last executing test programs: 4.752165087s ago: executing program 3 (id=2232): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) write(r0, &(0x7f0000000940)='F', 0x1) sysctl$hw(&(0x7f00000000c0)={0x6, 0x16}, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$TIOCSETA(r2, 0xc444443a, &(0x7f0000000080)={0x6, 0x0, 0x6, 0x422, "6374224ff1c14649ebb17892d4c9795a6b47c1d1", 0x4000007f, 0x2}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xa8) ktrace(&(0x7f0000000180)='./file0\x00', 0x2f, 0x51d73188af82c397, 0xffffffffffffffff) write(r0, &(0x7f00000000c0)="c3", 0xffffffed) kevent(r3, &(0x7f0000000100)=[{{0xffffffffffffff9c}, 0xfffffffffffffff9, 0x42, 0x2, 0x100000001, 0xc}, {{r1}, 0xffffffffffffffff, 0x9, 0x40000008, 0x2, 0x2b}, {{r1}, 0xfffffffffffffffd, 0x44, 0x1, 0x80000000, 0x4}], 0x2, &(0x7f00000001c0)=[{{r1}, 0xfffffffffffffffd, 0x40, 0x4, 0xffffffffffffff01, 0x72a}, {{r3}, 0xfffffffffffffffb, 0x96, 0x40, 0x6, 0x756}, {{r1}, 0xfffffffffffffff8, 0x10, 0x2, 0xffffffffffffffff, 0x80000001}, {{r1}, 0xfffffffffffffff9, 0x48, 0xfffff, 0x8, 0xfffffffffffffff7}], 0x1ff, &(0x7f0000000040)={0xffffffff}) 4.723575731s ago: executing program 3 (id=2234): r0 = socket(0x2, 0x3, 0x2f) r1 = dup(r0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @random="7260ef2e1a9c", [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x9, 0x2c, 0x0, 0x2000, 0x0, 0x33, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast, {[@generic={0x94, 0x12, "cf51e0167a057bac01a8227bb671910e"}]}}, @generic="3332b4c1"}}}}) setsockopt$inet_opts(r1, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) sendmsg$unix(r0, &(0x7f0000002a40)={&(0x7f0000000000), 0x2, 0x0}, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg$unix(r0, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x34}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @remote, [], {@ipv4={0x800, {{0x19, 0x4, 0x0, 0x0, 0x78, 0x66, 0x0, 0x0, 0x6, 0x0, @broadcast, @empty, {[@rr={0x7, 0xf, 0x2, [@remote={0xac, 0x14, 0x0}, @broadcast, @multicast1]}, @ra={0x94, 0x6, 0xbad}, @timestamp={0x44, 0x24, 0x5, 0x1, 0x3, [{[], 0x5}, {[@rand_addr=0x888d], 0x8}, {[@multicast2], 0x4}, {[], 0x5}, {[@rand_addr=0x6], 0x3}]}, @ra={0x94, 0x6, 0xffffffff}, @rr={0x7, 0xf, 0x0, [@loopback, @loopback, @multicast2]}]}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xfffd}}}}}}) socket(0x2, 0x3, 0x2f) (async) dup(r0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @random="7260ef2e1a9c", [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x9, 0x2c, 0x0, 0x2000, 0x0, 0x33, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast, {[@generic={0x94, 0x12, "cf51e0167a057bac01a8227bb671910e"}]}}, @generic="3332b4c1"}}}}) (async) setsockopt$inet_opts(r1, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) (async) sendmsg$unix(r0, &(0x7f0000002a40)={&(0x7f0000000000), 0x2, 0x0}, 0x0) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) sendmsg$unix(r0, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x34}, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @remote, [], {@ipv4={0x800, {{0x19, 0x4, 0x0, 0x0, 0x78, 0x66, 0x0, 0x0, 0x6, 0x0, @broadcast, @empty, {[@rr={0x7, 0xf, 0x2, [@remote={0xac, 0x14, 0x0}, @broadcast, @multicast1]}, @ra={0x94, 0x6, 0xbad}, @timestamp={0x44, 0x24, 0x5, 0x1, 0x3, [{[], 0x5}, {[@rand_addr=0x888d], 0x8}, {[@multicast2], 0x4}, {[], 0x5}, {[@rand_addr=0x6], 0x3}]}, @ra={0x94, 0x6, 0xffffffff}, @rr={0x7, 0xf, 0x0, [@loopback, @loopback, @multicast2]}]}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xfffd}}}}}}) (async) 4.692946069s ago: executing program 3 (id=2237): r0 = socket(0x18, 0x2, 0x80) getsockname(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8) r1 = accept$inet6(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x2810, r1, 0x314) (async, rerun: 32) chmod(&(0x7f0000000100)='./file0\x00', 0x20) (async, rerun: 32) r2 = socket$inet(0x2, 0x4000, 0x2) setsockopt$sock_int(r2, 0xffff, 0x1002, &(0x7f0000000140)=0x9, 0x4) (async) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x9) getpeername(r3, &(0x7f0000000180)=@in, &(0x7f00000001c0)=0xc) (async) faccessat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x10, 0x0) chflags(&(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000) (async) r4 = msgget(0x0, 0x100) (async, rerun: 32) r5 = geteuid() (async, rerun: 32) getgroups(0x4, &(0x7f0000001240)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) (async, rerun: 32) r7 = getegid() (async, rerun: 32) r8 = getpgrp() msgctl$IPC_SET(r4, 0x1, &(0x7f0000001280)={{0x6, r5, r6, 0x0, r7, 0x2, 0x9}, 0xfff, 0x0, 0xffffffffffffffff, r8, 0x1, 0x4, 0x4, 0x4}) (async, rerun: 64) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000001300)=0x7) (async, rerun: 64) ktrace(&(0x7f0000001340)='./file0\x00', 0x2, 0x1404, r8) (async, rerun: 32) ioctl$FIOSETOWN(r2, 0x8004667c, &(0x7f0000001380)=0xfffffff7) (async, rerun: 32) open$dir(&(0x7f00000013c0)='./file0\x00', 0x80, 0x1) (async) msgget$private(0x0, 0x31) sysctl$kern(&(0x7f0000001400)={0x1, 0x40}, 0x2, &(0x7f0000001440)="7fe60c362e1b36064795e486a8cca8401149f053b224f24e7c9133492fc8ef26618fc845ffd4d55c5e1741683d3aaa6e8b86191fb4901ca2c4fd44517d89d05a2f136da290a2e3514ef0e3f8a93af85411a5dbe21994279f5a396f28b7f51656efe035dcb9333e0c54a198a5d09145c7daf5", &(0x7f00000014c0)=0x72, &(0x7f0000001500)="aa53823d4685045ea25bc111dd6cfa304f9c3bff7e1a02bcc199f2e564141ff516c257d18d8193e25e21f8d741f6c4cad5da2796acbf356682c358e99eb36be47c4e1b5b46e96f68ff11b88977e9ea823533b4652d41c350f79e3430f309197f7e5c2d68e2604a3da554ddf6356396df12d3b98ef09eeecd05207c9eca2fa4b86ad213684324d9312d0ad80995d9611072e0af58113965ca0a1244c97d7f350272e7236ffab38531d1fca0", 0xab) r9 = openat$pf(0xffffffffffffff9c, &(0x7f00000015c0), 0x800, 0x0) sendto$unix(r9, &(0x7f0000001600)="c547770e2df3dbb21b57cf8928b05e408aee966cdd83f543441faf9141d1a43b3e1e7e4640d773b39c8ddaacdec67614c7ab1c679b9dc48cecfd0bb79eeafab3725949343adc496ed872472494c4f5992b8555a0b89545ef78987e", 0x5b, 0x8, &(0x7f0000001680)=@abs={0x1, 0x0, 0x3}, 0x8) r10 = accept$inet(r2, &(0x7f00000016c0), &(0x7f0000001700)=0xc) sendto(r10, &(0x7f0000001740)="8e89f2914f603ece4ce8618576767042d29dd3ee7d50b586045780a6da27efc0a5673c92cc6994e366a550d5fa470446a5ca452cb7a4a8240e1a3f6fd510d1d449b161aa81644f553827b65bf70a20675d62d3104119139f06b9568dcb3980ef812036d04bf511ba45a93c098fa8e467a2ce80c2228e477397b1da24fcda689ad57bca9cd3fc36db229b7579d8af4da40875b8cd1a04547a2df14688912e774d08d2577424c5db245e1c7f44ceebf6", 0xaf, 0x5, &(0x7f0000001800)=@in6={0x18, 0x0, 0x8, 0x91a9}, 0xc) accept(r0, 0x0, &(0x7f0000001840)) openat$wskbd(0xffffffffffffff9c, &(0x7f0000001880), 0x10, 0x0) 3.606478548s ago: executing program 3 (id=2247): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x3, 0x0, 0x10, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1004, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x3c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000100)={{0x18, 0x2, 0xffff}, {0x18, 0x0, 0x5, 0x1}, 0xb, [0xf03, 0xfffffffe, 0x9, 0x5, 0xff, 0x800, 0x9, 0x67f]}, 0xca) 3.410554823s ago: executing program 3 (id=2248): r0 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) syz_emit_ethernet(0x138, &(0x7f0000000180)=ANY=[@ANYBLOB="ff02", @ANYRESDEC=r0]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r1 = socket(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000), 0x10) (async) close(r1) (async) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000380)={0x57f0, 0x9, 0x800009, 0x7fffff5f, "9cdc452e307e7f000000000000002f9e68cd3304", 0x400, 0x2}) writev(r2, &(0x7f0000000100)=[{&(0x7f00000009c0)="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", 0x361}, {&(0x7f0000000040)="c193009c9583664f2d348c6ee81c303bdd562015d3ddfc7f4614cc920fdb22538766ce253f2a3572f9edcc1cfababb6b1579544ca1bd8953e4dc8f9f0e9f22e1bc5cbf07c885c2b327faed3d68b5580ba2ee251e56c5a5f3c71e9191fffb37e4353c596b2f31c659d6db808cfd4caabfd812f2544fe64732a5411e9bdc618b4776", 0x81}], 0x2) (async) r4 = shmget(0x0, 0x4000, 0x8765eaa7cf428d8c, &(0x7f0000ffb000/0x4000)=nil) shmat(r4, &(0x7f0000556000/0x1000)=nil, 0x0) socket(0x1, 0x1, 0x3) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x80000, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x100}, 0x5, 0x8000000000000001, 0x0, 0x0, 0x80, 0xf, 0x1000000000009, 0x8000008000000e5f}) (async) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x29) ioctl$VMM_IOC_WRITEREGS(r5, 0x82485608, 0x0) socket(0x11, 0x3, 0x0) (async) unveil(0x0, &(0x7f0000000140)='c\x00') 3.404765839s ago: executing program 3 (id=2249): open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f00000b0000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x8000000000000000) setrlimit(0x8, &(0x7f0000000340)={0x9, 0x4000000000054}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000380)={0x750, 0x4b, 0xd, 0xa, "03ec000020008080f6000000d100", 0x8a, 0x9}) write(r1, &(0x7f0000000240)="c570a4a5bbebc12d2a91854a3269facb1316b1dbefdc29ce59a480cfbf608dea9c620e5c769e41325bb05beb095558da1082977cecf0ae7465d33a476b2bf8d8323faf622b829cdd2def3aebda43f9d65bdedac3153eaa24e781fe6c886078dc1997598181a8a2b44b588cefa7fe886b4990181ebd182952bc83b084eeaf3c75abd47f349f01f6", 0xfead) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.538522268s ago: executing program 1 (id=2287): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r0, 0x80084904, &(0x7f0000000180)={0x400, './file0\x00'}) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x7fffffff}) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = kqueue() kevent(r1, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) kevent(r1, 0x0, 0x0, 0x0, 0x2, 0x0) 1.984142138s ago: executing program 2 (id=2303): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f0000001100), 0x4) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) clock_gettime(0x4, &(0x7f0000000000)) 1.983896838s ago: executing program 2 (id=2304): symlink(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x20ad, 0x6, 0x2000007, 0x5f, 0x8, 0x6, 0x80, 0x10, [{0x1000000, 0x7, 0xffffffff, 0x71003}, {0xd8, 0x5, 0x8, 0xfffffff9}, {0x0, 0x8, 0x8, 0x6}, {0x8, 0x800, 0x3, 0xfffffffd}, {0xf, 0xf2b, 0x9, 0x2}, {0x40000002, 0x1, 0x8, 0x95}, {0x82ce1, 0x800, 0x9c29, 0x400006d}, {0x3, 0x803, 0x14, 0x6}, {0xffffffff, 0x82, 0x4, 0x400009}, {0x5, 0x7fffffff, 0xd1b, 0x88}, {0x1d0, 0x7, 0x2c, 0x4}, {0x7fc, 0x9, 0x8, 0x80000000}, {0x81f, 0x4, 0x4, 0xffe}, {0x29a71713, 0xfffffffa, 0x6, 0x3}, {0xc, 0x9, 0x6}, {0x0, 0x3, 0x3}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (rerun: 64) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0}) (async) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) select(0x40, &(0x7f0000000000)={0x1b, 0x5, 0x4, 0x8, 0x0, 0x8, 0x200, 0xfffffffffffffffc}, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) (async) write(r1, &(0x7f00000002c0)="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", 0xfffffdaf) 1.794413365s ago: executing program 1 (id=2307): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0xb, 0x0, 0x0, 0x0, 0x0, 0x84, 0x3ff}, 0xbaf, 0x40000010000, 0x0, 0x0, 0x200000001, 0x80000000000010c, 0x4, 0x6}) r0 = socket(0x2, 0x3, 0x0) shutdown(r0, 0x2) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xffffffffffbffffc, 0x7cee, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) r2 = syz_open_pts() close(r2) setrlimit(0x8, &(0x7f0000000980)) pipe(0x0) syz_open_pts() write(r2, &(0x7f00000007c0)="16bb4b", 0x3) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x1000f66c, 0x8, 0x9, 0x5fffff5f, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0x3, 0x9}) writev(r2, &(0x7f0000000700)=[{&(0x7f0000001240)="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", 0x59c}], 0x1) execve(0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket(0x2, 0x3, 0x0) r3 = socket(0x2, 0x3, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) open(&(0x7f00000001c0)='./file0\x00', 0x80, 0x8) socket(0x18, 0x2, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r4, 0x80105728, &(0x7f0000000040)={&(0x7f0000000280)=[{0x7}, {0x4, 0x4}], 0x2}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) 1.793706789s ago: executing program 1 (id=2308): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) socket$inet(0x2, 0x5, 0x8) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000600), 0x100, 0x0) ioctl$VMM_IOC_INFO(r1, 0xc0185603, &(0x7f00000006c0)={0x0, 0x0, 0x0}) (async) r2 = kqueue() kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) socketpair(0x18, 0x1, 0x9, &(0x7f00000000c0)) (async) fsync(0xffffffffffffff9c) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000100)={0xd5, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10005, 0x10, [{0x0, 0x5, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x108, 0xf88, 0x0, 0xa}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x8, 0x3, 0x2009}, {0xce1, 0xffffffff, 0x4f6, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x7}, {0x6a75, 0x8001, 0x1000, 0xc6e9}, {0x1cc, 0x9, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x102}, {0xb94, 0x7, 0x4, 0xc}, {0x29a71f17, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x9, 0x1, 0xffb, 0x30006}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r4 = socket(0x18, 0x3, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r5 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r4, 0x80206949, &(0x7f0000000100)) unlink(&(0x7f0000000080)='./file1\x00') (async) close(r0) (async) r6 = socket(0x18, 0x1, 0x0) shutdown(r6, 0x2) ioctl$FIONREAD(r6, 0xc028756b, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 1.793267975s ago: executing program 4 (id=2309): r0 = socket$inet6(0x18, 0x1, 0x4) setsockopt(r0, 0x3, 0xffff, &(0x7f0000000000)="9993406a95204cda98103bb89ede49e23c80f01953f42905b4df2c02b0c4602742242ed5766178cade23c3e75fd5bf12418be899b5b3e1fef4c9d26dea498d7863d7406b0fc05913ee4ec31bd72815c44bfeb51ce9bfe3cb250ce1885aa198510d9d32cc67fbef55d37318af8cbfa52290a2e5ee698343f6000580102cea429acfe889b94b9e840148cc895fe7bf54e472", 0x91) ioctl$TIOCSETAW(0xffffffffffffff9c, 0x802c7415, &(0x7f00000000c0)={0x60cf3fa1, 0x2, 0x24, 0x0, "9391d8b714b2f992b39c4cf119b2e9ef3723627f", 0x2, 0x7f}) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000140)=0x8) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0xa) r2 = dup2(r1, r0) readv(r1, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) r3 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000001200), 0x1, 0x0) close(r3) r4 = socket$inet6(0x18, 0x2, 0x1) preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000001240)=""/154, 0x9a}, {&(0x7f0000001300)}, {&(0x7f0000001340)=""/42, 0x2a}, {&(0x7f0000001380)=""/19, 0x13}], 0x4, 0x1) ioctl$WSDISPLAYIO_ADDSCREEN(r2, 0x80245753, &(0x7f0000001400)={0xb, './file0\x00', './file0\x00'}) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000001440)=0x1) ioctl$WSDISPLAYIO_LDFONT(r2, 0x8058574d, &(0x7f0000001480)={'./file0\x00', 0x8, 0x2, 0x3, 0x1, 0x6c5, 0xe3aa, 0x2, 0x0, 0x0, 0x3, 0x8}) unveil(&(0x7f0000001500)='./file1\x00', &(0x7f0000001540)='x\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) r8 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000001740), 0x100, 0x0) r9 = accept$inet(r2, &(0x7f0000001780), &(0x7f00000017c0)=0xc) kevent(r2, &(0x7f0000001600)=[{{r5}, 0xfffffffffffffff9, 0xd4, 0x40, 0x9, 0x3}, {{r1}, 0xfffffffffffffff8, 0x40, 0x1, 0x3, 0x5}, {{r1}, 0x0, 0xcc, 0x20000000, 0x1, 0x4}, {{r2}, 0xfffffffffffffff9, 0x60, 0x8, 0x9, 0xec}, {{r1}, 0x1, 0x9, 0x40, 0xab, 0x3}, {{r2}, 0x0, 0x1, 0x8, 0x1, 0x8}, {{r2}, 0xfffffffffffffffa, 0x1, 0xf0000000, 0x100000000, 0xffffffffffff68d1}, {{r7}, 0xfffffffffffffff9, 0x10, 0x20, 0x7, 0x5}, {{r0}, 0xfffffffffffffffc, 0x21, 0x40, 0x0, 0x4}, {{r4}, 0xfffffffffffffffd, 0x4, 0xfffff, 0x10, 0x800000000}], 0x4, &(0x7f0000001800)=[{{r4}, 0xffffffffffffffff, 0x0, 0xf0000000, 0x7fffffffffffffff, 0x3}, {{r8}, 0xfffffffffffffffe, 0x20, 0x80000000, 0x4, 0x8164}, {{r9}, 0xfffffffffffffff8, 0x40, 0x20, 0x8, 0x90f}, {{r0}, 0xfffffffffffffffb, 0x2, 0x2, 0x6, 0x5}, {{r3}, 0xfffffffffffffffb, 0x72d0a68f396f594d, 0x20, 0xc1, 0x7}, {{r1}, 0xfffffffffffffff8, 0x20, 0xf0000034, 0x294d1696, 0x200}, {{r1}, 0x7, 0x18, 0x80000000, 0x8d, 0x4}], 0xf, &(0x7f0000001900)={0x9, 0x6}) r10 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000001940), 0x20, 0x0) ioctl$WSDISPLAYIO_ADDSCREEN(r10, 0x80245753, &(0x7f0000001980)={0x70, './file0\x00', './file2\x00'}) listen(r6, 0x7) r11 = open(&(0x7f0000001a00)='./file1\x00', 0x20, 0x40) renameat(r8, &(0x7f00000019c0)='./file2\x00', r11, &(0x7f0000001a40)='./file2\x00') mkdir(&(0x7f0000001a80)='./file1\x00', 0x109) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000001ac0), &(0x7f0000001b00)=0xc) sysctl$net_inet_ip(&(0x7f0000001b40)={0x4, 0x2, 0x0, 0x12}, 0x4, &(0x7f0000001b80)="48569b3348deb35f92df7d8d9c21125e4d712c556317d7b7e88ec84a4c325be5e9d52aab85d67cd24911f043f342195ffb427861871a48fbe5ff49c33a32e78a30435ee206c4a66a13d4cab31bc19783a058e8ded5750c2cc275093f678b5698f89d0818db869c18a260aa4020569c89628c7f67ec38cc5f643bb3db6de90b8bf95ba5cf9e0e30701a2da1c9837e36e5ae8db5f28f1af196f524c231ed1812", &(0x7f0000001c40)=0x9f, &(0x7f0000001c80)="43ed71405928da218f1e97012c8e01ebf21ab0a6d6f8dae8bc8666cac6615c066ea7fc9b0b463b461486c8dd0951a3a54f69bb469eadefec575ae8950fa46f4acb4edb762c165aa91ce143d4524116ba8716be2624775359fbb6c79a7291249f66eb4338c0ae58814ada2d51e842f80f02ef7c9dbc02261e833bf1008b117cdc47764d4a13defd8f25afbe40aa2e7586fed77f0c9a65ef28b56802914d864a895c86e3d576ea2ec701dfa6cab30c8a824b914ddaa80f87caf6ac5ca28ae9f0e2500c59659cf0e42fbcf5b4270c03c15e4037c7ffa87b726502282eb9bfae8f97095d31d554e7d90f884e7cc919", 0xed) ioctl$TIOCSETA(r11, 0x802c7414, &(0x7f0000001d80)={0x7, 0x4, 0x4, 0x6, "f8e1c2673ba707cf2fe077a6b788e7ab3b739607", 0xfff, 0xd}) ioctl$TIOCCLRVERAUTH(r2, 0x2000741d) 1.766465974s ago: executing program 4 (id=2310): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x2800) recvfrom(r0, &(0x7f0000000000)=""/160, 0xa0, 0x1002, 0x0, 0x0) 1.66317399s ago: executing program 5 (id=2316): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x2c, 0xf, 0x3, 0x9}, {0x6, 0x9, 0x1, 0xfffffff2}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="441e38064cbef584a0525e5967e469535f185b5c6ede86a3a12f139634c388d887182e4cb0f54e57e12cf8d831063f08b4f1e9d2abf8f045a7639cb6", 0x3c}], 0x1) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) open(0x0, 0x20000, 0x14) writev(r1, &(0x7f0000001580)=[{&(0x7f0000000580)="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", 0x14c}], 0x1) ktrace(0x0, 0x87654321, 0x51d73188af82c397, 0xffffffffffffffff) execve(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x138, &(0x7f0000000080)=ANY=[]) 1.480261419s ago: executing program 5 (id=2318): setrlimit(0x1, &(0x7f0000000080)={0xfffffffffffffffd, 0x3}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) lseek(r0, 0x3, 0x1) close(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 1.373101007s ago: executing program 5 (id=2322): r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x400000000002, 0x0) setsockopt(r1, 0x0, 0x1f, &(0x7f0000000080)="c5", 0x1) (async) dup2(r1, r0) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0xffff, 0x4, &(0x7f0000000380)=0x49, 0x4) (async, rerun: 32) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) bind(r0, &(0x7f0000000000), 0x10) (async, rerun: 64) r2 = socket(0x2, 0x2, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0xfffffffffffffe6d, 0x0}) write(r3, &(0x7f00000000c0)="da363c76a456c0783d820a4edc91364aa39fb9b796145fe65535c819448b0d910f44a16a0a9300dea8d0e2d85a9bd59c301c448d2f4e98158330e4c670ca0594e55f684d90b2d0cac182453912970fb2ce09a5b529fd2685763ffd675765c5d25df644b128d97e8b741e49a8baac968e4d55e66080b42ec0cff2f5b3ccf5fb2365ee3efc2f0ac9e845a5b0c25f7c224d39e7e4bfbfd9a3c9961e5f1a54", 0x9d) (async) setsockopt$sock_int(r2, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) (async) connect$unix(r2, &(0x7f0000000000), 0x10) (async, rerun: 32) write(r2, 0x0, 0x0) (rerun: 32) 1.372669641s ago: executing program 5 (id=2323): mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000340), 0x0) syz_emit_ethernet(0x0, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x18, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1007, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$FIONREAD(r1, 0xc1206949, &(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0) execve(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) ioctl$TIOCGETA(r3, 0x402c7413, &(0x7f0000000080)) 1.356727895s ago: executing program 1 (id=2325): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x1, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x10001, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0x3, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x4}, {0x9be2, 0x1, 0x2, 0x400}]}) pipe(0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x1000, 0x8, 0xfffffffe, 0xfffffff3, "ff0107002015c8a32d00000065c0bdf9c6f04aaf", 0x9, 0x40004}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000280)=0x6) lchown(0x0, 0x0, 0x0) r1 = socket$inet6(0x18, 0x1, 0xa) connect$inet6(r1, &(0x7f0000000180)={0x18, 0x0, 0x5, 0x7f}, 0xc) getsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x8) openat$speaker(0xffffffffffffff9c, 0x0, 0x2, 0x0) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x18, 0x2, 0x0) close(r2) r3 = socket(0x18, 0x2, 0x0) r4 = socket(0x18, 0x2, 0x0) r5 = dup2(r3, r4) setsockopt(r5, 0x1000000029, 0x23, &(0x7f00000000c0)="b211d7170d816684c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e7aae9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) r6 = socket(0x18, 0x2, 0x0) r7 = dup2(r2, r6) setsockopt(r7, 0x1000000029, 0x23, 0x0, 0x0) mknod(&(0x7f0000000240)='./file0\x00', 0x10, 0x7fffffff) sysctl$kern(&(0x7f0000000000)={0x1, 0x27}, 0x9, 0x0, 0x0, 0x0, 0xfffffe0c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f0000000240), 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1.20810348s ago: executing program 1 (id=2326): r0 = kqueue() kevent(r0, 0x0, 0xfffffffb, 0x0, 0x0, &(0x7f0000000140)={0x7fffffff, 0xfffffffffffffffb}) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffffa, 0x5, 0x1, 0x3c, 0x6}], 0x1, &(0x7f0000000100), 0x5, 0x0) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) open(&(0x7f0000000180)='./file0\x00', 0x615, 0x0) select(0x40, &(0x7f0000000300)={0x7, 0x7, 0x2, 0xc0, 0xa, 0x10000, 0x9, 0x101}, 0x0, &(0x7f0000000380)={0x5d4b, 0x2, 0xffff, 0x5, 0x2, 0x2f5, 0xb682, 0xded}, 0x0) (async) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x3c, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) (async) kevent(0xffffffffffffffff, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async) r2 = syz_open_pts() close(r2) (async) select(0x40, &(0x7f0000000000)={0xe90, 0x5, 0xffffffffffffff80, 0x401, 0x4, 0x1, 0x4, 0x7fff}, &(0x7f00000001c0)={0x8, 0xcd0d, 0x80000001, 0x5, 0x4, 0x2, 0x5, 0x7ff}, &(0x7f0000000200)={0x3, 0x80000001, 0x8001, 0x2, 0x83e6, 0x5, 0x3, 0xe7da}, &(0x7f0000000240)={0x2, 0x2}) (async) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000380)={0xf66a, 0x400, 0x800009, 0x6fffff5f, "9cdc452e307e7f000000000001002f9e301c04bb", 0x80000001, 0x9}) (async) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="3cfc4f924480e571319e08c5656762870ee495fb5b6f1f29248849235efca8809101b01e8fdfaa2ef654f60a67cf221a07f657c0b633d92b5aa1a512a27d1c2954ce4d02b6a4d227ddc969286c8fb7b8fcdeef8473b6afbdd1fa6b8a8c27e4d620163172ee6bf58969cbdd7ff5dd9260929045e9bb159c6009719c360f", 0x7d}, {&(0x7f00000000c0)="6b72ad1008311d616f2dff6c4c2e92c9db459064df61be027fb6b901a3aa93ef110b94f9e24af61d9c1994818e56d5d1489613e479349b7eb2da51bec70f1735426f62cdef1d2560fa56eaa76a765f6370a03ec8ecfe710911e7a1f7a8afb85a4886ee9a4fd7c0281a5370d88e307dc02f8d6b61588cfa1594bc503b02016acc572e559fbc9c478f150f1b38639b2f4012cffd96ca7e84a645f17bf0aa698c654e0e845dfb5fe1e503f488f302650c48362b6fbcdcae4b7c32c7c119e9ea392354c342", 0xc3}, {&(0x7f0000000c00)="bc4af106732f11bfa69d088550edfb82a948514f88ebb9602c293f65cc8e7598d675cf8846edc538270f68e0fd4eef50ff57b848ed3c54c39b6a794eb4306281dc8316c98b05a6f28db4ddd5b163151d8c4f914a956c599b46117a31c39d3ac2f2b38aa55f4d4eb8292bdef23deaa5e8a4eaf2ae48c3033cefc5c1f671783a9addeec3a85415b46a92385841a299b4dda480061a36c1f0a7ef5d8c2d79519b9c750fc59fcbd8de1325b64da8ff7ab408e623bff398a079a76a53a0bdeb666f0708eba661504257fc6fa60360666c1b285854b59869110198fb5cbcfa508955d3603f79f4eed9864970075e719742e605bf6dd6da2b2902512819e03b880e41891c52823d110450c661516a85abeef25dcc1141fb6e42512bc79df4c93c83c727dc4aed63f10508e3b5fb77411b70609d759fdef7f5d6a47d3506ffed54b4feac22f9c342d514212ae3b29cec3d2026ebeaa86195bf689707841dfac791c6ff7627feebc8591cf64d06b8bf8a3af4ba9c321fb2f7f18ddf17936ebb43d29ea8a7685ba4f452f357f34dfa5abbd8bb6e5737f7834536aaea86b3294b3cbbd735338f7ed1c5e245d925ea5ebf591d9677fb96cbfa6d0a41384184c5f41594feecbe1acec4b69c4759d3f0f1413a0cc22698215c5c7eef80bf172cfd1264b9f26730bd14a4f09b6b7bcdf029b25cb6ecd1e4e86f5bb1588a08c75b4005f43b16c68c4ab1e9c68494b667a0369d3d36e8ef278d10da7640771198fd8dc127615a396f9093d25ae5587b75808adffc230a3a363d5d8a3ca7bc3913f1934e3842aefe306b8965a097bff1d9c775339e0fb4abc8e53cadcbea1be571e449ceaa336cf5e335dbaed4c5d0283ea48da24ab48d49a8be784d73b4137c2277451d8b19b08c911102a8f9e5b7c60727fc4fb992c1efa8fe20a49131a6b6f35dc7490feb3a3c4bdb4ec10e4add9d773a91fefda0d1f4c18221c867313be01f37649082f657596aae217159ba59fa616d63b832ff39e790a80c7d0d7a9f834899b2e7b3b3475d0487e505b093a4eb5250843eb4fe6dd00bb1c42edab28b126a2a7c572bae518846f4ae0f2689369d2d7da9e8056ef01eadaf09a48267fd3c21bb40f488a4a5eff81233712bb89773803f00ee28937c8291c3452b3c6be6f177d13d842f8678dd9a76b65278152e06aa1b4f05e57b28b3be9d426490ca9a1119f2a8b0bbac513dc81a677abfd03ae247c34ecf7a9826cac2f476d71c1616fcefdc9856dece7bb426f3acdc3f79bcf6321eee8639fc794d0231f0fa9dcf8a35fb0e26e9a46d916d11a1c26379a652d09aa5f9b3862f112527f33de48077e2e42195355890c39f471bc06dea22832789e7d7f6efcb76b1f38c89601863e69a718ed028a68bd1a8e14fec4d01cf01d292d143f36dbf6e219e95fb0a2a3b5a7e2a9e7b9bc1fa8b33a06089828910208cb1fcc9e9d574c2254d1f12ef1b1968c17722f372bf7d035aae387c74c041c9c0d12d12fc7b004bca3e11556eb261ac78afa07d5165a81bfaad40a66736c7a7e7b4e1a184993b1c575dc60ad167aa021ef561ea214340fc41b5fe6f8708e8258001b15090e5e6a49c78cad8f5ddba36e1d3dfd4847530d4d2955a55c7d1bd75928b7c7abb9579e909b2f1837de884fcb3d0e7c66c27c9e8faa9b88b9690925cc064fd7041c5f958195a524e4f8d4d958bc3b4e474a4e7f225f55b02a211a9509f2188af37800d1d0c4806940ee09e35004a012df582087b0342058e3259fd1aada1988a20e2394dc050e07090de3276b7c6f0988c0259faab6d7ae3bc197518f7f5652f7a9961cb80f5238152eabb4c00abe8605a6ccccc1c90fb408348d5726223e585aca4bfb7eaeb5745f9823be04d096ae0f9af2e47a9cec5f65a1e460697caff", 0x548}], 0x3) (async) setgroups(0x1, &(0x7f0000000180)=[0x0]) (async) setuid(0xee01) r4 = syz_open_pts() fchmod(r4, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x54) (async) acct(0x0) acct(&(0x7f0000000080)='./file0\x00') (async) r5 = kqueue() (async) ioctl$WSMUXIO_ADD_DEVICE(0xffffffffffffffff, 0x80085761, &(0x7f0000000140)={0x1, 0x6}) kevent(r5, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) acct(0x0) (async) acct(&(0x7f0000000080)='./file0\x00') 1.206040325s ago: executing program 5 (id=2329): setreuid(0xee00, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = getuid() r1 = getuid() chown(&(0x7f0000000040)='./file0\x00', r1, 0xffffffffffffffff) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@random="8f6f77ede655", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0400", 0x18, 0x3a, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0xfd, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}) setreuid(0xee00, r0) chown(&(0x7f0000000000)='./file0\x00', r1, 0x0) 1.167257202s ago: executing program 2 (id=2331): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) r2 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r2) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x1000) r3 = socket$inet(0x2, 0x1, 0x0) close(r3) socket(0x24, 0x2, 0x0) setsockopt(r3, 0x6, 0x1, &(0x7f0000000280)="e9f2d779", 0x4) r4 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r4, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) r5 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x48) ioctl$VNDIOCSET(r5, 0xc0285108, &(0x7f0000000040)={0x0, 0x29, 0x0, 0x14}) ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, &(0x7f0000000040)={0x0, 0x0}) 1.166719702s ago: executing program 7 (id=2332): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x400000000002, 0x9) setsockopt(r0, 0x0, 0x21, &(0x7f0000000080)="c5f5d915", 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1=0xe000ffe1}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @multicast2}}}}}}) syz_emit_ethernet(0x1000e, &(0x7f00000003c0)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffb0, 0x0, 0x1, 0xfc}}}}}) madvise(&(0x7f00002a5000/0x1000)=nil, 0x1000, 0x3) 1.161790468s ago: executing program 0 (id=2333): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f00000000c0)={'./file0\x00', 0x7, 0x8, 0x3, 0x0, 0x4, 0xfff, 0x5, 0x2, 0x2, 0xe5, 0xfc}) sysctl$vm(&(0x7f0000000080)={0x2, 0xb}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$vm(&(0x7f0000000080)={0x2, 0xb}, 0x2, 0x0, 0x0, 0x0, 0x0) 1.078936142s ago: executing program 0 (id=2334): mkdir(&(0x7f0000000140)='./file0\x00', 0x2) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000), 0xc) (async) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) setuid(r0) faccessat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x1) 1.078587562s ago: executing program 7 (id=2335): r0 = getppid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xa, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x3}, 0xfffffffffffffffb, 0x8000800000045, r0, 0x0, 0x2, 0x2008005, 0xfffffffffffffffc, 0x100000001}) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x0, 0x0, 0x0) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) fcntl$lock(r1, 0x9, &(0x7f00000001c0)={0x3, 0x2, 0x4, 0x5, r2}) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='x\x00') (async) unveil(&(0x7f0000000400)='./file0/file1\x00', &(0x7f00000000c0)='c\x00') (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ftruncate(r3, 0x40002) pwrite(r3, &(0x7f0000000100)="93d4", 0xfffffeca, 0x5) r4 = socket(0x11, 0x3, 0x0) sendto$unix(r4, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 1.077167628s ago: executing program 0 (id=2336): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETBELL(r0, 0x80105703, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9}) setrlimit(0x1, &(0x7f0000000980)={0x42, 0x61}) r1 = syz_open_pts() close(r1) syz_open_pts() fcntl$dupfd(r1, 0xa, r0) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$FIOASYNC(r2, 0x80047470, &(0x7f0000000000)=0x1) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x7, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8}, 0x0, 0x0, 0x0) 1.074291519s ago: executing program 7 (id=2337): r0 = geteuid() getgroups(0x4, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0]) fchown(0xffffffffffffffff, r0, r1) sysctl$kern(&(0x7f0000000140)={0x1, 0x9}, 0x2, &(0x7f0000000840), 0x0, 0x0, 0x0) pipe2(&(0x7f0000000080), 0x1000c) sysctl$kern(&(0x7f0000000000)={0x1, 0x3b}, 0x2, &(0x7f0000000180)="cf5b5cac89f175a96add92e0a1b7bbc264e9aed45e602e00428f7b0de321466837f52eb5631ff8de7a18fc5760af4687699fbd15cab3d23e5010e1ae5029c86c6beaacdda2e5d69380bbd026c6cf8e6273145dd459d7910d6c", &(0x7f0000000040)=0x59, &(0x7f0000000280)="74906f4c8ad2c98006c0a083ab00292d19fef47d0f4f1310c04c95784d68ae1981ac6779637e20b5a74ea9347a41f275de3e4e8062f0da56592a32d653dbdb7a916951e43897dca318df8ce905306d9a9225b872c1339451d18a1ecb5a3b0e271b3c8983fdb734883dc84bd278c1ec76f8278bad889335d6601e32b1cc7dfd5ff331f1fcf11027fb5013126f1757b6df130b1d92c11bed33792c088fdce7832fdbdcb2c0bbc4e99d60f44658e3b4ed3617d9651851f94a07ed1f881f245942faee6b974eb1d54f256de337822615755eca819bbbd3bedf00b3094f7a8d8a34751feeede726afd779b65e16922cd1ae3a408dd7de91c280ce555cf371cb834dddb2cdf49d6ca6164ac2855eee6489421f4122dfb714502eea878815a2b1fbd0a40dd668ffdfe5e6acd897f5909ccc41bf2862305b30ef58934afd7ff7", 0x13c) geteuid() (async) getgroups(0x4, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0]) (async) fchown(0xffffffffffffffff, r0, r1) (async) sysctl$kern(&(0x7f0000000140)={0x1, 0x9}, 0x2, &(0x7f0000000840), 0x0, 0x0, 0x0) (async) pipe2(&(0x7f0000000080), 0x1000c) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x3b}, 0x2, &(0x7f0000000180)="cf5b5cac89f175a96add92e0a1b7bbc264e9aed45e602e00428f7b0de321466837f52eb5631ff8de7a18fc5760af4687699fbd15cab3d23e5010e1ae5029c86c6beaacdda2e5d69380bbd026c6cf8e6273145dd459d7910d6c", &(0x7f0000000040)=0x59, &(0x7f0000000280)="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", 0x13c) (async) 1.073108368s ago: executing program 0 (id=2338): syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="73b9ccc3000000f70004000086dd6000000000083a01fe8000000000000000000000000000bbff02000000000000000000000000000104"]) mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x100) r0 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x10, r0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0xa, 0x5, 0x100000000, 0x0, 0x80008000, 0x8000002e, 0x1, 0xffffffff, 0x2f01, 0x2, 0x3, 0xfffffffffffffffe, 0x2, 0x4, 0x4, 0xfffffffffffffff5, 0x100], [0x5, 0x40000000000005, 0xfffffffbfffffff8, 0x0, 0x1, 0x80000000, 0x800ee4, 0x8, 0x0, 0x800000047], [0x8, 0x2, 0x100000000000000, 0x0, 0x80000001, 0x0, 0xfffffffffffffffe], [0x3, 0x1ffffffffff, 0x0, 0x100000002, 0xfffffffffffffffc], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x8, 0xfffffffd, 0xffbffffd, 0xffc}, {0x1008, 0x0, 0x9, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x40003, 0xfffffffffffffffe}, {0x6, 0x1, 0x7}, {0x0, 0x95b, 0x200, 0x100000000}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x1, 0x2}}}) kevent(r2, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x80047462, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x80047462, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r3, 0xc0206921, &(0x7f00000001c0)) r4 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r4, 0x8040691a, &(0x7f00000001c0)) close(r2) read(r1, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) 912.737428ms ago: executing program 0 (id=2339): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x10, 0x0) kqueue() mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0x80084904, &(0x7f0000000180)={0x400, './file0\x00'}) poll(&(0x7f0000000340)=[{r1, 0x1}], 0x1, 0x9) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x81, 0x1, 0x2, 0x8}, {0x44, 0xf, 0xc, 0x7}, {0x6, 0x80, 0x8, 0xfffffffe}]}) pipe(&(0x7f0000000640)={0xffffffffffffffff}) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) close(r2) r3 = socket(0x2, 0x3, 0x7) open$dir(0x0, 0x0, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x4, 0xf, 0x2, 0x9}, {0x26, 0x7, 0xff, 0x1}]}) sysctl$hw(0x0, 0x0, &(0x7f0000000280)="50041b02003e807447ff000800000000009586b272f7dedb1f0000008e13c9e268a10337d31196868e11d0af3a0180bb310a87b4fe9f4bceb2e2efba074468aec6266a760da958990a350477e088e2a438c3a9d0", &(0x7f0000000000)=0x54, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r4, &(0x7f0000000600)="d81ad301", 0x4) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x138, &(0x7f0000000080)=ANY=[]) syz_emit_ethernet(0x138, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x80047462, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) setsockopt$sock_int(r2, 0xffff, 0x20, &(0x7f0000000180)=0x6, 0x4) mprotect(&(0x7f000035f000/0x3000)=nil, 0x3000, 0x1) connect$unix(r3, &(0x7f0000000000), 0x10) 870.968864ms ago: executing program 2 (id=2340): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0xfd, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x17f, 0x0, 0x0, 0xbc2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x80) 869.633272ms ago: executing program 5 (id=2341): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, ""/251}, &(0x7f0000000080)=0xfd) accept(r0, 0x0, &(0x7f0000000240)) r1 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r4, 0x800c745b, &(0x7f0000000080)) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getuid() 867.848514ms ago: executing program 2 (id=2342): ioctl$WSKBDIO_SETMAP(0xffffffffffffff9c, 0x8010570e, &(0x7f0000000040)) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0xc81f15b8a261db33, &(0x7f000000f000/0x3000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x1000) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x1}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="d6000000", 0x4) madvise(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x2) select(0x40, &(0x7f0000000080)={0xffffffdffffffffd, 0x400000000000, 0x3, 0x1, 0x5, 0x181c, 0xf0, 0x6}, 0x0, 0x0, 0x0) kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffffa, 0xc0, 0x20000000, 0x7fffffffffffffff, 0x46ad}, {{}, 0xfffffffffffffff9, 0x83, 0xf0000000, 0x3, 0x8}, {{}, 0xfffffffffffffffe, 0x14, 0x10, 0x2000000008, 0x100000005}, {{}, 0xfffffffffffffffb, 0x38, 0x40, 0x1f70, 0x80000000000005}], 0xb19, 0x0) r1 = kqueue() shmget(0x2, 0x4000, 0x33a, &(0x7f0000004000/0x4000)=nil) kevent(r1, 0x0, 0x4, 0x0, 0x15, 0x0) r2 = open(0x0, 0x1, 0x0) setrlimit(0x1, 0x0) r3 = syz_open_pts() ioctl$TIOCSETAF(r3, 0x802c7416, 0x0) poll(0x0, 0x0, 0x7fff) ioctl$FIONBIO(r2, 0x82907003, 0x0) openat$vnd(0xffffffffffffff9c, 0x0, 0x8, 0x0) pledge(0x0, &(0x7f0000002840)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00'/659) syz_open_pts() open(0x0, 0x800, 0x0) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x64, &(0x7f0000001900), 0x4) 862.971378ms ago: executing program 4 (id=2343): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0}) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="69b8159b6174aaa7aaaaaabb86dd60102e6e"]) execve(0x0, 0x0, 0x0) r1 = semget(0x0, 0x1, 0x281) setuid(0xffffffffffffffff) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000004}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) setrlimit(0x8, 0x0) syz_open_pts() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x3, 0x5) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x87, 0x3, 0x9, 0x7}, {0x81, 0x70, 0x2, 0xdffe}, {0x6, 0xf7, 0x8, 0x2}]}) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) syz_emit_ethernet(0x7e, &(0x7f0000000540)=ANY=[]) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, 0x0) setuid(0xee01) socket(0x18, 0x1, 0x0) r4 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) setsockopt$sock_linger(r4, 0xffff, 0x80, &(0x7f0000000040)={0x4, 0x8}, 0x8) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000100)={0x1, 0x35}, 0x3, &(0x7f00000011c0)="71f91e5a91501d94a34bdf536647f49a902027647169000000000000", &(0x7f0000000000)=0xfe10, 0x0, 0x33) connect$unix(r4, &(0x7f0000000000), 0x10) 862.769048ms ago: executing program 7 (id=2344): syz_emit_ethernet(0x54, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa62baaa86dd60000000001e3c03fe8013"]) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f000041f000/0x3000)=nil, 0x3000, 0x4) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x40, 0x2d, 0xfe, 0x8}, {0x6, 0x4, 0x3, 0x7fff}]}) sysctl$hw(0x0, 0x36, &(0x7f0000000780)="0005000000000000001f00385c446200000610ed4e0000000000000000000087dada11956c6b7537e80353939651a5737d5a99da2b4d14cfe6528206cf32e86f54221754ce4aa93204692cc5bd741aeeeecac12e95878135b1a17e49fb9162d9f09b9de85c0b96547a467d3ce9e2ef2bc2e27b0d9c6792418ba162720f3929da5de6e5f729204422e780f1326b15ab8ec64ae386b01d5ef239b875614537d7869a3742a6a79683135e9b6eda0bfe867d066c32595ef0312a2c657b0f19c23a70c374de114a73e23f94ca0c62d54a1431b38f36a2d07c01820fb5d5987383793cf8459b50993f8ca0a2c96d0efc8bc47c2faed9c4f17c139785d54e3d1981ad6d8524a79cb2733b8358cfee15c30d99f46cdc90109a4184e44ed5eb88bc38b2e3bfbed2172833fba09947d5e660b85d83ef867f2dec5b82f16407969a5eb5ef693d4771", &(0x7f0000000000)=0x61, 0x0, 0x21) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x10686, 0x28) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) (async) r3 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r3) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x7fff}, {0x7, 0x4}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r2, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105727, &(0x7f0000000300)={&(0x7f0000000140)=[{0x100, 0x1}], 0x1}) (async) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{0xcd6, 0x94, 0xa, 0x8}, {0x81, 0x6, 0xa, 0x6}, {0x4, 0x50, 0x4, 0x8}, {0x94d8, 0x2, 0x9, 0x7}]}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) sendto(r2, &(0x7f0000000200)="26e1270012d150182642ab26a343a234eae67b9d517e061694296c990d04b5969aa49173ce1a479f77b0b2b650863a2649a498838742b74236f65e6c3d84b053a5a70f17c0d644260610556be49adc5d", 0x50, 0xd, &(0x7f0000000180)=@un=@abs={0x0, 0x0, 0x3}, 0x8) (async) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x4c}) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 793.47979ms ago: executing program 7 (id=2345): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='o4', 0x2}], 0x1) syz_emit_ethernet(0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="fffffbffffff8112dc2d46aaaaaaaaaaaa0806"]) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async, rerun: 64) r0 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) (async, rerun: 64) open(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x100, 0xffc8c992b34cbcc7) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/136, 0x88}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 32) execve(0x0, 0x0, 0x0) (rerun: 32) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r1 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004806003400640003069d90780000002cffffffff070b1effffffff00000010000e009078000b7832000003ff000000010009"]) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) link(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./file0\x00') (async) r2 = socket(0x20, 0x2, 0x0) (async) r3 = syz_open_pts() ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000000)=0x8) (async, rerun: 64) syz_open_pts() (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) ioctl$FIONBIO(0xffffffffffffffff, 0xc0107008, 0x0) (async, rerun: 32) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000240)=0x8) (async, rerun: 32) ioctl$FIONREAD(r2, 0x80206979, &(0x7f00000000c0)) (rerun: 32) ioctl$WSDISPLAYIO_SBURNER(r0, 0x800c5751, &(0x7f00000004c0)={0x7, 0x41b4}) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') 793.15678ms ago: executing program 7 (id=2346): pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) r1 = socket(0x800000018, 0x1, 0x0) ioctl$FIONREAD(r1, 0xc050756a, &(0x7f0000000100)) sysctl$kern(&(0x7f0000000200)={0x1, 0x5}, 0x2, &(0x7f00000011c0)="71f90900", &(0x7f0000000000)=0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) r4 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0xf00, r4) syz_open_pts() r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x2d, 0x2, 0x8}, {0x40, 0xf, 0x9, 0x7}, {0x6, 0x80, 0x8, 0xfffffffe}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) listen(0xffffffffffffffff, 0x3) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0xfffffffffffffe6d, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[]) pledge(0x0, &(0x7f00000000c0)='\x00') pledge(0x0, &(0x7f0000002840)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00'/659) setregid(r3, 0xffffffffffffffff) setregid(0x0, 0x0) write(r0, &(0x7f00000000c0)="c3", 0xffffffed) r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2010, r6, 0x0) read(r6, &(0x7f0000000280)=""/135, 0x87) 748.715192ms ago: executing program 0 (id=2351): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) ftruncate(r0, 0x8531) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) minherit(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0xa3) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x2012, r1, 0x0) 123.369493ms ago: executing program 1 (id=2354): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() close(r0) syz_open_pts() writev(r0, &(0x7f0000000280)=[{&(0x7f0000000c00)="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", 0x411}, {0x0}], 0x2) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$inet(0x2, 0x4000, 0xe2) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000100)="b95dd062b2fc3df43c42867bcc0dd9bf958766321ee7636ab4a231b9f88c03e44f8374541252ddeb02d15e5d52b0e9b71d723ea326ee1000cfbb783ff86ef8f293152803696b5ae6228a3332441cf578fa15f62b2ffbcacb981f0be465072ca904a30c9ec2e7e5146d36f504737dbe86d0b82ca2", 0x74) rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') link(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 123.043921ms ago: executing program 6 (id=2355): syz_extract_tcp_res(&(0x7f0000000180)={0x41424344, 0x41424344}, 0x1, 0xfff) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc1", 0x2}], 0x1) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00070100000000", 0xc) syz_emit_ethernet(0x4d, &(0x7f0000000200)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x6, 0x3f, 0x64, 0x21e4, 0x84, 0x88, 0x0, @remote={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, r0, 0x41424344, 0x1, 0x0, 0x5, 0x20, 0x4, 0x0, 0x1}, {"739a67d26ed12b5734039fc65d4a6825ef812382de74ec"}}}}}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000)=@file={0x1}, 0x2, 0x0}, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r2 = open(&(0x7f0000000040)='./file0\x00', 0x10, 0x10) ioctl$TIOCFLUSH(r2, 0x80047410, &(0x7f0000000080)=0x2) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0xfffffffffffffd9a, 0x0, 0xffffffffffffff08, 0x408}, 0x408) syz_emit_ethernet(0x10f, &(0x7f0000000280)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x3, 0x6, "05e410", 0xd9, 0x1, 0xfd, @remote={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x1, 0x2, r0, 0x41424344, 0x1, 0x0, 0xb, 0x80, 0x4, 0x0, 0x7, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0xe, 0xffff}, @generic={0x3, 0x9, "729d0c153b2e92"}]}}, {"fcb33314590506a63546a9c44bfd18e0e5f417724ae5ecc9a5477af8dfdec2885cae7d9b039b0c4b6cccb02d13ab3882f4a7e11aa613c1cf3b777341d50ed17249fbe511c0e13a49a65ccd535eef1764dd607c0747081e450c0ab96df6f7857d40ee4d366a2079fd6be9f146dfabd63f57fd361106943972449530f1b89560ca73d0c2c0c89bed4d06c2c05969e93d9d365758b4bcebeba2d4c366423329f6056c1ed8980ed433870092571653"}}}}}}}) 121.790728ms ago: executing program 6 (id=2356): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x85, 0x48e}, 0x6, 0x9, 0x0, 0x0, 0x1, 0xb000000001004000, 0xfffffffffffffffd, 0x807}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x59}, 0x2, &(0x7f0000000100)="00e0", 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) dup2(r0, r1) (async) dup2(r0, r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x64, &(0x7f0000001900), 0x4) 121.281872ms ago: executing program 6 (id=2357): open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000380)={'./file1\x00', 0x6, 0x2000003, 0xeffffff9, 0x0, 0x7, 0x8, 0x6, 0x1, 0x2, 0x4001, 0x7f}) (async) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async) socket(0x18, 0x3, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$VMM_IOC_CREATE(r1, 0xc2585601, &(0x7f00000000c0)={0x10, 0x4, [{&(0x7f0000659000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x200007fffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7d}, {&(0x7f0000e63000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x6}, {&(0x7f00008a7000/0x3000)=nil, &(0x7f00001ac000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f000068c000/0x4000)=nil, &(0x7f0000610000/0xf000)=nil, 0x481}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x80000000}, {&(0x7f000032b000/0x2000)=nil, &(0x7f00008c4000/0x4000)=nil, 0xc}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f000074b000/0x1000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000f44000/0x3000)=nil, 0x51}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f0000257000/0x1000)=nil, &(0x7f000069c000/0x3000)=nil, 0x12b}, {&(0x7f000057c000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x3fffc0000000}, {&(0x7f0000d03000/0x1000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x1000000000004}, {&(0x7f0000ee3000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffff7ffbffffff4}, {&(0x7f00005fb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000039f7}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001000/0x800000)=nil, 0x6}], './file1\x00', 0xfffffffe}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x11, 0x2, &(0x7f0000000000), 0x0) (async) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xa8) (async) ktrace(&(0x7f0000000180)='./file0\x00', 0x2f, 0x51d73188af82c397, 0xffffffffffffffff) (async) ioctl$TIOCSETA(r1, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5}) (async) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) 109.336119ms ago: executing program 4 (id=2358): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000), 0x10) (async) shutdown(r0, 0x2) (async) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffac) listen(r0, 0x0) close(r0) mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x802, 0x16, 0x3, 0x5fe, 0x80000004, 0x80008003, 0x10001, 0x10, [{0x6, 0x7, 0x4, 0x70fff}, {0xffffffff, 0x8, 0x8, 0x8001}, {0x8, 0xf86, 0x3, 0x9}, {0x8000001, 0x80c, 0x8007}, {0x5, 0x200722, 0x2800, 0xfffffd5b}, {0x2, 0x6, 0xfffffffc, 0x99}, {0xa1, 0xffffffff, 0x4, 0x2000006d}, {0x6, 0x1803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x7fff, 0xd1b, 0x88}, {0x1ce, 0x4, 0x80406, 0x3}, {0x7ff, 0xb, 0x8, 0x9}, {0x400, 0x4, 0x40000008, 0x4}, {0x29a71717, 0xfffefff9, 0x1, 0x6}, {0xc, 0x7, 0x3, 0x7fff}, {0x0, 0x1, 0x1002, 0x3}]}) (async) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCGET(r2, 0x20006473, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket(0x1, 0x1, 0x0) getsockopt$sock_cred(r3, 0xffff, 0x1024, &(0x7f0000000240)={0x0}, &(0x7f00000001c0)=0xc) setpgid(r4, r4) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x2, 0x20, r4) (async) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x800800000000000, 0x0}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0x7, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x9, 0x0, 0x7, 0xd7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00', 0x3, 0x3}) (async) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) ioctl$BIOCLOCK(r1, 0x20004276) (async) r5 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) (async) accept(0xffffffffffffffff, &(0x7f0000000740)=@un=@file={0x0, ""/514}, &(0x7f0000000080)=0xffffffffffffff4f) ioctl$VMM_IOC_INTR(r5, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) 108.234167ms ago: executing program 6 (id=2359): r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1023, &(0x7f00000004c0), 0x3) bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x3}, 0x8) 7.76723ms ago: executing program 2 (id=2360): select(0x57, 0x0, 0x0, 0xfffffffffffffffe, 0x0) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = msgget$private(0x0, 0x460) msgsnd(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000000"], 0xe2, 0x800) msgrcv(r1, &(0x7f0000000e40)={0x0, ""/254}, 0x106, 0x0, 0x1800) ioctl$VMM_IOC_INFO(r0, 0xc0185603, &(0x7f0000000400)={0x0, 0x0, 0x0}) 6.687422ms ago: executing program 4 (id=2361): r0 = socket(0x2, 0x3, 0x0) execve(0x0, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$FIONREAD(r0, 0xc0206921, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x3}, {}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {0x2}, {}, {0x0, 0x5}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2, 0xd}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) r2 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r2, 0x8020690c, &(0x7f00000001c0)) 2.871721ms ago: executing program 6 (id=2362): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x2c, 0xf, 0xfe, 0x9}, {0x6, 0x6, 0x1, 0xfffffff2}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x0, 0x2, 0x2) ioctl$FIONREAD(r1, 0x802069af, &(0x7f00000001c0)) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="441e38064cbef584a0525e5967e469535f185b5c6ede86a3a12f139634c388d887182e4cb0f54e57e12cf8d8", 0x2c}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r2, 0xc0284457, &(0x7f0000000000)={0x0, 0x4, 0x9, 0x1405, "080400000000000000010000000100", 0x4917, 0x7}) ioctl$TIOCCDTR(r2, 0x20007478) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() ioctl$FIOASYNC(r3, 0x80047466, &(0x7f0000000200)=0x5) ioctl$TIOCCBRK(r4, 0x2000747a) poll(&(0x7f0000000040)=[{r3, 0x57c52096be7fbd62}], 0x1, 0x0) write(r0, &(0x7f0000000240)="d81ad30100000000000100000000", 0xe) 992.553µs ago: executing program 4 (id=2363): sysctl$hw(&(0x7f0000000040)={0x7, 0x10}, 0x2, &(0x7f0000000200)="a4896071", &(0x7f00000001c0)=0x4, 0x0, 0x0) sysctl$hw(&(0x7f0000000000)={0x6, 0xf}, 0x2, &(0x7f0000000080)="93e3e7a0749234088fca4c15895a2e6c", &(0x7f00000000c0)=0x10, &(0x7f0000000100)="96834be76db7ca7d90ae8acce64fc66d141be7001c5710132cd1b3eebbc1c9ae5e88fa3875f2744d246c659001c16d125097d1abdd5ee73631ef6d08ab4e6b438c97cc8191e871f5913e9edccf1eb788e77052a4ed918265d5d21bfdf85ab2d99de48f57786f598f3cae1503e45aa571528eb3d7f4a20190d0a55d557668232818d1be1c901a15b028bb32520ed114bb7c7bed685f04ba5c31bd317a70370e40ae91bfec8b7a6a8674e6768800d6943acd9145544bad898395bd738ee3", 0xbd) sysctl$kern(&(0x7f00000000c0)={0x1, 0x47}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffffff26) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=2364): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) (async) r1 = socket(0x18, 0x2, 0x0) (async) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) (async) r2 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x2, 0x1, 0x34, 0x64, 0x3, 0x6, 0x9d, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0xb, 0x1e, [@local={0xac, 0x14, 0x0}, @loopback]}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x8, 0x3fc, 0x4, 0x9}}}}}) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) (async) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) ioctl$FIONREAD(r1, 0x801c693d, &(0x7f00000001c0)) (async) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) lseek(r0, 0x3, 0x1) close(r0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error WARNING: thread `nfsio' (429625) exits with status -1 WARNING: thread `nfsio' (78651) exits with status -1 WARNING: thread `nfsio' (119913) exits with status -1 WARNING: thread `nfsio' (285701) exits with status -1 WARNING: thread `nfsio' (199918) exits with status -1 WARNING: thread `nfsio' (38146) exits with status -1 WARNING: thread `nfsio' (489920) exits with status -1 WARNING: thread `nfsio' (227183) exits with status -1 WARNING: thread `nfsio' (234979) exits with status -1 WARNING: thread `nfsio' (350334) exits with status -1 WARNING: thread `nfsio' (243102) exits with status -1 WARNING: thread `nfsio' (263093) exits with status -1 WARNING: thread `nfsio' (154192) exits with status -1 WARNING: thread `nfsio' (124301) exits with status -1 WARNING: thread `nfsio' (219288) exits with status -1 WARNING: thread `nfsio' (131554) exits with status -1 WARNING: thread `nfsio' (179797) exits with status -1 WARNING: thread `nfsio' (424868) exits with status -1 WARNING: thread `nfsio' (136620) exits with status -1 WARNING: thread `nfsio' (251885) exits with status -1 pckbd_enable: command error det set clock forward to 13622315181289262 denied attempt to set clock forward to 13622315181289262 denied attempt to set clock forward to 13622315181289262 pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error load: 7.45 not a controlling terminal malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pckbd_enable: command error wskbd0: can't attach mux (error=5) pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-multicore-7.us-central1-b.c.syzkaller.internal) (tty00) login: malloc(): allocation too large, type = 29, size = 16796513700 pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 2719927198 seconds pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 denied attempt to set clock back 19 seconds denied attempt to set clock back 19 seconds malloc(): allocation too large, type = 29, size = 16796513700 panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va 0x6f362016000, opte 0xfffffffffffffffd Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND db_enter() at db_enter+0x25 panic(ffffffff8343e93a) at panic+0x1e5 pmap_remove_pte(fffffd80726c6400,fffffd80088e4d00,7f8379b10000,6f362000000,6f362200000,0) at pmap_remove_pte pmap_do_remove(fffffd80726c6400,6f361e9d000,6f36229c000,0) at pmap_do_remove+0x589 uvm_unmap_kill_entry_withlock(fffffd806caf29a0,fffffd806caf3888,0) at uvm_unmap_kill_entry_withlock+0x269 uvm_map_teardown(fffffd806caf29a0) at uvm_map_teardown+0x117 exit1(ffff8000fffde2d0,0,0,1) at exit1+0x6fc sys_exit(ffff8000fffde2d0,ffff80003c443c90,ffff80003c443be0) at sys_exit+0x1a syscall(ffff80003c443c90) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x718d69f06c90, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va 0x6f362016000, opte 0xfffffffffffffffd ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff8343e93a) at panic+0x1e5 pmap_remove_pte(fffffd80726c6400,fffffd80088e4d00,7f8379b10000,6f362000000,6f362200000,0) at pmap_remove_pte pmap_do_remove(fffffd80726c6400,6f361e9d000,6f36229c000,0) at pmap_do_remove+0x589 uvm_unmap_kill_entry_withlock(fffffd806caf29a0,fffffd806caf3888,0) at uvm_unmap_kill_entry_withlock+0x269 uvm_map_teardown(fffffd806caf29a0) at uvm_map_teardown+0x117 exit1(ffff8000fffde2d0,0,0,1) at exit1+0x6fc sys_exit(ffff8000fffde2d0,ffff80003c443c90,ffff80003c443be0) at sys_exit+0x1a syscall(ffff80003c443c90) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x718d69f06c90, count: -10 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c443840 rbx 0xffffffff837d6e07 cpu_info_full_primary+0x2e07 rdx 0 rcx 0xffff8000fffde2d0 rax 0xffffffff837d5ff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x9b94804c4a78c4a3 r11 0xfc12df2bb7c38b0 r12 0xffffffff837d6c08 cpu_info_full_primary+0x2c08 r13 0 r14 0 r15 0x1 rip 0xffffffff831264f5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c443830 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=506267 pid=56487 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=84, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff8000fffde2d0 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80002a2847e0,0xffff80002a2842c0 process=0xffff8000fffd8038 user=0xffff80003c43e000, vmspace=0xfffffd806caf29a0 estcpu=34, cpticks=2, pctcpu=0.1, user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 62694 160495 14784 0 2 0 syz-executor 62694 338208 14784 0 2 0x4000000 syz-executor 1271 308617 52671 0 2 0 syz-executor 1271 176858 52671 0 2 0x4000000 syz-executor 26412 344161 4149 0 2 0 syz-executor 26412 135709 4149 0 3 0x4000080 fsleep syz-executor 50215 67737 9011 0 2 0 syz-executor 50215 97800 9011 0 2 0x4000000 syz-executor 69281 351660 86069 0 2 0 syz-executor 69281 442189 86069 0 3 0x4000080 fsleep syz-executor 69281 357131 86069 0 3 0x4000080 fsleep syz-executor 60716 456351 15172 0 2 0x400010 syz-executor 60716 434996 15172 0 3 0x4400090 pipewr syz-executor 60716 73431 15172 0 3 0x4400090 fsleep syz-executor 60716 234464 15172 0 3 0x4400090 fsleep syz-executor 2970 50015 0 0 3 0x14280 nfsidl nfsio 89729 232654 0 0 3 0x14280 nfsidl nfsio 80359 502462 0 0 3 0x14280 nfsidl nfsio 4967 517532 0 0 3 0x14280 nfsidl nfsio 37666 504632 0 0 3 0x14280 nfsidl nfsio 15759 50156 0 0 3 0x14280 nfsidl nfsio 83554 354358 0 0 3 0x14280 nfsidl nfsio 74179 414788 0 0 3 0x14280 nfsidl nfsio 98292 495556 0 0 3 0x14280 nfsidl nfsio 34139 50128 0 0 3 0x14280 nfsidl nfsio 14214 95222 0 0 3 0x14280 nfsidl nfsio 86556 311898 0 0 3 0x14280 nfsidl nfsio 91887 260639 0 0 3 0x14280 nfsidl nfsio 92990 266353 0 0 3 0x14280 nfsidl nfsio 30610 94434 0 0 3 0x14280 nfsidl nfsio 8367 186685 0 0 3 0x14280 nfsidl nfsio 80478 521670 0 0 3 0x14280 nfsidl nfsio 78724 195640 0 0 3 0x14280 nfsidl nfsio 36660 474629 0 0 3 0x14280 nfsidl nfsio 64540 313299 0 0 3 0x14280 nfsidl nfsio 4149 82736 11547 0 3 0x82 nanoslp syz-executor 14784 99990 11547 0 3 0x82 nanoslp syz-executor 60395 270151 1 0 3 0x100083 ttyopn getty 93355 389463 11547 0 3 0x82 wait syz-executor 15172 243154 11547 0 3 0x82 nanoslp syz-executor 52671 348419 11547 0 3 0x82 nanoslp syz-executor 9011 409406 11547 0 3 0x82 nanoslp syz-executor 86069 215886 11547 0 3 0x82 nanoslp syz-executor 93542 179449 11547 0 3 0x82 nanoslp syz-executor 11547 283065 90256 0 3 0x82 kqread syz-executor 90256 494055 94478 0 3 0x10008a sigsusp ksh 94478 66 90714 0 3 0x98 kqread sshd-session 90714 438338 55343 0 3 0x92 kqread sshd-session 55343 9692 1 0 3 0x88 kqread sshd 59880 323178 84092 74 3 0x1100092 bpf pflogd 84092 398217 1 0 3 0x80 sbwait pflogd 82268 440694 26279 73 3 0x1100090 kqread syslogd 26279 486210 1 0 3 0x100082 sbwait syslogd 84579 266164 1 0 3 0x100080 kqread resolvd 55230 291702 51233 77 3 0x100092 kqread dhcpleased 65308 498074 51233 77 3 0x100092 kqread dhcpleased 51233 305078 1 0 3 0x80 kqread dhcpleased 1650 326687 0 0 3 0x14200 bored smr 73451 318014 0 0 2 0x14200 zerothread 62620 294841 0 0 3 0x14200 aiodoned aiodoned 70152 196398 0 0 3 0x14200 syncer update 39654 390956 0 0 3 0x14200 cleaner cleaner 87782 410814 0 0 3 0x14200 reaper reaper 19572 38214 0 0 3 0x14200 pgdaemon pagedaemon 11557 167386 0 0 3 0x14200 bored viomb 75229 9756 0 0 3 0x40014200 acpi0 acpi0 45744 73328 0 0 7 0x40014200 idle1 66842 123600 0 0 3 0x14200 bored softnet1 68021 503317 0 0 3 0x14200 bored softnet0 70802 255754 0 0 3 0x14200 bored systqmp 6948 463473 0 0 3 0x14200 bored systq 7600 81894 0 0 3 0x14200 tmoslp softclockmp 34833 517441 0 0 3 0x40014200 tmoslp softclock 64901 454378 0 0 3 0x40014200 idle0 1 113075 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd80726c6410) #0 witness_lock+0x5f1 #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 pmap_do_remove+0xa9 #4 uvm_unmap_kill_entry_withlock+0x269 #5 uvm_map_teardown+0x117 #6 exit1+0x6fc #7 sys_exit+0x1a #8 syscall+0xb17 #9 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10246 11049K 12368K 166960K 14238 0 pcb 17 15K 17K 166960K 649 0 rtable 223 13K 13K 166960K 715 0 pf 43 19K 82K 166960K 446 0 ifaddr 39 7K 9K 166960K 179 0 ifgroup 66 2K 3K 166960K 358 0 sysctl 4 1K 9K 166960K 18 0 counters 74 37K 38K 166960K 382 0 ioctlops 0 0K 4K 166960K 2201 0 iov 0 0K 16K 166960K 186 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1515 95K 96K 166960K 3484 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 9 0 VM map 2 1K 1K 166960K 2 0 sem 28 136K 137K 166960K 133 0 dirhash 60 10K 12K 166960K 1008 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 236K 166960K 2572 0 sigio 1 0K 0K 166960K 48 0 proc 72 115K 148K 166960K 839 0 subproc 72 4K 4K 166960K 103 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 334 0 in_multi 77 5K 7K 166960K 220 0 ether_multi 1 0K 0K 166960K 26 0 mrt 2 0K 0K 166960K 42 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 259 1155K 1155K 166960K 259 0 exec 0 0K 1K 166960K 789 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 7 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 268 191K 209K 166960K 24603 0 UVM aobj 16 8K 8K 166960K 19 0 pinsyscall 42 84K 106K 166960K 3781 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 430 0 NDP 14 0K 2K 166960K 134 0 temp 79 8680K 8936K 166960K 134348 0 kqueue 13 20K 32K 166960K 486 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 306 0 302 3 2 1 3 0 8 0 rtentry 176 204 0 125 6 0 6 6 0 8 0 unpcb 144 1992 0 1973 17 15 2 6 0 8 1 syncache 336 10 0 10 6 5 1 1 0 8 1 tcpqe 32 4 0 4 2 2 0 1 0 8 0 tcpcb 736 872 0 866 11 4 7 7 0 8 5 arp 136 28 0 15 1 0 1 1 0 8 0 inpcb 328 3217 0 3207 31 24 7 13 0 8 4 nd6 152 45 0 25 2 0 2 2 0 8 0 pkpcb 40 20 0 20 5 4 1 1 0 8 1 kcovpl 48 11 0 3 1 0 1 1 0 8 0 mppekey 1024 3 0 3 2 1 1 1 0 8 1 ppxss 1192 117 0 117 2 1 1 1 0 8 1 pppxif 1504 16 0 16 7 6 1 1 0 8 1 pfstscr 40 1 0 1 1 1 0 1 0 8 0 pffrag 232 33 0 18 1 0 1 1 0 482 0 pffrnode 88 29 0 16 1 0 1 1 0 8 0 pffrent 40 72 0 57 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 4 0 4 3 3 0 1 0 8 0 pftag 88 3 0 1 1 0 1 1 0 8 0 pfstitem 24 154 0 55 1 0 1 1 0 8 0 pfstkey 128 156 0 60 4 0 4 4 0 8 0 pfstate 448 152 0 56 11 0 11 11 0 8 0 pfrule 1344 99 0 94 2 1 1 2 0 8 0 rttmr 136 11 0 11 2 2 0 1 0 8 0 art_heap8 4096 4 0 0 4 0 4 4 0 8 0 art_heap4 256 801 0 457 31 5 26 31 0 8 0 art_table 40 805 0 457 5 0 5 5 0 8 0 art_node 32 203 0 135 1 0 1 1 0 8 0 sysvmsgpl 40 10 0 3 1 0 1 1 0 8 0 semupl 112 3 0 3 3 2 1 1 0 8 1 semapl 112 123 0 97 1 0 1 1 0 8 0 shmpl 112 12 0 2 1 0 1 1 0 8 0 dirhash 1024 362 0 329 5 0 5 5 0 8 0 dino2pl 256 6368 0 4857 96 0 96 96 0 8 0 ffsino 296 6368 0 4857 118 0 118 118 0 8 0 nchpl 144 9917 0 8209 64 0 64 64 0 8 0 rtmask 32 29 0 29 5 4 1 1 0 8 1 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 34719 0 34719 5 4 1 2 0 8 1 percpumem 16 206 0 154 1 0 1 1 0 8 0 vcpupl 3968 4 0 1 1 0 1 1 0 8 0 vmpool 840 4 0 1 1 0 1 1 0 8 0 kstatmem 264 228 0 194 3 0 3 3 0 8 0 scsiplug 72 16 0 16 6 5 1 1 0 8 1 scxspl 216 51789 0 51789 11 10 1 8 1 8 1 plimitpl 152 736 0 718 1 0 1 1 0 8 0 sigapl 424 2899 0 2831 10 2 8 8 0 8 0 knotepl 120 558 0 0 17 0 17 17 0 8 0 kqueuepl 224 1179 0 1170 12 7 5 5 0 8 4 pipepl 344 552 0 524 13 9 4 9 0 8 1 fdescpl 528 2838 0 2807 3 0 3 3 0 8 0 filepl 160 19705 0 19479 34 19 15 18 0 8 3 lockfpl 104 1040 0 1037 2 1 1 2 0 8 0 lockfspl 48 318 0 315 1 0 1 1 0 8 0 sessionpl 144 32 0 23 1 0 1 1 0 8 0 pgrppl 48 102 0 85 1 0 1 1 0 8 0 ucredpl 104 3056 0 3041 1 0 1 1 0 8 0 zombiepl 144 2844 0 2842 3 2 1 1 0 8 0 processpl 1232 2899 0 2831 8 2 6 6 0 8 0 procpl 664 7000 0 6923 10 2 8 8 0 8 1 sosppl 176 25 0 25 5 4 1 1 0 8 1 sockpl 752 5588 0 5555 52 41 11 18 0 8 7 mcl64k 65536 19 0 0 3 0 3 3 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 10 0 0 2 0 2 2 0 8 0 mcl4k 4096 115 0 0 14 0 14 14 0 8 0 mcl2k 2048 83 0 0 10 1 9 9 0 8 0 mtagpl 96 86 0 0 3 0 3 3 0 8 0 mbufpl 256 1832 0 0 112 0 112 112 0 8 0 bufpl 280 19236 0 13099 439 0 439 439 0 8 0 anonpl 32 10801 0 0 87 0 87 87 0 246 0 amapchunkpl 152 85867 0 85115 57 27 30 33 0 158 0 amappl16 200 7885 0 7847 66 51 15 25 0 8 8 amappl15 192 5 0 5 1 1 0 1 0 8 0 amappl14 184 4 0 4 3 3 0 1 0 8 0 amappl13 176 506 0 505 1 0 1 1 0 8 0 amappl12 168 3237 0 3194 3 0 3 3 0 8 0 amappl11 160 39 0 39 2 2 0 1 0 8 0 amappl10 152 54 0 39 1 0 1 1 0 8 0 amappl9 144 255 0 255 1 1 0 1 0 8 0 amappl8 136 33 0 30 1 0 1 1 0 8 0 amappl7 128 96 0 94 1 0 1 1 0 8 0 amappl6 120 351 0 336 1 0 1 1 0 8 0 amappl5 112 82 0 71 1 0 1 1 0 8 0 amappl4 104 466 0 436 1 0 1 1 0 8 0 amappl3 96 17540 0 17419 6 2 4 4 0 8 0 amappl2 88 611 0 549 2 0 2 2 0 8 0 amappl1 80 20916 0 20320 17 3 14 15 0 8 0 amappl 88 23339 0 23155 5 0 5 5 0 92 0 uvmvnodes 80 189 0 0 4 0 4 4 0 8 0 dma65536 65536 1 0 1 1 1 0 1 0 8 0 dma8192 8192 1 0 1 1 1 0 1 0 8 0 dma4096 4096 2 0 2 2 2 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 2 0 2 2 2 0 1 0 8 0 dma256 256 9 0 9 3 3 0 1 0 8 0 dma128 128 260 0 260 6 5 1 1 0 8 1 dma64 64 7 0 7 2 2 0 1 0 8 0 dma32 32 8 0 8 2 2 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 18 0 3 1 0 1 1 0 8 0 uaddrrnd 24 2838 0 2806 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 2838 0 2806 1 0 1 1 0 8 0 vmmpekpl 168 25101 0 25049 3 0 3 3 0 8 0 vmmpepl 168 182883 0 180863 129 29 100 106 0 357 6 vmsppl 488 2837 0 2806 5 0 5 5 0 8 0 rwobjpl 80 46174 0 45004 39 9 30 32 0 8 0 pdppl 4096 5692 0 5617 124 49 75 86 0 8 0 pvpl 32 19312 0 0 157 2 155 155 0 265 0 pmappl 256 2841 0 2807 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 450 0 78 11 0 11 11 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff8343e93a) at panic+0x1e5 pmap_remove_pte(fffffd80726c6400,fffffd80088e4d00,7f8379b10000,6f362000000,6f362200000,0) at pmap_remove_pte pmap_do_remove(fffffd80726c6400,6f361e9d000,6f36229c000,0) at pmap_do_remove+0x589 uvm_unmap_kill_entry_withlock(fffffd806caf29a0,fffffd806caf3888,0) at uvm_unmap_kill_entry_withlock+0x269 uvm_map_teardown(fffffd806caf29a0) at uvm_map_teardown+0x117 exit1(ffff8000fffde2d0,0,0,1) at exit1+0x6fc sys_exit(ffff8000fffde2d0,ffff80003c443c90,ffff80003c443be0) at sys_exit+0x1a syscall(ffff80003c443c90) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x718d69f06c90, count: -10 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 acpicpu_idle() at acpicpu_idle+0x457 sched_idle(ffff8000299edff0) at sched_idle+0x391 end trace frame: 0x0, count: 10 ddb{1}> trace x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 acpicpu_idle() at acpicpu_idle+0x457 sched_idle(ffff8000299edff0) at sched_idle+0x391 end trace frame: 0x0, count: -5