last executing test programs: 13.810674014s ago: executing program 7 (id=3361): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f) open(&(0x7f0000001780)='./file0\x00', 0x3c, 0x160) (async) open(&(0x7f0000001780)='./file0\x00', 0x3c, 0x160) socket(0x18, 0x3, 0x50) (async) r0 = socket(0x18, 0x3, 0x50) setsockopt(r0, 0x1000000029, 0x25, &(0x7f0000000000), 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x2, 0x41, 0x8000010000000001}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080)="ae215599fed2fce97f573b9c553a0e622d29cd093849cd4fe42e0f5d2d06a4e744f0713d1fcaa1b8274dffd067d413ef9d2224d3fddc171f73a295b6ed18b3d0588be75e78a1d734e15bfe", 0x0, 0x0, 0xfffffffffffffd37) r2 = socket$inet(0x2, 0x1, 0x0) mknod(&(0x7f0000000140)='./file0/file0\x00', 0x2000, 0x4) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) kqueue() syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x186b, 0x7f, 0x80, 0xb3f6}, {0x9, 0xca, 0xb, 0x6}]}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x186b, 0x7f, 0x80, 0xb3f6}, {0x9, 0xca, 0xb, 0x6}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close(r1) (async) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_extract_tcp_res(&(0x7f0000000200)={0x41424344, 0x41424344}, 0x7f, 0xcf) syz_extract_tcp_res(&(0x7f0000000240), 0x80, 0xfffffff5) (async) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344}, 0x80, 0xfffffff5) syz_emit_ethernet(0x10d, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb81001c0086dd6031e65c00d38101ff02000000000000000000000000000151f15c280dc804f2fee3f52605508d440100094166000000f00c0003000000005dc1712a324c22b42bd19a160be837b200000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000bbfe8000000000000000000000000000bbff0200000000000000000000000000011e000610660000004e204e20", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="d104000490780007050a000000090000a04004021312d25932c7c1b6e70b8697ea9ecd124e8d0000f0e997eb202e0d68e83cd66780d48a76d07ba9b57f28207f9f33c2ead40d10a69706ba7a74e091"]) socket(0x20, 0x2, 0x0) (async) r6 = socket(0x20, 0x2, 0x0) setsockopt$sock_timeval(r6, 0xffff, 0x1005, &(0x7f0000000000)={0xfffffffffffffffb, 0x9}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/147, 0x93}], 0x1, 0x0}, 0xd}, 0x10, 0x2840, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/147, 0x93}], 0x1, 0x0}, 0xd}, 0x10, 0x2840, 0x0) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000600)={&(0x7f0000000540)='./file0/file0\x00', 0x4, &(0x7f00000005c0)='./file0/file0/file0\x00', 0x14}) r7 = socket(0x18, 0x2, 0x0) getsockopt(r7, 0x29, 0x31, 0x0, 0x0) (async) getsockopt(r7, 0x29, 0x31, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x40) 11.478026197s ago: executing program 7 (id=3361): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f) open(&(0x7f0000001780)='./file0\x00', 0x3c, 0x160) (async) open(&(0x7f0000001780)='./file0\x00', 0x3c, 0x160) socket(0x18, 0x3, 0x50) (async) r0 = socket(0x18, 0x3, 0x50) setsockopt(r0, 0x1000000029, 0x25, &(0x7f0000000000), 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x2, 0x41, 0x8000010000000001}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080)="ae215599fed2fce97f573b9c553a0e622d29cd093849cd4fe42e0f5d2d06a4e744f0713d1fcaa1b8274dffd067d413ef9d2224d3fddc171f73a295b6ed18b3d0588be75e78a1d734e15bfe", 0x0, 0x0, 0xfffffffffffffd37) r2 = socket$inet(0x2, 0x1, 0x0) mknod(&(0x7f0000000140)='./file0/file0\x00', 0x2000, 0x4) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) kqueue() syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x186b, 0x7f, 0x80, 0xb3f6}, {0x9, 0xca, 0xb, 0x6}]}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x186b, 0x7f, 0x80, 0xb3f6}, {0x9, 0xca, 0xb, 0x6}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close(r1) (async) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_extract_tcp_res(&(0x7f0000000200)={0x41424344, 0x41424344}, 0x7f, 0xcf) syz_extract_tcp_res(&(0x7f0000000240), 0x80, 0xfffffff5) (async) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344}, 0x80, 0xfffffff5) syz_emit_ethernet(0x10d, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb81001c0086dd6031e65c00d38101ff02000000000000000000000000000151f15c280dc804f2fee3f52605508d440100094166000000f00c0003000000005dc1712a324c22b42bd19a160be837b200000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000bbfe8000000000000000000000000000bbff0200000000000000000000000000011e000610660000004e204e20", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="d104000490780007050a000000090000a04004021312d25932c7c1b6e70b8697ea9ecd124e8d0000f0e997eb202e0d68e83cd66780d48a76d07ba9b57f28207f9f33c2ead40d10a69706ba7a74e091"]) socket(0x20, 0x2, 0x0) (async) r6 = socket(0x20, 0x2, 0x0) setsockopt$sock_timeval(r6, 0xffff, 0x1005, &(0x7f0000000000)={0xfffffffffffffffb, 0x9}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/147, 0x93}], 0x1, 0x0}, 0xd}, 0x10, 0x2840, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/147, 0x93}], 0x1, 0x0}, 0xd}, 0x10, 0x2840, 0x0) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000600)={&(0x7f0000000540)='./file0/file0\x00', 0x4, &(0x7f00000005c0)='./file0/file0/file0\x00', 0x14}) r7 = socket(0x18, 0x2, 0x0) getsockopt(r7, 0x29, 0x31, 0x0, 0x0) (async) getsockopt(r7, 0x29, 0x31, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x40) 8.962867727s ago: executing program 7 (id=3361): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f) open(&(0x7f0000001780)='./file0\x00', 0x3c, 0x160) (async) open(&(0x7f0000001780)='./file0\x00', 0x3c, 0x160) socket(0x18, 0x3, 0x50) (async) r0 = socket(0x18, 0x3, 0x50) setsockopt(r0, 0x1000000029, 0x25, &(0x7f0000000000), 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x2, 0x41, 0x8000010000000001}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080)="ae215599fed2fce97f573b9c553a0e622d29cd093849cd4fe42e0f5d2d06a4e744f0713d1fcaa1b8274dffd067d413ef9d2224d3fddc171f73a295b6ed18b3d0588be75e78a1d734e15bfe", 0x0, 0x0, 0xfffffffffffffd37) r2 = socket$inet(0x2, 0x1, 0x0) mknod(&(0x7f0000000140)='./file0/file0\x00', 0x2000, 0x4) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) kqueue() syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x186b, 0x7f, 0x80, 0xb3f6}, {0x9, 0xca, 0xb, 0x6}]}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x186b, 0x7f, 0x80, 0xb3f6}, {0x9, 0xca, 0xb, 0x6}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close(r1) (async) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_extract_tcp_res(&(0x7f0000000200)={0x41424344, 0x41424344}, 0x7f, 0xcf) syz_extract_tcp_res(&(0x7f0000000240), 0x80, 0xfffffff5) (async) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344}, 0x80, 0xfffffff5) syz_emit_ethernet(0x10d, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb81001c0086dd6031e65c00d38101ff02000000000000000000000000000151f15c280dc804f2fee3f52605508d440100094166000000f00c0003000000005dc1712a324c22b42bd19a160be837b200000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000bbfe8000000000000000000000000000bbff0200000000000000000000000000011e000610660000004e204e20", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="d104000490780007050a000000090000a04004021312d25932c7c1b6e70b8697ea9ecd124e8d0000f0e997eb202e0d68e83cd66780d48a76d07ba9b57f28207f9f33c2ead40d10a69706ba7a74e091"]) socket(0x20, 0x2, 0x0) (async) r6 = socket(0x20, 0x2, 0x0) setsockopt$sock_timeval(r6, 0xffff, 0x1005, &(0x7f0000000000)={0xfffffffffffffffb, 0x9}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/147, 0x93}], 0x1, 0x0}, 0xd}, 0x10, 0x2840, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/147, 0x93}], 0x1, 0x0}, 0xd}, 0x10, 0x2840, 0x0) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000600)={&(0x7f0000000540)='./file0/file0\x00', 0x4, &(0x7f00000005c0)='./file0/file0/file0\x00', 0x14}) r7 = socket(0x18, 0x2, 0x0) getsockopt(r7, 0x29, 0x31, 0x0, 0x0) (async) getsockopt(r7, 0x29, 0x31, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x40) 6.814559075s ago: executing program 3 (id=3599): r0 = syz_open_pts() r1 = syz_open_pts() ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000740)=0x2) (async, rerun: 64) close(r0) (async, rerun: 64) r2 = socket$inet(0x2, 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fcntl$lock(r3, 0x8, &(0x7f00000003c0)={0x3, 0x0, 0x3f, 0x8000000200000002}) (async) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000080)="eaff040001", 0x2) (async) shmget(0x0, 0x4000, 0x602, &(0x7f0000ff9000/0x4000)=nil) (async) shmget(0x0, 0x2000, 0x64, &(0x7f0000ffc000/0x2000)=nil) (async, rerun: 64) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) (rerun: 64) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) (async) sysctl$kern(&(0x7f0000000140)={0x1, 0x9}, 0x2, 0x0, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TIOCCONS(0xffffffffffffffff, 0x80047462, &(0x7f00000002c0)=0x800) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, &(0x7f0000000840), &(0x7f0000000240), 0x0, 0x0) setrlimit(0x8, &(0x7f00000000c0)={0xe, 0x51}) (async) r4 = syz_open_pts() close(r4) connect$unix(0xffffffffffffffff, &(0x7f00000007c0)=@abs={0x1, 0x0, 0x1}, 0x8) (async) socket(0x18, 0x1, 0x0) (async, rerun: 64) r5 = socket(0x11, 0x3, 0x0) (rerun: 64) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1, 0x0}, 0x42) (async) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) ioctl$TIOCGFLAGS(r3, 0x4004745d, &(0x7f0000000340)) r7 = getpid() ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x928, r7) (async, rerun: 32) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x3, 0x2000000008}, {0x2, 0x564}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r6, 0x0) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x4, 0x80000000000001}) 6.813401515s ago: executing program 3 (id=3600): sysctl$kern(&(0x7f00000000c0)={0x1, 0x5a}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x48, 0x0, 0x37) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='r\x00') open$dir(&(0x7f00000004c0)='./file0/file0/..\x00', 0x100, 0xc2) (async) open$dir(&(0x7f00000004c0)='./file0/file0/..\x00', 0x100, 0xc2) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x80000001, [{0x2}, {0x0, 0xeffffffe}, {}, {0x0, 0x56}, {0x0, 0x9}, {0x0, 0x8}, {}, {0x0, 0xc8}, {0x5, 0x2}, {}, {0x3}, {0x3}, {0x3, 0x1}, {}, {}, {0x0, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {}, {0x0, 0x100}, {0x1, 0xfffffffc}, {0x406e0f656ed361f, 0xfffffffb}, {}, {0x0, 0xfffffffc}, {0x3}, {0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x1}]}) openat$vmm(0xffffffffffffff9c, &(0x7f0000000240), 0x4f3, 0x0) (async) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000240), 0x4f3, 0x0) ftruncate(r0, 0xffff) sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0xa, 0x4}, 0x7, &(0x7f0000000040)="fe747e421f032be37006e10e39246c2df91905f823d85bb54ae3d4a91f541c46502e59a8d054fe7d6a93c0bfec6382b43ee9d7b9df2f9943fc2c25b6bbd6358b2fd20a7cbc9a40301525e116", 0x0, 0x0, 0xfffffffffffffff4) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd60090000002006fffe0000000000000037f87ccdc0c4a92cff0000000001ea443d080000000001004e204e22", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB='[Y']) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffff0000}) r1 = socket(0x18, 0x2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$VT_WAITACTIVE(r2, 0x20007606, &(0x7f0000000200)=0x84) (async) ioctl$VT_WAITACTIVE(r2, 0x20007606, &(0x7f0000000200)=0x84) 6.683341877s ago: executing program 3 (id=3610): mknod(&(0x7f00000002c0)='./bus\x00', 0x1000, 0xf05) semop(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r1, 0x400c570a, &(0x7f00000001c0)) kevent(0xffffffffffffffff, &(0x7f0000000200)=[{{r0}, 0xfffffffffffffffe, 0x29, 0x20000000, 0x2, 0xc}, {{}, 0xfffffffffffffffe, 0x10a, 0x10, 0x4, 0x8000000000008000}], 0x8, 0x0, 0x15, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 6.491365964s ago: executing program 3 (id=3613): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0) sysctl$kern(&(0x7f00000005c0)={0x1, 0x3d}, 0x2, 0x0, 0x0, &(0x7f0000000340)="05000000", 0x4) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ftruncate(r0, 0x40000000007) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x80000001, [{0x2}, {0x0, 0xeffffffe}, {}, {0x0, 0x56}, {0x0, 0x9}, {0x0, 0x8}, {}, {0x0, 0xc8}, {0x5, 0x2}, {}, {0x3}, {0x3}, {0x3}, {}, {}, {0x0, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {}, {}, {0x1, 0xfffffffc}, {0x406e0f656ed361f}, {}, {0x0, 0xfffffffc}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}]}) sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x4, &(0x7f0000000180)=[{0x1, 0x9, 0x3, 0x10001}, {0x401, 0x35, 0x2, 0x6}, {0x6, 0x8, 0x10, 0x1}, {0x2963, 0xff, 0xfc, 0x9}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x5, 0x5, 0xfffffffd, 0xd, "321308ccc8c3f8adeb1a9ba7d801b355eef93a98", 0x1be6, 0x8}) writev(r2, &(0x7f00000003c0)=[{&(0x7f00000001c0)="7bbd4264006261c46de3840b4e504536fb8af18d3ecbeb77161c6d07412ad7399b0ddef5dc18218cd1f017ee505c1238aa861ccd44cd548d6a1782dc7fb5eb9153847b85c00ac00701de47310968", 0x4e}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setrlimit(0x3, &(0x7f0000000240)={0x100000, 0x5}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) mprotect(&(0x7f00007b5000/0x2000)=nil, 0x2000, 0x2) ioctl$VMM_IOC_READREGS(r3, 0xc2485607, &(0x7f0000000600)) poll(&(0x7f0000000400)=[{0xffffffffffffffff, 0xa0}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x8}], 0x200000000000007f, 0xa) truncate(&(0x7f00000000c0)='./file0\x00', 0x100000000) 6.489206346s ago: executing program 7 (id=3361): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f) open(&(0x7f0000001780)='./file0\x00', 0x3c, 0x160) (async) open(&(0x7f0000001780)='./file0\x00', 0x3c, 0x160) socket(0x18, 0x3, 0x50) (async) r0 = socket(0x18, 0x3, 0x50) setsockopt(r0, 0x1000000029, 0x25, &(0x7f0000000000), 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x2, 0x41, 0x8000010000000001}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080)="ae215599fed2fce97f573b9c553a0e622d29cd093849cd4fe42e0f5d2d06a4e744f0713d1fcaa1b8274dffd067d413ef9d2224d3fddc171f73a295b6ed18b3d0588be75e78a1d734e15bfe", 0x0, 0x0, 0xfffffffffffffd37) r2 = socket$inet(0x2, 0x1, 0x0) mknod(&(0x7f0000000140)='./file0/file0\x00', 0x2000, 0x4) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) kqueue() syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x186b, 0x7f, 0x80, 0xb3f6}, {0x9, 0xca, 0xb, 0x6}]}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x186b, 0x7f, 0x80, 0xb3f6}, {0x9, 0xca, 0xb, 0x6}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close(r1) (async) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_extract_tcp_res(&(0x7f0000000200)={0x41424344, 0x41424344}, 0x7f, 0xcf) syz_extract_tcp_res(&(0x7f0000000240), 0x80, 0xfffffff5) (async) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344}, 0x80, 0xfffffff5) syz_emit_ethernet(0x10d, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb81001c0086dd6031e65c00d38101ff02000000000000000000000000000151f15c280dc804f2fee3f52605508d440100094166000000f00c0003000000005dc1712a324c22b42bd19a160be837b200000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000bbfe8000000000000000000000000000bbff0200000000000000000000000000011e000610660000004e204e20", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="d104000490780007050a000000090000a04004021312d25932c7c1b6e70b8697ea9ecd124e8d0000f0e997eb202e0d68e83cd66780d48a76d07ba9b57f28207f9f33c2ead40d10a69706ba7a74e091"]) socket(0x20, 0x2, 0x0) (async) r6 = socket(0x20, 0x2, 0x0) setsockopt$sock_timeval(r6, 0xffff, 0x1005, &(0x7f0000000000)={0xfffffffffffffffb, 0x9}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/147, 0x93}], 0x1, 0x0}, 0xd}, 0x10, 0x2840, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/147, 0x93}], 0x1, 0x0}, 0xd}, 0x10, 0x2840, 0x0) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000600)={&(0x7f0000000540)='./file0/file0\x00', 0x4, &(0x7f00000005c0)='./file0/file0/file0\x00', 0x14}) r7 = socket(0x18, 0x2, 0x0) getsockopt(r7, 0x29, 0x31, 0x0, 0x0) (async) getsockopt(r7, 0x29, 0x31, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x40) 4.158928586s ago: executing program 7 (id=3361): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f) open(&(0x7f0000001780)='./file0\x00', 0x3c, 0x160) (async) open(&(0x7f0000001780)='./file0\x00', 0x3c, 0x160) socket(0x18, 0x3, 0x50) (async) r0 = socket(0x18, 0x3, 0x50) setsockopt(r0, 0x1000000029, 0x25, &(0x7f0000000000), 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x2, 0x41, 0x8000010000000001}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080)="ae215599fed2fce97f573b9c553a0e622d29cd093849cd4fe42e0f5d2d06a4e744f0713d1fcaa1b8274dffd067d413ef9d2224d3fddc171f73a295b6ed18b3d0588be75e78a1d734e15bfe", 0x0, 0x0, 0xfffffffffffffd37) r2 = socket$inet(0x2, 0x1, 0x0) mknod(&(0x7f0000000140)='./file0/file0\x00', 0x2000, 0x4) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) kqueue() syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x186b, 0x7f, 0x80, 0xb3f6}, {0x9, 0xca, 0xb, 0x6}]}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x186b, 0x7f, 0x80, 0xb3f6}, {0x9, 0xca, 0xb, 0x6}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close(r1) (async) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_extract_tcp_res(&(0x7f0000000200)={0x41424344, 0x41424344}, 0x7f, 0xcf) syz_extract_tcp_res(&(0x7f0000000240), 0x80, 0xfffffff5) (async) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344}, 0x80, 0xfffffff5) syz_emit_ethernet(0x10d, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb81001c0086dd6031e65c00d38101ff02000000000000000000000000000151f15c280dc804f2fee3f52605508d440100094166000000f00c0003000000005dc1712a324c22b42bd19a160be837b200000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000bbfe8000000000000000000000000000bbff0200000000000000000000000000011e000610660000004e204e20", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="d104000490780007050a000000090000a04004021312d25932c7c1b6e70b8697ea9ecd124e8d0000f0e997eb202e0d68e83cd66780d48a76d07ba9b57f28207f9f33c2ead40d10a69706ba7a74e091"]) socket(0x20, 0x2, 0x0) (async) r6 = socket(0x20, 0x2, 0x0) setsockopt$sock_timeval(r6, 0xffff, 0x1005, &(0x7f0000000000)={0xfffffffffffffffb, 0x9}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/147, 0x93}], 0x1, 0x0}, 0xd}, 0x10, 0x2840, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/147, 0x93}], 0x1, 0x0}, 0xd}, 0x10, 0x2840, 0x0) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000600)={&(0x7f0000000540)='./file0/file0\x00', 0x4, &(0x7f00000005c0)='./file0/file0/file0\x00', 0x14}) r7 = socket(0x18, 0x2, 0x0) getsockopt(r7, 0x29, 0x31, 0x0, 0x0) (async) getsockopt(r7, 0x29, 0x31, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x40) 2.698917917s ago: executing program 6 (id=3649): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x18, 0x0) chflagsat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r1}) preadv(r1, &(0x7f0000000b80)=[{0x0}], 0x1, 0xfffffffffffffffe) socket(0x1, 0x2, 0x3) 2.616397456s ago: executing program 6 (id=3651): r0 = semget$private(0x0, 0x2, 0x3f0) semget$private(0x0, 0x2, 0x4) (async) r1 = getuid() r2 = getuid() (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async, rerun: 32) syz_open_pts() (async, rerun: 32) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802) r4 = open(&(0x7f0000000100)='./file0\x00', 0x10, 0x8) ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000080)=0x7) close(r4) (async) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000040)='./file0\x00', r2, r5) r6 = getuid() (async) r7 = getgid() (async) r8 = semget(0x1, 0x4, 0x404) semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000000000)={{0x0, r1, r7, r6, r7, 0x100, 0x2}, 0x6, 0x0, 0x4}) (async, rerun: 64) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000001f80)=[0x6]) (rerun: 64) 2.395552907s ago: executing program 6 (id=3663): r0 = openat$pf(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x8) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00') setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r1 = syz_open_pts() close(r1) syz_open_pts() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x200}, 0x0, 0x0, 0xfffffffffffffffb}) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x200}, 0x0, 0x0, 0xfffffffffffffffb}) socket(0x18, 0x3, 0x0) (async) r2 = socket(0x18, 0x3, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x870c3, 0x7, 0x7, 0x102, 0x80000001, 0x33a, 0x210002, 0x10, [{0xfffffffc, 0x7, 0x4, 0x71004}, {0x5, 0x6, 0x7fff, 0xfffffff8}, {0x8, 0xf86, 0x0, 0xaf9}, {0x1, 0x800, 0x7}, {0xa32, 0x1831ee74, 0xd, 0x4}, {0x2, 0x6, 0x3, 0x99}, {0x8, 0x1, 0x0, 0x6d}, {0xa, 0x803, 0x6, 0x8}, {0x2, 0x81, 0x40, 0x10000008}, {0x6, 0x8001, 0xc7, 0x88}, {0x5, 0x10001, 0x9, 0x5}, {0x7ff, 0x9, 0x8, 0x2}, {0xb8c, 0x4, 0x2, 0x6}, {0x29a71717, 0x7, 0xffe, 0x6}, {0x7, 0x7, 0x2006, 0x400}, {0x0, 0x1, 0x4, 0x10000}]}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r2, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x8) (async) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x8) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000009c0)="cff5c05664db486cda974a82388ef359025250129bdb3b8c172b8359eb32d47209b2a02c3b55a29b75b43b0b03", 0x2d}], 0x1) (async) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000009c0)="cff5c05664db486cda974a82388ef359025250129bdb3b8c172b8359eb32d47209b2a02c3b55a29b75b43b0b03", 0x2d}], 0x1) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='r\x00') (async) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='r\x00') open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) write(r0, &(0x7f0000000000), 0x0) (async) write(r0, &(0x7f0000000000), 0x0) dup(r0) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000000)={'./file0\x00', 0xd0, 0x1, 0x4, 0x1, 0x8, 0x4, 0xe622, 0x0, 0x0, 0x4000000, 0x18}) (async) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000000)={'./file0\x00', 0xd0, 0x1, 0x4, 0x1, 0x8, 0x4, 0xe622, 0x0, 0x0, 0x4000000, 0x18}) 2.250939219s ago: executing program 6 (id=3676): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x25, 0xfd, 0x6}, {0x40, 0x10, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x3}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="26aff0", 0x3}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000001d40)=[{&(0x7f0000000180)="a77a97e67bcaa2d936c6c8739bc4af04150f5c07b47822fbd3f081ca67b0b0c27f484792c3e94b6d30bb9d321adf8ff732b6b7e9522c97cf8020160000000000000005", 0x43}], 0x1) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r1 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) fsync(r1) close(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0xfffffffe) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60ad000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"]) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000200)=ANY=[@ANYBLOB="e727dc071f0000000000000086dd60b907a6001c2c03cb697a653e336f000000500000000000ff0200000000000000000000000000013200002e000000004e204e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5102001f90780000c16aadca742328d5af57668e0b2ea8f61a63e79ac6da64b41d3c67fe499ce427a9fd3a06d1abc2ba6b2845789491e17a2f740ac61db1d881e4cf4799bd2c29a007cbdb80c131ef20d51a400cfcee883e34e012f90b8f08fe44357309f985798fbc87f7ec071e56157ccf83dd30129848a3f9b335c5b5b9390e2c97"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) recvfrom$inet6(r2, &(0x7f0000000300)=""/4096, 0x1000, 0x1041, &(0x7f0000001300)={0x18, 0x1, 0x5, 0x3}, 0xc) ioctl$LIOCSFD(0xffffffffffffffff, 0x80046c7f, &(0x7f0000000140)=r2) setsockopt(r2, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f00000000c0)="b1000503000004000500000007000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be3816499104000000882b297be1aa0500000051e2f0ad09000000000000009b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba3500000008e371a3f8343712051eeab71d1889e000"/177, 0xb1, 0x0, 0x0, 0xffffff61) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) chdir(&(0x7f0000000080)='./file0\x00') syz_emit_ethernet(0x50, &(0x7f0000000080)=ANY=[]) 2.161941703s ago: executing program 2 (id=3680): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x287e) mkdir(&(0x7f0000000100)='./file0\x00', 0x49) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0/file0\x00') (async) setgid(0xffffffffffffffff) (async) setgroups(0x0, 0x0) (async) setuid(0xffffffffffffffff) (async) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='r\x00') (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0xee4bce5bb233ab95) close(r0) 2.076661891s ago: executing program 7 (id=3361): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f) open(&(0x7f0000001780)='./file0\x00', 0x3c, 0x160) (async) open(&(0x7f0000001780)='./file0\x00', 0x3c, 0x160) socket(0x18, 0x3, 0x50) (async) r0 = socket(0x18, 0x3, 0x50) setsockopt(r0, 0x1000000029, 0x25, &(0x7f0000000000), 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x2, 0x41, 0x8000010000000001}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080)="ae215599fed2fce97f573b9c553a0e622d29cd093849cd4fe42e0f5d2d06a4e744f0713d1fcaa1b8274dffd067d413ef9d2224d3fddc171f73a295b6ed18b3d0588be75e78a1d734e15bfe", 0x0, 0x0, 0xfffffffffffffd37) r2 = socket$inet(0x2, 0x1, 0x0) mknod(&(0x7f0000000140)='./file0/file0\x00', 0x2000, 0x4) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) kqueue() syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x186b, 0x7f, 0x80, 0xb3f6}, {0x9, 0xca, 0xb, 0x6}]}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x186b, 0x7f, 0x80, 0xb3f6}, {0x9, 0xca, 0xb, 0x6}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close(r1) (async) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_extract_tcp_res(&(0x7f0000000200)={0x41424344, 0x41424344}, 0x7f, 0xcf) syz_extract_tcp_res(&(0x7f0000000240), 0x80, 0xfffffff5) (async) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344}, 0x80, 0xfffffff5) syz_emit_ethernet(0x10d, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb81001c0086dd6031e65c00d38101ff02000000000000000000000000000151f15c280dc804f2fee3f52605508d440100094166000000f00c0003000000005dc1712a324c22b42bd19a160be837b200000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000bbfe8000000000000000000000000000bbff0200000000000000000000000000011e000610660000004e204e20", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="d104000490780007050a000000090000a04004021312d25932c7c1b6e70b8697ea9ecd124e8d0000f0e997eb202e0d68e83cd66780d48a76d07ba9b57f28207f9f33c2ead40d10a69706ba7a74e091"]) socket(0x20, 0x2, 0x0) (async) r6 = socket(0x20, 0x2, 0x0) setsockopt$sock_timeval(r6, 0xffff, 0x1005, &(0x7f0000000000)={0xfffffffffffffffb, 0x9}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/147, 0x93}], 0x1, 0x0}, 0xd}, 0x10, 0x2840, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/147, 0x93}], 0x1, 0x0}, 0xd}, 0x10, 0x2840, 0x0) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000600)={&(0x7f0000000540)='./file0/file0\x00', 0x4, &(0x7f00000005c0)='./file0/file0/file0\x00', 0x14}) r7 = socket(0x18, 0x2, 0x0) getsockopt(r7, 0x29, 0x31, 0x0, 0x0) (async) getsockopt(r7, 0x29, 0x31, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x40) 2.076533547s ago: executing program 2 (id=3683): sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$hw(&(0x7f0000000040)={0x7, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0x35}, 0x2, &(0x7f0000001540), 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) 2.075751424s ago: executing program 0 (id=3685): r0 = socket(0x2, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='?', 0x1) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r0, &(0x7f0000000040)=@in6={0x18, 0x2, 0xa, 0xff}, 0xc) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000300)={0x0, 0x1}, 0x10, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='x\x00') open(&(0x7f0000000440)='./file0\x00', 0x1, 0x2) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000300)=0x81, 0x4) connect$unix(r1, &(0x7f0000000000), 0x10) write(r1, 0x0, 0x0) 1.861936561s ago: executing program 4 (id=3686): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000140)=0x7) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0084463, &(0x7f00000000c0)={0x742, 0xffffffff, 0xd, 0x3, "c9f75500000000003b0bca8f00075a6b47c0d100", 0xfffffffd, 0xe07}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) read(r1, &(0x7f0000000000)=""/50, 0x32) 1.861323004s ago: executing program 2 (id=3687): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r0 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd606d9efa0008670000000000010000ff8bb6959b0000000000000000000000000000ffff00"]) (async) ioctl$FIONREAD(r0, 0x80206910, &(0x7f00000001c0)) 346.147605ms ago: executing program 0 (id=3689): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000080)=0x5) bind$unix(r1, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001c40)={&(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x7}, 0x1, 0x2) (async) sendmmsg(r0, &(0x7f0000000440)={&(0x7f0000000400)={&(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f0000000380)=[{&(0x7f0000000100)="1ae2d89b576cdef6e4844cb5d171", 0xe}, {&(0x7f0000000180)="3c1d5d3568a5b3872f3fb89fa91d457d25ad7751f54a355d63b59f6632cf886499178ef3fc13debd9ad2a5760ef7d746e9669cb52e4021dd7dabaa4c067557a52953d6e55faad2e724b52f6fce1cf85c88d05f15aa76fc78e78edab1859a4b483e658438856f23559229149532fcd11cc5545246c915fc7cea011fc761a2789fb33d58e9c2bb6109b4d077d29e98acceb8dad36a536adee35228ffbae716d50fc605435699f2cd57cc1ce1a3b556b5a6967b4eb81f4b85bc05d8c7d899931f6f5d918154f8417e12d89dd1e574a180adcb5eca9e0846bc47affc43f3e21119faf85e8c5e1b4b", 0xe6}, {&(0x7f0000000280)="8b0f72b3c6382d044df7392718f3ec258739f6da1104466b150539b9bffa5f9821946c75134a2ead0de1845cd30b3719cde69490514fba78107c583c376fac93e00225d2ed7cffa903bd690ba628cda98d6d41344e0c836d889e274dac9a75ecc2b3359edda4beacc86cd3b0a7d5b4e851df032dfa87751ca957c177773cb4d7cdf2d32ae95fd9fed82b58ba53c2050e90098427e521878fab28e64abf1d54df366bddcc74f7d0064f5d234b15a9102fc80667efc9eb88bc648e202f21458855472fd15418e494d6f6974c11f27f63c5", 0xd0}], 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="3000000000000000010000000100008aeda29fc1bebcc2eef5e442fead80bfa52ba03435000000007c812565db5c4edeb1728841bf574a20b40660b584d5817f033ec3bacae4725224192124dd35bd1a07002f373b72009c72724f8d96cbc15876c400e6c8a7ac6ec57643d967d04d2916256c2bed430000a0f189207278ad2393fa4c0bacd4a069773325a2b24df9f18dcb286c98105dd7b306b37bfe2b0aed2b"], 0x30}, 0xfffffffe}, 0x10, 0x405) (async, rerun: 32) r3 = syz_open_pts() (rerun: 32) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00') (async) ioctl$TIOCCONS(r3, 0x80047462, &(0x7f0000000080)=0x6) (async) connect$unix(r1, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) 345.448202ms ago: executing program 2 (id=3691): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe0}, 0x2, 0x7}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000001c0)={0x7, &(0x7f0000000140)=[{0x3, 0xd9, 0x5, 0x4}, {0x742d, 0x2, 0x79, 0x81}, {0x80, 0x8, 0xb, 0xfffffffb}, {0x36f, 0x1, 0xec, 0x8}, {0x6, 0xc7, 0x4, 0x1ff}, {0x8, 0x1, 0xa6, 0x8}, {0xd, 0x40, 0x1f, 0xc38}]}) r1 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) 344.367369ms ago: executing program 3 (id=3692): r0 = kqueue() fcntl$setstatus(r0, 0x4, 0x8) 344.100761ms ago: executing program 4 (id=3693): r0 = socket(0x11, 0x3, 0x0) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80085761, &(0x7f0000000040)={0x2, 0xffffffff}) socket$inet(0x2, 0x2, 0x7) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f00000002c0)={0x8, 0x3}, 0x8) r2 = accept$unix(r0, 0x0, &(0x7f0000000000)) chroot(&(0x7f0000000040)='./file0\x00') sysctl$kern(&(0x7f00000000c0)={0x1, 0x4d}, 0x2, &(0x7f0000000100)="969f47a5797ce3082dba913601727ed2a18a1652c55b8199089655f0a3c28b9c2bb100e58cb26decb3bda14feb0a33a4d33fde8e53374f5329d67cb03f7f2e49dfac41b33325484b96af5f3570a8cfd0cde0030ae64cd02ea1c602a644afc2c1ef8592f6b6", &(0x7f0000000180)=0x65, &(0x7f00000001c0)="6a446304bd15b05e244e4aa7d5b98ccc366f274b03c485ed8ecb282a0c9ac9593da99bfc85be5b2f5eb0abd5b1923104bfc36b24f8ba15f9239f3dfce68087f89e48e6c8b8861d818f0259e76d6f67ec2fc7cc9702b458c976f852c0e46707c536261e534e92dae7f66dc4596bf08d2d0674d5333523890731ff3d59e1b444bbf5527684928f08060fedd23ebe0220a8d30ac546207c5798495877963ebf8a5e8c1e483561da9c5753c5ac21f1441f05ebb18fb8bdb56ca0573b0a2db3cb20305c754ea83c94bc042472ca6a", 0xcc) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) unveil(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='r\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff5, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffe, 0x100000000, 0x181c, 0x4066, 0x2000000000000004}, 0x0, 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) r5 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) ioctl$BIOCSRTIMEOUT(r5, 0xc0307006, &(0x7f0000000080)={0x1, 0x10}) setsockopt$sock_int(r2, 0xffff, 0x800, &(0x7f0000000080)=0x8, 0x4) 343.968837ms ago: executing program 5 (id=3694): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x1000) (async) msgsnd(r0, &(0x7f0000000a80)=ANY=[@ANYRESOCT], 0x401, 0x0) getrlimit(0x2, 0xffffffffffffffff) msgsnd(r0, 0x0, 0x401, 0x0) (async, rerun: 32) msgrcv(r0, &(0x7f0000000040)={0x0, ""/19}, 0x1b, 0x1, 0x800) (rerun: 32) 341.17762ms ago: executing program 6 (id=3695): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9b, 0xffffffffffffffff, 0xfffffffffffffff8, 0x27fffffffffffffc, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0x101, 0x4, 0x80002001, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0xa, 0x7}, {0x6, 0xf86, 0x100, 0xaf9}, {0x5, 0x8, 0x7}, {0x6, 0x80000002, 0xe, 0x7}, {0x6, 0x1, 0xffffffff, 0x9c}, {0x80000cdf, 0xfffffffd, 0x3, 0x6d}, {0x2000a, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0x8b}, {0x4, 0xfffb, 0x9, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x7, 0x7}, {0x0, 0x1, 0x4, 0x30000}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r2 = socket(0x18, 0x3, 0x0) close(r2) socket(0x18, 0x3, 0x3a) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0x2}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendmsg(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="6059147f1e3c8b422d77ae8d64d7bae62b397f227c49fb33af52de225e074d8081cca52b2d6c2b965b455219b36dd26d89b7754d49d601486226a159a203bb892d9098407c519f64be788a505e67f369399766f3741d0013ae4361600532a42b79fe162e9f15fa304958542c561a7ef3d640294472be0b16257f31e5837d9326bf80039ede3fa99208019f8bc8e3bb41b5bb3f", 0x93}], 0x1, &(0x7f0000000540)=[{0x10, 0x7fff, 0xe}], 0x10}, 0x6) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x2, 0x3, 0xffff0000, 0x1, 0x5, 0x2d, 0x8000000c, 0x1, 0x0, 0x644, 0x4000000000f19}) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) r3 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) close(r1) 273.621183ms ago: executing program 2 (id=3696): mkdir(&(0x7f0000000100)='./file0\x00', 0x49) (async) sendmsg$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0) (async) setreuid(0xee00, 0x0) (async) r0 = getuid() chown(&(0x7f0000000200)='./file0\x00', r0, 0x0) setreuid(0xee00, r0) (async, rerun: 32) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00') (rerun: 32) 272.987284ms ago: executing program 3 (id=3697): pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) mmap(&(0x7f00005b9000/0x3000)=nil, 0x3000, 0x1, 0x2811, r0, 0xffffffffffffffff) getppid() pipe(&(0x7f00000001c0)={0xffffffffffffffff}) fcntl$getown(r1, 0x5) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000}}) r3 = socket(0x18, 0x2, 0x0) getsockopt$sock_timeval(r3, 0xffff, 0x1006, &(0x7f00000000c0), &(0x7f0000000100)=0x10) setsockopt(r3, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) shutdown(0xffffffffffffffff, 0x0) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000400)='./bus\x00', 0x8000, 0x0}) pipe2(&(0x7f0000000140), 0x10000) (async) mmap(&(0x7f00005b9000/0x3000)=nil, 0x3000, 0x1, 0x2811, r0, 0xffffffffffffffff) (async) getppid() (async) pipe(&(0x7f00000001c0)) (async) fcntl$getown(r1, 0x5) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000}}) (async) socket(0x18, 0x2, 0x0) (async) getsockopt$sock_timeval(r3, 0xffff, 0x1006, &(0x7f00000000c0), &(0x7f0000000100)=0x10) (async) setsockopt(r3, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) (async) shutdown(0xffffffffffffffff, 0x0) (async) openat$vnd(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) (async) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000400)='./bus\x00', 0x8000, 0x0}) (async) 272.748418ms ago: executing program 5 (id=3698): r0 = syz_open_pts() ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000080)=0x500) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) r1 = syz_open_pts() r2 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r2}) read(r2, &(0x7f0000000100)=""/116, 0x74) r3 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f00000001c0)) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000080)=0x8) setreuid(0xee00, 0x0) r4 = getuid() setreuid(0x0, r4) r5 = socket(0x800000018, 0x2, 0x0) r6 = socket(0x2, 0x1, 0x2) setsockopt(r6, 0x29, 0xe, &(0x7f0000000000)="02000000", 0x4) dup2(r6, r5) listen(r5, 0x0) ioctl$TIOCCONS(r3, 0x80047462, &(0x7f0000000200)=0x735) openat$wsmouse(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x89, 0x1}, {0x4, 0x3}, {0x8}, {0x80, 0x3}, {0x7, 0x5}, {0x89, 0x4}, {0x8d, 0x5}]}) 272.538573ms ago: executing program 2 (id=3699): r0 = socket(0x800000018, 0x1, 0x0) r1 = socket(0x18, 0x2, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x22, 0x411}, 0x4, 0x10003, 0x0, 0x0, 0x0, 0x2, 0x9, 0x100000000e63}) recvmsg(r1, &(0x7f0000001380)={&(0x7f0000000000)=@in, 0xc, &(0x7f0000001240)=[{&(0x7f0000000040)=""/9, 0x9}, {&(0x7f0000000100)=""/139, 0x8b}, {&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x4, &(0x7f0000001280)=""/196, 0xc4}, 0x1040) close(r1) r2 = socket(0x800000018, 0x8000, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) getgid() 272.330023ms ago: executing program 4 (id=3700): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000080), 0xd8a, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000c68000/0x4000)=nil, &(0x7f0000260000/0x12000)=nil, 0x7}, {&(0x7f00005eb000/0x1000)=nil, &(0x7f00007aa000/0x5000)=nil, 0x7}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000507000/0x3000)=nil, 0x20000005}, {&(0x7f0000318000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f00000d4000/0x2000)=nil, &(0x7f0000188000/0x2000)=nil, 0x2000000000009}, {&(0x7f000027f000/0x1000)=nil, &(0x7f0000095000/0x3000)=nil}, {&(0x7f000055d000/0x4000)=nil, &(0x7f0000eee000/0x4000)=nil, 0x4}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00004de000/0x2000)=nil, 0x4}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000243000/0x4000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x51}, {&(0x7f00004f7000/0x9000)=nil, &(0x7f00000e1000/0x1000)=nil, 0x7}, {&(0x7f0000008000/0x3000)=nil, &(0x7f00001c0000/0x4000)=nil, 0x5}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000042000/0x3000)=nil, 0xfffffffffffffffb}, {&(0x7f0000334000/0x1000)=nil, &(0x7f000053a000/0x1000)=nil, 0x6}, {&(0x7f0000b39000/0x2000)=nil, &(0x7f0000022000/0x2000)=nil, 0x1000039f8}, {&(0x7f0000652000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x500ffffffe}], './bus\x00', 0x3ff}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETA(r1, 0xc1084425, &(0x7f0000000040)={0xb, 0xfd, 0x2, 0x7, "0004010000000000000000008c00001000000200", 0x0, 0xffffff00}) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) 174.142705ms ago: executing program 1 (id=3701): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r0, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = getppid() setuid(0xee01) ktrace(0x0, 0x5, 0x128, r1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000180)='./file1\x00') 172.799461ms ago: executing program 5 (id=3702): setuid(0xee01) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe04) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) sysctl$hw(&(0x7f0000000180)={0x6, 0xe}, 0x2, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_open_pts() r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) fchmod(r0, 0x8) 169.423329ms ago: executing program 5 (id=3703): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) r1 = socket$unix(0x1, 0x7, 0x0) (async) ioctl$BIOCGDLTLIST(r0, 0xc010427b, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[0x14da, 0x6, 0x9, 0x8]}) (async) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="9815ee59e1b6cf3cd11d3a782d31", 0xe}], 0x1) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) ioctl$KDENABIO(r2, 0x20004b3c) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000080)) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$BIOCSETWF(r0, 0x8010427f, &(0x7f00000000c0)={0x0, 0x0}) 169.017036ms ago: executing program 1 (id=3704): execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r0 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004806003400640003069d9078ffffffffffffffff078b1eac1400aa7f000001000e009078000b0008000003fc0000000100000009"]) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = kqueue() r2 = accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000080)) kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r3 = socket(0x18, 0x3, 0x50) ioctl$FIONREAD(r3, 0x80206910, &(0x7f00000001c0)) 168.349916ms ago: executing program 4 (id=3705): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f0000000040)="01000000", 0x4) close(r0) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) 122.970752ms ago: executing program 0 (id=3706): ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xc2585601, &(0x7f00000000c0)={0x10, 0x21ac00000, [{&(0x7f0000f36000/0x4000)=nil, &(0x7f0000685000/0x3000)=nil}, {&(0x7f0000ccb000/0x2000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0x7}, {&(0x7f00001c4000/0x1000)=nil, &(0x7f00004ed000/0x800000)=nil, 0x7fffffff}, {&(0x7f00007af000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x2}, {&(0x7f0000775000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4}, {&(0x7f000005b000/0x2000)=nil, &(0x7f00005b7000/0xf000)=nil}, {&(0x7f00008eb000/0x2000)=nil, &(0x7f0000b16000/0x3000)=nil}, {&(0x7f00004f6000/0x4000)=nil, &(0x7f0000018000/0x1000)=nil, 0x20000002}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00006ed000/0x1000)=nil}, {&(0x7f0000e90000/0x2000)=nil, &(0x7f00008a2000/0x3000)=nil, 0x800000002fe}, {&(0x7f00001cb000/0x2000)=nil, &(0x7f000069c000/0x2000)=nil, 0x7fffffff}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0xfffffffffffffffd}, {&(0x7f0000297000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil, 0x101}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f000077d000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x8000000000000005}], './bus/file0\x00'}) setreuid(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x3, 0x50) ioctl$FIONREAD(r0, 0x8020690e, &(0x7f00000001c0)) 121.7928ms ago: executing program 5 (id=3707): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chmod(&(0x7f0000000440)='.\x00', 0x35e) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000540)='./file0\x00') r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = shmget$private(0x0, 0x3000, 0x372, &(0x7f0000ffa000/0x3000)=nil) shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x4000) mknod(0x0, 0x4, 0xe02) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x2, 0x1, 0x0) ioctl$VMM_IOC_CREATE(r1, 0xc2585601, &(0x7f0000000040)={0x10, 0x2, [{&(0x7f0000282000/0x4000)=nil, &(0x7f0000304000/0x3000)=nil, 0x7}, {&(0x7f0000255000/0x2000)=nil, &(0x7f0000546000/0x1000)=nil, 0x2}, {&(0x7f000029b000/0x3000)=nil, &(0x7f0000720000/0x3000)=nil, 0x100}, {&(0x7f00001a9000/0x2000)=nil, &(0x7f000004a000/0x2000)=nil, 0x9}, {&(0x7f00005dc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x6000000000000}, {&(0x7f00006a6000/0x3000)=nil, &(0x7f0000359000/0x4000)=nil, 0x7}, {&(0x7f0000158000/0x1000)=nil, &(0x7f000033a000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f00006dd000/0x1000)=nil, &(0x7f000045e000/0x4000)=nil, 0x4}, {&(0x7f0000310000/0x4000)=nil, &(0x7f0000051000/0x1000)=nil, 0xdb}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00001a2000/0x4000)=nil, 0x3}, {&(0x7f00002ba000/0x3000)=nil, &(0x7f00005e5000/0xc000)=nil, 0xf}, {&(0x7f0000222000/0x1000)=nil, &(0x7f0000138000/0x2000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f00004bd000/0x2000)=nil, 0x2}, {&(0x7f000055a000/0x1000)=nil, &(0x7f00003f1000/0x2000)=nil, 0x9}, {&(0x7f000011d000/0x3000)=nil, &(0x7f000053c000/0x1000)=nil, 0xffff}, {&(0x7f00004cd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x9}], './file0\x00', 0x81}) connect$inet(r3, &(0x7f0000000000), 0x10) close(r3) execve(0x0, 0x0, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f00000000c0)=[{0x7, 0x6, 0x25, 0x7ff}, {0x50, 0x1, 0x2, 0x308}, {0x4e, 0xf, 0xf7, 0xfffff001}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) setsockopt$sock_int(r0, 0xffff, 0x8, &(0x7f0000000500)=0x1fc, 0x3) 121.666987ms ago: executing program 0 (id=3708): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x80) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fsync(r0) 120.812983ms ago: executing program 4 (id=3709): openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="8dcbf38cbd1b6dc1", 0x8}], 0x1) 120.294932ms ago: executing program 1 (id=3710): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x3a366294) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = socket(0x18, 0x1, 0x0) close(r1) setsockopt(r1, 0x1000000000029, 0x9, 0x0, 0x0) write(r0, &(0x7f0000000240)='\x00\x00', 0x2) r2 = accept$inet(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000100)=0xc) writev(r2, &(0x7f0000001300)=[{&(0x7f0000000140)="248e01facc4b5149edd09f7b5f64cda064144f0e371fca89df60ae0db9c95336e41c652515f867db83b9f53d", 0x2c}, {&(0x7f0000000180)="6e1ab704d17109dde79f0c5c372fcca6bdcae8adf04a4e3c012c44ab2febacdb68af15128ca9f5c008fa6cc43f372802ac5d5fe591746df3e79c501e580fb219c06907407b21885dc0676285e93f6fa8ab1f0adc33215de192369f2caa6ce30cbf2d2e8c68aa216ab66c173ade5f3132fb17d8811da1f3e06fd16df3f63b5d79e1358276bbe91db58779f99661e8513d30fffc0fa65bd5092a28120595e3d37d3b96", 0xa2}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="3cc142ee6d717cfbb5b4701483d9eb4e4b8034ee610af4c6162566fe66c119ce495ca1fca7db8abcaaf9e2631cd922ae892530de67320760902554c34cf5d43e68069211a7e9f13688e30a61fdbd9c00ca502ae4cfc06f2f3a1015c73a27c2e7247d7363ee955be3b280e09e94fa2112e9776f94044dd5868bb969e883e7027aaf99d1231e4c833824161cdc24850aec", 0x90}], 0x4) r3 = getpid() setpgid(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r3}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r5, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) ioctl$WSKBDIO_GETMAP(r4, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r6, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r7 = getppid() setpgid(0x0, r7) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 85.767408ms ago: executing program 4 (id=3711): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="ed", 0x1) (async) write(r0, &(0x7f0000000000)="ed", 0x1) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000140)=""/173, 0xad}], 0x1, 0x0}, 0xffffffff}, 0x10, 0xc2, 0x0) shutdown(r1, 0x0) socket(0x18, 0x2, 0x0) (async) r2 = socket(0x18, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d35e6abbbdabb26a52ad7f460032b34b77e382526b1572da73c6d53", 0x31}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r3, 0x20004109, 0x0) ioctl$WSDISPLAYIO_GETSCREEN(r3, 0xc0245755, &(0x7f0000000840)={0x6, './bus\x00', './bus\x00'}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x20, 0x401}, 0x0) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000940)={&(0x7f00000008c0)='./bus\x00', 0x100000000, &(0x7f0000000900)='./bus\x00', 0x6}) (async) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000940)={&(0x7f00000008c0)='./bus\x00', 0x100000000, &(0x7f0000000900)='./bus\x00', 0x6}) close(r2) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x20, 0x0) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f00000003c0)={0x7, &(0x7f0000000380)=[{0x2e3d, 0x5, 0xf, 0x5}, {0x8000, 0x4, 0x81, 0x1}, {0x80, 0x3, 0x0, 0x2}, {0x9, 0x0, 0x40, 0xa}, {0x4, 0x2, 0x1, 0x2}, {0x1, 0x10, 0xe, 0x21}, {0x1, 0x0, 0x6}]}) sysctl$kern(&(0x7f0000000600)={0x1, 0x9}, 0x2, &(0x7f0000000640)="c48a87b3b07b9f0f0159dc0d23d21a3d02680498be67eb3c9c8714086375852d783e69d373260f1e0c6d6fbe8c0063a1434608a9625c22c4eeb51290cdfbfbaa9b54e22a065e3f68c4e591463b332e8b11d6cbf6aff7cea643df2a9a1b47f26690211f5d70adc42b8d9be48c47f7ab4af48e60a6dc09d15bf5dbc42db01aeb3133c9e76f308e61d9ed50d1b41012354caddee10114da6e4f5f7ea2efad6b008fda006c277839646fc78ef5806bf003e25d19b983948c4c8cbbd6374345", &(0x7f0000000700)=0xbd, &(0x7f0000000740)="08fcdc5914bc4667ad9e0372ec00c40e8b5662ab9a7c48182c1e937b2ed39b3a69e0402b6ad904ec4cd56061650d5ed77d1906651186333c815fbbc0b873cebcc4d1e0fa6a48e01c21971048919a2616ea435483d15c14d402c27b4c9390043883f95ce613cde1ff82610af2b6341180aeb4331f955d45d3bf2ed3f9aaa8bc6146247699ac329947089cef64d02bc9eb7e2e2a40ddf262d6f548c066205abf4de79abf91c2c667063f7ebf732e1345820fe8b9f57afc49dee3a5a6fbea6227f13b09aec414b593e23e090a0b53d2fe256d", 0xd1) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000029, 0x31, &(0x7f0000000200)="b2111f170d816685c8e360f2faae3cd7f3a2840ed6f5aad2dd197a177c1eedc9073dc90142a8429cbe7868de45ed3fc33719ca6df71ece5b4ba3c8a918beef2c10a1f8de1a5a6f4fe180e9cb9b21f9982230f575295d4888a9b6921796b2dd92fc9175680b37ba06002c15e6d7c91b8ed900ab006ddfb67869b51a2216114d0000000000000100"/144, 0x90) sendmsg(r2, &(0x7f00000005c0)={&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x10}, 0x0) (async) sendmsg(r2, &(0x7f00000005c0)={&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x10}, 0x0) close(r1) (async) close(r1) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x7}, {}, {0x2}, {0x3}, {}, {0x3}, {0x3, 0xaa59}, {0x0, 0x8001}, {0x1, 0xffffffff}, {0x3}, {0x2, 0x4}, {}, {}, {}, {0x0, 0x80000001}, {0x2, 0xffffffff}, {0xa02b1136a2581037, 0x3}, {0x3, 0x7218}, {0x0, 0x2}, {0x0, 0x7ff}, {0x2, 0x20000}, {}, {0x2}, {}, {}, {0x2, 0x80001}, {0x0, 0x2}, {0x1, 0x200}, {0x2}, {0x0, 0x3}, {0x2, 0x8}, {0x2, 0x8}]}) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x7}, {}, {0x2}, {0x3}, {}, {0x3}, {0x3, 0xaa59}, {0x0, 0x8001}, {0x1, 0xffffffff}, {0x3}, {0x2, 0x4}, {}, {}, {}, {0x0, 0x80000001}, {0x2, 0xffffffff}, {0xa02b1136a2581037, 0x3}, {0x3, 0x7218}, {0x0, 0x2}, {0x0, 0x7ff}, {0x2, 0x20000}, {}, {0x2}, {}, {}, {0x2, 0x80001}, {0x0, 0x2}, {0x1, 0x200}, {0x2}, {0x0, 0x3}, {0x2, 0x8}, {0x2, 0x8}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="dc367b01ec5ac5b4bc5a91fdeca7958d2d2da1b171b59c5afeb67082", &(0x7f0000000300)=0xb, 0x0, 0x37) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000000c0)='@,[\x00', &(0x7f0000000100)='\\\x00', &(0x7f0000000200)='(+@{6&\\\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='@$\xf9}(,$\x00', &(0x7f00000002c0)='\xa1$-$/\x00', &(0x7f0000000300)='&(\'\xe5*\x00', &(0x7f0000000340)='.\x00'], &(0x7f0000000580)=[&(0x7f00000003c0)='-]-(\x00', &(0x7f0000000400)='%#:/@%[\x82\x00', &(0x7f0000000440)=':\x00', &(0x7f0000000480)='{\x00', &(0x7f0000000500)='-\x00', &(0x7f0000000540)=').\x00']) execve(0x0, 0x0, 0x0) 85.10965ms ago: executing program 1 (id=3712): link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$bpf(0xffffffffffffff9c, &(0x7f0000000c40), 0x1, 0x0) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000c40), 0x1, 0x0) ioctl$BIOCGRTIMEOUT(r0, 0x8010427e, &(0x7f0000000c80)) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) ioctl$WSKBDIO_GETMAP(r1, 0xc010570d, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0xa, 0x3ff, 0x765, 0x8}, {0x5, 0x1, 0x3, 0x2, 0x7d}, {0x9, 0x8, 0x946d, 0x7, 0x4}]}) (async) ioctl$WSKBDIO_GETMAP(r1, 0xc010570d, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0xa, 0x3ff, 0x765, 0x8}, {0x5, 0x1, 0x3, 0x2, 0x7d}, {0x9, 0x8, 0x946d, 0x7, 0x4}]}) lstat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000040)="a1aa61368f6e6605483fad322f7b573958c4a63db431dca2e61b655c7f5e20b7570e8d55", 0x24) 16.105154ms ago: executing program 6 (id=3713): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0x401, 0x3, 0x1ffffffffffffffc, 0x181c, 0x8, 0x10000000009}, 0x0, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000140)={0xfffffffd, 0x400, 0x4, 0x0, "d76c0f652155cb57858e74fbf520000002a34f00", 0xffffffb7, 0x401}) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) sysctl$hw(&(0x7f0000000040)={0x6, 0xe}, 0x2, 0x0, 0x0, &(0x7f0000000000), 0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x22) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x3, 0x6, 0xfffffffe, 0x1, 0x7c, 0x8, 0x8000003e, 0x2, 0x0, 0xfffffffffffffe, 0x3}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) 15.751078ms ago: executing program 1 (id=3714): socket(0x11, 0x3, 0x0) (async) r0 = socket$inet(0x2, 0x3, 0x8) getsockopt(r0, 0x0, 0x67, 0x0, 0x0) sysctl$vfs_ffs(0x0, 0x0, &(0x7f0000000080)="06e6a186cf8257197b8d91e7c56e0abd770a63cab73518977eb4e7f3cf84aa05aa7689c8dbe18896a2e8229d32f6e84c8033909c4b569ec9cc4cf6a445c82559ea205149a66ab99c89e4c319f5ced9ad4f702334eeb646b39b919a8d4fde562ba7135f28c86c751ee09b3028f555ae44a521f306ab76d3ef708e7f40d6e5c7cae35bb7622d953d709d8f83a05b80ff08aeb6f1a2537d113aedf5291a08932a64899b6d9e9be1f561e9fbc452ea18", 0x0, 0x0, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="91a6e3"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f0000000000)="ea", 0x1) (async) setsockopt$inet_opts(r2, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) 15.527305ms ago: executing program 0 (id=3715): semget(0x2, 0x4, 0x8) 14.61523ms ago: executing program 5 (id=3716): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)={{0x7fff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffe}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0) listen(r0, 0x0) accept$unix(r0, 0x0, 0x0) r1 = semget(0x0, 0x1, 0x281) semop(r1, &(0x7f0000000000), 0x23) close(r0) execve(0x0, 0x0, 0x0) 395.676µs ago: executing program 0 (id=3717): ioctl$WSDISPLAYIO_SMODE(0xffffffffffffff9c, 0x8004574c, &(0x7f0000000200)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil, 0x2}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0xdc5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x1}, {&(0x7f00001cf000/0x4000)=nil}, {0x0, &(0x7f0000358000/0x2000)=nil}], './file0\x00'}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r0 = socket(0x800000018, 0x2, 0x0) setegid(0xffffffffffffffff) setregid(0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000100)=0x7, 0x4) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x404) 0s ago: executing program 1 (id=3718): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000100)=0x5) r2 = socket(0x11, 0x3, 0x0) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000000)=0x10000) (async) sendmmsg(r2, &(0x7f0000000280)={&(0x7f0000000040)={&(0x7f0000000180)=@in={0x2, 0x1}, 0xc, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[], 0x60}, 0x80000001}, 0x10, 0xe) (async) r3 = syz_open_pts() (async) syz_open_pts() (async) syz_open_pts() fcntl$lock(r3, 0x9, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x101fffff9}) close(r3) r4 = socket(0x18, 0x2, 0x0) close(r4) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0xfffffffffffffffe}], 0x0, 0x0, 0xa, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) r5 = socket(0x2, 0x3, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x60}) (async) dup(r5) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) (async) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) writev(r4, &(0x7f0000000300)=[{0x0}], 0x1) (async) setsockopt$sock_int(r1, 0xffff, 0x20, &(0x7f0000000080), 0x4) (async) socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f00000001c0)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c801ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba06d22458f1510c221554f4e0f668248b0900000008e371a3f8343712051eea040000000000", 0xb8, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error wskbd0: can't attach mux (error=5) pckbd_enable: command error sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code pckbd_enable: command error malloc(): allocation too large, type = 127, size = 7181888240 pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) login: WARNING: thread `nfsio' (317179) exits with status -1 WARNING: thread `nfsio' (50543) exits with status -1 WARNING: thread `nfsio' (510637) exits with status -1 WARNING: thread `nfsio' (400691) exits with status -1 pckbd_enable: command error pckbd_enable: command error j|E1\:pckbd_enable: command error wskbd0: can't attach mux (error=5) pckbd_enable: command error wskbd0: can't attach mux (error=5) OpenBSD/amd64 (6i=S5#~n^.5p],ŌJT@nߗZ9) (tty00) login: denied attempt to set clock back 392168469 seconds pppx: unable to set addresses for pppx1, error=17 uvn_flush: obj=0xfffffd800b0f3610, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! uvn_flush: obj=0xfffffd800bb3aab0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pppx: unable to set addresses for pppx1, error=17 WARNING: thread `nfsio' (275147) exits with status -1 WARNING: thread `nfsio' (307385) exits with status -1 WARNING: thread `nfsio' (80083) exits with status -1 pppx: unable to set addresses for pppx1, error=17 WARNING: thread `nfsio' (210913) exits with status -1 lo0: can't handle af0 denied attempt to set clock back 83 seconds uvm_fault(0xfffffd8068d135d8, 0x0, 0, 1) -> e fatal page fault in supervisor mode trap type 6 code 0 rip ffffffff82d4e5f8 cs 8 rflags 10207 cr2 0 cpl 0 rsp ffff80003c44add0 gsbase 0xffff8000299edff0 kgsbase 0x0 panic: trap type 6, code=0, pc=ffffffff82d4e5f8 Starting stack trace... panic(ffffffff833a6996) at panic+0x1d0 kerntrap(ffff80003c44ad20) at kerntrap+0x30b alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dt_ioctl_record_stop(ffff80000168e000) at dt_ioctl_record_stop+0x108 dtclose(11e5f,81,2000,ffff8000363ec7f8) at dtclose+0x109 spec_close(ffff80003c44aed0) at spec_close+0x466 VOP_CLOSE(fffffd805c925b40,81,fffffd80097fb478,ffff8000363ec7f8) at VOP_CLOSE+0x132 vn_closefile(fffffd806b9d0168,ffff8000363ec7f8) at vn_closefile+0x12b fdrop(fffffd806b9d0168,ffff8000363ec7f8) at fdrop+0x121 closef(fffffd806b9d0168,ffff8000363ec7f8) at closef+0x192 fdfree(ffff8000363ec7f8) at fdfree+0x116 exit1(ffff8000363ec7f8,0,0,1) at exit1+0x576 sys_exit(ffff8000363ec7f8,ffff80003c44b240,ffff80003c44b190) at sys_exit+0x1a syscall(ffff80003c44b240) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x779d2ea4a580, count: 242 End of stack trace. WARNING: SPL NOT LOWERED ON SYSCALL 263 320 EXIT 0 4 Stopped at savectx+0xae: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND 147689 70640 0 0 0x4000000 0 syz-executor * 30085 9301 0 0 0x4000000 1 syz-executor savectx() at savectx+0xae end of kernel end trace frame: 0x9cc39c2a610, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd8068d135d8, 0x0, 0, 1) -> e ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x9cc39c2a610, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003c46f610 rbx 0 rdx 0 rcx 0xffff8000363ecfc0 rax 0x35 r8 0xffff80003c46f540 r9 0x1 r10 0x8b72b873abfc9b2f r11 0xe3b950b97be3a8d7 r12 0 r13 0 r14 0xffff8000363ecfc0 r15 0 rip 0xffffffff81feb3ee savectx+0xae cs 0x8 rflags 0x46 rsp 0xffff80003c46f590 ss 0x10 savectx+0xae: movl $0,%gs:0x688 ddb{1}> show proc PROC (syz-executor) tid=30085 pid=9301 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=50, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000fffeed10,0xffff8000363ecaa0 process=0xffff80003c4939f0 user=0xffff80003c46a000, vmspace=0xfffffd8068d139a8 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 70640 294425 44119 0 2 0 syz-executor 70640 147689 44119 0 7 0x4000000 syz-executor 45413 114539 99544 0 2 0 syz-executor 9301 381854 67861 0 2 0 syz-executor * 9301 30085 67861 0 7 0x4000000 syz-executor 69059 368879 85877 0 2 0 syz-executor 69059 390694 85877 0 3 0x4000080 sbwait syz-executor 63553 517584 45057 0 3 0x80 nanoslp syz-executor 63553 256508 45057 0 3 0x4000080 sbwait syz-executor 63553 269773 45057 0 3 0x4000080 fsleep syz-executor 9312 41468 49151 0 2 0x2 syz-executor 74777 335565 0 0 3 0x14200 acct acct 67861 149747 49151 0 3 0x82 nanoslp syz-executor 88591 505057 49151 0 3 0x82 nanoslp syz-executor 45057 308140 49151 0 3 0x82 nanoslp syz-executor 44119 246897 49151 0 3 0x82 nanoslp syz-executor 42981 339441 1 0 3 0x100083 ttyin getty 99544 501621 49151 0 2 0x2 syz-executor 90546 106510 0 0 3 0x14200 bored sosplice 85877 200557 49151 0 3 0x82 nanoslp syz-executor 75061 157595 49151 0 3 0x82 nanoslp syz-executor 49151 129744 18022 0 3 0x82 kqread syz-executor 18022 254346 21235 0 3 0x10008a sigsusp ksh 21235 431248 11494 0 3 0x98 kqread sshd-session 11494 350195 63104 0 3 0x92 kqread sshd-session 63104 165583 1 0 3 0x88 kqread sshd 12610 53990 59633 74 3 0x1100092 bpf pflogd 59633 507514 1 0 3 0x80 sbwait pflogd 74064 415161 48884 73 3 0x1100090 kqread syslogd 48884 110940 1 0 3 0x100082 sbwait syslogd 69677 202345 1 0 3 0x100080 kqread resolvd 27307 390527 63859 77 3 0x100092 kqread dhcpleased 95432 407484 63859 77 3 0x100092 kqread dhcpleased 63859 225859 1 0 3 0x80 kqread dhcpleased 35237 428312 0 0 2 0x40014200 smr 18425 450854 0 0 2 0x14200 zerothread 67200 138291 0 0 3 0x14200 aiodoned aiodoned 52380 145920 0 0 3 0x14200 syncer update 96625 329598 0 0 3 0x14200 cleaner cleaner 32827 519233 0 0 3 0x14200 reaper reaper 29650 149054 0 0 3 0x14200 pgdaemon pagedaemon 10386 310740 0 0 3 0x14200 bored viomb 97567 416068 0 0 3 0x40014200 acpi0 acpi0 95322 67230 0 0 3 0x40014200 idle1 43941 501744 0 0 3 0x14200 bored softnet1 79777 500912 0 0 3 0x14200 netlock softnet0 77040 251748 0 0 2 0x40014200 systqmp 83960 407551 0 0 3 0x14200 bored systq 9116 203186 0 0 3 0x14200 tmoslp softclockmp 84576 183847 0 0 3 0x40014200 tmoslp softclock 97572 204571 0 0 3 0x40014200 idle0 1 496290 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 69059 (syz-executor) thread 0xffff8000fffef770 (390694) exclusive rwlock sbufrcv r = 0 (0xffff8000017134c0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sblock+0xb6 #3 soreceive+0x27d #4 recvit+0x40b #5 sys_recvmmsg+0x410 #6 syscall+0xbd4 #7 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10262 11090K 12487K 166960K 17642 0 pcb 17 18K 24K 166960K 928 0 rtable 208 12K 14K 166960K 1315 0 pf 40 18K 82K 166960K 493 0 ifaddr 39 8K 9K 166960K 309 0 ifgroup 57 2K 2K 166960K 556 0 sysctl 4 1K 9K 166960K 98 0 counters 74 37K 38K 166960K 788 0 ioctlops 0 0K 4K 166960K 2678 0 iov 1 4K 32K 166960K 445 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1614 101K 101K 166960K 6280 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 56 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 300 0 dirhash 12 2K 2K 166960K 81 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 240K 166960K 4216 0 sigio 0 0K 0K 166960K 83 0 proc 72 115K 164K 166960K 1545 0 subproc 72 4K 4K 166960K 271 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 625 0 in_multi 74 5K 7K 166960K 515 0 ether_multi 1 0K 0K 166960K 36 0 mrt 2 0K 0K 166960K 23 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 295 1314K 1314K 166960K 295 0 exec 0 0K 1K 166960K 1461 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 7 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 236 159K 182K 166960K 39151 0 UVM aobj 131 7K 7K 166960K 138 0 pinsyscall 42 84K 102K 166960K 5945 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 238 0 NDP 13 0K 1K 166960K 236 0 temp 80 8656K 8908K 166960K 166254 0 kqueue 13 20K 30K 166960K 808 0 SYN cache 2 8K 16K 166960K 3 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 518 0 515 4 3 1 3 0 8 0 rtentry 176 453 0 378 5 0 5 5 0 8 0 unpcb 144 3624 0 3605 21 17 4 6 0 8 3 syncache 336 28 0 28 6 6 0 1 0 8 0 tcpqe 32 7 0 7 4 4 0 1 0 8 0 tcpcb 736 1503 0 1497 25 23 2 7 0 8 1 arp 136 49 0 38 1 0 1 1 0 8 0 inpcb 328 4752 0 4739 37 35 2 15 0 8 0 nd6 144 69 0 56 1 0 1 1 0 8 0 pkpcb 40 31 0 31 7 7 0 1 0 8 0 kcovpl 48 30 0 22 1 0 1 1 0 8 0 mppekey 1024 2 0 2 2 2 0 1 0 8 0 ppxss 1192 291 0 288 6 5 1 1 0 8 0 pppxif 1504 19 0 19 7 7 0 1 0 8 0 pfstscr 40 2 0 2 1 1 0 1 0 8 0 pffrag 232 59 0 55 1 0 1 1 0 482 0 pffrnode 88 56 0 52 1 0 1 1 0 8 0 pffrent 40 239 0 234 1 0 1 1 0 8 0 pfosfp 40 1428 0 1428 5 5 0 5 0 8 0 pfosfpen 112 1428 0 1428 21 21 0 21 0 8 0 pfrktable 1344 15 0 15 5 5 0 1 0 8 0 pfanchor 1288 2 0 2 1 1 0 1 0 8 0 pftag 88 1 0 1 1 1 0 1 0 8 0 pfstitem 24 209 0 147 1 0 1 1 0 8 0 pfstkey 128 211 0 149 3 0 3 3 0 8 0 pfstate 384 209 0 148 9 1 8 9 0 8 0 pfrule 1344 24 0 19 2 1 1 2 0 8 0 rttmr 136 4 0 4 4 4 0 1 0 8 0 art_heap8 4096 4 0 0 4 0 4 4 0 8 0 art_heap4 256 2139 0 1811 59 34 25 50 0 8 0 art_table 40 2143 0 1811 9 2 7 9 0 8 0 art_node 32 449 0 385 2 0 2 2 0 8 0 sysvmsgpl 40 15 0 10 2 1 1 1 0 8 0 semupl 112 5 0 5 4 4 0 1 0 8 0 semapl 112 292 0 282 1 0 1 1 0 8 0 shmpl 112 135 0 7 4 0 4 4 0 8 0 dirhash 1024 64 0 47 3 0 3 3 0 8 0 dino2pl 256 9464 0 7903 98 0 98 98 0 8 0 ffsino 296 9464 0 7903 121 0 121 121 0 8 0 nchpl 144 14979 0 13216 66 0 66 66 0 8 0 rtmask 32 43 0 41 9 8 1 1 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 57144 0 57144 6 5 1 3 0 8 1 percpumem 16 409 0 357 1 0 1 1 0 8 0 pfiaddrpl 120 3 0 3 1 1 0 1 0 8 0 kstatmem 264 358 0 328 8 5 3 3 0 8 0 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 scsiplug 72 21 0 21 6 6 0 1 0 8 0 scxspl 216 103143 0 103142 16 15 1 8 1 8 0 plimitpl 152 1119 0 1102 1 0 1 1 0 8 0 sigapl 424 4492 0 4443 9 2 7 7 0 8 0 knotepl 120 885 0 0 25 0 25 25 0 8 0 kqueuepl 224 1771 0 1762 20 19 1 5 0 8 0 pipepl 344 699 0 669 18 15 3 9 0 8 0 fdescpl 528 4457 0 4426 3 0 3 3 0 8 0 filepl 160 34258 0 34032 57 37 20 21 0 8 8 lockfpl 104 1741 0 1739 2 1 1 2 0 8 0 lockfspl 48 694 0 692 1 0 1 1 0 8 0 sessionpl 144 60 0 51 1 0 1 1 0 8 0 pgrppl 48 149 0 132 1 0 1 1 0 8 0 ucredpl 104 6780 0 6766 1 0 1 1 0 8 0 zombiepl 144 5084 0 5082 2 1 1 1 0 8 0 processpl 1232 4492 0 4443 7 2 5 5 0 8 0 procpl 664 11003 0 10949 8 2 6 7 0 8 0 sosppl 168 17 0 17 7 7 0 1 0 8 0 sockpl 752 9356 0 9321 106 95 11 24 0 8 7 mcl64k 65536 25 0 0 3 0 3 3 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 5 0 0 1 0 1 1 0 8 0 mcl4k 4096 129 0 0 16 0 16 16 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 154 0 0 12 0 12 12 0 8 0 mtagpl 96 11 0 0 1 0 1 1 0 8 0 mbufpl 256 1201 0 0 74 0 74 74 0 8 0 bufpl 280 42026 0 35883 441 1 440 440 0 8 0 anonpl 32 11758 0 0 95 0 95 95 0 246 0 amapchunkpl 152 133463 0 132954 62 35 27 32 0 158 4 amappl16 200 16430 0 16397 82 68 14 26 0 8 4 amappl15 192 2 0 2 1 1 0 1 0 8 0 amappl14 184 187 0 175 1 0 1 1 0 8 0 amappl13 176 6 0 6 3 3 0 1 0 8 0 amappl12 168 5473 0 5443 3 1 2 2 0 8 0 amappl11 160 56 0 39 1 0 1 1 0 8 0 amappl10 152 8 0 8 2 2 0 1 0 8 0 amappl9 144 254 0 253 2 1 1 1 0 8 0 amappl8 136 27 0 24 1 0 1 1 0 8 0 amappl7 128 168 0 155 1 0 1 1 0 8 0 amappl6 120 443 0 439 1 0 1 1 0 8 0 amappl5 112 229 0 219 1 0 1 1 0 8 0 amappl4 104 395 0 374 1 0 1 1 0 8 0 amappl3 96 23885 0 23791 8 5 3 4 0 8 0 amappl2 88 4834 0 4756 2 0 2 2 0 8 0 amappl1 80 29646 0 29047 16 1 15 16 0 8 0 amappl 88 37337 0 37173 5 0 5 5 0 92 0 dma16384 16384 1 0 1 1 1 0 1 0 8 0 dma4096 4096 2 0 2 2 2 0 1 0 8 0 dma1024 1024 2 0 1 1 0 1 1 0 8 0 dma512 512 1 0 1 1 1 0 1 0 8 0 dma256 256 10 0 10 4 4 0 1 0 8 0 dma128 128 255 0 255 2 2 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 137 0 7 3 0 3 3 0 8 0 uaddrrnd 24 4457 0 4426 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 4457 0 4426 1 0 1 1 0 8 0 vmmpekpl 168 34085 0 34025 3 0 3 3 0 8 0 vmmpepl 168 284566 0 282566 134 35 99 111 0 357 0 vmsppl 488 4456 0 4426 6 1 5 5 0 8 0 rwobjpl 80 79931 0 72932 155 6 149 153 0 8 0 pdppl 4096 8922 0 8852 140 66 74 84 0 8 4 pvpl 32 19753 0 0 159 0 159 159 0 265 0 pmappl 256 4456 0 4426 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 462 0 144 10 0 10 10 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837c9ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83965ea8) at __mp_lock+0x192 softintr_dispatch(2) at softintr_dispatch+0x125 dosoftint(2) at dosoftint+0x54 Xsofttty() at Xsofttty+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff83965ea8) at __mp_lock+0x1a3 intr_handler(ffff80003c4811f0,ffff800000079a80) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __mp_lock(ffffffff83965ea8) at __mp_lock+0x192 vn_ioctl(fffffd806fbcb0a0,80044b02,ffff80003c481400,ffff8000363ec560) at vn_ioctl+0x4d sys_ioctl(ffff8000363ec560,ffff80003c4815e0,ffff80003c481530) at sys_ioctl+0x674 end trace frame: 0xffff80003c4815d0, count: 0 ddb{0}> trace x86_ipi_db(ffffffff837c9ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83965ea8) at __mp_lock+0x192 softintr_dispatch(2) at softintr_dispatch+0x125 dosoftint(2) at dosoftint+0x54 Xsofttty() at Xsofttty+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff83965ea8) at __mp_lock+0x1a3 intr_handler(ffff80003c4811f0,ffff800000079a80) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __mp_lock(ffffffff83965ea8) at __mp_lock+0x192 vn_ioctl(fffffd806fbcb0a0,80044b02,ffff80003c481400,ffff8000363ec560) at vn_ioctl+0x4d sys_ioctl(ffff8000363ec560,ffff80003c4815e0,ffff80003c481530) at sys_ioctl+0x674 syscall(ffff80003c4815e0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7827fcf0da0, count: -16 ddb{0}> machine ddbcpu 1 Stopped at savectx+0xae: movl $0,%gs:0x688 savectx() at savectx+0xae end of kernel end trace frame: 0x9cc39c2a610, count: 14 ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x9cc39c2a610, count: -1