last executing test programs: 6.183933934s ago: executing program 1 (id=1569): setrlimit(0x8, &(0x7f0000000040)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x3, 0x9000004a, 0x3ff, 0xa5b4, "0aff9cbe360500000800", 0x5}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) close(r1) 6.065422306s ago: executing program 1 (id=1576): unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0)="ed", 0x1) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000580)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000005c0)=""/196, 0xc4}], 0x1, 0x0}}, 0x10, 0x840, 0x0) shutdown(r1, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffff9c, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x8, 0x0, 0x0, 0x1}, {0x48, 0x3, 0x3, 0x10004}, {0x4006, 0x0, 0xff, 0xfffffffe}]}) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x4e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaeaabb86dd6000000000182c00000000000000000000000000000000000000000000000800001a003f00000005880090787f000000000000000000000000000000000000005367166ecffeb9727770023be36c2af0785f609a43deae479295704915f9d0cb66f8000cabdbc0ca1fd6e3b0e3a3"]) close(r1) close(r0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x1c4) unlink(&(0x7f0000000180)='./file0\x00') mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r3, 0x0) close(r3) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000200)=ANY=[]) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r4 = socket(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000), 0x10) r5 = syz_open_pts() ioctl$TIOCSTSTAMP(r5, 0x8008745a, &(0x7f0000000100)={0x2, 0xfffffffa}) shutdown(r4, 0x2) shutdown(r1, 0x1) close(r4) 5.952432469s ago: executing program 1 (id=1588): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x1878, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x112}, 0xffffffffffffffff}) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x1878, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x112}, 0xffffffffffffffff}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0206923, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r0, 0xc0206923, &(0x7f00000001c0)) r1 = socket(0x2, 0x2, 0x0) kqueue() (async) kqueue() ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) r2 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r2, 0x8040691a, &(0x7f00000001c0)) 5.910265853s ago: executing program 1 (id=1591): open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async) mknod(0x0, 0x2000, 0xd01) (async) socket$inet(0x18, 0x3, 0x102) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x50) (async) getppid() (async) msgctl$IPC_SET(0x0, 0x1, 0x0) (async) getppid() (async) setpgid(0x0, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$TIOCSETA(r0, 0xc0205603, &(0x7f0000000040)={0xe64, 0x0, 0x3, 0x8000000, "97f337576a00fdb90200", 0x2000, 0x35d0}) (async) fcntl$lock(0xffffffffffffffff, 0x9, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setregid(0x0, r2) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x1e00, 0x0) (async) setregid(0x0, r2) ktrace(0x0, 0x1, 0x40001c00, 0x0) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x2, 0x8}, 0x2, 0x0, 0x0, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) sysctl$vm_swapencrypt(&(0x7f0000000140)={0x2, 0x5, 0x1}, 0x3, &(0x7f0000000180)="50ba0fc2229727d19988f0b48e77b5bacd5cb2d3baaa83143704ed8b0a06e9bf230f82e79b7711e2b55e3c6a035aa4c5a25db83fdd7777ac70d366b708060b5469cc6425f4634cd4af6a915b11e4f1cb73c3e2ee366e4823560facbd07f1a63eef151f0e43676fb7796aa205a826460adf97dfc32a407c49872d1f59cfb422bb578a", &(0x7f0000000240)=0x82, &(0x7f0000000280)="9b1e42b20fedce7e77644108be31516d94f51b0c81bb58109e64bd86f8440c551a983b03b033154f5640c746a84e1d79afbb197c4e09b1b596ea8ff0557d965e13fadf6f92e7", 0x46) (async) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) (async) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x2c, 0x9, 0xff, 0x4}, {0x40, 0x3, 0x18, 0x1}, {0x4, 0x1, 0x0, 0x7}]}) (async) syz_emit_ethernet(0x119, &(0x7f0000000340)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0xe3, 0x2c, 0x0, @loopback, @rand_addr="0000000000000800001a003f00000005", {[@routing={0x4, 0x0, 0x0, 0x7}], @icmpv6=@echo_reply={0x81, 0x0, 0x0, 0x0, 0xa, "82ae3fcfed6f12dcc72c77b62eee1f0e57a012584417d7c5f0cc04be228e49e1a4350cbcb983aae38a01bcea17c9b977aace94c1a78ae84e1fb74839221c6e560d9ca747f2465ecf9b61fcc6b02d92676b9396e5a734b0cfa5804879e2e23f0a1b26800c0a0dc870fcde30e3ee96efc07701c23d76d4a54f0000ac748728cb3a83d895163a31e11c4e6594597f0f1145c34af05165ae8aadd32deed6c1cc22757197447e7b091d18ca7d77432c28d816e87829d84211d9213282780eb5ec04507e3a89c7206a98c9d0d564ec736e932156fd87"}}}}}}) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) r4 = socket(0x2, 0x4001, 0x0) r5 = dup(r4) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) close(r6) 5.908771492s ago: executing program 1 (id=1594): ioctl$TIOCSTSTAMP(0xffffffffffffffff, 0x8008745a, &(0x7f0000000000)={0xffffffff}) r0 = socket(0x11, 0x3, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffe, 0x10000001, 0x200000000000, 0x6, 0xfffffffffffffe01, 0x6, 0x4, 0x400}, 0x0, 0x0, 0x0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VNDIOCCLR(r1, 0x80384601, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00', 0x200000000, &(0x7f00000001c0)='./file0\x00', 0x8}) ioctl$VNDIOCGET(r1, 0x81946467, &(0x7f00000006c0)={'./file0\x00'}) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) r3 = dup(r2) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000100)={0x2}) r4 = socket(0x18, 0x2, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f000013d000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f000063a000/0x4000)=nil, &(0x7f000013c000/0x4000)=nil}, {&(0x7f0000590000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xfffffffffffffffc}, {&(0x7f000048b000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f000069d000/0x4000)=nil, &(0x7f0000049000/0x3000)=nil, 0x2}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00003d7000/0x4000)=nil, &(0x7f0000159000/0x4000)=nil}, {&(0x7f00003ee000/0x2000)=nil, &(0x7f0000729000/0x1000)=nil}, {&(0x7f000015b000/0x3000)=nil, &(0x7f00004f6000/0x3000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f000013e000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f00005fd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x5}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000696000/0x1000)=nil, &(0x7f0000620000/0x3000)=nil, 0x1000000000}], './file0\x00', 0xfffffffc}) close(r4) r5 = socket(0x800000018, 0x1, 0x0) bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r6 = socket(0x800000018, 0x1, 0x0) bind$unix(r6, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt(r0, 0x11, 0x2, &(0x7f0000000000), 0x4) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{}, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000080), 0x4) r7 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r7, 0x8040691a, &(0x7f00000001c0)) 5.847756663s ago: executing program 1 (id=1601): r0 = syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, 0x0) (async) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80085761, &(0x7f0000000040)={0x3, 0x3}) (async) mknod(0x0, 0x2000, 0xd01) (async) socket$inet(0x18, 0x3, 0x102) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x2, 0x8}, 0x2, 0x0, 0x0, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) (async) clock_settime(0x100000000000000, &(0x7f0000000000)={0xfe1ecc7f}) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x2c, 0x9, 0xff, 0x4}, {0x40, 0x3, 0x18, 0x1}, {0x4, 0x1, 0x0, 0x7}]}) (async) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000000102c00000000000000000000002000000000000000000000000800001a003f000000050400000700000000810090780000000a"]) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x5c, 0xf2, 0x1, 0x5f80}, {0xfffe, 0x4a, 0x1, 0x3}]}) (async) r3 = socket(0x3, 0x4006, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') (async) syz_emit_ethernet(0x6e, 0x0) (async) getegid() (async) setsockopt(r3, 0x1000000029, 0x3f, &(0x7f0000000000)="6744d6e1", 0x4) (async) sysctl$hw(&(0x7f0000000080)={0x6, 0x14}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$TIOCGETA(r1, 0x402c7413, &(0x7f0000000180)) sysctl$vm(&(0x7f0000000040)={0x2, 0x7}, 0x2, 0x0, 0x0, &(0x7f0000002280)='}', 0x1) (async) socket$inet6(0x18, 0x5, 0x4) writev(r3, &(0x7f00000001c0)=[{0x0}], 0x1) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000008c0)=0x7) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000940)=0x3) (async) syz_open_pts() r4 = socket(0x11, 0x3, 0x0) sendto$unix(r4, &(0x7f00000000c0)="b10005040000000000000000340000001a5113fecea10500fef96ecfc72fd3357a89583535673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc2feb3fda1139b672f4d3360223e7d026ba8af630037a840c4f2bd53eb067e7335a069d7ac434e0c0000000000008904000000000022830cf41bed66f40066ccdcf3e4999d9d20002002c5dbfad800000008e371a3f8340412051e00000000000002000000000000", 0xb1, 0x0, 0x0, 0x0) 5.631986635s ago: executing program 6 (id=1610): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="adca797582237f177e4c3033", 0xc}], 0x1) r1 = socket(0x20, 0x0, 0x81) sysctl$kern(&(0x7f00000004c0)={0x1, 0x56}, 0x2, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00400100000000", 0x8) setsockopt$inet_opts(r2, 0x0, 0xd, 0x0, 0x0) openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a20, 0x0) getsockopt$sock_int(r1, 0xffff, 0x1004, &(0x7f0000000000), &(0x7f0000000080)=0x4) 4.30364998s ago: executing program 6 (id=1629): syz_emit_ethernet(0x92, &(0x7f0000000000)=ANY=[]) syz_emit_ethernet(0x138, &(0x7f0000000100)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$vnd(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000080)="0315f1d89ec5a317a9357682", 0xc) mkdir(0x0, 0x0) setreuid(0x0, 0xee01) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x5, 0x0, 0x564, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r1 = socket(0x6, 0x1, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCPROMISC(r2, 0x20004269) close(r2) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x52, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100200086dd60000000000300000000fe80000000fcffffff000000000000bb88009078e7f6160e00000000040000000000ffffac1400aa53"]) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400001803c1, 0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd}) r4 = kqueue() kevent(r4, &(0x7f0000000040)=[{{r3}, 0xffffffffffffffff, 0x4d, 0x40, 0x7, 0xff}], 0x139, 0x0, 0xffffffff, 0x0) r5 = socket(0x2, 0x2, 0x0) bind(r5, &(0x7f0000000180), 0x2) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x1}, 0x8) sendto(r0, &(0x7f00000003c0)="98edc1cf9d242ff3974da44a7d14135bd098af851ac34c348faee1962d6c46b5fdbf461bf830a2d834290b52db8735d481097ea72d58dcbbef900c3ed549c7192281bc76da78ce4c85e55fa404cdbc535b0485af21dfce6c292f3d52d20554deead0144122194c4436c8f0a44df1934abda30e74769c50a935523c86fe42670bff1b0f21b5b1e988cb089546e638466cef54f5ebdb9239804183f4cbbe33603849607bc789bec4ec666e043790e51705bbd3d93930bb4d438c0ae48425fe5d5182b2cf507672e709bfb50688b40123b5cfa3c4d18dd7c668771ffc2d2318742b2be985932b51d702404d5c1c74559a884b06b316d805b3102b96b57360cccddc225faf85756fce553cae364fb5311df4bae08fcad3448a8f17e1c841e429ded2b97f36e9d27208096ea3668b2f4bbf379d2bf9a768aa78fb5471d8dcccbad159059c3efe5e5576ece7b8e1dbf3f0dbf10bf3a1bf775091c2c800a74b84247db5ec002e55d7dee183682348bd60c41c83ca1584", 0x173, 0x40a, 0x0, 0x0) 4.210306701s ago: executing program 4 (id=1637): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = msgget$private(0x0, 0x730) msgsnd(r0, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0) (async) msgsnd(r0, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0) msgsnd(r0, 0x0, 0x401, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0x2, 0x4}, {0x16, 0xf2, 0x7f, 0x400b}]}) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000340)="6aab1bc2bc924ee00fa655c0338675e0590d39f282bd320500e7013afb389a87d4f7cda7", 0x24}], 0x1, 0x4) sysctl$kern(0x0, 0x0, &(0x7f0000000000)="02170300000e00001a2af175e75360a2472fc39c46e400"/37, &(0x7f0000000080)=0x25, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[]) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) open(0x0, 0x80, 0x0) (async) open(0x0, 0x80, 0x0) open(0x0, 0x200, 0x22) (async) open(0x0, 0x200, 0x22) mknodat(0xffffffffffffff9c, 0x0, 0x2000, 0x801) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0/file0\x00', 0x0, 0xfffffde2, 0xffff, 0x0, 0x24, 0xf, 0x1, 0x0, 0x0, 0x1, 0xf1a}) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0/file0\x00', 0x0, 0xfffffde2, 0xffff, 0x0, 0x24, 0xf, 0x1, 0x0, 0x0, 0x1, 0xf1a}) socket(0x1, 0x2, 0x0) (async) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000140)=[{0x3, 0x1, 0xb, 0xec3}, {0x9, 0x4, 0x20, 0x472cd796}, {0x80, 0x3, 0x83, 0xfffffff6}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000140)=[{0x3, 0x1, 0xb, 0xec3}, {0x9, 0x4, 0x20, 0x472cd796}, {0x80, 0x3, 0x83, 0xfffffff6}]}) socket(0x18, 0x3, 0x0) (async) r4 = socket(0x18, 0x3, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100)) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8000001}, {0xb1, 0x10, 0xfe, 0x4}, {0x16, 0xf6, 0x7f, 0x400b}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r2, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) 4.135229921s ago: executing program 4 (id=1644): mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x2, 0x0}) writev(r0, &(0x7f0000000340), 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, 0x0) execve(0x0, 0x0, 0x0) 3.906115285s ago: executing program 7 (id=1652): r0 = msgget$private(0x0, 0x0) setreuid(0xee00, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) close(r1) (async) r5 = getuid() (async) r6 = socket(0x18, 0x2, 0x0) setsockopt(r6, 0x1000000000029, 0x40, &(0x7f0000000980)="01000000", 0x4) open(0x0, 0x0, 0x0) (async) setreuid(0x0, r5) (async, rerun: 32) msgrcv(r0, 0x0, 0x0, 0x3, 0x1000) (async, rerun: 32) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0xf4, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x8b3) kqueue() (async) msgctl$IPC_RMID(r0, 0x0) 3.869986977s ago: executing program 7 (id=1655): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x2, &(0x7f00000000c0)=[{}, {0x1, 0x0, 0x0, 0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8efdb4cf71c37082", &(0x7f0000000000)=0x2, 0x0, 0x37) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x0, 0x0, 0x0, &(0x7f0000000000)="00e78e6f4e6ebfb23a848b3bddddea9f5940ca2431", 0x15) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 2.843840355s ago: executing program 6 (id=1657): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) socket$unix(0x1, 0x1, 0x0) (async) r0 = socket$unix(0x1, 0x1, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0xfffffffffffffffe, 0x0, 0x0, 0x6ee}], 0x0, 0x0, 0x0, 0x0) r1 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) (async) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0x0, 0x0, 0x0, 0x40}], 0x0, 0x0, 0x0, 0x0) (async) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0x0, 0x0, 0x0, 0x40}], 0x0, 0x0, 0x0, 0x0) r2 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r0, &(0x7f0000000200)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0xff) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x0) link(&(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='./file0\x00') link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) semget$private(0x0, 0x3, 0x8) (async) r3 = semget$private(0x0, 0x3, 0x8) semctl$GETALL(r3, 0x0, 0x6, &(0x7f0000000100)=""/81) (async) semctl$GETALL(r3, 0x0, 0x6, &(0x7f0000000100)=""/81) socket(0x18, 0x3, 0x0) (async) r4 = socket(0x18, 0x3, 0x0) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f00000000c0)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.84330734s ago: executing program 4 (id=1659): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) syz_emit_ethernet(0x6a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaff3b88072b586dd6035f9c300342c00f375f661851fd00ea22fe350be125713fe8000000000000000000000000000bb0602000000000000000f56e54aaf89aca6613510b03d"]) writev(0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f0000000080)=0xaa2a) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSDIRFILT(r0, 0x8004427d, &(0x7f0000000180)=0xfffffff9) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000280)={0x3, &(0x7f0000000000)=[{0x4, 0xff}, {0x3d, 0x0, 0x0, 0x441}, {0x6, 0x2, 0x0, 0x81}]}) ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000140)=0x10) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[]) 2.842702989s ago: executing program 7 (id=1660): open(&(0x7f0000000480)='./file0\x00', 0x0, 0x2) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0xa0cff0b638290ff0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x810, r0, 0x0) 2.715431916s ago: executing program 4 (id=1662): setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="4e2effbb11", 0x5}], 0x1) writev(r0, &(0x7f0000000580), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet6(0x18, 0x3, 0x0) getsockopt$sock_int(r1, 0xffff, 0x1021, &(0x7f0000001ac0), &(0x7f0000000580)=0x4) sysctl$kern(&(0x7f0000000400)={0x1, 0x28}, 0x2, 0x0, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) setreuid(0xee00, 0x0) r2 = getuid() chown(&(0x7f0000000180)='.\x00', r2, 0x0) setreuid(0x0, 0x0) connect(r1, &(0x7f0000000200)=@in={0x2, 0x2}, 0xc) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) chdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000000)='./file0\x00') open(&(0x7f0000000180)='./file0\x00', 0x6d84b028b6b26ff2, 0x0) rename(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='./file0\x00') r3 = syz_open_pts() close(r3) syz_open_pts() ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000180)={0x40978b, 0x10001, 0xfffffc03, 0x80a1a0, "bb08000100f167d910508bc49d7323000000007e"}) writev(r3, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) execve(0x0, 0x0, 0x0) syz_open_pts() ioctl$TIOCSTSTAMP(r3, 0x8008745a, &(0x7f00000000c0)={0x8, 0x8e3}) socket(0x1, 0x4000, 0x2) select(0x40, &(0x7f0000000140)={0xc26, 0xf, 0x0, 0x1e22ff9e, 0x5, 0xffffffffffffffff, 0x0, 0x8000000000000001}, 0x0, 0x0, 0x0) 2.714739307s ago: executing program 6 (id=1665): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x7) recvfrom$unix(r1, &(0x7f00000000c0)=""/75, 0x4b, 0x1800, 0x0, 0x0) write(r0, &(0x7f0000000080)="7f", 0xfffffdfe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) openat(r2, &(0x7f0000000140)='./file0\x00', 0x200, 0x0) 2.65462166s ago: executing program 7 (id=1667): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x200) open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x44) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6036ea0700103a0000000000000000000000000500000000000000000000000000000000000000aa8c0090"]) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000480)=""/253, 0xfd}], 0x1, 0x0}, 0x6}, 0x10, 0x40, 0x0) close(r1) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r3 = socket(0x10, 0x8000, 0xfe) listen(r3, 0x0) r4 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$PCIOCWRITE(r4, 0xc00c7007, &(0x7f00000005c0)={{}, 0x2, 0x0, 0x2}) accept$unix(r3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$PCIOCWRITE(r4, 0xc00c7007, &(0x7f00000005c0)={{}, 0x0, 0x0, 0x4000}) listen(r2, 0x0) execve(0x0, 0x0, 0x0) pread(0xffffffffffffffff, &(0x7f0000000600)="b8704a4d16002af2d3457ba9879d83caf747bb26e56ce0404518360dc0ec6358e8c65c0b3ee7b553542f9a382fc99bde280a5193511c429221accb7fea209533a5f737b8e9d49cf6f289a8104f292e94f7c9edd5b83ad89927c083b1cf118f6ff083f77a3c1c4cb7e1dd6a1e912e6af90ba019381a8fe068e410df1dc6f95dcff2549b6114132290fae6b3", 0x8b, 0x0) accept(r1, 0x0, 0x0) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='c\x00') ioctl$WSKBDIO_GETBELL(r0, 0x40105704, &(0x7f0000000000)) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCMAP(r6, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r5, 0x2}) close(r5) acct(&(0x7f0000000040)='./file0\x00') 2.653747261s ago: executing program 5 (id=1668): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(r0, 0xc0284459, &(0x7f0000000000)={0x770, 0x4, 0xb3ac, 0x0, "9787dd6f00", 0x10a}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x1ac) sysctl$hw(&(0x7f0000000280)={0x6, 0x5}, 0x2, &(0x7f00000002c0)="a33436ba", &(0x7f0000000300)=0x4, &(0x7f0000000340), 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x50, 0x1, 0x1}, {0x40, 0x10, 0x2, 0x1}, {0x16, 0x5, 0x2, 0x2}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000000)="065f97e8729804624809b6a74b69944d0d815532d81c4746c48f5c1c658aefd161e5cf87", &(0x7f0000000080)=0x4d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x20, 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[]) syz_extract_tcp_res$synack(&(0x7f0000000180)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f00000001c0)={0x41424344, 0x41424344}, 0x400, 0xe) syz_emit_ethernet(0x87, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="20800008907801c00402040202040100020d32f42a4248e5a67f8a195d080a00000004000000000212356483b839a4b6abd344c2d64837a1d4000000862434eee73d402641"]) 2.510811296s ago: executing program 7 (id=1671): clock_gettime(0x3, &(0x7f0000000000)) listen(0xffffffffffffff9c, 0x2) r0 = fcntl$getown(0xffffffffffffffff, 0x5) ktrace(&(0x7f0000000040)='./file0\x00', 0x2, 0x800, r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x20300, 0x0) r2 = dup(r1) ioctl$VMM_IOC_WRITEREGS(r2, 0x82485608, &(0x7f00000000c0)={0x7, 0x9, 0xfffffffffffffc95, {[0x1, 0x10000000, 0x80000001, 0x8, 0x8, 0x50, 0x6, 0x8, 0x8, 0x4, 0xf, 0x3, 0x1000, 0x3, 0x8001, 0x2, 0x1, 0x2], [0x2, 0x242, 0xff, 0x7f, 0xff, 0x7, 0xfbf3, 0x3, 0x9, 0x80000000], [0x100000000, 0x8, 0x9, 0x7, 0xf, 0xd, 0x7], [0x4, 0x8, 0x5, 0xb908, 0x2, 0x8], [{0x6, 0xb, 0x7fff, 0xfffffffffffffff6}, {0x3a, 0x800000, 0x5, 0x70}, {0x3, 0xfffffffa, 0x538, 0x1ff}, {0x0, 0x4, 0x80000001, 0x1}, {0x5, 0x1, 0xfffffffb, 0x8}, {0x593d, 0x10000, 0x3, 0x18000000000}, {0xfff8, 0x10000, 0xfffffff9, 0x6}, {0x8, 0xff48, 0x200, 0x100000001}], {0x39, 0x2, 0x3e1e, 0x8}, {0x1, 0x3ff, 0x3, 0x5}}}) ioctl$FIOGETOWN(r2, 0x4004667b, &(0x7f0000000340)) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8, 0x115) close(0xffffffffffffffff) select(0x40, &(0x7f00000003c0)={0x26, 0x10000, 0x8, 0xa2, 0x5, 0x17, 0x7, 0x1c0}, &(0x7f0000000400)={0x7, 0xfffffffffffffeff, 0x541a00, 0x3, 0xb4, 0x7, 0xb, 0x9}, &(0x7f0000000440)={0x5100, 0x0, 0xffffffffc95081f6, 0x9, 0xf05, 0x4, 0xfffffffffffffffb, 0xc}, &(0x7f0000000480)={0xf, 0x9}) r4 = kqueue() ioctl$VMM_IOC_RESETCPU(r1, 0x82405605, &(0x7f00000004c0)={0x6, 0x10000, {[0xc, 0xd, 0xfffffffffffffffe, 0xe, 0x7fffffff, 0x3, 0xa, 0x0, 0xa, 0x80, 0x1, 0xf6f, 0x6, 0x1, 0x10001, 0x4, 0x6, 0x8e], [0x1ff, 0x8001, 0xfffffffffffffff9, 0x6, 0x4, 0x1, 0xe181, 0x0, 0x1, 0x3], [0x8, 0x10000, 0xd8, 0x5, 0xdda7, 0x5300000000, 0x101], [0x6, 0x7, 0x8, 0x1, 0x7, 0x5], [{0x1000, 0x7, 0xfffffffb, 0x8000000000000001}, {0xf3ff, 0xee3, 0xda, 0x5}, {0x6, 0x200, 0x9, 0x8000}, {0x4, 0xb75, 0x8000, 0x6}, {0x30, 0x1, 0x6, 0x9}, {0x1ff, 0x1, 0x1, 0xc}, {0x5, 0x7553, 0x4, 0x7}, {0xc, 0x101, 0x2, 0x7}], {0x2, 0x7, 0xfcc8, 0x8}, {0x6a5, 0x401, 0xec1, 0x55}}}) sysctl$kern(&(0x7f0000000700)={0x1, 0x2}, 0x2, &(0x7f0000000740)="5efe001270a73a8ca66a063982a567180902c4c09ebae16a631a863455dbeafbe05711cffec056a87a2cb9c1d511bbce40fb6716b199e9de53a07f721f16216db0ab771248587d720f6b8a6e99d474d07bf06ecbe4528fd92f06d125d81eead8b4895fe43c9115575188f81d7a86adf8798fcb0467e19201a5e0d1ee1aeab3e6cc69293d6b6000fc9ea2c65d91477b0ee7d48ba42576a1a1ef2712a9bc8a39982abe0864b84113db", &(0x7f0000000800)=0xa8, &(0x7f0000000840)="098f392ee07ee1032110bbf338d7835efe39a347884fd3da09fe97ac10e15623a4d296f08332aaeed08dbf5c451cc67abcd14f0eb61e35d78012cf2192ac2175151ffe40996013c23d", 0x49) r5 = syz_open_pts() ioctl$WSDISPLAYIO_DELFONT(r2, 0x8058574f, &(0x7f00000008c0)={'./file0\x00', 0x49, 0x84e, 0x1, 0x3, 0x8, 0x9, 0x7f, 0x1, 0x0, 0x1, 0x7}) pwritev(r3, &(0x7f0000000b40)=[{&(0x7f0000000940)="74046fa9da3c7fab6f49fa61169f10600aa1103f8f0e9766fa71a0e3d996dadf112624f8751efe1b5c5fbd8712851330eb25b31612ad4256761240b74baa77a00df1e4caa74d3e6debfd4261d4f57e121fe15a47e4941faefe89283d3e9ab150a0f75dd0db1360b8d3f485f60d584c85c26e7b9c", 0x74}, {&(0x7f00000009c0)="a4d0805db0c827a2bf2c832f934e8b1f822b0adf93437669bca36dee2ba8203d6b3c3888dff7091881fb1ac901e416dd98c312f1199b95d18500f83460d8232565938f7a24f2cc966b7c84650841f56931c9c0a8e69f0bb2f6278ba0b5755272683eea0535ff329dd507a85031288a", 0x6f}, {&(0x7f0000000a40)="4c98814e67d07bc3b5ce4a8c2c2acb85fda5059e0f2e5c87691d9e48f6fcb958e12e0a73acdcafde7a3df24e415488ae3409981bf70a737b91d5651a790978be0c409ea42f3f540bcbe7f90931ec3e16c4766f20fc6467d16a97d32d341bf302ed258810c81d860c975f7e9e1b1dba5d5ac927b364ceae18f0073365cf6dd3385e6e65cf53f203d99914d857880cd9479ff8ecd8a059f165935c958764c33b0efabec810c8234061f2e1c0daca9a0757b6af0509e41859e3b617abb5e1", 0xbd}, {&(0x7f0000000b00)="459d40200ae5d79a5c64d3911d44be17a415122a5789095c8457329a7b6badb5676a84228978a74cd2", 0x29}], 0x4, 0xfffffffffffffffd) r6 = fcntl$dupfd(r1, 0x0, r5) r7 = socket(0x10, 0x2, 0x2) connect$unix(r6, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0xa) ioctl$BIOCPROMISC(r6, 0x20004269) fcntl$getown(r4, 0x5) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000c00)={0x2, &(0x7f0000000bc0)=[{0x2c, 0x10, 0x2, 0x7}, {0x642a, 0x4, 0xe}]}) nanosleep(&(0x7f0000000c40)={0xc8, 0x8000}, &(0x7f0000000c80)) pipe2(&(0x7f0000000cc0)={0xffffffffffffffff}, 0x30004) ioctl$BIOCSRSIG(r8, 0x80044272, &(0x7f0000000d00)=0x6) ioctl$BIOCGETIF(r1, 0x4020426b, &(0x7f0000000d40)={""/16, @ifru_broadaddr=@in6}) getsockopt(r1, 0xffff0000, 0x8, &(0x7f0000000d80)=""/64, &(0x7f0000000dc0)=0x40) utimes(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={{0xffff, 0xfffffffffffffc00}, {0x6, 0x8001}}) ioctl$FIOSETOWN(r7, 0x8004667c, &(0x7f0000000e80)=0x8) 2.50979018s ago: executing program 5 (id=1673): setrlimit(0x6, &(0x7f0000000040)={0x7, 0x50}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x29f57364, 0x2, 0x7, 0x5, "8b02000300090a7848b13e13355f4fa7c2f4e300", 0x1}) syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x9, 0x0, 0x0, 0x1}, {0x48, 0x3, 0xfe, 0x10004}, {0x4006, 0x0, 0x0, 0xfffffffe}]}) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r1 = socket(0x18, 0x3, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x3}, 0xc) r2 = socket$inet6(0x18, 0x2, 0x0) ioctl$VMM_IOC_READREGS(r2, 0xc028756b, &(0x7f0000001780)) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="0000030000000000000000000500313df0ddf68ede0109885c034a08ce90a84853b8ad42", &(0x7f0000000080)=0x24, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x0, &(0x7f0000000300)}) write(r3, &(0x7f0000000200)="d81ad3d227f7eb4e9be33bbd1a30", 0xe) open(&(0x7f0000001300)='./file0\x00', 0x100, 0x0) chown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)="e9187b251c81a442b3814d63912bf672c3a23a4f07b6f061b318ac6bd05ebbe77833e65e4c38017bf6d7f47efddc055c95869f55aa581eccf29236077736a1ab385968fd304f5d960cad2b7e5891afd1728a670ead515083fa2156fa5467da66cb6029ca987d6915c51f26dec7a8cbc8322ea77738d74d8eeba5b8f5e4642cdf08", 0x81}, {0x0}], 0x2) 2.4331746s ago: executing program 0 (id=1678): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) ioctl$VNDIOCSET(r0, 0x41946465, &(0x7f0000000580)={&(0x7f0000000500)='./file0\x00', 0x2, 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f0000000280)=[{0x1, 0xfc, 0x0, 0xfffff4b2}, {0x2c, 0x1, 0x2, 0x7ffffffc}, {0x6, 0x40, 0x7, 0x800}]}) write(r1, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) 2.409943316s ago: executing program 0 (id=1679): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x8382, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @rand_addr=0xffffff}, @icmp=@info_request={0xf, 0x0, 0x0, 0x7}}}}}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1001, 0x0) 2.409196359s ago: executing program 2 (id=1680): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x8382, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @rand_addr=0xffffff}, @icmp=@info_request={0xf, 0x0, 0x0, 0x7}}}}}) (fail_nth: 1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1001, 0x0) 2.385666763s ago: executing program 5 (id=1682): writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000240)="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", 0x54e}], 0x1) flock(0xffffffffffffffff, 0x3) getdents(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000440)="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", 0x34d}], 0x1) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0xdf2, 0x0, 0xfffffffd, 0x4, "0000000200000100000000000052fab427ec00", 0x40002, 0xffffbffc}) openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCGBLEN(r0, 0x40044266, &(0x7f0000000140)) open(0x0, 0x800, 0xee5d056fe16de12e) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) pledge(0x0, 0x0) r1 = kqueue() r2 = kqueue() kevent(r2, &(0x7f00000002c0)=[{{r1}, 0xfffffffffffffffa, 0xa9}], 0x7, 0x0, 0x0, 0x0) r3 = kqueue() kevent(r1, &(0x7f0000000000), 0x724, 0x0, 0xd1c, 0x0) r4 = dup(r3) kevent(r4, &(0x7f0000000240)=[{{r2}, 0xfffffffffffffffa, 0x59}], 0xf0e, 0x0, 0x7fffffff, 0x0) close(r2) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x8382, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @rand_addr=0xffffff}, @icmp=@info_request={0xf, 0x0, 0x0, 0x7}}}}}) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', 0xfffffffffffffffc, &(0x7f0000000080)='./file0\x00', 0x8}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r5, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1001, 0x0) 2.385119578s ago: executing program 2 (id=1683): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x2, 0x0) r0 = socket(0x2, 0x2, 0x0) setreuid(0xffffffffffffffff, 0x0) sendmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000080)=@file={0x0, '\x00'}, 0x3, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14"], 0x18, 0x2}, 0x0) sendmmsg(r0, &(0x7f0000000800)={&(0x7f00000007c0)={&(0x7f0000000100)=@in={0x2, 0x3}, 0xc, &(0x7f0000000380)=[{&(0x7f0000000180)="fbddd49f025ee9653e8636d15227dc10b35f395504deb1eb4b3883bb72", 0x1d}, {&(0x7f00000002c0)="98199be86fadf0f8cf682badb3251bf18aab3df34544dc514ee1358335", 0x1d}, {&(0x7f0000000300)="e57f655a923c88cb85833ff5825a696bb2a65b10f5b717592876ea5bbe7ea431d2c8ca5e8f395d440eee9c23816fcd1c35b507a1c6f681701e357e7a2eb2a2f82d9efe3eba5c2b3849fa", 0x4a}, {&(0x7f0000000540)="9a8d20ffee9e8b9a7bc6d71b0832f332f3c94cee7d6f32699f6c4b6aa57b818a0d8814620e681226e2ef8cf5a3033d195a1018323b0b980e7e17395beeb70ed11976e208b7a433066309d61c76027a0d22eac23d00a5f32eb29a0e8cb54f7f63f3d84443492fe47b2d6b9e8d0508e557d24356278578b45fb5e018daa0e7fababc7651f04ca67699fea2d537f0ae4a6592ffeb832ab2be66f6ee2b4fad4eb4f83fc38f1a0bb29b25b68ee3b2e24504ec1c592d5bf648b3071ee4e480dd40444add1b8142d817cfedaa455b9810176dbbe4905df74d05614c5c1fd6a7a58c956d5ff559844c4d1d2507add22313fd", 0xee}], 0x4, &(0x7f0000000640)=[{0x28, 0x1, 0x4, "5dcaafbd0d480c93187cb50ddf3c5be71b7f"}, {0xe0, 0x1, 0x5, "aa77c607f1b48a8a7ae31028af30b238aaa4eea69ece2f567ba4c5c2a4fcdf6f1a7f37c3f9617e78bf46d2cd256ae3012f2cd2d8dc2f27b298e61f940c17f7b55c8bc688122247bbe650c3223a3103f95e366d274f50233017fe234edc4e21cfd37ff4029e0839f26b1497bda960ae1abf59bca36698ed763919861d6a04a7a6051d759f812c595eea7c47228489eabc3cbe249bdcc6416fd01dd9956a6136ee3a9c4cf1e7934c56b7c1593fbc6e0cf403b14d1f237362febcfa175f1677192dd61083e1cee16a9498f443bd31"}, {0x50, 0xffff, 0xffff, "7c8d721f35bccb16ff7c3a4fc0b09cf9f0a1c33c1728cfaf8d603f0032f33962567898e10fa01cc4276d9fbeedb38300fec94dbc7b001ce5039f"}], 0x158}, 0x9}, 0x10, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x2, 0xfffffffe, 0x1ffffe, "ff0107002015c8a32d00000065c0bdf9c6f04aaf", 0x0, 0x840000}) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1, 0x138) fchmod(r0, 0xac) sysctl$vm(&(0x7f0000000000)={0x2, 0x6}, 0x2, &(0x7f0000000040)="ad3fb6c545", &(0x7f00000000c0)=0x5, &(0x7f0000000100), 0x0) ioctl$FIONREAD(r1, 0xc0106978, &(0x7f00000000c0)) sysctl$net_mpls(&(0x7f0000000000)={0x4, 0x21, 0x5}, 0x3, &(0x7f00000001c0)="c7d4ba067f873adfafa1af0e1f69a4dfaab9b76f25f01a04e0ffa679f3c3f690a0464e0652d5dd1b7718dd839bf2f46572ac5ce696bf9aea1795936db4d2136897123e4fcc777ec19518ebb49c32d7d92e21c3db06d0cc4ca6422e8b0a4a90fbf6f022f63b73b6e1556552d87649a70c29d9ea41f48c724de87210a31d3a91cb45ae9669f87f73cf03253bb11634914bf8ac3a0f4429db71afdc583afd6bef18d242413ddedbb75af5a6875926f5312c67730cf64807e8c7370ce4cc468f3d0e0c620a4f63248bb217", &(0x7f0000000040)=0xc9, &(0x7f00000003c0)="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", 0x163) 2.280362786s ago: executing program 0 (id=1685): r0 = socket$inet(0x2, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = dup(r3) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSDIRFILT(r4, 0x8004427d, &(0x7f0000000000)=0x3) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[]) r5 = dup2(r0, r1) symlink(&(0x7f00000000c0)='./file1/../file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file1\x00') (async) symlink(&(0x7f00000000c0)='./file1/../file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file1\x00') readlink(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) (async) readlink(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) open(&(0x7f00000004c0)='./bus\x00', 0x1, 0x4) setsockopt$inet_opts(r5, 0x0, 0x9, 0x0, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) mkdirat(r9, &(0x7f0000000240)='./bus/file0\x00', 0x1e) recvmsg(r8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/236, 0xec}, 0x0) (async) recvmsg(r8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/236, 0xec}, 0x0) sendmsg(r7, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) ioctl$TIOCGTSTAMP(r9, 0x4010745b, &(0x7f0000000280)) (async) ioctl$TIOCGTSTAMP(r9, 0x4010745b, &(0x7f0000000280)) r10 = socket(0x2, 0x4001, 0x0) fcntl$dupfd(r10, 0x2, 0xffffffffffffffff) (async) r11 = fcntl$dupfd(r10, 0x2, 0xffffffffffffffff) close(r11) socket(0x2, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0x18, 0x1, 0x2, 0x8001}, 0xc) 2.279499376s ago: executing program 2 (id=1686): syz_emit_ethernet(0x3e, &(0x7f0000000140)={@random="69e1629b6174", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "6b9efb", 0x8, 0x50, 0x0, @rand_addr="feffffff00000800ff4f0000000a0002", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x0, 0x3, 0x8}}}}}}}) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x48, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x0, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, [@hopopts={0x88, 0x1, '\x00', [@padn, @jumbo, @enc_lim={0x4, 0x1, 0x5}]}]}}}}}}}) 2.272226918s ago: executing program 2 (id=1688): readlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)=""/10, 0xa) r0 = kqueue() r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x1, 0x0, 0x7fffffff, 0x100000000000000, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) ioctl$WSKBDIO_GETMAP(0xffffffffffffffff, 0x8020690c, &(0x7f00000000c0)={0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) socket(0x18, 0x2, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) r3 = open(&(0x7f0000000340)='./file1\x00', 0x200, 0x33) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x4, 0x8011, r3, 0x0) r4 = socket(0x2, 0x4001, 0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) close(r5) socket(0x2, 0x1, 0x0) shutdown(r5, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{}, {0x3}, {0x6, 0x0, 0x0, 0x101}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) fcntl$setstatus(r3, 0x4, 0x4) close(r0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0xf) 2.27161103s ago: executing program 3 (id=1689): semop(0xffffffffffffffff, 0x0, 0x0) (async) semget$private(0x0, 0x6, 0x40) 2.271454262s ago: executing program 3 (id=1690): sysctl$net_inet6_icmp6(&(0x7f0000001600)={0x4, 0x18, 0x3a, 0x3}, 0x4, 0x0, 0x0, &(0x7f00000016c0), 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x20, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x6000, 0x406) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0x8026d4) open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) pipe2(0x0, 0x8000) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/34, 0x22, 0x4094bef5002640ec, &(0x7f0000000080)=@file={0x1, './bus\x00'}, 0x8) 2.239447895s ago: executing program 2 (id=1691): open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79c9) sysctl$hw(&(0x7f0000000100)={0x6, 0x9}, 0x2, &(0x7f0000000380), 0x0, 0x0, 0x0) setreuid(0xee00, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000180)='./file0\x00', 0x0, r1) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0xb686}, {0xb1, 0x10, 0x2, 0x1}, {0x16, 0xf2, 0x7f, 0x10000}]}) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000340)="6aab1bc2bc924ee00fa655c0338675e0590d39f282bd320500e7013afb389a87d4f7cda768e50000", 0x28}], 0x1, 0x4) sysctl$vm_swapencrypt(0x0, 0x0, &(0x7f0000000000)="ca4aaf66", &(0x7f0000000080)=0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[]) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) ioctl$TIOCFLUSH(r4, 0x80047476, &(0x7f0000000000)) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x4, 0x0}) sysctl$hw(&(0x7f0000000040)={0x6, 0x8}, 0x2, 0x0, 0x0, &(0x7f00000001c0), 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) 2.237390338s ago: executing program 5 (id=1692): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xcd50441a, &(0x7f0000000740)={0x4, 0x0, 0xfffffffc, 0x3, "0400010000000000000000001300", 0x20000000, 0xffd}) 2.237175473s ago: executing program 3 (id=1693): r0 = openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0xfd, 0x4}, {0x28, 0x0, 0x0, 0x441}, {0x6, 0x0, 0x0, 0xfffffffe}]}) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="adbce69ea015ffffffffffff08004500001c0064000000009078ffffffffac14ffff4e204e2200089078fe9633286bbc13980123efe6a83f5d2a3215eefc27acdaf942a977a812d1b73fa21062c701065589eaaee14b52b81730d5a1d163acd5c5c9"]) 2.236279791s ago: executing program 5 (id=1694): open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) truncate(&(0x7f00000000c0)='./file0\x00', 0x7ffffffffff) setrlimit(0x6, &(0x7f0000000040)={0x1, 0x1}) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40001510, 0xffffffffffffffff) 1.182138035s ago: executing program 2 (id=1695): r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x4) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$WSKBDIO_GETKEYREPEAT(r1, 0x400c5708, &(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x2, 0x10000000000000, 0x8}) r2 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000000800)={&(0x7f00000007c0)={&(0x7f0000000100)=@in={0x2, 0x2}, 0xc, &(0x7f0000000500)=[{&(0x7f0000000140)="6a7570063e1435f774b55a02ff6f1ca8f7b1de4f", 0x14}, {&(0x7f0000000180)="0ffbb2bfc0032087aedbc97cf742e1af8128d8630cc045ba6bc7e08b516fdfa6b9caae4ee65ad1ff0b9f6bde02610ab229dd45ee4c17521c49f90935d18ddd08a2285c3c069c1a8ce3e1b6bbe0256b2df226f2dc18b8baf33e6c8fac6f5c61f7f168cc307fcb230e1a324c726fa2268cee016d7f98cd939be839d859cba8b131d5e810f8407eb65b0a6589b738ab93fb9b55ed9b4211bcdf922e2d529cd084cc2f7a806a909fbdf9a23f12708b9fb2e9c800a40fc61e75a108", 0xb9}, {&(0x7f0000000240)="041cc74d6a616d30a1b005286b50f021dfe7be6bfb5fa9c4e7af6129201042e5bedaa8cb0ec6052594a0064e2e", 0x2d}, {&(0x7f0000000280)="9aced7efb7df085bcb81", 0xa}, {&(0x7f00000002c0)="2edef0154164942df4eba71060c767c3602c751ed43e0fae6ce951e34a663e805c766c1883f107c022fbf6a0abc7b4eb8013e6b4a34f1ce1a3101aeb00cbceed5a81b6beab305cedd3d69a8cb3ee16a1e62095727cef035d0eceebe51db23082294f6ff4d55bd81e9265f017ee0949132e40362b64e74bb965d6336e61eb2b7b8b46dbd7263ccf0fca5ab29d5ccb116f1d9c3b63df883c570def8e6dfb66406cd05f87015d0bffcf4f3adcfc80bd58af", 0xb0}, {&(0x7f0000000380)="d43dc2fcea4cedef4ec6a1115751440224124d1b0354aed12a53965462dcd40e33c03e71c09b2f6bab107493d0524cc9f688e885733623a39e958f896b2c53b9e88b1d05ebc403", 0x47}, {&(0x7f0000000400)="98bc765636e53ce5d6a5260e12399729958248cde2ca5c359f41b4b2484f5991d8c0a7c1605bd958044e8dd05aca04813afa7fdde97594d248602bf6b46c57a4685161e4398a1664ecaef9fb0bdf9a4accdf3963cb87f5d2e127d1a22ed89afcd0970d53c46f509435fffe0fce8fee05a5600b4ca546b1d5", 0x78}, {&(0x7f00000004c0)="f7", 0x1}], 0x8, &(0x7f0000000580)}, 0x3}, 0x10, 0x5) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0x0, 0x0, 0x32, 0xfffe}, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x8000000000000004, 0x0, 0x4}) r3 = socket(0x800000018, 0x1, 0x0) r4 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000340)={0x0, 0x8, 0x8d, 0xfffffffe, "3c00510900000000000015000000000000002000", 0xe422, 0x3f}) ioctl$TIOCSTART(r4, 0x2000746e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r5 = socket(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r5, 0x8040691a, &(0x7f00000001c0)) r6 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r6, 0xc0206923, &(0x7f00000001c0)) r7 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r7, 0xc0206925, &(0x7f00000001c0)) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000000)=0x1, 0x4) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000538, 0x0) truncate(&(0x7f0000000480)='./file0\x00', 0x7) 1.181896299s ago: executing program 3 (id=1696): openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000)) sysctl$vm(&(0x7f0000000180)={0x2, 0x7}, 0x2, &(0x7f00000000c0)="6dc065b9", &(0x7f0000000f00)=0x4, 0x0, 0x0) 1.181660542s ago: executing program 5 (id=1697): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, &(0x7f0000000080)="d99aca906c", 0x7fcc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000001240)="cc60d3d79a1a7122a5fb9de9ea6ca0b30fb2942ef7652736f10f86d45ae419b2ecf7af93d33b3de1f2c56c0d93da7484095d0d543baf7f0161a025c9c02a561f9a76d06f1eaec7d8df99d6c28b10fa891e47d6c3bba690a611889032ac7b3581d7c92d1c546e59764f069048316871794f0615dd4d8bb1057a61fb177be649004fb56a7d46c856a20d73f050bf29d58b803a676cc3761e8a47857f51d90a4465f9c605ab2829d78ea2571900", 0xac}, {&(0x7f0000000080)="b389e5ae", 0x4}, {&(0x7f0000000200)="5f6a8de84b4c523a583f91557c748a02cda4cedf13579996073843ec5cbabaadcec85d62a8a897a78307f3d2c30eea6356105ec8aaba86930f1aed0b3d111d", 0x3f}, {&(0x7f0000000240)="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", 0xf12}], 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x6, 0x0) shutdown(r0, 0x2) 1.173402302s ago: executing program 0 (id=1698): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000003c0), 0x10, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) ioctl$FIOGETOWN(r1, 0x4004667b, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)) 1.173121929s ago: executing program 6 (id=1699): setrlimit(0x6, &(0x7f0000000040)={0x7, 0x50}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x29f57364, 0x2, 0x7, 0x5, "8b02000300090a7848b13e13355f4fa7c2f4e300", 0x1}) syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x9, 0x0, 0x0, 0x1}, {0x48, 0x3, 0xfe, 0x10004}, {0x4006, 0x0, 0x0, 0xfffffffe}]}) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r1 = socket(0x18, 0x3, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x3}, 0xc) r2 = socket$inet6(0x18, 0x2, 0x0) ioctl$VMM_IOC_READREGS(r2, 0xc028756b, &(0x7f0000001780)) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="0000030000000000000000000500313df0ddf68ede0109885c034a08ce90a84853b8ad42", &(0x7f0000000080)=0x24, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x0, &(0x7f0000000300)}) 1.17276939s ago: executing program 7 (id=1700): setreuid(0x0, 0xee01) r0 = semget(0x0, 0x1, 0x281) semop(r0, &(0x7f0000000180)=[{0x2, 0x9, 0x800}], 0x1) msgget(0x1, 0x447) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xa, &(0x7f0000000040)='\t\x00\x00\x00', 0x4) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000000)="0f000000", 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x4000000000000008, 0x0, 0x8000000000000}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getgid() r3 = socket(0x18, 0x2, 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000040), 0x7fffffff, 0x0, 0xfffffffb, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) fcntl$dupfd(r2, 0xa, r2) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x5, &(0x7f0000000080)=[{0x54, 0x1, 0x1}, {0x35, 0x0, 0x2, 0x1}, {0x4, 0x1}, {0x0, 0xd0, 0x9, 0x4}, {0x6, 0x0, 0xc3, 0x801}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="00000300000000000000000080b5313df0dd037ead6c15269e60270b25526e96e1110d1cca0040f5", &(0x7f0000000080)=0x28, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x20, 0x0}) socket(0x18, 0x2, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[]) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 970.559132ms ago: executing program 4 (id=1701): setrlimit(0x8, &(0x7f0000000400)={0x7, 0x54}) r0 = syz_open_pts() r1 = kqueue() dup(r1) kqueue() r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0xffffffff}, {0x2004}, {0x5858, 0x0, 0x0, 0x40803}]}) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000000c0)={0x0, r4}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) setrlimit(0x2, &(0x7f0000000040)={0x60000000, 0x60000000}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x5, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) close(r0) r5 = syz_open_pts() ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000500)=0x7) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "00df00003f00000000000000000000006d2b00"}) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket(0x11, 0x3, 0x0) r6 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ftruncate(r6, 0x20008002) r7 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x40) preadv(r7, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x1, 0x0) r8 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) ftruncate(r8, 0x80002) 750.576409ms ago: executing program 4 (id=1702): r0 = socket(0x2, 0x4001, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) socket(0x1, 0x8000, 0xfd) shutdown(r1, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x8, &(0x7f0000000200)=[{0x0, 0x0, 0xfc, 0x4}, {0x3}, {0x6, 0x0, 0x0, 0x101}, {0x3, 0x7, 0xf, 0x64f0}, {0x8, 0x4, 0xf8, 0x5}, {0x401, 0xf, 0x2, 0x200}, {0x2, 0xff, 0xad, 0x3}, {0x0, 0x3, 0x5}]}) syz_open_pts() r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x10000, 0x80) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r4}}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) r5 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r5) r6 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r6, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x9810, 0xffffffffffffffff, 0x0) sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = semget(0x2, 0x4, 0x200) semop(r7, &(0x7f0000000180)=[{0x1, 0x400, 0x1000}], 0x1) semop(0x0, 0x0, 0x0) semget(0x0, 0x1, 0x281) semctl$SETVAL(r7, 0x3, 0x8, 0x0) socket(0x18, 0x4000, 0x2) 749.991621ms ago: executing program 3 (id=1703): mknod(&(0x7f0000000500)='./file0\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$getown(r1, 0x5) r2 = kqueue() r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./file1\x00', 0x0) unveil(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='r\x00') unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00') unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) ioctl$VNDIOCGET(r3, 0x81946467, &(0x7f0000000180)={'./file0\x00', 0x0, 0x9, 0x3}) kevent(r2, &(0x7f0000000540)=[{{r0}, 0xfffffffffffffff8, 0x19, 0x4, 0x7fffffff, 0x5}, {{r0}, 0xfffffffffffffffe, 0x44, 0x80000000, 0x6, 0x9}, {{}, 0xfffffffffffffff8, 0x32, 0x2, 0xed, 0x2}, {{}, 0xffffffffffffffff, 0x2, 0x40, 0xfff, 0x10000}], 0x724, 0x0, 0xd1c, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x4) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="8b4f69c83b010100ffffffff86dd61b91d3a00102c03fe8000000000000000000000000000bb4079e811670a1ec2952a4234926cce0733000003000000002b00087968000000"]) sysctl$net_inet_ip(&(0x7f0000000100)={0x4, 0x2, 0x0, 0x11}, 0x4, 0x0, 0x0, 0x0, 0x0) close(r2) 749.865523ms ago: executing program 0 (id=1704): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000000000", 0xc, 0x400, 0x0, 0x0) (async) r0 = socket(0x11, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async) mquery(&(0x7f000074e000/0x2000)=nil, 0x2000, 0x2, 0x10, r0, 0x10000) (async) r1 = syz_open_pts() fcntl$lock(r1, 0x7, 0x0) (async) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x36}, 0x4, 0x0, 0x0, &(0x7f00000002c0), 0x0) 380.62605ms ago: executing program 6 (id=1705): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0, 0x2}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="b886b4e47f", 0xfffffffffffffee7}], 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="69e1629b6174aaaaaaaaaabb86dd60062e0b"]) execve(0x0, 0x0, 0x0) 666.932µs ago: executing program 0 (id=1706): kevent(0xffffffffffffff9c, &(0x7f0000000000)=[{{0xffffffffffffff9c}, 0x0, 0x0, 0x0, 0x7}], 0x0, 0x0, 0x0, 0x0) r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0xe, 0x5, 0x1, 0x1207ff}, {0x8000, 0x40, 0xf, 0x88}, {0x8001, 0x2, 0xc, 0x9}]}) openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x106) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, &(0x7f0000000000)={0x0, 0x80080000000004}, 0xfffffffffffffde1) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1707): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{}, 0x321c}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) r0 = getpid() syz_emit_ethernet(0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa86dd6036ea0700383abc8b58208dde27bbd7c900fe8000000000000000000000000000aaff02009078000000000000030000000000000000ffff00000000fe8000000000000000000000000000aa11000003000000133b5ddaaae921d9ae43166a76581d03280b0900000000000000ed1049245e6b87b17d36d168973c96709d1fb99ab9864d41835313b6a31a8b843dcc1aaedb61d97393bd67fdf57ddbfae03474308365af425c8ab24f81609fc4c546fc0403c2b8f6e422a77b6438380e3778902cb2b1ecf00cdba4bba441343711e6bab8b7e9d44a167bfda5911b8c7e620405ba1405c1c55f203f0d1e1b4df8cabcc57079106291aae11bf9a39870fe4f4386ef12b26a36dae864caea1712e5606afe06b35ce882c12b747e989a8cd5e4fae31df47cb9be8dbc0beccbcd8d1be7a3efc2bdf9535e404734c56716556906b9b3dfd0d5241432309646b5c5fc65a700"/357]) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, r0) r1 = getpgrp() ktrace(0x0, 0x5, 0x40000d00, r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = getpgrp() fcntl$setown(r3, 0x6, r4) ioctl$FIONREAD(r3, 0x4004667f, 0x0) fcntl$setown(r3, 0x6, r4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f0000000300)='./file0\x00', 0x75f493fec6515f78, 0x0) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r5, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$TIOCSETA(r2, 0xcd504406, &(0x7f0000000740)={0xa03, 0x5, 0xfffffff7, 0xffffffff, "9792f20c00005c268db100000900000000000010", 0x2, 0x1000000}) ioctl$FIONREAD(r5, 0x4004667f, &(0x7f0000000180)) sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f00000000c0)="10840081957b3cdb4b4807379920eb1d1bfca92e4ee7774172ef0156fbafd3b85c1e348b34734925aeeb55476d178f5d028b1ca399f77c31bf8dfc431668ee951d5cbc17276ede16f41c5789", 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.12' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error uvn_flush: obj=0xfffffd8068c47e90, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error Ì` OpenBSD/amd64 (ci-openbsd-multicore-8.us-central1-b.c.syzkaller.internal) (tty00) login: pckbd_enable: command error wskbd0: can't attach mux (error=5) uvn_flush: obj=0xfffffd806a66da20, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pckbd_enable: command error wskbd0: can't attach mux (error=5) pckbd_enable: command error pckbd_enable: command error load: 6.82 cmd: getty 76606 [ttyin] 0.00u 0.00s 0% 326k pckbd_enable: command error pckbd_enable: command error wskbd0: can't attach mux (error=5) pckbd_enable: command error uvn_flush: obj=0xfffffd805f59f508, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error panic: uvm_fault_unwire_locked: address not in map Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *126858 18878 0 0x1000 0x4080000 1K syz-executor 350512 20692 0 0x14000 0x200 0 reaper db_enter() at db_enter+0x25 panic(ffffffff830cbcb0) at panic+0x1e5 uvm_fault_unwire_locked(fffffd8068dbae20,20000000,20001000) at uvm_fault_unwire_locked+0x487 uvm_fault_unwire(fffffd8068dbae20,20000000,20001000) at uvm_fault_unwire+0x55 kern_sysctl(ffff8000372812b4,2,20000100,ffff8000372812e8,0,27,cba14b0d5d384be4) at kern_sysctl+0x500 sys_sysctl(ffff8000371e4ce0,ffff800037281420,ffff800037281370) at sys_sysctl+0x425 syscall(ffff800037281420) at syscall+0xbb6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2332dc2bbf0, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault_unwire_locked: address not in map ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff830cbcb0) at panic+0x1e5 uvm_fault_unwire_locked(fffffd8068dbae20,20000000,20001000) at uvm_fault_unwire_locked+0x487 uvm_fault_unwire(fffffd8068dbae20,20000000,20001000) at uvm_fault_unwire+0x55 kern_sysctl(ffff8000372812b4,2,20000100,ffff8000372812e8,0,27,cba14b0d5d384be4) at kern_sysctl+0x500 sys_sysctl(ffff8000371e4ce0,ffff800037281420,ffff800037281370) at sys_sysctl+0x425 syscall(ffff800037281420) at syscall+0xbb6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2332dc2bbf0, count: -8 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff800037280f70 rbx 0xffff800029b7cdbf rdx 0xffff8000012ac280 rcx 0xffff8000371e4ce0 rax 0xffff800029b7bff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x24a7a176069fc9e8 r11 0xc755edbadb29fd83 r12 0xffff800029b7cbc0 r13 0 r14 0 r15 0x1 rip 0xffffffff817ca965 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff800037280f60 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=126858 pid=18878 tcnt=4 stat=onproc flags process=1000 proc=4080000 runpri=32, usrpri=84, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff8000371e7978 scnt=3 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000371e7978,0xffff8000371e4f78 process=0xffff80003725d220 user=0xffff80003727c000, vmspace=0xfffffd8068dbae20 estcpu=34, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 51169 117260 45637 0 4 0x82000 syz-executor 51169 294207 45637 0 3 0x4082000 getblk syz-executor 51169 35752 45637 0 3 0x4082000 inode syz-executor 51169 383314 45637 0 3 0x4002000 suspend syz-executor 18878 324090 89859 0 3 0x3000 suspend syz-executor *18878 126858 89859 0 7 0x4081000 syz-executor 18878 338577 89859 0 2 0x4081000 syz-executor 18878 325311 89859 0 2 0x4081000 syz-executor 79010 229443 71582 0 2 0 syz-executor 79010 137499 71582 0 3 0x4000000 biowait syz-executor 92935 296794 86133 0 3 0x2 biowait syz-executor 76606 93799 1 0 3 0x100083 ttyin getty 48048 378827 0 0 3 0x14200 acct acct 45637 84227 86133 0 3 0x82 nanoslp syz-executor 58771 232777 86133 0 3 0x2 biowait syz-executor 34045 109013 0 0 3 0x14280 nfsidl nfsio 35001 503332 0 0 3 0x14280 nfsidl nfsio 83898 504974 0 0 3 0x14280 nfsidl nfsio 47771 482115 0 0 3 0x14280 nfsidl nfsio 70287 138206 0 0 3 0x14280 nfsidl nfsio 62149 62024 0 0 3 0x14280 nfsidl nfsio 75035 187225 0 0 3 0x14280 nfsidl nfsio 30917 108141 0 0 3 0x14280 nfsidl nfsio 70314 252238 0 0 3 0x14280 nfsidl nfsio 85410 148812 0 0 3 0x14280 nfsidl nfsio 11504 282219 0 0 3 0x14280 nfsidl nfsio 65212 300573 0 0 3 0x14280 nfsidl nfsio 96674 368910 0 0 3 0x14280 nfsidl nfsio 78540 126571 0 0 3 0x14280 nfsidl nfsio 36659 506537 0 0 3 0x14280 nfsidl nfsio 71997 101592 0 0 3 0x14280 nfsidl nfsio 8161 345983 0 0 3 0x14280 nfsidl nfsio 24143 180793 0 0 3 0x14280 nfsidl nfsio 19843 232774 0 0 3 0x14280 nfsidl nfsio 57431 191401 0 0 3 0x14280 nfsidl nfsio 17514 215091 0 0 3 0x14200 bored sosplice 44696 447388 86133 0 3 0x82 nanoslp syz-executor 89859 19034 86133 0 3 0x82 nanoslp syz-executor 71582 435093 86133 0 3 0x82 nanoslp syz-executor 24668 468856 86133 0 3 0x82 wait syz-executor 56086 465733 86133 0 3 0x2 biowait syz-executor 86133 397307 32967 0 3 0x82 kqread syz-executor 32967 277715 14970 0 3 0x10008a sigsusp ksh 14970 519087 61791 0 3 0x98 kqread sshd-session 61791 80155 54391 0 3 0x92 kqread sshd-session 54391 371110 1 0 3 0x88 kqread sshd 21593 185591 89918 74 3 0x1100092 bpf pflogd 89918 192468 1 0 3 0x80 sbwait pflogd 28739 273119 30390 73 3 0x1100090 kqread syslogd 30390 398222 1 0 3 0x100082 sbwait syslogd 62787 61946 1 0 3 0x100080 kqread resolvd 62431 155575 4901 77 3 0x100092 kqread dhcpleased 84001 214331 4901 77 3 0x100092 kqread dhcpleased 4901 204772 1 0 3 0x80 kqread dhcpleased 39815 27766 0 0 3 0x14200 pause smr 34524 243754 0 0 2 0x14200 zerothread 77847 205530 0 0 3 0x14200 aiodoned aiodoned 83891 98078 0 0 3 0x14200 syncer update 94165 215618 0 0 3 0x14200 cleaner cleaner 20692 350512 0 0 7 0x14200 reaper 70385 232272 0 0 3 0x14200 pgdaemon pagedaemon 39185 280523 0 0 3 0x14200 bored viomb 483 41624 0 0 3 0x40014200 acpi0 acpi0 73006 521235 0 0 3 0x40014200 idle1 32546 43268 0 0 3 0x14200 bored softnet3 29613 281040 0 0 3 0x14200 bored softnet2 18930 89963 0 0 3 0x14200 bored softnet1 42764 51787 0 0 2 0x14200 softnet0 6294 414861 0 0 3 0x14200 bored systqmp 49345 305787 0 0 3 0x14200 bored systq 62766 338792 0 0 3 0x14200 tmoslp softclockmp 80134 27380 0 0 3 0x40014200 tmoslp softclock 64054 289638 0 0 3 0x40014200 idle0 1 195527 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 0: exclusive mutex &uvm.fpageqlock r = 0 (0xffffffff83640910) #0 witness_lock+0x5bb #1 mtx_enter_try+0x178 #2 mtx_enter+0x60 #3 uvm_pmr_freepages+0x165 #4 uvm_anfree_list+0x210 #5 amap_wipeout+0x248 #6 uvm_unmap_detach+0x8a #7 uvm_map_teardown+0x354 #8 uvmspace_free+0xcd #9 reaper+0x246 #10 proc_trampoline+0x10 exclusive mutex &uvm.pageqlock r = 0 (0xffffffff836408e0) #0 witness_lock+0x5bb #1 mtx_enter_try+0x178 #2 mtx_enter+0x60 #3 uvm_anfree_list+0xeb #4 amap_wipeout+0x248 #5 uvm_unmap_detach+0x8a #6 uvm_map_teardown+0x354 #7 uvmspace_free+0xcd #8 reaper+0x246 #9 proc_trampoline+0x10 Process 51169 (syz-executor) thread 0xffff8000371e51f0 (294207) Process 18878 (syz-executor) thread 0xffff8000371e4ce0 (126858) Process 79010 (syz-executor) thread 0xffff8000ffff3bf8 (137499) Process 92935 (syz-executor) thread 0xffff8000371e5700 (296794) Process 58771 (syz-executor) thread 0xffff8000ffff22a8 (232777) Process 56086 (syz-executor) thread 0xffff80002a03e018 (465733) Process 20692 (reaper) thread 0xffff800029fd9448 (350512) ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10210 11210K 11530K 166960K 13963 0 pcb 17 15K 16K 166960K 424 0 rtable 175 6K 8K 166960K 644 0 pf 36 18K 273K 166960K 136 0 ifaddr 35 5K 7K 166960K 99 0 ifgroup 55 2K 2K 166960K 168 0 sysctl 4 1K 1K 166960K 9 0 counters 64 36K 37K 166960K 128 0 ioctlops 0 0K 4K 166960K 1688 0 iov 0 0K 24K 166960K 240 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1492 94K 94K 166960K 2966 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 24 0 VM map 2 1K 1K 166960K 2 0 sem 24 1K 1K 166960K 69 0 dirhash 12 2K 2K 166960K 54 0 ACPI 1690 195K 286K 166960K 12468 0 file desc 14 49K 89K 166960K 1883 0 sigio 0 0K 0K 166960K 36 0 proc 72 91K 127K 166960K 795 0 subproc 104 6K 6K 166960K 144 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 522 0 in_multi 60 4K 7K 166960K 189 0 ether_multi 1 0K 0K 166960K 15 0 mrt 2 0K 0K 166960K 8 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 103 466K 466K 166960K 103 0 exec 0 0K 1K 166960K 650 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 240 77K 88K 166960K 19186 0 UVM aobj 42 6K 6K 166960K 44 0 pinsyscall 39 78K 102K 166960K 3069 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 151 0 NDP 12 0K 1K 166960K 70 0 temp 81 6828K 7082K 166960K 81705 0 kqueue 13 20K 30K 166960K 300 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 362 0 358 5 4 1 3 0 8 0 rtentry 112 197 0 120 4 1 3 4 0 8 0 unpcb 144 1340 0 1319 14 13 1 6 0 8 0 syncache 336 11 0 11 4 4 0 1 0 8 0 tcpqe 32 1 0 1 1 1 0 1 0 8 0 tcpcb 808 716 0 708 19 11 8 8 0 8 7 arp 120 39 0 21 1 0 1 1 0 8 0 inpcb 336 2373 0 2357 22 15 7 7 0 8 5 nd6 136 48 0 28 1 0 1 1 0 8 0 pkpcb 40 8 0 8 4 4 0 1 0 8 0 kcovpl 48 11 0 3 1 0 1 1 0 8 0 ppxss 1168 13 0 13 4 4 0 1 0 8 0 pffrag 232 12 0 4 1 0 1 1 0 482 0 pffrnode 88 11 0 4 1 0 1 1 0 8 0 pffrent 40 122 0 114 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 139 0 50 1 0 1 1 0 8 0 pfstkey 128 139 0 50 4 0 4 4 0 8 0 pfstate 376 138 0 50 10 0 10 10 0 8 0 pfrule 1344 22 0 16 2 0 2 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 807 0 502 33 10 23 29 0 8 0 art_table 32 808 0 502 4 1 3 4 0 8 0 art_node 16 195 0 131 1 0 1 1 0 8 0 sysvmsgpl 40 18 0 12 2 1 1 1 0 8 0 semapl 112 59 0 37 1 0 1 1 0 8 0 shmpl 112 41 0 2 2 0 2 2 0 8 0 dirhash 1024 46 0 29 3 0 3 3 0 8 0 dino2pl 256 4764 0 3251 95 0 95 95 0 8 0 ffsino 272 4764 0 3251 104 2 102 102 0 8 0 nchpl 144 7364 0 5669 64 0 64 64 0 8 0 uvmvnodes 80 5822 0 0 119 0 119 119 0 8 0 vnodes 216 5822 0 0 324 0 324 324 0 8 0 namei 1024 25869 0 25865 7 5 2 2 0 8 1 percpumem 16 78 0 32 1 0 1 1 0 8 0 kstatmem 264 88 0 64 3 0 3 3 0 8 0 scsiplug 72 4 0 4 3 2 1 1 0 8 1 scxspl 216 23388 0 23384 12 11 1 8 1 8 0 plimitpl 152 542 0 525 1 0 1 1 0 8 0 sigapl 424 2206 0 2137 9 0 9 9 0 8 0 futexpl 64 24720 0 24720 1 0 1 1 0 8 1 knotepl 120 786 0 0 24 0 24 24 0 8 0 kqueuepl 216 604 0 595 9 8 1 5 0 8 0 pipepl 320 297 0 270 5 2 3 5 0 8 0 fdescpl 496 2165 0 2137 6 1 5 5 0 8 0 filepl 152 14528 0 14263 39 26 13 29 0 8 0 lockfpl 104 645 0 643 2 1 1 2 0 8 0 lockfspl 48 274 0 272 1 0 1 1 0 8 0 sessionpl 144 33 0 24 1 0 1 1 0 8 0 pgrppl 48 83 0 66 1 0 1 1 0 8 0 ucredpl 104 2528 0 2515 1 0 1 1 0 8 0 zombiepl 144 2158 0 2155 5 4 1 1 0 8 0 processpl 1160 2206 0 2137 6 0 6 6 0 8 0 procpl 648 5071 0 4993 8 0 8 8 0 8 0 srpgc 96 11 0 11 2 2 0 1 0 8 0 sosppl 168 15 0 15 7 6 1 1 0 8 1 sockpl 664 4149 0 4109 36 27 9 15 0 8 5 mcl64k 65536 6 0 0 1 0 1 1 0 8 0 mcl16k 16384 11 0 0 2 0 2 2 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 7 0 0 1 0 1 1 0 8 0 mcl4k 4096 147 0 0 19 0 19 19 0 8 0 mcl2k2 2112 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 35 0 0 5 0 5 5 0 8 0 mtagpl 96 49 0 0 2 0 2 2 0 8 0 mbufpl 256 697 0 0 43 0 43 43 0 8 0 bufpl 280 6732 0 558 442 0 442 442 0 8 0 anonpl 24 332225 0 326066 109 41 68 82 0 185 10 amapchunkpl 152 63094 0 62504 51 24 27 35 0 158 0 amappl16 200 8321 0 8222 57 38 19 29 0 8 7 amappl15 192 7 0 6 1 0 1 1 0 8 0 amappl14 184 132 0 120 1 0 1 1 0 8 0 amappl13 176 11 0 11 1 1 0 1 0 8 0 amappl12 168 2866 0 2838 3 1 2 2 0 8 0 amappl11 160 57 0 43 1 0 1 1 0 8 0 amappl10 152 9 0 9 1 1 0 1 0 8 0 amappl9 144 164 0 163 1 0 1 1 0 8 0 amappl8 136 23 0 20 1 0 1 1 0 8 0 amappl7 128 189 0 177 1 0 1 1 0 8 0 amappl6 120 194 0 192 1 0 1 1 0 8 0 amappl5 112 158 0 146 1 0 1 1 0 8 0 amappl4 104 338 0 320 1 0 1 1 0 8 0 amappl3 96 11581 0 11491 3 0 3 3 0 8 0 amappl2 88 2516 0 2434 3 0 3 3 0 8 0 amappl1 80 14673 0 14114 14 0 14 14 0 8 0 amappl 88 18578 0 18401 6 1 5 5 0 92 0 dma8192 8192 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 255 0 255 2 2 0 1 0 8 0 dma64 64 7 0 7 2 2 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 43 0 2 1 0 1 1 0 8 0 uaddrrnd 24 2165 0 2137 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 2165 0 2137 1 0 1 1 0 8 0 vmmpekpl 168 17381 0 17326 3 0 3 3 0 8 0 vmmpepl 168 139356 0 137527 136 36 100 108 0 357 6 vmsppl 448 2164 0 2137 6 2 4 5 0 8 0 rwobjpl 56 44180 0 37295 103 2 101 101 0 8 0 pdppl 4096 4337 0 4274 127 56 71 83 0 8 8 pvpl 32 19702 0 0 159 0 159 159 0 265 0 pmappl 248 2164 0 2137 3 0 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 500 0 112 12 0 12 12 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83472ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83632fd8) at __mp_lock+0x192 reaper(ffff800029fd9448) at reaper+0x24b end trace frame: 0x0, count: 10 ddb{0}> trace x86_ipi_db(ffffffff83472ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83632fd8) at __mp_lock+0x192 reaper(ffff800029fd9448) at reaper+0x24b end trace frame: 0x0, count: -5 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff830cbcb0) at panic+0x1e5 uvm_fault_unwire_locked(fffffd8068dbae20,20000000,20001000) at uvm_fault_unwire_locked+0x487 uvm_fault_unwire(fffffd8068dbae20,20000000,20001000) at uvm_fault_unwire+0x55 kern_sysctl(ffff8000372812b4,2,20000100,ffff8000372812e8,0,27,cba14b0d5d384be4) at kern_sysctl+0x500 sys_sysctl(ffff8000371e4ce0,ffff800037281420,ffff800037281370) at sys_sysctl+0x425 syscall(ffff800037281420) at syscall+0xbb6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2332dc2bbf0, count: 7 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff830cbcb0) at panic+0x1e5 uvm_fault_unwire_locked(fffffd8068dbae20,20000000,20001000) at uvm_fault_unwire_locked+0x487 uvm_fault_unwire(fffffd8068dbae20,20000000,20001000) at uvm_fault_unwire+0x55 kern_sysctl(ffff8000372812b4,2,20000100,ffff8000372812e8,0,27,cba14b0d5d384be4) at kern_sysctl+0x500 sys_sysctl(ffff8000371e4ce0,ffff800037281420,ffff800037281370) at sys_sysctl+0x425 syscall(ffff800037281420) at syscall+0xbb6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2332dc2bbf0, count: -8