last executing test programs: 5.631552909s ago: executing program 6 (id=43): setuid(0xee01) r0 = socket(0x11, 0x3, 0x0) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x180}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) (async) ioctl$TIOCSETA(r1, 0xc4504443, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x0, 0x6}) r2 = syz_open_pts() (async) r3 = getpgid(0xffffffffffffffff) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) (async) r6 = getpgrp() r7 = geteuid() (async) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) fstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc) (async) r10 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x2011, r10, 0x0) (async) fstat(r10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r11) (async) fstat(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r13 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$WSKBDIO_SETMODE(r13, 0x80045713, &(0x7f0000000300)=0x1) sendmsg$unix(r0, &(0x7f0000000700)={&(0x7f0000000040)=@file={0xe1, 0x1, './file0\x00'}, 0xa, &(0x7f0000000280)=[{&(0x7f0000000080)="63aedf937ace95d050b1fc327a8a27a793b47b64be0fd616a52f0ea1a786b7a96f8d0249264a1105edd36953623a58df373089663444436c7c08267b3a9133f483650b6e3e2a4827c8cdadb341e6492721ad2e34fc73804ce0764faeb8f086b5308286f3b32e115623", 0x69}, {&(0x7f0000000200)="a172e985116dfb24e78075704be82495b2ae94289b2260eb55f06727de9a92c54e10d47d593028795c6fb6e1efdc410972d1a39056fa8591d37dc83f374be444fef6fcda", 0x44}], 0x2, &(0x7f0000000640)=[@cred={0x18, 0xffff, 0x0, r3, r4, r5}, @cred={0x18, 0xffff, 0x0, r6, r7, r8}, @rights={0x24, 0xffff, 0x1, [r2, r0, r0, r0, r2, r0]}, @cred={0x18, 0xffff, 0x0, r6, 0x0, r9}, @cred={0x18, 0xffff, 0x0, 0xffffffffffffffff, r11, r12}, @rights={0x10, 0xffff, 0x1, [r2]}, @rights={0x14, 0xffff, 0x1, [r2, r0]}], 0xa8, 0x403}, 0x3) (async) ioctl$TIOCSTOP(r2, 0x2000746f) (async) ioctl$TIOCSTOP(r2, 0x2000746f) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000)={0xffffff18, 0x401}, 0x8) sendto$unix(r0, &(0x7f0000000140)="b1000502000000000000000001010000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x404, 0x0, 0x0) 5.609784653s ago: executing program 6 (id=47): r0 = socket(0x18, 0x3, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x3, 0x1, 0x8}, {0x7, 0x7, 0xfe, 0xc}, {0x9b1e, 0x22, 0xf, 0x4}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[]) ioctl$FIONREAD(r0, 0xc028756b, &(0x7f0000000800)) 5.503787867s ago: executing program 6 (id=56): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r0 = socket(0x18, 0x3, 0x50) r1 = open(0x0, 0x40, 0x132) ioctl$FIONBIO(r1, 0x82907003, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x417}}}}}) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000040)) ioctl$FIONREAD(r0, 0x8020699f, &(0x7f0000000200)) 5.19107631s ago: executing program 6 (id=75): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r0, 0x80184901, &(0x7f00000000c0)={0x0, './file0\x00'}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$DIOCNATLOOK(0xffffffffffffffff, 0xc0504417, 0x0) readv(r0, &(0x7f00000011c0)=[{&(0x7f0000000200)=""/171, 0xab}, {&(0x7f0000000d00)=""/196, 0xc4}, {&(0x7f0000000e00)=""/112, 0x70}, {&(0x7f0000000e80)=""/138, 0x8a}, {&(0x7f0000000f40)=""/100, 0x64}, {&(0x7f0000000fc0)=""/77, 0x4d}, {&(0x7f0000001040)=""/106, 0x6a}, {&(0x7f00000010c0)=""/165, 0xa5}, {&(0x7f0000001180)=""/28, 0x1c}], 0x9) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f0000000000)=0xb) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) syz_emit_ethernet(0x8b, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0xf, 0x4, 0x0, 0x0, 0x7d, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}, {[@rr={0x7, 0x13, 0x9, [@multicast2, @local={0xac, 0x14, 0x0}, @rand_addr=0x9, @loopback]}, @generic={0x7, 0x9, "878731b1662aec"}, @timestamp={0x44, 0xc, 0x0, 0x3, 0x6, [{[@multicast2], 0x9}]}]}}, @icmp=@generic={0x3, 0x9, 0x0, "3ab2662d2f66009ef777d64fc661de1bb7a853ba602234c5ec945e090f3423def1435320b2dc0023fffb2f673b56358c4ab67e4ac3f49cdd056c051bcc"}}}}}) ioctl$DIOCGETSTATES(r2, 0xc0104419, &(0x7f0000000040)={0xf83e0f83e0faa8, &(0x7f0000000080)}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000300)={0x10, 0x7fffffff, [{&(0x7f0000001000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, 0x6}, {&(0x7f0000001000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7f}, {&(0x7f0000004000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, 0x100000001}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, 0x5}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x3}, {&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, 0x5}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x280000000000}, {&(0x7f0000005000/0x1000)=nil, &(0x7f0000004000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000005000/0x1000)=nil}, {&(0x7f0000002000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, 0x4}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x8}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x1}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000004000/0x2000)=nil, 0x6}, {&(0x7f0000003000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x2}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xf}], './file0\x00', 0x7, 0x0, 0x1, 0xc000, [0x4, 0xfffffff6, 0x80, 0x5, 0x10, 0x2, 0x0, 0x7fff, 0x7fff, 0x8e1b, 0x9, 0x6, 0x800000, 0xfffffffe, 0x0, 0x10001, 0xfffffffa, 0x1f, 0x8a0, 0xb4ae, 0x8, 0x7, 0x80000000, 0xfffffffa, 0x2, 0xce, 0xfffff800, 0x8, 0x9, 0x3ff, 0x0, 0x9, 0x6, 0x6, 0x4, 0x8, 0x7, 0x7, 0x55d, 0x2, 0x6, 0x2867571, 0x2, 0x5, 0x330, 0x1, 0x5, 0x711b905a, 0x8, 0x3, 0x1, 0x4, 0x6b70, 0x80000000, 0x10, 0xfffffffd, 0x8, 0xa, 0x3, 0x0, 0x5e023a09, 0x0, 0x1, 0x1, 0x9, 0x7fffffff, 0x6, 0x874, 0x5b4f, 0x3, 0x9edf, 0x6, 0x81, 0x4, 0x5, 0x1, 0x34e3, 0x8, 0x101, 0x9, 0x80000000, 0x200, 0x1000, 0x8, 0x7f, 0x3, 0xffff8000, 0x7, 0xffff0000, 0x2, 0x1ff, 0x8, 0x8001, 0x3, 0x3, 0x7fffffff, 0x43ff, 0x5, 0x40000000, 0x1, 0x5, 0x40, 0x2, 0x5, 0xfffffffb, 0x2, 0x1, 0x4, 0x2, 0x1b70, 0x80, 0x80, 0x1, 0x9, 0xd, 0x8, 0xffff0896, 0x4, 0x1, 0xfff, 0x6, 0xffffff80, 0x2, 0x8, 0x3, 0x200, 0x3, 0xafe0, 0x6565, 0x101, 0xeee, 0x1, 0x2, 0x5, 0x8, 0x7, 0x7ff, 0x5d89, 0x5, 0x7fffffff, 0x3, 0x4, 0x7, 0x76, 0x4, 0x101, 0x4, 0x3ff, 0x7, 0x9e, 0xfffffe00, 0xffffff80, 0x8, 0x8, 0xef9, 0x8, 0x1, 0x40007ff, 0x5b, 0x5, 0x1, 0x4, 0x8, 0x3ff, 0x1c, 0x5, 0x6, 0xffffffff, 0x7fffffff, 0x80000, 0x1000, 0x0, 0xac6, 0xedd4, 0x1, 0x1, 0x989, 0xfff, 0xffffffff, 0x7fff, 0x10001, 0x9, 0x4, 0x20, 0x401, 0x4, 0xb4, 0x8, 0x445, 0xfffffffd, 0x4, 0x6b, 0x1, 0x0, 0x7, 0x0, 0x7, 0x9, 0x1, 0x7, 0x5, 0x6, 0x1, 0xf, 0x200000, 0x59, 0x3, 0x22e7, 0x5440, 0x0, 0x9, 0x0, 0x7, 0x0, 0x3e553691, 0x8, 0x0, 0x6, 0x3, 0x3, 0x7fff, 0xdf8, 0x32a, 0x800, 0x8, 0x6, 0xd, 0x4, 0x6, 0x2, 0x0, 0xf, 0x9, 0xfffffffd, 0xb8c4, 0xfff, 0x8, 0x101, 0xfa, 0x1000, 0x927, 0x2, 0x808e, 0x0, 0x40000, 0x4, 0x10000, 0x4, 0x7, 0xc71, 0x0, 0x8, 0x100, 0x7, 0x1, 0x200, 0x33, 0x1, 0x3, 0x2, 0x7, 0x7ff, 0x4, 0x7, 0x8, 0x1, 0x9b9, 0xff, 0x7, 0x7, 0x10, 0xeec0, 0x4, 0x139, 0x6, 0x2, 0x5, 0x4d2, 0x4, 0x5, 0x5, 0xd, 0xfffffffa, 0x18c3, 0x4, 0x4, 0x9a, 0x2327, 0x6d0d, 0xffffffff, 0x8, 0x80000000, 0x8001, 0x0, 0xa, 0x9, 0x2, 0x4, 0x1, 0x2, 0xfffffffb, 0xd95a, 0x1, 0x8, 0x8, 0x7, 0x5, 0x660, 0x9, 0x3, 0x4, 0xc0000000, 0x80, 0xffffffff, 0x9, 0x9, 0x7, 0x1, 0x80, 0x3dd7, 0x0, 0x2, 0x0, 0x291, 0xe000, 0x3, 0x39, 0x0, 0x35, 0x10000, 0xe9b995e, 0xb1, 0x10000, 0x7, 0x1, 0x5, 0x8, 0x5d9, 0x401, 0x8001, 0x8b, 0x4, 0x1, 0x101, 0x4, 0x7, 0x4a24, 0x4, 0x1000, 0x7, 0xfffff060, 0x120000, 0x4, 0x9, 0x7, 0x1, 0x6, 0x7, 0x5, 0x2, 0x9, 0x5, 0x4, 0x8, 0x3, 0x5, 0x6, 0x8000000, 0x0, 0x4, 0x7, 0x8000, 0x4, 0x0, 0x6, 0x5, 0xbf, 0x2, 0x6, 0xa72, 0x3, 0x80000000, 0x5, 0x4, 0x9, 0x1, 0x7, 0xea5, 0x6, 0x0, 0x4, 0x5, 0x7, 0x0, 0x0, 0x2, 0x7, 0x8, 0x2, 0x1, 0x2c, 0xffffff84, 0xe, 0x3, 0x4, 0x9, 0x9, 0x4, 0x200, 0x7, 0x200, 0x297a, 0xfffffffd, 0x81, 0x4, 0x3, 0xffff, 0x6, 0x9d, 0x400, 0x3, 0x4, 0x7, 0x8001, 0x3, 0x2, 0x2, 0x4, 0x7, 0x2, 0x8, 0x0, 0x8, 0x1, 0x4, 0x80, 0x4, 0xd0d, 0x3, 0x80000000, 0x1, 0xffffffff, 0xc1, 0x8, 0x0, 0x0, 0x81, 0x1ff, 0xc91, 0x5, 0x2, 0x8, 0x4, 0x10000000, 0x8af, 0x12, 0x10001, 0x6, 0x356, 0x391, 0xeb64, 0x3, 0x2, 0xfffffffe, 0x1, 0x1, 0x3c, 0x10, 0x10000, 0x4, 0x9, 0xfffffffd, 0x8, 0x8, 0x1ff, 0x9, 0x2, 0x4, 0xf, 0x4, 0x1, 0xe, 0x0, 0x10, 0x1, 0x5, 0x9, 0x81, 0x0, 0x8, 0x9c, 0x9, 0x5, 0x5e000000, 0xc5, 0xffffffff, 0x5, 0x1, 0x7, 0x5, 0x8000, 0x150a0799, 0x4, 0xfff, 0xb037, 0x2df, 0x3, 0x4, 0x3ff, 0xa, 0xffff, 0x6]}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x11, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}, @icmp=@echo_reply={0x0, 0x0, 0x0, 0x66}}}}}) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) ioctl$TIOCFLUSH(r5, 0xc0187009, &(0x7f0000000080)=0x400) setsockopt(r4, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f00000001c0)={0x1, 0x2, 0x7, 0x2f, "201800", 0xfffffffb, 0x40000002}) r6 = syz_open_pts() writev(r6, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) socket$inet(0x2, 0x4, 0x3b) 2.783257912s ago: executing program 5 (id=108): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x2000, 0x20, 0x33, 0x0, @empty, @rand_addr=0xfffffc}}}}}) (async) shutdown(r0, 0x1) (async) r1 = setsid() (async) sysctl$hw(&(0x7f0000000000)={0x6, 0x9}, 0x2, &(0x7f00000001c0)="8e84365b469069676d813d99c8bf3c78815d88d114e784e1dbca0b35336f84fea41dd675284b1d89015e3d6db659474382efed3001226a78e235637b9503738c6b00cbebdb22adc6cf6cb832330408b6c9d7410a4444f062f061f9ac1704a0b7f971cb3c875da80cb58a95871a238a4d3d", &(0x7f0000000040)=0x71, &(0x7f0000000280), 0x0) (async) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x14, &(0x7f0000000000), 0x4) fcntl$setown(r0, 0x6, r1) ioctl$WSKBDIO_SETMODE(r0, 0x80045713, &(0x7f0000000040)=0x1) (async) closefrom(r0) 2.782219503s ago: executing program 5 (id=110): r0 = socket(0x18, 0x2, 0x3) getsockopt(r0, 0x29, 0x26, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x8, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f0000000180)}) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f0000000180)}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TIOCSETA(r2, 0x80804465, &(0x7f0000000000)={0x20008, 0x10001, 0x8, 0x1, "44f1ffffff000000000400", 0xd2, 0x2}) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) (async) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r3 = socket(0x1e, 0x3, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0x1c, 0x18, 0x0, 0x8, "d1d33cd8f4c81fb56e4e5d656a4dcdb4", 0x7ddb}, 0x1c) syz_open_pts() (async) r4 = syz_open_pts() r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000600)={0x2, &(0x7f0000000000)=[{0x6, 0x3, 0x20, 0x1}, {0x886, 0xfe, 0x9, 0x8020004}]}) (async) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000600)={0x2, &(0x7f0000000000)=[{0x6, 0x3, 0x20, 0x1}, {0x886, 0xfe, 0x9, 0x8020004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getrlimit(0x8, &(0x7f00000000c0)) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r5, &(0x7f0000000140)="f81ad30100060000000100000000", 0xe) (async) write(r5, &(0x7f0000000140)="f81ad30100060000000100000000", 0xe) syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f00000001c0)={0xffffff89, 0x3, 0xfffffffb, 0x46f2d182, "08d095190000a1ecd80df7e9ff7f00006575ec00", 0x0, 0x800806}) r6 = semget(0x1, 0x0, 0x281) semop(r6, 0x0, 0x0) (async) semop(r6, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) setuid(0xee01) (async) setuid(0xee01) open(0x0, 0x40, 0x138) (async) open(0x0, 0x40, 0x138) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f00001cf000/0x4000)=nil, 0x4000, 0x1) chmod(0x0, 0x35e) (async) chmod(0x0, 0x35e) semctl$GETPID(r6, 0x4, 0x4, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) kqueue() 1.882309376s ago: executing program 5 (id=122): msgget(0x1, 0x200) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sysctl$ddb(&(0x7f0000000000)={0x9, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4) r0 = socket(0x18, 0x3, 0x50) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000035c0), 0x8, 0x0) ioctl$DIOCRDELTABLES(r1, 0xc080446a, &(0x7f00000046c0)={{'./file2\x00', './file0\x00', 0x18, 0x82}, 0x0, 0x428, 0x0, 0xb, 0x3, 0x8000003, 0x0, 0x2, 0x200}) r2 = open(0x0, 0x40, 0x132) closefrom(r0) ioctl$FIONBIO(r2, 0x82907003, 0x0) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x417}}}}}) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCCLRIFFLAG(r4, 0xc028445a, &(0x7f00000001c0)={'./file0/file0\x00', 0x0, 0x3, 0x9, 0x0, 0xf103}) ioctl$FIONREAD(r0, 0x8020699f, &(0x7f0000000200)) 1.85262964s ago: executing program 1 (id=124): openat$pf(0xffffffffffffff9c, &(0x7f0000000d00), 0x10, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000400)={'tap', 0x0}) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000040)={&(0x7f0000000280)=[{0x7}, {0x4, 0x4}], 0x2}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[]) 1.576838475s ago: executing program 5 (id=127): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DIOCRGETASTATS(r0, 0xc4504447, &(0x7f0000000140)={{'./file0\x00', './file0\x00', 0x32, 0x4}, &(0x7f0000000040)=[{@rand_addr=0x2, '\x00', './file0\x00', 0x2a9e, 0x5, 0x0, 0x8, 0x4, 0xd3, 0x8c}, {@broadcast, '\x00', './file0\x00', 0x2, 0x8, 0x18, 0x9, 0x3, 0xff, 0xf6}, {@broadcast, '\x00', './file0\x00', 0x2ec, 0x80, 0x1a, 0x7f, 0x82, 0xdf, 0x68}, {@empty, '\x00', './file0\x00', 0x0, 0x5, 0x2, 0xae, 0x8, 0x2, 0xff}], 0xe6c0, 0x4, 0x7fff, 0x7, 0x34, 0x0, 0x10, 0xffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r2, &(0x7f0000000600)=""/238, 0xee, 0x7, &(0x7f0000000700)=@abs={0x1, 0x1, 0x0, 0x3}, 0x8) recvmsg(r2, &(0x7f00000009c0)={&(0x7f0000000740)=@in, 0x10, &(0x7f0000000940)=[{&(0x7f0000000780)=""/133, 0x85}, {&(0x7f0000000840)=""/212, 0xd4}], 0x2, &(0x7f0000000980)=""/15, 0xf}, 0x2) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) ioctl$DIOCRCLRTSTATS(r3, 0xc4504441, &(0x7f0000001b00)={{'./file0\x00', './file0/file0\x00', 0x4e, 0x1}, &(0x7f0000000a40)=[{'./file0\x00', './file0\x00', 0x40, 0x5}, {'./file0\x00', './file0\x00', 0x0, 0x4}, {'./file0\x00', './file1\x00', 0x22, 0x55}, {'./file0\x00', './file0\x00', 0x10, 0xc0}], 0x3, 0x4, 0xffffffff, 0x80000000, 0x2, 0x1, 0x30, 0x6d}) futimes(r1, 0x0) r4 = socket$inet6(0x18, 0x8000, 0x8a) bind$inet6(r4, &(0x7f0000001f80)={0x1c, 0x18, 0x0, 0x7, "90a2896de99c60dbc2cc4a8713e55559", 0x6}, 0x1c) ftruncate(r4, 0x1ff) close(r2) r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000001fc0), 0x20, 0x0) ioctl$VNDIOCGET(r5, 0xc4104603, &(0x7f0000002000)={'./file1\x00', 0x0, 0xffffffff, 0x7}) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000002440), 0xc718c2fd5501298d, 0x0) ioctl$BIOCGETIF(r6, 0x4020426b, &(0x7f0000002480)={""/16, @ifru_metric}) fchmod(r2, 0xc0) r7 = openat(0xffffffffffffff9c, &(0x7f00000024c0)='./file1\x00', 0x40000, 0x80) ioctl$VMM_IOC_RUN(r7, 0xc0285602, &(0x7f0000002780)={0xb, 0x2, {0x8, 0x2, 0x5}, 0x56, &(0x7f0000002500)={{0x0, 0x3, 0x2, 0x9, 0x2, 0x9, 0x2, 0x7f}, {[0x1, 0x100000001, 0x0, 0x8001, 0x100000000, 0x7fffffff, 0x2, 0x7, 0x8, 0xab95, 0x3, 0x8, 0x8, 0x9, 0x4, 0x3, 0x0, 0x8000000000000000], [0x0, 0x5, 0x9463, 0xee0, 0x9, 0xde, 0x80000000, 0x76a7, 0xfff, 0x6], [0xffffffffffffffff, 0x4, 0x4, 0x4, 0x3, 0x7c5, 0x200], [0x8, 0x4, 0x0, 0xb5, 0x378, 0x6000000000], [{0x3d46, 0x0, 0x6, 0x101}, {0x7, 0x2, 0xb5d, 0x6}, {0x0, 0x2, 0xfffffff8, 0x4}, {0x7, 0x8, 0xf, 0x7}, {0x9, 0x4, 0x1, 0x28db}, {0x521, 0x7, 0x9, 0x4}, {0x4, 0x6, 0x8000, 0x23}, {0xef, 0x100, 0x4, 0x90}], {0x2, 0xa, 0xdccd, 0xff00}, {0x4, 0x4, 0x6, 0x5}}, 0x5fc2}, 0xe, 0x9}) ioctl$DIOCRCLRASTATS(r7, 0xc4504448, &(0x7f0000002800)={{'./file0/file0\x00', './file0\x00', 0x24, 0x9}, &(0x7f00000027c0)=[{@empty, '\x00', './file0\x00', 0x3, 0x3, 0x18, 0xfb, 0xf2, 0x56, 0x7f}], 0x80000001, 0x1, 0x5, 0x689ca66d, 0x5, 0x7, 0x0, 0x8001}) ioctl$WSMOUSEIO_GETPARAMS(r7, 0x80105727, &(0x7f0000002cc0)={&(0x7f0000002c80)=[{0x87, 0x6}, {0x8, 0x114}], 0x2}) ioctl$WSMUXIO_ADD_DEVICE(r7, 0x80085761, &(0x7f0000002d00)={0x2}) rmdir(&(0x7f0000002d40)='./file1\x00') ioctl$WSDISPLAYIO_GETSCREEN(r7, 0xc0245755, &(0x7f0000002d80)={0x10000, './file0\x00', './file0/file0\x00'}) getresuid(&(0x7f0000002e00), &(0x7f0000002e40), &(0x7f0000002e80)=0x0) getresgid(&(0x7f0000002ec0), &(0x7f0000002f00)=0x0, &(0x7f0000002f40)=0x0) lchown(&(0x7f0000002dc0)='./file0\x00', r8, r9) setregid(r9, r10) sendmsg$unix(r2, &(0x7f0000004640)={&(0x7f0000002f80)=@file={0x3d, 0x1, './file1\x00'}, 0xa, &(0x7f0000004580)=[{&(0x7f0000002fc0)}, {&(0x7f0000003000)="11b9c39fd28ad17481ad045d54347eacc32c2fa041e889ee15e9ad4690cfed1441008fa45f2e6fe644313c8de6e5d44e697bc58a999f0eb3c8fcb6c4898155e394abd9c13a10acc6c5d5b7b875403206d56178", 0x53}, {&(0x7f0000003080)="3fbad638a9987b103305d4a1da1765e0d8a971dc7ac5897df80453b55bccafa336c56a51aaab02c987a5cfd8ab770ee78fe0345cdd095c816be6ee1251e25b5aba117dc9ca155bef6e2e1a4eb89cb5eff66c9b2fd60a2957016c93f09736a866b08a0b9a65ef6d03b62fa5b68a1a2913adfbed8ea0f4cb1712c9633c2a1ac4edf7e635ae84cd7013881c2807ff037992e17a4379732ea2a4106f36824a13cb8726060b470c576a05aa47a3a39696bb26ac287b6c993681d855493ddf9d4737c2da88c89dc05b662fe1a190ca3b0036fc094f54088a94ed7ac79939937d1ee2e633", 0xe1}, {&(0x7f0000003180)="45543a09d1d568ec1f629f5faaf2604455b292dc608cfe5d5a5e636e5a9bce71b0fff3a5a45b28693c375bb3d6a4c2b8d80067a7fe5f4ae16fc5004f732857456356bd8b9b67b007ebb961adec7386dfb6b3da0566e99ca651bae60206975edd7ae06c39607d1e91c26d", 0x6a}, {&(0x7f0000003200)="6d113af26a92951ece44c0a2b458de479d4fc48d5d1727d417120250c9db52cd425e2d9b8d81d4afec21c461f0fe79e82277e503367a6d80ba12729685df8f76ef72fb785d05f1b99238e6e4084a4a0bf8d1327229fc3afc658d118e8b228c639525d9eaf688e44d563a07da174096927b51de44e5332e29d1b68996ec245419617c4b5a5a24ac055a4fb35549e451adc87fbffdd0d3d20be5705de0d1b5c5c21db1f9b1f0a0c63c8f369f9f2763a6f567ad927b9d95672f7145c1fd2de935e3db48d3ce04337151678758097e1fe4a1eb8d70ff69cf54bc3f5fd986cef46f36b85a93d3493c91d905e2759185587061b4703ca440342fe8", 0xf8}, {&(0x7f0000003300)="678cca92c8cb6d1595f0209f4035de96d6f54efad0cfa5bbd36e7ac69bf3701ed808943187b879c98a16db0f2b27cd6dcfff6c1218389309d89d57087a7fc4cc3c70d78d591c7e55ee5fb8e5546fcd6355f2df99a1f3b93d11d34d7420d3e0f08399f840b6a628a73d9b80fda68f56254837f1d217", 0x75}, {&(0x7f0000003380)="c857f93f14f20dc521032aed91800af1d210fc45f88d0de1a35ada1b3a4e100118cb6eacc92e614eb6cfdcc6ccf141f3eda075e3424168ba70ac58dccbcd65be511bf54a0de032cd365a4e10cf70d447c9fc75ebb06d50e20834efc3bdac79092e35341513e232c3583f7b2934f5f41704ede496edf5d2ddf869b5276356229fe80e530e6642f102d730e5", 0x8b}, {&(0x7f0000003440)="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", 0x1000}, {&(0x7f0000004440)="9082eefd6d976b65097ffce0c28106a363025298e29f311e5c29c14d26fb5b95af874b2f0d66c1ea2567952f07b03f24a4c98899d61d370f3b8f7e1bcf838d0cea8a5a1c928f01b8ed206b8a9cec0a41d03c433f5d0c3e614ea1dbf160d5e5852daf2583e8be6807f0ba88fd6a8b679ac62257bba65ce973653b766349e50dd294e8aa734abf63ba215a7f0ec72965b70b5d7796a7c12f7f6c4f2a89e21f41ac5b976cadf1bb60d126f799bfd09300b5937339", 0xb3}, {&(0x7f0000004500)="8fc9db7d79e2d7a9bddb40ee4d5a65f54aec9ad281d25e3b340d7857ba02292c4e5971d7a0c2e3b12a1c8921ae0e8cb7bc975d71b959302d3554480d3aa58dac26f3a3fc3124f6ccde41d0b7be44be6d40ede2", 0x53}], 0xa, 0x0, 0x0, 0x1}, 0x10299c1e321b0b04) ioctl$DIOCSETIFFLAG(0xffffffffffffffff, 0xc0284459, &(0x7f0000004780)={'./file2\x00', &(0x7f00000046c0)=""/158, 0x81b0, 0x0, 0x5, 0x7}) 1.575076072s ago: executing program 4 (id=129): sysctl$ddb(&(0x7f0000000000)={0x9, 0x6}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0xe}, 0x2, &(0x7f00000011c0), &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr, {[@noop, @ra={0x94, 0x6, 0x6}]}}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x200}}}}}) sysctl$ddb(&(0x7f0000000000)={0x9, 0x6}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0xe}, 0x2, &(0x7f00000011c0), &(0x7f0000000080), 0x0, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr, {[@noop, @ra={0x94, 0x6, 0x6}]}}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x200}}}}}) (async) 1.478768364s ago: executing program 1 (id=131): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r1, r1, r3) stat(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x8, &(0x7f0000000380)=[r3, r1, r3, r3, r4, r3, r5, r2]) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$BIOCSETIF(r6, 0x84946467, &(0x7f0000000400)={'tap', 0x0}) setuid(0xee01) r7 = socket$inet6(0x18, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0xa858, "0000000000000800063c07b811af4100", 0x7}, 0x1c) setgid(r0) r8 = socket(0x2, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r9 = socket(0x2, 0x2, 0x0) r10 = socket(0x18, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000100)={0x1c, 0x18, 0x0, 0xfffffff8, '\x00', 0x2002}, 0x1c) sendmsg$unix(r10, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000"], 0x10, 0x8}, 0x8) ioctl$FIONREAD(r9, 0xc0206921, &(0x7f00000001c0)) ioctl$FIONREAD(r8, 0x80206916, &(0x7f00000001c0)) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='r\x00') ioctl$DIOCCLRSTATES(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={{0x6, 0x9cc, 0x3}, 0x0, '\x00', 0x2, {@any={'\x00', 0x0, 0x6, 0x6}, [0x100, 0x6f1], 0xc, 0x5, 0x55f}, {@any={'\x00', 0x0, 0x0, 0x6}, [0x9, 0x5], 0x9, 0x1, 0x4}, './file0\x00', './file0\x00', 0x3}) 1.468127488s ago: executing program 1 (id=133): setreuid(0x0, 0xee01) chown(0x0, 0x0, 0x0) symlink(0x0, 0x0) setuid(0xffffffffffffffff) kill(0xffffffffffffffff, 0xe) ioctl$WSKBDIO_GETENCODINGS(0xffffffffffffffff, 0x8004667d, 0x0) r0 = openat$klog(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = socket(0x2, 0x5, 0xde) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='c\x00') mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$VMM_IOC_RESETCPU(r2, 0x82405605, &(0x7f00000000c0)={0x8, 0x800014b, {[0x0, 0x40, 0x400000c453981, 0x6, 0xe, 0x8000, 0x0, 0x3ffffffffff, 0xc, 0x20000400000001, 0x7, 0x4, 0x9, 0x2000180, 0x0, 0xd3, 0x40, 0xffffffffffffbff7], [0x5438b94c, 0x5, 0x1004, 0x7, 0x1, 0x1, 0x9, 0x3, 0x4, 0x3], [0x6, 0x597c86cd, 0x6, 0x8000000008, 0x10000, 0x210, 0x2], [0x100000000, 0x1000012801, 0x3, 0x9, 0x1000000000000003], [{0x0, 0x800, 0xfffffbfb, 0x5}, {0xfffa, 0x925, 0x3, 0x338}, {0x2, 0x7fffffff, 0x0, 0x7f}, {0xb, 0xfffffc00, 0x3ff, 0x1}, {0x4, 0x8, 0x20000, 0x8}, {0x1f, 0x0, 0x0, 0x7}, {0xe4, 0x6, 0x1ff, 0x1}, {0x3, 0x10003, 0x8001, 0x3}], {0x8, 0x3, 0x401, 0x8}, {0xfff7, 0xffffbfc0, 0x5}}}) ioctl$FIONREAD(r1, 0x8020690c, &(0x7f0000000300)) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x152, 0x0}) closefrom(r0) sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.289195011s ago: executing program 1 (id=138): r0 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x8c) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aeaaaaaaaaaaaab7aec4aabb08063bf608cfc8ff4b2d0006040009aaaaaaaaaaaa7fcbb7000001aaaa00"]) (async) syz_emit_ethernet(0x36, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '_j@', 0x0, 0x2c, 0xa9, @local={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}}}}}) mmap(&(0x7f00007fa000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x3) (async) r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) ioctl$PCIOCWRITE(r1, 0xc00c7007, &(0x7f00000005c0)={{0x0, 0x5}, 0x1, 0x8003, 0xe}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) (async) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) close(r3) (async) r4 = syz_open_pts() ioctl$TIOCSFLAGS(r4, 0x8004745c, &(0x7f0000000100)=0x800001) (async) ioctl$PCIOCWRITE(r2, 0xc00c7007, &(0x7f0000000080)={{0xb0, 0xfc, 0x3}, 0x5, 0x565, 0x2}) (async) r5 = msgget$private(0x0, 0x3d2) msgsnd(r5, &(0x7f0000001f40)=ANY=[], 0xe1, 0x800) 1.288279058s ago: executing program 7 (id=139): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="608b73452b984ef573096fffffff000000000c82f400", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500282009078fffc"]) sendto$unix(r1, &(0x7f00000006c0)="b100050400000000000008000120000000000000cea1fea7fef96ecfc73fd3357ae27caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebb4257a1b4699a1f132e27acbdd602000d7d026ba8af63ff37282902e4fd008e720fd3873babfbb770a2f5a872c881ff7cc53c8943310b404f36a00f90006ee01bc40900000000000000000000000000020208a371a3f8000400000000000000010000000000000010", 0xb1, 0x8, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x1000000029, 0x33, &(0x7f0000000080)="031000086941e7c5ce5876778f181b12184c256b1ca6f583b03f959b5253027d08b90779da6a56", 0x27) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816a0046063000f8ff00000000000000000000000000fe8000000000000000000000000000aa3d259c06b15a443aa104000ce98378b65dde37b92d7200cff44a58083c0c09119fc163a34eb4a4de01040db565be4559cce243ac8387255f660d6c9d872a4cb56bf4c6693a11"]) ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0xfffffffe, 0x0, "210d000000020000007fffff00", 0x7ffffffe, 0x1}) select(0x40, &(0x7f0000000180)={0xffffffff, 0x6, 0xffffffffffffffff, 0xfffffffffffffff9, 0x7fc, 0x181c, 0x7fffffff, 0x2}, 0x0, 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xffffffa6, 0x80000000, 0xd, 0x0, 0x4, 0x1000d86, 0x40, 0x2, 0x1, 0x100002000640}) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x1, 0x7, 0x2000d4, 0xa, 0xffffffff, 0x9c, 0x10, [{0x3, 0x7, 0x0, 0x7ff}, {0x4, 0x5, 0xffb, 0x7}, {0x10000005, 0xf83, 0x0, 0x6a}, {0xefe, 0x800, 0xe, 0xffffff}, {0x9, 0x7, 0x9, 0x8}, {0x6, 0x1, 0x0, 0x800009c}, {0x409, 0xffffffff, 0x20081003, 0xfffeffff}, {0x1f, 0x100007fe, 0xffff, 0x5}, {0x2, 0x81, 0x1, 0x200000f}, {0x100006, 0x8001, 0x1, 0xa00000b}, {0x4, 0xfffb, 0x3}, {0x1, 0x40, 0x3, 0x4}, {0xe0, 0x4, 0x5, 0x3}, {0xffff0354, 0x3, 0x8001, 0xb}, {0x0, 0x6, 0x4, 0x1ffffffd}, {0x0, 0x2, 0x0, 0xc3}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x0, 0xfffffffffffffffd, 0x27ffffffffffffff, 0x181c, 0xc, 0x401}, 0x0, 0x0, 0x0) ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, &(0x7f0000000140)=0x1) ioctl$DIOCGETSYNFLWATS(r0, 0xc0084463, &(0x7f00000000c0)) clock_getres(0x5, 0xffffffffffffffff) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x3, 0xc4, 0x8}, {0x28, 0xc9, 0x8, 0x8}, {0x9b0e, 0x22, 0xf, 0x40207ff}]}) sysctl$kern(0x0, 0x47, &(0x7f0000000280)="c27845f3b2019324b9b78a65af1faf4a1532d360402249ca61623055b6f204a276ee4a3401b2df458794fb69504c92e0bb2ded54a048b81958232ccc94e64df780e1aa565d30010014a581563bf40b42476e7d36d3c0411ff7570af0cf32350ce42e9fa80fb58ec3c41ab08f2b39928ef903e8b12ada028eb18130722ca3a24f5b8594557b4b5e3a710dada77e3bd8c4e2494ae2de5e4e99290546c2f93680f8cfb70fec3843d36ad66a7641b5fe5021389ab72f0a7266bf16c25644e7d4675760113480fa44c48f07bb1575d0c3bbbd4a99a04e49171b7e10513b736a755aa6721f46c10b76afe51f25018361299c19", &(0x7f0000000000)=0x35, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_extract_tcp_res(&(0x7f0000000180), 0x3, 0x3) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[]) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 1.174868606s ago: executing program 2 (id=140): syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @random="b4705726ef45", [], {@ipv6={0x86dd, {0xc, 0x6, "a97c06", 0x14, 0x37, 0x85, @local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="fe0397b0243037cf3f3059ca8f75261f", {[], @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x6, 0x0, 0xfff4}}}}}}}) (async) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 1.173577761s ago: executing program 2 (id=141): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb405000000000000160000002d69e639776665d4cd12c63d34", 0x31}], 0x1}, 0x2) ioctl$DIOCRGETTSTATS(0xffffffffffffffff, 0xc4504440, &(0x7f0000000700)={{'./file0\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x28, 0x8}, 0x0, 0x4d0, 0x0, 0x4, 0xb60, 0x14000, 0x400, 0x0, 0xf}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$TIOCSETA(r0, 0xc450444d, &(0x7f0000000740)={0x0, 0x1, 0xfffffffd, 0x4, "97a2224ff1c14649ebb17a926cc9795a6b47c1d1", 0x3, 0x5}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000900), 0x80, 0x0) r2 = socket(0x18, 0x3, 0x0) shutdown(r2, 0x2) flock(r1, 0x8) openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x8, "fffffff9000000000000000000000001", 0x7}, 0x1c) socket$inet6(0x18, 0x1, 0x6) ioctl$TIOCGFLAGS(r1, 0x4004745d, &(0x7f00000000c0)) mknod(&(0x7f0000000000)='./file0\x00', 0x1, 0x44000802) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x0) select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040)={0x700}, &(0x7f0000000080)={0xcb}, &(0x7f0000000180)) r3 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setresgid(0x0, r6, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, r5, r6, 0x8f, 0x23, 0x0, 0x0, 0x3ff}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x5}) lstat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, &(0x7f0000000100)="688b20b5", &(0x7f00000001c0)=0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) setgroups(0x3, &(0x7f0000000380)=[r6, r7, 0x0]) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r8, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5d123a8187cb1589e6731ec91c2ec69e51348771197a772843f99e82a9da06d907a51f352", 0x2c) 1.155751166s ago: executing program 2 (id=143): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x1}, 0x10) r1 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) pipe(&(0x7f0000001780)={0xffffffffffffffff}) fcntl$getown(r2, 0x5) setitimer(0x2, &(0x7f0000000140)={{0x1cdc, 0x5}, {0x7ff7ffffffffffff, 0x11}}, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000001300)=0x3, 0x4) r3 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r3, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r4 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) r5 = socket(0x18, 0x3, 0x0) r6 = getthrid() ktrace(0x0, 0x5, 0x128, r6) setpgid(r6, 0xffffffffffffffff) ioctl$FIONREAD(r5, 0x8060694c, &(0x7f0000000100)) 980.340259ms ago: executing program 2 (id=144): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x18, 0x3, 0x40) (async) setitimer(0x2, &(0x7f0000000140)={{0x800000000f32b477, 0x401}, {0x80080e1f8, 0x6}}, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x5, &(0x7f0000000180)=[{{r2}, 0xffffffffffffffff, 0x13, 0x2}, {{r2}, 0xffffffffffffffff, 0x62}], 0x6, 0x0) (async) ioctl$DIOCRCLRTABLES(r2, 0xc450443c, &(0x7f0000000200)={{'./file0\x00', './file0\x00', 0x67, 0x2}, 0x0, 0x0, 0x0, 0x59, 0x5, 0x2, 0xa2, 0x20, 0x1}) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x40, 0x9, 0xf7, 0x10001}, {0x9b1e, 0xff, 0xf4, 0x4000800}]}) (async, rerun: 64) syz_emit_ethernet(0x10004, &(0x7f0000000000)=ANY=[]) (rerun: 64) 963.247989ms ago: executing program 3 (id=146): r0 = semget$private(0x0, 0x4, 0x0) sysctl$net_inet_carp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, &(0x7f00000010c0), 0x0) semctl$GETVAL(r0, 0x22e12657bf944f4c, 0x5, &(0x7f0000000040)=""/102) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000380)={0x10000, [{0x1, 0x2}, {0x0, 0xfffffffd}, {0x0, 0x2}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0xc8}, {0x132435cf0b6608e6, 0x2}, {0x0, 0xff}, {0x2}, {0x3, 0x204}, {0x3, 0xffdffffd}, {}, {0x0, 0x7fffffff}, {0x0, 0x3}, {0x1, 0x6}, {0x2, 0x7}, {0x0, 0x2000000}, {0x0, 0x3}, {0x1}, {0x1, 0xfffffffc}, {0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x1}, {0x2, 0x3}, {0x3}, {0x1}, {}, {0x0, 0x9}, {0x1, 0x57fd}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 962.952481ms ago: executing program 4 (id=147): openat$pf(0xffffffffffffff9c, &(0x7f0000000d00), 0x10, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000400)={'tap', 0x0}) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000040)={&(0x7f0000000280)=[{0x7}, {0x4, 0x4}], 0x2}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[]) 961.858012ms ago: executing program 1 (id=148): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) fchflags(r0, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) dup3(r1, r0, 0x10004) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0x1, 0x80, 0x400000e}, {0x84, 0x9, 0xf7, 0xfffff001}, {0x6, 0xff, 0x5, 0x4}]}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[]) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async) write(r1, &(0x7f0000000480)="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", 0xffffffae) (async) syz_emit_ethernet(0x82, &(0x7f0000000200)={@broadcast, @remote, [], {@ipv4={0x800, {{0x1a, 0x4, 0x3, 0x3b, 0x74, 0x68, 0x39ea, 0xf7, 0x70, 0x0, @empty, @local={0xac, 0x14, 0x0}, {[@end, @ssrr={0x89, 0xf, 0x9, [@multicast2, @multicast2, @loopback]}, @ra={0x94, 0x4, 0x8}, @ra={0x94, 0x4, 0x7}, @timestamp={0x44, 0x3c, 0xfa, 0x0, 0xd, [{[@remote={0xac, 0x14, 0x0}], 0xd}, {[@empty]}, {[@rand_addr], 0x40}, {[], 0xffffcca8}, {[], 0x8000800}, {[], 0xd}, {[@broadcast], 0x7}, {[@local={0xac, 0x14, 0x0}], 0xffffffff}, {[], 0x3}]}]}}, @icmp=@mask_reply={0x12, 0x0, 0x0, 0x100, 0x0, 0xb}}}}}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) semget(0x0, 0x3, 0xa0) (async) pwrite(r0, &(0x7f0000000040)="956e20ab", 0x4, 0x101) 880.126622ms ago: executing program 2 (id=150): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x2, 0x0, 0xac1400ff}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x20, 0x0, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, &(0x7f0000000140)="33e8fb9dfa5a94cfa943e7662f41f28418d35c45", 0x14) 869.490635ms ago: executing program 0 (id=151): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x6, 0xffffffeb, 0x9, 0xffdfff8c, "08eddf000000000008000800", 0x800b, 0xda4}) ioctl$TIOCSDTR(r1, 0x20007479) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) r2 = socket(0x10, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x0, 0xfffffeff, "fe8000000000000000000047a500ddff", 0x3}, 0x1c) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async) syz_open_pts() (async) close(r0) (async) syz_open_pts() (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x6, 0xffffffeb, 0x9, 0xffdfff8c, "08eddf000000000008000800", 0x800b, 0xda4}) (async) ioctl$TIOCSDTR(r1, 0x20007479) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) socket(0x10, 0x0, 0x0) (async) connect$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x0, 0xfffffeff, "fe8000000000000000000047a500ddff", 0x3}, 0x1c) (async) 868.202059ms ago: executing program 4 (id=152): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000180)={0x3, &(0x7f0000000200)=[{0x81, 0xb, 0x1, 0x110}, {0x7, 0x9, 0xff, 0xb0b}, {0x6, 0x2, 0xfc, 0x40007fb}]}) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[]) (async) r1 = semget(0x0, 0x1, 0x281) semop(r1, &(0x7f0000000000)=[{0x0, 0xfff8, 0x1000}], 0x1) (async) semop(r1, &(0x7f0000000180)=[{0x0, 0x8}], 0x1) (async) r2 = semget(0x1, 0x3, 0x240) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x1, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x80}}}}}}) (async) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0xc8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r3, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) r4 = kqueue() kevent(r4, &(0x7f0000000440)=[{{}, 0xfffffffffffffffa, 0x8, 0x2, 0x67, 0xd11}], 0x3fc, 0x0, 0x8000800, 0x0) (async) r5 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0xffff, 0x8, 0x0, 0x0) (async) syz_emit_ethernet(0x12c, &(0x7f0000000480)={@local, @empty, [{[], {0x8100, 0x4, 0x0, 0x2}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x11a, 0x3, 0x0, 0x1, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @udp={{0x2, 0x3, 0x8}, {"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"}}}}}}) (async) semop(r2, &(0x7f00000000c0)=[{0x2, 0x7, 0x1800}], 0x1) (async) r6 = semget(0x0, 0x1, 0x281) semctl$SETVAL(r6, 0x0, 0x8, 0x0) 692.13577ms ago: executing program 1 (id=153): syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000080)={0x1, 0x13}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) select(0x40, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x8002, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) 691.412476ms ago: executing program 5 (id=154): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000180)={0x4, &(0x7f0000000100)=[{0x80, 0x0, 0x1, 0x9}, {0x34, 0x0, 0x2, 0x4}, {0x7c, 0x9, 0xf7, 0x400}, {0x9b1e, 0x3, 0xf4, 0x4000800}]}) setuid(0xffffffffffffffff) r1 = kqueue1(0x4) fstat(r1, &(0x7f0000000780)) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) getpgid(0xffffffffffffffff) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSFILDROP(r3, 0x80044279, &(0x7f00000001c0)=0x2) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, [], {@ipv6={0x86dd, {0x9, 0x6, '\x00\b\x00', 0x8, 0x3a, 0x40, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, @loopback, {[], @udp={{0x3, 0x2, 0x8}}}}}}}) setreuid(0x0, 0xee01) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = socket(0x1, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x38, 0x66, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@parameter_prob={0xc, 0x1, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x1b, 0xfffc, 0xfffc, 0x0, 0x8, 0x11, 0xf0, @multicast1, @multicast1}, "af7954c6c36be905"}}}}}) ioctl$FIONREAD(r4, 0x8020691f, &(0x7f00000001c0)) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffdffff8038"]) 688.93571ms ago: executing program 7 (id=155): setuid(0xee01) r0 = shmget$private(0x0, 0x1000, 0x22, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x1e, 0x3, 0x0) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="7607d7710200"/16, 0x10}], 0x1}, 0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, r1, 0x102, 0xf9, 0x0, 0x0, 0x49db}, 0x85, 0x0, 0x0, 0x8, 0x0, 0xde1, 0xfffffffffffff622, 0x9c, 0x2020000000000000, 0x84, 0x4}) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000180)=""/176) poll(&(0x7f0000001680)=[{0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x20}], 0x2, 0x48bd) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x1, 0x3, 0x2, 0x4}, {0x0, 0x0, 0xd, 0x4}, {0x4, 0xb, 0x3, 0x8}, {0xa86, 0x7, 0x7, 0x7fff}, {0xff24, 0x81, 0x10, 0x2}, {0x8, 0x9, 0x5, 0xfff}, {0x5, 0x7, 0x2, 0x6}]}) unveil(0x0, &(0x7f0000001700)='r\x00') minherit(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3) 551.511256ms ago: executing program 2 (id=156): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000445000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000445000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r1, 0xffff, 0x1004, &(0x7f0000000000), &(0x7f0000000100)=0x4) (async) getsockopt$sock_int(r1, 0xffff, 0x1004, &(0x7f0000000000), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0xffff, 0x1005, &(0x7f0000000040)={0x7, 0x7fffffff}, 0x10) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000000)=0x8) (async) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000000)=0x8) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x2) write(r0, &(0x7f00000002c0)="3dacaf2007efe7f2aacb103ef5614b7ee991217204933059d9fcfbc5d67adfc708ba90e85c3252b8101709dc11c37cee01b0a4070000005e0984f204ef676d7a15176cbe2584124bbc6eaeffa4739da44ab12627c0b68f4f6b2a5fa778b0241132b072462a736f1b3a5227eb254db06f148a13f278b8f1efb35410a0a7febc5571457cab4d2763c894eb64c90f92efc71616839cd5b627c5e619747c135a97a2e37ccf6b1bc0dd5d56d3cecd8029ecfb924772ed6fe4798b990c82e93aab095f25642c116a27a7babca09430204e2ee06ac8cce7404e", 0xffffff33) 550.415498ms ago: executing program 4 (id=157): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) (async) setresuid(0xee00, 0xee00, 0x0) (async) socket$unix(0x1, 0x1, 0x0) 549.484357ms ago: executing program 5 (id=158): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) writev(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000001400)="f8a6e7085795dfc7fcdf50a7935b485b2484e13aae001450b336e795cf4c00fcb8fbcc028d53191c03fce452051cc3bce6489bbc8a9cccb3d33fa86c820575cc6d172022259bc898a31371dcf3c0e6da8a53c8449e9e4c87801300a83a3c57fb4c8f3b212859e41f196b66aff47e8e52d9c8cf9bc0", 0x75}, {&(0x7f0000001480)="257519a9fb2e44ba6433a29a9e0489c294030661d9275ad75e3722bc39bd68aafeb313f9ed4e0c10bec572b8d6044ac0cdbfd25b87995ee50419fe1013acffeadc6b", 0x42}], 0x2) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x3, 0x0, 0x2, 0x3}, {0x0, 0x9, 0x4, 0x64e2}, {0xbb1e, 0xd7, 0xf6, 0x40007fe}]}) syz_emit_ethernet(0x7bf, &(0x7f0000000000)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = msgget$private(0x0, 0x0) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x80) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r4, 0xc028698d, &(0x7f0000000000)) preadv(r3, &(0x7f0000002800)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x2) ioctl$WSMUXIO_INJECTEVENT(r3, 0x80185760, &(0x7f0000000140)={0xd, 0x6}) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000080)={0xe50, 0x0, 0x4e, 0xea24, 0xffff}, 0xc) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) msgrcv(r2, 0x0, 0x0, 0x0, 0x1000) select(0x0, 0x0, &(0x7f0000000340)={0x0, 0x80000000000}, &(0x7f0000001900)={0x100000000000000}, &(0x7f0000000440)) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket(0x2, 0x2, 0x0) shmget$private(0x0, 0xc00000, 0x24c, &(0x7f0000400000/0xc00000)=nil) r6 = socket(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)="5efce12a7f4985fd0f4c457c918f442f8e89d920a99f97e32e32b9a6bc5ed74939b6ef49f652c7de01f74ca00c66a990aa5f056d71f0ed8ed7a54d41dbbab01def14d3d3dc56362f4a497ddf726ff879e93a918aa160f2f27441f0b2e02b1241e45dc9dedbf979f829030f431edbf6367c64069b61c314c70c42ad60947e439aed4829699a35655910f8c1dca4045ce5c8eea6f1705fa985a689148b7b260d52fc0f6c61c90c3f9259f03d83", 0xac}], 0x1) connect$inet(r6, &(0x7f0000000000)={0x10, 0x2, 0x0, 0x200000e3}, 0x10) setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4d) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa8601005c001c00660000e2019078ac1400bbe000000110009078800000090000de5aa1c52e20a5894c0283b6f993da4763d75806f95fb798a477d71198b44dda1cc41ac2b9ff78174e5a3b"]) lstat(&(0x7f00000000c0)='./bus\x00', &(0x7f0000001300)) 548.816067ms ago: executing program 4 (id=159): r0 = fcntl$dupfd(0xffffffffffffffff, 0xc, 0xffffffffffffffff) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="f8a8eb9cad3e3af294fd2aa99b72225e676999e0ec7aff96f5e4faa20a36a121b7bd2ab945034034884b885a5f3a239a16544089cb9d88ac06314eadda4f765c9d2dff731d478ccbb7891355ce01070f92ca9b0cda654aa1ac16afa2317bd42de92c7c66cbfe8e0a083349f027818cfb9cf969ff", 0x74}, {&(0x7f0000000080)="680e11b85e51ccfdc2d29cec5aa08f797cafb6110c81bfc8e594c9fe5002ba6f9dfd71174d238ee60fc52f60e68483c90ebb9619aaac601892e41970d280e3d56d902dc58c48ea89e3aa75069c48f3df24f3735a5241f2a4b5d9e74a8b7deadc55ff04956b728706f2164d0ab64d6f601645b60edc2f3cf66ee071543046246561937936ac15537006477f301c9fdd7de3b5d730cd19081bf3430cfad42ea39823584a4933325063cc8793605cf9193c189436ae9702f2dc4cdc3530df362c6c4baf0dd92f8a864c49132fe4c8a201bd6f59290d1e751294c94dfa0704996b9e2c5a60", 0xe3}], 0x2) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f00000001c0)) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f0000000200)=0x1) r1 = getppid() fcntl$setown(r0, 0x6, r1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x2, 0x8, 0x7, 0x7], 0x4, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$VMM_IOC_INFO(r3, 0xc0185603, &(0x7f0000000380)={0x51, 0x100, &(0x7f0000000300)=""/81}) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000003c0)=0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000004c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0]}) r5 = syz_open_pts() fstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) fchown(r0, r6, r7) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000640)={0x0, 0x1, 0x8, 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={0x0, 0x0, 0x10000, 0x34303553, 0x5, [0x0, 0x0, 0x0, r8], [0x9, 0x0, 0x3, 0xb], [0x5, 0x2ea, 0x10001, 0x8000], [0xae8, 0xf8, 0x4, 0x81]}) r9 = openat$dri(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dri/card0\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000740)={0x7, 0x5, 0x2, 0x7}) semget(0x0, 0x0, 0x100) fcntl$setown(r9, 0x6, r1) r10 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000780), 0x40000, 0x0) ioctl$BIOCSETIF(r10, 0x8020426c, &(0x7f00000007c0)={'tap', 0x0}) r11 = openat$dri(0xffffffffffffff9c, &(0x7f0000000800)='/dev/dri/renderD128\x00', 0x80, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r11, 0xc01064bd, &(0x7f0000000880)={&(0x7f0000000840)="72ca996c0dc658dbf7b67d74b83cbba34040dfd3f358e2", 0x17}) ftruncate(r5, 0x2) ioctl$TIOCNOTTY(r5, 0x20007471) closefrom(r11) socket(0x10, 0x2, 0x1) 332.259057ms ago: executing program 0 (id=160): r0 = getpgrp() openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x18, 0x3, 0x0) ktrace(&(0x7f0000000040)='./file0/file0\x00', 0x4, 0x3400, r0) r2 = socket(0x2, 0x1, 0x4) close(r2) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) getsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000100), &(0x7f0000000180)=0x10) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r3 = socket(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000140)={0x10, 0x2, 0x0, 0xffffff29}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x200, 0x130) chmod(&(0x7f0000000000)='./file0\x00', 0x3de) setuid(0xee01) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903a001000000000000006ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x40b}, 0x0) ioctl$TIOCSETA(r4, 0xc4504444, &(0x7f0000000740)={0xbe, 0xb, 0x1, 0x20000003, "0400091200000000000048000d00000000002f00", 0xb, 0xfffffffe}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r5, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) setreuid(0x0, 0xee01) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r6 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r6, 0x80206982, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getrlimit(0x1, &(0x7f0000001080)) connect$unix(r1, &(0x7f0000000080)=@abs={0x80, 0x1, 0x0, 0x1}, 0x8) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) mknod(&(0x7f0000000240)='./file0\x00', 0x80, 0x101) 331.84842ms ago: executing program 3 (id=161): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$WSKBDIO_SETENCODING(r0, 0x80045710, &(0x7f0000000000)=0x218) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) (async) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) ioctl$FIOASYNC(r1, 0xc0107002, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x59}, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffee3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0xc, 0x0, 0x0) 328.520009ms ago: executing program 7 (id=162): accept(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x5901) open(&(0x7f00000001c0)='./file0\x00', 0x10, 0x4) 184.905031ms ago: executing program 3 (id=163): sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, &(0x7f0000000200)="16e9fed196a7d8e1ee820abec0eb963a743aa251ef00004ab0177c649debd9b54d7f47ca8fafc79a6df6f02d982eedbbf27f148cc13ee1c5501c3b16f4bacb29a4dd23163c8fc9b3a7f6cc62b660b7be73d3241a7ed705db3e302bc8c6f098f0e0d6e7602f5978e91c45ae7b42d590a09525a9bd88ca99d2ac3c734ecb349c094bc213ecbb55ac20a0b9a7199d83bc36c7060947746c6e27ac8eece6554b37cb71846f9422c8c1bbd8e8374529215c007a13162318a41de07415144ac405572b159a74340a1ce30b2781ea7208e8b38811737239a81541d69016a63158a189728311248e126a184e20", &(0x7f0000000300)=0xe9, &(0x7f0000000340)="85a6d175c065a87a409f0bb385b49c05f054572842c887cf0a10091529d71f0fd566bb7bcce44787ee5e39a12a5990184babf11accbae9293784db8b316b13fbd568753ee36ca8a67965d367ef2d588663826391f29554e795738182f962a7e9131264f7a716", 0x66) r0 = syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x2, 0x7fff, 0x6, 0x5, "4afd282d2069843b35fbc69602d64bb6ff6ff357", 0x82, 0x80000001}) sysctl$ddb(&(0x7f0000000000)={0x9, 0x6}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0xe}, 0x2, &(0x7f00000011c0), &(0x7f0000000080), 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x100, 0x0) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x101, 0xffffff01, 0x8a38, 0xfffffffc, "070609000013160000050800"}) sysctl$kern(&(0x7f0000000180)={0x1, 0x24}, 0x2, 0x0, 0x0, 0x0, 0x0) 154.313173ms ago: executing program 3 (id=164): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) socket(0x18, 0xc003, 0x3a) (async) r1 = socket(0x18, 0xc003, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x14, 0x1}, 0xc) (async) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x14, 0x1}, 0xc) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffe, 0xffffffffffffffff}) open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) (async) open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) rename(&(0x7f0000000080)='./file0/file0/..\x00', &(0x7f00000000c0)='./file1\x00') open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) (async) open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r3 = socket(0x18, 0x3, 0x3a) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) preadv(0xffffffffffffffff, &(0x7f0000001480)=[{0x0}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000200)=""/136, 0x88}, {0x0}], 0x4, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xfffffffe, {0x2000000000000, 0x5}}) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) bind$unix(r2, &(0x7f0000000000)=@file={0x0, 0x1, './file0\x00'}, 0xa) bind$unix(r2, &(0x7f0000000140)=@abs={0x7, 0x0, 0x0, 0x1}, 0x8) closefrom(r1) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x5, &(0x7f0000000180)=[{0xc, 0x9, 0x4, 0x9}, {0x25, 0x0, 0x2, 0x1}, {0x1, 0xb, 0xd2, 0x6}, {0x4, 0x9, 0x9, 0x9}, {0x991f, 0x4, 0xd5, 0xffff}]}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x5, &(0x7f0000000180)=[{0xc, 0x9, 0x4, 0x9}, {0x25, 0x0, 0x2, 0x1}, {0x1, 0xb, 0xd2, 0x6}, {0x4, 0x9, 0x9, 0x9}, {0x991f, 0x4, 0xd5, 0xffff}]}) setuid(0xee01) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xffffffff}, 0x10) (async) bind$inet(r5, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xffffffff}, 0x10) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) r6 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$VMM_IOC_RUN(r6, 0xc0285602, &(0x7f0000000480)={0x80000000, 0x6, {0x8, 0x1, 0x4}, 0x2, &(0x7f0000000200)={{0x9, 0x4, 0x9, 0x1, 0x8, 0x8, 0x8, 0x6}, {[0x2, 0x607, 0x4, 0x7, 0x86c6, 0x80000000, 0x9e, 0x40, 0x10000, 0xc89, 0x3b, 0x0, 0x82, 0x2d, 0x6, 0xf99, 0x6cfa, 0x80800000000000], [0x4, 0x7fffffff, 0x0, 0xffffffff, 0x1, 0x8, 0x9, 0x5, 0x5, 0x80], [0x7, 0x9, 0x8, 0xffffffff, 0x11fffffffffffd, 0xf82, 0xac], [0x200, 0x87, 0x7fffffffffffffff, 0x7, 0xffffffff, 0x9], [{0x200, 0x5, 0x40000000, 0xc48}, {0x6, 0x10005, 0x0, 0x40}, {0xb, 0x9, 0x25f, 0x1}, {0xc9, 0x7, 0x1000a, 0x7}, {0xe8ce, 0x2, 0x7fff, 0x7}, {0x200, 0x2ed, 0x9, 0x4}, {0x1ff, 0x2, 0x6, 0x3}, {0x1, 0x1, 0x8, 0xffffffffffffefbe}], {0x0, 0xffffffff, 0x6181ad55, 0x1}, {0x5, 0x7f, 0x0, 0x200}}, 0x63fb92f4}, 0x9, 0x86}) 148.776379ms ago: executing program 7 (id=165): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCXBEGIN(r0, 0xc0104451, &(0x7f0000000040)={0x1, 0x408, &(0x7f0000002480)=[{0x1, './bus/../file0/file0/../file0/file0/file0\x00', 0x74}]}) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000000)=0xfffffff8) kill(0x0, 0x20) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) futimes(0xffffffffffffffff, &(0x7f0000000740)=[{0x0, 0x2}, {0x8000, 0xfffffffffffffffd}]) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) 147.46815ms ago: executing program 4 (id=166): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r1 = socket(0x11, 0x3, 0x0) getsockname$inet(r1, 0x0, &(0x7f0000000200)) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r2 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$FIONBIO(r2, 0xc0307004, &(0x7f0000000040)=0x1) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f00000dc000/0x12000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000628000/0x3000)=nil, 0x7ffffffffffffffe}, {&(0x7f0000180000/0x2000)=nil, &(0x7f00003d6000/0x1000)=nil, 0x9}, {&(0x7f0000543000/0x4000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdfffffffffff7f9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f00000e1000/0x3000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000411000/0x2000)=nil, &(0x7f00003d5000/0x4000)=nil, 0x6}, {&(0x7f00000db000/0x2000)=nil, &(0x7f000063b000/0x2000)=nil, 0x5}, {&(0x7f000058a000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000125000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xc8}, {&(0x7f00006ee000/0x3000)=nil, &(0x7f00000e8000/0x3000)=nil, 0xb}, {&(0x7f00000f3000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x6}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000508000/0x2000)=nil, 0x8}, {&(0x7f0000271000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {&(0x7f0000148000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x1000039f7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000036000/0x2000)=nil, 0x10}], './file0\x00', 0xfffffffa, 0x0, 0x0, 0x0, [0x82, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xbdb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9b, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffad0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xc051, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6db61fcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5c, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) symlink(&(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r3, 0xc450444d, &(0x7f0000000740)={0x0, 0x1, 0xfffffffd, 0x4, "97a2224ff1c14649ebb17a926cc9795a6b47c1d1", 0x3, 0x5}) r4 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) (async) connect$unix(r4, &(0x7f0000000000), 0x10) (async) write(r4, &(0x7f0000000080)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050146123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0xffea) (async) futimes(r4, &(0x7f0000000b00)=[{0x1, 0x4}, {0x9, 0x1}]) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1b0e, 0xff, 0xf4, 0x4000800}]}) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) ioctl$BIOCSRTIMEOUT(r5, 0x8010426d, &(0x7f0000000ac0)={0x1, 0xf}) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000100)={0x0, 0x6f}) (async) ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f00000000c0)=0x34) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) (async) syz_emit_ethernet(0xe, &(0x7f0000000200)={@local, @local, [], {@generic={0x8148}}}) syz_emit_ethernet(0x32, &(0x7f0000000a40)=ANY=[@ANYBLOB="00000000000094a39e6c56010806002423ce06000003908c54f48cbe8b2c03c0a111972b92d736877f621f212445058bb6aa"]) 146.220939ms ago: executing program 0 (id=167): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x43ff) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) sendmmsg(r0, &(0x7f0000000680)={{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x15c}}, 0x38, 0x404) r1 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000000000000000010000000600", 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0x1c, 0x18, 0x3, 0x1ff, "000000000000faffff0500", 0x8}, 0x1c) r2 = socket$inet6(0x18, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c) ioctl$WSKBDIO_GETMAP(r0, 0xc010570d, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x8, 0x7, 0x5e, 0x9, 0xfff7}, {0x401, 0x4, 0x8, 0xb, 0x6}, {0x1ff, 0x9, 0x7ff, 0x3, 0x3e6e}, {0x19, 0xe10c, 0x2, 0x3, 0x2}]}) ioctl$DIOCRADDTABLES(r0, 0xc450443d, &(0x7f0000000fc0)={{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x2, 0x2d}, &(0x7f0000000340)=[{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x0, 0xa}, {'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x42, 0xd}, {'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x6, 0x6}], 0x44, 0x3, 0xdf, 0xb01d, 0x8, 0xa, 0x60, 0xdb}) open$dir(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 136.506036ms ago: executing program 7 (id=168): r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup(r0) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000501600000040000000007000000086610c18125d7f96ecfc73fd3d89815a9c61d3952ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d01000d000100000021020000742fe2459bfbb770c1f5a8aec872ea772ec58904000008008d9810361b1257aba8c500e01f12010000", 0x8b, 0xc09, 0x0, 0xffffffffffffffab) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) seteuid(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) chflags(&(0x7f0000000100)='./file1\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$unix(r2, &(0x7f0000000000)="b10005016000009f0500000007000000331c13fecea10500fef96ecfc72fd3357a068da3a5673039d2d236acf20b7804be38164991f7cccf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af630037282112000000720fd38bfbb770c1f5a872c881e2772ec5a10400000000000000361b1257aea8c5d0002012020000000000880d6633c556ae9be371a3f8343712051eeab71d89000407000000800420000000", 0xb1, 0x0, 0x0, 0x0) openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2}, {0x3}, {0x0, 0x300}, {0x0, 0x4}, {0x0, 0x4000}, {0x2, 0xe}, {0x0, 0xfffffffc}, {0x3, 0x1}, {}, {0x2}, {0x1}, {0x1}, {0x1, 0x8}, {0x2, 0x8}, {0x3}, {}, {0x2}, {0x1, 0xb4}, {0x1}, {0x1}, {0x2, 0x1000000}, {0x0, 0x4}, {0x2}, {0x2}, {0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x10000}, {0x1, 0x80000000}, {0x1, 0x6}, {0x0, 0x82}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x4001, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r4) r5 = socket(0x2, 0x4001, 0x0) connect$unix(r5, &(0x7f0000000000), 0x10) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) r6 = socket(0x2, 0x8002, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) closefrom(r7) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0x80, 0x1, 0x0, {[0x5, 0x0, 0xfffffffffffffff, 0x1, 0xe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffbfffffffe, 0xffffffffffffffff, 0x1], [0x63, 0x3, 0x204, 0x10000, 0x2000000000000000, 0x0, 0x2, 0x4, 0x80000002, 0xfffffffffffffffb], [0x7fffffffffffffff, 0x0, 0x4000000, 0xd30, 0x9, 0x0, 0x5], [0x100000004, 0x0, 0xfffffffffffffffc, 0x165, 0x200, 0xb], [{0x0, 0x10, 0x80000001, 0x7fffffffffffd}, {0x2, 0x0, 0x1006}, {0x1000, 0x3, 0xfffffffe, 0x9}, {0x0, 0x6, 0xfffd, 0x4000000000000000}, {0x0, 0xa832, 0xc9, 0x7fffffffffffffff}, {0x9, 0x2, 0x0, 0x1}, {0x0, 0x0, 0xaa, 0x4000000000000000}, {0x0, 0xfffffff5, 0xc00000}], {0xfffa, 0x10, 0x20000003, 0xf5a752c}, {0x0, 0x5, 0x401}}}) r8 = kqueue() kevent(r8, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) kevent(r8, 0x0, 0x0, &(0x7f00000006c0), 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) 134.003875ms ago: executing program 0 (id=169): openat$pf(0xffffffffffffff9c, &(0x7f0000000d00), 0x10, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000400)={'tap', 0x0}) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000040)={&(0x7f0000000280)=[{0x7}, {0x4, 0x4}], 0x2}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[]) 101.73389ms ago: executing program 3 (id=170): r0 = socket$inet6(0x18, 0x1, 0x6) r1 = socket$inet6(0x18, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000000)={0x1c, 0x18, 0x1, 0x9, "fffffff9000000000000000000000001", 0x7}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x7}, 0x1c) r2 = semget(0x0, 0x1, 0x280) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r6, 0x0) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, r4, r5, 0x8f, 0x25, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0x8}) semctl$GETALL(r2, 0x0, 0x6, &(0x7f00000001c0)=""/165) semop(r2, 0x0, 0x22) socket$inet6(0x18, 0x1, 0x0) r7 = socket$inet6(0x18, 0x8000, 0x2) bind$inet6(r7, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x1, "000c82b5558ff426f622000000000001", 0x800}, 0x1c) socket$inet6(0x18, 0x4000, 0xc) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) seteuid(r8) 100.425706ms ago: executing program 6 (id=171): mlock(&(0x7f0000000000/0x3000)=nil, 0x3000) (async) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0xd02) (async) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x152, 0x0}) (async) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000040)={0xc, 0xb, {0x7, 0xffffffffffff0000}}) (async) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) 99.141421ms ago: executing program 0 (id=172): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = getsid(0x0) setpgid(0x0, r1) fcntl$lock(r0, 0x1, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x20001ffffffff, r1}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x800, 0xe}, {0xffffffffffff5ccf, 0x8}}) flock(r0, 0x3) fcntl$lock(r0, 0x8, &(0x7f00000003c0)={0x1, 0x0, 0x100000003f, 0x200000001}) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) getsid(0x0) (async) setpgid(0x0, r1) (async) fcntl$lock(r0, 0x1, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x20001ffffffff, r1}) (async) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x800, 0xe}, {0xffffffffffff5ccf, 0x8}}) (async) flock(r0, 0x3) (async) fcntl$lock(r0, 0x8, &(0x7f00000003c0)={0x1, 0x0, 0x100000003f, 0x200000001}) (async) 4.76016ms ago: executing program 0 (id=173): setitimer(0x0, &(0x7f0000000540)={{0x7, 0x8}, {0x9, 0xe0000}}, 0x0) openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x0, 0x3, 0xffffffffffffffff], [], [], [0x0, 0x0, 0xffffffffffffffff], [{}, {}, {0x0, 0x0, 0x0, 0x800000000000}]}}) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{{r1}, 0xfffffffffffffff9, 0x23, 0x1, 0x0, 0x6}], 0x1, &(0x7f0000000240)=[{{r1}, 0xfffffffffffffffa, 0x21, 0x1, 0x4, 0xad}, {{r1}, 0xfffffffffffffff9, 0x88, 0x0, 0x6429, 0xfffffffffffffff7}, {{r1}, 0xfffffffffffffffa, 0x9, 0x1, 0xfffffffffffff033}], 0x5, 0x0) munmap(&(0x7f0000000000/0xa000)=nil, 0xa000) madvise(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x2) kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x80007fd, 0x0) select(0x40, &(0x7f0000000000)={0xffffffff7ffffffd, 0x0, 0x0, 0x564, 0x9ceb, 0x0, 0x4000000000000, 0xfffffffffffffff9}, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) setitimer(0x0, &(0x7f0000000540)={{0x7, 0x8}, {0x9, 0xe0000}}, 0x0) (async) openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) (async) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x0, 0x3, 0xffffffffffffffff], [], [], [0x0, 0x0, 0xffffffffffffffff], [{}, {}, {0x0, 0x0, 0x0, 0x800000000000}]}}) (async) kqueue() (async) kevent(r0, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0) (async) kqueue() (async) kevent(r1, &(0x7f0000000040)=[{{r1}, 0xfffffffffffffff9, 0x23, 0x1, 0x0, 0x6}], 0x1, &(0x7f0000000240)=[{{r1}, 0xfffffffffffffffa, 0x21, 0x1, 0x4, 0xad}, {{r1}, 0xfffffffffffffff9, 0x88, 0x0, 0x6429, 0xfffffffffffffff7}, {{r1}, 0xfffffffffffffffa, 0x9, 0x1, 0xfffffffffffff033}], 0x5, 0x0) (async) munmap(&(0x7f0000000000/0xa000)=nil, 0xa000) (async) madvise(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x2) (async) kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x80007fd, 0x0) (async) select(0x40, &(0x7f0000000000)={0xffffffff7ffffffd, 0x0, 0x0, 0x564, 0x9ceb, 0x0, 0x4000000000000, 0xfffffffffffffff9}, 0x0, 0x0, 0x0) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) 4.343307ms ago: executing program 6 (id=174): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0xfd, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x17f, 0x0, 0x0, 0xbc2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9) sysctl$vfs_nfs(&(0x7f00000005c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000600), 0x0, &(0x7f0000000700), 0x0) ioctl$AUDIO_GETPOS(r0, 0x40104123, &(0x7f00000001c0)) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) ktrace(&(0x7f0000000200)='./file0\x00', 0x1, 0xd27d43220c7df9f, 0x0) r1 = socket(0x11, 0x3, 0xa) sendto$unix(r1, &(0x7f0000000100)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfab19964ce1002000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712050eeab7196fcbd80407000200c011200000", 0xb1, 0x6, 0x0, 0x0) 2.678989ms ago: executing program 3 (id=175): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x44000802) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10, 0x10) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x101, 0x0, 0x8a38, 0xfffffffc, "070609000013160000050800", 0x0, 0x7f7}) ioctl$TIOCSTART(r0, 0x2000746e) stat(&(0x7f0000000040)='.\x00', &(0x7f0000000380)) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x44000802) (async) open(&(0x7f0000000040)='./file0\x00', 0x10, 0x10) (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x101, 0x0, 0x8a38, 0xfffffffc, "070609000013160000050800", 0x0, 0x7f7}) (async) ioctl$TIOCSTART(r0, 0x2000746e) (async) stat(&(0x7f0000000040)='.\x00', &(0x7f0000000380)) (async) 0s ago: executing program 7 (id=176): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup(r0) setsockopt$inet_opts(r1, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) ioctl$BIOCSFILDROP(r1, 0x80044279, &(0x7f0000000300)=0xfffffff8) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3, 0x5}, 0x10) sendto(r1, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(r1, 0x82405605, &(0x7f00000000c0)={0x7, 0xe9, {[0x0, 0x9, 0x8, 0x0, 0x2, 0x3, 0xfc, 0x9, 0x3, 0x4800000000000000, 0xf5ea, 0x7f, 0x6, 0x6, 0x238, 0x1, 0x6, 0x1ab9], [0x6, 0xffffffffffffffc0, 0x81, 0x3, 0x5, 0x6, 0xffffffffffffffff, 0x23f2800000000000, 0xc, 0x3], [0x7, 0x8, 0xd95e, 0x7, 0x5, 0x4, 0xb], [0x1, 0x7, 0x5, 0x920648f, 0x9, 0x8001], [{0x7e9, 0x1, 0x4865, 0x8000000000000000}, {0x2, 0x7, 0x9, 0xe}, {0x9, 0x800, 0x0, 0x2f69}, {0x6, 0x7, 0x7, 0x5}, {0x57d, 0x6, 0x80, 0x8}, {0xd49d, 0x55f, 0x5, 0xa}, {0x6c, 0x80000000, 0x5, 0x320}, {0x9, 0x8, 0xe4, 0x2}], {0x3, 0xffffff7f, 0x4, 0x3}, {0x200, 0x817, 0x2, 0x6}}}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) r4 = syz_open_pts() fcntl$lock(r4, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x7, 0x1000300000080, 0xffffffffffffffff}) flock(r4, 0x1) flock(r4, 0x1) fcntl$lock(r4, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x2ff, 0x100000001}) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ioctl$BIOCSETIF(r2, 0x20006473, 0x0) munmap(&(0x7f00000b8000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. pckbd_enable: command error Connection to 10.128.0.230 closed by remote host. init: getty repeating too quickly on port /dev/tty00, sleeping panic: uvm_fault_unwWire_loGkeSdP: adNdreLs ERotED ON SYSapLL S9t1op6ped a7672 EXIT 0 c db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *490501 16167 0 0 0x4000000 0 syz-executor 420541 89460 0 0x2 0 1 syz-executor db_enter() at db_enter+0x25 panic(ffffffff835055e0) at panic+0x1e5 uvm_fault_unwire_locked(fffff0806a2383f0,200000250000,200000252000) at uvm_fault_unwire_locked+0x4be uvm_fault_wire(fffff0806a2383f0,200000250000,200000261000,1) at uvm_fault_wire+0x12d uvm_vslock_device(ffff807ffffeea78,2000002504c0,10000,1,ffff80002a26a048) at uvm_vslock_device+0x112 physio(ffffffff812cd200,d02,0,ffffffff812cda30,ffff80002a26a328) at physio+0x257 spec_write(ffff80002a26a170) at spec_write+0x11f VOP_WRITE(fffff0806534ecf8,ffff80002a26a328,5,fffff080097fd2d8) at VOP_WRITE+0x101 vn_write(fffff0806dcb2dc0,ffff80002a26a328,0) at vn_write+0x1d3 dofilewritev(ffff807ffffeea78,6,ffff80002a26a328,0,ffff80002a26a3e0) at dofilewritev+0x2bd sys_write(ffff807ffffeea78,ffff80002a26a490,ffff80002a26a3e0) at sys_write+0xa2 syscall(ffff80002a26a490) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x12289ee7b80, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: uvm_fault_unwire_locked: address not in map ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff835055e0) at panic+0x1e5 uvm_fault_unwire_locked(fffff0806a2383f0,200000250000,200000252000) at uvm_fault_unwire_locked+0x4be uvm_fault_wire(fffff0806a2383f0,200000250000,200000261000,1) at uvm_fault_wire+0x12d uvm_vslock_device(ffff807ffffeea78,2000002504c0,10000,1,ffff80002a26a048) at uvm_vslock_device+0x112 physio(ffffffff812cd200,d02,0,ffffffff812cda30,ffff80002a26a328) at physio+0x257 spec_write(ffff80002a26a170) at spec_write+0x11f VOP_WRITE(fffff0806534ecf8,ffff80002a26a328,5,fffff080097fd2d8) at VOP_WRITE+0x101 vn_write(fffff0806dcb2dc0,ffff80002a26a328,0) at vn_write+0x1d3 dofilewritev(ffff807ffffeea78,6,ffff80002a26a328,0,ffff80002a26a3e0) at dofilewritev+0x2bd sys_write(ffff807ffffeea78,ffff80002a26a490,ffff80002a26a3e0) at sys_write+0xa2 syscall(ffff80002a26a490) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x12289ee7b80, count: -13 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80002a269d90 rbx 0xffffffff8393be07 cpu_info_full_primary+0x2e07 rdx 0xffff8000015fccc0 rcx 0xffff807ffffeea78 rax 0xffffffff8393aff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x170294ecfa337947 r11 0x9a3be833ac087799 r12 0xffffffff8393bc08 cpu_info_full_primary+0x2c08 r13 0 r14 0 r15 0x1 rip 0xffffffff81328a15 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a269d80 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=490501 pid=16167 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=36, usrpri=77, slppri=36, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff807ffffee7e0,0xffff807fffffcd10 process=0xffff80002a36c4e8 user=0xffff80002a265000, vmspace=0xfffff0806a2383f0 estcpu=27, cpticks=4, pctcpu=0.3, user=0, sys=4, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 56226 251986 0 0 3 0x14280 nfsidl nfsio 9126 149852 0 0 3 0x14280 nfsidl nfsio 21243 497190 0 0 3 0x14280 nfsidl nfsio 11919 136511 0 0 3 0x14280 nfsidl nfsio 7261 42819 0 0 3 0x14280 nfsidl nfsio 76152 310906 0 0 3 0x14280 nfsidl nfsio 25564 262927 0 0 3 0x14280 nfsidl nfsio 89584 438196 0 0 3 0x14280 nfsidl nfsio 32335 173693 0 0 3 0x14280 nfsidl nfsio 76015 209127 0 0 3 0x14280 nfsidl nfsio 32378 53417 0 0 3 0x14280 nfsidl nfsio 51624 518563 0 0 3 0x14280 nfsidl nfsio 60050 303318 0 0 3 0x14280 nfsidl nfsio 77772 381156 0 0 3 0x14280 nfsidl nfsio 99172 357727 0 0 3 0x14280 nfsidl nfsio 13524 102604 0 0 3 0x14280 nfsidl nfsio 27538 5257 0 0 3 0x14280 nfsidl nfsio 90652 63603 0 0 3 0x14280 nfsidl nfsio 45564 332127 0 0 3 0x14280 nfsidl nfsio 49246 112535 0 0 3 0x14280 nfsidl nfsio 16167 5596 60646 0 2 0 syz-executor *16167 490501 60646 0 7 0x4000000 syz-executor 16167 105697 60646 0 2 0x4000000 syz-executor 79967 333195 89460 0 3 0x80 nanoslp syz-executor 79967 500098 89460 0 3 0x4000080 netcon syz-executor 79967 326265 89460 0 3 0x4000080 fsleep syz-executor 64054 349918 74405 -1 3 0x90 nanoslp syz-executor 64054 133484 74405 -1 3 0x4000090 kqsel syz-executor 64054 243053 74405 -1 3 0x4000090 fsleep syz-executor 74477 352732 22097 0 3 0x80 nanoslp syz-executor 74477 518984 22097 0 3 0x4000080 sbwait syz-executor 74477 300975 22097 0 3 0x4000080 fsleep syz-executor 68062 156065 1 0 3 0x80 nanoslp init 60646 334627 4265 0 2 0xc82 syz-executor 74405 483818 4265 0 2 0xc82 syz-executor 89460 420541 4265 0 7 0x2 syz-executor 22097 453596 4265 0 2 0xc82 syz-executor 4265 176999 1 0 3 0x82 wait syz-executor 54722 6697 0 0 3 0x14200 bored smr 88964 424900 0 0 2 0x14200 zerothread 36021 346768 0 0 3 0x14200 aiodoned aiodoned 65386 133441 0 0 3 0x14200 syncer update 13885 521413 0 0 3 0x14200 cleaner cleaner 70092 228069 0 0 3 0x14200 reaper reaper 41189 450011 0 0 3 0x14200 pgdaemon pagedaemon 56195 272964 0 0 3 0x14200 bored viomb 29816 430237 0 0 3 0x40014200 acpi0 acpi0 79294 318562 0 0 3 0x40014200 idle1 466 467016 0 0 3 0x14200 bored softnet1 77352 258389 0 0 3 0x14200 bored softnet0 90354 77065 0 0 3 0x14200 bored systqmp 48009 290797 0 0 3 0x14200 bored systq 98301 222842 0 0 3 0x14200 tmoslp softclockmp 70032 433144 0 0 3 0x40014200 tmoslp softclock 77781 120131 0 0 3 0x40014200 idle0 1 67378 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks CPU 1: exclusive mutex &sched_lock r = 0 (0xffffffff83a33100) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 wakeup_n+0x54 #3 uvm_pmr_freepages+0x3eb #4 uvm_anfree+0xe9 #5 amap_wiperange_chunk+0x1a6 #6 amap_pp_adjref+0x6d0 #7 amap_adjref_anons+0x22d #8 uvm_unmap_detach+0x8a #9 sys_munmap+0x329 #10 syscall+0xbd4 #11 Xsyscall+0x128 exclusive mutex &uvm.fpageqlock r = 0 (0xffffffff839eafc8) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 uvm_pmr_freepages+0x1a8 #3 uvm_anfree+0xe9 #4 amap_wiperange_chunk+0x1a6 #5 amap_pp_adjref+0x6d0 #6 amap_adjref_anons+0x22d #7 uvm_unmap_detach+0x8a #8 sys_munmap+0x329 #9 syscall+0xbd4 #10 Xsyscall+0x128 Process 16167 (syz-executor) thread 0xffff807ffffeea78 (490501) shared rwlock vmmaplk r = 0 (0xfffff0806a2384f0) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvm_fault_wire+0x116 #3 uvm_vslock_device+0x112 #4 physio+0x257 #5 spec_write+0x11f #6 VOP_WRITE+0x101 #7 vn_write+0x1d3 #8 dofilewritev+0x2bd #9 sys_write+0xa2 #10 syscall+0xbd4 #11 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a3e000) #0 witness_lock+0x5f1 #1 __mp_acquire_count+0x58 #2 sleep_finish+0x2d8 #3 rw_do_enter_read+0x309 #4 uvmfault_lookup+0x122 #5 uvm_fault_check+0x4f #6 uvm_fault+0x106 #7 uvm_fault_wire+0x73 #8 uvm_vslock_device+0x112 #9 physio+0x257 #10 spec_write+0x11f #11 VOP_WRITE+0x101 #12 vn_write+0x1d3 #13 dofilewritev+0x2bd #14 sys_write+0xa2 #15 syscall+0xbd4 #16 Xsyscall+0x128 Process 16167 (syz-executor) thread 0xffff80002a213a00 (105697) exclusive rwlock amaplk r = 0 (0xfffff08074293a20) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 amap_unref+0x3d #3 uvm_unmap_detach+0x8a #4 sys_munmap+0x329 #5 syscall+0xbd4 #6 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11068 12097K 12343K 166960K 12443 0 pcb 17 12K 12K 166960K 49 0 rtable 225 7K 8K 166960K 391 0 pf 43 19K 20K 166960K 58 0 ifaddr 42 6K 7K 166960K 51 0 ifgroup 66 2K 2K 166960K 68 0 sysctl 3 1K 9K 166960K 8 0 counters 76 37K 37K 166960K 78 0 ioctlops 0 0K 4K 166960K 1519 0 iov 0 0K 12K 166960K 11 0 mount 1 1K 1K 166960K 1 0 log 1 0K 0K 166960K 5 0 vnodes 1295 81K 82K 166960K 1506 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 20 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 13 49K 89K 166960K 307 0 proc 12 17K 164K 166960K 582 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 9 0 in_multi 87 6K 7K 166960K 110 0 ether_multi 1 0K 0K 166960K 2 0 mrt 1 0K 0K 166960K 14 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 67 307K 307K 166960K 67 0 exec 0 0K 1K 166960K 392 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 108 77K 175K 166960K 4755 0 UVM aobj 9 4K 4K 166960K 10 0 pinsyscall 15 30K 102K 166960K 1468 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 11 0 NDP 15 0K 2K 166960K 32 0 temp 40 9115K 12970K 166960K 10721 0 kqueue 1 2K 24K 166960K 49 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 40 0 39 1 0 1 1 0 8 0 rtentry 176 122 0 21 5 0 5 5 0 8 0 unpcb 144 241 0 236 6 0 6 6 0 8 5 syncache 336 4 0 4 1 1 0 1 0 8 0 tcpcb 736 49 0 47 1 0 1 1 0 8 0 arp 136 23 0 4 1 0 1 1 0 8 0 inpcb 328 183 0 178 3 1 2 2 0 8 1 nd6 152 26 0 3 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 2 0 1 2 1 1 1 0 8 0 pfstscr 40 3 0 3 1 0 1 1 0 8 1 pffrag 232 5 0 2 1 0 1 1 0 482 0 pffrnode 88 5 0 2 1 0 1 1 0 8 0 pffrent 40 70 0 67 1 0 1 1 0 8 0 pfosfp 40 1431 0 1006 5 0 5 5 0 8 0 pfosfpen 112 1431 0 715 21 0 21 21 0 8 0 pfstlim 224 1 0 1 1 0 1 1 0 8 1 pfstitem 24 39 0 0 1 0 1 1 0 8 0 pfstkey 128 43 0 4 2 0 2 2 0 8 0 pfstate 448 41 0 2 5 0 5 5 0 8 0 pfrule 1360 24 0 19 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 493 0 54 29 0 29 29 0 8 1 art_table 40 494 0 54 5 0 5 5 0 8 0 art_node 32 122 0 30 1 0 1 1 0 8 0 sysvmsgpl 40 4 0 1 1 0 1 1 0 8 0 semupl 112 3 0 3 2 1 1 1 0 8 1 semapl 72 15 0 5 1 0 1 1 0 8 0 shmpl 112 7 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1882 0 408 93 0 93 93 0 8 0 ffsino 296 1882 0 408 114 0 114 114 0 8 0 nchpl 144 2386 0 681 64 0 64 64 0 8 0 vnodes 216 2062 0 0 115 0 115 115 0 8 0 namei 1024 7679 0 7679 13 5 8 11 0 8 8 percpumem 16 54 0 1 1 0 1 1 0 8 0 kstatmem 264 37 0 2 3 0 3 3 0 8 0 scsiplug 72 2 0 2 1 0 1 1 0 8 1 scxspl 216 9726 0 9726 4 3 1 3 1 8 1 plimitpl 152 48 0 39 1 0 1 1 0 8 0 sigapl 424 646 0 594 8 1 7 7 0 8 0 knotepl 120 286 0 0 9 0 9 9 0 8 0 kqueuepl 224 70 0 68 1 0 1 1 0 8 0 pipepl 344 141 0 114 3 0 3 3 0 8 0 fdescpl 528 610 0 594 3 0 3 3 0 8 0 filepl 160 2745 0 2581 16 0 16 16 0 8 6 lockfpl 104 105 0 104 1 0 1 1 0 8 0 lockfspl 48 47 0 46 1 0 1 1 0 8 0 sessionpl 144 28 0 26 1 0 1 1 0 8 0 pgrppl 48 39 0 29 1 0 1 1 0 8 0 ucredpl 104 310 0 306 1 0 1 1 0 8 0 zombiepl 144 693 0 689 3 2 1 1 0 8 0 processpl 1232 646 0 594 6 1 5 5 0 8 0 procpl 664 983 0 923 8 1 7 7 0 8 1 sosppl 176 2 0 2 1 1 0 1 0 8 0 sockpl 752 469 0 458 17 8 9 17 0 8 7 mcl64k 65536 6 0 0 1 0 1 1 0 8 0 mcl16k 16384 6 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 128 0 0 16 0 16 16 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 18 0 0 3 0 3 3 0 8 0 mtagpl 96 4 0 0 1 0 1 1 0 8 0 mbufpl 256 245 0 0 15 0 15 15 0 8 0 bufpl 272 4707 0 106 307 0 307 307 0 8 0 anonpl 32 6903 0 0 56 0 56 56 0 115 0 amapchunkpl 152 14341 0 14066 35 7 28 28 0 158 12 amappl16 200 2120 0 2089 7 3 4 5 0 8 2 amappl15 192 41 0 41 1 1 0 1 0 8 0 amappl14 184 448 0 448 1 0 1 1 0 8 1 amappl13 176 131 0 131 1 0 1 1 0 8 1 amappl12 168 859 0 845 2 0 2 2 0 8 0 amappl11 160 27 0 27 1 1 0 1 0 8 0 amappl10 152 70 0 70 1 0 1 1 0 8 1 amappl9 144 303 0 303 1 1 0 1 0 8 0 amappl8 136 98 0 98 1 0 1 1 0 8 1 amappl7 128 150 0 148 1 0 1 1 0 8 0 amappl6 120 160 0 159 1 0 1 1 0 8 0 amappl5 112 101 0 99 1 0 1 1 0 8 0 amappl4 104 291 0 289 1 0 1 1 0 8 0 amappl3 96 2667 0 2611 4 0 4 4 0 8 1 amappl2 88 540 0 532 2 0 2 2 0 8 0 amappl1 80 11185 0 11104 16 3 13 15 0 8 5 amappl 88 3945 0 3848 5 0 5 5 0 92 0 uvmvnodes 80 105 0 0 3 0 3 3 0 8 0 dma4096 4096 2 0 2 2 1 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 9 0 1 1 0 1 1 0 8 0 uaddrrnd 24 610 0 594 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 610 0 594 1 0 1 1 0 8 0 vmmpekpl 168 7098 0 7053 2 0 2 2 0 8 0 vmmpepl 168 48203 0 47542 93 5 88 88 0 357 43 vmsppl 488 609 0 594 5 1 4 5 0 8 0 rwobjpl 80 16778 0 16403 24 1 23 24 0 8 1 pdppl 4096 1227 0 1188 99 52 47 83 0 8 8 pvpl 32 13417 0 0 110 1 109 109 0 265 0 pmappl 256 609 0 594 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 598 0 61 16 0 16 16 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff835055e0) at panic+0x1e5 uvm_fault_unwire_locked(fffff0806a2383f0,200000250000,200000252000) at uvm_fault_unwire_locked+0x4be uvm_fault_wire(fffff0806a2383f0,200000250000,200000261000,1) at uvm_fault_wire+0x12d uvm_vslock_device(ffff807ffffeea78,2000002504c0,10000,1,ffff80002a26a048) at uvm_vslock_device+0x112 physio(ffffffff812cd200,d02,0,ffffffff812cda30,ffff80002a26a328) at physio+0x257 spec_write(ffff80002a26a170) at spec_write+0x11f VOP_WRITE(fffff0806534ecf8,ffff80002a26a328,5,fffff080097fd2d8) at VOP_WRITE+0x101 vn_write(fffff0806dcb2dc0,ffff80002a26a328,0) at vn_write+0x1d3 dofilewritev(ffff807ffffeea78,6,ffff80002a26a328,0,ffff80002a26a3e0) at dofilewritev+0x2bd sys_write(ffff807ffffeea78,ffff80002a26a490,ffff80002a26a3e0) at sys_write+0xa2 syscall(ffff80002a26a490) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x12289ee7b80, count: -13 ddb{0}> machine ddbcpu 1