last executing test programs: 1.343849519s ago: executing program 4 (id=612): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) close(r1) (async) r2 = socket(0x2, 0x2, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) (async) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) (async) connect$unix(r2, &(0x7f0000000000), 0x10) (async) sendmmsg(r1, &(0x7f0000000380)={0x0, 0x8}, 0xa66f1f68c3106312, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0xc, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x2, 0xd, 0x4, 0x2, 0x400000000100], [0xffffffffffffffff, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0xffffffff7fffffff, 0x0, 0x0, 0x401], [0x400000000091f, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x100, 0x1fffffdfffb, 0x7ffffffffffffffc, 0x100000000, 0x52adeb15, 0x7], [{0x4, 0x0, 0x0, 0x5}, {0xfff9, 0x5, 0x4}, {0x0, 0x0, 0xfffffffb, 0x80}, {0x5, 0x4, 0x9, 0x9}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x2, 0x2000000000000000}, {0x0, 0x0, 0x9}, {0x5, 0x5, 0xf, 0xb}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x45, 0x6d5, 0x1}}}) (async) r4 = kqueue() kevent(r4, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) (async) close(r3) (async) r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r5, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, '!\r\x00\x00\x00\b\x00', 0x61616161, 0x5}) ioctl$WSMOUSEIO_SCALIBCOORDS(r5, 0x81205724, &(0x7f0000000340)={0x623c, 0xffff, 0x1, 0xffffffff, 0x40, 0x101, 0x10, 0x10, [{0x8, 0xfff, 0x8, 0x8}, {0x7, 0xfffffff7, 0x1, 0x5}, {0x5, 0x8000, 0xb79, 0x1}, {0xfffffeff, 0x6, 0xe4fa, 0x2}, {0xffff, 0x79c, 0x55a0}, {0x4, 0x8, 0x7077, 0x4}, {0xffffe23a, 0x81a, 0x1, 0xac}, {0xdfcb, 0x100, 0xffffffff, 0x5}, {0x5, 0x3f3, 0x7, 0x3}, {0x8, 0xfffffff7, 0x4, 0x6}, {0xe, 0xb, 0xfffffc01, 0x7fff}, {0x6, 0x3, 0x1000, 0xa02}, {0x8001, 0x8, 0x9, 0x9}, {0xff, 0x8, 0x81, 0x2}, {0x57c, 0x9, 0x1ff, 0x39a}, {0x40, 0xffff, 0xfffffffe, 0x7fff}]}) (async) msgget$private(0x0, 0x400) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) (async) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000580)={0x1, 0x2, 0x7, 0x10001}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0xc, 0x1, 0x2, 0x7}, {0x0, 0xeb, 0x0, 0x7}, {0x6, 0xa0, 0x28, 0x1439e280}]}) (async) ioctl$BIOCSDIRFILT(r0, 0x8004427d, &(0x7f0000000080)=0xcd2) (async) r6 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000480), 0x20, 0x0) mprotect(&(0x7f00005f4000/0x2000)=nil, 0x2000, 0x4) (async) ioctl$WSMOUSEIO_SETPARAMS(r6, 0x80105728, &(0x7f0000000500)={&(0x7f00000004c0)=[{0x8, 0x7f}, {0x46, 0x7f}, {0x8, 0xffffff80}, {0x88, 0x7fffffff}], 0x4}) syz_emit_ethernet(0x1000e, &(0x7f0000000100)=ANY=[]) 1.333411129s ago: executing program 4 (id=614): r0 = socket(0x1, 0x5, 0x0) close(r0) r1 = socket(0x18, 0x3, 0x0) close(r1) r2 = socket(0x18, 0x3, 0x0) sysctl$hw(&(0x7f0000001440)={0x6, 0x11}, 0x2, &(0x7f0000001480)="4428653a79ffa0a7a7b5efd0d2a9023ea7b92fbe2bedf926861fa157c400df6a1f3e0e558715350a3f90223d3e64", &(0x7f0000001580)=0x2e, &(0x7f00000015c0), 0x0) setsockopt(r2, 0x1000000029, 0x1a, &(0x7f0000000000)="e2000100", 0x4) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x800081, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x100}, 0x0, 0x7}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) write(r0, &(0x7f0000000040)="04bdfa5d1d2873c63e35341800000000000000c43050006123339a346f734000000000000000b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0x1d81b) socket(0x1, 0x5, 0x0) (async) close(r0) (async) socket(0x18, 0x3, 0x0) (async) close(r1) (async) socket(0x18, 0x3, 0x0) (async) sysctl$hw(&(0x7f0000001440)={0x6, 0x11}, 0x2, &(0x7f0000001480)="4428653a79ffa0a7a7b5efd0d2a9023ea7b92fbe2bedf926861fa157c400df6a1f3e0e558715350a3f90223d3e64", &(0x7f0000001580)=0x2e, &(0x7f00000015c0), 0x0) (async) setsockopt(r2, 0x1000000029, 0x1a, &(0x7f0000000000)="e2000100", 0x4) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x800081, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x100}, 0x0, 0x7}) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) (async) write(r0, &(0x7f0000000040)="04bdfa5d1d2873c63e35341800000000000000c43050006123339a346f734000000000000000b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0x1d81b) (async) 1.331990908s ago: executing program 6 (id=615): r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, r0) close(r1) socket(0x18, 0x4001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) r4 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) sysctl$kern(&(0x7f0000000000)={0x6, 0xb}, 0x5, 0x0, 0x0, 0x0, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000c80)="5c2984639c645036", 0xfffffc86}], 0x1, 0x81) unveil(0x0, &(0x7f0000000400)='r\x00') 1.327941461s ago: executing program 6 (id=617): openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xcd504407, &(0x7f0000000740)={0xb6, 0x5, 0x8, 0x800003, "970000000000eeffffff00000000000000e500", 0x10005, 0x49}) syz_open_pts() (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000001200)={0x10, 0xfffffffffffffffa, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000616000/0x3000)=nil}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x1}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000606000/0x2000)=nil, 0x6}, {&(0x7f0000afd000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0x2}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000445000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f000058e000/0x4000)=nil, &(0x7f0000451000/0x4000)=nil, 0xc}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00000c9000/0x1000)=nil, 0x4000000ffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x80000}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x8000000000000001}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000140000/0xc00000)=nil, 0x7}, {&(0x7f0000a6b000/0x4000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00'}) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffefffffffc, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) (async) mknod(&(0x7f00000001c0)='./file0\x00', 0x10, 0x205b9e) (async) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x22) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="ed", 0x1) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504", 0x4, 0x8, 0x0, 0x0) (async) r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSKBDIO_GETENCODINGS(r5, 0xc0105715, &(0x7f0000000000)) (async) recvmmsg(r4, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2840, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) (async) readv(r4, &(0x7f0000000040)=[{0x0}], 0x1) close(r3) (async) r6 = socket(0x800000018, 0x1, 0x0) bind$unix(r6, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1) (async) r7 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async) r8 = socket$inet(0x2, 0x3, 0x102) shutdown(r8, 0x2) (async) ioctl$WSMOUSEIO_SETPARAMS(r7, 0x80105727, &(0x7f0000000300)={&(0x7f0000001a00), 0x12}) sysctl$vm(&(0x7f0000003d40)={0x2, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000080)={0x1, 0x41}, 0x2, &(0x7f00000000c0)="a6b785cbed0543105acce82dbb02129b45091c73498c6a98513d0cef27b36ec1cbc5eb716a4104c686066171c669fc4f198d5183ad38822b4285679cef1b5bb9c94c4b6e6ef0d9e71db3cd91a48fcf2369d0073fecb679407aa8e3009058183eeb4144a6d47e436f322f18f79cecc9cf81e9afbe4140fc39ba708e8129f4a51530ce7581676e8457c89249584ddb710844f931af9920b8969229c8d7b92eca9452969d31b90bf8bff6b2f815ba983e7642fec8a2d7aa28e5fb4398b310c49a62a1d86cdf5e9ae70c0d8b3266400136db775c4186ae5bbf9c9cc697d51f06ceb7bb21e8205c721338238e03a68d0026d64444e40132014ca18a2368224c7ae33d8018be641c793bfe127df59da6c60cef3d43941a48438ecbf99e23dd719b397228663dc2ddcc4b66b6441a17a14e162b3194250b9c96e89733394e0ed0b1617d625c27e160702bb2767e055a00d4e229a12d31a084d1ccc2633c45e030e73b0ece74738ef7520f20189082cc90cbbcddd0e409169d1df8e59e37a4c4cefabfe0b37d7daf9674ce52b9028df886af30f64518075801d5cd924909a6d296df95ed640f76cf732928a496df4cf2f4520a5e1a970aaf3db8a9b42e2ec1a3bbd06588d9135b45711566fb750c0bd71f7af86a7ab2b4af66a1291fc7b8597d35606093e7c4c1a5f64c05571ca23d7818564383843a82c1dd75285ac5e2083b64fa1d2c1ff97e3e07f567c09bf978517db0bb640267e21c3e275863a4d576f9f62ba69e56294fb3735ad96efa4b165ba9fd08ff8c446bc253f3f0d41a8dfa77ed0815230e6768435fb3cc3a12b571d0836d264290a94f5f6a950ebb6d9779b6a8ae0489e027f81fa6c8e1278f4b6900e243828117ebe8bc1b62ea615e2580aa80fe8d88a2bc557357a1e47fecffa86b2dcb49d96d05012be7199f10d8219e7c13e268fa4391877649dbbdea46179a4a616603febd6b4e6385ec6aa24c7ae0dc4b0c90f59f5e3ede2d8027dce447265d8f85a0e77189d19d856e4f206c038e34cbc5902939f0331b1eeaf9f2b11010a758a768a58d19735bc6afe29880e57af6a6e3eb9619216c3bccd5341f0cbdf8c2d3a370602be79b55e82fda620334ac881617135d3c6f4741b7263465efd73cb7fa2d061dfb98b0fe0f33f675359121366178b4c3207464c734662b14621e33877713df5a68f3689b45ab55565d7ad8be4b67aaa65b4f0d6cd9a693213863351f7db59d42cc744240623593dbc6b329db9c1cb5abe755adc58966c9a1a5783d22f9962abf1cc7c8f20a3f3917b83a0d791c8f49ac3595e6629b12cc168fde7c9f51f60c0a2774310c47169e20268bf7ca329d75d17330fa46b6950d8333cf4770a807e961d9a975dbfc2666c614880bf4584f655464ef38681153c10822f9fb15e4fcbcd541414835f0eb7d42fb58e3a787ed94cdb404e8e684ee537977ccd86e48b041052e24d1a9f4768a634ece61b493392c4a73862d0d6b4e2a4f6f0e0bcc030e828e0ff01eade3e045fb1d495472185bc0eee1bd3da64a158a1318720a3a8da5fc39fea335423d5dc1f1f66a5998819440fe53e6316f91ac6cf04fd5cc556f06cbad0e3e6c4c94310a38f6af5c2c4b2353f46b1c28b59a3ca48d26dd0ed3d8a41b41ef521700b97a3ae32f9fef2a2b0eba3926850b28a6d6794bcd2a0b91e642d2d95585f551f7aacd39ad0895244e557fec312094d8d4293d2e6c908cda0db51f8dbc5bed15a8a0f66ba8b47ac76e358f8c1d2e1dcd7de0a552c5bdf339c0a229d359651a1f82b1649a2ac1760ff84df6ff66c9b79211aed5c35a96a2440e8aec513903676ed3ee919ff458a9237ad9a6e1646c02fe291b526faa742cf03933209dd34523b27bba6f9753fe43d7919338bc7e430c3d98dcd3f70c2ef0ad1980014e07551804562dad0bf99369b11d783c155b6adf0218717dceaeee2d2d3cf1f46be6ef3c199e6b0f6f24fc5ee36d8263081c557f2372c897f90f3367575951404f8c1c1a37e891b2d91f48136f4c8d683cb6541a4c67e58e9d016226673e0a69222c8f2151d4fb2dd7c6a5e857f990e92d2963f1cff78acc069de32812d9ec974c617361f70e670403e1956c28f6c36006e26a21777c71429ce4e5d6735e99f5ac54e621280db7f75e8dd33610c9094e5e693fc7b6324ec7f378a661c70504571e7498d5fea8afcefc4f5160d4e2835b5f8233491e03e071c46f3cc8522b643a7f8bda48ff258fe166f7b56984409f88858c0bad35063cc391914f1328d34d6979fdc779fd28151fcf4fefd6789aad4eb553f03c9cf2a9a724d8d101b1615e7e6a392c13d378a3d4cb9c0fa2c066683b68f113fca867c9bb7e7e30c861f2ef1073f93b036304b8c3b44264a57fb21a3f220ccac2654c72a5cb4c2982a01548c766dfec9657aa28d685085bfba8fb7e09bd095dfeb2fe40ec7dac93fa585dc43ef76b95af850102c2c3b6f90f73352de003698928fb33b2f52be0ef6845cd11054f59fa6adbf1b755713bd310018218d21b32600ec7ff8602c48899651d539be3a4e35e90be61008875fc0dcbaf1d85f1893e0871a928e5dd3b8ddb2b6e8a011018ba6f49f1befa4c1a79e9043788baf158aea8a7c6dfcae2a723ebee29266972e1eba72b2fe66ad6ee53075e0b75ca4dcf42b5598aabfed97965f134e40287ff87b9bb5e0f8b83499c7d82f57c8a083fe3d73c2b3defca127f3fc800dcf486050fad15c67863d6610e7cc20759f52aab8fb605789b40d7afcfe23311bf00b368477824ce1993f97d9e5eb5da9f18515d22d0bfeeafc927f7857336883799f0eaefac45769d1d0daf11790b7668dac1cc5a4cebb9224e98fbd2f61e5068c4767c6d1f83c1108de68b1473f45eb4d2354dbca37346d2c0805557d4623a4e0ceb3affab53b1e2c32d5dc96a71f05eae3cc90c07d52d88492d072559241fa49bb4d153fc9fff7f112ce9bed0f9042132ea08f282dce7c663019630004f5d62d07d67453ecfd1b47dd729707b5afbb73374c8db21b35e5e7eae5e4f94b4cf6410cce8c16818b4013a7afb28cac5c616685ee681bb02d962f0fd48b8d845d420e1c587cbbd1f3b50cdd1310934a84d417b7c0c921a5b4accb42668f25e90eadba75ea3a9563003a1b15fa6febfb8abac6d4f69bb37b4c1c1c23b1e56705f673cfd97bc974fe49267529ef2939516f6eea0d559dc03a9eede67d98c2e41426c6857eb35c5954f4fbdda114c3e379c9d038304998938e2e90e8333b2d73ef59574fd9a9b2da83acbf1fb97055db2cf0a36cd15a8435caa06af22afaa0a5c64ca4e23ec3335a2b65b2e8b0cf0bd1e689755d17cb83adc259b33310757caad393ed133373a61ededb7d87db872d2041051df7ba39999a54c96d03b809cb209e1774e531619ac3ab272bf5e06235a5c5f64ece9015627cadac2dce717b58904f63450187876a1f105f3975c3d18c1a2dc7d5cdbd21d357465e61b1bb07954f523d273abed5ef73a468b30378b15bcf9bc9c5fa5f42ee65eb0baaea08bd80bf0f39dae336cd6227696c44d450cd79bd866dcf2443d7a93d47b228231641d325c95f3eb75a5e406f1c92151b5c8e709f0489c6192037aebcb0eeb8f9589e12f72495c9eb6eb4b11ae07fb7d0701d2108d1894aec65bbd6cec97e99418f21c79933a07a427b7055589d34724bdd2c02415d2cda410f04780215bd8a9c786dfe7dc6fd15bcc4eead7be9e36291abd1ccabe0cee110781f3ded533c07859d20f46343f5f5dcbb6a344ed572e59fd994a0624f940258b1c232081683bbbed662b7c7e7c0400a1ba5453c7c959d408d0d686830818663b206bf97dd8cb5798f26d1811ff3f4eda43185b04451a63f24420f5aff0db05e874c97faa98a409de95daa970c821ac2c8eb696ff12b1f4289bb3a3d1b60a050c1aed912550f8b44b8ec5b0e1ac87bdb7cc0837b30fcbef53636e52daa9d76e688238ff623c95d6781ebb4599da2343c036acd11cceb09dee3b87a0e81ef5c9ed20a783c56fc8bdb826574270f455924582f20c507ffe3b330b86b1908a29a77a809408fe78b2affd49000167823a249045b6dcd07018b3ba13c516847a72546065d722b9a8acba5ccc955abf5481ecaca2ae9c18a125bb0f5e30c2163f762d7374faffeef3075109a8a4a66bee486312bf51c5d7dc97c6c7de244ae515d2d57d59f5317862fd8adb5f9b84c0c1da4b9e758258e735b1480f0bc5722862dfbbf173dcbea89b1655e48ef629d6263f2e1c012003311c58031002f03709d5b50aae82b58071c1ee990cde25b79a0607227e83bbde9719e855f16350678d5e09628fd5017c9d992be7a0cdb86375ad1d825cc6797346ed6ccc618ddab402353ac838ee1d0a81d67d5028c747779485cc2935c4431e1989bd0eca90c22fa84ce699d0bf16c687730130a0503de24783769f4d5f8785d120c96878e552f04a03e4cd280b3181ebbbffad3c9c43385fe0182940ac76852ab425b4bb2edc227254024747690f9b3301363dad2cd7c4fd1ee49ee578ca84d33617c423cacdba7938935854593f7221b0855e4ca7c500b9b6719e246730b3d0af8c1748f72a5a90afd3e1cc9253588ca7ad0a1b1f52fab288bfab7194b7c915d6f513ef2e941a23174ccb4a3f22a26c6cd845693c7e6eb40dd556c503d57c49ca95f66ae264a8c0b26d4243ea7c39b6627081475f7c6166ccace3a6a83006c2b7fd1e2bc0c2675450b206f62645240beaf64b623c374b7d24e26657ee851c1d33cba5ecdc6b182e9e8bd8432256686e123e089c8f40a3dc2f0a9d65d9f7c9d6536355930ea3188c1ef2de21865ee9c167f64287332beccb6d46a503d4dc4d509b59eee9c43d2b5655a90649e82f3cf5f372ddda13714d16c7e748ca3976601b323d694934dd674e26c65f1f7980c8fc86e6150d23cb343db45d239d0a350fe23963407212bd497a2b0bd103fc8aea5b7c69e8e3dd51eaae129b80847b2f6cfab162bc684be1693928b5331f6c94a6bd1c27febc94d400086c7b5e8a9c05f97f03329f238d86638486e352b0bb344edf475571560566256a9bfd0bb8c642636e67ab7f8c0cd2a5c346889e578266d8a2d80de1ad22ea998d947ece07172a774064ee064e52734020322f90e90c6ef6de0bccd7841194051e35c1095bff01ed815767306cecf6cd01e6929a7267559463023a03234b7118c6aaa14ea59bf9a4d72e3458d061e82e2105367f9320df5e23cdec81b5303cd1b1237fdfca8d0749c6b3013c6e9c431a9afd61b707e000fdd31d62ddba871625ebc5c614bea7fe52e8c6ef5efa601415372281852fce8c21cbe2e7a0ddb54b1d2a92554b7d7a82b49e81302517c000c43eb159e2e99317636e30ef10e8400fde871ec79aabe9f068dcd4e04ac8894e4e389bc4cfb7c90e26a904617f46e98d401af62507bae06f05fe6b5e9d69805ff7d43d7cca9e0c1ecf0b1b71c69fde06842d83f1f9320f4c7baf97ecfc0f423d0db0d95fc90e29b996e418a95742cdc1284ef689f593be89b8c0730236bae9b954b78c7804f4d839b84ff2d8af90e84d5d9aaeca3842a36e184b602066c3e5b2c66978b09875ebbf058fcd7a969507ad6552046b8d6d193dfc91ef73d85d21496a703dfbc30220f6765b05bb9dcbae401f4aa49ac790ffaad7513672f6eb5da0a344dda3e89a1d90c0badf087692254cdf837ec7855a0c1bdcbd24d0d1641ae1a273d4999f33adb777a7115e0b38880d168c26f9241c5ff33295ab9a3844c6a75e054e7de6132cb2ec", &(0x7f00000010c0)=0x1000, &(0x7f0000001100)="6e94be8c0295bf62d9edd9f1600d45d3920433076c25c8290444cbcb816754417bba6a0e096fbe0146ce7818806dd8da12804740ade3b61065c7b50998d796a891e44246792c37e9651323389916b8cde5c93146ae314939b0c80d69ff16e5583c210e24f0b59730ca363ca81ffa7264bb628e11a3224c21bba87c11f05841cd88ad7f405ae747b8af9f6200697dd4c8e90948cd988194549adb0f1b085ec6f7eaf12668a0314657c3030d77cdc235288ac17c4106dd3e0d2fe6930dda8c3996415d76664ee62c498494c267efee38d8d87a536ee4b9fd5ba53a6a3fa9a9a68602a0ec92c5f3b3632c3bf77e2ba9", 0xee) 1.242066335s ago: executing program 6 (id=620): ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, &(0x7f0000000000)) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$FIOGETOWN(r0, 0x4004667b, 0x0) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x35, &(0x7f0000000040)="03000000", 0x4) r2 = accept$unix(r1, 0x0, &(0x7f00000000c0)=0xffffffffffffff5c) getsockopt$sock_int(r2, 0xffff, 0x1007, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = dup(r0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3, 0x5}, {0x1}, {}, {}, {0x2, 0xade}, {0x3}, {0x0, 0xaa59}, {0x3, 0xb3d0}, {0x2, 0xfffffffe}, {0x2, 0x100}, {0x3, 0x2}, {0x0, 0x80000000}, {}, {}, {0x0, 0x6}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x2}, {0x0, 0x4}, {0xbb08c0840fa32129}, {}, {0x2}, {0x0, 0x4}, {0x2, 0xfffffffe}, {0x1, 0x1}, {}, {0x0, 0x200}, {0x2, 0xffffffff}, {0x0, 0xfffffffd}, {0x1, 0x4}, {0x3, 0x8001}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) ioctl$VMM_IOC_INTR(r3, 0x800c5606, &(0x7f0000000080)={0x3, 0x5, 0x1}) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x1b, 0xfffc, 0x0, 0x0, 0x8, 0x3a, 0x0, @multicast1, @loopback}}}}}}) 1.241319867s ago: executing program 6 (id=621): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x100) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0xb345, 0x3}, {0x67d, 0x7}}, 0x0) r1 = dup2(r0, r0) chflagsat(r1, &(0x7f00000000c0)='./file0\x00', 0x10001, 0x2) r2 = socket(0x18, 0x1, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000140)=@abs={0x1, 0x0, 0x0}, 0x8) getpeername$unix(r3, &(0x7f0000000180)=@abs, &(0x7f00000001c0)=0x8) r5 = getegid() truncate(&(0x7f0000000200)='./file0\x00', 0x79bd) setgid(r5) r6 = open(&(0x7f0000000240)='./file0\x00', 0x20, 0x48) r7 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000700)={&(0x7f00000006c0)={&(0x7f0000000280)=@un=@abs, 0x8, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/55, 0x37}, {&(0x7f0000000300)=""/80, 0x50}, {&(0x7f0000000380)=""/70, 0x46}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/172, 0xac}, {&(0x7f0000000540)=""/39, 0x27}], 0x6, &(0x7f0000000600)=""/190, 0xbe}, 0x1000}, 0x10, 0x1003, &(0x7f0000000740)={0x4, 0x1000}) rename(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file0\x00') ftruncate(r7, 0x7) getpeername$inet(r6, &(0x7f0000000800), &(0x7f0000000840)=0xc) rename(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00') ioctl$FIONREAD(r4, 0x4004667f, &(0x7f0000000900)) execve(&(0x7f0000000940)='./file0\x00', &(0x7f00000009c0)=[&(0x7f0000000980)='^\x00'], &(0x7f0000000b40)=[&(0x7f0000000a00)='+)@\\-\x00', &(0x7f0000000a40)='^/)\x00', &(0x7f0000000a80)='c\x00', &(0x7f0000000ac0)='/\xb0\x00', &(0x7f0000000b00)='{&/++/%\',\'@\x00']) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000b80)={'./file0\x00', 0xfff, 0x9, 0x4, 0x0, 0x200, 0x0, 0x10001, 0x1, 0x2, 0x52a, 0x3}) getitimer(0x2, &(0x7f0000000c00)) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) recvfrom$unix(r1, &(0x7f0000000c40)=""/152, 0x98, 0x43, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x3}, 0x8) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) ioctl$BIOCGETIF(r8, 0x4020426b, &(0x7f0000000e80)={""/16, @ifru_data=&(0x7f0000000d80)="12f691ad9077b27d56eee3ead9d67d3f3d63fe566ab445c7d0b9a6dab51bdca1967e303ea3149d9b3a352e07c3dffef4020fed3b98bdaf36b2fb048a63ac31cc9f3b3cdd5f50cc6a546217f50aa1e7b601ac6f45d6295ec7f0cf46d1e82fce421f9cf811dae93f8b697b178bbb2e10505d3d6c90a79d566659d7a2ef5d956b0935040dd45458d903e23c9bbe8f503baca012a6583de50d3a19e014bbc2da7e2be7441295294d7af1408aa70afe94b0df0200c2a5ba3f3d238bc5b1207119477a382b6dd1b7e81a988f54b693da08250e186e69da71731054b083db0119257aadc3cf8a53e2ffbed33ed913d6cddfed4f"}) r9 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000ec0), 0x10, 0x0) r10 = accept$inet(r1, &(0x7f0000001040), &(0x7f0000001080)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000001500)={&(0x7f0000000f00)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000001000)=[{&(0x7f0000000f40)="2b001f48e61090377e2a967f8729fffff3d3a499d2d0279c30402655c0be9bc6f61f1e4cb432a0f83250b79882085579104460d1a96cce86e0493f68190eb1eba22adefad39fef644a9ec714cbc2a8bca42fbf64883e7772bf6daabe7a4ed44ed55ed678123d1773e7d02bbfff4e88e146b34cb26fe29f852598092228a1b14c24ac77485dc60019e64d4999e83b82f46b602f2cef", 0x95}], 0x1, &(0x7f0000001380)=[@rights={0x20, 0xffff, 0x1, [r10, 0xffffffffffffffff, r7, r3]}, @rights={0x30, 0xffff, 0x1, [r11, r6, r3, r1, r0, r2, r3, 0xffffffffffffffff]}, @rights={0x28, 0xffff, 0x1, [r1, r0, r4, r4, 0xffffffffffffffff]}, @cred={0x20, 0xffff, 0x0, 0xffffffffffffffff, 0x0, r5}, @rights={0x18, 0xffff, 0x1, [r8]}, @rights={0x20, 0xffff, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r8]}, @cred={0x20, 0xffff, 0x0, 0x0, 0x0, r5}, @rights={0x18, 0xffff, 0x1, [0xffffffffffffffff]}, @cred={0x20, 0xffff, 0x0, 0x0, 0x0, r5}, @cred={0x20}], 0x148, 0x403}, 0x9) 1.241023235s ago: executing program 4 (id=622): mknod(0x0, 0x2000, 0xd02) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) mquery(&(0x7f00001cf000/0x3000)=nil, 0x3000, 0x4, 0x0, r0, 0x4) ioctl$WSDISPLAYIO_ADDSCREEN(r0, 0x80245753, &(0x7f0000000000)={0x7, './file0\x00', './file0\x00'}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000080)=0x1) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) rename(0x0, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETA(r2, 0xc0284414, &(0x7f0000000340)={0x1, 0x3, 0x1, 0x80, "561a8ebd00000000050000000000006e00", 0x10005, 0x2e5e}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0x407, 0x3, 0x1ffffffffffffffc, 0x9, 0x8, 0x10000000029}, 0x0, 0x0, 0x0) r3 = openat$vnd(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000440)={0x0, 0xb, 0x0}) syz_emit_ethernet(0x0, 0x0) 1.04274482s ago: executing program 6 (id=626): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000080)={0x35b, 0x16, 0x3, 0x172, 0x2, 0x4, 0x2, 0x10, [{0x9, 0x2, 0x1000, 0x6}, {0x9, 0xb, 0x100, 0x201}, {0x7, 0x7, 0x4e, 0x8}, {0x2, 0x0, 0x5, 0x4013f}, {0x2, 0x9, 0x3, 0x9}, {0xfffffffd, 0x40, 0x245, 0x7}, {0x1000, 0x7, 0x692, 0x5c7}, {0xa, 0xea, 0x3, 0x2}, {0x6, 0x6, 0x989, 0x5}, {0x2, 0xfffffff8, 0x7, 0x2}, {0x2001000, 0x2, 0xd9e, 0x3}, {0x8d6, 0x4, 0x2, 0x3}, {0x6c, 0xc3f5, 0x40000, 0xb35}, {0x6, 0x750eb550, 0x9, 0xa5d}, {0x7fff, 0x9, 0x7ffdffff, 0x9}, {0x6, 0x6, 0x2a4, 0x2b}]}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x40000800) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0xe0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r3 = syz_open_pts() r4 = semget(0x0, 0x1, 0x281) semctl$GETVAL(r4, 0x2, 0x5, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r5, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) setsockopt(r5, 0x0, 0x66, 0x0, 0x0) close(r3) r6 = syz_open_pts() ioctl$TIOCSETAW(r6, 0x802c7415, &(0x7f00000001c0)={0xffffffff, 0x3ff, 0x97, 0xeffdffdc, "8bfdff7c691400000000000000000000000800", 0x15, 0xffffffff}) writev(r3, &(0x7f0000000100)=[{&(0x7f00000009c0)="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", 0x13d}], 0x1) read(r3, &(0x7f0000000200)=""/244, 0xf4) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000080)=0x9) close(r2) ioctl$FIONREAD(r1, 0x800c745b, &(0x7f0000000080)) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xfffffffe}, {0x3, 0x0, 0x0, 0xffffffff}, {0x7e, 0x0, 0x0, 0xbc2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9) mquery(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6e7550cb152ad8b1, 0x10, 0xffffffffffffffff, 0xfff) 915.070935ms ago: executing program 4 (id=627): sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00007e5000/0x1000)=nil, &(0x7f00000e1000/0x4000)=nil, 0x200007fffffffffe}, {&(0x7f000025c000/0x3000)=nil, &(0x7f000074b000/0x7000)=nil, 0x4}, {&(0x7f00000a3000/0x1000)=nil, &(0x7f0000795000/0x2000)=nil, 0x9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f00002cd000/0x3000)=nil, 0xfdfffffffffff7f5}, {&(0x7f0000797000/0x2000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f000060b000/0x2000)=nil, &(0x7f00004ef000/0x2000)=nil, 0xffffffffffffff0b}, {&(0x7f0000123000/0x3000)=nil, &(0x7f00003d5000/0x4000)=nil, 0x8}, {&(0x7f00002f3000/0x3000)=nil, &(0x7f000063b000/0x2000)=nil, 0x5}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00002b8000/0x3000)=nil, 0x3}, {&(0x7f0000121000/0x2000)=nil, &(0x7f0000750000/0x2000)=nil, 0xc6}, {&(0x7f00005b9000/0x2000)=nil, &(0x7f00005c5000/0x4000)=nil, 0x9}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0x7ff}, {&(0x7f0000539000/0x3000)=nil, &(0x7f0000508000/0x2000)=nil, 0x10000000000008}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f00000f4000/0x4000)=nil, 0x80000000}, {&(0x7f0000148000/0x1000)=nil, &(0x7f00001ae000/0x3000)=nil, 0x1000039f7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000048d000/0x2000)=nil, 0x5ba3}], './file0\x00', 0x4}) r0 = open(0x0, 0x0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) r2 = openat$wsdisplay(0xffffffffffffff9c, 0x0, 0x1, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100800001}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGTSTAMP(r0, 0x4010745b, 0x0) ioctl$TIOCSETA(r1, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, '!\r\x00\x00\x00\b\x00', 0x7, 0x5}) setsockopt(0xffffffffffffffff, 0x4, 0x9, 0x0, 0x0) r3 = socket(0x18, 0x2, 0x0) socket(0x800000018, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0x4100000000000000, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e5", 0x1) r4 = socket(0x18, 0x3, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x2, 0x1, {0x100000000000000, 0x100000000000000}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r5, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) ioctl$FIONREAD(r4, 0xc028756b, &(0x7f0000000240)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 818.039185ms ago: executing program 0 (id=635): writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@random="97ca0e9fef76", @random="94ea09066dbd", [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x68, 0x4010, 0x9, 0x2, 0x0, @multicast1, @broadcast}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setreuid(0xee00, 0x0) r0 = getuid() r1 = getuid() r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r2, 0x0) r3 = syz_open_pts() fcntl$lock(r3, 0x9, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff, 0x1000300000000}) chown(&(0x7f0000000040)='./file0\x00', r1, 0xffffffffffffffff) setreuid(0xee00, r0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) rename(&(0x7f0000000100)='./file0\x00', 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000000)={@random="97ca0e9fef76", @random="94ea09066dbd", [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x68, 0x4010, 0x9, 0x2, 0x0, @multicast1, @broadcast}}}}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) setreuid(0xee00, 0x0) (async) getuid() (async) getuid() (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r2, 0x0) (async) syz_open_pts() (async) fcntl$lock(r3, 0x9, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff, 0x1000300000000}) (async) chown(&(0x7f0000000040)='./file0\x00', r1, 0xffffffffffffffff) (async) setreuid(0xee00, r0) (async) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) (async) 748.917933ms ago: executing program 2 (id=637): r0 = socket(0x2, 0x3, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) connect(r0, &(0x7f0000000080)=@un=@abs={0x1, 0x0, 0x3}, 0x8) nanosleep(&(0x7f0000000000)={0x2, 0x1}, &(0x7f00000000c0)) r1 = fcntl$dupfd(r0, 0x0, r0) recvmmsg(r1, &(0x7f00000015c0)={&(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000100)=""/65, 0x41}, {&(0x7f0000000180)=""/210, 0xd2}, {&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/237, 0xed}], 0x6, &(0x7f0000000040)=""/21, 0x15}, 0x7}, 0x10, 0x0, &(0x7f0000001600)={0x7, 0x42}) execve(0x0, 0x0, 0x0) 748.624859ms ago: executing program 0 (id=638): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x6010, r0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x3e, 0x62}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$FIOASYNC(r1, 0x80047470, &(0x7f0000000000)=0x2) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/16, 0x10}, {&(0x7f0000000100)=""/165, 0xa5}], 0x2) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)="9b7c9cb1", 0x4}], 0x1) syz_open_pts() 650.561681ms ago: executing program 2 (id=645): getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, r0, 0x0, 0x0, 0x32, 0x9}, 0x3, 0x7, 0xffffffffffffffff, 0x0, 0xc7f, 0x400000000009, 0x800800}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f00001b8000/0x3000)=nil, 0x3000, 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37) 647.829487ms ago: executing program 2 (id=647): r0 = socket$inet(0x2, 0x3, 0x0) close(r0) r1 = syz_open_pts() readv(r1, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/1, 0x1}], 0x1) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x20008, "59a6a348c00e00000000000000000000000100", 0xe3, 0x9}) unveil(0x0, &(0x7f0000000080)='c\x00') r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x35, &(0x7f0000000080), 0x0) r3 = socket$inet(0x2, 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x1e, &(0x7f0000000080), 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x5f, [{0x3}, {0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {}, {0x3}, {0x0, 0x20000000}, {0x2, 0xffffffff}, {0x0, 0xfffffffd}, {}, {0x0, 0x1ff}, {0x0, 0xa}, {0x0, 0x1080}, {0x3, 0x400000}, {0x0, 0xa1f9}, {0xe05f4bf536f82bc1, 0x3}, {0x3, 0x800}, {}, {0x0, 0x7ff}, {0x3}, {}, {0x3}, {0x3, 0x400}, {0x0, 0x3}, {0x2}, {0x0, 0xfffffffd}, {0x0, 0x9}, {0x3}, {}, {0x1, 0xa}, {0x1}]}) close(0xffffffffffffffff) r5 = socket(0x800000018, 0x1, 0x0) bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1, &(0x7f0000000140)=0x3, 0x4) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) 622.354941ms ago: executing program 0 (id=650): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) setreuid(0xee00, 0x0) r1 = getuid() chown(&(0x7f0000000040)='./file0\x00', r1, 0xffffffffffffffff) chflags(&(0x7f0000000100)='./file0\x00', 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/201, 0xc9}], 0x1, 0x0}, 0x1000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$VNDIOCSET(r2, 0x80106468, &(0x7f0000000440)={0x0, 0xb, 0x0}) execve(0x0, 0x0, 0x0) 621.188407ms ago: executing program 5 (id=651): r0 = msgget(0x3, 0x280) (async) r1 = getgid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, r4, 0x22, 0xb7}, 0x55, 0x1008, 0x0, 0x0, 0x8, 0x7, 0x40000000000, 0xe63}) getgroups(0x3, &(0x7f0000000080)=[r1, r2, r4]) r5 = socket(0x18, 0x2, 0x0) sendmsg$unix(0xffffffffffffff9c, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="23b30925c0da23211e7bf4abd439", 0xe}], 0x1}, 0x404) (async) ioctl$FIONREAD(r5, 0x8020697a, &(0x7f00000001c0)) msgget$private(0x0, 0x604) msgctl$IPC_RMID(r0, 0x2000000) 579.181151ms ago: executing program 7 (id=652): writev(0xffffffffffffffff, &(0x7f0000000580), 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00']) open(&(0x7f0000000040)='./file0\x00', 0x8000, 0xee4bce5bb233ab95) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = semget(0x0, 0x1, 0x281) semop(r0, &(0x7f0000000000), 0x23) 578.723193ms ago: executing program 1 (id=653): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f00000002c0)={0x10, 0x7, [{&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x5}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x7fff}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x100000001}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xa2d4}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xb1}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x4}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xc3}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x6}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x9}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0xe}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x9e1a}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x3}], './file1\x00', 0x9}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) r2 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x1010, 0x0) poll(&(0x7f0000000200)=[{r1, 0x1c4}], 0x1, 0x1ff) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r1, 0x2}) close(r1) 577.788019ms ago: executing program 5 (id=654): ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x1, 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(0x0, 0x0) rename(0x0, 0x0) mknod$loop(0x0, 0x2000, 0x0) link(0x0, 0x0) mkdir(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) rename(&(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file2\x00') ioctl$FIONREAD(r0, 0x80206919, &(0x7f00000001c0)) syz_extract_tcp_res(0xfffffffffffffffe, 0x2, 0xf602) openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) setrlimit(0x0, &(0x7f0000000280)={0x7fffffffffffffff, 0xfffffffffffffc38}) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@empty, @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @empty, @local={0xac, 0x14, 0x0}, @local, @broadcast}}}}) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$KDSETRAD(r1, 0x20004b43) syz_emit_ethernet(0xde, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]) 363.638153ms ago: executing program 1 (id=656): mknod(&(0x7f0000000040)='./bus\x00', 0x4, 0x3ff) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0xff3f0000) r1 = socket(0x2, 0x1, 0x0) select(0x40, &(0x7f0000000140)={0x8, 0x1008000003ff, 0x1, 0x0, 0x2, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x0) listen(r1, 0x8) syz_emit_ethernet(0x138, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0]) execve(0x0, &(0x7f0000000340)=[&(0x7f0000000100)='tap'], 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) shutdown(r1, 0x2) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, &(0x7f00000010c0), 0x0) 359.485988ms ago: executing program 7 (id=660): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x18, 0x3, 0x9) ioctl$FIONREAD(r1, 0x80286989, &(0x7f0000000100)) r2 = msgget$private(0x0, 0x492) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000140)={{0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x85c, 0x7ffffffffffe, 0x0, 0x0, 0x4, 0x7b, 0x8, 0x8000004}) bind(r1, &(0x7f0000000000)=@in={0x2, 0x0}, 0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x3, &(0x7f0000002480)="71f91eca6e530c79e2f8e2a2ce3471ac0058bc5a91501d94a34bfec38a820600000000000000dc0225f0e4cf52b7d99d15d923", &(0x7f0000000080)=0x1232, 0x0, 0xfffffffffffffe4d) pipe(0x0) 289.409192ms ago: executing program 0 (id=661): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$TIOCSETA(r0, 0xc148445e, &(0x7f0000000000)={0x5e, 0x2, 0x8, 0xd5, "70da6fc900000000000000000000000000000100", 0x80000000, 0x101}) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) (async) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x80, 0xa1) r2 = syz_open_pts() flock(r2, 0x1) (async) fcntl$lock(r2, 0x8, &(0x7f0000000140)={0x0, 0x1, 0x7, 0x100000001}) (async) syz_open_pts() syz_open_pts() (async, rerun: 32) ioctl$VNDIOCSET(r1, 0x41406474, 0x0) (rerun: 32) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x2}, 0x8) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r4 = socket(0x2, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) (async) setsockopt$sock_int(r4, 0xffff, 0x1, &(0x7f00000000c0)=0x6, 0x4) (async) sendto(r4, 0x0, 0x0, 0x401, 0x0, 0x0) (async) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f00000001c0)={&(0x7f0000000100)='./bus\x00', 0x50, &(0x7f0000000140)='./bus\x00', 0x6}) 288.152703ms ago: executing program 5 (id=654): ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x1, 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(0x0, 0x0) rename(0x0, 0x0) mknod$loop(0x0, 0x2000, 0x0) link(0x0, 0x0) mkdir(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) rename(&(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file2\x00') ioctl$FIONREAD(r0, 0x80206919, &(0x7f00000001c0)) syz_extract_tcp_res(0xfffffffffffffffe, 0x2, 0xf602) openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) setrlimit(0x0, &(0x7f0000000280)={0x7fffffffffffffff, 0xfffffffffffffc38}) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@empty, @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @empty, @local={0xac, 0x14, 0x0}, @local, @broadcast}}}}) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$KDSETRAD(r1, 0x20004b43) syz_emit_ethernet(0xde, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]) 288.038094ms ago: executing program 0 (id=662): open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x310, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x6, 0x8000000000000001}) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCIMMEDIATE(r0, 0x80044270, 0x0) mkdirat(r0, 0x0, 0x8) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r1, 0x80085762, &(0x7f00000003c0)={0x1, 0xfffffc00}) r2 = open(&(0x7f0000000040)='./bus\x00', 0x40, 0xb3) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000100)={0xffffff00, 0x3ff, 0x8, 0x2, "c5369c8412ab26f66d1183f0f93356761b7ada19", 0x8, 0x7fff}) 287.367874ms ago: executing program 1 (id=663): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) r0 = open(&(0x7f0000000080)='./file0\x00', 0x200c0, 0x0) r1 = kqueue() r2 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) ioctl$VMM_IOC_INTR(r2, 0xca605601, &(0x7f0000000040)={0xb, 0x0, 0x200d}) kevent(r1, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffffa, 0x8, 0x20000000, 0x7fff, 0x1}, {{r2}, 0xfffffffffffffffb, 0x40, 0x1, 0x3, 0x3}, {{r1}, 0x2, 0x4, 0x2, 0x7, 0xfff}], 0x9, &(0x7f0000000180)=[{{r0}, 0xffffffffffffffff, 0x62, 0x0, 0x0, 0x7}, {{r0}, 0xffffffffffffffff, 0x13, 0x20}, {{r1}, 0xffffffffffffffff, 0x31, 0x80000000, 0x101, 0x2}], 0x6, 0x0) 278.062503ms ago: executing program 3 (id=664): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r0 = socket(0x18, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(0xffffffffffffff9c, 0x1000000029, 0x3, &(0x7f00000000c0)="b211", 0x2) r1 = socket(0x18, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x3, 0xfe) bind(r2, &(0x7f0000000000), 0x10) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0xa) recvfrom(r1, &(0x7f00000001c0)=""/113, 0x71, 0x0, &(0x7f0000000080)=@in={0x2, 0x0}, 0xc) semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff}], 0x2) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r3 = socket(0x20, 0x4, 0xb) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)="b68cd6ce9a276fc69ab98c90c7b17ba9a44db2f3a133a24be4dd72e0d56776c288675532b926a33d327c6a8cde3e960caa0153c233dcb42eaa5e489e637b0952db42e570a5b99061a2d1dfc0e059d585a76cf3b0ae39ab7548f603c315b84f68d244d666d70da315d80576db4218e5f71e2e7f437206aa46a241696c59a1d62a0a650a0b09e79218c46aec119f8efc621000000055235bd961626f02495da8cb1326d52bcdd0b23945f6de2220f2ac0abb0088eb3bf800a94b", 0xb9}, {&(0x7f0000000140)="e9abc389628413677712b0c7fd625fa2f87e1a7228c662157e3135a462cf8add48edba125c63f91efffe32e8abc4b8ebe212899ab3a89863045091be5e28031f7fb0835ed5667ea9df128d3ae41df5566dd1b47f02d550162d2977d609da446c02eb16deaf1015df23165669fc85fe9c04f164169ab698", 0x77}, {&(0x7f0000000580)="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", 0x3ad}], 0x3, &(0x7f00000002c0)}, 0x4) 255.718329ms ago: executing program 7 (id=665): r0 = semget(0x3, 0x5, 0x222) semctl$GETALL(r0, 0x0, 0x6, &(0x7f00000007c0)=""/198) r1 = getuid() (async) r2 = getuid() setreuid(0xee00, r2) setreuid(r1, r2) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4, 0x0, 0x1, 0x0, @multicast1, @multicast1}, @icmp=@info_reply={0x10, 0x0, 0x0, 0x80, 0xd5b}}}}}) (async) r3 = socket$inet(0x2, 0x3, 0xfc) (async) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSETA(r4, 0xc0084428, &(0x7f0000000740)={0x2, 0xfffffff9, 0x2000000, 0x3, "01d04b0a0047c1d100", 0x3, 0x6}) (async) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000)) 255.248744ms ago: executing program 1 (id=666): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/265, 0x153}], 0x0, 0x0, 0xfffffffffffffd8d}, 0x6}, 0x10, 0x0, 0x0) close(r0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r1, 0x0) execve(0x0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c", 0x4) r2 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file1\x00', r2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000005c0)="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", 0xff}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000005c0)="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", 0xff}], 0x1) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) (async) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) (async) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) socket$inet(0x2, 0x3, 0x3) (async) r5 = socket$inet(0x2, 0x3, 0x3) sysctl$net_inet_tcp(&(0x7f0000000200)={0x4, 0x2, 0x6, 0x14}, 0x4, 0xfffffffffffffffe, &(0x7f0000000080)=0xfffffffffffffdb9, 0x0, 0xfffffffffffffe9e) ioctl$FIONREAD(r5, 0x80206979, &(0x7f0000000000)) socket$unix(0x1, 0x5, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000080)=0x4) connect$unix(r6, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) connect$unix(r6, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) accept$unix(r1, 0x0, 0x0) 250.929133ms ago: executing program 5 (id=667): acct(0x0) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10, 0xee4bce5bb233ab95) poll(&(0x7f0000000080)=[{r0, 0x27}], 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd6036ea0700383a01fe8000000000000000000000000000aaff0200000000000000000000000000010102907800000000605adff803002c00ff020000000000000000000000000e01fe8000000000000000000000000000bb11000005"]) 250.572042ms ago: executing program 3 (id=668): setrlimit(0x8, &(0x7f0000000340)={0xc, 0x4000000000054}) (async) r0 = syz_open_pts() (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() (async) ioctl$FIOASYNC(r1, 0x80047470, &(0x7f0000000000)=0x2) ioctl$FIOASYNC(r2, 0x80047460, &(0x7f00000000c0)=0x4) (async) ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000040)={0xaec7, 0x6, 0x8, 0xc, "d0ec170000000000cfffff9b0000a17d002000b1", 0xc8b7}) close(r0) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000040)={0x750, 0x4b, 0xd, 0x10a, "0308e8ffff0900e3ffe5ffc370843f00", 0x8a, 0x49}) write(r0, &(0x7f0000000240)="c570a4a5bbebc12d2a91854a3269facb1316b1dbefdc29ce59a480cfbf608dea9c620e5c769e41325bb05beb09", 0x2d) 189.983369ms ago: executing program 7 (id=669): r0 = socket(0x10, 0x4, 0x40) select(0x40, &(0x7f0000000300)={0x7, 0x5, 0x400000002, 0x200bf, 0xa, 0x10000, 0x9, 0x101}, 0x0, &(0x7f0000000380)={0x9, 0x2, 0xffff, 0x5, 0x2, 0x5, 0xb682, 0xded}, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x404) close(r1) shutdown(r0, 0x1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r3 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) syz_extract_tcp_res$synack(&(0x7f0000000200), 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="280000e5ae660b0001"], 0x28}, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x8080691a, &(0x7f0000000100)) ioctl$FIONREAD(r3, 0xc1206951, &(0x7f0000000100)) bind$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x3}, 0x8) 189.396653ms ago: executing program 3 (id=670): setgid(0xffffffffffffffff) setgroups(0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xffffffffffffffff) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) r2 = msgget$private(0x0, 0x460) msgsnd(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000"], 0xe2, 0x800) msgrcv(r2, 0x0, 0x0, 0x3, 0x1000) msgrcv(r2, 0x0, 0x0, 0x0, 0x1800) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6000, 0x480) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x413dff) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 189.118208ms ago: executing program 3 (id=671): mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x28) sysctl$hw(&(0x7f0000000140)={0x7, 0x10}, 0x2, &(0x7f0000000200), 0x0, 0x0, 0x0) ioctl$VNDIOCGET(r0, 0x20006473, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x28) (async) sysctl$hw(&(0x7f0000000140)={0x7, 0x10}, 0x2, &(0x7f0000000200), 0x0, 0x0, 0x0) (async) ioctl$VNDIOCGET(r0, 0x20006473, 0x0) (async) 188.518515ms ago: executing program 6 (id=672): r0 = msgget$private(0x0, 0x7fc) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) syz_emit_ethernet(0x138, &(0x7f0000000140)=ANY=[]) msgrcv(r0, &(0x7f0000000080)={0x0, ""/182}, 0xbe, 0x0, 0x1000) r2 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) r3 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r3) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0x9}, {0x0, 0x4}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x1810, r1, 0x0) writev(r2, 0x0, 0x0) msgsnd(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x8, 0x0) msgget$private(0x0, 0x7fc) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) syz_emit_ethernet(0x138, &(0x7f0000000140)=ANY=[]) (async) msgrcv(r0, &(0x7f0000000080)={0x0, ""/182}, 0xbe, 0x0, 0x1000) (async) open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) (async) getpid() (async) ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r3) (async) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0x9}, {0x0, 0x4}}, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x1810, r1, 0x0) (async) writev(r2, 0x0, 0x0) (async) msgsnd(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x8, 0x0) (async) 119.109151ms ago: executing program 1 (id=673): mknod(0x0, 0x2000, 0x200) select(0x40, &(0x7f0000000000)={0x9, 0x5, 0x81, 0x1, 0x7, 0x2, 0x81, 0x6}, 0x0, 0x0, 0x0) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x25, 0xfd, 0x6}, {0x2, 0x1, 0x5, 0xb}, {0x9e, 0x19, 0x0, 0x40003}]}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000340)={0x2, &(0x7f0000000000)=[{0x1, 0x93, 0xf, 0x7}, {0x7c, 0x3, 0x0, 0x11}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000002c0)=ANY=[]) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) 118.626435ms ago: executing program 2 (id=674): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x100000002}) (async) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xf1a) (async) open(&(0x7f00000004c0)='./bus\x00', 0x100, 0x0) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x2) read(r0, &(0x7f0000000080)=""/1, 0x1) (async) ioctl$FIOASYNC(r1, 0x80047460, &(0x7f00000000c0)=0x4) 118.061002ms ago: executing program 5 (id=675): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, &(0x7f00000011c0)="011c0000", 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSETA(r1, 0xc450443c, &(0x7f00000000c0)={0x72f, 0x1, 0x9, 0x3, "c9f7d2462f0000023beeca8f00875a6e80f775d2", 0x2}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000140)=0xc) r3 = open(0x0, 0x2, 0xd4) ioctl$FIONREAD(r3, 0x2000747a, 0x0) r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r5, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) close(r5) open(&(0x7f0000000240)='./file0\x00', 0x18289, 0x154) mprotect(&(0x7f00002f5000/0x3000)=nil, 0x3000, 0x2) r6 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) ioctl$WSMUXIO_INJECTEVENT(r6, 0x80185760, &(0x7f0000000400)={0x6e98, 0x81, {0xffffffff, 0x1}}) getdents(r4, &(0x7f0000000e80)=""/4091, 0xffaa) getdents(r4, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) r7 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) pread(r7, &(0x7f0000000340)="3cd15db7c3", 0x5, 0x1ffffffffffffffe) 117.487088ms ago: executing program 2 (id=676): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="ed", 0x1) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2842, 0x0) (async) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000300)=""/163, 0xa3}], 0x1) (async) shutdown(r1, 0x0) (async, rerun: 64) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) close(r0) 109.001908ms ago: executing program 4 (id=677): setrlimit(0x2, &(0x7f0000000980)={0x60000000, 0x60000000}) (async) setrlimit(0x2, &(0x7f0000000980)={0x60000000, 0x60000000}) syz_open_pts() (async) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x1) mknod(&(0x7f0000000980)='./file0\x00', 0x2020, 0x4000) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x3, 0xfe) pipe(&(0x7f0000000100)) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000300)="79be6381", 0x4}], 0x1) (async) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000300)="79be6381", 0x4}], 0x1) read(r4, &(0x7f0000000200)=""/255, 0xff) bind(r2, &(0x7f0000000000), 0x10) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/44, 0x2b}, {&(0x7f0000000040)=""/22, 0xf}, {&(0x7f0000000280)=""/209, 0xfffffc9e}], 0x3) r5 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000500)="97c7a13acd8a8ceb13c4160c465503699431069a4699b3d03b6bbfc7b5de42ba3daaf092431c2f025d08ff3f9fa017c208c922ab23fc0ad0d474b2982386e08eb80ce6f489b5267b0b400f446bae31255e16ff6f1b769ea8a93a558835750a01908a5c3a89ab0c0b65ddc89a85e4900489722ef7bc0ac11b1b10b579ad2bd98bbd84d5c5026adfeaa383895aed3a3bf92d8760f318f59df7374e5af5d62af696704cf75d68d9d20d2066b0a7238538f691346fe0449cec8298d8b9fd996f4706e50904b13086126de7d1c0689eb7eda41b05dcfd3cd3e09d9102fc4f3d439170383839", 0xe3}], 0x1) execve(0x0, 0x0, 0x0) mquery(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x0, r1, 0x0) (async) mquery(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x0, r1, 0x0) ioctl$FIOASYNC(r1, 0x80047460, &(0x7f00000000c0)=0x4) 48.209194ms ago: executing program 0 (id=678): sysctl$kern(&(0x7f0000000000)={0x1, 0x56}, 0x2, 0x0, 0x0, &(0x7f00000000c0)="41c6d29d11fc00015da27567f6ee2bb587ebe72bb29aa7ee61ca8e2508a35a6a29553d27c9a0b82a80d9", 0x2a) mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) setrlimit(0x17, &(0x7f0000000000)={0x4e0f4fe7, 0x9}) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r0, 0x400c570a, &(0x7f0000000380)) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) r3 = openat$diskmap(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$FIONREAD(r3, 0x4004667f, 0x0) ioctl$WSKBDIO_GETENCODINGS(r1, 0xc0105715, &(0x7f0000000340)) getsockname(r1, 0x0, 0x0) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) ioctl$WSKBDIO_GETBACKLIGHT(r1, 0x400c5711, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) ioctl$FIOASYNC(r4, 0x8004667d, &(0x7f0000000040)=0x9) close(r4) mknod(&(0x7f0000000040)='./file1\x00', 0x2, 0xfff) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) read(r5, &(0x7f0000001ec0)=""/125, 0x7d) acct(&(0x7f0000000080)='./file0\x00') 45.636743ms ago: executing program 3 (id=679): ioctl$TIOCMBIS(0xffffffffffffff9c, 0x8004746c, &(0x7f0000000180)=0x6) (async) r0 = socket(0x11, 0x3, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x24, 0x2, 0x0) setsockopt(r1, 0x6, 0x40, 0x0, 0x0) (async) r2 = socket(0x18, 0x3, 0x2) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xa) r3 = accept$inet6(r0, &(0x7f00000000c0), &(0x7f0000000140)=0xc) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r2, 0xc02069a0, &(0x7f0000000100)) (async) write(0xffffffffffffffff, &(0x7f0000000480)='\x00'/14, 0xffffffffffffffc3) sendto$unix(r0, &(0x7f0000000000)="b1000503000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab71d89e00004070000000013000000", 0xb1, 0x8, 0x0, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FIONBIO(r5, 0x8004667e, &(0x7f0000000080)=0x5) (async) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000240)=""/193, 0xfffffdf0}], 0x1) (async) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x4, "0100012d29fb000700000000098002005e00"}) sendto$unix(0xffffffffffffffff, &(0x7f00000004c0)="dce59aa1e4845afaa8cd6a7799e8a9872b23841728e13af640df83f8a8355dc9da9ed42f8114ebeeaa8908e6e9bd46fe7713b0e0096f4be26eb3ce44d25e3dd6041af84a1d259772819d11f1b1fbd372a490e4ac311d2c6e4608dd1fbf83d7056f0987a0452a800bba7690261b13b8e57464d64658bcf9cbea287b214f76baca358b7fdf81967e5c5ccd3419e9c91a736cfc607e88e58d4f807ac2b86f76d0b540f5a95be003e292a8514d487b86505f7a06384e83", 0xde, 0x403, &(0x7f0000000400)=@abs={0x1, 0x0, 0x2}, 0xa) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000000140), 0x0) (async) setuid(0xee01) (async) r6 = socket(0x18, 0x2, 0x0) setsockopt(r6, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) (async) setsockopt(r6, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x6) (async) syz_emit_ethernet(0x26, &(0x7f0000000180)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x67, 0x4000, 0x0, 0x74, 0x0, @multicast1=0xe0000012, @multicast2}, @generic="290def48"}}}}) mmap(&(0x7f0000723000/0x4000)=nil, 0x4000, 0xd88728c1c2b224, 0x2010, r2, 0x1) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) 40.998261ms ago: executing program 7 (id=680): r0 = socket(0x2, 0x3, 0x0) r1 = kqueue() ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) kevent(r1, &(0x7f0000000340)=[{{r1}, 0xfffffffffffffffc, 0xa, 0x0, 0xffffffffffff8001, 0xada}, {{}, 0xffffffffffffffff, 0xa, 0x80000082, 0xfffffffffffffffd, 0xfffffffe}, {{r2}, 0xfffffffffffffffd, 0x40, 0x80000000, 0xff, 0x1}, {{}, 0xfffffffffffffffc, 0x36, 0xf0000000, 0xd590, 0x101}, {{r1}, 0xffffffffffffffff, 0x0, 0xfffff, 0x43, 0x7}, {{r0}, 0xfffffffffffffff8, 0x3, 0x80000050, 0x0, 0x60000000}], 0x101, &(0x7f0000000100), 0x6, 0x0) ioctl$FIONREAD(r0, 0xc0206921, &(0x7f00000001c0)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, r0, 0x0) setreuid(0xee00, 0xffffffffffffffff) r3 = getuid() setreuid(0x0, r3) unveil(&(0x7f0000000040)='./file2\x00', &(0x7f0000000200)='x\x00') unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='x\x00') r4 = socket(0x18, 0x2, 0x6) ioctl$FIONREAD(r4, 0xc0206923, &(0x7f00000001c0)) r5 = socket(0x2, 0x3, 0x2f) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r6 = syz_open_pts() close(r6) syz_open_pts() ioctl$TIOCSETD(r6, 0x8004741b, &(0x7f0000000000)=0x8) writev(r6, &(0x7f0000000280)=[{&(0x7f00000000c0)="cff5c05664db486cda974a82388ef359025250129bdb3b8c2c5e8156eb32d47209b2a02c3bb43bea0300", 0x2a}], 0x1) r7 = dup(r5) setsockopt$inet_opts(r7, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) dup(r7) sendto$inet(r7, &(0x7f00000001c0)="5e1351d18b9da08c", 0x90, 0x0, 0x0, 0x0) 37.672596ms ago: executing program 2 (id=681): setitimer(0x2, &(0x7f0000000080)={{0x0, 0x4}, {0x4, 0x6}}, 0x0) r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PCIOCREAD(r0, 0xc0107002, &(0x7f0000000080)) sysctl$kern(&(0x7f0000000080)={0x1, 0x27}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x16a, &(0x7f0000000000)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605fd1d901343a0000000000ffff0000000000000000000000000000000000000000ffff"]) 36.242773ms ago: executing program 1 (id=682): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd609907a600382c00cb697a653e336f000000500000000000ff0800000000000000000000000000012c"]) mlock(&(0x7f0000471000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) minherit(&(0x7f0000623000/0x4000)=nil, 0x4000, 0x0) sysctl$kern(&(0x7f00000000c0)={0x0}, 0x0, &(0x7f0000000140)="71f91e3471ac0058bc1258cd56e0cdb46ed6c4fa7d5a91501d94a34b8e0500cf71b59c7afec370c7d23347934b8ce047d6f80e379c824c0b82ad9376d09805ba32f6178bb218ed6858a681d9cda7f44a18374e792d134182caba3fca41d06eeca4a5cc17b1d9ab3bd643339df92ddee8aa982300001122385098278aed76291a2279a19ca3b2f9a50945b34e371507d688376dab31129c06934b903fd5cbcf2832568f283315557f9457b82fa80c01824bcec05d7f6a70eed3d8556d670a377b803050d10294de72d33d2328d3fdce5ee2eb99b796e0afdfea7e7a49a1777516e2493242229ce63a9f9d1d3bdace181730a5da0cb870a12f143fa8de3b804fb12041da98e6d5b96a204737bfb8b4312879aaedae81daeaad4737337b1f92193a14722154e8e8e9945a095ae31e1ccf2abd0d7f79502febbdef0a5b8472f9abd03b94377fa4a21982e8d7a6f853a60cc6ac4995945b193d2c68901a4e5d2a08a1ae9b0c406937d5500fee1f8ea78547dca8888f0e320b639156cbac0fa3457573385a0b604df85cda6724d3ec5fcc11c3fb1836b9c6c4a12f9910bff1023f554b328a8a24d40a89feba45b2e95b1b647bcf6a8c0000000000000000000000000000000b39b0f6c33f2763d061378d0c13ec53a0f0dc40160afac3ffb5cad84f9599d944fe2f579a874d98c31a9bfea30db1eee60210ee520b12419ebad911a3e18d34b1b1101ad72e", &(0x7f0000000080)=0x208, 0x0, 0x0) setitimer(0x2, &(0x7f0000000100)={{0x0, 0x9}, {0x0, 0x8}}, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5) 4.118069ms ago: executing program 5 (id=683): r0 = syz_open_pts() r1 = syz_open_pts() setrlimit(0x8, &(0x7f0000000040)={0x45, 0x56}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0xc1) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/104, 0x76}], 0x1000000000000072) dup2(r3, r2) execve(0x0, 0x0, 0x0) sysctl$net_inet_etherip(&(0x7f0000000000)={0x4, 0x2, 0x61, 0x1}, 0x4, 0x0, 0x0, &(0x7f00000001c0), 0x0) syz_open_pts() poll(&(0x7f0000000140)=[{r0, 0x80}, {r0, 0x10}, {r0, 0x40}, {r1, 0x2}, {r0, 0x80}, {r0, 0x1}, {r0, 0x7}], 0x7, 0x8) 3.235125ms ago: executing program 3 (id=684): r0 = socket(0x2, 0x2, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mknod(0x0, 0x6000, 0xe02) (async, rerun: 32) r3 = open(0x0, 0x615, 0x0) (rerun: 32) writev(0xffffffffffffffff, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async, rerun: 64) r4 = socket(0x11, 0x3, 0x0) (rerun: 64) read(r4, &(0x7f0000000180)=""/105, 0x69) (async) sendto$unix(r4, &(0x7f0000000000), 0x0, 0x2, 0x0, 0x0) (async) r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r5, 0x80105727, &(0x7f0000000080)={0x0}) ioctl$BIOCGHDRCMPLT(r5, 0x40044274, &(0x7f0000000300)) (async) ioctl$WSDISPLAYIO_SMODE(r2, 0x8004574c, &(0x7f00000002c0)) (async) getsockopt(r1, 0x0, 0x3, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="fd02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r6 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) lseek(r6, 0x8000000000000001, 0x1) ioctl$DIOCMAP(r6, 0xc0106477, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', r3, 0x1}) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) msync(&(0x7f00000bd000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32) sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x2, &(0x7f0000000340)="71f91eca6e530c79e2f8e2a2ce3471ac0058bc5a91501d94a34bfec38a820600000000000000dc0225f0e4cf52b7d99d15d923", &(0x7f0000000080)=0x33, 0x0, 0x0) (async) connect$unix(r0, &(0x7f0000000000), 0x10) (async, rerun: 64) write(r0, &(0x7f0000000200)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad477cf807815cc174c5e1bc4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e78202374000000000080000001000000000000000000", 0x2400) (async, rerun: 64) getsockopt(r0, 0x86, 0xd6, &(0x7f0000000100)=""/158, &(0x7f0000000040)=0x9e) 2.219868ms ago: executing program 4 (id=685): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc10016", 0x4}], 0x1) r1 = socket(0x2, 0x3, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r1, &(0x7f0000000000), 0x10) write(r1, &(0x7f0000000080)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0xffea) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x24, 0x9, 0x45, 0x19c}, {0x2, 0x83, 0x9, 0x7}, {0x896, 0x12, 0x14, 0x7c}]}) close(r2) r4 = socket(0x2, 0x2, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 0s ago: executing program 7 (id=686): mknod(&(0x7f0000000140)='./bus\x00', 0x2000, 0x6d4) r0 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) select(0x40, &(0x7f0000000300)={0x7, 0x7, 0x2, 0xc0, 0xa, 0x10000, 0x9, 0x101}, 0x0, &(0x7f0000000380)={0x5d4b, 0x2, 0xffff, 0x5, 0x2, 0x2f5, 0xb682, 0xded}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x43) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x80) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x4, 0x200000000000003}) poll(&(0x7f0000000000)=[{r0, 0x10}], 0x1, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.39' (ED25519) to the list of known hosts. pckbd_enable: command error denied attempt to set clock forward to 52172937113390 OpenBSD/amd64 (Amnesiac) (tty00) login: uvm_fault(0xfffffd8068858b90, 0xf, 0, 1) -> e kernel: page fault trap, code=0 Stopped at ktrops+0x58: movq 0x10(%r14),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND *417702 21795 0 0 0x4000000 0K syz-executor 368012 15758 0 0x2 0x1 1 syz-executor ktrops(ffff80003c4694f8,ffffffffffffffff,0,a0c7df9f,fffffd8067bd5d88,fffffd80097fb410) at ktrops+0x58 doktrace(fffffd8067bd5d88,4,20c7df9f,0,ffff80003c4694f8) at doktrace+0x6bd sys_ktrace(ffff80003c4694f8,ffff80002ebd5860,ffff80002ebd57b0) at sys_ktrace+0x11c syscall(ffff80002ebd5860) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc7df63ac8e0, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: uvm_fault(0xfffffd8068858b90, 0xf, 0, 1) -> e ddb{0}> trace ktrops(ffff80003c4694f8,ffffffffffffffff,0,a0c7df9f,fffffd8067bd5d88,fffffd80097fb410) at ktrops+0x58 doktrace(fffffd8067bd5d88,4,20c7df9f,0,ffff80003c4694f8) at doktrace+0x6bd sys_ktrace(ffff80003c4694f8,ffff80002ebd5860,ffff80002ebd57b0) at sys_ktrace+0x11c syscall(ffff80002ebd5860) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc7df63ac8e0, count: -5 ddb{0}> show registers rdi 0xffff800035808000 rsi 0x1307 __ALIGN_SIZE+0x307 rbp 0xffff80002ebd5570 rbx 0xfffffd80097fb410 rdx 0xffff800035808000 rcx 0x1306 __ALIGN_SIZE+0x306 rax 0xffffffff81478e73 ktrops+0x43 r8 0xfffffd8067bd5d88 r9 0xfffffd80097fb410 r10 0x1802cc9b2e6263a8 r11 0xbec83188551c745 r12 0xffff80003c4694f8 r13 0xffffffffffffffff r14 0xffffffffffffffff r15 0xa0c7df9f rip 0xffffffff81478e88 ktrops+0x58 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002ebd54f0 ss 0 ktrops+0x58: movq 0x10(%r14),%r14 ddb{0}> show proc PROC (syz-executor) tid=417702 pid=21795 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=17, usrpri=76, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c468038,0xffff80003c4697a0 process=0xffff80003c414e90 user=0xffff80002ebd0000, vmspace=0xfffffd8068858b90 estcpu=26, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 69854 263908 99090 0 2 0 syz-executor 69854 433820 99090 0 2 0x4000000 syz-executor 71678 88031 93322 0 2 0 syz-executor 71678 201048 93322 0 3 0x4000080 fsleep syz-executor 21795 488309 92331 0 2 0 syz-executor *21795 417702 92331 0 7 0x4000000 syz-executor 16602 289792 98675 0 2 0x4000000 syz-executor 16602 240764 98675 0 3 0x4000080 fsleep syz-executor 59865 154355 6233 0 2 0xc80 syz-executor 59865 373501 6233 0 3 0x4000080 fifow syz-executor 92331 207209 27950 0 2 0xc82 syz-executor 23015 468460 1 0 3 0x100083 ttyopn getty 86058 11923 0 0 3 0x14280 nfsidl nfsio 9924 20392 0 0 3 0x14280 nfsidl nfsio 10704 294708 0 0 3 0x14280 nfsidl nfsio 20226 387987 0 0 3 0x14280 nfsidl nfsio 56437 215573 0 0 3 0x14280 nfsidl nfsio 59173 423868 0 0 3 0x14280 nfsidl nfsio 36186 256596 0 0 3 0x14280 nfsidl nfsio 36973 253918 0 0 3 0x14280 nfsidl nfsio 72287 7352 0 0 3 0x14280 nfsidl nfsio 39333 124103 0 0 3 0x14280 nfsidl nfsio 29795 341616 0 0 3 0x14280 nfsidl nfsio 17312 58468 0 0 3 0x14280 nfsidl nfsio 38141 427062 0 0 3 0x14280 nfsidl nfsio 34598 247005 0 0 3 0x14280 nfsidl nfsio 18763 444174 0 0 3 0x14280 nfsidl nfsio 4176 267904 0 0 3 0x14280 nfsidl nfsio 95680 419310 0 0 3 0x14280 nfsidl nfsio 84722 345259 0 0 3 0x14280 nfsidl nfsio 58917 200840 0 0 3 0x14280 nfsidl nfsio 18503 100459 0 0 3 0x14280 nfsidl nfsio 94309 487591 0 0 3 0x14200 bored sosplice 99090 135682 27950 0 2 0xc82 syz-executor 15758 368012 27950 0 7 0x3 syz-executor 93322 497741 27950 0 3 0x82 nanoslp syz-executor 32802 508667 27950 0 2 0x2 syz-executor 98675 230410 27950 0 2 0xc82 syz-executor 99780 53985 27950 0 2 0x2 syz-executor 6233 306273 27950 0 3 0x82 nanoslp syz-executor 27950 157873 40801 0 2 0x2 syz-executor 40801 211101 79808 0 3 0x10008a sigsusp ksh 79808 185090 33709 0 3 0x98 kqread sshd-session 33709 304986 86166 0 3 0x92 kqread sshd-session 86166 498335 1 0 3 0x88 kqread sshd 72617 80383 98849 74 3 0x1100092 bpf pflogd 98849 271600 1 0 3 0x80 sbwait pflogd 17880 142350 68913 73 3 0x1100090 kqread syslogd 68913 302607 1 0 3 0x100082 sbwait syslogd 70937 25917 1 0 3 0x100080 kqread resolvd 87161 140331 77465 77 3 0x100092 kqread dhcpleased 56768 157022 77465 77 3 0x100092 kqread dhcpleased 77465 149988 1 0 3 0x80 kqread dhcpleased 21110 338105 0 0 3 0x14200 bored smr 18287 195304 0 0 2 0x14200 zerothread 75049 444694 0 0 3 0x14200 aiodoned aiodoned 62632 284227 0 0 3 0x14200 syncer update 30183 53910 0 0 3 0x14200 cleaner cleaner 34607 4282 0 0 3 0x14200 reaper reaper 92677 65508 0 0 3 0x14200 pgdaemon pagedaemon 80820 124257 0 0 3 0x14200 bored viomb 61203 124932 0 0 3 0x40014200 acpi0 acpi0 74374 462565 0 0 3 0x40014200 idle1 6884 167271 0 0 3 0x14200 bored softnet1 6914 391916 0 0 3 0x14200 bored softnet0 95473 315674 0 0 3 0x14200 bored systqmp 23071 76692 0 0 3 0x14200 bored systq 26583 302871 0 0 3 0x14200 tmoslp softclockmp 23980 228562 0 0 3 0x40014200 tmoslp softclock 78078 20889 0 0 3 0x40014200 idle0 1 469786 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{0}> show all locks Process 21795 (syz-executor) thread 0xffff80003c4694f8 (417702) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839df2a8) #0 witness_lock+0x5f1 #1 __mp_acquire_count+0x58 #2 sleep_finish+0x2d8 #3 getblk+0x197 #4 bread+0x45 #5 ffs_update+0x198 #6 ufs_inactive+0x2e1 #7 VOP_INACTIVE+0x104 #8 vrele+0x129 #9 ktrsettrace+0xe7 #10 ktrops+0x26c #11 doktrace+0x6bd #12 sys_ktrace+0x11c #13 syscall+0xb17 #14 Xsyscall+0x128 Process 15758 (syz-executor) thread 0xffff8000fffeefa8 (368012) exclusive rwlock amaplk r = 0 (0xfffffd806cdc13e8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 uvm_fault_check+0x8bb #3 uvm_fault+0x106 #4 upageflttrap+0xa9 #5 usertrap+0x3c6 #6 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xfffffd806ef0d108) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x3c6 #7 recall_trap+0x8 Process 32802 (syz-executor) thread 0xffff80002a2727d8 (508667) exclusive rrwlock inode r = 0 (0xfffffd806e14a118) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806ceb0a10) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 Process 99780 (syz-executor) thread 0xffff80002a272010 (53985) exclusive rrwlock inode r = 0 (0xfffffd806e102a48) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806ceb0698) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10217 11051K 11547K 166960K 12051 0 pcb 18 14K 16K 166960K 254 0 rtable 238 10K 10K 166960K 528 0 pf 40 18K 67486K 166960K 140 0 ifaddr 41 7K 7K 166960K 78 0 ifgroup 59 2K 2K 166960K 117 0 sysctl 4 1K 9K 166960K 12 0 counters 70 37K 37K 166960K 138 0 ioctlops 0 0K 8K 166960K 1646 0 iov 0 0K 16K 166960K 75 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1464 92K 92K 166960K 2201 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 8 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 1K 166960K 170 0 dirhash 15 2K 3K 166960K 27 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 15 53K 85K 166960K 832 0 sigio 1 0K 0K 166960K 116 0 proc 72 115K 147K 166960K 615 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 74 0 in_multi 88 6K 7K 166960K 151 0 ether_multi 1 0K 0K 166960K 12 0 mrt 0 0K 0K 166960K 10 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 121 546K 546K 166960K 121 0 exec 0 0K 1K 166960K 521 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 219 166K 180K 166960K 9621 0 UVM aobj 16 4K 6K 166960K 19 0 pinsyscall 40 80K 98K 166960K 2011 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 52 0 NDP 15 0K 2K 166960K 54 0 temp 64 8653K 8729K 166960K 26606 0 kqueue 13 20K 34K 166960K 193 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 111 0 108 1 0 1 1 0 8 0 rtentry 176 152 0 56 6 0 6 6 0 8 0 unpcb 144 622 0 603 4 0 4 4 0 8 3 syncache 336 8 0 8 1 0 1 1 0 8 1 tcpcb 736 258 0 254 7 2 5 7 0 8 4 arp 136 29 0 9 1 0 1 1 0 8 0 inpcb 328 926 0 917 7 1 6 7 0 8 5 nd6 152 31 0 8 2 0 2 2 0 8 0 pkpcb 40 7 0 7 1 0 1 1 0 8 1 kcovpl 48 9 0 1 1 0 1 1 0 8 0 ppxss 1192 29 0 29 1 0 1 1 0 8 1 pppxif 1504 1 0 1 1 0 1 1 0 8 1 pfstscr 40 2 0 1 1 0 1 1 0 8 0 pffrag 232 12 0 4 1 0 1 1 0 482 0 pffrnode 88 9 0 1 1 0 1 1 0 8 0 pffrent 40 23 0 14 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 3 0 3 1 1 0 1 0 8 0 pfanchor 1288 1 0 1 1 1 0 1 0 8 0 pftag 88 2 0 0 1 0 1 1 0 8 0 pfstitem 24 75 0 11 1 0 1 1 0 8 0 pfstkey 128 82 0 20 3 0 3 3 0 8 0 pfstate 384 76 0 15 7 0 7 7 0 8 0 pfrule 1344 28 0 23 2 1 1 2 0 8 0 rttmr 136 3 0 3 1 0 1 1 0 8 1 art_heap8 4096 3 0 0 3 0 3 3 0 8 0 art_heap4 256 606 0 196 31 0 31 31 0 8 4 art_table 40 609 0 196 5 0 5 5 0 8 0 art_node 32 149 0 65 1 0 1 1 0 8 0 sysvmsgpl 40 11 0 7 1 0 1 1 0 8 0 semupl 112 2 0 2 1 1 0 1 0 8 0 semapl 112 157 0 147 1 0 1 1 0 8 0 shmpl 112 16 0 3 1 0 1 1 0 8 0 dirhash 1024 27 0 8 3 0 3 3 0 8 0 dino2pl 256 3019 0 1506 96 0 96 96 0 8 0 ffsino 296 3019 0 1506 118 0 118 118 0 8 0 nchpl 144 4164 0 2462 64 0 64 64 0 8 0 rtmask 32 6 0 6 1 0 1 1 0 8 1 vnodes 216 3548 0 0 198 0 198 198 0 8 0 namei 1024 14164 0 14162 1 0 1 1 0 8 0 percpumem 16 84 0 34 1 0 1 1 0 8 0 pfiaddrpl 120 1 0 1 1 1 0 1 0 8 0 kstatmem 264 76 0 46 3 0 3 3 0 8 0 acpiwqpl 32 2 0 2 1 0 1 1 1 8 1 scsiplug 72 5 0 5 2 1 1 1 0 8 1 scxspl 216 21679 0 21679 9 5 4 7 1 8 4 plimitpl 152 271 0 253 1 0 1 1 0 8 0 sigapl 424 1169 0 1103 8 0 8 8 0 8 0 knotepl 120 786 0 0 24 0 24 24 0 8 0 kqueuepl 224 312 0 303 4 1 3 3 0 8 2 pipepl 344 206 0 178 6 0 6 6 0 8 3 fdescpl 528 1128 0 1099 3 0 3 3 0 8 0 filepl 160 7040 0 6818 18 2 16 18 0 8 6 lockfpl 104 367 0 361 2 0 2 2 0 8 1 lockfspl 48 88 0 82 1 0 1 1 0 8 0 sessionpl 144 29 0 20 1 0 1 1 0 8 0 pgrppl 48 49 0 32 1 0 1 1 0 8 0 ucredpl 104 1319 0 1305 1 0 1 1 0 8 0 zombiepl 144 1103 0 1103 1 0 1 1 0 8 1 processpl 1232 1169 0 1103 6 0 6 6 0 8 0 procpl 664 2350 0 2279 8 0 8 8 0 8 0 sosppl 168 8 0 8 1 0 1 1 0 8 1 sockpl 752 1692 0 1661 11 1 10 11 0 8 6 mcl64k 65536 5 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 115 0 0 15 0 15 15 0 8 0 mcl2k2 2112 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 27 0 0 4 0 4 4 0 8 0 mtagpl 96 4 0 0 1 0 1 1 0 8 0 mbufpl 256 1203 0 0 76 0 76 76 0 8 0 bufpl 280 9011 0 2874 439 0 439 439 0 8 0 anonpl 32 15208 0 0 123 0 123 123 0 246 0 amapchunkpl 152 31282 0 30874 32 0 32 32 0 158 11 amappl16 200 5039 0 5006 46 10 36 40 0 8 29 amappl15 192 5 0 5 1 1 0 1 0 8 0 amappl14 184 10 0 10 1 1 0 1 0 8 0 amappl13 176 464 0 462 1 0 1 1 0 8 0 amappl12 168 1513 0 1473 3 0 3 3 0 8 0 amappl11 160 18 0 17 1 0 1 1 0 8 0 amappl10 152 68 0 54 1 0 1 1 0 8 0 amappl9 144 251 0 251 1 1 0 1 0 8 0 amappl8 136 24 0 22 1 0 1 1 0 8 0 amappl7 128 83 0 82 1 0 1 1 0 8 0 amappl6 120 299 0 285 1 0 1 1 0 8 0 amappl5 112 86 0 75 1 0 1 1 0 8 0 amappl4 104 449 0 420 1 0 1 1 0 8 0 amappl3 96 5392 0 5315 4 1 3 3 0 8 0 amappl2 88 1272 0 1198 2 0 2 2 0 8 0 amappl1 80 13404 0 12816 14 0 14 14 0 8 0 amappl 88 8710 0 8569 5 0 5 5 0 92 0 uvmvnodes 80 3548 0 0 73 0 73 73 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 1 1 1 0 8 1 dma64 64 39 0 39 2 1 1 1 0 8 1 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 18 0 3 1 0 1 1 0 8 0 uaddrrnd 24 1128 0 1099 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1128 0 1099 1 0 1 1 0 8 0 vmmpekpl 168 11023 0 10977 3 0 3 3 0 8 0 vmmpepl 168 80928 0 79123 121 3 118 118 0 357 19 vmsppl 488 1127 0 1099 5 0 5 5 0 8 0 rwobjpl 80 28808 0 24346 104 0 104 104 0 8 4 pdppl 4096 2263 0 2198 103 30 73 81 0 8 8 pvpl 32 22441 0 0 181 0 181 181 0 265 0 pmappl 256 1127 0 1099 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 349 0 34 10 0 10 10 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace ktrops(ffff80003c4694f8,ffffffffffffffff,0,a0c7df9f,fffffd8067bd5d88,fffffd80097fb410) at ktrops+0x58 doktrace(fffffd8067bd5d88,4,20c7df9f,0,ffff80003c4694f8) at doktrace+0x6bd sys_ktrace(ffff80003c4694f8,ffff80002ebd5860,ffff80002ebd57b0) at sys_ktrace+0x11c syscall(ffff80002ebd5860) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc7df63ac8e0, count: -5 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839df0a0) at __mp_lock+0x192 ktrsyscall(ffff8000fffeefa8,63,18,ffff80002a3ac800) at ktrsyscall+0x2c7 syscall(ffff80002a3ac800) at syscall+0x304 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7845ab4571b0, count: 8 ddb{1}> trace x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839df0a0) at __mp_lock+0x192 ktrsyscall(ffff8000fffeefa8,63,18,ffff80002a3ac800) at ktrsyscall+0x2c7 syscall(ffff80002a3ac800) at syscall+0x304 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7845ab4571b0, count: -7