last executing test programs: 3.510887685s ago: executing program 6 (id=347): sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x2, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r0 = open(&(0x7f0000000300)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000040)=0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x8000000000000001}) 2.563918115s ago: executing program 6 (id=397): sysctl$net_inet_icmp(&(0x7f0000000040), 0x4, &(0x7f0000000100)="38b193c7702abc2336965a7952e316654dcc49feeb6f14ad3377df7fde8ed30448a5be16d6d7bfb25af2306a64692a76724ca18eaa672bdd38b3f076f6ae2aebef93711d8a32ae929681b22ccf70dcf8ed686fc651f69f0222658a01a8da6effd26cfb43fac473ad1dc8d4d7984fc7fe305399e9f5aecbd2f810ba1394ea7b1b925ff8c305de2803749cd7ff731ccdfe189d2faed04c7fa18f72e7cb0abea1278f02f09519c3d83b6e1a7ab90ccca0899a444af6f9f0845fdafefe3c", &(0x7f0000000080)=0xbc, &(0x7f00000001c0)="ac95fe66c0993b352c6cece41309683a46478fe19a", 0x15) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000}) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x1, 0x0) socket(0x1, 0x8002, 0x86) close(r1) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') r2 = socket(0x18, 0x2, 0x4) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r3 = socket(0x18, 0xc003, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) accept$inet(r2, &(0x7f0000000280), &(0x7f00000002c0)=0x10) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x18, 0x2, 0xa, "759f5a5ad65ada388e47a1e7a5446cfe", 0x1}, {0x1c, 0x18, 0x3, 0x4, "7e908ea871810362ffeeb2b2c94fa87b", 0x5}, 0x0, [0x3efa, 0x9f72, 0x1, 0x200, 0x8, 0x5, 0x800, 0x4]}, 0x5c) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x35}, 0x4, &(0x7f0000000100)="6212296d7c90d26a901bdcbdc3324bd27451d45bb60701afd80a0c85c46ff38a16b4a9324aba1f27ceafa17715252ee026f3d959688c8db385656d29c12a4d5aefda5162e90039d3d9ff82f838ad86ceef9d21eda44dcb1c96dc9a8e97a8a3f509cab29a66b5bf8212a07674034fe7e99cbd478e8130bf62", &(0x7f00000001c0)=0x78, 0x0, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) connect$unix(r2, &(0x7f0000000000)=@abs={0x5, 0x0, 0x0, 0x0}, 0x8) 2.537534534s ago: executing program 7 (id=401): sysctl$vfs_ffs(&(0x7f0000001600)={0xa, 0x3, 0x11}, 0x3, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000b40)="825a4f47c21e02d7eda0f5903abf65b18d7c51050006ccffb40500007e515b7178642408fafd5793776666d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x40d}, 0x40e) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504449, &(0x7f0000000740)={0x0, 0x4000, 0x2f00, 0xf, "3901224200", 0x2007, 0x10}) setuid(0xee01) r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x40, 0x884) mlock(&(0x7f00002fe000/0x3000)=nil, 0x3000) ioctl$DIOCCLRIFFLAG(0xffffffffffffffff, 0xc028445a, &(0x7f0000000240)={'./bus\x00', &(0x7f00000002c0)=""/130, 0x1, 0x4de, 0xc, 0xfffffbf2}) mlock(&(0x7f0000120000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0x7fff) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x30, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x8200, 0x0, 0xfffc, {[@window={0x3, 0x3, 0x7}, @generic={0x3, 0x2}]}}}}}}}) fchmod(r0, 0x20) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcb51f778c56d4bff13b9fd3192fb07000000", 0x14) sendto(r1, 0x0, 0x0, 0x2, &(0x7f0000002980)=@in6={0x1c, 0x18, 0x1, 0xffffffac, "df34152510dd115c7aaf8b19e04473c1", 0xe}, 0x1c) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffb0, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@info_request={0xf, 0x0, 0x0, 0x205c, 0x3}}}}}) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[]) socket(0x24, 0x8002, 0x3) sysctl$net_inet6_ip6(&(0x7f0000000180)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, &(0x7f0000000440), 0x0) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x25}, 0x4, &(0x7f0000000040)="6d3f246513ccff9da900183ad4412e77fa1799b599f0524d2797f6a53cb599ac30d18831faa35ebf2c8a8c845e303eee707ce3f759e1617d2ebfd8810e8860e7947c87dc5a035e6901672f3ca901abcb19a128f2599486f2efd3b2cf019a601a7ac47609dbf16fe205289eff828a0cac7ed41af53044b05130386ce6651ff9c9881388b168c007fe85a3e45fe63af4dcb744a327478f02049ab7e455ddf3d1168ea2b12715eff92496869b0f4a266d023ffe983c94958cb2037b1a9d9dc161a3528169f18b534965189c673b6cbd86cef3fffff78610cd9acc298947a7ee11652558668668c88c7ac46efb482c885cd03bbd7b751f3bac7018", &(0x7f0000000280)=0xf9, &(0x7f0000000140)="0acbf6c48dbdc8e030deb2cb5cc0cc83f9096d0ede77f50350622c1a0e6248221e178f6eab9c94f7bb142ae3e857cf7a2493ccd8df6ecb10524b11d246b9099ff479eb326db41c3a6c6899684a9ff2981f1566338009d939150dca6376561bf3a854ad9a58a0776a14508f316834a6a31e39c0422f66b77aaa3d9447642cc9f87db3274f9d5e8e57597fca8b5ab5e8af1feba247ff6fe47bd4837cc52b31eec83683b349a34bcfb39171c5507403e93c6b53465531820ec971fc206b001b0e5a7550708d321219978e22895ccda7644794483fcf0d79a099c1ef8c7a44def1928fcec03d2fe42e7a91966bdae6132fc4340cfe5f92c359573935335eec", 0xfd) 2.351853451s ago: executing program 6 (id=409): mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r0 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000180)=0x7) open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000100)) sysctl$net_inet_tcp(&(0x7f0000000140)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f0000000340), 0x0) 2.284141342s ago: executing program 6 (id=412): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000002c0)="3dacaf2007efe7f2aacb103ef5614b7ee991217204933059d9fcfbc5d67adfc708ba90e85c3252b8101709dc11c37cee01b0a4070000005e0984f204ef676d7a15176cbe2584124bbc6eaeffa4739da44ab12627c0b68f4f6b2a5fa778b0241132b072462a736f1b3a5227eb254db06f148a13f278b8f1efb35410a0a7febc5571457cab4d2763c894eb64c90f92efc71616839cd5b627c5e619747c135a97a2e37ccf6b1bc0dd5d56d3cecd8029ecfb924772ed6fe4798b990c82e93aab095f25642c116a27a7babca09430204e2ee06ac8cce7404e", 0xffffff33) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000340)={0x10, 0x0, [{&(0x7f00005c6000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f00000a7000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f000008e000/0x11000)=nil, &(0x7f0000090000/0x1000)=nil}, {&(0x7f00000a7000/0x1000)=nil, &(0x7f000009e000/0x1000)=nil}, {&(0x7f00000a3000/0x2000)=nil, &(0x7f000009e000/0x2000)=nil}, {&(0x7f0000297000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000000}, {&(0x7f00007df000/0x1000)=nil, &(0x7f00000a4000/0x3000)=nil}, {&(0x7f0000297000/0x7000)=nil, &(0x7f00000a6000/0x2000)=nil}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000094000/0x3000)=nil}, {&(0x7f000009e000/0x1000)=nil, &(0x7f000009d000/0x2000)=nil}, {&(0x7f00000a6000/0x3000)=nil, &(0x7f00000a8000/0x4000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00000a2000/0x2000)=nil}, {&(0x7f0000547000/0x4000)=nil, &(0x7f00000a4000/0x2000)=nil, 0x1000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000099000/0x1000)=nil}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000097000/0x1000)=nil, &(0x7f000009a000/0x2000)=nil}], './file0\x00', 0xffffffff, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2006, 0x4f4b) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000000)=0x5, 0x4) r2 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r2, 0xc2c04200, &(0x7f00000001c0)) read(r1, 0x0, 0x80000) 2.279248087s ago: executing program 5 (id=414): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000380)={0x3f6, 0x4b, 0xd, 0xa, "03ec0009007f8800", 0x1108a, 0x6}) setuid(0xee01) sync() r0 = shmget$private(0x0, 0x4000, 0x66, &(0x7f0000ff9000/0x4000)=nil) r1 = getuid() setreuid(0xee00, r1) lstat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r4, 0x8028698c, &(0x7f0000000100)) syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@broadcast, @random="d09b049f6b63", [], {@ipv6={0x86dd, {0x0, 0x6, "36dab7", 0x38, 0x3a, 0xb9, @rand_addr="a55702eadfc9c553517dd04fcce15c79", @rand_addr="2180cfd7fc86ec6b26c99d6f1dda6750", {[], @icmpv6=@dest_unreach={0x1, 0x2, 0x0, 0xfc, '\x00', {0x0, 0x6, "5f7f00", 0x0, 0x2c, 0x0, @loopback, @remote={0xfe, 0x80, '\x00', 0x0}, [@fragment={0x2b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x67}]}}}}}}}) r5 = getpgid(0x0) r6 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{r1, r2, r3, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0, 0x9}, 0x1a, r5, r6, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x880, 0x4}) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) r7 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) writev(r7, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) 2.071406026s ago: executing program 5 (id=423): syz_emit_ethernet(0xcf, &(0x7f0000000380)={@broadcast, @local, [], {@ipv6={0x86dd, {0x9, 0x6, "5a15cf", 0x99, 0x3, 0x7, @loopback, @loopback, {[], @udp={{0x1, 0x1, 0x8}, {"8a8b973cf4e82ac90ae7824808c3e39d41e715f60ff16e04177f8679d3e06bf30762d25de44ca7d504c1b63bdc236a85edd3e0cdd1b5d9aa26bb308155d90aaa39db46edfe8fe381e2f318c4ff4924645fd56ff0b54846d40f00000000000000673bd0d91143f05a96d4d4362140000000d7b89d64fa7e50f6717a7d45d35756eefb4481622e0a70c592446f106100c9b0"}}}}}}}) r0 = syz_open_pts() r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0x80206916, &(0x7f00000001c0)) getpeername$inet6(r1, &(0x7f0000000000), &(0x7f0000000140)=0x1c) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000040)=0x8a) writev(r0, &(0x7f0000000700), 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x4b}, 0x2, &(0x7f00000011c0)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) write(r0, &(0x7f0000000100)="58ba189eea91", 0x6) pwrite(0xffffffffffffffff, &(0x7f0000000ac0)="518d801900c2832711c6f56c0e593f93cfdafd115f9efccf3938ae92688bf7f21bf1c9154d9637fcf12c1fb5650bc7cfc50cf6bc47b8f11b5313c3a156a44b27d01daa2be86a51a54347d3f1d585367af25be7687cd15021893e671b0b951ba92cd6d05465d1ee3f835595a8aec7bdbcce81ccb9db585df84614e7310724b10b", 0x80, 0x69e) r2 = semget$private(0x0, 0x3, 0x80) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x3, 0x3) connect$unix(r3, &(0x7f0000000000), 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x2, 0x3, 0x3) connect$unix(r4, &(0x7f0000000000), 0x10) sendto$inet(r4, 0x0, 0x0, 0x2, 0x0, 0x0) semctl$SETALL(r2, 0x0, 0x9, &(0x7f0000000340)=[0x3]) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f57c3abf65b18d7c51f78b06ccffb40500000000000000000040fafd3493776665d4cd12c63d34", 0x31}, {&(0x7f0000000240)="45b188fe661a1375cba92dc27b8a355b9b405c31ceb171ccfb2e1de8d65f771b", 0x20}, {&(0x7f0000000280)="864b558967a853ce4258227613157f174a399667d69f2b037acf", 0x1a}], 0x3, 0x0, 0x0, 0x6}, 0x2) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x8, 0x0) r6 = syz_open_pts() ioctl$TIOCSETAW(r6, 0x802c7415, &(0x7f0000000300)={0x1, 0x0, 0x7, 0x5, "3c97d3ef91ac57c2c9823724680263537e169904", 0x1, 0x5}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETA(r5, 0xc4504446, &(0x7f0000000740)={0x2f, 0x3, 0x2, 0x5, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x8000, 0x1000}) r7 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread(r7, &(0x7f0000000180)="830000c66a", 0x5, 0xffffffff) 1.912070121s ago: executing program 5 (id=431): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write(r0, &(0x7f00000002c0)="3dacaf2007efe7f2aacb103ef5614b7ee991217204933059d9fcfbc5d67adfc708ba90e85c3252b8101709dc11c37cee01b0a4070000005e0984f204ef676d7a15176cbe2584124bbc6eaeffa4739da44ab12627c0b68f4f6b2a5fa778b0241132b072462a736f1b3a5227eb254db06f148a13f278b8f1efb35410a0a7febc5571457cab4d2763c894eb64c90f92efc71616839cd5b627c5e619747c135a97a2e37ccf6b1bc0dd5d56d3cecd8029ecfb924772ed6fe4798b990c82e93aab095f25642c116a27a7babca09430204e2ee06ac8cce7404e", 0xffffff33) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r1 = syz_open_pts() ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000740)={0x804, 0xfff, {[0x9, 0x1, 0x5, 0x7, 0x1, 0x6, 0x9d1, 0x1, 0x9fffffffffffffff, 0x2, 0x2, 0x3, 0x5, 0x1, 0xdf, 0x2, 0x5, 0x280000001], [0x80000001, 0xfffffffffffffffc, 0xe, 0xd83, 0x1, 0xc, 0x30ac00000, 0x2fc6476f], [0xffffffffffffff01, 0x5, 0xc, 0xa, 0xfffffffffffffff7, 0x6e, 0x6], [0xfffffffffffffff8, 0x6, 0x8c, 0x5, 0x400, 0x6], [{0x4, 0x1, 0xfffffff8, 0x800}, {0xc1c8, 0x3, 0x8, 0xdff}, {0x1000, 0x8cd4e02, 0x2b2, 0x8}, {0x0, 0x5, 0x10000, 0xdd}, {0x1, 0x8, 0x3, 0x4}, {0x200, 0x4, 0x9, 0x2}, {0x1, 0xe40b, 0x6, 0x5}, {0x9, 0x401, 0xb, 0x2}], {0x0, 0x8, 0xf7, 0x7}, {0xc1, 0x116dc000, 0x6, 0xfff}}}) close(r1) syz_open_pts() ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000180)={0x1040978c, 0x1, 0xf7fffbfc, 0x80a19f, "bb08000100f167d910508b000000000000000080", 0x100, 0x4000001}) sysctl$hw(&(0x7f0000000080)={0x6, 0xc}, 0x2, &(0x7f0000000000)="00ecc9dd", &(0x7f0000000240)=0x4, 0x0, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) sendmmsg(r0, &(0x7f0000001dc0)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x10}}, 0x38, 0x10) listen(r0, 0x8) close(r0) select(0x40, &(0x7f0000000280)={0x8000, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x3, 0x1, 0x40005, 0x0, 0x5, 0xd87, 0x40, 0x1, 0x2, 0x100000000642, 0x4b}) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r3 = kqueue() r4 = syz_open_pts() fstat(r4, &(0x7f00000000c0)) kevent(r3, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffb4961, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x80, 0x0) r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$TIOCSETA(r5, 0xcd60441a, &(0x7f0000000040)={0x1, 0x2, 0xe9, 0x10000, "5e0800008a00000f000000b0f0338a6b4fc6d780", 0x8, 0x9}) r6 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0xd4, 0xa, 0xffffffff, 0x0, 0x10, [{0x2, 0x7, 0x0, 0x71000}, {0x7, 0x4, 0x6, 0x4}, {0x10000006, 0xffffffff, 0x0, 0x40004}, {0x5, 0x800, 0x7, 0xffffff}, {0x7, 0x7, 0x9, 0x10004}, {0x6, 0x1, 0x0, 0x800009c}, {0x8, 0xffffffff, 0x1003, 0x71}, {0x1f, 0x10000803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0x1, 0x800000b}, {0x4, 0xfffb, 0x3}, {0x0, 0x5, 0x8, 0x4}, {0xe0, 0x4, 0x5, 0x3}, {0xffff0354, 0xfffffffa, 0x4, 0x100006}, {0x0, 0x6, 0x7, 0x1ffffffd}, {0x0, 0x1, 0x4, 0xc3}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x7, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x1) 1.743275399s ago: executing program 1 (id=446): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x2, 0xff, 0x7, 0x6}, {0x2c, 0x7, 0x22, 0x1}, {0x9b1e, 0x3, 0xa, 0xf908}]}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) 1.743038652s ago: executing program 4 (id=447): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TIOCSETA(r0, 0xc1584460, &(0x7f0000000740)={0x20008, 0xffffffff, 0x2, 0x7, "04650000000100", 0x5, 0x4}) 1.708624279s ago: executing program 3 (id=448): select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xfffffffffffffffb, 0xfffffffeffffffff, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800455c005c006600000001907811000001e00000010c019078000c0000406cfffc00000000080100f0e0000001e0000001000767e7907b2e830b04ac1400aa7f000001070f07000000000000000000000002830b10ffffffffe0000002"]) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9e) open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) (async) r0 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x5, 0x80000001, 0xb, 0x0, "0000000000000000000090896f7f00", 0x1}) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x5, 0x80000001, 0xb, 0x0, "0000000000000000000090896f7f00", 0x1}) sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, 0x0, 0x0) (async) sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, 0x0, 0x0) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x0) syz_extract_tcp_res(&(0x7f00000000c0), 0x9, 0x5) ioctl$VNDIOCSET(0xffffffffffffffff, 0x84946466, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x1, 0x0) (async) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebf6cbdf13b9fd812eaa4e712e54e69931929648", 0x14) ioctl$DIOCCHANGERULE(r0, 0xcd60441a, &(0x7f00000002c0)={0xe9dd, 0x3, 0x0, './file1\x00', './file1\x00', 0x0, "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"}) 1.707964538s ago: executing program 4 (id=449): mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) ioctl$VNDIOCSET(r0, 0xc0284408, &(0x7f0000000240)={0x0, 0x8000000000004, 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000400)={0x3, &(0x7f0000000000)=[{0xc, 0x11, 0x3, 0xfffffff5}, {0x48, 0x5, 0x9}, {0x6, 0x80, 0x12}]}) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[]) 1.707726362s ago: executing program 3 (id=450): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f00004d8000/0x1000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil}, {&(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000668000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000696000/0x2000)=nil, 0x3}, {&(0x7f000013f000/0x2000)=nil, &(0x7f000064d000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000069b000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xffffffff}, {&(0x7f00005fc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x80000}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x7}, {&(0x7f00005fd000/0x2000)=nil, &(0x7f000069e000/0x2000)=nil}, {&(0x7f00005fa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1}], './file2\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x9, 0x400000000000181c, 0x2, 0x6}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105727, &(0x7f0000000300)={&(0x7f0000000000)=[{0x6, 0xb113}], 0x1}) r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) 1.707388315s ago: executing program 2 (id=451): r0 = syz_open_pts() syz_open_pts() (async, rerun: 64) unveil(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='x\x00') (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='c\x00') r1 = syz_open_pts() (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) bind$unix(r3, &(0x7f0000000080)=@file={0x4, 0x1, './file0\x00'}, 0xa) (async, rerun: 32) getpeername$unix(r2, 0x0, &(0x7f0000000140)) (async, rerun: 32) poll(&(0x7f00000007c0)=[{r0, 0x80}, {r0, 0x10}, {r0, 0x40}, {r1, 0x2}, {r0, 0x22}, {r0, 0x40}, {r0, 0x7}], 0x7, 0x40000c) 1.70725873s ago: executing program 1 (id=452): r0 = msgget$private(0x0, 0x44) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1d9, 0xc, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x2, 0x6, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x2}) setrlimit(0x8, &(0x7f0000000140)={0xa, 0x5a}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000100)={0x920e, 0x8, 0xffffdf82, 0xffffffd0, "08955c1cfac164e20a070e00000009ffe6000800", 0x8, 0x5}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 1.498841527s ago: executing program 7 (id=453): r0 = socket(0x18, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x1, 0xffffffff, '\x00', 0x3}, 0x1c) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() setsockopt(0xffffffffffffffff, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) (async) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000140)={0x5, 0x5, 0x7fffffff, 0xffffff86, "ffa0a8000063267be8793b8539d9ae9100", 0x8, 0x834f}) (async, rerun: 64) r3 = dup2(r2, r1) (rerun: 64) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xd94, 0xc, 0x6, 0x6}]}) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$VNDIOCSET(r5, 0x40386301, &(0x7f0000000100)={0x0, 0x0, 0x0}) (async, rerun: 64) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (rerun: 64) sysctl$hw(&(0x7f00000000c0)={0x6, 0xf}, 0x2, &(0x7f0000000480)="d1d6e79bf854ed26bb6ad04685432a85ae411d28778a64ccca21fc66644fc99d6a08abe10f9d84df7acd96e6c28aed797c6790a1850895af38b9c7ffa81f7e4f3e12825650ab959bd4d5017d44fe4805205027d98c5d23955c980322f6bcf56d36a7b10675a59bbea7e83283f12d43411bda42b0f03227f906f60e4de35a9cbcd90bcd512d045acf45ce1044e76740ad4f0f552b8764d2c0fb7cb5cace9598e1401ef9e562baff9d698d6c", &(0x7f0000000340)=0xab, &(0x7f0000000540)="70a2ae63bcb9834238316429ab88569e52d774cf174938ed4a5f6a2c7de6815d48c2186bc297b1bc633948fff0833c1b8b93c33098c75dccc8a319917a4d437927a1a9ddae6c5e3348ec59278c15b66d3fd78977433625fdf8e8eddbed5aa8fd37507fdbab0b97443ad92f3c4b21df19929bec1a02b5c8f49e316aeb8d611fcca605c02f9c219776a40b24a653d1629c0bb00bc99fb88cdffa282c5384aa76c3b65b9023", 0xa4) (async) r6 = socket(0x2, 0x2, 0x0) r7 = kqueue() (async, rerun: 64) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbeffffffffb, 0x0, 0x2, 0x2, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa5, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffff9, 0x2, 0x0, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xfffffffffffffffb, 0x11003, 0x4], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffa, 0x4], [{0xdb6e, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x6}, {0x6b7}, {0x0, 0x965, 0xfffffffc, 0x9}], {0x2000, 0x7, 0x5}, {0x29, 0x6, 0xb0, 0x2}}}) (rerun: 64) kevent(r7, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) connect$inet(r6, &(0x7f0000000380)={0x10, 0x2, 0x0, 0x9}, 0x10) read(r2, &(0x7f0000000180)=""/192, 0xc0) 1.496852413s ago: executing program 2 (id=454): syz_emit_ethernet(0xc3, &(0x7f0000000240)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0xb5, 0x67, 0x5, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @generic="8fa2f908cf6ff659390be3948ac52fc55da713ba87bd3e273508ac8b554249d400eb0418327d2e8fd763f5276d6daffefacc768a268b2f68eff240ea971e43ce685e29aff362d4f291061891b5208327ce6c16c005bbee34960cb6b492909ec1e329384b56ff13d46252a239b38d8df70f529c4caadc9fb142ffda4f25d42a6cfdf6a16551d1daf2723724b27d91126980ed5d2f4079a2fa2fc8c60b43735cfe65"}}}}) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) sysctl$hw(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000400)="84108e5857cc3ff25b7f5a0c0e", 0xd) (async) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$WSDISPLAYIO_GINFO(r0, 0x40185741, &(0x7f0000000180)) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000100)={0x6, 0x1, {0xf99, 0x6}}) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$TIOCSETA(r1, 0xcd60441a, &(0x7f0000000040)={0x4, 0x2, 0x0, 0x8010000, "5e0800008a00000f000000b0f0338a6b4fc6d780", 0x6, 0x9}) select(0x40, &(0x7f0000000040)={0xfffffffffffffff9, 0x400044809e9d, 0xffffffffffffffff, 0xfffffffffffffff9, 0x2800000000000000, 0x81, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x100) (async) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) 1.496557458s ago: executing program 1 (id=455): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0x802069b5, &(0x7f00000001c0)) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) fstat(r1, &(0x7f0000000280)) setreuid(r3, r3) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r2, 0x800c5709, &(0x7f0000000080)={0x4fa, 0x1, 0x6}) sysctl$hw(&(0x7f0000000080)={0x6, 0x11}, 0x2, 0x0, 0x0, &(0x7f0000000340), 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) shmget(0x0, 0x3000, 0x54, &(0x7f0000c58000/0x3000)=nil) r4 = socket$inet(0x2, 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) open(&(0x7f0000000080)='./file0\x00', 0x20, 0x20) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x16, 0x1, 0xfd3, 0xffffffff, 0x80000001, 0x17ffe, 0x10, [{0x0, 0x4, 0x3}, {0xc5c, 0xc, 0x5, 0x1fb}, {0x800008, 0x9, 0x1fa, 0x7d2}, {0x7ffffffe, 0x3, 0x2, 0x784c}, {0x3fd, 0xc, 0x1002802, 0x6}, {0x7, 0xff, 0x3, 0xb}, {0x800000a, 0x0, 0x40, 0x2f}, {0x2, 0x836, 0x8000016, 0x7f}, {0x9, 0xf71, 0x24797519, 0x7}, {0x0, 0xa74d925a, 0x1, 0x40000088}, {0x1, 0x5, 0x4, 0x412c8391}, {0x3, 0x9, 0x20008, 0x40000010}, {0x2, 0x7, 0x8, 0x3}, {0x29a71720, 0x81, 0x7, 0x5}, {0x400002, 0x7, 0xfffffffd, 0x100}, {0x200, 0x8, 0xf5, 0xc}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r5 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x2a) ioctl$VNDIOCSET(r5, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r5, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffff7fd, 0x0}) getsockopt(r4, 0x1, 0x12, &(0x7f0000000000)=""/240, 0xfffffffffffffffe) closefrom(r0) 1.492389651s ago: executing program 7 (id=456): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000}) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) sysctl$kern(&(0x7f00000000c0)={0x1, 0x47}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x5, 0xce, 0x6, 0x1, 0x80, 0x2, 0x1, 0x2, 0x2, 0x2, 0xffffffffffff0001}) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) msync(&(0x7f00003ed000/0x3000)=nil, 0x3000, 0x4) 1.491249235s ago: executing program 4 (id=457): ppoll(&(0x7f0000001940)=[{0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x8}], 0x2, 0x0, 0x0) execve(0x0, 0x0, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ioctl$DIOCADDRULE(r0, 0xcd604404, &(0x7f0000000980)={0xfe, 0x10400, 0xa, './file0\x00', './file0/file0\x00', 0x0, "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"}) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="8f6f77ede655aaaaaaaaaabb86dd605f6ad900183a01fec000000000000000000000000000bbfe8000000000000000000000000000aa82"]) accept$unix(0xffffffffffffffff, &(0x7f00000005c0), 0xffffffffffffffff) sysctl$net_inet6_ip6(&(0x7f0000000040), 0x4, 0x0, 0x0, 0x0, 0x0) 1.356479152s ago: executing program 1 (id=458): syz_emit_ethernet(0x74, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "6a9900", 0x3e, 0x3a, 0x29, @rand_addr="000000000000000000020000008000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x1, 0x2, 0x8}, {"321d8a482b626e21edb68bc60d73263b1f807aee713c7af6207f5c28f021be482b5c623af325cb81e19b2fc1ea346e915b40c79e6f00"}}}}}}}) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffff86dd606a990000183a09000000000000007a1a00000000000000fe8000000000000000000000000000aa8301000000000000008000000000000000000000000000bb3d4769af72fbacf140c019cd1b590d84670b1f2f45bf34b3762aeb42d6cb2d1f7d73056376de"]) 1.356074786s ago: executing program 3 (id=459): syz_emit_ethernet(0x50, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffa5ffffff000000000800080022000000e0010002"]) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$DIOCNATLOOK(r0, 0xc0504417, &(0x7f0000000080)={@v6=@loopback, @v4, @v6=@rand_addr="fc26eb99f2a369d52bcaed0806a38125", @v4=@remote={0xac, 0x14, 0x0}, 0x1a04, 0x8, 0x9, 0x3, 0x0, 0x0, 0x18, 0x5, 0x3}) (async) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x0, 0x6, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x8000, 0x0, 0xfffc, {[@window={0x3, 0x3}]}}}}}}}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000380)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffc, 0x0, 0x0, 0x84, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}}}}}) sysctl$vfs_nfs(&(0x7f00000002c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000300)="cce47d35", &(0x7f0000000380)=0x4, &(0x7f00000003c0), 0x0) 1.354957376s ago: executing program 3 (id=460): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$hw(&(0x7f00000000c0)={0x6, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x12, 0x6, 0x9}, 0x4, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1, 0x102) open(&(0x7f0000000340)='./file0\x00', 0x10, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x3, 0x8, 0x88000001, 0xa1b0, 0x10001, 0x10, [{0xfffffffc, 0x2890, 0x4, 0x5}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x1, 0x5c24, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x4, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0x210000}, {0x4, 0x803, 0x3, 0x7}, {0xd0f5, 0x82, 0x5, 0x9}, {0x6a75, 0x8009, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x7, 0xa, 0x8, 0x3}, {0x3, 0x7, 0x6, 0x1}, {0x6, 0xfffffffa, 0x60, 0x6}, {0x10008, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30004}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r0 = socket(0x2, 0x400000000002, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000240)=[{&(0x7f0000000140)=""/218}, {&(0x7f00000002c0)=""/70}, {&(0x7f0000000340)=""/106}], 0x100000000000039d, 0x0}, 0x0) setsockopt(r0, 0x0, 0x21, &(0x7f0000000080)="c5f5d915", 0x4) sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0xa09deb2bf8cbb72b}, 0x4, &(0x7f00000000c0)="c0da253e43fad473cda6986e167c72f899d9c335212eb1acb2b882e313f19d3ebcc46b4d1f4c8f17f0289db4b4a9fc43f71f33fd2cafe6eccfba484fc3957a03668c7865a57fb57f607567ab73abeaeee67133db3d5e5e22d18d7757759fd4797b0a76891537d66b289c168f9692973431d97e3161d731f265c4823aa3d259b8358c4e7fcbb774", &(0x7f0000000040)=0x87, &(0x7f0000000180)="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", 0xfb) 1.354484154s ago: executing program 6 (id=461): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x6, &(0x7f0000000080)=[{0x8, 0x5, 0x6, 0xfffffff4}, {0x9, 0xa, 0xa1, 0x4}, {0xf, 0xe3, 0x81, 0x34f}, {0x7ff, 0x5, 0xbc, 0xfffffff8}, {0x2, 0x6, 0xa, 0x3ef2}, {0x7ff, 0x9, 0xf, 0x4195bc39}]}) r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000180)={0xfffffffe, 0x200, 0x8, 0xfffffffc, "655b26833adb80b1d953da76195e6a0ac331e6ef", 0x3, 0x80}) (async) ioctl$TIOCGETA(r0, 0x402c7413, &(0x7f0000000140)) (async) ioctl$TIOCSTAT(r0, 0x20007465) r1 = socket(0x18, 0x3, 0x0) r2 = syz_open_pts() setrlimit(0x8, &(0x7f0000000980)={0x42, 0x9}) (async) r3 = syz_open_pts() close(r3) (async) r4 = syz_open_pts() r5 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000080)="7f73cf79000000001f93ecd8264f6ec670612e2e", 0x37}], 0x1) (async) execve(0x0, 0x0, 0x0) (async) ioctl$FIOASYNC(r3, 0x80047470, &(0x7f0000000000)=0x2) ioctl$FIOASYNC(r4, 0x80047460, &(0x7f00000000c0)=0x4) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000001200)=""/1, 0x1}], 0x1) (async) r6 = setsid() (async) ioctl$TIOCSCTTY(r2, 0x20007461) (async) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) r7 = socket(0x1, 0x1, 0x0) ioctl$FIONREAD(r7, 0x8020690c, &(0x7f0000000100)) (async) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000240)) r8 = syz_open_pts() close(r8) (async) ioctl$TIOCSETD(r8, 0x8004741b, &(0x7f0000000000)=0x8) (async) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000080)="cff5c05664da486cda974a82388ef359025250129bdb3b8c172b8359eb32d4103cbb3b553a30352e3b0b2e4247b103", 0x2f}], 0x1) (async) fcntl$setown(r8, 0x6, r6) 1.354350586s ago: executing program 7 (id=462): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() writev(r1, &(0x7f0000000000), 0x0) 1.354093083s ago: executing program 0 (id=463): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x7, 0x46, 0x2, 0x2}, {0x4, 0x48, 0x3, 0x2}, {0x400, 0xa, 0x0, 0xfff}, {0xfff6, 0x5, 0xff, 0x7fffffff}, {0xfffe, 0x4, 0x8, 0x7}, {0x2, 0x5, 0x0, 0x9}, {0x1000, 0x7, 0x10, 0x9cb6}]}) syz_emit_ethernet(0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="023808a9f57a00000000000081e0827cd189e0d6c138"]) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x40, 0x100, {[0xfffffbfffffffffb, 0xf, 0x2, 0x0, 0x6, 0x0, 0x400, 0x2, 0xfffffffffffffffd, 0x2f01, 0xfffffffffffffffe, 0xa, 0xfffffffffffffffb, 0x0, 0x0, 0x4, 0x2, 0x100], [0x5307, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5a, 0x7b98, 0x1fe, 0xffffffffffffffff, 0x7, 0x9467], [0x2, 0x2, 0x40000000, 0x1, 0xb, 0x5738000000000, 0xffffffff00000000], [0x100, 0x0, 0x7ffffffffffffffe, 0x100000000], [{0x0, 0x4, 0x1, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x5, 0x6, 0xe5}, {0x0, 0x2, 0xb, 0xfffffffffffffffb}, {0x0, 0x28291c58, 0x9, 0x2000000000000004}, {0x0, 0x5}, {0xfffc, 0x100, 0x8, 0x8}], {0x4, 0x5, 0x800}, {0xfffe, 0x80000000, 0x6d5, 0x9}}}) r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffb4961, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xfffffffd, 0x0, 0x1, 0x0, "0100012d29fb000700000000098002005e00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4) sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001080), 0x4) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x842, 0x0, 0x5031c6238b102740) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x0) r2 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000080)={0x1, 0xffffffff, 0x2, 0x6, "0100012d29fb000700000a00ab0000005e00"}) readv(r2, &(0x7f00000016c0)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x28, &(0x7f0000000000)=[{0x9, 0xc, 0x41, 0x5e98}, {0x3, 0x3c, 0x3, 0x9}, {0x8000, 0x8, 0x27, 0xffffffff}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) 1.353820522s ago: executing program 1 (id=464): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x82c0, 0x0) ioctl$DIOCXBEGIN(r0, 0xc0104451, &(0x7f0000000480)={0x1, 0x55e, &(0x7f0000000040)=[{0x1, './file0\x00', 0x5}]}) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) ioctl$DIOCRGETTABLES(r0, 0xc450443f, &(0x7f0000000980)={{'\x00', './file0\x00', 0x10, 0x6}, &(0x7f0000000540)=[{'./file0\x00', './file1\x00', 0x10, 0x6}], 0x4, 0x1, 0x7fff, 0x81, 0xf98d531, 0x2, 0x64, 0x2}) r2 = socket(0x20, 0x8000, 0x37) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000e00), 0x4) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r3, 0x800c5709, 0x0) r4 = accept(r2, &(0x7f0000000e80)=@un=@file={0x0, 0x0, ""/4087}, &(0x7f0000001e80)=0xff9) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000001f00)={&(0x7f0000001ec0)=[0x3], 0x1, 0x4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x40046402, &(0x7f0000001f40)) sendmsg$unix(r1, &(0x7f0000002340)={&(0x7f0000001f80)=@file={0xe, 0x0, './file1\x00'}, 0xa, &(0x7f0000002300)=[{&(0x7f0000001fc0)="0c78d8b341d23c10a9e9e5d6d5101d9475a4aa17663866cce2374811a47b6a7478ca204da283aec51ad260dbd5c112b44ca22bea21363064d65933fc0e6634973cffa5740975b710faf3b9c68796ddfaa359f342e2a0489c854dd9764e41ce90b3d6d4b331caee039f26f0cbdd2109ec6294d82c16daf918d310541d28914cafa6d0a4ae941e03cd21", 0x89}, {&(0x7f0000002080)="264faa7b237024aaba7bf6b3dd2fbfcc0ca7cd37151ee08e02e16b22d90c4a5c86d9e2a273056b6dd5c14059c3e9eddfa15e02633b0f056be6378e96b384d7c739fe846b4b6620f5cd718de2dbf08810d0b0df65766221c777417b88df84007bb2772982bf08c58107df3a2e1df5fe3a9e3ebc839cc861d1d7fc816bb9a21d9ba4474c3ad69a994c60e8f00d9c68393e9112dccf204688b94a7e59774fb84590254582fe9ebcc4f1fb291f3dacf159f58d4cd4e13ab4ed189e1e23a8be", 0xbd}, {&(0x7f0000002140)="38168f2cb35da573330ecc966cd97b68b7e0fcaecc88ea82ab5f6be49c86f6c11e323c7d89e161339f4f4d143a1d1b9780f248e99346aa0a569a8346962b1b193b43b1a6546994cbc29660d11ac628e35a846aa27e6a13132fae3f74a9e0c30a9784b6226f64a30dd82df4c98c90e9b0a2f3c5a16cb38226e0e7216c3198981a6d9a345e5fad8980c4705f30d2d92596830528526791885dbc0141db91123a91577a53a7ad25c6e0b04c1fa75d960ad5572860455249ca676e797d73b30e63f1a2a3f1208cb97835ee98b214b51a174eb3b4f494a1d6d5b89c57fd738788c3cbbdd3d3", 0xe3}, {&(0x7f0000002240)="9ec788ed2baa03c8bb2533a562bf3883b59048bf6b6da03495af1215e1a98eec37dc19e8b92fa5e409cbe4a3a09ca58c10e7466f1e767f52af5079d474725276a051bb112b4d1ce5979b3c88a7b448a92f04b64d1568e69af8f15992a6948cbe31cc4086fe5aa0c9272a806fdbeda5fade9d417aa65bc5d48db079387f0efc72acf5b4774ac5c28256114c66156af9", 0x8f}], 0x4, 0x0, 0x0, 0x5}, 0x6) sysctl$net_inet6_ip6(&(0x7f0000002380)={0x4, 0x18, 0x29, 0x9}, 0x4, &(0x7f00000023c0)="c73d8073a7964ce62d814cc28c3c43d9b2b41e0b50de463825b169c68db4c8c21c6ff9b3a8f291ae3acad34bbeb69f28afd2405ca0ed054fa5072c2f92255f6c7c2f66988ce1514d371f40fbc2cba3292939d8630f99947b9c39491b1d56150803760b2f03436d9d5d2722c8fd05bd7082ed89639f6f34edce997e71efbe0fd99b5472d2c37fae1331dd77363ed971cf367dbbdfb990416256a495b9db2fea", &(0x7f0000002480)=0x9f, &(0x7f00000024c0)="066176bde1bf8645710d9b2a2dd58ac1594090853d2e73e04979d7cfeb642fbdfc26ad60410f9c8f4a4b6e11ac0d101334403c449076e64b96e6f55755205be74bb944744488e39e4b5b77b72425db6bb10b14dcb91a95736ee04f36328421961f989ef1045d609f44c3cf1fb5ff9958479b8bf1d150d000b6d5a0", 0x7b) ioctl$BIOCSRTIMEOUT(0xffffffffffffff9c, 0x8010426d, &(0x7f0000002540)={0x7fff, 0x2}) sysctl$net_inet6_ip6(&(0x7f0000002580)={0x4, 0x18, 0x29, 0x7}, 0x4, &(0x7f00000025c0)="87cde496874a1b03d9f4bb5ba0840466dab912e9cfccad0240be226456758a87d1831f87a56b04caeb9ea1f10ecf44e66fe1fe076127", &(0x7f0000002600)=0x36, &(0x7f0000002640)="d89b95fda37a6b92647437edf5a197c79012d7dfef2538ea25ada78cb0098cea12336207c57f4d0cf675c8cda90444a2844e14360ea02457a2", 0x39) ioctl$WSKBDIO_GETDEFAULTBELL(r3, 0x40105706, &(0x7f0000002680)) getsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f00000026c0), &(0x7f0000002700)=0x8) ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, &(0x7f0000002740)={0x15}) ioctl$DIOCRCLRASTATS(r0, 0xc4504448, &(0x7f0000002880)={{'./file1\x00', './file1\x00', 0x1, 0x6}, &(0x7f0000002780)=[{@local={0xac, 0x14, 0x0}, '\x00', './file1/file0\x00', 0x7, 0x4, 0x2, 0xf, 0x6, 0x1, 0x2b}, {@broadcast, '\x00', './file1\x00', 0x39, 0x2, 0x6, 0xff, 0x6, 0x6, 0x7f}, {@empty, '\x00', './file1\x00', 0x6, 0x1, 0x1a, 0x9a, 0x1, 0x7f, 0x6}, {@broadcast, '\x00', './file1\x00', 0x23, 0x7, 0x1a, 0x3, 0x1, 0x9}], 0x8, 0x4, 0x4, 0x1ff, 0x8, 0xf, 0x2, 0x5}) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r3, 0x400c570a, &(0x7f0000002d00)) r7 = openat$dri(0xffffffffffffff9c, &(0x7f0000002d40)='/dev/dri/card0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000002d80)={0xa, 0x7, r2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000002e00)={&(0x7f0000002dc0)=[0x0, 0x0, 0x0, 0x0], 0x4}) unlinkat(r8, &(0x7f0000002e40)='./file1/file0\x00', 0x8) sysctl$net_inet6_ip6(&(0x7f0000002e80)={0x4, 0x18, 0x29, 0x29}, 0x4, &(0x7f0000002ec0)="119bf5b367ba20753e242aa225ca2430c07fa59cdc9c63982f93fce08dc21e44d6d80af2ca9e9969921d5e312881bac57689a3f63a558db14a6594bb35c8dc5962d77822b479b81362b889df763fb0c85ee108750eb0a0770accaafad5284ffab29558bb1cb9bad8400d0846fde16d64bb46e5d8ca46195dd7d833", &(0x7f0000002f40)=0x7b, &(0x7f0000002f80)="d5f50a194461a0558ca2cb91abb4cf44d02f35ef0bbc83ced36522a6286823c422aa04d2db21431cfb5c79ba6e5a77fabd605ad633163837bb3c16a350aa54170c8a61a6ef766994d19501ca06ce45392a1b5ebffab8a9f901837f3f3560ed0279c042f9d6d7c8902746baf2d6f239cb5a74e50e7af2fa283c88c190e2daa0abe5da3e8af186bcb4d7a339d472301f32e165", 0x92) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000003040)={0x3, 0x8, r4}) ioctl$BIOCSDIRFILT(r8, 0x8004427d, &(0x7f0000003080)=0x5) pread(r7, &(0x7f00000030c0)="0ca89268073af32cb82f4adbed095bf4f14b9adebf1d1c91219f46edb38104c8c2df45905fff69b496c411c022022a4216d89698fc65f758c3eeb11cb07bf726aaf7820a13c1656a96421e260b5bdbaf16b3e65b908ee5050a3ba913b67ca79ff4c39f3af3eefa24f3993cf40eaf672529aebc3f3a3b2fdac87e12337da8620eae86ac128c09bf9a544ba2c09f96079578a215a93ccf3087aa441b3b6763644807710fc76485f48ce009ffc8bbe52e6949ed8458f9d0aafff8bdd7990a22863453ee59b197df658d3ebdbd7fbe89a8b25e0682cb97252cf07c08604e4df2dd179d579035ad2ce74a40", 0xe9, 0x7) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r7, 0xc00464c9, &(0x7f00000031c0)={r5}) 1.353637391s ago: executing program 4 (id=465): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$WSKBDIO_SETDEFAULTBELL(r0, 0x80105705, &(0x7f0000000140)={0x6, 0x9, 0x9}) 264.117563ms ago: executing program 0 (id=466): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DIOCRGETASTATS(r0, 0xc4504447, &(0x7f0000000600)={{'./file1\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x2, 0x2}, 0x0, 0xa3, 0x0, 0x8, 0xe, 0xd, 0xb18, 0x32, 0x6d2}) 263.577893ms ago: executing program 2 (id=467): syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"]) sysctl$net_inet_tcp(&(0x7f0000000040)={0x7, 0x2, 0x2, 0xa0000217}, 0x4, 0x0, 0x0, 0x0, 0x1e) 263.261271ms ago: executing program 7 (id=468): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="c7000000", 0x4) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)='M', 0x1}, {&(0x7f0000000140)='n', 0x1}, {&(0x7f0000000180)="c90d59", 0x3}], 0x3) 262.87488ms ago: executing program 3 (id=469): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCPROMISC(r1, 0x20004269) ioctl$BIOCPROMISC(r2, 0x20004269) (async) ioctl$BIOCPROMISC(r2, 0x20004269) r3 = socket(0x2, 0x8002, 0x0) r4 = fcntl$dupfd(r3, 0x1, r3) closefrom(r4) (async) closefrom(r4) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x10, r0, 0x70) sysctl$kern(&(0x7f00000015c0)={0x1, 0x16}, 0x2, &(0x7f0000001600)="817d6e8f92399c68a376a028d517a11b587d4f3fe92b7327fe4658933994973dd7032c7f35717df6ee574e0a740d2794504cfc724ab74c9466ef", &(0x7f0000001680)=0x3a, &(0x7f00000016c0), 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 257.831228ms ago: executing program 5 (id=470): fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x3, 0x9}) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0x102) fcntl$setstatus(r1, 0x4, 0x40) closefrom(r0) r2 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) recvfrom$inet6(r2, &(0x7f0000000080)=""/202, 0xca, 0x2800, &(0x7f0000000180)={0x1c, 0x18, 0x1, 0x6, "68d094ffe9723e1e390de6ea7813f09e", 0x8}, 0x1c) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) 199.300385ms ago: executing program 6 (id=471): rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/file0\x00') r0 = socket(0x18, 0x1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f00001cc000/0x4000)=nil, 0x637d}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000628000/0x3000)=nil, 0x7ffffffffffffbfb}, {&(0x7f0000209000/0x1000)=nil, &(0x7f00001fc000/0x4000)=nil, 0x9}, {&(0x7f00006b5000/0x2000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdf7fffffffff7fa}, {&(0x7f00004c0000/0x4000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f0000786000/0x1000)=nil, &(0x7f0000095000/0x3000)=nil, 0xfffffffffffffffc}, {&(0x7f000056a000/0x2000)=nil, &(0x7f0000688000/0x2000)=nil, 0x101}, {&(0x7f00003ba000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, 0x5}, {&(0x7f0000242000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x7fffdffffffffff9}, {&(0x7f0000476000/0x4000)=nil, &(0x7f00007ce000/0x1000)=nil}, {&(0x7f000064b000/0x2000)=nil, &(0x7f00000eb000/0x3000)=nil, 0x8}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, 0x5}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000108000/0x3000)=nil, 0x238}, {&(0x7f0000271000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffff7}, {&(0x7f0000148000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000039fd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000019f000/0x2000)=nil, 0x3}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0xfffffffa, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}) syz_emit_ethernet(0x46, &(0x7f0000000b80)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004c1a00380068c63c0502907800000000e0000001441c03100000000900000002000003efffffff4a7f000001000000084e224e4fe6c5dba9"]) select(0x40, &(0x7f0000000080)={0xffffffffffffffff, 0x20000000, 0x7, 0x5, 0x2, 0x8, 0x449, 0x8000}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() r5 = dup2(r4, r4) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000000)=0x2) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x8, "210d0000000200000006000000000200", 0x2000000, 0x5}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2010, r1, 0x0) sysctl$hw(&(0x7f00000000c0)={0x6, 0x1}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000002c0), &(0x7f0000000080)=0x1a, 0x0, 0x0) setsockopt(r0, 0x1000000029, 0xd, 0x0, 0x0) syz_emit_ethernet(0x10004, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYBLOB="06b84e00799a32fdafda789272b264b56c80fe921eef40d428bc0eac4be714fdde35180d0495ea67019a1ad1dd97df6874e22d2b1e90d829672e"]) 198.914858ms ago: executing program 2 (id=472): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) fchdir(r0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r1 = open(&(0x7f0000000000)='./bus\x00', 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000200)={0x0, &(0x7f00000000c0)=[{0xac, 0x39, 0x8, 0x4}, {0x1, 0x5, 0x59, 0xac}, {0x40a, 0x20, 0x5b}, {0x3ff, 0x1, 0x99, 0x96d4}]}) r2 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbeffffffffb, 0x0, 0x2, 0x2, 0x8001, 0x0, 0x6, 0x3, 0x0, 0x2f00, 0x0, 0x3, 0xe8, 0x400000000000000, 0x0, 0xffffffffffffffa5, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffff9, 0x2, 0x1, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xfffffffffffffffb, 0x11003, 0x4], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffa, 0x3], [{0xdb6e, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x23, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x6}, {0x6b7, 0x0, 0xfffffffc}, {0x0, 0x965, 0xfffffffc, 0x9}], {0x2000, 0x7, 0x5}, {0x29, 0x6, 0xb0, 0x2}}}) r3 = kqueue() kevent(r3, &(0x7f0000000080)=[{{r3}, 0xfffffffffffffffe, 0x2, 0x1, 0x2, 0x6}], 0x6, 0x0, 0x401, 0x0) fchmod(r2, 0xf3) syz_emit_ethernet(0x3e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd68722db600083c04fe8000bbff0200000000000000000000000000014e2259210008907800"/62]) 198.644885ms ago: executing program 2 (id=473): r0 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r0, 0x20007461) r1 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0xa) ioctl$TIOCSTOP(r1, 0x2000746f) read(r2, &(0x7f00000002c0)=""/4096, 0x1000) dup3(r1, r0, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68) ioctl$WSMUXIO_INJECTEVENT(r2, 0x80185760, &(0x7f0000000000)={0x8, 0x3, {0x7, 0x9}}) mmap(&(0x7f0000168000/0x4000)=nil, 0x4000, 0x1, 0xc011, r3, 0x20000000) truncate(&(0x7f0000000080)='./file0\x00', 0x61c5) 198.350718ms ago: executing program 0 (id=474): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="415fd77e1c92", @broadcast, [], {@arp={0x8035, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @broadcast, @broadcast, @loopback}}}}) openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) r0 = syz_open_pts() sysctl$hw(&(0x7f0000000140)={0x6, 0x1}, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x27ffb, 0x2, 0x405, 0x21d8b74a, "102e2618007bf533e2942b6e3ceb00", 0x4000c, 0xffffffff}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="3c954a82d31f4267863685410c361839c4183e8fe4e9f76a158b5d5c28", 0x1d}], 0x1) r1 = socket(0x2, 0x3, 0xc) bind(r1, &(0x7f0000000000), 0x10) r2 = socket$inet(0x2, 0x5, 0x1) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) 198.242179ms ago: executing program 7 (id=475): r0 = msgget$private(0x0, 0x200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0xc0) r2 = setsid() r3 = socket(0x11, 0x3, 0x0) setsockopt(r3, 0x11, 0x3, 0x0, 0x0) fcntl$setown(r1, 0x6, r2) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000, r2}) setsockopt(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000)="d7", 0x1) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x4001, 0x0) setsockopt(r4, 0x6, 0x4, &(0x7f0000000000)="d7f02661", 0x4) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) msgctl$IPC_STAT(r0, 0x2, &(0x7f00000001c0)=""/111) 194.057422ms ago: executing program 4 (id=476): r0 = socket(0x18, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000068000/0x4000)=nil}, {&(0x7f0000d80000/0x2000)=nil, &(0x7f00006ad000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000bb8000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xc}, {0x0, &(0x7f0000a80000/0x3000)=nil, 0x10000}, {0x0, &(0x7f0000826000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, 0xffffffffffffffff}, {0x0, 0x0, 0xe}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f0000b72000/0x4000)=nil, 0x1}, {&(0x7f00001d0000/0x2000)=nil, &(0x7f00001d2000/0x1000)=nil}, {&(0x7f0000c49000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1ff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000b99000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f0000eef000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x400000000001}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f00001d3000/0x2000)=nil}, {&(0x7f000006a000/0x2000)=nil, 0x0, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil}], './file0/../file0/file0\x00'}) write(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040)={{}, 0xff}, 0x10, 0x42, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x4b}, 0x2, &(0x7f00000011c0)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) r3 = socket(0x18, 0x2, 0x0) getsid(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_cred(r4, 0xffff, 0x1022, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x1000000029, 0x31, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@in={0x10, 0x2, 0x0, 0x1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[{0x64, 0x1, 0x1118cea7, "3f8f8ccf685d4d79de16a2729b4b70019708e85c263bbb3923633b287607ecf18cd0fcf4603e2202108ba0aa27db52383dcc48a588e165bf7f65a2f7a78adbbe4d48707191b9c01d8f62cbf4f0af39131f730cae7e"}], 0x64}, 0x2) r5 = dup2(r0, r3) r6 = socket(0x18, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0x68, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x1, 0x1, "ff010000000000018000", 0x4}, 0x1c, 0x0, 0x0, 0x0}}, 0x1, 0x8) 85.956007ms ago: executing program 5 (id=477): sysctl$net_inet_icmp(&(0x7f0000000080)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, &(0x7f0000000240), 0x0) sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x6}, 0x4, &(0x7f00000000c0)="6efe2b1a484d68d8d18efa86725c67978378c67c258c5e531badeab346de07b065855b84fb81ddbbec8e91f442febb2cc9265e3e1907cb40211f6101b7bbe0a38523d92f852264d61a8e43fa8cc81b8a4c8f57927ff87cd41a0a8968bac0b26dda8ef7e5a3f357e3a8d6d65e280cf34c0d09efe9a9fc3955de003faf", &(0x7f0000000040)=0x7c, &(0x7f0000000140)="0669e87351369030473a71c4706286867f414c0aa2f186e388180e1440d65356ba94e472f46d1b95519a14b3197115b95329bd9631db352e0b3233b14c9419f4fbb6d5b2ca", 0x45) 85.496905ms ago: executing program 4 (id=478): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xbffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x7f, 0x0, 0x0, 0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) r0 = socket(0x18, 0x1, 0x0) dup(r0) getsockopt(r0, 0x6, 0x2, 0x0, 0x0) 82.60828ms ago: executing program 0 (id=479): mknod(&(0x7f0000000000)='.\x00', 0x1, 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0xc3) utimes(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)={{0x9, 0xb0ee}, {0x7, 0x4}}) 81.123866ms ago: executing program 2 (id=480): r0 = syz_open_pts() r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCGETIF(r1, 0x4020426b, &(0x7f0000001240)={""/16, @ifru_flags}) close(r0) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000000340)={&(0x7f0000000000)=[{0x20, 0x10002}, {0x26, 0x5fbb45b}, {0x2, 0x8}], 0x3}) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f00000001c0)={0x2000020e, 0x3, 0x6fab, 0xfff7ff9f, "0800020000087db300000105001c670000000010", 0x9, 0x800001a4}) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r4, 0xc0284457, &(0x7f0000000000)={0x2, 0x1, 0xc, 0x1445, "0824000000000000000100000000000000000005", 0x4917, 0x7}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffff9c, 0xc00864c0, &(0x7f0000000040)={r5}) unveil(0x0, &(0x7f00000000c0)='c\x00') 11.573706ms ago: executing program 3 (id=481): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000380), 0x8, 0x0) readv(r0, &(0x7f0000000080), 0x31) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x5, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x8200, 0x0, 0xfffc, {[@sack={0x5, 0x2}, @generic={0x7, 0x2}]}}}}}}}) 6.32803ms ago: executing program 1 (id=482): kevent(0xffffffffffffff9c, &(0x7f0000000040)=[{{0xffffffffffffff9c}, 0xfffffffffffffff9, 0xd2, 0x80000000, 0x1ffffffffdffffd, 0xfffffffffffffffd}], 0x3, 0x0, 0xd6, 0x0) seteuid(0xffffffffffffffff) socket$inet(0x18, 0x3, 0x102) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x10, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r1 = socket(0x18, 0x1, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ftruncate(r2, 0x8531) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffe486dd615f6ad900383a0000400000000000000000000000000000fe8000000000000000000000000000aa02009078780000006006c33e00003a80fe8000000000000000000000000000aaff0200000000000000000000000000010200fa"]) flock(r2, 0x2) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) close(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) getsockopt$sock_int(r3, 0xffff, 0x1004, 0x0, 0x0) pwrite(r1, &(0x7f0000000080)="82da36d666738384c42dc6280d3af7e1365e38b95d2f7187817ffd76", 0x1c, 0xa0000000000) syz_emit_ethernet(0x66, &(0x7f0000000480)=ANY=[@ANYBLOB="e702f2ffef1f97b0aefe006b86dd609907a60045302c0309000000000000000000500000000000ff02000000000000000000000000000102009078000000036900de000006010800000000000000000000000000000000ff0100"/102]) r4 = syz_open_pts() syz_open_pts() syz_open_pts() r5 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DIOCMAP(r5, 0xc0106477, &(0x7f0000000000)={&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4, 0x3}) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 4.319736ms ago: executing program 0 (id=483): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000500)=[{0x7, 0x43, 0x26, 0x7}, {0x4, 0xfe, 0x5, 0xffffffff}, {0x1026, 0xa0, 0x4c, 0xffffeffd}]}) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random="b905f0ffffff", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@info_request={0xf, 0x0, 0x0, 0x205c, 0x3}}}}}) fcntl$getown(r0, 0x5) r1 = dup(r0) ioctl$BIOCGETIF(r1, 0x4020426b, &(0x7f0000000040)={""/16, @ifru_dstaddr=@in}) getthrid() ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x7, 0x95, 0x2, 0xfff}, {0x20, 0x2, 0x3, 0x2}, {0xfe5, 0x4, 0x2, 0x4}, {0xa, 0x1, 0x1, 0xa2f8c89e}, {0x2, 0x9, 0x0, 0x3}]}) 1.256076ms ago: executing program 0 (id=484): syz_emit_ethernet(0x50, &(0x7f0000000100)={@local, @random="ce853386a71b", [], {@ipv6={0x86dd, {0x0, 0x6, "0200", 0x1a, 0x0, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, {[@dstopts={0x3a, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xfd}]}], @icmpv6=@ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x1f}]}}}}}}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) close(r0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)="5bfbeb591c598e0bc5aef9a468088109d87fa8ad7c426efb8c761c53d1bf32ed01e680e9d46425f71661c2b83a311101c383916ee711a959cfb2873dc1c9597542794d63fb5e38d6ee92397c417a96", 0x4f) 0s ago: executing program 5 (id=485): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x1c, 0x53, 0x27, 0x2336}, {0x44, 0x10, 0x4, 0xdc}, {0x6, 0x6, 0x7, 0xfffffffc}]}) futimens(r0, &(0x7f0000000000)=[{0x5, 0x5}, {0x1, 0x3}]) (async) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa"]) (async) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b180bc3eb987ab7fe", 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = socket(0x18, 0x2, 0x0) bind(r1, &(0x7f00000000c0)=@in={0x10, 0x2, 0x0}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2) sysctl$hw(&(0x7f0000000280)={0x6, 0x1c}, 0x2, &(0x7f0000001280)="ff", 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x4002, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x0, 0x1}, 0x2) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f00000de000/0x2000)=nil, 0x2000, 0x0) (async) pledge(0x0, &(0x7f00000000c0)='\x00') (async) pledge(0x0, &(0x7f0000002840)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00'/659) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. malloc(): allocation too large, type = 6, size = 137707384832 pckbd_enable: command error wskbd0: can't attach mux (error=5) pckbd_enable: command error sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code uvm_fault(0xfffffd8069834d80, 0x98, 0, 1) -> e fatal page fault in supervisor mode trap type 6 code 0 rip ffffffff818db4e8 cs 8 rflags 10246 cr2 98 cpl 0 rsp ffff80003a7bab50 gsbase 0xffff8000299adff0 kgsbase 0x0 panic: trap type 6, code=0, pc=ffffffff818db4e8 Starting stack trace... panic(ffffffff834831e6) at panic+0x1d0 kerntrap(ffff80003a7baaa0) at kerntrap+0x30b alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dovutimens(ffff80003c48ca98,fffffd806b1b2c20,ffff80003a7bac60) at dovutimens+0x368 sys_futimens(ffff80003c48ca98,ffff80003a7badb0,ffff80003a7bad00) at sys_futimens+0xb3 syscall(ffff80003a7badb0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xeac71b817f0, count: 250 End of stack trace. WA RNING: SPL NOT LOWERED ON SYSCALL 83 -307235360 EXIT 0 4 Stopped at savectx+0xae: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND 424106 22844 0 0 0 0K syz-executor * 2426 22844 0 0 0x4000000 1 syz-executor savectx() at savectx+0xae end of kernel end trace frame: 0xeacf1be9440, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd8069834d80, 0x98, 0, 1) -> e ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0xeacf1be9440, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003c3f5f90 rbx 0 rdx 0 rcx 0xffff80003c48cfc8 rax 0x3b r8 0xffff80003c3f5ec0 r9 0x1 r10 0xadc1a64acb3bf9f8 r11 0x7a42e5a895fc851b r12 0 r13 0 r14 0xffff80003c48cfc8 r15 0 rip 0xffffffff818ce3ee savectx+0xae cs 0x8 rflags 0x46 rsp 0xffff80003c3f5f10 ss 0x10 savectx+0xae: movl $0,%gs:0x688 ddb{1}> show proc PROC (syz-executor) tid=2426 pid=22844 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c48ca98,0xffffffff83aba6d8 process=0xffff8000fffe61d0 user=0xffff80003c3f0000, vmspace=0xfffffd8069834d80 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 68871 309949 30728 0 2 0 syz-executor 22844 424106 86272 0 7 0 syz-executor 22844 232956 86272 0 3 0x4000000 sbar syz-executor *22844 2426 86272 0 7 0x4000000 syz-executor 83482 71215 36961 0 2 0 syz-executor 30435 178935 87256 0 2 0x10 syz-executor 30435 475096 87256 0 2 0x4000010 syz-executor 95396 259112 61858 0 2 0 syz-executor 95396 185481 61858 0 3 0x4000080 fsleep syz-executor 37283 87385 64480 0 2 0 syz-executor 37283 21657 64480 0 3 0x4000080 fsleep syz-executor 59626 340041 23340 0 2 0 syz-executor 59626 180925 23340 0 2 0x4000000 syz-executor 67966 194751 48942 0 2 0 syz-executor 67966 247753 48942 0 3 0x4000080 fsleep syz-executor 30728 192026 18362 0 2 0xc82 syz-executor 48942 323112 18362 0 2 0xc82 syz-executor 14932 180286 0 0 3 0x14280 nfsidl nfsio 75768 456856 0 0 3 0x14280 nfsidl nfsio 3786 457844 0 0 3 0x14280 nfsidl nfsio 86777 97911 0 0 3 0x14280 nfsidl nfsio 81257 144499 0 0 3 0x14280 nfsidl nfsio 48686 158109 0 0 3 0x14280 nfsidl nfsio 34269 260999 0 0 3 0x14280 nfsidl nfsio 73701 60490 0 0 3 0x14280 nfsidl nfsio 55882 428131 0 0 3 0x14280 nfsidl nfsio 94280 245655 0 0 3 0x14280 nfsidl nfsio 8707 19935 0 0 3 0x14280 nfsidl nfsio 41761 288670 0 0 3 0x14280 nfsidl nfsio 47761 507957 0 0 3 0x14280 nfsidl nfsio 90710 463843 0 0 3 0x14280 nfsidl nfsio 89503 40462 0 0 3 0x14280 nfsidl nfsio 94054 159694 0 0 3 0x14280 nfsidl nfsio 23107 79193 0 0 3 0x14280 nfsidl nfsio 5421 385676 0 0 3 0x14280 nfsidl nfsio 45533 108784 0 0 3 0x14280 nfsidl nfsio 49388 196338 0 0 3 0x14280 nfsidl nfsio 95386 213712 0 0 3 0x14200 acct acct 23340 27168 18362 0 2 0xc82 syz-executor 86272 17535 18362 0 2 0xc82 syz-executor 64480 90481 18362 0 2 0xc82 syz-executor 61858 279147 18362 0 2 0xc82 syz-executor 87256 225324 18362 0 2 0xc82 syz-executor 36961 127836 18362 0 2 0xc82 syz-executor 18362 386148 98449 0 3 0x82 kqread syz-executor 98449 428770 16806 0 3 0x10008a sigsusp ksh 16806 325421 18183 0 3 0x98 kqread sshd-session 18183 15521 94730 0 3 0x92 kqread sshd-session 35253 447126 1 0 2 0x100083 getty 94730 327677 1 0 3 0x88 kqread sshd 94662 387766 98120 74 3 0x1100092 bpf pflogd 98120 478548 1 0 3 0x80 sbwait pflogd 23193 447149 90079 73 3 0x1100090 kqread syslogd 90079 15809 1 0 3 0x100082 sbwait syslogd 15272 75853 1 0 3 0x100080 kqread resolvd 37419 491792 66005 77 3 0x100092 kqread dhcpleased 94956 87061 66005 77 3 0x100092 kqread dhcpleased 66005 50507 1 0 3 0x80 kqread dhcpleased 92659 380939 0 0 2 0x14200 smr 38112 10830 0 0 2 0x14200 zerothread 55759 232669 0 0 3 0x14200 aiodoned aiodoned 26945 469334 0 0 3 0x14200 syncer update 85499 25532 0 0 3 0x14200 cleaner cleaner 25574 481372 0 0 3 0x14200 reaper reaper 42617 337897 0 0 3 0x14200 pgdaemon pagedaemon 49550 47601 0 0 3 0x14200 bored viomb 28732 242293 0 0 3 0x40014200 acpi0 acpi0 4263 2553 0 0 3 0x40014200 idle1 78378 424406 0 0 3 0x14200 bored softnet1 17385 99281 0 0 2 0x14200 softnet0 7111 41660 0 0 2 0x14200 systqmp 6128 434849 0 0 3 0x14200 bored systq 48968 314547 0 0 3 0x14200 tmoslp softclockmp 2523 520160 0 0 3 0x40014200 tmoslp softclock 51613 127346 0 0 3 0x40014200 idle0 1 126482 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 22844 (syz-executor) thread 0xffff80003c48d4f8 (424106) exclusive rwlock amaplk r = 0 (0xfffffd806c3bcdf8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 uvm_fault_check+0x8a9 #3 uvm_fault+0x106 #4 upageflttrap+0xa9 #5 usertrap+0x430 #6 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xfffffd8069834e80) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x430 #7 recall_trap+0x8 Process 22844 (syz-executor) thread 0xffff80003c48ca98 (232956) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83971d80) #0 witness_lock+0x5f1 #1 syscall+0xaf4 #2 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11081 12281K 12404K 166960K 12771 0 pcb 17 14K 15K 166960K 105 0 rtable 191 7K 8K 166960K 473 0 pf 33 17K 24K 166960K 122 0 ifaddr 33 5K 7K 166960K 69 0 ifgroup 51 2K 2K 166960K 100 0 sysctl 4 1K 9K 166960K 9 0 counters 68 36K 37K 166960K 114 0 ioctlops 0 0K 4K 166960K 1632 0 iov 0 0K 16K 166960K 58 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1325 83K 84K 166960K 1929 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 20K 24K 166960K 11 0 VM map 2 1K 1K 166960K 2 0 sem 12 312K 312K 166960K 24 0 dirhash 12 2K 2K 166960K 33 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 102K 166960K 656 0 sigio 1 0K 0K 166960K 6 0 proc 72 115K 164K 166960K 654 0 subproc 72 4K 4K 166960K 90 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 43 0 in_multi 66 4K 6K 166960K 139 0 ether_multi 1 0K 0K 166960K 4 0 mrt 0 0K 0K 166960K 16 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 91 413K 413K 166960K 91 0 exec 0 0K 1K 166960K 526 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 228 159K 177K 166960K 7497 0 UVM aobj 8 2K 2K 166960K 8 0 pinsyscall 43 86K 103K 166960K 1858 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 30 0 NDP 11 0K 1K 166960K 47 0 temp 53 9078K 9144K 166960K 29473 0 kqueue 13 20K 28K 166960K 116 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 103 0 99 2 0 2 2 0 8 1 rtentry 176 144 0 65 5 0 5 5 0 8 0 unpcb 144 384 0 367 2 0 2 2 0 8 1 syncache 336 8 0 8 2 1 1 1 0 8 1 tcpcb 736 206 0 199 10 3 7 7 0 8 6 arp 136 24 0 12 1 0 1 1 0 8 0 inpcb 328 609 0 599 12 3 9 12 0 8 8 nd6 152 32 0 15 1 0 1 1 0 8 0 pkpcb 40 3 0 3 2 1 1 1 0 8 1 kcovpl 48 10 0 2 1 0 1 1 0 8 0 ppxss 1192 16 0 16 2 1 1 1 0 8 1 pppxif 1576 1 0 1 1 0 1 1 0 8 1 pffrag 232 22 0 16 1 0 1 1 0 482 0 pffrnode 88 20 0 16 1 0 1 1 0 8 0 pffrent 40 41 0 34 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 2 0 2 2 2 0 1 0 8 0 pfanchor 1288 9 0 5 1 0 1 1 0 8 0 pfstitem 24 51 0 15 1 0 1 1 0 8 0 pfstkey 128 51 0 15 2 0 2 2 0 8 0 pfstate 448 50 0 15 5 0 5 5 0 8 0 pfrule 1360 25 0 19 2 1 1 2 0 8 0 rttmr 136 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 563 0 235 30 4 26 29 0 8 2 art_table 40 565 0 235 5 0 5 5 0 8 0 art_node 32 144 0 73 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 0 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 19 0 9 1 0 1 1 0 8 0 shmpl 112 5 0 0 1 0 1 1 0 8 0 dirhash 1024 31 0 14 3 0 3 3 0 8 0 dino2pl 256 2686 0 1225 93 0 93 93 0 8 0 ffsino 296 2686 0 1225 114 0 114 114 0 8 0 nchpl 144 3543 0 1839 64 0 64 64 0 8 0 rtmask 32 3 0 3 2 1 1 1 0 8 1 vnodes 216 2991 0 0 167 0 167 167 0 8 0 namei 1024 12451 0 12451 2 1 1 2 0 8 1 percpumem 16 72 0 23 1 0 1 1 0 8 0 kstatmem 264 58 0 32 3 0 3 3 0 8 0 scsiplug 72 1 0 1 1 1 0 1 0 8 0 scxspl 216 12776 0 12776 11 3 8 8 1 8 8 plimitpl 152 127 0 110 1 0 1 1 0 8 0 sigapl 424 982 0 913 9 1 8 8 0 8 0 knotepl 120 568 0 0 17 0 17 17 0 8 0 kqueuepl 224 226 0 217 5 0 5 5 0 8 4 pipepl 344 184 0 156 3 0 3 3 0 8 0 fdescpl 528 945 0 913 3 0 3 3 0 8 0 filepl 160 5772 0 5550 17 2 15 15 0 8 4 lockfpl 104 361 0 359 2 1 1 2 0 8 0 lockfspl 48 131 0 129 1 0 1 1 0 8 0 sessionpl 144 48 0 38 1 0 1 1 0 8 0 pgrppl 48 61 0 43 1 0 1 1 0 8 0 ucredpl 104 1225 0 1211 1 0 1 1 0 8 0 zombiepl 144 913 0 913 1 0 1 1 0 8 1 processpl 1232 982 0 913 6 0 6 6 0 8 0 procpl 664 1789 0 1713 8 0 8 8 0 8 0 sosppl 176 9 0 9 2 1 1 1 0 8 1 sockpl 752 1110 0 1079 17 6 11 17 0 8 7 mcl64k 65536 5 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 122 0 0 16 0 16 16 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 27 0 0 4 0 4 4 0 8 0 mtagpl 96 5 0 0 1 0 1 1 0 8 0 mbufpl 256 267 0 0 17 0 17 17 0 8 0 bufpl 280 4333 0 141 300 0 300 300 0 8 0 anonpl 32 12784 0 0 104 0 104 104 0 246 0 amapchunkpl 152 24466 0 23953 32 1 31 31 0 158 7 amappl16 200 4065 0 3999 39 26 13 30 0 8 7 amappl15 192 8 0 8 1 1 0 1 0 8 0 amappl14 184 460 0 458 1 0 1 1 0 8 0 amappl13 176 145 0 132 1 0 1 1 0 8 0 amappl12 168 1232 0 1203 2 0 2 2 0 8 0 amappl11 160 6 0 5 1 0 1 1 0 8 0 amappl10 152 62 0 48 1 0 1 1 0 8 0 amappl9 144 262 0 262 1 1 0 1 0 8 0 amappl8 136 113 0 110 1 0 1 1 0 8 0 amappl7 128 153 0 139 1 0 1 1 0 8 0 amappl6 120 182 0 180 1 0 1 1 0 8 0 amappl5 112 100 0 88 1 0 1 1 0 8 0 amappl4 104 333 0 313 1 0 1 1 0 8 0 amappl3 96 4773 0 4670 4 0 4 4 0 8 0 amappl2 88 565 0 503 2 0 2 2 0 8 0 amappl1 80 12612 0 12007 19 3 16 16 0 8 1 amappl 88 6637 0 6480 5 0 5 5 0 92 0 uvmvnodes 80 118 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma2048 2048 1 0 1 1 1 0 1 0 8 0 dma1024 1024 2 0 1 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 7 0 0 1 0 1 1 0 8 0 uaddrrnd 24 945 0 913 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 945 0 913 1 0 1 1 0 8 0 vmmpekpl 168 9465 0 9427 3 0 3 3 0 8 0 vmmpepl 168 68949 0 66971 111 10 101 110 0 357 9 vmsppl 488 944 0 913 6 1 5 5 0 8 0 rwobjpl 80 22095 0 21009 33 5 28 33 0 8 0 pdppl 4096 1897 0 1826 109 36 73 83 0 8 2 pvpl 32 21208 0 0 172 0 172 172 0 265 0 pmappl 256 944 0 913 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 305 0 49 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff8394dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc uvm_uarea_alloc() at uvm_uarea_alloc+0xed thread_fork(ffff80003c48d4f8,eacf3b64300,eacedb08600,eacedb08630,ffff800033bb9b40) at thread_fork+0x170 sys___tfork(ffff80003c48d4f8,ffff800033bb9bf0,ffff800033bb9b40) at sys___tfork+0x1b6 syscall(ffff800033bb9bf0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7e0c29a3ee30, count: 6 ddb{0}> trace x86_ipi_db(ffffffff8394dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc uvm_uarea_alloc() at uvm_uarea_alloc+0xed thread_fork(ffff80003c48d4f8,eacf3b64300,eacedb08600,eacedb08630,ffff800033bb9b40) at thread_fork+0x170 sys___tfork(ffff80003c48d4f8,ffff800033bb9bf0,ffff800033bb9b40) at sys___tfork+0x1b6 syscall(ffff800033bb9bf0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7e0c29a3ee30, count: -9 ddb{0}> machine ddbcpu 1 Stopped at savectx+0xae: movl $0,%gs:0x688 savectx() at savectx+0xae end of kernel end trace frame: 0xeacf1be9440, count: 14 ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0xeacf1be9440, count: -1