last executing test programs: 14.76173734s ago: executing program 5 (id=4308): syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff000000000000080047f00024006700000001907800000007e001011100907800008001"]) mknod(&(0x7f0000000040)='./file0\x00', 0x8, 0xe02) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x81) mmap(&(0x7f0000e8c000/0x1000)=nil, 0x1000, 0x2, 0xa011, r0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x84, 0x8e, 0xff, 0x4a}, {0x12, 0x84, 0x8, 0x2}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f00000005c0)="500e14263bbcf66919b9c6933cd6d21c1b020bb5198774043b506ab05dbe2c9c67a600c29e3e0d81000000f39400000000000010003b82f224663a1aa232b0cdfecb8fcfed06acc460958d5b02f2201a5fe1232b1493c901fd2b99b2cef656324d", &(0x7f0000000000)=0x61, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x115, &(0x7f0000000380)=ANY=[]) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0x85, 0x47}, {0x40, 0xf3, 0xff, 0x7}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)="721d1a7055c3cb4e3451213800a05e9f1ebc17efc8b19702b0ef830731000000120600000026b277c0f1f5cb", 0x2c}], 0x1) sysctl$net_inet_ip(0xffffffffffffffff, 0x0, &(0x7f0000000380)="0100207bed0e6ce0ba06c0e79de6c5fc33c9dfe403728fc732620f20a90547d717c1d09c", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x2, 0x8, 0xf, 0x4}]}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) r5 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000c00)=[{&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/192, 0xc0}, {&(0x7f0000000480)=""/230, 0xe6}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f0000000740)=""/128, 0x80}, {&(0x7f00000007c0)=""/128, 0x80}, {&(0x7f0000000840)=""/113, 0x71}, {&(0x7f0000000cc0)=""/247, 0xf7}, {&(0x7f00000009c0)=""/112, 0x70}, {&(0x7f0000000b00)=""/231, 0xe7}], 0xa, 0x6029) r6 = kqueue() kevent(r6, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x10d, 0x3, 0xffffffffffff564e}], 0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000180)=[{r6, 0x91cbd8417f6167d9}], 0x1, 0x8) syz_extract_tcp_res(&(0x7f0000000000), 0x4000002, 0x7f) 13.157085375s ago: executing program 5 (id=4308): syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff000000000000080047f00024006700000001907800000007e001011100907800008001"]) mknod(&(0x7f0000000040)='./file0\x00', 0x8, 0xe02) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x81) mmap(&(0x7f0000e8c000/0x1000)=nil, 0x1000, 0x2, 0xa011, r0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x84, 0x8e, 0xff, 0x4a}, {0x12, 0x84, 0x8, 0x2}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f00000005c0)="500e14263bbcf66919b9c6933cd6d21c1b020bb5198774043b506ab05dbe2c9c67a600c29e3e0d81000000f39400000000000010003b82f224663a1aa232b0cdfecb8fcfed06acc460958d5b02f2201a5fe1232b1493c901fd2b99b2cef656324d", &(0x7f0000000000)=0x61, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x115, &(0x7f0000000380)=ANY=[]) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0x85, 0x47}, {0x40, 0xf3, 0xff, 0x7}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)="721d1a7055c3cb4e3451213800a05e9f1ebc17efc8b19702b0ef830731000000120600000026b277c0f1f5cb", 0x2c}], 0x1) sysctl$net_inet_ip(0xffffffffffffffff, 0x0, &(0x7f0000000380)="0100207bed0e6ce0ba06c0e79de6c5fc33c9dfe403728fc732620f20a90547d717c1d09c", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x2, 0x8, 0xf, 0x4}]}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) r5 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000c00)=[{&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/192, 0xc0}, {&(0x7f0000000480)=""/230, 0xe6}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f0000000740)=""/128, 0x80}, {&(0x7f00000007c0)=""/128, 0x80}, {&(0x7f0000000840)=""/113, 0x71}, {&(0x7f0000000cc0)=""/247, 0xf7}, {&(0x7f00000009c0)=""/112, 0x70}, {&(0x7f0000000b00)=""/231, 0xe7}], 0xa, 0x6029) r6 = kqueue() kevent(r6, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x10d, 0x3, 0xffffffffffff564e}], 0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000180)=[{r6, 0x91cbd8417f6167d9}], 0x1, 0x8) syz_extract_tcp_res(&(0x7f0000000000), 0x4000002, 0x7f) 9.284231916s ago: executing program 5 (id=4308): syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff000000000000080047f00024006700000001907800000007e001011100907800008001"]) mknod(&(0x7f0000000040)='./file0\x00', 0x8, 0xe02) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x81) mmap(&(0x7f0000e8c000/0x1000)=nil, 0x1000, 0x2, 0xa011, r0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x84, 0x8e, 0xff, 0x4a}, {0x12, 0x84, 0x8, 0x2}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f00000005c0)="500e14263bbcf66919b9c6933cd6d21c1b020bb5198774043b506ab05dbe2c9c67a600c29e3e0d81000000f39400000000000010003b82f224663a1aa232b0cdfecb8fcfed06acc460958d5b02f2201a5fe1232b1493c901fd2b99b2cef656324d", &(0x7f0000000000)=0x61, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x115, &(0x7f0000000380)=ANY=[]) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0x85, 0x47}, {0x40, 0xf3, 0xff, 0x7}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)="721d1a7055c3cb4e3451213800a05e9f1ebc17efc8b19702b0ef830731000000120600000026b277c0f1f5cb", 0x2c}], 0x1) sysctl$net_inet_ip(0xffffffffffffffff, 0x0, &(0x7f0000000380)="0100207bed0e6ce0ba06c0e79de6c5fc33c9dfe403728fc732620f20a90547d717c1d09c", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x2, 0x8, 0xf, 0x4}]}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) r5 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000c00)=[{&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/192, 0xc0}, {&(0x7f0000000480)=""/230, 0xe6}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f0000000740)=""/128, 0x80}, {&(0x7f00000007c0)=""/128, 0x80}, {&(0x7f0000000840)=""/113, 0x71}, {&(0x7f0000000cc0)=""/247, 0xf7}, {&(0x7f00000009c0)=""/112, 0x70}, {&(0x7f0000000b00)=""/231, 0xe7}], 0xa, 0x6029) r6 = kqueue() kevent(r6, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x10d, 0x3, 0xffffffffffff564e}], 0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000180)=[{r6, 0x91cbd8417f6167d9}], 0x1, 0x8) syz_extract_tcp_res(&(0x7f0000000000), 0x4000002, 0x7f) 5.878988724s ago: executing program 6 (id=4636): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000240), 0x100000000000039d, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) recvmsg(r0, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000240), 0x100000000000039d, 0x0}, 0x0) (async) 5.878348294s ago: executing program 5 (id=4308): syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff000000000000080047f00024006700000001907800000007e001011100907800008001"]) mknod(&(0x7f0000000040)='./file0\x00', 0x8, 0xe02) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x81) mmap(&(0x7f0000e8c000/0x1000)=nil, 0x1000, 0x2, 0xa011, r0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x84, 0x8e, 0xff, 0x4a}, {0x12, 0x84, 0x8, 0x2}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f00000005c0)="500e14263bbcf66919b9c6933cd6d21c1b020bb5198774043b506ab05dbe2c9c67a600c29e3e0d81000000f39400000000000010003b82f224663a1aa232b0cdfecb8fcfed06acc460958d5b02f2201a5fe1232b1493c901fd2b99b2cef656324d", &(0x7f0000000000)=0x61, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x115, &(0x7f0000000380)=ANY=[]) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0x85, 0x47}, {0x40, 0xf3, 0xff, 0x7}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)="721d1a7055c3cb4e3451213800a05e9f1ebc17efc8b19702b0ef830731000000120600000026b277c0f1f5cb", 0x2c}], 0x1) sysctl$net_inet_ip(0xffffffffffffffff, 0x0, &(0x7f0000000380)="0100207bed0e6ce0ba06c0e79de6c5fc33c9dfe403728fc732620f20a90547d717c1d09c", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x2, 0x8, 0xf, 0x4}]}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) r5 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000c00)=[{&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/192, 0xc0}, {&(0x7f0000000480)=""/230, 0xe6}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f0000000740)=""/128, 0x80}, {&(0x7f00000007c0)=""/128, 0x80}, {&(0x7f0000000840)=""/113, 0x71}, {&(0x7f0000000cc0)=""/247, 0xf7}, {&(0x7f00000009c0)=""/112, 0x70}, {&(0x7f0000000b00)=""/231, 0xe7}], 0xa, 0x6029) r6 = kqueue() kevent(r6, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x10d, 0x3, 0xffffffffffff564e}], 0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000180)=[{r6, 0x91cbd8417f6167d9}], 0x1, 0x8) syz_extract_tcp_res(&(0x7f0000000000), 0x4000002, 0x7f) 4.669786592s ago: executing program 6 (id=4643): sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x21, 0x6, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r0, 0x4) r1 = socket$unix(0x1, 0x5, 0x0) getpid() connect$unix(r1, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) accept$unix(r0, &(0x7f0000000340)=@file={0x0, ""/25}, &(0x7f0000000380)=0x1b) sysctl$kern(&(0x7f0000000040)={0x1, 0x8}, 0x2e, &(0x7f0000000440)="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", &(0x7f0000000080)=0xffffffffffffff7f, &(0x7f0000000240)="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", 0x4) r2 = socket(0x18, 0x1, 0x0) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) utimensat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0xffffffff00000001, 0x1}, {0x7fff, 0xcea1}}, 0x2) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) 4.259776844s ago: executing program 7 (id=4647): sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x17}, 0x4, &(0x7f00000002c0)="9b1809ff", &(0x7f0000000300)=0x4, 0x0, 0x0) socket(0x800000018, 0x1, 0x0) r0 = socket(0x18, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) socket(0x2, 0x2, 0x0) rename(0x0, 0x0) setreuid(0x0, 0xee01) r1 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000001c0)="3adb48b1782315114a1e3042", 0xc}], 0x1, 0x9) r2 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r2, 0x8020697a, &(0x7f00000001c0)) r3 = openat$wskbd(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$WSKBDIO_BELL(r3, 0x20005701) unveil(0x0, 0x0) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r4, 0xc0284414, &(0x7f0000000040)={0xfffffffc, 0x0, 0xffff7ffe, 0x2, "250d0e000087340105f100", 0x2000002, 0x4}) socket(0x800000018, 0x2, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0x8001}) r5 = socket(0x18, 0x3, 0x0) connect$unix(r5, &(0x7f0000000140)=@abs={0x682eb13985c518e6, 0x7, 0x2}, 0x8) getsockname$inet(r5, &(0x7f00000000c0), &(0x7f0000000040)=0xc) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r6 = socket(0x18, 0x1, 0x0) setsockopt(r6, 0x1000000029, 0x33, &(0x7f0000000080)="03100008", 0x4) sendto$inet(r6, &(0x7f0000000000)="7b145370dc97954f27f2773104ff0cd9c159bc676e417001eaf3157f87d4f5961f8874e0093ea17745cda847748c8b7ceb879f325a9b44dd5a4fd1a8f75e9fe597742e45590bbc38b10c0989b096e87c52efcc5710943658ecc441e94a411fc427778353cad1a2159d195a36586df4a9ccf935807bcbed76d5491e6b47962afc8a1d8a3cf477023fc7038d373a0c9240e2bba8be20046cf5f17eaf64f78df9c9988fd63f76ae710c472a50", 0xab, 0x400, 0x0, 0x0) getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0}, 0xc) setuid(r7) 4.253625098s ago: executing program 6 (id=4650): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r2 = socket(0x18, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000)=@abs={0x682eb13985c518e6, 0x7}, 0x8) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2d176f4b8f82c1d09936270286ea75b958983a9f15438392f4d2feb0900000000000ef962", 0xa8269}], 0x1, 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x3c) ftruncate(r3, 0x84002) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/49, 0x31}], 0x1, 0xd16c) r4 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x80, 0x20) preadv(r4, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x1, 0x0) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) r6 = getegid() getgroups(0x4, &(0x7f0000000280)=[0xffffffffffffffff, 0x0, 0x0, 0x0]) setgroups(0x3, &(0x7f00000002c0)=[r5, r6, r7]) 4.106840935s ago: executing program 6 (id=4654): setuid(0xee01) pipe(&(0x7f0000000100)={0xffffffffffffffff}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x3ff) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xc0) r1 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0xe5, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r1, 0x0, 0x2000000000, 0x0, 0x1}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) ioctl$BIOCLOCK(r3, 0x20004276) ioctl$BIOCGHDRCMPLT(r3, 0x40044274, &(0x7f0000000080)) ioctl$WSKBDIO_GETMAP(r2, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r4 = fcntl$getown(r2, 0x5) fcntl$setown(r0, 0x6, r4) close(r0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00') 4.106511977s ago: executing program 5 (id=4308): syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff000000000000080047f00024006700000001907800000007e001011100907800008001"]) mknod(&(0x7f0000000040)='./file0\x00', 0x8, 0xe02) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x81) mmap(&(0x7f0000e8c000/0x1000)=nil, 0x1000, 0x2, 0xa011, r0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x84, 0x8e, 0xff, 0x4a}, {0x12, 0x84, 0x8, 0x2}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f00000005c0)="500e14263bbcf66919b9c6933cd6d21c1b020bb5198774043b506ab05dbe2c9c67a600c29e3e0d81000000f39400000000000010003b82f224663a1aa232b0cdfecb8fcfed06acc460958d5b02f2201a5fe1232b1493c901fd2b99b2cef656324d", &(0x7f0000000000)=0x61, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x115, &(0x7f0000000380)=ANY=[]) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0x85, 0x47}, {0x40, 0xf3, 0xff, 0x7}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)="721d1a7055c3cb4e3451213800a05e9f1ebc17efc8b19702b0ef830731000000120600000026b277c0f1f5cb", 0x2c}], 0x1) sysctl$net_inet_ip(0xffffffffffffffff, 0x0, &(0x7f0000000380)="0100207bed0e6ce0ba06c0e79de6c5fc33c9dfe403728fc732620f20a90547d717c1d09c", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x2, 0x8, 0xf, 0x4}]}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) r5 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000c00)=[{&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/192, 0xc0}, {&(0x7f0000000480)=""/230, 0xe6}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f0000000740)=""/128, 0x80}, {&(0x7f00000007c0)=""/128, 0x80}, {&(0x7f0000000840)=""/113, 0x71}, {&(0x7f0000000cc0)=""/247, 0xf7}, {&(0x7f00000009c0)=""/112, 0x70}, {&(0x7f0000000b00)=""/231, 0xe7}], 0xa, 0x6029) r6 = kqueue() kevent(r6, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x10d, 0x3, 0xffffffffffff564e}], 0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000180)=[{r6, 0x91cbd8417f6167d9}], 0x1, 0x8) syz_extract_tcp_res(&(0x7f0000000000), 0x4000002, 0x7f) 2.717753333s ago: executing program 1 (id=4657): r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) r1 = socket(0x2, 0x1, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x615, 0x0) (async, rerun: 32) r2 = open(&(0x7f0000000300)='./file0\x00', 0x200, 0x0) (rerun: 32) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1000302010008, 0xffffffffffffffff}) (async, rerun: 64) r3 = dup(r1) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) nanosleep(&(0x7f0000000080)={0x1}, &(0x7f0000000200)) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async, rerun: 64) unveil(0x0, &(0x7f00000002c0)='x\x00') (async) r6 = dup(r5) recvmmsg(r6, &(0x7f0000000440)={&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000240)=""/90, 0x5a}], 0x3, 0x0}, 0x1}, 0x10, 0x0, 0x0) (async) dup2(r3, r6) (async, rerun: 64) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000280)={&(0x7f0000002600)='./file1\x00', 0xabb, &(0x7f0000000240)='./file0\x00', 0x8}) (async, rerun: 64) r7 = syz_open_pts() syz_open_pts() ioctl$TIOCSETA(r7, 0x802c7414, &(0x7f00000000c0)={0xf, 0x3, 0xfffffffe, 0xfffffff6, "ff0107002015c8a32d00000065c0bdf9c6f04aaf", 0x9, 0x40000}) ioctl$TIOCSTAT(r7, 0x20007465, 0x0) (async, rerun: 32) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0xffffff2e, 0x806, 0x2000007, 0x5f, 0xb, 0x6, 0x80, 0x10, [{0x1000000, 0x8, 0x7, 0x71003}, {0xd8, 0x6, 0x8, 0xfffffff9}, {0x0, 0x7ae, 0xb, 0x6}, {0x8, 0x800, 0x8003, 0x5}, {0xf, 0xf2b, 0x9, 0xffffffff}, {0x40000002, 0x1, 0x8, 0x95}, {0x1000, 0x3, 0x9c29, 0x400006d}, {0x3, 0x803, 0x14, 0x8000006}, {0xffffffff, 0x20000082, 0x4, 0x4}, {0x5, 0x7fffffff, 0x100, 0x88}, {0x1cc, 0x7, 0x4, 0x4}, {0x7fc, 0x5, 0x7, 0x80000000}, {0x81f, 0xfa7, 0x1, 0xffe}, {0x29a71714, 0xfffffffa, 0x6}, {0xc, 0x9, 0x6}, {0x0, 0x3, 0x3}]}) (rerun: 32) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r8 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r8, 0x0, &(0x7f00000001c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r10 = fcntl$dupfd(r9, 0x3, 0xffffffffffffffff) (async) ioctl$TIOCFLUSH(r6, 0x80047410, &(0x7f00000025c0)=0x3) read(r10, &(0x7f00000003c0)=""/4, 0x4) unveil(0x0, 0x0) (async) recvmsg(r4, &(0x7f0000000400)={&(0x7f0000000300)=@un=@abs, 0x8, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/73, 0x49}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x3, &(0x7f00000015c0)=""/4096, 0x1000}, 0x0) 2.716724492s ago: executing program 2 (id=4658): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f00000000c0)='./file0\x00', 0x0) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="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", &(0x7f0000000000)=0x200, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000), 0x10) setsockopt(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)="63e1303d", 0x4) write(0xffffffffffffffff, &(0x7f0000000040)="f92a9bd30000007a000027a03440ee884d9e7a3e", 0x14) r0 = socket(0x2, 0x3, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x32, &(0x7f00000000c0)="b211d7170d816685c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e180e9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0x2}) r3 = socket(0x18, 0x3, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r3, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) write(r0, &(0x7f0000001680)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0x1001c) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)=@abs={0x0, 0x0, 0x0}, 0x8, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x6f}, 0x400) setuid(0xffffffffffffffff) r4 = getuid() syz_emit_ethernet(0x281, &(0x7f0000000480)={@local, @remote, [], {@ipv6={0x86dd, {0xe, 0x6, "c48b45", 0x24b, 0x89, 0x3, @loopback, @local={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x2f, 0x4, 0x0, 0xf, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}, @mcast1]}, @dstopts={0x32, 0x1a, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @generic={0x0, 0xc8, "3f582780afb725fa78d2d161a8d0649d13a4432309fc3447ba8f9b07e8d19767ffaf60063d5aec47e373b0ee58673ccf38d417c8354d653039bf723d02c863a02a63451e6264387ab5745394d36971033378bc23ebadff5eefa7f99ad0827d016e495a015bfe4d5aad79a73f39a2727cf22fad0570fcb1a31ac155dc560ca2c208c6672e6e385591db029a3fc2e54f90522364774224fd51fc653a724048813479c6c2c4ff30ce93df1d43d73b052ffc375a4883c95b242f00d7b76999fded77b1f5bb15b73713b2"}]}, @dstopts={0x2c, 0x2, '\x00', [@pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}]}, @dstopts={0x3, 0x4, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x9f}]}, @fragment={0x16, 0x0, 0x8, 0x1, 0x0, 0x3, 0x65}], @generic="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"}}}}}) mmap(&(0x7f000062f000/0x1000)=nil, 0x1000, 0x0, 0x2010, r3, 0x1) syz_emit_ethernet(0x1000e, &(0x7f0000000200)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x45, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x3, 0x8}, {"e3c4fc107f71ed734b5547194172bf7adeb4d9e8011e314f72d6ee1c78c9623f3ec3a4274c9b8ddaa2"}}}}}}) openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYRESOCT=r4]) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) chown(&(0x7f0000000040)='./file0\x00', r4, 0xffffffffffffffff) 2.466950842s ago: executing program 6 (id=4661): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x3, 0x0, {[0xfffffbeffffffffb, 0x0, 0x4787, 0x1002, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000001, 0x0, 0xffffffffffffffa8, 0x400082, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x2, 0xffff, 0x7b98, 0x6, 0x0, 0x9, 0x2], [0x4, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffa], [0x4, 0x20000000000, 0xfffffffffffffffc, 0x8000000100000000, 0xfffffffffffffffe, 0x3], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5, 0x10}, {0x0, 0x0, 0xfffffffe, 0x81}, {0x3, 0xe13, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2006, 0x40000, 0x2000000000000000}, {0x6b7, 0x0, 0x1}, {0x8, 0x200, 0x0, 0x8}], {0x2, 0x6, 0x8}, {0x21, 0x6, 0x100000b0}}}) kqueue() r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) syz_emit_ethernet(0x3e, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) r3 = socket(0x2, 0x2, 0x0) bind(r3, &(0x7f0000000000), 0x10) connect$unix(r3, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000000380)={0x0, 0x8}, 0xa66f1f68c3106312, 0x0) r4 = socket(0x2, 0x3, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r4, &(0x7f0000000000), 0x10) getpeername$unix(r4, 0xffffffffffffffff, &(0x7f0000000080)) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) r5 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r5) 2.465417643s ago: executing program 7 (id=4662): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x1a, 0x1, 0xfd3, 0x3, 0x80000001, 0x17ffe, 0x10, [{0x0, 0x4, 0x3, 0xa24}, {0xc5c, 0xb, 0x5, 0x1fb}, {0x800008, 0x9, 0x1fa, 0x7d2}, {0x7ffffffe, 0x3, 0x2, 0x784c}, {0x3fd, 0xd, 0x1002802, 0x4d8a}, {0x18, 0xff, 0x3, 0xb}, {0x8000008, 0x0, 0x81ea, 0x2f}, {0x2, 0x836, 0x8000017, 0x3}, {0x9, 0xf71, 0x5, 0x7}, {0x10001, 0xa74d925a, 0xffff, 0x40000088}, {0x1d8, 0x5, 0x4, 0x412c8391}, {0x3, 0xa, 0x20008, 0x40000010}, {0x2, 0x4, 0x8, 0x3}, {0x29a71720, 0x81, 0x1, 0x6}, {0x400002, 0x7, 0xfffffffd, 0x100}, {0x200, 0x8, 0xf5, 0xc}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setuid(0xee01) socket(0x18, 0x1, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0x8020690e, &(0x7f00000001c0)) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) bind(r0, &(0x7f0000000000)=@in6={0x18, 0x0, 0x304d, 0x3}, 0xc) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x3) r3 = socket(0x18, 0x3, 0x0) setsockopt(r3, 0x1000000029, 0x2a, &(0x7f0000000040), 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x196, 0x3ff}, 0x400, 0xffff, 0x0, 0xffffffffffffffff, 0x1, 0x800000000000108, 0x5, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) 2.364869118s ago: executing program 0 (id=4663): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0xa3, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x44, 0x82, 0x6}, {0x34, 0x0, 0xf9, 0x9}, {0x46, 0x80, 0xa, 0x20000000}]}) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000480)={@random="6abb6869d0fb", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @rand_addr=0xdfffffff}, @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1, 0x0, 0x9}}}}}}) sysctl$vfs_ffs(&(0x7f0000001600)={0xa, 0x3, 0x11}, 0x3, 0x0, 0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0xa3, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x44, 0x82, 0x6}, {0x34, 0x0, 0xf9, 0x9}, {0x46, 0x80, 0xa, 0x20000000}]}) (async) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x36, &(0x7f0000000480)={@random="6abb6869d0fb", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @rand_addr=0xdfffffff}, @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1, 0x0, 0x9}}}}}}) (async) sysctl$vfs_ffs(&(0x7f0000001600)={0xa, 0x3, 0x11}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) 2.363288729s ago: executing program 1 (id=4664): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000380)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x8000, 0x2d, 0x43, 0x1}, {0x3, 0xc, 0x2, 0xb}, {0x6, 0x2, 0xa, 0xfffffffc}]}) sysctl$hw(0x0, 0x0, &(0x7f00000001c0)="0060053b3d000000002dec30c221c04ca1e6904c2ffd0bc16049a26808c2a0862cbdc68e", &(0x7f0000000000)=0x24, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000600)="d81ad30100060000000100000000", 0xe) mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x1e5f) (async) r1 = open(&(0x7f0000002740)='./file0\x00', 0x8000, 0x1f6) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x16, 0x3, 0x5fe, 0x80000004, 0x80000003, 0x4, 0x10, [{0x6, 0x7, 0x4, 0x70fff}, {0x7, 0x8, 0x8, 0x8001}, {0x8, 0xf86, 0x3, 0x9}, {0x8000001, 0x804, 0x8007}, {0x401, 0x200726, 0x2800, 0x3}, {0x2, 0x6, 0xffffffff, 0x9d}, {0x800ce1, 0xffffffff, 0x4, 0x2000006d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x7fff, 0xd1b, 0x88}, {0x1ce, 0x4, 0x406, 0x3}, {0x7ff, 0xb, 0x8, 0x9}, {0x400, 0x4, 0x40000008, 0x4}, {0x29a71717, 0xfffefffa, 0x1, 0x6}, {0xc, 0x7, 0x5, 0x1}, {0x0, 0x1, 0x1002, 0x3}]}) (async) setgid(0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$vfs_nfs(&(0x7f00000003c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000480)="0fce2dd240161b8ecbfd7a2c29adc39dca8ed8c2e4cf35e23f2f37ebb936de0614dbc94887f83b3d86e1f75a71bff54c7276f9b48fbd56eadd2d67c4da6fbea6d2f2a4acceabe322c7d0f2e2b4091884bbc4754d5c62deca97eb7bd171c11fad376a73052c489557833326b7eace", 0x0, 0x0, 0x0) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0x7, 0x0}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x3) r3 = syz_open_pts() ioctl$TIOCCONS(r3, 0x80047462, &(0x7f0000000000)=0x100) (async) r4 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r4, 0x0, 0x0) (async, rerun: 32) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0x1, 0x6, 0x80, 0x6, 0x7, 0xdf60, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0xfffffffffffffffe, 0x404000000100], [0x5, 0x80000001, 0xffffff7ffffffffa, 0x20200001, 0x5e, 0x100000000007b94, 0x800, 0x9, 0xfffffffffffffffc, 0x1], [0x1, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xfbffffff00000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0xfffffffffffffffe, 0x90000000], [{0x1000, 0x3, 0x0, 0x7d08}, {0x9, 0x22, 0x5, 0x7fff}, {0x2, 0x0, 0xfffefffe, 0x27c}, {0x5, 0x4, 0x5, 0xff7fffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x5, 0x0, 0x5, 0xb}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x8, 0x80000006, 0x3}, {0xfffe, 0xfffffffb, 0x6d5, 0x6}}}) (async, rerun: 32) r5 = kqueue() kevent(r5, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 32) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket(0x18, 0x2, 0x0) 2.363035824s ago: executing program 2 (id=4665): ioctl$TIOCSETA(0xffffffffffffffff, 0xc0804467, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="d3e80f2afcbe2153659e0299f5af37e1e0480a03038c9794ebd0054f470942b59d22e3de29adff8c6602807fef155e0f93070ed692f95a8069e17a6cb59c2171e35e8ebca9ca995eeb7dac0649717d4e76cd67c47c06c0bd26faf0431b096c1ce8247b896b9303e869351668c12d90554ca39740868b6221bf1a9dbb0dd91a81f7826889d6afb275f421b945b5f4ca059af3af0b8c85fabcdb7e4f43eede6c307a96c4af9db9ffc162658bad54a46bb591dde1ef8c932ef65bd331a21991d00a7e82a10e7e8dd203ca950923146841c9119db9643dd29c798b28503b", 0xdc}, {&(0x7f00000001c0)="4edcb8ac862fbfe3da82b09c8549ca0114d603dbf710220a1fa9ac594d78ce21466998b50d554ac58d44f0f3b929004311301530fa7dd23f4a79e17356789c9a1a2fbb65bae82586628dba45ac14a6599cbbf93985295918c08f8d867b8351d9fb825951d8f0fe6bc72dee4cee08cb36a55dde735366a27b028178ec2d85a65fbd873f088e6baa2360e5c8a4b822c8d02cf6855277430413bf8bff175739c0eb51b3eee442cff3d4b22af7c1fd681c4e75fae298b01fc1", 0xb7}, {&(0x7f0000000280)="bc6323651efc3ef90a46a1ee5a3da2b96cdaf0ddd8f9c7d1f0adc9a7bdeaca96084c6507c2570744dcce366444d97515211c73b8154c706b971d686aa89ba422921231", 0x43}, {&(0x7f0000000300)="7b7b872eb5d90efce1a1d6b212d14d0715cd54131a382be47df70309267a731bacef266a837b70b99d7756dcb27c38ef610cc9d602f3948aeb1aae7bd22890e65f69a4b6339e3c48ea045ccd6e40dfd4f5125e68c8b07e4726eb5a475ed22f83c38245c35f35fcc49bab8dfda960b30697755381c10ff530f3663b5a371350a8098d6c09701287f6e0a08312e1dcbd883f0592430b", 0x95}], 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x0) r1 = socket(0x7fa8f0ac8b5686d2, 0x4000, 0x8) shutdown(r1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, @multicast2}, @icmp=@echo={0x8, 0x0, 0x0, 0x0, 0x100}}}}}) syz_emit_ethernet(0x415, &(0x7f0000000b80)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd683d123503df2f000000000000000000000000000000000000000000000000000000ffff"]) 2.164788948s ago: executing program 7 (id=4667): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$TIOCSETA(r0, 0xc444443b, &(0x7f0000000040)={0xfffffffd, 0x2f, 0xa, 0xe6b, "a2a481001000f4060033000e0100", 0xfffffffc, 0x4}) (async) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900103a0000000000001000000000000000000000fe8000000000000000000000000000aa8f"]) 2.04771211s ago: executing program 7 (id=4668): mknod(&(0x7f0000000040)='./bus/../file0\x00', 0x4, 0x202) r0 = socket(0x1e, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000180)={&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/179, 0xb3}, 0x8910}, 0x10, 0x0, &(0x7f0000000000)={0x6, 0x7}) pipe2(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x0, &(0x7f0000000100)}) r4 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) sysctl$kern(&(0x7f0000000380)={0x1, 0x3a}, 0x2, &(0x7f00000003c0)="d63e333c", &(0x7f0000000400)=0x4, &(0x7f00000005c0), 0x0) r5 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r5, 0x80206997, &(0x7f0000000100)) recvmsg(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000080)=""/66, 0x42}, {&(0x7f0000000240)=""/224, 0xe0}], 0x2, 0x0}, 0x40) sendmmsg(r2, &(0x7f0000000140)={0x0}, 0x10, 0x0) write(r1, &(0x7f0000000000)="50195b6bff0af3", 0x7) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x9, 0x0, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x202) link(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2842, 0x0) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 2.047338876s ago: executing program 1 (id=4669): setrlimit(0x8, &(0x7f0000000000)={0x9, 0x8000000000000000}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04010000f9fe00582706f2722ea40186c8a4b49c71a00001"], 0xfffffffffffffeb5}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x400001, 0x7, 0x6, 0x3, 0x80002001, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x3}, {0x7, 0x4, 0xc, 0x7}, {0x6, 0xf86, 0x100, 0xaf9}, {0x5, 0x8, 0xb, 0x3}, {0x400007, 0xfffffffd, 0xe, 0x7}, {0x2, 0x7, 0xffffffff, 0x9c}, {0x80000cdf, 0xffffffff, 0x5, 0x6d}, {0x2000a, 0x9, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x3ff, 0x8001, 0xffffffff, 0x87}, {0x4, 0x5, 0x9, 0x10aeb}, {0x803, 0x40, 0x4, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x9, 0x7}, {0x0, 0x5, 0x4, 0x30000}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8) (async) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/25, 0x19}, 0x80) 2.040635165s ago: executing program 1 (id=4671): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$WSKBDIO_GETENCODING(r0, 0x4004570f, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="ed", 0x1) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/188, 0xbc}], 0x1, 0x0}, 0x42) close(r1) (async) select(0xe, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x40000, 0x100, 0x3560000000000, 0x0, 0x80000000000000}, &(0x7f0000000300)={0xcea, 0x20000, 0x80000002, 0x1, 0x1, 0x80, 0x80000000000001, 0xfffffffffffffffe}, 0x0, 0x0) (async) sysctl$hw(&(0x7f00000000c0)={0x6, 0xe}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000002c0), &(0x7f0000000080)=0x1a, 0x0, 0x0) ioctl$WSKBDIO_SETMODE(0xffffffffffffff9c, 0x80045713, &(0x7f0000000280)) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffff9c, 0x81205724, &(0x7f0000000140)={0x7fffffff, 0x40ef000, 0x9, 0x7, 0xf0e6, 0x10001, 0x6, 0x10, [{0xffff, 0x9fd1, 0x1d, 0x8}, {0x40, 0x9b, 0x1e5cc0, 0x7fffffff}, {0x400, 0x2, 0x8, 0x3}, {0x8001, 0x80, 0x92b}, {0xadc, 0x2, 0x4, 0x80000000}, {0x1, 0x66a9, 0x9, 0x9}, {0x6eacd01b, 0x5, 0x13, 0x35}, {0x6, 0x9, 0x5, 0x80000001}, {0x4, 0xff, 0x2, 0x4a}, {0x0, 0xffffffc0, 0x8, 0xf}, {0x4, 0x2, 0x5, 0x3edb}, {0x8, 0x0, 0x7, 0x81}, {0x4, 0x9, 0x10001, 0x9}, {0x1, 0xc, 0x0, 0x10000}, {0x9c59, 0xe, 0xf, 0x9}, {0xfffffff4, 0x5, 0x6, 0x8}]}) 904.991249ms ago: executing program 6 (id=4673): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x87, 0x2d, 0x2, 0x8}, {0x54, 0x3, 0x89, 0x12}, {0x6, 0x2, 0xa, 0xfffffffe}]}) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r3 = socket(0x18, 0x1, 0x0) getsockopt(r3, 0x6, 0x9, 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000340)={0x10, 0x0, [{&(0x7f000005f000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f00000a7000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f000008e000/0x11000)=nil, &(0x7f0000090000/0x1000)=nil}, {&(0x7f00000a7000/0x1000)=nil, &(0x7f000009a000/0x2000)=nil, 0x200000000000000}, {&(0x7f00000a3000/0x2000)=nil, &(0x7f000009e000/0x2000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000091000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f000009d000/0x4000)=nil, &(0x7f000008e000/0x2000)=nil}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f000079c000/0x3000)=nil, 0x1}, {&(0x7f00002ef000/0x3000)=nil, &(0x7f000009d000/0x2000)=nil}, {&(0x7f00000a6000/0x3000)=nil, &(0x7f00003cf000/0x3000)=nil}, {&(0x7f00000a1000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f000037d000/0x4000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f000009a000/0x4000)=nil, &(0x7f0000090000/0x2000)=nil}, {&(0x7f000009e000/0x4000)=nil, &(0x7f000009a000/0x2000)=nil}], './file0\x00', 0x6}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2006, 0x4f4b) r4 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r4, 0xc2c04200, &(0x7f00000001c0)) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[]) select(0x40, &(0x7f00000000c0)={0x4, 0xaec2, 0x3, 0x4, 0x6, 0x86, 0x5, 0x6}, &(0x7f0000000100)={0x4, 0x5, 0xfffffffffffffff8, 0x8, 0x8, 0xfffffffffffffffa, 0x200, 0x80000000}, &(0x7f0000000180)={0x1, 0x10, 0x10000, 0x6, 0x6, 0x0, 0x7f, 0xfffffffffffffffe}, &(0x7f00000001c0)={0xf9, 0x401}) 659.867778ms ago: executing program 1 (id=4676): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0xff, 0x4}, {0x40, 0xf3, 0xff, 0x9}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="fe6c6e03327f6edbf6829ffd28ec9153df0f076ad8a87a736a4f4b5b69e2eda932069381935cc4f81ee788048e08f4a775e8e068102ca1e7ece582f1ad06547cdceb8bdf61a979bb87254785ff71217e47ff19a1", 0x54}], 0x1) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) minherit(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[]) 659.400571ms ago: executing program 1 (id=4677): ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x20007605, &(0x7f0000000000)=0x60) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KDGKBMODE(r0, 0x40044b06) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setuid(r1) fcntl$getown(r0, 0x5) r2 = syz_open_pts() ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000100)=0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSWINSZ(r2, 0x80087467, &(0x7f0000000180)={0x1, 0x4, 0x7, 0x5}) getsockopt(r3, 0x1, 0x5, &(0x7f00000001c0)=""/151, &(0x7f0000000280)=0x97) readv(r3, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f0000000380)=""/4, 0x4}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/180, 0xb4}], 0x5) ioctl$KDSETLED(r0, 0x20004b42, &(0x7f0000000580)=0x6) close(r3) r5 = socket$unix(0x1, 0x5, 0x0) connect$unix(r5, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x0}, 0x8) ioctl$LIOCSFD(r4, 0x80046c7f, &(0x7f0000000600)=r5) writev(r3, &(0x7f0000000800)=[{&(0x7f0000000640)="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", 0xfe}, {&(0x7f0000000740)="0049080c0b71b44434cabbbc7b59642af1369ebc9692c669f6f08036b57af816a968b097fa48e3638492ded9382dc79808bf811df9e4cb6a68e655da89c6e1d587674a668546ecbd0dab1a264f6037cb7ad15fb303ae9421ecff3e8ec7abb0c9053da2fa68597c9fd521b36bd490d2ed8240f103f7cddbe8962f1c7e98416f709d191cdfb727", 0x86}], 0x2) ioctl$FIONBIO(r5, 0x8004667e, &(0x7f0000000840)=0x1ff) r6 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000880), 0x80, 0x0) getpeername(r5, &(0x7f00000008c0)=@un=@abs, &(0x7f0000000900)=0x8) preadv(r6, &(0x7f0000001b80)=[{&(0x7f0000000940)=""/145, 0x91}, {&(0x7f0000000a00)=""/41, 0x29}, {&(0x7f0000000a40)=""/107, 0x6b}, {&(0x7f0000000ac0)=""/190, 0xbe}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x5, 0x5) ioctl$DIOCMAP(r5, 0xc0106477, &(0x7f0000001c40)={&(0x7f0000001c00)='./file0\x00', r5, 0x1}) r7 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000001c80), 0x80, 0x0) ioctl$KDSETMODE(r7, 0x20004b0a, &(0x7f0000001cc0)=0x1) fchflags(r7, 0x0) socket(0x1, 0x1, 0xa2) ioctl$WSDISPLAYIO_GBURNER(r7, 0x400c5752, &(0x7f0000001d00)) openat(r7, &(0x7f0000001d40)='./file1\x00', 0x10, 0x30) chroot(&(0x7f0000001d80)='./file0\x00') 543.685933ms ago: executing program 3 (id=4680): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) setrlimit(0x3, &(0x7f0000000080)={0x2, 0x100000}) (async) ftruncate(r0, 0x40000000007) truncate(&(0x7f00000000c0)='./file0\x00', 0x6000000000) truncate(&(0x7f00000000c0)='./file0\x00', 0x30000) 543.522075ms ago: executing program 2 (id=4681): munmap(&(0x7f0000000000/0xa000)=nil, 0xa000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setitimer(0x1, &(0x7f0000000000)={{0x9, 0x3}, {0x7, 0x6a}}, &(0x7f0000000040)) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @remote, [], {@ipv6={0x86dd, {0x6, 0x6, "fd412c", 0x24, 0x33, 0x4, @rand_addr="2a818a724ac0f75111e18e2967fc6b8d", @local={0xfe, 0x80, '\x00', 0x0}, {[@hopopts={0x6, 0x2, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0xd7}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}], @generic="59f402640387c0b55ecd50ab"}}}}}) 533.252183ms ago: executing program 0 (id=4682): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3}, {0x1}, {0x0, 0x1}, {0x3, 0x3}, {}, {0x1}, {0x3}, {0x2, 0x20000000}, {0x1, 0xffffffff}, {}, {0x6, 0x5}, {0x0, 0xe1bc}, {0x1}, {0x2, 0x3b6}, {0x3, 0x400000}, {}, {0x2, 0x3}, {0x3, 0x807}, {0x1}, {0x0, 0x4}, {0x5}, {0x2, 0x2}, {0x3}, {0x2, 0x400}, {0x0, 0x200}, {0x2, 0x80000000}, {0x0, 0xfffffffd}, {}, {0x3}, {0x1}, {0x1, 0xa}, {0x1}]}) select(0x40, &(0x7f0000001400)={0x3, 0x100, 0xa, 0x0, 0x2, 0x0, 0x9, 0x1}, &(0x7f0000001440)={0x7, 0x1ff, 0x7, 0x9, 0x100000000, 0xffff, 0x5, 0x8}, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x2, 0x8, 0xd5, "00000000000000000000001500", 0x3, 0xff}) r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000003, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x91f, 0x8000, 0x40000000, 0x0, 0x5, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x1, 0x100000003, 0x52adeb15, 0x7], [{0x4, 0x0, 0x0, 0x5}, {0xfffc, 0x22, 0x5}, {0x0, 0x0, 0xfffffffb, 0x80}, {0x5, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x2, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x5, 0x100, 0xf, 0xb}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x45, 0x6d5, 0x6}}}) (async) r1 = kqueue() kevent(r1, &(0x7f0000000080), 0x1005, 0x0, 0x37, 0x0) rename(0x0, 0x0) (async) unlink(0x0) unlinkat(r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) sysctl$kern(&(0x7f00000002c0)={0x1, 0x50}, 0x2, &(0x7f0000000300)="926f03e130d091589ffb9ef13318b1", &(0x7f0000000340)=0xf, &(0x7f0000000380)="8e003a150c9e74ffa2645a69d897af4d6eeffb3ce751b63ef1faa4d03c1ff7db9a531680b0a5424174fb87a863ee0138ff8e102fbee7b4aa98da3978039388651b31ba54cd2fcd053dffc56580b7768995856b28c6ba872ec99a88c67ce0cabe8f7cfae4f5f6e8c39fbfe1da531fec68035844af5e28a69f95e3142abe040f08157264", 0x83) (async) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f0000000240), 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$inet6(0x18, 0x8000, 0x7) ioctl$LIOCSFD(r3, 0x80046c7f, &(0x7f0000000480)=r4) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSDISPLAYIO_SBURNER(r5, 0x800c5751, &(0x7f0000000180)={0x8, 0x901, 0x2}) openat$vmm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8, 0x0) ioctl$VMM_IOC_INTR(r5, 0x800c5606, &(0x7f0000000280)={0x3ff, 0x1, 0x400}) r6 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x1f904bc703df0293) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async) getrlimit(0x0, &(0x7f0000001880)) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) r7 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) (async) r8 = kqueue() kevent(r8, &(0x7f0000000200)=[{{r7}, 0xfffffffffffffffe, 0x29, 0x80, 0x2, 0xc}, {{r7}, 0xfffffffffffffffe, 0x10a, 0x10, 0x4, 0x8000000000000000}], 0x8, 0x0, 0x15, 0x0) (async) ioctl$VT_RELDISP(r6, 0x20007604, &(0x7f0000000240)=0x2) 533.098872ms ago: executing program 2 (id=4683): r0 = socket(0x10, 0x3, 0x5c) accept$inet6(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105727, &(0x7f0000000000)={&(0x7f0000000040)=[{0xdead4110, 0x2}], 0x1}) syz_extract_tcp_res(0x0, 0x8, 0x400) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @empty, [], {@ipv6={0x86dd, {0xb, 0x6, "3ccd31", 0x14, 0x67, 0x7, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x2, 0x2, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0x64, 0x0, 0x1}}}}}}}) 501.486809ms ago: executing program 3 (id=4684): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x7, &(0x7f00000000c0)=[{0x814d, 0x5, 0xe0, 0xfffffffd}, {0x6, 0x2, 0x7, 0x1}, {0x6, 0x6, 0x9, 0x80003}, {0x3, 0xfa, 0x0, 0x1}, {0x3, 0x5, 0xfe, 0x3}, {0x3, 0x1, 0x95, 0x6}, {0x0, 0x7, 0x18, 0x8}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0xff, 0x47}, {0x40, 0xf3, 0xff, 0x9}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="f06c4c03327f6edbf6829f7de9da4578fc2d00000000009cb200000000", 0x1d}], 0x1) r2 = syz_open_pts() ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x5e, &(0x7f0000002c80)=ANY=[]) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x7, &(0x7f00000000c0)=[{0x814d, 0x5, 0xe0, 0xfffffffd}, {0x6, 0x2, 0x7, 0x1}, {0x6, 0x6, 0x9, 0x80003}, {0x3, 0xfa, 0x0, 0x1}, {0x3, 0x5, 0xfe, 0x3}, {0x3, 0x1, 0x95, 0x6}, {0x0, 0x7, 0x18, 0x8}]}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0xff, 0x47}, {0x40, 0xf3, 0xff, 0x9}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="f06c4c03327f6edbf6829f7de9da4578fc2d00000000009cb200000000", 0x1d}], 0x1) (async) syz_open_pts() (async) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x7) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x5e, &(0x7f0000002c80)=ANY=[]) (async) 499.51234ms ago: executing program 2 (id=4685): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0x3) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = socket(0x2, 0x4001, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_timeval(r2, 0xffff, 0x1005, &(0x7f00000003c0)={0x40003, 0x7ff}, 0x10) getsockopt$sock_timeval(r2, 0xffff, 0x1005, &(0x7f0000000080), &(0x7f00000000c0)=0x10) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) r3 = socket(0x1, 0x5, 0x0) getsockopt$sock_int(r3, 0xffff, 0x1021, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r1, &(0x7f0000000000), 0x10) close(r1) 458.64697ms ago: executing program 4 (id=4686): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x80000000, [{&(0x7f0000597000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0x100007}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f00006a7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x80004bb6}, {&(0x7f0000768000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x40000000000000}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00001f5000/0x4000)=nil, 0x6}, {&(0x7f0000107000/0x4000)=nil, 0x0, 0xfffffffffffffffc}, {&(0x7f00001cf000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x400000000000000}, {&(0x7f00002e4000/0x4000)=nil, &(0x7f0000826000/0x1000)=nil, 0x40}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000826000/0x2000)=nil}, {&(0x7f000058b000/0x4000)=nil, &(0x7f0000156000/0x1000)=nil, 0x1}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000197000/0x4000)=nil, 0x9bc0}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f00004a7000/0x1000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000239000/0x1000)=nil, 0x4000000000}], '.\x00', 0xfffffffe}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000002}}) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000280)=0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) connect(r2, &(0x7f0000000200)=@in6={0x18, 0x1, 0x6, 0x10001}, 0xc) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x402) 458.330759ms ago: executing program 3 (id=4687): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0x85, 0x47}, {0x40, 0xf3, 0xff, 0x7}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)="721d1a7055c3cb4e3451213800a05e9f1ebc17efc8b19702b0ef830731000000120600000026b277c0f1f5cbfbc3dab025be07773756167d41c33b9e5d3e6935babe8f26be38eaa022102f96ee2d1088090e4910f4f17daad84d4e9f24fa3bc7", 0x60}], 0x1) sysctl$net_inet_ip(0xffffffffffffffff, 0x0, &(0x7f0000000000)="0100", 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x2, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) connect$unix(r1, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) pipe2(&(0x7f0000000000), 0x10004) syz_emit_ethernet(0xe2, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaa8aaaaaabb0800450000d4003fd6b59a90fc4e460667c4be0000010178e000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500280009078fffc1c09c9e1e02a2b84daa6e39f00f95530b581366e8100b761ca8fbd491f3735e11c9135768025c011d15133b7089d709c94ded9dcde89558c306c4391498bc0c8946d1b1548a51755fa701c0c28a6a1b3c6c54ed95d01e34b4ca429fc42b312fe46999e5dddc1227da6e1ee188c4111ab86e367cf0967f87e06da2cec2f2f208d242ad5c8ba229f3f367e166388c17b3c7cbbbe05004522674fdc82ed74cfaf3a592a25ee70ea4ae862baa4ca"]) 346.442348ms ago: executing program 3 (id=4688): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r2, &(0x7f00000004c0)="b9", 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "db0900", 0x10, 0x0, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @mcast2, {[@routing={0x7e, 0x0, 0x0, 0x7, 0x500}], @udp={{0x1, 0x1, 0x8}}}}}}}) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r1, 0x0) ioctl$TIOCFLUSH(r0, 0xc0107004, &(0x7f0000000080)=0x7f) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) (async) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) (async) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) write(r2, &(0x7f00000004c0)="b9", 0x1) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "db0900", 0x10, 0x0, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @mcast2, {[@routing={0x7e, 0x0, 0x0, 0x7, 0x500}], @udp={{0x1, 0x1, 0x8}}}}}}}) (async) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r1, 0x0) (async) ioctl$TIOCFLUSH(r0, 0xc0107004, &(0x7f0000000080)=0x7f) (async) 345.966648ms ago: executing program 4 (id=4689): setgroups(0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r0 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x102) setgroups(0x0, 0x0) setgid(0xffffffffffffffff) setuid(0xffffffffffffffff) (async, rerun: 32) fchdir(r0) (rerun: 32) setgid(0xffffffffffffffff) (async) r1 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x5b) fchmod(r1, 0xff) (async, rerun: 64) setuid(0xffffffffffffffff) (async, rerun: 64) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r3) (async) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') writev(r2, &(0x7f0000000300)=[{&(0x7f0000000180)="e05c115f0d74673ca1373575f22305d8012f396c2b28f64a95235814649e607ef5b6afa9e8843cfebdcec00e71395fce0fbb57080f7fc1f86022f8d337c8d771d878be4fc8a385f871af0ad72ecae7c3cc847767bf8fdc9dc19787978782e2e6f466d5fffe548b045a5c682491f9a17ee893baa170ee87c71dc2d5391272b974858de57ca0892fcb7d02d10c924f954588e4f246a45ca7fd1fbb67dcdeeeedf1740bd179052a704a323c288b501784c33f94acb4f88e6dc52f0349396b3e896051c88582b619273e63a908ab936675cae148878bcfa247dfabb08cb8d36a21f0f2592a522ad36fdffb7e742961ab846fc8e9", 0xf2}, {&(0x7f0000000280)="739a4e4050a96506d0e433cdf2f8b5a359369278fef3ab29a9476d0446eb6a3b0ba13f816a037ee7cdc9f38aef15169a5c24e21d89edef62da93a98583bd9cc9e103be21cd44fe56c2705c8c390cea05cf40a3ebdce5bf436ea03d61a69059acf6900c0d96", 0x65}], 0x2) 342.924014ms ago: executing program 0 (id=4690): syz_emit_ethernet(0x66, &(0x7f00000000c0)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x30, 0x37, 0x0, @empty, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c32e", 0x6, 0x6, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @loopback}}}}}}}) (async) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x30, 0x37, 0x0, @empty, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c32e", 0x6, 0x6, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @loopback}}}}}}}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) socket(0x18, 0x3, 0xfe) (async) r0 = socket(0x18, 0x3, 0xfe) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[{0x10, 0xffff, 0x7}, {0x10, 0x1, 0xfff}], 0x20}, 0x0) (async) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[{0x10, 0xffff, 0x7}, {0x10, 0x1, 0xfff}], 0x20}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000100)='./file0\x00', 0x49) mkdir(&(0x7f0000000100)='./file0\x00', 0x100) rename(&(0x7f0000000100)='./file0\x00', 0x0) 342.409589ms ago: executing program 2 (id=4691): setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54}) (async) r0 = syz_open_pts() close(r0) (async) r1 = syz_open_pts() writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="c4635e38984be569a8fc4db08f70e6165fc5bc61fa61798b4fb30b9a0f828975", 0x20}, {&(0x7f0000000a80)="174872b78d8c195737bfa5f1542e1a5d1f45edf486abb98b89f7b5fcdf35bb0575ea4a2025bdd563e760e62ace1077dc73d25c3967783eebed1ca5a6ef02af48ae69e8f2d8b94c2b4d626801077362a4c92d6cfa5d244c9c3700fe046db0fb30a236fd6ff588879f48835335729a4be3bf9fbb5668ff0299908e5058279998670d92b8198cd176d35fe736209ef3026a0fa7e8394cbd5b60faf80a5b36936e857f2a8ab8e00abfbad24656751f090b4e16be2f12bf5eddd59dc3c1cd58bf43a410772dd965f36d703e63390ab5b1194ed0b45bf61e7dd3c42f362826af134a97f309694fd683a7458d22d1ca57bca4eaad701a4e875b6b36d8bef68a35f557cca992eb5f64a3111d04041c1412d9baace96a4a05c916582abdec68f03e727008e76dc3516e67aed750051818b49d3ae72d16ee4a2b99a60b94e5ad98239e35b3da74ea51153d409023d250c66a97926b2eee30d4d80aa4d0ff7e975aef75dfe5f90bca4a8ad82552c0e4c345778f05b65e54741780e5e4f0c2cd7f4d3d71bafd41b29805f2522ca5801c928aadded5ec2e1a9e8a079ad058550d95460e10dc4f7b61bc6100acc443bce58bc79166bca73d6792c48a3f325934aed9bc482a244bef4cffd362a721c7d686ffdb496bb32ac516a2720979ab33bf7e28055a40468776dee170feee3cfb0b2d74db3bcdd41778a4accca0a1b1b91eaf22beb7d31cb96d0188c39c82d96b9ed84e732ec3eee170aaad6bc3a6f44179b4b18ec932bf5430caa4c2bf27c77c1ab14ca45f5c9549c1519b89ec7e14ce36f68638dd18fc727f79fc57f227e7579a04cbc4f7e95a96ad3cee75a0c948daa0a55cc5399fcbaab4a0a5bd61f262db90a46fec8809d3fe2be60050f64463ae4975e1a27a33957ba0a8749ad55548cc51a8f74e5db44e2ed09dec007e313e19c125c3828c5c268455170c764354c61ebabd0e9cb971b5a67ce85b1a864d49fb43baeaf9788d975fde3ad6884d11df7bdc87e44c56930de3ebaba368d36540b25627de2675e1d3c0bd7e302e44804d0b1bf59fc6f95daa552e5f182d2d5a4f36f41589aa6ea9525341025c8cd6605b83ff742441c8c22132779c1448217958762f5fa6a6327267ff589d84135e301732a4b2bf663fe2818f088cc0c24092ebf6b242d7fbb7aaf488532aa0710c94c4a1f008c1ddf58202a9e29ac884b35d5ebf15918f01b94fb50429989b5219b2e74cdfbdba6e9ff44cb414fea56fd3b91c1fc7f995ad5ef812ba6cef386eb8a51bb4b4618e9540b41ac3928ff39f337b60ddb1fe411bec936828a3baef023dbec262ec11ec2e191fc7557285ece581e825c69c5217fd129857afb24732e5f2ac9f09e0060062897e43f5b35351576e3101a1485cd421bd11914f9683b096bbff0ac0cfe9b18b044ace01db5b0837c914d8a218b03baed7d5ad26b7ebc119d9f29d0b1c80dd1b112b5190bad4c7e6cc09b99032d9306d6bec0e117f777077ef43412efc2e3bef12e69c2d15fa108d8d0a64d6b1ccb81aa6856af86ee9fcbfb17c8ef723261e12c98cc16c2cfff74113be4de25013c678b1123b6fab6b5d64078dc9fd986405bec4a73026aed7045ff80df36001904b84a15e487d7fb9c165979a3537d0139df40af442d30c087824edcc7352ab3b9a6cad3c27993d8fe7e5c71ad3fbe27dc33904472a1565913090cc8699620848d726cde5c97bf518434dd7e3c3b56b0b3ea006e5978395b2982929565be97fc1a97a951ff9e49e27ed27acb7fd524a40aa32d60b3f62ed83842fc8fa19cce6926b3de72bcf2319e7d24c8c90329360274df41f8d7c290e1205486622eee1c6067a56a8a88a30ca915d15f7ab8496171625870179d0f9bc23e043dc30f59856da54b0d1e5a75aab4529540dda167fcb5093b17751db995786162a1900b3820dadd18dbc1bdf036f898ccda16f414d5775548e3bd245b30cc0b37edd5f03f85d3e0b38302ba788c432ea62900f409712c0f68a6722ee5009407c01f88291e87aa80f549ffe7d96feac7984b9b26e645a6c198feeafe6093405139b4326dae88d717e7c89ba4b53ae01e34942b3d2781fc3b7771a1a99de7a9b881606f4028aaf00b99d9819a00372ce2150ce440a0f4b0d57ea2fafe28c7491c720a20d94ae518c5c97c63e34e21cdc85c2ee8a5c05ddd3c0855daf8041a905cd5334b156cfe578245f8d773c2e7141f7f7f5062ccee8c66804d4ec9e3e831ce8cb46f94dcdf2ec38e29892c8677d6db99b43e7f0c481076559fb9fe782b6b47df269e67c2f2f06ff6a8724789284199ff01cb60bcf02ebc8e2b90eab9ad8377059d65bff742688e2c07b4ae3c42a7c37a3c21f8eff26982e1d1ecd59bc83d4c0776df4e5f164cbda9d10d11a5c3906ff2d7e8679b50e98bbd8e0606baa95f5ee8d420695bf7721e5caa12a1f9275916a1a280c23724d922f4224b9e0fa2bb260db573613d3096b4758d5629719973b011fb13b2bd39e4cf5c391dbedac0beaf30e1d4296b54ae579052656491f1b5b778f3b7509762b14c660dff0549a734d6d514888ed654db5f98e6a262b765aec52a436f767c2da24182b4524fad2e1096b204e50f0ab909141fe23ced13c6670439582434b980d9d1f0eeed8f5b6ea019c81955cb3d757ed454d85cbc3006a880009839c7add567cfb1ff7034e86a4896206130a97d1d57d41718a443f762c364c68055bf1168a4b0fe3394c43a0e70ac014d3b7b7e4da7b49ff02c5270402ad29ce528373b142f77c52eeec6a72e25030182e31098762e02578f4c064da3322c38ffc8453ec34ccb0219ce6dd2b522910477a2b0580b158ca606ecb42a52d1515f0eb97cd269400f5ae7bc3b2a159143df9a14224a57cada194c20e71eb58856eacc18ba7f122637568b50d607d252ef7bbb5165e97e8aa914f1a2b44029b5796b0051a010c28052c13a90404a512e2035998398216c293c1b144e5276da0025a3964585f3bb8e87b71ae065a46ce2d91e6a317f29d256934e54d22bb11926fc38b0cf26191aa1872a2fc050d6c0537db34bbda6b5f557adc88963431bfc89c81570d3fd97f983e81155e2882c292140192615328e303c22da87602b3c00da1a604fbc47c38ec3fd5459fe948ddb87f9f93b5cfb2a3b742610376667eef8b82404dcf39000c722bc2de86a05b3d12a37b9aeafbf87a74168c2b6b80ab07a889ccd267082b2c19df76e92dc888c679ee8d82e5d18932f26e9d06809520eba75842bb801bf8323e378682f52db807e14712b1b2564a1f12072e1792d59fd60f8f491fc8d889ac2a18edb509fb256fb5fc33eee619ee0a786f5e0275401d9ce11302b495c40d2063b857538d319233579311777cfb0eaa2132eea2c8f72575a146bdcd5cac8e1eb1ebca13d5a1bd2f5e00c10c13f957af46a3a7dcc9277c675858dc122c229c46846ea622ac910612c933bccfa7fdea6a11da3ca4e33065e833d6aa84d6adeb368122d11c806bb89dc2aa233b60af9bd425328d5a1062eab266b989232f2fac0820b3615907c4ed2378ee895358670bd689b39c4d22c51687735e0c80f5dc1282c584f9c678ae209312689ea08a1eed05a762df79af55cd8a73a3bde0055882cc296ec18cf2ea07023cd77170ec89a35a1364b07a425a08ec29a5d60f3506437febc329cafe6f00f1ff1fd7c44bcd593a05f4795b814ba05385caed1e85b440820a6e1ed9c627e277b11f0da4f7b96a89ce044d1a62fe1deab8c63fd20323ed310e969ba3af28754aa4990172e3bb4477c8423be53e1aa45886f5b0c62614067fb573b650e1cdcd8e4a5bb2754cae395fda4520ea07d4fea615246d21280739a3538d4beaaa3d763416c5bd4d9cc84b119fb6071e3f3b7c4b0d86362f2ec24145ec98d589601dcef0ea41ed44fd9b8f0283fc3bf78d3984b6bffa45979231e6a3150ac8fb76a588a99b74f16dd31ebf1645f32c6fc82b6f2e35b96d9a640657da457ca87e63f7338609133672afb8fb390e8b7237f371d993857c2440aaed951586d542371a9d971b90a540c10b2d81b89578ef944ba977a97bccf23ecc76f9721a7bdea62409121a41134dd2ef0fe632f1a8749e6ee61389d0f3da8dc0efeca8c1548643471b05ff32cb77f2294e4200383cae2d794eff84daeeb8c94b6c676e8fb5f844e064895954b9e396e0151f7eef13752c91ff6aaea24c10473959ce9c173298ad1c99085539269ce91d37b25ad6413013e2d0b3187ad39319fa2ae6fcfc6ac9ddbffc6adb4bce924929857288e994749eb1dc852648c65419679ae11371291fe889934c4eea7ccaed947d9cf87d51aeac2bdb8dbc8045f9c71bbf544038160facdb81c832d958f4ce49ffdb7d0cd2d6b8e04daa993f923666a25cc11ced70e479fce19452810fd07da7b5c31ec8232365fc31240a799c25359d1db0463c8f3f67436c3d8a12196c7c5cba7ca1d5f9f48dfcf19385befff3532a71dc0fa1b234668976e94f614164c716634aff0c72cfc99d50072fa508daadf96dcd2ec36107ac9d7940fea4b1b20497a4a76c630811799081b70f2441d7694b209829ec0eec3b5373761bceaff00800a4e39ca0654cfbab3a84c11c79f99f0d0a68c1f171e5df3c581b58b17b4576d43ea1af3f384f08f76454f1d1fb95b95e2f0427fba0e4566c7e6bcf81fb3ca0c8a0f9bc59911426bd87396172589df2f5cd20ef86c93c59eaa10fa3823d93958f66d0f3f640344ee858ccd5b80f8822908a45c715e25c36d6ae3d95db2dd63302315e4418296872b38197544dc7a663ae8e59d828911e990a85dbc07f6b0af9535d34f53a68ff0892b29a72437fb3d183b394c11d7d77588530779c98f571a20b26abeb9a14ea28d763096ecc85820eb4ab78d0d54fa9ea67346b98d4e5cae6db7a2563a7b2f653561523bbcb96ef7f7b9117c1e841af3582a29cf9227114c779315289d260ac5b2167fd460fa83cb0f7ed4da5f127a89416b139b68c936c22ee500aa1fe9f9f5e2e3bdcf5476a4591e33cac3164387d306d81bda9aab59275ce7daef43a70cc7655d72d0d1b914276fa963c11eef23e31c0c6dd73870e41ba2aa728f630b6dc1f2a9eb98a7715578dbf7663cd5dc01ef44b533418a44b58b1a802122f5b8a810d135bd5865c2f473dcee345d06e3712f105ffcf82d017b53ae04b87d72ad73d4a7598425b06793226b9a89e6d0c4915da895be573cb384dfdd15e31a194f43658a530cab62fce5b14ffcc42995b7f8ee6096cb68b7d9d0329c478ca41f3f8b5a61b8c3fe534fa1a68038bc162f3e61939bf939f35d538134c39f732edbaddcfac2615275af816c43f395541f33c06c736d10ab75e88736f521342ec5a17c0f045e41de1debf6741658fbc7ece02054b3cd86e3a81a6f96edd368ba90f3976b20db12590e1eb821fdd9566a79a0226ac1feaccf2fbbd0c99431ade33dd763aedea6b4587f9ed80ae4fc5926919681695187745f66b06bc8b2ccb6125a305adc916589f4405133904b7e1ac2a0ecf40e0ee8b7f2a568198d00fdec7a09e61825ecf793f6041da6e0aaa08013a0da0673128eb853cc499990ec28c8a9b95ad4098fe3256319e82535bde8816264683f02b0c06e3c5a5e306025d465d115bc2c3f14168a1c103532300b2b81e51f3d21292c02bf74cbf503ff46ec63781fbcbf3efacec5a05e3b4890996ffcdb9506a323555dc9db2c04f6ab9cf65e541dc07262f9f99db7983e40a8224fe8c13c1aac0aa587a50b5b5c48a4d1ce0b51f2680f859a152fb2a05", 0x1000}], 0x2) (async, rerun: 64) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x3, 0x4, 0x8a38, 0x4000003, "07160a009cef01098b748200"}) (rerun: 64) writev(r0, &(0x7f0000000a40)=[{&(0x7f0000000200)="c6380cb0960cdcf666f95d3fa8b25c5b1a38d93adc329821268a6e96ba583768da95045beba07379b324c131e70c06ca1b511c677a5e41404dcf0c489aab20451cf8463499ebcc306f65843fa6c32e5ff86fe705efeea0f582cdba8fd6893e77e3816039090b99c0159d59cba9c404d253a7ee63a0232a3de7d75f40d34dc8d224318a2b12", 0x85}], 0x1) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x6}, 0x3, &(0x7f0000000040), 0x0, &(0x7f0000000040)="1d2e07ec596a5d3348fc0fdc153c6dcdc844b84d7e04ee9e6d549b1c932510401e72", 0x0) r2 = dup2(r0, r0) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000140)={0xffffffff, 0xfffffeff, 0xffffffff, 0x7fb, "28000000004c08a312dc7100202110005fd300", 0x6, 0x82}) (async, rerun: 32) poll(&(0x7f0000000000)=[{r2, 0x40}], 0x1, 0x0) (rerun: 32) 225.055887ms ago: executing program 0 (id=4692): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000340)={&(0x7f0000000000)=[{0x100, 0x2}, {0x5, 0x800}, {0x26, 0x5}], 0x3}) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x40, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x8000, 0x0, 0xfffc, {[@generic={0x5, 0xd, "d0086640c1465a6601606f"}, @window={0x3, 0x3, 0x2}, @generic={0x4, 0x2}, @generic={0x8, 0x2}, @mss={0x2, 0x4, 0x6}]}}}}}}}) 223.203712ms ago: executing program 3 (id=4693): unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00') r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000080)={'./file0/file0\x00', 0x4, 0x8, 0x0, 0x0, 0x6, 0x200, 0x80000000, 0x2, 0x2, 0xd5, 0x4}) r1 = kqueue() madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffdfffffff, 0x5) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x4) syz_open_pts() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0xa, 0x5, 0x100000000, 0x0, 0x80008000, 0x8000002e, 0x1, 0xffffffff, 0x2f01, 0x2, 0x3, 0xfffffffffffffffe, 0x2, 0x4, 0x4, 0xfffffffffffffff5, 0x100], [0x5, 0x5, 0xfffffffbfffffff8, 0x0, 0x1, 0x80000000, 0x800ee4, 0x0, 0x0, 0x800000047], [0x8, 0x2, 0x100000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x1ffffffffff, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0xfffffffd, 0xfffffffd, 0xffc}, {0x1008, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x40003, 0x1}, {0x6, 0x1, 0x7}, {0x0, 0x95b, 0x200, 0xc}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x1, 0x2}}}) kevent(r1, &(0x7f0000000040)=[{{r1}, 0xfffffffffffffffa, 0x23, 0x20000008, 0x3c, 0x6}], 0x1, 0x0, 0x5, 0x0) kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) syz_emit_ethernet(0x10004, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60db834439c11600fe000000020000ff80d1440000200000fe"]) 221.989442ms ago: executing program 4 (id=4694): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000080), 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) chroot(&(0x7f00000000c0)='./file0\x00') syz_open_pts() listen(r0, 0x6) socket(0x18, 0x2, 0x0) (async) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) (async) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000080), 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) chroot(&(0x7f00000000c0)='./file0\x00') (async) syz_open_pts() (async) listen(r0, 0x6) (async) 219.252732ms ago: executing program 0 (id=4695): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x3, 0x0, {[0xfffffbeffffffffb, 0x0, 0x4787, 0x1002, 0x3, 0x0, 0x6, 0x17, 0x0, 0x7, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000001, 0x0, 0xffffffffffffffa8, 0x400082, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x2, 0xffff, 0x7b98, 0x6, 0x0, 0x4, 0x2], [0xffffffffffffffff, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffa], [0x4, 0x20000000000, 0xfffffffffffffffc, 0x8000000100000000, 0xfffffffffffffffe, 0x3], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x1, 0x10}, {0x0, 0x0, 0xfffffffe, 0x81}, {0x3, 0xe13, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8000000000000000}, {0x0, 0x2006, 0x40000, 0x2000000000000000}, {0x8, 0x0, 0x1}, {0x8, 0x200, 0x0, 0x8}], {0x2, 0x6, 0x8, 0x5}, {0x21, 0x10, 0x100000b0}}}) kqueue() r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) syz_emit_ethernet(0x51, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES16=r0, @ANYRES8, @ANYRES8=r0, @ANYRES16=r0]) syz_emit_ethernet(0x138, &(0x7f00000003c0)=ANY=[@ANYRESHEX]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) r3 = socket(0x2, 0x2, 0x0) bind(r3, &(0x7f0000000000), 0x10) connect$unix(r3, &(0x7f0000000000), 0x10) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) socket(0x11, 0x3, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x4, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x4, 0xffffffffffffffff, 0x200000000002, 0xd, 0x1000, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0xf0, 0xfffefffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x6, 0x0, 0x3], [0x100000001, 0x8000, 0x8, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x8, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0x6, 0x8], [{0x0, 0x0, 0x0, 0x7d0a}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0xfd, 0x0, 0x7}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x6}}}) open(&(0x7f0000000100)='./bus\x00', 0x8000, 0x94) r4 = kqueue() kevent(r4, 0x0, 0xfffffffd, &(0x7f0000000040), 0x5, 0x0) kevent(r4, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x44) unveil(0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FIONBIO(r6, 0x8004667e, &(0x7f0000000080)=0x5) readv(r5, &(0x7f0000000040)=[{&(0x7f0000000240)=""/193, 0xfffffdf0}], 0x1) writev(r6, &(0x7f0000000200)=[{&(0x7f0000000400)="18744632862a65d57c398fa40b8af946eacd6d3e3f548124b47462025491a36951effb6b83aa62856fb1398f838a6b", 0x2f}], 0x1) sendmmsg(r2, &(0x7f0000000380)={0x0, 0x8}, 0xa66f1f68c3106312, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) 216.143271ms ago: executing program 4 (id=4696): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x2, 0x5) ioctl$FIONREAD(r0, 0xc0206923, &(0x7f00000001c0)) r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0x8020690e, &(0x7f00000001c0)) 153.551049ms ago: executing program 4 (id=4697): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r0 = open(&(0x7f0000000080)='./bus/file0\x00', 0x18289, 0x110) mknod(&(0x7f00000002c0)='./file1/file0\x00', 0x2000, 0x1) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000001c0)={r1, r2, r3}, 0xc) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x1, 0x1, 0xe, 0x8b5, r1}) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r4 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x200000a, 0x101, 0x80000003, 0x81b0, 0x10001, 0x10, [{0x0, 0xffff65d5, 0xfffffff9, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x9}, {0x4, 0x800, 0x1, 0x4}, {0x1ff, 0x3, 0x14, 0x7}, {0x1, 0x650, 0x5, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x3, 0x803, 0x7, 0xa}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x6, 0x4}, {0x1, 0x10001, 0x8, 0x400006}, {0x8, 0x9, 0x8, 0x2}, {0xb98, 0x3, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x4, 0x1, 0x10000001}, {0x2, 0x24000001, 0xfff, 0x9}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x7ec}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) r6 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, r6) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0xfffffffffffffffe, 0xb}, {0x2, 0x1}}, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r5, 0x0) recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0xc40) r7 = syz_open_pts() close(r7) syz_open_pts() writev(r7, &(0x7f0000000300)=[{0x0}], 0x1) r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$VNDIOCSET(r8, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x43) mprotect(&(0x7f00001e6000/0x2000)=nil, 0x2000, 0x5) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0xd}, 0x4, &(0x7f0000000080), 0x0, 0x0, 0x0) getsockopt$SO_PEERCRED(r8, 0xffff, 0x1022, &(0x7f0000000600), 0xc) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) 152.766848ms ago: executing program 7 (id=4698): mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = open(&(0x7f0000000040)='./bus\x00', 0x4, 0x0) ioctl$TIOCEXCL(r0, 0x2000740d) chmod(&(0x7f0000000040)='.\x00', 0xfc) setuid(0xee01) open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080), 0x0) 149.75543ms ago: executing program 5 (id=4308): syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff000000000000080047f00024006700000001907800000007e001011100907800008001"]) mknod(&(0x7f0000000040)='./file0\x00', 0x8, 0xe02) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x81) mmap(&(0x7f0000e8c000/0x1000)=nil, 0x1000, 0x2, 0xa011, r0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x84, 0x8e, 0xff, 0x4a}, {0x12, 0x84, 0x8, 0x2}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f00000005c0)="500e14263bbcf66919b9c6933cd6d21c1b020bb5198774043b506ab05dbe2c9c67a600c29e3e0d81000000f39400000000000010003b82f224663a1aa232b0cdfecb8fcfed06acc460958d5b02f2201a5fe1232b1493c901fd2b99b2cef656324d", &(0x7f0000000000)=0x61, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x115, &(0x7f0000000380)=ANY=[]) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0x85, 0x47}, {0x40, 0xf3, 0xff, 0x7}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)="721d1a7055c3cb4e3451213800a05e9f1ebc17efc8b19702b0ef830731000000120600000026b277c0f1f5cb", 0x2c}], 0x1) sysctl$net_inet_ip(0xffffffffffffffff, 0x0, &(0x7f0000000380)="0100207bed0e6ce0ba06c0e79de6c5fc33c9dfe403728fc732620f20a90547d717c1d09c", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x2, 0x8, 0xf, 0x4}]}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) r5 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000c00)=[{&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/192, 0xc0}, {&(0x7f0000000480)=""/230, 0xe6}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f0000000740)=""/128, 0x80}, {&(0x7f00000007c0)=""/128, 0x80}, {&(0x7f0000000840)=""/113, 0x71}, {&(0x7f0000000cc0)=""/247, 0xf7}, {&(0x7f00000009c0)=""/112, 0x70}, {&(0x7f0000000b00)=""/231, 0xe7}], 0xa, 0x6029) r6 = kqueue() kevent(r6, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x10d, 0x3, 0xffffffffffff564e}], 0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000180)=[{r6, 0x91cbd8417f6167d9}], 0x1, 0x8) syz_extract_tcp_res(&(0x7f0000000000), 0x4000002, 0x7f) 149.558092ms ago: executing program 4 (id=4699): openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) r1 = socket(0x2, 0x3, 0x0) close(r1) connect$unix(r1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x300000003}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x4, [{&(0x7f0000558000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000340000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7e}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x80000000}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f000024d000/0x1000)=nil, &(0x7f00005ff000/0x4000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000179000/0x1000)=nil, 0x80000002}, {&(0x7f0000338000/0x4000)=nil, &(0x7f0000000000/0x400000)=nil, 0x8}, {&(0x7f000077c000/0x1000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x6b9}, {&(0x7f0000132000/0x2000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x2}, {&(0x7f0000196000/0x3000)=nil, &(0x7f000076c000/0x4000)=nil, 0xa}, {&(0x7f000024b000/0x2000)=nil, &(0x7f000079e000/0x4000)=nil, 0xffffffffbffffff9}, {&(0x7f00004d0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5e04}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x6}], './file0\x00', 0x3}) sysctl$kern(&(0x7f00000000c0)={0x1, 0xe980bf0fa681d58}, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffef1) r3 = open(&(0x7f0000000040)='./bus\x00', 0x80, 0x9) ioctl$FIOASYNC(r3, 0xc0107002, &(0x7f00000000c0)) fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x2, 0x0, 0x6, 0x100000006}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="8f6f77ede655aaaaaaaaaabb86dd605f6ed900183a01fe6be2b548740b5404000000000000000000aa82009078000247541d93e359dd84"]) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x2, 0x2, 0xffffffff00000000, 0x2fffffffc}) 6.539476ms ago: executing program 3 (id=4700): mknod(&(0x7f0000000180)='./bus\x00', 0x0, 0x201) openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) (async) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000200)="8651495ec6c2bc6f3241f3e36fe0fc514f9aaf3718b0c4e8a084f66a043ba659293a1d6f81b11664199f4350505dee64a9bdfd4534bcd4cc8bd21832e29fe6ef49f90fcc6e1051be65afb79928f009d0500f6e790f688c69fa938185ef99c9761a8af40d65065a7af81da7a38a45af9bf274", 0x72}, {&(0x7f0000000140)="fe426a5c1f73fa97b5b4a7b72a04ce95", 0x10}, {&(0x7f0000000280)="8d71ee4cc3212464156ba871630099c68f66466b1542d80f833e48ea6c73c35f5c694aa74e854264ca6c6c33a978b14dd4bb3639f4f27b1f8c75be4ecc3ee4190654d209321a6201746ceee3a4976837357c04a4dd0508f86f4fb63f66ddbc126f", 0x61}], 0x3, 0x38000) (async) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000200)="8651495ec6c2bc6f3241f3e36fe0fc514f9aaf3718b0c4e8a084f66a043ba659293a1d6f81b11664199f4350505dee64a9bdfd4534bcd4cc8bd21832e29fe6ef49f90fcc6e1051be65afb79928f009d0500f6e790f688c69fa938185ef99c9761a8af40d65065a7af81da7a38a45af9bf274", 0x72}, {&(0x7f0000000140)="fe426a5c1f73fa97b5b4a7b72a04ce95", 0x10}, {&(0x7f0000000280)="8d71ee4cc3212464156ba871630099c68f66466b1542d80f833e48ea6c73c35f5c694aa74e854264ca6c6c33a978b14dd4bb3639f4f27b1f8c75be4ecc3ee4190654d209321a6201746ceee3a4976837357c04a4dd0508f86f4fb63f66ddbc126f", 0x61}], 0x3, 0x38000) pwritev(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000001c0)="3adb48b1782315114a1e3042", 0xc}], 0x1, 0x9) r1 = socket(0x18, 0x2, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0x820351a, "090e4de6d30aa692318c7e0002f9ffffff00"}) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x17b) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xfff, 0x17, 0x5, 0x101, 0x80000004, 0x6, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x200008, 0x8, 0x9}, {0x8, 0xd86, 0x6d, 0x5}, {0x2000000, 0x1800, 0x8007}, {0x401, 0x200726, 0xa800, 0x5}, {0x2, 0x6, 0x1003, 0x99}, {0xcdf, 0x7, 0x6, 0x3}, {0x6, 0x6, 0x80000014, 0x8}, {0x80000003, 0x1082, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x8c}, {0x1ce, 0xf7ff, 0x8, 0x3}, {0x7ff, 0x9, 0x9, 0x9}, {0xb8c, 0x4, 0xf, 0x3}, {0x29a71717, 0xfffffffa, 0x985, 0x6}, {0xfffffff9, 0x7, 0x5}, {0x0, 0x1, 0x1802, 0x30005}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0x7, 0x0}) ioctl$VNDIOCGET(r2, 0x20006473, 0x0) (async) ioctl$VNDIOCGET(r2, 0x20006473, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x18, 0x0, 0xffffffffffffff5a) ioctl$FIONREAD(r1, 0x8020697a, &(0x7f00000001c0)) socket(0x18, 0x2, 0x0) (async) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) 6.240869ms ago: executing program 7 (id=4701): poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x4}], 0x2, 0x887e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x33, &(0x7f0000000080)="031000086941e7c5ce5876778f181b12184c256b1ca6f583b03f959b5253027d08b90779da6a56ed10c81a19096dc2baca0179cdd9967a674820f89c4daa330fee01c76728490d1851d4ab60059f6a3f7cc45ac10500000078bbf169d0632f4ce57a508bc82acd00000000140e0343395b00737a4a00000084fc604fd6642787b31558a39bd20000", 0x88) setsockopt(r0, 0x1000000029, 0x33, 0x0, 0x0) execve(0x0, 0x0, 0x0) 0s ago: executing program 0 (id=4702): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r0, 0x80084904, &(0x7f0000000180)={0x400, './file0\x00'}) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x7fffffff}) r1 = kqueue() kevent(r1, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) kevent(r1, 0x0, 0x0, 0x0, 0x2, 0x0) sysctl$net_inet_udp(&(0x7f0000000080)={0x4, 0x2, 0x11, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x10000000000000, [{&(0x7f0000753000/0x3000)=nil, &(0x7f00007f5000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00007aa000/0x5000)=nil, 0x8}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000095000/0x4000)=nil, 0x20000001}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000007d000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f000068b000/0x2000)=nil, &(0x7f0000188000/0x2000)=nil, 0x2000000000009}, {&(0x7f00003b7000/0x1000)=nil, &(0x7f00002c6000/0x4000)=nil, 0x2}, {&(0x7f000055d000/0x4000)=nil, &(0x7f000051e000/0x4000)=nil, 0xb}, {&(0x7f0000787000/0x3000)=nil, &(0x7f00006e6000/0x3000)=nil, 0x4}, {&(0x7f00000b6000/0x3000)=nil, &(0x7f0000243000/0x4000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000261000/0x3000)=nil, 0x51}, {&(0x7f0000245000/0x2000)=nil, &(0x7f0000160000/0x4000)=nil, 0x9}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000681000/0x3000)=nil, 0x6}, {&(0x7f0000fed000/0x10000)=nil, &(0x7f0000042000/0x3000)=nil, 0xfffffffffffbfffb}, {&(0x7f0000334000/0x1000)=nil, &(0x7f0000246000/0x2000)=nil, 0x6}, {&(0x7f00003e3000/0x1000)=nil, &(0x7f000059c000/0x3000)=nil, 0x1000039f9}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x500ffffffb}], './bus\x00', 0x81}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.232' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error vm_create: uvm_map failed: 12 vm_create: uvm_map failed: 12 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (Yh$pHpjsQ1U~`C0,'́BvaH!) (tty00) login: denied attempt to set clock back 17 seconds uvn_flush: obj=0xfffffd80695871a0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error denied attempt to set clock back -9223372032591346534 seconds vm_create: uvm_map failed: 12 pckbd_enable: command error pckbd_enable: command error load: 7.08 cmd: getty 73462 [ttyin] 0.00u 0.01s 0% 327k sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code smr: dispatch took 2.289997s denied attempt to set clock back 4263431332 seconds pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx2, error=17 denied attempt to set clock forward to 21474836484 denied attempt to set clock back -9223372032591346508 seconds pckbd_enable: command error vm_create: uvm_map failed: 12 denied attempt to set clock back 4263431351 seconds pckbd_enable: command error   denied attempt to set clock back 1073741891 seconds pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error j|E1\:pckbd_enable: command error pckbd_enable: command error         uvn_flush: obj=0xfffffd8076e5ff18, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 134 3%#/.$3 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 142 3%#/.$3 load: 11.56 not a controlling terminal load: 11.56 not a controlling terminal denied attempt to set clock back 151 seconds malloc(): allocation too large, type = 127, size = 7676996996 denied attempt to set clock back 156 seconds          0#+"$%.!",%: #/--!.$ %22/2    OpenBSD/amd64 (Amnesiac) (tty00) login: denied attempt to set clock back 4263431467 seconds pckbd_enable: command error 0#+"$%.!",%: #/--!.$ %22/2 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ 6-2%3%4#05: &!),%$ $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 4263431486 3%#/.$3 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error j|E1\:denied attempt to set clock back 125829211 seconds denied attempt to set clock back 125829211 seconds denied attempt to set clock back 125829211 seconds denied attempt to set clock forward to 4263431296 denied attempt to set clock back 1073742043 seconds uvm_fault(0xfffffd800da553f0, 0x0, 0, 1) -> e fatal page fault in supervisor mode trap type 6 code 0 rip ffffffff81047658 cs 8 rflags 10207 cr2 0 cpl 0 rsp ffff80002a354280 gsbase 0xffff8000299ddff0 kgsbase 0x0 panic: trap type 6, code=0, pc=ffffffff81047658 Starting stack trace... panic(ffffffff833e5c81) at panic+0x1d0 kerntrap(ffff80002a3541d0) at kerntrap+0x30b alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dt_ioctl_record_stop(ffff800001791000) at dt_ioctl_record_stop+0x108 dtclose(21e5f,2,2000,ffff8000fffefca0) at dtclose+0x109 spec_close(ffff80002a354380) at spec_close+0x466 VOP_CLOSE(fffffd8073b17050,2,fffffd80097fd680,ffff8000fffefca0) at VOP_CLOSE+0x132 vn_closefile(fffffd806c64bb80,ffff8000fffefca0) at vn_closefile+0x12b fdrop(fffffd806c64bb80,ffff8000fffefca0) at fdrop+0x121 closef(fffffd806c64bb80,ffff8000fffefca0) at closef+0x192 fdfree(ffff8000fffefca0) at fdfree+0x116 exit1(ffff8000fffefca0,0,0,1) at exit1+0x576 sys_exit(ffff8000fffefca0,ffff80002a3546f0,ffff80002a354640) at sys_exit+0x1a syscall(ffff80002a3546f0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d058603bd10, count: 242 End of stack trace. WARNING: SPL NOT LOWERED ON SYSCALL 11 -1 EXIT 0 4 Stopped at savectx+0xae: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND 75429 17642 0 0x1000 0x4080000 0 syz-executor *418143 78377 0 0x2 0 1 syz-executor savectx() at savectx+0xae end of kernel end trace frame: 0x71aaf7cf9d10, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd800da553f0, 0x0, 0, 1) -> e ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x71aaf7cf9d10, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003c426f00 rbx 0 rdx 0 rcx 0xffff8000fffe6fb0 rax 0x33 r8 0xffff80003c426e30 r9 0x1 r10 0x8c6641be5e814572 r11 0x4ef402aad2af7254 r12 0 r13 0 r14 0xffff8000fffe6fb0 r15 0 rip 0xffffffff81b193ee savectx+0xae cs 0x8 rflags 0x46 rsp 0xffff80003c426e80 ss 0x10 savectx+0xae: movl $0,%gs:0x688 ddb{1}> show proc PROC (syz-executor) tid=418143 pid=78377 tcnt=1 stat=onproc flags process=2 proc=0 runpri=84, usrpri=84, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000fffef4d8,0xffff8000377dd4f8 process=0xffff800038feb9e0 user=0xffff80003c421000, vmspace=0xfffffd80607143f8 estcpu=34, cpticks=322, pctcpu=0.23, user=2, sys=317, intr=3 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 16548 176244 78377 0 2 0 syz-executor 16548 480097 78377 0 3 0x4000080 lockf syz-executor 30267 478469 52627 0 3 0x80 nanoslp syz-executor 30267 415696 52627 0 3 0x4000080 ttyretype syz-executor 30267 285582 52627 0 3 0x4000080 fsleep syz-executor 17642 49298 62777 0 3 0x3000 suspend syz-executor 17642 75429 62777 0 7 0x4081000 syz-executor 78617 427845 0 0 3 0x14280 nfsidl nfsio 49157 311905 0 0 3 0x14280 nfsidl nfsio 59798 4823 0 0 3 0x14280 nfsidl nfsio 4929 190201 0 0 3 0x14280 nfsidl nfsio 98088 135435 0 0 3 0x14200 acct acct 92993 286455 51385 0 3 0x82 piperd syz-executor 52627 247035 51385 0 3 0x82 nanoslp syz-executor 91098 22354 51385 0 3 0x82 nanoslp syz-executor 95984 195551 1 0 3 0x100083 ttyopn getty 62777 176682 51385 0 3 0x82 nanoslp syz-executor *78377 418143 51385 0 7 0x2 syz-executor 63291 25411 51385 0 3 0x10000082 nanoslp syz-executor 77950 326141 51385 0 3 0x82 piperd syz-executor 51385 75803 3347 0 3 0x82 wait syz-executor 3347 109245 62647 0 3 0x10008a sigsusp ksh 62647 272991 2410 0 3 0x98 kqread sshd-session 2410 495638 81156 0 3 0x92 kqread sshd-session 81156 515667 1 0 3 0x88 kqread sshd 79010 371217 84313 74 3 0x1100092 bpf pflogd 84313 96162 1 0 3 0x80 sbwait pflogd 39603 129396 57311 73 3 0x1100090 kqread syslogd 57311 353811 1 0 3 0x100082 sbwait syslogd 24797 105854 1 0 3 0x100080 kqread resolvd 12924 57383 79387 77 3 0x100092 kqread dhcpleased 80295 215029 79387 77 3 0x100092 kqread dhcpleased 79387 396921 1 0 3 0x80 kqread dhcpleased 76117 99336 0 0 3 0x14200 bored smr 45629 441777 0 0 2 0x14200 zerothread 52832 238016 0 0 3 0x14200 aiodoned aiodoned 81025 359674 0 0 3 0x14200 syncer update 18285 273884 0 0 3 0x14200 cleaner cleaner 60673 387091 0 0 3 0x14200 reaper reaper 62653 428201 0 0 3 0x14200 pgdaemon pagedaemon 51219 142011 0 0 3 0x14200 bored viomb 10194 91330 0 0 3 0x40014200 acpi0 acpi0 88426 121776 0 0 3 0x40014200 idle1 31659 385257 0 0 3 0x14200 bored softnet1 41741 460877 0 0 3 0x14200 netlock softnet0 7039 60453 0 0 2 0x40014200 systqmp 27558 275830 0 0 3 0x14200 bored systq 44864 522356 0 0 3 0x14200 tmoslp softclockmp 49227 476402 0 0 3 0x40014200 tmoslp softclock 87663 462810 0 0 3 0x40014200 idle0 1 461396 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11118 12199K 13058K 166960K 20359 0 pcb 17 16K 32K 166960K 1086 0 rtable 270 21K 22K 166960K 1728 0 pf 37 18K 82K 166960K 447 0 ifaddr 42 9K 10K 166960K 309 0 ifgroup 57 2K 3K 166960K 494 0 sysctl 4 1K 9K 166960K 115 0 counters 74 37K 38K 166960K 468 0 ioctlops 0 0K 4K 166960K 2734 0 iov 1 0K 24K 166960K 395 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1483 93K 93K 166960K 6562 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 10K 14K 166960K 68 0 VM map 2 1K 1K 166960K 2 0 sem 34 137K 137K 166960K 176 0 dirhash 12 2K 2K 166960K 120 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 14 49K 240K 166960K 5305 0 sigio 0 0K 0K 166960K 204 0 proc 73 115K 164K 166960K 1730 0 subproc 72 4K 4K 166960K 302 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 840 0 in_multi 84 6K 7K 166960K 591 0 ether_multi 1 0K 0K 166960K 62 0 mrt 3 0K 0K 166960K 55 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 265 1182K 1182K 166960K 265 0 exec 0 0K 1K 166960K 1426 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 8 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 233 153K 168K 166960K 47912 0 UVM aobj 34 30K 30K 166960K 42 0 pinsyscall 39 78K 111K 166960K 7022 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 387 0 NDP 13 0K 2K 166960K 224 0 temp 92 8688K 8936K 166960K 238955 0 kqueue 14 22K 34K 166960K 1040 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 789 0 786 10 9 1 3 0 8 0 rtentry 176 509 0 411 6 0 6 6 0 8 0 unpcb 144 3657 0 3640 31 27 4 6 0 8 3 syncache 336 5 0 5 3 3 0 1 0 8 0 tcpcb 736 1531 0 1526 32 31 1 7 0 8 0 arp 136 77 0 58 1 0 1 1 0 8 0 inpcb 328 6062 0 6052 64 62 2 13 0 8 0 ip6q 72 1 0 1 1 1 0 1 0 8 0 ip6af 40 10 0 10 1 1 0 1 0 8 0 nd6 152 112 0 91 2 1 1 2 0 8 0 pkpcb 40 33 0 33 13 12 1 1 0 8 1 kcovpl 48 33 0 25 1 0 1 1 0 8 0 mppekey 1024 3 0 3 3 3 0 1 0 8 0 ppxss 1192 135 0 133 2 1 1 1 0 8 0 pppxif 1504 16 0 16 8 8 0 1 0 8 0 pffrag 232 103 0 95 1 0 1 1 0 482 0 pffrnode 88 98 0 91 1 0 1 1 0 8 0 pffrent 40 200 0 192 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 332 0 258 1 0 1 1 0 8 0 pfstkey 128 332 0 258 4 0 4 4 0 8 0 pfstate 448 332 0 258 12 0 12 12 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 rttmr 136 14 0 14 6 6 0 1 0 8 0 art_heap8 4096 6 0 0 6 0 6 6 0 8 0 art_heap4 256 2468 0 2053 51 22 29 32 0 8 3 art_table 40 2474 0 2053 6 1 5 6 0 8 0 art_node 32 507 0 420 1 0 1 1 0 8 0 sysvmsgpl 40 22 0 13 1 0 1 1 0 8 0 semupl 112 5 0 5 3 3 0 1 0 8 0 semapl 112 163 0 131 1 0 1 1 0 8 0 shmpl 112 19 0 2 1 0 1 1 0 8 0 dirhash 1024 94 0 77 3 0 3 3 0 8 0 dino2pl 256 11240 0 9676 98 0 98 98 0 8 0 ffsino 296 11240 0 9676 121 0 121 121 0 8 0 nchpl 144 18096 0 16326 66 0 66 66 0 8 0 rtmask 32 32 0 31 2 1 1 1 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 66872 0 66872 10 9 1 2 0 8 1 percpumem 16 249 0 197 1 0 1 1 0 8 0 vcpupl 3968 15 0 1 2 0 2 2 0 8 0 vmpool 848 20 0 6 2 0 2 2 0 8 0 kstatmem 264 300 0 270 3 0 3 3 0 8 0 scsiplug 72 25 0 25 12 11 1 1 0 8 1 scxspl 216 126970 0 126970 18 17 1 8 1 8 1 plimitpl 152 1783 0 1765 1 0 1 1 0 8 0 sigapl 424 5509 0 5459 8 1 7 7 0 8 0 knotepl 120 792 0 0 24 0 24 24 0 8 0 kqueuepl 224 2070 0 2060 28 27 1 5 0 8 0 pipepl 344 768 0 741 13 10 3 9 0 8 0 fdescpl 528 5478 0 5450 3 0 3 3 0 8 0 filepl 160 38423 0 38201 47 34 13 19 0 8 0 lockfpl 104 2137 0 2131 2 1 1 2 0 8 0 lockfspl 48 813 0 809 1 0 1 1 0 8 0 sessionpl 144 50 0 41 1 0 1 1 0 8 0 pgrppl 48 183 0 166 1 0 1 1 0 8 0 ucredpl 104 6600 0 6587 1 0 1 1 0 8 0 zombiepl 144 6211 0 6207 2 1 1 1 0 8 0 processpl 1232 5509 0 5459 6 1 5 5 0 8 0 procpl 664 13804 0 13750 6 0 6 6 0 8 0 sosppl 176 27 0 27 13 12 1 1 0 8 1 sockpl 752 10859 0 10829 116 105 11 21 0 8 7 mcl64k 65536 18 0 0 3 0 3 3 0 8 0 mcl16k 16384 5 0 0 1 0 1 1 0 8 0 mcl12k 12288 3 0 0 1 0 1 1 0 8 0 mcl9k 9216 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 6 0 0 1 0 1 1 0 8 0 mcl4k 4096 122 0 0 16 0 16 16 0 8 0 mcl2k2 2112 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 142 0 0 8 0 8 8 0 8 0 mtagpl 96 195 0 0 4 0 4 4 0 8 0 mbufpl 256 2212 798 895 80 1 79 80 0 8 0 bufpl 280 52694 0 46558 439 0 439 439 0 8 0 anonpl 32 13916 0 0 112 0 112 112 0 246 0 amapchunkpl 152 168718 0 168145 85 58 27 37 0 158 0 amappl16 200 18118 0 17972 111 98 13 29 0 8 0 amappl15 192 4 0 3 1 0 1 1 0 8 0 amappl14 184 6 0 5 3 2 1 1 0 8 0 amappl13 176 723 0 722 1 0 1 1 0 8 0 amappl12 168 5997 0 5958 3 0 3 3 0 8 0 amappl11 160 6 0 6 2 2 0 1 0 8 0 amappl10 152 49 0 34 1 0 1 1 0 8 0 amappl9 144 256 0 255 2 1 1 1 0 8 0 amappl8 136 30 0 27 1 0 1 1 0 8 0 amappl7 128 218 0 216 1 0 1 1 0 8 0 amappl6 120 607 0 593 1 0 1 1 0 8 0 amappl5 112 76 0 65 1 0 1 1 0 8 0 amappl4 104 569 0 537 1 0 1 1 0 8 0 amappl3 96 34786 0 34692 5 1 4 4 0 8 0 amappl2 88 769 0 704 2 0 2 2 0 8 0 amappl1 80 31679 0 31089 17 3 14 15 0 8 0 amappl 88 45948 0 45793 5 0 5 5 0 92 0 uvmvnodes 80 252 0 0 6 0 6 6 0 8 0 dma65536 65536 2 0 2 2 2 0 1 0 8 0 dma8192 8192 2 0 2 2 1 1 1 0 8 1 dma4096 4096 2 0 2 2 2 0 1 0 8 0 dma2048 2048 1 0 1 1 1 0 1 0 8 0 dma1024 1024 2 0 1 1 0 1 1 0 8 0 dma512 512 2 0 2 2 2 0 1 0 8 0 dma256 256 9 0 9 4 4 0 1 0 8 0 dma128 128 261 0 261 8 7 1 1 0 8 1 dma64 64 9 0 9 4 4 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 41 0 8 1 0 1 1 0 8 0 uaddrrnd 24 5478 0 5450 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 5478 0 5450 1 0 1 1 0 8 0 vmmpekpl 168 36452 0 36378 4 0 4 4 0 8 0 vmmpepl 168 342226 0 340309 166 67 99 111 0 357 1 vmsppl 488 5477 0 5450 6 1 5 5 0 8 0 rwobjpl 80 85330 0 83989 44 8 36 37 0 8 0 pdppl 4096 11003 0 10926 192 105 87 87 0 8 10 pvpl 32 22114 0 0 178 1 177 177 0 265 0 pmappl 256 5497 0 5456 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 536 0 186 12 1 11 11 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83824ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838e6d00) at __mp_lock+0x192 softintr_dispatch(2) at softintr_dispatch+0x125 dosoftint(2) at dosoftint+0x54 Xsofttty() at Xsofttty+0x27 __mp_lock(ffffffff838e6d00) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 __mp_lock(ffffffff838e6d00) at __mp_lock+0x1a3 __mp_acquire_count(ffffffff838e6d00,1) at __mp_acquire_count+0x58 end trace frame: 0xffff80002a36c480, count: 0 ddb{0}> trace x86_ipi_db(ffffffff83824ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838e6d00) at __mp_lock+0x192 softintr_dispatch(2) at softintr_dispatch+0x125 dosoftint(2) at dosoftint+0x54 Xsofttty() at Xsofttty+0x27 __mp_lock(ffffffff838e6d00) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 __mp_lock(ffffffff838e6d00) at __mp_lock+0x1a3 __mp_acquire_count(ffffffff838e6d00,1) at __mp_acquire_count+0x58 randomwrite(412dff,ffff80002a36c760,1) at randomwrite+0x38b spec_write(ffff80002a36c530) at spec_write+0x11f VOP_WRITE(fffffd806c72a9a0,ffff80002a36c760,1,fffffd80097fd680) at VOP_WRITE+0x101 vn_write(fffffd806c97fd50,ffff80002a36c760,0) at vn_write+0x1d3 dofilewritev(ffff8000fffeefa8,5,ffff80002a36c760,0,ffff80002a36c820) at dofilewritev+0x242 sys_writev(ffff8000fffeefa8,ffff80002a36c8d0,ffff80002a36c820) at sys_writev+0xd8 syscall(ffff80002a36c8d0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x104466177c0, count: -22 ddb{0}> machine ddbcpu 1 Stopped at savectx+0xae: movl $0,%gs:0x688 savectx() at savectx+0xae end of kernel end trace frame: 0x71aaf7cf9d10, count: 14 ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x71aaf7cf9d10, count: -1