last executing test programs: 2.02964915s ago: executing program 4 (id=7957): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0x401, 0x3, 0x1ffffffffffffffc, 0x181a, 0x8, 0x10000000009}, 0x0, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000140)={0x4, 0xfffffffe, 0x2, 0x0, "d76c0f652155a784858e74fbf520000002000f00", 0xfffffff9, 0x401}) kqueue() (async) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x22) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) (async) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x80004, 0xfdfffff4, 0x7fe, 0x0, 0x1, 0x20009, 0x20002, 0x2, 0x1, 0x43, 0x2000000005}) (async) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x80004, 0xfdfffff4, 0x7fe, 0x0, 0x1, 0x20009, 0x20002, 0x2, 0x1, 0x43, 0x2000000005}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000040)=0x20d) dup2(r0, r1) 1.815137796s ago: executing program 4 (id=7965): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0xfffffffc}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x0, 0xaa59}, {0x2}, {0x1, 0xffffffff}, {0x2}, {0x3, 0x4}, {}, {0x0, 0xffffffff}, {0x0, 0xfffffffc}, {0x0, 0x80000001}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x3}, {0x0, 0xffffffff}, {0x3, 0x7ff}, {0x1}, {0x2}, {0x3}, {0x3, 0x3}, {}, {0x2, 0x1}, {}, {0x0, 0x200}, {0x2}, {0x0, 0xfffffffd}, {0x1, 0xa}, {0x2}]}) (async) setreuid(0x0, 0xee01) r0 = syz_open_pts() (async) r1 = socket(0x18, 0x2, 0x0) (async) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="66cad9e112cddc522f4a6f1d90270fd9d1a64c82d707661137481d4d7ce8c8db9d99be014fdd0bc2275ae2f1aa699eac666717e903cfcb9e4fb09e7d587366644168639dc209e52a64603f02fe490fb626fbf5737ec0fca1b8db2c7628a70b3d055cd2e63ab0955d6cab54cccbaac728bc4406", 0x73}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000740)="647a334e5af7ff326a752b5306149fe1ffaa2a2ce59138083bf85abcb45b6c33938fb52fd6afd6e1a7d0315c5a27121bb4bb5ea6c4375c361179d1d3da731bc0631b0e4d01873b1504913f562d921aba9d9197d803a18a9e63b6d767dde638f6fe5d7cf95721572dd2443fefb2e4b6bf6d4e4e", 0x73}], 0x1) (async) unveil(0x0, &(0x7f0000000000)='x\x00') setsockopt(r1, 0x1000000000029, 0xd, &(0x7f0000000000)="ffdaf64c000000004f0527000000055e473e0000", 0x14) (async) ioctl$FIOASYNC(r0, 0x80047460, &(0x7f00000000c0)=0x4) (async) r3 = getuid() setuid(r3) (async) setuid(r3) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000080)={0xb48f, 0x3fd, 0x7, 0x400, "2c7f88d112afd4f3bfed0f274ca9576eb663855b", 0x2000794, 0x4}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)="735310a81412a43e464e1b3737f3662088ea6e5053fdfdd756321c410a675bf3a57175103b152009", 0x28}, {0x0}], 0x2) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) (async) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x162) 1.813745455s ago: executing program 4 (id=7967): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000400)="7e05", 0x2}], 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b9853a1400"/17, 0x11) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, &(0x7f0000000140)="43f1f94ea50000001a1a", 0xa) readlink(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)=""/53, 0x35) 1.763435827s ago: executing program 4 (id=7969): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) (async) openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x80) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x1, 0xffef9ff6, 0x2, "4b06a6bcff0300dba800000000000800", 0x0, 0xd}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000180)={0x0, 0x0, 0x2, 0xfffffffc, "32cd8b6a4682fe4b8c1a6c230000005d31000094"}) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x166441, 0xfffffff8, 0xea, 0x800, "978680cf00000008000e00", 0x4, 0x1}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000000)="b10005136000009f050000002010000000000934ed0a0500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4d0800000000000000f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b671f4d335d223e7db3009b95665b00e32118eab0000000cc00fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4abd1182d000000002002fb1c0c2300008abfba09000000d8e37f71a3f8343712051eeab71d89e000040381ecb664000000", 0xb1, 0x0, 0x0, 0x0) r3 = open(0x0, 0x20, 0x0) ioctl$FIONBIO(r3, 0x82907003, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x1e, 0x0, 0x0) (async) getsockopt(0xffffffffffffffff, 0x0, 0x1e, 0x0, 0x0) unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f0000001100), 0x4) openat$tty(0xffffffffffffff9c, 0x0, 0x40, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0) r4 = kqueue() ioctl$FIONBIO(r2, 0x8004667e, &(0x7f00000001c0)=0x6) kevent(r4, &(0x7f0000000340)=[{{r0}, 0xfffffffffffffff8, 0x3, 0x8, 0x4800000000000, 0x10e}], 0xb, 0x0, 0x15, 0x0) (async) kevent(r4, &(0x7f0000000340)=[{{r0}, 0xfffffffffffffff8, 0x3, 0x8, 0x4800000000000, 0x10e}], 0xb, 0x0, 0x15, 0x0) 1.675271351s ago: executing program 2 (id=7976): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SPKRTONE(r0, 0x80085301, &(0x7f00000000c0)={0x0, 0x7f}) execve(0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x100000000}, {0x2, 0xe}}, 0x0) r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x10090, 0x0) ioctl$PCIOCWRITE(r1, 0xc0107003, &(0x7f00000001c0)={{0xd, 0x8, 0xd}, 0x8, 0x6, 0x400}) r2 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(0xffffffffffffff9c, 0x4004667f, &(0x7f0000000180)) connect$unix(r2, &(0x7f0000000000), 0x10) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="258b300ad1711569138b48aec40000004a0c6c457db9b8a773693867ea9ed92904831d11a558caba3b584cd83056bd29", 0x30}], 0x1, 0x0, 0x0, 0xc2d839217c176b29}, 0x0) r3 = getuid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f00000000c0)='./file0\x00', r3, r4) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="71cfc296315f065b10dc1b932d5a34000000cb8fb5818384af1975f24a9bd132", &(0x7f0000000080)=0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setuid(r3) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="724bdb0acce3ffffffd1b071bbcbbdb0a0438a7dffe2ff080604015a680600000000000000004b2a98c44d75a6a322cf2e970c14a6a5c41d"]) seteuid(0x0) ioctl$PCIOCREAD(r1, 0xc0107002, &(0x7f0000000080)) 1.630923462s ago: executing program 2 (id=7978): r0 = socket(0x18, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000002c0)={0x0}, 0x10, 0x0, &(0x7f00000003c0)={0x8, 0x101}) close(r2) sendmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="0f52c9", 0x3}], 0x1, 0x0, 0x0, 0xb}, 0x0) poll(&(0x7f0000000000)=[{r0, 0xb}], 0x1, 0xa4a) r3 = socket$inet(0x2, 0x1, 0x0) getsockname(r1, &(0x7f0000000040)=@in, &(0x7f0000000080)=0xc) getsockopt(r3, 0x0, 0x1d, 0x0, 0x0) close(r0) r4 = kqueue() r5 = accept$unix(r0, &(0x7f00000000c0)=@file={0x0, ""/17}, &(0x7f0000000140)=0x13) r6 = open$dir(&(0x7f0000000180)='./file0\x00', 0x2, 0x91) kevent(r4, &(0x7f0000000300)=[{{r3}, 0xfffffffffffffffa, 0x8c, 0x80000000, 0x9, 0x8}, {{r2}, 0xfffffffffffffffe, 0x80, 0x2, 0x7f76062e, 0xa793}, {{r1}, 0xfffffffffffffffe, 0x4, 0x1, 0x3, 0xfd21}, {{r5}, 0xfffffffffffffffa, 0x41, 0x20, 0x1, 0xeb9}], 0x5, &(0x7f0000000400)=[{{r2}, 0xfffffffffffffffa, 0x82, 0xf0000000, 0xc, 0x9}, {{r1}, 0xfffffffffffffffc, 0x18, 0xfffff, 0x7fff, 0x8}, {{r2}, 0xfffffffffffffffd, 0x8, 0x20000000, 0x80000000, 0x7fffffffffffffff}, {{r1}, 0xfffffffffffffffd, 0x10, 0x4, 0x7f, 0x9}, {{r2}, 0xfffffffffffffffc, 0xa0, 0x4, 0x2, 0xd1}, {{r6}, 0xfffffffffffffffc, 0x20, 0x85, 0x7fff, 0x7}], 0x9, &(0x7f0000000200)={0x17, 0xe}) 1.524752576s ago: executing program 5 (id=7993): r0 = openat$klog(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) clock_gettime(0x4, &(0x7f0000000040)) r1 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) (async) fcntl$lock(r1, 0x9, &(0x7f0000000140)={0x0, 0x0, 0x4c0, 0x269000000, 0xffffffffffffffff}) (async) setsockopt(r1, 0x3, 0x10000, &(0x7f00000000c0)="c72a19c62d99a05df690d9d6fa983c082152b30ac43d2f58e8889d9e00bb46920f013b020174d9917ee29b43130cbe5ad341ca68178b10f581e3db9c04f5a74a26b66737d7e83b4a3c6eee4974758d83dbdeb19a726d364980cfeb433c897c48c83d9d0e6a9c49324ed7205d0d90467d948a4c2329285bf30e656287f8445c73aaa5b4e80a2da67ce05161d37c208447e8664f40c56e10bb695f57898a587d35bbec1fe840835982a56d33405ad7f3007574fbe4f34a4ed65f613a625cdf507b9b9fd04f50", 0xc5) clock_settime(0x4, &(0x7f0000000080)={0x6, 0x6c4}) 1.501445096s ago: executing program 5 (id=7997): r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) sysctl$net_inet6_icmp6(&(0x7f0000000040)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f0000000080)="d02b7c92f45e", &(0x7f0000000180)=0x6, 0x0, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) r3 = getgid() getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) lchown(&(0x7f0000000280)='./file0\x00', r1, r2) r5 = getgid() getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r8}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r10}}) getgroups(0x9, &(0x7f0000000240)=[r2, 0xffffffffffffffff, r3, 0x0, r4, r5, r6, r8, r10]) 1.477417946s ago: executing program 5 (id=8000): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000380)={0x7ffffffb, 0x3, 0xffffdf7f, 0xffffff8d, "182628040200c2a6d2e00e0000008a0400", 0x0, 0x1ffff}) r2 = open(&(0x7f0000000240)='./file0\x00', 0x200, 0x0) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x100000001}) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f00000007c0)={0x2, &(0x7f00000006c0)=[{0x8a3, 0xe, 0x62, 0x1}, {0x1000, 0x0, 0xdb, 0x6}]}) writev(r1, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x4c, 0x81, 0x5, 0x2, "de53371b5be9959c791c966f274397a1fd239d70", 0x0, 0x3ff}) close(r3) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000240)="ea000001001d0000", 0x8) dup2(r3, r1) syz_open_pts() writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) sysctl$kern(&(0x7f0000000700)={0x1, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) r4 = syz_open_pts() close(r4) r5 = syz_open_pts() mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) r6 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) ioctl$BIOCSRTIMEOUT(r6, 0xc0307006, &(0x7f0000000800)={0xf4d, 0x2}) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000000)={0x7ffbffff, 0x9, 0xff, 0x21d8b78c, "6b3a6e0000000400", 0x9, 0xfff}) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000900)="1d0920935421966a699982597f3d89868420", 0x12}], 0x1) r7 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x4ebfac6bbaf7859) pledge(0x0, &(0x7f0000002840)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00'/659) syz_emit_ethernet(0x46, &(0x7f00000019c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000380000000000019078ac1400bbe00000010c009078000000004500007d0000000000060000e000000100000000f680205c50d9929656207d081f7c26923e830de0ecd211b9201a08ae17ff6c914da0caa5b788391c90ae363d0012216769ad83e76ecbab7f064189f9ae2a2dbdf0e687a63d0a319bda9682045de6ea7e69edb9d29eb2fb8beea7ed4ea0c9981e1a8c244d0a79732ff614400a4da273dd93025eb08c993c4c861a9aa8e5f2ff09f8f020ddcd745d0895a52a865082467bec58"]) recvmsg(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/224, 0xe0}, {&(0x7f0000000000)=""/35, 0x23}, {&(0x7f0000000280)=""/163, 0xa3}, {&(0x7f00000003c0)=""/107, 0x6b}, {&(0x7f00000004c0)=""/100, 0x64}, {&(0x7f0000000040)}, {&(0x7f0000000100)=""/51, 0x33}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x9, &(0x7f0000000740)=""/93, 0x5d}, 0x41) 1.290653586s ago: executing program 6 (id=8011): execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000240)='tap'], &(0x7f0000000340)=[&(0x7f00000002c0)='/dev/bpf\x00', &(0x7f0000000300)='tap']) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x81, 0xb0, 0x5, 0x2}, {0x16, 0x3, 0x8, 0x1}]}) (async) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x1}, 0x8) r2 = socket(0x800000018, 0x1, 0x0) setuid(0xffffffffffffffff) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r3 = socket(0x800000018, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) listen(r1, 0x4) (async) connect$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0xa) (async) sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="0000000000000000a00400000098bdf4e420e6adda008000552e010000e6e62b3f3f490b0804f9000000000000000035024ba8af4e5fd3ab9d49bd0000000000001e1237e12a1cc596505821478fe669", &(0x7f0000000080)=0x50, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) ioctl$TIOCSETA(0xffffffffffffff9c, 0x802c7414, &(0x7f0000000140)={0x5, 0xc7b, 0x47, 0xe, "1ee2cef912bcd174ac4cc3b5d450c9c086f4eb03", 0xd, 0x3}) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[]) 1.283496784s ago: executing program 6 (id=8013): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) (async, rerun: 32) r0 = open(&(0x7f0000000440)='./file0\x00', 0x820, 0xfa) (rerun: 32) preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0xffffffffffffffff) (async, rerun: 32) mkdirat(r0, &(0x7f0000000340)='./file2\x00', 0x180) (rerun: 32) r1 = socket(0x2, 0x2, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) (async, rerun: 64) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (rerun: 64) ioctl$VMM_IOC_CREATE(r2, 0x8004630a, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {}, {0x0, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000fff000/0x1000)=nil}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffe000/0x1000)=nil}, {0x0, &(0x7f0000002000/0x1000)=nil}, {0x0, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000002000/0x1000)=nil, &(0x7f0000ff9000/0x6000)=nil}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {0x0, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}], './file0\x00'}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x0}, 0x8) (async) write(r1, &(0x7f0000000200)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad477cf807815cc174c5e1bc4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e78202374000000000080000001000000000000000000", 0x2400) (async) r3 = socket(0x18, 0x3, 0x2) setsockopt(r3, 0x1000000000029, 0x26, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) (async) mkdir(&(0x7f0000000000)='./file1\x00', 0x100) (async) chmod(&(0x7f0000000080)='./file1\x00', 0x80) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.230799704s ago: executing program 6 (id=8019): r0 = socket(0x11, 0x3, 0x0) r1 = accept$inet6(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) getpeername(r1, &(0x7f0000000080)=@in6, &(0x7f00000000c0)=0xc) sendto(r0, 0x0, 0x0, 0x40e, &(0x7f0000000180)=@in6={0x18, 0x1, 0x3, 0x2}, 0xc) 1.203516932s ago: executing program 6 (id=8026): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0xffffffff}, {0x106, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x87, 0x400f}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4}, 0xe) sysctl$kern(0x0, 0x0, &(0x7f0000000480)="71cb3027811600f9fa01efff587d454ca0801d60e798bdf4e420e6adda00800000ffb5df80b4c44a3c2f2c763eca160008f8cf964ef31d6986331de5168b2ac686c0186d64dda41d602fae92352c3ee7ea6f9b63f82b4faaea050b24d44f3dbb9c", &(0x7f0000000080)=0x61, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x5, &(0x7f0000000180)=[{0x1, 0x5, 0xd6, 0xffff}, {0x100, 0xa, 0x1, 0x4}, {0x3, 0x0, 0x81, 0x7}, {0x7f, 0x80, 0x80, 0x1}, {0x5, 0x9, 0x3, 0x1}]}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r1, &(0x7f0000000480)='\x00'/14, 0xe) 1.087355541s ago: executing program 6 (id=8030): r0 = socket(0x1, 0x2, 0x0) mknod(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) ioctl$FIONREAD(r0, 0xc0106978, &(0x7f00000001c0)) r1 = socket(0x18, 0x2, 0x0) close(r1) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xff, 0x0, 0x0, 0x0, 0x0, 0x389, 0x7fff}, 0x900000000006, 0x860, 0xffffffffffffffff, 0x0, 0x401, 0xfffffffe, 0x40f, 0x12}) r2 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3c, 0x411}, 0x4, 0x10003, 0x0, 0x0, 0x8000000000000000, 0x4, 0x9, 0x100000000e63}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r3 = socket(0x800000018, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r4 = socket(0x800000018, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ktrace(0x0, 0x4, 0xd27d43220c7df9f, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, &(0x7f00000001c0)) select(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0, 0xb}, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x1, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) r6 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x30}, 0x2, &(0x7f00000001c0), 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) open(&(0x7f0000000240)='./file0\x00', 0x20, 0x14) dup2(r4, r6) r7 = open(&(0x7f0000000180)='./bus\x00', 0x80, 0x12) ioctl$TIOCSETAF(r7, 0x802c7416, &(0x7f0000000200)={0xcc, 0x10001, 0x8000, 0xfffffffc, "000f000000008471050200000000000000f70080", 0xfffffbfd, 0x5}) 657.634997ms ago: executing program 2 (id=8034): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) (async) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='r\x00') execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) msgget$private(0x0, 0x0) mquery(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x40000000003) 656.253447ms ago: executing program 4 (id=8037): setrlimit(0x8, &(0x7f0000000980)={0x45, 0xb09a}) r0 = syz_open_pts() mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4, 0x3010, 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_pts() writev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="0002000004", 0x5}, {&(0x7f00000000c0)="8ca768e4132ab875f9cae829515aee9df51203d03c07b1a814a524584f6a9749c7e5da35a50c8907974c0d8b7de49fddee82f52c55a6ff235c4f110adeb7d4308fd76064b1fa6a4c289823d2610a92ca5cf41b67ca09cc35a68f701c080dd0837c978a3db37a5fcffc39c301dc46946932b7947650be1b7eab9de3da52a7393a40716481e8485337ba38d13ee9b52c44", 0x90}, {&(0x7f0000000040)="b78c5e10be5fbb08f82e78b445c3fad7d7", 0x11}, {&(0x7f0000000180)="f77a7c069445ebe4358892e9ab3ab67c1ec7bee5cd70a7765edc24764104a377caa6bb97f05eae27aaa0debfd69aae0d03a9ee68906f1947df98465885b66530f6f14ddffd", 0x45}], 0x4) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000480)=""/131, 0x83}], 0x1) 569.057691ms ago: executing program 2 (id=8043): chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) (async) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) socket(0x18, 0x2, 0x0) (async) r0 = socket(0x18, 0x2, 0x0) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80085761, &(0x7f0000000040)={0x3, 0x9}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$WSMUXIO_REMOVE_DEVICE(r1, 0x80085762, &(0x7f0000000040)={0x1, 0x4000000}) (async) ioctl$WSMUXIO_REMOVE_DEVICE(r1, 0x80085762, &(0x7f0000000040)={0x1, 0x4000000}) ioctl$FIONREAD(r0, 0x802069db, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r0, 0x802069db, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x2, 0x1, 0x0) (async) r2 = socket(0x2, 0x1, 0x0) bind(r2, &(0x7f0000000000), 0x10) r3 = socket(0x18, 0x2, 0x0) close(r3) socket(0x18, 0x1, 0x0) (async) socket(0x18, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x101000000000000, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) execve(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) socket(0x2, 0x1, 0x0) (async) r4 = socket(0x2, 0x1, 0x0) ioctl$BIOCGRTIMEOUT(0xffffffffffffffff, 0x4010426e, 0x0) getsockopt(r4, 0x5, 0x8, 0x0, 0x0) 566.875906ms ago: executing program 4 (id=8045): select(0x0, 0x0, &(0x7f0000000080)={0x4000000000000008}, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x205, 0x0) setgid(0xffffffffffffffff) getppid() r0 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) pipe(0x0) sysctl$vm(&(0x7f0000000000)={0x2, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) r1 = semget(0x2, 0x1, 0x180) semctl$GETVAL(r1, 0x4, 0x5, &(0x7f0000000000)=""/36) kqueue() dup2(0xffffffffffffffff, 0xffffffffffffff9c) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSETA(r2, 0xc088444f, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x6, "01d04b0a0047c1d133c3300a00", 0x1, 0x3}) mprotect(&(0x7f0000614000/0x4000)=nil, 0x4000, 0x2) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xc}, 0x4, &(0x7f0000000040)="d5cf", &(0x7f0000000140)=0x2, &(0x7f0000000200)="9bb91da0aa274f692c31b529e375bde4f4b8315c253399d2c0d5312fda457911e8ae47d5a79de78c2d9fe93955d720baec482b4e20bccec9f63bc655836108cc0c2c799733bab57e5b010be811e35ab85969fe513d3300b71bfa9d4f23695f7f0ef5f830330585f58f1ef1d437a6923be8dfa457f19f0d8bcaa72fb410323476d244416624786d3569254d0665762a0f346aad3af6d8e66c2d73604e0c8e012f7439", 0xa2) 474.405033ms ago: executing program 0 (id=8049): mknod(&(0x7f0000000480)='./file0\x00', 0x6000, 0x400) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) getpeername(r1, &(0x7f0000000080)=@in6, &(0x7f00000000c0)=0xc) ioctl$BIOCGDLTLIST(r0, 0xc010427b, &(0x7f00000001c0)={0x0, 0x0}) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='W\x00') 419.295641ms ago: executing program 2 (id=8051): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000400)={&(0x7f0000000240)=[{0x8d, 0xc}, {0x1, 0x1ff}, {0x22, 0xe}, {0x101, 0x80}], 0x4}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/100, 0x64}, 0x80003f8d}, 0x10, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x10, 0xc90) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffb}) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) r3 = socket(0x18, 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) setsockopt(r4, 0x1000000029, 0x23, &(0x7f00000000c0), 0x0) ioctl$WSDISPLAYIO_SBURNER(r4, 0x800c5751, &(0x7f00000000c0)={0x2, 0x6, 0xd}) r5 = kqueue() kevent(r5, &(0x7f0000000000), 0x138, 0x0, 0xffffffff, 0x0) close(r2) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000340)="aa308670", 0x4}], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x2810, r1, 0x0) r6 = accept$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x8) ftruncate(r6, 0x10003) 364.265148ms ago: executing program 1 (id=8058): syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000300166000000069078e0000001ac1400aa4e204e23", @ANYRES8=0x0, @ANYRES32=0x41424344, @ANYBLOB="7080000000fffc0104b40300000000"]) r0 = kqueue() fsync(r0) syz_extract_tcp_res(&(0x7f0000000000), 0xffffffff, 0x9) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 336.543405ms ago: executing program 1 (id=8060): socket(0x2, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = kqueue() sysctl$hw(&(0x7f00000005c0)={0x6, 0x16}, 0x2, 0x0, 0x0, &(0x7f00000006c0), 0x0) pwrite(r1, &(0x7f00000002c0)="da1e33acf87e408bedf56e4f06249ff2c0a8f508f82a5a896c8234d2b2d036e039f8fcda89bd4485515a9f6f7440541734975854c57a317e3b5f80d637a1a414b6a4704ee2e96163d1c975f51c6254c7e3e728297c8f672babdad82a82493f8ac2fcc3a366a9fb384931a5ae9c366bdd77fc78bea71c2c744f6914cf9bacb82a8e40eb4a5758868320803ed24af91233b8d3b0e47a1fb6ffb3612402e9504a31b66191ba1c5ca630014a1ada5f260f5f5383a230337b1465b09a09ce616a8b2e6490234cfc178d7e72ead3c93a5c1c00dcd2470d4ec182bb8ec7edaedbace6fd9bdfa027acf828fba0b810", 0xeb, 0x4) kevent(r1, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) ioctl$FIONREAD(r0, 0xc0206921, &(0x7f0000000080)) r2 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r2, 0xc0206923, &(0x7f00000001c0)) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4) r3 = socket(0x18, 0x3, 0x2) setsockopt$sock_int(r3, 0xffff, 0x1021, &(0x7f00000003c0)=0x1, 0x4) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000200)="a194b4229910854b67a31d4c39951e5d39162cbc007d92e845c183df2203412b", 0x20}], 0x1) execve(0x0, 0x0, 0x0) sysctl$net_inet_gre(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="b3ec1747e9b6ccd50c640969ea4e0af98258ff93e2786b628cb8b79c18f4044d5aa55d0d7529853f433c3212359ea5a366376bbfec1ad9d13ee04cac8ba55681f7625ab699e9629749ef05efe45c699ef4958189661c694dd7089ef7ffc5612379a7488c1a061c6a4566680bcf5cef322c11e063a52072023a85d7aaf2cc9bd1fd1fd354261500353f165f9e103899db41c37f436050c1f537ec9542b44bbd91f9e7917ff57d2f751cb69b5e83317316c243c44899fe14398a3ea970989a8277cedacd2b239da45aa6fc18b7f52b558da19fefc86df5946586ad45ffb38099f02084a332073cc8b657", 0xe9) r5 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) r6 = socket(0x1, 0x3, 0x0) sendmsg$unix(r6, &(0x7f0000000440)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000700000000000000", @ANYBLOB="e5609bff"], 0x30, 0xb}, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) bind$unix(r7, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x0}, 0x8) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x2) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 336.232717ms ago: executing program 2 (id=8061): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) socket$unix(0x1, 0x2, 0x0) r3 = kqueue() r4 = dup(r3) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{r4}, 0xfffffffffffffffa, 0x11, 0x40000080}], 0x5, 0x0, 0x0, 0x0) r5 = kqueue() kevent(r5, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) kevent(r5, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) r6 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) sysctl$kern(&(0x7f00000016c0)={0x1, 0x58}, 0x2, &(0x7f0000001700)="9bb913af", &(0x7f00000017c0)=0x4, &(0x7f0000001800), 0x0) (async) ioctl$VMM_IOC_INTR(r6, 0xca605601, &(0x7f0000000240)={0x75bec170, 0x0, 0x9}) (async) close(r1) (async) writev(r2, &(0x7f0000000200)=[{0x0}], 0x1) ioctl$WSKBDIO_SETENCODING(r0, 0x80047476, &(0x7f0000000040)=0xf7fffff8) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {0x2}]}) clock_gettime(0x2, &(0x7f00000001c0)) setuid(0xffffffffffffffff) r7 = geteuid() setreuid(r7, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) 334.905694ms ago: executing program 0 (id=8063): sysctl$kern(&(0x7f0000000280)={0x1, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_ipip(&(0x7f0000000400), 0x4, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x6a, 0x0) r1 = socket(0x18, 0x1, 0x0) socket(0x24, 0x2, 0x0) setsockopt(r1, 0x6, 0x41, &(0x7f0000000280), 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pledge(0x0, &(0x7f0000002840)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00'/659) 296.248084ms ago: executing program 0 (id=8065): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x61cf, 0xe780, 0x8, 0x0, 0x7ff, 0x1002, 0x1, 0x2, 0x1, 0x0, 0x4000000000f1a}) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x1005, &(0x7f0000000080)={0xffffffffffff1fa9, 0x3}, 0x10) ioctl$WSDISPLAYIO_ADDSCREEN(0xffffffffffffff9c, 0x80245753, &(0x7f0000000240)={0xd, './file1\x00', './file1\x00'}) r1 = msgget$private(0x0, 0x20) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r4}}) r5 = getuid() setreuid(0x0, r5) r6 = getegid() r7 = getpid() r8 = getpgid(0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f00000001c0)={{0x7fffffff, r2, r4, r5, r6, 0x0, 0x5}, 0x3, 0x4, r7, r8, 0xc58, 0x5, 0xfffffffffffff1c7, 0x80000001}) r9 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r9, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONBIO(r9, 0x82907003, &(0x7f0000000140)=0x1) close(r9) 294.758994ms ago: executing program 6 (id=8066): sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x3}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x86, &(0x7f0000001900), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) close(r1) r2 = accept$unix(r0, 0x0, &(0x7f0000000000)) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)="4b953405657f9eb1b0e5558bca5917ca46165021f6f25d8a4024fb712bc3701c56e52d76fbb855a3f681edc1a28ed51bc2095bb9a0f444ac", 0x38}], 0x1) sendmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="adebbc0bf24aaf9426d7b434cf9a838463628adcdc0e3cac8077b8cc808ed1a3942ba9e46df0f787a0a4bf59", 0x2c}, {&(0x7f00000000c0)="11ab0ffe9d4dfe031ff9e53b58020bb9975fd057b6e53ee459e88e475742a43b0ea8fa2c809a069ce4c6b9036581", 0x2e}], 0x2, 0x0, 0x0, 0x41c}, 0x402) readv(r0, &(0x7f0000000600)=[{0x0, 0x59}], 0x10000000000003cd) socket(0x6, 0x4000, 0x5) 241.293655ms ago: executing program 1 (id=8068): open(&(0x7f0000000180)='./file0\x00', 0x615, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x80, 0x129) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x2000000, 0x1000302010008, 0xffffffffffffffff}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60db"]) unveil(0x0, &(0x7f00000000c0)='x\x00') syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xfffd}}}}}}) 238.16635ms ago: executing program 7 (id=8069): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0xb, 0x2, 0x2}, {0x6, 0x10, 0xe4, 0x100}, {0x106, 0xa, 0x83, 0x400f}]}) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000080)={&(0x7f0000000300)=[{0x24}], 0x1}) sysctl$vm(&(0x7f0000000080)={0x2, 0x1}, 0x2, 0x0, &(0x7f0000000200), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x2, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) sendto(r1, &(0x7f0000000280)="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", 0x15a, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x95}, {0x9, 0x80000}}, 0x0) setitimer(0x0, &(0x7f0000000000)={{0xb, 0x9}, {0x9, 0xb}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000024c0)=ANY=[]) 201.996769ms ago: executing program 3 (id=8070): r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) r1 = getpid() r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xf7ffffffffffffed, 0xffffffffffffffff}) (async) setrlimit(0x1, &(0x7f0000000000)={0xf7ffffffffffffed, 0xffffffffffffffff}) ftruncate(r2, 0x40000000007) (async) ftruncate(r2, 0x40000000007) open$dir(&(0x7f0000000140)='./file0\x00', 0x40, 0x50) (async) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x40, 0x50) preadv(r3, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x20, 0x0) ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) 201.092829ms ago: executing program 7 (id=8071): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$sock_int(r0, 0xffff, 0x8, 0x0, 0x0) 200.739272ms ago: executing program 5 (id=8072): kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffb}) r0 = kqueue() r1 = socket(0x18, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) kevent(0xffffffffffffffff, &(0x7f0000000380)=[{{r2}, 0xfffffffffffffffb, 0xd2, 0x40, 0x2ef5, 0x6}], 0x1005, 0x0, 0x8, 0x0) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) getgroups(0x8, &(0x7f0000000080)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) fchown(r0, r3, r4) kevent(r0, &(0x7f0000000000), 0x80, 0x0, 0xffffffff, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffb}) (async) kqueue() (async) socket(0x18, 0x1, 0x0) (async) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) kevent(0xffffffffffffffff, &(0x7f0000000380)=[{{r2}, 0xfffffffffffffffb, 0xd2, 0x40, 0x2ef5, 0x6}], 0x1005, 0x0, 0x8, 0x0) (async) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) getgroups(0x8, &(0x7f0000000080)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) (async) fchown(r0, r3, r4) (async) kevent(r0, &(0x7f0000000000), 0x80, 0x0, 0xffffffff, 0x0) (async) 124.925103ms ago: executing program 3 (id=8073): clock_getres(0x0, &(0x7f00000000c0)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x74, 0x0, 0x37) r0 = syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000680)={0xbbe, 0x9, 0x2, 0x6, "f4e8324fa65294a72c27191ec64c4142ab0f3fe5", 0x2, 0xfffffff9}) unveil(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='c\x00') r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x11, 0x1, &(0x7f0000000000)="defde8bb", 0x4) sendto$unix(r1, &(0x7f0000000100)="b1000504600000000000000007000000331c13fecea10500fef9ed061ddd1efb7ae320b37b673039d2d236073705ae04be38164991f7b85143222b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907a900000200361b1257aea8c5000020020000000000008abfba090008efffffffffff3512b132ae037503682ce371a300803712051eadb71d89e0", 0xb1, 0x8, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 123.693512ms ago: executing program 7 (id=8074): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x8) rmdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0xee4bce5bb233ab95) r1 = socket(0x18, 0x2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r1, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22) poll(&(0x7f0000000080)=[{r0, 0x27}], 0x1, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x8) (async) rmdir(&(0x7f00000000c0)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x8000, 0xee4bce5bb233ab95) (async) socket(0x18, 0x2, 0x0) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) getsockname$inet(r1, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22) (async) poll(&(0x7f0000000080)=[{r0, 0x27}], 0x1, 0x0) (async) 123.494286ms ago: executing program 1 (id=8075): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x6d) pwritev(r0, &(0x7f0000000b80)=[{&(0x7f0000000640)='~', 0x1}], 0x1, 0xf87c) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x80, 0x0) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r2, 0x41946465, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x1, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x6d) (async) pwritev(r0, &(0x7f0000000b80)=[{&(0x7f0000000640)='~', 0x1}], 0x1, 0xf87c) (async) open$dir(&(0x7f00000003c0)='./file0\x00', 0x80, 0x0) (async) openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VNDIOCSET(r2, 0x41946465, 0x0) (async) preadv(r1, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x1, 0x0) (async) 123.2482ms ago: executing program 3 (id=8076): sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x2}, 0x4, 0x0, 0x0, &(0x7f0000000040)="be0673a8", 0x4) 122.597078ms ago: executing program 3 (id=8077): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') (async) setreuid(0xee00, 0x0) (async) r0 = getuid() open$dir(0x0, 0xf02, 0x186) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') (async) r1 = socket(0x2, 0x400000000002, 0x0) getsockopt$sock_int(r1, 0xffff, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) connect$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x2}, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) setuid(r0) chflags(&(0x7f0000000000)='./file0\x00', 0x100000) sysctl$kern(&(0x7f0000000000)={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0) 120.921682ms ago: executing program 7 (id=8078): r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) (async) r1 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r1) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x70c3, 0x7, 0x7, 0x106, 0x80000001, 0x133a, 0x10005, 0x10, [{0x7, 0x4, 0x4, 0x71004}, {0x7, 0x4, 0x8, 0xfffffff8}, {0x8, 0x4, 0x0, 0xaf9}, {0xfffffffd, 0x800, 0x7}, {0x10001, 0x5, 0xd, 0x7}, {0x2, 0x8, 0x3, 0x99}, {0x1cdf, 0x1, 0x4f8, 0x6d}, {0xa, 0x3, 0x14, 0x8}, {0x70000, 0x81, 0x1, 0xb}, {0x6, 0x8001, 0x4df6, 0x8c}, {0xf88, 0x10001, 0x6, 0xaeb}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8c, 0x4, 0x2, 0x6}, {0x1009, 0x7, 0x1, 0x6}, {0x4, 0x7, 0x2008, 0x400}, {0x200, 0x1, 0x4, 0x2fffd}]}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x8000, 0x100) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x7, 0x101, 0x80000001, 0x80000001, 0x7, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0x8, 0x40000003}, {0x6, 0xf86, 0x0, 0xaf9}, {0x4, 0x800, 0x7}, {0x1, 0x80000003, 0xe, 0x7}, {0x2, 0x1, 0xffffffff, 0x9c}, {0x80000cdf, 0xfffffffd, 0x3, 0x6d}, {0xa, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0x88}, {0x4, 0xfffb, 0x9, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x7, 0x7}, {0x0, 0x1, 0x4, 0x30000}]}) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) (async) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$VNDIOCSET(r5, 0x80046308, &(0x7f0000000100)={0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r0, 0x0) (async) r6 = kqueue() kevent(r6, 0x0, 0x2, 0x0, 0x2, &(0x7f0000000080)={0x1, 0x4}) 120.387648ms ago: executing program 3 (id=8079): syz_emit_ethernet(0x26, &(0x7f0000000300)={@broadcast, @remote, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x66, 0x0, 0x0, 0xff, 0x0, @broadcast, @rand_addr=0xac14ffff, {[@end]}}}}}}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x38, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x0, 0x3a, 0x80, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, [@hopopts={0x88}]}}}}}}}) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @random="9d7c4b9fa041", [{[], {0x8100, 0x5, 0x0, 0x3}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @broadcast, @broadcast, @empty, @local={0xac, 0x14, 0x0}}}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0xffffffff}, {0x106, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x87, 0x400f}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4}, 0xe) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/35, 0x23}, {&(0x7f0000000180)=""/230, 0xe6}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000340)=""/119, 0x77}, {&(0x7f00000003c0)=""/29, 0x1d}, {&(0x7f0000000500)=""/215, 0xd7}], 0x6) sysctl$kern(0x0, 0x0, &(0x7f0000000480)="71cb3027811600f9fa01efff587d454ca0801d60e798bdf4e420e6adda00800000ffb5df80b4c44a3c2f2c763eca160008f8cf964ef31d6986331de5168b2ac686c0186d64dda41d602fae92352c3ee7ea6f9b63f82b4faaea050b24d44f3dbb", &(0x7f0000000080)=0x60, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) write(r1, &(0x7f0000000480)='\x00'/14, 0xe) 82.138047ms ago: executing program 5 (id=8080): syz_emit_ethernet(0x231, &(0x7f0000000600)=ANY=[@ANYBLOB="78255d225f96aaaaaaaaaaaa86dd67d4952a01fb6c8000000000000000000000ffffe0000002000000000000000000000000000000003310000800000000ff010000000000000000000000000001fe8000000000000000000000000000bbfe8000000000000000000000000000bbfe8000000000000000000000000000aac098a0a951d67228970f8e82da55bfb7ff010000000000000000000000000001fe8000000000000000000000000000aafe8000000000000000000000000000aa020090780000000360eef2ff00070107d0898865d696e50d4f804be4df0be1c500000000000000000000ffffffffffff2f0a004b00000000ff01000000000000000000000000000100000000000000000000ffff0000008000000000000000000000000000000000fe8000000000000000000000000000bb000000000000000000000000000000000000030966000000ff02000000000000010a0000000000000000000004012b050200010000000000620b000000000000c2040084dbe908597b6b2ab93d880000060401040630aa3e7357083ffa2e408142504bd35c67755b45f3668b6370ac0512b05dce14e322395586460f1a094ee80bf88a08b8dfe6082b3da32e4f4e3ae5050209b60401060502001005020003c20400000001050200080000c00633b0761b7f96508f2583e4551be4278aaffa73dc8a32309a68b14741b8db117daf9b5ec19b8a6452856354f67728b01c51b11223998584b42ab7d2cc1c3a120515331d55b7eb543618eda7f9bebe92c4c3529fbc61142844af9fc830a5378d9cee1614b9fd6a22e3a7d980473b510f18c50e8eb6d699868f5e1a11a06e83ee601a1bd72b23b6f7d5c87a7cea02a3f33e5e46e664ed9b7f50ce4f6a5153b2d3d17ac1"]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x200}, 0x0, 0x0, 0xfffffffffffffffb}) r0 = socket(0x18, 0x3, 0x0) r1 = semget(0x0, 0x1, 0x281) semop(r1, 0x0, 0x0) semctl$GETZCNT(r1, 0x1, 0x7, &(0x7f0000000000)=""/210) semctl$SETALL(r1, 0x0, 0x9, 0xfffffffffffffffe) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write(r2, &(0x7f0000000000)="54f81821d2e026ccddc0545eebe420988ceed0f7d08fce9a002d38daab2429cd04bd5700aebb4f4eb1", 0x29) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) unveil(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='c\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x20, 0x1e5f) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0xc0206921, &(0x7f0000000380)) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 79.162535ms ago: executing program 1 (id=8081): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) chflags(&(0x7f0000000080)='./file0\x00', 0x0) r1 = socket(0x2, 0x1, 0x0) sendmsg$unix(r1, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x34}, 0x0) ioctl$VMM_IOC_RESETCPU(r0, 0x82405605, &(0x7f0000000280)={0x2, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4], [0x0, 0x0, 0xd3, 0x3ff], [0xfffffffffffffffc, 0x0, 0x0, 0x7], [0x0, 0x0, 0xd], [{0x1}, {0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x80000}, {0x0, 0x0, 0xffffffff}], {0xfffe, 0x0, 0x200, 0x7fffffffffffffff}, {0x200}}}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r2, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000000)="eaef125c00000000", 0x8) getsockopt(r3, 0x0, 0x9, 0x0, 0x0) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r4, 0x800c5709, &(0x7f0000000180)={0x7f, 0xff, 0x8}) mknod(&(0x7f00000000c0)='./file0\x00', 0x80, 0x8) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000040)={0x2, 0x1a}) 78.933498ms ago: executing program 7 (id=8082): mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2a02) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x10e) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = shmget$private(0x0, 0x1000, 0x404, &(0x7f0000082000/0x1000)=nil) shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f00000001c0)=[{0x60, 0xda, 0x94, 0x1}, {0x40, 0x9, 0x0, 0x81}, {0xff, 0x4, 0xa4, 0x5}]}) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async) shutdown(0xffffffffffffffff, 0x1) (async) socket(0x18, 0x3, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYRESHEX=r2]) (async, rerun: 32) r3 = semget$private(0x0, 0xb3d53ca9492bf7de, 0x411) (rerun: 32) semctl$GETNCNT(r3, 0x2, 0x3, &(0x7f0000000200)=""/175) (async, rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async, rerun: 32) r4 = socket(0x10, 0x3, 0x80) setsockopt$sock_timeval(r4, 0xffff, 0x1005, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd}, 0x10) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = dup2(r6, r0) (async, rerun: 64) madvise(&(0x7f00006a4000/0x1000)=nil, 0x1000, 0x3) (async, rerun: 64) open$dir(&(0x7f0000000080)='./bus\x00', 0x80, 0x19e) getsockopt$sock_timeval(r7, 0xffff, 0x1006, &(0x7f0000000180), &(0x7f0000000300)=0x10) (async, rerun: 32) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (rerun: 32) r8 = socket(0x2, 0x1, 0x0) ioctl$FIONBIO(r8, 0x8004667e, &(0x7f0000000000)=0x7fff) (async, rerun: 32) fchmod(r7, 0x8) (rerun: 32) ioctl$BIOCSBLEN(r5, 0xc0044266, &(0x7f00000000c0)=0xe) (async) ioctl$FIONREAD(r8, 0xc0206981, &(0x7f00000001c0)) (async) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) 78.645256ms ago: executing program 3 (id=8083): r0 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) writev(r0, &(0x7f0000000580)=[{0x0}], 0x1) 67.484026ms ago: executing program 1 (id=8084): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, 0x0, 0x0) ioctl$WSKBDIO_GETMAP(r0, 0xc010570d, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x3ff, 0x101, 0x3, 0x0, 0xd}, {0x5, 0x6, 0x1, 0x3, 0xe}, {0x80, 0x8, 0x31e3, 0xf, 0x2}, {0x3de, 0x1, 0x44f3, 0x800, 0x4}, {0x3, 0x1, 0x2, 0x7, 0xe}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6da) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) write(r1, 0x0, 0x0) chdir(0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x1e, 0x3, 0x0) getpeername$unix(r2, 0x0, &(0x7f0000000100)) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x56}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETA(r3, 0xc0104454, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, "224ff1c14649ebb178926cbd795a6b47c1d100", 0xfffffffd, 0x80}) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) truncate(&(0x7f0000000000)='./file0\x00', 0x1) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) setuid(0xee01) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) pipe(&(0x7f0000000100)) (async) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, 0x0, 0x0) (async) ioctl$WSKBDIO_GETMAP(r0, 0xc010570d, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x3ff, 0x101, 0x3, 0x0, 0xd}, {0x5, 0x6, 0x1, 0x3, 0xe}, {0x80, 0x8, 0x31e3, 0xf, 0x2}, {0x3de, 0x1, 0x44f3, 0x800, 0x4}, {0x3, 0x1, 0x2, 0x7, 0xe}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6da) (async) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async) write(r1, 0x0, 0x0) (async) chdir(0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x1e, 0x3, 0x0) (async) getpeername$unix(r2, 0x0, &(0x7f0000000100)) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x56}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TIOCSETA(r3, 0xc0104454, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, "224ff1c14649ebb178926cbd795a6b47c1d100", 0xfffffffd, 0x80}) (async) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) (async) truncate(&(0x7f0000000000)='./file0\x00', 0x1) (async) 64.886217ms ago: executing program 7 (id=8085): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x28) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x385, 0x7ffffffe, 0x81ac, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x8006}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x0, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6e75, 0x8001, 0xd1b, 0x4}, {0x1cc, 0x10001, 0xd, 0x4}, {0x8, 0x9, 0x8, 0xd30}, {0xb8c, 0x7, 0x8, 0x2000004}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x6, 0x5, 0x5, 0x10001000}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000000)) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0x80206931, &(0x7f0000000100)) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0xfa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9, 0x2000004, 0x8, 0x4, 0x80000001, 0x17ffd, 0x10, [{0x0, 0x3, 0x4, 0xa24}, {0xc5f, 0xb, 0x8, 0xfffffff9}, {0x7, 0x8, 0x200, 0x9}, {0xfffffffb, 0x800, 0x1, 0xfffffff7}, {0x400, 0x7ff, 0x1002802, 0x4d8e}, {0x3, 0x6, 0x3, 0xb4}, {0x800000e, 0x3, 0x81ec, 0x2d}, {0x2, 0x10000, 0x80000000, 0x6}, {0x1, 0x87e, 0x5, 0x9}, {0x80000004, 0x3af, 0xd1b, 0x8}, {0x1be, 0x5, 0x8004, 0x412c83d1}, {0xffffffff, 0x106, 0x33, 0x8}, {0x49, 0x4, 0x5, 0x2c4}, {0x29a71720, 0xffffdffa, 0x1, 0x7}, {0x2, 0x7, 0xfff7fffc, 0x100}, {0x0, 0x8, 0x1002, 0xc}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mknod(&(0x7f0000000100)='./file0\x00', 0x1ffa, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x28) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x385, 0x7ffffffe, 0x81ac, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x8006}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x0, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6e75, 0x8001, 0xd1b, 0x4}, {0x1cc, 0x10001, 0xd, 0x4}, {0x8, 0x9, 0x8, 0xd30}, {0xb8c, 0x7, 0x8, 0x2000004}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x6, 0x5, 0x5, 0x10001000}, {0x0, 0x1, 0xfff, 0x30004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) socket(0x18, 0x3, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) socket(0x1, 0x2, 0x0) (async) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000000)) (async) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r1, 0x80206931, &(0x7f0000000100)) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0xfa) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9, 0x2000004, 0x8, 0x4, 0x80000001, 0x17ffd, 0x10, [{0x0, 0x3, 0x4, 0xa24}, {0xc5f, 0xb, 0x8, 0xfffffff9}, {0x7, 0x8, 0x200, 0x9}, {0xfffffffb, 0x800, 0x1, 0xfffffff7}, {0x400, 0x7ff, 0x1002802, 0x4d8e}, {0x3, 0x6, 0x3, 0xb4}, {0x800000e, 0x3, 0x81ec, 0x2d}, {0x2, 0x10000, 0x80000000, 0x6}, {0x1, 0x87e, 0x5, 0x9}, {0x80000004, 0x3af, 0xd1b, 0x8}, {0x1be, 0x5, 0x8004, 0x412c83d1}, {0xffffffff, 0x106, 0x33, 0x8}, {0x49, 0x4, 0x5, 0x2c4}, {0x29a71720, 0xffffdffa, 0x1, 0x7}, {0x2, 0x7, 0xfff7fffc, 0x100}, {0x0, 0x8, 0x1002, 0xc}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mknod(&(0x7f0000000100)='./file0\x00', 0x1ffa, 0x0) (async) 3.309721ms ago: executing program 0 (id=8086): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0xb, 0x2, 0x2}, {0x6, 0x10, 0xe4, 0x100}, {0x106, 0xa, 0x83, 0x400f}]}) sysctl$hw(&(0x7f0000000000)={0x7, 0x6}, 0x2, &(0x7f0000000100)="0104608f0fe6b24f885f11776e", &(0x7f00000001c0)=0xd, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="e92737e34f5feff75b4be7fd6d1bd9c5c6213b014cfe806a9617d4a836c8c2f9a501d25449ae5ccaf65d965e", 0x2c}], 0x1, 0x0, 0x0, 0x408}, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0x80184902, &(0x7f0000000040)={0x3, '.\x00'}) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="71cbeffe587d454ca00400000098bdd1e4624dfb660000000100ff07000000000000e23a09", &(0x7f0000000080)=0x25, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ftruncate(r3, 0x20008002) r4 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x2) preadv(r4, &(0x7f0000000880)=[{&(0x7f0000000240)=""/77, 0x4d}], 0x1, 0x8000002) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x425, 0x0) writev(r5, &(0x7f0000001580)=[{&(0x7f00000000c0)='\x00', 0xfffffeb0}], 0x1) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[]) readlinkat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=""/29, 0x1d) 1.583347ms ago: executing program 0 (id=8087): r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$WSMUXIO_LIST_DEVICES(r0, 0xc1045763, &(0x7f0000000200)={0x8, [{0x1, 0x7f}, {0x1, 0xb4}, {0x2, 0x5}, {0x2, 0x40b6}, {0x1, 0x3}, {0x2, 0x43b}, {0x3, 0x1}, {0x3, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x2, 0x1ff}, {0x2, 0x4c82}, {0x3, 0x4}, {0x2, 0x3}, {0x2, 0x3}, {0x0, 0x4}, {0x3, 0x7}, {0x0, 0x7}, {0x2, 0x6}, {0x2, 0x4}, {0x2, 0x100}, {0x2, 0x1}, {0x2, 0x1000}, {0x2, 0x8}, {0x0, 0x1}, {0x3, 0x400}, {0x2, 0x7ff}, {0x1, 0x8001}, {0x4bc25e89fc7b788c, 0x4}, {0x2, 0xffff}, {0x1, 0x8}, {0x3, 0x6}]}) mknod(&(0x7f0000000080)='./file0\x00', 0x2950, 0x13d4) ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x2, 0x0) sendmsg$unix(0xffffffffffffff9c, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="23b30925c0da23211e7bf4abd439a5476c02", 0x12}], 0x1}, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getgroups(0x7, &(0x7f0000000040)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]) ioctl$FIONREAD(r1, 0xc0206921, &(0x7f00000001c0)) getrusage(0x0, 0xffffffffffffffff) 1.15663ms ago: executing program 0 (id=8088): r0 = getuid() setuid(r0) r1 = socket$inet(0x2, 0x3, 0x80) r2 = kqueue() r3 = fcntl$dupfd(0xffffffffffffffff, 0xa, 0xffffffffffffffff) sendmsg$unix(0xffffffffffffff9c, &(0x7f0000000680)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000580)=[{&(0x7f0000000040)="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", 0xfd}, {&(0x7f0000000140)="54b9378ce78cbd38e1ed12ae0cef88b99168f89ac1c22ce0f72e677b91d56b30a457f40167ecbdefd3839eb020c5fb9497a71db25758d810ef720b84855863d487a87c27c68c2020f2a04de9b9c51ed4ceaf5b19b3aef731fa8c056c443d9ca424a8e90fc20c522432615184815470f082c3bf212ec8916ea14b60404c83ce2f28759a43491808f2c70b96cb81a2c77de59e7e9262", 0x95}, {&(0x7f0000000200)="0a5db098e5c1758650b479ebf4651dc478b93085d466c0aacacafa9bf0ed92ceed8ed6a83991deb65c1b28fea379dd39ffcbe5918350c9677900c206d16d69", 0x3f}, {&(0x7f0000000240)="a7e1946320d8724a01074fb64adce0b63c607b5670e9ebed566c031ae3b2c614d1d83207eb61", 0x26}, {&(0x7f0000000280)="e23a124868e6204a5d60b40b98f9a827f70e4995c274ab56d09cbe58ceda19a619f8b0b0571de69ce4b225d1696f5d841da8368277c6de3b7f46733c403e5c38726d06cc9e274219ce2fe5b2d44895f29d8c4bcc73408c7654046ec3f7e2f78128f2f199eab426c8b8f284a7dba1f059f707540242e8070af40f67f56e05771e0fb670d2061cc7af1a0620a96f4858c5ff375e56c7a8aa7fdbb14dd74e61d401481ab99452c8f2ef9e77a9240cfe089dca38f627111dc1e28644c5efca598a915655aa1841654a20111ed58441c66004aecb755db5b35496ec408637e576", 0xde}, {&(0x7f0000000380)="5f9440e30ec4b5ab5a8a7f263417024cb8713dbcfd0314bccdceb992c8b63ea03f06300aed9430338c561040e8ea37790568a1d61d0bc61ab225572a4981c59a7c831540eab5271128ee442fd1b63c07e01660d1f96c64bac84d4847b3c80bd53e6df9e63b65886bda26a9f19e24b5a79ee0dfccc41eac5c50297b078d7f22da294a84ad60533b82448d285460da9243ea1fd291181ba2598d5eb54c3396f2c1e3c544d6c587b72bb90bfb8c16222976678f80c279274b35726af43018c57f8b8c587e4968", 0xc5}, {&(0x7f0000000480)="a0d021a5febdedb5f612ea8edfce5e34db144d48b4e71760d78a1b5a736f4563dbb4b6728d18abc01ee719ba8cc58a6c95ec05adb660a34e", 0x38}, {&(0x7f00000004c0)="25c04920178e08031d84f482efe773d34a40bf5d9a6ccf11cfdbad03f7b1d536b6762e89e8238d79835dc2522f8ed2d41d99c43d6ac56b0c6d5b11e9dbf2e2a1a1a1039c4a6a7c8cd12b0c879607e500a5679296bb7548c6b77ad3bd8bbe2af3408835cde0103937", 0x68}, {&(0x7f0000000540)="350ef02120bffb0c3dba", 0xa}], 0x9, &(0x7f0000000640)=[@rights={0x28, 0xffff, 0x1, [r1, r2, r3, 0xffffffffffffffff, 0xffffffffffffffff]}], 0x28, 0x8}, 0x7) getsockname$inet(r1, &(0x7f00000006c0), &(0x7f0000000700)=0xc) writev(r2, &(0x7f0000000d00)=[{&(0x7f0000000740)="c8039d80e5e0a78ffc9fb5a78651b883f0ef390edf1fb4dacd03617d6355cbd023bce9ac286230f1ee35813cdf918c3e5b4e057c60dbad1d9b10d04024d164655665f1863d9da97bc69b3c305dd54390db0fd778783bedd9e6537759b4cdae1358d20def", 0x64}, {&(0x7f00000007c0)="a7133968bad65b404aacd3cd60c0b450509855f538efddd1a26203c2b7d1e72a48c90f6a1d3df045f46efbcf7c1f76fdfce7f0449df19baecacbffea74ab7414202c0e542c40ca118306700c1cf50b595bbd66d1b3282e3269850bf57450f3b53900f7ad80c94bc585cc2db9ab0fd4a1546c705bdc6fc9a2c7a67becb58df308f14d776f3d6ce12448e7ea5f9ef634775cfff2c6b0ef47a4962cccbce9e58b565b062c1311618e25cfb828de30c3cf00792014ba570114af6dcf23862bcfc3e4f8b0928b18a91d61c75d3ade13228ff1b0b3675dcc7252fb81", 0xd9}, {&(0x7f00000008c0)}, {&(0x7f0000000900)="332c6704066478c5a1860b5522df3b34af940aa56a9b6539e991d990f7efd84fc6093459c3bdbd90826486e5ebb8af378ef361a0fff2266b4845f7633371ae8788b875589e16507ee5d5bfe6f745a6b95bfe930acfc7b8aabf56c34aa8d273d14b33b25d1ecd851529274d29c23ca33946e83ec6d2929605351ef16281f6f7e8eefbfc5e696efe93abbe3ab0187d0b58d9b5df678a433b3f938c3d46007637cdfe9495f5a529bd8002d9fcdc8621c47d1428b14884adf8dfa7ac6bcc67658fb01bbf22ec0042bd00a2660adb82341a094a63535fe436e9a22b81d22730d2bab76a776898cabaab807377927a", 0xec}, {&(0x7f0000000a00)="c72a2003659391164813ae02458974aa9fc31f58b8f954478d773abe367f7591df45ffec3de251fc20296989a9d507c0e2c4ab33c04df0ec1ebcd981139fd70e8c29930c95d727138861a6206f92131bdf287c29e2dcdf83b3a9a494fde0944c5ca424c94598c2e7b5e33c3ab06c35e24f35219acf3b2c9dfc3b9b669bc2200e61aa32872ab7d39b342881fa5a18dbe37de15922a680a8eed64fe1f1bec241aa48388650f297584bcf360dc2fd68e96436a0a2c54985c833803302870cc320ed34c9e585da92", 0xc6}, {&(0x7f0000000b00)="4aced9e6503196d89e41370575c4770a63ae1d78e85d71e80cd826f4a02971ef6928720050d327cf424a5b01e0ae81af28f7ae8bd23fa75b0cd6e7c4753a844d481af27e30692dceb8779872a300723b91fa9861e480a822fbc3111f69e89beb23a3077b1f6401e83a4b2bff", 0x6c}, {&(0x7f0000000b80)="22efe29267d999d7c05ce5c0ed174e059c8c8cfd073e6f9bf285da2698ae80447550bee0ff83b4a30c90dce387af4e317f341918a782e88080880c28d0a91187893bef915c8fa86992e440c7046ba065868d152b5e8a9a70d46ade8c4ae774641d99ae67e613c813727042fa2198a714361c4745252f71c93301aedfee08e7d631a4f5f4b9420ea3bf3533ad94113d72f3d7f74c30de37f139677c43a3a718aced9498f79c23f36bdcc1dc070a980ccaac2855109f6ee0455fe408378f629fbd1caea4d98a7d5c2b018521b2e6451bed153c653daf020a0da5f0a2cb8ded32ba", 0xe0}, {&(0x7f0000000c80)="f679a0f4e742f769c01c209ce019e8fcc7ffc77331c3e21eaf126126e93e522e7f8aaf3a6d4c4c8eab0f3538e70ba3c209c23a93514138c47e8aa8c2cf79131e06d9420436", 0x45}], 0x8) unlink(&(0x7f0000000d80)='./file0\x00') getuid() getsockname$inet(r3, &(0x7f0000000dc0), &(0x7f0000000e00)=0xc) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) chmod(&(0x7f0000000e40)='./file0\x00', 0x8) r4 = dup(r3) mkdirat(r3, &(0x7f0000000e80)='./file0\x00', 0xb) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, &(0x7f0000000f00)=0xc) setreuid(r0, r6) setuid(r6) r8 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r8, 0x1, 0x3, &(0x7f0000000f40)=""/120) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000fc0)=0x399a) fsync(r3) syz_emit_ethernet(0x145, &(0x7f0000001000)={@empty, @broadcast, [], {@ipv4={0x800, {{0x11, 0x4, 0x1, 0x2d, 0x137, 0x68, 0x5, 0x6, 0x1d, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x1f, 0xae, [@multicast2, @multicast1, @rand_addr=0x7, @remote={0xac, 0x14, 0x0}, @loopback, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}]}, @ssrr={0x89, 0xb, 0xf, [@rand_addr=0x2, @empty]}, @generic={0x1, 0x4, "5d18"}]}}, @generic="c52d101894069d364270d3ef3dabfbe4ba9b005a52bcb3e8ea1d504f293d08fdc577e2ff4cc16d6ffc1ffd0211aa73994f02c82193862b71003c10e713ff051763faf44bae5e176739d08aac748e0f22e4b6704d83a4b9a1ad9d3b3818d221d426329b8fd7f258c70d3afc567a7f9b9d8a397ad7aafe3b360958b84319a8d36f892735c7c3bb9b1da9c1c1037af8398e6fdb60e583d67506d88b79e18e30051b30c6bdff61d33f4344aa4c292cc62304b6bedf13e91d2ae45017a2c80051df7c75216c741865f45038c028a653cf192476d1a0339d4d9c4f3a15128e618c380841ab44cf99d8a5e38fa3984146d49774eff8ef"}}}}) connect$inet(r4, &(0x7f0000001180)={0x2, 0x2}, 0xc) setuid(r0) syz_emit_ethernet(0xc8, &(0x7f00000011c0)={@remote, @local, [{[{0x88a8, 0x0, 0x0, 0x2}], {0x8100, 0x7}}], {@ipv4={0x800, {{0x11, 0x4, 0x2, 0x9, 0xb2, 0x66, 0x4f6, 0x10, 0x61, 0x0, @remote={0xac, 0x14, 0x0}, @empty, {[@rr={0x7, 0x13, 0x7, [@broadcast, @broadcast, @loopback, @rand_addr=0x5]}, @end, @ssrr={0x89, 0x1b, 0x4, [@remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @multicast1, @multicast2, @rand_addr=0x7fff]}]}}, @generic="9c4266a0869486f65a19bdc8c7484996d6ec86d1b5d05b2a7aef5cab896da1249fa2d06f3480c7687bb30806378b8497b0a6f9f8c01118a3f4203ed5f453794cf38f7e190aaff08397033aa02baecffcb2aa74453dd05c9495f9ca9067c3a60fc1905d1456aa624972e415eb8f24"}}}}) r9 = openat$bpf(0xffffffffffffff9c, &(0x7f00000012c0), 0x400, 0x0) ioctl$BIOCGBLEN(r9, 0x40044266, &(0x7f0000001300)) r10 = shmget(0x1, 0x4000, 0x4c2, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_SET(r10, 0x1, &(0x7f0000001340)={{0x40, r0, r7, r6, r7, 0x343, 0x9}, 0x6, 0x6, r5, r5, 0xcf5a, 0xab, 0x9bed}) 0s ago: executing program 5 (id=8089): open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x79) setpgid(0x0, 0x0) r0 = getppid() setpgid(0x0, r0) r1 = getppid() r2 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) dup2(0xffffffffffffffff, r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = semget(0x0, 0x1, 0x281) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000340)="aa308670", 0x4}], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x2810, r4, 0x0) ftruncate(r4, 0x3) semop(r3, &(0x7f0000000000), 0x23) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r1}) setrlimit(0x8, &(0x7f0000000180)={0x8, 0x54}) r5 = syz_open_pts() close(r5) syz_open_pts() openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x11, 0x401}, 0xc) ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000000)={0x40978b, 0x10001, 0xfffffc01, 0x80a1a4, "bb08000100f167d910508bc49d7323000000007e", 0x0, 0xffffffff}) writev(r5, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) ioctl$FIOASYNC(r5, 0x80047469, &(0x7f00000001c0)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r6, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="258b300ad1711569138b48aec40000004a0c6c457db9b8a773693867ea9ed92904831d11a558caba3b584cd8", 0x2c}], 0x1, 0x0, 0x0, 0xc2d839217c176b29}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. vnd0: sloppy read from proc 54007 (syz-executor): blkno 0 bcount 208 vnd0: sloppy read from proc 54007 (syz-executor): blkno 0 bcount 244 denied attempt to set clock forward to 7885088468817503279 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) login: fuse: Cannot find fusebuf À ?€ Hî@-}malloc(): allocation too large, type = 127, size = 4762072176 WARNING: thread `nfsio' (445662) exits with status -1 WARNING: thread `nfsio' (312282) exits with status -1 WARNING: thread `nfsio' (35517) exits with status -1 WARNING: thread `nfsio' (367199) exits with status -1 WARNING: thread `nfsio' (272149) exits with status -1 WARNING: thread `nfsio' (399849) exits with status -1 WARNING: thread `nfsio' (425123) exits with status -1 WARNING: thread `nfsio' (335507) exits with status -1 WARNING: thread `nfsio' (247156) exits with status -1 WARNING: thread `nfsio' (85114) exits with status -1 WARNING: thread `nfsio' (237317) exits with status -1 WARNING: thread `nfsio' (148236) exits with status -1 WARNING: thread `nfsio' (241723) exits with status -1 WARNING: thread `nfsio' (259055) exits with status -1 WARNING: thread `nfsio' (67387) exits with status -1 WARNING: thread `nfsio' (214640) exits with status -1 WARNING: thread `nfsio' (67757) exits with status -1 WARNING: thread `nfsio' (229830) exits with status -1 WARNING: thread `nfsio' (250082) exits with status -1 WARNING: thread `nfsio' (101586) exits with status -1 denied attempt to set clock back 134217755 seconds malloc(): allocation too large, type = 6, size = 287762939904 ¹j¼õ¬|ÿ ž¨E1\…: OpenBSD/amd64 (ò—ƒsÿ<ó¿b,!q) (tty00) login: denied attempt to set clock back 536870947 seconds malloc(): allocation too large, type = 29, size = 16796513700 À °þÿÿmalloc(): allocation too large, type = 29, size = 16796513700 malloc(): allocation too large, type = 29, size = 16796513700 malloc(): allocation too large, type = 29, size = 16796513700 pppx: unable to set addresses for pppx1, error=17 denied attempt to set clock back 4263431350 seconds denied attempt to set clock back -9223372032591346507 seconds malloc(): allocation too large, type = 29, size = 16796513700 uvn_flush: obj=0xfffffd806b896828, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! malloc(): allocation too large, type = 29, size = 16796513700       OpenBSD/amd64 (Amnesiac) (tty00) login: malloc(): allocation too large, type = 29, size = 16796513700 malloc(): allocation too large, type = 29, size = 16796513700 -!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 29, 3):% = 16796513700 ./&),%0./&),%0./&),%0./&),%0 *90008: 5.!",% 4/ 3%4 !$$2%33%3 &/2 00081, %22/2=17 -!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 29, 3):% = 16796513700 -!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 29, 3):% = 16796513700                                                                                                                                                           OpenBSD/amd64 (Amnesiac) (tty00) login: malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 3587521879 seconds denied attempt to set clock back 159383556 seconds ¹j¼õ¬|ÿ ž¨E1\…:malloc(): allocation too large, type = 29, size = 16796513700 ¹j¼õ¬|ÿ ž¨E1\…:denied attempt to set clock back 148 seconds denied attempt to set clock back 4263431443 seconds malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back -9223372032591346409 seconds ¹j¼õ¬|ÿ ž¨E1\…: TWARNING: thread `nfsio' (251546) exits with status -1 WARNING: thread `nfsio' (240407) exits with status -1 WARNING: thread `nfsio' (121076) exits with status -1 WARNING: thread `nfsio' (334235) exits with status -1 WARNING: thread `nfsio' (154478) exits with status -1 WARNING: thread `nfsio' (347070) exits with status -1 WARNING: thread `nfsio' (407870) exits with status -1 WARNING: thread `nfsio' (473509) exits with status -1 WARNING: thread `nfsio' (43938) exits with status -1 WARNING: thread `nfsio' (284666) exits with status -1 WARNING: thread `nfsio' (513406) exits with status -1 WARNING: thread `nfsio' (365958) exits with status -1 WARNING: thread `nfsio' (248424) exits with status -1 WARNING: thread `nfsio' (496180) exits with status -1 WARNING: thread `nfsio' (227773) exits with status -1 WARNING: thread `nfsio' (390740) exits with status -1 WARNING: thread `nfsio' (69647) exits with status -1 WARNING: thread `nfsio' (92420) exits with status -1 WARNING: thread `nfsio' (109620) exits with status -1 WARNING: thread `nfsio' (44219) exits with status -1          OpenBSD/amd64 (Amnesiac) (tty00) login: OpenBSD/amd64 (Amnesiac) (tty00) login: malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 16777255 seconds denied attempt to set clock back 4263431468 seconds uvn_flush: obj=0xfffffd8076ecc438, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock forward to 13622313412984933 denied attempt to set clock forward to 13622313412984933 1"%;)*, 32.7%'61$2,7/;=!2,4 ;/?! *./. : ;&&2,;5 -.61(199-!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 29, 3):% = 16796513700 0008: 5.!",% 4/ 3%4 !$$2%33%3 &/2 00081, %22/2=17 $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 536871102 3%#/.$3                        OpenBSD/amd64 (Amnesiac) (tty00) login: ¹malloc(): allocation too large, type = 29, size = 16796513700 OpenBSD/amd64 (Amnesiac) (tty00) login: denied attempt to set clock back -9223372032591346355 seconds malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 536871121 seconds malloc(): allocation too large, type = 29, size = 16796513700 WARNING: thread `nfsio' (66682) exits with status -1 WARNING: thread `nfsio' (368476) exits with status -1 WARNING: thread `nfsio' (512850) exits with status -1 WARNING: thread `nfsio' (395452) exits with status -1 WARNING: thread `nfsio' (59064) exits with status -1 WARNING: thread `nfsio' (20291) exits with status -1 WARNING: thread `nfsio' (134309) exits with status -1 WARNING: thread `nfsio' (136741) exits with status -1 WARNING: thread `nfsio' (304603) exits with status -1 WARNING: thread `nfsio' (477124) exits with status -1 WARNING: thread `nfsio' (299684) exits with status -1 WARNING: thread `nfsio' (137873) exits with status -1 WARNING: thread `nfsio' (386608) exits with status -1 WARNING: thread `nfsio' (207482) exits with status -1 WARNING: thread `nfsio' (488353) exits with status -1 WARNING: thread `nfsio' (1743) exits with status -1 WARNING: thread `nfsio' (424905) exits with status -1 WARNING: thread `nfsio' (56947) exits with status -1 WARNING: thread `nfsio' (487782) exits with status -1 WARNING: thread `nfsio' (405831) exits with status -1 malloc(): allocation too large, type = 29, size = 16796513700 uvm_fault(0xfffffd8078d94220, 0x0, 0, 1) -> e fatal page fault in supervisor mode trap type 6 code 0 rip ffffffff823896a8 cs 8 rflags 10246 cr2 0 cpl 0 rsp ffff80002a3874d0 gsbase 0xffff8000299edff0 kgsbase 0x0 panic: trap type 6, code=0, pc=ffffffff823896a8 Starting stack trace... panic(ffffffff833a2d26) at panic+0x1d0 kerntrap(ffff80002a387420) at kerntrap+0x30b alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dt_ioctl_record_stop(ffff800001706000) at dt_ioctl_record_stop+0x108 dtclose(11e5f,81,2000,ffff80002a318a90) at dtclose+0x109 spec_close(ffff80002a3875d0) at spec_close+0x466 VOP_CLOSE(fffffd8066514710,81,fffffd80097fb340,ffff80002a318a90) at VOP_CLOSE+0x132 vn_closefile(fffffd806bef53e8,ffff80002a318a90) at vn_closefile+0x12b fdrop(fffffd806bef53e8,ffff80002a318a90) at fdrop+0x121 closef(fffffd806bef53e8,ffff80002a318a90) at closef+0x192 fdfree(ffff80002a318a90) at fdfree+0x116 exit1(ffff80002a318a90,0,0,1) at exit1+0x576 sys_exit(ffff80002a318a90,ffff80002a387940,ffff80002a387890) at sys_exit+0x1a syscall(ffff80002a387940) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76c6e831ed10, count: 242 End of stack trace. WARNING: SPL NOT LOWERED ON TRAP EXIT 4 0 Stopped at proc_trampoline+0xc7: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND *460846 39930 60929 0x10 0 1 syz-executor 156489 81313 0 0x14000 0x200 0 reaper proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x78bf75a8bbc0, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd8078d94220, 0x0, 0, 1) -> e ddb{1}> trace proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x78bf75a8bbc0, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80002a2a0f40 rbx 0 rdx 0 rcx 0xffff80002a3194d0 rax 0x2a r8 0xffff80002a2a0e70 r9 0x1 r10 0x704e6a265b0c2191 r11 0xc27eee1a8577b7d9 r12 0 r13 0 r14 0 r15 0 rip 0xffffffff813874c7 proc_trampoline+0xc7 cs 0x8 rflags 0x246 rsp 0xffff80002a2a0ec0 ss 0x10 proc_trampoline+0xc7: movl $0,%gs:0x688 ddb{1}> show proc PROC (syz-executor) tid=460846 pid=39930 tcnt=2 stat=onproc flags process=10 proc=0 runpri=86, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a3199f0,0xffff80002a318580 process=0xffff800037824ec0 user=0xffff80002a29b000, vmspace=0xfffffd8078d949c0 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND *39930 460846 75937 60929 7 0x10 syz-executor 39930 76284 75937 60929 3 0x4000090 fsleep syz-executor 43195 430157 88772 0 2 0 syz-executor 43195 55769 88772 0 3 0x4000080 netcon syz-executor 43195 504925 88772 0 3 0x4000080 fsleep syz-executor 12603 84425 26752 0 3 0x80 nanoslp syz-executor 12603 15214 26752 0 3 0x4000080 sbwait syz-executor 12603 253475 26752 0 3 0x4000080 fsleep syz-executor 42157 358683 92470 -1 3 0x90 nanoslp syz-executor 42157 355998 92470 -1 3 0x4000090 kqread syz-executor 42157 517599 92470 -1 3 0x4000090 fsleep syz-executor 42157 82402 92470 -1 3 0x4000090 fsleep syz-executor 99718 349832 95292 0 3 0x90 nanoslp syz-executor 99718 45318 95292 0 3 0x4000090 kqsel syz-executor 99718 5153 95292 0 3 0x4000090 fsleep syz-executor 39184 372395 1 0 3 0x82 nanoslp getty 92500 408232 0 0 3 0x14200 acct acct 26069 271868 26039 0 2 0x2 syz-executor 88772 342699 26039 0 3 0x82 nanoslp syz-executor 75937 355416 26039 0 3 0x82 nanoslp syz-executor 95292 122001 26039 0 3 0x82 nanoslp syz-executor 55759 319401 26039 0 3 0x2 biowait syz-executor 92470 470259 26039 0 3 0x82 nanoslp syz-executor 26752 271697 26039 0 3 0x82 nanoslp syz-executor 40343 81300 26039 0 3 0x2 biowait syz-executor 71307 485904 0 0 3 0x14200 bored sosplice 26039 489100 49615 0 3 0x82 kqread syz-executor 49615 378633 59256 0 3 0x10008a sigsusp ksh 59256 243550 25190 0 3 0x98 kqread sshd-session 25190 98664 87008 0 3 0x92 kqread sshd-session 87008 449022 1 0 3 0x88 kqread sshd 97985 123840 18273 74 3 0x1100092 bpf pflogd 18273 463733 1 0 3 0x80 sbwait pflogd 91677 255805 78005 73 3 0x1100090 kqread syslogd 78005 434933 1 0 3 0x100082 sbwait syslogd 57607 217350 1 0 3 0x100080 kqread resolvd 9443 316663 0 0 3 0x14200 bored smr 43770 250820 0 0 2 0x14200 zerothread 52853 219895 0 0 3 0x14200 aiodoned aiodoned 47560 375355 0 0 3 0x14200 syncer update 32294 441170 0 0 3 0x14200 cleaner cleaner 81313 156489 0 0 7 0x14200 reaper 22181 171629 0 0 3 0x14200 pgdaemon pagedaemon 15934 358180 0 0 3 0x14200 bored viomb 62150 368081 0 0 3 0x40014200 acpi0 acpi0 27828 107580 0 0 3 0x40014200 idle1 65594 282572 0 0 3 0x14200 bored softnet7 86654 516837 0 0 3 0x14200 bored softnet6 9701 192747 0 0 3 0x14200 bored softnet5 43910 49250 0 0 3 0x14200 bored softnet4 96611 368840 0 0 3 0x14200 bored softnet3 83111 53491 0 0 3 0x14200 bored softnet2 61051 113497 0 0 3 0x14200 bored softnet1 97042 213115 0 0 3 0x14200 bored softnet0 52949 60160 0 0 2 0x40014200 systqmp 37921 489619 0 0 3 0x14200 bored systq 74759 106398 0 0 3 0x14200 tmoslp softclockmp 71279 491294 0 0 3 0x40014200 tmoslp softclock 56606 238871 0 0 3 0x40014200 idle0 1 98211 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks CPU 0: exclusive mutex &uvm.fpageqlock r = 0 (0xffffffff83907520) #0 witness_lock+0x5f1 #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 uvm_pmr_freepageq+0x15c #4 km_free+0x36b #5 uvm_uarea_free+0x4f #6 reaper+0x1aa #7 proc_trampoline+0x10 Process 55759 (syz-executor) thread 0xffff8000ffff22a0 (319401) Process 40343 (syz-executor) thread 0xffff80003c449c60 (81300) ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10248 11138K 13675K 166960K 17847 0 pcb 19 20K 30K 166960K 2235 0 rtable 264 17K 17K 166960K 1878 0 pf 39 18K 67485K 166960K 820 0 ifaddr 38 10K 11K 166960K 471 0 ifgroup 59 2K 3K 166960K 901 0 sysctl 4 1K 9K 166960K 130 0 counters 70 37K 38K 166960K 1086 0 ioctlops 0 0K 8K 166960K 3313 0 iov 1 16K 34K 166960K 659 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1643 103K 104K 166960K 8058 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 108K 108K 166960K 23 0 VM map 2 1K 1K 166960K 2 0 sem 26 100K 105K 166960K 46 0 dirhash 12 2K 3K 166960K 150 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 57K 240K 166960K 8699 0 sigio 1 0K 0K 166960K 176 0 proc 67 83K 196K 166960K 2316 0 subproc 72 4K 4K 166960K 291 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 1760 0 in_multi 67 5K 7K 166960K 620 0 ether_multi 1 0K 0K 166960K 86 0 mrt 1 0K 0K 166960K 42 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 175 784K 784K 166960K 175 0 exec 0 0K 1K 166960K 1957 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 48 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 224 136K 174K 166960K 77499 0 UVM aobj 159 5K 5K 166960K 163 0 pinsyscall 35 70K 101K 166960K 10408 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 429 0 NDP 13 0K 1K 166960K 371 0 temp 88 8648K 8784K 166960K 410518 0 kqueue 8 13K 34K 166960K 1628 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 1018 0 1017 8 7 1 2 0 8 0 rtentry 176 636 0 544 7 2 5 6 0 8 0 unpcb 144 6444 0 6423 40 37 3 6 0 8 2 syncache 336 13 0 13 8 8 0 1 0 8 0 tcpqe 32 1 8 1 1 1 0 1 0 8 0 tcpcb 736 3294 0 3285 65 63 2 8 0 8 0 arp 128 118 0 95 1 0 1 1 0 8 0 inpcb 328 11210 0 11198 106 102 4 13 0 8 2 nd6 144 103 0 83 1 0 1 1 0 8 0 pkpcb 40 121 0 121 19 18 1 1 0 8 1 kcovpl 48 32 0 24 1 0 1 1 0 8 0 mppekey 1024 77 0 77 9 9 0 1 0 8 0 ppxss 1192 411 0 411 13 12 1 1 0 8 1 pppxif 1504 103 0 103 18 18 0 1 0 8 0 pfstscr 40 4 0 4 2 2 0 1 0 8 0 pffrag 232 99 0 87 2 0 2 2 0 482 0 pffrnode 88 73 0 62 1 0 1 1 0 8 0 pffrent 40 245 0 233 1 0 1 1 0 8 0 pfosfp 40 1429 0 1429 5 5 0 5 0 8 0 pfosfpen 112 1429 0 1429 21 21 0 21 0 8 0 pfrktable 1344 42 0 42 6 6 0 1 0 8 0 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 pfstitem 24 543 0 358 2 0 2 2 0 8 0 pfstkey 128 545 0 360 7 0 7 7 0 8 0 pfstate 384 545 0 360 19 0 19 19 0 8 0 pfrule 1344 25 0 20 2 1 1 2 0 8 0 rttmr 136 3 0 3 3 3 0 1 0 8 0 art_heap8 4096 4 0 0 4 0 4 4 0 8 0 art_heap4 256 2202 0 1850 48 23 25 28 0 8 0 art_table 40 2206 0 1850 5 0 5 5 0 8 0 art_node 32 626 0 558 2 0 2 2 0 8 0 sysvmsgpl 40 17 0 12 1 0 1 1 0 8 0 semupl 112 5 0 5 4 4 0 1 0 8 0 semapl 112 36 0 12 1 0 1 1 0 8 0 shmpl 112 160 0 4 5 0 5 5 0 8 0 dirhash 1024 109 0 92 3 0 3 3 0 8 0 dino2pl 256 17664 0 16105 99 0 99 99 0 8 0 ffsino 296 17664 0 16105 121 0 121 121 0 8 0 nchpl 144 29921 0 29340 64 39 25 64 0 8 0 rtmask 32 57 0 57 17 16 1 1 0 8 1 uvmvnodes 80 6619 0 0 136 0 136 136 0 8 0 vnodes 216 6619 0 0 368 0 368 368 0 8 0 namei 1024 114892 0 114892 18 17 1 3 0 8 1 percpumem 16 558 0 508 1 0 1 1 0 8 0 kstatmem 264 616 0 586 8 5 3 3 0 8 0 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 scsiplug 72 40 0 40 17 16 1 1 0 8 1 scxspl 216 270742 0 270740 25 24 1 8 1 8 0 plimitpl 152 2109 0 2093 1 0 1 1 0 8 0 sigapl 424 8984 0 8933 11 2 9 9 0 8 0 knotepl 120 1208 0 0 31 0 31 31 0 8 0 kqueuepl 224 3345 0 3335 28 26 2 5 0 8 1 pipepl 344 1482 0 1454 32 28 4 12 0 8 0 fdescpl 528 8858 0 8831 3 0 3 3 0 8 0 filepl 160 70073 0 69859 75 61 14 23 0 8 4 lockfpl 104 4917 0 4914 8 7 1 2 0 8 0 lockfspl 48 1423 0 1420 1 0 1 1 0 8 0 sessionpl 144 62 0 55 1 0 1 1 0 8 0 pgrppl 48 434 0 419 1 0 1 1 0 8 0 ucredpl 104 12523 0 12510 1 0 1 1 0 8 0 zombiepl 144 11486 0 11485 3 2 1 1 0 8 0 processpl 1248 8984 0 8933 7 1 6 7 0 8 0 procpl 656 22828 0 22767 12 4 8 9 0 8 0 sosppl 168 57 0 57 13 13 0 1 0 8 0 sockpl 752 19226 0 19192 174 161 13 26 0 8 9 mcl64k 65536 36 0 0 4 0 4 4 0 8 0 mcl16k 16384 5 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 28 0 0 4 1 3 4 0 8 0 mcl4k 4096 113 0 0 14 0 14 14 0 8 0 mcl2k2 2112 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 122 0 0 8 1 7 8 0 8 0 mtagpl 96 17 0 0 1 0 1 1 0 8 0 mbufpl 256 1329 0 0 75 0 75 75 0 8 0 bufpl 280 118708 0 112043 477 0 477 477 0 8 0 anonpl 32 20389 0 0 163 0 163 163 0 246 0 amapchunkpl 152 276911 0 276341 125 90 35 38 0 158 8 amappl16 200 36164 0 36098 280 264 16 48 0 8 0 amappl15 192 7 0 7 1 1 0 1 0 8 0 amappl14 184 249 0 240 1 0 1 1 0 8 0 amappl13 176 39 0 39 6 6 0 1 0 8 0 amappl12 168 9913 0 9886 4 2 2 3 0 8 0 amappl11 160 117 0 108 1 0 1 1 0 8 0 amappl10 152 7 0 6 5 4 1 1 0 8 0 amappl9 144 250 0 249 2 1 1 1 0 8 0 amappl8 136 22 0 19 1 0 1 1 0 8 0 amappl7 128 193 0 182 1 0 1 1 0 8 0 amappl6 120 434 0 430 1 0 1 1 0 8 0 amappl5 112 230 0 223 1 0 1 1 0 8 0 amappl4 104 378 0 358 1 0 1 1 0 8 0 amappl3 96 57876 0 57773 4 0 4 4 0 8 0 amappl2 88 1109 0 1060 2 0 2 2 0 8 0 amappl1 80 46160 0 45656 16 1 15 15 0 8 0 amappl 88 74881 0 74714 5 0 5 5 0 92 0 dma65536 65536 1 0 1 1 1 0 1 0 8 0 dma16384 16384 1 0 1 1 1 0 1 0 8 0 dma8192 8192 1 0 1 1 1 0 1 0 8 0 dma4096 4096 4 0 4 4 4 0 1 0 8 0 dma1024 1024 4 0 3 1 0 1 1 0 8 0 dma512 512 1 0 1 1 1 0 1 0 8 0 dma256 256 10 0 10 5 5 0 1 0 8 0 dma128 128 270 0 270 13 13 0 1 0 8 0 dma64 64 11 0 11 5 5 0 1 0 8 0 dma32 32 8 0 8 2 2 0 1 0 8 0 dma16 16 22 0 21 1 0 1 1 0 8 0 aobjpl 72 162 0 4 3 0 3 3 0 8 0 uaddrrnd 24 8858 0 8831 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 8858 0 8831 1 0 1 1 0 8 0 vmmpekpl 168 60954 0 60888 4 0 4 4 0 8 0 vmmpepl 168 556154 0 554441 194 96 98 126 0 357 0 vmsppl 488 8857 0 8831 8 3 5 5 0 8 0 rwobjpl 80 145735 0 138112 189 28 161 164 0 8 0 pdppl 4096 17724 0 17662 171 105 66 84 0 8 4 pvpl 32 31879 0 0 256 1 255 255 0 265 0 pmappl 256 8857 0 8831 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 548 0 240 10 0 10 10 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837dcff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 msleep_nsec(ffffffff837b17f8,ffffffff837b17c0,4,ffffffff8337c4f7,ffffffffffffffff) at msleep_nsec+0x19 reaper(ffff8000ffffc528) at reaper+0x13b end trace frame: 0x0, count: 10 ddb{0}> trace x86_ipi_db(ffffffff837dcff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 msleep_nsec(ffffffff837b17f8,ffffffff837b17c0,4,ffffffff8337c4f7,ffffffffffffffff) at msleep_nsec+0x19 reaper(ffff8000ffffc528) at reaper+0x13b end trace frame: 0x0, count: -5 ddb{0}> machine ddbcpu 1 Stopped at proc_trampoline+0xc7: movl $0,%gs:0x688 proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x78bf75a8bbc0, count: 14 ddb{1}> trace proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x78bf75a8bbc0, count: -1