_emit_ethernet(0x76, &(0x7f0000000000)={@random="8faa02ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x40, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x1000, {0x0, 0x6, "06c33e", 0x0, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, [@hopopts={0x6, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}]}]}}}}}}}) (async) syz_emit_ethernet(0x76, &(0x7f0000000000)={@random="8faa02ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x40, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x1000, {0x0, 0x6, "06c33e", 0x0, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, [@hopopts={0x6, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}]}]}}}}}}}) mknod(0x0, 0x2000, 0x1e5f) open(0x0, 0x8000, 0xa) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) getegid() (async) r0 = getegid() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, r0, 0x0, 0x0, 0x184}, 0xfeffffffffffffff, 0x4, 0x28c}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) syz_extract_tcp_res(&(0x7f0000000080), 0x0, 0x1) 1.717271626s ago: executing program 3 (id=183): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x13, r0, 0x0) read(r0, &(0x7f0000000040)=""/148, 0x94) pwrite(r0, &(0x7f0000000100)="c4f3d895a633bcecc70618caef35ee03d6073b4110a0e8ed602c5c634e2742dd749aeb233f380e8c4ba4e1bd2e7b9433f6da9b1292c07e", 0x37, 0x33e5) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000140)=0x1) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) dup2(r0, r0) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$TIOCCDTR(r1, 0x20007478) r2 = kqueue() r3 = dup(0xffffffffffffff9c) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f00000001c0)) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) r4 = open(&(0x7f0000000200)='./file0\x00', 0x8, 0x0) r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000280)={0xe17, 0x6, {[0x2, 0x5, 0xa86, 0xd73, 0x5, 0x9, 0x0, 0x2, 0x4, 0x1000000, 0x1, 0x7, 0x1, 0x55, 0x4a, 0x6, 0xfffffffffffffffc, 0x2], [0x4, 0x6, 0x101, 0x1, 0x0, 0x5, 0x5, 0x2, 0xeeec, 0x5], [0x9, 0xa, 0x100, 0xffffffff92a8711e, 0x3, 0x8, 0x80], [0x6, 0x100000000, 0xffffffff, 0x0, 0x1, 0x80000000], [{0x401, 0x8, 0x8, 0x9}, {0x40, 0x2, 0x401, 0x10001}, {0x8, 0x5678, 0x3ff, 0x8000000000000000}, {0x581, 0x1, 0x10000, 0x7}, {0x4, 0x7, 0x4ba, 0x7fffffffffffffff}, {0x8, 0xad9, 0x100, 0x9}, {0x9a, 0xc, 0x5, 0x6}, {0x2, 0x7f, 0x0, 0x3}], {0xf, 0xc, 0xc, 0x2}, {0xcfe5, 0x101, 0x1, 0x4}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) lseek(0xffffffffffffffff, 0x9, 0x1) r8 = getppid() fcntl$lock(r5, 0x8, &(0x7f0000000540)={0x3, 0x1, 0x7, 0x3, r8}) ioctl$FIONREAD(r6, 0x4004667f, &(0x7f0000000580)) ioctl$TIOCGETA(r3, 0x402c7413, &(0x7f00000005c0)) ioctl$WSKBDIO_SETBELL(r4, 0x80105703, &(0x7f0000000600)={0x700000, 0x4, 0x9, 0x80000001}) ioctl$WSDISPLAYIO_USEFONT(r5, 0x80585750, &(0x7f0000000640)={'./file0/../file0\x00', 0x8, 0x101, 0x74e4, 0x1, 0x0, 0x2, 0xffffffff, 0x2, 0x1, 0x2f, 0xfe}) ioctl$TIOCGFLAGS(r4, 0x4004745d, &(0x7f00000006c0)) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) link(&(0x7f0000000700)='./file0/../file0\x00', &(0x7f0000000740)='./file0/../file0\x00') pwrite(r7, &(0x7f0000000780)="4328727ac135c0084a0fa1a6d0b07795d8ade30b8c63f8417c4f32f51789957eab6dacd83dfc4405d302c99686f38c78f209f0d2ba7d2ed26de07b4b36c5c4784824987d325b93419f3fabe46d99f7", 0x4f, 0xfe) clock_getres(0x4, &(0x7f0000000800)) 1.716494427s ago: executing program 6 (id=184): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r0 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0xee4bce5bb233ab95) r1 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x0, 0x4787, 0x1002, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x2, 0x0, 0x7b98, 0x9, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x11000, 0xfffffffffffffffe], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8000000100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x81}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x2000000000000000}, {0x6b7}, {0x0, 0x965, 0x0, 0x8}], {0x2000, 0x6, 0x5}, {0x29, 0x6, 0xb0, 0x2}}}) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) acct(&(0x7f00000001c0)='./bus\x00') ioctl$WSKBDIO_GETKEYREPEAT(r2, 0x400c5708, &(0x7f0000000140)) kevent(r1, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) close(r0) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.715826858s ago: executing program 0 (id=185): r0 = socket$inet(0x2, 0x2, 0x0) close(r0) msgsnd(0x0, &(0x7f00000006c0)={0x2, "25053098965bdbedd9977c0fb5931834a33970cbe201ba498dc178c48f914edb25aae724ff23aaae9720146f7dd9b69779b27325b5e9966529f7f6bf836813293a59a9e27bc6e9fcfbbba6743e964838ba2256d2e65cc51dbff4411e99b975d50dd43fb8f4da19473d7ab857fc48e100891aa39d34c3a01689cbaa9c6bc2794a67e15c83432d9ac1a078e7d1ffee5ac709b4e800fe041b02f5c617190314d6eeea7cd48790c360c787a8b532e2673ccc93cafe24dc65cc68525f07d51dba746023e12c15af2bf9f66a799f879babfdce5100f5ee87a364336de9"}, 0xe2, 0x800) msgrcv(0x0, &(0x7f0000000e40)={0x0, ""/254}, 0x106, 0x0, 0x1800) r1 = geteuid() getegid() (async) r2 = getegid() r3 = getuid() setreuid(r3, r3) (async) setreuid(r3, r3) r4 = getegid() setregid(0x0, r4) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000100)={0x0}, 0xc) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000140)={0x0}, 0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x10, r1, r2, r3, r4, 0x82}, 0x8, 0xb2, r5, r6, 0x9, 0x8000000000000001, 0x4, 0x995b}) socket$inet(0x2, 0x1, 0x0) (async) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x8) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) syz_open_pts() (async) r8 = syz_open_pts() getrlimit(0x1, &(0x7f00000000c0)) pread(r7, &(0x7f0000000040)="bdc4698bb921fb4e475ee74e5ecc47b80d8d7f3558e13e9d62cb312103215779675f3844661f51ebb8fab2ea30e6a892d454cfb73e846758ed7ae02e2f35ee6b127dd496ff6392fa5d77c668c1756897531caf2fcc4cd67bbd40484a8bcd9e7a31be9e6c8015fbe1d762e50655de", 0x6e, 0x4) close(r8) (async) close(r8) syz_open_pts() (async) syz_open_pts() writev(r8, &(0x7f0000000600)=[{&(0x7f0000000200)="7c13af764ee9a0fa3c3864110544b041b2753571d7ac0fdc3978d2095870e48d", 0x20}], 0x1) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_carp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_carp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETA(r8, 0x802c7414, &(0x7f0000000380)={0xf66c, 0x8, 0x9, 0x5fffff5f, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0x400, 0xfffff196}) writev(r8, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x5a3}], 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) 1.710451535s ago: executing program 7 (id=186): r0 = socket(0x18, 0x3, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) r1 = socket(0x1e, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x801169ac, &(0x7f00000001c0)) mprotect(&(0x7f00006ea000/0x3000)=nil, 0x3000, 0x5) sysctl$vm_swapencrypt(&(0x7f0000000140), 0x3, &(0x7f0000000200)="24575b6e392e0c835e08e02ccea589a589b7960d5039748ddb6c9faac1a6ea9be25af4111fa1c84931bff4806b0ccd68f8a2c0320f169ffd65793ce09d33afb215b42f8fecf907ed5483cd2a49b511eb86c45bce4ad74c2d4e6067e448b6f6d1697800d5b7c864b99440b4d4cda42445d2c22d643289feb6c5c574e5ae04d985bc8f34c1187f3a7302808e4a2fe674e36edd14cd58d99ef291328b1eca0e54d6987444407ff40210d8f1fd06b5d8bfee01c60c08a0effc9393de00a368b7f2df9269d4a3bd121ab2d84e80ff004a75b04945656a0f7c007a27514098f8b739ed2e63d64a91183657", &(0x7f0000000180)=0xe8, &(0x7f0000000300)="ed3f46c25a774567177dbe6313b5ce65d8ab718fc6a80f5274c1249f21d2e5c1c73a2666fa063aef5247f77364f9d8716ea0771cc63777baade0b3cf1ad1acf7ac7e351d9398083f15b914d3b6e522b1b242c1cd6d5ea0f0593e49e68fb0be08629923c50f285e955485a4569558dc8d5b232119c3362110438a055927f751ad1750f3e363f7e9c883fea8f50b20f27c7e425c501781770ddac9ab53e4edd75e0b72ed152f59d1551a715ebd6a98fe99e6750268283f69eaba79ff10f273db5be91069", 0xc3) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000040)={0x2, 0x2, 0xfffffffffffffffc, 0x1000300000004}) r3 = socket(0x18, 0x2, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) socket(0x18, 0x3, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) (async) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) (async) socket(0x1e, 0x3, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$FIONREAD(r1, 0x801169ac, &(0x7f00000001c0)) (async) mprotect(&(0x7f00006ea000/0x3000)=nil, 0x3000, 0x5) (async) sysctl$vm_swapencrypt(&(0x7f0000000140), 0x3, &(0x7f0000000200)="24575b6e392e0c835e08e02ccea589a589b7960d5039748ddb6c9faac1a6ea9be25af4111fa1c84931bff4806b0ccd68f8a2c0320f169ffd65793ce09d33afb215b42f8fecf907ed5483cd2a49b511eb86c45bce4ad74c2d4e6067e448b6f6d1697800d5b7c864b99440b4d4cda42445d2c22d643289feb6c5c574e5ae04d985bc8f34c1187f3a7302808e4a2fe674e36edd14cd58d99ef291328b1eca0e54d6987444407ff40210d8f1fd06b5d8bfee01c60c08a0effc9393de00a368b7f2df9269d4a3bd121ab2d84e80ff004a75b04945656a0f7c007a27514098f8b739ed2e63d64a91183657", &(0x7f0000000180)=0xe8, &(0x7f0000000300)="ed3f46c25a774567177dbe6313b5ce65d8ab718fc6a80f5274c1249f21d2e5c1c73a2666fa063aef5247f77364f9d8716ea0771cc63777baade0b3cf1ad1acf7ac7e351d9398083f15b914d3b6e522b1b242c1cd6d5ea0f0593e49e68fb0be08629923c50f285e955485a4569558dc8d5b232119c3362110438a055927f751ad1750f3e363f7e9c883fea8f50b20f27c7e425c501781770ddac9ab53e4edd75e0b72ed152f59d1551a715ebd6a98fe99e6750268283f69eaba79ff10f273db5be91069", 0xc3) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) fcntl$lock(r2, 0x9, &(0x7f0000000040)={0x2, 0x2, 0xfffffffffffffffc, 0x1000300000004}) (async) socket(0x18, 0x2, 0x0) (async) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) 1.602919365s ago: executing program 2 (id=187): ioctl$FIONREAD(0xffffffffffffffff, 0x80206979, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x372, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002bc0)) 1.601972142s ago: executing program 2 (id=188): r0 = socket(0x2, 0x1, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) sysctl$net_inet_ah(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0xa, r0) close(r2) socket(0x2, 0x1, 0x0) (async) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) (async) sysctl$net_inet_ah(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) fcntl$dupfd(r0, 0xa, r0) (async) close(r2) (async) 1.597300724s ago: executing program 5 (id=189): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7, 0x9, 0x2, 0x2}, {0x7, 0x12, 0xe4, 0x2}, {0x6, 0xa, 0x83, 0x8}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) sysctl$hw(&(0x7f00000000c0)={0x6, 0x6}, 0x2, &(0x7f0000000540)="cac98a", &(0x7f0000000080)=0x3, 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xec, &(0x7f0000000240)=ANY=[]) 1.523533903s ago: executing program 3 (id=190): r0 = socket$inet(0x2, 0x2, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x6385) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r1 = kqueue() ioctl$TIOCOUTQ(r1, 0x40047473, &(0x7f0000000200)=0x5) kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x40, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x258f, 0x800c0, 0xfff6, 0x1, 0x7ff, 0xffffffff, 0x1, 0x1, 0x2, 0x80000, 0xf1a}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x0, 0x10, 0x1, 0x4}, {0x7, 0x0, 0x40, 0x6}, {0x3, 0x0, 0x5, 0x400004}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x3, 0x7ffffffe}) r4 = kqueue() kevent(r4, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) ioctl$WSMUXIO_INJECTEVENT(r3, 0x80185760, &(0x7f0000000140)) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) r5 = socket(0x20, 0x5, 0xa) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000080)="eaef125c00000000", 0x8) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000240)={0x0, 0xfffffffa}, 0x8) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$BIOCSDIRFILT(r6, 0x8004427d, &(0x7f0000000640)) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000000c0)="2ed9e954b21e6109d175a60c7b38d7aa62505eb85f89500d3b6783352b43ecc82fe0688b85e0f9eb58ef50c4b9c4568dd8fcef5923c6c8711d2f660927e21294a9ba130e7d6bd5a4e90f04e9bae9dd9b97e57f326cad4656588495431e0b5e0452602bcc746209a576c985fecdac765811d55b0f30d25f814f2e0ea12d88fa17da73e915667286fce370e422f78b31da3dc94976e3037dcfeac6ffd45337ae12e8587567f116df4fd8ab5a2b5b9b42e46d34897d6d607e5fc33c394258cf6102095fd18bbe25a08a1482b3c5ad1b35ee41662997fb9816b41dcd", 0xda) getgroups(0x1, &(0x7f0000000040)=[0xffffffffffffffff]) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) chown(&(0x7f0000000000)='./bus\x00', r7, r8) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/209, 0xd1}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/138, 0x8a}], 0x4, 0x5) open(&(0x7f00000001c0)='./file0\x00', 0x80, 0x6) 1.523186362s ago: executing program 5 (id=191): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x0, 0x6, 0x5}) (async) r0 = shmget$private(0x0, 0x4000, 0x201, &(0x7f0000021000/0x4000)=nil) (async) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) (async) r3 = geteuid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xc) (async) r5 = getppid() (async) r6 = getpgrp() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x9, r1, r2, r3, r4, 0x60, 0x3}, 0x8, 0xff, r5, r6, 0x1, 0x5, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) 1.509244453s ago: executing program 4 (id=192): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000100)='tap'], 0x0) ioctl$FIONREAD(r0, 0x8028698c, &(0x7f0000000100)) ioctl$TIOCSETA(0xffffffffffffffff, 0xc444443a, &(0x7f0000000740)={0x10021, 0x2f, 0x8, 0x3, "97a2a2115277386fcc39de926cc979526b47c1d1", 0xfffffffd, 0x4}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x8) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) 1.508887597s ago: executing program 3 (id=193): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x3, 0xc, 0xca, 0x81ac, 0x10001, 0x10, [{0x1, 0x3, 0x4, 0x1}, {0x5, 0x9, 0x8, 0x7}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x8027}, {0x2, 0x200727, 0x2800, 0x7}, {0x1, 0x651, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x9, 0x803, 0x14, 0x4000008}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0xd1d, 0x4}, {0x1cc, 0x5, 0xc, 0x2}, {0x8, 0x4009, 0x8, 0x8}, {0x1, 0x7, 0x8, 0x2}, {0x101, 0xeffffffa, 0x1, 0x6}, {0xc, 0x5, 0x5, 0x10000002}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) minherit(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3) (async) minherit(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000000)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0286988, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0x8020699f, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r1, 0x8020699f, &(0x7f00000001c0)) 1.50572645s ago: executing program 0 (id=194): mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x40000800) r0 = open(&(0x7f0000000100)='./file0\x00', 0x10, 0x8) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x8) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0xc8, &(0x7f0000000140)={@local, @remote, [], {@generic={0x805d, "354d7492b0a01338e3223be52f21656fa7c39106be8ca4bbb2a3af1681c2b846e88748b34d066cd4f086568b8bd6ff361d217c9292d599ab85e2d2dbdecf51670e14f635597febbdb1275ea1f0fc5989a1e197e645c2e1a9018ef11596e01b789023e8391e417a3ee997de33dba8a43002da6b1d4f9c1a12a4da6c2793730e50a969658caf16dbd09066d0e59cc4abcd7f85ec829af48e2e6a6a873c2965e811996b4b2d5d20cb3f8fcbdd3dcdcf81c4f995c55aafd0abe1df93"}}}) close(r0) unlink(&(0x7f0000000000)='./file0\x00') 1.426964385s ago: executing program 5 (id=195): setgid(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) fsync(r0) close(r0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008f12c91939b94060001080006040001aaaaaaaaaaaae0000002aaaaaaaa", @ANYRES32, @ANYRES64, @ANYRES16=r0, @ANYRES64=0x0, @ANYRESOCT=r0]) setgroups(0x0, 0x0) clock_gettime(0x3, 0xfffffffffffffffe) setuid(0xffffffffffffffff) syz_open_pts() 1.425409944s ago: executing program 1 (id=196): r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x160, 0x0) ioctl$WSMOUSEIO_GCALIBCOORDS(r0, 0x41205725, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000480)={0x7, 0x8a69, {[0x6, 0x4, 0x7fff, 0xd, 0x6, 0x80, 0x8, 0x7, 0x5, 0xffffffff, 0x2, 0x0, 0x0, 0x5, 0xad9, 0x6, 0xce, 0x7ec2], [0x6, 0x0, 0x5, 0x7a56, 0x1, 0x7, 0x7, 0x5, 0xffff, 0x100], [0x1, 0xffffffffffffffd4, 0x8, 0x1, 0x0, 0x8, 0x4], [0x0, 0x6, 0x5, 0x1, 0x0, 0x7fff], [{0x4, 0x0, 0xffff, 0xb5}, {0x7, 0x7ff, 0x1ff, 0x9}, {0xfffc, 0x100, 0x3, 0x8}, {0x7f, 0x1ff, 0x8, 0x5}, {0xe, 0xee, 0x81, 0x4}, {0x200, 0x1, 0x80000000, 0x2}, {0x6, 0x1, 0x8, 0x3}, {0x9, 0x4, 0x80000001, 0x5}], {0xb, 0x5, 0x2001, 0x2}, {0x1, 0x8, 0x8000, 0xffffffff}}}) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x6, 0x2, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sysctl$net_inet6_ip6(&(0x7f0000000480)={0x4, 0x18, 0x29, 0x35}, 0x4, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x800000018, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r3 = socket(0x800000018, 0x2, 0x0) mknod(&(0x7f0000000380)='./bus\x00', 0x3a0914c44f7b202d, 0x5) setuid(0xee01) r4 = open(&(0x7f0000000040)='./bus\x00', 0x4, 0x0) ioctl$TIOCEXCL(r4, 0x2000740d) r5 = msgget(0x0, 0x240) msgsnd(r5, 0xffffffffffffffff, 0x0, 0x800) msgsnd(r5, &(0x7f0000000bc0)={0x0, "4660be58ad61bc113806b43576cb9c684e0dc72b45b44dba203c6257f06131361ab8b129a256b13b33a48de459582da94ab029ba8a8049cfff0730ed7d5af9bb5b39e8f11a94c9d9d2f648159ff60b31158a2e85664156b6b5fd662d5191b53c41334673e7fed619618af9c050248d033c0b7166e86a667808a4d5df6bf18c56b2a09d4ab4ecf2ba1bdc01e3932ad7d4b2720b932c64b80fb9b88f35a5bc6be5846a8461ef56d0b642cb8944e549622b7e63d2ce8dd06dac148dac8c1b1a7ba3281f915a47eb4317a75ceb2c7e849191ff5fa2124fdfaad5427c"}, 0xe2, 0x800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) writev(r3, &(0x7f0000000b40)=[{&(0x7f0000000140)="512e3436006d6f82b9d49b7354ec6e2a01aabe26f2d15c7ec5649b87425a0d6d8d7c55d0777cbb95bf4c1265d03c9c7f2bb47b5810afa08a94761f1b32938811efefd288a513ff0c28036fc08adffb15a32d5d653d1c5d49942c7a3cea4a3a5666a7f716f1dcdaba0a1e6f178bc1e51d42eb478cf6841eaae892b2d316bba1c977e76126ff7543e57983cbf7bc064bcb97cfd417da512178", 0x98}, {&(0x7f00000006c0)="361f774de9951240793a51233ff2199f1dfe362645395d1d23a0704ecf6872cb36b364d3cdc2397206e3e15d0565196305ac42f797c8c998d22f1e44c9305f8a0c21a50f3a7db25aac08a5e001c156246956ba679dab30679980675ad64ad452bf1637b0ed825d57a705c5a87d56c59d0540ab9c1bd152a004533b00758b9dc3f18e3745d11d0637aa35458ec47e16c28e378752548d3fb9a7975e8fd45c46292582d87592f1c1e5080e5359fc1117bba8d73c61aca74fdb95a86f2dca07b93b9fbc626007bf95867f433f7d3182bb72b5cdef20f61539daba0203e2c89824021063268df52e707e05422dcec0914369fe", 0xf1}, {&(0x7f00000007c0)="c06b42aa262dc5ba1df9721a0b8dfab1bad1f16b0c517d9a9e7d2ca5a91edfdf2b3fa93dae17d053e6370ce606a87dec25cad733594f10517bf51a602e7167bca6fe9ca1cc60fc642fef5b72ffb7e465f3b44956ad9662d3add0ac2d663fe6a608b924cada7c8c825b1f2b70414803fab1a8a1bcc9e0669d46dc47316e91111cf88d5da94921f1a8905d9eedbe", 0x8d}, {&(0x7f0000000880)="a2c2de3329900dd7e405af101e6c03d7aef1ac0ed87c985b3ee19cca361ae427accf47819eb16cb96208c8c44ae4dc78aab024bb74cdb3ae41dd6bf6695993d4b3dadc85dc0217f1e69ea22c8f8c2b8c62b17ebc78519fbd43951e43b50fda5dae736a0a5237be98a115aa89d24cffa6b8a9aac98eb4e2b76237b05f9b92be5b7cb03eca503a2cd2e2206833a4eb891055e82e56a929aec62fcbf76990f4593545d336bf2f8af18a5e05a72471c78d9b2e10116329de6eba3a0ea8ed77ea1230338d60c2a142a4e2ddb3ba532f0503affdc3886030ff", 0xd6}, {&(0x7f0000000200)="2cc2e34c", 0x4}, {&(0x7f0000000980)="3b1bfa9d042b9fcb7575bf496f786e49330fc5c45d392f3605b9a77ee4d265dedf3200648d2b7ef60ea9c0a39901ddb19e6c5bb16348d5d607448fbb31c37b3d54604b58177e5c991c95060521f18181d3dc37e101060b4203375b88db8194c9fa0807cbc13a753005077a703714f5aea6057be0d917028d7d846294bbc7d1fdaa68e828f2bde0643c5958ac7a3d612febee2c12a2b0c692f4e83ed00cabc292977a8fb3d7e20edfc979f35836d7f46a03cb8bd373c068f7d99b5b08ef074b90d0eb6eae99e8a6df48ea3dac3780154f", 0xd0}, {&(0x7f0000000a80)="f1c2326dba238307b787985583ca9f8e17a657ac2e4c7d77a724c177d39c763887f066fcc1db4fcdc6e02ab7be80ee2e95b1ad99565831d26b022bbcb810e558a8b5d57f8502815cc5f1ed6493130a421f146d8aaa2c1f1ad6f04c8e0bdd7cd4ccc58a8faee6691cc05b7e67d165e8c30847c51b83a6b471f6fb186984f7782a25d4a300b8b94705474e24eb3329749800c268a3521e4b68c919ec9e8d5758b251ecb2e3058ea3f4395751ea98", 0xad}, {&(0x7f0000000400)="a571e7eee7932c948001be9e80ee5677c1a58a191f46d8248ec75f640dfe336fcac40f6a289bbdad88b4e9236d42bb3604808b914fbd3470", 0x38}], 0x8) r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r6, 0xc00c7006, &(0x7f0000000080)=0x500) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x2, 0x8, 0x1, 0xf}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x81, 0x10, 0x6, 0x40}, {0x6, 0x4, 0x1, 0xffffffff}]}) write(0xffffffffffffffff, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) 1.389169534s ago: executing program 7 (id=197): r0 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000080), 0x0, 0x0}}, 0x10, 0x0) setuid(0xee01) r2 = socket(0x18, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r2, 0x8020699d, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) 1.387947689s ago: executing program 0 (id=198): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x165) (async) r1 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x165) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f000002b000/0x1000)=nil, 0x1000, 0x5, 0x10, r1, 0x0) (async) mmap(&(0x7f000002b000/0x1000)=nil, 0x1000, 0x5, 0x10, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) syz_emit_ethernet(0x4c, &(0x7f0000000dc0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd698f352400163b0400000000000000000000000000e1fffffe0200"]) mmap(&(0x7f0000fef000/0x10000)=nil, 0x10000, 0x1, 0x2012, r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000080)=0x9) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000080)=0x9) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x64, &(0x7f0000001900), 0x4) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100012d29fb000700000000098002005e00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0xdc1d800780e51763}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xffffffffffffff7f, &(0x7f0000001c00)="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", 0x4) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0xdc1d800780e51763}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xffffffffffffff7f, &(0x7f0000001c00)="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", 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 1.33638ms ago: executing program 2 (id=199): sysctl$ddb(&(0x7f0000000000)={0x9, 0x6}, 0x2, 0x0, 0x0, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000040)=@in, 0x10, 0x0, 0x0, &(0x7f0000000280)=""/129, 0x81}, 0x40) symlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0/file0\x00') open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941) (async) clock_getres(0x4, &(0x7f0000000000)) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x0, 0x20}, {0x3, 0x0, 0x0, 0x49}, {0x81, 0x0, 0x0, 0x1}]}) (async, rerun: 32) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1934, 0x0, 0x94e88e483d20a485) (async, rerun: 32) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10002) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x5cda) r3 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) ioctl$VNDIOCSET(r3, 0x80184600, &(0x7f0000000340)={0x0, 0x9, 0x0}) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) (async) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r4, 0x80085761, &(0x7f0000000040)={0x2eb8c87837b8b5f7, 0x2000000}) (async) ioctl$KDMKTONE(r2, 0x20004b08, &(0x7f0000000040)=0xe) sysctl$vfs_nfs(&(0x7f00000010c0)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000001100), 0x0, 0x0, 0x0) 776.612µs ago: executing program 7 (id=200): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) (async) select(0x40, &(0x7f0000000000)={0x0, 0x1000, 0x80000000000}, &(0x7f0000001140)={0x0, 0x5, 0x6, 0x8}, &(0x7f0000000040)={0x3, 0x0, 0xb, 0x0, 0x18ae, 0x9, 0x0, 0x6}, &(0x7f0000000100)) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000c0001400f900000000000000000000ffffac1400aa00fe000001000800001a0000000000044e204e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51f1f4e986a5941f"]) (async) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) 339.065µs ago: executing program 0 (id=201): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd6009000000200600030000000000000037f87ccdc0c4a92cff0000000001ea443d080000000001004e204e22", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='[B']) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x10, 0x2, 0xc) connect$unix(r0, &(0x7f0000000000), 0x10) sendto$inet(r0, 0x0, 0x0, 0x90c59483e5ce52b1, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd6009000000200600030000000000000037f87ccdc0c4a92cff0000000001ea443d080000000001004e204e22", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='[B']) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) socket(0x10, 0x2, 0xc) (async) connect$unix(r0, &(0x7f0000000000), 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x90c59483e5ce52b1, 0x0, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) (async) 0s ago: executing program 4 (id=202): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x1043, 0x9, 0x1, 0xa}, {0x7, 0xd, 0x2, 0x2}, {0x8, 0xe, 0xe6, 0x8040fc}]}) r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4) sendto$unix(r0, &(0x7f00000000c0)="b1000504600000000000000007000000331c13fecea3c7ea1e7861150ba10500fef9e906c72fd3157ae320b37b673039d2d236073705ae04be38164991f7accf5f88470585f470744ff100f85ddd66cbee4f2b097be1aa5b2300eb51e2f0ac3ebbbd57699a5f139b67", 0x69, 0x406, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (rerun: 64) r1 = socket(0x11, 0x3, 0x3) sysctl$net_inet6_ip6(&(0x7f0000000480)={0x4, 0x18, 0x29, 0x35}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002821fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): OpenBSD/amd64 (Amnesiac) (tty00) Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. login: pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 panic: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/multicore/kernel/sys/net/rtable.c", line 132 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 476692 71077 0 0 0 0 syz-executor *362121 3553 0 0 0x4000000 1K syz-executor db_enter() at db_enter+0x25 panic(ffffffff833761e7) at panic+0x1e5 __assert(ffffffff833b28b7,ffffffff833aa53d,84,ffffffff83404993) at __assert+0x29 rtmap_grow(21,21) at rtmap_grow+0x24f rtable_add(20) at rtable_add+0x2d9 if_createrdomain(20,ffff800001489800) at if_createrdomain+0x40 ifioctl(ffff800010fcb1f8,8020699f,ffff80003c491c30,ffff80003c440558) at ifioctl+0x1c66 sys_ioctl(ffff80003c440558,ffff80003c491e10,ffff80003c491d60) at sys_ioctl+0x674 syscall(ffff80003c491e10) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd4f31fe270, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/multicore/kernel/sys/net/rtable.c", line 132 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833761e7) at panic+0x1e5 __assert(ffffffff833b28b7,ffffffff833aa53d,84,ffffffff83404993) at __assert+0x29 rtmap_grow(21,21) at rtmap_grow+0x24f rtable_add(20) at rtable_add+0x2d9 if_createrdomain(20,ffff800001489800) at if_createrdomain+0x40 ifioctl(ffff800010fcb1f8,8020699f,ffff80003c491c30,ffff80003c440558) at ifioctl+0x1c66 sys_ioctl(ffff80003c440558,ffff80003c491e10,ffff80003c491d60) at sys_ioctl+0x674 syscall(ffff80003c491e10) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd4f31fe270, count: -10 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c491940 rbx 0xffff8000299eeddf rdx 0 rcx 0xffff80003c440558 rax 0xffff8000299edff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xd9f526b28966ce06 r11 0xb37f6eecc0d2949c r12 0xffff8000299eebe0 r13 0 r14 0 r15 0x1 rip 0xffffffff817a3065 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c491930 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=362121 pid=3553 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=80, usrpri=80, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c4402c0,0xffff80003c441a28 process=0xffff8000398249c0 user=0xffff80003c48c000, vmspace=0xfffffd80692c33f0 estcpu=30, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 71077 476692 76423 0 7 0 syz-executor 71077 40492 76423 0 2 0x4000000 syz-executor 59941 66397 1850 0 2 0 syz-executor 59941 294553 1850 0 3 0x4000000 biowait syz-executor 59941 524103 1850 0 2 0x4000000 syz-executor 49032 461926 8110 0 2 0 syz-executor 49032 303569 8110 0 2 0x4000000 syz-executor 4855 90115 12881 0 2 0 syz-executor 4855 247400 12881 0 3 0x4000080 fsleep syz-executor 63958 311844 3078 0 2 0 syz-executor 63958 42419 3078 0 3 0x4000080 fsleep syz-executor 63958 414047 3078 0 3 0x4000080 fsleep syz-executor 36472 335110 92542 -1 2 0x10 syz-executor 36472 497590 92542 -1 3 0x4000010 biowait syz-executor 36472 447399 92542 -1 3 0x4000010 inode syz-executor 36472 132852 92542 -1 3 0x4000090 fsleep syz-executor 3553 321528 35934 0 2 0 syz-executor 3553 221917 35934 0 2 0x4000000 syz-executor * 3553 362121 35934 0 7 0x4000000 syz-executor 3553 440196 35934 0 3 0x4000080 fsleep syz-executor 44503 96123 55227 0 2 0 syz-executor 44503 363692 55227 0 3 0x4000080 fsleep syz-executor 44503 6067 55227 0 3 0x4000080 fsleep syz-executor 44503 224533 55227 0 3 0x4000080 fsleep syz-executor 1850 323408 12649 0 3 0x82 nanoslp syz-executor 55227 351878 12649 0 3 0x82 nanoslp syz-executor 92542 302969 12649 0 3 0x82 nanoslp syz-executor 76423 161031 12649 0 3 0x82 nanoslp syz-executor 35934 507109 12649 0 3 0x82 nanoslp syz-executor 8110 395521 12649 0 3 0x82 nanoslp syz-executor 3078 435702 12649 0 3 0x82 nanoslp syz-executor 12881 138564 12649 0 3 0x82 nanoslp syz-executor 12649 180130 63234 0 3 0x82 kqread syz-executor 63234 169231 38174 0 3 0x10008a sigsusp ksh 38174 422566 96099 0 3 0x98 kqread sshd-session 96099 288054 88713 0 3 0x92 kqread sshd-session 50109 517201 1 0 3 0x100083 ttyopn getty 88713 309449 1 0 3 0x88 kqread sshd 47703 423773 42557 74 3 0x1100092 bpf pflogd 42557 289936 1 0 3 0x80 sbwait pflogd 83487 103462 82567 73 3 0x1100090 kqread syslogd 82567 228376 1 0 3 0x100082 sbwait syslogd 79890 9924 1 0 3 0x100080 kqread resolvd 84493 124480 45575 77 3 0x100092 kqread dhcpleased 22117 419021 45575 77 3 0x100092 kqread dhcpleased 45575 433445 1 0 3 0x80 kqread dhcpleased 39271 339543 0 0 3 0x14200 bored smr 56083 474767 0 0 2 0x14200 zerothread 3838 442793 0 0 3 0x14200 aiodoned aiodoned 35629 271006 0 0 3 0x14200 syncer update 21359 477411 0 0 3 0x14200 cleaner cleaner 61845 255950 0 0 3 0x14200 reaper reaper 76514 475396 0 0 3 0x14200 pgdaemon pagedaemon 31818 518548 0 0 3 0x14200 bored viomb 85469 113960 0 0 3 0x40014200 acpi0 acpi0 90116 160299 0 0 3 0x40014200 idle1 95626 345149 0 0 3 0x14200 bored softnet7 35951 384226 0 0 3 0x14200 bored softnet6 25711 413181 0 0 3 0x14200 bored softnet5 43725 5544 0 0 3 0x14200 bored softnet4 61335 24265 0 0 3 0x14200 bored softnet3 60868 119732 0 0 3 0x14200 bored softnet2 94083 130948 0 0 3 0x14200 bored softnet1 13418 101546 0 0 3 0x14200 bored softnet0 82997 142532 0 0 3 0x14200 bored systqmp 69753 340133 0 0 3 0x14200 bored systq 16572 253590 0 0 3 0x14200 tmoslp softclockmp 49790 32254 0 0 3 0x40014200 tmoslp softclock 21400 462508 0 0 3 0x40014200 idle0 1 345684 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 71077 (syz-executor) thread 0xffff800036009ca8 (40492) exclusive rwlock vmmaplk r = 0 (0xfffffd80692c3e78) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 uvmfault_lookup+0xe8 #4 uvm_fault_check+0x895 #5 uvm_fault+0x106 #6 upageflttrap+0xa9 #7 usertrap+0x3c6 #8 recall_trap+0x8 Process 59941 (syz-executor) thread 0xffff800036008fb0 (294553) exclusive rrwlock inode r = 0 (0xfffffd80707d1b48) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_makeinode+0xcd #8 ufs_create+0x4e #9 VOP_CREATE+0xfe #10 vn_open+0x34d #11 doopenat+0x35b #12 syscall+0xbd4 #13 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd80707d1580) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 vn_open+0x1f1 #8 doopenat+0x35b #9 syscall+0xbd4 #10 Xsyscall+0x128 Process 49032 (syz-executor) thread 0xffff800036008550 (303569) exclusive rwlock vmmaplk r = 0 (0xfffffd80692c3c90) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 uvmfault_lookup+0xe8 #4 uvm_fault_check+0x895 #5 uvm_fault+0x106 #6 upageflttrap+0xa9 #7 usertrap+0x3c6 #8 recall_trap+0x8 Process 36472 (syz-executor) thread 0xffff800036009248 (497590) exclusive rrwlock inode r = 0 (0xfffffd80707d17d0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x242 #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 Process 3553 (syz-executor) thread 0xffff80003c440558 (362121) exclusive kernel_lock &kernel_lock r = 1 (0xffffffff8394d350) #0 witness_lock+0x5f1 #1 __mp_acquire_count+0x58 #2 malloc+0xe3 #3 rtmap_grow+0xb2 #4 rtable_add+0x2d9 #5 if_createrdomain+0x40 #6 ifioctl+0x1c66 #7 sys_ioctl+0x674 #8 syscall+0xbd4 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10210 11074K 11173K 166960K 11434 0 pcb 17 12K 12K 166960K 51 0 rtable 202 8K 8K 166960K 309 0 pf 34 17K 18K 166960K 64 0 ifaddr 43 7K 8K 166960K 60 0 ifgroup 55 2K 2K 166960K 80 0 sysctl 3 1K 9K 166960K 7 0 counters 68 36K 38K 166960K 102 0 ioctlops 0 0K 4K 166960K 1501 0 iov 0 0K 18K 166960K 16 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1338 84K 84K 166960K 1494 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 7 0K 0K 166960K 11 0 dirhash 12 2K 2K 166960K 21 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 89K 166960K 334 0 sigio 0 0K 0K 166960K 13 0 proc 72 115K 180K 166960K 544 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 23 0 in_multi 99 7K 7K 166960K 110 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 67 307K 307K 166960K 67 0 exec 0 0K 1K 166960K 437 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 259 168K 181K 166960K 4761 0 UVM aobj 9 2K 2K 166960K 11 0 pinsyscall 43 86K 101K 166960K 1422 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 9 0 NDP 12 0K 1K 166960K 37 0 temp 39 8643K 8722K 166960K 9429 0 kqueue 15 22K 26K 166960K 53 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 41 0 38 1 0 1 1 0 8 0 rtentry 176 107 0 23 5 0 5 5 0 8 0 unpcb 144 277 0 259 6 0 6 6 0 8 5 syncache 336 5 0 5 2 1 1 1 0 8 1 tcpcb 736 54 0 48 1 0 1 1 0 8 0 arp 136 12 0 2 1 0 1 1 0 8 0 inpcb 328 200 0 191 2 0 2 2 0 8 0 nd6 144 16 0 0 1 0 1 1 0 8 0 pkpcb 40 3 0 3 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 14 0 14 1 0 1 1 0 8 1 pppxif 1504 2 0 2 1 0 1 1 0 8 1 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 2 0 1 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 28 0 1 1 0 1 1 0 8 0 pfstkey 128 28 0 1 1 0 1 1 0 8 0 pfstate 384 28 0 1 3 0 3 3 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 506 0 76 30 1 29 30 0 8 1 art_table 40 508 0 76 5 0 5 5 0 8 0 art_node 32 107 0 33 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 0 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 6 0 1 1 0 1 1 0 8 0 shmpl 112 8 0 2 1 0 1 1 0 8 0 dirhash 1024 23 0 6 3 0 3 3 0 8 0 dino2pl 256 1972 0 462 95 0 95 95 0 8 0 ffsino 296 1972 0 462 117 0 117 117 0 8 0 nchpl 144 2421 0 730 63 0 63 63 0 8 0 rtmask 32 3 0 3 1 1 0 1 0 8 0 uvmvnodes 80 2104 0 0 43 0 43 43 0 8 0 vnodes 216 2104 0 0 117 0 117 117 0 8 0 namei 1024 7491 0 7490 5 4 1 3 0 8 0 percpumem 16 66 0 17 1 0 1 1 0 8 0 kstatmem 264 44 0 18 3 0 3 3 0 8 1 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 8739 0 8737 9 3 6 8 1 8 5 plimitpl 152 53 0 36 1 0 1 1 0 8 0 sigapl 424 638 0 584 7 0 7 7 0 8 0 knotepl 120 555 0 0 17 0 17 17 0 8 0 kqueuepl 224 75 0 65 1 0 1 1 0 8 0 pipepl 344 115 0 88 3 0 3 3 0 8 0 fdescpl 528 616 0 584 3 0 3 3 0 8 0 filepl 160 2626 0 2405 15 0 15 15 0 8 5 lockfpl 104 76 0 73 1 0 1 1 0 8 0 lockfspl 48 38 0 35 1 0 1 1 0 8 0 sessionpl 144 24 0 15 1 0 1 1 0 8 0 pgrppl 48 36 0 19 1 0 1 1 0 8 0 ucredpl 104 338 0 323 1 0 1 1 0 8 0 zombiepl 144 701 0 701 1 0 1 1 0 8 1 processpl 1232 638 0 584 5 0 5 5 0 8 0 procpl 664 1001 0 931 6 0 6 6 0 8 0 sockpl 752 525 0 495 18 6 12 17 0 8 8 mcl64k 65536 10 0 0 2 0 2 2 0 8 0 mcl16k 16384 8 0 0 1 0 1 1 0 8 0 mcl12k 12288 3 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 122 0 0 16 1 15 16 0 8 0 mcl2k 2048 20 0 0 3 0 3 3 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 160 0 0 10 0 10 10 0 8 0 bufpl 280 3430 0 125 237 0 237 237 0 8 0 anonpl 32 9486 0 0 77 0 77 77 0 246 0 amapchunkpl 152 14865 0 14307 30 3 27 28 0 158 5 amappl16 200 2609 0 2564 19 8 11 14 0 8 7 amappl15 192 8 0 8 1 1 0 1 0 8 0 amappl14 184 114 0 102 1 0 1 1 0 8 0 amappl13 176 6 0 5 1 0 1 1 0 8 0 amappl12 168 1255 0 1223 3 1 2 2 0 8 0 amappl11 160 52 0 38 1 0 1 1 0 8 0 amappl10 152 4 0 4 1 1 0 1 0 8 0 amappl9 144 277 0 277 1 1 0 1 0 8 0 amappl8 136 20 0 18 1 0 1 1 0 8 0 amappl7 128 105 0 93 1 0 1 1 0 8 0 amappl6 120 182 0 179 1 0 1 1 0 8 0 amappl5 112 119 0 110 1 0 1 1 0 8 0 amappl4 104 299 0 280 1 0 1 1 0 8 0 amappl3 96 2415 0 2307 3 0 3 3 0 8 0 amappl2 88 853 0 776 2 0 2 2 0 8 0 amappl1 80 9476 0 8869 15 0 15 15 0 8 1 amappl 88 4052 0 3866 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 1 1 1 0 8 1 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 10 0 2 1 0 1 1 0 8 0 uaddrrnd 24 616 0 584 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 616 0 584 1 0 1 1 0 8 0 vmmpekpl 168 6758 0 6727 2 0 2 2 0 8 0 vmmpepl 168 46086 0 44034 102 1 101 101 0 357 7 vmsppl 488 615 0 584 5 0 5 5 0 8 1 rwobjpl 80 17742 0 14658 64 0 64 64 0 8 1 pdppl 4096 1240 0 1168 100 28 72 86 0 8 0 pvpl 32 18731 0 0 152 0 152 152 0 265 0 pmappl 256 615 0 584 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 277 0 37 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff8379cff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff8394d148) at __mp_lock+0x1a3 intr_handler(ffff8000398210c0,ffff800000079a80) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x71b7a7347380, count: 8 ddb{0}> trace x86_ipi_db(ffffffff8379cff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff8394d148) at __mp_lock+0x1a3 intr_handler(ffff8000398210c0,ffff800000079a80) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x71b7a7347380, count: -7 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff833761e7) at panic+0x1e5 __assert(ffffffff833b28b7,ffffffff833aa53d,84,ffffffff83404993) at __assert+0x29 rtmap_grow(21,21) at rtmap_grow+0x24f rtable_add(20) at rtable_add+0x2d9 if_createrdomain(20,ffff800001489800) at if_createrdomain+0x40 ifioctl(ffff800010fcb1f8,8020699f,ffff80003c491c30,ffff80003c440558) at ifioctl+0x1c66 sys_ioctl(ffff80003c440558,ffff80003c491e10,ffff80003c491d60) at sys_ioctl+0x674 syscall(ffff80003c491e10) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd4f31fe270, count: 5 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833761e7) at panic+0x1e5 __assert(ffffffff833b28b7,ffffffff833aa53d,84,ffffffff83404993) at __assert+0x29 rtmap_grow(21,21) at rtmap_grow+0x24f rtable_add(20) at rtable_add+0x2d9 if_createrdomain(20,ffff800001489800) at if_createrdomain+0x40 ifioctl(ffff800010fcb1f8,8020699f,ffff80003c491c30,ffff80003c440558) at ifioctl+0x1c66 sys_ioctl(ffff80003c440558,ffff80003c491e10,ffff80003c491d60) at sys_ioctl+0x674 syscall(ffff80003c491e10) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd4f31fe270, count: -10