last executing test programs: 3.934691655s ago: executing program 7 (id=794): r0 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) mknodat(r0, &(0x7f0000000280)='./file0\x00', 0x4, 0xe) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa) setitimer(0x2, &(0x7f0000000940)={{0x5, 0x6}, {0x0, 0x6}}, &(0x7f0000000980)) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) (async) mknodat(r0, &(0x7f0000000280)='./file0\x00', 0x4, 0xe) (async) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa) (async) setitimer(0x2, &(0x7f0000000940)={{0x5, 0x6}, {0x0, 0x6}}, &(0x7f0000000980)) (async) 3.853580531s ago: executing program 7 (id=800): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) sysctl$net_inet_tcp(&(0x7f0000000300)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f0000000080), 0x0, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x20000, 0x41) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcd, 0x2, 0x1, 0x440}, {0x83, 0x0, 0x4, 0x55be}, {0x6, 0x0, 0x0, 0x402}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="c528c0d631f9fd0000002987816c69980211b96eab36018086c3c051c795047df904ada614ba346c", 0x28}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="a612239dcd9ed59c784e64c23aa91b998595004704000d0000c5a76ee48e8080cb0ffda7000000b9ca71bad33a4a120a1d6efbab54ae4204957d00"/72, &(0x7f0000000080)=0x48, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[]) 3.842975298s ago: executing program 7 (id=803): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8000, 0x10000) open(&(0x7f0000000040)='./bus\x00', 0x20, 0x0) 3.796537195s ago: executing program 7 (id=806): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async) unveil(&(0x7f0000000140)='.\x00', &(0x7f00000000c0)='r\x00') (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd6009000000200600feffffffffffffff37f87ccdc0c4a92cff0000000001ea443d080000000001004e204e22", @ANYBLOB="de680702cf03345a7e03"]) 3.767515647s ago: executing program 7 (id=810): setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r2 = semget(0x0, 0x1, 0x281) semctl$GETZCNT(r2, 0xd3ccd086bec4dd02, 0x7, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r1}}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) 3.709855666s ago: executing program 6 (id=817): r0 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, &(0x7f0000000080)=0x8, 0x2) r2 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000080)) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) poll(&(0x7f0000000000)=[{r1, 0x8}, {r0, 0x4}], 0x2, 0x9) (async) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="6a87c323a9fd00a20ddd0105225336e2c9fde31ef6a2", 0x16}], 0x1, 0x800) (async) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) 3.451416454s ago: executing program 4 (id=835): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) unveil(&(0x7f00000000c0)='.\x00', &(0x7f0000000300)='c\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) 3.45019945s ago: executing program 7 (id=836): r0 = syz_open_pts() ioctl$TIOCSTOP(r0, 0x2000746f) mprotect(&(0x7f0000078000/0x3000)=nil, 0x3000, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000040)="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", 0x201) write(r1, &(0x7f0000000000), 0x0) 2.37644504s ago: executing program 1 (id=837): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002fc0)={0xffffffffffffffff}) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f00000032c0)=0x1) (async) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) (async) minherit(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) (async) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffffffffffffff80350001080006"]) 2.376278905s ago: executing program 6 (id=838): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) mprotect(&(0x7f0000076000/0x3000)=nil, 0x3000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) fcntl$dupfd(r1, 0x0, r2) pread(r0, &(0x7f0000000040)="3cd15db7c30016", 0x50cc00, 0x0) 1.28845628s ago: executing program 4 (id=843): fcntl$lock(0xffffffffffffffff, 0x9, 0x0) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000002c0)={0x3, &(0x7f0000000240)=[{0x3ff, 0x81, 0x7, 0x80}, {0x2221, 0x0, 0x0, 0x800}, {0xff99, 0x5, 0x68}]}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000200)=[{0xc, 0xf8, 0xff, 0x40444}, {0xc0, 0x0, 0xfe, 0x1000007}, {0x6, 0x6, 0xaa, 0x401}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) (async, rerun: 64) write(r0, &(0x7f00000001c0)="d8564b0bf1ff0795548af9200400", 0xe) (async) r1 = msgget(0x0, 0x204) msgrcv(r1, &(0x7f0000000040)={0x0, ""/96}, 0x68, 0x2, 0x0) r2 = socket(0x18, 0x3, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1004, &(0x7f00000000c0)=0x7, 0x1) sysctl$vm(&(0x7f0000000000)={0x2, 0x9}, 0x2, 0x0, 0x0, 0x0, 0xfffffd91) (async, rerun: 64) sysctl$vm(&(0x7f00000000c0)={0x2, 0xc}, 0x2, &(0x7f0000000100)="43e7c1fe6d7e017f93147b9eb0523654e932489c9e14b293b5b8cc194c10f64c0e682e2437d88e64ca60bd385153bdac3e41290ee97afaf39d53cca0d9986804c28d3f0119b9a4fa92dfc906988fb232985f3449abd188db33fc016c3ade15194edf811073dcc1289229ad770d195a3fea1dd21fd32d23c54965fcb2de0a42b0fa17f7406262a2920c5fa61b6624c23d654abfd00626a7767d2b964ec802bd7000ca0c9d181885bb5895be215bd3051c4bf8015de9d688fdc7f138a34ac3c9fd7edb705c8a6ad4345052e142d63f1daee351f6bb31655aa9e61cae5ce1ad94c21f2cfa1c4ef5be1f28687e1a0f9518d63095a2", &(0x7f0000000200)=0xf3, &(0x7f0000000240), 0x0) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) close(r2) (async, rerun: 64) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (rerun: 64) read(r3, &(0x7f00000000c0)=""/182, 0xb6) (async, rerun: 32) sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4) (rerun: 32) 1.221425494s ago: executing program 1 (id=844): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000004c0)={{0x8968, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x80000005a7, 0x4, 0x8}) (async) sysctl$vm(&(0x7f0000000180)={0x2, 0x2}, 0x2, &(0x7f0000000000)="6deff1605c5705c04d30e9f0202c959ce2b5c3580180ad30", &(0x7f0000000f00)=0x18, 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x80206919, &(0x7f00000001c0)) (async, rerun: 64) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) mmap(&(0x7f00001f2000/0x4000)=nil, 0x4000, 0x2, 0x2013, r0, 0x9) 1.220501346s ago: executing program 4 (id=846): r0 = fcntl$dupfd(0xffffffffffffffff, 0xa, 0xffffffffffffffff) socket(0x6, 0x8000, 0x6) (async) socket(0x6, 0x8000, 0x6) ioctl$WSDISPLAYIO_DELFONT(r0, 0x8058574f, &(0x7f0000000000)={'./file0\x00', 0x1, 0xfffffffa, 0x1, 0x1, 0xa4c, 0x3, 0xaf0e, 0x1, 0x1, 0x50a, 0x9}) mquery(&(0x7f0000ff4000/0x1000)=nil, 0x7f7fffffc000, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket(0x11, 0x3, 0x0) (async) r1 = socket(0x11, 0x3, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f00000002c0)={0x800e, 0xfffffffffffffffd}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(&(0x7f0000000440)='./file1\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000300)='.\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') unveil(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='x\x00') bind$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa) (async) bind$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa) 1.117717409s ago: executing program 1 (id=849): pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0xd4e688a67930cd) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="94", 0xffd0}], 0x1) close(r0) (async) r2 = getppid() msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x1, 0x5, r2, r2, 0xfa15, 0x4}) (async) fcntl$lock(r1, 0x8, &(0x7f00000000c0)={0x2, 0x2, 0x4, 0xc, r2}) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$VMM_IOC_READREGS(r0, 0xc2485607, 0x0) (async) execve(0x0, 0x0, 0x0) (async) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x1494) (async) sysctl$net_inet_carp(&(0x7f0000000180)={0x4, 0x2, 0x70, 0x2}, 0x4, &(0x7f00000001c0)="051a1150e50757348467de94e979beda3d6902a695beb40be244875024b2b37be5d560982120f383c7adfe01971d47d5701eb1a70433505eabb1de51cc6a4d3b42204970bde9d01ec421aed97685b05d78f8e7b75edb5c75c51ad8828e9ecb1feace65e1708451e50f533a4ee4543f95b382c6a866716070c1aff769e347d200a884fd95ef4b283ddde93625508cabd810fa30b1b8e93321da54af6b5f", &(0x7f0000000280)=0x9d, &(0x7f00000002c0)="08e34b9b463e659046ed116503ca33b6e72c2540b0c644d779c4f8848c9872a8", 0x20) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.117097503s ago: executing program 4 (id=851): r0 = getpid() ktrace(0x0, 0x1, 0x60000b24, r0) r1 = fcntl$getown(0xffffffffffffff9c, 0x5) r2 = getuid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x6, 0x8, 0x0, 0x0, 0x0, 0x100000000, 0x9, 0xb}) r3 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r4 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1000, &(0x7f0000000000)=0x1, 0x4) r5 = socket(0x18, 0x1, 0x0) setsockopt(r5, 0x1000000029, 0x3b, &(0x7f0000000040), 0x0) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20001fffffffd}) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) chown(&(0x7f0000000040)='./file0\x00', r2, 0xffffffffffffffff) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000001380)={{0x200, 0x0, 0x0, r2, 0x0, 0x80, 0x3}, 0x87a1, 0x6, r1, 0x0, 0xff, 0x100000001, 0x2}) pledge(0x0, &(0x7f0000002840)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00'/659) 1.061394445s ago: executing program 4 (id=855): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050400000400000000000700000033", 0xfffffffffffffdfc, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x0, 0xff7e, 0x0, 0xffffffffffffffff, 0x2280}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000)) setuid(0xee01) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000001c0)=""/220) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@random="8f6f77ede655", @broadcast, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @loopback, @broadcast, @multicast2}}}}) shmctl$SHM_LOCK(0x0, 0x3) 1.059958636s ago: executing program 6 (id=856): sysctl$kern(&(0x7f00000000c0)={0x1, 0x53}, 0x2, &(0x7f0000000180)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082f9740f62f49ead69c9b3b32c84f8d320018983cea251ec1a2350c127dcdf7c69e1f0e8247ea3b5df5b16134f032c75405a000048044f2c0495f1496131b46051a74f58c9fcbec9fd0312aa24f63eb91489a05c8cf36b67310f648b950e7e7ca075ed83ed454a949c585f359084bd96d93a33c82ae1124227ed69ab8942a9ab7e", &(0x7f0000000080)=0xfeba, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r0 = syz_open_pts() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x44) readlinkat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000009c0)=""/4096, 0x1000) close(r0) syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x9) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 765.174759ms ago: executing program 1 (id=857): sysctl$ddb(&(0x7f0000000000)={0x9, 0x7}, 0x2, &(0x7f0000000040)="d46758ad04d5a63f369394452276af25f0bd76b205f223e512072aa21a53c1f2608eae7dcc6205e4e2978140ed40728f8d08f2839017697378f7692aea7c993b1371ac42dad043e489c2b9acd4fe1f69449c1e727f98b42e46", &(0x7f00000000c0)=0x59, &(0x7f0000000240)="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", 0x1000) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050400000400000000000700000033", 0xfffffffffffffdfc, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = shmget$private(0x0, 0x3000, 0x28d, &(0x7f00003e4000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x0, 0xff7e, 0x0, 0xffffffffffffffff, 0x2280}) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) setuid(0xee01) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='c\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000001340)=@file={0x0, ""/256}, &(0x7f0000001480)=0x102) pread(r1, &(0x7f00000014c0)="ec31c9047628f4cb88a57e2e5fd8d9b71efb20272702750fd702efab159f5252d8b14355c59c590ceed4b6f4808941f222b1955ba02964573da7717ff95243e6cfc093abecd2608ad85e24ea47ec69c76115337117fd0998ea027c8b357339ab29831be0a153ffb9cd23110fd62ccc946236", 0x72, 0x7) r2 = socket(0x2, 0x2, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xfffffffc, 0x3fd, {0x1, 0x1}}) syz_emit_ethernet(0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="fffd640000000000000000000a"]) sysctl$kern(&(0x7f0000000000)={0x6, 0xb}, 0x5, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$TIOCSETA(r3, 0xc0205601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffc, "97a662780400000000001600d100", 0xfffffffc, 0xfffffffd}) ioctl$FIONREAD(r2, 0xc0206923, 0x0) socket(0x2, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) shmat(r0, &(0x7f0000000000/0x3000)=nil, 0x1000) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) sysctl$ddb(&(0x7f0000000100)={0x9, 0x4}, 0x2, &(0x7f0000001540)="fa428ea2c669d2f58d7e33067d6c8cd4d4034218f1aeae0a36f8674edf2d49fb4976a2ee62679558f832ddbf94599ff4af1f6079792411ab7951a3a3f6f6d1ff8583f05eea9c7c8e8884e7ed31ecb846fc3140a6baadb41db09097500c7ee4cf6cb856df9538893ed7d506b7649ba685199833636dcff721eecb842619da78df96096f536c2b956a93eaa2056e20589b0873f080b57b44222769db39c553d3623187dbe4c29b256104c908dd05b6967231c4c72ac112c8bac5658e0d23bf7e31e3e2b4521da25128cfcbc3ee75cdcadddb97cfaedccf8130256c232eda36020f9bef115bcc0090ae69f2f1bd78cd1cc41d8247d4f0645f27c4", &(0x7f0000000140)=0xf9, &(0x7f0000000180)="f8d84b58bac78d059fcd84e89ea289db6819bb91f84fb389874199daa95b500417d55fa6d2bc5f2949d0c383bdd70d13b84a2e95cd9bcc30ab47816f59c0c6bfb5bd28359a0773fcba2a3d4a9a42a8960b2586f06e7b48adb63ecb49948b2964d609a581701af4d01f59", 0x6a) 749.682615ms ago: executing program 0 (id=860): mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) poll(0x0, 0x0, 0x7) 748.20999ms ago: executing program 4 (id=861): sysctl$kern(&(0x7f0000000000)={0x1, 0x8}, 0x2, &(0x7f0000000040)="43e6072e22ca68372bff62cb93827728116b7353ab398745295a6e3956cd3e4a74f17e4df1a8cbbcffa5323c40f744cfb46c5e9eab2dc94a0682bd64bbf697d4727bea176388b2271be612363531fb77de13a31344", &(0x7f00000000c0)=0x55, &(0x7f0000000100)="cfc5e6715b2a1bc61a9e68cd0b22ac86c1fa09308098f450413ddeb2b183d37e2beb9c41655cee0dc3ff7c2de08fd7374940d0ef2a3d261183b6dd9135ab08d2e10c9398896f27fbbef565c00b4f3d0de32148a1dd93483290fab74702e3dcc43e2a23ac9ec2340be99cab42b05b9025fe24d69eb42541fd9e8587759ad599cd660f09feeadf542e709120c987834401e5275ee1a699213e58b675e03d", 0x9d) sysctl$kern(&(0x7f00000001c0)={0x1, 0x3e}, 0x2, &(0x7f0000000200)="b364542ed667fc46786755e687cc1ca7c1d6f0add79ebd1ef8883400323de5ccc3f7700e637b85610e521b0d7af8d11f108d2d7a199b9a03db099736fbfc827c20eb656eebde399e6e0f58f5856b24172eadd95104131d9206d567015caa2aa1e58b116c0033d08c1af9fbb207290b943376b98fa18c0a0f088a33ab43fc", &(0x7f0000000280)=0x7e, &(0x7f00000002c0)="73e548d15a6857d0222ce3a92250c4904cbffe589fc4a6e30302a87aa470f0fdc84eb79e981283d65c893c1cc85c3a8058ffce26e9c79e6d12e9e986cb50ab7d3cf3e62d95ef7d0e7617c6f7677101bf4d3e31de7c6ae51d2512954c702998284bc2f3e2835d8257f182fb140c4108afb258b1cdd1d62bc8639305666ec1a6c96a39c2d5536a3083d9ce0e7b041a64766f187566cc596ab8c1e8d90571d5", 0x9e) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000003c0)={0x10, 0xfffffffb, 0x10, 0xffff, "479e25586008864ece77ff6a99515d649bdc8d9a", 0xfffffffe, 0x7}) sysctl$kern(&(0x7f0000000400)={0x1, 0x8}, 0x2, &(0x7f0000000440)="3bc66e6c265a594470a48676fd3dfe33b934d3c84a074c5ae718a19a2076b4e87a670635155eefa495a8cdc185d876b767a6118fd5f6a25be1154c8de8e917c4661d7d85096dadf223a3da8495685c2cdec0c92f1a473761622b27657d022f50bb1fd2cad654dafc83dbc57395529096858871ae6b94224336954c29015e44301da3ff761ce7f17fed40f17acd4c58ecbf3cd21573b4bf109524ff1db6c389a62e78edf8ff08f2b7e5b7aa2746cbbf069416993c6b0d8ffabe865e8de670e8d118ce7893d01c789f08f15d2fa794aa17", &(0x7f0000000540)=0xd0, &(0x7f0000000580)="c97a4f1eb624445a784a15446929a7594315a80b969aa2a40bc55cb525357445e200a643eb67f9345c1dd344bca30f85d839497e2fb6529bc0cd4b7b34b64bcf7b787666bf6976a5868a6a784c54cfd7a4549e8255e49a1eba0cdb23d459a1a4a424b7e52a00cce4ef32b2c8bc7bc3a496aa5d", 0x73) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000600), 0x80, 0x0) ioctl$VMM_IOC_READREGS(r1, 0xc2485607, &(0x7f0000000640)) r2 = syz_open_pts() ioctl$TIOCSBRK(r2, 0x2000747b) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x3) ioctl$TIOCGFLAGS(r2, 0x4004745d, &(0x7f00000008c0)) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000900)) readv(r1, &(0x7f0000000b80)=[{&(0x7f0000000940)=""/249, 0xf9}, {&(0x7f0000000a40)=""/123, 0x7b}, {&(0x7f0000000ac0)=""/9, 0x9}, {&(0x7f0000000b00)=""/78, 0x4e}], 0x4) r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000bc0), 0x10208, 0x0) ioctl$TIOCSFLAGS(r3, 0x8004745c, &(0x7f0000000c00)=0x9e) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0xc) fchown(r1, r4, r7) connect$unix(r0, &(0x7f0000000cc0)=@abs={0x0, 0x0, 0x2}, 0x8) getpeername$inet(r0, &(0x7f0000000d00), &(0x7f0000000d40)=0xc) sysctl$kern(&(0x7f0000000d80)={0x1, 0x10}, 0x2, &(0x7f0000000dc0)="c18e1df1d9ce4794673aad4675401e2313ca4a3f945ec393fa74ab499d208577f142f4a40183700889c8a48b1547c3d4bfe6217b3dfa26405ba99bd4c33af6018953c2b89b13c78617b619235b75ba14a7d610868a15c8df45364933061464f947da057fc2acadb63fdb1fa13316e083ff63fa46f9c1e60605f07c9fc18e99124b0cafadee82efaedd07f7a76efc2cf7a97a3a393d23a631c38d", &(0x7f0000000e80)=0x9a, &(0x7f0000000ec0)="80a6e4671f968e9fb6117a8318831540e1ea4229d421826d53f884bb9b5f27e330500b02e54350b46eb99d9e85a921fe9844cc6937db35f8e66a3fd84ec4706ebd07a6fb3b8c", 0x46) ioctl$TIOCSTAT(r2, 0x20007465, &(0x7f0000000f40)) r8 = getuid() fchown(r3, r8, r5) r9 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000f80), 0x8000, 0x0) write(r9, &(0x7f0000000fc0)="3066800925d9455d96c21cbca76e3cf26daa298202bc679bd495a76639ff7ace854cf3f24be5595d6bdf5580c32049bf82f580de0f19a63a9c4574bbbbecf7", 0x3f) execve(&(0x7f0000001000)='./file0\x00', &(0x7f0000001180)=[&(0x7f0000001040)='/dev/wskbd\x00', &(0x7f0000001080)='#,\\+.\x00', &(0x7f00000010c0)='/dev/wsmouse\x00', &(0x7f0000001100)='x{+[*&}&++\x00', &(0x7f0000001140)=':%\'@:%\a.\xab(^-&&$/\\\x00'], &(0x7f0000001340)=[&(0x7f00000011c0)='/dev/diskmap\x00', &(0x7f0000001200)='])[-!{\xd6\x01\x00', &(0x7f0000001240)='/dev/wskbd\x00', &(0x7f0000001280)='/dev/wsmouse\x00', &(0x7f00000012c0)='/dev/wsmouse\x00', &(0x7f0000001300)='/dev/diskmap\x00']) seteuid(r6) ioctl$TIOCNOTTY(r2, 0x20007471) ioctl$TIOCGFLAGS(0xffffffffffffffff, 0x4004745d, &(0x7f00000013c0)) 743.557278ms ago: executing program 1 (id=862): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) r0 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x1b}, 0x7297, 0x3d0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x4}) pipe(&(0x7f00000001c0)) r1 = socket(0x18, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) close(r1) r2 = socket(0x800000018, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10"], 0x10}, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x7fffffff}) seteuid(0xffffffffffffffff) r3 = socket(0x2, 0x2, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bind(r3, &(0x7f0000000000), 0x10) r4 = kqueue() kevent(r4, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000140)) getsockname$unix(r1, &(0x7f0000000040)=@abs, &(0x7f0000000180)=0x8) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) 655.252546ms ago: executing program 1 (id=863): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket(0x18, 0x2, 0x0) (rerun: 32) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) (async, rerun: 32) setsockopt(r0, 0xb, 0xb, 0x0, 0x0) (async, rerun: 32) pipe(&(0x7f0000000640)={0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0xd4e688a67930cd) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 654.070667ms ago: executing program 6 (id=864): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000002c0)={0x1, &(0x7f00000001c0)=[{0x8106, 0xd, 0xfe}]}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xc444443a, &(0x7f0000000000)={0x1, 0x22f, 0x5, 0x0, "09000000f1d1d25510000000000000001500", 0x0, 0x40004}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) syz_extract_tcp_res(&(0x7f0000000040), 0xa5e4, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendto$unix(0xffffffffffffffff, &(0x7f00000001c0)="b10004", 0x3, 0x40a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 582.899774ms ago: executing program 3 (id=865): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)='#!', 0x2}], 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x1}, 0x3, &(0x7f0000000080), 0x0, 0x0, 0x0) (async) sysctl$net_inet_udp(&(0x7f0000000000), 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sysctl$kern(&(0x7f0000000000), 0x6, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x9e, &(0x7f0000000680)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "6d9efb", 0x68, 0x67, 0x0, @rand_addr="feffffff010000000000000afffffffe", @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x2b}, @fragment={0xff, 0x0, 0x9, 0x0, 0x0, 0x7, 0x67}, @routing={0x2, 0x8, 0x0, 0x5, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}, @mcast1, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, @mcast2]}, @dstopts={0x11}], @udp={{0x2, 0x3, 0x8}}}}}}}) 578.086258ms ago: executing program 0 (id=867): mknod(&(0x7f0000000040)='./file0\x00', 0x2, 0xcfe) (async) r0 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) pread(r0, &(0x7f0000000000)="2beba8c5bfaaff44b437dfbb000000", 0x50cc3a, 0x80000000) 577.922404ms ago: executing program 3 (id=868): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f00000000c0)={0x10, 0x200, [{&(0x7f000017c000/0x2000)=nil, &(0x7f00000c0000/0x2000)=nil, 0x200007fffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0xfffffffbfffffffc}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00002b1000/0x2000)=nil, 0x7ffe}, {&(0x7f0000318000/0x2000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x2000000000009}, {&(0x7f000027f000/0x1000)=nil, &(0x7f0000095000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f000055e000/0x4000)=nil, &(0x7f00000bf000/0x3000)=nil, 0x8}, {&(0x7f00003d7000/0x4000)=nil, &(0x7f00004de000/0x2000)=nil, 0x8000000000403}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000055e000/0x2000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000632000/0x4000)=nil, 0xfffffffffbfffffe}, {&(0x7f0000196000/0x4000)=nil, &(0x7f00007fe000/0x800000)=nil, 0xed}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x5}, {&(0x7f0000691000/0x2000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f0000169000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000039f7}, {&(0x7f000027e000/0x2000)=nil, &(0x7f00000f4000/0x4000)=nil, 0x2000000000}], './bus\x00', 0xfffffffc}) writev(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000080)="7e1604577f121631c71b13fc63f618a930e86916b196b9354aaf3181970353a5e83f16cf526a0b2d8639d030", 0x2c}], 0x2) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffd, 0x54d1, "52c9795a6b476ed1000000000000003a00000008", 0x2000000, 0x5}) 576.318496ms ago: executing program 3 (id=869): openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ftruncate(r0, 0x40000000007) r1 = socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x400000000002, 0x0) setsockopt(r2, 0x0, 0x21, &(0x7f0000000180)="b1f5d915", 0x4) r3 = dup2(r2, r1) setsockopt$sock_int(r3, 0xffff, 0x800, &(0x7f0000000040)=0x20, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="73b9ccc3000000f70004000086dd6000000000183a01fe8000000000000000000000000000bbff"]) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffa22e6c7c}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r1, &(0x7f0000000000), 0x10) r4 = socket(0x2, 0x2, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) sendmsg$unix(r4, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000000080)={0x0, 0x8}, 0x10, 0x0, 0x0) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x50) preadv(r5, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x20, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000440)="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", 0x34e}], 0x1) chmod(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0x0, 0x7}, {0x6, 0x0, 0x0, 0x401}]}) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000480)="03000000000000001ce9ac7261222cadd021050e7fc87c4c9e6e0a6ec908e8fa3e6eae44ef244146", 0x28}], 0x1, 0x200800) sysctl$kern(0x0, 0x0, &(0x7f0000000380)="a61223d8903009c2165d0000000000000000000069d6c55f80a5a3a037bf3698a9887825279c987465ee863b39fe6aba398579ce50f648769c8c1b700000000087e425fc3fa190512b2ce56c9944000000000000", &(0x7f0000000080)=0x54, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 519.583866ms ago: executing program 0 (id=870): syz_open_pts() (async) r0 = syz_open_pts() fcntl$getown(r0, 0x5) write(0xffffffffffffffff, &(0x7f0000000180)="cb51713761dce7098f27ae8882385509d0a7a60041d1a9d1a1d770326d3a37598e0c5cc22abbf364754c25d41efdc031d01d623a1df57815bec341c06ea8ed933b5632cbc870b58f5bc3d9a286664fa46ffe24d089393b387e8b3c897e860f73d47dfb4ff0fcb0a68cdb3ba08487da9467553a61851def50733b25438a3f68f20d101b35a35ba646e1006012a9b9d350b42fbcba55bef2e49d36cf14916ff989627c1ca33a95838fb9b9077a8b10b7667b004f06cc", 0xb5) r1 = open$dir(&(0x7f0000000300)='.\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) (async) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) (async) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VNDIOCCLR(r2, 0xc0a86b06, &(0x7f0000000200)={0x0, 0x10000, 0x0}) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') open$dir(&(0x7f00000003c0)='.\x00', 0x400004000011830a, 0x0) 444.475967ms ago: executing program 3 (id=871): syz_emit_ethernet(0xe9, &(0x7f0000000000)={@remote, @local, [], {@ipv4={0x800, {{0x21, 0x4, 0x2, 0x4, 0xdb, 0x66, 0x40, 0x4f, 0x3a, 0x0, @local={0xac, 0x14, 0x0}, @empty, {[@rr={0x7, 0x17, 0x5, [@loopback, @loopback, @empty, @rand_addr=0xe, @remote={0xac, 0x14, 0x0}]}, @ra={0x94, 0x6, 0xfffffffe}, @lsrr={0x83, 0x7, 0x4, [@local={0xac, 0x14, 0x0}]}, @noop, @ra={0x94, 0x6, 0x33}, @generic={0x0, 0xc, "2f9970c7251e69f2a8c1"}, @timestamp={0x44, 0x30, 0x2, 0x1, 0x2, [{[@rand_addr=0x400], 0x6}, {[], 0x6}, {[], 0xff}, {[@rand_addr=0x10000], 0x4}, {[], 0x5}, {[@multicast2], 0x1}, {[], 0x6}, {[], 0x80000001}]}, @noop, @ra={0x94, 0x6, 0x2}]}}, @generic="00fafac621ffa648137373dbb3e077aeaad75cd1172248b5733c1563b8c4e015eddfad8a732aa7e41fdac5d10870eab0636a25ff8de76f135fff8dcdf3881e494be5c628d2f57869da7fb1522c20991572b7c669b65ab3"}}}}) syz_emit_ethernet(0xc9, &(0x7f0000000100)={@broadcast, @random="77ad5cbb8b31", [], {@generic={0x6009, "af9d22e35d11f841eedb439e40ce421593c139767fe04896f527d88e26e140cd91f15dca4908aca6b6597aa955fb26997226d8a962a9659e5d88aab90d5ef0ca5588b5bad24cf82dd8a563f0dc497e6d784c6aaeaf6a1d353bbae702f39462ce6cb07f2ef5005b7710e37431c9862d34e5b1cc7ec70bdc448002391047cb049e9cbdef00580c220402e3f7cd8a541be235eae7f1e2de575e8356267c1c9a170e9f876e2828d12baa8c94b9b5aee7f237e9f636bc25e36488148b71"}}}) (async, rerun: 32) syz_extract_tcp_res(&(0x7f0000000200), 0xc7, 0x7) (rerun: 32) syz_emit_ethernet(0x3f, &(0x7f0000000240)={@broadcast, @local, [], {@arp={0x806, @generic={0xf, 0x86df, 0x6, 0xd, 0x2, @local, "3c26a056b004e0b3b9a689e328", @random="701a566a613c", "0a9cc8ac221d0341819524d050826d34"}}}}) (async, rerun: 64) syz_emit_ethernet(0x115, &(0x7f0000000280)={@empty, @remote, [{[{0x88a8, 0x1, 0x0, 0x3}], {0x8100, 0x7, 0x1, 0x3}}], {@ipv4={0x800, {{0x6, 0x4, 0x2, 0x7, 0xff, 0x66, 0x6, 0x91, 0x3, 0x0, @multicast2, @rand_addr=0x800, {[@timestamp={0x44, 0x4, 0x5, 0x1, 0xf}]}}, @generic="2503f8e9cd66ebe05dfb9d0e63e30e694ab5e4da8561bf259f554452d34614e3e3e9178e8eb335172666c8663654f231e939aac789d54060f02dc49c5f9d8d47d43a625a82ce8ee6c7dab3c02cf5c3c1987c0dc99d700c79d63313dc6cf3270c3248fe7e5a1f392ebaf8f7b82d547aeb8ec4fa4c2eb2b8ef0617055bdc3c84d0c8d2989bfe1ab3eb35fb6c5840ea8bb414b280e887e7ef0cb16b45883b7681fb1b9903d196fe3f5027dffe5e77cbe4028531e3d049ff0a1a319d483f21cfcbd4c395d627980c63dd36347f8d9b7c0dd3303ebcbba2c88d2997a56c13ea140464952210a75bea3f"}}}}) (rerun: 64) r0 = accept$inet(0xffffffffffffff9c, &(0x7f00000003c0), &(0x7f0000000400)=0xc) setsockopt(r0, 0x0, 0x9, &(0x7f0000000440)="02d8a87c1d4661e00413d2ef02274cc4618193867349d1275025c41eb55a62788d893d763d09a40dcd90bd82f57e011825d17690a6c979f4d378e66549f3", 0x3e) (async) syz_open_pts() (async) r1 = openat$klog(0xffffffffffffff9c, &(0x7f0000000480), 0x800, 0x0) ioctl$LIOCSFD(r1, 0x80046c7f, &(0x7f00000004c0)=r0) (async) syz_extract_tcp_res$synack(&(0x7f0000000500), 0x1, 0x0) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000580)={0x1, &(0x7f0000000540)=[{0x25, 0xa, 0x3, 0x7}]}) close(r1) (async) getsockopt(r0, 0x886, 0xff, &(0x7f00000005c0)=""/181, &(0x7f0000000680)=0xb5) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) pread(r2, &(0x7f0000000700)="0ae930b8f0df125812425a02b4beec21ad8526aa71e2a228f2da7555b7eb57db77cb7d7d33a195bc8fdc67176ff8ebdfd9a5090ebebc75bc9558482f5506b98118b8890010e6ad78c87e6746dc227a4ef69ebf9a77d2a258c928fa0193939d741ee731c2094f04d3c4ea9310a994b0b90ede145c0647f081cd17bb967d2e8fd988c90842e9ee222f9d4065108917f04542d9561189eea2994d09f2e13f0b8e1d5785f5e6587a1e5816e6", 0xaa, 0x200) setrlimit(0x3, &(0x7f00000007c0)={0x1, 0x9}) (async, rerun: 64) connect$inet(r0, &(0x7f0000000800)={0x2, 0x1}, 0xc) (async, rerun: 64) r3 = kqueue() (async, rerun: 32) syz_emit_ethernet(0x478, &(0x7f0000000840)={@local, @local, [{[], {0x8100, 0x1, 0x0, 0x4}}], {@ipv6={0x86dd, {0x4, 0x6, "8b0ec2", 0x43e, 0x3, 0x9, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x3, 0x2, 0x0, 0x0, 0x0, [@mcast2]}, @routing={0x2e, 0x2, 0x0, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x58d70a768854133d, 0x0, 0xb, 0x1, 0x0, 0xa, 0x66}, @fragment={0x4, 0x0, 0x5, 0x1, 0x0, 0x2, 0x68}, @dstopts={0x61, 0x3, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0xc9}, @enc_lim={0x4, 0x1, 0x3}, @pad1, @ra={0x5, 0x2, 0x3ff}, @pad1]}, @dstopts={0x6c, 0x22, '\x00', [@enc_lim={0x4, 0x1, 0xfc}, @ra={0x5, 0x2, 0xcd10}, @ra={0x5, 0x2, 0x4}, @generic={0x7, 0x4a, "d955ae2b6c362c1f41e3379a75cc56c65c8df147190d124efe9d950d3dc9449ca5ae39f80a1af9111352b57a8e8a34a88469c9bf395643d2154e95eaaea468560d8616341c0c12c6d050"}, @enc_lim, @generic={0x0, 0xb9, "044e5cfb3ffa09f5a8386a7c47cbaef669288cb3bb573fa4bbc910547f42a0cff540468176d905175db44967be9528da4520173c11fe3506586bc272d017c6dedf8f0d74942c00440f88ea0a5b9b99ad46ad19c4171fff3cf69af1d9e734b04a82b67003e338b010fa91f26657689db035aa63e1a04974ab29d3d9e7039e9deab3a9ee463201fefef8098c456c7cb7e92dbc3a4429f88baac567772ff032de00d157720fefa44dc834c30bd5c2f06e6f80b23bd74a3eb37494"}]}, @routing={0x50, 0x4, 0x0, 0x7e, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0xfffffffb}, @mcast1]}, @dstopts={0x6c, 0x16, '\x00', [@generic={0x10, 0xa1, "ecda7f82d17423cbb3070a2449df5ac35b906e40c02d57f9a7d42027fd4b1e55eda8c08aea664b9538322a0388562050e4c5bf6d7d4a31ae44d00662477b32a090043ce8da5a94d54d9857845abf7160a08951c866516be5193ad71b8e600720f1a0584186d4ff46220bf0f7fc80763a76682fe9d3381a1f8869812025bb08a806095b4510e44d55d6a2b1c560c4b08772cd26509bc2e2293213e5968577e4b57e"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x1}]}, @hopopts={0x62, 0x0, '\x00', [@generic={0x7}]}], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x5f1b, {0xe, 0x6, "2fc18e", 0x3, 0x67, 0x7, @rand_addr="4bf7a4ac533fb15ab3d3e303357bf337", @remote={0xfe, 0x80, '\x00', 0x0}, [@dstopts={0x4, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xf}]}, @routing={0x89, 0xc, 0x0, 0x0, 0x0, [@rand_addr="2fd11c3dba30adb40969af634e6b8c9c", @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, @rand_addr="8d028d881d8de1b1c2d986804b3815d7", @loopback, @ipv4={'\x00', '\xff\xff', @loopback}]}, @hopopts={0x0, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x39}, @jumbo]}], "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"}}}}}}}) (async, rerun: 32) syz_extract_tcp_res(&(0x7f0000000cc0), 0x5, 0x20) (async) syz_extract_tcp_res$synack(&(0x7f0000000d00), 0x1, 0x0) pread(r3, &(0x7f0000000d40)="63ccf82489b505c61c75542f4caa1d001b108ecc5e92ee4eb46493001b9cc13739ddf06fc3bae6676cb75ff4bcefd9c0a146235a95af423a2c9d9d412c01abbc4f15388f19352585bfe3ca1fe3c680c1", 0x50, 0x7fffffffffffffff) (async) setrlimit(0x0, &(0x7f0000000dc0)={0x0, 0x8}) (async) sendto(r2, &(0x7f0000000e00)="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", 0x1000, 0x403, &(0x7f0000001e00)=@in={0x2, 0x2}, 0xc) (async) r4 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000001e40), 0x80, 0x0) ioctl$WSDISPLAYIO_SVIDEO(r4, 0x80045745, &(0x7f0000001e80)=0x1) readv(r2, &(0x7f0000002240)=[{&(0x7f0000001ec0)=""/227, 0xe3}, {&(0x7f0000001fc0)=""/158, 0x9e}, {&(0x7f0000002080)=""/226, 0xe2}, {&(0x7f0000002180)=""/141, 0x8d}], 0x4) (async) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) (async) syz_open_pts() 435.638657ms ago: executing program 0 (id=873): sysctl$kern(0x0, 0x0, &(0x7f0000000140)="01ec59266a94f148c24001c50a1ad28fb5ed0ce0", &(0x7f0000000100)=0x14, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) chdir(&(0x7f00000001c0)='./file0\x00') setreuid(0xee00, 0x0) r0 = getuid() setreuid(0x0, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0x0}}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x4c, 0x3, {0x5, 0x4, 0x0, 0x7, 0x3, 0x67, 0xba5, 0x7, 0xc, 0xe8, @empty, @loopback}}}}}}) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file0\x00') 433.221407ms ago: executing program 5 (id=875): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcd, 0x2, 0x1, 0x440}, {0x83, 0x0, 0x4, 0x55be}, {0x6, 0x0, 0x0, 0x402}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="c528c0d631f9fd0000002987816c69980211b96eab36018086c3c051c795047df904ada614ba346c", 0x28}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="a612239dcd9ed59c784e64c23aa91b998595004704000d0000c5a76ee48e8080cb0ffda7000000b9ca71bad33a4a120a1d6efbab54ae4204957d00"/72, &(0x7f0000000080)=0x48, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[]) 432.870348ms ago: executing program 0 (id=876): r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00') (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4013, r0, 0xfffffffffffffffd) (async) unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='x\x00') 373.370361ms ago: executing program 5 (id=879): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f00000000c0)="b10005040000000000000000340000001a5113fecea10500fef96ecfc72fd3357a89583535673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc2feb3fda1139b672f4d3360223e7d026ba8af630037a840c4f2bd53eb067e7335a069d7ac434e0c0000000000008904000000000022830cf41bed66f40066ccdcf3e4999d9d20002002c5dbfad800000008e371a3f8340412051e00000000000002000000000000", 0xb1, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x95}, {0x9, 0x80000}}, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x8, 0x1}, {0x9, 0xb}}, 0x0) 251.845342ms ago: executing program 0 (id=880): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000240)={0x0, 0x219c, 0xffffffffffffffff}) (async) r1 = socket(0x2, 0x1, 0x0) (async) r2 = socket$inet(0x2, 0x3, 0x102) dup2(r2, r1) (async) bind(r1, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) recvmsg(r1, &(0x7f0000000580)={&(0x7f0000000040)=@un=@abs, 0x8, &(0x7f0000000480)=[{&(0x7f0000000080)=""/141, 0x8d}, {&(0x7f0000000140)=""/8, 0x8}, {&(0x7f0000000180)=""/137, 0x89}, {&(0x7f0000000280)=""/197, 0xc5}, {&(0x7f0000000380)=""/221, 0xdd}], 0x5, &(0x7f0000000500)=""/101, 0x65}, 0x1040) 251.525193ms ago: executing program 5 (id=881): open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvfrom$unix(0xffffffffffffff9c, &(0x7f0000000040)=""/71, 0x47, 0x800, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x3}, 0x8) r0 = socket(0x18, 0x3, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000000)) mknod(&(0x7f0000000000)='./file0\x00', 0xc000, 0xb) acct(&(0x7f0000000080)='./file0\x00') getsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000100), &(0x7f0000000140)=0x8) 251.312616ms ago: executing program 5 (id=882): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="c528c0d631f9fd0000002987816c69980211b96eab36018086c3c051", 0x1c}], 0x1) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) chmod(&(0x7f0000000040)='.\x00', 0x35e) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000300)="6f39c6", 0x3}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) pwrite(r1, &(0x7f0000000300)="611c", 0x2, 0x8001) setuid(0xee01) open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) open(&(0x7f0000000180)='./file0\x00', 0x800, 0x140) r2 = open(&(0x7f0000000300)='./file0\x00', 0x11, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000302010008, 0xffffffffffffffff}) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000380)="71f91e3471ac0058bc5ab2501ddc32bd720294a34b8e5f84cf71b59c7afec37082dc40cf765cb9c25e3e267c04", &(0x7f0000000080)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000000)={0x5, 0xe1f}) write(r0, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe) readv(0xffffffffffffffff, &(0x7f0000004480)=[{0x0}, {&(0x7f0000000840)=""/205, 0xc8}], 0x1000008c) 198.889744ms ago: executing program 2 (id=884): sysctl$machdep(&(0x7f0000000000), 0x2, &(0x7f0000000040)="f39530c205cb905b5b0292d3f06dea4bdafedcf251c5a7f56289c79d65bc41373433cb91d2b10e1313314fc4f80b7e8d398b99aafdbac1237803a6fa6afd38d63e2718c5e896ea22f1aed397d2b6791e4a606dfbbe9b4f60c30b24dc6d4722ae864e410c5632f3888242bb3c1e0cb8b9e65ff4c2eac7b27aaff821a986c952e5771cc47f8cec381c24c60c6bb66de255471f04ff72564220e8b6d7875bcb393e361b6798146beb5c7bdffe056e233416f9b9b4a6aaa2f6dec924a557ed592f32dd1f2e09ec031bf4e531a47df62064688d83e41aedfadd26869ba10841a9cdddc2016347918e9d0a51fa04cc27", &(0x7f0000000140)=0xed, &(0x7f0000000180)="f2e0617c1e05a911decd7899b9e90def7acff45f26e96ca6cc955a9d5875b529bd2a293ca4f433318a4dd1bb08cda878da5b784af78505bb43eabe353e9ef5aac8d1b7c24f4816fa376546816387e83e152388fff6144af23d09dbe83dfa87e9574e4c4f0bb860e290", 0x69) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x10, 0x2, 0x1}, {0xb1, 0x10, 0x2}, {0x16, 0x7, 0x7f, 0x400f}]}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="94c79bd261e1e88e83beb11c0a3e154df77b5335bd1667d9fd77c59297b3cad0ade427f63f2912518a179b7c207bc5ba040a20b5c36bfaca54e49900550bad2f165552f266a6b12d4900c56a22e814223e67a3fdf5ae19bcbb5d0a815015db8752d03d1b08f84b4976ec52d4a82598424ed3a6a523a3591db0e862a2f4dd1168cb17845fff1fb5df5535cae3e20e2bdb92138d0c1b0720e1c121ccb763f092cd5dcaa3d901", 0x2cfea}], 0x10000000000001fc) (async) munmap(&(0x7f000006f000/0x1000)=nil, 0x1000) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) sysctl$machdep(&(0x7f0000000200), 0x2, &(0x7f0000000380)="c5dc7e158561ee77bfdebaf8464b9d09fde1b696bc0b8ccf618c663a988095cdd65c72656fde675b656d8a681121262a557a373e8ddac3b7d4cddc6c7439c1308747d4b4340a89eeefa8472affc5dfcfb39266eece6d4a650c189296fb9d3bc7761a498aa1ec17750789a3504ee5e35efbb9e50201e063da3b03c1eccf4756315634044a03e90c82bb9ac533d3680638ad868a9d5ba97bd161f5b5a85ee9fffd758a742c8c460d65268fdd3da1da0e9e575be4905ad14dfd8783c41cbe438e1ea81202184feb43c0ed5e6a0f63a6abd63302e309e22aee1c19195417e067136274637239", &(0x7f0000000240)=0xe4, &(0x7f0000000280)="57fcb88f05626f836812e0aba47112f7d8c78c2f08d70a99acc54ab4dc7ed5632abe91a10931f60c8ac0467c4e5ba0158f85c750e3683c4cdd95b36d0fda56ed3d5d4a0289f944a0f1b2c9b9881d65b59c72c4bc5c99a468e6919944f646c123ac97b7a41feee9b95130ce9d07", 0x6d) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000a80)={'tap', 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="0000c3058ee2fd40d6f57fc3f2bac3d37622ab4ee9664e04b40229e02d33e9f7bf98850000000000", 0x28}], 0x1, 0x7fe) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0xfffffffffffffe55, 0x0}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60db83440008110000000000000000040000000000000000fe8000000000000000000000000000aa4e204e2200089078"]) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0x0}}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x4c, 0x3, {0x5, 0x4, 0x0, 0x7, 0x3, 0x67, 0xba5, 0x7, 0xc, 0xe8, @empty, @loopback}}}}}}) 198.707763ms ago: executing program 5 (id=885): sysctl$kern(&(0x7f00000000c0)={0x1, 0x55}, 0x2, &(0x7f00000003c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec370822aa2f0eb877f822d8c49c8353cf4652a4abb35e1c640b0702ad3d815b402a651ecd0545fcc30ff1939ac21a6c754ab5e5fa4ae80978135f85efe0a72105f556a16cdc5f4ff7a", &(0x7f0000000000)=0x62, 0x0, 0x0) 198.257739ms ago: executing program 5 (id=886): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x1, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x2) select(0x40, &(0x7f0000000000)={0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae}, &(0x7f0000000380)={0xffb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x3ff}, 0x0, 0x0) ioctl$FIONREAD(r0, 0xc0286988, &(0x7f00000001c0)) getsockname$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x8) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f00000001c0)="96e9cf1c159f0b69904fabf735bd3794417a80412b81b220a2be41ca6ac25ac05e6f4c00255c0d455207e927e31d9779cf74a3235ad6a486c14d95215a2c5949c27001423495646a237e42218e82abe737fd1465b1eadf1451fbfe796a18af62383165", 0x63}], 0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) execve(0x0, 0x0, 0x0) 38.754878ms ago: executing program 2 (id=887): syz_emit_ethernet(0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100120008060001010000000004ffffffffffffc85c3944277ba10fa10e4dabfbc4000000000000a393a00ed38c2f2f6aeb2e386de0639a"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x11, 0x3, 0x0) semget$private(0x0, 0x0, 0x23) getsockopt(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x18) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f00000002c0)={0x800e, 0xfffffffffffffffd}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000200)=[{{r3}, 0xfffffffffffffffe, 0x29, 0x80, 0x2, 0xc}, {{r3}, 0xfffffffffffffffe, 0x102, 0x10, 0x4, 0x8000000000000000}], 0x8, 0x0, 0x15, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000240)=[{0x6f0, 0x6, 0x0, 0x6}, {0x3, 0xfc, 0x8, 0x8}, {0x5, 0x40, 0x2, 0xfffff000}]}) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r6, &(0x7f0000000540)="eae0a3b07dd3220cc13fee1aeba1e1b7b6391465594b82abcffd9cd0e2e67cb9ceddd23a3185818bef0667ad427cf228f38d8890cf9b1549c1f480cd0c8198bfb73daf9dd926c8fd30e6af3a5607d45959db7ae4f5880b7549e361a74dbfc78d5116e89ee4c969d2eea404fcba3dfea4e4626625a8c1aa2ee67be188b3d9cd83458da9f58ad59df58d3eaa7db837193c8f", 0x91, 0xe, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0xa) pwritev(r2, 0x0, 0x0, 0x200800) sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="a612165d535a36729e519b6ef46dcae877db092ba08a89dbb5f7d8062fdf8896c42bc80e58b40100", &(0x7f0000000080)=0x28, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[]) socket(0x18, 0x2, 0x0) r7 = accept$unix(r0, &(0x7f00000004c0)=@file={0x0, ""/79}, &(0x7f00000001c0)=0x51) r8 = socket$inet(0x2, 0x4003, 0x0) setsockopt(r8, 0x0, 0x17, 0x0, 0xf9) mquery(&(0x7f00001dc000/0x1000)=nil, 0x1000, 0x0, 0x0, r7, 0x5) 38.416374ms ago: executing program 6 (id=864): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000002c0)={0x1, &(0x7f00000001c0)=[{0x8106, 0xd, 0xfe}]}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xc444443a, &(0x7f0000000000)={0x1, 0x22f, 0x5, 0x0, "09000000f1d1d25510000000000000001500", 0x0, 0x40004}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) syz_extract_tcp_res(&(0x7f0000000040), 0xa5e4, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendto$unix(0xffffffffffffffff, &(0x7f00000001c0)="b10004", 0x3, 0x40a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 38.116043ms ago: executing program 3 (id=871): syz_emit_ethernet(0xe9, &(0x7f0000000000)={@remote, @local, [], {@ipv4={0x800, {{0x21, 0x4, 0x2, 0x4, 0xdb, 0x66, 0x40, 0x4f, 0x3a, 0x0, @local={0xac, 0x14, 0x0}, @empty, {[@rr={0x7, 0x17, 0x5, [@loopback, @loopback, @empty, @rand_addr=0xe, @remote={0xac, 0x14, 0x0}]}, @ra={0x94, 0x6, 0xfffffffe}, @lsrr={0x83, 0x7, 0x4, [@local={0xac, 0x14, 0x0}]}, @noop, @ra={0x94, 0x6, 0x33}, @generic={0x0, 0xc, "2f9970c7251e69f2a8c1"}, @timestamp={0x44, 0x30, 0x2, 0x1, 0x2, [{[@rand_addr=0x400], 0x6}, {[], 0x6}, {[], 0xff}, {[@rand_addr=0x10000], 0x4}, {[], 0x5}, {[@multicast2], 0x1}, {[], 0x6}, {[], 0x80000001}]}, @noop, @ra={0x94, 0x6, 0x2}]}}, @generic="00fafac621ffa648137373dbb3e077aeaad75cd1172248b5733c1563b8c4e015eddfad8a732aa7e41fdac5d10870eab0636a25ff8de76f135fff8dcdf3881e494be5c628d2f57869da7fb1522c20991572b7c669b65ab3"}}}}) syz_emit_ethernet(0xc9, &(0x7f0000000100)={@broadcast, @random="77ad5cbb8b31", [], {@generic={0x6009, "af9d22e35d11f841eedb439e40ce421593c139767fe04896f527d88e26e140cd91f15dca4908aca6b6597aa955fb26997226d8a962a9659e5d88aab90d5ef0ca5588b5bad24cf82dd8a563f0dc497e6d784c6aaeaf6a1d353bbae702f39462ce6cb07f2ef5005b7710e37431c9862d34e5b1cc7ec70bdc448002391047cb049e9cbdef00580c220402e3f7cd8a541be235eae7f1e2de575e8356267c1c9a170e9f876e2828d12baa8c94b9b5aee7f237e9f636bc25e36488148b71"}}}) (async, rerun: 32) syz_extract_tcp_res(&(0x7f0000000200), 0xc7, 0x7) (rerun: 32) syz_emit_ethernet(0x3f, &(0x7f0000000240)={@broadcast, @local, [], {@arp={0x806, @generic={0xf, 0x86df, 0x6, 0xd, 0x2, @local, "3c26a056b004e0b3b9a689e328", @random="701a566a613c", "0a9cc8ac221d0341819524d050826d34"}}}}) (async, rerun: 64) syz_emit_ethernet(0x115, &(0x7f0000000280)={@empty, @remote, [{[{0x88a8, 0x1, 0x0, 0x3}], {0x8100, 0x7, 0x1, 0x3}}], {@ipv4={0x800, {{0x6, 0x4, 0x2, 0x7, 0xff, 0x66, 0x6, 0x91, 0x3, 0x0, @multicast2, @rand_addr=0x800, {[@timestamp={0x44, 0x4, 0x5, 0x1, 0xf}]}}, @generic="2503f8e9cd66ebe05dfb9d0e63e30e694ab5e4da8561bf259f554452d34614e3e3e9178e8eb335172666c8663654f231e939aac789d54060f02dc49c5f9d8d47d43a625a82ce8ee6c7dab3c02cf5c3c1987c0dc99d700c79d63313dc6cf3270c3248fe7e5a1f392ebaf8f7b82d547aeb8ec4fa4c2eb2b8ef0617055bdc3c84d0c8d2989bfe1ab3eb35fb6c5840ea8bb414b280e887e7ef0cb16b45883b7681fb1b9903d196fe3f5027dffe5e77cbe4028531e3d049ff0a1a319d483f21cfcbd4c395d627980c63dd36347f8d9b7c0dd3303ebcbba2c88d2997a56c13ea140464952210a75bea3f"}}}}) (rerun: 64) r0 = accept$inet(0xffffffffffffff9c, &(0x7f00000003c0), &(0x7f0000000400)=0xc) setsockopt(r0, 0x0, 0x9, &(0x7f0000000440)="02d8a87c1d4661e00413d2ef02274cc4618193867349d1275025c41eb55a62788d893d763d09a40dcd90bd82f57e011825d17690a6c979f4d378e66549f3", 0x3e) (async) syz_open_pts() (async) r1 = openat$klog(0xffffffffffffff9c, &(0x7f0000000480), 0x800, 0x0) ioctl$LIOCSFD(r1, 0x80046c7f, &(0x7f00000004c0)=r0) (async) syz_extract_tcp_res$synack(&(0x7f0000000500), 0x1, 0x0) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000580)={0x1, &(0x7f0000000540)=[{0x25, 0xa, 0x3, 0x7}]}) close(r1) (async) getsockopt(r0, 0x886, 0xff, &(0x7f00000005c0)=""/181, &(0x7f0000000680)=0xb5) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) pread(r2, &(0x7f0000000700)="0ae930b8f0df125812425a02b4beec21ad8526aa71e2a228f2da7555b7eb57db77cb7d7d33a195bc8fdc67176ff8ebdfd9a5090ebebc75bc9558482f5506b98118b8890010e6ad78c87e6746dc227a4ef69ebf9a77d2a258c928fa0193939d741ee731c2094f04d3c4ea9310a994b0b90ede145c0647f081cd17bb967d2e8fd988c90842e9ee222f9d4065108917f04542d9561189eea2994d09f2e13f0b8e1d5785f5e6587a1e5816e6", 0xaa, 0x200) setrlimit(0x3, &(0x7f00000007c0)={0x1, 0x9}) (async, rerun: 64) connect$inet(r0, &(0x7f0000000800)={0x2, 0x1}, 0xc) (async, rerun: 64) r3 = kqueue() (async, rerun: 32) syz_emit_ethernet(0x478, &(0x7f0000000840)={@local, @local, [{[], {0x8100, 0x1, 0x0, 0x4}}], {@ipv6={0x86dd, {0x4, 0x6, "8b0ec2", 0x43e, 0x3, 0x9, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x3, 0x2, 0x0, 0x0, 0x0, [@mcast2]}, @routing={0x2e, 0x2, 0x0, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x58d70a768854133d, 0x0, 0xb, 0x1, 0x0, 0xa, 0x66}, @fragment={0x4, 0x0, 0x5, 0x1, 0x0, 0x2, 0x68}, @dstopts={0x61, 0x3, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0xc9}, @enc_lim={0x4, 0x1, 0x3}, @pad1, @ra={0x5, 0x2, 0x3ff}, @pad1]}, @dstopts={0x6c, 0x22, '\x00', [@enc_lim={0x4, 0x1, 0xfc}, @ra={0x5, 0x2, 0xcd10}, @ra={0x5, 0x2, 0x4}, @generic={0x7, 0x4a, "d955ae2b6c362c1f41e3379a75cc56c65c8df147190d124efe9d950d3dc9449ca5ae39f80a1af9111352b57a8e8a34a88469c9bf395643d2154e95eaaea468560d8616341c0c12c6d050"}, @enc_lim, @generic={0x0, 0xb9, "044e5cfb3ffa09f5a8386a7c47cbaef669288cb3bb573fa4bbc910547f42a0cff540468176d905175db44967be9528da4520173c11fe3506586bc272d017c6dedf8f0d74942c00440f88ea0a5b9b99ad46ad19c4171fff3cf69af1d9e734b04a82b67003e338b010fa91f26657689db035aa63e1a04974ab29d3d9e7039e9deab3a9ee463201fefef8098c456c7cb7e92dbc3a4429f88baac567772ff032de00d157720fefa44dc834c30bd5c2f06e6f80b23bd74a3eb37494"}]}, @routing={0x50, 0x4, 0x0, 0x7e, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0xfffffffb}, @mcast1]}, @dstopts={0x6c, 0x16, '\x00', [@generic={0x10, 0xa1, "ecda7f82d17423cbb3070a2449df5ac35b906e40c02d57f9a7d42027fd4b1e55eda8c08aea664b9538322a0388562050e4c5bf6d7d4a31ae44d00662477b32a090043ce8da5a94d54d9857845abf7160a08951c866516be5193ad71b8e600720f1a0584186d4ff46220bf0f7fc80763a76682fe9d3381a1f8869812025bb08a806095b4510e44d55d6a2b1c560c4b08772cd26509bc2e2293213e5968577e4b57e"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x1}]}, @hopopts={0x62, 0x0, '\x00', [@generic={0x7}]}], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x5f1b, {0xe, 0x6, "2fc18e", 0x3, 0x67, 0x7, @rand_addr="4bf7a4ac533fb15ab3d3e303357bf337", @remote={0xfe, 0x80, '\x00', 0x0}, [@dstopts={0x4, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xf}]}, @routing={0x89, 0xc, 0x0, 0x0, 0x0, [@rand_addr="2fd11c3dba30adb40969af634e6b8c9c", @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, @rand_addr="8d028d881d8de1b1c2d986804b3815d7", @loopback, @ipv4={'\x00', '\xff\xff', @loopback}]}, @hopopts={0x0, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x39}, @jumbo]}], "9f0cd1aec82dd5bff58b38f631bc5ef2fc4d57e42e5430585a86a46613fdb51b8a600aa9fb4bdd7179707225920ca297665418788a4e48bc645e48ff00d9f5a2d4194381baa10b32fd4cd23eae4f0c4ae7c73bbfdca68f20c77ceb0d170d3013e16f1258296b1f78c5703ca2c73962a25efe853454e1cde2b4cc0b2ea1e116a1935b135208f93a2e12fa3f57a8909baa6098b71fa8054b2245499af72077863a4250f89d878cf27baef43581dc3dbca4f1e9360ec65ab3612049c4f240351372d7999b4e9e5bcc35ec31fd6bd8223aa7de2d29a02e674440faa202e020caf839ca7df8ad2113da4304ac545563887cf12b625b74efbcd60c6959149e583d"}}}}}}}) (async, rerun: 32) syz_extract_tcp_res(&(0x7f0000000cc0), 0x5, 0x20) (async) syz_extract_tcp_res$synack(&(0x7f0000000d00), 0x1, 0x0) pread(r3, &(0x7f0000000d40)="63ccf82489b505c61c75542f4caa1d001b108ecc5e92ee4eb46493001b9cc13739ddf06fc3bae6676cb75ff4bcefd9c0a146235a95af423a2c9d9d412c01abbc4f15388f19352585bfe3ca1fe3c680c1", 0x50, 0x7fffffffffffffff) (async) setrlimit(0x0, &(0x7f0000000dc0)={0x0, 0x8}) (async) sendto(r2, &(0x7f0000000e00)="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", 0x1000, 0x403, &(0x7f0000001e00)=@in={0x2, 0x2}, 0xc) (async) r4 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000001e40), 0x80, 0x0) ioctl$WSDISPLAYIO_SVIDEO(r4, 0x80045745, &(0x7f0000001e80)=0x1) readv(r2, &(0x7f0000002240)=[{&(0x7f0000001ec0)=""/227, 0xe3}, {&(0x7f0000001fc0)=""/158, 0x9e}, {&(0x7f0000002080)=""/226, 0xe2}, {&(0x7f0000002180)=""/141, 0x8d}], 0x4) (async) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) (async) syz_open_pts() 38.047409ms ago: executing program 2 (id=888): setuid(0xffffffffffffffff) r0 = syz_open_pts() syz_open_pts() fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1000300000000}) 37.795455ms ago: executing program 2 (id=889): r0 = kqueue() r1 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4) kevent(r0, &(0x7f0000000080)=[{{r0}, 0xfffffffffffffffd, 0x44, 0xf0000000, 0x5}, {{r1}, 0xffffffffffffffff, 0x60, 0x2, 0x954, 0xffffffff}, {{r0}, 0xfffffffffffffffb, 0x61, 0x2, 0x93, 0x9}], 0x6, &(0x7f00000001c0), 0x18, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$WSKBDIO_SETKEYREPEAT(r3, 0x800c5707, &(0x7f0000000040)={0x0, 0x800, 0x9}) r4 = socket(0x2, 0x2, 0x0) r5 = socket(0x10, 0x1, 0x0) ioctl$FIONREAD(r5, 0xc0206921, &(0x7f00000001c0)) r6 = semget(0x2, 0x4, 0x3b2) semop(r6, &(0x7f0000000640)=[{0x2, 0x0, 0x1800}, {0x0, 0x6e1, 0x1800}], 0x2) setreuid(0x0, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000200)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d357e382526b1573271aeabc1b7", 0x23}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r2, 0x4) r7 = socket(0x18, 0x2, 0x0) sendmsg$unix(r7, &(0x7f0000000040)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11"], 0x20, 0x2}, 0x6) ioctl$FIONREAD(r4, 0x8040691a, &(0x7f00000001c0)) r8 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) recvmmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/90, 0x5a}], 0x1, 0x0}}, 0x10, 0x0, 0x0) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./bus\x00', 0x8001, 0x0}) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x8) preadv(r9, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) ioctl$TIOCFLUSH(r8, 0x80047476, &(0x7f00000003c0)) close(r8) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000000080)="02f2b151", 0x4) bind$unix(r5, &(0x7f0000000000)=@abs={0x1, 0x0, 0x2}, 0x8) 37.098091ms ago: executing program 2 (id=890): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000000040), 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000d40)="4f6c6ef37429", 0x6}, {&(0x7f0000000d80)="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", 0x361}], 0x2) execve(0x0, 0x0, 0x0) sysctl$hw(&(0x7f0000000140)={0x6, 0xc}, 0x2, 0x0, 0x0, &(0x7f0000000040)="3181568f84d44943d93cbf6579c2c872d2d8415bc54c9cd22de3ab331c03dddf71cc8f93eadb91753d83139b3fdf3c172cda3b1be82989f089ab94592e9a864c163647ebe3a759958824f3ca10bbd1c227eae64e03e2cceb6f0325fd6c11d7dc646ffb2950594bfdf6059450b5d51f5e52ca7617807fd2594a6a99e488334220dd38ee7fd15baa399b3e1aacf6f0e609cd61a7f82a112ded0018b8cdb2c9cf342a61d9af256a6104f4cbc49aa51715522bb556cad91995fd773157ffca42bd863ea31a7d1f28256ae2b8b4ab8930c9d8767458ff315a116d1e4becfb4a61e467abbfe884d84fcb", 0xe7) sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x2, 0x102, 0x2}, 0x4, &(0x7f0000000180)="e85ef1ea952b87ce9929e1114e9b58bd7c893d91fd2f1000d6418128ba49d99b8580d065fc009c1feac2eb83163f1e568b9c48b52b0b67af50c53eea923459d6ba5265f911a6d0d6c108bd64361a45e0c4df2f80003925e310fb3f3698d5c4bc2241daebdceaa1dc8848e17e065423fdc33890fa08f5a7b2df15053c5af5665e374dddf77717770a05392c1766c2f41ae89e7b2d5eb3f77a0c6139bee77e529fa4496f445eb73b2e6a2ef0efe8796a85b892c434f90d66642203ad88c26e1b68550f27647155a4da6ef2e62182185de02910590982baa71b60f79dfa6683340e94e8ef60d9e6f67021229384e533", &(0x7f0000000280)=0x99, &(0x7f00000002c0)="edca85a719c3143cdc639b1b36346453a5be5f4793c0fde2cd31f922c9d5d64f0121e5cb0208965a99d8264bf1d836842ab7a0c70c1e55c10e0d9641f4e75cacf05368d0c10a181c4441139a14679a64d9071aa4ce3022239e7f455780f5a9e836112d2ea9adb632d44df720f5d7550263421b9593547e9648556ce0c0a764fbd700abfd4089574cf48d885515d4770208b0028a3584de1ff5425486d0a1791f7767e801c265d1c4fbb53b598c05d6ba61", 0xb1) 9.774832ms ago: executing program 6 (id=891): execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r0 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "00f7bf", 0x14, 0x29, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @rand_addr="00fe000001000800001a000000000004", {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x8002, 0x0, 0x7ffe}}}}}}}) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501", 0x4, 0x402, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x18, 0x3, 0x0) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r2, 0x80206997, &(0x7f0000000100)) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000000)) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r4 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r4, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r4, 0x3}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ktrace(&(0x7f0000000140)='./file0\x00', 0x0, 0x1430, 0x0) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) (async) socket(0x1, 0x2, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "00f7bf", 0x14, 0x29, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @rand_addr="00fe000001000800001a000000000004", {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x8002, 0x0, 0x7ffe}}}}}}}) (async) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501", 0x4, 0x402, 0x0, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) socket(0x18, 0x3, 0x0) (async) socket(0x1, 0x2, 0x0) (async) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r2, 0x80206997, &(0x7f0000000100)) (async) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000000)) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) (async) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) (async) ioctl$DIOCMAP(r4, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r4, 0x3}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ktrace(&(0x7f0000000140)='./file0\x00', 0x0, 0x1430, 0x0) (async) 425.112µs ago: executing program 3 (id=892): sendto$unix(0xffffffffffffffff, &(0x7f0000000080)="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", 0x171, 0x0, 0x0, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x11, 0x1, &(0x7f00000000c0)="2752e800", 0x4) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) (async) r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f0000000000)) 0s ago: executing program 2 (id=893): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)=""/34, 0x22}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f00000000c0)=""/8, 0x8}, {&(0x7f0000000380)=""/123, 0x7b}, {&(0x7f0000000480)=""/111, 0x6f}], 0x6, 0x8001) r0 = syz_open_pts() unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet(0x2, 0x5, 0x7) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)="ea000001", 0x4) close(r0) r2 = syz_open_pts() syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="69e1629b6174aaaaaaaaaabb86dd606b9efb00085000cb69bc83c1987a653e2c6f0000000000ff0200000000000000000000002d00014e204e2300089078"]) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) fsync(r0) semget$private(0x0, 0x3, 0x34) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x38e, 0x1, 0x7, 0x4, "34db406df13a486700000000000000ce00", 0x9, 0x1ff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0xffff, 0x8, &(0x7f00000000c0)=0x7, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = shmget$private(0x0, 0x3000, 0x20f, &(0x7f0000ffa000/0x3000)=nil) shmat(r4, &(0x7f0000001000/0x3000)=nil, 0x96dba8100d9a48bd) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000000)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0x10011, 0x0, 0x0) msync(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x5) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="43e3b09bbefe27bfe597055906aaed83e5e2a8e30d64ba1b62ae65cd7c2e96b8fbb5c608d67bba", 0x27}], 0x1) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r5 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r5, 0xc0206983, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCCONS(r2, 0x80047462, &(0x7f00000001c0)=0xeec) read(r2, &(0x7f0000000200)=""/243, 0xf3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts. pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 malloc(): allocation too large, type = 6, size = 73015894016 *_Lٷ<1)֎`^Y@tN8 gBoyI$~U/ s9~nx=@s܎T2 pPtp)Z6>=(6Dro[,UY5 nB wi0eIg%,k+P^Gy`|$ܼS.v1.V 9KxB\9cw8?{9<ؒBc}e)C>uCnx㱥JF4eq7j3*iOSsn@R8}3 V&Pڵk} 3>m~ԑby0ݤno-Y9-WS0"wL P4fYdд[Uem~w`}IXčڈS>u`ghE.8hNRM6:EJ x6VZѹ"chezR8QB̃.F&jUףl}8wa/#R C:ˮ=/8}zwH`el;ҧP5E6l>+هo2$uQLAҎN(`kk'Xk = $8qpcq{V}>9CS%t>{uA2S|r]Grpj+lWD&3 dyj rPzicnj|,W沭xb`#ޔ(F}u6jKF~G/_ F+k>)I =HL}wMV+= ,0eǮAS/2 Ϫ`y3QLɁ_,o/U]NVѾː5l{Hڔ]u:H/NKEhkFQaĭn?,! AL˞h Cd,U' _jKLR:X?U|tͤ8C\]bcV^Ȫee (~JVL:%LE(ŚX@SܲvtA[`p=H8rDc`E3OQ`}ׂFFzk%l.<_M7ht?we#s3]= entry->start" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_fault.c", line 1739 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 44676 83785 0 0 0 0 syz-executor *132488 83785 0 0 0x4000000 1K syz-executor db_enter() at db_enter+0x25 panic(ffffffff83441226) at panic+0x1e5 __assert(ffffffff833eb2b9,ffffffff8337ea02,6cb,ffffffff83338c86) at __assert+0x29 uvm_fault_unwire_locked(fffffd806beca1e0,400000000000,400000011000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_unwire(fffffd806beca1e0,400000000000,400000011000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(49,ffff80003c503698,4,400000000100,ffff80003c5036c8,0,aa86f42a78bb55fa,4) at kern_sysctl_dirs+0x363 kern_sysctl(ffff80003c503694,5,400000000100,ffff80003c5036c8,0,37,85e73986c11aaec4) at kern_sysctl+0x12d sys_sysctl(ffff8000ffff7210,ffff80003c503800,ffff80003c503750) at sys_sysctl+0x425 syscall(ffff80003c503800) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x3d886ee2b0, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "va >= entry->start" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_fault.c", line 1739 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff83441226) at panic+0x1e5 __assert(ffffffff833eb2b9,ffffffff8337ea02,6cb,ffffffff83338c86) at __assert+0x29 uvm_fault_unwire_locked(fffffd806beca1e0,400000000000,400000011000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_unwire(fffffd806beca1e0,400000000000,400000011000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(49,ffff80003c503698,4,400000000100,ffff80003c5036c8,0,aa86f42a78bb55fa,4) at kern_sysctl_dirs+0x363 kern_sysctl(ffff80003c503694,5,400000000100,ffff80003c5036c8,0,37,85e73986c11aaec4) at kern_sysctl+0x12d sys_sysctl(ffff8000ffff7210,ffff80003c503800,ffff80003c503750) at sys_sysctl+0x425 syscall(ffff80003c503800) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x3d886ee2b0, count: -10 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c503270 rbx 0xffff800029a9cdc7 rdx 0 rcx 0xffff8000ffff7210 rax 0xffff800029a9bff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xbf31ed6c26b6f29d r11 0x5de91553b42995d3 r12 0xffff800029a9cbc8 r13 0 r14 0 r15 0x1 rip 0xffffffff81a8dbe5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c503260 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=132488 pid=83785 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffff6f80,0xffff8000ffff7c60 process=0xffff80003c5b84c0 user=0xffff80003c4fe000, vmspace=0xfffffd806beca1e0 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 75335 473952 26364 0 2 0 syz-executor 75335 222861 26364 0 3 0x4000080 fsleep syz-executor 83785 44676 43828 0 7 0 syz-executor 83785 138305 43828 0 3 0x4000080 fsleep syz-executor *83785 132488 43828 0 7 0x4000000 syz-executor 83785 377064 43828 0 2 0x4000000 syz-executor 46660 402667 29504 0 2 0 syz-executor 46660 2258 29504 0 2 0x4000000 syz-executor 85704 467926 0 0 3 0x14280 nfsidl nfsio 25512 215994 0 0 3 0x14280 nfsidl nfsio 47532 204847 0 0 3 0x14280 nfsidl nfsio 8078 504236 0 0 3 0x14280 nfsidl nfsio 4647 384132 0 0 3 0x14280 nfsidl nfsio 97697 148576 0 0 3 0x14280 nfsidl nfsio 7052 232787 0 0 3 0x14280 nfsidl nfsio 13864 521026 0 0 3 0x14280 nfsidl nfsio 51036 316272 0 0 3 0x14280 nfsidl nfsio 98473 245705 0 0 3 0x14280 nfsidl nfsio 85782 330914 0 0 3 0x14280 nfsidl nfsio 20158 254931 0 0 3 0x14280 nfsidl nfsio 94667 291477 0 0 3 0x14280 nfsidl nfsio 41469 347957 0 0 3 0x14280 nfsidl nfsio 96411 506519 0 0 3 0x14280 nfsidl nfsio 79880 145327 0 0 3 0x14280 nfsidl nfsio 74613 400247 0 0 3 0x14280 nfsidl nfsio 23189 214160 0 0 3 0x14280 nfsidl nfsio 91200 27831 0 0 3 0x14280 nfsidl nfsio 47686 442030 0 0 3 0x14280 nfsidl nfsio 40772 298247 24328 0 3 0x80 nanoslp syz-executor 40772 97127 24328 0 3 0x4000080 sbwait syz-executor 43828 23453 74534 0 3 0x82 nanoslp syz-executor 29504 315620 74534 0 3 0x82 nanoslp syz-executor 22271 459417 27792 0 3 0x80 nanoslp syz-executor 22271 102428 27792 0 3 0x4000080 pipewr syz-executor 22271 497478 27792 0 3 0x4000080 fsleep syz-executor 43481 167316 74534 0 3 0x82 piperd syz-executor 30611 447512 0 0 3 0x14200 acct acct 93922 9598 0 0 3 0x14200 bored sosplice 33493 399900 74534 0 3 0x82 wait syz-executor 7425 430774 74534 0 3 0x82 nanoslp syz-executor 26364 200584 74534 0 3 0x82 nanoslp syz-executor 27792 126555 74534 0 3 0x82 nanoslp syz-executor 24328 462613 74534 0 3 0x82 nanoslp syz-executor 74534 276887 49259 0 2 0x2 syz-executor 49259 184602 77941 0 3 0x10008a sigsusp ksh 77941 198285 4860 0 3 0x98 kqread sshd-session 4860 237470 66442 0 3 0x92 kqread sshd-session 10403 197393 1 0 3 0x100083 ttyopn getty 66442 220020 1 0 3 0x88 kqread sshd 10814 4184 68961 74 3 0x1100092 bpf pflogd 68961 430732 1 0 3 0x80 sbwait pflogd 12481 193691 73306 73 3 0x1100090 kqread syslogd 73306 54745 1 0 3 0x100082 sbwait syslogd 54949 443816 1 0 3 0x100080 kqread resolvd 54639 24023 15376 77 3 0x100092 kqread dhcpleased 78711 94124 15376 77 3 0x100092 kqread dhcpleased 15376 54971 1 0 3 0x80 kqread dhcpleased 57471 459404 0 0 3 0x14200 bored smr 2665 29803 0 0 2 0x14200 zerothread 7538 197400 0 0 3 0x14200 aiodoned aiodoned 27864 461740 0 0 3 0x14200 syncer update 91739 76117 0 0 3 0x14200 cleaner cleaner 50968 521114 0 0 3 0x14200 reaper reaper 44392 483614 0 0 3 0x14200 pgdaemon pagedaemon 77469 405629 0 0 3 0x14200 bored viomb 16250 445624 0 0 3 0x40014200 acpi0 acpi0 46146 324322 0 0 3 0x40014200 idle1 34872 204338 0 0 3 0x14200 bored softnet3 51270 492656 0 0 3 0x14200 bored softnet2 99779 182029 0 0 3 0x14200 bored softnet1 95555 403226 0 0 3 0x14200 bored softnet0 72364 105462 0 0 3 0x14200 bored systqmp 5323 524078 0 0 3 0x14200 bored systq 18487 168826 0 0 3 0x14200 tmoslp softclockmp 17514 182551 0 0 3 0x40014200 tmoslp softclock 21464 104870 0 0 3 0x40014200 idle0 1 356244 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 83785 (syz-executor) thread 0xffff8000ffff7210 (132488) exclusive rwlock amaplk r = 0 (0xfffffd800c5488e0) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 uvm_map_lock_entry+0x51 #3 uvm_fault_unwire_locked+0x253 #4 uvm_fault_unwire+0x55 #5 kern_sysctl_dirs+0x363 #6 kern_sysctl+0x12d #7 sys_sysctl+0x425 #8 syscall+0xbc6 #9 Xsyscall+0x128 shared rwlock vmmaplk r = 0 (0xfffffd806beca2e0) #0 witness_lock+0x5bb #1 rw_do_enter_read+0x3af #2 uvm_fault_unwire+0x3e #3 kern_sysctl_dirs+0x363 #4 kern_sysctl+0x12d #5 sys_sysctl+0x425 #6 syscall+0xbc6 #7 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8395d9a8) #0 witness_lock+0x5bb #1 __mp_acquire_count+0x58 #2 mi_switch+0x4b7 #3 sleep_finish+0x24f #4 rw_do_enter_write+0x1de #5 vm_map_lock_ln+0x12e #6 uvmfault_lookup+0xe8 #7 uvm_fault_check+0x987 #8 uvm_fault+0x106 #9 uvm_fault_wire+0x73 #10 sysctl_vslock+0x109 #11 kern_sysctl_dirs+0x266 #12 kern_sysctl+0x12d #13 sys_sysctl+0x425 #14 syscall+0xbc6 #15 Xsyscall+0x128 exclusive rwlock sysctllk r = 0 (0xffffffff83818578) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 sysctl_vslock+0x45 #3 kern_sysctl_dirs+0x266 #4 kern_sysctl+0x12d #5 sys_sysctl+0x425 #6 syscall+0xbc6 #7 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10212 11051K 11288K 166960K 12188 0 pcb 17 17K 19K 166960K 290 0 rtable 227 8K 8K 166960K 537 0 pf 34 17K 19K 166960K 102 0 ifaddr 42 7K 8K 166960K 86 0 ifgroup 55 2K 2K 166960K 139 0 sysctl 2 1K 2K 166960K 3 0 counters 64 36K 37K 166960K 138 0 ioctlops 0 0K 4K 166960K 1635 0 iov 0 0K 12K 166960K 42 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1391 87K 88K 166960K 2066 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 5K 166960K 23 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 49 0 dirhash 12 2K 2K 166960K 36 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 93K 166960K 1071 0 sigio 0 0K 0K 166960K 23 0 proc 72 91K 128K 166960K 739 0 subproc 72 4K 4K 166960K 101 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 98 0 in_multi 96 7K 7K 166960K 159 0 ether_multi 1 0K 0K 166960K 4 0 mrt 1 0K 0K 166960K 5 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 97 440K 440K 166960K 97 0 exec 0 0K 1K 166960K 563 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 224 73K 86K 166960K 11375 0 UVM aobj 33 4K 4K 166960K 38 0 pinsyscall 42 84K 106K 166960K 2257 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 48 0 NDP 16 0K 2K 166960K 56 0 temp 75 8692K 8758K 166960K 27993 0 kqueue 13 20K 30K 166960K 169 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 199 0 195 3 0 3 3 0 8 2 rtentry 160 164 0 63 5 0 5 5 0 8 0 unpcb 144 862 0 845 6 2 4 6 0 8 3 syncache 336 3 0 3 1 1 0 1 0 8 0 tcpcb 808 354 0 349 7 1 6 7 0 8 5 arp 120 28 0 7 1 0 1 1 0 8 0 inpcb 376 1450 0 1407 15 6 9 12 0 8 4 nd6 136 40 0 15 1 0 1 1 0 8 0 pkpcb 40 16 0 16 2 1 1 1 0 8 1 kcovpl 48 11 0 3 1 0 1 1 0 8 0 ppxss 1168 21 0 21 1 0 1 1 0 8 1 pppxif 1480 7 0 7 2 2 0 1 0 8 0 pffrag 232 7 0 1 1 0 1 1 0 482 0 pffrnode 88 7 0 1 1 0 1 1 0 8 0 pffrent 40 11 0 5 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 85 0 20 1 0 1 1 0 8 0 pfstkey 128 85 0 20 3 0 3 3 0 8 0 pfstate 376 85 0 20 7 0 7 7 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 656 0 229 29 1 28 29 0 8 1 art_table 32 657 0 229 4 0 4 4 0 8 0 art_node 16 160 0 71 1 0 1 1 0 8 0 sysvmsgpl 40 19 0 8 1 0 1 1 0 8 0 semupl 112 2 0 2 1 1 0 1 0 8 0 semapl 112 46 0 36 1 0 1 1 0 8 0 shmpl 112 35 0 5 1 0 1 1 0 8 0 dirhash 1024 34 0 17 3 0 3 3 0 8 0 dino2pl 256 3230 0 1725 95 0 95 95 0 8 0 ffsino 280 3230 0 1725 109 0 109 109 0 8 0 nchpl 144 4765 0 3071 64 0 64 64 0 8 0 rtmask 32 5 0 5 2 1 1 1 0 8 1 uvmvnodes 80 3714 0 0 76 0 76 76 0 8 0 vnodes 216 3714 0 0 207 0 207 207 0 8 0 namei 1024 16226 0 16226 2 1 1 2 0 8 1 percpumem 16 83 0 37 1 0 1 1 0 8 0 kstatmem 264 68 0 44 4 1 3 3 0 8 0 scsiplug 72 6 0 6 2 1 1 1 0 8 1 scxspl 216 14430 0 14430 11 9 2 7 1 8 2 plimitpl 152 267 0 249 1 0 1 1 0 8 0 sigapl 424 1396 0 1325 10 1 9 9 0 8 0 futexpl 64 13140 0 13137 1 0 1 1 0 8 0 knotepl 120 567 0 0 18 0 18 18 0 8 0 kqueuepl 216 408 0 399 7 6 1 5 0 8 0 pipepl 328 276 0 248 3 0 3 3 0 8 0 fdescpl 504 1354 0 1323 5 0 5 5 0 8 0 filepl 152 8552 0 8299 19 4 15 19 0 8 5 lockfpl 104 356 0 354 2 1 1 2 0 8 0 lockfspl 48 159 0 157 1 0 1 1 0 8 0 sessionpl 144 25 0 16 1 0 1 1 0 8 0 pgrppl 48 46 0 29 1 0 1 1 0 8 0 ucredpl 104 1422 0 1409 1 0 1 1 0 8 0 zombiepl 144 1327 0 1325 1 0 1 1 0 8 0 processpl 1176 1396 0 1325 6 0 6 6 0 8 0 procpl 656 2930 0 2851 8 1 7 7 0 8 0 srpgc 96 6 0 6 3 2 1 1 0 8 1 sosppl 168 8 0 8 2 2 0 1 0 8 0 sockpl 688 2546 0 2483 30 19 11 25 0 8 5 mcl64k 65536 9 0 0 2 0 2 2 0 8 0 mcl16k 16384 12 0 0 2 0 2 2 0 8 0 mcl12k 12288 4 0 0 1 0 1 1 0 8 0 mcl9k 9216 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 8 0 0 1 0 1 1 0 8 0 mcl4k 4096 118 0 0 15 0 15 15 0 8 0 mcl2k 2048 23 0 0 3 0 3 3 0 8 0 mtagpl 96 32 0 0 1 0 1 1 0 8 0 mbufpl 256 232 0 0 14 0 14 14 0 8 0 bufpl 280 5361 0 134 374 0 374 374 0 8 0 anonpl 24 200258 0 196428 59 13 46 50 0 184 16 amapchunkpl 152 36508 0 36017 26 3 23 26 0 158 1 amappl16 200 4039 0 4006 27 19 8 15 0 8 5 amappl15 192 5 0 5 1 1 0 1 0 8 0 amappl14 184 131 0 119 1 0 1 1 0 8 0 amappl13 176 5 0 5 1 1 0 1 0 8 0 amappl12 168 2074 0 2043 3 1 2 2 0 8 0 amappl11 160 51 0 37 1 0 1 1 0 8 0 amappl10 152 4 0 4 1 1 0 1 0 8 0 amappl9 144 249 0 249 1 1 0 1 0 8 0 amappl8 136 33 0 30 1 0 1 1 0 8 0 amappl7 128 127 0 115 1 0 1 1 0 8 0 amappl6 120 214 0 211 1 0 1 1 0 8 0 amappl5 112 140 0 130 1 0 1 1 0 8 0 amappl4 104 336 0 316 1 0 1 1 0 8 0 amappl3 96 7388 0 7278 4 0 4 4 0 8 0 amappl2 88 695 0 632 2 0 2 2 0 8 0 amappl1 80 10854 0 10286 15 2 13 14 0 8 0 amappl 88 10922 0 10756 5 0 5 5 0 92 0 dma8192 8192 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 256 0 256 4 3 1 1 0 8 1 dma64 64 7 0 7 2 2 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 37 0 5 1 0 1 1 0 8 0 uaddrrnd 24 1354 0 1323 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1354 0 1323 1 0 1 1 0 8 0 vmmpekpl 168 12187 0 12129 3 0 3 3 0 8 0 vmmpepl 168 86500 0 84644 102 10 92 96 0 357 7 vmsppl 456 1353 0 1323 6 1 5 5 0 8 0 rwobjpl 64 28233 0 23562 77 0 77 77 0 8 0 pdppl 4096 2716 0 2646 108 32 76 86 0 8 6 pvpl 32 16524 0 0 135 1 134 134 0 265 0 pmappl 248 1353 0 1323 3 0 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 295 0 41 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837f6ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff8395d7a0) at __mp_lock+0x1a3 softintr_dispatch(0) at softintr_dispatch+0x5b Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x754dd3df6510, count: 8 ddb{0}> trace x86_ipi_db(ffffffff837f6ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff8395d7a0) at __mp_lock+0x1a3 softintr_dispatch(0) at softintr_dispatch+0x5b Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x754dd3df6510, count: -7 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff83441226) at panic+0x1e5 __assert(ffffffff833eb2b9,ffffffff8337ea02,6cb,ffffffff83338c86) at __assert+0x29 uvm_fault_unwire_locked(fffffd806beca1e0,400000000000,400000011000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_unwire(fffffd806beca1e0,400000000000,400000011000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(49,ffff80003c503698,4,400000000100,ffff80003c5036c8,0,aa86f42a78bb55fa,4) at kern_sysctl_dirs+0x363 kern_sysctl(ffff80003c503694,5,400000000100,ffff80003c5036c8,0,37,85e73986c11aaec4) at kern_sysctl+0x12d sys_sysctl(ffff8000ffff7210,ffff80003c503800,ffff80003c503750) at sys_sysctl+0x425 syscall(ffff80003c503800) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x3d886ee2b0, count: 5 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff83441226) at panic+0x1e5 __assert(ffffffff833eb2b9,ffffffff8337ea02,6cb,ffffffff83338c86) at __assert+0x29 uvm_fault_unwire_locked(fffffd806beca1e0,400000000000,400000011000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_unwire(fffffd806beca1e0,400000000000,400000011000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(49,ffff80003c503698,4,400000000100,ffff80003c5036c8,0,aa86f42a78bb55fa,4) at kern_sysctl_dirs+0x363 kern_sysctl(ffff80003c503694,5,400000000100,ffff80003c5036c8,0,37,85e73986c11aaec4) at kern_sysctl+0x12d sys_sysctl(ffff8000ffff7210,ffff80003c503800,ffff80003c503750) at sys_sysctl+0x425 syscall(ffff80003c503800) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x3d886ee2b0, count: -10