last executing test programs: 332.22233ms ago: executing program 6 (id=7): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x200) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0xe02) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x89) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x80) 158.743151ms ago: executing program 6 (id=9): r0 = socket$inet(0x2, 0x2, 0x2) setsockopt(r0, 0x10001, 0x80000001, &(0x7f0000000100)="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", 0xfe) setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) ioctl$FIONREAD(r0, 0xc0287533, &(0x7f0000000200)) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, 0x0, 0x0) 158.069395ms ago: executing program 6 (id=10): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0xfffffffc, {0xff, 0x2}}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async, rerun: 32) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) (rerun: 32) r2 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r2, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) mkdir(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x51) (async, rerun: 32) open(0x0, 0x0, 0x0) (async, rerun: 32) unveil(0x0, &(0x7f0000000140)='c\x00') (async) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$VMM_IOC_READREGS(r3, 0xc2485607, &(0x7f0000000040)) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffff0c0, 0x4, 0x4, 0x4, 0x5, 0x1ff, 0x44, 0x80}, &(0x7f00000001c0)={0x7, 0x5, 0x1, 0x0, 0x584, 0x2, 0xee, 0x80000001}, &(0x7f0000000200)={0x5, 0x2, 0x7fffffff, 0x7, 0x8000000000000001, 0x6, 0x5, 0x6}, &(0x7f0000000240)={0x8, 0x9}) (async) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) execve(0x0, &(0x7f0000000000)=[&(0x7f0000000100)='///'], 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x49) 157.67967ms ago: executing program 6 (id=11): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) r1 = socket(0x18, 0x2, 0x0) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r2 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x2, 0x1, 0x34, 0x64, 0x3, 0x6, 0x70, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0xb, 0x1e, [@local={0xac, 0x14, 0x0}, @loopback]}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x8, 0x3fc, 0x1, 0x9}}}}}) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$FIONREAD(r1, 0xc0406938, &(0x7f00000001c0)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) writev(r0, &(0x7f0000000840)=[{0x0, 0xe}], 0x1) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) select(0x40, &(0x7f0000000140)={0x7fff, 0x8000, 0x2, 0x3, 0x7, 0x4, 0x6, 0x2}, &(0x7f0000000240)={0x401, 0x4000000, 0x9, 0x7, 0xc, 0xfffffffffffffff8, 0x8, 0x4}, &(0x7f0000000280)={0x80000000, 0xffffffffffffffff, 0x3207fcf6, 0x1, 0x0, 0x4, 0x3, 0x10001}, &(0x7f00000002c0)={0xa, 0x3}) readlinkat(r4, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/42, 0x2a) 152.65091ms ago: executing program 0 (id=1): mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f0000000040)={0x10, 0x3, [{&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x9}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x10001}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x9}, {&(0x7f0000ff4000/0xc000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x34a40b9f}, {&(0x7f00005ed000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4}, {&(0x7f0000d22000/0x1000)=nil, &(0x7f000050e000/0x3000)=nil, 0x5}, {&(0x7f000043f000/0x1000)=nil, &(0x7f0000623000/0x3000)=nil}, {&(0x7f0000988000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x8e}, {&(0x7f000093d000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x3}, {&(0x7f000053b000/0x4000)=nil, &(0x7f0000fd2000/0xf000)=nil, 0xd7}, {&(0x7f0000895000/0x1000)=nil, &(0x7f0000c39000/0x7000)=nil, 0x3772}, {&(0x7f0000d84000/0x4000)=nil, &(0x7f0000806000/0x2000)=nil, 0x9}, {&(0x7f0000b8d000/0x1000)=nil, &(0x7f0000735000/0x4000)=nil, 0x7}, {&(0x7f0000fac000/0x2000)=nil, &(0x7f0000930000/0x3000)=nil, 0x8}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000bd3000/0x1000)=nil, 0x8}], './file0\x00', 0x1}) (async) r1 = shmget(0x2, 0x2000, 0x484, &(0x7f00006b2000/0x2000)=nil) chmod(&(0x7f0000000240)='./file0\x00', 0x10) (async) mlock(&(0x7f0000b16000/0xe000)=nil, 0xe000) (async) munlock(&(0x7f0000573000/0x1000)=nil, 0x1000) mquery(&(0x7f0000885000/0x4000)=nil, 0x4000, 0x0, 0x0, r0, 0x5) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000280)) (async) munlockall() (async) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000340)={&(0x7f00000002c0)='./file0\x00', 0x8, &(0x7f0000000300)='./file0\x00', 0x8}) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000003c0)={'tap', 0x0}) (async) ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f0000000400)=0x4) (async) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000440), 0x8, 0x0) (async) write(r0, &(0x7f0000000480)="4e7be2a9fe1ddd59cfd5c35a8dfaec8c042e001706359ff639d81bc711ecfcecf4b90444c009308f88342d91d6156fb12edaf96b406c8b0f1e4cc2c16c8b0119e2048f79973203804a05d3c2961048cd0138a87f2b0cc287161ecaa4c78c4b9a37432bfbf73f42c03c30b0d22d8dbd591d32e563f99033d3a241339bff5631d367e04fdfdfc6ed22312b8f9d54aa1c14a2dc7a524b106af6f2869de8c1f98bb4102fe31c3f4b51063704bae6da6c48", 0xaf) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) recvfrom(r3, &(0x7f0000000540)=""/136, 0x88, 0x43, &(0x7f0000000600)=@in6={0x18, 0x1, 0xffffffff, 0x6}, 0xc) r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000640), 0x20, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000680)={0x8, 0x0, 0xd04, 0x10000, 0x5, 0x5, 0x180000, 0x10, [{0x3, 0x5, 0x8, 0x4}, {0x8, 0x6, 0xfffffff7, 0x200}, {0x87, 0x0, 0x77, 0xb0}, {0xb, 0x3, 0x4, 0x1}, {0x0, 0x9, 0xfe, 0x5a420000}, {0x56, 0x8, 0xfffffff8}, {0x7636, 0xfffff768, 0x6fd, 0x1}, {0x10, 0x7, 0xc, 0x9}, {0x8, 0x6, 0x0, 0x1}, {0x1, 0x9, 0x9}, {0x9b7, 0x2, 0x0, 0x9}, {0x4, 0x6, 0x1000, 0x1ff}, {0xd215, 0x1ff, 0x0, 0x582b}, {0xff, 0x5, 0x8, 0x80000000}, {0x8, 0x4, 0x1836, 0x3}, {0x7, 0x2, 0x0, 0xc}]}) (async) munmap(&(0x7f0000a1b000/0x1000)=nil, 0x1000) openat$bpf(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000880)={0x9, &(0x7f0000000800)=[{0xb, 0x7, 0x54, 0x9}, {0x50, 0x2, 0x6, 0x3}, {0xfe01, 0x38, 0x0, 0x7}, {0x2, 0xc, 0x81, 0xd65}, {0x8, 0xa, 0x3, 0xb}, {0x1, 0x6, 0x38, 0x7}, {0x2, 0x81, 0x1, 0x3}, {0x6a, 0xf6, 0x9e, 0x7}, {0x652c, 0x8, 0x0, 0x1}]}) (async) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) ioctl$WSMUXIO_ADD_DEVICE(r4, 0x80085761, &(0x7f00000008c0)={0x3, 0x8d7e}) (async) msgsnd(r1, &(0x7f0000000900)={0x0, "e247e079ce865d25e453e5b7730511f6f18881df2df7c4c660371f63cbccac2c22179594a6f272c02cbb6d0f4a1827fcb461387538611d1ce8dd8f2b39e45403fa0b50c3008f46ccf08c625b21a3eed2ef8c93734a9dfd3ec0ec84b4b871bf60b57a2675730a33d6e2922ae1c297"}, 0x76, 0x0) (async) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000980)) (async) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f00000009c0)={0xd358, 0x2}) 152.077006ms ago: executing program 4 (id=5): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x7, 0x2000000000000f26}) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000000)={0x1, 0x7c6}) 150.426601ms ago: executing program 5 (id=6): r0 = socket(0x2, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b10005016000009f0500000007000000331c13fecea10500fef96ecfc72fd3357a068da3a5673039d2d236acf20b7804be38164991f7cccf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af63003728211e000000720fd38bfbb770c1f5a872c881e2772ec5a10400000000000000361b1257aea8c5d0002012020000000000880d6633c556ae9be371a3f8343712051eeab71d89000407000000800420000000", 0xb1, 0x0, 0x0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSETA(r1, 0xc4504447, &(0x7f0000000000)={0x2, 0x8, 0x2, 0xfffffffe, "cd002200002181baab4c8c6d09b975390a000004", 0x8000, 0x3}) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0) msgsnd(r2, &(0x7f00000000c0)={0x1, "136138421a81d117e8448451ff6013945ad2b0761f33c8f77e09c66373483e4a39477408e45722612b0e8040968fc5cf79fe3aad8bf0ca13a04317f840b38eeb64ca867ac633653c38f32cf825e6e404a95f96fe340f9d0bc6a3d89b5404f1119246a0147d497b479b2efbbb4552ed3254cc134bf656ba13fcf13750580fb5276856bcae0681076f5369f964b1e43c5ec27a7d9c7a42994702351cf1cec71c4a27a3ddb8914fef0df89e9ebbb0f02de86076c048dc4abf9af577e240a2f76bbc50701fd740854138e7a981ca0ea3094d5edcc4fce6d16f1a"}, 0xe0, 0x800) 139.426004ms ago: executing program 2 (id=3): r0 = semget(0x0, 0x1, 0x281) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x61, 0x6, 0xfe, 0xc}, {0x50, 0x0, 0x10, 0x2}, {0x9e, 0x9, 0x0, 0x3}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x42876) ktrace(0x0, 0x1, 0x800, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r2, 0x802069db, &(0x7f00000001c0)) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', 0x10008, 0x0}) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, &(0x7f0000000140), 0x0) ioctl$TIOCCONS(r4, 0x80047462, &(0x7f0000000040)=0x9) sysctl$kern(&(0x7f0000000100)={0x1, 0x2c}, 0x2, &(0x7f0000000140)="71f91e3471ac8e58bc5a91501d94a34b8e", &(0x7f0000000080)=0xfffffeec, 0x0, 0x0) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f0000000240)="b100051660000004000000000700000001008106cfa1e4fffdf96ecfc73fd3357ae36caa0416fa4f376b36acf00b7805be301e4991f7c8cf5f3fc303ebe1aa5323edeb51e2f0ca3ebbc257699a1f1302000000000000007d026ba8af6300371c2102000000720fd38bfbb770c1f5a8aec872ea772ec58904000000008d9800361b1257aba9c500022012010000de5000"/177, 0xb1, 0x800, 0x0, 0xffffff97) r6 = openat$wsdisplay(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$WSDISPLAYIO_USEFONT(r6, 0x80585750, 0x0) ioctl$BIOCGRSIG(r1, 0x40044273, &(0x7f00000000c0)) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) semctl$GETNCNT(r0, 0x636355b7d24fb53a, 0x3, 0x0) 135.683524ms ago: executing program 3 (id=4): sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) sysctl$net_pipex(&(0x7f0000000180)={0x6, 0x1b, 0x2}, 0x3, &(0x7f0000000080), 0x0, 0x0, 0x0) (rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) sysctl$kern(&(0x7f0000000000)={0x1, 0x20}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) (async, rerun: 32) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x40006dd) (async) open(&(0x7f0000000040)='./file0\x00', 0x100, 0x2) 132.709899ms ago: executing program 7 (id=8): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f00001d0000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f00006dc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f000000d000/0x4000)=nil, &(0x7f0000826000/0x1000)=nil, 0x40}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f00000c6000/0x3000)=nil, 0x16}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x9bbf}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f0000358000/0x2000)=nil}], './file0\x00'}) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x2, 0x101) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) getpeername$unix(r1, 0x0, 0x0) ioctl$FIONREAD(r0, 0xc0106978, &(0x7f0000000140)) 132.175095ms ago: executing program 5 (id=12): r0 = socket(0x11, 0x3, 0x0) sysctl$kern(&(0x7f0000000380)={0x1, 0x40}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff3a, 0x0, 0x22) setsockopt(r0, 0x11, 0x1, &(0x7f00000000c0)="0c581201", 0x4) r1 = socket(0x800000018, 0x3, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005036000009f05000600030000", 0xf, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000a30001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x20, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7, 0x7, 0x7, 0x7}, {0x7c, 0x83, 0xb, 0x80000b}, {0x816, 0x1, 0x13, 0x80}]}) r4 = socket(0x2, 0x3, 0xff) ioctl$WSKBDIO_SETENCODING(0xffffffffffffffff, 0x80045710, &(0x7f00000000c0)=0x7ff) setsockopt$sock_int(r4, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x21, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r5 = socket(0x18, 0x1, 0x0) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r4, &(0x7f0000000000), 0x10) r6 = socket(0x800000018, 0x1, 0x0) bind$unix(r6, 0x0, 0x0) listen(r6, 0x1) socket(0x18, 0x4001, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000, 0xffffffffffffffff}) 131.876501ms ago: executing program 3 (id=13): open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async, rerun: 32) r0 = socket(0x18, 0x3, 0x0) (rerun: 32) close(r0) (async) r1 = socket(0x800000018, 0x3, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0x8, 0x4) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xbe, 0x4000}, 0x100000002006, 0xffffffffffff0001, 0x0, 0x0, 0x80000000000000, 0xffffffff, 0x6, 0xfffffffffffffffd}) (async, rerun: 32) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async, rerun: 32) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) r2 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x100000000000, 0x4}) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x60000d06, r2) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r3, 0x0) getitimer(0x2, &(0x7f0000000000)) 125.677362ms ago: executing program 2 (id=14): munlockall() r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x0, 0x1, 0xffef9ff6, 0x2, "4b06a6bcff0300dba800000000000800", 0x0, 0xd}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)="944713145761ef4626e1cc7f391f55166f838c5f5b0fe563162b7bfc9e", 0x1d}, {&(0x7f00000000c0)="d6accee1c3c4447919b68f12aed218a2919eb5ccedebf4bb4d9abb9514b0c2038aa1181aa3ad6b41c733bb946599ccb94bf562acbae2137ff769c5e2e2249e62a833b477a7fb6e09f9", 0x49}], 0x2) syz_open_pts() ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000080)=0x2) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f0000404000/0x1000)=nil, 0x1000, 0x1, 0x2011, r1, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x100) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) ioctl$VNDIOCSET(r3, 0x80184405, &(0x7f00000001c0)={0x0, 0x0, 0x0}) mmap(&(0x7f000069c000/0x1000)=nil, 0x1000, 0x2, 0x11, r2, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x278, 0x8, 0x1, 0x800003b}]}) sysctl$hw(&(0x7f0000000080)={0x7, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5) sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, &(0x7f00000000c0), 0x0, 0x0, 0x0) r5 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$PCIOCWRITE(r5, 0xc00c7007, &(0x7f00000005c0)={{0x0, 0x23}, 0x7ff, 0x8003, 0x2}) sysctl$hw(&(0x7f0000000000)={0x7, 0x10}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0) ftruncate(r2, 0x8531) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VMM_IOC_TERM(r2, 0x80045604, &(0x7f0000000000)={0x4}) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="b308f646df9998c57314063e374a0c75e5ba6508", 0x14}, {&(0x7f00000002c0)="5a2f79e805d6280fc5e24070cdc696eda1c1b48414ede55f15aebbb2e299dd1627691121eb474417b61c9905de37663bdfc23dd7a4fc62b4d4b29759bc49d2d39bfc4c7f58b3bee6a559407b22c1fb2614426c6353f4657243ac427a91a8f1889a492d44b2093fe273a4b18c1c40d7e66906359a6a6154f5456a59939e1037f37932bc0f708bafc8ebffce1428dfe0ff51345d4be935212059fcaf2e3daaa5774ea47cda35f1a9f090945b044e3d06aa05ae53eaa6ac2f7c76a2dfb16967ab7a6c8c2f9995fc6d61d2c5ca304d535e6dc231ec", 0xd3}], 0x2) open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) 17.906469ms ago: executing program 3 (id=15): r0 = getuid() getgroups(0x3, &(0x7f0000000040)=[0xffffffffffffffff, 0x0, 0x0]) lchown(&(0x7f0000000000)='./file0\x00', r0, r2) chflagsat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', r0, r1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x13b) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0x6, 0x8, 0x80, 0xfffffffa}, {0x5, 0x1, 0x3, 0x200}, {0x6, 0x4, 0x8, 0xec}, {0x8, 0x1, 0x9}, {0x5, 0x2, 0x5, 0x8001}, {0xfff1, 0x5e, 0x1, 0x9}]}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000240)={0x6, &(0x7f0000000200)=[{0x3, 0xff, 0x2, 0x6}, {0x2, 0x1, 0x2, 0x5}, {0x4010, 0x0, 0x6, 0x1}, {0x6f3, 0xb, 0x3, 0x4}, {0x5, 0x4, 0x2, 0x400}, {0x2, 0x3, 0x0, 0x3}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000002c0)=@file={0x0, './file0/file0\x00'}, 0x10) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) ioctl$WSKBDIO_SETDEFAULTBELL(r3, 0x80105705, &(0x7f0000000340)={0xb54, 0xffffd286, 0x8c16, 0x6}) poll(&(0x7f0000000380)=[{r4, 0x80}, {r4, 0x80}], 0x2, 0x7) bind(r3, &(0x7f00000003c0)=@in6={0x18, 0x2, 0x3, 0x7}, 0xc) ioctl$LIOCSFD(r3, 0x80046c7f, &(0x7f0000000400)=r5) sendmmsg(r6, &(0x7f0000000640)={&(0x7f0000000600)={&(0x7f0000000440)=@in6={0x18, 0x1, 0xf8, 0x2}, 0xc, &(0x7f00000004c0)=[{&(0x7f0000000480)}], 0x1, &(0x7f0000000500)=[{0x78, 0xffff, 0x96, "77ad15e4a223ec73bafaa604ddf6b657accab37e20c8ec5385ea69f9a67c865c22663ba6cc885a5955182117f9d604d1e41d345bce63dd50f16c1319319753f5065b3787541b096324604796a7fe60c281d9838f68f89bb70bb65cf2ed4ac011e7697e8ab0c10fab"}, {0x68, 0x1, 0x8, "aee72c299d59927ec5f1c3ee9d77e719c135d26462b8332bf049771fac0cd4248be62ae6e0a53a1e7e6be6a7d2d460737f533bdd806a0ac8b4097780aa4992e0852e610e635bfc4cc7d5aa512552741d650917dd1954990d"}], 0xe0}, 0x3}, 0x10, 0x409) read(r4, &(0x7f0000000680)=""/101, 0x65) setsockopt(r3, 0x4, 0x7, &(0x7f0000000700)="6e39e22151ea1b5843475e242631deb127c19cf30ce5419ecc9ccb60f3dd5fea320d45c01d823d8e2b5451ddcd9fc15a68b9a531741b3c1705a6710921a8c94de6d4c8009eb59573e34336f5c15fe602745b92c76a2c02dcfbd66377ade51d4bd2deb897a575bc1ec4b6f45434de7dd940314c70f306529981a01d9aed94873cc663f8e31132139c64f57f4fe81f7b3d15e04c54e29b9702091d771bc7774ba84b19757c", 0xa4) sendmmsg(r5, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000007c0)="091ee55c76229db6d486ed762347b2ebc4dac1ee8ec113d3e4fb2a92d7069f9f002d1a1fa6dbc9d629e050768bfd0784482f8919c741119f03fa3a476a61d9d167724238d7da7808578f5781f6aef39b289d486a9b309b1296db13e98f4c06d17a593307a928926ce999e358c9a14d7f7044321bfb2f83b2bc816f0db22086afaab03449a0528c89ab0b3875f7568258fac799d4510bd8595208f617", 0x9c}, {&(0x7f0000000880)="7b66595f2f3958e7ba5aec213259ddd2", 0x10}, {&(0x7f00000008c0)="cf25c96f905d1db1c31401298b824a2395840a183bdebe2e85fa609d54b3ac9ad3dbf4dbf636bb048e5d40984815176c007779b5e7ec62025012900be6a88c69efb30c6c42d7625d1f4a090d9a4e", 0x4e}, {&(0x7f0000000940)="bc57967c57125039a60ccee0d31a94cfa76c21f8b7f7d459813501600b99ab07eb8ce8549199d5bf19304eeeb86035007e815f0ef5c772586f2297d22b0f2f5a70f96d7c2f1e6fe0e1193ec24d50baae20b941e541bc6006d72b3f40d42057fe57cdf62ce7d96b85650fe1c0243783701120fdc29fefe7c6b475006cb8b09172d700d2fec7b8ae27f1b464e0e20662066e8e9222f140df39edbffe074b58c6b2cbee748bb551e7ac64501ea1616682b2a276987c", 0xb4}, {&(0x7f0000000a00)="9d49f3f6d0df251eec9cc294cf843a7d9bf52147eaa80587b2c1d95bf5097e7f88eeb305cec8cee8b1d88165e417df845275320998e7cbad", 0x38}, {&(0x7f0000000a40)="b0aaa84b4804c46e23d350d58f45eb896fe3efbd80a8f128c1a43fc3bcc578724beab0368f2a7ad8593fd3da6c2e50478abce54c7e101fe52ee5723dad476be10b373db11413d4f97ca3d053f838099cf97ad56d121ba3899714e977d3eb38e09a22da7b7abb9dda84dbcb6c3617244357f7bac7aad72a1edd2a04afe2468d18e1ca11e304fe5c6cae81c15151a317ecead4ec803f5d51b27d84b5e83aab3a18117202c2f3f592538e354755499bdd48069b798197602f9cb39a", 0xba}, {&(0x7f0000000b00)="304efb8a87229065d13bb157f01cba99895bcb080466a8cf9166ea41764123583ae8cc45478b06aa8a4e15a8f6955839d0531366e5a114b6f58045365ec98f68bc03e359bf3720d59c8ef54285ff402bdc193ca26a05946d7a5ea14163b09ea4b40e5a1acc01a18094aa1bb344ee635941cf90ae2aa8dfbc898a182c0ceb6dad47232b3ec077eadbdb51b72d44fdde3d24c121c8f7993f0127a4dfdf252f3943", 0xa0}], 0x7, &(0x7f0000000c40)=[{0x38, 0xffff, 0x2, "e614902c8f43cf5cf2352bb520c86cbb58f5603bdd83463b0fee8e202b0c2b7fe8c4b0"}], 0x38}, 0x5}, 0x10, 0x6) fchown(r6, r0, r2) ioctl$BIOCSRTIMEOUT(r3, 0x8010426d, &(0x7f0000000d00)={0x6, 0x220c0250}) poll(&(0x7f0000000d40)=[{r4, 0x100}, {r4, 0x4}], 0x2, 0xa) mknodat(r3, &(0x7f0000000d80)='./file0\x00', 0x20, 0x6a7) socket(0x6, 0x3, 0x6) ioctl$BIOCIMMEDIATE(r4, 0x80044270, &(0x7f0000000dc0)=0x800) mknod$loop(&(0x7f0000000e00)='./file0\x00', 0x2000, 0x0) r7 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000e40), 0x8, 0x0) ioctl$KDGETLED(r7, 0x40044b41, &(0x7f0000000e80)) ioctl$BIOCGDIRFILT(r4, 0x4004427c, &(0x7f0000000ec0)) 16.255262ms ago: executing program 1 (id=2): r0 = kqueue() ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0x0, 0x4, 0x1, {[0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x5f2aba80, 0x3, 0x800a, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffc, 0x8], [0x0, 0x6, 0x0, 0xffff, 0x3, 0x0, 0x1], [0x1, 0x0, 0x401, 0x0, 0x1, 0x80000], [{0x0, 0x1}, {0xfffd, 0xffffffff, 0x3ac6}, {0xfffe, 0x0, 0x5, 0xffffffffffdffffd}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xc8, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x10000, 0x0, 0xf}, {0x0, 0x20000, 0x1000}], {}, {0x0, 0x40000, 0x5}}}) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x0, 0x100}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0xc8}, {0x3}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000080)={0x3, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0xc14}, {}, {0x6, 0x4, 0x2}]}) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x25, 0xfd, 0x6}, {0x40, 0x10, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x3}]}) close(0xffffffffffffffff) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x32, 0x411}, 0x4, 0x10003, 0x0, 0x0, 0x0, 0x2, 0x40000000001, 0x4}) (async) r2 = socket(0x18, 0x2, 0x0) close(r2) (async) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000000029, 0xb, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) getsockopt(r3, 0x29, 0x9, 0x0, 0x0) (async) r4 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1000, &(0x7f0000000000)=0x1, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async) write(r1, &(0x7f0000000140)="02a01a0215ca9a21695cfeef13bf", 0xe) (async) r5 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r5, 0x8020691f, &(0x7f00000001c0)) 15.004325ms ago: executing program 7 (id=16): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7c, 0xe, 0x60, 0x4}, {0x2c, 0x2, 0x4, 0x6}, {0x6, 0x6, 0x10, 0x5}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f9", &(0x7f0000000080)=0x2, 0x0, 0x0) r1 = open(0x0, 0x0, 0x82) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r2) writev(r3, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x40000000, 0x2, 0x100000000, 0x6, 0x0, 0xdf60, 0x5133d36e, 0x0, 0x2f01, 0x4, 0x3, 0xffffffffffffffff, 0xfff, 0x0, 0x4, 0x2, 0x100], [0x3, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x1fe], [0x100000001, 0x2, 0x40000001, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x102, 0x1ffffffffff, 0x7fffffffffffffff, 0x100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x5fb, 0x0, 0x7d07}, {0xfffc, 0x2, 0x5}, {0x4, 0x0, 0xfffffff7, 0x80}, {0x3, 0x5, 0x4, 0xffffffffffffffff}, {0x0, 0x2, 0x1000, 0x8}, {0x0, 0x2003, 0x9, 0x2000000000000000}, {}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x5, 0x5}, {0xffde, 0x80000000, 0x6d5, 0x2}}}) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) r5 = socket(0x18, 0x1, 0x0) setsockopt(r5, 0x1000000029, 0x36, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) recvmsg(0xffffffffffffffff, 0x0, 0x1000) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) r6 = socket$inet6(0x18, 0x3, 0x0) listen(r6, 0xe) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0xa) 14.60118ms ago: executing program 1 (id=17): open(&(0x7f0000000300)='./file0\x00', 0x75f493fec6515f78, 0x160) sysctl$hw(&(0x7f00000000c0)={0x6, 0x9}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x100) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f00000001c0)) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@broadcast, @random="c7a2e46f05fa", [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x68, 0x0, 0x0, 0x1, 0x0, @empty, @remote={0xac, 0x14, 0x0}, {[@generic={0x7, 0x2}]}}, @generic="09abec8be194ccb4"}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$hw(&(0x7f00000000c0)={0x6, 0x9}, 0x2, &(0x7f00000002c0), &(0x7f0000000080), 0x0, 0x0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000040)) 14.226029ms ago: executing program 7 (id=18): stat(&(0x7f0000000100)='.\x00', &(0x7f0000000140)) (async) stat(&(0x7f0000000100)='.\x00', &(0x7f0000000140)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x209) ioctl$WSDISPLAYIO_LSFONT(r0, 0xc058574e, &(0x7f0000000040)) 1.495695ms ago: executing program 7 (id=19): open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) (async) truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd) (async) 669.304µs ago: executing program 1 (id=20): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSDISPLAYIO_WSMOUSED(r1, 0x80185758, &(0x7f0000000100)={0x9, 0xffffaa6e, {0xe02, 0x7}}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, 0xc) seteuid(r3) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) ioctl$TIOCSETA(r4, 0xc450443f, &(0x7f0000000740)={0x3, 0x0, 0x100, 0x1, "97aa224ff1410249c1a4356b30c10700"}) dup2(r2, r1) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4) r5 = syz_open_pts() ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0xfd6, 0x40000008, 0x80000001, 0x17ffe, 0x10, [{0x0, 0x3, 0x4, 0xa24}, {0xc5c, 0xb, 0x8, 0xfffffff9}, {0x800008, 0x20f05, 0x200, 0x9}, {0x7ffffffe, 0x800, 0x3, 0x1}, {0x3fe, 0x7ff, 0x1002802, 0x4d8a}, {0x3, 0x2, 0x3, 0xb4}, {0x8000008, 0xd16e, 0x81ec, 0x2d}, {0x2, 0x836, 0x17, 0x6}, {0x2, 0x87f, 0x5, 0x9}, {0x1000004, 0x90, 0xd1b, 0x88}, {0x1c5, 0x5, 0x4, 0x412c8391}, {0x3, 0x6, 0x20004, 0x4000000c}, {0xb8d, 0x4, 0x8, 0x2}, {0x29a71720, 0xffffdffd, 0x1, 0x6}, {0x2, 0x10007, 0xfffffff9, 0x100}, {0x0, 0x8, 0x9a, 0xc}]}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r6 = syz_open_pts() close(r6) r7 = syz_open_pts() readv(r6, &(0x7f0000000040), 0x10000000000002c6) close(r7) r8 = socket(0x11, 0x3, 0x0) sendto$unix(r8, &(0x7f0000000000)="b1000504000004000000010001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002821fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) writev(r5, &(0x7f0000000180)=[{0x0}], 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f0000000000)={0x0, 0xfffffffffffffffe, 0x0}) socket(0x1, 0x3, 0x10) 0s ago: executing program 3 (id=21): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x5e67, 0x2, 0x8, 0x9}]}) (async) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r0 = syz_open_pts() close(r0) (async) socket(0x11, 0x3, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000000000)={&(0x7f0000000080)={0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, 0x31}, 0x10}, 0x1, 0x0) msync(&(0x7f000056d000/0x2000)=nil, 0x2000, 0x4) (async) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x1010, 0xffffffffffffffff, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TIOCSPGRP(r4, 0x40047477, &(0x7f00000000c0)) syz_open_pts() (async) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000bc0)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, &(0x7f0000000c80), 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000380)={0x2, 0x3, 0x400ffff, 0xffffff88, "186d28106308001100530400000000098000", 0x808, 0x1ffff}) writev(0xffffffffffffff9c, &(0x7f0000000000), 0x44) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.215' (ED25519) to the list of known hosts. uvm_fault(0xfffffd807c593a28, 0xf, 0, 1) -> e kernel: page fault trap, code=0 Stopped at ktrops+0x58: movq 0x10(%r14),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND * 50933 29353 0 0 0x4000000 0 syz-executor ktrops(ffff800033909ca8,ffffffffffffffff,0,a0c7df9f,fffffd806bb81a80,fffffd8007bfb750) at ktrops+0x58 doktrace(fffffd806bb81a80,4,20c7df9f,0,ffff800033909ca8) at doktrace+0x6bd sys_ktrace(ffff800033909ca8,ffff80003c9438f0,ffff80003c943840) at sys_ktrace+0x11c syscall(ffff80003c9438f0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7593af9ea10, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffd807c593a28, 0xf, 0, 1) -> e ddb> trace ktrops(ffff800033909ca8,ffffffffffffffff,0,a0c7df9f,fffffd806bb81a80,fffffd8007bfb750) at ktrops+0x58 doktrace(fffffd806bb81a80,4,20c7df9f,0,ffff800033909ca8) at doktrace+0x6bd sys_ktrace(ffff800033909ca8,ffff80003c9438f0,ffff80003c943840) at sys_ktrace+0x11c syscall(ffff80003c9438f0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7593af9ea10, count: -5 ddb> show registers rdi 0xffff800036920000 rsi 0x13a6 __ALIGN_SIZE+0x3a6 rbp 0xffff80003c943610 rbx 0xfffffd8007bfb750 rdx 0xffff800036920000 rcx 0x13a5 __ALIGN_SIZE+0x3a5 rax 0xffffffff82a66cf3 ktrops+0x43 r8 0xfffffd806bb81a80 r9 0xfffffd8007bfb750 r10 0x798bcdad142b5744 r11 0xd57fbe8c3399ae6 r12 0xffff800033909ca8 r13 0xffffffffffffffff r14 0xffffffffffffffff r15 0xa0c7df9f rip 0xffffffff82a66d08 ktrops+0x58 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c943590 ss 0x10 ktrops+0x58: movq 0x10(%r14),%r14 ddb> show proc PROC (syz-executor) tid=50933 pid=29353 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=17, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800033908020,0xffff800033908560 process=0xffff8000ffff9f98 user=0xffff80003c93e000, vmspace=0xfffffd807c593a28 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 54532 338422 25736 0 2 0 syz-executor 54532 494662 25736 0 3 0x4000080 fsleep syz-executor 54532 17335 25736 0 3 0x4000080 fsleep syz-executor 56631 401355 75575 0 2 0 syz-executor 56631 148303 75575 0 3 0x4000080 fsleep syz-executor 98038 45383 708 0 2 0 syz-executor 98038 126223 708 0 3 0x4000080 kqsel syz-executor 98038 319690 708 0 3 0x4000080 fsleep syz-executor 89361 497342 18731 0 2 0 syz-executor 89361 50601 18731 0 3 0x4000080 fsleep syz-executor 89361 407368 18731 0 3 0x4000080 fsleep syz-executor 89361 143602 18731 0 3 0x4000080 fsleep syz-executor 29353 255603 8622 0 2 0 syz-executor *29353 50933 8622 0 7 0x4000000 syz-executor 76234 168214 36609 0 2 0x2 syz-executor 8622 302488 36609 0 3 0x82 nanoslp syz-executor 75575 125077 36609 0 3 0x82 nanoslp syz-executor 708 469303 36609 0 3 0x82 nanoslp syz-executor 23474 346779 36609 0 2 0x2 syz-executor 25736 241181 36609 0 3 0x82 nanoslp syz-executor 42916 400255 36609 0 2 0x2 syz-executor 18731 42236 36609 0 3 0x82 nanoslp syz-executor 36609 479318 39688 0 3 0x82 kqread syz-executor 39688 291527 5123 0 3 0x10008a sigsusp ksh 5123 364053 94929 0 3 0x98 kqread sshd-session 94929 165426 76247 0 3 0x92 kqread sshd-session 1565 21389 1 0 3 0x100083 ttyin getty 76247 258719 1 0 3 0x88 kqread sshd 81132 289969 13609 73 3 0x1100090 kqread syslogd 13609 387745 1 0 3 0x100082 sbwait syslogd 91365 151084 1 0 3 0x100080 kqread resolvd 66994 238139 8530 77 3 0x100092 kqread dhcpleased 23301 62180 8530 77 3 0x100092 kqread dhcpleased 8530 21667 1 0 3 0x80 kqread dhcpleased 81011 492284 0 0 3 0x14200 bored smr 40518 202862 0 0 2 0x14200 zerothread 50016 4979 0 0 3 0x14200 aiodoned aiodoned 67115 413001 0 0 3 0x14200 syncer update 60672 135575 0 0 3 0x14200 cleaner cleaner 99429 471814 0 0 3 0x14200 reaper reaper 30079 17283 0 0 3 0x14200 pgdaemon pagedaemon 26452 517112 0 0 3 0x14200 bored viomb 68599 82959 0 0 3 0x40014200 acpi0 acpi0 88350 301377 0 0 2 0x14200 softnet0 10408 372606 0 0 3 0x14200 bored systqmp 52365 495658 0 0 3 0x14200 bored systq 18711 55058 0 0 3 0x40014200 tmoslp softclock 98556 28005 0 0 3 0x40014200 idle0 1 229626 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10173 11169K 11169K 166960K 11263 0 pcb 18 13K 14K 166960K 65 0 rtable 205 5K 5K 166960K 258 0 pf 30 12K 12K 166960K 30 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 3 1K 9K 166960K 7 0 counters 32 17K 17K 166960K 32 0 ioctlops 0 0K 2K 166960K 31 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1337 84K 84K 166960K 1359 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 3 0K 0K 166960K 3 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 15 53K 97K 166960K 148 0 proc 57 58K 100K 166960K 472 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 1 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 37 175K 175K 166960K 37 0 exec 0 0K 1K 166960K 345 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 212 159K 167K 166960K 2871 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 36 72K 96K 166960K 1170 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 1 0K 0K 166960K 19 0 NDP 27 2K 2K 166960K 27 0 temp 35 8630K 8694K 166960K 4022 0 kqueue 13 20K 26K 166960K 26 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 38 0 34 1 0 1 1 0 8 0 rtentry 136 95 0 1 4 0 4 4 0 8 0 unpcb 144 37 0 21 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 736 13 0 7 1 0 1 1 0 8 0 arp 96 10 0 0 1 0 1 1 0 8 0 ipq 40 1 0 0 1 0 1 1 0 8 0 ipqe 40 1 0 0 1 0 1 1 0 8 0 inpcb 328 101 0 89 4 0 4 4 0 8 2 nd6 112 16 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 436 0 0 28 0 28 28 0 8 0 art_table 40 437 0 0 5 0 5 5 0 8 0 art_node 32 95 0 11 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 0 1 0 1 1 0 8 0 semapl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1564 0 60 95 0 95 95 0 8 0 ffsino 256 1565 0 60 95 0 95 95 0 8 0 nchpl 144 1769 0 87 63 0 63 63 0 8 0 uvmvnodes 80 1653 0 0 34 0 34 34 0 8 0 vnodes 216 1653 0 0 92 0 92 92 0 8 0 namei 1024 5225 0 5223 2 0 2 2 0 8 1 kstatmem 264 22 0 0 2 0 2 2 0 8 0 scxspl 216 6353 0 6353 8 0 8 8 1 8 8 plimitpl 152 26 0 10 1 0 1 1 0 8 0 sigapl 424 422 0 382 6 0 6 6 0 8 0 knotepl 120 3507 0 3460 9 0 9 9 0 8 7 kqueuepl 184 23 0 12 1 0 1 1 0 8 0 pipepl 304 99 0 72 3 0 3 3 0 8 0 fdescpl 448 409 0 382 5 0 5 5 0 8 0 filepl 120 1416 0 1193 9 0 9 9 0 8 1 lockfpl 104 82 0 78 1 0 1 1 0 8 0 lockfspl 48 11 0 7 1 0 1 1 0 8 0 sessionpl 144 21 0 13 1 0 1 1 0 8 0 pgrppl 48 29 0 13 1 0 1 1 0 8 0 ucredpl 104 70 0 59 1 0 1 1 0 8 0 zombiepl 144 382 0 382 1 0 1 1 0 8 1 processpl 1152 422 0 382 4 0 4 4 0 8 0 procpl 664 451 0 402 5 0 5 5 0 8 0 sockpl 552 176 0 144 5 0 5 5 0 8 2 mcl64k 65536 2 0 2 1 0 1 1 0 8 1 mcl8k 8192 4 0 4 1 0 1 1 0 8 1 mcl4k 4096 2449 0 2395 14 0 14 14 0 8 6 mcl2k 2048 162 0 161 1 0 1 1 0 8 0 mtagpl 96 4 0 4 1 0 1 1 0 8 1 mbufpl 256 3955 0 3821 10 0 10 10 0 8 1 bufpl 280 2835 0 117 195 0 195 195 0 8 0 anonpl 24 97413 0 94420 23 0 23 23 0 187 3 amapchunkpl 152 8232 0 7796 20 0 20 20 0 158 1 amappl16 200 1839 0 1822 5 0 5 5 0 8 4 amappl15 192 4 0 4 1 0 1 1 0 8 1 amappl14 184 165 0 154 1 0 1 1 0 8 0 amappl13 176 8 0 8 1 0 1 1 0 8 1 amappl12 168 1019 0 991 3 0 3 3 0 8 0 amappl11 160 64 0 54 1 0 1 1 0 8 0 amappl10 152 10 0 10 1 0 1 1 0 8 1 amappl9 144 254 0 254 1 0 1 1 0 8 1 amappl8 136 21 0 20 1 0 1 1 0 8 0 amappl7 128 97 0 87 1 0 1 1 0 8 0 amappl6 120 167 0 164 1 0 1 1 0 8 0 amappl5 112 115 0 109 1 0 1 1 0 8 0 amappl4 104 264 0 249 1 0 1 1 0 8 0 amappl3 96 1227 0 1142 3 0 3 3 0 8 0 amappl2 88 635 0 569 2 0 2 2 0 8 0 amappl1 80 7946 0 7404 13 0 13 13 0 8 0 amappl 88 2243 0 2095 4 0 4 4 0 92 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 409 0 382 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 409 0 382 1 0 1 1 0 8 0 vmmpekpl 168 4726 0 4699 2 0 2 2 0 8 0 vmmpepl 168 32873 0 31150 82 0 82 82 0 357 2 vmsppl 368 408 0 382 4 0 4 4 0 8 1 rwobjpl 40 13703 0 11230 26 0 26 26 0 8 0 pdppl 4096 824 0 764 94 12 82 82 0 8 22 pvpl 32 209234 0 201175 72 0 72 72 0 265 1 pmappl 216 408 0 382 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 359 0 12 10 0 10 10 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace ktrops(ffff800033909ca8,ffffffffffffffff,0,a0c7df9f,fffffd806bb81a80,fffffd8007bfb750) at ktrops+0x58 doktrace(fffffd806bb81a80,4,20c7df9f,0,ffff800033909ca8) at doktrace+0x6bd sys_ktrace(ffff800033909ca8,ffff80003c9438f0,ffff80003c943840) at sys_ktrace+0x11c syscall(ffff80003c9438f0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7593af9ea10, count: -5 ddb> machine ddbcpu 1 No such command ddb> trace ktrops(ffff800033909ca8,ffffffffffffffff,0,a0c7df9f,fffffd806bb81a80,fffffd8007bfb750) at ktrops+0x58 doktrace(fffffd806bb81a80,4,20c7df9f,0,ffff800033909ca8) at doktrace+0x6bd sys_ktrace(ffff800033909ca8,ffff80003c9438f0,ffff80003c943840) at sys_ktrace+0x11c syscall(ffff80003c9438f0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7593af9ea10, count: -5