last executing test programs: 7.129640531s ago: executing program 5 (id=1241): write(0xffffffffffffffff, &(0x7f00000004c0)="b96abcf5ac7cffa09ea8", 0xa) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000001c00)="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", 0xb01}], 0x35) write(r0, &(0x7f0000000080)="c30516845e", 0xff55) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="6b205007ca35110b5612af193ffc6be54032a69daea132cd425b7a9f6a13992313c5d468e77a2f20fdad2699bab9d9f5cdec8dbd93c8e267bae6a8ce56485f16a016b7550e703a2de712094458808df8ddf05463876bfb2fac3eb310e5a135610908f2f88ad5421deb2f478c7a8d0b55e0373f728a9e8eeab3367b34883823169778975a6cb38dbfa3b7012bbb394cfe75f585c4b24718e4cf8d0e832c4146903d92a4a9b572d3fd", 0xa8}, {&(0x7f0000000000)="5048c64d0af674f323be3f501857fd51df91e9f83a296e01840699200bb63f0552f547a841b17166b0", 0x29}], 0x2) 6.882718946s ago: executing program 1 (id=1253): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000680), 0x10000, 0x0) select(0x40, &(0x7f0000000d80)={0x9, 0xfffffffffffffc00, 0x21, 0xd, 0xbc, 0x0, 0x7, 0x8}, &(0x7f0000000dc0)={0xffffffff, 0x22, 0x0, 0x7fffffff, 0x81, 0x1, 0xf4, 0x2}, 0x0, 0x0) ioctl$TIOCSETA(r0, 0xc0084463, &(0x7f00000000c0)={0x13, 0xffeffffc, 0x7fff, 0x8001, "c9f7550000000bca9853a4956b47c0d100", 0x7, 0x200}) ioctl$TIOCNOTTY(r0, 0x20007471) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x8, 0x1}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = syz_open_pts() readv(r1, &(0x7f00000002c0), 0x12) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x80, 0x1, 0xfbfffffe, 0xfffffffe, "d76c1f46000000ef1f0160fbff2000404b00", 0x800}) syz_open_pts() ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000140)={0xffffffff, 0xfffffffe, 0x9448, 0x7, "590113d20122b1cfc500fcc398b384fbdfc91000", 0x8}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETVERAUTH(r0, 0x8004741c, &(0x7f0000000080)) r2 = socket(0x2, 0x1, 0x0) bind(r2, &(0x7f0000000000), 0x10) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x13, &(0x7f0000000000), 0x4) ioctl$TIOCSTART(r3, 0x2000746e) 5.728638587s ago: executing program 5 (id=1257): r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000362000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) (async, rerun: 32) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abfba0900000008e37193f8343712050500b71dc0", 0x95, 0x4, 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 5.728210455s ago: executing program 1 (id=1258): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(r0, 0xc0285602, &(0x7f0000000280)={0x2, 0x0, {[0x3ff, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0xfffffffffdfffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x89, 0x1, 0x2], [0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x4000000000000000], [{0x0, 0x3}, {}, {0x1}, {0x0, 0x0, 0x2}, {0x0, 0x2000000}, {0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x8}], {0x0, 0xfffffffe}, {0xfffd, 0x0, 0x0, 0xffffffffffffffff}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0x3, 0xfffff501, {[0xfffffffffffffffc, 0xa, 0x5, 0x100000000, 0xffffffffffffffff, 0x80008000, 0x21a5d806, 0x3, 0xfffffffc, 0x2f01, 0x2, 0x3, 0xfffffffffffffffe, 0x2, 0x4, 0x4, 0xfffffffffffffff5, 0x100], [0x5, 0x5, 0xfffffffbfffffff8, 0x0, 0xfffffffffffffffd, 0x2, 0x800ee4, 0x0, 0x0, 0x800000047], [0x4, 0x2, 0x100000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x1ffffffffff, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0xfffffffd, 0x7, 0xffc}, {0x9008, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x40003, 0x1}, {0x6, 0x1, 0xa, 0x7}, {0x9, 0x95b, 0x200, 0x10000000f}], {0x9b8f, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x1, 0x1}}}) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$WSKBDIO_SETENCODING(r4, 0x80045710, &(0x7f00000002c0)=0x1000) kevent(r3, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) write(r1, &(0x7f00000002c0)='=', 0x1) read(r2, 0x0, 0x0) 5.727956147s ago: executing program 0 (id=1259): faccessat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x3e, 0x0) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) semop(0x0, &(0x7f00000000c0)=[{0x1, 0x0, 0x800}, {0x4, 0x1ff, 0x1800}], 0x2) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) (async, rerun: 64) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket(0x18, 0x1, 0x0) close(r0) (async) socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r0, &(0x7f00000004c0)="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"/381, 0x17d) (async, rerun: 32) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x7, 0x7, 0xe1, 0x543, "22ef0600000000fda92be2f9000000007f007600", 0x7, 0x2}) (async, rerun: 32) sysctl$kern(0x0, 0x0, &(0x7f0000000740)="9810c4b0b4ffd9200bb582", 0x0, 0x0, 0x0) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x10880, 0x0) ioctl$TIOCSETA(r1, 0xc4504442, &(0x7f0000000300)={0x200032, 0xa, 0x0, 0x0, "97a2224ff1c14a06ebb178926cc9795a6b47c1d1", 0x1, 0xfffffffe}) r2 = msgget$private(0x0, 0x6b1) msgsnd(r2, &(0x7f0000000d00)=ANY=[], 0x401, 0x0) (async) msgctl$IPC_STAT(r2, 0x2, &(0x7f00000000c0)=""/86) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605fdb6b590a22484250456ad900383a0000000000000000000000000000000000fe5d0000000000000000d2ccb40a0000000000aa02009078002e00006006c33e00003a80fe8000000000000000000000000000aaff0200000000000000000000000000018816fad0"]) r3 = socket$inet(0x2, 0x3, 0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x812, r3, 0x80000000) r4 = socket$inet(0x2, 0x2, 0x0) getsockopt(r4, 0x0, 0x3, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r5 = socket(0x1, 0x2, 0x0) close(r5) socket(0x11, 0x3, 0x0) 5.727687426s ago: executing program 5 (id=1260): r0 = socket(0x2, 0x2, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3}, {0x0, 0x300}, {0x0, 0x4}, {}, {0x2, 0xe}, {}, {0x3, 0x1}, {}, {}, {0x1}, {0x1}, {0x3}, {0x2}, {}, {}, {0x2}, {0x1, 0xb4}, {0x1}, {}, {}, {0x0, 0x4}, {0x2}, {0x2}, {0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x0, 0x10000}, {0x1, 0x80000000}, {0x1, 0x6}]}) (async, rerun: 64) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) (async) r3 = socket(0x2, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) (async) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) (async) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x6f, 0x2}, 0x400) (async) socket(0x11, 0x3, 0x0) r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r4, 0x80105728, &(0x7f0000000000)={&(0x7f0000000080)=[{0x22, 0x7}, {0x100}], 0x2}) (async) r5 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r5, &(0x7f00000004c0), 0x0) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) select(0x40, &(0x7f0000000200)={0x5, 0x4, 0x1, 0x5, 0x7, 0x1000, 0x9, 0x4}, &(0x7f0000000240)={0x2, 0x5, 0x1, 0x5, 0x7, 0x101, 0x100, 0xa027}, &(0x7f0000000280)={0xf, 0x8188, 0x5237, 0x9, 0x4, 0x63, 0x8, 0x4f670}, &(0x7f00000002c0)={0x6, 0x7}) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (rerun: 32) 5.591154586s ago: executing program 0 (id=1262): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f00000000c0)=0x2) connect$unix(r1, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ioctl$VNDIOCCLR(r2, 0x80384601, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0xea350000000, &(0x7f0000000040)='./file0\x00', 0x8}) setgroups(0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt(r3, 0x3, 0x0, 0x0, 0xfd87) setuid(0xffffffffffffffff) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$KDGKBMODE(r2, 0x40044b06) 5.532436254s ago: executing program 4 (id=1266): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="673bb5b8cc0c16ed08f1b8d24e2217f9", 0x10}], 0x1) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0x2d757366, 0x8, 0xb, 0xffffffed, "0a6400b72860147b00", 0x7, 0x100000e}) writev(r1, &(0x7f0000000380)=[{&(0x7f00000009c0)="5d77ad9076eaff968b6ce7336a5726195cdbba81cd1cec2f24872121a29bd8cef3b0a4537f7d50518efe58e37663d46f0ff36155aceecb7fe1d3a3dd03aade8502940dfb0b5d2079ffe8d2d86344e682a3726e855b2c6429df5b21deb88e40e8ac86a3c78ef6d4c475271b45ae150bd8e442d9677bec8ff53b78c1fa0e2ad5a632855217e06775c98ddb3da6fdf5747cb215b87be36528346a36a9ffd2c04e8ae196b186ec14f59b48c661ac49f2d4e2fad498a3f233ed456a96831647831f1dbc7c546a9e905ac56c5cdf72bd50b0864e4eb300aca033a2d6c194f4b498ae2bf487edd6c461bc7dc916237a85c21cd4b51ebf453ab4d7ee44e076e32b59c36918ec50a419cf374bf290e5f8f037926d9a905a0e7ee3ab448876793eb21da5f734925d76c04bbfa8452d49d923a2192c5076618293cd1b880713266d07f207c97b346b070e8361154a6bef374715570705e789bbaa90d3ad71a4013859e38c2875c06e7b7668010490445c6944e1f1797cd75325f11f5d30fdc50129ae990354324b0cb70cb9596436cc76b6dbf9f697f84ff16449a264a24693156ad6d7edd9264f4e4eab92d32ac8ffd89d3bf85cd0c02fd1b34ce671b4e89dcd17d2bbb1f4d259fb114435721bf6d9d12eee0272143d646bfad86316006112950c2d083b633ccb03a61366be44cbc338f868a892c636cf520a1db5de2ba621ce0612433b3b26946fb2d44b3c9cc8a0705ebd50d8f77fce26991cf235139000618745a59724e8f936c2bca4415d1629f2ce6296fe3e450f6ded7f90c6a7562fd9a7c607ff1d57204ff98f846264062858144ce4c719a1686d230f06e72f0004b4e290161db47fb378ffa6aa265e1958d86c8f7ffde8042f423c986298268cb165ff051dafe429202ad3a24271ec2f56a9788d8208124793a0b9a6d8383a37d9aa7a61b97ff92c064afdc2691b648b196b79aebc59914c95d5a97b0fbbb286eade902c7ce0085763f75fa920abe7db03e27b2cde939636abc177fdd32aad94b7d3df58c3a8a59a8f7b4b614d2ca4dc9eb89301a184ee78f447e60c3b9b297a75c20ab8b632735ce7563f1e125126f208ce18f9e626350fbf3762e5c191a7334cb7b7e1dd6e9474d339c42a77b8a16f6f721fd8f52be5729cf9e262ef46181faa1ea66611c2f2c533e6324e3c0e90be79aa5f69e2dbb43b166589ad6672a6457d0c836e104de005f20c87f24652d9c0e5fca4192283b744d9c2f6e252eeafd593978a8a3577317a62a50287570bdd53d68b89a21f49005b8ba2bea1beca79ff56c3b06a954c8346b29baf3c07ee82a62711f28fb8c185e0b5c1f58e96178c088d51c55d3be4cf51ba104c117d144cf6e35423711df55cdfab88e87f0651a8acdd2d90142f32c6e24363ce305738607a0a6eafd94f5ba1f48cf4c4eec5f07337f2098f6aef7bab3ec643f278df6664285212fe031487f2a32e9aa32590c739c3bf1fa1d4aadbf88f0bd07b9757dd8880047ba6b954f1abf8dfcd1127417719b4057b9f27145968b176430d49203312db58a2864ff8d7f8c2183d03e82d68b4b18d80bca3a41d0248abc83ad5ea033b47b5dbc9d34607ccaf2b8c28792759e2d9226d4249b1466cb07a9c7e9a24af05d8c861f9208873bc40e84f25934efe620c2d7d5190a13ca120aa8531420322d1a1576b0f9432afeeebb3d5aab62337ee875b09a108ac6c413858b5689fb5f430e5e0f9e1455a23e9ff93f7a8", 0x4d4}], 0x1) sendmmsg(r0, &(0x7f00000000c0)={0x0, 0x7}, 0xffffffffffffffa6, 0x400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x3, 0x0) setsockopt(r2, 0x1000000029, 0x25, &(0x7f0000000000)="5ab7776a", 0x4) 5.531709372s ago: executing program 6 (id=1267): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)='OL`9', 0x4}], 0x1) open(&(0x7f0000000040)='./file0\x00', 0x78e, 0x20) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r1, 0xffff, 0x1, 0x0, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x14}, 0x4, 0x0, 0x0, &(0x7f0000000040)="be0673a8", 0x4) 5.526687404s ago: executing program 1 (id=1269): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000000)={0x0, 0x2}, 0xd, 0xa) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/250, 0xfa}], 0x1, 0x0}, 0x840) mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x100) unlink(&(0x7f0000000000)='./file0\x00') ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0x2, 0x3, 0x6, "0000040000000000000000000d00", 0x1, 0x5}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3ffffffffffffdf3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180), 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x8, 0x194) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000380)={&(0x7f0000000300)='./file0\x00', 0x1, &(0x7f0000000340)='./file0\x00', 0x8}) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)='o4', 0x2}], 0x1) sysctl$vfs_ffs(&(0x7f0000000040)={0xa, 0x1, 0x8}, 0x3, &(0x7f0000000080)="1cacd8083692334f962b0cf36daa8139e05fe16cc43375d1ccc1d392d246e468ab95b4573e3e29ce7023494de30e70f1201d1e6870e4c85d877768476d367070135875068a30d8e6a6461f865b8cd3cac18a007faf72e79ba49b6fbe7ed031a8def66a9a409dc330a88e", &(0x7f0000000100)=0x6a, &(0x7f0000000140)="ffd3be85b071f09f11f0191cdac8902f3afda5b51f04329e5b1ec2e254054c712d075d6606140b30edba276de6b44235181d98b62112d0d2afdfb59bdccb9db88278a8439cdc0d09ea7429a339eb8274a41653dd85f12b3a042de3251bb47cd2701d044337dda452a6cd4b34e24fd3c032c455a63f546af74e5950a4783b534782829dcd3331a55ec307b9ff1aef26bd7735aca42da6072f27aaf3ef0696254fe99639d7ae42729afd332a55f61b1ed3cede668911c5ad620e180805a8da970d15e0040801fa479ddf51a92d35b27930af4e5c17f4d888012907b1c2abce08c70b4210e3d7d160", 0xe7) 5.523126174s ago: executing program 0 (id=1270): r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$WSDISPLAYIO_DELSCREEN(r0, 0x80085754, &(0x7f0000000000)={0x4, 0x1}) (async) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000040)=0x5) (async) ioctl$VT_GETMODE(r0, 0x40087603, &(0x7f0000000080)) (async) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000100)="9ef01212bdeaa2c205830f28a196159489614bd09a04f30ff5ca71a0f48bab054973e4719f307f77eb30048d26faeb276e36156d8f1ee81cbb2a43be01e913c8011d46d4820a7abecfa54e6fe90ac279b1051ab973e7be1965186527d49403b9a940a6dc7f062bd0cff2070b2efff32857a6fb904234734d38994cba85e756696dee879a361c4c999ef104efd4889da01049f0684001968470a7b15b21512d44b8d2fd78e85a5a720b3e1393bd51b460216282fcc046132cf5", 0xb9) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0}, 0xc) (async) ioctl$KDENABIO(r0, 0x20004b3c) (async) ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f0000000200)={0x4, [0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BIOCGDLTLIST(r0, 0xc010427b, &(0x7f0000000280)={0x7, &(0x7f0000000240)=[0x5d4, 0x2, 0x751c, 0x5, 0x6, 0x100, 0x0]}) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f00000002c0)=0x81) (async) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000300)=0x4) (async, rerun: 64) ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f0000000340)={0x9, 0x6, 0x6fe, 0x7ff}) (rerun: 64) ioctl$TIOCNOTTY(r0, 0x20007471) (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) (async, rerun: 32) ioctl$VMM_IOC_INTR(r0, 0x800c5606, &(0x7f0000000380)={0xadb3, 0x2, 0x1}) (async, rerun: 32) ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f00000003c0)={0x4, 0x7f, 0x1, {[0x2, 0x0, 0x8, 0x9, 0x219, 0x8, 0x2, 0x465f, 0xf, 0x8, 0x3, 0x8000, 0x4c, 0x2, 0x50f, 0x5, 0x5, 0x5], [0x2, 0xfffffffffffffff5, 0x53, 0x9, 0x7f, 0x84a, 0x8, 0xfffffffffffffff9, 0x890, 0x7fffffffffffffff], [0xb84f, 0x164, 0xfffffffffffffffe, 0x3, 0x8000, 0x5, 0x8000000000000000], [0x8, 0x2, 0x4, 0x5, 0xfffffffffffffffd, 0x6003], [{0x1, 0x6, 0x1, 0x7}, {0x4, 0x1, 0xffffffff, 0x9}, {0x6, 0x0, 0x0, 0x9}, {0x0, 0x1, 0x40, 0x6}, {0x5, 0x4, 0x80000001, 0x7}, {0x401, 0x8, 0x7ff, 0x4}, {0x4, 0x7fff, 0x80000001, 0x8}, {0x5, 0x3, 0x2b00, 0x4c4}], {0x1000, 0x3, 0x9, 0x3}, {0x7, 0x7, 0xfffffffb}}}) setsockopt(r0, 0x5, 0x10000, &(0x7f0000000640)="8a24ef1219caf3bf016078af16e04314a7ef58e9fad316d7d34a5b9fdf3fc6f3224d057dd87a8bb95c3ef0b167ee68eebd89204db072f392e26ac7bcac92e96030d4532151780baa6a84ab299bef", 0x4e) (async) r2 = socket(0x20, 0x4, 0x8) sendto(r2, &(0x7f00000006c0)="80a2dcff6cf6d5fe9fca1bba0af493453e581546f9e9a113a99433f1a31c18438b5c820eba8fd36cb13eb8abc3c38823d4509ade5cee6311e1b2789e46794410421136bd16655f1047d04ea3e5f181dfdaf0ea33f093596d", 0x58, 0x8, 0x0, 0x0) (async) r3 = getpgid(0xffffffffffffffff) (async, rerun: 32) r4 = getuid() (rerun: 32) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000ac0)={0x0}, &(0x7f0000000b00)=0xc) (async, rerun: 32) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000b40)={0x0, 0x0}, &(0x7f0000000b80)=0xc) (async, rerun: 32) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, &(0x7f0000000c00)=0xc) (async) r8 = fcntl$getown(r1, 0x5) (async) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000c80)={0x0, 0x0}, 0xc) getgroups(0x2, &(0x7f0000000cc0)=[0xffffffffffffffff, 0x0]) sendmsg$unix(r2, &(0x7f0000000e80)={&(0x7f0000000740)=@abs={0x1, 0x0, 0x3}, 0x8, &(0x7f0000000a40)=[{&(0x7f0000000780)="8dee5dfa5b4bc42a2bab7d9a5d08c5ab74aa44d500fec8c7f66f9e6532a41bf476280a3f", 0x24}, {&(0x7f00000007c0)="2c7adb243f0086825d41cbdb8159474652dd569752fdc5de8599743dcfbf40", 0x1f}, {&(0x7f0000000800)="f7eb752447cb0d4907fb6b1cdc5d34866df2935dec3a684ed11bf346ac5646d176a6e50485b07ddd9e673e6394c6b9161bcbd6d769b69b3a1a8d7f34f469df4f6ac7c8464707bc92ed9c8cc9398ffda912cc7ce31901b5b807d2e92711df6a06f3e498e93443b7f233f540a3f69d5cc74bc826c4c6af272cba01efb740944a6d19663732dc89ab60b7e94a40e0ea07c1319359a16cbcfd110b0f99de8afe76307e52750c7cd48ab2081244897264f2b08075", 0xb2}, {&(0x7f00000008c0)="53ad5cabc3aafd5c1f3cf9806b20e14c8c90", 0x12}, {&(0x7f0000000900)="298e22886ae9a36a069b0a7f53638bb9f1322593533972569fee9a47e610df8c16aa3e4ba20783aec87ca94aa6d957f07d71fa0aee7a166a2c8c9c9fcc0a061579ec1f1c81874838bee28df19f3e0e9deb90c8c151c1ead32b0083949e582620a51835bf6f11c436a8457c34c65e21b20f2dbb7dc18d2df39f20320895db000eafcd3a71415adb23240637f86eaafadc5a16ea8640709da5afe7abd6ad48a26702be7b3231e2119d4f1c945edea67cb1397a8e8c24d20143896e3246a7", 0xbd}, {&(0x7f00000009c0)="e42aad2d1d6a2a75beb7d5b88817578de8ea0bfba511b6c4d897f98103f6faac224372bdef1a4c97960068fee24441db7ff5c82a10b5730899d439ad32094b0ed58cb0d4bd8373c57c62f28249a73a71ce715f702b50da", 0x57}], 0x6, &(0x7f0000000d80)=[@cred={0x20, 0xffff, 0x0, r3, r4, 0xffffffffffffffff}, @cred={0x20, 0xffff, 0x0, r5, r6, r7}, @cred={0x20, 0xffff, 0x0, r8, 0x0, r9}, @rights={0x18, 0xffff, 0x1, [r0]}, @cred={0x20, 0xffff, 0x0, 0xffffffffffffffff, r10, r11}, @cred={0x20}, @cred={0x20}], 0xd8, 0xd}, 0x4) 5.469784694s ago: executing program 7 (id=1271): r0 = socket(0x2, 0x2, 0x0) close(r0) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') unveil(&(0x7f0000000200)='./file0/file0/..\x00', &(0x7f0000000280)='c\x00') open(&(0x7f0000000000)='./file0\x00', 0x1, 0xc9) openat$vnd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) r1 = open(&(0x7f0000000280)='./bus\x00', 0x100, 0x0) close(r1) socket(0x2, 0x2, 0x0) (async) close(r0) (async) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') (async) unveil(&(0x7f0000000200)='./file0/file0/..\x00', &(0x7f0000000280)='c\x00') (async) open(&(0x7f0000000000)='./file0\x00', 0x1, 0xc9) (async) openat$vnd(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) (async) open(&(0x7f0000000280)='./bus\x00', 0x100, 0x0) (async) close(r1) (async) 5.265438493s ago: executing program 3 (id=1274): mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r0 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)="8a522c6b8a8460561e290ca762e8d6c739d5dd7f0153b7a50498cb60ab818b16929d3bf742c57351df76ca9ec87e92fa9f010342ace3a6ffcf5c4b75c4c160f4acfe629a5717f5f5b7cad5c4e10a76103ea7945a70ea5a8999b18da379b691138c7d8a1529b81a7fb4540022f1324c3dda210f6f132101dfe0acc149685fdaca2fe92b8d4327e9872642c818370d60e800e0f8b2a66ead8ef0ddc9f0258f2275a9a0aefa8edd053e80a469", 0xab) select(0x40, &(0x7f0000000000)={0xe, 0x80000001, 0x7, 0x9f3, 0x3, 0x7ff, 0x4e, 0xfffffffffffffffb}, &(0x7f0000000040)={0x7, 0x0, 0x4, 0x6, 0xffffffffffff8001, 0x2, 0x9, 0x1}, &(0x7f0000000080)={0x6, 0x2, 0x8, 0x3, 0xffffffffffffffff, 0x5, 0x40, 0x4}, &(0x7f00000000c0)={0x5, 0xe115}) recvmsg(0xffffffffffffffff, 0xfffffffffffffffe, 0x1801) 5.261430937s ago: executing program 6 (id=1276): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000080)=""/66, 0x42}, {&(0x7f0000000140)=""/209, 0xd1}], 0x2, 0x0}, 0x40) (async) sendmmsg(r0, &(0x7f0000001440)={0x0}, 0x10, 0x0) (async) rename(&(0x7f00000003c0)='.\x00', &(0x7f0000000000)='./file0\x00') 5.260715656s ago: executing program 3 (id=1277): open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) (async) r0 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000922, r0) poll(0x0, 0x0, 0x8001) (async, rerun: 32) unveil(0x0, &(0x7f0000000080)='c\x00') (rerun: 32) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x4, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff800}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000480)="a7a6d61de4a10909926243003b47915d8156c41f3462b255c61b4f0919d7aacd3dc6959cb3e86fff46c0fbde0346df012e786031d4b86f1ae1307a7a063d9ebac1f36e520d3898611e770394f9f60b74063ad99cae118f42f463090503ed2e4ae2", &(0x7f0000000000)=0x61, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[]) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/25, 0x19}, 0x80) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) (async, rerun: 64) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (rerun: 64) ioctl$WSKBDIO_COMPLEXBELL(r2, 0x4004570c, &(0x7f0000000240)={0xfffffffd, 0x0, 0x3, 0x20}) (async) r3 = open(&(0x7f0000000080)='./bus\x00', 0x800, 0x129) preadv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) 5.259552048s ago: executing program 7 (id=1278): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000180)=""/252, 0xfc}, {&(0x7f0000000540)=""/224, 0xe0}, {&(0x7f0000000100)=""/27, 0x1b}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/126, 0x7e}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/192, 0xc0}, {&(0x7f00000009c0)=""/244, 0xf4}], 0x9, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x800000054}) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x1, 0x1, 0x8, 0x5}) r2 = syz_open_pts() setrlimit(0x1, &(0x7f0000000340)={0xfffffffffffffffd, 0xfffffffffffffffd}) r3 = semget$private(0x0, 0x3, 0xa3) semctl$SETVAL(r3, 0x0, 0x8, &(0x7f0000000500)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$FIOASYNC(r4, 0x8004667d, &(0x7f0000001800)=0x6) shutdown(r4, 0x2) r5 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r5, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) fchown(r5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) close(r5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r6 = open(&(0x7f0000000480)='./file0\x00', 0x10000, 0x20) close(r0) connect$inet6(r0, &(0x7f0000000400)={0x18, 0x2, 0x3, 0x10001}, 0xc) r7 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0x3e, 0x9, 0xcecc, 0x160350d, "02f0ee091a000c1300000fe0ff22850900", 0x7, 0x7fffffff}) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) r8 = dup2(r7, r0) ioctl$DIOCMAP(r6, 0xc0106477, &(0x7f00000003c0)={&(0x7f0000000380)='./file2\x00', r8, 0x2}) 5.108512404s ago: executing program 7 (id=1279): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = open(&(0x7f0000002280)='./file0\x00', 0x2, 0x10) pread(r0, 0x0, 0x0, 0x7) r1 = syz_open_pts() r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000140)="b1000502000000000000000001010000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x404, 0x0, 0x0) fcntl$dupfd(r2, 0xa, r1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x0, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x8003, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x6, 0x8bfd}, {0x0, 0x1, 0x8, 0x2000006}, {0x10000, 0x400040, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x5, 0x4, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) poll(&(0x7f0000000000), 0x35, 0x0) 5.108214058s ago: executing program 3 (id=1280): r0 = socket(0x2, 0x3, 0x3) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) fcntl$lock(r0, 0x8, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x5, r1}) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54}) pipe(&(0x7f0000000000)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x120, 0x3}, 0x55, 0x1008, 0x0, 0x0, 0x4000000000, 0x2, 0x40000000000, 0xe63}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) sendmsg(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x1, 0x37}], 0x10}, 0x400) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) r3 = socket(0x18, 0x3, 0x2) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) syz_open_pts() 5.108063991s ago: executing program 2 (id=1281): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x3}, 0xc) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0xff3f0000) 5.107789624s ago: executing program 6 (id=1282): r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) write(r0, &(0x7f0000000040)="a5b98a98855b00915b36710a15287901602c2443f390c5906be4b06cf9b71c790a0fceda3feb3d2c0e011dc6ac920f7a62914b5d43fab046ca46e9a3ee75f9e380cf500f51a05a626c9ddc74a1cc5e327d14ba5b7a35ddc1c98961ffd5114e006e3f3ce03d2ae55bae8dabae6ca02b3f45e99ded982893e857d066d1a77a088b0962a0d45515bcb123cec0c3a30d0e28a656d9f7df18698a9dbe61876cedcebceba1acae38b8aaa9d24d39ec8d41c2f791d18923579a71d59f6f1dd609018d023566df34cb4e1a1d", 0xc8) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000c) ioctl$WSMOUSEIO_GETPARAMS(r1, 0x80105727, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x44, 0x6}], 0x1}) r3 = kqueue() r4 = socket$inet(0x2, 0x5, 0x2) poll(&(0x7f0000000200)=[{r3, 0x1}, {r4, 0x8}, {r0, 0x2}, {r1, 0x80}, {r4, 0x2}, {r0, 0x100}], 0x6, 0x7) recvfrom$inet(r1, &(0x7f0000000240)=""/4096, 0x1000, 0x2, &(0x7f0000001240)={0x2, 0x1}, 0xc) readv(r3, &(0x7f0000001340)=[{&(0x7f0000001280)=""/172, 0xac}], 0x1) readv(r2, &(0x7f0000001600)=[{&(0x7f0000001380)=""/194, 0xc2}, {&(0x7f0000001480)=""/6, 0x6}, {&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000001580)=""/120, 0x78}], 0x4) r5 = openat$tty(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000001680)={0x8, 0xe8f, 0x4, 0x8000, "9f312ae45bf8f50bdad58bbe9150f35b9331921c", 0x80, 0xfb}) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f00000016c0)="84720173152f8139007938d3311afc101a70f1975a85de4645284acbd64780df5e1305a801db12095710a426cf3e957904881061cd253c814efa389e72f359b40d526dfdbf7b536bf688d25fc385b881f3afb2d90fb6122501bd8a7299c6d127cf6781c54c5ceeb4c4121410f8846c55da245184b7bb1a9c58425722032ef06ca77f0e9e762b207a0048", 0x8a) preadv(0xffffffffffffffff, &(0x7f0000001900)=[{&(0x7f0000001780)=""/172, 0xac}, {&(0x7f0000001840)=""/56, 0x38}, {&(0x7f0000001880)=""/115, 0x73}], 0x3, 0x133) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000001980)={&(0x7f0000001940)=[{0x80, 0x5}, {0x26, 0x7}, {0x8d, 0x6}, {0x46, 0x2}, {0x40, 0x6}, {0x84, 0xfffffeff}, {0x24, 0x6}, {0x43, 0x6}], 0x8}) fcntl$setstatus(r2, 0x4, 0xc0) ioctl$FIONREAD(r5, 0x4004667f, &(0x7f00000019c0)) getdents(r2, &(0x7f0000001a00)=""/157, 0x9d) clock_getres(0x1, &(0x7f0000001ac0)) ioctl$VT_OPENQRY(r2, 0x40047601, &(0x7f0000001b00)) linkat(r2, &(0x7f0000001b40)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001b80)='./file0\x00', 0x4) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000001bc0), 0x20000, 0x0) r7 = accept$inet(r6, 0x0, &(0x7f0000001c00)) pwritev(r7, &(0x7f0000001d00)=[{&(0x7f0000001c40)="947327c9068eaf9c4c14667970c5fc009a02aca530053eb144f8bdd391b5e56ba3a00c0e672d680e80c2db9c169cb1c0239287c7940603a7f754fecbc86620aa17f5b310c66add3ab72533c85881993433f6273d344b4532f705d2145cc9f11f649a434724ddfe3a027fd1bd1324cb14e61376ead6d577109ffbc71ecbed1fb680b1a955f2be2a1b1d7b1439d6c737cd755f36", 0x93}], 0x1, 0x80) ioctl$PCIOCGETROM(r0, 0xc0107005, &(0x7f0000001d80)={{}, 0x3, &(0x7f0000001d40)=[0x0, 0x0, 0x0]}) msgget$private(0x0, 0x211) ioctl$FIOASYNC(r7, 0x8004667d, &(0x7f0000001dc0)) getdents(r1, &(0x7f0000001e00)=""/230, 0xe6) r8 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000001f00), 0x2, 0x0) fchmod(r8, 0x1) 5.107443705s ago: executing program 0 (id=1283): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000000), 0x0) (async) r0 = shmget(0x1, 0x3000, 0x220, &(0x7f0000581000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x0) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) syz_emit_ethernet(0xe1, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaabba57a75e1fb2b9003c262055d527c98d66c9747f3a6f36fd833d9916c371bef33a328e819c1202f088bbbd9380275de0a43c16bb786e35bcb27ce53cbdbd4c87915ba54baf3d1181c9d46111fc78df4007bfb90e6ee3bb1bae7283135ff4427c119e226500b7f240b2c30c6d71dff201ff6175d0e6b6174989fc0393cb9d12645644cc6d107e106948f742175c8c37915488fe9569bfc7753d92eb50215f1643683ec80c9d82b6988bb5fca7a47910280c80e546aff6040bb0fb68fa9d4ca8fdb9fb3e583ec312ffd8ac58710ab9500"/225]) r1 = socket(0x2, 0x1, 0x0) bind(r1, &(0x7f0000000000)=@un=@file={0x1}, 0x2) 5.009811602s ago: executing program 2 (id=1284): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f00000002c0)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x1, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x8, 0x8, 0xfffffff9}, {0x104, 0xf85, 0x200000, 0x7f}, {0x4, 0x7fe, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x800, 0x14, 0x8}, {0x3, 0x82, 0xfa21, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cb, 0x10001, 0xc, 0x3}, {0xa, 0x9, 0x8, 0x6}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x11000c, 0x5, 0x40000005, 0x10000000}, {0x0, 0x0, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) dup(0xffffffffffffffff) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r1 = socket(0x6, 0x3, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1002, &(0x7f0000000040)=0x101, 0x4) setsockopt(r1, 0x11, 0x2, &(0x7f0000000000), 0x4) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r3 = socket(0x2, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r3, 0x8040691a, &(0x7f00000001c0)) kqueue() openat(0xffffffffffffff9c, 0x0, 0xb5219f1000b913f1, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x5}, {0x3c, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x4, 0x89, 0x2, 0x7}, {0x20, 0x7, 0x3, 0x158}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000240)="c2a6d61de4a16809d26243003b47915d8156c41f1362b2aacd3dc6959cb3e86fff48dba1", &(0x7f0000000000)=0x24, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)="3cfc4f9244", 0x5}], 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) 5.009369466s ago: executing program 7 (id=1285): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast1}, @icmp=@parameter_prob={0xc, 0x1, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x1b, 0xfffc, 0x0, 0x0, 0x8, 0x11, 0xf0, @multicast1, @multicast2}}}}}}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) (async) r0 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) socket$inet(0x2, 0x3, 0x0) (async, rerun: 32) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async, rerun: 32) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r2 = syz_open_pts() close(r2) (async) r3 = syz_open_pts() writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) ioctl$TIOCSTAT(r3, 0x20007465, 0x0) (async) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000300)="79be63810e000000e42653dcb5e2ed599e7ed9a199990d3405bbc7a35bfeff16cb505e3c359be6d63b1b17", 0x2b}], 0x1) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x159, 0x200}, 0x0, 0x0, 0xfffffffffffffffb}) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000100000001}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r4 = socket(0x18, 0x1, 0x0) close(r4) r5 = socket(0x18, 0x3, 0x3a) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) write(r5, &(0x7f0000000380)="2b83f5f90b1326cfc2f99a98ea959195d7a7", 0x12) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0x94, 0xad, 0x4c}, {0x7, 0x14, 0xe4, 0x9}, {0x1036, 0xa, 0x6, 0x3e0c}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)="721d1a70c4525e051b7923a65d0000000000810b4eb63ce0ee9fbc59893b667a68823556bed21dd5", 0x28}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="0033ac030000007a63f2a8bf0027f6dce6db3be39894eba2dc643dec2433367facb5747d09008fdca48e6cc1", &(0x7f0000000000)=0x5, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 64) syz_emit_ethernet(0x66, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaadc2a3631764b86dd6603816a0030063000000000000000000000000000000000ff0200000000000000000000000000bc0c093c045934c3c96bf0933f04cca7f310589c6cfe8000000000000000000000000000bb00"/102]) (rerun: 64) 5.009000221s ago: executing program 2 (id=1286): r0 = socket(0x11, 0x3, 0x0) (async) setuid(0xee01) (async) r1 = syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000140)=0x9) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) syz_emit_ethernet(0x3e, 0x0) (async) r3 = socket(0x11, 0x3, 0x8) sendto$unix(r3, &(0x7f0000000000)="b10005016000000416000b00070000000020000010c18125d7f96ecfc73fd38c23781fd6c61a27ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c500002012010000de5000000000000020000000000000000000000000000000000000001f00000000000800", 0xb1, 0x3a3ae0e0de5f5dda, 0x0, 0x0) sendto$unix(r3, 0x0, 0x0, 0x7, 0x0, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00']) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r4 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="b73b5dfcd8c4", @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @local, @empty, @local, @loopback}}}}) (async) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x33}, 0x5, 0x0, 0x0, &(0x7f00000001c0)="21007c323fee01c24c68495c241b8efa7ce8c04d13fe4e00fd88ff12d38acc1e1b9749f986f9385e4a908a12a93fe2af746c8fc36c1aefb8e5831d0dc22a4dc5d35ea319f29bd959c4b7d25bcf7d0f7264f138b5f0cfa818dca3a50bbca323f676af51783744b98611bc47c1c0bdf068ab6af6d74e7f7cd0972a8b750910573ac3c225835f6c337d5da9879e97f7a79100"/154, 0x3) (async) close(r4) r5 = socket(0x2, 0x2, 0x0) bind(r4, &(0x7f00000002c0)=@un=@abs={0x0, 0x0, 0x1}, 0x8) (async) connect$unix(r5, &(0x7f0000000000), 0x10) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x100, 0x0) (async) r6 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) stat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x10, r6, 0x0) sendmmsg(r4, &(0x7f0000000380)={0x0, 0x8}, 0xa66f1f68c3106312, 0x0) (async) sendto$unix(r0, &(0x7f0000000100)="b1000501000000ae05003f01070000000008000000000500fef96ecfc72fd3357ae30200004e30ffd2d236acf20bf404be01000000f7c8cf5f882b297de1aa050400ce94e2f0ad3ebbc257e4411f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300000100be1f25a2e791505c47f8343712cc11fffffffffffffc00"/177, 0xb1, 0x400, 0x0, 0x0) 4.827765621s ago: executing program 4 (id=1287): close(0xffffffffffffffff) (async) ioctl$WSDISPLAYIO_LSFONT(0xffffffffffffffff, 0xc058574e, &(0x7f0000000100)) (async, rerun: 64) r0 = socket(0x18, 0x2, 0x0) (rerun: 64) setsockopt(r0, 0x1000000029, 0x9, 0x0, 0x0) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) truncate(&(0x7f0000000080)='./file0\x00', 0x61c5) 4.821619275s ago: executing program 2 (id=1288): r0 = syz_open_pts() syz_open_pts() r1 = syz_open_pts() ioctl$TIOCMGET(r1, 0x4004746a, &(0x7f0000000000)) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000002700), 0x80, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x4010, r2, 0x3) ioctl$WSKBDIO_SETMODE(r2, 0x80045713, &(0x7f0000002900)) r3 = socket(0x2, 0x400000000002, 0x0) setsockopt(r3, 0x0, 0x20, 0x0, 0x0) r4 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) poll(&(0x7f00000007c0)=[{r0, 0x8}, {r0, 0x1}, {r3, 0x40}, {r1, 0x2}, {r0, 0x22}, {r4, 0x40}, {r0, 0x7}], 0x6, 0xffffffff) 4.821140342s ago: executing program 6 (id=1289): setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r0 = syz_open_pts() close(r0) syz_open_pts() munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = shmget$private(0x0, 0x3000, 0x575, &(0x7f0000ffa000/0x3000)=nil) shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x0) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, &(0x7f0000001100), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = openat(0xffffffffffffffff, 0x0, 0x8080, 0x22) ioctl$WSDISPLAYIO_GETEMULTYPE(r2, 0xc014575e, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = open(0x0, 0x0, 0x4) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) open(0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_int(r4, 0xffff, 0x1003, &(0x7f0000000000), &(0x7f0000000040)=0x4) close(r3) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x40978b, 0x10001, 0xfffffc01, 0xe9, "bb08000100f167d910508bc49d7323000000007e", 0x0, 0xffffffff}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000600)={0x6, 0x8, 0xfffffff8, 0x42c93b49, "ee10000000000000ee00", 0x5, 0xa60}) syz_emit_ethernet(0xca, &(0x7f00000000c0)={@random="cc46610ee774", @empty, [{[], {0x8100, 0x7}}], {@generic={0x3c0c, "bf916dfffdce16a9f8c3f9c8d24b26d977743cb2d6cd682abddc2bbd562741376bbf1208f3615e7265ee8ffb4e2211ee7881b3d1802dd060abb7488041cac574381a1a665c0952c3d37bb1192547cafdc669282aa041bf944540faf38cc9de63ba0832af6511cf3535c996de168516d63c6479cf6906f4572e81b024322a76b854fd5e4b5cd8844d520fbc50111eacbea9b9218b28284e769e3bfae47eef512b57a3216f5b32f06efaa59d010d8a93b82fb36ce7aa333ee7"}}}) ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000001c0)=0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x5}, 0x3, &(0x7f0000000040), 0x0, &(0x7f0000000080)="c661f4122ccc85c9eddb69dccaaf5daeb509fb98397e213eb1826a27c67359c27f82180d", 0x24) 4.82022185s ago: executing program 5 (id=1290): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x4, &(0x7f00000003c0)=[{0x1, 0xc, 0x11, 0x3ff}, {0x2d, 0x1, 0x3f, 0x8002}, {0x1, 0x10, 0x54, 0xb}, {0x6cf, 0x58, 0x5, 0x80}]}) (async) r1 = socket(0x11, 0x3, 0x0) (async) r2 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)='#!', 0x2}], 0x1) (async) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f00000000c0)={0x7fff, 0x8}) (async) write(r2, &(0x7f00000003c0)="092020e3ef3df4952f2d07c16b6dbb092900db000001437842000100005624cf7b6a0a", 0x23) syz_emit_ethernet(0x166, &(0x7f0000000600)={@random="e702f2ffef1f", @random="97b0ae1a006b", [], {@ipv4={0x800, {{0x25, 0x4, 0x2, 0x6, 0x158, 0x66, 0x2, 0x0, 0x2e, 0x0, @broadcast, @rand_addr=0x4, {[@noop, @lsrr={0x83, 0xf, 0x4b, [@local={0xac, 0x14, 0x0}, @loopback, @remote={0xac, 0x14, 0x0}]}, @lsrr={0x83, 0xf, 0x5, [@empty, @remote={0xac, 0x14, 0x0}, @rand_addr=0x8001]}, @end, @rr={0x7, 0x7, 0xc, [@empty]}, @timestamp={0x44, 0x28, 0x0, 0x1, 0xf, [{[@rand_addr=0x8e], 0x1a38}, {[@remote={0xac, 0x14, 0x0}], 0x6}, {[@local={0xac, 0x14, 0x0}], 0x6}, {[], 0x4}, {[], 0xffffff1a}, {[], 0x1acd}]}, @rr={0x7, 0x23, 0x66, [@multicast2, @broadcast, @broadcast, @multicast2, @multicast1, @multicast2, @local={0xac, 0x14, 0x0}, @multicast1]}, @generic={0x88, 0x3, "c5"}, @end, @ssrr={0x89, 0x7, 0x0, [@remote={0xac, 0x14, 0x0}]}]}}, @generic="29e30b43d389b8ad99a5bbb75d2a8d1ef42d37e9621443463e842175ce219f3b92b440d941683c438d479753dd305cebe1d659fc44df2fb0510d238ec78d3a057fa9cae8037f01349afca98db70ec5fa95303d970fd1848cb701e7457d8bb48587fbd76563c64a2859aef481ad62fc992eda61e421ea87eac47e012823a414bdcb5d74d392537c5a452f45a64d0567c1e5793fb28bddebd5f55ed519bd353548e07ac13db5627b1ab9f989a3f0aec1ffc4f38f43411a5d87d2230c2fbcb453cf8b1925c4"}}}}) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000002c0)="ed", 0x1) recvmmsg(r4, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000540)=""/185, 0xb9}], 0x1, 0x0}}, 0x10, 0x2042, 0x0) close(r3) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x200}, 0x401}) r5 = socket(0x18, 0x3, 0x0) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r5, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) (async) r6 = socket(0x18, 0x2, 0x0) connect$unix(r6, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0}, 0x402) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x2, 0x0, 0x4, 0x100000001}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) r7 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r7, 0x800c5709, &(0x7f0000000400)={0x5, 0x5, 0x5}) (async) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000140)={0x7f, 0x9, 0x965b, 0x2, "df2dd74d1e3925dee02767b367d8b1ab026b6162", 0x36, 0x8001}) (async) sendto$unix(r1, &(0x7f0000000200)="b1000513000000000000000020000000000013fecea10500fef96ecf2ac72fd3357ae30208004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699af4879b672f335c223e7d0c032bfa896443a41002000000720fd38bfbb770bef5a872c88106002ec5890400000000000000361b1257aea8c508002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000e1718d30d4a13f1dd80460259bbdf3688f457ceb4dbd32bcd83790095c6eb09e606187259a80efe2122e02afb4f82cdc77eaa6a35869ff4c2c2e07ed6f2f37ceb26a25109b47e440a5b3da3aad2c170e1d9840746d7729bb0cd2ce63ab858a44c30951d643e0b1b411780a", 0xb1, 0xe, 0x0, 0x78) (async) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x1}, 0x8) (async) readv(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/233, 0xe9}], 0x1) 4.491877752s ago: executing program 0 (id=1291): open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x165) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x3010, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x400000, 0x1, 0x200023}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000040)=""/167, 0xa7}], 0x2) 4.491581799s ago: executing program 4 (id=1292): kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffffa, 0x1a, 0x80, 0x4000000000000005, 0x3}], 0x0, 0x0, 0x0, 0x0) (async) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffffa, 0x1a, 0x80, 0x4000000000000005, 0x3}], 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) r0 = socket(0x18, 0x4, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x411}, 0x6, 0x10003, 0x0, 0x0, 0x1, 0x2, 0x1, 0x100000000e63}) close(r0) (async) close(r0) r1 = socket(0x800000018, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000}) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000000)=0x6) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffff9c, 0x80185760, &(0x7f0000000040)={0xfffffffb, 0x200, {0x9, 0x8000000000000000}}) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffff9c, 0x80185760, &(0x7f0000000040)={0xfffffffb, 0x200, {0x9, 0x8000000000000000}}) r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) close(r2) symlinkat(&(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlinkat(&(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) fcntl$getown(r0, 0x5) 4.490721077s ago: executing program 1 (id=1293): r0 = socket$inet(0x2, 0x2, 0x0) close(r0) r1 = socket(0x2, 0x3, 0x3) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000340)="b5", 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000), 0x0) semget(0x0, 0x2, 0x281) 4.488453965s ago: executing program 3 (id=1294): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$WSKBDIO_GETMAP(r0, 0xc010570d, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x6, 0x6, 0x3, 0x1, 0x6}, {0x200, 0xfff7, 0x5, 0x7, 0xd}]}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0xc0) (async) r2 = getppid() (async) r3 = getuid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0xe5, r3, 0xffffffffffffffff}, 0x0, 0x0, r2, 0x0, 0x2000000000, 0x0, 0x1}) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r4, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r5 = fcntl$getown(r4, 0x5) setreuid(0x0, 0xee01) (async) fcntl$setown(r1, 0x6, r5) (async) setuid(0xee01) (async) close(r1) 3.406569557s ago: executing program 1 (id=1295): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) fcntl$setstatus(r0, 0x4, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="ed", 0x1) recvmmsg(r2, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x7, &(0x7f0000000ac0)=[{&(0x7f00000005c0)=""/200, 0xc8}], 0x1, 0x0}}, 0x10, 0x1040, 0x0) shutdown(r2, 0x0) close(r2) execve(0x0, 0x0, 0x0) 2.309132641s ago: executing program 2 (id=1296): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) close(r0) getppid() sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="b1000504600000000000210007000000331c13fecea10500fef9ed061ddd1efb7ae320b37b673039d2d236073705ae04be38164991f7b85143222b297ae1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af63043728180800000000000000f5a472c881ea6e69e0bb76d907a9000002003b1b1257aea8c5000020020000000000008abfba090008efffffffffff3512b132ae037503682ce371a300803712051eadb71d89e0", 0xb1, 0x8, 0x0, 0x0) 2.308381948s ago: executing program 6 (id=1297): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) mlock(&(0x7f000019a000/0x3000)=nil, 0x3000) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000180)=ANY=[]) (async) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="8f6f0100e655ffffffffffff86dd605f6ad9006ef90000000000ffff0000000000007e04b10600000000fe80"]) 2.307618529s ago: executing program 7 (id=1298): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) r0 = open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x2, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg(r1, &(0x7f0000000680)={&(0x7f0000000080)=@un=@file={0xfa89b05bdb287abb, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000ef"], 0x18}, 0x0) (async) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) ktrace(&(0x7f0000000100)='./file0\x00', 0x1, 0xd00, 0x0) (async) writev(r0, &(0x7f0000000000), 0x0) (async) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) 2.193778221s ago: executing program 4 (id=1299): r0 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r0, 0x80086476, &(0x7f0000000500)={0x0, 0x0, 0x0}) ioctl$KDGKBMODE(r0, 0x40044b06) syz_emit_ethernet(0x1000e, &(0x7f0000000380)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffc, 0x0, 0x0, 0x84, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}}}}}) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) close(r1) 2.193247049s ago: executing program 4 (id=1300): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pledge(0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, 0x0) ioctl$TIOCSETA(r0, 0xc4504448, &(0x7f0000000740)={0x10000, 0x9de, 0x400, 0x0, "000001e3bb4e3447c1d100", 0x4, 0xffff2bd9}) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x20, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x44, 0x6, 0xff, 0x4a}, {0x87, 0x81, 0x7c, 0x800009}, {0x16, 0x1, 0x9, 0x13019821}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005016000000416000b00070000000020000010c18125d7f96ecfc73fd38c23781fd6c61a27ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d9810361b12", 0x82, 0x3a3ae0e0de5f5dda, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) open(&(0x7f0000000080)='./file0\x00', 0x200, 0x2a) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) 2.192161466s ago: executing program 0 (id=1301): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/218, 0xda}], 0x1) mknod(0x0, 0x2100, 0x5f00) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00070100000000", 0x8) getsockopt(r1, 0x0, 0xb, 0x0, 0x0) kevent(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x9b68, 0x0) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000001600)=[{&(0x7f0000002f00)=""/4096, 0x1000}], 0x1, 0xfffffffffffffffe) r2 = socket(0x18, 0x3, 0x0) setsockopt(r2, 0x1000000029, 0xd, &(0x7f0000000000), 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/218, 0xda}], 0x1) (async) mknod(0x0, 0x2100, 0x5f00) (async) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) (async) pipe(&(0x7f00000001c0)) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00070100000000", 0x8) (async) getsockopt(r1, 0x0, 0xb, 0x0, 0x0) (async) kevent(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x9b68, 0x0) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) preadv(r0, &(0x7f0000001600)=[{&(0x7f0000002f00)=""/4096, 0x1000}], 0x1, 0xfffffffffffffffe) (async) socket(0x18, 0x3, 0x0) (async) setsockopt(r2, 0x1000000029, 0xd, &(0x7f0000000000), 0x0) (async) 2.191178901s ago: executing program 6 (id=1302): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) dup2(r0, r1) socket(0x18, 0x2, 0x0) (async) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) (async) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) dup2(r0, r1) (async) 2.190355934s ago: executing program 5 (id=1303): select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x240, 0x800}, {0x0, 0x1000, 0x1800}], 0x2) kevent(0xffffffffffffffff, &(0x7f00000006c0)=[{{}, 0xfffffffffffffffa, 0x0, 0x40, 0x8, 0x9}, {{}, 0xfffffffffffffffe, 0x6, 0x2, 0x3, 0x2}, {{}, 0xfffffffffffffff9, 0x41, 0x8, 0x6, 0xb}, {{}, 0xfffffffffffffffb, 0x2, 0x4, 0xbd, 0x5}], 0x2, 0x0, 0xffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x800000018, 0x1, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000240)="417a802a2b03000000000000006f4c", 0xf}, {&(0x7f0000000500)="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", 0x142}, {&(0x7f0000000200)="ffba7fd34c7757e064f8ef782f0500000000000000b35f986b2c5397b224", 0x17}, {&(0x7f00000000c0)="6fe4a671ebf3452fcfa8f15a4a6e759f52a3accc7747b0bf390f18e9b126dca41a0d105be2fc2576fbe63786e42739158a948fa667f8f70703e5901a54406c30e0f2cb8c9845c613c7d7ad2b014f19916cae0d95bcb6874b0fa2851ef49116fdbdcd78e6d7ef79100b287c2bd18552fa8e477cbeb00d2e9a5f2bf9b916ef13476928d993360372", 0x87}, {&(0x7f0000000180)="1957772e331e5d8ec2868796bd060e0163ef017da1d7e926f02303221af1a8934a57067059b236059209ee28b19bb66517d6eae632bce98b6e8c2ea145593000969db1178780e47ec20454ec25787a2cd4c38d9debbd5f1b5ab7637ddde7e7", 0x5f}], 0x5) execve(0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet6(0x18, 0x3, 0xff) getsockopt(r2, 0x29, 0x25, 0x0, 0x0) r3 = socket(0x2, 0x3, 0x11) connect$unix(r3, &(0x7f0000000000), 0x10) fcntl$getflags(0xffffffffffffffff, 0x3) ioctl$BIOCSDIRFILT(0xffffffffffffffff, 0x8004427d, &(0x7f0000000300)=0x8) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000340)={0x2, 0x0, 0x4, 0xf8ba, 0x6}, 0xc) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) sysctl$kern(&(0x7f0000000400)={0x1, 0x58}, 0x2, &(0x7f0000000440), 0x0, &(0x7f00000004c0), 0x0) accept$inet6(0xffffffffffffffff, &(0x7f00000005c0), 0x0) socket(0x6, 0x8000, 0x3) r5 = socket$unix(0x1, 0x5, 0x0) getsockopt(r5, 0x1, 0xc, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) ioctl$BIOCSDLT(r4, 0x8004427a, &(0x7f0000000940)=0x1) open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) setrlimit(0x3, &(0x7f0000000340)={0x2400, 0x100000}) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x86) chdir(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.132056791s ago: executing program 3 (id=1304): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x5}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000445000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000445000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xefffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, 0x1}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x1}], './file0\x00'}) (async) mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x88) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) (async) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000000340)='\x00\"\x00\x00', 0x4) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) (async, rerun: 32) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (rerun: 32) ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f00000000c0)=0x34) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) pread(r2, &(0x7f0000000600)="e7077b6629e0397383eaeac9193e79db7bbbad786e7bbb921dff532158d0b49a3e7de9f2d8fdefa9e6fddc16bcd369b9fc28dc5e", 0x34, 0x5) (async, rerun: 64) ioctl$FIONREAD(r1, 0x80047308, &(0x7f00000001c0)) (async, rerun: 64) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2000, 0x0, 0x37) 72.134236ms ago: executing program 1 (id=1305): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f00000002c0)="03000000", 0x4) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000002}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x3, 0xfc) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) setsockopt(r0, 0x1000000000029, 0xa, 0x0, 0x0) unlink(&(0x7f0000000a80)='.\x00') r2 = socket(0x11, 0x2, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffff9c, 0x80185760, &(0x7f0000000140)={0x5, 0x516, {0x9c0, 0xff}}) sendto$unix(r2, &(0x7f0000000000)="b1000503000004000000000000200000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42118000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab71d89e00004070000000013000000", 0xb1, 0x8, 0x0, 0x0) 71.23709ms ago: executing program 7 (id=1306): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unveil(&(0x7f0000000400)='./file0\x00', &(0x7f0000000040)='c\x00') open(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x100) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 10.497063ms ago: executing program 2 (id=1307): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) r0 = socket(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x102) dup2(r1, r0) sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f00000005c0)=[@rights={0x10}], 0x10, 0x10}, 0x404) syz_extract_tcp_res(0x0, 0x8, 0xfffffffb) open(&(0x7f0000000080)='./file1/../file0\x00', 0x80, 0x3a) sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0xdc1d800780e51763}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xffffffffffffff7f, &(0x7f0000001c00)="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", 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r2, &(0x7f00000004c0)="b96abcf5", 0x4) 2.712722ms ago: executing program 3 (id=1308): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x4012, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x1, 0x2) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000)={0x14, 0xca6c}, 0x8) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) 720.743µs ago: executing program 4 (id=1309): getgroups(0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) syz_open_pts() setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x40978b, 0x10001, 0xfffffc01, 0xe9, "bb08000100f167d910508bc49d7323000000007e", 0x0, 0xffffffff}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000600)={0x6, 0x8, 0xfffffff9, 0x42c93b49, "ee10000000000000ee00", 0x5, 0xa60}) ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000001c0)=0x1) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) syz_emit_ethernet(0x22, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x3, 0x3) r2 = socket$inet(0x2, 0x8003, 0x0) setsockopt$sock_int(r2, 0xffff, 0x800, &(0x7f0000000000)=0x9, 0x4) connect$unix(r1, &(0x7f0000000000), 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000006c0)=""/243, 0xf3, 0x0, &(0x7f0000000240)=@un=@file={0x0, './file0\x00'}, 0xa) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$VMM_IOC_CREATE(r3, 0xc2585601, &(0x7f00000004c0)={0x10, 0xfffffffffffffffc, [{&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x8}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x7}, {&(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x1}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xa6}, {&(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x1}, {&(0x7f0000fee000/0x4000)=nil, &(0x7f0000fef000/0x3000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x7}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5}, {&(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0xfffffffffffffe01}, {&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, 0xfb6}, {&(0x7f0000fee000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0xdd9f}, {&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x3}, {&(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xd}, {&(0x7f0000ffa000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x9}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x7}], './file0/file0\x00'}) syz_emit_ethernet(0xb9, &(0x7f0000000180)={@broadcast, @random="035526665132", [], {@ipv4={0x800, {{0x15, 0x4, 0x1, 0xb, 0xab, 0x66, 0xf, 0x8b, 0xf0, 0x0, @multicast2, @multicast1, {[@timestamp={0x44, 0x20, 0x4, 0x0, 0xd, [{[@remote={0xac, 0x14, 0x0}]}, {[@broadcast]}, {[@empty], 0x4}, {}]}, @end, @timestamp={0x44, 0x1c, 0x72, 0x3, 0x6, [{[], 0x2}, {[@remote={0xac, 0x14, 0x0}], 0x7}, {[], 0x6}, {[], 0x80000}, {[], 0x9}]}]}}, @udp={{0x3, 0x1, 0x8}, {"5a6a95b109cc4d4562159a778251607ff5b5c8740c57eb2834f681fa0a7e1afab2aa099ecb8af753a209cefed80e4c192c95cd5dcf370569db2e8d2916e57ae9a5cd698f281eabcad24f4b4b0c7a91"}}}}}}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000380)="c03672d9", 0x4}], 0x1) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x26}, 0x4, 0x0, 0x0, &(0x7f0000000200), 0x0) r4 = kqueue() ioctl$WSDISPLAYIO_GETSCREEN(0xffffffffffffffff, 0x80084905, &(0x7f0000000040)={0x4, './file0\x00', './file0\x00'}) kevent(r4, &(0x7f0000000000), 0x96, &(0x7f0000000380), 0xfffb4161, 0x0) 0s ago: executing program 5 (id=1310): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3, 0x7}, {0x2, 0xff03}, {0x1}, {0x0, 0x800}, {0x3}, {0x5}, {0x0, 0xaa59}, {0x3, 0xb59}, {0x1, 0x1}, {0x3, 0x100}, {0x1, 0x1}, {0x3, 0x80000000}, {0x2, 0x3}, {}, {0x0, 0x5}, {0x1, 0xffffffff}, {0x3, 0x1}, {0x1}, {0x3, 0xfffffffe}, {0x3, 0x7ff}, {0xbb08c0840fa32129, 0x6}, {0x0, 0x1}, {0x1}, {0x0, 0xf208}, {0x2, 0x1000000}, {0x1, 0x1}, {0x0, 0x1ff}, {0x0, 0x200}, {0x2, 0xffffffff}, {0x0, 0x9}, {0x1, 0x5}, {0x3}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x3a}, 0x2, &(0x7f0000000180)="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", &(0x7f0000000280)=0xfa, &(0x7f00000002c0)="5fd748f5734c8001e1e6c659baba3ff7f2f3b2b5d6fc6504861d7696aac5e4088d39ada0af32aac781982d8c2c909a2126252b9d75956dbdf11e045c4e644d12ff3fdb4dace6231a1387a5ebcb3a1e2c7115f2b67dc542a08a66589e7edf990b10ae5c2b918a2f8401b380aa07065c9d5359de42b1260f17f8fa60849f4416a7c3374723b8f9613227182f6ad00e19cb62", 0x91) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. pckbd_enable: command error load: 3.63 cmd: getty 48139 [ttyin] 0.00u 0.02s 0% 330k pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error denied attempt to set clock forward to 4263431296 pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error denied attempt to set clock forward to 4263431296 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error vm_create: uvm_map failed: 12 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error uvm_fault(0xfffffd806c9385d0, 0x0, 0, 1) -> e fatal page fault in supervisor mode trap type 6 code 0 rip ffffffff830bfba8 cs 8 rflags 10207 cr2 0 cpl 0 rsp ffff80002a315470 gsbase 0xffff8000299ddff0 kgsbase 0x0 panic: trap type 6, code=0, pc=ffffffff830bfba8 Starting stack trace... panic(ffffffff833e21d9) at panic+0x1d0 kerntrap(ffff80002a3153c0) at kerntrap+0x30b alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dt_ioctl_record_stop(ffff800001691000) at dt_ioctl_record_stop+0x108 dtclose(11e5f,81,2000,ffff80002a39ea98) at dtclose+0x109 spec_close(ffff80002a315570) at spec_close+0x466 VOP_CLOSE(fffffd805c41c440,81,fffffd80097fd548,ffff80002a39ea98) at VOP_CLOSE+0x132 vn_closefile(fffffd805eb5dc28,ffff80002a39ea98) at vn_closefile+0x12b fdrop(fffffd805eb5dc28,ffff80002a39ea98) at fdrop+0x121 closef(fffffd805eb5dc28,ffff80002a39ea98) at closef+0x192 fdfree(ffff80002a39ea98) at fdfree+0x116 exit1(ffff80002a39ea98,b,0,1) at exit1+0x576 sys_exit(ffff80002a39ea98,ffff80002a3158e0,ffff80002a315830) at sys_exit+0x1a syscall(ffff80002a3158e0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7988140c00c0, count: 242 End of stack trace. WARNING: SPL NOT LOWERED ON SYSCALL 91 193294152 EXIT 0 4 Stopped at savectx+0xae: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND *416908 52071 0 0x2 0 1 syz-executor 175194 77877 0 0x14000 0x200 0 reaper savectx() at savectx+0xae end of kernel end trace frame: 0x70620b856f30, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd806c9385d0, 0x0, 0, 1) -> e ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x70620b856f30, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80002a3a5d60 rbx 0 rdx 0 rcx 0xffff800031fd1cb0 rax 0x3a r8 0xffff80002a3a5c90 r9 0x1 r10 0x361b76fe1dede067 r11 0x3b9f8655d9724420 r12 0 r13 0 r14 0xffff800031fd1cb0 r15 0 rip 0xffffffff82df93ee savectx+0xae cs 0x8 rflags 0x46 rsp 0xffff80002a3a5ce0 ss 0x10 savectx+0xae: movl $0,%gs:0x688 ddb{1}> show proc PROC (syz-executor) tid=416908 pid=52071 tcnt=1 stat=onproc flags process=2 proc=0 runpri=82, usrpri=82, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000337db788,0xffff80002a39e810 process=0xffff800030c404f8 user=0xffff80002a3a0000, vmspace=0xfffffd805a262b98 estcpu=32, cpticks=367, pctcpu=2.27, user=0, sys=365, intr=1 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 44370 120059 64268 0 2 0 syz-executor 10576 413988 96284 0 2 0 syz-executor 48681 338213 98403 0 2 0 syz-executor 48681 96393 98403 0 3 0x4000080 fsleep syz-executor 34094 1367 89863 0 2 0 syz-executor 34094 319420 89863 0 3 0x4000080 ttyout syz-executor 61890 408262 37988 0 2 0 syz-executor 61890 373239 37988 0 3 0x4000080 fsleep syz-executor 42665 215313 43407 0 2 0 syz-executor 42665 128227 43407 0 3 0x4000080 fsleep syz-executor 17891 21354 52071 0 3 0x3000 suspend syz-executor 17891 65738 52071 0 2 0x4081080 syz-executor 27785 151382 0 0 3 0x14200 acct acct 98403 34776 38740 0 2 0xc82 syz-executor *52071 416908 38740 0 7 0x2 syz-executor 64268 206863 38740 0 3 0x82 nanoslp syz-executor 76355 322261 0 0 3 0x14280 nfsidl nfsio 5182 513909 0 0 3 0x14280 nfsidl nfsio 32459 352815 0 0 3 0x14280 nfsidl nfsio 84491 200967 0 0 3 0x14280 nfsidl nfsio 3823 505952 0 0 3 0x14280 nfsidl nfsio 85779 74365 0 0 3 0x14280 nfsidl nfsio 72946 344456 0 0 3 0x14280 nfsidl nfsio 7171 19556 0 0 3 0x14280 nfsidl nfsio 57495 330186 0 0 3 0x14280 nfsidl nfsio 64910 225651 0 0 3 0x14280 nfsidl nfsio 98031 206154 0 0 3 0x14280 nfsidl nfsio 95118 182494 0 0 3 0x14280 nfsidl nfsio 9462 325731 0 0 3 0x14280 nfsidl nfsio 20894 296293 0 0 3 0x14280 nfsidl nfsio 21927 329678 0 0 3 0x14280 nfsidl nfsio 64024 185778 0 0 3 0x14280 nfsidl nfsio 40936 454239 0 0 3 0x14280 nfsidl nfsio 25725 435972 0 0 3 0x14280 nfsidl nfsio 12036 204842 0 0 3 0x14280 nfsidl nfsio 32654 362927 0 0 3 0x14280 nfsidl nfsio 96284 172028 38740 0 2 0x2 syz-executor 37988 93757 38740 0 3 0x82 nanoslp syz-executor 89863 284411 38740 0 3 0x82 nanoslp syz-executor 43407 307389 38740 0 2 0x2 syz-executor 63991 242330 38740 0 2 0x2 syz-executor 38740 105474 46717 0 3 0x82 kqread syz-executor 46717 481342 73137 0 3 0x10008a sigsusp ksh 73137 472276 99156 0 3 0x98 kqread sshd-session 99156 70282 84890 0 3 0x92 kqread sshd-session 48139 119321 1 0 3 0x100083 ttyopn getty 84890 438724 1 0 3 0x88 kqread sshd 31268 507446 75736 74 3 0x1100092 bpf pflogd 75736 482229 1 0 3 0x80 sbwait pflogd 72770 438020 4734 73 3 0x1100090 kqread syslogd 4734 184310 1 0 3 0x100082 sbwait syslogd 14554 351520 1 0 3 0x100080 kqread resolvd 43031 79173 12203 77 3 0x100092 kqread dhcpleased 78612 438307 12203 77 3 0x100092 kqread dhcpleased 12203 185520 1 0 3 0x80 kqread dhcpleased 99608 324308 0 0 3 0x14200 bored smr 43152 366753 0 0 2 0x14200 zerothread 39674 159200 0 0 3 0x14200 aiodoned aiodoned 76763 107931 0 0 3 0x14200 syncer update 63442 118517 0 0 3 0x14200 cleaner cleaner 77877 175194 0 0 7 0x14200 reaper 15124 401213 0 0 3 0x14200 pgdaemon pagedaemon 89888 367765 0 0 3 0x14200 bored viomb 45310 135840 0 0 3 0x40014200 acpi0 acpi0 34163 200793 0 0 3 0x40014200 idle1 16217 514153 0 0 3 0x14200 bored softnet1 94015 109165 0 0 3 0x14200 netlock softnet0 58631 129814 0 0 2 0x40014200 systqmp 43630 255524 0 0 3 0x14200 bored systq 18096 135789 0 0 3 0x14200 tmoslp softclockmp 65385 244636 0 0 3 0x40014200 tmoslp softclock 53289 494540 0 0 3 0x40014200 idle0 1 395543 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 77877 (reaper) thread 0xffff8000ffffdc90 (175194) exclusive rwlock kmmaplk r = 0 (0xffffffff83a15790) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 uvm_unmap+0x7d #4 km_free+0x87 #5 uvm_uarea_free+0x4f #6 reaper+0x1ca #7 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11114 12216K 13240K 166960K 14038 0 pcb 18 16K 18K 166960K 406 0 rtable 178 10K 11K 166960K 665 0 pf 40 18K 82K 166960K 213 0 ifaddr 33 5K 8K 166960K 143 0 ifgroup 59 2K 2K 166960K 244 0 sysctl 4 1K 9K 166960K 15 0 counters 72 37K 38K 166960K 268 0 ioctlops 0 0K 4K 166960K 1885 0 iov 0 0K 28K 166960K 72 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1494 94K 94K 166960K 2841 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 2K 13K 166960K 23 0 VM map 2 1K 1K 166960K 2 0 sem 12 1K 1K 166960K 54 0 dirhash 12 2K 2K 166960K 36 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 93K 166960K 1521 0 sigio 0 0K 0K 166960K 31 0 proc 72 115K 164K 166960K 802 0 subproc 72 4K 4K 166960K 118 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 199 0 in_multi 62 4K 7K 166960K 208 0 ether_multi 1 0K 0K 166960K 13 0 mrt 0 0K 0K 166960K 12 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 229 1023K 1023K 166960K 229 0 exec 0 0K 1K 166960K 568 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 3 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 249 169K 186K 166960K 15802 0 UVM aobj 51 21K 21K 166960K 57 0 pinsyscall 43 86K 101K 166960K 2815 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 146 0 NDP 13 0K 2K 166960K 103 0 temp 78 8684K 43232K 166960K 83320 0 kqueue 13 20K 33K 166960K 326 0 SYN cache 2 8K 16K 166960K 3 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 129 0 126 1 0 1 1 0 8 0 rtentry 176 206 0 141 6 0 6 6 0 8 0 unpcb 144 1290 0 1273 8 7 1 6 0 8 0 syncache 336 12 0 12 4 4 0 1 0 8 0 tcpqe 32 3 0 3 2 2 0 1 0 8 0 tcpcb 736 614 0 609 15 14 1 7 0 8 0 arp 136 36 0 25 1 0 1 1 0 8 0 inpcb 328 1915 0 1900 29 19 10 12 0 8 7 nd6 152 43 0 27 2 0 2 2 0 8 0 pkpcb 40 9 0 9 6 5 1 1 0 8 1 kcovpl 48 13 0 5 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 1 0 1 0 8 0 ppxss 1192 76 0 76 2 1 1 1 0 8 1 pppxif 1504 11 0 11 2 2 0 1 0 8 0 pffrag 232 16 0 8 1 0 1 1 0 482 0 pffrnode 88 15 0 8 1 0 1 1 0 8 0 pffrent 40 23 0 15 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 5 0 3 1 0 1 1 0 8 0 pfanchor 1288 2 0 1 1 0 1 1 0 8 0 pfstitem 24 4 0 0 1 0 1 1 0 8 0 pfstkey 128 4 0 1 1 0 1 1 0 8 0 pfstate 448 2 0 0 1 0 1 1 0 8 0 pfrule 1360 7 0 5 1 0 1 1 0 8 0 rttmr 136 2 0 2 2 2 0 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 813 0 516 35 9 26 31 0 8 1 art_table 40 815 0 516 5 0 5 5 0 8 0 art_node 32 205 0 148 1 0 1 1 0 8 0 sysvmsgpl 40 12 0 10 4 3 1 1 0 8 0 semapl 112 50 0 40 1 0 1 1 0 8 0 shmpl 112 44 0 4 2 0 2 2 0 8 0 dirhash 1024 34 0 17 3 0 3 3 0 8 0 dino2pl 256 4331 0 2812 96 0 96 96 0 8 0 ffsino 296 4331 0 2812 118 0 118 118 0 8 0 nchpl 144 6439 0 4725 64 0 64 64 0 8 0 rtmask 32 16 0 16 4 3 1 1 0 8 1 vnodes 216 5194 0 0 289 0 289 289 0 8 0 namei 1024 23444 0 23444 3 2 1 2 0 8 1 percpumem 16 149 0 98 1 0 1 1 0 8 0 vcpupl 3968 8 0 0 1 0 1 1 0 8 0 vmpool 848 10 0 2 2 1 1 1 0 8 0 pfiaddrpl 120 3 0 1 1 0 1 1 0 8 0 kstatmem 264 156 0 126 4 1 3 3 0 8 0 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 scsiplug 72 9 0 9 6 6 0 1 0 8 0 scxspl 216 27418 0 27418 14 12 2 8 1 8 2 plimitpl 152 354 0 336 1 0 1 1 0 8 0 sigapl 424 1851 0 1782 9 1 8 8 0 8 0 knotepl 120 403 0 0 12 0 12 12 0 8 0 kqueuepl 224 586 0 577 6 5 1 5 0 8 0 pipepl 344 341 0 312 3 0 3 3 0 8 0 fdescpl 528 1811 0 1779 3 0 3 3 0 8 0 filepl 160 12609 0 12377 24 9 15 18 0 8 2 lockfpl 104 1079 0 1077 6 5 1 4 0 8 0 lockfspl 48 250 0 248 1 0 1 1 0 8 0 sessionpl 144 35 0 26 1 0 1 1 0 8 0 pgrppl 48 67 0 50 1 0 1 1 0 8 0 ucredpl 104 2216 0 2203 1 0 1 1 0 8 0 zombiepl 144 1784 0 1782 1 0 1 1 0 8 0 processpl 1232 1851 0 1782 6 0 6 6 0 8 0 procpl 664 4220 0 4146 8 0 8 8 0 8 0 sosppl 176 12 0 12 4 3 1 1 0 8 1 sockpl 752 3455 0 3420 42 29 13 17 0 8 8 mcl64k 65536 6 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 110 0 0 14 0 14 14 0 8 0 mcl2k 2048 28 0 0 3 0 3 3 0 8 0 mtagpl 96 7 0 0 1 0 1 1 0 8 0 mbufpl 256 212 0 0 12 0 12 12 0 8 0 bufpl 280 9731 0 3595 439 0 439 439 0 8 0 anonpl 32 10547 0 0 85 0 85 85 0 246 0 amapchunkpl 152 51884 0 51368 42 16 26 30 0 158 1 amappl16 200 4801 0 4765 28 22 6 24 0 8 0 amappl15 192 5 0 5 1 1 0 1 0 8 0 amappl14 184 10 0 10 1 1 0 1 0 8 0 amappl13 176 486 0 485 1 0 1 1 0 8 0 amappl12 168 2221 0 2179 3 0 3 3 0 8 0 amappl11 160 34 0 34 1 1 0 1 0 8 0 amappl10 152 72 0 58 1 0 1 1 0 8 0 amappl9 144 260 0 260 1 1 0 1 0 8 0 amappl8 136 29 0 25 1 0 1 1 0 8 0 amappl7 128 100 0 99 1 0 1 1 0 8 0 amappl6 120 347 0 333 1 0 1 1 0 8 0 amappl5 112 85 0 74 1 0 1 1 0 8 0 amappl4 104 497 0 466 1 0 1 1 0 8 0 amappl3 96 9225 0 9132 4 1 3 3 0 8 0 amappl2 88 1992 0 1911 2 0 2 2 0 8 0 amappl1 80 17146 0 16553 15 1 14 15 0 8 0 amappl 88 14703 0 14535 5 0 5 5 0 92 0 uvmvnodes 80 154 0 0 4 0 4 4 0 8 0 dma65536 65536 2 0 2 1 1 0 1 0 8 0 dma8192 8192 1 0 1 1 1 0 1 0 8 0 dma4096 4096 2 0 2 2 2 0 1 0 8 0 dma2048 2048 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 256 0 256 3 3 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 20 0 19 1 0 1 1 0 8 0 aobjpl 72 56 0 6 1 0 1 1 0 8 0 uaddrrnd 24 1811 0 1779 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1811 0 1779 1 0 1 1 0 8 0 vmmpekpl 168 16039 0 15973 4 0 4 4 0 8 0 vmmpepl 168 121086 0 119110 106 14 92 103 0 357 0 vmsppl 488 1810 0 1779 6 1 5 5 0 8 0 rwobjpl 80 33429 0 32279 32 3 29 32 0 8 0 pdppl 4096 3649 0 3570 124 45 79 85 0 8 0 pvpl 32 20083 0 0 162 0 162 162 0 265 0 pmappl 256 1820 0 1781 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 328 0 82 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83841ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83948f40) at __mp_lock+0x192 intr_handler(ffff80002a234180,ffff800000079600) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __mp_lock(ffffffff83948f40) at __mp_lock+0x199 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __mp_release_all(ffffffff83948f40) at __mp_release_all+0xe0 msleep_nsec(ffffffff8383a9d8,ffffffff8383a9a0,4,ffffffff833c43df,ffffffffffffffff) at msleep_nsec+0x1e1 reaper(ffff8000ffffdc90) at reaper+0x15b end trace frame: 0x0, count: 2 ddb{0}> trace x86_ipi_db(ffffffff83841ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83948f40) at __mp_lock+0x192 intr_handler(ffff80002a234180,ffff800000079600) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __mp_lock(ffffffff83948f40) at __mp_lock+0x199 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __mp_release_all(ffffffff83948f40) at __mp_release_all+0xe0 msleep_nsec(ffffffff8383a9d8,ffffffff8383a9a0,4,ffffffff833c43df,ffffffffffffffff) at msleep_nsec+0x1e1 reaper(ffff8000ffffdc90) at reaper+0x15b end trace frame: 0x0, count: -13 ddb{0}> machine ddbcpu 1 Stopped at savectx+0xae: movl $0,%gs:0x688 savectx() at savectx+0xae end of kernel end trace frame: 0x70620b856f30, count: 14 ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x70620b856f30, count: -1