last executing test programs: 5.348459722s ago: executing program 6 (id=951): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = openat$dri(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x800, 0x0) r1 = socket(0x1e, 0x3, 0x0) getsockname$unix(r1, 0x0, &(0x7f00000000c0)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b0000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0xd}, 0x6) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) sysctl$kern(&(0x7f0000000980)={0x1, 0x16}, 0x2, 0x0, &(0x7f00000009c0), &(0x7f0000000f40)="3e8067e6be72f688ee4052bbee908a3ce5a076b7ccd028d433f209a80ee657b3119700897755d5e184d38f602ca8604b7921fa1b900770bd6a57c30035c1685e58d1a6ea85edaf54c386abf60270b9533dbac3858600526c5e468cc87804017733748beda22a47611b569d783e0d9c884381c409f0257754b97ec872931774e309214fddab5f4a58785b655f4b903f5d33a6e71eb5d8f40cf107ca682e051b688d408dacec6c335edd684a388b715c37976a5a57d4801c375ae1d79410c158e0ffc6246c0f78f467fe030ba47679e7113a09c344130594", 0xd7) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x7, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000280)={r2, 0x7, 0x0, 0x200, 0x1ff}) sysctl$kern(&(0x7f00000002c0)={0x1, 0x1b}, 0x2, &(0x7f0000000300)="7141c4f612b80a99a173840b8700108d2dd791e20724b75792e20e13cfeb144ae7c0a7fb4a7c167ae5adb19f86358e7fa234e2a47b09d3bbc6034d48ef8b619489fe98d563281e6bf2260b18282bb8b69c8b74d4e972c45315c65dc5198c7527d120e2b0224a2e39b8a9910890e37f9d051f20b9886362a00ad9b7815917a80290a53b2bd90e6d8b397f9f22d6de0de913fd1afdc3cac80c78", &(0x7f00000003c0)=0x99, &(0x7f0000001040)="a8f92a7b48c80578e84406e91320fd9bf6ae30210e0f076c40378d9f96b4139c23dcdc97d53aa857733a780c11fd7500900b577eb3c6c193de58f113e1fa0cb907d18aff98225a2068843f5c5f85762d02e1ad507e1ed41a7201b5e4ba3d0b9ebfa7b4136ea073488b1c52a19b163c9b3576e9d56698f38850d14b59f346703bb804079a77141ba0cbd2355c5d851dca4cc994725c9eef58f3922813f22331199d6149d931cb8e5dfdd77871570791336afc4142dae658c65b5586e7f627e5a2ac940bf9ef80724a2bf16a8b7d8600ff02fe5ec5186ce7d367f92ff8cea169e04328d17c69a9776d5a7d5fbed4a1b335724d794977f7d9d9f56d588fd14d0d08742a71d8c46c019da1441c3bffb826fcfc76c97ea8ed3f642ae3cb82c68be4a9491daf8cf589cd3c72a53d449df35d195771b61bd238d1bfe8a3b5b90c68112bb89c5ad95f80c54ac47f4bce12974a793ed3c9952db18f9591814306ef4c77ac9c1406818693cd583dac9556ee159a130591dda45da53e333c8b2a117a99f2b0f6f349686cb886208a0b00f5107fa1b4f515fcb36ba26eb479d9caec289d04570b20bacac3da2c96c3378f4e50cbe61231c60021d027932ad948657a9b8c8166db036e8206d0f910d0f5f6fa6b02aee5b33ac1e28bd188970283844c999055ec144ce51e6d13b764eae1dfdcaa6e279f6fc2ca055f0e2581411643620b1c903f9606d778e24c5a01f760607e9ae97539c12bc6fd4c98567361f559e299c5d2b3722347ea6159108993639b7514ce1cc828e723ceadaf12319e12b016fb1f4c74c259025b57fe12e02c74dd35582e3fef39a1af57f35c449013d0f852a7fd61f373684f125d322978da976b5627ede76e5acc3615918eff0e8fca4b2c0a02b1beefe128b2de06fdb16db4983c0ff09a82bb4e71fd2e2e4b64797c1fe1f01d39a986801494d5c5c3d639b8352a729ecb0639b97038e897f59e97791b498b5c6aa6b9e5d96fc144701e462bea0090d728b7ddc4d9d51afa594ae11c4fea40dc3d67eabad439f7a672536937dfe2d2b75ba2b5a8bf41bd5c6baaf612f5d2ffdb87c500b89cfcd0ed6b2259b9889a6a9d50fa3bd748b15f3b13b6567e4757a57f8c22cdcc24b67dbee38165cb80d76899c4d4b1d0e96057482c7783c25c69177dae60f1fa638d78251d6daefdd184b8ae54bec23ca3795230d7084e8403ae826637b31aaa7a74c4f4f9e6d52f0cf70bcdfa5d693de7f8009c96535ba61a31e20c97318c0a592c9f5ecb72b4cd0fe91f671b0830a5fdfbebb0c5e654226da4a5201b521e1527d07ef47910e4c44b31793a97787c50154246655b54577dbf2576e94b681b3f3af7ccb6f0324a2dcf0a5e2670703796893714ff77acaa713c659a82871eaa272c468da01be355e2115f6ae291337ce66e3fdb655beb2c3323087fd70e66c26f73821ce9f22fe28561469de6eeb88c01da6c246418446abe332327eb042bfea95a4f82584ce3ac4d78b35954653f5c8eaeb0880556e504e9181a68be85d82096ef57740eac1759629f06d73e1c1d23bbffc29b9da65e83f160dca148edebc599b485c6ad32cf68af039d98f89ff8dee0a7c60d1a675bdb2f12a5bcdd816c80b1274851102529b7f61b2effffd4bf18afd806dbb190698564e40a086cdcdd62320055f9fe91f15a3157c6d3e41054f4ce6d1a2dc3848ce0dc17f22fda2e0ae0cc6273746fdd35ebc2d4e7125e57a5355154cb86ccc480fc9659d90c10e55f525f49673d12b1e56143ae4b553504436d1b255b75d905946075c4017da48b17b3917b43049f3b95a4625d95a74bdd471f32a85c1a11888aa8fdceeda2088ca79d66709cb194835f7054bfc4fa4fa3e1f0d77e7449dba22d00fb38b99097bc4ffa30c7a556fa58bf1de4ccead1c3603b81e0d8acb3e0b9a32a4e349fe25f041dd6bfb8cfb007bf00180c8cca7af24329c30e4b14c0d964894daf06a91d241a6cc403972485f19ccd275c067a3f81b1323c6a127e917e88a9ec136033abae5fc5ba7c3d512cf81e3e6756e99cb95d2b9f1905ab5285d006df755ddfda2c0a972aff6e42320e26a95abcedd422c029379748c7c4620f0bc338db05f3b6f3a98fe4af8e7ef32a513e784d0b7f7941271915054f5a341702f80508cee8536c7087235894eca44feeeae959aba63d3c141c0867c9d3c1a95ff393126488d47ff2b3f9875a2a74120b44d2b778082d131378c33e279d859c29412dd1adba5946826e4d091d1d0c1565bff810115ba29b21ca38356870a30bb2e585f241ec4bc1e02922abf463f496a6109b288b94d286d017901fb12cdc33c84c2abe4c2fb3b67e1e41d21e5dcd6c0cbd10d6c56360fe826477fb73b31f2adbd7a0b73f766e39c459d2c92cc1878d3d95e10b8c1a3772c8cb8281b93ed8eed356a230c8338ae4a749f038ce8b72ffb89f6e8e79fb77d2cc02760ba6344f4c76828489ce9290004196b8496f10167335357a2ff734f3b5c869a893889459a5babbc4dc321688e51d057c4705a45433a8f353376094bb387dc57bf2c6ae1967d47bcac6709ed6176a1ffcd4ca3c48308695df55e64b9a32d798e84bdc26b040d78b41691051143df872ca23888edb984d0ea2717ff90f8f4bc5db682f7892e61af91f6dd413d84626387ecab1ac7442464789e850d793979f28495553507d061e30b999f67837da1278b5f6904ddd71b728bc7f7d102a0359600e195192a7a80f3abd0c0f7ef3f7bad15fa8c3190a1a839af485832a48319900dab2a1d8756746e0bf2f402cfc9676e5a2423a89eedfaed36eaebc92ad7d28d00cfe83e24c4b6442ec1e9522189cec39c77aa2cbba41e943a9e09049d112b274d3225beda194fbde228e8f2ae0a1158e2324d1d9c151c3f9221bc6ced0e511bc1f81f3582a24398869b0173ac1c6d0a8c4ea34f8bd40102e38b89a935f004e0267c4992c4c53f4bf70e5499d3f44c2bb4777c9cf51017e4fd94ce88a923c570e78197ebca6dd9053167059d36580166f1e6f55d3c881d00452cb141150ec622fa0489d7256d436d959ed702456854b98afa47fc763884af1e831a1248c4a52d6b7dc9415e906b2e5f96939d756ac71a7692c365da80c68074acf67b11a15c2f307c8186625bcff098d3571cfeb295bbcabce15966f1b78e2094bc313b2cdae0705536e17bdb72bd891bade70492b9b69a32a5c514f58087419b282f6219a0064343b2dc2f6951889fbe857fe82966b843dffe4e37adf2adceaaea8c69ca86d980fdd62a9c894a86629ea4e51b3772e02f5ee0d6558e3c4a817e3ac8e0c8ec847b36b1f844533c294b7064b2b93a196074cd6d5afa081886eee67193c5308ad6b4fd00c22740bbc432c0b63716fb042d3557ebed2ef4fd1e38a7605150ce2459261e41e6e3a9cfc9bcbc36aea28bb0c5f036a85e5a3dd69152f3f390b572d1d34e48cca30073a148c5af883b66185bc1dfa3f6b6fad3714555679624866a2714d1098a5c943c30687751fe240f8414e41bdb8748da96b0389f1de0c05678b51a512ff1f939d8e4c327c00c4faeec44564fe95a14c8874e0e8570fcb0873a38caa82f4bd03fa5f93c681283175eedb6c5f0cf75537dc79300c0e7e139f301c964637dfd8594bc1c0ea0b2bdaa45d128e0fda4a66518976671714e57dfccedb473b0179d159b1bc25b0c6ad06c42bf9c790c15637d9c52e776b75474f1c3d4516692aa8c476439b60aafd7e91f9de6896d18f20aacd743804df5ef3d93356816d615549d6e9f729d73b94a1b0c7dcdc8b0a7c96dcdbaf4acb34536556c9ea77be73249c97d139979cdafb79dd794f1ae965acad5b1b318689edd9438315f2b993353778fc114d3e8a2bc6b04cc8c87d118fbd656c6d4b13c759538930322d5b70ee8a5a2aca61e0455d776202638bb224014992c7821ce87f34631e245044419bfc4092aa8b523b59da5190e621b4e54af6d6b95166106267de95e9d94b8ab0ce7327245e7af4dc82bd42804dfec88cd942154d754775c3a4c935cf3f8c720c19936348612409b54ef8d2f256c7286945ea665dca20b2ba313e6348a3275f2b5dfbccee192d6edeb87254cc46d2b3a9ca53690e8b3f566d774a59a5452ea24b00a6aef2ca72611c9e2ecaac448dab8583635062ae2fccbbd1ef1e4030bc55a5233f759c1b220f71df823b9e91ea6b817e0a4af94b3753c1068b4115b53081fd853836b8d0d027eec9b6f93cb4f2c6348de9b3f54bec601f2215a1ccc659ab0e0f7373dbd4a60a47af921cbd7359ee39bb74590f40cda8cbf6759db16d5a91a9e7088d14c2cebc3074d92de6d486d5015e953cac0258c26791b053b4d94dc425335b8e7c83952916eadcfd7729d28cd8f28b2b9cb208e6f866749c4e85b48a1a31ec4134e012d5c1f521caf9ca2d51b77017280494ea98ea9da6089dfbca6bb414c7df2460c5804580b26694be9102cb8b6af32126f6a69feac6f1676c77ef49ef01324168d60116578376334aa241305adbf0154453e8c833b31347a81268f2c184dc21bb5fecf26c989c25055bb61d35e495ad75e15086dd54ca8bbbcf2f81eba8b20e708fd2b36c0309d30f949817ce1459e08544092ccd28a9d3700a733396e23289de4215385bb7b75194a23536198c0950b783f1d57c02f873875ed0acacdf10f0e0796544a5f1ee7a2abc747a0f93b6e92ff455461e4d1cb0fcc73f6936950e38bd50974d925760a07da2cad5b4f0c0fbe9cea9f16f3d662eaa562dfcc77ce6566713e82b55ddd69eb21167ae1c7b7e08b7fcfa55f5593fee4a0f6eedb4b1aad38fe726f2c4ef37eebfafafb5aaea81308a7127e724159c40df4942d13fb38f529c1bd2295d2c473f663403c88c044ea889dd99a5e08d53b5c0bcae5ac4be2351394d0837c106a66a0fd07caddd27e1a7426d191e30cfe1404c6587131801d3afdae4bf08f93221115d6e79fad554b73d4dc6fc4afec5a84e01b1df99bd7d072352e761a75a98d4ed601b90f796e645e1b9abfde6287af8e80ee94759758f282472c6f5d058b8a18a5df2df4fb6f6d85c28333b6bd0e706a4aaabb9fab3454b86b957e21ffd1789d0a3c2fccd53e98b59241e70ba63332326f928b1da4928cb95a1f41658848cfad9879990e871208b26230fdfdea0f28e44f943ba4fb7a98f41d7742c6f2e224014741f11cd83f05dad2c514fb7a217a4103c83d4e310396604c6b38712c4218dc5136c22355c6a50415a8213399ef97bcdf3f04f35b4cd392ebb5f9e8fc7aa861de212741f72ecc2b83cd237a5dec9a3a1347a859075bd4b426cc2b39ad097639fd14e31137e0c23faa58183a9cfea998d884db868fb089620134edd54ce74f9f3f142e23a74ad924b763baf955b6edf7d00c80e517b73070141a59d697fc49ffe44c4067d3e0b3c9e06c34cd32523435c5a8d74caf8690549ebfae7a76edaba153842c2880e0c25d1cac283b047a7eaf9db17f692b085736a9b3957cb711a85b7c92e5eca675278821992c9925b7dff813858453dc881116c9f885485cf8e6db9016ebdc9e26d93bf352dbb4abc4bd23ddcb489476391281bfdc39fe20e02b721b3065889d3d13450d26fa5f74f2a50381c4069e9b143c1b85542ae691675982ede5b9f6bb033d6f12bb6b494e90698d02d51ff29d01dbf51a062c4fc9515b86251e4302f7bf6edd6b394a9d7af6dd843e8142070c70d5ebf1578abe0d6162900c28c15446d4ab120fdadf4bee22229baafa09da6f898ffcc997f73709b02d8ef4e7d76ec795c1a", 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x2, 0x2, 0x0) r4 = socket(0x18, 0xc003, 0x3a) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xf0, 0xd7f3}, 0x695, 0xfff8, 0x0, 0x0, 0x4, 0x6, 0x200}) setsockopt(r4, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0x67, &(0x7f0000000100)={{0x18, 0x2, 0xffff}, {0x18, 0x0, 0x5, 0x1}, 0xb, [0xf03, 0xfffffffe, 0x9, 0x5, 0xff, 0x800, 0x9, 0x67f]}, 0xca) setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000000080)="0315f1d89ec5a317a9357682", 0xc) connect$unix(r3, &(0x7f0000000000), 0x10) write(r3, &(0x7f00000000c0)="6bbc4044635cdfa0130442359ce30f1d6397d3e99e3a21cac54252de3f31068e94599964f0992fc4f57a21f3e43840110c5aedadf534eb754e43cfefbf30d1873b41d1b6db5ac9b567031f5f94e299e42815a09a0b895be4e6fbe32bbcc6eb773fd30096f35767d120948e67b7183f75f955cebe0ab31be9a3471867737ede7592cb85a0a3fa080000009b265adc3f46c7a4790853cbcce224abc7b30926aef1d2c9497b96374901fd3f0fa136327cedf27ab77a7bd690a931e870d6576296ea83f54541af73092ebe7575a3899854202d3ae7ed09d9cb3895d29f8722ad1fc4315f2c7a83cfba586bf6cf2b232222ba0315879fcc0c5c729cbafa39551ad6d7bf1fe58fefee90cd34bebbc4ba6faf759e1647ee8384574e91bb29d971700c1f0f2b3a27263a73328833bd4bc5577fd4521ff3ce1257081533ede709c175acf59272ef759399e20f7f3ebedcdb6485ae8b72228ef2a8172601ce45147783ee8e31631baab0f9836486f8e0acb23c55df91", 0x171) 5.32314579s ago: executing program 6 (id=953): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0xfffffff7, 0x7, 0xffffffffffffffff}) ioctl$WSKBDIO_SETMODE(r0, 0x80045713, &(0x7f0000000080)=0x1) r1 = syz_open_pts() r2 = syz_open_pts() ioctl$TIOCSTAT(r2, 0x20007465, &(0x7f00000000c0)) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x20, 0x0) ioctl$BIOCSFILDROP(r3, 0x80044279, &(0x7f00000000c0)=0x2) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x80, 0x81, 0x7c, 0xebd}, {0x16, 0x1, 0x9, 0x13019821}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) ioctl$TIOCSETVERAUTH(r1, 0x8004741c, &(0x7f0000000040)=0x1) 2.889195587s ago: executing program 1 (id=1054): ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r0 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000100)) r2 = socket(0x18, 0x1, 0x0) r3 = socket(0x24, 0x2, 0x0) setsockopt(r2, 0x6, 0x42, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x40) ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f0000000200)) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCCBRK(r4, 0x2000747a) syz_open_pts() setsockopt(r3, 0x0, 0x2, &(0x7f0000000080)="d25a90394de42348ab9be7008f52835ee4f3caaf01", 0x15) 2.633155636s ago: executing program 1 (id=1065): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0xfa) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0xb, 0x30, 0x5, 0x3fe, 0x80010001, 0x5, 0x10, [{0x0, 0x4006, 0x7, 0x9}, {0x8c5f, 0x0, 0x800, 0xb}, {0x3a77, 0x5, 0x3, 0x400}, {0x80000000, 0xd, 0x10b, 0x1de}, {0x2401, 0xff59, 0x1002808, 0x7}, {0x20000008, 0x204, 0x2, 0xb3}, {0xce4, 0x91, 0x8, 0xfffffffe}, {0x1, 0x9, 0x7ff, 0xe}, {0x4, 0x9, 0x9, 0x7}, {0xa, 0x1, 0x2cee, 0x80000001}, {0x1bd, 0x80000002, 0x0, 0x4}, {0x80, 0xdaf, 0x7, 0x8000003}, {0x3, 0x3, 0xd, 0x2}, {0x9, 0xfffffffd, 0x0, 0x9}, {0x2, 0x9, 0x1, 0xfffffffd}, {0x3, 0xffffffff, 0x1, 0x200009}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pwritev(r0, &(0x7f00000005c0)=[{&(0x7f0000000300)="53e1fb1dc7a12de7886085834e8996404bfc98641710a80dfafa2ce3c3ea2e1d55ea53ff8dc089a78fc7f470d042504175f124bd351d5fc44ae480c71336d9b3c0d840dd9e2c00405c85b2081f023dc13cf8d9da77ace6cc69b5a44b3e34f7d24f850bdf6d9d91237de4d5b0a5070e3aa19921bd515e0a23ca057d56bb9c2f6d29c6cff17362f26cd0f1ec3ba9d4f5767aacf779", 0x94}, {&(0x7f0000000000)="55ee9eebff2c8358895236d47918db2cee1e4890c83d4266a4f82b37", 0x1c}, {&(0x7f00000003c0)="e7e85687465fe683f901248a060fe48f2ffb8b63ad12e93dadc84be19c503bb655e4fa22aadf0f854a12bb3db74bd461c22e2e882d676413001661c3327b992bd788b9bf9c33c80c3715dea917ae9800d0470f60c46d7d27e2f33b92802d1186b7420ab0c4b384d54adcc38f7cbb09447da0efa9ad8ee9ee378667174a6b8ec22402bafdb3b3057a95e1e1591b6ed665174ed044d5a1463ce19320b21bc68c855feb15ee8ac9f09045796f51f82e414f68b08dcf4a7bc0c307e842c1b93892c94a4f47e235ecdb64726700ae0f32233fee1f7843", 0xd4}, {&(0x7f00000004c0)="44001eed202f176a972816abd36da91c31da5dfeda809f1b54e4b30cd3d9dfb0b1f0fed45eba3d3a4948730dae513c6a34ebd95a3a1f0a378d5551f427eda7f8f1b2ac2732b656c9fa4921ab949362783bb56a4d6aaace4670249b7c5c3b07bb08620526b00fae5f8bba3661dadf56da56b75fa7175267ddc0fb00e5cf9546ccb9ebf5558d63460f3d31c49cb07a735eeca7c2e42abe5ab99acfaea359835d4048a0d3aafeb9adbe21f408c0044c74a7b83bd0e25dd618b27ddc0823b2df24f20293b56aa087521ee224ca2a6b4a0e1cabd034751bd0e267ba6de84b9a71d85386d0917507", 0xe5}, {&(0x7f0000000040)="e95c62abb9b30e65efe05dd395c047f91b70da163b53062f2ba5e759246c445083033803f80aeb27bef7c0f62dfece446bd7849b5edb8dab5af31755d7b4", 0x3e}, {&(0x7f00000000c0)=' N', 0x2}], 0x6, 0x2) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000680)={&(0x7f0000000240)='./file1\x00', 0x6, &(0x7f0000000640)='./file0/file0\x00', 0xe}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="526744b5b8cc0c16963034f2ed08f1b8d64e2217f981aa6a00ef1d35e6abbbdabb26a52ad7f4601faa90", 0x2a}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x20}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) socket(0x18, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x26, 0x0, 0x0, 0x0, 0x1f, 0x2}, 0x806) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) ioctl$VNDIOCGET(r0, 0xc4104603, &(0x7f00000006c0)={'./file0\x00', 0x3, 0x5, 0x8}) unveil(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='x\x00') mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x2, 0xfa) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0xb, 0x30, 0x5, 0x3fe, 0x80010001, 0x5, 0x10, [{0x0, 0x4006, 0x7, 0x9}, {0x8c5f, 0x0, 0x800, 0xb}, {0x3a77, 0x5, 0x3, 0x400}, {0x80000000, 0xd, 0x10b, 0x1de}, {0x2401, 0xff59, 0x1002808, 0x7}, {0x20000008, 0x204, 0x2, 0xb3}, {0xce4, 0x91, 0x8, 0xfffffffe}, {0x1, 0x9, 0x7ff, 0xe}, {0x4, 0x9, 0x9, 0x7}, {0xa, 0x1, 0x2cee, 0x80000001}, {0x1bd, 0x80000002, 0x0, 0x4}, {0x80, 0xdaf, 0x7, 0x8000003}, {0x3, 0x3, 0xd, 0x2}, {0x9, 0xfffffffd, 0x0, 0x9}, {0x2, 0x9, 0x1, 0xfffffffd}, {0x3, 0xffffffff, 0x1, 0x200009}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) pwritev(r0, &(0x7f00000005c0)=[{&(0x7f0000000300)="53e1fb1dc7a12de7886085834e8996404bfc98641710a80dfafa2ce3c3ea2e1d55ea53ff8dc089a78fc7f470d042504175f124bd351d5fc44ae480c71336d9b3c0d840dd9e2c00405c85b2081f023dc13cf8d9da77ace6cc69b5a44b3e34f7d24f850bdf6d9d91237de4d5b0a5070e3aa19921bd515e0a23ca057d56bb9c2f6d29c6cff17362f26cd0f1ec3ba9d4f5767aacf779", 0x94}, {&(0x7f0000000000)="55ee9eebff2c8358895236d47918db2cee1e4890c83d4266a4f82b37", 0x1c}, {&(0x7f00000003c0)="e7e85687465fe683f901248a060fe48f2ffb8b63ad12e93dadc84be19c503bb655e4fa22aadf0f854a12bb3db74bd461c22e2e882d676413001661c3327b992bd788b9bf9c33c80c3715dea917ae9800d0470f60c46d7d27e2f33b92802d1186b7420ab0c4b384d54adcc38f7cbb09447da0efa9ad8ee9ee378667174a6b8ec22402bafdb3b3057a95e1e1591b6ed665174ed044d5a1463ce19320b21bc68c855feb15ee8ac9f09045796f51f82e414f68b08dcf4a7bc0c307e842c1b93892c94a4f47e235ecdb64726700ae0f32233fee1f7843", 0xd4}, {&(0x7f00000004c0)="44001eed202f176a972816abd36da91c31da5dfeda809f1b54e4b30cd3d9dfb0b1f0fed45eba3d3a4948730dae513c6a34ebd95a3a1f0a378d5551f427eda7f8f1b2ac2732b656c9fa4921ab949362783bb56a4d6aaace4670249b7c5c3b07bb08620526b00fae5f8bba3661dadf56da56b75fa7175267ddc0fb00e5cf9546ccb9ebf5558d63460f3d31c49cb07a735eeca7c2e42abe5ab99acfaea359835d4048a0d3aafeb9adbe21f408c0044c74a7b83bd0e25dd618b27ddc0823b2df24f20293b56aa087521ee224ca2a6b4a0e1cabd034751bd0e267ba6de84b9a71d85386d0917507", 0xe5}, {&(0x7f0000000040)="e95c62abb9b30e65efe05dd395c047f91b70da163b53062f2ba5e759246c445083033803f80aeb27bef7c0f62dfece446bd7849b5edb8dab5af31755d7b4", 0x3e}, {&(0x7f00000000c0)=' N', 0x2}], 0x6, 0x2) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) (async) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000680)={&(0x7f0000000240)='./file1\x00', 0x6, &(0x7f0000000640)='./file0/file0\x00', 0xe}) (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="526744b5b8cc0c16963034f2ed08f1b8d64e2217f981aa6a00ef1d35e6abbbdabb26a52ad7f4601faa90", 0x2a}], 0x1) (async) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x20}, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x18, 0x1, 0x0) (async) close(r1) (async) socket(0x18, 0x2, 0x0) (async) sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x26, 0x0, 0x0, 0x0, 0x1f, 0x2}, 0x806) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) ioctl$VNDIOCGET(r0, 0xc4104603, &(0x7f00000006c0)={'./file0\x00', 0x3, 0x5, 0x8}) (async) unveil(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='x\x00') (async) 2.569474016s ago: executing program 1 (id=1069): r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000000)={&(0x7f0000000280)=[{0x8}], 0x1}) ioctl$WSDISPLAYIO_SBURNER(r0, 0x800c5751, &(0x7f0000000080)={0x400, 0x25, 0x8}) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0xfffffffffffffffe, &(0x7f0000000040)=0x5fff37910a0695e4, 0x0, 0x0) 2.567637521s ago: executing program 1 (id=1072): socket(0x2, 0x4001, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x8, 0x5, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x7e8a, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0x9e8, 0x525, 0x5e, 0xac5c, 0x80000000000001fe, 0x2, 0x0, 0x9], [0x100000001, 0x8000, 0x3ffffffe, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0xfffc, 0x22, 0x5, 0xfffffffffffffff8}, {0x4, 0x0, 0xfffffffe, 0x7d}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0xfffffffe, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x4}, {0x0, 0x0, 0xfffffff9}, {0x3, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0xfbfe, 0x3, 0x6d5, 0x4}}}) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc5005601, &(0x7f0000000000)={0x31, 0x0, [{&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xffffffffffffff4f}, {&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x3}, {0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x2}, {&(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000002000/0x1000)=nil, 0x100000000}, {&(0x7f0000004000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x5}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7b}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x800000}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x8}, {0x0, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x6}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7}], './file0\x00'}) ioctl$VMM_IOC_INTR(r0, 0xc0285602, &(0x7f0000000040)={0x1, 0x0, 0x1}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0xffffffffffffff33) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r1, 0x80086d01, &(0x7f0000000500)={0x0, 0x0, 0x0}) fcntl$dupfd(r0, 0xa, r1) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000000)={0x0, 0x567, 0x0}) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) r3 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4) ioctl$FIONREAD(r3, 0xc028756b, &(0x7f00000001c0)) open$dir(&(0x7f0000000380)='./file0\x00', 0x100, 0x40) r4 = kqueue() kevent(r4, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r6 = fcntl$dupfd(r5, 0x3, 0xffffffffffffffff) pread(r6, &(0x7f0000000080)=':', 0x1, 0x81) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x140) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xf66d, 0xe6fc, 0x9, 0x5fffff5f, "9cdc452e307e0804212f4c000000229e68cd3304", 0x400, 0xfffff197}) ioctl$VNDIOCSET(r7, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x3, 0x3, 0x1, 0xe, "e04537ad708fe59ca12d8f31d4b7950371986597", 0xd, 0x18}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x9d6) 2.322160208s ago: executing program 7 (id=1083): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)='#!', 0x2}], 0x1) write(r0, &(0x7f0000000080)="9020202e000000ff4242000000005624b77b6a0a", 0x14) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$tty(0xffffffffffffff9c, &(0x7f00000029c0), 0x200, 0x0) clock_getres(0x4, &(0x7f0000002f80)) 2.267797526s ago: executing program 7 (id=1085): socket(0x11, 0x3, 0x0) openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) sysctl$kern(&(0x7f00000005c0)={0x1, 0x48}, 0x2, 0x0, 0x0, &(0x7f0000000340)="05000000", 0x4) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x2, 0x5bf3, 0x5, 0x44, 0x8001, 0x6, 0x6616, 0x10, [{0x1, 0xb, 0xfffffc00, 0x7}, {0x2, 0x47, 0x7fa, 0x8}, {0x81, 0x6, 0x10}, {0x4, 0x1, 0x8000, 0x7fffffff}, {0x6, 0xff, 0x80000001, 0x96a}, {0x8, 0xc, 0xd2, 0xfffffff8}, {0xf6e, 0x7ff, 0x100, 0xfffffffd}, {0x10, 0x4, 0x3, 0xd5bf}, {0x10000, 0x10, 0x901, 0x9}, {0x7, 0x7, 0x1, 0x80000001}, {0x1000000, 0x4, 0x7, 0x10001}, {0x8, 0x9, 0x54ddb2e5, 0xff}, {0x920, 0x1, 0xb, 0x7ff}, {0x45467d2e, 0x3, 0x6, 0x3}, {0xffffffff, 0x2, 0x6, 0x16}, {0x9, 0xffff7fff, 0x7, 0x2}]}) getuid() (async) r1 = getuid() mknod(&(0x7f0000000080)='./file0\x00', 0x8, 0x7) getgroups(0x1, &(0x7f0000000040)=[0x0]) chown(&(0x7f0000000000)='./file0\x00', r1, r2) 2.265174021s ago: executing program 7 (id=1089): setrlimit(0x1, &(0x7f0000000000)={0xffffeffffffffffd, 0xfffffffffffdffff}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2006, 0x4f4b) acct(&(0x7f0000000000)='./bus\x00') r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) open(&(0x7f0000000080)='./file0\x00', 0x615, 0x40) r1 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) open(0x0, 0x615, 0xb2) r3 = socket(0x18, 0x3, 0xf9) ioctl$FIONREAD(r3, 0x81206919, &(0x7f0000000100)) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) ioctl$FIONREAD(r1, 0xc1206925, &(0x7f0000000100)) getrusage(0xffffffffffffffff, &(0x7f0000000280)) r4 = open$dir(&(0x7f0000000140)='./file1\x00', 0x8, 0x10) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) fchmod(r4, 0xf3) setuid(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) connect$unix(r5, &(0x7f0000000200)=@abs={0x1, 0x0, 0x3}, 0x8) r6 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r6, 0x80105727, &(0x7f0000000980)) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mkdir(&(0x7f0000000180)='./file0\x00', 0x14) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x60) chmod(&(0x7f00000000c0)='./file1\x00', 0x8) 2.113350873s ago: executing program 1 (id=1094): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) r1 = socket(0x2, 0x1, 0x0) symlink(0x0, &(0x7f0000000040)='./file0\x00') r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r3) setsockopt$sock_int(r3, 0xffff, 0x800, &(0x7f0000000040)=0x9, 0x4) (async) bind(r3, &(0x7f0000000200)=@in6={0x18, 0x2, 0x5, 0x3}, 0xc) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000000), 0x10) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500003000000000002c907800000020e0001002"]) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) (async) r4 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) sysctl$net_inet_tcp(&(0x7f00000031c0)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, &(0x7f0000003280)='\x00\x00\x00\x00', 0x4) write(r4, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={0x3, 0x4, r0}) ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000140)={0x80, 0x9, 0xfffffffb, 0xe324, "7798837f60d6b424e71db91f5c5df6a390f670e4", 0xb8, 0x800}) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000500)="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", 0xb01}], 0x1) (async) read(r6, 0x0, 0x0) (async) r8 = socket(0x21, 0x3, 0x0) setsockopt(r8, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4) 1.665812015s ago: executing program 5 (id=1107): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0xf, 0x6, {[0x1, 0x400000000, 0x7, 0x100000000, 0x7, 0xf3e5, 0xdf5c, 0xfffffffffffffffe, 0x0, 0x2eff, 0xfffffffffffffffc, 0x9, 0xfffffffffffffff6, 0xa, 0x1, 0x200, 0xffffffffffffffff, 0x100], [0xba, 0x80000001, 0xfffffffffffffffd, 0xe3e, 0x5d, 0x3, 0x1fe, 0x0, 0x2000020000004, 0x9], [0x10000000, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x10fff, 0xffffffff00000000], [0x1, 0x5, 0x7ffffffffffffffc, 0x9, 0xfffffffffffffffd, 0x4], [{0x0, 0xffffffe7, 0x8, 0x7d06}, {0xfffc, 0x2, 0x6, 0x1}, {0x4, 0x900, 0x6b0, 0x83}, {0x3, 0x7, 0x6, 0xffffffffffffffff}, {0x0, 0x3, 0x2, 0x8}, {0x0, 0xfffffffb, 0x9, 0x2fa}, {0x1ffd, 0x30000, 0x7, 0x3}, {0x0, 0x100, 0x0, 0x9}], {0x0, 0x6, 0x5, 0x36f}, {0x3, 0x80000004, 0x1000}}}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) setitimer(0x2, &(0x7f0000000340)={{0x7ffa, 0x100900000000009}, {0x7, 0x5}}, 0x0) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r2 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x60, 0x3, 0x7, 0xffffffff}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x58}, 0x2, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) r4 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, r4) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0xfffffffffffffffe, 0xb}, {0x2, 0x1}}, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0xc40) r5 = syz_open_pts() writev(r5, &(0x7f0000000300)=[{0x0}], 0x1) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0xc2, 0x3, 0x1, 0x40803, 0xfffeffff, 0x1, 0x0, 0x0, 0x2004007, 0xf5}) r6 = socket(0x18, 0x3, 0x0) getsockname$inet(r6, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$FIONREAD(r6, 0x8080691a, &(0x7f0000000100)) 1.665403099s ago: executing program 5 (id=1109): r0 = socket$inet(0x2, 0x1, 0x0) r1 = msgget$private(0x0, 0x104) msgsnd(r1, &(0x7f0000000380)={0x1}, 0x8, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0x34e}], 0x1) ioctl$TIOCSETA(r2, 0xc0504417, &(0x7f0000000740)={0x4bb, 0x1, 0x0, 0x400003, '\x00', 0x15, 0x10005}) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000600)=""/2) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x3010, r0, 0x80000000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/240, 0xf0}, 0x0) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) r5 = kqueue() kevent(r5, &(0x7f0000000200)=[{{r4}, 0xfffffffffffffff9, 0x20, 0xf0000000, 0x2000000000000d4, 0x7fffffffffffffff}], 0x96, &(0x7f0000000540), 0xfffb4961, 0x0) ioctl$TIOCSETA(r4, 0xcd604404, &(0x7f0000000040)={0x10000000, 0x2, 0x87a, 0x2f, "2800180000020002000000000068ab5ade800600", 0x6, 0x2}) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x38, 0x3a, 0x29, @rand_addr="000000000000000000020000008000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x0, 0x11, 0xc, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, [@dstopts={0x29}]}}}}}}}) 1.353713793s ago: executing program 0 (id=1123): r0 = socket(0x18, 0x3, 0xff) getsockopt(r0, 0x29, 0x1a, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x2, 0x7fff, 0x7, 0xd2, "00000000000000000000001500", 0x5c, 0x1}) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_INTR(r1, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x2005}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r3 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000100)) r4 = socket(0x18, 0x1, 0x0) socket(0x24, 0x2, 0x0) setsockopt(r4, 0x6, 0x42, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x40) ioctl$BIOCSRSIG(r2, 0x80044272, &(0x7f0000000200)) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCCBRK(r5, 0x2000747a) syz_open_pts() 1.290143796s ago: executing program 3 (id=1128): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r0 = open(0x0, 0x200, 0xc0) r1 = socket$inet(0x2, 0x3, 0x2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0x80206913, &(0x7f0000000100)) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa4, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010002, 0x10, [{0x0, 0x7, 0x1, 0x71002}, {0x3, 0xe, 0x8, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x10001, 0x800f, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x6}, {0x1000006, 0x8, 0x14, 0x5910}, {0x6000001, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1ce, 0x800, 0xdaa1, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0xcde, 0x7}, {0x6, 0xfffffffa, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x230003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$WSMOUSEIO_GCALIBCOORDS(r0, 0x41205725, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x48}, 0x2, &(0x7f00000011c0)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x0, 0x20, 0x3c, 0x0, @empty, @rand_addr=0xffffff}}}}}) 1.289782378s ago: executing program 3 (id=1129): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r2, &(0x7f0000000780)=""/192, 0xc0) sysctl$net_inet_carp(0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)="e1", 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) setsockopt$sock_int(r1, 0xffff, 0xbbb3c65c6055794c, &(0x7f0000000340)=0x623, 0x4) write(r1, &(0x7f00000013c0)='P', 0x1) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r3 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x122) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x40}, 0x2, &(0x7f00000001c0)="3758eec99f1a35621377f5fdd73a566ef61acf96d6c0170e757d5b15aeec240961ef84cb7c0bd0b883f78b382a74d45ea3d5ad0cb6d3f982b22b07c170a3753885197164943743009ffef978fe80f5be3196618e77766335d29b293ad06a0671c31b8c052a188aafaa148d5141654298279c7b3ed46e129ca7c3b474d14bf7bf75f9cab1f63cb23513014c17e89e73b461efc6ffffb011d4e92f85d462236a1cf1", &(0x7f0000000280)=0xa1, &(0x7f00000002c0)="0580c34c1abea0c01a468525b00a6930a1f6b89c52241e65520ce06b1a069f0af5b7250652eed57a974dfd61dda0fcf9ec8af3437d0a8b698d04ce6be5d9f5cc7688e3160185be77da531d4702aa66327763b40b30be1fb54b1a6590f0c005a5bbf4221c894e2d5dab12867b77a8c7ed9777a2b32a4354f8c6faabe396bd", 0x7e) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000180)=[{0x60, 0x5, 0x77, 0x2}, {0x7, 0x5, 0x1b, 0x3}, {0xe, 0x5, 0x5, 0x43356c7c}]}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x3, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f000036c000/0x1000)=nil, 0x2}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, 0x80000002}, {&(0x7f000055e000/0x4000)=nil, &(0x7f000032f000/0x2000)=nil, 0xa}, {&(0x7f0000613000/0x2000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f0000251000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x9}, {&(0x7f000043b000/0x1000)=nil, &(0x7f000076c000/0x4000)=nil, 0xffff}, {&(0x7f00000a5000/0x1000)=nil, &(0x7f000079e000/0x4000)=nil, 0xffffffffbffffff9}, {&(0x7f0000576000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5e04}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8}], './file0\x00', 0x3}) r4 = msgget(0x0, 0x3cd) msgrcv(r4, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_STAT(r4, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r5 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r5, 0xc0286988, &(0x7f00000001c0)) close(r1) fcntl$lock(r0, 0x9, 0x0) 1.123851668s ago: executing program 4 (id=1132): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x5, 0x9, 0x6, 0x1, "28cda57a1e806d07144f0c78f3ad0f9fcb38a114", 0x9, 0x80}) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x5, 0x9, 0x6, 0x1, "28cda57a1e806d07144f0c78f3ad0f9fcb38a114", 0x9, 0x80}) openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$TIOCSTAT(r0, 0x20007465, &(0x7f0000000080)) (async) ioctl$TIOCSTAT(r0, 0x20007465, &(0x7f0000000080)) ioctl$TIOCDRAIN(r0, 0x2000745e) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000100)='\xb1[/\x00', &(0x7f0000000140)='/dev/tty\x00', &(0x7f0000000180)='/dev/tty\x00', &(0x7f00000001c0)='(\x00', &(0x7f0000000200)='@\x00', &(0x7f0000000240)='#:\'\xf4\x00', &(0x7f0000000280)='/dev/tty\x00'], &(0x7f0000000340)=[&(0x7f0000000300)='@!#.$\x00']) ioctl$TIOCEXCL(r0, 0x2000740d) fchdir(r0) ioctl$TIOCSFLAGS(r0, 0x8004745c, &(0x7f0000000380)=0x1) setuid(0x0) r1 = msgget(0x1, 0x452) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000003c0), 0xc) (async) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc) fcntl$getown(r0, 0x5) (async) r3 = fcntl$getown(r0, 0x5) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000400)={{0xffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x40, 0x1}, 0x5, 0x5, r3, 0xffffffffffffffff, 0xe29, 0x3, 0xc, 0x6}) r4 = openat$dri(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dri/card0\x00', 0x100, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f00000004c0)={0x1}) ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f0000000500)=0x7) (async) ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f0000000500)=0x7) getuid() (async) r5 = getuid() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000540)=0x1) setsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000580)={r3, r5, r2}, 0xc) (async) setsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000580)={r3, r5, r2}, 0xc) fchown(0xffffffffffffff9c, r5, r2) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000005c0)={0x4, 0x400, 0x2, 0x10001, "f8078a410b137f8efa0d9aec0f0d6afdd1c9f5b0", 0x2, 0x2}) ioctl$TIOCNXCL(r0, 0x2000740e) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) ioctl$TIOCSTSTAMP(r0, 0x8008745a, &(0x7f00000006c0)={0x0, 0xe0}) (async) ioctl$TIOCSTSTAMP(r0, 0x8008745a, &(0x7f00000006c0)={0x0, 0xe0}) pwrite(r0, &(0x7f0000000700)="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", 0xff, 0xc29) r6 = fcntl$dupfd(r4, 0xa, r4) ioctl$WSKBDIO_GETMODE(r6, 0x40045714, &(0x7f0000000800)) chmod(&(0x7f0000000840)='./file0\x00', 0x46) openat$vmm(0xffffffffffffff9c, &(0x7f0000000880), 0x40, 0x0) (async) r7 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000880), 0x40, 0x0) ioctl$VMM_IOC_INTR(r7, 0x800c5606, &(0x7f00000008c0)={0x9, 0x10000, 0x8}) 1.122632493s ago: executing program 0 (id=1133): socket$unix(0x1, 0x5, 0x0) 1.122460711s ago: executing program 0 (id=1134): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x2d757366, 0x8, 0xb, 0xffffffed, "0a6400b72860147b00", 0x7, 0x100000e}) writev(r0, &(0x7f0000000380)=[{&(0x7f00000009c0)="5d77ad9076eaff968b6ce7336a5726195cdbba81cd1cec2f24872121a29bd8cef3b0a4537f7d50518efe58e37663d46f0ff36155aceecb7fe1d3a3dd03aade8502940dfb0b5d2079ffe8d2d86344e682a3726e855b2c6429df5b21deb88e40e8ac86a3c78ef6d4c475271b45ae150bd8e442d9677bec8ff53b78c1fa0e2ad5a632855217e06775c98ddb3da6fdf5747cb215b87be36528346a36a9ffd2c04e8ae196b186ec14f59b48c661ac49f2d4e2fad498a3f233ed456a96831647831f1dbc7c546a9e905ac56c5cdf72bd50b0864e4eb300aca033a2d6c194f4b498ae2bf487edd6c461bc7dc916237a85c21cd4b51ebf453ab4d7ee44e076e32b59c36918ec50a419cf374bf290e5f8f037926d9a905a0e7ee3ab448876793eb21da5f734925d76c04bbfa8452d49d923a2192c5076618293cd1b880713266d07f207c97b346b070e8361154a6bef374715570705e789bbaa90d3ad71a4013859e38c2875c06e7b7668010490445c6944e1f1797cd75325f11f5d30fdc50129ae990354324b0cb70cb9596436cc76b6dbf9f697f84ff16449a264a24693156ad6d7edd9264f4e4eab92d32ac8ffd89d3bf85cd0c02fd1b34ce671b4e89dcd17d2bbb1f4d259fb114435721bf6d9d12eee0272143d646bfad86316006112950c2d083b633ccb03a61366be44cbc338f868a892c636cf520a1db5de2ba621ce0612433b3b26946fb2d44b3c9cc8a0705ebd50d8f77fce26991cf235139000618745a59724e8f936c2bca4415d1629f2ce6296fe3e450f6ded7f90c6a7562fd9a7c607ff1d57204ff98f846264062858144ce4c719a1686d230f06e72f0004b4e290161db47fb378ffa6aa265e1958d86c8f7ffde8042f423c986298268cb165ff051dafe429202ad3a24271ec2f56a9788d8208124793a0b9a6d8383a37d9aa7a61b97ff92c064afdc2691b648b196b79aebc59914c95d5a97b0fbbb286eade902c7ce0085763f75fa920abe7db03e27b2cde939636abc177fdd32aad94b7d3df58c3a8a59a8f7b4b614d2ca4dc9eb89301a184ee78f447e60c3b9b297a75c20ab8b632735ce7563f1e125126f208ce18f9e626350fbf3762e5c191a7334cb7b7e1dd6e9474d339c42a77b8a16f6f721fd8f52be5729cf9e262ef46181faa1ea66611c2f2c533e6324e3c0e90be79aa5f69e2dbb43b166589ad6672a6457d0c836e104de005f20c87f24652d9c0e5fca4192283b744d9c2f6e252eeafd593978a8a3577317a62a50287570bdd53d68b89a21f49005b8ba2bea1beca79ff56c3b06a954c8346b29baf3c07ee82a62711f28fb8c185e0b5c1f58e96178c088d51c55d3be4cf51ba104c117d144cf6e35423711df55cdfab88e87f0651a8acdd2d90142f32c6e24363ce305738607a0a6eafd94f5ba1f48cf4c4eec5f07337f2098f6aef7bab3ec643f278df6664285212fe031487f2a32e9aa32590c739c3bf1fa1d4aadbf88f0bd07b9757dd8880047ba6b954f1abf8dfcd1127417719b4057b9f27145968b176430d49203312db58a2864ff8d7f8c2183d03e82d68b4b18d80bca3a41d0248abc83ad5ea033b47b5dbc9d34607ccaf2b8c28792759e2d9226d4249b1466cb07a9c7e9a24af05d8c861f9208873bc40e84f25934efe620c2d7d5190a13ca120aa8531420322d1a1576b0f9432afeeebb3d5aab62337ee875b09a108ac6c413858b5689fb5f430e5e0f9e1455a23e9ff93f7a8", 0x4d4}], 0x1) syz_open_pts() 1.122186204s ago: executing program 4 (id=1135): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f00001cc000/0x4000)=nil, 0x637d}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000628000/0x3000)=nil, 0x7ffffffffffffbfb}, {&(0x7f0000209000/0x1000)=nil, &(0x7f00001fc000/0x4000)=nil, 0x9}, {&(0x7f00006b5000/0x2000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdf7fffffffff7fa}, {&(0x7f00004c0000/0x4000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0xfffffffffffffffc}, {&(0x7f000056a000/0x2000)=nil, &(0x7f0000688000/0x2000)=nil, 0x101}, {&(0x7f00003ba000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, 0x5}, {&(0x7f0000242000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffdffffffffff9}, {&(0x7f0000181000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f000064b000/0x2000)=nil, &(0x7f00000eb000/0x3000)=nil, 0x2}, {&(0x7f0000331000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, 0x5}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000108000/0x3000)=nil, 0x234}, {&(0x7f0000271000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffff7}, {&(0x7f0000148000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000039fd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000019f000/0x2000)=nil, 0x4}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0xfffffffa}) (async) setsockopt(0xffffffffffffffff, 0x1000000029, 0x31, &(0x7f0000000080)="031000086941e7c5ce5876778f181b12184c256b1ca6f583b03f959b5253027d08", 0x21) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x80007, 0x0, 0x0, 0x0, 0x0, 0x199, 0x7}, 0x85c, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x1735, 0x8000004}) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802) r1 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x8, "210d0000000200000006000000000200", 0x2000000, 0x5}) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0]) 989.982575ms ago: executing program 3 (id=1136): open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) getitimer(0x2, &(0x7f00000000c0)) ioctl$WSDISPLAYIO_ADDSCREEN(r0, 0x80245753, &(0x7f0000000140)={0x7e1, './file0\x00', './file1\x00'}) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x50) 989.850699ms ago: executing program 3 (id=1137): socket(0x6, 0x1, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000640)) select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040), &(0x7f0000000080)={0xcb}, &(0x7f0000000180)) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x67, &(0x7f0000000000)={{0x3f, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x1) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 989.558705ms ago: executing program 3 (id=1138): r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x121) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x60) (async) syz_open_pts() syz_open_pts() (async) sysctl$kern(&(0x7f0000000240)={0x1, 0x3d}, 0x2, &(0x7f0000000500)="99dc719413f5aa45de7c66e9998cb58035c7f14372ecb5920dbc47e855", &(0x7f00000005c0)=0x1d, &(0x7f0000000600)="32ff63690f48839052dcd790631d26848ffd7278570cba1fa21664f8aaadf766a16321ea17ecc078c3b6a22f02232511d6c618eb4aa00079c2701750df9b27cfcc6eb82d97e772a7db652288cdf05b74e22aeb3e2abaf8038e9d309b67ca197eb14c9e1f6ae2e7ec2249f54167c959fca5c9dacfea77bb56cf2ec78d098e97af24b01b851682a543fdbc49cd8a7ded224b4de43002faa5e3ebacd45cdf7721b7cbda47a96768cff24f180c6896b7b43ea0a66562fd40a158754efabf23e4edee24684ec5fae668", 0xc7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) readv(r2, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/87, 0x57}], 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) (async) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) (async) r5 = open(&(0x7f0000000000)='./bus\x00', 0x100, 0x0) ioctl$TIOCSPGRP(r5, 0x40047463, 0x0) (async) recvmmsg(r3, &(0x7f0000000040)={&(0x7f00000009c0)={0x0, 0x17, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/212, 0xd4}], 0x1, 0x0, 0x7}, 0xdfff}, 0x10, 0x40, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) open(&(0x7f0000000980)='./bus\x00', 0x20000, 0x30) readlinkat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=""/75, 0x4b) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) clock_settime(0x100000000000000, &(0x7f0000000000)={0xfc1ecc7f}) sysctl$kern(&(0x7f0000000000)={0x1, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x88) symlinkat(&(0x7f0000000080)='./file0\x00', r7, &(0x7f0000000280)='./file0\x00') mquery(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x0, 0x0, r1, 0xffffffffffffffff) getpeername$unix(r5, &(0x7f0000000700)=@file={0x0, ""/508}, &(0x7f0000000900)=0x1fe) (async) setsockopt(r6, 0x8, 0x51, &(0x7f0000000400)="fc188812c09b26f2b8d54cf8882a4634b731daf7b43edaf978559d08e24db77a0cf699f321b5b93535cf21ebb73755d6bcd4938d4ceb8cc24e6047ca7318d75be8f95dea3b7b279b90794cfb49206e9917b4b278dd287de7ca2b030063aeff7c5344d48ee33fcf1f841987eaaafc67b5dd1322bc9b430c8df2e3fda1bb879bdc4beee2b96f929ce587a59da997ae6b6e77c4c60b20458f1e35dea7e6013dea16d7ceca1f8aae2935b7122eed621319f0d1dfab2953fca3ac70c802a398b181c111ce37b96b67c63affc7b65a87aa649baa55de6772242766fc1e045a0ce28e5ea1766d424dc1ca46d5d58f5bb8bc31397a", 0xf1) (async) shmget$private(0x0, 0x2000, 0x40, &(0x7f00002c0000/0x2000)=nil) (async) sendmmsg(r4, &(0x7f00000003c0)={0x0, 0x4009}, 0xffffffffffffffe0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) write(0xffffffffffffffff, &(0x7f0000001680)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0x1001c) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000940)=@abs={0x0, 0x0, 0x1}, 0x8) 985.872057ms ago: executing program 3 (id=1139): r0 = open(&(0x7f0000000000)='./file1\x00', 0x695, 0x48) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0xc8) setrlimit(0x1, &(0x7f0000000340)={0xfffffffffffffffd, 0xfffffffffffffffd}) open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) (async) r2 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) fchown(r2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x5, 0x2, 0x0, 0x0, 0x2, 0x1, 0x9, 0x200, 0x2, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x5, 0x2, 0x0, 0x0, 0x2, 0x1, 0x9, 0x200, 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x6, 0x5, 0x4, 0x0, 0x10, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x6, 0x4, 0x7, 0x8, 0x7, 0xa000, 0x40}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000800)={&(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0)=[0x0], 0x2, 0x1, 0x2, 0x1, 0x4, 0x9, 0x3a7, 0x50000}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000800)={&(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0)=[0x0], 0x2, 0x1, 0x2, 0x1, 0x4, 0x9, 0x3a7, 0x50000}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000b80)={&(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000b00)=[0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x2, 0x3, 0x0, 0x0, 0x8, 0xbfa, 0x4, 0x6, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000c80)={&(0x7f0000000c40)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffff, 0x9, 0x3, 0x4, {0x1, 0x3, 0x2, 0x3, 0x1ff, 0xf, 0x8, 0x5, 0xfff8, 0x8, 0x4, 0x0, 0x10000, 0x20, "f0f09fc08e234652cffc006872b9c65f6d919d336207ba60da6f390a9efe1174"}}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000c80)={&(0x7f0000000c40)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffff, 0x9, 0x3, 0x4, {0x1, 0x3, 0x2, 0x3, 0x1ff, 0xf, 0x8, 0x5, 0xfff8, 0x8, 0x4, 0x0, 0x10000, 0x20, "f0f09fc08e234652cffc006872b9c65f6d919d336207ba60da6f390a9efe1174"}}) socket(0x2, 0x3, 0x2) (async) r9 = socket(0x2, 0x3, 0x2) setsockopt$inet_opts(r9, 0x0, 0x6d, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={&(0x7f0000000d00)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x3, 0x8001, 0x3, 0x4daa, {0x1, 0x2, 0x1, 0x2, 0xf1b, 0x3, 0x99, 0x2, 0x8, 0x1, 0x5, 0x80000001, 0x100, 0x40, "1d94d0389fc46ef8cead2509c648b9f43148551eb6223135761ee54015a423c8"}}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000dc0)={&(0x7f0000000c00)=[r3, 0x0, r4, r5, r6, r7], 0x6, r8, r10, 0x0, 0xaf8, 0x3, 0x1, {0x7fffffff, 0x8, 0x9, 0x8001, 0xfff8, 0x1, 0x9, 0x8, 0xffff, 0x7, 0xffff, 0x32d, 0x1, 0x1, "9e6e3d2c3e091ba85cf48ce2f3896ff8a7a2bca89fe8f1beaa933a5f2fc270d1"}}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000dc0)={&(0x7f0000000c00)=[r3, 0x0, r4, r5, r6, r7], 0x6, r8, r10, 0x0, 0xaf8, 0x3, 0x1, {0x7fffffff, 0x8, 0x9, 0x8001, 0xfff8, 0x1, 0x9, 0x8, 0xffff, 0x7, 0xffff, 0x32d, 0x1, 0x1, "9e6e3d2c3e091ba85cf48ce2f3896ff8a7a2bca89fe8f1beaa933a5f2fc270d1"}}) close(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) kqueue() (async) r11 = kqueue() kevent(r11, &(0x7f0000000340), 0xe4a, 0x0, 0x4000a9fa, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r12 = syz_open_pts() fcntl$lock(r12, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000000}) 728.586923ms ago: executing program 4 (id=1140): open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x326, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, &(0x7f0000001280)=@file={0x0, ""/251}, &(0x7f00000008c0)=0xfd) (async) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f0000001100), 0x4) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105727, &(0x7f0000000300)={&(0x7f0000000000)=[{0x100, 0x3}, {0x21, 0x100}, {0x6, 0xb113}, {0x20, 0x8}], 0x4}) 728.350473ms ago: executing program 4 (id=1141): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x43, 0x0, 0x0, 0x0, 0x0, 0x80, 0xae38}, 0x23d, 0x6, 0x2}) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x43, 0x0, 0x0, 0x0, 0x0, 0x80, 0xae38}, 0x23d, 0x6, 0x2}) setuid(0xffffffffffffffff) semget(0x0, 0x1, 0x281) (async) r0 = semget(0x0, 0x1, 0x281) mprotect(&(0x7f000005a000/0x3000)=nil, 0x3000, 0x2) sysctl$vm(&(0x7f0000000000)={0x2, 0x7}, 0x2, &(0x7f0000001240)="8d0009a4", &(0x7f00000001c0)=0x4, 0x0, 0x0) semctl$SETVAL(r0, 0xff7f0000, 0x8, 0x0) 728.123689ms ago: executing program 4 (id=1142): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async, rerun: 64) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0x5ff}, 0x10) (rerun: 64) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0xa) (async) open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) (async) mknodat(r0, &(0x7f00000001c0)='./file0\x00', 0x1, 0x3402) (async) open$dir(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = socket(0x1, 0x1, 0x0) close(r1) (async) socket(0x18, 0x3, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async, rerun: 32) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async, rerun: 32) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) pledge(0x0, &(0x7f0000002840)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00'/659) (async, rerun: 32) sendmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0xa, &(0x7f00000001c0)=[{&(0x7f0000000580)="afc0e7a0665e82578674a5a3587b465215b08b74d7df891169949c68ff1a1e907b79c332a059e29038da5c3f25f0f1fa0a97dd2038dd4da094fa81936c3b3bf7186126d7ba54224bc95ecfbfd335ddc87f677ea11369da26bb4f433b83b3b18c5397a54fb477a8f241d7eae81da0d6db4f119c71674744f30d558433cbc86a801d1adbf4b1dd6b1b084680aaba8623a531ff61e8dbd8bd16b482624e26e2f26ce9e5cde8ddb62fc79c7886da88c116e19de1f8c0eaaf3e070266ff69cf940a5746cf61", 0xc3}, {&(0x7f0000000680)="07b478b52d7080dc51805d38ea868a1be04fb03964f358eb89a051b53a5a1f452e61b793fc7e763415eca1b9e60d1a2b28c2606eeeba8e218e44c4db1a33a903e6ebd3b5ae7541c7d9fe0dd173748e9fb76a79743745c2aa2c4a4bd8e8c64b09de1dbdffd8b2315de7cb1add1e205a03bf10e6977281665f77b9ce36f7665fca119570e44f189a1967aab37552ab4d82d6c0776de4ba190df994793a08a8bda0a98bfac6330f756af0771de78029bac365c33274bcfb31d41952fe03a97c94bc871d363b38b18e5dd86abf64c79cb68052c3", 0xd2}, {&(0x7f0000000780)="4443490bbda7ebd301672568be03543734791acd33868fa3981c5d5276e9c794661f1239efac8203a11575593e303d9414d0827d92800c095b0c212167244ce7167166c616b071f5f4b7a7c47bd781da13e3f8f51a74b86342fda8430ba350b2b360b993a45c802edb09adc32b61a1a7c97b7443c489dba373511bbed4ce8039a3a849a456567983c4b1c34c782b7c07eb58389e84f0a4b5e4ac0292bd50af83fe5a4891aada6d18c625f405806be13582505e303dcf05158dbb2125f9205885230397dc166b9b16b809cfd95c351c103c365f600f4505aee08746b11320962e332a94fb6bf0e11921829d539e", 0xed}], 0x3, &(0x7f00000003c0)=ANY=[], 0x28, 0x4}, 0x0) (async, rerun: 32) mknodat(r2, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) (async, rerun: 32) sysctl$kern(&(0x7f0000000240)={0x1, 0x29}, 0x2, 0x0, 0x0, &(0x7f0000000300), 0x0) (rerun: 32) r3 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x4ebfac6bbaf782c) (async, rerun: 64) r4 = socket(0x18, 0x3, 0x0) (rerun: 64) shutdown(r4, 0x2) (async) ioctl$VNDIOCCLR(r3, 0x40046b01, &(0x7f0000000200)={0x0, 0x10000, 0x0}) (async) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) (async, rerun: 32) r5 = socket(0x18, 0x2, 0x0) (rerun: 32) setsockopt(r5, 0x1000000029, 0x26, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x10, r0, 0x0) (async) setsockopt$sock_int(r1, 0xffff, 0x1002, &(0x7f0000000400)=0x4c0d, 0x4) (async) minherit(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3) 726.994206ms ago: executing program 4 (id=1143): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffd2}], 0x1) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100dd2d018000000000005e00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x59}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000001180)="678314c7", 0x4) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x1}, 0x3, 0x0, 0x0, &(0x7f0000001180)="678314c7", 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f0000003940)='\n', 0x1}], 0x1) readv(r0, &(0x7f0000000780)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/4096, 0x1000}], 0x2) 614.789034ms ago: executing program 5 (id=1144): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000600)={&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[], 0x220}, 0x7f}, 0x10, 0x7) sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x6a, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x1, 0x2, 0x6, 0x1, 0x26f, 0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, 0x8, 0x7f, 0x3, 0x200, {0x5, 0x2, 0x4, 0x8000, 0x81, 0x3, 0x4, 0x40, 0x8001, 0x2, 0x4, 0x7, 0x1, 0x79, "8771381ff418a449827dc43d3d014d6425370749854d4a3c0d6be5184110eec7"}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x2, 0x7, 0x9, 0x1, 0x200, 0xe28, 0x5, 0x80000001}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000200)=[0x0, r2], 0x2, r3, r4, 0x1, 0x7f, 0x7, 0x401, {0x5, 0x0, 0xfff9, 0x3, 0x0, 0x7f, 0x8, 0xfff1, 0x7, 0x9, 0xb1f, 0x101, 0x0, 0x10, "2a1efbeceddbae44fd6732733e7ceac6fd6cb75aac51c49b74b5dbc6318f7f4c"}}) 604.64786ms ago: executing program 5 (id=1145): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000013c0)}], 0x1) mknod(0x0, 0x100000000205f, 0x2a02) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x81, 0xf0, 0xff}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffffc, 0xb, 0x7e7, 0x9, 0x8, 0x210, 0x0, 0x3}, 0x0, 0x0, 0x0) mknod(0x0, 0x2000, 0x205b9a) r1 = kqueue() kevent(r1, 0x0, 0x200, &(0x7f00000001c0), 0x8, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x80, 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x56}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet(0x2, 0x2, 0x0) r3 = dup(r2) setsockopt$inet_opts(r3, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) r4 = socket(0x2, 0x3, 0x20) r5 = dup(r3) dup2(r5, r4) connect$unix(r4, &(0x7f0000000000), 0x10) sendto(r3, &(0x7f0000000080)="e7ff520000000000", 0x90, 0x0, 0x0, 0x0) r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x1a2c, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r6, 0x0) r7 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r8 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r8, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2010, r7, 0x0) socket$unix(0x1, 0x5, 0x0) 450.940481ms ago: executing program 7 (id=1146): mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) (async, rerun: 64) getpid() (async, rerun: 64) socketpair(0x0, 0x8000, 0xff, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, &(0x7f0000000200)) (async) ktrace(0x0, 0x1, 0x4000040e, 0xffffffffffffffff) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) setrlimit(0x1, 0x0) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) r3 = socket(0x18, 0x3, 0x1) getsockopt(r3, 0x29, 0x40, 0x0, 0x0) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2010, r1, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000080), &(0x7f0000000180)=0xc) (async) close(r2) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x1}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x5}, {0x2}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {0x0, 0x5}, {0x4, 0x7b0b}, {0x0, 0x10001}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {0x2, 0x2800}, {}, {}, {}, {0x0, 0x7}, {0x2, 0xa}, {0x1, 0x1ff}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, &(0x7f0000000040), 0x0, 0x0) (async) msgget(0x1, 0x361) (async, rerun: 64) r5 = open(&(0x7f0000000200)='./file0\x00', 0x80, 0x100) (rerun: 64) ioctl$BIOCSRTIMEOUT(r5, 0xc0307004, &(0x7f0000000080)={0x2, 0x2000000f}) (async) r6 = msgget(0x3, 0x208) msgctl$IPC_SET(r6, 0x1, 0xfffffffffffffffe) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f000057e000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f00002cf000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffd}, {0x0, &(0x7f00004f5000/0x4000)=nil, 0x10000}, {&(0x7f00003d5000/0x11000)=nil, &(0x7f000049e000/0x3000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f000036f000/0x2000)=nil, 0x2}, {&(0x7f000054a000/0x1000)=nil, &(0x7f000028b000/0x3000)=nil, 0xa04}, {&(0x7f00003de000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xffdffbfffffffffe}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000281000/0x4000)=nil, &(0x7f0000463000/0x1000)=nil, 0x3ffffffffffff}, {&(0x7f00004c1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1ffffffff}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000006c000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000463000/0x3000)=nil, 0x4}, {&(0x7f00000cf000/0x1000)=nil, &(0x7f000028b000/0x4000)=nil, 0x9}], './file0\x00'}) (async, rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) (rerun: 64) r7 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x2, 0x101) ioctl$FIONREAD(r7, 0xc0106978, &(0x7f0000000140)) 450.708308ms ago: executing program 1 (id=1147): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0x2890, 0x10000, 0x71002}, {0x6, 0xe, 0x20000008, 0xfffffff9}, {0x38a9, 0x6, 0xfffffffc, 0x9}, {0x4, 0x800, 0x800f, 0x7}, {0x1c, 0x10000, 0x7, 0x9}, {0x1, 0x653, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x6}, {0x1000006, 0x0, 0x10013, 0x5910}, {0x2000002, 0x0, 0x6, 0x6}, {0x200000b, 0x8009, 0x1000}, {0x1d0, 0x1, 0xdaa1, 0x3}, {0x4, 0xa, 0x8}, {0x4, 0x2, 0x89, 0x8}, {0x29a71717, 0x7f, 0xa, 0x7}, {0x800, 0x3, 0x9654, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) r3 = socket(0x24, 0x2, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x2400, './file0\x00'}, 0x40) fcntl$lock(r2, 0x9, &(0x7f0000000080)={0x1, 0x1, 0x0, 0x1ffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x1, 0x1, 0x7fffffffff7fffff, 0x200000004, 0xffffffffffffffff}) r4 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) close(r4) syz_open_pts() preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) 449.340833ms ago: executing program 5 (id=1148): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0) r0 = socket(0x800000018, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x404) 266.139563ms ago: executing program 5 (id=1149): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xb, 0x2761, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x80}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0xfffffffc, 0x10000003, 0xb, 0x1, 0x1ff, 0x7f, 0x1000003f, 0x0, 0x2, 0xfd, 0x8}) r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x2000009, 0x1, 0x7, 0xd4, 0xa, 0x1, 0x0, 0x10, [{0xfe5, 0x7, 0x0, 0x1}, {0x39, 0x7, 0x1000, 0x9}, {0x10000008, 0x0, 0x0, 0x40004}, {0x5, 0x9a13, 0xb}, {0x2, 0xffffff, 0x810, 0xfffc}, {0x6, 0x0, 0x0, 0x5}, {0x4, 0xfffffffb, 0xfffffffc, 0x10000071}, {0xa, 0x20000000, 0x5, 0x8}, {0x3, 0x81, 0x1, 0x80000009}, {0x6, 0x0, 0x5, 0x2}, {0x81, 0xfffb, 0x80000004}, {0xfffffffd, 0x40, 0x8, 0x4}, {0xe0, 0x4, 0x3, 0x6}, {0x10, 0xfffff956, 0x4, 0x5}, {0xfffffffd, 0x6, 0xb, 0x1ffffffd}, {0x10000000, 0x1, 0x4, 0xc3}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xc, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x100000000008, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r3, &(0x7f00000000c0)="4ce554", 0x3) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) close(r1) 265.847847ms ago: executing program 0 (id=1150): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f00000006c0)=0xbcff) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000180)={&(0x7f0000000200)='./file0\x00', r0, 0x3}) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) ioctl$FIONREAD(r1, 0xc0286988, &(0x7f0000000100)) syz_emit_ethernet(0x1000e, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "15f2ff", 0xffc2, 0x0, 0x0, @rand_addr="eee21f0000003c00000500004c58053b", @local={0xfe, 0x80, '\x00', 0x0}}}}}) madvise(&(0x7f00001cf000/0x4000)=nil, 0x4000, 0x1) 265.279032ms ago: executing program 6 (id=1151): r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x20) truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000400)="2355369c", 0x4}], 0x1) r1 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x188) fcntl$setown(r1, 0x6, 0x0) 262.90504ms ago: executing program 6 (id=1152): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000b40)={0x7ff, 0x1, 0x2000007, 0x20105, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x10a6d, 0x99ad, 0x1071000}, {0x7, 0x0, 0x8007, 0xfffffffb}, {0x8, 0x400005, 0x4, 0x9}, {0x9, 0x802, 0x800, 0xfffffffc}, {0xfffffffb, 0x4, 0x2800, 0xc}, {0xfffffdff, 0xa, 0x3, 0x99}, {0x1, 0xffff8000, 0x0, 0x6d}, {0x202, 0x803, 0xb, 0x2d}, {0x2, 0xe, 0x285, 0xb}, {0xf, 0x95, 0xd1f, 0x4000c}, {0x1001cf, 0x3, 0xb, 0x2}, {0x7ff, 0x9, 0x744c01d5, 0x4009}, {0xb89, 0x0, 0xc, 0x5}, {0x29a71717, 0x7e, 0xfffffffb, 0x8}, {0x3, 0x5, 0x9, 0xb}, {0x4, 0xb1a, 0xe7, 0x30002}]}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETA(r0, 0xc4504443, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x6, 0x6}) 262.60338ms ago: executing program 6 (id=1153): r0 = msgget(0x3, 0x183) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d37258647597) ioctl$BIOCSETIF(r1, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) ioctl$BIOCSETIF(r1, 0x40384900, 0x0) close(r1) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setuid(r2) msgrcv(r0, &(0x7f0000000040)={0x0, ""/125}, 0x85, 0x1, 0x1000) sysctl$machdep(&(0x7f0000000100)={0x7, 0x1}, 0x2, &(0x7f0000000140)="5b48eb70", &(0x7f0000000000)=0x4, &(0x7f00000001c0), 0x0) msgget(0x3, 0x183) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async) open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d37258647597) (async) ioctl$BIOCSETIF(r1, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r1, 0x40384900, 0x0) (async) close(r1) (async) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000180), &(0x7f00000001c0)=0xc) (async) setuid(r2) (async) msgrcv(r0, &(0x7f0000000040)={0x0, ""/125}, 0x85, 0x1, 0x1000) (async) sysctl$machdep(&(0x7f0000000100)={0x7, 0x1}, 0x2, &(0x7f0000000140)="5b48eb70", &(0x7f0000000000)=0x4, &(0x7f00000001c0), 0x0) (async) 110.534584ms ago: executing program 2 (id=1154): r0 = socket(0x2, 0x3, 0x0) r1 = accept$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) setsockopt$sock_int(r1, 0xffff, 0x4, &(0x7f0000000040)=0x80000001, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, &(0x7f0000000080)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0xffea) 108.821345ms ago: executing program 0 (id=1155): open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) r0 = getpid() setrlimit(0x8, &(0x7f0000000040)={0xa, 0x52}) r1 = syz_open_pts() socket(0x11, 0x3, 0x0) (async) socket(0x11, 0x3, 0x0) close(r1) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) (async) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) open(&(0x7f0000000300)='./file0\x00', 0x80000000008206, 0xc3) sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) setrlimit(0x8, 0x0) (async) setrlimit(0x8, 0x0) syz_open_pts() ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x3, [{&(0x7f0000a73000/0x4000)=nil, &(0x7f0000ec8000/0x3000)=nil, 0x8}, {&(0x7f00007c3000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x100000001}, {&(0x7f0000a1c000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x100000100}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000ccd000/0x1000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000dd2000/0x2000)=nil, 0x4}, {&(0x7f000046c000/0x2000)=nil, &(0x7f0000fd7000/0x3000)=nil, 0xfffe}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000a3d000/0xd000)=nil}, {&(0x7f0000d8e000/0x3000)=nil, &(0x7f0000aff000/0x1000)=nil, 0xa}, {&(0x7f0000f6a000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000795000/0x1000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x4000000000000000}, {&(0x7f000082f000/0x4000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x7}, {&(0x7f0000baa000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f00000c6000/0x4000)=nil, &(0x7f0000c5e000/0x4000)=nil}], './file0\x00', 0x6}) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x3, [{&(0x7f0000a73000/0x4000)=nil, &(0x7f0000ec8000/0x3000)=nil, 0x8}, {&(0x7f00007c3000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x100000001}, {&(0x7f0000a1c000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x100000100}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000ccd000/0x1000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000dd2000/0x2000)=nil, 0x4}, {&(0x7f000046c000/0x2000)=nil, &(0x7f0000fd7000/0x3000)=nil, 0xfffe}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000a3d000/0xd000)=nil}, {&(0x7f0000d8e000/0x3000)=nil, &(0x7f0000aff000/0x1000)=nil, 0xa}, {&(0x7f0000f6a000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000795000/0x1000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x4000000000000000}, {&(0x7f000082f000/0x4000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x7}, {&(0x7f0000baa000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f00000c6000/0x4000)=nil, &(0x7f0000c5e000/0x4000)=nil}], './file0\x00', 0x6}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$FIONREAD(r1, 0x800474c4, &(0x7f00000003c0)) writev(r1, &(0x7f00000036c0)=[{&(0x7f0000000080)="b23335b24db3b6de6a9485cc", 0xc}], 0x1) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, r0) 79.243548ms ago: executing program 0 (id=1156): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) rmdir(&(0x7f0000000040)='./file1\x00') select(0x40, &(0x7f0000000180)={0xb, 0x4, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x80}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x6, 0x10000003, 0x3, 0x1, 0x4, 0xf, 0x1, 0x1, 0x2, 0x4001, 0x6}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x9, 0x1200, 0xb, 0x1, 0x1ff, 0x7f, 0x1000003f, 0x0, 0x2, 0xfd, 0x8}) r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) sysctl$kern(&(0x7f0000002140)={0x1, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4) close(r1) 77.063386ms ago: executing program 2 (id=1157): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000580)="5a2d0b21c138b9caf96b4fd731d00d8a2773a7f095e1466fb02e084902", 0x1d}, {&(0x7f0000000200)="5f21813caa7565903a2a5b09000000e5ec0d49a5a81d395118f0fe1e14154fee3d4af178aa8b985b833ae301d7c0cef25bcaf87442b779f9f2756532f305554739bb57b7a565478fb7ed1bd88c3356f1300348721d594c5fbc952618632e", 0x5e}], 0x2, 0x8000000000000000) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000080)="6350247bd7e2f0e0561f29bbcfc718523af10e450e33af5e1fe8377d75ffffffff680d615fbe0b3779d13c8fb6dc92b457c2f2700d7e915acd13f3e60a21cd00f95743b20cef0081f5b4a90b83f3ac9f2177207c1fc0f8efeb733dd2c42202be79e92ef3d99f5832b7859e6232eb683f5e1783717539f55c3c7e", 0x7a}], 0x1) execve(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000000), 0x10) 75.309195ms ago: executing program 7 (id=1158): setsockopt(0xffffffffffffffff, 0x1000000029, 0x23, &(0x7f0000000080)="031000086941e7c5ce5876778f181b12184c256b1ca6f583b03f959b5253027d08b90779da6a56ed10cdd9967a674820f89c4daa330fee01c76728490d1851d4ab60059f6a3f7cc45ac10500000078bbf169d0632f4ce57a50", 0x59) r0 = socket(0x18, 0x3, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x3, 0x1}, {0x4, 0x2ff}], 0x2) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$VMM_IOC_CREATE(r1, 0xc2585601, &(0x7f0000000100)={0x10, 0x200, [{&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xa8d5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x7614}, {&(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3ba2b3b}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x800000000000005}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x7e75}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x5}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x800000000000003}, {&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x2}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x100000001}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, 0x5}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x8001}, {&(0x7f0000fef000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, 0x4}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x81}], './file0\x00', 0x9fb5}) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="ee11", 0x2}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair(0x10, 0x1, 0x10, &(0x7f0000000340)) r4 = fcntl$dupfd(r2, 0xa, r3) getsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000500)=""/4096, &(0x7f0000000240)=0x1000) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x18, 0x0, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x1000000029, 0x23, &(0x7f0000000080)="031000086941e7c5ce5876778f181b12184c256b1ca6f583b03f959b5253027d08b90779da6a56ed10cdd9967a674820f89c4daa330fee01c76728490d1851d4ab60059f6a3f7cc45ac10500000078bbf169d0632f4ce57a50", 0x59) (async) socket(0x18, 0x3, 0x0) (async) semop(0x0, &(0x7f00000000c0)=[{0x3, 0x1}, {0x4, 0x2ff}], 0x2) (async) openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$VMM_IOC_CREATE(r1, 0xc2585601, &(0x7f0000000100)={0x10, 0x200, [{&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xa8d5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x7614}, {&(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3ba2b3b}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x800000000000005}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x7e75}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x5}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x800000000000003}, {&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x2}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x100000001}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, 0x5}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x8001}, {&(0x7f0000fef000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, 0x4}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x81}], './file0\x00', 0x9fb5}) (async) socket$inet(0x2, 0x2, 0x0) (async) socket(0x18, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="ee11", 0x2}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socketpair(0x10, 0x1, 0x10, &(0x7f0000000340)) (async) fcntl$dupfd(r2, 0xa, r3) (async) getsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000500)=""/4096, &(0x7f0000000240)=0x1000) (async) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) (async) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x18, 0x0, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) 11.650059ms ago: executing program 2 (id=1159): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCMBIC(r0, 0x8004746b, &(0x7f0000000180)=0x7) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x2000000, [{0x1}, {0x1, 0xc6d}, {0x0, 0x1}, {0x3, 0x3}, {}, {0x1}, {0x3, 0x2}, {0x3, 0x20000000}, {0x1, 0x8}, {0x2}, {0x6, 0x9}, {}, {0xfffffffffffffffe, 0x2}, {0x0, 0x3b6}, {0x3, 0x400000}, {0x3}, {0x1}, {0x3, 0x800}, {0x1, 0xfffffffa}, {0x0, 0xae}, {0x5, 0xfffffffd}, {0x2, 0xa}, {0x3, 0x100000}, {0x3, 0x400}, {}, {0x3, 0x3}, {}, {}, {0x10ea64a5a0ac4e30, 0x4}, {}, {0x3, 0x8}, {0x1, 0x1}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) setitimer(0x2, &(0x7f0000000140)={{0x4, 0x100800000000009}, {0xf853, 0x10001}}, 0x0) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) 11.236829ms ago: executing program 2 (id=1160): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) kqueue() open$dir(&(0x7f0000000000)='.\x00', 0x80, 0x102) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) open(&(0x7f00000000c0)='./file0\x00', 0x10, 0x100) openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) pipe2(&(0x7f0000000000), 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xc0) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x1ff, 0xa4, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010002, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0xe, 0x8, 0xffbffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x10001, 0x200800f, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x7ea, 0x2}, {0x1000006, 0x8, 0x14, 0x5910}, {0x6000001, 0x683c, 0x4, 0x9}, {0x3, 0x8009, 0x1000, 0x4}, {0x1d0, 0x800, 0xdaa1, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x7}, {0x6, 0x5, 0x5, 0x200004}, {0x0, 0x1, 0xfff, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x5012, r0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) select(0x40, &(0x7f0000000040)={0x8003, 0x5, 0xc000, 0x8000000000000003, 0x2, 0x0, 0x1baa, 0x2b}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xc0) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x807ff, 0xa4, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010002, 0x10, [{0x3, 0x2890, 0x5, 0x71002}, {0x6, 0xe, 0x8, 0xfffffff9}, {0x101, 0x81, 0x8, 0x9}, {0x4, 0x10001, 0x8012, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x6}, {0x1000006, 0x8, 0x14, 0x5910}, {0x6000001, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1ce, 0x800, 0xdaa1, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x7}, {0x6, 0x5, 0x5, 0x4}, {0x0, 0x1, 0x0, 0x30003}]}) r3 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r3, 0xc0206921, 0x0) ioctl$VNDIOCSET(r2, 0x80044403, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x2, 0x4001, 0x0) r5 = dup(r4) fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) poll(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setitimer(0x0, 0x0, &(0x7f0000000040)) socket$inet(0x18, 0x3, 0x102) 11.1283ms ago: executing program 2 (id=1161): sysctl$net_inet6_ip6(&(0x7f0000000140)={0x4, 0x18, 0x29, 0x2b}, 0x4, &(0x7f00000001c0), 0x0, 0x0, 0x0) r0 = syz_open_pts() ioctl$TIOCSTART(r0, 0x2000746e) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x1, 0xad90, 0x2, 0x2, "8cd573f103d9fe9d23d47e496b4476cf026bb1cc", 0x10000, 0x3ff}) 1.296233ms ago: executing program 2 (id=1162): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x7}, 0x85c, 0x8000000000000007, 0x0, 0x0, 0x1, 0x7b, 0x7, 0x4}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x55}, 0x4000000000000003, 0x0, 0x0, 0x0, 0xffffffffffffff1a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffef1) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x1e, 0x6, 0x8}, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0) 733.036µs ago: executing program 6 (id=1163): r0 = socket(0x18, 0x1, 0x0) close(r0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61}) r4 = syz_open_pts() syz_emit_ethernet(0x10e, &(0x7f00000011c0)={@local, @local, [], {@ipv6={0x86dd, {0x4, 0x6, "ff0082", 0xd8, 0x0, 0xf, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@hopopts={0xf0, 0x19, '\x00', [@enc_lim={0x4, 0x1, 0xa0}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0x3}, @generic={0x3, 0xab, "511859dc0c718b402f951685669d70bdc82ec5ea23bfc8e4e835e38ab331322057e5087c656b428056a4990319e5f703ac630cbee04b782d7664efabd67845129f7867c5ae2fbc48a7fda6acfc8522e7e62244f3db7bfab829fb2e09e7aa3bcf976e25cadcc4720168de7ed3aab0487131fa99815d99f3748641aa2edf0b7e425a41021a87a6b6791a971c308eff0a2f50cdefd7df4700c1b886fb51f9181c8e432b2d2e630fd8414cf5dc"}, @enc_lim={0x4, 0x1, 0x80}, @pad1, @jumbo={0xc2, 0x4, 0x5}]}], @icmpv6=@ndisc_rs}}}}}) close(r4) r5 = syz_open_pts() writev(r4, &(0x7f0000001180)=[{&(0x7f0000001100)="0502703efed79b1ab47ef4de6e3b79250930bd0a2e28eb14c0c54f75776fe2b44ad9faee0294bbd30dd8cd9b07425d713887ee60032f671eb20e1286dd5b0a3870f288501206f8e7c7ea535645b0fa1c7a066fcf6504", 0x56}], 0x1) readv(r5, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r6 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r6, 0x80206979, &(0x7f0000000000)) setgroups(0x1, &(0x7f0000000000)=[r3]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VNDIOCSET(r1, 0xc0284408, &(0x7f0000000000)={0x0, 0x7, 0x0}) socket(0x24, 0x2, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0284457, &(0x7f0000000280)={0x0, 0xfffffffd, 0xfeffffff, 0x3, "1cf41400000a00f6ed010076d0f0ef69d5b1b1ad", 0x4ffffffe, 0x9}) setsockopt(r0, 0x6, 0x41, &(0x7f0000000280), 0x1c) 0s ago: executing program 7 (id=1164): mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000180)='./file0\x00', 0xc3) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='./file2\x00') mknod(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d3725864749b) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error ¹j¼õ¬|ÿ ž¨E1\…:Bepckbd_enable: command error pckbd_enable: command error pckbd_enable: command error                          denied attempt to set clock back 4229876890 seconds panic: kernel diagnostic assertion "rn != NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/net/pipex.c", line 459 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *448569 23897 0 0 0x4000000 0K syz-executor db_enter() at db_enter+0x25 panic(ffffffff83451c58) at panic+0x1e5 __assert(ffffffff8348ceed,ffffffff834a9bd5,1cb,ffffffff83448634) at __assert+0x29 pipex_unlink_session_locked(ffff80003c404008) at pipex_unlink_session_locked+0x429 pipex_destroy_all_sessions(ffff8000015f8000) at pipex_destroy_all_sessions+0xd9 pppacclose(637e,1,2000,ffff80002a261770) at pppacclose+0x16f spec_close(ffff80003c3f33d0) at spec_close+0x417 VOP_CLOSE(fffffd805ee63d90,1,fffffd80097fd138,ffff80002a261770) at VOP_CLOSE+0x132 vn_closefile(fffffd806c7af220,ffff80002a261770) at vn_closefile+0x12b fdrop(fffffd806c7af220,ffff80002a261770) at fdrop+0x121 closef(fffffd806c7af220,ffff80002a261770) at closef+0x192 syscall(ffff80003c3f3630) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2253da67940, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: kernel diagnostic assertion "rn != NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/net/pipex.c", line 459 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff83451c58) at panic+0x1e5 __assert(ffffffff8348ceed,ffffffff834a9bd5,1cb,ffffffff83448634) at __assert+0x29 pipex_unlink_session_locked(ffff80003c404008) at pipex_unlink_session_locked+0x429 pipex_destroy_all_sessions(ffff8000015f8000) at pipex_destroy_all_sessions+0xd9 pppacclose(637e,1,2000,ffff80002a261770) at pppacclose+0x16f spec_close(ffff80003c3f33d0) at spec_close+0x417 VOP_CLOSE(fffffd805ee63d90,1,fffffd80097fd138,ffff80002a261770) at VOP_CLOSE+0x132 vn_closefile(fffffd806c7af220,ffff80002a261770) at vn_closefile+0x12b fdrop(fffffd806c7af220,ffff80002a261770) at fdrop+0x121 closef(fffffd806c7af220,ffff80002a261770) at closef+0x192 syscall(ffff80003c3f3630) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2253da67940, count: -13 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c3f31a0 rbx 0xffffffff8390fe07 cpu_info_full_primary+0x2e07 rdx 0xffff80000002a740 rcx 0xffff80002a261770 rax 0xffffffff8390eff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xd8026cbd00fc9ebc r11 0x9ec4263a233659a6 r12 0xffffffff8390fc08 cpu_info_full_primary+0x2c08 r13 0 r14 0 r15 0x1 rip 0xffffffff81648fe5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c3f3190 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=448569 pid=23897 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=83, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000fffe3cb0,0xffff8000fffe9788 process=0xffff8000fffe61d0 user=0xffff80003c3ee000, vmspace=0xfffffd800b063000 estcpu=33, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 30363 466845 57223 0 2 0 syz-executor 30363 284085 57223 0 3 0x4000080 fsleep syz-executor 94053 305285 58293 0 2 0 syz-executor 94053 156894 58293 0 3 0x4000080 fsleep syz-executor 23897 263126 7877 0 3 0x80 nanoslp syz-executor *23897 448569 7877 0 7 0x4000000 syz-executor 98273 157918 21052 0 2 0 syz-executor 98273 470416 21052 0 3 0x4000080 lockf syz-executor 98273 24296 21052 0 3 0x4000080 fsleep syz-executor 79304 331505 40444 0 2 0 syz-executor 79304 182224 40444 0 3 0x4000080 fsleep syz-executor 79304 183298 40444 0 3 0x4000080 ttyout syz-executor 79304 121556 40444 0 3 0x4000080 fsleep syz-executor 88337 23518 37082 0 3 0x3000 suspend syz-executor 88337 178901 37082 0 3 0x4081000 biowait syz-executor 88337 351041 37082 0 3 0x4081000 inode syz-executor 88337 430025 37082 0 3 0x4081000 inode syz-executor 58293 150425 92507 0 3 0x82 nanoslp syz-executor 73636 352655 0 0 3 0x14200 acct acct 21337 468661 92507 0 3 0x82 piperd syz-executor 62050 339033 92507 0 2 0x10000082 syz-executor 40444 59216 92507 0 3 0x82 nanoslp syz-executor 37082 472513 92507 0 2 0x2 syz-executor 57223 134723 92507 0 3 0x82 nanoslp syz-executor 21052 15095 92507 0 2 0x2 syz-executor 7877 417046 92507 0 3 0x82 nanoslp syz-executor 92507 506442 55144 0 2 0x2 syz-executor 55144 144629 969 0 3 0x10008a sigsusp ksh 969 158253 18702 0 3 0x98 kqread sshd-session 18702 413128 31711 0 3 0x92 kqread sshd-session 2743 275484 1 0 3 0x100083 ttyopn getty 31711 418767 1 0 3 0x88 kqread sshd 79077 473354 88543 74 3 0x1100092 bpf pflogd 88543 188285 1 0 3 0x80 sbwait pflogd 9354 41682 80806 73 3 0x1100090 kqread syslogd 80806 342812 1 0 3 0x100082 sbwait syslogd 96578 472956 1 0 3 0x100080 kqread resolvd 27536 371472 18049 77 2 0x100012 dhcpleased 42923 426047 18049 77 3 0x100092 kqread dhcpleased 18049 364619 1 0 3 0x80 kqread dhcpleased 31750 431735 0 0 3 0x14200 bored smr 56070 359907 0 0 2 0x14200 zerothread 25613 259468 0 0 3 0x14200 aiodoned aiodoned 77980 286182 0 0 3 0x14200 syncer update 38181 159708 0 0 3 0x14200 cleaner cleaner 28801 229769 0 0 3 0x14200 reaper reaper 62913 311476 0 0 3 0x14200 pgdaemon pagedaemon 55444 131910 0 0 3 0x14200 bored viomb 17661 398732 0 0 3 0x40014200 acpi0 acpi0 59207 273707 0 0 7 0x40014200 idle1 48755 371308 0 0 3 0x14200 bored softnet1 47835 456030 0 0 3 0x14200 bored softnet0 21671 515116 0 0 3 0x14200 bored systqmp 91809 27238 0 0 3 0x14200 bored systq 26162 279391 0 0 3 0x14200 tmoslp softclockmp 55894 198589 0 0 3 0x40014200 tmoslp softclock 29145 444517 0 0 3 0x40014200 idle0 1 115852 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex /syzkaller/managers/multicore/kernel/sys/net/pipex.c:78 r = 0 (0xffffffff83956270) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 pipex_destroy_all_sessions+0x2f #3 pppacclose+0x16f #4 spec_close+0x417 #5 VOP_CLOSE+0x132 #6 vn_closefile+0x12b #7 fdrop+0x121 #8 closef+0x192 #9 syscall+0xbd4 #10 Xsyscall+0x128 Process 23897 (syz-executor) thread 0xffff80002a261770 (448569) Process 88337 (syz-executor) thread 0xffff8000fffe87e8 (178901) Process 88337 (syz-executor) thread 0xffff80002a2607e0 (430025) ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11108 12162K 13139K 166960K 14286 0 pcb 18 16K 18K 166960K 454 0 rtable 191 9K 11K 166960K 707 0 pf 31 16K 85K 166960K 164 0 ifaddr 33 6K 8K 166960K 118 0 ifgroup 48 2K 2K 166960K 194 0 sysctl 4 1K 9K 166960K 15 0 counters 70 36K 38K 166960K 226 0 ioctlops 0 0K 8K 166960K 1927 0 iov 0 0K 24K 166960K 173 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1453 91K 92K 166960K 3032 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 18 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 190 0 dirhash 12 2K 2K 166960K 36 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 57K 89K 166960K 1327 0 sigio 0 0K 0K 166960K 21 0 proc 72 115K 164K 166960K 705 0 subproc 72 4K 4K 166960K 90 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 180 0 in_multi 66 4K 7K 166960K 167 0 ether_multi 1 0K 0K 166960K 15 0 mrt 0 0K 0K 166960K 27 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 253 1129K 1129K 166960K 253 0 exec 0 0K 1K 166960K 555 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 237 167K 198K 166960K 14323 0 UVM aobj 68 14K 14K 166960K 71 0 pinsyscall 41 82K 102K 166960K 2579 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 110 0 NDP 11 0K 1K 166960K 85 0 temp 79 9088K 9160K 166960K 44119 0 kqueue 14 22K 30K 166960K 257 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 223 0 220 4 3 1 3 0 8 0 rtentry 176 163 0 91 6 0 6 6 0 8 0 unpcb 144 940 0 923 9 3 6 6 0 8 5 syncache 336 9 0 9 3 2 1 1 0 8 1 tcpqe 32 1 0 1 1 1 0 1 0 8 0 tcpcb 736 268 0 261 3 1 2 2 0 8 1 arp 136 28 0 15 1 0 1 1 0 8 0 inpcb 328 1444 0 1434 20 10 10 10 0 8 8 nd6 152 34 0 16 2 0 2 2 0 8 0 pkpcb 40 10 0 10 2 1 1 1 0 8 1 kcovpl 48 10 0 2 1 0 1 1 0 8 0 mppekey 1024 2 0 2 2 1 1 1 0 8 1 ppxss 1192 67 0 66 2 1 1 1 0 8 0 pppxif 1504 4 0 4 3 3 0 1 0 8 0 pffrag 232 11 0 6 1 0 1 1 0 482 0 pffrnode 88 11 0 6 1 0 1 1 0 8 0 pffrent 40 19 0 14 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 6 0 6 3 2 1 1 0 8 1 pfstitem 24 108 0 25 1 0 1 1 0 8 0 pfstkey 128 108 0 25 3 0 3 3 0 8 0 pfstate 448 108 0 25 10 0 10 10 0 8 0 pfrule 1360 22 0 17 2 1 1 2 0 8 0 rttmr 136 1 0 1 1 1 0 1 0 8 0 art_heap8 4096 4 0 0 4 0 4 4 0 8 0 art_heap4 256 639 0 337 31 3 28 31 0 8 5 art_table 40 643 0 337 5 0 5 5 0 8 0 art_node 32 162 0 97 1 0 1 1 0 8 0 sysvmsgpl 40 23 0 15 1 0 1 1 0 8 0 semupl 112 3 0 3 2 1 1 1 0 8 1 semapl 112 186 0 176 1 0 1 1 0 8 0 shmpl 112 62 0 3 2 0 2 2 0 8 0 dirhash 1024 33 0 16 3 0 3 3 0 8 0 dino2pl 256 4270 0 2809 93 0 93 93 0 8 0 ffsino 296 4270 0 2809 114 0 114 114 0 8 0 nchpl 144 6121 0 4408 64 0 64 64 0 8 0 rtmask 32 10 0 9 3 2 1 1 0 8 0 vnodes 216 5220 0 0 290 0 290 290 0 8 0 namei 1024 22475 0 22474 5 4 1 2 0 8 0 percpumem 16 128 0 78 1 0 1 1 0 8 0 vcpupl 3968 6 0 0 1 0 1 1 0 8 0 vmpool 848 6 0 0 1 0 1 1 0 8 0 kstatmem 264 134 0 108 4 1 3 3 0 8 0 scsiplug 72 6 0 6 3 2 1 1 0 8 1 scxspl 216 34168 0 34167 16 14 2 8 1 8 1 plimitpl 152 381 0 360 1 0 1 1 0 8 0 sigapl 424 1651 0 1603 7 1 6 7 0 8 0 knotepl 120 822 0 0 25 0 25 25 0 8 0 kqueuepl 224 490 0 479 6 3 3 3 0 8 2 pipepl 344 355 0 328 15 9 6 9 0 8 3 fdescpl 528 1632 0 1602 3 0 3 3 0 8 0 filepl 160 11890 0 11664 29 11 18 18 0 8 7 lockfpl 104 757 0 752 3 1 2 2 0 8 1 lockfspl 48 325 0 321 1 0 1 1 0 8 0 sessionpl 144 30 0 21 1 0 1 1 0 8 0 pgrppl 48 91 0 74 1 0 1 1 0 8 0 ucredpl 104 2398 0 2385 1 0 1 1 0 8 0 zombiepl 144 1776 0 1774 2 1 1 1 0 8 0 processpl 1232 1651 0 1603 5 1 4 5 0 8 0 procpl 664 3691 0 3632 6 0 6 6 0 8 0 sosppl 176 8 0 8 3 2 1 1 0 8 1 sockpl 752 2662 0 2631 29 15 14 17 0 8 9 mcl64k 65536 5 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 113 0 0 15 0 15 15 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 38 0 0 4 0 4 4 0 8 0 mtagpl 96 8 0 0 1 0 1 1 0 8 0 mbufpl 256 2072 0 0 129 0 129 129 0 8 0 bufpl 280 13566 0 7436 439 0 439 439 0 8 1 anonpl 32 12123 0 0 98 0 98 98 0 246 0 amapchunkpl 152 48251 0 47743 43 13 30 30 0 158 5 amappl16 200 5913 0 5747 48 20 28 28 0 8 12 amappl15 192 21 0 20 1 0 1 1 0 8 0 amappl14 184 458 0 457 1 0 1 1 0 8 0 amappl13 176 139 0 127 1 0 1 1 0 8 0 amappl12 168 1898 0 1869 2 0 2 2 0 8 0 amappl11 160 7 0 7 1 1 0 1 0 8 0 amappl10 152 83 0 69 1 0 1 1 0 8 0 amappl9 144 260 0 260 1 1 0 1 0 8 0 amappl8 136 105 0 103 1 0 1 1 0 8 0 amappl7 128 190 0 177 1 0 1 1 0 8 0 amappl6 120 187 0 184 1 0 1 1 0 8 0 amappl5 112 114 0 103 1 0 1 1 0 8 0 amappl4 104 331 0 309 1 0 1 1 0 8 0 amappl3 96 9695 0 9583 5 1 4 4 0 8 0 amappl2 88 625 0 565 2 0 2 2 0 8 0 amappl1 80 17307 0 16698 24 7 17 17 0 8 3 amappl 88 13294 0 13129 5 0 5 5 0 92 0 uvmvnodes 80 153 0 0 4 0 4 4 0 8 0 dma4096 4096 2 0 2 2 2 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 8 0 8 3 3 0 1 0 8 0 dma128 128 255 0 255 3 2 1 1 0 8 1 dma64 64 9 0 9 3 3 0 1 0 8 0 dma32 32 8 0 8 2 2 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 70 0 3 2 0 2 2 0 8 0 uaddrrnd 24 1632 0 1602 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1632 0 1602 1 0 1 1 0 8 0 vmmpekpl 168 15368 0 15326 3 0 3 3 0 8 0 vmmpepl 168 113677 0 111649 126 17 109 109 0 357 5 vmsppl 488 1631 0 1602 7 2 5 5 0 8 1 rwobjpl 80 33529 0 32232 42 7 35 35 0 8 2 pdppl 4096 3283 0 3210 119 40 79 83 0 8 6 pvpl 32 20551 0 0 167 1 166 166 0 265 0 pmappl 256 1637 0 1602 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 435 0 57 11 0 11 11 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff83451c58) at panic+0x1e5 __assert(ffffffff8348ceed,ffffffff834a9bd5,1cb,ffffffff83448634) at __assert+0x29 pipex_unlink_session_locked(ffff80003c404008) at pipex_unlink_session_locked+0x429 pipex_destroy_all_sessions(ffff8000015f8000) at pipex_destroy_all_sessions+0xd9 pppacclose(637e,1,2000,ffff80002a261770) at pppacclose+0x16f spec_close(ffff80003c3f33d0) at spec_close+0x417 VOP_CLOSE(fffffd805ee63d90,1,fffffd80097fd138,ffff80002a261770) at VOP_CLOSE+0x132 vn_closefile(fffffd806c7af220,ffff80002a261770) at vn_closefile+0x12b fdrop(fffffd806c7af220,ffff80002a261770) at fdrop+0x121 closef(fffffd806c7af220,ffff80002a261770) at closef+0x192 syscall(ffff80003c3f3630) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2253da67940, count: -13 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff8000299bdff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 acpicpu_idle() at acpicpu_idle+0x457 sched_idle(ffff8000299bdff0) at sched_idle+0x391 end trace frame: 0x0, count: 10 ddb{1}> trace x86_ipi_db(ffff8000299bdff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 acpicpu_idle() at acpicpu_idle+0x457 sched_idle(ffff8000299bdff0) at sched_idle+0x391 end trace frame: 0x0, count: -5