last executing test programs: 1.803264415s ago: executing program 7 (id=8): r0 = socket$inet6(0x18, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x18, 0x1, 0x1, '\x00', 0x7}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x12, "00000000000000000000000000008000", 0x7}, 0x1c) r1 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) (async) setgid(0xffffffffffffffff) (async) r2 = msgget$private(0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000100)=""/237, 0xed, 0x800, &(0x7f0000000200)={0x1c, 0x18, 0x0, 0x6, "87a622dcdc536712caddf2d6f452910e", 0x5}, 0x1c) (async) setresgid(0x0, 0x0, 0x0) (async, rerun: 64) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000580)={{0x0, 0x0, 0x0, 0x0, 0x84, 0x51f}, 0x0, 0x0, 0xbe7f, 0x602298e2, 0x3a6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}) (async, rerun: 64) open(&(0x7f0000000380)='./file0\x00', 0x800, 0x210) (async) setuid(0xffffffffffffffff) (async) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/10) (async) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0xfffffff8, "00000000000000ebb4fb6951a00100", 0xd99}, 0x1c) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffff9c, 0xc00464b4, &(0x7f0000000080)) sendto$inet6(r1, &(0x7f0000000240)="52a4a84df70ff1fa17dd2eb06449bdc13d4a742a11c22bf761f5b70c854e96b5dce51b64f0b3374269773d110dacb39d17c3b2f53d79323270c3a82277fc8cff6a22794e43ff99aa8d5fcbff9ffbae2b685287ded3768160090045932284d028b903162d47758c4b269111b5595e77889afa41b7e96021f5352d495ca37d5da4076b7146a8c49ceca0a781779b166e5d9281b26a68b61117c08a9a39a9b68978a36fa887fa5b639b520545121102413ab00c09c27818e0b8675ccbaf039299adfcbccef57e0fafb1e9406d6af7622ca8f00d49d991bd9ef8f78a5f151d70c2", 0xdf, 0x407, &(0x7f0000000340)={0x1c, 0x18, 0x0, 0x7, "e6fb2653626c83a0f07a6f767baeea3d", 0x2}, 0x1c) 1.674599028s ago: executing program 7 (id=11): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="232156ca", 0x4}], 0x1) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 1.673838117s ago: executing program 2 (id=3): syz_emit_ethernet(0x66, &(0x7f00000000c0)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x30, 0x37, 0x0, @rand_addr="c97fe8843ebeb8566204bb914de6d88a", @rand_addr="c77f4d9983009638ec13aa3d75041a68", {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c32e", 0x6, 0x6, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @loopback}}}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000100)='./file0\x00', 0x49) mkdir(&(0x7f0000000100)='./file0\x00', 0x100) rename(&(0x7f0000000100)='./file0\x00', 0x0) 1.666482643s ago: executing program 7 (id=12): mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r0 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x100, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x3, 0x0, 0x7, 0x1, 0x200023, 0x400000000, 0x0, 0x0, 0x0, 0x100000001}) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebf6cbdf13b9fd812eaa4e712e54e69931929648", 0x14) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) select(0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, 0x0) r3 = kqueue() kevent(r3, 0x0, 0x8, 0x0, 0x15, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) kevent(0xffffffffffffffff, 0x0, 0x7fff, 0x0, 0xb19, 0x0) ioctl$FIONBIO(r0, 0x82907003, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) chmod(0x0, 0x35e) setuid(0xee01) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r4 = socket(0x2, 0x1, 0x0) setsockopt$sock_timeval(r4, 0xffff, 0x1006, &(0x7f0000000000)={0x3, 0x10000008}, 0x10) setsockopt(r4, 0xfff, 0x9, &(0x7f0000000480)="5621b9aced98af15c2d88b8124e9a5e508fafaad874188a8bfebda4a1ec4373c56b44f8d3d2633893d6c0399c6e11a33df279fe85978b6ecc471f5c44520e0ea3e3ab74e641d27273fee8c51e61c4014c6d51e5a79a347d0976ac00e7dfbb3d3c819394dfe39e6ea0f5c9e566b3303d323b30bb20377d0711529639fac093ad5db17c35caa18c6e4dd8814916ec180d54de0462571b3eba62a1d39668ec2ff44106c06da9815c40fbb01241bfba1e2e8fa66b0044d5052efd2cc7b0c300d2323153fd743a7d26e96a533b847bddab3120bf0f2e143b28818e2ce12962737c02de24c51beda75ed4cee932df9d3149fe87f7e2ba2abd181f327", 0xf9) rename(0x0, 0x0) r5 = socket(0x2, 0x8002, 0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) closefrom(r6) r7 = syz_open_pts() ioctl$TIOCSETA(r7, 0x802c7414, &(0x7f00000000c0)={0x80, 0x8000001, 0xfbfffffe, 0x80, "d76c1f46001c00ef1f0160fbff2000404b00", 0x800}) 1.656831356s ago: executing program 3 (id=13): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xfffffffb, 0x3, 0x101, 0x4, 0x1, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0xfffffffd, 0x300b7fe, 0x800002, 0xa}, {0x100806, 0x0, 0x4, 0x2}, {0x2, 0x0, 0x200, 0xfffffffc}, {0x4, 0x3, 0x80000000, 0x7}, {0x2, 0x47fff, 0x14000009, 0xc}, {0x5, 0xbffffff5, 0x7, 0x6d}, {0x2000a, 0x8, 0xfdf0, 0x9}, {0x0, 0x7, 0x34, 0xa}, {0xfffffc04, 0x4, 0x8003, 0x1}, {0xa44f, 0xfff9, 0xa38c000, 0xe1}, {0x80000cb, 0x2, 0xc, 0x8}, {0x2000df, 0x9, 0x15, 0x400}, {0x10008, 0xe2, 0xfffffff5, 0x2}, {0x5, 0x5, 0x24, 0x4}, {0x4, 0xd655, 0x3, 0x6}]}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x42) (async) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) (async) getrlimit(0x3, &(0x7f0000000500)) (async) link(0x0, 0x0) (async) socket(0x24, 0x2, 0x0) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000140)={0x5, &(0x7f0000000000)=[{0x6, 0xff, 0x1, 0xb}, {0x25, 0x0, 0x3, 0x4}, {0xb, 0x9, 0x3, 0x7}, {0x87, 0x1, 0x9, 0x9}, {0x9b1e, 0x2, 0x4, 0x4000800}]}) socket(0x2, 0x4, 0x3) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r4 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xc0) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000100)={0x1ff, 0xa4, 0x9, 0x105, 0x80000001, 0xa1b0, 0x40010002, 0x10, [{0xfffffffc, 0x2890, 0x5, 0x71002}, {0x6, 0xe, 0x8, 0x1ff}, {0xfd, 0x6, 0xfffffffc, 0x9}, {0x4, 0x10001, 0x200800f, 0x7}, {0x401, 0xffff, 0x27ff, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x6}, {0x1000086, 0x8, 0x14, 0x5910}, {0x6000001, 0x84, 0x4, 0x4}, {0x3, 0x8009, 0x1000, 0x4}, {0x1d0, 0x800, 0xdaa1, 0x3}, {0xc, 0xa, 0x8, 0x4}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x7}, {0x6, 0x123, 0x5, 0x204004}, {0x0, 0x1, 0xfff, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0xfffffdff, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x2, 0x0, 0x1}, 0x3, 0x8008000000000001, 0x0, 0x0, 0x8000000f, 0x2008004, 0x0, 0x5}) (async) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaac904bb080049ec002c006780014450907800000008ac1400aa880f48c418e998a23d2be793670d36024e224e1b65412200"]) dup3(r0, r0, 0x10000) 1.609694722s ago: executing program 3 (id=15): r0 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x80206916, &(0x7f00000001c0)) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0x802069c1, &(0x7f0000000100)) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$WSMUXIO_LIST_DEVICES(r1, 0xc1045763, &(0x7f0000000240)={0xfffffffc, [{0x2, 0xffff}, {0x2, 0x6}, {0x1, 0x3}, {0x2, 0x8}, {0x2, 0x8001}, {0x2, 0x4}, {0x1, 0x8}, {0x2, 0x9}, {0x1, 0x800}, {0x0, 0x3}, {0x3}, {0x3, 0x5}, {0x2, 0x57}, {0x3, 0x7}, {0x2, 0x7}, {0x2, 0xa34}, {0x2, 0x1}, {0x2, 0xe4}, {0x2, 0xa}, {0x0, 0x2}, {0x2, 0x5}, {0x2, 0x8}, {0x2, 0x753}, {0x1, 0x10}, {0x0, 0x6}, {0x1, 0x9}, {0x2, 0x6c0d}, {0x2, 0xa8}, {0x1}, {0x2, 0xc}, {0x3, 0x7ff}, {0x2, 0x9}]}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x54, 0x0, 0x4, 0x109}, {0x50, 0x7f, 0xff, 0x7}, {0x6, 0x80, 0x35, 0xfffff802}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000380)=ANY=[]) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x6, &(0x7f0000000100)='./file0\x00', 0x8}) 1.605261744s ago: executing program 6 (id=16): seteuid(0xffffffffffffffff) setresuid(0x0, 0x0, 0xee00) r0 = socket$inet(0x2, 0x8000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r1, &(0x7f00000000c0)=@file={0x4, 0x1, './file0\x00'}, 0xa) setuid(0xffffffffffffffff) connect(r1, &(0x7f0000000000)=@un=@file={0x9, 0x1, './file0\x00'}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x0, 0xa63}, 0x10) 1.574940613s ago: executing program 2 (id=20): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x5a) r0 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$DIOCSETSTATUSIF(r1, 0xc0284414, &(0x7f0000000440)={'./file0\x00', &(0x7f00000000c0)=""/23, 0x3, 0x3, 0x950, 0xffffffff}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x3, {[0x73b, 0x0, 0x2, 0x2, 0x8001, 0xbcfd, 0x6, 0xffffffffffffffff, 0x0, 0x100, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa5, 0x82, 0xce5], [0xffffffffffffffff, 0x180000001, 0xfffffffffffffff9, 0x2, 0x0, 0x7b98, 0x10, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xfffffffffffffffb, 0x11003, 0x4], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffa, 0x4], [{0x9b6e, 0x4, 0x5, 0x1}, {0xfffc, 0x2, 0x5, 0xffffffffffffffff}, {0x0, 0x0, 0x80000000, 0x80}, {0x5, 0x4b76, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0xb008, 0x8}, {0x0, 0x1fff, 0x7, 0x6}, {0x6b7, 0x80000000, 0x1, 0x80000000}, {0x0, 0x400, 0xfffffffc, 0x9}], {0x2000, 0x7, 0x10007}, {0x29, 0x8, 0xb0, 0x2}}}) ioctl$VMM_IOC_INFO(r0, 0xc0185603, &(0x7f0000000400)={0xb4, 0x10f7, &(0x7f0000000340)=""/180}) r2 = kqueue() kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) 1.574233319s ago: executing program 6 (id=21): mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000000)="bf3b684c5ae963b4567084e096cf973983ff0f0000000000009405095e7acbf4419893cfd424b75262dc5ade2ab6278ab80849177964f55be2796672f9ed186987b8c19d9295a17b98020f600200"/91, 0x5b}], 0x100000000000033c}, 0x1) ioctl$VNDIOCSET(r0, 0x80086476, &(0x7f0000000500)={0x0, 0x0, 0x0}) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt(r1, 0x6, 0x10, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) r2 = socket$inet(0x2, 0x1, 0x0) listen(r2, 0x7) ioctl$DIOCCLRSTATUS(r0, 0xc0284416, &(0x7f0000000180)={'./file0\x00', &(0x7f0000000100)=""/80, 0x9, 0x7, 0x2}) accept4(r2, 0x0, 0x0, 0x8000) r3 = socket(0x2, 0x8000, 0x1) r4 = socket$inet6(0x18, 0x2, 0x8) getpeername(r4, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8) r5 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) closefrom(r5) unveil(0x0, &(0x7f0000000200)='r\x00') 1.559260416s ago: executing program 5 (id=22): r0 = kqueue() kevent(r0, &(0x7f0000000380)=[{{}, 0xfffffffffffffff9, 0xc1, 0x1, 0xfffffffffffffff8, 0x1}], 0x4, 0x0, 0x8, 0x0) (async, rerun: 64) select(0x40, &(0x7f0000000000)={0x9, 0xb3, 0x9, 0xc, 0x0, 0x0, 0x3, 0x6}, &(0x7f0000000040)={0xf35, 0x7, 0x0, 0xd, 0x6, 0x714da6e2, 0x1000, 0x7fffffff}, &(0x7f0000000080)={0x3, 0x7c9, 0x7, 0x3f, 0x81, 0xffffffffffff24ee, 0x0, 0x1}, &(0x7f00000000c0)={0xff, 0x606}) (rerun: 64) 1.550179885s ago: executing program 1 (id=23): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x308}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x454}, 0x4008}, 0x38, 0x0) setuid(0xee01) r2 = syz_open_pts() r3 = syz_open_pts() ioctl$WSMOUSEIO_SETMODE(r0, 0x80045726, &(0x7f00000000c0)) poll(&(0x7f00000007c0)=[{r3, 0x2}, {r2, 0x10}, {r2, 0x40}, {r2, 0x2}, {r2, 0x1}, {r2, 0x40}, {r2, 0x7}], 0x7, 0x8f2) r4 = kqueue() ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) fchmod(r4, 0x28) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='r\x00') open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) (async) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) (async) sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x308}, 0xc) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmmsg(r1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x454}, 0x4008}, 0x38, 0x0) (async) setuid(0xee01) (async) syz_open_pts() (async) syz_open_pts() (async) ioctl$WSMOUSEIO_SETMODE(r0, 0x80045726, &(0x7f00000000c0)) (async) poll(&(0x7f00000007c0)=[{r3, 0x2}, {r2, 0x10}, {r2, 0x40}, {r2, 0x2}, {r2, 0x1}, {r2, 0x40}, {r2, 0x7}], 0x7, 0x8f2) (async) kqueue() (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) fchmod(r4, 0x28) (async) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='r\x00') (async) 1.549865292s ago: executing program 3 (id=24): openat$audioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = openat$audioctl(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$AUDIO_MIXER_DEVINFO(r0, 0xc32c4d02, &(0x7f0000000080)={0xf7, {"6c68c1f04a2c8d9b43b4b12864313e88", 0xff}, 0x39, 0x7, 0x10, 0x5, "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"}) 1.476936162s ago: executing program 3 (id=25): sysctl$net_inet_ipip(&(0x7f0000000080)={0x4, 0x2, 0x4, 0x1}, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) socket$inet6(0x18, 0x1, 0x6) (async) r0 = socket$inet6(0x18, 0x1, 0x6) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4) (async) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4) setsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f0000001300)=0x3, 0x55) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x7, '\a\x00', 0x1}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x7, '\a\x00', 0x1}, 0x1c) r1 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000000000000000010000000600", 0x7}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000000000000000010000000600", 0x7}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffd4bedbfeaf330800460000240000000000029078ac1400bbe0000002940400011100905d0200000000000000"]) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xb1, 0x3, 0x20, 0x3}, {0x86, 0xfe, 0x9, 0x8000004}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xb1, 0x3, 0x20, 0x3}, {0x86, 0xfe, 0x9, 0x8000004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r2, &(0x7f00000002c0)="f81ad30100060000000100000000", 0xe) socket(0x20, 0x8000, 0x79) 1.476476642s ago: executing program 3 (id=26): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0xffffffffffffffff, 0x0, r1) setregid(0x0, r1) r2 = syz_open_pts() r3 = socket(0x11, 0x3, 0x0) shutdown(r3, 0x1) setsid() sendmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0xf4, 0x400}, 0xa) r4 = getuid() syz_emit_ethernet(0x138, &(0x7f00000001c0)=ANY=[@ANYRES16=r2]) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) fchown(r2, r4, 0x0) getgroups(0x8, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) r7 = getpgid(0x0) r8 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r8) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x510, r8) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, r1, r4, r6, 0x6, 0x1, 0x0, 0x0, 0xae}, 0x2, r7, r8, 0x3, 0x0, 0x0, 0x101, 0x7, 0xf, 0x1, 0x3930}) utimensat(0xffffffffffffffff, 0x0, 0x0, 0xe4acbf41f004c922) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) r9 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0x83) ioctl$TIOCOUTQ(r9, 0x40047473, &(0x7f0000000180)) syz_emit_ethernet(0x2b, &(0x7f0000000100)={@local, @random="00000c000001", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x1d, 0xfffa, 0x0, 0x7, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast1}, @icmp=@generic={0xea029b78fa6b3722, 0xdf, 0x0, "e400000000"}}}}}) 1.472475501s ago: executing program 3 (id=27): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x6205, 0x2a3, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0x100000001, 0x40}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffff985e, 0x0, 0x0, 0xfffffffffffffffc}) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x11, 0x0, 0x26}, 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KDGKBMODE(0xffffffffffffff9c, 0x40044b06, &(0x7f00000001c0)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) select(0x40, &(0x7f0000000180)={0x2, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x3, 0x2000000000000004}, 0x0, 0x0, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) pwritev(r1, &(0x7f0000002640)=[{&(0x7f00000000c0)='O\x00\x00E', 0x4}], 0x1, 0x20ff) r2 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r2, 0x40047309, &(0x7f0000000100)) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x5, &(0x7f0000000500), 0x0, 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f00000002c0), 0x8, &(0x7f00000002c0)=[{{r3}, 0xfffffffffffffffe, 0x2, 0x4, 0x8, 0x2}, {{}, 0xffffffffffffffff, 0x0, 0x2, 0xe9a, 0x3}, {{r1}, 0xfffffffffffffff8, 0x4, 0x2, 0xffff, 0x3}, {{r1}, 0xfffffffffffffff9, 0x80, 0x40, 0x5a0e, 0xfffffffffffffffe}], 0x15, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r4 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(r4, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x1268f, 0xfffffffe, 0x10000001, 0x0, 0xfffffffd, 0x9, 0x8, 0x0, 0x2, 0xfffffffffffffffc, 0x9}) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) semget(0x3, 0x0, 0x216) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) socket(0x18, 0x1, 0x0) socketpair(0x18, 0xc005, 0xa, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r5, 0x25, 0x1b, &(0x7f0000000240)="ab383eb58b929f517aa7ce7b582625400000000000000000b81413b54841f83573071f878360f00f26d20d9747c5410ca2e94776a6d2d674df945caabbbbd65e8d824cfc154100b0f9857e4b4f8d245d37e61d02d434ab9e5917ecee1a9eea4acca4f1a51bf9ff724a2e9442fd54ce0f3f3b048b9163b2219cc19afe1d", 0x7d) r6 = socket(0x2, 0x8002, 0x0) fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) 1.463965385s ago: executing program 1 (id=28): r0 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) mknod(&(0x7f0000000980)='./file0\x00', 0x2020, 0x4000) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) truncate(&(0x7f0000000040)='./file0\x00', 0x600030000) pipe(&(0x7f0000000100)) ioctl$BIOCGDIRFILT(r0, 0x4004427c, &(0x7f0000000080)) 1.33705317s ago: executing program 0 (id=30): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwrite(r0, &(0x7f0000000180)="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", 0x19f, 0x3) execve(0x0, 0x0, 0x0) r1 = socket$inet6(0x18, 0x1, 0x6) semget$private(0x0, 0x0, 0x1a8) semget(0x0, 0x4, 0x61e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) r2 = getegid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0xff, 0x1, 0x9}, {0x24, 0x3, 0x1, 0x1}, {0x9b1e, 0x2, 0xf6, 0x3fd}]}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) setresgid(0x0, r4, 0x0) setgroups(0x3, &(0x7f0000000140)=[0xffffffffffffffff, r2, r4]) setresgid(0x0, 0x0, 0x0) setegid(0xffffffffffffffff) setuid(0xffffffffffffffff) r6 = semget(0x0, 0x1, 0x0) r7 = socket(0x2, 0x4001, 0x0) setsockopt$sock_int(r7, 0xffff, 0x1, &(0x7f0000000080)=0x9af, 0x4) close(r7) semctl$SETALL(r6, 0x0, 0x9, &(0x7f0000000340)) bind$inet6(r1, &(0x7f00000000c0)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x7}, 0x1c) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000000)) getsockname$inet6(r1, 0x0, &(0x7f0000000100)) 1.336025975s ago: executing program 1 (id=31): r0 = kqueue() write(r0, &(0x7f0000001200)="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", 0xfff) syz_emit_ethernet(0x10004, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa2c1000000000000086dd60db834439c11600fe00000002000054a8f8210000200000fe8000000000000000000000000000aa4e204e2000089078"]) kqueue() (async) write(r0, &(0x7f0000001200)="9efecdc894ebff045c658d08c4e14b96bd42cb7368fa5459ce17a382c24cd4f8756117a02519b71c1dbe4a47b4045960e025fd58af57b7bebef861a1ea81159dc2fc71e3924437096b2aa7db9219237671b68877177aef802db59cc83fcc7971386516ee0f057ef9de9e9dc032f65a82d554848cede37007864c53314c335a15353d57b17da1ad1d5dc5c3daf0527b9007e43373b4e9f1bb3acae83b75e0499a7451a4531a9d22deeb7f801770c1ccb8a14aeccf4141664cb8baca1f707879a3cf5b50635e59807d0693f3f45200a86d8fdbd4b754741a4c66bf8cf4cbe9a23a79c18e613c4d521716b0add3b880c52da1a1ffd7aed6dec9d1841e7a7016f28ef191e4b02f86b5a0a09f169b6d57b0e46eb63cb46d8aa1c7073071c7ca52f0794a42a558ed38ba96bfc342eb1b9f607f7cfc455c782f90951420aa1d5f2a7b83e31325336ed95f99f7f42b80bf16e9fef5973fe6381cba3fcf6d1e847520b7542668c122c215121ba52e2fc44e47c911f4647673ba6688ac39f658cad2f38a91695e48746f45762dbb93d6d03f6a39b30a3ea7ba7e258be4c486d6ea1d09e1c388fd4f7ecb2b6b73dae8bc13997f910df9e6f580b6a49c034c9b7c4b98e657716fa51bd05baeef4d77695420e3448a885f35e97f5197cf9736f32d58e1c3fd6a3992d00f5b3ec3095b6ac38b33ddc2086ee7fec3c1b39ef36dc77db1ea4e3622887b6b2b02bb5435cecc600f9c7d77a5a20f927ab6c2a17280f41fbb7953b88303ceb89dbb344c98fff4e95a31277b34ddfd8caaa9ccf7c15dd59f9a217eac887a9e0dfae94408a6840aa58dfeb4b718fe5cb99136a6ed32dfcb056607151888fdc35fd3d2372117a55d76e365c1b77497f2db291d176ee03348b0f111223f3e720b059c8d7182a66b843d0ccf2b536ab667b6f8cb260334261c35c0525407fcaf7b223afeb62ef60f6c616904417f5279107467f8bbac992876b0fbdf13f1ca720fd50486359e7ba1e95caf41f2692cc5f43209b4cbb6759acb9ba0543e59bfc6b6e66620ffb42c5dface1eab5d53054e6d0585f94cf9fdd443a6396c7c78375a123a1961e4928a72eedfed72b606d86c754bad6c68080df099ecd08716214600f272f1d43740a70573e971bb21c0485ed8850d12d680b2578be9b443d461f4f56b5ec9f7fce40e710ba8571be6ab4e2a7976bbd1c70dda2aa38516a4f042a8aae30de818eb478dd1f66672bdb7fa873e3a77cc5e73ff294716254035563a01b73d4ac961d7ae2ea47634cc9071a2bc3bb8687dcb1d0697c615a19c374aae377edc9a25d22bc0fb28519df4d63b53fd94ef625a57b9f5fe632df1d78abb96a6bb3a33377c0bd751c8573bff42a924e52ee9838f6b0fe1d871fab42ea2cc84d38b0e68a24e2af97108709bda0b8ef164fe6d71658babe479b233e5ec278c20db029eebd1b065c0d3e6905640b9fd8a711e4f93f1befee7de25ef3977d4ca28767e8846a75c5bb67f7744bacf15129f807bea72c388a3cf779b33cccb35b98cfada2ee8e14bd5dfdb1d1b161c9206ddd0dbf42e207c96ef52d5efbc93a5510934ca96a4787725fddca78bb221941b95e5b73d5dc4abb95dc782f1b2e0c5753afd55f7d73301aa0bfe1e31705668b18a17ff43e7f49659980c034310554a3dfa1c5b48b351c2d4c48aa26ca3a051ee63ad94376ed0ccc05da0c72db7a40aefc350c0f3c3349278d09b5bda10569941302d989764514febec0a9a79484c2182e797f033851100edb54c5cae06835af5373a3a410634c8525e1f8e3d30ee2e138aa1e020a8701bbaa2f3e5149de92da7df9aec7705e48c5cfee94a968b3653aac7fc81f35419265c7989c8829e7b693ef7ed6ab091fa7312d1504b12e50f0d6fd26537625092c33dd02c716951772888bfdb68dfb3e12e45d3b41ec35482990a3d37e2160d90040e206240b4dd2f4aac2a76a9164311e17f33ed76935c3a38b56196d82a2e32fbeb61633a6c626d0286bd99d6db04e909815d638a07e5b42bcaa67f835e0cdff07a670a17ac9b2c3cf58c2596d1038419d0afef2e2783479094960d90a12086bc134d2f962e9f755c0477028b37c021a891a118b1801a46add343e76ae360c628fd1a9080ce45d9bec33e235058b1512f07857c62fd4b3dce092cb517d567d95f894e87712b32072981101f90437aff2911b90620d6ec27a4c34d9ad520af82ef63aec6408596cddf788ff5e60583bf290834ea837cb04047ed1182fbd352e0246c84dac0e7ecf09dffd3d0d3a8c7dc3ea7b68360565678044964c27953b06446ee18b94475030d7f237c5b877607cc8eeced46517a2bb2fa7223a8feefbd9f6d97ffaa313062714dd736dd804aedb7d6cb62fd96073797278f8198c8bebc4fbfe95d7a7ea12378ba089a8274b27e8875e0cd3dfad440417e452a57bb3b4a7aaa16ad567be0481762267a4e4bee65cc401adad020480f65eb9702ccf9626bc1cbb390bf4922d783f837eb422a52d8f71fc10a1ed491238f16b9e0996b03aa7425f39127e8069d9c2c31b6c0ed85a63399bd2915b429d03df7edd2d11353780d77faac14e0312d8569d5f1e6313971fe6ddc6e483f89d2b74fc70f80296b1684adde5490988a000a367f284cc402081b32838c1318f0d51a0328a1b4f17b19e397e19a9c97fe3f8320e3e350397e383dc145d76350d0ab57b74620fd4fdc8f2d280776b5c8f0f595f0f25f8e5890ea30b13fe74abd163f70e11f3c6e3fd1ddb1f4a6f7d467e87e6020e66aea777c9fea94929d7b3ed223bc83f8407d988142839796420df1d7048aeda8bcd36dfe4d2bf9dd0323e9d71a81cdc4bd5378792061b7a27d153c83b611eca930d8a7fe4c744328161bc62fd6034d9eb76ea03631c87186cc21cb6fbd6085a3de776b6f88c344d5e3bf4f6c4d2e31c33f47620e0c6246e7ecc044549e2c426ef05d09d375209e18135e95fb78db59acbc5cc992ff9afc886def178563917b8eea5fd9dabd458b325ab78ee4c7ce1363343f212cdc68a4800afd3e4af7fe9c144731f76c7a43f450e7bb738426e4476d7eb870e90028a16f0c18e9e69e8bcf473c0602d39cb9365df1f93279313d8302755b62ab700f9c3619a731a907dd70b5f0101707ae1c58ab29572bbd6082a984a8e33d28e0e6d9ad4be2f142e0a3e0ff53c8f3a04ed07084dc94871d89fefc1150bac32a9ebac2f98834534c49675804a13e9d6630f62c1a9f141c741bdea06e41f896644e0b5da0a395bce9a7910ce7212b201fbfa6a93fc3c6f50bb13ba5affa9ab3b5e932d9f12b5ea09884b055ab118a35c7da4c7d21b70d0853ba89c3443aeabf749540d42fd85c806d7e701344efe6aea1891e5b06a741803b14794a5c275663834ee3391d5a43bd2b80f300ca2422c4c75f7525ce96bf260e88eeec6ee55a856f79f13da165c8eca0098fb93953b0f1e1e86e040fb84ca2bb9dee53dfc86572195749978aee8a83328367bcab4e395e6ac6a3932849319806c40a051169e28b30ea45fdf347c1556b4180668cd5e2627665a12cb0119bb29d9998ea00fda3a583ce76d7e63aa5857db379f05c9fa94bae5a50f9aa43464b93bd2a879572e1107b17249d24ef06fc9ad43bc40a58b874364ee39efb1ce268dfa62b894d65baad62a3563dec4cb59df9959fe46183679900e0e310dc151536bb19527412fe8a04562992effb36f490bf65a632f41de2e80ce9d969eb4a9e8c5770cc0fcab3901de06afba5282872b13e9b9a1d29d492c5eb4693b81ddda9b00b5ab2b740118630d02aa65c118eda13c53bca5cdccbee2efb90180a50fffac3647b623c75961d43f17be5f771ffd0d1054d197c3e3fa1402f5ee37cf2427c6e4b0197cbf1eb6f663ad26b239d26887c8f05601f4c43614e0673df95e5aeba457b4f89eee54445cb639e071138c9fa82502869df26070076413c04d4c8e06c1eb6ba367c66b70154bcbdf786135175ef52702ddf78a58ae9be9870d0c67c1ac45d1d7dc06dee96e1551d2790e9dd0d244883872add15585afb3313db1981d4d327f892b0341c479137bba3dc981169627f23715616519cf1344d56ad8f105368ac9d051573edb4463618467a0d80068834e97cb330f6d4afdd86143a68ee1d7e627a414917c38748af1e1f85e47b7d4134bcaf5dc8ca464e0b1da8c7141f972ecd4efe0e97c78b62c43b6447e2ad7f6842d58ea72c5c44becd0fd7eb9eb37f0be57f9876a494a2248f139800d73600a8ef3f0161ef13af37c5aff839b95d4c97047ef2cf04a7c9d0c7f8b180faad9b5b4e0b09c242953627b4d2a216ca846bb6203e7b48a78c7919ce8bd48fc353649fa21e77e2caa0166c1b5f5020d044e97bb45d753f495a31bad40396631787d28505de8409954f510c46f749d8a1858fabbee06d872881bbdc28720afa15bf065187a1e9ee50de68f5ec87b44d20de5dfc20a9aa06c9f761180959ea7a9c960cee3ce862106d2c61ea9419b64296efe8e52f5f73c919eaa4365334c300871e8c1714015ea3cd7f5c8829922efc9af9b2395a8630c25c53ce9d789d0da3fe08af56937481f22c79af974b9da54f91813ad7d80ee4595abc7a2428c8b4ff141164bea6809cc14a37598e6b22cbb5dd80e60c02a1f64173764480616c0c0ac8947111d2cedbcf9af2d6c460df03027ff57100d7b1487f585fd827a299c914159a56700339baba8749cca978b107c6d140c1afa03ae968ce3a06503f8683ee4659c17981157cc282aaa8372eb3987b12d2cc4ed58ecd694edb1bb4aa4e0882a19c07dfd327bf938f29f7fc182d47d3da82debc0cbe1d4fa6523224b3e30dc89f95ceaf6c4e8923ac53e01fb07929b1f7b75a6a0cb9a8cfff030db708bcaaa01fa4133068b68a50df7145a06a6610dd825cf2b30fa6b293c015109343cc6fc70d045c315cccdd4613f94403eace4b9cb351705cf39889f5dfe0bfe5b09217b3d0970a6ec055c214502e6b58ab3c031dee3290c738e8cab485d27f09ac8aa8af315bc21ac8b1febf0cb9c5509e093321295fc23e60d1dd729625559a00c527e6b0ff5eb3d6665874dc9d1ea6377a8568c795a53cef9bb05e4e2a6d5bbc11b1defcd2e8b0efa29cd97c7d72cb0037c03c4c93f0c6f873e4816a4b7b7030e0339329ae2d1b59de510ffe8402d0864d64d3070c52281d4f70671f0843c688ecbc0a263e2181db83a0e7efbcbe4e840403de0d8811830de28dd27dde0eb42346dd4138c93c5f4890c33e1f501054ae51944c25af4fd211d63eb2d19b4e6d137461259d88ae7954f9950271280afc1bf81a90a66a007cda07d3a73e75114d5cd549e732c040ad4455a9f72241ca54ff66d5aea2b87d39ce331fdbfff565bf8c6f3d8b3c7b49a4c9978b9733e25aa89bdb8743a9e3941da1f8735b12db573deeabad3229d9b555b3e2c409ec45bda137a614b867ead636c1babfb23056c2476eec7a997a2c544cbc8b5dfa96a8b9d87d88c78f5fe2deeb51e6e40f4fc1fed4370d4188d1bda5c395d3427f734010db5033e2b3899baf04cca15daa6fd7aca56950627a6d5d7d5561d809f8b0ecb2bc778fb38e4be8eec2bbc4ec6e22f50dfed407f34937ce02939989a5107c25163d68bcc2f013051711ee15f911193b04baa2b7d435e82d8e23f9d16acddcc998669a5a483ba77b45ba3772483b55a44dbee028c0b926751a6dca642a80fb1f95c1c78686409e8c2a4c66ed25a8fb30f9d210a906f453b6e9e6ef5884ff4d4496cf269c4dbfe72e2f594a7b2a4bac43", 0xfff) (async) syz_emit_ethernet(0x10004, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa2c1000000000000086dd60db834439c11600fe00000002000054a8f8210000200000fe8000000000000000000000000000aa4e204e2000089078"]) (async) 1.333367775s ago: executing program 1 (id=32): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x1000, [{0x1, 0x7}, {0x3, 0xff03}, {0x2, 0x1}, {0x1, 0x800}, {0x3}, {0x5, 0x73f}, {0x0, 0xaa59}, {0x4, 0xb5c}, {0x2, 0x1}, {0x3}, {0x1, 0x3}, {0x3, 0x80000000}, {0x2, 0x5}, {}, {0x1, 0x5}, {0x1, 0xffffffff}, {0x2, 0x3}, {0x3, 0xffffff01}, {0x3, 0xfffffffe}, {0x3, 0x7ff}, {0x2, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0xf208}, {0x2, 0x41000000}, {0x1, 0x697}, {0x0, 0x1ff}, {0x0, 0x202}, {0x3, 0xffffffff}, {0x3, 0x9}, {0x1, 0x5}, {0x3}]}) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000080)='\t\x00\x00\x00', 0x4) r1 = kqueue() kevent(r1, &(0x7f0000000300)=[{{r0}, 0xffffffffffffffff, 0x1, 0x0, 0x10, 0x6276}], 0xd026, 0x0, 0x1, 0x0) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x2, 0x0, "ffe54a09470300261febf2fc8dc83304", 0x1}, 0x1c) r2 = socket(0x18, 0x2, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) closefrom(r2) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) 1.332131153s ago: executing program 4 (id=5): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)="ea00000100000000b6973fbc", 0xc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x1011, r0, 0x0) r2 = socket(0x2, 0x2, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x1d0) connect$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x1}, 0x10) sendmmsg(r2, &(0x7f0000002940)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x60}}, 0x38, 0xc) accept(r0, &(0x7f0000000040)=@un=@file={0x0, 0x0, ""/530}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x1a8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) ioctl$WSDISPLAYIO_GBURNER(r3, 0x400c5752, &(0x7f0000000280)) 1.331435472s ago: executing program 4 (id=33): stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet6(0x18, 0x3, 0x6) (async) r0 = socket$inet6(0x18, 0x3, 0x6) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x18, 0x1, 0xe11, "ff012123260000006f636100", 0x4}, 0x1c) 1.330184664s ago: executing program 5 (id=34): setgid(0xffffffffffffffff) r0 = socket$inet6(0x18, 0x3, 0x0) getsockopt(r0, 0x29, 0x3b, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) getgroups(0x2, &(0x7f0000000000)=[0x0, 0xffffffffffffffff]) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) sysctl$net_inet_ip(&(0x7f0000000300)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) setresgid(r2, 0x0, r3) setresgid(0x0, 0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000580)={{0x0, 0x0, 0x0, 0x0, 0x84, 0x1d}, 0x0, 0x0, 0xbe7f, 0x602298e2, 0x3a6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}) setuid(0xffffffffffffffff) msgrcv(r1, 0x0, 0x0, 0x2, 0x1000) 1.323187141s ago: executing program 4 (id=35): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) pipe2(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000040)) ioctl$AUDIO_MIXER_WRITE(r1, 0xc0144d01, &(0x7f0000000040)=@set_ctrl={0x3, 0x2, 0x1}) setuid(0xee01) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x2, 0xff, 0x1, 0x9}, {0x7, 0x49, 0x6, 0x6}, {0x9b1e, 0x2, 0xf6, 0x3ff}]}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) 1.322740997s ago: executing program 1 (id=36): r0 = socket$inet(0x2, 0x3, 0x0) setreuid(0xee00, 0x0) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000700)='./file0\x00', r1, 0x0) setuid(r1) mknod(&(0x7f00000000c0)='./bus/file0\x00', 0x2000, 0xa807) mknod(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) ftruncate(r2, 0x8531) utimensat(r2, &(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={{0x80000000, 0x80000001}, {0x8, 0x1}}, 0x2) fcntl$getflags(r0, 0x1) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) open(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x9e) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b0000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x3}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r3, 0xc4504449, &(0x7f0000000740)={0x20008, 0xffffffff, 0x2, 0x7, "04650000000100", 0x5, 0x4}) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000000)=0x2000005, 0x4) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) 232.115617ms ago: executing program 2 (id=37): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000001280), 0x10, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = setsid() pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x10000) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x10, 0x0, {[0xfffefbfffffffff6, 0x1, 0x2, 0x5, 0x2, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x100000000004, 0x1000000009, 0x3, 0xffffffffffffffff, 0xff, 0x8000000, 0x20000000001000a8, 0x8000003, 0x6], [0x80000001, 0x80000001, 0xfffffffffffffffb, 0x8000fffffffd, 0x100, 0x3ff, 0xfffffffffffffffa, 0x3, 0x6, 0xffffffffffffffc5], [0xfffffffffffffffa, 0x2, 0x3, 0x3, 0xfffffffffbffefff, 0x11006, 0xfffffffffffffffe], [0x100, 0x8, 0x3fe, 0x100000000, 0xffffffffffefffff, 0x6], [{0x0, 0x5, 0x0, 0x9}, {0xfffc, 0x0, 0x4e, 0x1}, {0xfffd, 0x100, 0x5bec, 0x811}, {0x3, 0x800001, 0x4, 0x80000003}, {0xd, 0xfffffffe, 0x81, 0xa000000}, {0x5, 0x2003, 0x3fffe, 0x9}, {0x0, 0x5, 0x8, 0x8}, {0x0, 0x965, 0x0, 0x9}], {0x1ffc, 0x1000001, 0x10000}, {0x8, 0x80000001, 0x8}}}) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0) kevent(r3, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) accept$inet6(r2, 0x0, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f9", &(0x7f0000000080)=0x2, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x40, &(0x7f0000000140)={0x2, 0x81, 0x7, 0x80000000000001, 0xffffffffffffffa5, 0x5, 0x3, 0xaeb3}, &(0x7f0000000080)={0xde4, 0x7, 0x3, 0x2da7fd74, 0x6, 0x6, 0x0, 0x4}, &(0x7f00000000c0)={0x2, 0xac1e, 0x0, 0x89b7, 0x7, 0x8, 0x7fff, 0x64}, &(0x7f0000000100)={0x0, 0x86c4}) r4 = msgget$private(0x0, 0xb) msgctl$IPC_SET(r4, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x1, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xc, 0x8000000000000000, 0x2, 0x0, 0x0, 0x100000000, 0x0, 0xffffffffffffffff, 0x0, 0x7}) setuid(0xffffffffffffffff) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x8, 0x800) msgrcv(r4, 0x0, 0x0, 0x0, 0x800) fcntl$setown(r0, 0x6, r1) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xb, 0x2761, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x200, 0x8, 0x80}, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x2) sysctl$kern(&(0x7f0000000180)={0x1, 0x45}, 0x2, &(0x7f00000001c0)="47f3b7512ac0f206e594d4c089cd5fd7ba99be3e38d9acbe2e2f0ace26b791e3074089ea5e4fafa92744c1787a6f807a43c1a1fcf898d653c5a93e8138733b46e53d80d0e462bfb3c011fa73b672beaddce4cec179677c771535d606db092286c989aecac2f9f10bf6e7bdfe263a16e52037df4dfe35c7140fd1203dda9985bb11683e240614ce58b08ceedfea3d79efb34ce6e56b4e7905521091df0003f358723744ac7f236e02e8380cc76fc37a087b75c73904f2f0fb535d96a587892de4f64dd9641a0d0a639e", &(0x7f0000000380)=0xc9, &(0x7f00000003c0)="dc961b136243e75f623f45b5188b4f8fd0571d15206ec939a3ac4aa8900ed0ae6bf3447ffa845303a0e3d9554cb7a20fab00316fa25862d7de9c7cd205e5dd51f629b64dcfc24b9a42cc46faf475848a7c941cc3685433b2b8b7671d48c417210c6a4631f6fc9cb96f90a54c958df13a2d70f80448c028fd0dd36a1276c7f2de3c582bdff401c3a71ca4e8a002d49c50c746a53871a8ca2d9fc09c7a0c04e7832ea40827ea71378329e3860dba2c52bf359f4a8fdbd6ce1fd5dbed6d490986817af5bc33ff2f8da4591c0ba0d588c0e8de88abf95bbde5bae72419c78afafeccdd4c003e473d", 0xe6) 202.359865ms ago: executing program 6 (id=38): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x11, 0x10000000000003, 0x0) fchmod(r1, 0x20) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0) write(r0, &(0x7f00000002c0)="7c84cf179279b50eda5dd1951a661d2e3a20851082c188f8b3d8a063d2025ff0d27a44bc29bdcac27fcb7aaa95cb2007be22c5553cd2f66a1f419a83d4275218a89d7a7803f069d851ff628dd309c40f6e3c932af00cb6219ae6e21d2c28d492cd5404b16dfa627d93b1e8ad2ea49d2344c1a3b234bd6f1c70fd4252844a6e6ab7b8997bc55fa22ce951ee038d289078b95510b0f2473ce1348434f0ec4a885ee84fd08fc50f08ca7991af3f8c322b496466f804c4b700cc9391855bd0ee339196de2b5ec2d8425c711d3f9e051eb055d45c693d7549712f5284a9fbca7d15c5bf1a9c8e3b3c1a43983056782e046c29e3d57082f7743b8bf6d994cd3c26c85609eaa11e6f7bc4", 0xfffffdaf) execve(0x0, 0x0, 0x0) 201.134538ms ago: executing program 7 (id=39): r0 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f0000000000)=0x2, 0x0) r1 = syz_open_pts() readv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/163, 0xa3}, {&(0x7f00000000c0)=""/173, 0xad}, {&(0x7f0000000180)=""/83, 0x53}, {&(0x7f0000000200)=""/210, 0xd2}], 0x4) 200.217148ms ago: executing program 1 (id=40): r0 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x3000, r0) r1 = msgget(0x1, 0x281) msgrcv(r1, 0x0, 0x0, 0x2, 0x1000) msgctl$IPC_SET(r1, 0x1, 0x0) 89.208814ms ago: executing program 0 (id=41): mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x202) syz_emit_ethernet(0x52, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6099cea6001c2c03cb697a653e336f000000500000000000ff0200000000000000000000000000011100002e"]) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40d) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) accept$unix(r0, &(0x7f0000000200)=@abs, &(0x7f0000000240)=0x8) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebf6cbdf13b9fd812eaa4e712e54e69931929648", 0x14) ioctl$DIOCXCOMMIT(0xffffffffffffffff, 0xc0104452, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc450444d, 0x0) openat$dri(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x10, 0x0) setrlimit(0x8, &(0x7f0000000140)={0xa, 0x5a}) r1 = syz_open_pts() close(r1) r2 = socket(0x18, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x1, "fe80000400000000414a0f47a500fdff", 0x9}, 0x1c) unveil(0x0, &(0x7f0000000100)='x\x00') syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000100)={0x920e, 0x8, 0xffffdf82, 0xffffffd1, "08955c1cfac164e20a07da23b8aa291cfcf20800", 0x4000000, 0x5}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) unveil(0x0, &(0x7f0000000080)='r\x00') syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYRESOCT=r0]) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x565, 0x0}) 88.411224ms ago: executing program 5 (id=42): sysctl$net_inet_tcp(&(0x7f0000000000)={0x7, 0x2, 0x2, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x3f) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r0 = socket$inet(0x2, 0x4, 0x8) setsockopt$inet_opts(r0, 0x0, 0x24, &(0x7f0000000180)="fd0cc085", 0x4) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0xa4, 0x40f0}, 0x10000000006, 0x7, 0x8, 0x2, 0x60000000002004, 0x0, 0x0, 0xfffffffffffff0d6, 0x0, 0xfbfffffffffffffe, 0x0, 0x101}) (async) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) r1 = socket(0x18, 0x3, 0x0) setsockopt(r1, 0x1000000000029, 0x4, &(0x7f0000000080), 0x0) (async) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000280)="b100dce5000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x2, 0x0, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffffaa, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) (async) write(r2, &(0x7f00000001c0)="f6077942bea551456013fb24d03db56800ea3ee255391b8d7c3cdf75da88912f5e2b6de88343554de5af1fae90d2c8597e39b22d3cdb1280e93e67f1cfeb25d865254b6cc7d27c753391d7033c41339900d977f20a97d12705f533e311033439ca41d1930a4ae7fc697df5e07ce58130f399b0f84febde1b02cd3945daca572998a91f58fa9c18dbeba0279995fc6096e471f3fc9d2712b94041e372eb10d704098aafe4a1931e59e6", 0xa9) 87.751712ms ago: executing program 5 (id=43): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwritev(r0, &(0x7f0000000000), 0x0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) setreuid(0xee00, 0x0) r2 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) fchown(r2, 0x0, r4) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) access(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$DIOCGETRULESET(r1, 0xc444443b, &(0x7f00000007c0)={0x0, '.\x00', './file0\x00'}) unveil(0x0, &(0x7f0000000140)='r\x00') openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) pwritev(r0, &(0x7f0000000000), 0x0, 0x0) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) setreuid(0xee00, 0x0) (async) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000001c0), &(0x7f0000000280)=0xc) (async) fchown(r2, 0x0, r4) (async) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) (async) access(&(0x7f0000000000)='./file0\x00', 0x2) (async) ioctl$DIOCGETRULESET(r1, 0xc444443b, &(0x7f00000007c0)={0x0, '.\x00', './file0\x00'}) (async) unveil(0x0, &(0x7f0000000140)='r\x00') (async) 86.641234ms ago: executing program 0 (id=44): r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52267, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xa010, r0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r2 = syz_open_pts() syz_open_pts() (async) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0x80, 0x4, 0xfbfffffe, 0xfffffffe, "dd6c1f460000ff20004092d6126e4ed671e500", 0x800}) (async) ioctl$TIOCSTART(r2, 0x2000746e) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xc, 0x0, 0x2, 0x4}, {0x40, 0x9, 0xf7, 0x6}, {0x9b1e, 0xff, 0xf4, 0x4000800}]}) (async) openat$bpf(0xffffffffffffff9c, 0x0, 0x8, 0x0) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r3, &(0x7f0000001680)=[{&(0x7f0000000240)="6d5301cc203972", 0x7}], 0x1) (async) execve(0x0, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) 56.866691ms ago: executing program 6 (id=45): r0 = socket(0x18, 0x2, 0x0) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x2, 0xffffff01, '\x00', 0x1}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg(r0, &(0x7f0000003d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x400) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00003a7000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f00004d8000/0x1000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil}, {&(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000668000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000696000/0x2000)=nil, 0x3}, {&(0x7f000013f000/0x2000)=nil, &(0x7f000064d000/0x3000)=nil, 0x2}, {&(0x7f00001a0000/0x1000)=nil, &(0x7f000069b000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xffffffff}, {&(0x7f00005fc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x80000}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x7}, {&(0x7f00005fd000/0x2000)=nil, &(0x7f000069e000/0x2000)=nil}, {&(0x7f00005fa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1}], './file2\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7721, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x119, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddb, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4326, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffc, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f18cd00, 0x0, 0x1000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSETA(r1, 0xc0404469, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008\x00', 0x0, 0x9}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/240, 0xf0}, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) close(0x3) open(0x0, 0x10, 0x0) r4 = socket(0x18, 0x3, 0x39) setsockopt(r4, 0x29, 0x6c, &(0x7f0000000040), 0x4) 55.598929ms ago: executing program 0 (id=46): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa17f7193403c6ab5, 0x0) r0 = socket$inet6(0x18, 0x1, 0x6) semop(0x0, &(0x7f00000000c0)=[{0x2, 0x0, 0x1800}, {0x4, 0x2ff}], 0x2) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x1e62) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xc0) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x802, 0xa6, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010002, 0x10, [{0x0, 0x7, 0xfffffffd, 0x71002}, {0x3, 0x3, 0x8, 0xfffffff7}, {0x101, 0x5, 0xfffffffc, 0x9}, {0x10000000, 0x10001, 0x6, 0x7}, {0x7, 0xfff7, 0x2800, 0x7}, {0x21, 0x650, 0x3, 0x6}, {0xce1, 0xffffffff, 0x4d4, 0xffffffbb}, {0x100000a, 0x8, 0x14, 0x2}, {0x6000001, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1ce, 0x800, 0xdaa7, 0x3}, {0xc, 0xa, 0x5ab0}, {0x1, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffb, 0x60, 0x7}, {0x1, 0xfffffffa, 0x205, 0x4}, {0x0, 0x0, 0x200001ff, 0x230003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r2 = socket$inet(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000240)={0x10, 0x2, 0x1, 0x800}, 0x10) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000000), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x7}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f0000000100)) setitimer(0x1, &(0x7f0000000000)={{0x7, 0x7}, {0x7, 0x3}}, &(0x7f0000000080)) r3 = socket(0x18, 0xc003, 0x3a) sendmsg(r3, &(0x7f0000000040)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x10000007, "feff00005f5026bd6c00000000000001", 0x101}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000100)="0300020000003a9a122b1b89978158abd6f06f13", 0x14}], 0x1, 0x0}, 0x2) sysctl$kern(&(0x7f0000000040)={0x1, 0x41}, 0x2, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 55.104833ms ago: executing program 5 (id=47): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$AUDIO_GETSTATUS(r0, 0x40204128, &(0x7f0000000040)) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{0x9, 0xf2, 0x1, 0x1}, {0x7, 0x4, 0x99, 0x6}, {0x7, 0x0, 0x1}, {0x4, 0x8, 0x4, 0x2}, {0x7, 0x4, 0x5, 0x62d3}, {0x3, 0x30, 0xa, 0x9}, {0x8000, 0x2, 0x37}, {0x8000, 0xfe, 0x2, 0x3}, {0x5, 0x7, 0x5, 0xf3f}]}) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x100, 0x4) getdents(r2, &(0x7f00000001c0)=""/231, 0xe7) r3 = openat(r1, &(0x7f00000002c0)='./file0\x00', 0x20000, 0x20) socket$inet(0x2, 0x4000, 0x97) fcntl$setstatus(r3, 0x4, 0x80) socket$unix(0x1, 0x5, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000300)={0x401, 0x9, r4}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000380)={0x6, &(0x7f0000000340)=[{0x67, 0x40, 0x8d, 0x8}, {0xf225, 0x8, 0x8, 0x5}, {0x9, 0x6, 0x9, 0x1052ec6a}, {0x2, 0x4, 0x0, 0x7}, {0xc4, 0x6, 0x2, 0x4}, {0x700, 0x5, 0x63, 0x5}]}) mknod(&(0x7f00000003c0)='./file0\x00', 0x40, 0xba) r6 = socket$inet(0x2, 0x4000, 0x3) getsockname$unix(r5, &(0x7f0000000400)=@file={0x0, 0x0, ""/4099}, &(0x7f0000001440)=0x1005) syz_emit_ethernet(0x6f, &(0x7f0000001480)={@empty, @local, [{[{0x88a8, 0x6, 0x0, 0x1}], {0x8100, 0x2, 0x1, 0x2}}], {@generic={0x7005, "31a23ab8ce1471f651249f54942ecbe2fbfc64bce932bae38009d5e4004fa4f9529616e3e96248eb2ad2a95eda4991d379a93383aa6f5d45b9005eb026147658e8ce4752997331493900af66a3cd2213d2cafe7d7a09beee55"}}}) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000001540)={0x2, &(0x7f0000001500)=[{0x3f, 0x10, 0x4, 0xfffffffc}, {0x8000, 0x8, 0xca, 0x2}]}) openat$zero(0xffffffffffffff9c, &(0x7f0000001580), 0x20, 0x0) r7 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000015c0), 0x800, 0x0) ioctl$WSDISPLAYIO_ADDSCREEN(r5, 0x80245753, &(0x7f0000001600)={0x80000001, './file0\x00', './file0\x00'}) r8 = accept$inet(r1, 0x0, &(0x7f0000001640)) getsockopt$sock_int(r8, 0xffff, 0x20, &(0x7f0000001680), &(0x7f00000016c0)=0x4) setitimer(0x1, &(0x7f0000001700)={{0xfc52, 0x7}, {0x3, 0xea}}, 0x0) r9 = openat$vnd(0xffffffffffffff9c, &(0x7f0000001740), 0x800, 0x0) fcntl$setstatus(r9, 0x4, 0x8) ioctl$TIOCCHKVERAUTH(r7, 0x2000741e) bind(r6, &(0x7f0000001780)=@un=@abs={0x74, 0x1, 0x0, 0x3}, 0x8) fsync(r8) syz_emit_ethernet(0x6a, &(0x7f00000017c0)={@empty, @broadcast, [], {@ipv4={0x800, {{0x11, 0x4, 0x2, 0x27, 0x5c, 0x68, 0x10, 0x9, 0x3c, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, {[@timestamp={0x44, 0x30, 0x9, 0x0, 0x9, [{[@broadcast], 0x5}, {[], 0x800}, {[@rand_addr=0xaac], 0x81}, {[], 0x8}, {[@local={0xac, 0x14, 0x0}], 0xe3}, {[@local={0xac, 0x14, 0x0}], 0x81}, {[], 0x2}]}]}}, @generic="30ab85299366e744301dca94a3a67e3b6861012e6a8675c8"}}}}) 54.706319ms ago: executing program 6 (id=48): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d3725864749b) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x0, 0x4787, 0x1002, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x100000000, 0x5, 0x7b98, 0x6, 0x0, 0x80000001], [0x5ad8, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffa], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8000000100000000, 0xfffffffffffffffe, 0x3], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5, 0x10}, {0x0, 0x0, 0xfffffffe, 0x81}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2006, 0x40000, 0x2000000000000000}, {0x6b7, 0x0, 0x1}, {0x8, 0x1, 0x0, 0x8}], {0x2, 0x6, 0x8}, {0x21, 0x6, 0x100000b0, 0x2}}}) r1 = kqueue() kevent(r1, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) (async) close(r0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x11, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}, @icmp=@echo_reply={0x0, 0x0, 0x0, 0x66}}}}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x8, 0x0, 0x80000001, 0x327, 0xc0000000, 0x3, 0x9], 0x7, 0x10004}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$TIOCSETA(r2, 0x80804465, &(0x7f0000000000)={0x20008, 0x10001, 0x8, 0x1, "44f1ffffff000000000400", 0xd2, 0x2}) 9.715516ms ago: executing program 0 (id=49): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x6, 0x8000, 0xfd) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaad09b049f6b6386dd6036d2b5"]) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) setsockopt(r1, 0x5, 0x4, &(0x7f00000002c0)="29a60c93d18737071e21a61faa668dcdb1b29b29c396cf9c9bb6d6df8a14d4e322809f5296d59fcb205d33c5ed49132c881495ae16e7a9bb3db3a93e66f33875fe74482f320846c1d675be2e4cea3ad8a4793cd568dbc42bb7636bff8aeb74eef835bec502000000f45c50dcba25e5d6248413c2cac01c6894e635b2ff8b6d92e83a3eb21089e89d42f94dbfc28a368fad39b3ec9f37b4", 0x97) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x625, 0xde, 0x1, 0x1}]}) 8.304299ms ago: executing program 5 (id=50): mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) (async) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) open(&(0x7f0000000000)='./bus\x00', 0x10000, 0x1) (async) r0 = open(&(0x7f0000000000)='./bus\x00', 0x10000, 0x1) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000515000/0x4000)=nil}, {&(0x7f00000f2000/0x11000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0x80000000}, {&(0x7f0000727000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil, 0x80}], './file0\x00', 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4000000, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffc, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xfe7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) r1 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) sysctl$kern(&(0x7f00000000c0)={0x1, 0x55}, 0x3, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x63, 0x0, 0x37) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x84946467, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) ioctl$VNDIOCGET(r0, 0x20006473, 0x0) (async) ioctl$VNDIOCGET(r0, 0x20006473, 0x0) sysctl$hw(&(0x7f0000000000)={0x6, 0x19}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$hw(&(0x7f0000000000)={0x6, 0x19}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCGDLTLIST(0xffffffffffffffff, 0xc010427b, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[0x1]}) (async) ioctl$BIOCGDLTLIST(0xffffffffffffffff, 0xc010427b, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[0x1]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0xd, 0x0, 0x0) sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4) setuid(0xee01) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) shmget(0x3, 0x3000, 0x401, &(0x7f000049e000/0x3000)=nil) setsockopt(r3, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) munlock(&(0x7f0000235000/0x1000)=nil, 0x1000) (async) munlock(&(0x7f0000235000/0x1000)=nil, 0x1000) unlink(&(0x7f0000000a00)='./bus\x00') 7.256816ms ago: executing program 4 (id=51): getrusage(0x0, 0x0) (async) r0 = socket$inet(0x18, 0x3, 0x102) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) r1 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000000)) (async) r2 = socket(0x18, 0x3, 0x20) dup3(r0, r2, 0x0) 6.554654ms ago: executing program 2 (id=52): setitimer(0x1, &(0x7f0000000080)={{0x8000000000000001, 0xa0000000000003}, {0xd340, 0x400000000006}}, 0x0) shmctl$IPC_SET(0x0, 0x1, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r2, &(0x7f00000000c0)="e5acda612058b89958e3ed9e4bfe43f5f286300acdcb7217e376dffb71689ba8f2d8075a1fea63b4906a615421e79cc97b322d573149adcee9f690e38400fe6242a91c42b7eafa5256a2e4712deea442aae46a15fdfa095d4cdd1551193bcf991ad6c76ea64a8e49ca8012665a8dbac5cb787bb61216adacc1d5c58b57d2ff91e71f7f2ec8edfb7fbadcceabd838423e78e64eaae778a425b51dc8e727a5910fe87e1177b64cb48f9a9ed0386c618afa388355410e745cc02ae2c139143446bb54", 0xc1, 0x407, &(0x7f00000001c0)=@file={0x1, 0x1, './file0\x00'}, 0xa) dup2(r1, r0) sendto$inet(r0, &(0x7f0000000a80)="f69c10dc0445a4feaa806c88e15dc9e9705e318b57", 0x15, 0x2, &(0x7f0000000ac0), 0x10) sysctl$kern(&(0x7f0000000080)={0x1, 0x44}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) 5.119648ms ago: executing program 0 (id=53): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000ac0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x4}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xf}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f00005dd000/0x3000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x40000000000007}, {&(0x7f0000636000/0x2000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000696000/0x2000)=nil, &(0x7f0000377000/0x1000)=nil, 0x7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x100000001}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000abf000/0x3000)=nil, 0x1}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x44, 0x0, 0x0, 0x2, 0x94fd, 0xffffb6e0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xffffff49, 0x9, 0x8000009, 0x0, 0x0, 0x6, 0xffc, 0x0, 0x0, 0x0, 0x100, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffff001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59e01a04, 0x0, 0x3, 0xff, 0x6, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xaa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3ff]}) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa30200000042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe97b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba30000000000000001", 0x7d) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xcd604404, &(0x7f0000000080)={0x1, 0x2, 0x87a, 0x2f, "2000030000000004000000000068a95a010400", 0x6, 0x2}) open(0x0, 0x9cab835cfdc52675, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x35}, 0x2, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = socket(0x24, 0x2, 0x0) sendto(r1, 0x0, 0x0, 0x40e, &(0x7f0000000040)=@un=@abs={0xc8, 0x0, 0x0, 0x3}, 0x40) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 0s ago: executing program 6 (id=54): r0 = syz_open_pts() closefrom(r0) (async) ioctl$TIOCMBIC(r0, 0x8004746b, &(0x7f0000000100)=0x4) (async) r1 = socket(0x2, 0x4, 0x0) (async, rerun: 32) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80) (async, rerun: 32) r3 = socket(0x2, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x8a) (async, rerun: 64) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') (rerun: 64) execve(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0) (async) connect$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0xc, 0x0, 0x1, 0xffff}]}) (async) sendto(r3, 0x0, 0x0, 0x8, &(0x7f00000001c0)=@in={0x10, 0x2, 0x1, 0x8}, 0x10) (async) pwrite(r2, 0x0, 0x0, 0x5) sendto$unix(r1, &(0x7f0000000000)="b1000501000000050000000107000000331c13fecea70500fef92a36842fd3357ae30200004e30ffd2d236acf20bf404be01000000f7c8cf5f882b297be1aa050400ce9409000000bbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2325768abfba09a214cc8adfbfab11ce0000080ce37193f834370b0000000000000000806700"/177, 0xb1, 0xe, 0x0, 0x0) r5 = socket(0x18, 0x1, 0x0) close(r5) (async) r6 = socket(0x18, 0x3, 0x0) setsockopt(r6, 0x1000000029, 0x1a, &(0x7f0000000000)="02000000", 0x4) connect$inet6(r5, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x3, "fe8234022c23bdd0e86bc2a6b5ae30dd", 0x3}, 0x1c) (async, rerun: 32) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000180)="7526dabddf1a5783e61523c1ed56ee22a866d5ec", 0x14}], 0x1) (rerun: 32) mknod(&(0x7f00000000c0)='./file0\x00', 0x100, 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.185' (ED25519) to the list of known hosts. pckbd_enable: command error mode = 040755, inum = 26201, fs = / panic: ffs_valloc: dup alloc Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *210967 75677 0 0x2 0 1K syz-executor 131543 8646 0 0x14000 0x200 0 zerothread db_enter() at db_enter+0x25 panic(ffffffff8349593d) at panic+0x1e5 ffs_inode_alloc(fffffd806cdc9018,41ed,fffffd80097fd6e8,ffff80002a328818) at ffs_inode_alloc+0x94e ufs_mkdir(ffff80002a328880) at ufs_mkdir+0xfc VOP_MKDIR(fffffd806d812040,ffff80002a3289e0,ffff80002a328a10,ffff80002a328910) at VOP_MKDIR+0x101 domkdirat(ffff80002a235a08,ffffff9c,7654783d05b0,1ff) at domkdirat+0x179 syscall(ffff80002a328b90) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7654783d0650, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: ffs_valloc: dup alloc ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8349593d) at panic+0x1e5 ffs_inode_alloc(fffffd806cdc9018,41ed,fffffd80097fd6e8,ffff80002a328818) at ffs_inode_alloc+0x94e ufs_mkdir(ffff80002a328880) at ufs_mkdir+0xfc VOP_MKDIR(fffffd806d812040,ffff80002a3289e0,ffff80002a328a10,ffff80002a328910) at VOP_MKDIR+0x101 domkdirat(ffff80002a235a08,ffffff9c,7654783d05b0,1ff) at domkdirat+0x179 syscall(ffff80002a328b90) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7654783d0650, count: -8 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80002a328590 rbx 0xffff80002999ee07 rdx 0 rcx 0xffff80002a235a08 rax 0xffff80002999dff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xe549294242c027b r11 0xcb3296852abefd53 r12 0xffff80002999ec08 r13 0 r14 0 r15 0x1 rip 0xffffffff82e5bf15 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a328580 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=210967 pid=75677 tcnt=1 stat=onproc flags process=2 proc=0 runpri=17, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a2222a8,0xffff80002a2354e8 process=0xffff8000ffff5818 user=0xffff80002a323000, vmspace=0xfffffd800b063d58 estcpu=36, cpticks=6, pctcpu=0.3, user=1, sys=5, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 67929 59520 72106 0 3 0x80 nanoslp syz-executor 67929 181921 72106 0 3 0x4000080 msgwait syz-executor 67929 398542 72106 0 3 0x4000080 fsleep syz-executor 45148 391109 97181 0 3 0x80 nanoslp syz-executor 45148 485964 97181 0 3 0x4000080 ttyin syz-executor 97181 441052 46139 0 3 0x82 nanoslp syz-executor 744 53904 46139 0 3 0x82 piperd syz-executor *75677 210967 46139 0 7 0x2 syz-executor 72106 183683 46139 0 3 0x82 nanoslp syz-executor 46139 470810 29123 0 3 0x82 wait syz-executor 29123 315575 68403 0 3 0x10008a sigsusp ksh 68403 82974 41913 0 3 0x98 kqread sshd-session 41913 160922 38183 0 3 0x92 kqread sshd-session 28892 130813 1 0 3 0x100083 ttyin getty 38183 124398 1 0 3 0x88 kqread sshd 62382 158616 47663 74 3 0x1100092 bpf pflogd 47663 149175 1 0 3 0x80 sbwait pflogd 71582 82937 60424 73 3 0x1100090 kqread syslogd 60424 408904 1 0 3 0x100082 sbwait syslogd 76399 281677 1 0 3 0x100080 kqread resolvd 35934 498414 58456 77 3 0x100092 kqread dhcpleased 59476 290088 58456 77 3 0x100092 kqread dhcpleased 58456 162427 1 0 3 0x80 kqread dhcpleased 68895 13009 0 0 3 0x14200 bored smr 8646 131543 0 0 7 0x14200 zerothread 2570 293105 0 0 3 0x14200 aiodoned aiodoned 78277 272498 0 0 3 0x14200 syncer update 51313 371017 0 0 3 0x14200 cleaner cleaner 88564 199657 0 0 3 0x14200 reaper reaper 55616 499205 0 0 3 0x14200 pgdaemon pagedaemon 51250 473660 0 0 3 0x14200 bored viomb 42814 390769 0 0 3 0x40014200 acpi0 acpi0 25047 336692 0 0 3 0x40014200 idle1 25859 296017 0 0 3 0x14200 bored softnet1 67681 52218 0 0 3 0x14200 bored softnet0 14829 331578 0 0 3 0x14200 bored systqmp 48273 428128 0 0 3 0x14200 bored systq 66031 155580 0 0 3 0x14200 tmoslp softclockmp 2022 380585 0 0 3 0x40014200 tmoslp softclock 47696 340235 0 0 3 0x40014200 idle0 1 491140 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 75677 (syz-executor) thread 0xffff80002a235a08 (210967) exclusive rrwlock inode r = 0 (0xfffffd806a01a568) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806cdc90b8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x12b #6 namei+0x7c5 #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83aaab00) #0 witness_lock+0x5f1 #1 syscall+0xaf4 #2 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11053 12082K 12220K 166960K 12199 0 pcb 17 12K 12K 166960K 32 0 rtable 217 6K 6K 166960K 359 0 pf 33 17K 19K 166960K 50 0 ifaddr 39 6K 7K 166960K 46 0 ifgroup 51 2K 2K 166960K 57 0 sysctl 1 1K 9K 166960K 5 0 counters 68 36K 37K 166960K 76 0 ioctlops 0 0K 4K 166960K 1494 0 iov 0 0K 16K 166960K 2 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1289 81K 82K 166960K 1396 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 7 0K 0K 166960K 9 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 12 41K 97K 166960K 182 0 proc 72 115K 164K 166960K 560 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 9 0 in_multi 88 6K 6K 166960K 101 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 43 201K 201K 166960K 43 0 exec 0 0K 1K 166960K 395 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 192 158K 171K 166960K 3518 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 37 74K 105K 166960K 1368 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 3 0 NDP 11 0K 1K 166960K 29 0 temp 39 9111K 9177K 166960K 4446 0 kqueue 13 20K 28K 166960K 44 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 39 0 36 1 0 1 1 0 8 0 rtentry 176 111 0 12 5 0 5 5 0 8 0 unpcb 144 62 0 45 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 31 0 27 1 0 1 1 0 8 0 arp 136 18 0 2 1 0 1 1 0 8 0 inpcb 328 119 0 111 2 0 2 2 0 8 0 nd6 152 24 0 3 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 3 0 3 1 0 1 1 0 8 1 pfstscr 40 1 0 1 1 0 1 1 0 8 1 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 1 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstlim 224 1 0 1 1 0 1 1 0 8 1 pfstitem 24 19 0 0 1 0 1 1 0 8 0 pfstkey 128 21 0 2 1 0 1 1 0 8 0 pfstate 448 20 0 1 3 0 3 3 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 453 0 44 29 0 29 29 0 8 1 art_table 40 454 0 44 5 0 5 5 0 8 0 art_node 32 111 0 21 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 2 1 0 1 1 0 8 1 semapl 72 7 0 2 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1656 0 194 93 0 93 93 0 8 0 ffsino 296 1659 0 197 114 0 114 114 0 8 0 nchpl 144 1917 0 222 64 0 64 64 0 8 0 vnodes 216 1764 0 0 98 0 98 98 0 8 0 namei 1024 5877 0 5876 2 0 2 2 0 8 1 percpumem 16 53 0 4 1 0 1 1 0 8 0 kstatmem 264 29 0 4 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 6538 0 6538 4 3 1 3 1 8 1 plimitpl 152 32 0 15 1 0 1 1 0 8 0 sigapl 424 508 0 466 7 0 7 7 0 8 1 knotepl 120 310 0 0 10 0 10 10 0 8 0 kqueuepl 224 44 0 35 1 0 1 1 0 8 0 pipepl 344 133 0 106 3 0 3 3 0 8 0 fdescpl 528 492 0 466 3 0 3 3 0 8 0 filepl 160 1834 0 1627 10 0 10 10 0 8 0 lockfpl 104 26 0 24 1 0 1 1 0 8 0 lockfspl 48 14 0 12 1 0 1 1 0 8 0 sessionpl 144 26 0 17 1 0 1 1 0 8 0 pgrppl 48 34 0 17 1 0 1 1 0 8 0 ucredpl 104 135 0 122 1 0 1 1 0 8 0 zombiepl 144 470 0 466 1 0 1 1 0 8 0 processpl 1232 508 0 466 5 0 5 5 0 8 1 procpl 664 600 0 555 6 0 6 6 0 8 1 sockpl 752 221 0 193 4 0 4 4 0 8 0 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 113 0 0 15 0 15 15 0 8 0 mcl2k 2048 26 0 0 4 0 4 4 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 176 0 0 11 0 11 11 0 8 0 bufpl 280 2362 0 105 162 0 162 162 0 8 0 anonpl 32 3794 0 0 31 0 31 31 0 246 0 amapchunkpl 152 9629 0 9285 20 0 20 20 0 158 3 amappl16 200 1818 0 1799 5 1 4 5 0 8 2 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 443 0 440 1 0 1 1 0 8 0 amappl13 176 128 0 116 1 0 1 1 0 8 0 amappl12 168 746 0 721 2 0 2 2 0 8 0 amappl11 160 8 0 7 1 0 1 1 0 8 0 amappl10 152 130 0 116 1 0 1 1 0 8 0 amappl9 144 282 0 282 1 1 0 1 0 8 0 amappl8 136 102 0 99 1 0 1 1 0 8 0 amappl7 128 152 0 139 1 0 1 1 0 8 0 amappl6 120 171 0 170 1 0 1 1 0 8 0 amappl5 112 97 0 87 1 0 1 1 0 8 0 amappl4 104 292 0 274 1 0 1 1 0 8 0 amappl3 96 1775 0 1692 3 0 3 3 0 8 0 amappl2 88 569 0 505 2 0 2 2 0 8 0 amappl1 80 10740 0 10156 15 0 15 15 0 8 1 amappl 88 2765 0 2644 4 0 4 4 0 92 0 uvmvnodes 80 102 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 492 0 466 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 492 0 466 1 0 1 1 0 8 0 vmmpekpl 168 6086 0 6048 2 0 2 2 0 8 0 vmmpepl 168 41002 0 39369 88 0 88 88 0 357 4 vmsppl 488 491 0 466 5 0 5 5 0 8 1 rwobjpl 80 15246 0 14263 24 0 24 24 0 8 1 pdppl 4096 991 0 932 101 30 71 87 0 8 12 pvpl 32 10117 0 0 82 0 82 82 0 265 0 pmappl 256 491 0 466 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 274 0 33 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83991ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83aaa300) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 uvm_pagezero_thread(ffff8000ffffc7d0) at uvm_pagezero_thread+0x7b end trace frame: 0x0, count: 7 ddb{0}> trace x86_ipi_db(ffffffff83991ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83aaa300) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 uvm_pagezero_thread(ffff8000ffffc7d0) at uvm_pagezero_thread+0x7b end trace frame: 0x0, count: -8 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff8349593d) at panic+0x1e5 ffs_inode_alloc(fffffd806cdc9018,41ed,fffffd80097fd6e8,ffff80002a328818) at ffs_inode_alloc+0x94e ufs_mkdir(ffff80002a328880) at ufs_mkdir+0xfc VOP_MKDIR(fffffd806d812040,ffff80002a3289e0,ffff80002a328a10,ffff80002a328910) at VOP_MKDIR+0x101 domkdirat(ffff80002a235a08,ffffff9c,7654783d05b0,1ff) at domkdirat+0x179 syscall(ffff80002a328b90) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7654783d0650, count: 7 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8349593d) at panic+0x1e5 ffs_inode_alloc(fffffd806cdc9018,41ed,fffffd80097fd6e8,ffff80002a328818) at ffs_inode_alloc+0x94e ufs_mkdir(ffff80002a328880) at ufs_mkdir+0xfc VOP_MKDIR(fffffd806d812040,ffff80002a3289e0,ffff80002a328a10,ffff80002a328910) at VOP_MKDIR+0x101 domkdirat(ffff80002a235a08,ffffff9c,7654783d05b0,1ff) at domkdirat+0x179 syscall(ffff80002a328b90) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7654783d0650, count: -8