last executing test programs: 11.558585132s ago: executing program 1 (id=276): r0 = getuid() r1 = getuid() setreuid(r0, r1) getrusage(0xffffffffffffffff, 0x0) 11.556510736s ago: executing program 1 (id=277): rename(0x0, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x2, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x892, 0x0) ioctl$TIOCSETA(r1, 0xc0084428, &(0x7f0000000040)={0xa, 0x400, 0x6, 0xfffffffe, "45600000000600070000070000000000000200", 0xa, 0x44}) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000000)) ioctl$FIONREAD(r0, 0xc0286988, &(0x7f00000001c0)) 11.555819044s ago: executing program 1 (id=278): r0 = socket(0x18, 0x2, 0x0) close(r0) r1 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0x10000, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x5}, 0x5, 0x0, 0x0, 0x0, 0x1ff, 0x4000000000, 0x6, 0xb}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(r2, &(0x7f00000007c0)=[{&(0x7f0000000b80)="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"/285, 0x11d}, {&(0x7f0000002e80)="b389e5aeb7b42eab8dd0017236f060f918", 0x11}], 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x2011, r2, 0x0) fcntl$dupfd(r1, 0xa, r2) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x122, 0x3c}, 0x9, 0x65, 0x0, 0x0, 0x400, 0x200, 0x8000}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc450443c, &(0x7f00000000c0)={0x2f, 0x220, 0x7fffffff, 0x9, "c9f7d04675d201000000b8ecff000000002f00", 0x0, 0x7}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x3, 0x0) sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x8) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r4 = socket(0x800000018, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)="d3ee", 0x2}], 0x1) r5 = syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000000)={0x4, 0x6b, 0x6, 0xa, "3bd78df61904edcaade8733a5f41f5aa8da601ea", 0xfd, 0x4c554fdc}) ioctl$TIOCSTAT(r5, 0x20007465, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1000, &(0x7f0000000000)=0xfffffffe, 0x4) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) sysctl$kern(&(0x7f00000000c0)={0x1, 0x55}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/250, 0xfa}], 0x1, 0x0}, 0x840) 5.919997389s ago: executing program 1 (id=354): mknod(&(0x7f0000000040)='./bus\x00', 0x20, 0x2a02) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) r1 = dup2(r0, 0xffffffffffffffff) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x28, &(0x7f00000001c0), 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}]}) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r3 = socket(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x2, 0x2, 0x0) r5 = socket(0x2, 0x400000000002, 0x0) r6 = dup2(r5, r4) setsockopt$sock_int(r6, 0xffff, 0x200, &(0x7f0000000040)=0x20, 0x4) bind(r4, &(0x7f0000000000), 0x10) r7 = socket(0x2, 0x400000000002, 0x0) r8 = dup2(r7, r3) setsockopt$sock_int(r8, 0xffff, 0x200, &(0x7f0000000040)=0x20, 0x4) bind(r3, &(0x7f0000000000), 0x10) r9 = socket(0x2, 0x2, 0x0) connect$unix(r9, &(0x7f0000000000), 0x10) sendmsg$unix(r9, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0}, 0xc) ktrace(&(0x7f0000000000)='./bus\x00', 0x2, 0x800, r10) openat$speaker(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) 5.874789724s ago: executing program 1 (id=358): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r0 = syz_open_pts() setsockopt(0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000080)="c5f5d915", 0x4) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0xdc1d800780e51763}, 0x2, &(0x7f00000000c0), &(0x7f0000000080), 0x0, 0x0) close(r0) syz_open_pts() r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000002c0)={0x3, &(0x7f0000000180)=[{0x1, 0xff, 0xb9, 0x461}, {0x4, 0x4, 0x8, 0xa}, {0x6, 0x4, 0x8, 0x801}]}) write(r1, &(0x7f0000000080)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) r2 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x3e, 0x62}) rename(0x0, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0286988, &(0x7f00000001c0)) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000080)={&(0x7f00000002c0)}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x14}, 0x2, &(0x7f0000000100)="4ba7841143", &(0x7f0000000040)=0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000100)={0x1, 0x5a}, 0x2, 0x0, 0x0, &(0x7f0000000080)="13108a5b", 0x4) close(0xffffffffffffffff) r4 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000340)={0x0, 0x4, 0x9aea, 0x8, "ff14e7130b1e586ca6294000", 0x6, 0x800006}) r5 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x106) mmap(&(0x7f0000132000/0x4000)=nil, 0x4000, 0x0, 0x8011, r5, 0x0) shutdown(r2, 0x1) 5.451412534s ago: executing program 5 (id=375): syz_emit_ethernet(0xcd, &(0x7f0000000480)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x9, 0xbf, 0x0, 0x2000, 0x6, 0x33, 0x0, @loopback, @broadcast}, @generic="0714b58860cc257cddfbed1068174099ba4e85940d01e149fbc293818168c3a2ebe95644d71c1adf3bcf28a7fd6811a8c4111875b4882f5f6321b62c44c04c6fc5857dc3ccba5a9853d9ee3c60b69dcf8b8b6bed8e90a14ca9535864a49b3631c2605358eb0500000000000000b064f8275df6666b1d481cc734b228e659fc334d53e3734bc17ac252fe159076014210c7c27f9563837069df958800"/171}}}}) r0 = socket(0x800000018, 0x3, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) r1 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r2 = semget$private(0x0, 0x2, 0x60) semctl$GETPID(r2, 0x2, 0x4, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) writev(r3, 0x0, 0x0) getgroups(0x0, 0x0) getgroups(0x0, 0x0) setgroups(0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0]) semctl$GETNCNT(r2, 0xb95b4631eecd6601, 0x3, 0x0) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000140)=@in, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/120, 0x78}, {&(0x7f0000000200)=""/148, 0x94}, {&(0x7f00000002c0)=""/50, 0x32}, {&(0x7f0000000300)=""/111, 0x6f}], 0x4, &(0x7f0000000400)=""/48, 0x30}, 0x1000) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6129, 0x1ff) open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) dup2(r0, r1) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000040)={0xcc, 0x10001, 0x4, 0xfffffffc, "000f000000008471050200000000000000f70080", 0x0, 0x2}) 5.448783941s ago: executing program 2 (id=377): sysctl$hw(&(0x7f00000000c0)={0x6, 0x1c}, 0x2, 0x0, &(0x7f0000000080)=0xfffffffffffffc8f, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) setuid(0xee01) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f0000000140)={0x10, 0x6, [{&(0x7f00002f1000/0x3000)=nil, &(0x7f000029e000/0x3000)=nil, 0xa0}, {&(0x7f000071f000/0x4000)=nil, &(0x7f000055a000/0x3000)=nil, 0x687d3063}, {&(0x7f000039d000/0x4000)=nil, &(0x7f00006bc000/0x3000)=nil, 0x2}, {&(0x7f000064f000/0x3000)=nil, &(0x7f00005d4000/0x1000)=nil, 0x9}, {&(0x7f0000674000/0x3000)=nil, &(0x7f00004f8000/0x4000)=nil, 0x7fff}, {&(0x7f00003b7000/0x1000)=nil, &(0x7f0000767000/0x4000)=nil, 0x7}, {&(0x7f0000542000/0x3000)=nil, &(0x7f0000445000/0x3000)=nil, 0x116}, {&(0x7f00001c0000/0x2000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x7fffffff}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f00003e3000/0x2000)=nil, 0x2}, {&(0x7f000064d000/0x1000)=nil, &(0x7f00000a5000/0x2000)=nil, 0x7}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000ae000/0x4000)=nil, 0x40}, {&(0x7f000039e000/0x1000)=nil, &(0x7f00002c4000/0x1000)=nil, 0x5}, {&(0x7f000049d000/0x4000)=nil, &(0x7f000000b000/0x3000)=nil, 0x1}, {&(0x7f00002b1000/0x3000)=nil, &(0x7f00002e6000/0x1000)=nil, 0x3}, {&(0x7f0000770000/0x3000)=nil, &(0x7f0000154000/0x2000)=nil, 0x7}, {&(0x7f00007e1000/0x1000)=nil, &(0x7f0000295000/0x1000)=nil, 0x7}], './file0\x00', 0x1}) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) chown(&(0x7f00000000c0)='./file0/file0\x00', r1, r2) r3 = getgid() fchownat(r0, &(0x7f0000000000)='./file0\x00', r1, r3, 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @rand_addr="0000000000000003fe00", @mcast2, {[], @udp={{0x0, 0x2, 0x8}}}}}}}) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000001c0), &(0x7f0000000080), 0x0, 0x0) mknod(&(0x7f0000000340)='./file0\x00', 0x4, 0x6) 5.388665416s ago: executing program 2 (id=379): mkdir(&(0x7f0000000000)='./file0\x00', 0x4) symlink(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00') r0 = dup(0xffffffffffffff9c) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x0}, 0x8) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f0000000700)="9b", &(0x7f00000001c0)=0x1, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9c, 0x5}, 0x0, 0xfffffffffffffffe, 0xfffff7ffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) getitimer(0x0, &(0x7f0000001240)) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x2a, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) r3 = socket(0x10, 0xc000, 0x7) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000140)) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getuid() getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(r0, r4, r5) open$dir(&(0x7f0000000040)='./file0\x00', 0x40, 0x10) 5.345246433s ago: executing program 2 (id=382): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x20530d) open(&(0x7f0000000000)='./bus\x00', 0x80, 0x11) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) 5.18257502s ago: executing program 2 (id=385): mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x120) flock(0xffffffffffffffff, 0x1) mknod(0x0, 0x2000, 0x9) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000566000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0xd3b5}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x8100000000b936}, {&(0x7f0000418000/0x1000)=nil, &(0x7f00004ac000/0x1000)=nil, 0xfffffffffffffffc}, {&(0x7f000052e000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000298000/0x2000)=nil, 0x2}, {&(0x7f000025e000/0x4000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x81}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f000053e000/0x4000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00002d0000/0x4000)=nil, 0x1}, {&(0x7f000069e000/0x2000)=nil, &(0x7f00003f2000/0x2000)=nil, 0x8}, {&(0x7f0000002000/0x1000)=nil, &(0x7f000038f000/0x4000)=nil, 0x812b}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0xb}, {&(0x7f0000196000/0x3000)=nil, &(0x7f00003e4000/0x2000)=nil, 0xb}, {&(0x7f000006a000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffbffffff9}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000039f7}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x7}], './file0\x00', 0xfffffffe}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0xfffffffd}) r3 = socket$inet6(0x18, 0x3, 0x0) getsockopt(r3, 0x29, 0x35, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/240, 0xf0}, 0x0) chroot(&(0x7f0000000740)='.\x00') sendmsg(r4, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x4f, &(0x7f0000000000), 0x90}, 0x1) 4.454853435s ago: executing program 7 (id=396): socket(0x2, 0x5, 0x40) pipe2(&(0x7f0000000000), 0x0) 4.45118483s ago: executing program 7 (id=397): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r0, 0x0) r1 = accept(r0, 0x0, 0x0) close(r0) shutdown(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x40) nanosleep(0x0, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) r4 = open(&(0x7f0000000080)='./bus\x00', 0x20, 0x0) close(r4) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000009c0)="5ece9977e6bfb91247e5685f1d25097554c3da8b3e2c3782a4d7a36b8ea1864defbaffd59723c9100320b12a44cab3618f2a7b951dcc1dca9b2d242f7e5ff5fdb78bd94d1225dd17b5d4de2b701ab81b1e92e79ac35e3b94d481ffec2376160fe987b27760ead921ef04157cf706cbe0b3e919bf34986ae0e006507ab8bc41ffa1cb70d67f65be0832416fc998617e5c45d0f8e63c35ae93204f03f97253d3b683aa1c99f823f2ce60ec38b6587ab8652100765fd823873db2a35925b3d0a347b93fd75f09cfc777c98df2559b58cb3dfe793566394e2abc2b87cf1bc29f92138c3e5eefb67d74a08b716a4d5f0c907965cf5761752dc35bbea317b854b0a784122f80caa80e1143dad28c02fa04b63879f99a6212c519601f509c0f1b3948993f420e1a7ad809f39210f63dfe5a0680238ade746131fce88ef82cc253aa79d04e530bd7277cc1315108c042dac73a483c42e14daca9f7ee288f11295a5dd44786cf7340b51537d13d3b9c44d08aff3a24b5fec497c461d21574b29fec9adaadec4d89ab69fce5c44ec865c99da061b43c3a5b62a3949c67707a36397ece7ca4f4f1dc1b136b5d2a697c3562ae6aa9fb86579711d3d7dfec9a9b66f854e4a9bc7065549c81f2662b5b02b5fec863db6c295c8785", 0x1d4}], 0x1) ioctl$TIOCSETA(r3, 0xcd504404, &(0x7f0000000000)={0x2, 0x2, 0x2, 0x0, "cd002200002181baab4c8c6d09b975390a000004", 0x8000, 0x6}) connect$unix(r2, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socket$unix(0x1, 0x5, 0x0) (async) bind$unix(r0, &(0x7f0000000040)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) listen(r0, 0x0) (async) accept(r0, 0x0, 0x0) (async) close(r0) (async) shutdown(r1, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) fcntl$setstatus(r0, 0x4, 0x40) (async) nanosleep(0x0, 0x0) (async) openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) (async) open(&(0x7f0000000080)='./bus\x00', 0x20, 0x0) (async) close(r4) (async) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000009c0)="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", 0x1d4}], 0x1) (async) ioctl$TIOCSETA(r3, 0xcd504404, &(0x7f0000000000)={0x2, 0x2, 0x2, 0x0, "cd002200002181baab4c8c6d09b975390a000004", 0x8000, 0x6}) (async) connect$unix(r2, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) 3.648321018s ago: executing program 0 (id=404): r0 = syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x5) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x105, 0xffffffff, 0x7fffffc, 0xfffffffe, "a8a39cefab00", 0xa2}) ioctl$TIOCSTART(r0, 0x2000746e) 3.647839894s ago: executing program 0 (id=405): r0 = socket(0x18, 0x3, 0x0) fchdir(r0) select(0x40, &(0x7f0000000080)={0x4, 0x8, 0x901, 0x1, 0x5, 0xffffffffb26a5e46, 0xc2e, 0xa}, 0x0, 0x0, 0x0) unveil(0x0, &(0x7f0000000300)='W\x00') sendto$inet(r0, 0x0, 0x0, 0x2, &(0x7f0000000040)={0x2, 0x2}, 0xc) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637d) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = open(0x0, 0x0, 0x0) ioctl$FIONBIO(r2, 0x82907003, 0x0) sendto$unix(r2, &(0x7f0000000340)="b100050460000000000000000010000000000000cea10500fef900000000d3357ae320b37b673039d2d236073705ae04be38164991f7c8cf5f882b297be18a5b236deb51e2f03356223e7d0208a8af630037282102000000720fd38bfbb770c1f5a872c8816eca69e0bb7600000000000200361b12", 0x75, 0x8, 0x0, 0x3b) r3 = syz_open_pts() fchown(r3, 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6d4) r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) ioctl$FIONREAD(r4, 0x4004667f, &(0x7f0000000540)) mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x202) rename(0x0, &(0x7f0000000180)='./bus\x00') kqueue() r5 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1021, &(0x7f0000000000)=0x5, 0x3) r6 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x84c7aa6835e42185, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r6, 0x80085761, &(0x7f0000000100)={0x1, 0x1}) ioctl$TIOCSTOP(r4, 0x2000746f) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$inet(0x2, 0x2, 0x0) dup(r7) 2.668208879s ago: executing program 1 (id=406): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000000000)=""/32, 0x20}], 0x6, 0x79) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x3, 0x400101, 0xffff, 0x81ac, 0x10001, 0x10, [{0x0, 0x3, 0x4, 0x4}, {0x6, 0x9, 0x7, 0x9}, {0x100, 0x1, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200727, 0x2803, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0x8, 0x3ff, 0x4f8, 0x9}, {0x6, 0x803, 0x14, 0x8}, {0x5, 0x82, 0x5, 0x6613}, {0x6a74, 0x6, 0xd3b, 0x4}, {0x1cf, 0x10001, 0xc, 0x2003}, {0x8, 0x9, 0x5, 0x2}, {0x3, 0x7, 0x8, 0x4}, {0x9eda, 0xeffffffa, 0x1, 0x6}, {0xc, 0x5, 0x2, 0x10200000}, {0x0, 0x8, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/165, 0xa5}], 0x1) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSETA(r1, 0xcd504407, &(0x7f0000000740)={0x0, 0x0, 0x1040020, 0x0, "97a222ac6b47c1d100", 0x0, 0x7}) 2.271125776s ago: executing program 5 (id=407): syz_emit_ethernet(0xb6, &(0x7f0000000140)=ANY=[@ANYBLOB="8b4f69c83b01ff0cf7ffffff86dd61b91d3a00802c03050000000000000000000000000000bb4079e811670a1ec2952a422d926cce0733820005ffffff833a"]) setitimer(0x2, &(0x7f0000000140)={{0x9, 0x9}, {0xfffffffffffffff0, 0x10000}}, 0x0) socket(0x18, 0x3, 0xf7) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x9, 0x0, 0x1, 0x101}, {0x0, 0x5, 0xc3, 0x5}]}) socket(0x18, 0x3, 0x0) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x18, 0x3, 0x0) r2 = getuid() setreuid(0xee00, r2) setreuid(0xffffffffffffffff, r2) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_extract_tcp_res(0x0, 0x3, 0x7) setitimer(0x2, &(0x7f0000000140)={{0x9, 0x9}, {0xfffffffefffffff8, 0x10000}}, 0x0) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0x81206919, &(0x7f0000000100)) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 2.26904841s ago: executing program 5 (id=407): syz_emit_ethernet(0xb6, &(0x7f0000000140)=ANY=[@ANYBLOB="8b4f69c83b01ff0cf7ffffff86dd61b91d3a00802c03050000000000000000000000000000bb4079e811670a1ec2952a422d926cce0733820005ffffff833a"]) setitimer(0x2, &(0x7f0000000140)={{0x9, 0x9}, {0xfffffffffffffff0, 0x10000}}, 0x0) socket(0x18, 0x3, 0xf7) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x9, 0x0, 0x1, 0x101}, {0x0, 0x5, 0xc3, 0x5}]}) socket(0x18, 0x3, 0x0) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x18, 0x3, 0x0) r2 = getuid() setreuid(0xee00, r2) setreuid(0xffffffffffffffff, r2) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_extract_tcp_res(0x0, 0x3, 0x7) setitimer(0x2, &(0x7f0000000140)={{0x9, 0x9}, {0xfffffffefffffff8, 0x10000}}, 0x0) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0x81206919, &(0x7f0000000100)) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 2.268829677s ago: executing program 5 (id=408): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x892, 0x0) ioctl$TIOCSETA(r2, 0xc0084428, &(0x7f0000000040)={0xa, 0x400, 0x6, 0xfffffffe, "45600000000600070000070000000000000200", 0xa, 0x44}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) close(r0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x7fffffff, 0x0, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x1, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='c\x00') open(&(0x7f00000002c0)='./file0\x00', 0x80, 0x133) setsockopt(r4, 0x9, 0xc, &(0x7f0000000000)="c0a20600", 0x4) setsockopt(r4, 0x1000000029, 0xd, &(0x7f0000000080)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) ioctl$TIOCGFLAGS(0xffffffffffffffff, 0x4004745d, 0x0) 2.26772485s ago: executing program 5 (id=409): r0 = socket(0x800000018, 0x2, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504443, &(0x7f0000000080)={0x200, 0x0, 0x0, 0x80, "97a2050000000000000007e900", 0x0, 0x20000000}) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r1 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x120, 0x8001}, 0x3, 0x8, 0x0, 0x0, 0xffffffffffff0001, 0x120000000000000, 0x0, 0x4}) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) openat$zero(0xffffffffffffff9c, &(0x7f00000017c0), 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0xffff, 0x2000, &(0x7f0000000080)=0xfffffffe, 0x4) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000140)="4534122cb25ac71eee67fea7ef79bfcd8421636cb079da6dffefb384603bdd6bdc6ba6b3916e87bf948e26f6c69b480188166bc6d6de481f66dab68c8548ccea9d0001f20887f575f96ae98678ae2888de940a83231e8d70349ef32df073c640bf37ab3b071f8c6b6143d2d7592d5faa82d078c66a1f19eaade9dc52ee8450555a9832016a20f25111317ccb78b4d62ef5", 0x91}], 0x1) shutdown(r3, 0x0) writev(r2, &(0x7f00000040c0), 0x16) socket(0x800000018, 0x2, 0x0) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504443, &(0x7f0000000080)={0x200, 0x0, 0x0, 0x80, "97a2050000000000000007e900", 0x0, 0x20000000}) (async) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4) (async) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) socket(0x800000018, 0x2, 0x0) (async) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x120, 0x8001}, 0x3, 0x8, 0x0, 0x0, 0xffffffffffff0001, 0x120000000000000, 0x0, 0x4}) (async) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000017c0), 0x1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) setsockopt$sock_int(r2, 0xffff, 0x2000, &(0x7f0000000080)=0xfffffffe, 0x4) (async) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000140)="4534122cb25ac71eee67fea7ef79bfcd8421636cb079da6dffefb384603bdd6bdc6ba6b3916e87bf948e26f6c69b480188166bc6d6de481f66dab68c8548ccea9d0001f20887f575f96ae98678ae2888de940a83231e8d70349ef32df073c640bf37ab3b071f8c6b6143d2d7592d5faa82d078c66a1f19eaade9dc52ee8450555a9832016a20f25111317ccb78b4d62ef5", 0x91}], 0x1) (async) shutdown(r3, 0x0) (async) writev(r2, &(0x7f00000040c0), 0x16) (async) 2.209487508s ago: executing program 5 (id=410): mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x402, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) mkdir(&(0x7f0000000240)='./file0\x00', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x41) chroot(&(0x7f0000000100)='./file0/file1\x00') unveil(&(0x7f0000000400)='./file0/file1\x00', &(0x7f00000000c0)='r\x00') select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/192, 0xc0) msync(&(0x7f0000343000/0x2000)=nil, 0x2000, 0x0) readv(r0, &(0x7f0000003580)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x402, 0x0) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) (async) mkdir(&(0x7f0000000240)='./file0\x00', 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') (async) mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x41) (async) chroot(&(0x7f0000000100)='./file0/file1\x00') (async) unveil(&(0x7f0000000400)='./file0/file1\x00', &(0x7f00000000c0)='r\x00') (async) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) (async) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) (async) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/192, 0xc0) (async) msync(&(0x7f0000343000/0x2000)=nil, 0x2000, 0x0) (async) readv(r0, &(0x7f0000003580)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) (async) 2.20429564s ago: executing program 2 (id=411): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) writev(r0, &(0x7f00000011c0)=[{&(0x7f0000001200)='#!', 0x2}], 0x1) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x40, 0x7fffffff, 0xc, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x70ffe}, {0x6, 0x8, 0x8, 0x62f9}, {0x100, 0x7d, 0x3, 0x6}, {0x1, 0x800, 0x800a}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x97}, {0x2, 0xfffffffb, 0x4f8, 0x6d}, {0x6, 0x803, 0x1, 0x8}, {0x2, 0x207f, 0x6, 0x5}, {0x7f, 0x8001, 0x81, 0x3}, {0x1cc, 0xffff, 0xc, 0x3}, {0x2008, 0x9, 0x604, 0x2}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0xc, 0x3, 0x5, 0x2}, {0x0, 0x9, 0xffb, 0x2004004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x3}) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$WSKBDIO_SETENCODING(r2, 0x80045710, &(0x7f0000000040)=0x100) setuid(0xee01) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f00000000c0)="b100051360000004000000000700000008008106cfa1e4fffdf96ecfc73fd3357ae36caa0416fa4f376b36acf00b7805be301e4991f7c8cf5f3fc303ebe1aa5323edeb51e2f0ca3ebbc257699a1f133ea7acb5d602000d7d026ba8af6300371c2102000000720fd38bfbb770c1f5a8aec872ea772ec58904000000008d9800361b1257aba8c500002012010000de5000"/177, 0xb1, 0x802, 0x0, 0x4b) r4 = socket(0x18, 0x3, 0x6) write(r0, &(0x7f0000000040)="c9b52b146111bc2159344b096a9da72749b35b3e9d761cf6a95873c802acf5cc1561f6439d17fcfa6304347934a7420fe158801d60d5d467b24a57459308a22fd1a2ce9d2ed416dcfa833841556faacc284eb9d28a580a", 0x57) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r5 = syz_open_pts() close(r5) r6 = syz_open_pts() ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000180)={0x7fffffff, 0xcacf, 0xfffdff7e, 0x160350d, "04e4ee0d090000deffffffff0fe0ff0405080800", 0x200001, 0x9}) writev(r5, &(0x7f00000000c0)=[{&(0x7f00000009c0)="9b2e108901f89115ff92248d21c07fd7e2d2b8c4637cdb25c11446deccbc51026e0528c7da33aea1e2013fbfdf3e2e0bc3be04d5f8b6e2592c12417927d8d9d5629c9730049225cf919047fa73b8e8ffaf19abb56980f55a1b727ef0d59ad3224da67f294373e56fdfb03efcb9a688379823acb862e9dd4f465be7b9c6c8a996cd66988831daceb791d49a87fc7db63eac5c1525fe3ec4e8199b49b9aa536f6cba3eb599ed9a6ecaa067871ec88ba379f04be017d87d0edfad997c4db511dd3d700235fa1e8c342041b8150a65e6255c197643e020abdacffcbc066530a4f5b39c3b61b4524f954c88009c67dc48e5b78ad011a3926da2b4b4b7b54f464546dad11ccbe6460d863ea95dd468d5d76485de2f326a1869d1df2a1f95f7a5b6c5c48632c500748bf25529bd8f18156eda4e74fdc76dc12809a8c5f8fb3ea4c65abc2e8713aa29bdd3c867267899c41997adf87fbc835aab9ed1add7ccc928ad7a80ae0070611f18dd06517346c6c7b471745b81a951bf34e6f411ad844c25dabbb829eb09ef9594ab0693a868157824862bbac9d5848f992a00aa05818ab47605d00efbca21bca952d8d08082ffd380da818e6c2b818317e8bdea26bfedafe02176d7708bcb91c5e8825667cbd1012ecac887e910c5e61f67af4ce0662cc8b09535068e3864181c3fcb3c634ce22cbeac5abf50c267ce40ed6f653b0f2f14b151abd94ce12346c6254fa6f7b170e289b2160cfc0060940bfb5b51fa244e8009a2cc8f6b0d5c511046c41b6ef9e19228606ab831661725302938f5947dee457e32b57f06db2e42d5b173bbbeb20f448b893a25e191b6463353acb79a071164e38233dc0908bd7cecc09e64d164ed89a7855c5366c4d3defb3d9e1a9852128218b6df7a834883846ed6c8f6506c638b53e67e762dc001a677edd818d4218fee52f9e8c752f9d916b568bb91f2fff4439c75b4eab9b034a1b2036d4a4f70579aa6a227270d956ff56886c76e282278943818b99a8329edb46f152edd3e21929aabc5982f207142a0b5d6f983e76863a97fef42921bb336a2dd045866861cf7369c2b679975eab0013d0a8dd6ed59d7bbb72b41f6b963baa054a5d2e823446782c0c7221941f61fecc92b3c1367058934a566bc42d24b2e082ce0438122d3298688dbfda51ae5b966bb7cb13992fb5a362a36bd8591aa6d9ce589652a700ef9558b665b57f1c8d7c3cd71fd0a8c03dde8c86860630e7320264ecceabdfac90aa44f6c0b8e1966385ed050675ca9b068815d672bdc41f10aac8e169cc0f18e112ae61015068ad8e9be794054fe916de5a986fff26883d65484b58716935dbb28a1bd1d23b45a1bd04d7eb855e19116370c0b1bfea9d05f55a4db5d9775f275475350f041a5a373be815f75a8d6465499b620d67f6104a401dccab581ff04711cd9ae50fe3e5d3d6fe0f5b6d5d8e885f077111db9d3c5f76dc7eafaf4b395db09b8dc2e02b28185f58089d7fc3ab4f446954d894f0b2907dd3e5478781d7a93ce3acadb6c4a7b37644b47f71da6cd05ffe833e39b4e6882b4f9532ae2ec48c1100c87d60f0967b4f033c1342f5cdce1f08308a1735757515de2bf28c3f72eda83e78b94f8cc706bc4316d13e758b7dc5c3205b9253cf5308c68870946fbda98f6e7b312e732b86f34df5d01d15a7301d39cb42035f798401e1d1226f8ef06a2d1c92bb9dbfb704053414553ebe7f84b44d02719708a792ef9cb8b1dd2ed34a39950c3ea9582f254e3c37aa353e7e256009b39cf676f65a519366f378e7cf8d642ebb0099ed15bddbbb645864673fff8b5b94f633ab8ef92de21e362002549401f97193845c76934ecd64db2681dd60e6f41d096c886dc6e396495b7b43a5b468ef15ae6b86f7d6ca792154efb5f85de3c4d2a0d6d88fdb2da424fa05da3c3c53c9c139a7d10381883f104e101cf46207dc737c9ccc96d225545d9941d52a14464b14a2bbbb54e773e260efb3c2afcb80f294d47d7cb189f73f112b0950a2be062e40d035f4022ae9647e53942d8f634cf211d719878dd250c1a68c32c42686d575f030f7727bf6f04ec8f103085f3e38a9a318c1cea6f9167a10d2f11e6b002ef933c32a889f1b18dc91cf2797c9d9c24f6b8eec7d673fc0072da16644576f380e6ab4ed5f1484f649277c4361feade7fc9eba27122a7b062703d5b1aa42e279a72d6731894d3bfdf5dd93943923b814c2ab217e21626bed8c734e5275a921e61bf32123b6cfa9bf099d93d8efa8ff5fdafc8da47bc147e487247974d00d1a2b8eb9d284bcac56d92cff825794629b33c4dbacd6d4207a6e06eecf99597ab4fd95af63a7c4e4e62a2de1cd6cfd147e7dab23a9937e5bc2cb5939f8719b7bdcaf3da05ba9253027deabbe82f5763102bc996c8a851c8c2d7a8e971c7268b9a064157f72c7b002dcd59cd4f981f092459f15f007767cf781d52c31452075e6077cb152f29588d5534c3d5b5f588c8c20d35f54d626f9db97d1a14d362ed53159483d8099f217f46a8dc5e73ac71d8474a903407e1456d32666c77b86fb43dc1bca7aa82c69ee263faf2a7c4294312ef73f7c18b46fd91c2cc8a6a7bac267735d4d110154799d46a0a82536b87cc0ab193b99b8f9982a11213d25fd168ba86d1d1e0aeb967aca39acf358df88e0a4cf8865b074fd8e13a5da48e7631f94ac286484a5686ff95d776f37d2d2054166ba51a91a9f0bfc158bc88c63896d1102b18d5d93598f309b45164becbe19be79e95fa181de773439005dcbf3a5b46d21b284cc8dc3145b989e046c8adcb73976dab17ce7920c4f5e823831332626cebc04d890a3b8abc2cb546b74360be517d031670a1185d06f5702dc925d6854a00b4a825f143f9ada2924c4fc5ff4e153be388e4b5a04aa218fea552c24421a0efd9459ea994447e0805dd3653fc87e9f4a8214c56d8369fb10d74cb9c00d7d50ff415df0634f433cfee425096a75cf529c4135acb89fedd1e0dd16a7c5c69d0cd43fe317a65ea648bcaf077a649240887a465509acb512b895454fc4072e91232397493f9327a676db4f93c0268af748b8643d373fd6d6815bb954fbbb11248afa98a07dac3bc2c2cbbf4ad21a07525cca0201584a20fdfaf1d339ad606632f9bb8414de6b546333e09fd98abb860d48cfbcf649982aa9f87c030c0b4b4a6600a42bc8472c4b49d12434ac5623008323d32a8273b45d5c2a1e9e1fc4be3e7d8083bce094aa6d2f059f7ee18840d05ddad10e071bbb9eb4a756569f53937c775a0d5eaca3bacccc5a345ccfe2011dd40a9133236feaa0bab4d81222ff9674f8e47541fec6285028f2d074138a052f65f9dd1014bd5549763d1896c5d65690949493e589732d529205c64b6adc9f009daa8148e8f66814630d2be315dee5fb8d84549610cfa1d92ef0eed4e46a4049c2c2522ac6b54847878f8308184a67d15d5ecc15b15e38945073d7fc617a22639df52603d44a3695d3ecd3ecec60df20830ac9d7101c43e09bb834aed6828cf956d7c943f9c55358e276d9bad8c0eddb2ab9712441aba20813f76feb4adeed509bcccb05d4d2e628475f6cecb11fdf802195d5507825cd338de76f24ea0c72c7ece779e35e627321916805fd4ad52e053d7f8d65ca84eecffa5d456ac32a204aa5fe24cedb9445c71c2adc6c8e031837ec801f79d3d728966386193396690b8b8cc925ec4c104c08cf7005ad0670e269df61446f7f38ece0139f51dd9325db37f452dd1230d377d77411f02b679f2ea90f8b4eeb33823aa004f35aff484597648ad806695b7e531bd44fd83b8eb467bdaab213b01b3a048b848673b80182b02723e9a001c269fe26663150fea43740cf606235192b7a98dcee808bdb6750f31fb90d511ed0ccd1569930fd7472ddb11e1c8a7f12738cecf9cfbdc67d7b0f4bd523e31dae6b817288997fb0b4d6f5e011db96657b73810ea8fb030ea7cedb2731eceb97e6b8c246cb3e8fcaa8d24a62a5c1987b8ec1c9c6e65581f7ef77f66b3b5dfd3c73af62af88b8665051661e74865b4a29ed05f7ef8fa8305f88c2a103ab5bbfaaa1fd883484b0821438f84497890c10761680f68d7b0e6efee72557414034a07f4b7b2ad7a19779f5e12126925281f1b179c5fba04421a86eb01d78bcf2a390ce725b1e22f554dd058dfeeeba8048f02a053f73de8c0ea4b3ebb583e3cda777d2286d60737ac89d1d398e582354cbb7df2974ffbc802c3c7ccbcb3337de79f1bb1e0f839f0bda1a7391ba4d4c80940d9361ee82a5f0477805e1eeb32773e07ea535d7cbd4747942b5eec7d2d09933eff8df0c9415c30c616c223f09597e1701aa39b5ba26e285cefffb089e0baa4ca6b2b8030ca2e283632e913b5f33c98d9aec75441512a95d2f3cd0a065d185e4cf218e2f517ac38018419b20536f005326500ecfec2026df051d109892312541311022c7cabbb27c2fb6fe357b1c84708603d47904182ed3145c39cc535c8ebfc21639c069fac1feecd4c90b51713840b6b08d0e0bc2bc6efe14fcb325a09972c31a925983a4967b7e109be6fa6a47597eec66158b7c9e0c0441ba5ca7edb33eebd741514a50971a1a6aa05f598017b798da000cfcc730a21c57e45af9ec3759c8dceea03a23940f3509cbd741a1c758aa76eed0319e7a401fa384a65660c225f42ec06fdc57590aed0ab761780a0482d3e1cb38faba8bf45d5010597fd8c9e04c1ac5b45e87157311aa574c0badb4a79db59384d4534c2380e7917eec6d5043fcad5002311ee25723aca7dffc3af579026d8d0f91ea043340dd289110654aa6c891d39fde951b39edacebebbfd41e10e917d8e51e85fa3236c88948a820de2cfc04c59e4fea6da0db03d430278eaa8bfc45b5ac7ff2b3285f3e4ad77fe7dc827aa3c684ed8b6afcce86d7adc6d0fc591d65081a8e0865289fa718d08e737667cf957d5ca2f68b0cfaeb7711ade82263ae37527c28ebe801100b9bd6e1ac12196912affbbd30e8e900dc656d07ec8fd8283b37fcd32f886114b308aa91d1fac772afa652becdad1ef40b69188a14183a082c8c30e3571ff62826890f84dcd5cc520d56baf58ae6b871192b53815e42bb9b6a1a49436a612fe6a354a4888c41b23aff94163ad4aab42972d64496505ddee932851bd6a588351d02648ab0857ed571d17a211564e665af630c31ea9e7c4c40f2478db6b12aea29d8b579f76a10b4c3a12ad59801195d60c803d88c61be79096158dab0e9479cddaba43a01bd6379bd7a6517173372cb79fa6e9e46804af2d27963b2a5146a6019ef1f79defc122d79403cc2d6307484df9dec83fd12e3fc6ba41e7174c1d9af6924a7ca6e2ca7f479e7f7bc66eadad4d5d916fd5829fcc8d9e620abbe79afe6fe0d9f9b0da15f52f2ba94bba179ab0681a0a", 0xf01}], 0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0xffff, 0x1, 0x0, 0x28) r8 = accept$inet6(r4, &(0x7f0000000240), &(0x7f00000002c0)=0xc) kevent(r1, &(0x7f00000003c0)=[{{r1}, 0xfffffffffffffff9, 0x80, 0x20, 0x5, 0xd7c4}, {{r4}, 0xffffffffffffffff, 0x0, 0x80000000, 0x4, 0x7}, {{r1}, 0xffffffffffffffff, 0x13, 0x42, 0x3, 0x2}, {{r2}, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x200}, {{r3}, 0xffffffffffffffff, 0x8, 0x40, 0x45, 0x7}, {{r1}, 0xfffffffffffffffe, 0x94, 0x4, 0x8000, 0x4}, {{r3}, 0x7ffffffffffffffb, 0x83, 0x2, 0x1, 0x8}], 0x3, &(0x7f00000004c0)=[{{r2}, 0xfffffffffffffffc, 0xc4, 0x80000000, 0x8, 0x100000000}, {{r7}, 0xfffffffffffffffd, 0x10, 0x20000000, 0x1, 0x6}, {{r1}, 0xfffffffffffffffa, 0x89, 0xf0000000, 0x2, 0x7}, {{r8}, 0xfffffffffffffffc, 0xa, 0x2, 0xffffffff, 0x1}, {{r3}, 0xfffffffffffffffb, 0x84, 0x4, 0x2, 0x1}], 0x3, &(0x7f0000000300)={0x1800000000000000, 0x7fffffff}) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x17}, 0x4, 0x0, 0x0, 0x0, 0x0) 2.202509149s ago: executing program 2 (id=412): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000000)="e2", 0x1) r1 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r1, &(0x7f0000000000), 0x10) close(r1) bind$unix(0xffffffffffffffff, 0x0, 0x0) unveil(0x0, &(0x7f00000001c0)='r\x00') 1.669504473s ago: executing program 3 (id=424): sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x25}, 0x4, &(0x7f0000000140)="e33745e84d5ebfb9cc2f7fa3a7f7891721720e69dac610a4fb5e8c3e3c6e1d648a8ca6ebc70f949c442aee9dc79e2cd74f4e106f382caf01ada3bc4efb0f6bc50690e5492f4a0491b1ea3359aa5c5164ad97ac7c3aadca05fd9e9a8c0f962f5167b69cfdc8287fc34b8138340e60c404a855858ea5fc", &(0x7f0000000000)=0x4104, 0x0, 0x0) r0 = semget(0x2, 0x3, 0x200) semop(r0, &(0x7f00000000c0)=[{0x0, 0x8000, 0x800}, {0x0, 0xf9fa, 0x3800}, {0x0, 0x3fb, 0x800}, {0x2, 0x2, 0x1000}, {0x0, 0x40, 0x800}], 0x5) (async) semop(r0, &(0x7f00000000c0)=[{0x0, 0x8000, 0x800}, {0x0, 0xf9fa, 0x3800}, {0x0, 0x3fb, 0x800}, {0x2, 0x2, 0x1000}, {0x0, 0x40, 0x800}], 0x5) r1 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) setuid(0xffffffffffffffff) ftruncate(r1, 0x79c8) (async) ftruncate(r1, 0x79c8) sysctl$kern(&(0x7f0000000100)={0x1, 0x46}, 0x2, &(0x7f00000001c0)="b21fab614faf55e092d5102094ce744dff984f94d1a6e2ab5fbda6f9d4810b377d", &(0x7f0000000200)=0x21, &(0x7f0000000240)="ad545cb1498a975791d85d2fcbda156558810016d0146d30e0bdc558861b9bf0a17eade71780b442ebdfd33512b37ab4e531044a32096cae4ba1af8637dacb3ad380c0a87cb0808a70f80890df12658588bbe6d353e106a0295276", 0x5b) r2 = socket$inet(0x2, 0x2, 0x0) setitimer(0x1, &(0x7f0000000000)={{0x2, 0x7}, {0x0, 0x7df}}, &(0x7f0000000040)) semctl$GETZCNT(r0, 0x3, 0x7, &(0x7f0000000000)=""/90) (async) semctl$GETZCNT(r0, 0x3, 0x7, &(0x7f0000000000)=""/90) fcntl$lock(r2, 0x9, 0x0) poll(0x0, 0xffffffffffffff1c, 0xfffff801) (async) poll(0x0, 0xffffffffffffff1c, 0xfffff801) 1.663608841s ago: executing program 4 (id=426): sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="31ccdb", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb4bec7e671787e0d1fd68a3b0bbd64df47ef54038154185880a25fb2f1492a390b762edaccb3d06057281e21bc86eaebccb76782c84c796b0081654b531c97d71b8c38bc4d63113546770f92516e12b293a7735e55181f93bb055b79559b5c40d44180de83b57cdf58c99", 0x6b}, {&(0x7f0000000380)="e2a60504ec70ffc64c837d94082db62b24a3c20263a70ffff025b57f996cc94db06cc2effaddf7b40bbce6b23dde2c5ef9c7ebbadc983bbb3ff04bac6edc705e4f9f858545602634671f342cfdebfd545ffa2e5bf18f3404c703502233901e347c2103401217bbfc2189af19e4bc273c748acd9b9d83205510a93c47eb03b8e5388ac620b52b228c1528218c4d6efd40ae6f03d19921ce91b8372f91ce333440b3bfe395fd3480b25a496b5da3b70bb747442869a6c9f63579a9066bc10ffe317dd9503d6600d24ec0e2f804b423f52d304b4a15468ec2809329fb33a761f45179416499708e21b1d467f9419cae2f", 0xef}], 0x2, &(0x7f0000000300), 0x0, 0x400}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x2, &(0x7f0000000000)={0x60000000, 0x60000000}) mmap(&(0x7f00004fc000/0x3000)=nil, 0x3000, 0x3, 0x10, r0, 0x0) getsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 588.042743ms ago: executing program 3 (id=427): r0 = socket(0x2, 0x3, 0xff) setsockopt(r0, 0x0, 0x5, &(0x7f0000000240), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000080)={&(0x7f0000000040), 0x2b}) ioctl$WSMOUSEIO_GETPARAMS(r1, 0x80105727, &(0x7f0000000080)={&(0x7f0000000240)=[{0x23, 0x2}, {0x25, 0xc}], 0x2}) r2 = socket$inet(0x2, 0x1, 0x0) close(r2) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x20000052e5) r4 = socket(0x24, 0x2, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0xbe, 0x2, 0x6}, {0x74, 0x10, 0x0, 0x3ff}, {0x6, 0xa, 0x5, 0x44011}]}) syz_emit_ethernet(0x3e, &(0x7f0000000b80)=ANY=[]) ioctl$FIONBIO(r4, 0x8004667e, &(0x7f0000000000)=0x8000) setsockopt(r2, 0x6, 0x1, &(0x7f0000000280)="e9f2d779", 0x4) 586.609538ms ago: executing program 7 (id=428): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = getpid() setpgid(0x0, 0x0) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r1}) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x3, 0x9, 0x2, 0x2}, {0x81, 0x10, 0xe5, 0x100}, {0x6, 0xe, 0x84, 0x400f}]}) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000840)="da2c8b7ce3f07ed965dcd52b6ae6c88dc47214e6", &(0x7f0000000080)=0x14, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) (async) write(r2, &(0x7f0000000140)='\x00'/14, 0xe) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r3, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r4, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) (async) r5 = getppid() mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) (async) r6 = open(&(0x7f0000000140)='./bus\x00', 0x2, 0x60) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x7ff, 0x19, 0x9, 0x20049c, "3280faff0300000000000000000000000600", 0xe6, 0x3}) r7 = socket(0x2, 0x1, 0x0) shutdown(r7, 0x1) socket(0x2, 0x4001, 0x0) (async) syz_open_pts() (async) syz_open_pts() (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0x5, 0x8, 0x3, 0x100000000, 0x60d, 0x80000000, 0x31a9, 0x8, 0xfffffffffffffff7, 0x2efd, 0x4, 0x0, 0x0, 0x1, 0x8a, 0x4, 0x0, 0x4], [0x5, 0x5, 0xfffffffffffffff8, 0x8000000000, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0x47], [0x8, 0x8, 0x100040000000000, 0x0, 0x3, 0x4006, 0xfffffffffffffffe], [0x100, 0x5, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x1, 0xc, 0x0, 0x1ff}, {0x2, 0x2, 0x5, 0x4}, {0x0, 0xfffffffd, 0xfffffffe, 0x5}, {0x1008, 0xfffffffc, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x7fffffff, 0x1}, {0xfffe, 0x0, 0x7}, {0x0, 0xc, 0x10, 0x9}], {0x0, 0xb, 0x0, 0x849}, {0x203, 0x10, 0x4, 0x2}}}) (async) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0x69, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r6, 0x80045102, &(0x7f0000000040)={0x0, 0x9, 0x0}) (async) setpgid(0x0, r5) (async) ioctl$WSKBDIO_GETMAP(r0, 0xc010570d, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x8, 0x400, 0x0, 0x9, 0xfff}, {0x4, 0x7ff, 0x4, 0x5, 0x601}, {0x9, 0x400, 0xfeff, 0x10, 0xd}, {0x9, 0xa, 0x4, 0x1, 0x7fff}, {0x4, 0x8, 0x7, 0x8, 0xd4}, {0x9, 0x7f, 0x6, 0x6, 0xffff}]}) 584.745729ms ago: executing program 4 (id=429): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) (async) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff, {[0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5], [0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xa18, 0x2], [0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x40000000000], [0x0, 0x3, 0xffffffffffffffff], [{0x0, 0x1, 0x0, 0x4}, {}, {0xffff, 0xfffffffd, 0x0, 0x800000000000}, {0x0, 0xfffffffe, 0x0, 0x1}], {0x0, 0x0, 0x0, 0x6}}}) kevent(0xffffffffffffff9c, 0x0, 0x2, &(0x7f0000000540)=[{{r0}, 0xffffffffffffffff, 0xa2, 0x8, 0xe, 0xffffffff}], 0x74, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x44, 0x1, 0x80043f}, {0x80, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x4, 0x48a6}]}) (async) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="dd5bd7", 0x3}], 0x1) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="b119080066ec31fe4173ff3423f2e2bfcb4c96ff540000004fd0806f0882675d066a1329135711654b9e372e", &(0x7f0000000080)=0x2c, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x22, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x1, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}}}}}) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400001803c1, 0x0) r5 = kqueue() kevent(r5, &(0x7f0000000040)=[{{r4}, 0xffffffffffffffff, 0x4d, 0x40, 0x7, 0xff}], 0x139, 0x0, 0xffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) 525.750275ms ago: executing program 0 (id=430): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9c, 0x5}, 0x0, 0xfffffffffffffffe, 0xfffff7ffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x2a, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$BIOCGBLEN(r2, 0x40044266, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETBELL(r3, 0x80105703, &(0x7f0000000140)) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) symlink(&(0x7f0000000000)='\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x2, 0x2, 0x0) sendto(r4, &(0x7f00000000c0)="14e566753ea20dce62479a02073c6430ec5279ac31152193b68a8d66d950ad93cf6b821caed758a3ad15f5b7d7c64d2049f4904ef0b0ea3f4e32a7b5bd6b724ca9244e5bed86dd747c9f46ed934a024e9759d7c0d8ed368708986135dd838fc97076738341c31a6cc08849272d59fe4c73f5163de7a8fb258dc9e0f6dfcd7fc13a8369d7f6aa63a1ae4045ca77c4e617d1dbec2ad1a7709e37b75e95b158f15bca5c99dd82ae56183418958d59f40e5bf74783fd63f96f01cb186b26383161bffcf469a5cba2252dcb870c9f0e160db1de642ca2815c3805976572b439fe73a2ae962903b3284438216156463eaafb210a12ea", 0xf3, 0x0, &(0x7f00000001c0)=@in={0x2, 0x0}, 0xc) close(r4) r5 = socket$inet(0x2, 0x4003, 0x9) setsockopt$inet_opts(r5, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) connect$unix(r4, &(0x7f0000000000), 0x10) ioctl$BIOCGRSIG(r2, 0x40044273, &(0x7f0000000200)) sendto(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 513.019602ms ago: executing program 4 (id=432): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc0}, 0xf0ffffffffffffff, 0x1}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) close(r0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x5, &(0x7f0000000280)=[{0x3d, 0x1, 0x0, 0x1915}, {0x25, 0x0, 0x2, 0x20000009}, {0x3, 0x2, 0x30, 0x7}, {0x87, 0x8, 0xaa, 0x7}, {0x6, 0x4, 0x7, 0x800}]}) write(r0, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) r1 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) 511.206258ms ago: executing program 3 (id=433): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) fcntl$getflags(r0, 0x1) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x3, 0x9, 0x2, 0x2}, {0x81, 0x10, 0xe5, 0x100}, {0x6, 0xe, 0x84, 0x400f}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) write(r1, &(0x7f0000000140)='\x00'/14, 0xe) 464.144012ms ago: executing program 7 (id=435): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) openat(0xffffffffffffff9c, 0x0, 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x2, 0x0) r1 = open(&(0x7f0000000240)='./file0\x00', 0x200, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0xd3b2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x8100000000b936}, {&(0x7f0000418000/0x1000)=nil, &(0x7f00004ac000/0x1000)=nil, 0xfffffffffffffffc}, {&(0x7f000052e000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000298000/0x2000)=nil, 0x4}, {&(0x7f000025e000/0x4000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x81}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f000053e000/0x4000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00002d0000/0x4000)=nil}, {&(0x7f000069e000/0x2000)=nil, &(0x7f00003f2000/0x2000)=nil, 0x8}, {&(0x7f0000002000/0x1000)=nil, &(0x7f000038f000/0x4000)=nil, 0x812b}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0xb}, {&(0x7f0000196000/0x3000)=nil, &(0x7f00003e4000/0x2000)=nil, 0xb}, {&(0x7f000006a000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffbffffff9}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000039f7}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x7}], './file0\x00', 0xfffffffe}) r2 = openat$vnd(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, 0x0) syz_open_pts() setitimer(0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0x6}}, 0x0) renameat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000002c0)='./file0\x00') open$dir(0x0, 0x1, 0x50) getitimer(0x0, &(0x7f00000000c0)) 460.950868ms ago: executing program 3 (id=436): ioctl$TIOCNOTTY(0xffffffffffffffff, 0x20007471) r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000000000)=@file={0x0, ""/20}, &(0x7f0000000040)=0x16) accept$unix(r0, &(0x7f0000000080)=@file={0x0, ""/16}, &(0x7f00000000c0)=0x12) syz_emit_ethernet(0x96, &(0x7f0000000100)={@random="8f3514caf19a", @empty, [{[], {0x8100, 0x2, 0x0, 0x2}}], {@ipv4={0x800, {{0x11, 0x4, 0x0, 0x9, 0x84, 0x68, 0x6, 0x2, 0x3, 0x0, @remote={0xac, 0x14, 0x0}, @loopback, {[@timestamp={0x44, 0x30, 0x3, 0x3, 0x4, [{[], 0xdfb0}, {[@rand_addr=0xce3], 0x9}, {[], 0xfffffda6}, {[], 0xf3}, {[@local={0xac, 0x14, 0x0}]}, {[], 0x3}, {[], 0x8001}, {[@remote={0xac, 0x14, 0x0}], 0xffffffff}]}]}}, @udp={{0x1, 0x0, 0x8}, {"295065340f67e4406648714b5a3729bfd2586eb9f60833366bf2745fc5cc721b95f3a5c133bd71cd9e84aee01d9bd740176a4b1a2f5f10ed"}}}}}}) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$WSDISPLAYIO_DELFONT(r1, 0x8058574f, &(0x7f0000000200)={'./file0\x00', 0x3ff, 0x0, 0x9, 0x0, 0xfffffffd, 0x4, 0x1, 0x2, 0x2, 0x2, 0x7}) chroot(&(0x7f0000000280)='./file0\x00') r2 = openat$tty(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0xa, 0xffffffffffffff9c) ioctl$WSDISPLAYIO_SBURNER(r3, 0x800c5751, &(0x7f0000000300)={0x789, 0xd, 0x2}) r4 = shmget$private(0x0, 0x1000, 0x2e, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r4, 0x4) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000440)={&(0x7f00000003c0)='./file0\x00', 0x7, &(0x7f0000000400)='./file1\x00', 0x8}) r5 = semget(0x3, 0x4, 0x8) semop(r5, &(0x7f0000000480)=[{0x3, 0xf7, 0x1000}, {0x0, 0x52, 0x800}, {0x3, 0x3, 0x800}], 0x3) shmctl$IPC_STAT(r4, 0x2, &(0x7f00000004c0)=""/124) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f00000005c0)={&(0x7f0000000540)='./file1\x00', 0x8, &(0x7f0000000580)='./file2\x00', 0x8}) r6 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000600), 0x8, 0x0) ioctl$VNDIOCGET(r6, 0xc4104603, &(0x7f0000000640)={'./file2\x00', 0x9, 0x8, 0x3}) r7 = socket(0x20, 0x5, 0x81) accept$unix(r1, &(0x7f0000000a80)=@file={0x0, ""/62}, &(0x7f0000000ac0)=0x40) r8 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000b00), 0x200, 0x0) ioctl$WSMOUSEIO_SRES(r8, 0x80045721, &(0x7f0000000b40)=0x101) shmctl$SHM_LOCK(r4, 0x3) connect$unix(r7, &(0x7f0000000b80)=@abs={0x1, 0x0, 0x3}, 0x8) pread(r3, &(0x7f0000000bc0)="954042b3459a4a31710c62417c3d1e5328dd271a5c3d167d526d7590db5ab118d33aa18cf4759e32ca6e476ffd42bbd9e7c8b550b7ddc7e05c12b32243adcff974c6e81d144fac6123a083d0469e187452dce41bae6c3d26d90c19a7c2ad547148be02b5b795aa6f890c8db99f7355a001f0709a2089deef2eba51359b0814b28291f456ef5ffab76988e5cfa5abc9e2b65fed2104a8237cb8dcdbd0a96efc7ce0362e63a8f38e1809b631d358535b7b0392cb98790417c43dfbaac52a5b34460a", 0xc1, 0x7) ioctl$TIOCGTSTAMP(r3, 0x4010745b, &(0x7f0000000cc0)) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000d00)) shmctl$SHM_LOCK(0x0, 0x3) 459.162033ms ago: executing program 4 (id=437): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) (async) socket$inet6(0x18, 0x2, 0xb) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r3 = dup2(r2, r0) poll(&(0x7f0000000100)=[{r2, 0x2}, {r1, 0x10}, {r3, 0x81}, {r2, 0x4}], 0x4, 0xffffffdf) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (rerun: 64) r4 = socket(0x20, 0x2, 0xfe) bind(r4, &(0x7f0000000000), 0x10) (async) connect$unix(r4, &(0x7f0000000000), 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2000, 0x0) (async) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) (async, rerun: 64) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000540)='./file0\x00') (async, rerun: 64) renameat(r0, &(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file1\x00') (async) r5 = socket(0x2, 0x2, 0x0) connect$unix(r5, &(0x7f0000000000), 0x10) write(r5, 0x0, 0x0) 381.927413ms ago: executing program 0 (id=438): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0xffffffff, 0xffffffff, 0xfff7, 0x0, 0x802, 0x22, 0x2, 0x0, 0x0, 0x2, 0xff}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x258f, 0xcd, 0xfff6, 0x0, 0x8, 0x3, 0x8, 0x1, 0x2, 0x0, 0x2b7}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) setsockopt(0xffffffffffffffff, 0x3ff, 0x64, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) kqueue() (async) kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0xffffffff, 0xffffffff, 0xfff7, 0x0, 0x802, 0x22, 0x2, 0x0, 0x0, 0x2, 0xff}) (async) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) (async) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x258f, 0xcd, 0xfff6, 0x0, 0x8, 0x3, 0x8, 0x1, 0x2, 0x0, 0x2b7}) (async) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) (async) setsockopt(0xffffffffffffffff, 0x3ff, 0x64, 0x0, 0x0) (async) 380.959685ms ago: executing program 6 (id=439): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$WSKBDIO_GETMAP(r0, 0x80047476, &(0x7f0000000140)={0x0, 0x0}) (async) r1 = socket(0x2, 0x1, 0x0) listen(r1, 0x6) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) openat$pci(0xffffffffffffff9c, &(0x7f0000000980), 0x100, 0x0) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0}, 0xc) (async) socketpair(0x1e, 0x4, 0xff, 0x0) 379.928601ms ago: executing program 6 (id=440): mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) (async) socket$inet(0x2, 0x2, 0x0) (async) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = dup(r0) (async) setuid(0xffffffffffffffff) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') (async) unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='x\x00') (async) open(&(0x7f0000000080)='./file0\x00', 0x800, 0x0) (async) setsockopt$inet_opts(r1, 0x0, 0x16, &(0x7f0000000080)="fd0cc085", 0x4) 360.162902ms ago: executing program 7 (id=441): ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000100)='./file0\x00', 0x10005, 0x0}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat(r0, &(0x7f0000000180)='./file0\x00', 0x8012, 0x28) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) mknod(0x0, 0x1000, 0x9f0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x80000000, 0x80000005, 0xffffdf82, 0xffffff8d, "08ed95990000000000000000ffffffffffffffe6", 0x4000000, 0x20000}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000)) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf0, 0x0, @broadcast, @rand_addr=0xdfffffff}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xa, 0x7, 0x0, 0x80}}}}}}) 359.392997ms ago: executing program 4 (id=442): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r1, 0x6) ioctl$WSKBDIO_GETMAP(r0, 0xc010570d, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x46, 0x7, 0x0, 0xdd, 0x3ff}, {0x9, 0x3, 0xffff, 0x40, 0xb76}, {0x0, 0x7, 0xa, 0x0, 0x9}, {0x7, 0x8, 0xfff9, 0x10, 0x5}]}) ioctl$WSKBDIO_SETMAP(0xffffffffffffff9c, 0x8010570e, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0xbc34, 0x3, 0x0, 0x3, 0x8}, {0xa44, 0x8, 0x7ff, 0x400, 0xf801}, {0x2, 0x4, 0xf7ec, 0x5, 0x7}, {0x36e7, 0x71e, 0x9, 0x7fff, 0x2}]}) r2 = fcntl$getown(0xffffffffffffffff, 0x5) ioctl$TIOCGETD(r1, 0x4004741a, &(0x7f0000000140)) ioctl$TIOCSTART(r0, 0x2000746e) write(r0, &(0x7f0000000180)="8d32f41074798f1c148d708c4ca7a64fba3ed1ff98b1ae7cda969bbbe939f223528d211980d2c4c7c06ffb5989e83db66e292807c65f84ac98dfcd960edd1715e84c3f48c261f008dc9b902c950645406326de6f6cc3cb968371f8bebd94a1d6412f96228bf207632c211bffd0d61437dec75a0685774c0dbb73aeeb1de35b530029f6520b2085d0ee4b2f46041da6be2370a0b543e555a666967cc2ac0cfb01233510f2518846e32be9c4398c8f1a6ef73fbc7d599a09a21fa178074a0ce7a90c6e7790c14784f422", 0xc9) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0}, 0xc) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) chown(&(0x7f0000000280)='./file0\x00', r3, r4) setsockopt(r1, 0x95c, 0x5, &(0x7f0000000380)="83ce6db189fc0246fc532b1f1cf83cf5ac2f00855090ec886144f7c3ab32e55286fa004f613ede755d6edc0fe5026b787efbeda0e92a2ca674a559a150764023d5f7231f78d6f5c150d5a431ccc204e5dee35634b08e0904f1d354d0d42e586583645db9d05f9e10292d498d09d78cc0bc5f601299ae7fd93238452b", 0x7c) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) connect$unix(r0, &(0x7f0000000400)=@abs={0x1, 0x0, 0x3}, 0x8) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0xc) ktrace(&(0x7f0000000440)='./file0\x00', 0x0, 0x124, r5) r7 = dup(r0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x2}, 0x8) sync() ioctl$VMM_IOC_CREATE(r1, 0xc2585601, &(0x7f0000000500)={0x10, 0x5, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xb684}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x35}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x6}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x3}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x95e}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x1000000000}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xff}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x1456}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x3}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xe0000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x890}], './file0\x00', 0x4}) r8 = getuid() setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000700)={r2, r8, r6}, 0xc) getpeername$unix(r7, &(0x7f0000000740)=@file={0x0, ""/4087}, &(0x7f0000001740)=0xff9) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) sysctl$net_inet_ip(&(0x7f0000001780)={0x4, 0x2, 0x0, 0x4}, 0x4, &(0x7f00000017c0)="3a05d22085f95196f239f5d54a0df47c28f2653a2cfa3c5f5df4a22f08c790c9073275fb28c5fb56c4d43a39eafa5246608e4347e4595aabf94776e331d12a2dc118144a64c68bd1931325b300fa0c2380da6a4555bf9bb5ede2943e3f", &(0x7f0000001840)=0x5d, &(0x7f0000001880)="176058a2f7f79a492a67a4df6fc974e1fd3aa00e879c382f5473b3b7119cfe113a61fa684d23f2f4b88e4c33339f5bfffdf220d3291a561aaeebbb63db712cbc65ca17f447e37d56ad6f61e0fe5553ef790a5347c933b7f72e2b1da47d94a0319f0ff67ccffb5437f55ad09b39783a88b1f9a475ec91433828bf1cec93f03b60e1033aa083567c342e3a1171bbcc695f40a5d299843d027aa158", 0x9a) connect(0xffffffffffffff9c, &(0x7f0000001940)=@in={0x2, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f0000001980)={{0x18, 0x2, 0x3, 0xfffffff9}, {0x18, 0x2, 0x0, 0x981}, 0x1, [0x2, 0x80000001, 0x8, 0x5, 0x6, 0x4, 0x200000, 0x1]}, 0x3c) accept$unix(r1, &(0x7f00000019c0)=@file={0x0, ""/518}, &(0x7f0000001c00)=0x208) sendto$inet6(r0, &(0x7f0000001c40)="d37194402fc470224a20f0fabdfc9c0592938973475cb4e2e541d09a65eb721dda14dd5f822426d23de38d7535053354338e5907513be6cff543df7a31fb7fe070b26f438c5e606f931cb5ee3f98a4d6b7e70734677c98cf37bc4a4e2cc526c50759636fdd40f8271588c59fef858a1ea428133c69178e985bf6743efe68a3", 0x7f, 0x4, &(0x7f0000001cc0)={0x18, 0x2, 0x8, 0x493}, 0xc) ioctl$LIOCSFD(r1, 0x80046c7f, &(0x7f0000001d00)=r7) 357.841104ms ago: executing program 6 (id=443): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) setrlimit(0x2, &(0x7f0000000080)={0x60000000, 0x60000000}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000280)=@abs={0x1, 0x0, 0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x8) ioctl$TIOCSETA(r0, 0xc4504444, &(0x7f0000000740)={0x2f, 0xffff, 0x101, 0x20000003, "040009100000000000004800", 0xb, 0xfffffffe}) open(&(0x7f0000000180)='./file0\x00', 0x75f493fec6515f78, 0x0) setrlimit(0x1, &(0x7f0000000000)) ktrace(&(0x7f0000000140)='./file0\x00', 0x2, 0x1432, 0x0) 73.933027ms ago: executing program 0 (id=444): r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) write(r0, &(0x7f0000000040)="78270461dca43aee66fb1f130b9a8e7c79f59061fb78c3e493dffc29c11490eb60caf05ee7ad001f698c0a7cbd3d0edcee9af4c046c707f4bea9c96ce308fe2d8b2c3ce6ebea39b9b883f9cf511dcbaeb94a5261fae9ed1ee2a201c97d150cb3824853aa967fc0f79cf20013cc1e14c59fb81a73d5dbf3bc630bd59afe69f9e0734ed24f0f5d158f50a65143a9168a24f3bebd7b72092cdd25ffb293309e409fcc389efd95bb2e6913711aca0d5155bf0a595f5474ffe9fac6b1815ab744e14a84ffc43b48433e16a25a9886f701491dbdcf811ce1c81ad16a4264", 0xdb) ioctl$BIOCSETF(0xffffffffffffff9c, 0x80104267, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0xb, 0x7f, 0x7, 0x22}, {0x4, 0x80, 0x4, 0x39}]}) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) ioctl$VT_GETACTIVE(r1, 0x40047607, &(0x7f0000000200)) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x80) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$TIOCGWINSZ(r2, 0x40087468, &(0x7f00000002c0)) ioctl$BIOCSDIRFILT(r2, 0x8004427d, &(0x7f0000000300)=0x4) fchdir(r0) setsockopt$sock_int(0xffffffffffffff9c, 0xffff, 0x1001, &(0x7f0000000340)=0x3, 0x4) ioctl$BIOCGETIF(r2, 0x4020426b, &(0x7f0000000380)={""/16, @ifru_addr=@in6}) ioctl$VNDIOCGET(r2, 0xc4104603, &(0x7f00000003c0)={'./file1\x00', 0xe, 0x8, 0xfffffffffffffffd}) ioctl$KDDISABIO(r1, 0x20004b3d) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000800), 0x80, 0x0) r4 = socket$inet6(0x18, 0x8000, 0xc0) ioctl$DIOCMAP(r3, 0xc0106477, &(0x7f0000000880)={&(0x7f0000000840)='./file0\x00', r4}) getpeername(r3, &(0x7f00000008c0)=@in6, &(0x7f0000000900)=0xc) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000980)={0x2, &(0x7f0000000940)=[{0x200, 0x77, 0x46, 0x8}, {0x0, 0x8, 0x7f, 0x5}]}) r5 = openat$klog(0xffffffffffffff9c, &(0x7f0000000a00), 0x800, 0x0) kevent(r2, &(0x7f00000009c0)=[{{r1}, 0xffffffffffffffff, 0x0, 0xfffff, 0xb19, 0x2}, {{r1}, 0xfffffffffffffffc, 0x82, 0x2, 0x6, 0x5}], 0x3, &(0x7f0000000a40)=[{{r1}, 0xfffffffffffffffa, 0x49, 0x2, 0x6, 0xe32}, {{r1}, 0xfffffffffffffffb, 0x10, 0x40000000, 0x0, 0x1}, {{r5}, 0xffffffffffffffff, 0x0, 0x20000000, 0x73, 0x5}], 0xf204, &(0x7f0000000ac0)={0x8000000000000001, 0x80000001}) shutdown(r2, 0x0) rename(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='./file1\x00') r6 = getuid() r7 = accept$inet6(r3, 0x0, &(0x7f0000000b80)) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0xc) fchown(r7, r9, 0x0) r11 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffb000/0x3000)=nil) r12 = geteuid() shmctl$IPC_SET(r11, 0x1, &(0x7f0000000c00)={{0x1, r6, r10, r12, 0x0, 0x110, 0x9}, 0x9, 0xfff7, 0x0, r8, 0x0, 0xff, 0x1}) 73.154214ms ago: executing program 6 (id=445): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x44, 0x1, 0x80043f}, {0x81, 0xfa, 0x0, 0xa}, {0x16, 0x3, 0x4, 0x48a6}]}) (async) clock_getres(0x1, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sysctl$hw(&(0x7f00000000c0)={0x6, 0x12}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[]) (async) mquery(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x5) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000000)={0x4, 0x1f, {[0x8, 0x6, 0xe6d1, 0x7, 0x10, 0x8, 0x7fffffffffffffff, 0x7, 0x1000, 0x9, 0x7, 0x5, 0x8000000000000000, 0x5, 0x5, 0x8, 0x8, 0x1], [0x5, 0xfffffffffffffff5, 0x8000000000000000, 0xda, 0x7, 0x7, 0x16, 0x7ff, 0x0, 0x8], [0x8, 0x8001, 0x4, 0xffff, 0x7f, 0xffffffffffffffff, 0x3], [0x100, 0x80000000, 0x3, 0xa, 0xe, 0x626], [{0x149b, 0xd, 0x1, 0x9}, {0x3, 0x2648, 0x8000, 0x2}, {0x6, 0xb, 0x5c2, 0x100000000}, {0x6800, 0x8000, 0xb, 0x6}, {0x1, 0x9, 0xdbb9, 0x100000000}, {0x2317, 0xbfe000, 0x4, 0x6}, {0xfe, 0x80000001, 0x0, 0x800}, {0x6, 0x1, 0x7, 0x9}], {0x6a, 0x5, 0xfffffffb, 0x9}, {0x26, 0xffff, 0x1ff, 0x2}}}) (async, rerun: 64) syz_emit_ethernet(0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd6036ea0700383a00fe8000000000000000000000000000aaff020000000000000000000000000001830290"]) (rerun: 64) 72.41777ms ago: executing program 3 (id=446): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) (async) r0 = socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3, 0x9e}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async, rerun: 32) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (rerun: 32) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') (async) mknod$loop(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async) link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x6, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x3, 0x9]}, 0x3c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) socket(0x18, 0x2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) getpeername$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000440)=0x8) (async) close(r0) 7.322936ms ago: executing program 6 (id=447): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0x0, 0x3ff}, {0x6, 0xa, 0x5, 0x400f}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000003c0)="d3eee6ceace7a666fb306d8baf8376b1c79d960220dfcf42750004010000000000549b3d1ebacefce2d665167aed697bb112271e1317457b7ee04d0ac7c99e5f3a219e086da2ffa9", 0x48}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000600)="766b8408229731b3a5f0bee248baba690000000000000000000000002f58172d05a8d977f17a98de693e7497", &(0x7f0000000080)=0x2c, 0x0, 0x0) mprotect(&(0x7f00007be000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) write(r0, &(0x7f0000000480)='\x00'/14, 0xe) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x2012, r1, 0x0) msync(&(0x7f0000ea8000/0x3000)=nil, 0x3000, 0x5) ioctl$BIOCGETIF(r0, 0x4020426b, &(0x7f0000000000)={""/16, @ifru_broadaddr=@in6}) 5.636793ms ago: executing program 3 (id=448): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}]}) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040)={0x700}, &(0x7f0000000080)={0xcb}, &(0x7f0000000180)) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r1, 0x8004667d, &(0x7f0000000040)={0x1, 0x4000000}) mprotect(&(0x7f0000322000/0x2000)=nil, 0x2000, 0x4) 4.968609ms ago: executing program 0 (id=449): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x5c, 0x28, 0x3, 0x2}, {0x87, 0x5, 0x0, 0x2}, {0x206, 0x6, 0x9, 0x102}]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) setrlimit(0x1, 0x0) open$dir(0x0, 0x10000, 0x52) r1 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt(r4, 0x6, 0x10, &(0x7f0000000000), 0x0) syz_emit_ethernet(0x1000e, &(0x7f00000003c0)=ANY=[]) 2.04259ms ago: executing program 4 (id=450): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) (async) r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff}], 0x2) (async) r1 = socket(0x18, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000580)="dff495ed9859c47307e54d2d89b2e5b80a4756258a6fd25605d4c02e73a41b2bfd8f1af5fd93056a7678eb3e86d30607f112e7335018d07a1edfcaea63442381dde898a795f6da452f9a450c2198b47fbdec82a0c29a97c1ad0596e6b9c806bae0cfdc79f89290f4a87ef23df657d4c1b0584e3a698b0833a059ec0836661388e6dd791f692e82046e1ea4fc2d07880dad135f86dff50cee7ea1028388d4edb27d7aa489427cd6310223de7644a7", 0xae, 0x400, 0x0, 0x0) 680.233µs ago: executing program 7 (id=451): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x44, 0x53, 0x80043f}, {0x80, 0x85, 0x2, 0xa}, {0x216, 0x3, 0x4, 0x48a6}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCGSTATS(r0, 0x4008426f, &(0x7f00000000c0)) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r2, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x2) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100000000, 0x100006, 0x5, 0xdf60, 0xfffffffffffffffe, 0x4, 0x2f01, 0x4, 0x3, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0xf, 0x8000, 0x5b, 0x1, 0x1fe, 0x0, 0x0, 0x2], [0x100000001, 0x2, 0x3, 0x0, 0xb, 0xffffffff, 0xffffffff00000000], [0x100, 0x5, 0x7fffffffffffffff, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x20000004, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x4, 0x2, 0xfffffffc, 0x80}, {0x3, 0x5, 0x4, 0xffffffffffffffff}, {0x6, 0x2, 0x1000, 0x8}, {0x0, 0x2003, 0x9, 0x2000000000000000}, {}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x5, 0x5}, {0x4, 0x80000000, 0x6d5, 0x2}}}) r3 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r4 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="cb4b43f5e30ff0ddc0bd0a54ef1265f4706f2329d18d7006479d0b7c1f4dd39c5ed79d36bf", 0x25}], 0x1) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f0000000240)="8bc4ec00020000ae00000f3983090000d2b011b9000e000000000000004d5647f78f25b0be8545be034800002a929e0a00b898f05e57194cce16eb46747d0900ee8e624d4f000000", &(0x7f0000000080)=0x48, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r5, &(0x7f00000001c0)=@in={0x2, 0x3}, 0xc) sysctl$net_inet_icmp(&(0x7f0000001380)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f0000000000), 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=452): r0 = socket$inet(0x2, 0x3, 0x1) close(r0) r1 = kqueue() r2 = openat$bpf(0xffffffffffffff9c, 0x0, 0x1, 0x0) kevent(r1, &(0x7f00000004c0)=[{{r1}, 0xffffffffffffffff, 0x3, 0x1, 0x6, 0x9}, {{r1}, 0xfffffffffffffffe, 0x0, 0x80000000, 0x5d, 0x800000000000006}, {{}, 0xfffffffffffffffe, 0x2, 0x40, 0xf8a, 0x1ff}, {{r1}, 0xfffffffffffffffb, 0x59, 0x2, 0x9, 0x7}, {{r2}, 0xfffffffffffffff8, 0x10, 0x80000000, 0x6, 0x70}, {{r1}, 0xfffffffffffffffb, 0x1, 0x40000000, 0x5, 0x10001}], 0x96, &(0x7f00000005c0), 0xffff4160, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)="c24f1ed0ee7501c96edee9cd791ddb5625b58ec0378b8d9031de53043e140fc303704fac6aaedd7670c313d01d816c8d93054adc24038b5a89745ab62ce57da45e613f4063ecb0aee97ac527", 0x4c) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETA(r3, 0xcd504404, &(0x7f0000000040)={0x2, 0x2, 0x8, 0x0, "cded2108002581ba7db28c9d6fb975390a000004", 0x47ffd, 0x6}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) pread(r4, &(0x7f0000000080)="aac91c8a", 0x4, 0x8) r5 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) r6 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c0, 0x0) ioctl$VNDIOCCLR(r6, 0x80384601, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', 0x3bf57b9d, &(0x7f0000000140)='./file0\x00', 0x8}) r7 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0xee4bce5bb233ab95) poll(&(0x7f0000000080)=[{r7, 0x27}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = socket(0x18, 0x2, 0x0) setsockopt(r8, 0x1000000000029, 0xb, &(0x7f00000003c0)='\x00\x00\x00\x00', 0x4) setsockopt(r8, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) close(r7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.9' (ED25519) to the list of known hosts. OpenBSD/amd64 (ci-openbsd-multicore-7.us-central1-b.c.syzkaller.internal) (tty00) login: malloc(): allocation too large, type = 127, size = 4294967324 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error uvn_flush: obj=0xfffffd806bded960, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error kernel: protection fault trap, code=0 Stopped at pf_anchor_global_RB_REMOVE+0x81: movq 0(%r12),%r15 ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic the kernel did not panic ddb{0}> trace pf_anchor_global_RB_REMOVE(ffffffff838cf038,ffff8000014dad48) at pf_anchor_global_RB_REMOVE+0x81 pf_remove_if_empty_ruleset(ffff8000014db1d8) at pf_remove_if_empty_ruleset+0x10e pfi_dynaddr_setup(ffff800010fdb4c0,0,1) at pfi_dynaddr_setup+0x673 pf_addr_setup(ffffffff838cf4d0,ffff800010fdb4c0,0) at pf_addr_setup+0x46 pfioctl(14900,cd504404,ffff800010fdf000,3,ffff800030be3230) at pfioctl+0xa054 VOP_IOCTL(fffffd807336b2b8,cd504404,ffff800010fdf000,3,fffffd80097fb3a8,ffff800030be3230) at VOP_IOCTL+0xac vn_ioctl(fffffd805fba1230,cd504404,ffff800010fdf000,ffff800030be3230) at vn_ioctl+0xf8 sys_ioctl(ffff800030be3230,ffff8000367efc60,ffff8000367efbb0) at sys_ioctl+0x5c3 syscall(ffff8000367efc60) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x1c72ae1bb50, count: -10 ddb{0}> show registers rdi 0xffff800030fe4000 rsi 0x106c __ALIGN_SIZE+0x6c rbp 0xffff8000367ef610 rbx 0xffffffff838cf038 pf_anchors rdx 0xffff800030fe4000 rcx 0x106b __ALIGN_SIZE+0x6b rax 0xffffffff8103518f pf_anchor_global_RB_REMOVE+0x2f r8 0x400 r9 0x8080808080808080 r10 0xe4037ff3a4aec82c r11 0x33b295f82b639d53 r12 0xad74a7d9868a29e6 r13 0xffffffff838cf040 pf_main_anchor r14 0xffff8000014dad48 r15 0xfe65a5947b5ebcef rip 0xffffffff810351e1 pf_anchor_global_RB_REMOVE+0x81 cs 0x8 rflags 0x10282 __ALIGN_SIZE+0xf282 rsp 0xffff8000367ef5c0 ss 0x10 pf_anchor_global_RB_REMOVE+0x81: movq 0(%r12),%r15 ddb{0}> show proc PROC (syz-executor) tid=409092 pid=38561 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800030be39e0,0xffff800030be3760 process=0xffff80003c488028 user=0xffff8000367ea000, vmspace=0xfffffd805e51ed50 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=0, intr=1 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 38561 155485 1608 0 2 0 syz-executor *38561 409092 1608 0 7 0x4000000 syz-executor 42350 134999 85023 0 2 0 syz-executor 42350 269687 85023 0 3 0x4000080 fsleep syz-executor 49430 199155 60068 0 2 0 syz-executor 23922 70316 33704 0 3 0x80 fsleep syz-executor 23922 158291 33704 0 3 0x4000080 netcon syz-executor 57468 258694 78074 0 3 0x80 fsleep syz-executor 57468 381557 78074 0 3 0x4000080 sbwait syz-executor 78074 459990 17453 0 2 0xc82 syz-executor 69406 501396 68018 0 3 0x80 fsleep syz-executor 69406 109681 68018 0 3 0x4000080 dtread syz-executor 1608 85832 17453 0 2 0xc82 syz-executor 68018 215668 17453 0 2 0xc82 syz-executor 33114 420652 0 0 3 0x14280 nfsidl nfsio 43108 428811 0 0 3 0x14280 nfsidl nfsio 92505 190213 0 0 3 0x14280 nfsidl nfsio 68427 204575 0 0 3 0x14280 nfsidl nfsio 2746 467519 0 0 3 0x14280 nfsidl nfsio 51786 286086 0 0 3 0x14280 nfsidl nfsio 79615 449022 0 0 3 0x14280 nfsidl nfsio 96118 399617 0 0 3 0x14280 nfsidl nfsio 51085 236751 0 0 3 0x14280 nfsidl nfsio 11291 292026 0 0 3 0x14280 nfsidl nfsio 13372 178623 0 0 3 0x14280 nfsidl nfsio 38247 7808 0 0 3 0x14280 nfsidl nfsio 4450 79150 0 0 3 0x14280 nfsidl nfsio 97664 255603 0 0 3 0x14280 nfsidl nfsio 79542 222778 0 0 3 0x14280 nfsidl nfsio 43048 29974 0 0 3 0x14280 nfsidl nfsio 58914 94102 0 0 3 0x14280 nfsidl nfsio 5002 318040 0 0 3 0x14280 nfsidl nfsio 57709 22504 0 0 3 0x14280 nfsidl nfsio 77238 401208 0 0 3 0x14280 nfsidl nfsio 78036 65845 0 0 3 0x14200 bored sosplice 64985 400803 1 0 3 0x100083 ttyin getty 85023 230749 17453 0 2 0xc82 syz-executor 60068 352235 17453 0 3 0x82 nanoslp syz-executor 62044 118640 17453 0 2 0x2 syz-executor 33704 292345 17453 0 2 0xc82 syz-executor 14887 442046 17453 0 3 0x82 nanoslp syz-executor 17453 301147 28989 0 3 0x82 kqread syz-executor 28989 36020 54208 0 3 0x10008a sigsusp ksh 54208 108331 25560 0 3 0x98 kqread sshd-session 25560 437783 39695 0 3 0x92 kqread sshd-session 39695 57142 1 0 3 0x88 kqread sshd 38734 423377 55061 74 3 0x1100092 bpf pflogd 55061 64322 1 0 3 0x80 sbwait pflogd 2100 427218 53468 73 3 0x1100090 kqread syslogd 53468 104599 1 0 3 0x100082 sbwait syslogd 40567 523823 1 0 3 0x100080 kqread resolvd 62466 206033 75127 77 3 0x100092 kqread dhcpleased 49504 425307 75127 77 3 0x100092 kqread dhcpleased 75127 424772 1 0 3 0x80 kqread dhcpleased 1960 60199 0 0 3 0x14200 bored smr 87417 204031 0 0 2 0x14200 zerothread 19029 140369 0 0 3 0x14200 aiodoned aiodoned 43336 366278 0 0 3 0x14200 syncer update 95735 104565 0 0 3 0x14200 cleaner cleaner 21782 264814 0 0 3 0x14200 reaper reaper 9432 230777 0 0 3 0x14200 pgdaemon pagedaemon 67910 28876 0 0 3 0x14200 bored viomb 37313 231003 0 0 3 0x40014200 acpi0 acpi0 42998 418179 0 0 3 0x40014200 idle1 99613 15430 0 0 3 0x14200 bored softnet3 81201 107085 0 0 3 0x14200 bored softnet2 1836 393827 0 0 3 0x14200 bored softnet1 35814 65300 0 0 3 0x14200 bored softnet0 95791 280132 0 0 3 0x14200 bored systqmp 60018 98310 0 0 3 0x14200 bored systq 44467 227830 0 0 3 0x14200 tmoslp softclockmp 51472 127739 0 0 2 0x40014200 softclock 14310 67066 0 0 3 0x40014200 idle0 1 256330 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 38561 (syz-executor) thread 0xffff800030be3230 (409092) exclusive rwlock pf_lock r = 0 (0xffffffff838042c8) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x377 #2 pfioctl+0x99e9 #3 VOP_IOCTL+0xac #4 vn_ioctl+0xf8 #5 sys_ioctl+0x5c3 #6 syscall+0xbc6 #7 Xsyscall+0x128 exclusive rwlock netlock r = 0 (0xffffffff83842ff0) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x377 #2 pfioctl+0x99d4 #3 VOP_IOCTL+0xac #4 vn_ioctl+0xf8 #5 sys_ioctl+0x5c3 #6 syscall+0xbc6 #7 Xsyscall+0x128 exclusive rwlock pfioctl_rw r = 0 (0xffffffff83804348) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x377 #2 pfioctl+0x1bb #3 VOP_IOCTL+0xac #4 vn_ioctl+0xf8 #5 sys_ioctl+0x5c3 #6 syscall+0xbc6 #7 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a0f860) #0 witness_lock+0x5bb #1 vn_ioctl+0x4d #2 sys_ioctl+0x5c3 #3 syscall+0xbc6 #4 Xsyscall+0x128 Process 62044 (syz-executor) thread 0xffff80002a2bb498 (118640) exclusive rrwlock inode r = 0 (0xfffffd806c3af0e0) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x377 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x283 #7 ufs_mkdir+0x113 #8 VOP_MKDIR+0x102 #9 domkdirat+0x179 #10 syscall+0xb08 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806c9eb1f8) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x377 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 domkdirat+0x8b #8 syscall+0xb08 #9 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10241 11311K 11475K 166960K 12031 0 pcb 17 14K 15K 166960K 121 0 rtable 235 8K 9K 166960K 497 0 pf 38 18K 21K 166960K 97 0 ifaddr 46 8K 8K 166960K 78 0 ifgroup 55 2K 2K 166960K 104 0 sysctl 4 1K 17K 166960K 12 0 counters 68 36K 37K 166960K 122 0 ioctlops 1 4K 4K 166960K 1548 0 iov 1 0K 12K 166960K 19 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1401 88K 88K 166960K 1959 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 10 0 VM map 2 1K 1K 166960K 2 0 sem 16 1K 1K 166960K 21 0 dirhash 12 2K 2K 166960K 21 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 57K 93K 166960K 630 0 sigio 0 0K 0K 166960K 13 0 proc 77 103K 128K 166960K 703 0 subproc 72 4K 4K 166960K 100 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 76 0 in_multi 102 7K 7K 166960K 155 0 ether_multi 1 0K 0K 166960K 1 0 mrt 1 0K 0K 166960K 5 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 175 784K 784K 166960K 175 0 exec 0 0K 1K 166960K 746 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 221 175K 189K 166960K 7108 0 UVM aobj 52 2K 4K 166960K 54 0 pinsyscall 41 82K 104K 166960K 1795 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 17 0 NDP 12 0K 1K 166960K 50 0 temp 51 8689K 8755K 166960K 36675 0 kqueue 16 24K 29K 166960K 108 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 56 0 53 1 0 1 1 0 8 0 rtentry 176 160 0 55 6 0 6 6 0 8 0 unpcb 144 397 0 378 6 5 1 6 0 8 0 syncache 336 4 0 4 2 2 0 1 0 8 0 tcpcb 736 113 0 107 1 0 1 1 0 8 0 arp 128 28 0 9 1 0 1 1 0 8 0 inpcb 328 795 0 786 18 14 4 13 0 8 2 nd6 144 34 0 9 1 0 1 1 0 8 0 pkpcb 40 6 0 6 3 2 1 1 0 8 1 kcovpl 48 11 0 3 1 0 1 1 0 8 0 mppekey 1024 3 0 3 1 1 0 1 0 8 0 ppxss 1192 20 0 20 2 1 1 1 0 8 1 pppxif 1504 2 0 2 1 0 1 1 0 8 1 pffrag 232 8 0 2 1 0 1 1 0 482 0 pffrnode 88 7 0 1 1 0 1 1 0 8 0 pffrent 40 12 0 5 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 2 1 1 1 0 1 1 0 8 0 pfanchor 1288 2 0 1 1 0 1 1 0 8 0 pftag 88 2 0 0 1 0 1 1 0 8 0 pfstitem 24 51 0 17 1 0 1 1 0 8 0 pfstkey 128 51 0 17 2 0 2 2 0 8 0 pfstate 384 49 0 17 4 0 4 4 0 8 0 pfrule 1344 25 0 17 2 1 1 2 0 8 0 rttmr 136 1 0 1 1 1 0 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 643 0 191 32 3 29 29 0 8 0 art_table 32 644 0 191 4 0 4 4 0 8 0 art_node 16 158 0 66 1 0 1 1 0 8 0 sysvmsgpl 40 5 0 2 1 0 1 1 0 8 0 semapl 112 16 0 2 1 0 1 1 0 8 0 shmpl 112 51 0 2 2 0 2 2 0 8 0 dirhash 1024 24 0 7 3 0 3 3 0 8 0 dino2pl 256 2482 0 969 95 0 95 95 0 8 0 ffsino 288 2482 0 969 109 0 109 109 0 8 0 nchpl 144 3378 0 1683 64 0 64 64 0 8 0 rtmask 32 3 0 3 2 1 1 1 0 8 1 uvmvnodes 80 2928 0 0 60 0 60 60 0 8 0 vnodes 216 2928 0 0 163 0 163 163 0 8 0 namei 1024 11797 0 11796 2 1 1 2 0 8 0 percpumem 16 76 0 27 1 0 1 1 0 8 0 pfiaddrpl 120 1 0 0 1 0 1 1 0 8 0 kstatmem 264 58 0 32 2 0 2 2 0 8 0 scsiplug 72 2 0 2 2 2 0 1 0 8 0 scxspl 216 14798 0 14798 14 11 3 8 1 8 3 plimitpl 152 145 0 128 1 0 1 1 0 8 0 sigapl 424 945 0 875 9 0 9 9 0 8 0 knotepl 120 566 0 0 17 0 17 17 0 8 0 kqueuepl 224 141 0 130 1 0 1 1 0 8 0 pipepl 336 149 0 122 3 0 3 3 0 8 0 fdescpl 520 906 0 876 3 0 3 3 0 8 0 filepl 160 5396 0 5182 21 10 11 16 0 8 0 lockfpl 104 404 0 402 3 1 2 2 0 8 1 lockfspl 48 166 0 164 1 0 1 1 0 8 0 sessionpl 144 27 0 18 1 0 1 1 0 8 0 pgrppl 48 48 0 31 1 0 1 1 0 8 0 ucredpl 104 910 0 896 1 0 1 1 0 8 0 zombiepl 144 876 0 875 2 1 1 1 0 8 0 processpl 1240 945 0 875 6 0 6 6 0 8 0 procpl 656 1660 0 1585 9 1 8 8 0 8 0 srpgc 96 6 0 6 3 3 0 1 0 8 0 sosppl 168 3 0 3 2 2 0 1 0 8 0 sockpl 728 1270 0 1239 27 21 6 16 0 8 2 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 122 0 0 16 0 16 16 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 25 0 0 4 0 4 4 0 8 0 mtagpl 96 10 0 0 1 0 1 1 0 8 0 mbufpl 256 1177 0 0 74 0 74 74 0 8 0 bufpl 280 5566 0 126 389 0 389 389 0 8 0 anonpl 32 8332 0 0 68 1 67 67 0 246 0 amapchunkpl 152 22367 0 21931 32 6 26 26 0 158 4 amappl16 200 3047 0 3016 29 14 15 15 0 8 8 amappl15 192 22 0 22 2 2 0 1 0 8 0 amappl14 184 126 0 114 1 0 1 1 0 8 0 amappl13 176 33 0 32 1 0 1 1 0 8 0 amappl12 168 1595 0 1565 3 1 2 2 0 8 0 amappl11 160 50 0 36 1 0 1 1 0 8 0 amappl10 152 8 0 8 1 1 0 1 0 8 0 amappl9 144 245 0 245 1 1 0 1 0 8 0 amappl8 136 21 0 18 1 0 1 1 0 8 0 amappl7 128 140 0 127 1 0 1 1 0 8 0 amappl6 120 210 0 207 1 0 1 1 0 8 0 amappl5 112 147 0 137 1 0 1 1 0 8 0 amappl4 104 334 0 313 1 0 1 1 0 8 0 amappl3 96 4352 0 4249 5 1 4 4 0 8 0 amappl2 88 701 0 637 2 0 2 2 0 8 0 amappl1 80 10635 0 10048 15 1 14 15 0 8 0 amappl 88 6301 0 6153 6 1 5 5 0 92 1 dma32768 32768 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 2 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 8 0 8 2 2 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 53 0 2 1 0 1 1 0 8 0 uaddrrnd 24 906 0 876 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 906 0 876 1 0 1 1 0 8 0 vmmpekpl 168 8532 0 8474 4 0 4 4 0 8 1 vmmpepl 168 63026 0 61130 111 12 99 99 0 357 7 vmsppl 480 905 0 875 7 2 5 5 0 8 0 rwobjpl 72 21741 0 17852 75 1 74 74 0 8 1 pdppl 4096 1820 0 1750 110 38 72 86 0 8 2 pvpl 32 16859 0 0 136 0 136 136 0 265 0 pmappl 256 905 0 875 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 462 0 48 12 0 12 12 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace pf_anchor_global_RB_REMOVE(ffffffff838cf038,ffff8000014dad48) at pf_anchor_global_RB_REMOVE+0x81 pf_remove_if_empty_ruleset(ffff8000014db1d8) at pf_remove_if_empty_ruleset+0x10e pfi_dynaddr_setup(ffff800010fdb4c0,0,1) at pfi_dynaddr_setup+0x673 pf_addr_setup(ffffffff838cf4d0,ffff800010fdb4c0,0) at pf_addr_setup+0x46 pfioctl(14900,cd504404,ffff800010fdf000,3,ffff800030be3230) at pfioctl+0xa054 VOP_IOCTL(fffffd807336b2b8,cd504404,ffff800010fdf000,3,fffffd80097fb3a8,ffff800030be3230) at VOP_IOCTL+0xac vn_ioctl(fffffd805fba1230,cd504404,ffff800010fdf000,ffff800030be3230) at vn_ioctl+0xf8 sys_ioctl(ffff800030be3230,ffff8000367efc60,ffff8000367efbb0) at sys_ioctl+0x5c3 syscall(ffff8000367efc60) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x1c72ae1bb50, count: -10 ddb{0}> machine ddbcpu 1