last executing test programs: 1.668638523s ago: executing program 5 (id=351): r0 = socket$unix(0x1, 0x2, 0x0) sendto(r0, &(0x7f0000000000)="2ad55d7b350ff4971c72c5e45a04db3f48c5631286f7a78f5b4c1bc56ff22079a40a0cd41823944a09ab47c87feaa718fa", 0x31, 0x401, &(0x7f0000000040)=@in={0x10, 0x2, 0x0, 0x9}, 0x10) socket$unix(0x1, 0x2, 0x0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$VNDIOCCLR(r1, 0x80384601, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)='./file0\x00', 0x8}) open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x800, 0x112) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01864c1, &(0x7f00000001c0)={0x0, 0x1, 0xffffffffffffffff, 0x0, 0x100000001}) ioctl$DIOCGETRULES(r2, 0xcd604406, &(0x7f0000000200)={0x0, 0x66552870, 0x1, './file0/file0\x00', './file1\x00', 0x0, "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"}) nanosleep(&(0x7f0000000f80)={0x1, 0x6}, 0x0) fcntl$getown(r0, 0x5) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000fc0)={0x3, 0x1, 0xfffffc4a, 0x2, 0xa277, 0x2, 0x0, 0x7, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000001000)={0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000001040)={0x0, 0x40, 0x2, 0x32315559, 0x1, [0x0, r3, r4], [0x2, 0x69, 0x8000, 0x3], [0x6, 0x5, 0x3, 0x3], [0x3, 0x9, 0x7, 0x3]}) r5 = open(&(0x7f00000010c0)='./file1\x00', 0x100, 0x70) r6 = open(&(0x7f0000001100)='./file0\x00', 0x108, 0x141) r7 = openat$dri(0xffffffffffffff9c, &(0x7f0000001140)='/dev/dri/card0\x00', 0x20040, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f0000001180)={0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r7, 0xc00464c9, &(0x7f00000011c0)={r8}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r6, 0xc04064aa, &(0x7f00000012c0)={&(0x7f0000001200)=[0x0], &(0x7f0000001240)=[{}, {}, {}], 0x6128, 0x0, ""/32, 0x1, 0x3}) ioctl$VNDIOCSET(r5, 0xc0384600, &(0x7f0000001380)={&(0x7f0000001300)='./file1\x00', 0x82ed, &(0x7f0000001340)='./file1\x00', 0x8}) faccessat(r2, &(0x7f00000013c0)='./file1\x00', 0xad, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)) mknodat(r0, &(0x7f0000001440)='./file0\x00', 0x8, 0x390e3c52) r9 = openat$pf(0xffffffffffffff9c, &(0x7f0000001480), 0x180, 0x0) writev(r9, &(0x7f00000015c0)=[{&(0x7f00000014c0)="403fb42595656ba9f8f729e69a40e2fc824932afd4678c624bd5b81f51c93cef3b869db327aaabb522cbe04a880e80528d051cf3a7775d5aba913102adffa13b8d3866262771b9af5df43b6ea931ca131f637fc33bf287ae9d74fef673147ea0b5b6ae9f841e0a9a14a04f910d271fdc17ce65978967d86962210f23234f9af2b902a908701975d432f12783401ab8743cafeb1459cefa6b6265e8115426dc1058bd3642a622a54de7e9c9dc53d3d3205c89da92a0cfae614b2c13c1e7baa402cfd1c996cffcf46429a87a590ad420", 0xcf}], 0x1) ioctl$DIOCSTOP(r2, 0x20004402) ioctl$TIOCCDTR(r6, 0x20007478) fchdir(r1) ioctl$FIOGETOWN(r2, 0x4004667b, &(0x7f0000001600)) ioctl$BIOCGDLTLIST(r2, 0xc010427b, &(0x7f0000001680)={0x4, &(0x7f0000001640)=[0x3, 0xfffffff3, 0x9, 0xfffffffe]}) 1.517299556s ago: executing program 0 (id=362): setsockopt(0xffffffffffffffff, 0x1000000029, 0x39, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x20531a) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) rename(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x20ad, 0x6, 0x2000007, 0x5f, 0x80000001, 0x6, 0x80, 0x10, [{0x1000004, 0xe68, 0x0, 0x71000}, {0xd8, 0x5, 0x8, 0xfffffff9}, {0x0, 0xfffffff6, 0x8, 0x7}, {0x8, 0x800, 0x3, 0xfffffffd}, {0x400, 0xf2b, 0xc, 0x2}, {0x7a, 0x1, 0xc, 0x95}, {0x81, 0x800, 0x9d29, 0x400006d}, {0x3, 0x0, 0x5c, 0x2}, {0x2, 0x82, 0x4, 0xaf}, {0x5, 0x7fffffff, 0x10000d1b, 0x88}, {0x1d2, 0x20000007, 0x2c, 0x4}, {0x7fc, 0x9, 0x8, 0x80000000}, {0x4, 0x6, 0x10000, 0x1001}, {0x29a71713, 0x1, 0x6, 0x3}, {0x20000c, 0x9, 0x2}, {0x401, 0x5, 0x100002}]}) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x78e, 0x7) ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0}) pwrite(r1, &(0x7f0000002600)="b3", 0x1, 0x7fff) 1.516761668s ago: executing program 6 (id=363): r0 = msgget$private(0x0, 0xb) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x0, 0x85, 0x48e}, 0x6, 0x9, 0x0, 0x0, 0x1, 0xb000000000004000, 0xfffffffffffffff9, 0x807}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x59}, 0x2, &(0x7f0000000100)="00e0", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000140), &(0x7f0000000100), &(0x7f0000001900), 0x0) msgsnd(r0, &(0x7f0000002500)=ANY=[@ANYBLOB="03"], 0x0, 0x0) kill(0x0, 0x20) (async) kill(0x0, 0x20) msgrcv(r0, &(0x7f00000001c0)={0x0, ""/131}, 0xfffffff3, 0x0, 0x1000) (async) msgrcv(r0, &(0x7f00000001c0)={0x0, ""/131}, 0xfffffff3, 0x0, 0x1000) 1.24734379s ago: executing program 0 (id=372): socket(0x11, 0x3, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r0 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000380)={0x10000, [{0x3, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x3, 0x9}, {0x0, 0x4}, {0x3, 0xc}, {0x0, 0xc8}, {0x5}, {0x0, 0xff}, {0x2}, {0x3, 0x204}, {0x1, 0xfffffffe}, {}, {0x0, 0x7fffffff}, {0x0, 0x7}, {0x2, 0xb}, {0x1, 0x7}, {0x3, 0x2000000}, {0x0, 0xffff}, {0x3, 0x70}, {0x1, 0xfffffffc}, {0x2}, {0x0, 0x3}, {}, {0x1, 0x7}, {0x3, 0x3}, {0x2}, {0x1}, {0x3, 0xffffffff}, {0x0, 0x2}, {0x2, 0x257fd}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x11, 0x2, &(0x7f0000000000), 0x4) chroot(0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r2 = socket$inet(0x2, 0x3, 0x0) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r3, &(0x7f00000001c0)="76a06a00b2979b1ad776ef36149a2e6f735a", 0x12) writev(r3, &(0x7f0000003500)=[{&(0x7f0000002300)='<', 0x1}], 0x1) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) fcntl$setstatus(r0, 0x4, 0x40) ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f0000000200)) 938.869299ms ago: executing program 4 (id=386): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x81, 0x11, 0x3, 0x4c}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) r1 = syz_open_pts() mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x5cdb) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write(r2, &(0x7f0000000480)="8a522c6b8a8460561e220ca762e8d6c739d5dd7f0153b7a50498cb60ab818b16929f3b0100c57351df76ca9ec87e96fa9f010342ace3a6ffcf", 0x39) setsid() ioctl$TIOCSCTTY(r1, 0x20007461) ioctl$TIOCFLUSH(r1, 0x80047410, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) sysctl$hw(&(0x7f00000000c0)={0x7, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x3f) mprotect(&(0x7f000041d000/0x2000)=nil, 0x2000, 0x2) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x81, 0x11, 0x3, 0x4c}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) (async) syz_open_pts() (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x5cdb) (async) open(&(0x7f0000000040)='./file0\x00', 0x1, 0x8) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) write(r2, &(0x7f0000000480)="8a522c6b8a8460561e220ca762e8d6c739d5dd7f0153b7a50498cb60ab818b16929f3b0100c57351df76ca9ec87e96fa9f010342ace3a6ffcf", 0x39) (async) setsid() (async) ioctl$TIOCSCTTY(r1, 0x20007461) (async) ioctl$TIOCFLUSH(r1, 0x80047410, 0x0) (async) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (async) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) (async) sysctl$hw(&(0x7f00000000c0)={0x7, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x3f) (async) mprotect(&(0x7f000041d000/0x2000)=nil, 0x2000, 0x2) (async) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) 936.360371ms ago: executing program 4 (id=388): semop(0x0, &(0x7f00000000c0)=[{0x2, 0x0, 0x1800}, {0x4, 0x2ff, 0x800}], 0x2aaaaaaaaaaaaad7) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000000)) bind(r0, &(0x7f00000000c0)=@in={0x10, 0x2, 0x0}, 0x1c) 934.703737ms ago: executing program 0 (id=389): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f000057e000/0x2000)=nil, 0x1}, {&(0x7f0000ffd000/0x1000)=nil}, {&(0x7f00000cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffd}, {0x0, &(0x7f00004f5000/0x4000)=nil, 0x10000}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000181000/0x1000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2}, {&(0x7f000028c000/0x4000)=nil, &(0x7f000028b000/0x3000)=nil, 0xe04}, {&(0x7f00003de000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000463000/0x1000)=nil, 0x8}, {&(0x7f00004c1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1ffffffff}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000006c000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000463000/0x3000)=nil, 0x4}, {&(0x7f00000cf000/0x1000)=nil, &(0x7f000028b000/0x4000)=nil, 0x9}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x10) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) socket(0x2, 0x1, 0x0) (async) r1 = socket(0x2, 0x1, 0x0) socket(0x11, 0x3, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0x0) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000200), 0xfffffffffffffdf0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000300)={0x3, &(0x7f00000000c0)=[{0x7, 0x36, 0x8}, {0x3, 0x5, 0x9, 0x2}, {0x406, 0x5, 0x7b, 0xdf96}]}) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x3a, 0x0, @empty, @remote={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x0, 0x0, 0x8}}}}}}}) setitimer(0x0, 0x0, &(0x7f0000001780)) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) r3 = openat$vnd(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$VNDIOCSET(r3, 0xc0384600, 0x0) 884.108542ms ago: executing program 4 (id=392): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x1) (async) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x6, 0x90) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000000007", 0xd, 0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r1 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r1, 0xffff, 0x40, &(0x7f0000000240)=0xff, 0x4) (async) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42118000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x406, 0x0, 0x0) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)='86', 0x2}], 0x1) 819.643679ms ago: executing program 5 (id=395): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3, 0x7}, {0x2, 0xff03}, {0x1}, {0x0, 0x800}, {0x3}, {0x5}, {0x0, 0xaa59}, {0x3, 0xb59}, {0x1, 0x1}, {0x3, 0x100}, {0x1, 0x1}, {0x2, 0x80000000}, {0x3, 0x3}, {}, {0x0, 0x5}, {0x1, 0xffffffff}, {0x3, 0x1}, {0x3}, {0x3, 0xfffffffe}, {0x3, 0x7ff}, {0xbb08c0840fa32129, 0x6}, {0x0, 0x1}, {0x1}, {0x0, 0xf208}, {0x2, 0x1000000}, {0x1, 0x1}, {0x0, 0x1ff}, {0x0, 0x200}, {0x2, 0xffffffff}, {0x0, 0x9}, {0x1, 0x5}, {0x3}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) setuid(0xffffffffffffffff) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = kqueue() kevent(r0, &(0x7f0000000240)=[{{}, 0xfffffffffffffff9, 0x3, 0x12, 0xffffffffffffff81, 0x47}], 0x8, 0x0, 0x1, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) 816.224244ms ago: executing program 5 (id=396): openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) select(0x40, &(0x7f0000000180)={0xb98, 0x2761, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x80}, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4804) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00') semget(0x0, 0x0, 0x48) r0 = open(&(0x7f0000000180)='./bus\x00', 0x800, 0x3d) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) write(r1, &(0x7f0000000080)="c30516845e", 0xff55) ioctl$DIOCADDRULE(r1, 0xcd604404, &(0x7f0000001040)={0x6, 0x7, 0xffffffff, './file0\x00', './file0\x00', 0x0, "993630429b7558ff2e41a2bb571feb65d3e9d4f1e1498e6560498a2cac7fd06f9b17f789c0a3c644558f6ffc48ec01a2969cbc33cc38e9998be5228b9cadde1316e532deb8cfa19e730eae4f9d0d763c793290dc93a4adc7b0a1f453f1e9755c3240da28e81d11aa6dedf10955f88d63d0558ca215af8cc30157eaa0a3f7e65e51a5418f4b970a1bb4c0614f9da5e9da3613b4a3c5a94bb5112452edf17537bbec8f09aec9cab2e0b02042dfcddd61ba3891374805ce30587bdfe3ac5df17e3d89557809e3a32b8d7d68b5487025fa86afdc77a0103ad07e08b4c3d6f127696ce62d8439f56cc59af99dd056f734032073e4bfeca4e878bb8a228cdc85a39bd76017da4ff5c33e6e1b16709c0be03bf67fcf9cbdb23676794b7658506f895bdafcc8c1ecc3b634976c613dd2a34b0624605584ebcf2981a2ddcac047f1516540f920c8165da302c2ac5140b35755e9d3fb5abef309a920ebe6344585a80e951ef83ae06fa9918d0024be170a0df996d7697de526df16c68c22f1d7856473ad9aa0a3aebc9443aae8a69c13dac88b6c34e3223dfae251dfc4a22102ee79b4d4b17840027cbc97a8c0a01ca506c8fca19ea375e6329dc33611e5d66ff665cfc51667e8d528d1dc3dd5be09c6f28222273800d47fa78eff01de0a1a8dc4dbcde11ce6d6fba0b427c8acc69b530e8a7f409fb19b029cca80ef0b20382c331db07747067cdb0f7c90244a41b6d83553c6b8d4eeba754392ca63527f7cb2fefa35a95302ef31c50517d4468b2730a040b8008b48a098c4a82882afcfec00332eaaf8595a79e9c46a48c5fc870e107566ea69b3885e2e12f9a0a77a1b51fd8ddd88c082092c9c5a6961a84f2c88ef9da594736807cc2cc1b938f6ee49afebc489dd6832ef6006a6caa65a1b1c92ed1f71651643365cd67af57edd35cec828b088a79f83191600f6c984ef53d251709ffcf0f14de4081c95206a5f5961956f97ef3d58d3de7d9dcf50af6ea3fed7e0c4eff232966bf48bead75da03e2da9aa69ea688078dd4263cb3f981ab59f6c692b6ac4a717309a7ac04900dddad118894583c23b2c2eba49cb677c60a02c6217f9107e6ab0d83ec5e1ddade8a02a25633626d203422a67c358e7be57e1ba34c52324f4bc59307a904100d696dcfb4efe22c7aa24e7b9cdd98e306dc27c4c9f43f86832ca6c3e1a668dace2034f1e13ea951902c1cacb63ad23d5370ec3918cee096d187e3f51a6e94e90dfdbf4c684d95f26006e6f30c8b9f078edcf634f86828e109001c887734cd5cf4c4838e5dcd9df71d7a61064ff72341ef84189860f7c7f06717a9bddd80a099fea6fd68718d719ad910ee988c478c627ae6b8418799f7c908615c150c4a37ce5163b9095d55c44389c8dd23919b1202e814646db418472f5569d649b1b3c461c1f5cbdd6a15be2df3f751f5732163758f2c07ef6761e51412460dea215ede78f9d8e46779b597dc8d695d298ad6696be1b82a7aaf017e6584e0b0416aa0f5157e89c62fb48f9a0f00511a22f2b1a4469c9825c774f5c88a10849d682bb69a30e2079e2b478d361a8e079d1e91929e21ed12d4506f7483e5cd1d7af8441a640ed398a8e40448be83f176c812f826cee656426661bf6251a17278bb70fc98d6118fa9d9f504fbab03808ea5c417038b61e9548d046f55140c9da8b2f6e92116bd5c5725ddb839c5908c6f484c77a32736b48399c5f77b57cad21fa16b6b58632fe1e9cb434033d295af8b80422576a6e234031572283f5cdaa4fe0c32f1094a79e0bb7150e04f20c1a94dab77a9b1206ca0c722f0f474157d3d08d5a2874c837a2b84b2213660d0d8e99f83f5b3fe43d96fd418c1d57604870fb6c00c623983ef45e59b050545a024fd9c7e9467a754eea729d3ccf64746464981d41"}) execve(0x0, 0x0, 0x0) ioctl$DIOCRCLRTSTATS(r0, 0xc4504441, &(0x7f0000000bc0)={{'./file0\x00', './file1\x00', 0x30, 0x4}, &(0x7f0000000340)=[{'./bus\x00', './bus\x00', 0x12, 0xe}, {'./file0\x00', './file0\x00', 0x19, 0xb9}], 0x6, 0x2, 0x9, 0x9, 0x629a, 0x4, 0x8, 0xffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 804.634559ms ago: executing program 5 (id=398): r0 = socket(0x18, 0x2, 0x0) r1 = socket$inet6(0x18, 0x5, 0x6) poll(&(0x7f0000000040)=[{r0, 0x40}, {r1, 0x40}], 0x2, 0x60) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000003680), 0x0) semget$private(0x0, 0x5, 0x2) r2 = syz_open_pts() ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000000)=0xee) ioctl$TIOCGETA(r2, 0x402c7413, 0x0) fchown(r2, 0x0, 0x0) 800.879229ms ago: executing program 4 (id=399): r0 = socket(0x2, 0x3, 0x0) close(r0) r1 = socket(0x800000018, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$DIOCGETSTATES(0xffffffffffffff9c, 0xc0104419, &(0x7f0000000fc0)={0x5, &(0x7f0000000a80)=[{0x0, ""/16, [{[@v4=@loopback, @v4=@loopback]}, {[@v4=@multicast1, @v6=@empty]}], {}, {}, @v4=@multicast1}, {0x0, ""/16, [{[@v4, @v6=@mcast1]}, {[@v6, @v6=@empty]}], {}, {}, @v6=@empty}, {0x0, ""/16, [{[@v6=@mcast2, @v4=@local]}, {[@v4=@local, @v6=@mcast2]}], {}, {}, @v6=@remote}, {0x0, ""/16, [{[@v6=@local, @v4=@local]}, {[@v4=@loopback, @v6=@local]}], {}, {}, @v4=@loopback}, {0x0, ""/16, [{[@v4=@rand_addr, @v6=@remote]}, {[@v6=@empty, @v4=@local]}], {}, {}, @v4=@broadcast}]}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet(0x2, 0x1, 0x0) munmap(&(0x7f000075e000/0x4000)=nil, 0x4000) getsockopt(r2, 0x0, 0x16, 0xffffffffffffffff, &(0x7f0000000280)) setsockopt(r0, 0x1000000029, 0x31, &(0x7f0000000000)="b211d7170d816685c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e180e9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) sendmsg$unix(r1, &(0x7f00000005c0)={&(0x7f0000000180)=@file={0x1}, 0x2, 0x0, 0x0, &(0x7f0000000680)=[@cred={0x18}], 0x18}, 0xc) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETA(r3, 0x20004109, 0x0) stat(&(0x7f00000009c0)='./bus\x00', &(0x7f0000000a00)) ioctl$DIOCRGETASTATS(0xffffffffffffff9c, 0xc4504447, &(0x7f0000000540)={{'./bus\x00', './bus\x00', 0x0, 0x8}, &(0x7f00000003c0)=[{@multicast1, '\x00', './bus\x00', 0x4, 0x1, 0x2, 0xff, 0x5, 0xa, 0x9}, {@broadcast, '\x00', './bus\x00', 0x74, 0x3, 0x18, 0x40, 0x9, 0x81, 0x2}, {@remote={0xac, 0x14, 0x0}, '\x00', './bus\x00', 0x9c, 0x3, 0x1a, 0x7, 0x8, 0x6, 0x81}, {@multicast2, '\x00', './bus\x00', 0x1e60, 0x3, 0x18, 0xd3, 0x0, 0x5, 0x4}, {@multicast1, '\x00', './bus\x00', 0x100, 0x3, 0x18, 0x1, 0xd7, 0xff}, {@multicast1, '\x00', './file0\x00', 0x0, 0x8, 0x1a, 0x9, 0xf, 0x6, 0x4}, {@loopback, '\x00', './bus\x00', 0x5, 0x7, 0x2, 0xa5, 0x1, 0x2, 0x8}], 0x7, 0x7, 0xb, 0x401, 0x6, 0x3, 0x20, 0x80000000}) pledge(&(0x7f0000000000)='tty V\xef\x86\b3|#\xcbQ8\x19\xce\x89K\x1f\xeb\x11]\xafZ\x13\x12\xe0\x19\x9c\xe6\x98\x0f \x01\xa6~\xd0|/?\xc9\xd5k\xbe\xa9kGS\x00\x00K\x00\x00\x00\x00\x00\x10\xeb\x91vr)\\\x9el\x03(rut\xd4\x9a\xbak\x04\x88J\x19\x9aU8\xee\xcf\xb4B\x95\x15\xb6\r^o\xfa\x03\x8bgI\xbdf\xc0\x9ffXo\x95\xad\x1f\x88\xd5\x95\xd9?!`\xbf\x8a\xeb5&\xdf\xeb\x04rN\\\x10\x18\xc3Unm\x84\vg\xef\xe8\xe3\xb1\x01\xdfZ\xfe\xd0\xa3\xa9E?\xa0\xcc\xd8\x8f\xff\x1e\xcd\x87_\xb9\xc2I0x0, 0x401, 0xf5c1}) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x80086409, &(0x7f000000a200)={r7, 0x6}) ioctl$TIOCSWINSZ(r3, 0x80087467, &(0x7f000000a240)={0x800, 0x2, 0x8, 0x5}) 652.716493ms ago: executing program 6 (id=405): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000280)="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", &(0x7f0000000000)=0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x48, 0xa3, 0xff}, {0x6, 0x80, 0x12, 0xfffff805}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x98, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @empty, @mcast2, {[], @udp={{0x0, 0x0, 0x8}}}}}}}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000280)="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", &(0x7f0000000000)=0x5, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x48, 0xa3, 0xff}, {0x6, 0x80, 0x12, 0xfffff805}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x98, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @empty, @mcast2, {[], @udp={{0x0, 0x0, 0x8}}}}}}}) (async) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) (async) 617.986615ms ago: executing program 5 (id=406): execve(0x0, &(0x7f00000003c0)=[&(0x7f0000000340)='/dev/rvnd0c\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='[%/\x00']) (async) execve(0x0, &(0x7f00000003c0)=[&(0x7f0000000340)='/dev/rvnd0c\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='[%/\x00']) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$WSDISPLAYIO_ADDSCREEN(r0, 0x80245753, &(0x7f0000000040)={0x7, './file0\x00', './file0aaaaaaaaa'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f0000000340)='./file1\x00', 0x200, 0x33) (async) open(&(0x7f0000000340)='./file1\x00', 0x200, 0x33) open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x84) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f0000000140)={0xd, 0x6}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x90, 0x4, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0xf0, 0xfffefffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x6, 0x0, 0x3], [0x100000001, 0x8000, 0x8, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x8, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d0a}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0xfd, 0x0, 0x7}], {0x1, 0x5, 0x6, 0x6}, {0xfffe, 0x3, 0x6d8, 0x6}}}) r2 = kqueue() kevent(r2, 0x0, 0xfffffffd, &(0x7f0000000040), 0x5, 0x0) kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) (async) kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 617.785542ms ago: executing program 6 (id=407): mknod(&(0x7f0000000000)='./file0\x00', 0x20, 0x5900) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d37258647597) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x80000004, 0xfffffffd, 0x3, 0x0, 0x5, 0xff7effff, 0xff, 0x0, 0x1, 0xd, 0x10000000f5}) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) setuid(0xee01) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) (async) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) (async) rename(&(0x7f0000000140)='./file2/file0\x00', &(0x7f0000000100)='./file2\x00') poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) close(r0) 558.057273ms ago: executing program 6 (id=411): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) (async) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000080)={0x1, 0x11}, 0x2, &(0x7f0000000200)="c1aa60377a228fa789487e80f6d9d6f18fc15523679b08c1c93744e7393c855289710855bfd05031a3847b550f3209186d932321a32fa3d7e956ee4aa6e3c2e9b8a09216bd80879e0e1d3087b409ca744f19f78ef64e62923f5471b1ec8874049d579b943a1d29175ce73771139858c3bba2e9dab750bde0c1576a2009e5b2a8abe92b5e3362890f79d684cb400d752c75e34224aae02748171ce19deb6c54f3eebed4f6e172ff217523a46d4034dead98925607514b6cb7e4e2bcc3", &(0x7f00000002c0)=0xbc, &(0x7f0000000300)="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", 0x1000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x48, 0x8, 0x5, 0x4}, {0x6, 0x80, 0x6, 0xffeff805}]}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x1ffffffffffffeac, &(0x7f00000000c0)=[{0x0, 0x0, 0x3, 0x6}, {0x0, 0x0, 0x40, 0x9}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) syz_emit_ethernet(0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff94ea01066dbd86dd60db83440008110000000000000000000000000000000000ff0200000000000000000000000000014e204e2000089078"]) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) r1 = socket(0x1, 0x2, 0x0) setresgid(0x0, 0x0, 0x0) (async) ioctl$BIOCSDIRFILT(r0, 0x8004427d, &(0x7f0000001300)=0x5) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000440)="4fbc0890fbf2acb37660a20cce304c37da4f80a1f414095b101eb64d6a5b16bc20dd4f3a92b92b6a7d04a3ae18f17e7544c34f579bf4e46f91eef421de78bdf05c449b887869257ba0fec2", 0x4b}], 0x1) (async) ioctl$DIOCGETSTATE(r2, 0xc1084413, &(0x7f0000000300)={{0xa, './file0\x00', [{[@v4=@broadcast, @v6=@mcast2], [0x4, 0x416], 0x2, 0x1a}, {[@v6=@loopback, @v6=@mcast2], [0x3, 0x2], 0xe75, 0x18}], {{0x10, 0xb, 0x0, 0x6}, 0xbca, 0x3, 0x4, 0x401, 0x2, 0x9, 0xe}, {{0x6, 0x81, 0x83}, 0xfffffff6, 0xcc, 0x3, 0x1, 0x0, 0x1f, 0x10}, @v4=@loopback, 0x7ff, 0xb143, 0xfffffc01, 0x7, 0x8000, [[0x6, 0x5], [0x3, 0xfffffff2]], [[0x9, 0x4], [0x6]], 0x9, [0x2351, 0xffffffff], 0x4, 0xe, 0x47, 0x2, 0x7f, 0x5, 0x1, 0x2, 0x80, 0x48, 0x9, 0x8401, "17c9"}}) r3 = kqueue() kevent(r3, 0x0, 0x96, 0x0, 0xfffb4961, 0x0) ioctl$TIOCSETA(r2, 0xcd604404, &(0x7f0000000040)={0x8, 0x2, 0x87a, 0x1002f, "2800080068ab0100800600000400000800", 0x6, 0xfffffffd}) ioctl$FIONREAD(r1, 0xc020691b, &(0x7f00000001c0)) 496.907551ms ago: executing program 7 (id=413): r0 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) sysctl$net_inet_tcp(&(0x7f00000031c0)={0x4, 0x2, 0x6, 0x12}, 0x4, 0x0, 0x0, &(0x7f0000003280), 0x0) r1 = syz_open_pts() ioctl$TIOCSCTTY(r1, 0x20007461) setuid(0xffffffffffffffff) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r2 = socket(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r2, &(0x7f0000000000), 0x10) ioctl$TIOCFLUSH(r1, 0x80047476, &(0x7f0000000080)=0x1) preadv(0xffffffffffffff9c, &(0x7f0000000880), 0x1071, 0x100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xfffffffffffffe33) setregid(0x0, r4) syz_open_pts() syz_open_pts() recvmsg(0xffffffffffffff9c, &(0x7f00000001c0)={&(0x7f0000000100)=@in6, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)=""/107, 0x6b}], 0x1, &(0x7f00000002c0)=""/89, 0x59}, 0x1004) setregid(0x0, r4) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f000057e000/0x2000)=nil, 0x1}, {&(0x7f0000ffd000/0x1000)=nil}, {&(0x7f00000cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffd}, {0x0, &(0x7f00004f5000/0x4000)=nil, 0x10000}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000181000/0x1000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2}, {&(0x7f000028c000/0x4000)=nil, &(0x7f000028b000/0x3000)=nil, 0xe04}, {&(0x7f00003de000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000463000/0x1000)=nil, 0x8}, {&(0x7f00004c1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x200000001}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000006c000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000463000/0x3000)=nil, 0x4}, {&(0x7f00000cf000/0x1000)=nil, &(0x7f000028b000/0x4000)=nil, 0x9}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff9046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) readv(r3, &(0x7f0000001000)=[{&(0x7f0000000b00)=""/214, 0xd6}, {&(0x7f0000000c00)=""/99, 0x63}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/131, 0x83}, {&(0x7f0000000a00)}, {&(0x7f0000000e40)=""/178, 0xb2}, {&(0x7f0000000f00)=""/244, 0xf4}], 0x7) kevent(r0, &(0x7f0000000a00), 0x31, &(0x7f0000000a40)=[{{r2}, 0xffffffffffffffff, 0x0, 0x2, 0xffffffffffffffdd, 0x2}], 0x4, &(0x7f0000000a80)={0x1, 0x7}) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r5, 0xc028698d, &(0x7f0000000000)) setrlimit(0x1, &(0x7f0000000ac0)={0xfffffffffffffffd, 0xffffffffffffffff}) recvfrom(r3, &(0x7f0000001080)=""/179, 0xb3, 0x42, 0x0, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) truncate(&(0x7f0000000080)='./file0\x00', 0x40002ffff) 495.305151ms ago: executing program 6 (id=415): sysctl$kern(&(0x7f0000000100)={0x1, 0x4f}, 0x3, &(0x7f0000000140)="71f91e3871ac0058e05a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000200)=0xff55, 0x0, 0xffffff42) r0 = msgget$private(0x0, 0x400) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0}, 0xc) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000340)=0x0) lstat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r3, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x10004) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)="bf", 0x1}, {&(0x7f0000000800)="3fcaabe3cb63cfcf67f7ab9ef9d41f149231151e8dc037ccedd918baf3bad257511500000000000000000049a45da891d98310a727aa0000382439a8062d9cf07a7ae88a7088c4d69a5fa19062f815ad7254557222f5e64322a2ad2ea5c46fa09fc5c1de56bc73e4d928e526d4610368a4b105595a7746e55e45e61801489549bc0e7b9aa2ddaa6901fd93e472e57316ee5ffa50af0f2b19ae25c8241e17d524083639aec692ad4c029326841f08097fa5b7c9d320d9f4aa0cb7844b6cb8a840f976388d5742d35869b31a8e31eadd8ac13d0100000076dc579f12c2ff3e65fa6919a3a53c392db0b8c712044fb70579314dd59caaa408f5231f59a98b3cba169e5d5f48d0ac36972567990f8b21d9d5e3cd2c134af88c37dc2d4c3afe097530aa036a95be030972cc245555042fe59fb876b163c777fdc41a42f0", 0xfffffeb3}, {&(0x7f00000001c0)="062bae13407c52042e62eb6d5297ff69d904f0698442ba3993376dd6806a2c411c98edb65566ed23951cdcb7dc5459ba6f838a564d13209dec66ecaa3c6c7efea869fdd25ccd61ad399b0844172f4d249d7dbccccd72"}], 0x2) write(r5, &(0x7f0000000040)="c2117a", 0x3) r6 = syz_open_pts() r7 = setsid() ioctl$TIOCSCTTY(r6, 0x20007461) fcntl$setown(r6, 0x6, r7) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000440)={{r1, r2, r3, r4, 0xb4, 0xfc00, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffff, 0x2, 0x100000000, r7, 0x0, 0x3, 0x0, 0x3, 0x0, 0xfff}) sysctl$kern(&(0x7f0000000000)={0x1, 0x10}, 0x2, &(0x7f0000000040)="2328747e3c10252710944a576ad7b2125d6f81f6598354422d638bc91da84fcde3161ce8daa176546560da75f8adf04d33", &(0x7f0000000080)=0x31, &(0x7f0000000240)="6c8cc1545a8e493418b2a10259ee947ec1f03088e8cedf6adf4c72153fe95616259a711a56ef9a8bd142be2c0b2d7f8d732a2dca617a6dd6f9fd082c0ff8ae8a9eec846485b89381084c1d3dab7f79dca39178429bdcf5bcfd13180041ba437b141c9716f411eeae31e3d11d087198d483edb52639e4ecf26b883ddc55aab9c9f9ef392c2430dcdfbed521bea05b1a7c594e9198f7764b037bd493a56942de7d0c0b991a280b7fc2218aa8d85261f179b68462d6750982e261d26e4b3b31a0c7fd33c6e7fe81ef7746cee14c20f2ec", 0xcf) 494.217106ms ago: executing program 6 (id=417): setuid(0xee01) fchdir(0xffffffffffffffff) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5200) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x2) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [], [0x0, 0x0, 0xffffffffffffffff, 0x8], [{}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x800000000000}, {}, {}, {0x100, 0x1ff}]}}) readv(0xffffffffffffffff, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000004c0)=[{{r0}, 0xfffffffffffffffb, 0x8, 0x20000000, 0xea, 0x9f5}], 0x30, 0x0, 0x57d, 0x0) kevent(r1, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x7, 0x4, 0x2, 0x1, 0x30, 0x64, 0x3, 0x6, 0x9d, 0x0, @broadcast, @multicast2, {[@rr={0x7, 0x7, 0x1e, [@local={0xac, 0x14, 0x0}]}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x8, 0x3fc, 0x1, 0x9}}}}}) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000240), 0x96, &(0x7f0000000540), 0xfffb4964, 0x0) ioctl$TIOCSETA(r2, 0xcd604404, &(0x7f0000000040)={0x8, 0x2, 0x87a, 0x1002f, "2800080068ab0100800600000400000800", 0x6, 0xfffffffd}) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f0000000200)="b1010513000004000000000105000000331c01040100fc7f000000000900000000000000fe4e3036d62466ecf20b0e10be38164991f7c8cf5f4e62098810297fda0000510100ad090000006c0000009b672f4d335c22597d0c032bfa896443a42102000012720fc18bfbb670c1f5a8b67114d66e2ec589040000000000e305000900000000003076000000000000000004bfba353e537e2ba37f50b609f4f707e37183f834371205d1a7f1c057aa1110847e1f6722d25878a38d9d50406fe6e05dd492a5e2391e07000000d053916b9782af293ed2c2e036576f76b16f436265cbb713ec02c668ecfdde13076922ab0d70a6be7be84b092abea0c6285de46c8ac6042e71ea817f1b08af2227c74cbafdb06f796a0d17a35c7b33f3cc6404daef672f5eac9980ab71f02c67f0c3fe126f6b787608000000da015951ad624c3e8d66578ab4edeb4017428ef2d07ebb6b75624335d91807a349504872d30f9f3637cae3620800562686ebf238c259627188aaeef4b18d835b189a4ab7d0bfcd5f6ac4e957d17604141925e348a8df691c98688af89dbb4b2268b1c78886f653ea9478bc000000b3012809f9826298e35dc554be6a31e333a07fbd2e017c1b40b4ccc83732a760096719f0ebc5db11c4e3f60000000000000000000000006f3e02f6753435783143", 0x1b1, 0x0, 0x0, 0xfffffffffffffd99) r6 = socket$inet(0x2, 0x2, 0x0) r7 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r7, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r7, 0x4004667f, &(0x7f00000000c0)) connect$unix(r5, &(0x7f0000000080)=@file={0x0, 0x1, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0xffffffffffffffff) r8 = socket(0x11, 0x3, 0x8) sendto$unix(r8, &(0x7f0000000100)="b10005016000009f05000e0407000000001813fecea10516d09a32693f316e357ae302b37b673031d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af6300372821180000000000008bfbb770c116a985c881ea772ec5890400000000ff0000361b1257aea8c50000200200008a09000000000008e38295f80004073da51a221f00000080042000"/177, 0xb1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0xa}, 0x2, &(0x7f00000011c0)="71f91e30", &(0x7f0000000000)=0x4, 0x0, 0x0) setsockopt$inet_opts(r8, 0x0, 0x200000000000b, &(0x7f0000000040)="0003f7abfe3300440f00", 0xa) setsockopt$inet_opts(r6, 0x0, 0xd, 0x0, 0x0) 414.3889ms ago: executing program 7 (id=420): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x28}, 0x0) r2 = dup2(r0, r1) fstat(r2, &(0x7f0000000180)) r3 = open(&(0x7f0000000000)='./file1\x00', 0x80, 0x4503ce2c2c7ea40b) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x2011, r3, 0x0) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) 376.543756ms ago: executing program 4 (id=423): r0 = socket$unix(0x1, 0x5, 0x0) lseek(r0, 0x8000000000000001, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x400000c1, 0x100000001}) flock(r1, 0x5) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$FIOASYNC(r2, 0x80047469, &(0x7f00000000c0)=0x5) write(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x3f09, 0x80000000, 0x0, 0xffffffff, 0xfffffffb, 0x3], 0x7, 0x4, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000100)={r4}) ppoll(&(0x7f00000001c0)=[{r3, 0xe0}], 0x1, 0x0, &(0x7f0000000800)) fcntl$lock(r1, 0x9, &(0x7f00000000c0)={0x2, 0x0, 0x3, 0x269010000, 0xffffffffffffffff}) 369.164363ms ago: executing program 2 (id=424): r0 = getpgrp() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000004d40)={0x0}, &(0x7f0000004d80)=0xc) setpgid(r0, r1) open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000040)='[/%&%\x1b\x00'], &(0x7f00000002c0)=[&(0x7f0000000140)='/dev/pf\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='/dev/pf\x00', &(0x7f0000000200)=']&\x00', &(0x7f0000000240)=')\x00', &(0x7f0000000280)='+\x00']) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$DIOCIGETIFACES(r2, 0xc0284457, &(0x7f0000000100)={'./file0\x00', 0x0, 0x100, 0x100, 0x2, 0x8}) 367.660135ms ago: executing program 7 (id=425): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x401, 0x11, 0x3, 0xfffffff1}, {0x2080, 0xf0, 0x9f, 0x9}, {0x6, 0x3, 0x12, 0xfffff802}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000002c0)={'tap', 0x0}) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[]) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) getsockname$unix(r1, 0x0, 0x0) sysctl$net_inet_icmp(&(0x7f0000000640)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f0000000080)="bf016047", &(0x7f0000000000)=0x4, 0x0, 0x0) 285.90386ms ago: executing program 3 (id=426): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$DIOCRCLRASTATS(r0, 0xc4504448, &(0x7f0000000080)={{'./file0\x00', './file0\x00', 0x40, 0x9}, &(0x7f0000000040)=[{@multicast1, '\x00', './file0\x00', 0x5, 0x373e, 0x18, 0x8, 0x7, 0x5, 0x4}], 0x5, 0x1, 0x7, 0x7, 0x2884772c, 0x7, 0x40, 0x3}) r1 = accept(0xffffffffffffff9c, &(0x7f0000000500)=@un=@file={0x0, 0x0, ""/249}, &(0x7f0000000600)=0xfb) bind$inet6(r1, &(0x7f0000000640)={0x1c, 0x18, 0x3, 0x28000, "2f419a25f9903ec9a96129b7dedf622d"}, 0x1c) acct(&(0x7f0000000680)='./file0\x00') r2 = shmget$private(0x0, 0x4000, 0x410, &(0x7f0000ffb000/0x4000)=nil) getresuid(&(0x7f00000006c0), &(0x7f0000000700)=0x0, &(0x7f0000000740)) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getsid(0xffffffffffffffff) shmctl$IPC_SET(r2, 0x1, &(0x7f00000008c0)={{r3, r4, 0x0, r5, 0x102, 0xe4, 0x0, 0x0, 0x3}, 0x1, 0xffffffffffffffff, r6, 0x875, 0x0, 0x5, 0x2, 0x39c8, 0x1, 0x6, 0x7}) r7 = setsid() sysctl$net_inet_tcp(&(0x7f0000000940)={0x4, 0x2, 0x6, 0x19}, 0x4, &(0x7f0000000980)="e80d62366776eb7214fbfb31dcc3ec2dd58bcf08198c245f86267ea93c6f909073015dc90bd11f893fb421b922415d5c49fa3cde5a7dc58c30e3eede4ce4996f59427710422fc93ec8db09a855e62c395bab5fac311c12f4fac1b2f31521b98fa785f0d35b0eca12b1ae0b4dc3afe79469edba54d2835236e773e2df2dd5598bfbc2efe240105c3b490ee4cdfb7f5ee8509e15c80fb091a8f47e9dd8ba307fbffb06a66a1f9f45f6675cd0830de02e41f15264b45f0b6ccb5fd15aa377f27a7e24b7cc2c0c0e3eb03aa0a575e2a07bd07196813c20bf6a5557d512dab91a3ecbe7d34628b8e2526d62c1d25aac00ec4ecb1e1e", &(0x7f0000000a80)=0xf3, &(0x7f0000000ac0)="6385434c58e1350b707671a7e9862b23c1c9cd1c0dfdaf00f21382d5979a9ae55d947df3bac2f23f57d8f9d7457d1ec53932d812b8ae8023739f1758ef9de9c8faf9619878e26caa938d64bb9140db06de2dc098aeee788460155ea941936309b5e7b2f68b5aaa7dd77035c2ed5deb0ae07a2767ea278ad0f2bded35de251947003efcb849e8510360e330fe416bf8902736c5b4cd6d1c010787cdea8ffb", 0x9e) chroot(&(0x7f0000000b80)='./file0\x00') r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000bc0), 0x1, 0x0) pipe2(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) kevent(r8, &(0x7f0000000c00)=[{{r1}, 0xffffffffffffffff, 0xa, 0x2, 0x9, 0x4}, {{r1}, 0x0, 0xa, 0x4, 0x0, 0x1000}, {{r0}, 0xfffffffffffffffa, 0x2, 0x40000000, 0xffff, 0x5}, {{r1}, 0xfffffffffffffff7, 0xc0, 0x2, 0x5, 0x3}], 0x7fffffff, &(0x7f0000000cc0)=[{{r9}, 0xfffffffffffffff6, 0x8, 0x20000000, 0x1000}], 0x1, &(0x7f0000000d00)={0x4, 0xfffffffffffffff7}) ioctl$FIOASYNC(r8, 0x8004667d, &(0x7f0000000d40)=0x8) fcntl$setown(r10, 0x6, r7) ioctl$WSDISPLAYIO_GVIDEO(r8, 0x40045744, &(0x7f0000000d80)) r11 = dup(r0) semget(0x2, 0x4, 0x502) write(r1, &(0x7f0000000dc0)="4b3871f8e2e6a61c0bf2471261a98171dd3e9cec3b4ac37b2b5fb8f9e50c660f4e9256ac01690e49cb51dc697a00bc0511cadf88ab69708f1cf2df7babf9ba7f304993464c7046270fd639113ed3529d22cfbc8b31b08b61781cf93a50fc559ded8e7ea072ed7ced23e479f40d1576d65324c373552dda153a6d6da76930a680ef430f30ab9edd6a9ca49da6c58e9eb04c3a85bbfb3fba7d6819b27f247d2bba5b4c0a552a79409be84dd9984735d83ab117b15034c50fb381a3d3917a3767a1b9f3407190c87ad24a342bd5c846f3bd010d9147eb7c55a4cc4b83d8c8f1aebfa419f1235d1fb173110e", 0xea) r12 = openat(r11, &(0x7f0000000ec0)='./file0\x00', 0x8, 0x4) kevent(r11, &(0x7f0000000f00)=[{{r12}, 0xfffffffffffffff8, 0x40, 0x40, 0xfffffffffffffffa, 0x6}, {{r11}, 0xfffffffffffffffd, 0xc, 0x80, 0x8, 0x6}, {{r8}, 0xfffffffffffffff9, 0x80, 0xfffff, 0x3, 0x1}], 0x3, &(0x7f0000000f80)=[{{r1}, 0xfffffffffffffff9, 0x10, 0x4, 0x7, 0x8}, {{r11}, 0xfffffffffffffffe, 0x6a, 0x4, 0x9e}], 0x5, &(0x7f0000000fc0)={0x7fffffff, 0x9}) bind(r8, &(0x7f0000001000)=@in6={0x1c, 0x18, 0x3, 0x8, "e9de5a68afc25bd6dcf90ca678378589", 0x6b}, 0x1c) r13 = open(&(0x7f0000001040)='./file0\x00', 0x200, 0x80) ioctl$DIOCRDELTABLES(r13, 0xc450443e, &(0x7f0000002dc0)={{'./file0\x00', './file0\x00', 0x48, 0x10}, &(0x7f0000001080)=[{'./file0\x00', './file0\x00', 0x20}, {'./file0\x00', './file0\x00', 0x20}, {'./file1\x00', './file0\x00', 0x4, 0x4}, {'./file0\x00', './file0\x00', 0x20, 0x8}, {'./file0\x00', './file0\x00', 0x20, 0x7}, {'./file0\x00', './file0\x00', 0x40, 0x5}, {'./file0\x00', './file0\x00', 0xb, 0x2}], 0xfffffff7, 0x7, 0x8, 0x1, 0xa18b, 0x10000, 0x0, 0x8}) fcntl$dupfd(r13, 0xc, r1) fcntl$setown(r12, 0x6, r7) 284.431621ms ago: executing program 2 (id=427): r0 = syz_open_pts() fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x2, 0x0, 0xffffffffffffffff, 0x11000300002002}) r1 = socket$inet6(0x18, 0x0, 0x44) bind(r1, &(0x7f0000000000)=@in={0x10, 0x2, 0x0, 0x5}, 0x10) syz_open_pts() (async) fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x2, 0x0, 0xffffffffffffffff, 0x11000300002002}) (async) socket$inet6(0x18, 0x0, 0x44) (async) bind(r1, &(0x7f0000000000)=@in={0x10, 0x2, 0x0, 0x5}, 0x10) (async) 284.158204ms ago: executing program 1 (id=428): mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r0 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$TIOCEXCL(r0, 0x2000740d) setuid(0xee01) open(&(0x7f0000000080)='./bus\x00', 0x800, 0x140) 282.305304ms ago: executing program 7 (id=429): sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe29, 0x0, 0x37) (async, rerun: 32) accept4(0xffffffffffffff9c, 0x0, 0x0, 0x8000) (rerun: 32) r0 = openat$bpf(0xffffffffffffff9c, 0x0, 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, 0x0) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x10803, 0x1e, 0x3, 0x6, 0x6, 0x1, 0xce, 0x10, [{0x5, 0xfe7, 0xffffff26, 0x71800}, {0x0, 0xb800, 0x89, 0x7}, {0x800, 0x0, 0x8c, 0x3adafde0}, {0x3, 0x0, 0x200203, 0xe18}, {0x0, 0x4, 0x80000001, 0x8}, {0x6, 0x48000, 0x14000009, 0xc}, {0x5, 0xbffffff8, 0x4, 0x6d}, {0x2000a, 0x8, 0x5, 0xf9}, {0x0, 0x44c7, 0x34}, {0xfffffbfd, 0x0, 0xfffe, 0x1}, {0xa44f, 0xfff9, 0x488, 0x8}, {0x8000, 0x2, 0x8, 0x8}, {0x2000df, 0x9, 0x2, 0x3ff}, {0x10008, 0x3, 0x200, 0xfffffffc}, {0x6, 0x5, 0x20024, 0xb}, {0x7f, 0xd654, 0x5, 0x6}]}) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (async) r1 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) (async, rerun: 64) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (rerun: 64) dup2(r1, r2) (async, rerun: 64) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (rerun: 64) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) (async) r4 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100)) close(0xffffffffffffffff) 279.20849ms ago: executing program 1 (id=430): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x1b1) (async) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x1b1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) (async) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) setrlimit(0x1, &(0x7f00000011c0)) munmap(&(0x7f0000000000/0xa000)=nil, 0xa000) 238.216251ms ago: executing program 3 (id=431): setrlimit(0x8, &(0x7f0000000980)={0x45, 0x3fb}) r0 = syz_open_pts() close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0x1, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0x3, 0x1, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0xa00000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffa, 0x20200001, 0x5e, 0x100000000007b98, 0x800, 0x7fffffff], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0x2], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0xfffffffffffffffe, 0x90000000], [{0x0, 0x0, 0x0, 0x200}, {0x9, 0x1e, 0x5}, {0x4, 0x0, 0xfffeffff, 0x280}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x7fffffff, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0x6}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x8, 0x80000006, 0x3}, {0xfffe, 0x6, 0x6d5, 0x40}}}) r1 = kqueue() r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) ioctl$TIOCSETA(r3, 0xcd60441a, &(0x7f0000000580)={0x2, 0x100, 0x1, 0x10000, "000800000a00020f000000aff0338a6b4fc6d780", 0x4, 0xa}) ioctl$DIOCRCLRADDRS(r2, 0xc4504442, &(0x7f0000000380)={{'./file0\x00', './file0\x00', 0x0, 0xc}, 0x0, 0x0, 0x0, 0x7e, 0x7fff, 0x7fffffff, 0x5, 0x2}) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) unlink(&(0x7f0000000100)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x6e}], 0x1, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r5, &(0x7f00000000c0)=@abs, &(0x7f0000000340)=0x8) kevent(r1, &(0x7f0000000040), 0x9ae8, 0x0, 0x91, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 237.887491ms ago: executing program 7 (id=432): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f0000000180)="010061a2", 0x4) r1 = socket(0x2, 0x1, 0x0) shutdown(r1, 0x1) r2 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = kqueue() kevent(r3, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x10d, 0x3, 0x9}], 0x1, 0x0, 0x0, 0x0) (async) r4 = syz_open_pts() ioctl$TIOCGETD(r4, 0x4004741a, &(0x7f0000000040)) write(r2, 0x0, 0x0) 235.19199ms ago: executing program 2 (id=433): unveil(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)='x\x00') r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x9, 0x1, './file0\x00'}, 0xa) listen(r0, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r1, 0xffff, 0x1024, &(0x7f0000000040), &(0x7f00000003c0)=0x4) connect$unix(r2, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) accept4(r0, 0x0, 0x0, 0x4000) (async) accept4(r0, 0x0, 0x0, 0x4000) select(0x40, &(0x7f0000000180)={0x1d5d3, 0xf9, 0x3, 0x80000003, 0x4, 0x181c, 0x4, 0x2}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000180)={0x1d5d3, 0xf9, 0x3, 0x80000003, 0x4, 0x181c, 0x4, 0x2}, 0x0, 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) (async) r4 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0xfd, 0x0, {[0x3, 0x1, 0x4, 0x1, 0xfffffffffffffffe, 0xffffffffffffffff, 0xc, 0x0, 0xfffffffffffffffc, 0x1, 0x4, 0x3, 0x4, 0x1, 0x8000000, 0x1000000000000a8, 0x2, 0xce7], [0x1, 0x80000001, 0xfffffffffffffffd, 0x8000fffffffd, 0xfc, 0x7b99, 0x1fe, 0x2000404, 0x1, 0xfffffffffffffffc], [0x100000001, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x11003, 0xfffffffffffffffd], [0x8891, 0x9, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x0, 0x8000, 0x9, 0x7d06}, {0xfffc, 0x0, 0x7, 0x3}, {0xa, 0x8, 0x1, 0x814}, {0x3, 0x200, 0x7, 0x80000001}, {0x200d, 0xfffffffe, 0x0, 0xa000000}, {0x400b, 0x2003, 0x5, 0x4}, {0x1, 0x20000, 0x2001, 0x8}, {0x0, 0x1, 0x0, 0x4}], {0x2400, 0x1000001, 0x10000}, {0x0, 0x4, 0x3, 0xfffffffffffffffd}}}) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0xfd, 0x0, {[0x3, 0x1, 0x4, 0x1, 0xfffffffffffffffe, 0xffffffffffffffff, 0xc, 0x0, 0xfffffffffffffffc, 0x1, 0x4, 0x3, 0x4, 0x1, 0x8000000, 0x1000000000000a8, 0x2, 0xce7], [0x1, 0x80000001, 0xfffffffffffffffd, 0x8000fffffffd, 0xfc, 0x7b99, 0x1fe, 0x2000404, 0x1, 0xfffffffffffffffc], [0x100000001, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x11003, 0xfffffffffffffffd], [0x8891, 0x9, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x0, 0x8000, 0x9, 0x7d06}, {0xfffc, 0x0, 0x7, 0x3}, {0xa, 0x8, 0x1, 0x814}, {0x3, 0x200, 0x7, 0x80000001}, {0x200d, 0xfffffffe, 0x0, 0xa000000}, {0x400b, 0x2003, 0x5, 0x4}, {0x1, 0x20000, 0x2001, 0x8}, {0x0, 0x1, 0x0, 0x4}], {0x2400, 0x1000001, 0x10000}, {0x0, 0x4, 0x3, 0xfffffffffffffffd}}}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x10}, {{}, 0xfffffffffffffffa, 0xc0, 0x2, 0x7fffffffffffffff, 0x6ad}, {{}, 0xfffffffffffffff9, 0x83, 0xf0000000, 0x3, 0x8}, {{}, 0xfffffffffffffffb, 0x0, 0xf0000000, 0xffffffff, 0x6}, {{}, 0xfffffffffffffffa, 0x72, 0x80, 0x9, 0x1}, {{}, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x10000}, {{}, 0xfffffffffffffffd, 0x14, 0x10, 0x8, 0x100000001}, {{}, 0xfffffffffffffffb, 0x28, 0x2, 0x1f70, 0x80000000000009}], 0xb19, 0x0) (async) kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x10}, {{}, 0xfffffffffffffffa, 0xc0, 0x2, 0x7fffffffffffffff, 0x6ad}, {{}, 0xfffffffffffffff9, 0x83, 0xf0000000, 0x3, 0x8}, {{}, 0xfffffffffffffffb, 0x0, 0xf0000000, 0xffffffff, 0x6}, {{}, 0xfffffffffffffffa, 0x72, 0x80, 0x9, 0x1}, {{}, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x10000}, {{}, 0xfffffffffffffffd, 0x14, 0x10, 0x8, 0x100000001}, {{}, 0xfffffffffffffffb, 0x28, 0x2, 0x1f70, 0x80000000000009}], 0xb19, 0x0) r5 = kqueue() kevent(r5, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x1) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x106) 234.859933ms ago: executing program 3 (id=434): r0 = socket(0x2, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1025, &(0x7f00000000c0)=0x20000, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, &(0x7f0000000080)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0xffea) 234.355394ms ago: executing program 1 (id=435): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f0000000000)=0x5, 0x4) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3}, {0x0, 0x300}, {0x0, 0x4}, {}, {0x2, 0xe}, {}, {0x3, 0x1}, {}, {0x4}, {0x1}, {0x1}, {0x3, 0x6}, {0x2}, {0x3}, {}, {0x2}, {0x1, 0xb4}, {0x1}, {}, {}, {0x0, 0x4}, {0x2}, {0x2}, {0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x10000}, {0x1, 0x80000000}, {0x1, 0x6}, {0x0, 0x2}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000040)=@file={0x97, 0x1, './file0\x00'}, 0xa) socket$unix(0x1, 0x1, 0x0) (async) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) (async) close(r1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) semget(0x0, 0x2, 0x290) (async) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32) rename(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file2\x00') (rerun: 32) rename(&(0x7f0000000200)='./file2\x00', &(0x7f0000000600)='./file0\x00') 196.99945ms ago: executing program 7 (id=436): r0 = syz_open_pts() writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) syz_open_pts() (async, rerun: 64) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) writev(r1, &(0x7f0000001640), 0x0) (async, rerun: 64) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) (rerun: 64) ioctl$WSKBDIO_COMPLEXBELL(r2, 0x80105702, &(0x7f0000000240)={0x7, 0x7, 0x9, 0x400}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x11, 0x7, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) (async) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (async) write(r3, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) rename(&(0x7f0000000100)='./file0\x00', 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setreuid(0xee00, 0x0) (async) r4 = getuid() getuid() (async) setreuid(0xee00, r4) chflags(&(0x7f0000000000)='./file0\x00', 0x0) execve(0x0, 0x0, 0x0) r5 = socket(0x11, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x9011, r1, 0x6) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000280), 0x8, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x38, 0x3a, 0x29, @rand_addr="000000000000000000020000008000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@param_prob={0x4, 0x2, 0x0, 0x9, {0x5, 0x6, "a28eea", 0x932e, 0x2c, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="428d8a0aa07df960ae22721eb73d8b56", [], "5cc2604e3c63a00d"}}}}}}}) (async) getsockopt$sock_int(r5, 0xffff, 0x2000, &(0x7f0000000040), &(0x7f0000000140)=0xfe0c) 195.297394ms ago: executing program 2 (id=437): r0 = kqueue() r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0x8020699b, &(0x7f00000001c0)) kevent(r0, &(0x7f0000000000)=[{{}, 0xffffffffffffffff, 0x10d, 0x2, 0x9}, {{r1}, 0xffffffffffffffff, 0xa9d36d9ffacbd341, 0x4, 0x7, 0x9}], 0x1, 0x0, 0xfffffffc, 0x0) 194.799852ms ago: executing program 3 (id=438): setrlimit(0x8, &(0x7f0000000980)={0x45, 0x62}) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a) (async) r0 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000140)={0xd, 0x6}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x3, 0x8, 0x80000001, 0x5, 0x10001, 0x10, [{0xfffffffc, 0x2890, 0x4, 0x5}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x1, 0xfffffffa, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x4, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0x10000}, {0x6, 0x803, 0x3, 0x7}, {0xd0f5, 0x82, 0x5, 0x9}, {0x6a75, 0x8009, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x7, 0xa, 0x8}, {0x3, 0x7, 0x6, 0x1}, {0x6, 0xfffffffa, 0x60, 0x6}, {0x10008, 0x7, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30004}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async) r2 = socket(0x11, 0x3, 0x0) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) (async) ioctl$WSMUXIO_LIST_DEVICES(r0, 0xc1045763, &(0x7f00000006c0)={0x235e, [{0x2, 0xf}, {0x2, 0xff}, {0x3}, {0x1, 0x4}, {0x3, 0x40}, {0x3, 0x9d}, {0x1, 0xc}, {0x3, 0x7}, {0x1, 0x3}, {0x3, 0x5e16}, {0x0, 0x2}, {0x2, 0xc2048158}, {0x3, 0x8}, {0x2, 0x4}, {0x2, 0xb}, {0x2, 0x9}, {0x3, 0x7f}, {0x1, 0x4}, {0x2, 0x4}, {0x2, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x1, 0xa}, {0x3, 0x2}, {0x2, 0x90d}, {0x2, 0x6}, {0x3, 0x10}, {0x3, 0x5}, {0x0, 0x847}, {0x0, 0xb}, {0x1, 0x8}, {0x2, 0x10}]}) connect(r3, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x2, 0x8f38, "ffe54a09470300261febf2fc8dc83304", 0x1}, 0x1c) (async) truncate(&(0x7f00000004c0)='.\x00', 0x8000000000000001) sendto$unix(r2, &(0x7f0000000000)="b10005136000009f0500000007000000331c13fecea10500fef96ecfc72fd3357a068da3a5673039d2d236acf20b7804be38164991f7cccf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d02565dfbdd60de5f231e000000720fd38bfbb770c1f5a872c881e2772ec5a10400000000000000361b1257aea8c5d0002012000000000000880d6633c556ae9be371a3f8343712051eeab71d89000407000000800420000000", 0xb1, 0x0, 0x0, 0x0) (async) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000080)) (async) r4 = syz_open_pts() writev(r4, &(0x7f0000000640)=[{&(0x7f0000001280)="006b07600e0ece355648b2a627325db0b0288d561d1e8dc75ae0221bf98aaf1dbd096d748d0807452d4144159503e2639d59ed88cd4c7670dc68fd5b", 0x3c}, {&(0x7f00000012c0), 0x31}, {&(0x7f0000001300)="b9067375e0e1403ff4fded97550b1e61b77b00000067beb2383b78db2dc7c7cd43bdf3128ec5", 0x26}, {&(0x7f0000000340)="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", 0x193}, {&(0x7f0000001440)="6f7448cf4b91f1c88850662ca72c2ee5cb7d9a8085a0173b7de705437b8af2265a2a2a6b47b0de193b25911788c5cf056c7db6fc0d34d3c3487953310415e662301489e18e6295710f9a90b8c8240f41959a605be0c1a7948c49b642", 0x5c}, {&(0x7f0000000500)="4d4b43b3cc88da0063d6253f190fa46c3b3b27cdccd8e590bf0f389c2621cf1bf788ecbab91d77575682f5d96cf57a66a89f237c852db90fc2e58303fe906b0632ac4318e1e6a0f55686c72fde52ee9388d191d8b38f8b3fc0d5b0c1cde0fd415583b32e7eeef4a427dd7ba2e423366012eb3d42f0973a8b6c3dbc07f61c173e79bc1ddba6201b5d053384ff2026368c72ab0d004fc6652bc5bf315250815d78a24044a55df9", 0xa6}], 0x67) 193.858927ms ago: executing program 1 (id=439): setgid(0xffffffffffffffff) setgroups(0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open$dir(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, 0x80) mkdirat(r0, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = open$dir(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x130) setuid(0xffffffffffffffff) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x80, 0xf3, 0x80, 0xffffffff}]}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = socket(0x2, 0x2, 0x0) bind(r2, &(0x7f0000000000), 0x10) symlinkat(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffff7fffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x248f, 0x80, 0xffff, 0x1, 0x39, 0xe4e, 0x4000001, 0x2, 0x2, 0x1, 0x6}) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) r6 = open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x1) close(r5) mkdirat(r3, &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) 82.092796ms ago: executing program 2 (id=440): r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x114) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) acct(&(0x7f0000000080)='./file1\x00') ftruncate(r0, 0xffffffff) close(r0) 81.694087ms ago: executing program 3 (id=441): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) close(r0) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad90030370000000000000000000000000000000000ff02000000000000000000000000000102009078000000006006c32e00060600ba728e4fd326cb5c077da9478e95fe8000000000000000000000000000aa0000"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = shmget$private(0x0, 0x3000, 0x531, &(0x7f0000ffd000/0x3000)=nil) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) acct(0x0) shmctl$IPC_STAT(r1, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x49) openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) rename(&(0x7f0000000000)='./file0\x00', 0x0) symlink(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00') semget(0x1, 0x6, 0x42) 81.364214ms ago: executing program 1 (id=442): mknod(&(0x7f0000000480)='./file0\x00', 0x2000, 0xd51) semop(0x0, &(0x7f00000000c0)=[{0x2, 0x0, 0x1800}, {0x4, 0x2ff, 0x800}], 0x2aaaaaaaaaaaaad7) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) socket(0x18, 0x3, 0x3a) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r0, &(0x7f0000000240)="00000000000000000001", 0xa) (async) write(r0, &(0x7f0000000240)="00000000000000000001", 0xa) syz_emit_ethernet(0x52, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa8de5769a8dab86dd62699dd8001c2bf992fe8000008dd71592174739724249cf0000000000000000000000bb2b"]) (async) syz_emit_ethernet(0x52, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa8de5769a8dab86dd62699dd8001c2bf992fe8000008dd71592174739724249cf0000000000000000000000bb2b"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x2) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x2) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x4, 0x101, 0x2, 0x3, "0c0646d5dd71b87569b34beee1f5eaea8dedd19f", 0xd, 0x1}) open(&(0x7f0000000080)='./file1\x00', 0x10000, 0x29) 81.15968ms ago: executing program 1 (id=443): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000000c0)={0x0, r2, 0x2}) ioctl$FIOASYNC(r1, 0xc0107008, &(0x7f00000000c0)) select(0x40, &(0x7f0000000040)={0x8, 0x7, 0x8, 0xb, 0x2007, 0x1000000000092, 0x8000, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) close(r0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) (async) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000000c0)={0x0, r2, 0x2}) (async) ioctl$FIOASYNC(r1, 0xc0107008, &(0x7f00000000c0)) (async) select(0x40, &(0x7f0000000040)={0x8, 0x7, 0x8, 0xb, 0x2007, 0x1000000000092, 0x8000, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) (async) close(r0) (async) 37.866571ms ago: executing program 0 (id=444): r0 = socket$inet6(0x18, 0x3, 0xff) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x11, 0x1, 0x0, 0x0) r2 = socket(0x18, 0xc003, 0x3a) sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0x1c, 0x18, 0x1, 0x6, "a6e17d699e254ea7b085b5cc39a642bd", 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="70000000ffff000003800000df4dc3dd40a8720c6bc501de7638c963d779d4953ebc3fcefbe35b091dbeb1e0feab17f8ee438fc60e8b5238a2807c19d299f8ffffff5a6c2741a24ba703d7f76897a84d35ebfb630f7ad66070e4b1c395fd2c00"/112], 0x70}, 0x40a) getsockopt(r0, 0x29, 0x28, 0x0, 0x0) fsync(r1) r3 = open(&(0x7f0000000300)='./file0\x00', 0x8000, 0x0) ioctl$WSMUXIO_LIST_DEVICES(r3, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3}, {0x2, 0xfffffff7}, {0x0, 0x4}, {0x0, 0x1}, {0x3, 0x10}, {}, {0x3, 0x1}, {0x1, 0x5}, {0x2}, {0x2, 0x7f}, {0x2}, {0x3, 0x6}, {0x2}, {0x3}, {0x3, 0x9d}, {0x2, 0x5}, {0x1, 0xb4}, {0x1}, {}, {}, {0x1, 0x2}, {0x2, 0x107ffd}, {0x2, 0x2}, {0x1}, {0x0, 0x2000005}, {0x2, 0x1}, {0x3, 0x10000}, {0x2, 0x7ffffffd}, {0x3, 0x6}, {0x1, 0xbea2}, {0x3, 0x5}]}) nanosleep(0xffffffffffffffff, 0x0) r4 = socket(0x2, 0x3, 0x0) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r5 = socket(0x1, 0x2, 0x0) getpeername$unix(r4, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004806003400640003069d9078ffffffffffffffff070b1eac1400aa7f800001000e009078000b0008000003fc0000000400000009"]) r6 = socket(0x18, 0x1, 0x0) setsockopt(r6, 0x29, 0xe, &(0x7f0000000000)="02000000", 0x4) listen(r6, 0x6) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) r7 = kqueue() kevent(r7, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$FIONREAD(r4, 0xc0206921, &(0x7f00000001c0)) r8 = socket(0x2, 0x2, 0x0) fstatat(r3, &(0x7f0000000200)='./bus\x00', &(0x7f0000000280), 0x5) ioctl$FIONREAD(r8, 0x80206919, &(0x7f00000001c0)) r9 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r9, 0x8020690c, &(0x7f00000001c0)) ioctl$VNDIOCSET(r3, 0x80086476, &(0x7f0000000080)={0x0, 0x0, 0x0}) unlinkat(r3, &(0x7f0000000080)='./file0\x00', 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) 37.165494ms ago: executing program 0 (id=445): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x1, 0x2, 0x11, 0x10000006}]}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200100000001d, &(0x7f0000000000), 0x4) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x36) r1 = open(&(0x7f0000000040)='./file0\x00', 0x100, 0x160) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x81, 0x102) openat(r2, &(0x7f0000000100)='./file1\x00', 0x10, 0x80) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000347000/0x3000)=nil, &(0x7f0000663000/0x4000)=nil, 0x2}, {&(0x7f0000530000/0xd000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f00007d8000/0x4000)=nil}, {0x0, &(0x7f00000fa000/0x2000)=nil, 0x401}, {&(0x7f000017c000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x6}, {0x0, 0x0, 0x40}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f00002ec000/0x3000)=nil, 0x1ffffffffffe}, {&(0x7f000000d000/0x4000)=nil, &(0x7f0000826000/0x1000)=nil, 0x2}, {&(0x7f00004cc000/0x4000)=nil, &(0x7f0000661000/0x3000)=nil}, {0x0, &(0x7f0000283000/0x4000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000038f000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f00000ce000/0x1000)=nil, 0x9bbf}, {&(0x7f00003a2000/0x1000)=nil, &(0x7f0000142000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f00004e9000/0x4000)=nil}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000340)={0x40, 0x100, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100000000, 0x6, 0x0, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x2, 0xa, 0xffffffffffffffff, 0x0, 0x8, 0x4, 0x2, 0x100], [0x5304, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x1fe, 0xffffffffffffffff, 0x0, 0x9467], [0x2, 0x3, 0x2, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x100, 0xffd6, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x5, 0x6, 0xffffffffffffffff}, {0x0, 0x2, 0x9, 0xfffffffffffffffb}, {0x0, 0x28291c58, 0x9, 0x2000000000000004}, {}, {0xfffc, 0x100, 0x0, 0x8}], {0x4, 0x5, 0x800}, {0xfffe, 0x80000000, 0x6d5, 0x4}}}) r4 = kqueue() kevent(r4, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffb4961, 0x0) ioctl$TIOCSETA(r3, 0xcd604404, &(0x7f0000000040)={0x10000000, 0x2, 0x87a, 0x2f, "2800180000020002000000000068ab5ade800600", 0x6, 0x2}) r5 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0xffff, 0x20, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xffff}, 0x38, 0x0, &(0x7f0000003f00)={0x9, 0x20fdc7}) mknod(&(0x7f0000000000)='./file1\x00', 0xc000, 0x637d) open(&(0x7f0000000080)='./file0\x00', 0x8, 0xfc) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) write(r1, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000140)={0x4, 0x2, 0x0, 0x9}, 0x4, &(0x7f0000000180)="5faab5972dd193c6e62b5513a7f2bd2b9caa423d66da004b9636d2d03d1dca0a9424b9bdbb5332a7a03b1a7bccd68218be337f843020a60cb7066cff384b7415b1c928bdeec7f6ab3a8d0518e5659711c8738c1b11696282e8d6f952270f29a9f0ba65", &(0x7f0000000200)=0x63, &(0x7f0000000240)="1af7c1ccf54926f272a9449abd9331846824299c18b6d0968fb466f74d043b608461affb5f2399bedaccbde60a6b14c2e40b5bd65114e97f15391794bcd26e1191446cbc542bf28fca8fcb4d62d3681833315f4a2718b7606b974bd61dcbe27628", 0x61) 35.231047ms ago: executing program 3 (id=446): semop(0x0, &(0x7f00000000c0)=[{0x2, 0x0, 0x1800}, {0x4, 0x2ff, 0x800}], 0x2aaaaaaaaaaaaad7) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="9d000000000100000000000088a8080081004a0086dd6036d2b500183af900000000000000000000000000000000fe80000000000000000000000000aa8200907800000400ff020000000000000000000000000001"]) open(0x0, 0x0, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TIOCSETA(r0, 0x80d04466, &(0x7f0000000080)={0xc0000004, 0x7, 0x800009, 0x0, "880020000200000058300683050095ea086800", 0x1ab3, 0x10000000}) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x3, 0x3a) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="5fcdf8707fa4261beb06800cb37f11a9d58c7d6830c07635eafeb63540f6800ecdda5fe213699b3322122c75c0ff319761f6d551f8dce167836bf14b21fb8b9332e5de87d1f9f69692e0bad502c2ade85021a4545790180099e65f96d794dbab27a1f935c46e4208bd33d9e996a66aefcef8cf5e344284860bbd970ea464481fba6a0430d5c04eb5aba9f927e43aead96dbec3f1e50808af70b2fd037c9ac8ee9293de90b7f6ba23eaf65026b542470a02c4b422a6a38f4106761046b88e8ca23508bae86e9915b5742d396dea1f5d80eb", 0xd1}, {&(0x7f0000000000)="2df3fb582f50c58a38b58d34fb6f3a1233c6fb8475e83d5c70f8a00d60558eafd739de7c0837b0048fae90de3208eaf4", 0x30}, {&(0x7f0000000040)="ddb118578dcd7496c63cdc18b225328589b7351dcdc25c925177b690f67b7ecae1e21043b3e288c05f150b3079214d7e595b2be2faa9d4787d64e463fc6196dd4004937b4f5094155ec959a9409bfe1e8e7fdb8f1d512ba25feeddee467d71b587542605e0e497046929768f30b9408b30af", 0x72}], 0x3) write(r1, &(0x7f0000000240)="98bf512057b7be08feb7", 0xa) 1.452003ms ago: executing program 0 (id=447): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x80001, 0x0, 0x0, 0x0, 0x0, 0x19e, 0x8}, 0x85c, 0x6, 0x0, 0x0, 0x3, 0x1, 0x1735, 0x804, 0x0, 0x1}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240), 0x0, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x4b7078a2d0295524) mquery(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x4}, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd6036ea070020814731d100000000000000000000000000aaff0204"]) dup2(r2, r1) 0s ago: executing program 2 (id=448): mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0x3}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil}], './file0\x00', 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) r0 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x84946467, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) r1 = syz_open_pts() sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) ktrace(&(0x7f0000000000)='./file0\x00', 0x21436587, 0x800, 0xffffffffffffffff) getgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) setresgid(0x0, r3, r4) ioctl$TIOCSPGRP(r1, 0x40047477, &(0x7f0000000040)) r5 = socket(0x2, 0x1, 0x0) shutdown(r5, 0x1) ioctl$FIONREAD(r5, 0xc0287533, &(0x7f0000000440)) link(&(0x7f0000000940)='./bus\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$WSDISPLAYIO_LSFONT(r2, 0xc058574e, &(0x7f0000000a00)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x4, 0x4, 0x859, 0x1, 0x8, 0xa9a2, 0x2, 0x1, 0x0, 0x9, 0x4}) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') lstat(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)) mknod(&(0x7f0000000980)='./file0\x00', 0x2020, 0x4000) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, &(0x7f0000000080)="4082968d", 0x4) rename(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code pckbd_enable: command error load: 1.32 cmd: getty 97952 [ttyin] 0.00u 0.01s 0% 323k WARNING: thread `nfsio' (49564) exits with status -1 WARNING: thread `nfsio' (253418) exits with status -1 WARNING: thread `nfsio' (482201) exits with status -1 WARNING: thread `nfsio' (116786) exits with status -1 WARNING: thread `nfsio' (488467) exits with status -1 WARNING: thread `nfsio' (138460) exits with status -1 WARNING: thread `nfsio' (24593) exits with status -1 WARNING: thread `nfsio' (510132) exits with status -1 WARNING: thread `nfsio' (189993) exits with status -1 WARNING: thread `nfsio' (171399) exits with status -1 WARNING: thread `nfsio' (491091) exits with status -1 WARNING: thread `nfsio' (331315) exits with status -1 WARNING: thread `nfsio' (391512) exits with status -1 WARNING: thread `nfsio' (319497) exits with status -1 WARNING: thread `nfsio' (370680) exits with status -1 WARNING: thread `nfsio' (410937) exits with status -1 WARNING: thread `nfsio' (371190) exits with status -1 WARNING: thread `nfsio' (233324) exits with status -1 WARNING: thread `nfsio' (118487) exits with status -1 WARNING: thread `nfsio' (308999) exits with status -1 uvm_fault(0xffffffff83a268f8, 0xffff8000277420f8, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ffs2_balloc+0xa0d: movq 0(%rcx,%rax,8),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND *239123 61383 0 0x2 0x1 1K syz-executor 367780 11409 0 0x14000 0x200 0 softnet0 ffs2_balloc(fffffd806c847150,ae764,50,fffffd80097fd478,1,ffff80002a2e6218) at ffs2_balloc+0xa0d ffs_write(ffff80002a2e62a0) at ffs_write+0x4f9 VOP_WRITE(fffffd8064d3f718,ffff80002a2e6350,3,fffffd80097fd478) at VOP_WRITE+0x101 ktrwriteraw(ffff8000ffffd760,fffffd8064d3f718,fffffd80097fd478,ffff80002a2e6420,ffff80002a2e6400) at ktrwriteraw+0x1be ktrsysret(ffff8000ffffd760,5b,0,ffff80002a2e64f0) at ktrsysret+0x192 syscall(ffff80002a2e65a0) at syscall+0xa51 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7891e305b520, count: 8 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xffffffff83a268f8, 0xffff8000277420f8, 0, 1) -> d ddb{1}> trace ffs2_balloc(fffffd806c847150,ae764,50,fffffd80097fd478,1,ffff80002a2e6218) at ffs2_balloc+0xa0d ffs_write(ffff80002a2e62a0) at ffs_write+0x4f9 VOP_WRITE(fffffd8064d3f718,ffff80002a2e6350,3,fffffd80097fd478) at VOP_WRITE+0x101 ktrwriteraw(ffff8000ffffd760,fffffd8064d3f718,fffffd80097fd478,ffff80002a2e6420,ffff80002a2e6400) at ktrwriteraw+0x1be ktrsysret(ffff8000ffffd760,5b,0,ffff80002a2e64f0) at ktrsysret+0x192 syscall(ffff80002a2e65a0) at syscall+0xa51 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7891e305b520, count: -7 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80002a2e61c0 rbx 0 rdx 0 rcx 0xffff800027742000 rax 0x1f r8 0xffffffffffffffff r9 0xffff80002a2e6218 r10 0xa3c94764c85084bf r11 0x7d99cd0c02e0eca7 r12 0x1 r13 0xffff800000c31800 r14 0xffff80002a2e6050 r15 0xfffffd80638e37d0 rip 0xffffffff81b9bf3d ffs2_balloc+0xa0d cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002a2e6040 ss 0 ffs2_balloc+0xa0d: movq 0(%rcx,%rax,8),%r14 ddb{1}> show proc PROC (syz-executor) tid=239123 pid=61383 tcnt=1 stat=onproc flags process=2 proc=1 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffffcd00,0xffff8000ffffdca0 process=0xffff8000ffff3030 user=0xffff80002a2e1000, vmspace=0xfffffd800b063988 estcpu=36, cpticks=24, pctcpu=0.12, user=1, sys=23, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 27365 80986 5583 0 2 0 syz-executor 4637 150243 829 0 2 0 syz-executor 4637 461877 829 0 3 0x4000080 fsleep syz-executor 94636 312360 18701 0 2 0 syz-executor 94636 70608 18701 0 3 0x4000080 fsleep syz-executor 96100 469244 61383 0 2 0 syz-executor 96100 188293 61383 0 3 0x4000080 kqsel syz-executor 96100 226177 61383 0 3 0x4000080 fsleep syz-executor 41981 245949 6771 0 2 0xc80 syz-executor 41981 412542 6771 0 3 0x4000088 kqpoll syz-executor 41981 45128 6771 0 3 0x4000080 fsleep syz-executor 54799 100228 50720 60929 2 0xc90 syz-executor 54799 122424 50720 60929 3 0x4000090 kqread syz-executor 54799 20652 50720 60929 3 0x4000090 fsleep syz-executor 71759 309271 4557 0 2 0xc80 syz-executor 71759 136479 4557 0 3 0x4000080 kqread syz-executor 71759 421148 4557 0 3 0x4000080 fsleep syz-executor 77812 352897 0 0 3 0x14200 acct acct 30698 182497 89520 0 3 0x82 nanoslp syz-executor 50720 106470 89520 0 2 0xc82 syz-executor 4557 389368 89520 0 2 0xc82 syz-executor 6771 271302 89520 0 3 0x82 nanoslp syz-executor 18701 370586 89520 0 3 0x82 nanoslp syz-executor 829 308481 89520 0 2 0xc82 syz-executor *61383 239123 89520 0 7 0x3 syz-executor 5583 164362 89520 0 3 0x82 nanoslp syz-executor 89520 144383 4772 0 3 0x82 kqread syz-executor 4772 391745 25765 0 3 0x10008a sigsusp ksh 25765 429588 1577 0 3 0x98 kqread sshd-session 1577 366670 74447 0 3 0x92 kqread sshd-session 97952 112652 1 0 3 0x100083 ttyin getty 74447 370427 1 0 3 0x88 kqread sshd 67095 226034 21956 74 3 0x1100092 bpf pflogd 21956 288195 1 0 3 0x80 sbwait pflogd 80188 516252 68976 73 3 0x1100090 kqread syslogd 68976 373444 1 0 3 0x100082 sbwait syslogd 54107 399497 1 0 3 0x100080 kqread resolvd 22851 44027 20277 77 3 0x100092 kqread dhcpleased 71907 74852 20277 77 3 0x100092 kqread dhcpleased 20277 407094 1 0 3 0x80 kqread dhcpleased 24322 406699 0 0 3 0x14200 bored smr 51054 352512 0 0 2 0x14200 zerothread 7381 206101 0 0 3 0x14200 aiodoned aiodoned 98841 281103 0 0 3 0x14200 syncer update 37929 323058 0 0 3 0x14200 cleaner cleaner 37045 208135 0 0 3 0x14200 reaper reaper 95727 48438 0 0 3 0x14200 pgdaemon pagedaemon 75646 431603 0 0 3 0x14200 bored viomb 31383 402699 0 0 3 0x40014200 acpi0 acpi0 20634 447166 0 0 3 0x40014200 idle1 2267 116811 0 0 3 0x14200 bored softnet1 11409 367780 0 0 7 0x14200 softnet0 76654 135213 0 0 3 0x14200 smrbar systqmp 11612 414276 0 0 3 0x14200 bored systq 77059 306312 0 0 3 0x14200 tmoslp softclockmp 88952 506780 0 0 3 0x40014200 tmoslp softclock 22099 85209 0 0 3 0x40014200 idle0 1 384368 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 61383 (syz-executor) thread 0xffff8000ffffd760 (239123) exclusive rrwlock inode r = 0 (0xfffffd806c8471f0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vget+0x2a2 #6 ktrwriteraw+0x175 #7 ktrsysret+0x192 #8 syscall+0xa51 #9 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a1e180) #0 witness_lock+0x5f1 #1 ktrsysret+0xde #2 syscall+0xa51 #3 Xsyscall+0x128 Process 11409 (softnet0) thread 0xffff8000ffffe000 (367780) exclusive rwlock netlock r = 0 (0xffffffff838f4e30) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 nd6_expire+0x2e #3 taskq_thread+0x157 #4 proc_trampoline+0x10 shared rwlock softnet0 r = 0 (0xffff80000002c078) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 Process 76654 (systqmp) thread 0xffff8000ffffecf8 (135213) shared rwlock systqmp r = 0 (0xffffffff83918c18) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11067 12154K 12386K 166960K 12867 0 pcb 17 12K 12K 166960K 93 0 rtable 183 9K 10K 166960K 483 0 pf 34 17K 81K 166960K 158 0 ifaddr 34 5K 8K 166960K 67 0 ifgroup 44 1K 2K 166960K 96 0 sysctl 3 1K 9K 166960K 7 0 counters 66 36K 37K 166960K 116 0 ioctlops 0 0K 4K 166960K 1754 0 iov 0 0K 16K 166960K 22 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1445 91K 91K 166960K 2016 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 9 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 66 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 93K 166960K 579 0 sigio 0 0K 0K 166960K 8 0 proc 72 115K 147K 166960K 599 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 47 0 in_multi 67 5K 7K 166960K 117 0 ether_multi 1 0K 0K 166960K 3 0 mrt 1 0K 0K 166960K 16 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 73 334K 334K 166960K 73 0 exec 0 0K 1K 166960K 425 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 239 159K 178K 166960K 7241 0 UVM aobj 16 4K 4K 166960K 17 0 pinsyscall 43 86K 108K 166960K 1746 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 17 0 NDP 10 0K 2K 166960K 45 0 temp 54 9077K 9150K 166960K 19107 0 kqueue 14 22K 30K 166960K 115 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 71 0 65 1 0 1 1 0 8 0 rtentry 176 131 0 61 6 0 6 6 0 8 0 unpcb 144 864 0 845 9 0 9 9 0 8 8 syncache 336 6 0 6 1 0 1 1 0 8 1 tcpqe 32 2 0 2 1 0 1 1 0 8 1 tcpcb 736 114 0 108 2 0 2 2 0 8 1 arp 136 24 0 9 1 0 1 1 0 8 0 inpcb 328 407 0 397 2 0 2 2 0 8 0 nd6 152 27 0 12 2 0 2 2 0 8 1 pkpcb 40 3 0 3 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 0 1 1 0 8 1 ppxss 1192 19 0 19 1 0 1 1 0 8 1 pppxif 1576 3 0 3 1 0 1 1 0 8 1 pfstscr 40 4 0 4 1 0 1 1 0 8 1 pffrag 232 9 0 1 1 0 1 1 0 482 0 pffrnode 88 8 0 1 1 0 1 1 0 8 0 pffrent 40 15 0 6 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 26 0 22 1 0 1 1 0 8 0 pfsrclim 320 1 0 1 1 0 1 1 0 8 1 pfanchor 1288 7 0 2 1 0 1 1 0 8 0 pftag 88 3 0 2 2 1 1 1 0 8 0 pfstitem 24 44 0 1 1 0 1 1 0 8 0 pfstkey 128 49 0 6 2 0 2 2 0 8 0 pfstate 448 46 0 4 5 0 5 5 0 8 0 pfrule 1360 35 0 27 2 1 1 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 553 0 232 31 0 31 31 0 8 7 art_table 40 555 0 232 5 0 5 5 0 8 0 art_node 32 131 0 66 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 2 1 0 1 1 0 8 0 semupl 112 2 0 2 1 0 1 1 0 8 1 semapl 112 62 0 52 1 0 1 1 0 8 0 shmpl 112 14 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 2553 0 1095 93 0 93 93 0 8 0 ffsino 296 2553 0 1095 114 0 114 114 0 8 0 nchpl 144 3390 0 1685 64 0 64 64 0 8 0 rtmask 32 1 0 1 1 0 1 1 0 8 1 vnodes 216 2992 0 0 167 0 167 167 0 8 0 namei 1024 11060 0 11060 2 1 1 2 0 8 1 percpumem 16 73 0 25 1 0 1 1 0 8 0 pfiaddrpl 120 8 0 6 1 0 1 1 0 8 0 kstatmem 264 56 0 34 3 0 3 3 0 8 1 scsiplug 72 2 0 2 1 0 1 1 0 8 1 scxspl 216 17961 0 17961 5 2 3 3 1 8 3 plimitpl 152 125 0 107 1 0 1 1 0 8 0 sigapl 424 918 0 869 8 0 8 8 0 8 2 knotepl 120 788 0 0 24 0 24 24 0 8 0 kqueuepl 224 185 0 170 2 0 2 2 0 8 1 pipepl 344 150 0 123 3 0 3 3 0 8 0 fdescpl 528 881 0 849 3 0 3 3 0 8 0 filepl 160 5433 0 5138 19 1 18 19 0 8 5 lockfpl 104 320 0 314 2 0 2 2 0 8 1 lockfspl 48 146 0 142 1 0 1 1 0 8 0 sessionpl 144 44 0 35 1 0 1 1 0 8 0 pgrppl 48 56 0 39 1 0 1 1 0 8 0 ucredpl 104 880 0 865 1 0 1 1 0 8 0 zombiepl 144 870 0 869 1 0 1 1 0 8 0 processpl 1232 918 0 869 6 0 6 6 0 8 2 procpl 664 1695 0 1636 8 0 8 8 0 8 2 sosppl 176 3 0 3 1 0 1 1 0 8 1 sockpl 752 1355 0 1320 29 17 12 24 0 8 7 mcl64k 65536 7 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 122 0 0 16 0 16 16 0 8 0 mcl2k 2048 41 0 0 6 0 6 6 0 8 0 mtagpl 96 10 0 0 1 0 1 1 0 8 0 mbufpl 256 336 0 0 21 0 21 21 0 8 0 bufpl 280 7168 0 1038 438 0 438 438 0 8 0 anonpl 32 9514 0 0 77 0 77 77 0 246 0 amapchunkpl 152 23753 0 23263 29 0 29 29 0 158 8 amappl16 200 3843 0 3812 23 4 19 22 0 8 8 amappl15 192 121 0 120 1 0 1 1 0 8 0 amappl14 184 429 0 428 1 0 1 1 0 8 0 amappl13 176 127 0 115 1 0 1 1 0 8 0 amappl12 168 1131 0 1100 2 0 2 2 0 8 0 amappl11 160 11 0 11 1 1 0 1 0 8 0 amappl10 152 67 0 51 1 0 1 1 0 8 0 amappl9 144 295 0 295 1 1 0 1 0 8 0 amappl8 136 107 0 103 1 0 1 1 0 8 0 amappl7 128 152 0 139 1 0 1 1 0 8 0 amappl6 120 161 0 159 1 0 1 1 0 8 0 amappl5 112 99 0 88 1 0 1 1 0 8 0 amappl4 104 298 0 278 1 0 1 1 0 8 0 amappl3 96 4475 0 4360 4 0 4 4 0 8 0 amappl2 88 582 0 516 2 0 2 2 0 8 0 amappl1 80 12540 0 11943 16 0 16 16 0 8 3 amappl 88 6415 0 6248 5 0 5 5 0 92 0 uvmvnodes 80 115 0 0 3 0 3 3 0 8 0 dma32768 32768 1 0 1 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 2 2 0 1 0 8 0 dma128 128 254 0 254 2 1 1 1 0 8 1 dma64 64 7 0 7 2 1 1 1 0 8 1 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 16 0 1 1 0 1 1 0 8 0 uaddrrnd 24 881 0 849 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 881 0 849 1 0 1 1 0 8 0 vmmpekpl 168 9291 0 9259 2 0 2 2 0 8 0 vmmpepl 168 65601 0 63636 105 0 105 105 0 357 13 vmsppl 488 880 0 849 5 0 5 5 0 8 1 rwobjpl 80 21712 0 20643 30 0 30 30 0 8 0 pdppl 4096 1769 0 1698 103 32 71 87 0 8 0 pvpl 32 16443 0 0 133 0 133 133 0 265 0 pmappl 256 880 0 849 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 299 0 37 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff838c9ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a1d980) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0xf rt_ifa_del(ffff800000c4a700,200004,ffff800000c4a750,0) at rt_ifa_del+0x380 rt_ifa_dellocal(ffff800000c4a700) at rt_ifa_dellocal+0x1ae in6_purgeaddr(ffff800000c4a700) at in6_purgeaddr+0x13a nd6_expire(0) at nd6_expire+0x111 taskq_thread(ffff80000002c000) at taskq_thread+0x157 end trace frame: 0x0, count: 2 ddb{0}> trace x86_ipi_db(ffffffff838c9ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a1d980) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0xf rt_ifa_del(ffff800000c4a700,200004,ffff800000c4a750,0) at rt_ifa_del+0x380 rt_ifa_dellocal(ffff800000c4a700) at rt_ifa_dellocal+0x1ae in6_purgeaddr(ffff800000c4a700) at in6_purgeaddr+0x13a nd6_expire(0) at nd6_expire+0x111 taskq_thread(ffff80000002c000) at taskq_thread+0x157 end trace frame: 0x0, count: -13 ddb{0}> machine ddbcpu 1 Stopped at ffs2_balloc+0xa0d: movq 0(%rcx,%rax,8),%r14 ffs2_balloc(fffffd806c847150,ae764,50,fffffd80097fd478,1,ffff80002a2e6218) at ffs2_balloc+0xa0d ffs_write(ffff80002a2e62a0) at ffs_write+0x4f9 VOP_WRITE(fffffd8064d3f718,ffff80002a2e6350,3,fffffd80097fd478) at VOP_WRITE+0x101 ktrwriteraw(ffff8000ffffd760,fffffd8064d3f718,fffffd80097fd478,ffff80002a2e6420,ffff80002a2e6400) at ktrwriteraw+0x1be ktrsysret(ffff8000ffffd760,5b,0,ffff80002a2e64f0) at ktrsysret+0x192 syscall(ffff80002a2e65a0) at syscall+0xa51 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7891e305b520, count: 8 ddb{1}> trace ffs2_balloc(fffffd806c847150,ae764,50,fffffd80097fd478,1,ffff80002a2e6218) at ffs2_balloc+0xa0d ffs_write(ffff80002a2e62a0) at ffs_write+0x4f9 VOP_WRITE(fffffd8064d3f718,ffff80002a2e6350,3,fffffd80097fd478) at VOP_WRITE+0x101 ktrwriteraw(ffff8000ffffd760,fffffd8064d3f718,fffffd80097fd478,ffff80002a2e6420,ffff80002a2e6400) at ktrwriteraw+0x1be ktrsysret(ffff8000ffffd760,5b,0,ffff80002a2e64f0) at ktrsysret+0x192 syscall(ffff80002a2e65a0) at syscall+0xa51 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7891e305b520, count: -7