last executing test programs: 11.838248037s ago: executing program 0 (id=1713): r0 = kqueue() r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x20180, 0x9) (async) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20180, 0x9) openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r3 = openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = dup(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x10) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x10) kevent(r0, &(0x7f00000000c0)=[{{r1}, 0xfffffffffffffffc, 0xac, 0x4, 0x0, 0x5}, {{r2}, 0xffffffffffffffff, 0x19, 0x2, 0x5, 0x6}, {{r3}, 0xfffffffffffffffd, 0x2, 0x8, 0x8, 0x1}, {{r4}, 0xfffffffffffffff9, 0x10, 0x40, 0x7fffffff, 0xff}, {{0xffffffffffffff9c}, 0xfffffffffffffffd, 0x10, 0x2, 0x1, 0x6}], 0x59a8a136, &(0x7f00000001c0)=[{{r5}, 0xfffffffffffffffd, 0x20, 0x40000000, 0x7f, 0x3ff}], 0x6, &(0x7f0000000200)={0x5, 0x5}) (async) kevent(r0, &(0x7f00000000c0)=[{{r1}, 0xfffffffffffffffc, 0xac, 0x4, 0x0, 0x5}, {{r2}, 0xffffffffffffffff, 0x19, 0x2, 0x5, 0x6}, {{r3}, 0xfffffffffffffffd, 0x2, 0x8, 0x8, 0x1}, {{r4}, 0xfffffffffffffff9, 0x10, 0x40, 0x7fffffff, 0xff}, {{0xffffffffffffff9c}, 0xfffffffffffffffd, 0x10, 0x2, 0x1, 0x6}], 0x59a8a136, &(0x7f00000001c0)=[{{r5}, 0xfffffffffffffffd, 0x20, 0x40000000, 0x7f, 0x3ff}], 0x6, &(0x7f0000000200)={0x5, 0x5}) getsockname$inet(r5, &(0x7f0000000240), &(0x7f0000000280)=0xc) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) close(0xffffffffffffff9c) sendto(r5, &(0x7f00000002c0)="d4f352138bfa377d8ea1a20db00b0b525da37f86b954f16a30e5d7e6c6", 0x1d, 0x1, &(0x7f0000000300)=@un=@abs={0x1, 0x0, 0x3}, 0x8) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000340)={0x1, 0x4}) (async) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000340)={0x1, 0x4}) acct(&(0x7f0000000380)='./file0\x00') utimensat(r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x0, 0xed3}, {0x8, 0x3}}, 0x0) (async) utimensat(r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x0, 0xed3}, {0x8, 0x3}}, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) r6 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$DIOCMAP(r6, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r2, 0x2}) faccessat(r5, &(0x7f0000000500)='./file0\x00', 0x20, 0x1) r7 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) ioctl$WSDISPLAYIO_ADDSCREEN(r7, 0x80245753, &(0x7f0000000580)={0x6, './file1\x00', './file0\x00'}) ioctl$VT_GETSTATE(r6, 0x40067664, &(0x7f00000005c0)) (async) ioctl$VT_GETSTATE(r6, 0x40067664, &(0x7f00000005c0)) r8 = openat(r4, &(0x7f0000000600)='./file1\x00', 0x10000, 0x20) preadv(r8, &(0x7f0000000740)=[{&(0x7f0000000640)=""/193, 0xc1}], 0x1, 0x1) ioctl$WSKBDIO_GETDEFAULTBELL(0xffffffffffffffff, 0x40105706, &(0x7f0000000780)) (async) ioctl$WSKBDIO_GETDEFAULTBELL(0xffffffffffffffff, 0x40105706, &(0x7f0000000780)) getpid() (async) r9 = getpid() ktrace(&(0x7f00000007c0)='./file1\x00', 0x1, 0x122, r9) syz_extract_tcp_res$synack(&(0x7f0000000800)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000840)={0x41424344, 0x41424344}, 0x3, 0x4f6) syz_emit_ethernet(0x173, &(0x7f0000000880)={@broadcast, @local, [{[], {0x8100, 0x2, 0x1, 0x2}}], {@ipv6={0x86dd, {0x5, 0x6, "fe2499", 0x139, 0x89, 0x3, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0xc4, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3}]}, @fragment={0x61, 0x0, 0xd, 0x1, 0x0, 0x1e, 0x65}, @hopopts={0x2, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0xd2e}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x2}]}], @tcp={{0x1, 0x1, r10, r11, 0x1, 0x0, 0x11, 0x4, 0x0, 0x0, 0x0, {[@nop, @sack={0x5, 0x16, [0x3, 0x4, 0x9, 0x1, 0xf]}, @mss={0x2, 0x4, 0x5}, @generic={0x4, 0x9, "d8d80230892385"}, @eol, @timestamp={0x8, 0xa, 0x9, 0x10001}]}}, {"9d0c0cd01153f49dbddb02b82ad7341999c08a55fdd4e81b45706963ceb351acaad8dfdb94b3e304602ce65ff262ab7245cf532939268c04d375ebf136eec5c22cef2b49d15da6910e27453dbeeb9ce4216d5a5ed40a88605e7bb868b2c6f1cb3f491d59a0da333bf4bda787953f56b572144343d06a4e93e9018eb0875a4267ad08820fa9b6003b4c0dc510f9646700a3f99eee825123eb63e79827162fb3025919c63e7e6c8779de7139b8cd77bbdf618e4e7c1a1c443ad0af9c8e83"}}}}}}}) bind$unix(r8, &(0x7f0000000a00)=@abs={0x1, 0x0, 0x3}, 0x8) (async) bind$unix(r8, &(0x7f0000000a00)=@abs={0x1, 0x0, 0x3}, 0x8) 9.699180379s ago: executing program 0 (id=1713): r0 = kqueue() r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x20180, 0x9) (async) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20180, 0x9) openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r3 = openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = dup(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x10) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x10) kevent(r0, &(0x7f00000000c0)=[{{r1}, 0xfffffffffffffffc, 0xac, 0x4, 0x0, 0x5}, {{r2}, 0xffffffffffffffff, 0x19, 0x2, 0x5, 0x6}, {{r3}, 0xfffffffffffffffd, 0x2, 0x8, 0x8, 0x1}, {{r4}, 0xfffffffffffffff9, 0x10, 0x40, 0x7fffffff, 0xff}, {{0xffffffffffffff9c}, 0xfffffffffffffffd, 0x10, 0x2, 0x1, 0x6}], 0x59a8a136, &(0x7f00000001c0)=[{{r5}, 0xfffffffffffffffd, 0x20, 0x40000000, 0x7f, 0x3ff}], 0x6, &(0x7f0000000200)={0x5, 0x5}) (async) kevent(r0, &(0x7f00000000c0)=[{{r1}, 0xfffffffffffffffc, 0xac, 0x4, 0x0, 0x5}, {{r2}, 0xffffffffffffffff, 0x19, 0x2, 0x5, 0x6}, {{r3}, 0xfffffffffffffffd, 0x2, 0x8, 0x8, 0x1}, {{r4}, 0xfffffffffffffff9, 0x10, 0x40, 0x7fffffff, 0xff}, {{0xffffffffffffff9c}, 0xfffffffffffffffd, 0x10, 0x2, 0x1, 0x6}], 0x59a8a136, &(0x7f00000001c0)=[{{r5}, 0xfffffffffffffffd, 0x20, 0x40000000, 0x7f, 0x3ff}], 0x6, &(0x7f0000000200)={0x5, 0x5}) getsockname$inet(r5, &(0x7f0000000240), &(0x7f0000000280)=0xc) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) close(0xffffffffffffff9c) sendto(r5, &(0x7f00000002c0)="d4f352138bfa377d8ea1a20db00b0b525da37f86b954f16a30e5d7e6c6", 0x1d, 0x1, &(0x7f0000000300)=@un=@abs={0x1, 0x0, 0x3}, 0x8) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000340)={0x1, 0x4}) (async) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000340)={0x1, 0x4}) acct(&(0x7f0000000380)='./file0\x00') utimensat(r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x0, 0xed3}, {0x8, 0x3}}, 0x0) (async) utimensat(r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x0, 0xed3}, {0x8, 0x3}}, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) r6 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$DIOCMAP(r6, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r2, 0x2}) faccessat(r5, &(0x7f0000000500)='./file0\x00', 0x20, 0x1) r7 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) ioctl$WSDISPLAYIO_ADDSCREEN(r7, 0x80245753, &(0x7f0000000580)={0x6, './file1\x00', './file0\x00'}) ioctl$VT_GETSTATE(r6, 0x40067664, &(0x7f00000005c0)) (async) ioctl$VT_GETSTATE(r6, 0x40067664, &(0x7f00000005c0)) r8 = openat(r4, &(0x7f0000000600)='./file1\x00', 0x10000, 0x20) preadv(r8, &(0x7f0000000740)=[{&(0x7f0000000640)=""/193, 0xc1}], 0x1, 0x1) ioctl$WSKBDIO_GETDEFAULTBELL(0xffffffffffffffff, 0x40105706, &(0x7f0000000780)) (async) ioctl$WSKBDIO_GETDEFAULTBELL(0xffffffffffffffff, 0x40105706, &(0x7f0000000780)) getpid() (async) r9 = getpid() ktrace(&(0x7f00000007c0)='./file1\x00', 0x1, 0x122, r9) syz_extract_tcp_res$synack(&(0x7f0000000800)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000840)={0x41424344, 0x41424344}, 0x3, 0x4f6) syz_emit_ethernet(0x173, &(0x7f0000000880)={@broadcast, @local, [{[], {0x8100, 0x2, 0x1, 0x2}}], {@ipv6={0x86dd, {0x5, 0x6, "fe2499", 0x139, 0x89, 0x3, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0xc4, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3}]}, @fragment={0x61, 0x0, 0xd, 0x1, 0x0, 0x1e, 0x65}, @hopopts={0x2, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0xd2e}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x2}]}], @tcp={{0x1, 0x1, r10, r11, 0x1, 0x0, 0x11, 0x4, 0x0, 0x0, 0x0, {[@nop, @sack={0x5, 0x16, [0x3, 0x4, 0x9, 0x1, 0xf]}, @mss={0x2, 0x4, 0x5}, @generic={0x4, 0x9, "d8d80230892385"}, @eol, @timestamp={0x8, 0xa, 0x9, 0x10001}]}}, {"9d0c0cd01153f49dbddb02b82ad7341999c08a55fdd4e81b45706963ceb351acaad8dfdb94b3e304602ce65ff262ab7245cf532939268c04d375ebf136eec5c22cef2b49d15da6910e27453dbeeb9ce4216d5a5ed40a88605e7bb868b2c6f1cb3f491d59a0da333bf4bda787953f56b572144343d06a4e93e9018eb0875a4267ad08820fa9b6003b4c0dc510f9646700a3f99eee825123eb63e79827162fb3025919c63e7e6c8779de7139b8cd77bbdf618e4e7c1a1c443ad0af9c8e83"}}}}}}}) bind$unix(r8, &(0x7f0000000a00)=@abs={0x1, 0x0, 0x3}, 0x8) (async) bind$unix(r8, &(0x7f0000000a00)=@abs={0x1, 0x0, 0x3}, 0x8) 7.154411238s ago: executing program 0 (id=1713): r0 = kqueue() r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x20180, 0x9) (async) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20180, 0x9) openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r3 = openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = dup(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x10) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x10) kevent(r0, &(0x7f00000000c0)=[{{r1}, 0xfffffffffffffffc, 0xac, 0x4, 0x0, 0x5}, {{r2}, 0xffffffffffffffff, 0x19, 0x2, 0x5, 0x6}, {{r3}, 0xfffffffffffffffd, 0x2, 0x8, 0x8, 0x1}, {{r4}, 0xfffffffffffffff9, 0x10, 0x40, 0x7fffffff, 0xff}, {{0xffffffffffffff9c}, 0xfffffffffffffffd, 0x10, 0x2, 0x1, 0x6}], 0x59a8a136, &(0x7f00000001c0)=[{{r5}, 0xfffffffffffffffd, 0x20, 0x40000000, 0x7f, 0x3ff}], 0x6, &(0x7f0000000200)={0x5, 0x5}) (async) kevent(r0, &(0x7f00000000c0)=[{{r1}, 0xfffffffffffffffc, 0xac, 0x4, 0x0, 0x5}, {{r2}, 0xffffffffffffffff, 0x19, 0x2, 0x5, 0x6}, {{r3}, 0xfffffffffffffffd, 0x2, 0x8, 0x8, 0x1}, {{r4}, 0xfffffffffffffff9, 0x10, 0x40, 0x7fffffff, 0xff}, {{0xffffffffffffff9c}, 0xfffffffffffffffd, 0x10, 0x2, 0x1, 0x6}], 0x59a8a136, &(0x7f00000001c0)=[{{r5}, 0xfffffffffffffffd, 0x20, 0x40000000, 0x7f, 0x3ff}], 0x6, &(0x7f0000000200)={0x5, 0x5}) getsockname$inet(r5, &(0x7f0000000240), &(0x7f0000000280)=0xc) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) close(0xffffffffffffff9c) sendto(r5, &(0x7f00000002c0)="d4f352138bfa377d8ea1a20db00b0b525da37f86b954f16a30e5d7e6c6", 0x1d, 0x1, &(0x7f0000000300)=@un=@abs={0x1, 0x0, 0x3}, 0x8) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000340)={0x1, 0x4}) (async) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000340)={0x1, 0x4}) acct(&(0x7f0000000380)='./file0\x00') utimensat(r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x0, 0xed3}, {0x8, 0x3}}, 0x0) (async) utimensat(r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x0, 0xed3}, {0x8, 0x3}}, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) r6 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$DIOCMAP(r6, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r2, 0x2}) faccessat(r5, &(0x7f0000000500)='./file0\x00', 0x20, 0x1) r7 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) ioctl$WSDISPLAYIO_ADDSCREEN(r7, 0x80245753, &(0x7f0000000580)={0x6, './file1\x00', './file0\x00'}) ioctl$VT_GETSTATE(r6, 0x40067664, &(0x7f00000005c0)) (async) ioctl$VT_GETSTATE(r6, 0x40067664, &(0x7f00000005c0)) r8 = openat(r4, &(0x7f0000000600)='./file1\x00', 0x10000, 0x20) preadv(r8, &(0x7f0000000740)=[{&(0x7f0000000640)=""/193, 0xc1}], 0x1, 0x1) ioctl$WSKBDIO_GETDEFAULTBELL(0xffffffffffffffff, 0x40105706, &(0x7f0000000780)) (async) ioctl$WSKBDIO_GETDEFAULTBELL(0xffffffffffffffff, 0x40105706, &(0x7f0000000780)) getpid() (async) r9 = getpid() ktrace(&(0x7f00000007c0)='./file1\x00', 0x1, 0x122, r9) syz_extract_tcp_res$synack(&(0x7f0000000800)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000840)={0x41424344, 0x41424344}, 0x3, 0x4f6) syz_emit_ethernet(0x173, &(0x7f0000000880)={@broadcast, @local, [{[], {0x8100, 0x2, 0x1, 0x2}}], {@ipv6={0x86dd, {0x5, 0x6, "fe2499", 0x139, 0x89, 0x3, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0xc4, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3}]}, @fragment={0x61, 0x0, 0xd, 0x1, 0x0, 0x1e, 0x65}, @hopopts={0x2, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0xd2e}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x2}]}], @tcp={{0x1, 0x1, r10, r11, 0x1, 0x0, 0x11, 0x4, 0x0, 0x0, 0x0, {[@nop, @sack={0x5, 0x16, [0x3, 0x4, 0x9, 0x1, 0xf]}, @mss={0x2, 0x4, 0x5}, @generic={0x4, 0x9, "d8d80230892385"}, @eol, @timestamp={0x8, 0xa, 0x9, 0x10001}]}}, {"9d0c0cd01153f49dbddb02b82ad7341999c08a55fdd4e81b45706963ceb351acaad8dfdb94b3e304602ce65ff262ab7245cf532939268c04d375ebf136eec5c22cef2b49d15da6910e27453dbeeb9ce4216d5a5ed40a88605e7bb868b2c6f1cb3f491d59a0da333bf4bda787953f56b572144343d06a4e93e9018eb0875a4267ad08820fa9b6003b4c0dc510f9646700a3f99eee825123eb63e79827162fb3025919c63e7e6c8779de7139b8cd77bbdf618e4e7c1a1c443ad0af9c8e83"}}}}}}}) bind$unix(r8, &(0x7f0000000a00)=@abs={0x1, 0x0, 0x3}, 0x8) (async) bind$unix(r8, &(0x7f0000000a00)=@abs={0x1, 0x0, 0x3}, 0x8) 5.010291689s ago: executing program 4 (id=2046): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x2, 0xf5, 0xa0, 0x8}, {0x6, 0xcb, 0x6, 0xffffeffd}]}) sysctl$hw(0x0, 0x0, &(0x7f0000001280)="0e0d2f927a450bee1b4d60ca79639d4f8a4ba6999c8b357581c37bec1f61c0690b8a27768c80a97b2c1895ad847f21c5196d22b290b8445a01e91caf7d", &(0x7f0000000080)=0x3d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) chmod(&(0x7f0000000040)='.\x00', 0x35e) r2 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r2, 0xffff, 0x1024, &(0x7f0000000140), &(0x7f0000000280)=0xc) mquery(&(0x7f0000158000/0x2000)=nil, 0x2000, 0x2, 0x0, r2, 0xf) r3 = geteuid() acct(&(0x7f0000000100)='./file0\x00') setuid(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchdir(r4) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0) mkdir(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) syz_emit_ethernet(0xec, &(0x7f0000000340)=ANY=[]) write(r0, &(0x7f0000000500)="d5d32207", 0x4) 5.008030936s ago: executing program 0 (id=1713): r0 = kqueue() r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x20180, 0x9) (async) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20180, 0x9) openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r3 = openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = dup(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x10) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x10) kevent(r0, &(0x7f00000000c0)=[{{r1}, 0xfffffffffffffffc, 0xac, 0x4, 0x0, 0x5}, {{r2}, 0xffffffffffffffff, 0x19, 0x2, 0x5, 0x6}, {{r3}, 0xfffffffffffffffd, 0x2, 0x8, 0x8, 0x1}, {{r4}, 0xfffffffffffffff9, 0x10, 0x40, 0x7fffffff, 0xff}, {{0xffffffffffffff9c}, 0xfffffffffffffffd, 0x10, 0x2, 0x1, 0x6}], 0x59a8a136, &(0x7f00000001c0)=[{{r5}, 0xfffffffffffffffd, 0x20, 0x40000000, 0x7f, 0x3ff}], 0x6, &(0x7f0000000200)={0x5, 0x5}) (async) kevent(r0, &(0x7f00000000c0)=[{{r1}, 0xfffffffffffffffc, 0xac, 0x4, 0x0, 0x5}, {{r2}, 0xffffffffffffffff, 0x19, 0x2, 0x5, 0x6}, {{r3}, 0xfffffffffffffffd, 0x2, 0x8, 0x8, 0x1}, {{r4}, 0xfffffffffffffff9, 0x10, 0x40, 0x7fffffff, 0xff}, {{0xffffffffffffff9c}, 0xfffffffffffffffd, 0x10, 0x2, 0x1, 0x6}], 0x59a8a136, &(0x7f00000001c0)=[{{r5}, 0xfffffffffffffffd, 0x20, 0x40000000, 0x7f, 0x3ff}], 0x6, &(0x7f0000000200)={0x5, 0x5}) getsockname$inet(r5, &(0x7f0000000240), &(0x7f0000000280)=0xc) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) close(0xffffffffffffff9c) sendto(r5, &(0x7f00000002c0)="d4f352138bfa377d8ea1a20db00b0b525da37f86b954f16a30e5d7e6c6", 0x1d, 0x1, &(0x7f0000000300)=@un=@abs={0x1, 0x0, 0x3}, 0x8) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000340)={0x1, 0x4}) (async) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000340)={0x1, 0x4}) acct(&(0x7f0000000380)='./file0\x00') utimensat(r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x0, 0xed3}, {0x8, 0x3}}, 0x0) (async) utimensat(r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x0, 0xed3}, {0x8, 0x3}}, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) r6 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$DIOCMAP(r6, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r2, 0x2}) faccessat(r5, &(0x7f0000000500)='./file0\x00', 0x20, 0x1) r7 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) ioctl$WSDISPLAYIO_ADDSCREEN(r7, 0x80245753, &(0x7f0000000580)={0x6, './file1\x00', './file0\x00'}) ioctl$VT_GETSTATE(r6, 0x40067664, &(0x7f00000005c0)) (async) ioctl$VT_GETSTATE(r6, 0x40067664, &(0x7f00000005c0)) r8 = openat(r4, &(0x7f0000000600)='./file1\x00', 0x10000, 0x20) preadv(r8, &(0x7f0000000740)=[{&(0x7f0000000640)=""/193, 0xc1}], 0x1, 0x1) ioctl$WSKBDIO_GETDEFAULTBELL(0xffffffffffffffff, 0x40105706, &(0x7f0000000780)) (async) ioctl$WSKBDIO_GETDEFAULTBELL(0xffffffffffffffff, 0x40105706, &(0x7f0000000780)) getpid() (async) r9 = getpid() ktrace(&(0x7f00000007c0)='./file1\x00', 0x1, 0x122, r9) syz_extract_tcp_res$synack(&(0x7f0000000800)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000840)={0x41424344, 0x41424344}, 0x3, 0x4f6) syz_emit_ethernet(0x173, &(0x7f0000000880)={@broadcast, @local, [{[], {0x8100, 0x2, 0x1, 0x2}}], {@ipv6={0x86dd, {0x5, 0x6, "fe2499", 0x139, 0x89, 0x3, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0xc4, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3}]}, @fragment={0x61, 0x0, 0xd, 0x1, 0x0, 0x1e, 0x65}, @hopopts={0x2, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0xd2e}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x2}]}], @tcp={{0x1, 0x1, r10, r11, 0x1, 0x0, 0x11, 0x4, 0x0, 0x0, 0x0, {[@nop, @sack={0x5, 0x16, [0x3, 0x4, 0x9, 0x1, 0xf]}, @mss={0x2, 0x4, 0x5}, @generic={0x4, 0x9, "d8d80230892385"}, @eol, @timestamp={0x8, 0xa, 0x9, 0x10001}]}}, {"9d0c0cd01153f49dbddb02b82ad7341999c08a55fdd4e81b45706963ceb351acaad8dfdb94b3e304602ce65ff262ab7245cf532939268c04d375ebf136eec5c22cef2b49d15da6910e27453dbeeb9ce4216d5a5ed40a88605e7bb868b2c6f1cb3f491d59a0da333bf4bda787953f56b572144343d06a4e93e9018eb0875a4267ad08820fa9b6003b4c0dc510f9646700a3f99eee825123eb63e79827162fb3025919c63e7e6c8779de7139b8cd77bbdf618e4e7c1a1c443ad0af9c8e83"}}}}}}}) bind$unix(r8, &(0x7f0000000a00)=@abs={0x1, 0x0, 0x3}, 0x8) (async) bind$unix(r8, &(0x7f0000000a00)=@abs={0x1, 0x0, 0x3}, 0x8) 4.804138405s ago: executing program 2 (id=2049): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @rand_addr=0x2}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}) (async) unlink(&(0x7f0000000200)='./file0\x00') 3.008728431s ago: executing program 2 (id=2051): mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x2) msgget(0x1, 0x1) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r0, 0x0) 3.004936258s ago: executing program 4 (id=2053): r0 = socket(0x11, 0x3, 0x3) sendto$unix(r0, &(0x7f0000000280)="b1000501600000001700000007000000045c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x0, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x7, 0xe6b, {0xffffffffffffffff, 0x2}}) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x29}, 0x5, 0x0, 0x0, 0x0, 0x45) 2.949783719s ago: executing program 7 (id=2056): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) pread(r0, 0x0, 0x0, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r1, 0xc0107004, &(0x7f0000000080)=0x7f) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x80, 0x3, 0x17, 0x3}, {0x40, 0x1, 0x27, 0x8}, {0x400e, 0x4, 0x53, 0x7ff}]}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa) 2.890348529s ago: executing program 7 (id=2060): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) r1 = socket(0x800000018, 0x1, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) listen(r1, 0x1) r2 = socket(0x18, 0x4001, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) ioctl$TIOCSETA(r0, 0xc4504440, &(0x7f00000001c0)={0x2000001, 0x800, 0xe, 0x9, '\x00\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x2000009, 0x4}) 2.889288291s ago: executing program 7 (id=2062): poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r1 = semget(0x0, 0x1, 0x281) r2 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f0000000140)=[{{r2}, 0xfffffffffffffffc, 0x21, 0x2}], 0x9, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) kevent(r3, 0x0, 0xfffffffb, &(0x7f0000000080), 0x200, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0xc1) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r4, &(0x7f0000001280)=@file={0x0, ""/251}, &(0x7f00000008c0)=0xfd) semop(r1, &(0x7f0000000000), 0x23) 2.765992688s ago: executing program 4 (id=2064): setrlimit(0x8, &(0x7f0000000980)={0x7, 0x51}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() r2 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000500)="6e2e2e94ba14ef7f8a56997797d33576523d746288b473258d940c3f5066ab3b83e46cdd2d854fd6f7a23f63a23b377eb0b80ae63d1f4e21fd841b2f47", 0x3d}], 0x1) execve(0x0, 0x0, 0x0) fsync(r2) ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x5) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) write(r0, 0x0, 0x0) write(r0, 0x0, 0xe) r3 = syz_open_pts() ioctl$TIOCFLUSH(r3, 0x80047410, &(0x7f0000000000)) read(r1, &(0x7f0000000300)=""/238, 0x5d) 2.763819746s ago: executing program 2 (id=2066): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x28) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[]) select(0x40, &(0x7f0000000040)={0xfd, 0x0, 0x0, 0x0, 0x0, 0xff11}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x10004, &(0x7f00000004c0)=ANY=[]) mknod(&(0x7f00000000c0)='./bus\x00', 0x2006, 0x4f4b) r3 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r3, 0xc2c04200, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) fcntl$dupfd(r1, 0x0, r0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x28) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[]) (async) select(0x40, &(0x7f0000000040)={0xfd, 0x0, 0x0, 0x0, 0x0, 0xff11}, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x10004, &(0x7f00000004c0)=ANY=[]) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2006, 0x4f4b) (async) open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) (async) ioctl$FIOASYNC(r3, 0xc2c04200, &(0x7f00000001c0)) (async) 2.679142443s ago: executing program 2 (id=2069): sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0x1b, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x45}, 0x3, &(0x7f0000000440)="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"/488, &(0x7f0000000000)=0x41, &(0x7f0000000180)="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", 0x98) syz_emit_ethernet(0x6a, &(0x7f00000014c0)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x34, 0x3a, 0x0, @rand_addr="687af6acabb6150f955930e5fedb296f", @rand_addr="fffffffe00000800001a003f00000005", {[@routing={0x4, 0x0, 0x0, 0x7}, @fragment={0x88, 0x0, 0x2, 0x0, 0x0, 0x3, 0x66}], @udp={{0x3, 0x0, 0x8}, {"1058c1539adc8480e8cd4194107562950d8d07774ae613fcf54f9ade"}}}}}}}) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000200)="b1000513000000000000000020000000000013fecea10500fef96ecf2ac72fd3357ae30208004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699af4879b672f335c223e7d0c032bfa896443a41002000000720fd38bfbb770bef5a872c88106002ec5890400000000000000361b1257aea8c508002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000e1718d30d4a13f1dd80460259bbdf3688f457ceb4dbd32bcd83790095c6eb09e606187259a80efe2122e02afb4f82cdc77eaa6a35869ff4c2c2e07ed6f2f37ceb26a25109b47e440a5b3da3aad2c170e1d9840746d7729bb0cd2ce63ab858a44c30951d643e0b1b411780a", 0xb1, 0xe, 0x0, 0x78) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/233, 0xe9}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000040)={0x4, 0x9aa1, 0x3, 0x0, 0x1, 0x80000000, 0x0, 0x10, [{0x8, 0x1, 0x81, 0x62d}, {0x3, 0x9, 0x7a0a, 0x10}, {0xffffffff, 0x5}, {0x7fffffff, 0xa59b, 0x16, 0x3}, {0x2, 0x4, 0x3, 0x1}, {0x8000, 0x4e166b70, 0x3, 0x8000}, {0x1, 0x7, 0xfffffffe, 0x6}, {0x195, 0x9, 0x0, 0x8001}, {0x4, 0x6, 0x6}, {0x6, 0x5b58, 0xd620, 0x3}, {0x4, 0x4, 0x0, 0x4}, {0xb, 0x7fff, 0x80, 0x5}, {0x5, 0x1, 0x7, 0x5}, {0x7, 0x5, 0xfffffffa, 0x4}, {0x9, 0x0, 0x5, 0x1}, {0x3738, 0x6266, 0x5, 0x4}]}) 2.674410769s ago: executing program 2 (id=2071): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) setuid(0xffffffffffffffff) ioctl$BIOCLOCK(r0, 0x20004276) ioctl$BIOCGRTIMEOUT(r0, 0x4010426e, &(0x7f0000000240)) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f00000000c0)) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r2 = syz_open_pts() close(r2) r3 = getpgid(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x100000000000000, r3}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) select(0x40, &(0x7f0000000180)={0x3205, 0x44809e9a, 0x7fffffffffffffff, 0xe, 0x2000000000000000, 0x181c, 0xdc, 0x6}, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r5 = kqueue() kevent(r5, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r6 = open(&(0x7f0000000280)='./bus\x00', 0x80, 0x180) ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x1) ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x2) writev(r2, &(0x7f0000000100)=[{&(0x7f00000009c0)="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", 0x1c7}], 0x1) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0xfffffffffffffffb, 0x0, 0x8, 0x9, 0x3}], 0x0, 0x0, 0x200002, 0x0) ioctl$TIOCFLUSH(r1, 0xc0187009, &(0x7f0000000080)) 2.592113872s ago: executing program 3 (id=2073): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000003c0)="268b1123db16ea0577cd13c42122c29f9630b324276e2e9de0ad2cc85f1b76d010610fd102f9311bea3774059fd03189bcfb6fba9562dfd2f5b6f2d4fbe3b0e36b1a2f51e6cefc712155", 0x54}, {&(0x7f0000000540)="31deec7db06f7f5066d2319b649354113fbe76958fa330a8afc6c2410086a228e4551fb3e508a39b64a7dabc7ecdac45511d6e866dd8f14373b6cede44f1259b24f43c3c6a35921a7befee6f41383600ce2027270ea7bdfdecccc8960d632ea724790d2a6898e2da556ea51cef1f576fd505c9e18d39362323ff5f9f5a34e3c5dc4a17680bacf8e5f48923e8994ceb5269d2087836b109175591c0c70523", 0x9e}], 0x2, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe5, 0x0, 0x0, 0x0, 0x0, 0x1a3, 0x4003}, 0x8, 0xd7f, 0x0, 0x0, 0x1ff, 0x4000000000, 0xfffffffffffffffc, 0xb}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000680)="a011ff218dd80bfbdbdd4c0c403fd0d8f26af3e076b2f18c53f1d52114b62054fca2f3ed0449c4ba7e990daf91716720e23a86512dce9b5b6ce8e3f9c13b71534379", 0x42}, {&(0x7f0000000440)="b53ee42c394036c3cd3e2892518691de516caf89ce2700c29516f90153347eb012183bc01e8639e5bdddd45ac15e00145e1deec6ade44064154bf2d5f0cc5de0ece6f01ed768a522932b17f35f78545f038bb229ffec08594caeaf28d6aacbf82e475535b6a60533637a83e2933d2e2c6d01cc1dd41e77695d05bad379b582ca62e67e6efce36ff05d9ae5a10ad3e7c147b3f4041709b56d91e8e49d41203809a68f74331aaf106b3cc753429c57713c1e3ebe7015057b1c92b6f8e8dab25a0026757ef0d2feb160f17529da6b50a23b30bbdc0be0fa6bd80d6f55297a246106227feffe01beed3fe800008e9f", 0x18}], 0x2, 0x0) unveil(0x0, &(0x7f0000000240)='x\x00') sysctl$vfs_ffs(&(0x7f00000001c0)={0x4, 0x1, 0x6}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$vfs_ffs(&(0x7f0000000000)={0xa, 0x1, 0xe}, 0x3, &(0x7f0000000080)="fcab53095a6c7bac7c6427c349fcfdb4f24c7987708254035997a61db8f4bb8604d5325bcd5ffb1e06c187d998ae3745906a330114e1d82e6c0283463dbe5c5f3934bba905ce0cbbb90af773d0c703f7f3de5c34e0c372291469ed85a6e94b0367e80998", &(0x7f0000000100)=0x64, &(0x7f0000000140)="26cace2a4edf1d0c013c5ef968d708dc5c820f709fd8a4922fc7d4970d67dbe74eb9e43e644ee77a1c9919dbf158f77cb31fdeef2a18595a7d0cf20717e7a23036be7a68e4cb861b8aad4a701800e133a767f9f9e0c3252c", 0x58) 2.587714398s ago: executing program 3 (id=2076): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mprotect(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket(0x2, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000080)="c5", 0x1) setsockopt$sock_int(r1, 0xffff, 0x200, &(0x7f00000000c0)=0x400, 0x12) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x4, 0x0, 0x9, 0xffffffffffffffff}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r1, &(0x7f0000000000), 0x10) r2 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r2, &(0x7f0000000000), 0x10) write(r2, 0x0, 0x0) mmap(&(0x7f000077c000/0x2000)=nil, 0x2000, 0x0, 0x810, r0, 0x0) pipe2(&(0x7f0000000000), 0x4) 2.440401256s ago: executing program 3 (id=2083): sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b", 0x50, 0x8, 0x0, 0x0) (async, rerun: 64) r0 = socket(0x2, 0x1, 0x0) (rerun: 64) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) shutdown(r0, 0x1) r3 = dup(r2) (async) mkdir(&(0x7f0000000300)='./file1\x00', 0x0) (async, rerun: 64) chroot(&(0x7f0000000240)='./file1\x00') (async, rerun: 64) r4 = socket(0x2, 0x1, 0x0) setsockopt(r4, 0x6, 0x10, 0x0, 0x0) (async) unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00') (async) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2f2, 0x0) recvmmsg(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000240)=""/90, 0x5a}], 0x3, 0x0}, 0x1}, 0x10, 0x0, 0x0) (async) r5 = dup2(r1, r3) (async) execve(0x0, 0x0, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x0}, 0x8) (async) r6 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) (async, rerun: 32) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (rerun: 32) preadv(r7, &(0x7f0000000480)=[{&(0x7f0000000640)=""/152, 0x98}], 0x1000000000000006, 0x6) (async) sysctl$net_inet6_ip6(&(0x7f0000001240)={0x4, 0x18, 0x29, 0x35}, 0x4, 0x0, 0x0, &(0x7f00000013c0), 0x0) accept$unix(r5, 0x0, &(0x7f00000000c0)) 2.392115287s ago: executing program 3 (id=2086): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) (async) kevent(0xffffffffffffffff, 0x0, 0x138, 0x0, 0xffffffff, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0xfffffffe, 0x7, 0x4, 0x71008}, {0x7, 0x4, 0xd, 0xfffffff9}, {0x8, 0x8000b86, 0xffffbf7d, 0x9}, {0x1002, 0x8800, 0x7}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0x6, 0xd8, 0x99}, {0xcdf, 0x1, 0x200004f8, 0xb}, {0x6, 0x180b, 0x14, 0xb}, {0x8, 0x82, 0x50, 0x9}, {0x4, 0x3, 0xd1b, 0x88}, {0x1e0, 0x10001, 0xc, 0x3}, {0x7ff, 0xf, 0x9, 0x5}, {0xb8c, 0xc3a, 0x6, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x7, 0x6, 0x5}, {0xfffffffd, 0x2000009, 0x40004, 0x30005}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0504417, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) setreuid(0xee00, 0x0) (async) r2 = getuid() setreuid(0x0, r2) (async) r3 = kqueue() ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) kevent(r3, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) (async) r4 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r4, 0x80206919, &(0x7f00000001c0)) r5 = socket$inet(0x2, 0x8003, 0x0) shutdown(r5, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, @multicast2}, @icmp=@echo={0x8, 0x0, 0x0, 0x0, 0x100}}}}}) (async) ioctl$TIOCSETA(r0, 0xc0284457, &(0x7f0000000340)={0x6, 0x2, 0x8000, 0x5, "978600000000000000010000f0ff0f00", 0x2, 0x80004}) (async) openat(r0, &(0x7f0000000000)='./file0\x00', 0x240, 0x104) 2.39186738s ago: executing program 6 (id=2087): socket(0x18, 0x2, 0x0) (async) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x9810, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @rand_addr="00fe00feffffff0300", @mcast2, {[], @udp={{0x0, 0x2, 0x8}}}}}}}) accept(r0, &(0x7f0000000080)=@un=@file={0x0, ""/71}, &(0x7f0000000000)=0x49) setsockopt(r0, 0x1000000029, 0x9, 0x0, 0x0) (async) setsockopt(r0, 0x1000000029, 0x9, 0x0, 0x0) socket(0x1, 0x3, 0x8) 2.38866752s ago: executing program 3 (id=2089): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000000)="ea000001", 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x10, 0x1001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x6a, 0x0) r2 = msgget$private(0x0, 0x200) msgsnd(r2, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00('], 0x48, 0xf8f45ad47d2d40ee}, 0x404) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close(r1) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) unveil(0x0, &(0x7f00000000c0)='r\x00') mknod(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x6380) sysctl$hw(&(0x7f00000002c0)={0x6, 0x2}, 0x2, &(0x7f0000000240), 0x0, 0x0, 0x0) r4 = semget(0x2, 0x1, 0x19a) semctl$GETALL(r4, 0x0, 0x6, &(0x7f00000004c0)=""/152) open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xffffffff, 0xfffffffc, 0x3, 0xffffff80, "0120002d29497f07af80d6df356bbb612c0800", 0x3, 0x3}) bind$unix(r0, &(0x7f0000000140)=@file={0x0, './bus\x00'}, 0x8) sysctl$kern(&(0x7f0000000040)={0x1, 0x2c}, 0x3, &(0x7f0000000180)="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", &(0x7f0000000080)=0xaa, &(0x7f00000007c0)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be3894fd3229fe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e45570700000080000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d8012d63631b2fbedef9d152fa0609c5a47380657b90f7ad4a8987a947d8f2ca5defd3b7f83aacecee70cce8eb3935b0033196d24c5dd4bf604c03185ed97e16587ddcfaf72b4d8d5b903ee", 0xffffff33) 2.298789463s ago: executing program 6 (id=2091): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) r0 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shmget$private(0x0, 0x1000, 0x14, &(0x7f0000ffe000/0x1000)=nil) semop(0x0, &(0x7f00000001c0)=[{0x1, 0x2, 0x1000}], 0x1) poll(&(0x7f0000000200)=[{r0, 0x2}, {r2, 0x4}, {r0, 0x20}], 0x3, 0x9) sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, &(0x7f00000000c0)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af7e54a8341f3be673a174c3a12223a171ff2ab99d0e0d43f0a6c3948f11658e876ac2126614dcd00fdfe76f1ace1f77da0c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e491010010791840000000000000000081131a6f0b680f72f2b0d9a19e570400"/151, &(0x7f0000000180)=0x97, &(0x7f00000001c0), 0x4) close(r1) fchown(r1, 0x0, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/136, 0x88}], 0x1) 2.295430231s ago: executing program 1 (id=2092): setrlimit(0x1, &(0x7f0000000000)={0x7, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) fsync(r0) mknod(&(0x7f0000000080)='./file0\x00', 0x1, 0x10001) close(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0xfffffffe) 2.295014972s ago: executing program 0 (id=1713): r0 = kqueue() r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x20180, 0x9) (async) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20180, 0x9) openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r3 = openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = dup(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x10) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x10) kevent(r0, &(0x7f00000000c0)=[{{r1}, 0xfffffffffffffffc, 0xac, 0x4, 0x0, 0x5}, {{r2}, 0xffffffffffffffff, 0x19, 0x2, 0x5, 0x6}, {{r3}, 0xfffffffffffffffd, 0x2, 0x8, 0x8, 0x1}, {{r4}, 0xfffffffffffffff9, 0x10, 0x40, 0x7fffffff, 0xff}, {{0xffffffffffffff9c}, 0xfffffffffffffffd, 0x10, 0x2, 0x1, 0x6}], 0x59a8a136, &(0x7f00000001c0)=[{{r5}, 0xfffffffffffffffd, 0x20, 0x40000000, 0x7f, 0x3ff}], 0x6, &(0x7f0000000200)={0x5, 0x5}) (async) kevent(r0, &(0x7f00000000c0)=[{{r1}, 0xfffffffffffffffc, 0xac, 0x4, 0x0, 0x5}, {{r2}, 0xffffffffffffffff, 0x19, 0x2, 0x5, 0x6}, {{r3}, 0xfffffffffffffffd, 0x2, 0x8, 0x8, 0x1}, {{r4}, 0xfffffffffffffff9, 0x10, 0x40, 0x7fffffff, 0xff}, {{0xffffffffffffff9c}, 0xfffffffffffffffd, 0x10, 0x2, 0x1, 0x6}], 0x59a8a136, &(0x7f00000001c0)=[{{r5}, 0xfffffffffffffffd, 0x20, 0x40000000, 0x7f, 0x3ff}], 0x6, &(0x7f0000000200)={0x5, 0x5}) getsockname$inet(r5, &(0x7f0000000240), &(0x7f0000000280)=0xc) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) close(0xffffffffffffff9c) sendto(r5, &(0x7f00000002c0)="d4f352138bfa377d8ea1a20db00b0b525da37f86b954f16a30e5d7e6c6", 0x1d, 0x1, &(0x7f0000000300)=@un=@abs={0x1, 0x0, 0x3}, 0x8) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000340)={0x1, 0x4}) (async) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000340)={0x1, 0x4}) acct(&(0x7f0000000380)='./file0\x00') utimensat(r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x0, 0xed3}, {0x8, 0x3}}, 0x0) (async) utimensat(r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x0, 0xed3}, {0x8, 0x3}}, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) r6 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$DIOCMAP(r6, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r2, 0x2}) faccessat(r5, &(0x7f0000000500)='./file0\x00', 0x20, 0x1) r7 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) ioctl$WSDISPLAYIO_ADDSCREEN(r7, 0x80245753, &(0x7f0000000580)={0x6, './file1\x00', './file0\x00'}) ioctl$VT_GETSTATE(r6, 0x40067664, &(0x7f00000005c0)) (async) ioctl$VT_GETSTATE(r6, 0x40067664, &(0x7f00000005c0)) r8 = openat(r4, &(0x7f0000000600)='./file1\x00', 0x10000, 0x20) preadv(r8, &(0x7f0000000740)=[{&(0x7f0000000640)=""/193, 0xc1}], 0x1, 0x1) ioctl$WSKBDIO_GETDEFAULTBELL(0xffffffffffffffff, 0x40105706, &(0x7f0000000780)) (async) ioctl$WSKBDIO_GETDEFAULTBELL(0xffffffffffffffff, 0x40105706, &(0x7f0000000780)) getpid() (async) r9 = getpid() ktrace(&(0x7f00000007c0)='./file1\x00', 0x1, 0x122, r9) syz_extract_tcp_res$synack(&(0x7f0000000800)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000840)={0x41424344, 0x41424344}, 0x3, 0x4f6) syz_emit_ethernet(0x173, &(0x7f0000000880)={@broadcast, @local, [{[], {0x8100, 0x2, 0x1, 0x2}}], {@ipv6={0x86dd, {0x5, 0x6, "fe2499", 0x139, 0x89, 0x3, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0xc4, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3}]}, @fragment={0x61, 0x0, 0xd, 0x1, 0x0, 0x1e, 0x65}, @hopopts={0x2, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0xd2e}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x2}]}], @tcp={{0x1, 0x1, r10, r11, 0x1, 0x0, 0x11, 0x4, 0x0, 0x0, 0x0, {[@nop, @sack={0x5, 0x16, [0x3, 0x4, 0x9, 0x1, 0xf]}, @mss={0x2, 0x4, 0x5}, @generic={0x4, 0x9, "d8d80230892385"}, @eol, @timestamp={0x8, 0xa, 0x9, 0x10001}]}}, {"9d0c0cd01153f49dbddb02b82ad7341999c08a55fdd4e81b45706963ceb351acaad8dfdb94b3e304602ce65ff262ab7245cf532939268c04d375ebf136eec5c22cef2b49d15da6910e27453dbeeb9ce4216d5a5ed40a88605e7bb868b2c6f1cb3f491d59a0da333bf4bda787953f56b572144343d06a4e93e9018eb0875a4267ad08820fa9b6003b4c0dc510f9646700a3f99eee825123eb63e79827162fb3025919c63e7e6c8779de7139b8cd77bbdf618e4e7c1a1c443ad0af9c8e83"}}}}}}}) bind$unix(r8, &(0x7f0000000a00)=@abs={0x1, 0x0, 0x3}, 0x8) (async) bind$unix(r8, &(0x7f0000000a00)=@abs={0x1, 0x0, 0x3}, 0x8) 2.294896376s ago: executing program 1 (id=2093): setrlimit(0x4, &(0x7f0000000980)={0x7, 0x51}) r0 = syz_open_pts() kqueue() r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) close(r1) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5201) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x24, &(0x7f0000000000), 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x60) syz_open_pts() chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000400)=[{&(0x7f00000003c0)="b1", 0x1}], 0x1) write(r3, &(0x7f0000000440)="c24f", 0x2) r4 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r4, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) sysctl$kern(&(0x7f0000000080)={0x1, 0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x5) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) select(0x40, &(0x7f0000000300)={0x7, 0x5, 0x2, 0xbf, 0xa, 0x10000, 0x9, 0x101}, &(0x7f0000000340)={0x1, 0x4000000000000000, 0x2, 0x5, 0x8, 0x7c, 0x30886671, 0x3485}, &(0x7f0000000380)={0x9, 0x2, 0xffff, 0x5, 0x2, 0x5, 0xb682, 0xded}, 0x0) write(r0, 0x0, 0x0) getrlimit(0x0, &(0x7f0000000000)) poll(&(0x7f0000000140)=[{r5, 0x2}], 0x1, 0x5) 2.277400612s ago: executing program 5 (id=2095): r0 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) fcntl$lock(r0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x100000001}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x3b5, 0x1000381210089}) r2 = getpgrp() ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x500, r2) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) 2.033687431s ago: executing program 5 (id=2096): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000340)={0x5, 0x0, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x3effd}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f00000000c0)={0x1, 0x81, 0x8d3d, 0x5, "d6d63303a3c0b65c62b8e5c7d8f59d64122c2097", 0x6, 0x400}) syz_open_pts() open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) unveil(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='x\x00') unveil(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='r\x00') ioctl$TIOCFLUSH(0xffffffffffffffff, 0x80047410, &(0x7f0000000780)=0x7) 2.033184837s ago: executing program 1 (id=2097): msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x22, 0x4}, 0x1, 0x200000000006a, 0x0, 0xffffffffffffffff, 0x3, 0x40, 0x2, 0x72cb}) socket(0x18, 0x1, 0x0) 388.847763ms ago: executing program 3 (id=2098): r0 = syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, 0x0) (async) ioctl$TIOCSTAT(r0, 0x20007465, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x9) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0xa0ca, 0x3ff, 0xad2f, 0xdba, "a686bb99663dc953e7dfb309ce5de7ecada06e2e", 0xfffff2fb}) (async) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0xa0ca, 0x3ff, 0xad2f, 0xdba, "a686bb99663dc953e7dfb309ce5de7ecada06e2e", 0xfffff2fb}) close(r0) execve(0x0, 0x0, 0x0) 388.281064ms ago: executing program 1 (id=2099): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x7fffffff, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x80, 0x6, 0xc, 0xdf60, 0xfffffffffffffffd, 0x0, 0x2f01, 0x93, 0x3, 0x0, 0x200000000002, 0xd, 0x5, 0xffffffffffffffff, 0x400000000100], [0xfffffffffffffffa, 0xf0, 0xfffefffffffffffd, 0x21000001, 0x5e, 0x7b98, 0x8000000000000202, 0x0, 0x0, 0x1], [0x100000001, 0x8000, 0x4, 0x0, 0xb, 0x10fff, 0xffffffff00000000], [0x8, 0x10001, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x2000007d0d}, {0xfffc, 0x2a, 0x5}, {0x101, 0x6, 0x3, 0x80}, {0x3, 0x4, 0x5, 0xfffffffffffffffc}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000800000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0xfd, 0x100, 0x2400000}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x8, 0x6d5, 0x6}}}) r0 = kqueue() kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) 387.564268ms ago: executing program 2 (id=2100): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x12b) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x9, 0x101, 0x4, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x8, 0x8, 0x9}, {0x8, 0xd86, 0x6d, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x5}, {0x2, 0x6, 0x1003, 0x99}, {0xce1, 0xffffffff, 0x6, 0x3}, {0x6, 0xfff, 0x80000014, 0x8}, {0x6, 0x1082, 0x5, 0x9}, {0x14, 0x7fffffff, 0xd1b, 0x88}, {0x1ce, 0xffff, 0x9, 0x3}, {0x7ff, 0x9, 0x8, 0x9}, {0xb8c, 0x4, 0x7, 0x4}, {0x29a71717, 0xfffffffa, 0x983, 0x6}, {0xc, 0x7, 0x5}, {0x0, 0x1, 0x1002, 0x30001}]}) ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, &(0x7f00000002c0)={0x4, &(0x7f0000000240)=[{0x0, 0x7d, 0x8, 0x2, 0x4b97}, {0xfff7, 0xb5f8, 0x6, 0xc499, 0x1}, {0xb903, 0xd7, 0xfff9, 0x6, 0x324}, {0x3, 0x7c, 0x4, 0x7, 0x8001}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$VNDIOCSET(r1, 0x80044403, 0x0) ioctl$WSKBDIO_SETENCODING(r0, 0x80045710, &(0x7f0000000040)=0x100) nanosleep(&(0x7f0000000000)={0x8000000000007ffe, 0x2}, 0x0) 387.070363ms ago: executing program 4 (id=2101): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d97b2d6ad642d5e3ec452b76b1f8983c810b573c084d450f6ced4fb3358386e01088d51390997086a95a82aaa84497924943d5367cded77cd1a04e6e136cea4d05dc202ae5b60c4c3145b18870fb511783b48450ef295f349badc15e1a6dd0a4bbbec509b554b3d7b67f51b0a180b4250cd97ad9b2a06fe01fbae5b2fb2461ae4e8c99dbf6655cc751253c966cbc133381cc1b2a31e3354517bd15f7c3ad5e6566dc5ef4fe6cb4ca2273f89b85d4929178585a6dace0d2ec99002733ba5a3b55e661d289a60026dddd3ac43329245989a83a7edb90faeff1cb06ed000000000000", 0xe1}], 0x1) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) sysctl$kern(&(0x7f00000000c0)={0x1, 0x53}, 0x2, &(0x7f0000000180)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082f9740f62f49ead69c9b3b32c84f8d320018983cea251ec1a2350c127dcdf7c69e1f0e8247ea3b5df5b16134f032c75405a000048044f2c0495f1496131b46051a74f58c9fcbec9fd0312aa24f63eb91489a05c8cf36b67310f648b950e7e7ca075ed83ed454a949c585f359084bd96d93a33c82ae1124227ed69ab8942a9ab7e", &(0x7f0000000080)=0xfeba, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$hw(&(0x7f00000000c0)={0x6, 0xb}, 0x2, &(0x7f0000000040)="12480eecf63630af008e9932817b8ffbb8e7575f91decd0bac69700e4c88e258", &(0x7f0000000080)=0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r1, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1}, {0x0, 0x1}, {0x0, 0x3}, {}, {}, {}, {}, {0x1, 0xffffffff}, {}, {}, {0x0, 0x1ff}, {}, {0x0, 0x1000}, {0x3}, {}, {0x2, 0x3}, {0x3}, {}, {0x0, 0x7ff}, {0x5}, {}, {0x3}, {0x0, 0x400}, {}, {0x2}, {0x0, 0xfffffffd}, {}, {0x2}, {}, {0x1, 0xa}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x2412df7) r2 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x19, 0x0) ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, &(0x7f0000000140)=0x2) syz_emit_ethernet(0x138, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIONBIO(0xffffffffffffffff, 0xc0307004, &(0x7f0000000140)=0x1) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) ftruncate(r4, 0x8531) recvfrom$unix(r4, &(0x7f0000000240)=""/5, 0x5, 0x800, &(0x7f0000000280)=@file={0x1, './bus\x00'}, 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000002f40)="79ed", 0x2}], 0x1) 386.506332ms ago: executing program 5 (id=2102): socket$inet(0x2, 0x1, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x109e, 0x19, 0x0, 0x3}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) 263.355518ms ago: executing program 6 (id=2103): writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) r0 = getuid() setreuid(0x0, r0) syz_emit_ethernet(0x138, &(0x7f00000000c0)=ANY=[@ANYRESHEX]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x3, 0x1) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000080)="0315f1d8dec5a317a93546ba", 0xc) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1) poll(&(0x7f0000000ac0), 0x0, 0x887e) execve(0x0, 0x0, 0x0) munmap(&(0x7f000069e000/0x3000)=nil, 0x3000) connect$unix(r1, &(0x7f0000000000), 0x10) sendto(r1, &(0x7f00000005c0)="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", 0x1000, 0xfa41e7a762e534d3, &(0x7f0000000040)=@in6={0x18, 0x1, 0xdb, 0x8}, 0xc) sendto(r1, &(0x7f0000000380)="98edc1cf9d242ff3974da44a7d14135bd0", 0x11, 0x0, 0x0, 0x0) 257.201439ms ago: executing program 7 (id=2104): r0 = socket(0x11, 0x3, 0x0) sendmsg$unix(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="cac73c", 0x3}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000100)={&(0x7f0000000180)={&(0x7f0000000480)=@un=@file={0x0, ""/520}, 0x20a, 0x0, 0x0, 0x0, 0x44}}, 0x10, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f00000005c0)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x6, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x0, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x20, 0x5, 0x0, 0x6}}}}}}) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@broadcast, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x17, 0x2c, 0x65, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, {[@timestamp={0x44, 0x4, 0x3, 0x1, 0x6}]}}, @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4, 0x0, 0x43}}}}}}) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) ktrace(&(0x7f0000000180)='./file0\x00', 0x1, 0x51d73188af82c397, 0xffffffffffffffff) setitimer(0x2, 0x0, &(0x7f0000000000)) 256.228998ms ago: executing program 5 (id=2105): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x81, 0x69) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x4, 0x101, 0x80000001, 0x81b0, 0x6, 0x10, [{0x0, 0x2890, 0x7, 0x71002}, {0x7ff, 0x80000001, 0x8, 0xfffffff9}, {0x104, 0xf88, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8004, 0xb}, {0x80000401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9c}, {0xce1, 0xffffffff, 0x4f4, 0x10000}, {0x6, 0x803, 0x14, 0x5}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1001, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0xa, 0xc}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x7, 0x6}, {0x1000c, 0x5, 0x5, 0x4}, {0x9, 0x1, 0xfbf, 0x30004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) (async) sysctl$vm(&(0x7f0000000000)={0x2, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$hw(&(0x7f0000000000), 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) (async) r1 = socket(0x18, 0x3, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x1, 0x0, 0x10, 0x3}, 0xc) (async) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75) 109.849919ms ago: executing program 6 (id=2106): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0xbb) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fe, 0x117, 0x200000b, 0x101, 0x80000001, 0x7, 0x80, 0x10, [{0x0, 0x17, 0x0, 0x71000}, {0x5, 0x6, 0x8, 0xfffffff9}, {0xa, 0xf86, 0xfffffffc, 0x3}, {0x1, 0x800, 0x8007}, {0x401, 0x40200726, 0x0, 0x7}, {0x2, 0x55d, 0x5, 0x7ff}, {0xce3, 0xffffffff, 0x4f8, 0x6e}, {0x100006, 0x803, 0x9, 0xa}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x7ffe, 0xd1b}, {0x1, 0x10001, 0x3ba2, 0x6}, {0x7ff, 0x9, 0x40008, 0x9}, {0xb8c, 0x4, 0x1000006}, {0x29a71717, 0xfffffffa, 0xfff, 0x406}, {0xc, 0x7, 0xffff215d}, {0x0, 0x21, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x400000000, 0x0}) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ftruncate(r2, 0x20008002) r3 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x2) preadv(r3, &(0x7f0000000880)=[{&(0x7f0000000240)=""/77, 0x4d}], 0x1, 0x8000002) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffb, 0x0}) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0xffffffff, 0xffffffff, 0xfff7, 0x0, 0x802, 0x22, 0x2, 0x0, 0x0, 0x2, 0xff}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = syz_open_pts() ioctl$TIOCCONS(r5, 0x80047462, &(0x7f0000000000)=0x5) ioctl$TIOCGTSTAMP(r4, 0x4010745b, &(0x7f0000000080)) 107.344695ms ago: executing program 4 (id=2107): mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f000004b000/0x1000)=nil, 0x1000, 0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xffffffffffbffffc, 0x7cee, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x3, 0x0) rename(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='./bus\x00') bind(r1, &(0x7f0000000000), 0x10) r2 = socket(0x2, 0x3, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, './bus\x00'}, 0x8) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VNDIOCSET(r0, 0x80046471, &(0x7f0000000040)={0x0, 0x0, 0x0}) 107.025118ms ago: executing program 1 (id=2108): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x8a, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) (async) r2 = socket(0x2, 0x2, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) r4 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCMAP(r4, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r3, 0x2}) (async) close(r3) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0) (async) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) 103.769645ms ago: executing program 4 (id=2109): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x7ffe}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x4, &(0x7f0000000040)='\x00{lO', 0x4) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 34.518713ms ago: executing program 7 (id=2110): ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x10000006, 0x5, 0x8, 0xd5, "00000000000000000000187c89aa00", 0x3, 0x2}) (async) mquery(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6e7550cb152ad8b1, 0x10, 0xffffffffffffffff, 0xfff) (async) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x2000007, 0x3, 0x3ff, 0x80000001, 0x38e7, 0x10, [{0x0, 0x3, 0x4, 0xa25}, {0xc5f, 0x7, 0x7, 0x6c2}, {0x8, 0x8, 0x10, 0x9}, {0x80000000, 0x800, 0x3, 0x5}, {0x401, 0x7ff, 0x1082804, 0x4d8a}, {0x2, 0x86, 0x2, 0xb4}, {0x4, 0xd16f, 0x4f8, 0x1}, {0x3, 0x803, 0xfffffffe, 0xb}, {0x2, 0x9, 0x6, 0x9}, {0x4, 0x90, 0x8, 0x88}, {0x1c7, 0x40000005, 0x2, 0x3}, {0x100, 0x6, 0x7, 0x9}, {0xb8c, 0x4, 0x1, 0x2c4}, {0x29a7171a, 0xfffffefa, 0x1, 0xa}, {0x1e, 0x6, 0xfffffff9}, {0x2, 0x80000000, 0x1003, 0xc}]}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x12b) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) sysctl$hw(&(0x7f00000000c0)={0x6, 0x12}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000001c0), &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async, rerun: 32) r2 = socket$inet(0x2, 0x3, 0x81) socket$inet(0x2, 0x2, 0x0) (async, rerun: 32) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) (async, rerun: 32) ioctl$VMM_IOC_INTR(r0, 0xca605601, &(0x7f0000000040)={0x5, 0x0, 0xf35f}) 32.366535ms ago: executing program 5 (id=2111): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xffffffffffffffff, [{&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0xe7d}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00005b1000/0x3000)=nil, 0xffffffffffffff7e}, {&(0x7f000017c000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x81}, {&(0x7f0000170000/0x4000)=nil, &(0x7f00004ac000/0x1000)=nil, 0xfffffffffffffff9}, {&(0x7f0000443000/0x2000)=nil, &(0x7f0000188000/0x2000)=nil, 0x3fe}, {&(0x7f000060b000/0x2000)=nil, &(0x7f00000e9000/0x2000)=nil, 0xe2e1}, {&(0x7f00001d7000/0x2000)=nil, &(0x7f00000bd000/0x1000)=nil, 0x7e}, {&(0x7f000070a000/0x2000)=nil, &(0x7f0000368000/0xb000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000a3d000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f000069e000/0x2000)=nil, &(0x7f00003f2000/0x2000)=nil, 0x2}, {&(0x7f0000002000/0x1000)=nil, &(0x7f0000553000/0x1000)=nil, 0x80000000000005a9}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00003d5000/0x2000)=nil, 0xb7}, {&(0x7f0000769000/0x1000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x1000006}, {&(0x7f000006a000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xffffffffbffffff9}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2deb}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x7}], './bus\x00', 0x400004}) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x6, 0x2, 0xb, 0x4, "210d00000008000f010000000000bd8a00", 0x5, 0x100005}) 12.447944ms ago: executing program 0 (id=1713): r0 = kqueue() r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x20180, 0x9) (async) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20180, 0x9) openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r3 = openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = dup(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x10) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x10) kevent(r0, &(0x7f00000000c0)=[{{r1}, 0xfffffffffffffffc, 0xac, 0x4, 0x0, 0x5}, {{r2}, 0xffffffffffffffff, 0x19, 0x2, 0x5, 0x6}, {{r3}, 0xfffffffffffffffd, 0x2, 0x8, 0x8, 0x1}, {{r4}, 0xfffffffffffffff9, 0x10, 0x40, 0x7fffffff, 0xff}, {{0xffffffffffffff9c}, 0xfffffffffffffffd, 0x10, 0x2, 0x1, 0x6}], 0x59a8a136, &(0x7f00000001c0)=[{{r5}, 0xfffffffffffffffd, 0x20, 0x40000000, 0x7f, 0x3ff}], 0x6, &(0x7f0000000200)={0x5, 0x5}) (async) kevent(r0, &(0x7f00000000c0)=[{{r1}, 0xfffffffffffffffc, 0xac, 0x4, 0x0, 0x5}, {{r2}, 0xffffffffffffffff, 0x19, 0x2, 0x5, 0x6}, {{r3}, 0xfffffffffffffffd, 0x2, 0x8, 0x8, 0x1}, {{r4}, 0xfffffffffffffff9, 0x10, 0x40, 0x7fffffff, 0xff}, {{0xffffffffffffff9c}, 0xfffffffffffffffd, 0x10, 0x2, 0x1, 0x6}], 0x59a8a136, &(0x7f00000001c0)=[{{r5}, 0xfffffffffffffffd, 0x20, 0x40000000, 0x7f, 0x3ff}], 0x6, &(0x7f0000000200)={0x5, 0x5}) getsockname$inet(r5, &(0x7f0000000240), &(0x7f0000000280)=0xc) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) close(0xffffffffffffff9c) sendto(r5, &(0x7f00000002c0)="d4f352138bfa377d8ea1a20db00b0b525da37f86b954f16a30e5d7e6c6", 0x1d, 0x1, &(0x7f0000000300)=@un=@abs={0x1, 0x0, 0x3}, 0x8) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000340)={0x1, 0x4}) (async) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000340)={0x1, 0x4}) acct(&(0x7f0000000380)='./file0\x00') utimensat(r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x0, 0xed3}, {0x8, 0x3}}, 0x0) (async) utimensat(r4, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x0, 0xed3}, {0x8, 0x3}}, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) r6 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$DIOCMAP(r6, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r2, 0x2}) faccessat(r5, &(0x7f0000000500)='./file0\x00', 0x20, 0x1) r7 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) ioctl$WSDISPLAYIO_ADDSCREEN(r7, 0x80245753, &(0x7f0000000580)={0x6, './file1\x00', './file0\x00'}) ioctl$VT_GETSTATE(r6, 0x40067664, &(0x7f00000005c0)) (async) ioctl$VT_GETSTATE(r6, 0x40067664, &(0x7f00000005c0)) r8 = openat(r4, &(0x7f0000000600)='./file1\x00', 0x10000, 0x20) preadv(r8, &(0x7f0000000740)=[{&(0x7f0000000640)=""/193, 0xc1}], 0x1, 0x1) ioctl$WSKBDIO_GETDEFAULTBELL(0xffffffffffffffff, 0x40105706, &(0x7f0000000780)) (async) ioctl$WSKBDIO_GETDEFAULTBELL(0xffffffffffffffff, 0x40105706, &(0x7f0000000780)) getpid() (async) r9 = getpid() ktrace(&(0x7f00000007c0)='./file1\x00', 0x1, 0x122, r9) syz_extract_tcp_res$synack(&(0x7f0000000800)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000840)={0x41424344, 0x41424344}, 0x3, 0x4f6) syz_emit_ethernet(0x173, &(0x7f0000000880)={@broadcast, @local, [{[], {0x8100, 0x2, 0x1, 0x2}}], {@ipv6={0x86dd, {0x5, 0x6, "fe2499", 0x139, 0x89, 0x3, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0xc4, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3}]}, @fragment={0x61, 0x0, 0xd, 0x1, 0x0, 0x1e, 0x65}, @hopopts={0x2, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0xd2e}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x2}]}], @tcp={{0x1, 0x1, r10, r11, 0x1, 0x0, 0x11, 0x4, 0x0, 0x0, 0x0, {[@nop, @sack={0x5, 0x16, [0x3, 0x4, 0x9, 0x1, 0xf]}, @mss={0x2, 0x4, 0x5}, @generic={0x4, 0x9, "d8d80230892385"}, @eol, @timestamp={0x8, 0xa, 0x9, 0x10001}]}}, {"9d0c0cd01153f49dbddb02b82ad7341999c08a55fdd4e81b45706963ceb351acaad8dfdb94b3e304602ce65ff262ab7245cf532939268c04d375ebf136eec5c22cef2b49d15da6910e27453dbeeb9ce4216d5a5ed40a88605e7bb868b2c6f1cb3f491d59a0da333bf4bda787953f56b572144343d06a4e93e9018eb0875a4267ad08820fa9b6003b4c0dc510f9646700a3f99eee825123eb63e79827162fb3025919c63e7e6c8779de7139b8cd77bbdf618e4e7c1a1c443ad0af9c8e83"}}}}}}}) bind$unix(r8, &(0x7f0000000a00)=@abs={0x1, 0x0, 0x3}, 0x8) (async) bind$unix(r8, &(0x7f0000000a00)=@abs={0x1, 0x0, 0x3}, 0x8) 12.295141ms ago: executing program 6 (id=2112): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x44, 0x5, 0x26, 0x6442}, {0x6, 0x11, 0x0, 0xfffff000}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) 11.244047ms ago: executing program 7 (id=2113): mmap(&(0x7f00002f2000/0xf000)=nil, 0xf000, 0x4, 0x4011, 0xffffffffffffff9c, 0x1) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x1}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4) getppid() pipe(&(0x7f00000001c0)={0xffffffffffffffff}) fcntl$getown(r0, 0x5) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000400)='./bus\x00', 0x8000, 0x0}) mmap(&(0x7f00002f2000/0xf000)=nil, 0xf000, 0x4, 0x4011, 0xffffffffffffff9c, 0x1) (async) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) (async) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x1}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4) (async) getppid() (async) pipe(&(0x7f00000001c0)) (async) fcntl$getown(r0, 0x5) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) (async) openat$vnd(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) (async) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000400)='./bus\x00', 0x8000, 0x0}) (async) 7.49362ms ago: executing program 5 (id=2114): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x28, 0x8, 0x75, 0x40, 0x10, [{0x5, 0x0, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x0, 0x8001}, {0x4, 0xe2, 0x7, 0x100}, {0x3, 0x40b, 0xf15, 0x2}, {0x9cb, 0xfffc, 0xc, 0x9}, {0x4, 0x800, 0x3, 0x9}, {0x9, 0x9, 0x28000, 0xb7}, {0x9, 0x1, 0x6, 0x7fff}, {0x3, 0xfffffffc, 0x8, 0x28bfd}, {0x0, 0x2, 0x8, 0x7}, {0x3, 0xc7cb, 0x7ffffe, 0xa67}, {0x401, 0x10, 0x9, 0xa2}, {0x3, 0x1006e2, 0x2, 0x6f5fc48b}, {0x3, 0x101, 0x8, 0x9}, {0x9be2, 0x2, 0x4, 0x69}]}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) (async) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 722.146µs ago: executing program 1 (id=2115): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) getpgrp() setsockopt$sock_int(r1, 0xffff, 0x200, &(0x7f00000000c0)=0x22, 0x4) (async) ioctl$FIOGETOWN(r0, 0x4004667b, &(0x7f0000000140)) (async) socket$inet(0x2, 0x7, 0x8) (async, rerun: 32) r2 = socket(0x24, 0x2, 0x0) (rerun: 32) setsockopt$sock_int(r2, 0xffff, 0x10, &(0x7f0000000000)=0x2, 0x4) (async) getpeername$inet(r2, &(0x7f0000000180), &(0x7f00000001c0)=0xc) (async) sendmmsg(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6}, 0x10, 0x4) 0s ago: executing program 6 (id=2116): sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) r0 = syz_open_pts() ioctl$TIOCDRAIN(r0, 0x2000745e) sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xe, 0x0, 0x37) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.70' (ED25519) to the list of known hosts. login: ¹j¼õ¬|ÿ ž¨E1\…: ²pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 uvn_flush: obj=0xfffffd80619198a0, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! malloc(): allocation too large, type = 29, size = 16796513700 malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error load: 5.91 not a controlling terminal uvn_flush: obj=0xfffffd8077b19948, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 malloc(): allocation too large, type = 29, size = 16796513700 malloc(): allocation too large, type = 29, size = 16796513700 pppx: unable to set addresses for pppx1, error=17 malloc(): allocation too large, type = 29, size = 16796513700 malloc(): allocation too large, type = 29, size = 16796513700 ¹j¼õ¬|ÿ ž¨E1\…:malloc(): allocation too large, type = 6, size = 150323855360 uvn_flush: obj=0xfffffd805f35dbf8, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! WARNING: thread `nfsio' (75131) exits with status -1 WARNING: thread `nfsio' (243446) exits with status -1 WARNING: thread `nfsio' (221476) exits with status -1 WARNING: thread `nfsio' (455112) exits with status -1 WARNING: thread `nfsio' (491085) exits with status -1 WARNING: thread `nfsio' (68210) exits with status -1 WARNING: thread `nfsio' (300397) exits with status -1 WARNING: thread `nfsio' (87005) exits with status -1 WARNING: thread `nfsio' (113714) exits with status -1 WARNING: thread `nfsio' (328581) exits with status -1 WARNING: thread `nfsio' (256905) exits with status -1 WARNING: thread `nfsio' (144853) exits with status -1 WARNING: thread `nfsio' (412375) exits with status -1 WARNING: thread `nfsio' (102556) exits with status -1 WARNING: thread `nfsio' (455) exits with status -1 WARNING: thread `nfsio' (494207) exits with status -1 WARNING: thread `nfsio' (144727) exits with status -1 WARNING: thread `nfsio' (440586) exits with status -1 WARNING: thread `nfsio' (25500) exits with status -1 WARNING: thread `nfsio' (310412) exits with status -1 WARNING: thread `nfsio' (513343) exits with status -1 WARNING: thread `nfsio' (97300) exits with status -1 WARNING: thread `nfsio' (168021) exits with status -1 malloc(): allocation too large, type = 29, size = 16796513700 malloc(): allocation too large, type = 29, size = 16796513700 uvm_fault(0xfffffd800b0273d0, 0x0, 0, 1) -> e fatal page fault in supervisor mode trap type 6 code 0 rip ffffffff812d5dd8 cs 8 rflags 10207 cr2 0 cpl 0 rsp ffff80003c410b90 gsbase 0xffff8000299edff0 kgsbase 0x0 panic: trap type 6, code=0, pc=ffffffff812d5dd8 Starting stack trace... panic(ffffffff8339e9a8) at panic+0x1d0 kerntrap(ffff80003c410ae0) at kerntrap+0x30b alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dt_ioctl_record_stop(ffff800001558000) at dt_ioctl_record_stop+0x108 dtclose(21e5f,81,2000,ffff800034be6a88) at dtclose+0x109 spec_close(ffff80003c410c90) at spec_close+0x466 VOP_CLOSE(fffffd805d1fad08,81,fffffd80097fb208,ffff800034be6a88) at VOP_CLOSE+0x132 vn_closefile(fffffd8064a4b348,ffff800034be6a88) at vn_closefile+0x12b fdrop(fffffd8064a4b348,ffff800034be6a88) at fdrop+0x121 closef(fffffd8064a4b348,ffff800034be6a88) at closef+0x192 fdfree(ffff800034be6a88) at fdfree+0x116 exit1(ffff800034be6a88,0,0,1) at exit1+0x576 sys_exit(ffff800034be6a88,ffff80003c411000,ffff80003c410f50) at sys_exit+0x1a syscall(ffff80003c411000) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d804e94cd10, count: 242 End of stack trace. WARNING: SPL NOT LOWERED ON TRAP EXIT 4 0 Stopped at proc_trampoline+0xc7: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND *170845 4637 0 0 0x4000000 1 syz-executor 78805 14987 0 0x14000 0x200 0 reaper proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x9444b26c3e0, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd800b0273d0, 0x0, 0, 1) -> e ddb{1}> trace proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x9444b26c3e0, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003a403f20 rbx 0 rdx 0 rcx 0xffff800034be7780 rax 0x2a r8 0xffff80003a403e50 r9 0x1 r10 0x8f08e7fd0fe159ab r11 0xdb1fb61041ef75b5 r12 0 r13 0 r14 0 r15 0 rip 0xffffffff81dae4c7 proc_trampoline+0xc7 cs 0x8 rflags 0x246 rsp 0xffff80003a403ea0 ss 0x10 proc_trampoline+0xc7: movl $0,%gs:0x688 ddb{1}> show proc PROC (syz-executor) tid=170845 pid=4637 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=50, usrpri=50, slppri=16, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800034be67f0,0xffffffff83887c08 process=0xffff80003c4204f0 user=0xffff80003a3fe000, vmspace=0xfffffd806b2f7b90 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 3160 372150 56554 0 2 0 syz-executor 4637 411583 25678 0 2 0 syz-executor 4637 166825 25678 0 2 0x4000000 syz-executor * 4637 170845 25678 0 7 0x4000000 syz-executor 88993 96256 70601 0 2 0 syz-executor 88993 393175 70601 0 3 0x4000080 kqsel syz-executor 26410 523401 13972 0 2 0 syz-executor 26410 357021 13972 0 3 0x4000080 nanoslp syz-executor 98997 81704 52648 0 2 0x2 syz-executor 25678 427375 52648 0 3 0x82 nanoslp syz-executor 14937 422100 0 0 3 0x14280 nfsidl nfsio 13972 449876 52648 0 3 0x82 nanoslp syz-executor 48839 470760 52648 0 3 0x82 nanoslp syz-executor 68518 93004 52648 0 3 0x2 biowait syz-executor 56554 144057 52648 0 3 0x82 nanoslp syz-executor 91182 198803 0 0 3 0x14200 bored sosplice 70601 200491 52648 0 3 0x82 nanoslp syz-executor 52648 107754 35630 0 2 0x2 syz-executor 35630 507812 86938 0 3 0x10008a sigsusp ksh 86938 276681 10107 0 3 0x98 kqread sshd-session 10107 397396 94757 0 3 0x92 kqread sshd-session 69586 83561 1 0 3 0x100083 ttyopn getty 94757 264863 1 0 3 0x88 kqread sshd 84657 72040 27531 74 3 0x1100092 bpf pflogd 27531 387476 1 0 3 0x80 sbwait pflogd 34925 415798 78156 73 3 0x1100090 kqread syslogd 78156 266275 1 0 3 0x100082 sbwait syslogd 15070 60679 1 0 3 0x100080 kqread resolvd 90196 329308 70793 77 3 0x100092 kqread dhcpleased 16831 278705 70793 77 3 0x100092 kqread dhcpleased 70793 329677 1 0 3 0x80 kqread dhcpleased 98730 409661 0 0 3 0x14200 bored smr 60735 81202 0 0 2 0x14200 zerothread 55834 134452 0 0 3 0x14200 aiodoned aiodoned 17696 150450 0 0 3 0x14200 syncer update 79245 212997 0 0 3 0x14200 cleaner cleaner 14987 78805 0 0 7 0x14200 reaper 4389 478317 0 0 3 0x14200 pgdaemon pagedaemon 35580 7779 0 0 3 0x14200 bored viomb 31880 498808 0 0 3 0x40014200 acpi0 acpi0 2808 400595 0 0 3 0x40014200 idle1 19808 247964 0 0 3 0x14200 bored softnet1 36745 41971 0 0 3 0x14200 netlock softnet0 87273 120797 0 0 2 0x40014200 systqmp 9014 336233 0 0 3 0x14200 bored systq 88331 503150 0 0 3 0x14200 tmoslp softclockmp 37985 94322 0 0 3 0x40014200 tmoslp softclock 53474 11983 0 0 3 0x40014200 idle0 1 153022 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 68518 (syz-executor) thread 0xffff800034be7cb0 (93004) Process 14987 (reaper) thread 0xffff8000ffffdc90 (78805) ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10236 11170K 15332K 166960K 14212 0 pcb 17 14K 15K 166960K 533 0 rtable 231 12K 12K 166960K 1016 0 pf 43 19K 82K 166960K 345 0 ifaddr 46 9K 10K 166960K 263 0 ifgroup 64 2K 3K 166960K 400 0 sysctl 4 1K 9K 166960K 62 0 counters 72 37K 38K 166960K 428 0 ioctlops 0 0K 4K 166960K 2107 0 iov 0 0K 28K 166960K 144 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1482 93K 93K 166960K 3695 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 92 0 dirhash 12 2K 3K 166960K 69 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 57K 110K 166960K 2659 0 sigio 0 0K 0K 166960K 109 0 proc 73 115K 180K 166960K 1419 0 subproc 72 4K 4K 166960K 297 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 299 0 in_multi 99 7K 7K 166960K 470 0 ether_multi 1 0K 0K 166960K 26 0 mrt 2 0K 0K 166960K 11 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 97 440K 440K 166960K 97 0 exec 0 0K 1K 166960K 1036 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 3 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 220 176K 193K 166960K 24118 0 UVM aobj 73 6K 6K 166960K 81 0 pinsyscall 41 82K 102K 166960K 4463 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 221 0 NDP 16 0K 2K 166960K 197 0 temp 80 8652K 8748K 166960K 109470 0 kqueue 13 20K 30K 166960K 458 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 421 0 418 6 5 1 3 0 8 0 rtentry 176 368 0 280 5 0 5 5 0 8 0 unpcb 144 2085 0 2066 18 15 3 9 0 8 2 syncache 336 15 0 15 3 3 0 1 0 8 0 tcpqe 32 2 0 2 1 1 0 1 0 8 0 tcpcb 736 813 0 807 17 10 7 7 0 8 6 arp 136 46 0 32 1 0 1 1 0 8 0 inpcb 328 2595 0 2586 27 20 7 13 0 8 5 nd6 144 71 0 53 1 0 1 1 0 8 0 pkpcb 40 16 0 16 5 5 0 1 0 8 0 kcovpl 48 33 0 25 1 0 1 1 0 8 0 mppekey 1024 2 0 2 2 2 0 1 0 8 0 ppxss 1192 134 0 134 1 0 1 1 0 8 1 pppxif 1504 12 0 12 5 5 0 1 0 8 0 pfstscr 40 4 0 3 3 2 1 1 0 8 0 pffrag 232 18 0 9 1 0 1 1 0 482 0 pffrnode 88 15 0 9 1 0 1 1 0 8 0 pffrent 40 43 0 34 1 0 1 1 0 8 0 pfosfp 40 1432 0 1006 5 0 5 5 0 8 0 pfosfpen 112 1432 0 715 21 0 21 21 0 8 0 pfrktable 1344 9 0 9 2 2 0 1 0 8 0 pfanchor 1288 4 0 1 2 1 1 1 0 8 0 pfstitem 24 146 0 77 1 0 1 1 0 8 0 pfstkey 128 152 0 82 3 0 3 3 0 8 0 pfstate 384 148 0 81 8 0 8 8 0 8 0 pfrule 1344 30 0 24 2 1 1 2 0 8 0 rttmr 136 1 0 1 1 1 0 1 0 8 0 art_heap8 4096 4 0 0 4 0 4 4 0 8 0 art_heap4 256 1654 0 1233 40 13 27 28 0 8 0 art_table 40 1658 0 1233 6 1 5 5 0 8 0 art_node 32 365 0 292 1 0 1 1 0 8 0 sysvmsgpl 40 11 0 6 2 1 1 1 0 8 0 semupl 112 2 0 2 2 2 0 1 0 8 0 semapl 112 79 0 69 1 0 1 1 0 8 0 shmpl 112 78 0 8 2 0 2 2 0 8 0 dirhash 1024 55 0 38 3 0 3 3 0 8 0 dino2pl 256 5852 0 4292 98 0 98 98 0 8 0 ffsino 296 5852 0 4292 121 0 121 121 0 8 0 nchpl 144 9063 0 8444 64 39 25 64 0 8 0 rtmask 32 28 0 28 3 3 0 1 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 34445 0 34444 3 2 1 2 0 8 0 percpumem 16 229 0 178 1 0 1 1 0 8 0 pfiaddrpl 120 2 0 2 1 1 0 1 0 8 0 kstatmem 264 266 0 234 4 1 3 3 0 8 0 scsiplug 72 8 0 8 3 3 0 1 0 8 0 scxspl 216 54655 0 54654 24 20 4 8 1 8 3 plimitpl 152 575 0 558 1 0 1 1 0 8 0 sigapl 424 2943 0 2895 9 2 7 8 0 8 0 knotepl 120 882 0 0 26 0 26 26 0 8 0 kqueuepl 224 958 0 948 11 10 1 5 0 8 0 pipepl 344 488 0 460 9 5 4 9 0 8 0 fdescpl 528 2897 0 2867 3 0 3 3 0 8 0 filepl 160 18853 0 18634 31 16 15 18 0 8 1 lockfpl 104 1079 0 1077 3 2 1 2 0 8 0 lockfspl 48 467 0 465 1 0 1 1 0 8 0 sessionpl 144 57 0 48 1 0 1 1 0 8 0 pgrppl 48 118 0 101 1 0 1 1 0 8 0 ucredpl 104 2742 0 2728 1 0 1 1 0 8 0 zombiepl 144 2898 0 2895 1 0 1 1 0 8 0 processpl 1232 2943 0 2895 6 1 5 6 0 8 0 procpl 664 6746 0 6694 8 2 6 8 0 8 0 sosppl 168 14 0 14 4 3 1 1 0 8 1 sockpl 752 5199 0 5168 53 42 11 24 0 8 7 mcl64k 65536 19 0 0 3 0 3 3 0 8 0 mcl16k 16384 7 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 9 0 0 2 0 2 2 0 8 0 mcl4k 4096 126 0 0 15 0 15 15 0 8 0 mcl2k2 2112 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 33 0 0 5 0 5 5 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 1036 0 0 62 0 62 62 0 8 0 bufpl 280 21085 0 14942 439 0 439 439 0 8 0 anonpl 32 14566 0 0 118 0 118 118 0 246 0 amapchunkpl 152 94666 0 94242 44 18 26 35 0 158 6 amappl16 200 8640 0 8612 74 69 5 30 0 8 1 amappl15 192 5 0 5 1 1 0 1 0 8 0 amappl14 184 187 0 173 1 0 1 1 0 8 0 amappl13 176 6 0 6 3 3 0 1 0 8 0 amappl12 168 3962 0 3933 4 2 2 3 0 8 0 amappl11 160 76 0 62 1 0 1 1 0 8 0 amappl10 152 5 0 4 2 1 1 1 0 8 0 amappl9 144 251 0 251 1 1 0 1 0 8 0 amappl8 136 25 0 22 1 0 1 1 0 8 0 amappl7 128 174 0 161 1 0 1 1 0 8 0 amappl6 120 445 0 441 1 0 1 1 0 8 0 amappl5 112 223 0 214 1 0 1 1 0 8 0 amappl4 104 387 0 367 1 0 1 1 0 8 0 amappl3 96 14644 0 14559 4 1 3 4 0 8 0 amappl2 88 3329 0 3252 2 0 2 2 0 8 0 amappl1 80 22506 0 21906 15 0 15 15 0 8 0 amappl 88 22583 0 22438 5 0 5 5 0 92 0 dma65536 65536 1 0 1 1 0 1 1 0 8 1 dma32768 32768 1 0 1 1 1 0 1 0 8 0 dma8192 8192 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 257 0 257 3 3 0 1 0 8 0 dma64 64 7 0 7 2 2 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 80 0 8 2 0 2 2 0 8 0 uaddrrnd 24 2897 0 2867 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 2897 0 2867 1 0 1 1 0 8 0 vmmpekpl 168 23345 0 23286 4 0 4 4 0 8 0 vmmpepl 168 187170 0 185236 135 38 97 114 0 357 0 vmsppl 488 2896 0 2867 5 0 5 5 0 8 0 rwobjpl 80 54954 0 48035 150 7 143 150 0 8 0 pdppl 4096 5802 0 5734 144 70 74 86 0 8 6 pvpl 32 22993 0 0 186 0 186 186 0 265 0 pmappl 256 2896 0 2867 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 411 0 104 9 0 9 9 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837bdff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839678b8) at __mp_lock+0x192 intr_handler(ffff80002a244ba0,ffff800000069c00) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __mp_lock(ffffffff839678b8) at __mp_lock+0x19e intr_handler(ffff80002a244d00,ffff800000079a80) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x19 msleep_nsec(ffffffff837afd88,ffffffff837afd50,4,ffffffff83380b50,ffffffffffffffff) at msleep_nsec+0x19b reaper(ffff8000ffffdc90) at reaper+0x13b end trace frame: 0x0, count: 3 ddb{0}> trace x86_ipi_db(ffffffff837bdff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839678b8) at __mp_lock+0x192 intr_handler(ffff80002a244ba0,ffff800000069c00) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __mp_lock(ffffffff839678b8) at __mp_lock+0x19e intr_handler(ffff80002a244d00,ffff800000079a80) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x19 msleep_nsec(ffffffff837afd88,ffffffff837afd50,4,ffffffff83380b50,ffffffffffffffff) at msleep_nsec+0x19b reaper(ffff8000ffffdc90) at reaper+0x13b end trace frame: 0x0, count: -12 ddb{0}> machine ddbcpu 1 Stopped at proc_trampoline+0xc7: movl $0,%gs:0x688 proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x9444b26c3e0, count: 14 ddb{1}> trace proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x9444b26c3e0, count: -1