last executing test programs: 3.349547526s ago: executing program 5 (id=4140): r0 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) setitimer(0x1, &(0x7f0000000140)={{0x2, 0x401}, {0xb6c, 0x4}}, 0x0) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) socketpair(0x18, 0x4000, 0x9, &(0x7f0000000000)) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @udp={{0x0, 0x2, 0x8}}}}}}}) 3.065662157s ago: executing program 5 (id=4153): r0 = syz_open_pts() fcntl$lock(r0, 0x8, &(0x7f0000000840)={0x3, 0x1, 0x5, 0x1000100000003}) (async, rerun: 32) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x4, [{0x0, 0x8}, {0x2, 0xffffffff}, {0x3, 0x300}, {0x0, 0x203}, {0x0, 0xfff9}, {0x3, 0x6}, {0x3}, {0x3, 0x7}, {}, {0x0, 0x7}, {0x1}, {0x2}, {0x3, 0xfffffffe}, {}, {}, {0x2}, {0x2, 0x3}, {0x2, 0x80000b4}, {0x1}, {0x2, 0xffffeffe}, {}, {0x1, 0x6}, {0x3}, {0x2}, {0x2, 0x3}, {0x0, 0x5}, {0x0, 0x8}, {0x3, 0x10000}, {0x3, 0x80000000}, {0x2, 0x6}]}) (async, rerun: 32) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504", 0x4, 0x8, 0x0, 0x0) (async) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$WSKBDIO_GETENCODINGS(r1, 0xc0105715, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8, 0x801) ktrace(&(0x7f00000001c0)='./file0\x00', 0x1, 0x40002344, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x100, 0x12a) execve(0x0, 0x0, 0x0) flock(r0, 0x5) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) fcntl$lock(r2, 0x7, &(0x7f00000003c0)={0x2, 0x1, 0x7fffffffffffffff, 0x1fffffffb}) (async) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x36f) (async, rerun: 64) r3 = open(&(0x7f0000000040)='./bus\x00', 0x40, 0xb3) (rerun: 64) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000100)={0xffffff00, 0x20003ff, 0x9, 0x2, "c5369c8412ab26f66d1183f0f93356761b7ada19", 0x8, 0x7fff}) (async) syz_emit_ethernet(0x6e, &(0x7f0000000400)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900383a003bcc2629a17a6c58afb8877c8be162e3fe8000000000000000000000000000aa02009078000000006006c33e00000000fe8000000000000000000000000000aaff0200000000000000000000000000010100000000000000f96a6151cd60af39aa937c8215abf20dd78a2fab0fcc7c1ac28c6b86f970ac2097d3183fe276170031556c07f705e4b901f04dd836408d4e84e491ccd6e2127a1eaee32efd0bb52bc9724361bcdb4371620597d704badbfd2ee6143e0d870ecfbdfda335a92c"]) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0xc1) (async) getpid() (async, rerun: 64) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) (rerun: 64) select(0x40, &(0x7f0000000300)={0x9, 0x5, 0xfff, 0xbf, 0xa, 0x10000, 0x3, 0x101}, 0x0, &(0x7f0000000380)={0x9, 0x2, 0xffff, 0x2, 0x1, 0x5, 0xb682, 0xded}, 0x0) (async) fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x100000001}) (async) sysctl$kern(&(0x7f0000000300)={0x1, 0x30}, 0x2, 0x0, 0x0, 0x0, 0x35) sysctl$vfs_nfs(&(0x7f0000000180)={0xa, 0x2, 0x1}, 0x3, &(0x7f00000001c0)="d1136d88bcb45a65cfffb81ec8f213075d41071b69a146a916eadfbef1bb5de688493155a764b75f48829f4d9d743674c149e104bd5e76f6e330d753b1995f5f462b1b2f997feee283d083778364dd5a5bb6ba0cfd3dad144dd825d5fea864b9f01d16609fcadf4e366d5166f8b22f46edc3d084", &(0x7f0000000240)=0x74, &(0x7f0000000280)="6b41eeea9fb2d2e105529b1366a414e1f805fefd28f66da6042a8c0577b5762120bae583fe6590b3ab88383be4dc3a5fa524", 0x32) (async) open(&(0x7f0000000380)='./file0\x00', 0x1, 0x4ebfac6bbaf7929) (async) setuid(0xffffffffffffffff) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TIOCSETA(r4, 0xc0084463, &(0x7f0000000340)={0x6, 0x7ff, 0x3fb, 0x5, "f0ff0f00090000000000000000000000008100", 0x2, 0x80004}) 2.285753324s ago: executing program 5 (id=4184): sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x34) 2.209847052s ago: executing program 5 (id=4187): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async) setreuid(0x0, 0xee01) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r0, 0xc0104419, &(0x7f0000000000)={0x2, 0xffffffff, 0x9, 0x2000, "01d00180000000020000000000003c00", 0xfffffff8, 0x6}) (async, rerun: 64) lstat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff) (rerun: 64) 2.072315404s ago: executing program 5 (id=4197): getpgid(0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setsockopt(0xffffffffffffffff, 0x4, 0x8, &(0x7f0000000100)="683f17dff03e814e66cf0615ad3892f19f7821fe2e54aa4ee87c9dc5b3fbfb90c5b56c65690012b9b5d9cd9073184ab5464220b40f3db478ac897a8bec8d16c1e9925c2598fc1e4d23c06ede894649334fd6d456382908f155db7b6bfe665879fdb2e52b37bb8ff0caa6d3d0d70771649964cf4493d69a8f02a0b396e73ea8087ae606081259e2707cf93688173e1c089af0caf164f6e4c87048", 0x9a) (async) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000300)={{0x0, 0xffffffffffffffff}, {0x0, 0xffffffffffffffff}}, 0x1) (async) syz_emit_ethernet(0x43, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff81000100803500010000060d0001000000000000f3c558363de0acc73148640ce7bff0d558e100422176f6ad9e808bee515f47eaa1f7f7"]) 2.056441642s ago: executing program 5 (id=4201): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000580), 0x80, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x4, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0xfffffffd, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f4, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0xc, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x3, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000400), 0x400, 0x0) sendto$unix(r1, &(0x7f0000000500)="9367d1f791469154d73678c133ce4e654177f532c68989608307b57d2e93700790f37a7d416536a2bf4d18fdcc717f7264811800767d499113d27f53e9caba65da120822b6518cfd8410", 0x4a, 0x4, 0x0, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80085761, &(0x7f0000000440)={0x3, 0x3}) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xfffffffd, 0xffef9ff6, 0x6, "4b06a6bcff0300dba800000000000800", 0x0, 0xf}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$kern(&(0x7f0000000000)={0x1, 0x30}, 0x2, &(0x7f0000001940), &(0x7f0000000040)=0xfffffffffffffed0, 0x0, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000300)="e7c4a4d86cb242843ec2cbd63a9e170a73cef2a623e23e5eda0501c23699e258b514174ca57079fff349534637a55fadb4a6329962bd40adb295cff85f36d14068f2d1758c71a2ca0965bc17be0180000000000000c46de1961101376492cff60fd9ddb33432677dbe8f9bdcfbbd4d0f25", 0x71}], 0x1) ioctl$TIOCSTOP(r2, 0x2000746f) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x80) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0xd27d43220c7d18f, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0}, 0x10, 0x2842, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) syz_open_pts() unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8) ioctl$TIOCFLUSH(r2, 0x80047410, &(0x7f0000000080)=0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0xfe, 0x2}, {0x0, 0x0, 0x40, 0x9}, {0x2, 0x0, 0x0, 0x85}]}) openat$wskbd(0xffffffffffffff9c, &(0x7f00000003c0), 0x10000, 0x0) 1.413020595s ago: executing program 1 (id=4236): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) close(r1) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getgroups(0x1, &(0x7f0000000180)=[0x0]) fchown(r3, r6, r8) ioctl$WSKBDIO_BELL(r4, 0x20005701) mkdir(&(0x7f00000001c0)='./file0\x00', 0x8) connect(r1, &(0x7f0000000200)=@un=@abs={0x1, 0x0, 0x1}, 0x8) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000240)={0x81, 0xffffffff, 0xa34, 0x5fd6, "c8fd1a386dccb9ee41ae9da1f79fecf319474bd5", 0x1, 0x7}) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x2, r6, r8, r6, r8, 0x1, 0x14}, 0x40, 0x3, r5, r5, 0x3, 0x0, 0xc51c}) fchmodat(r4, &(0x7f0000000300)='./file0\x00', 0x80, 0x4) r9 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000340), 0x8bc491818da30dc, 0x0) fcntl$setstatus(r9, 0x4, 0x8) getgroups(0x8, &(0x7f0000000680)=[r8, r7, r8, 0xffffffffffffffff, r8, r8, r8, r8]) r11 = accept(r4, &(0x7f00000006c0)=@in6, &(0x7f0000000700)=0xc) sendmsg$unix(r2, &(0x7f0000000800)={&(0x7f0000000380)=@file={0x0, './file0/../file0\x00'}, 0x13, &(0x7f0000000600)=[{&(0x7f00000003c0)="2d935fda968ec94ee1d180bcea00fa5f49dad55518ba51c418359290d43b3181f6772afa28600796d3053e802ce8c9ae7bb2d84d0f5b2bf043e301e1d417a9822076d662ed7889b384a0745bdc11b2cd47c494e38200741380a3e5cacef64805228aeaf1bfa70ae76d657f16dacf2bdc0a8da59274859b0b262d6d3a163ef7dc0d4d43fca89424029bdf3e1db6e9e52a052ad945623e27ada126a06b7d64a3109ece", 0xa2}, {&(0x7f0000000480)="36ccd26e607a00035b2990fbe0ac8f03c85917eec39528fbed1dccb6a60ed0fd3952c2eceb09795e2b6867b362d06bc921314fa36241405facd439a8331b0498ed781d1fcc97a90e7a9674d6d10cbdd7675046cc6887cacb150fd3485c877a71866f5afbe2ba1ba1be0935e1f5dd0d10b458fc1c59", 0x75}, {&(0x7f0000000500)="aab83e3571c6f6ce987df3985cce1caf79dce47402cdbee065ca4a9649cc69bd818a31", 0x23}, {&(0x7f0000000540)="fe63a81dab79d4ad34e0c15cc94252ec535d2fe7fd82b1e83f21a2fb91474604811ab4e0a53fd4904c93758dfcffacd445ace4656ad82660e64f", 0x3a}, {&(0x7f0000000580)="7e0a4896b32c43024c2aac8d19b06b4576bda471b69ad772bf0e9c9e98d8c44809dff3d65f9aacf36790684e081e5b43fd92e88e504be0f9b02c6967608d461ba951c26816033e358ea89756b41a055885c58436c9d95918fb6c6212b50a1797d0d8c0a887", 0x65}], 0x5, &(0x7f0000000740)=[@cred={0x20, 0xffff, 0x0, r5, 0x0, r10}, @cred={0x20, 0xffff, 0x0, r5, r6, r8}, @cred={0x20, 0xffff, 0x0, r5, r6, r7}, @rights={0x20, 0xffff, 0x1, [r4, r4, r0, r11]}, @rights={0x18, 0xffff, 0x1, [r2]}], 0x98, 0x401}, 0xc0b) r12 = socket(0x0, 0x5, 0x1d) r13 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000840), 0x20000, 0x0) ioctl$WSKBDIO_SETENCODING(r13, 0x80045710, &(0x7f0000000880)=0x80000001) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)) fchdir(r0) getpeername(r12, &(0x7f0000000980)=@in6, &(0x7f00000009c0)=0xc) preadv(r9, &(0x7f0000000ac0)=[{&(0x7f0000000a00)=""/113, 0x71}, {&(0x7f0000000a80)}], 0x2, 0x8) setsockopt$sock_int(r11, 0xffff, 0x1003, &(0x7f0000000b00)=0x3, 0x4) bind(r11, &(0x7f0000000b40)=@in6={0x18, 0x2, 0xf, 0x49}, 0xc) ioctl$LIOCSFD(r13, 0x80046c7f, &(0x7f0000000b80)=r4) listen(0xffffffffffffffff, 0x80000000) 1.372591036s ago: executing program 1 (id=4240): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x1a7, 0x4003}, 0x8, 0xd7f, 0x0, 0x0, 0x1ff, 0x4000000000, 0x8000002, 0xb}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409}, 0x8) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @multicast1}, "23bdc1cedf0fc836"}}}}}) 1.206501922s ago: executing program 3 (id=4242): r0 = socket(0x18, 0x3, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) readv(r0, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/249, 0xf9}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/30, 0x1e}, {&(0x7f00000013c0)=""/50, 0x32}], 0x4) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x6, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x5, 0x7, 0x3, 0x71000}, {0x101, 0x8, 0x9}, {0x7, 0x8000b86, 0xffffff7c, 0x9}, {0x73f0, 0x6, 0x4, 0x2}, {0x401, 0x8, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x6, 0x9, 0x16, 0xb}, {0xffffffff, 0x84, 0x4, 0x3}, {0x4, 0x7, 0x93, 0x1ff}, {0x1e0, 0xffff, 0x7ff, 0x7}, {0x9, 0x29, 0x9, 0x5}, {0xb8c, 0x401, 0x80000003, 0x405}, {0x29a71717, 0xfffffffa, 0x0, 0x106}, {0xc, 0xf8f, 0x6}, {0xfffffffd, 0x800bc3d, 0x4, 0x30005}]}) setuid(0xffffffffffffffff) socket$inet(0x18, 0x3, 0x102) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x4c}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x1b6, 0x3ff}, 0xd3a5, 0x10000, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x9}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f00000000c0)="559bed48", 0x4) syz_emit_ethernet(0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="ffefffffffffaaaaa2aaaa30e8d267e1d2e1d6f1bb08004500000900d12aabac7400000000f00078ffffffffdfffff", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5020000790780081"]) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x18}, 0x4, &(0x7f0000000080)="0200ac1d21", &(0x7f00000001c0)=0x5, &(0x7f0000000400), 0x0) 1.204020414s ago: executing program 6 (id=4246): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet(0x2, 0x3, 0x0) close(r0) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) (async) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000240)="ea00ebd3e7", 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) r2 = socket(0x800000018, 0x2, 0x0) (async) setuid(0xffffffffffffffff) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x29, 0xe, &(0x7f0000000000)="02000000", 0x4) (async) setsockopt$sock_int(r3, 0xffff, 0x1, &(0x7f0000000040)=0x7, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt(r4, 0x5, 0x2, &(0x7f0000000040)=""/144, 0xffffffffffffffff) (async) dup2(r3, r2) listen(r2, 0x0) (async) r5 = msgget$private(0x0, 0x180) msgsnd(r5, &(0x7f00000014c0)=ANY=[@ANYBLOB="03"], 0x8, 0x0) msgrcv(r5, 0xffffffffffffffff, 0x0, 0x3, 0x1800) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @multicast1, {[@noop, @ssrr={0x89, 0x3, 0x6}]}}, @icmp=@info_reply={0x10, 0x0, 0x0, 0x80, 0xd5b}}}}}) 1.203060153s ago: executing program 1 (id=4247): syz_emit_ethernet(0x4c6, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd606d9efb0490670000000000010000000000000afffffffefe8000000000000000000000000000aa880c000000000000fe8000000000000000000000000000aafe8000000000000000000000000000bb00000000000000000000ffffac1400aa95a8e3f69261b11bfb779408877c5d94ff0100000000000000000000000000010000000000000000000000000000000104000000000000000c04000900000000ff020000000000000000000000000001ff0200000000000000000000000000012b3300000000000000010005e4af20e4b21154e61fbb43d551c50b7bec06f120fe504d4df35619925b72a6b1656feb28597a452998fa7670c7e96a891d6ffe777cb844100410886327f4331b6b7014666b21692ac200f83283494936a2e78ef0663b29bf2e8d3ccbab810b49c1ef16b67262e6271040c842f03cde08a1a439e382f0920b9d06cf2a5bbbf68f7e27c398dab6a1feba46ece491f2e3afc9dd415f72d449774cb6d7531708f6d0e12b3c1a52dbbd75db6ecc1ca45fe9dec04ea9d29642012029d0a721f39288cb0be11b5d12fc1fb0cad4845a210fbb369574dfe4b35dfd15d19d936c7f56a1b7c20400000003c20400000080028eed197aa389e457f4964bef7ff489c04e6627466843c434adf00a7bdd4e1845eb275580125c799e8a837b4dda49ef9e1fa1b70dece49089c3b020b00734a60eb098995dd84e35eebbf81112e75783b6e677a4b2bf6e58471b44f252e4f2887854c4a848f436483155e7cc43b331e26c10d119db5da37942f6ea9bda53c43a5dfad197b5e36606161fe8c31c6053fc010400000000000100c204000000b8010300000000000000000000ff000938690000000210000500000000fe8000000000000000000000000000bbff010000000000000000000000000001ff0100000000000000000000000000010a1067686fc379684e0d60984f1c524900000000000000000000000000000001ff01000000000000000000000000000100000000000000000000ffffac1400bbff0200000000000000000000000000013b06000300000000fe8000000000000000000000000000bbff020000000000000000000000000001ff0100000000000000000000000000013b2a000000000000c204fffffffbb867565fc4a440455a1a7548fad6b96271745fda9cf4b7bee3a0b78bcf79630797a5c8060ca41c41c4e42743d36dc21e639a2e80b46dbf8cb4840f61456b1ee1a709374103e5fe768ce764a5386ddb66358c5d5551c48c4d773f6da7c6e8322ccb64d605f6476f980f077e9aba4206047f2f606604d4c434ce0964f6f448087dccd18f338ee73b9918980cfb6e10485a5374564a79e158b738cb44ef1f505e5fb1a0aa956d67c99527f7b6628136f30ad298f4e60d1133d0e4558287c61c9a8fe2befbc04a14228a66af4a4aeb6055850654dd8bf30a12e2c764e9ee173d0c80bf3db9e1944070c45810cff0101731dc8ba4def1139a8ee2150488e54537eba88cead8e3981d809fbd7d913aeda2c6c46a15023b69db83a1c4448dd171d6bca4829368fbd89a8baff87c778a7b6309ba1470002e9eb93ce6fdbc7649d3e334bb28f875bb76190362bfd500010000010000000000000000000200000000000005020003c2048000000901050000000000000000000000004e22"]) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x404}, 0x4) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$VNDIOCSET(r1, 0x80086476, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$TIOCSETA(r0, 0xc4504444, &(0x7f0000000740)={0xe270, 0x10003, 0x3, 0x20000083, "0400", 0xfffffffd, 0x40000009}) 1.134585274s ago: executing program 1 (id=4249): kevent(0xffffffffffffffff, &(0x7f00000001c0)=[{{}, 0x7fffffffffffffff, 0xc5, 0x4, 0x10000000fad, 0x1}], 0x5, 0x0, 0x5, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$PCIOCWRITE(r0, 0x8004667e, &(0x7f00000005c0)={{}, 0x1, 0x4, 0x2}) r1 = syz_open_pts() flock(r1, 0x3) fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000001}) close(r1) execve(0x0, 0x0, 0x0) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000040)={0x3, 0x23}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8000, 0x5) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ftruncate(r3, 0x20008002) r4 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x2) preadv(r4, &(0x7f0000000880)=[{&(0x7f0000000240)=""/77, 0x4d}], 0x1, 0x8000002) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) poll(&(0x7f0000000040)=[{r5, 0x4}], 0x1, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) unveil(&(0x7f0000000080)='.\x00', 0x0) ioctl$TIOCSETA(r5, 0xc088444f, &(0x7f0000000000)={0xffff, 0x6, 0x0, 0x0, "97a2224ff1c14a06ebb178926cc9795a6b47c1d1", 0x6, 0x800007}) r6 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0x41) preadv(r6, &(0x7f0000000040)=[{0x0}], 0x1, 0x4) nanosleep(&(0x7f0000000280)={0x0, 0x1e49824d}, 0x0) r7 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r7, 0x8020699d, &(0x7f00000001c0)) setitimer(0x3, &(0x7f0000000000)={{0x4, 0x4}, {0x7f, 0x8}}, &(0x7f0000000040)) openat$speaker(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) 1.134413763s ago: executing program 6 (id=4250): syz_emit_ethernet(0x25, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaaf9ff440600170068ffffffffffffffff1bd2c0"]) 1.132439505s ago: executing program 6 (id=4251): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x9) r0 = socket$inet6(0x18, 0x3, 0x0) getsockopt(r0, 0x29, 0x35, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xa0) ioctl$TIOCSWINSZ(r1, 0x80087467, &(0x7f0000000040)={0xd, 0x3, 0x7fff, 0x9da0}) 1.11239791s ago: executing program 2 (id=4253): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) select(0x40, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x40000, 0x100, 0x3560000000000, 0x0, 0x80000000000000}, &(0x7f0000000200)={0xcea, 0x20010, 0x80000002, 0x1, 0x1, 0x3, 0x80000000000001, 0xfffffffffffffffe}, 0x0, 0x0) ftruncate(r1, 0x8531) recvmmsg(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/265, 0x153}], 0x0, 0x0, 0xfffffffffffffd8d}, 0x6}, 0x10, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='m', 0x1}], 0x1) r3 = socket$inet(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000040)="e0001deae7c60031", 0x8) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc) bind(r4, &(0x7f00000000c0)=@in={0x2, 0x2}, 0xc) listen(r2, 0x0) execve(0x0, 0x0, 0x0) accept$unix(r2, 0x0, 0x0) 1.044297926s ago: executing program 6 (id=4255): r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x4, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0xfffffffd, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xcdf, 0xffffffff, 0x4f4, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0xfffffffe, 0xfff, 0x30004}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x4, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0xfffffffd, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xcdf, 0xffffffff, 0x4f4, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0xfffffffe, 0xfff, 0x30004}]}) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) ioctl$WSMOUSEIO_GCALIBCOORDS(r0, 0x41205725, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) fchflags(r0, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x53}, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x53}, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0) 1.043892005s ago: executing program 7 (id=4256): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4", 0x3}], 0x1) r1 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0xc0206925, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r1, 0xc0206925, &(0x7f00000001c0)) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r2) r3 = dup(0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r4) (async) close(r4) socket(0x2, 0x2, 0x0) connect$unix(r4, 0x0, 0x0) r5 = socket(0x2, 0x2, 0x0) connect$unix(r5, &(0x7f0000000000), 0x10) setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) (async) setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) 1.043685095s ago: executing program 6 (id=4257): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x0) sysctl$hw(&(0x7f0000000440)={0x6, 0x12}, 0x2, &(0x7f0000000480), 0x0, 0x0, 0x0) getgroups(0xa84b7f1f5bb00633, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x3, 0x1) r2 = accept$inet(r0, &(0x7f0000000040), &(0x7f0000000140)=0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f0000000100)="2bfeea3ae264a8c4fddbd1bc9ebdd4f389698de6627a7fc99a0a9075cd8529299647e9b0c8fa6e3f9e7d0b0f176452b383bc83aef490d387c6646a7e55", 0xfffffffffffffdfe) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) ioctl$WSDISPLAYIO_GETEMULTYPE(r0, 0xc014575e, &(0x7f0000000180)={0x2, './file0\x00'}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfa) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xe, 0x0}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000180)={0x4, &(0x7f0000000340)=[{0x800, 0x2, 0x3, 0xa5}, {0x85, 0x18, 0x1, 0x1}, {0x9, 0x7, 0x58}, {0x84, 0xb, 0x77, 0xfffffff7}]}) r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r5, 0x80047476, &(0x7f0000000040)={0x1, 0x4000000}) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929) setuid(0xffffffffffffffff) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$TIOCSPGRP(r3, 0x40047477, &(0x7f0000000200)) 1.041522116s ago: executing program 7 (id=4258): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f0000000040)=""/139, 0x8b) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x20, 0x90) r3 = fcntl$dupfd(r1, 0x0, r0) renameat(r2, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00') ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x3, 0xa, 0xff, 0x5}, {0x9, 0xa, 0x4}]}) ioctl$BIOCGSTATS(r3, 0x4008426f, &(0x7f0000000280)) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f00000002c0)={0x8, 0x10, 0x5, 0x100, "16aa03620d0a1831c260be0cc4fea508f88362a7", 0xfffffff9, 0x8}) socketpair(0x1, 0x5, 0x5, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r5, &(0x7f0000000340)=@in6={0x18, 0x3, 0xfffffffe, 0xdbe2}, 0xc) r6 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f00000003c0)="52e79eab5e69b9f0393cf020c02c042d8cda420e8765cc83aeca426e4db5dfd0a7f5143bb1fc436e3be56b59b20c8e74810247", 0x33) setsockopt$sock_int(r4, 0xffff, 0x1002, &(0x7f0000000400)=0x1, 0x4) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt(r7, 0x8000, 0x8, &(0x7f0000000480)=""/78, &(0x7f0000000500)=0x4e) read(r5, &(0x7f0000000540)=""/165, 0xa5) ioctl$WSMOUSEIO_SETPARAMS(r6, 0x80105728, &(0x7f0000000640)={&(0x7f0000000600)=[{0x40, 0x6}, {0x1, 0x5}, {0x8c, 0x7}, {0x4, 0x3ff}, {0x86}, {0x47, 0x22c}], 0x6}) pwrite(r7, &(0x7f0000000680)="9f6aa3794ade40923b792f0c2c89eea61720160d36511b33e58e973003301d83662103c6259632b6a155abb7e7934396e52a51c8a2021fb645a91e1a762831b7acd3c13ded2126da6844bd00385c241f191c04146055851b606ad026037273c213438967788de2b79ea3fb97e808a9af83fcad0f3b4eddc4d4776e1a81474e64d8927ad60a64456da3367c1362fe6a8b84d660a68467a3f6949411daa3d5d6cb816caca561b350fb4a14b0bafb1ffc1bf1a12c4cc807e67d2ccc6cf8ccb92fbaaeb4dda86d40ce110a810682c9", 0xcd, 0x0) r8 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000780), 0x800, 0x0) ioctl$WSDISPLAYIO_GETSCREENTYPE(r8, 0xc028575d, &(0x7f00000007c0)={0x6, 0x1ff, './file0\x00', 0x3, 0x494e93b3, 0x80000001, 0x8}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) readv(r3, &(0x7f0000000c80)=[{&(0x7f0000000800)=""/243, 0xf3}, {&(0x7f0000000900)=""/247, 0xf7}, {&(0x7f0000000a00)=""/55, 0x37}, {&(0x7f0000000a40)=""/93, 0x5d}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/102, 0x66}, {&(0x7f0000000b80)=""/252, 0xfc}], 0x7) read(r0, &(0x7f0000000d00)=""/140, 0x8c) r9 = syz_open_pts() ioctl$TIOCSETA(r9, 0x802c7414, &(0x7f0000000dc0)={0x1, 0x2, 0x0, 0x9, "53e93b275182fede651da27bc47a94007bbe7821", 0x6, 0x9}) r10 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$DIOCMAP(r10, 0xc0106477, &(0x7f0000000e80)={&(0x7f0000000e40)='./file0\x00', r3, 0x1}) r11 = getpid() fcntl$setown(r8, 0x6, r11) 1.00322901s ago: executing program 7 (id=4261): setuid(0xee01) ktrace(0x0, 0x5, 0x128, 0x0) r0 = socket(0x800000018, 0x3, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) r1 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) ktrace(&(0x7f00000001c0)='./file0\x00', 0x1, 0x40002344, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0) dup2(r0, r1) 878.5973ms ago: executing program 0 (id=4262): mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0x81) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000400)={{0x4, 0x7}, {0x5, 0x5}}, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) kqueue() lseek(r0, 0x4, 0x1) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000540)='./bus\x00', &(0x7f00000005c0)) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x2, 0x2, 0x0) close(r2) r3 = socket(0x2, 0x3, 0x0) bind(r3, &(0x7f0000000000), 0x10) connect$unix(r2, &(0x7f0000000000), 0x10) sendto$inet(r2, 0x0, 0x0, 0x406, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x3ff}, 0x400, 0x10000, 0x0, 0x0, 0x200000001, 0x80000000000000c, 0x3, 0x40}) sysctl$vfs_nfs(&(0x7f0000000200), 0x3, &(0x7f0000000440)="cda478397299ea90a51f6de0d27f84a8894072915f4d0681af70334066b2f2ecdf04558e13a7f143451edeec6ef2cb4bfe747a7b4dcd4ed99221de2ba6467af333f797b4a7f6a3d93851626a943d1c89f752c103978872ec481223c9557a9c5724fa04ff88b917c45a394ad1371e3a71b7999ed8cc1515dd3e801ddac09a3624dc4a86c188a7a4a38eb02de90c867cf3ab8469144f8b62766831590ee06d3fee4e1f8bb113de556eddff338449ba91101a5f3acbb89ed760339c9aad25c66be8640184427115a7f6521605b15df44bbfbf71692d93851a774234120520fe", &(0x7f0000000240)=0xde, &(0x7f0000000280)="b02839e63c74c0c561e712af2c8000931f6a2e45b5291efb49ecc9bb0333b94fdbd1f280e57277cb690d4b92e05fc19f93a0c14173d7fe1fa6fca577a720dfc9d4a9c3b3de0b40cb38653bbd85b268e48f723e6a15eda4c49b6a0ac33e21", 0x5e) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)='n8', 0x2}, {&(0x7f0000000100)='.', 0x1}], 0x2) 837.137834ms ago: executing program 2 (id=4263): kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffd, &(0x7f0000000140)={0x0, 0xfffffffffffffffb}) r0 = kqueue() r1 = dup(r0) kevent(r0, &(0x7f0000000180)=[{{r0}, 0xfffffffffffffffe, 0x14, 0x1, 0x5, 0x8}, {{r1}, 0xfffffffffffffffb, 0x21, 0x1, 0x18d7, 0x4}, {{r0}, 0xfffffffffffffff8, 0x70, 0x1, 0x2, 0x80000009}], 0x138, 0x0, 0x3, 0x0) r2 = socket(0x11, 0x3, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="71f91e38", &(0x7f0000000080)=0x4, 0x0, 0x0) sysctl$vfs_nfs(&(0x7f0000000040)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000100)={0xc0000000, 0x4003, 0x420001ff, 0x81, "afa40f3c000000eae3000011000000000000e500", 0x0, 0x49e22}) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1f95d27d48731892, 0x0, 0x1}, 0x8) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000000)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0x10011, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) sysctl$kern(&(0x7f0000000040)={0x1, 0x44}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) close(r0) 769.908045ms ago: executing program 2 (id=4265): writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000040)="fb408c0a5e1b2c1d6d00000080", 0xd}], 0x1) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x4, &(0x7f0000000140)="118bea625d95de8f92c010baed45ec4bf03ace254b57973bb6de7b1c90301e9d3b5e6fb6ffffffffffffffff76c775a2a4e0556565a830032eef776127fd247103c14ab0a1cea9b4593be484f46a02ea73e910d041c5777bd852e57d3248832b91d06fe47d126022a1654859149e9486306d2f11fb1cc826c42f81b0d114f8af4ceb029a5210bb6947464bf678ba1d64a2013131fedfe60443aa13e015b28a16ea924bf89ad45c006213a6d0e194b9abcb3ddfab0c69b8c280bfc9c11f26026f6231b5e725921be8b099", 0x0, 0x0, 0xfffffffffffffd2a) sysctl$hw(&(0x7f0000000080)={0x6, 0x1c}, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000040)="fb408c0a5e1b2c1d6d00000080", 0xd}], 0x1) (async) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x4, &(0x7f0000000140)="118bea625d95de8f92c010baed45ec4bf03ace254b57973bb6de7b1c90301e9d3b5e6fb6ffffffffffffffff76c775a2a4e0556565a830032eef776127fd247103c14ab0a1cea9b4593be484f46a02ea73e910d041c5777bd852e57d3248832b91d06fe47d126022a1654859149e9486306d2f11fb1cc826c42f81b0d114f8af4ceb029a5210bb6947464bf678ba1d64a2013131fedfe60443aa13e015b28a16ea924bf89ad45c006213a6d0e194b9abcb3ddfab0c69b8c280bfc9c11f26026f6231b5e725921be8b099", 0x0, 0x0, 0xfffffffffffffd2a) (async) sysctl$hw(&(0x7f0000000080)={0x6, 0x1c}, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0) (async) 769.596928ms ago: executing program 7 (id=4266): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0x22, 0x0, 0x0) sysctl$vm(&(0x7f0000000000)={0x2, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000080)={0x1, 0x38}, 0x2, 0x0, 0x0, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) 769.151321ms ago: executing program 6 (id=4267): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') stat(&(0x7f0000000200)='./file0/file0/..\x00', &(0x7f0000000340)) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0/file0/..\x00', 0x8) open(&(0x7f0000000180)='./file0\x00', 0x10000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5010, 0xffffffffffffffff, 0xc2) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504440, &(0x7f0000000040)={0x9, 0x0, 0xfffffffe, 0x5, "210d0000000800f0ff00", 0x7, 0x5}) setrlimit(0x7, &(0x7f00000001c0)={0xc035, 0x56}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x40978b, 0x10001, 0x2, 0x80a1a4, "bb0800018bff4f998d04de2084c823000000007e", 0x0, 0xffffffff}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cdd8a8456ebc088168477510000e0bf01b618b3cb934394c5951c1db0fd943a", 0x22}], 0x1) r1 = syz_open_pts() ioctl$TIOCSTAT(r1, 0x20007465, 0x0) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000240)=0x8) unveil(0x0, &(0x7f00000003c0)='c\x00') dup(r1) open$dir(&(0x7f0000000140)='./file0\x00', 0x10000, 0x10) select(0x40, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x40000, 0x100, 0x10001, 0x0, 0x80000000000000}, &(0x7f0000000300)={0xcea, 0x20000, 0x80000002, 0x1, 0x1, 0x80, 0x80000000000001, 0xfffffffffffffffe}, 0x0, 0x0) r2 = socket(0x1, 0x5, 0x0) fcntl$setstatus(r2, 0x4, 0x40) shutdown(r2, 0x2) socket(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0xffff, 0x8, &(0x7f0000000280)=0x7fff, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 752.660802ms ago: executing program 7 (id=4269): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0xfa) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0xc1206922, &(0x7f0000000100)) ioctl$TIOCDRAIN(r0, 0x2000745e) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000180)='./file0\x00', 0x143, 0x0, 0xfffffffffffffead}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x9, 0x3ff, 0x2000007, 0x8, 0x5, 0x80000001, 0x17ffd, 0x10, [{0x4, 0xe33, 0x4, 0xa20}, {0xc5c, 0xe, 0x18, 0xfffffff9}, {0x800008, 0x20f85, 0x10eb, 0x9}, {0x8, 0x800, 0x3, 0x1}, {0x8, 0x1, 0xfffffdff, 0x2}, {0x3, 0x2, 0x3, 0x9}, {0x8000008, 0x10000000, 0x81ec, 0x29}, {0x6, 0x4, 0xdef8407, 0x4}, {0x100, 0x8, 0x5, 0xfffff9b9}, {0x2, 0x6, 0xd1b, 0x88}, {0x1bb, 0x10000004, 0x4, 0x3}, {0x1, 0x4, 0x20002, 0x80000000}, {0xb8d, 0x4, 0x3, 0x2c4}, {0x29a71720, 0xffffdffa, 0x1, 0x6}, {0xfffffffe, 0x0, 0xfffefff7, 0x100}, {0x0, 0x8, 0x1004, 0x5}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCCLR(r0, 0x80384601, &(0x7f00000003c0)={&(0x7f0000000300)='./file0\x00', 0x101, &(0x7f0000000380)='./file0\x00', 0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r3 = semget(0x0, 0x1, 0x281) setuid(0xee01) semctl$IPC_RMID(r3, 0x0, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) unveil(0x0, 0x0) unveil(0x0, &(0x7f00000002c0)='x\x00') setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/file0\x00') execve(0x0, 0x0, 0x0) 752.287882ms ago: executing program 0 (id=4270): syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"]) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x80) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="cc", 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0xfffffffc}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x0, 0xaa59}, {0x2}, {0x1, 0xffffffff}, {0x2}, {0x3, 0x4}, {}, {0x0, 0xffffffff}, {}, {0x0, 0x80000001}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x2}, {0x0, 0xffffffff}, {0x3, 0x7ff}, {0x1}, {0x2}, {0x3}, {0x3}, {}, {0x2, 0x1}, {}, {0x0, 0x200}, {0x2}, {0x1, 0xfffffffd}, {0x1, 0xa}, {0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@broadcast, @random="391e7dd7a2d7", [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0x18, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[@routing={0x0, 0x2, 0x0, 0x2e, 0x0, [@empty]}]}}}}}) 634.624181ms ago: executing program 2 (id=4271): r0 = socket(0x11, 0x10000000000003, 0x0) setsockopt$sock_int(r0, 0xffff, 0x40, &(0x7f0000000000), 0x4) sendto$unix(r0, &(0x7f00000000c0)="b1000503000004000500000007000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be3816499104000000882b297be1aa0500000051e2f0ad09000000000000009b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba3500000008e371a3f8343712051eeab71d1889e000"/177, 0xb1, 0x0, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xe0, 0xe0, 0x1, 0x9}, {0x2, 0x22, 0x3, 0x930}, {0x8, 0x0, 0xc6, 0x8}]}) syz_emit_ethernet(0x56, &(0x7f0000000080)={@random="a1541198c9fd", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '`b`', 0x20, 0x0, 0x1, @empty, @mcast2, {[@dstopts={0x70, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x9}]}]}}}}}) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0]) 633.068462ms ago: executing program 2 (id=4273): r0 = socket$inet6(0x18, 0x5, 0x7) getgroups(0x1, &(0x7f0000000600)=[0xffffffffffffffff]) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8000, 0x0, 0xfffc}}}}}}) bind(r0, &(0x7f0000000100)=@in6={0x18, 0x1, 0x9, 0x8}, 0xc) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r1 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r1, &(0x7f0000000100)="8a522c6b8a8460561e290ca762e8d6c739d5dd7f0153b7a50498cb60ab818b16929d3bf742c57351df76ca9ec87e92fa9f010342ace3a6ffcf5c4b75c4c160f4acfe629a5717f5f5b7cad5c4e10a76103ea7945a70ea5a8999b18da379b691138c7d8a1529b81a7fb4540022f1324c3dda210f6f132101dfe0acc149685fdaca2fe92b8d4327e9872642c818370d60e800e0f8b2a66ead8ef0ddc9f0258f2275a9a0aefa8edd053e80a46946b0c0df080bb0d9c214c6a2393db966f0c0ace000", 0xc0) 624.502258ms ago: executing program 3 (id=4275): link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket(0x18, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000140)="9725db874b5776d5676fed1ea73f98a0c434268a8320db3eab6b66f85fc6c3e3784eea0d000000f442060b0f73d3d47237f91da5d2059c1266e040db88846420792a1aba3070fb930a29ddebb11cfe86730eec721e0af6bcf4d00a107421406cd3f2d2d584ca988b787135219952d8f7402de7b9291c788fea559f86c9da5ffed0c9559630", 0x85}], 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$FIONREAD(r0, 0x8020697a, &(0x7f00000001c0)) (async) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000040)=""/42, 0x2a) setgid(0xffffffffffffffff) r2 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x2a) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffff7fd, 0x0}) (async, rerun: 32) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f0000000400)={0x0, 0xbffd, 0x0, 0x27}) (async) sysctl$net_inet6_ip6(&(0x7f0000000300)={0x4, 0x18, 0x29, 0x32}, 0x4, &(0x7f0000000440)="ceefbd8f224fd7f21ea0a9e25eaca324d71e8ff061b810717148ce0860fbf60060d2918479cab71e7e4272254dae8dc97147ea29bc1609a1c58f50ab0a4961806473631bd76b4feffcaa254a4d65d967f09543ec38e2c48bc69f0cbd305200b764c55acfb1a76c95dad18a213a0ff87f686b0315c5e7a4ef0d9fd584bc4cb2ac94ca537e800c5f8017e0c02c4501243c2e5701e42c9e66427925867ed617427257809f17e3a0d18442ec9aa2b8b48bce3829eb20a993b2cb888c95f8e64eed6d3061dcdb901b140f434a5b0f09", &(0x7f0000000340)=0xcd, &(0x7f0000000540)="e3ed2c49c0fd03a3f83009961ce1ca7b1ca21d7d87e5c3082381e369805dde235cee3cfe72e044963b5405a1051a85e204581f52a39b171a66d422267cf9be82aaba4a2105bfb2e16a0aaa1783281242f09202aa9b753bb965e9f6a5db88dacfbbc71c879d813ff9b0d00300334614e37de5e643e1573894320d362f90d60c923c0feebb997b6bd437a551924da959125cef7fc75888cc5d395d33ecce656916b3fea5aaa3e32acbad1fdae7ef1982be33277caea5bbe97bdcf6d9196b6d78ff7febeadd17324e3c9c2e3bab59fa4aa6999010f5e50b6cae5df7e5ae540f056f63b6232449a7b98ed4", 0xe9) (async) mkdirat(r2, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) mknod(&(0x7f00000000c0)='./file0\x00', 0x1, 0x0) r3 = socket(0x20, 0x2, 0x5) bind(r3, &(0x7f0000000000)=@in6={0x18, 0x3, 0x5, 0x1}, 0xc) 618.710709ms ago: executing program 0 (id=4276): mkdir(&(0x7f0000000100)='./file0\x00', 0x51) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0xa}, 0x4, &(0x7f0000000080)="ff77bdb2f10c51ce0991751a404c982948641fe8a8f014e921533d", &(0x7f00000000c0)=0x1b, &(0x7f0000000140)="b7c48a", 0x3) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0xa) (async) mknod(&(0x7f0000000180)='./file0/file0\x00', 0x2, 0x5) (async) truncate(&(0x7f0000000600)='./file0/file0\x00', 0x100000000) (async) r0 = socket$inet(0x2, 0x3, 0x7f) recvmmsg(r0, &(0x7f0000000400)={&(0x7f00000003c0)={&(0x7f0000000000)=@in, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/164, 0xa4}], 0x1, &(0x7f0000000300)=""/175, 0xaf}, 0xfffffffe}, 0x10, 0x42, &(0x7f0000000440)={0x6d, 0xfffffffffffffffc}) 616.936331ms ago: executing program 2 (id=4277): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x7fffffff, 0x0, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_open_pts() close(r0) syz_open_pts() clock_settime(0x100000000000000, &(0x7f0000000000)={0x8000000000000802}) r1 = syz_open_pts() ioctl$TIOCSTAT(r1, 0x20007465, 0x0) ioctl$TIOCDRAIN(r1, 0x2000745e) unveil(0x0, &(0x7f0000000000)='x\x00') setrlimit(0x0, &(0x7f0000000080)={0x10000000000007, 0x20000051}) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$FIOASYNC(r2, 0x80047469, &(0x7f00000000c0)=0x5) write(r2, 0x0, 0x0) ioctl$TIOCMGET(r1, 0x4004746a, &(0x7f0000000040)) poll(&(0x7f0000000100), 0x0, 0x800) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1, 0x0) 419.428884ms ago: executing program 3 (id=4278): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0x1012, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCSETA(r1, 0xc4504444, &(0x7f0000000740)={0x2f, 0xfffb, 0x101, 0x20000003, "040009100000000000004800", 0xb, 0x9}) munmap(&(0x7f0000491000/0x4000)=nil, 0x4000) sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) setsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='r\x00') 418.804973ms ago: executing program 3 (id=4279): sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000080)="ea6c1a0fbc2f509bb5fea4c43a91", &(0x7f00000000c0)=0xe, &(0x7f0000000100)="6b78b3728fd043dd6a0959f297d4369f289b782bfe6aa0de020e8ab50f711c5a95b193b4afdcd9a3b163460c739878e110d07d1651dad610e37f1e5d3d59dacd3acd7c58708e457667b4b32e4f8e4ab8f9dbf595a03e54204f32dea8ff6535d0fe469574e263df1fb9decf51137766824de79e541399d5d45a5d01b823716b52535ede5082da4dd2c8", 0x89) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) symlink(0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x820751a, "090e4de6d30aa692318c7e0002e9ffffff00", 0x9e0, 0x4000000}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000380)={0x537, 0x7fff, 0xea8f, 0xffffff88, "186d28106308001100530400000000098000", 0x4, 0x20002}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) unveil(0x0, &(0x7f0000000000)='x\x00') r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5821ffdb1e649b00000000ffffffffffffffffd4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x40f}, 0x40a) ioctl$TIOCSETA(r1, 0xc4504444, &(0x7f0000000740)={0xfffffffc, 0xffff, 0x101, 0x20000003, "0400091000000000000048000000000000002f00", 0xb, 0xfffffffe}) r2 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)='#!', 0x2}], 0x1) write(r2, &(0x7f00000003c0)="0d2020c9c5e943ca8bf2eeebece66b7e4229ba53cde5e4090900db00d2bf000000a11f077f9575159a6b5aba577d4b8fceb300000000000000005d15131df1c130874dcfe18da489c40c42ef9aea5c536e9b67d07600a9930a", 0x59) ioctl$TIOCEXCL(r2, 0x2000740d) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abfba0900000008e37193f8343712050500b71dc0", 0x95, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$getown(r4, 0x5) 418.51952ms ago: executing program 4 (id=4280): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setuid(0xee01) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x1b6, 0x3ff}, 0x400, 0x10000, 0x0, 0x0, 0x200000001, 0x80000000000010c, 0x4, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xce0c, 0x0, 0x37) setitimer(0x2, &(0x7f0000000100)={{0x0, 0x9}, {0x0, 0x8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') readlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x7c110232708317ba) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000000)) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) 417.453877ms ago: executing program 0 (id=4281): sysctl$net_inet_esp(&(0x7f0000000000)={0x4, 0x2, 0x2, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000180)=0x5, 0x4) (async) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18, 0x401}, 0x0) (async) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2012, r1, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ktrace(0x0, 0x5, 0x40000424, 0xffffffffffffffff) (async) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) (async) r2 = syz_open_pts() close(r2) (async) r3 = syz_open_pts() ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x8) (async) writev(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)="cff5c05664db486cda974a82388ef359025250129bdb3b8c2c5e8156eb32d47209b2a02c3bb43bea0300", 0x2a}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) (async) minherit(&(0x7f000000e000/0x2000)=nil, 0x2000, 0x3) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2012, r3, 0x6f) (async) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="73b9ccc3000000f70004000086dd6000000000083a01fe8000000000000000000000000000bbff0200000000000000000000000000018284c1dd577ce5bd1a0ca3ce30462b7363c4883dabafc8d41479289426b6b6d3b69895f7ca6b96cfcd7d6ab74b10373a654d99aa785c1fdf04920101a5003c0e2323e3df468a65a0a7643dfd9dd1f2d080cc0d3a6cdc91c5484e294c181c979f5f23257d4363cc8b78330d91e07dad19897aaa0e01442e911f31a1f53761dc00566c679a69eb5add23ecab09ed52f894b21d953989823f991b577ce9ba5716f0ebc3"]) sendsyslog(&(0x7f0000000040)="f6a55b773b1bdd03a25e09ad015f12a35ece7c95f79fdad0", 0x18, 0x20) 414.542457ms ago: executing program 4 (id=4282): setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r0 = syz_open_pts() close(r0) syz_open_pts() open(&(0x7f0000000140)='./file0\x00', 0x78e, 0xca) pread(0xffffffffffffffff, &(0x7f0000000100)="dff305590c3926e338291fe8d85675c2ad576d17514ff9bf944c3524c9123e69ca446974bfab2cf4a47a4d0b9e0f", 0x2e, 0x0) setuid(0xffffffffffffffff) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x38, 0x0, 0x0) ktrace(&(0x7f0000000180)='./file0\x00', 0x6, 0x500, 0x0) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='x\x00') open(&(0x7f0000000080)='./file1\x00', 0x200, 0x0) socket(0x2, 0x1, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$FIOASYNC(r2, 0x80047469, &(0x7f00000000c0)=0x5) writev(r2, &(0x7f0000000040)=[{0x0}], 0x1) writev(r2, &(0x7f0000000580)=[{0x0}], 0x1) dup2(r2, r3) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x18, 0x6, 0x9}, 0x4, &(0x7f0000000300)="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", &(0x7f00000002c0)=0x210, 0x0, 0x0) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000080)={0x29f56361, 0x7f, 0xffffffff, 0xfffffffb, "097237e3120104784af00a56d864d3c3a3f4d3c0", 0xffffffff, 0xfffffffc}) 408.748162ms ago: executing program 7 (id=4283): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) r0 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000100)=0x7, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x310, 0x4000}, 0x100000000006, 0x861, 0xffffffffffffffff, 0x0, 0x80000000000000, 0xfffffffe, 0xb, 0x7}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$BIOCSBLEN(0xffffffffffffffff, 0xc0044266, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) truncate(&(0x7f0000000080)='./file0\x00', 0xffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000080), 0xe4a, 0x0, 0x4000a9fa, 0x0) r3 = socket(0x18, 0x3, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) rename(0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000180)) sysctl$vfs_ffs(0x0, 0x0, &(0x7f0000000080)="06e6a186cf8257197b8d91e7c56e0abd770a63cab73518977eb4e7f3cf84aa05aa7689c8dbe18896a2e8229d32f6e84c8033909c4b569ec9cc4cf6a445c82559ea205149a66ab99c89e4c319f5ced9ad4f702334eeb646b39b919a8d4fde562ba7135f28c86c751ee09b3028f555ae44a521f306ab76d3ef708e7f40d6e5c7cae35bb7622d953d709d8f83a05b80ff08aeb6f1a2537d113aedf5291a08932a64899b6d9e9be1f561e9fbc452ea18", 0x0, 0x0, 0x0) clock_gettime(0x2, 0x0) r4 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) setitimer(0x2, &(0x7f0000000140)={{0x2, 0x100000000000009}, {0x7fffffff, 0x4000001000}}, 0x0) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x404) 367.729692ms ago: executing program 4 (id=4284): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1) rename(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') fchdir(r0) mknod(&(0x7f00000000c0)='.\x00', 0x40, 0x9) 366.66496ms ago: executing program 4 (id=4285): r0 = getpid() r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIONREAD(r1, 0x40044274, &(0x7f0000000140)) getpgid(r0) getpid() (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$FIONREAD(r1, 0x40044274, &(0x7f0000000140)) (async) getpgid(r0) (async) 221.430223ms ago: executing program 1 (id=4286): mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x202) r0 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x8020699b, &(0x7f00000001c0)) mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x202) link(&(0x7f0000000040)='./bus\x00', &(0x7f0000000600)='./bus\x00') open$dir(&(0x7f00000000c0)='./bus/file0\x00', 0x80, 0x0) 220.631681ms ago: executing program 0 (id=4287): munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0xc0, 0x3, 0x0, 0x7ff, 0xfffeffff, 0x2, 0x1, 0x2, 0x2004007, 0xff}) sysctl$vfs_ffs(0x0, 0x0, &(0x7f0000000080)="06e6a186cf8257197b8d91e7c56e0abd770a63cab73518977eb4e7f3cf84aa05aa7689c8dbe18896a2e8229d32f6e84c8033909c4b569ec9cc4cf6a445c82559ea205149a66ab99c89e4c319f5ced9ad4f702334eeb646b39b919a8d4fde562ba7135f28c86c751ee09b3028f555ae44a521f306ab76d3ef708e7f40d6e5c7cae35bb7622d953d709d8f83a05b80ff08aeb6f1a2537d113aedf5291a08932a64899b6d9e9be1f561e9fbc452ea18", 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000180)={0xa, 0x8000}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000100)={0x809789, 0x3, 0xd3, 0x3ff, "bf08000100f1675910812cc900", 0x1, 0xfb}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = socket(0x18, 0x3, 0x0) setitimer(0x1, &(0x7f0000000140)={{0xe, 0x100800000000009}, {0x80, 0xffff}}, 0x0) ioctl$FIONREAD(r2, 0x81206919, &(0x7f0000000100)) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) 219.58538ms ago: executing program 4 (id=4288): preadv(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f0000000200)=""/104, 0x68}, {&(0x7f0000000140)=""/192, 0xc0}, {&(0x7f0000000400)=""/175, 0xaf}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000001840)=""/226, 0xe2}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/239, 0xef}, {&(0x7f00000016c0)=""/184, 0xb8}, {&(0x7f0000000280)=""/117, 0x75}], 0x9, 0x0) sysctl$net_inet6_ip6(&(0x7f0000001e40)={0x4, 0x18, 0x29, 0x32}, 0x400000000000005f, &(0x7f0000001e80)="e8431f34d5249ec3a478373af696a565249aad6051f8d6b96a4cc51d2f2ae3002c8464f0663ff38d0f02ed6bcf6d5b2b2031ee301000ab5535d48cd8fba76b949e4c074e26cb7656bc3bc158efa4d1aab311", &(0x7f0000001f40)=0x52, &(0x7f0000001f80)="b5e7d306", 0x4) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60000037001800000000000000000000010000000000000000000000080008002b1a0000000000042c000000000000002b000007fffffffe06004e"]) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2020007, 0x101, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x0, 0x9, 0xafde, 0x71002}, {0x2, 0x9, 0x8, 0x34}, {0x4, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007, 0x7}, {0x401, 0x200724, 0x7, 0x7}, {0x1, 0x650, 0x3, 0x7}, {0xce1, 0x400, 0x4f8, 0x6d}, {0xfff, 0x7ff, 0x401, 0x8}, {0x40002, 0x82, 0x8000005, 0x5}, {0x6a75, 0xff000000, 0xa94, 0x4}, {0x1cf, 0x10001, 0x0, 0x3}, {0x8, 0x9, 0x8, 0x8000002}, {0xb89, 0x555981aa, 0x70e, 0x112b}, {0x29a71717, 0x9, 0xfffffffd, 0x6}, {0xc, 0x2000002, 0x0, 0x848}, {0x0, 0x1, 0x1002, 0x30000}]}) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r0 = syz_open_pts() close(r0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$VNDIOCGET(r1, 0x80106468, &(0x7f00000003c0)={'./file0/file0\x00', 0x6c1, 0x3, 0xfffffffffffffff4}) r2 = syz_open_pts() ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000180)={0x1040978a, 0xfe, 0xf7fffc00, 0x80a19f, "bb080300b2a47bbc8756da043f57000000000080", 0x0, 0x4}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000080)=0xc) shmget$private(0x0, 0xc00000, 0xc6, &(0x7f00003fd000/0xc00000)=nil) bind$inet6(r3, &(0x7f00000000c0)={0x18, 0x2, 0x401, 0x2}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f0000000200)=""/104, 0x68}, {&(0x7f0000000140)=""/192, 0xc0}, {&(0x7f0000000400)=""/175, 0xaf}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000001840)=""/226, 0xe2}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/239, 0xef}, {&(0x7f00000016c0)=""/184, 0xb8}, {&(0x7f0000000280)=""/117, 0x75}], 0x9, 0x0) (async) sysctl$net_inet6_ip6(&(0x7f0000001e40)={0x4, 0x18, 0x29, 0x32}, 0x400000000000005f, &(0x7f0000001e80)="e8431f34d5249ec3a478373af696a565249aad6051f8d6b96a4cc51d2f2ae3002c8464f0663ff38d0f02ed6bcf6d5b2b2031ee301000ab5535d48cd8fba76b949e4c074e26cb7656bc3bc158efa4d1aab311", &(0x7f0000001f40)=0x52, &(0x7f0000001f80)="b5e7d306", 0x4) (async) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5) (async) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60000037001800000000000000000000010000000000000000000000080008002b1a0000000000042c000000000000002b000007fffffffe06004e"]) (async) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2020007, 0x101, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x0, 0x9, 0xafde, 0x71002}, {0x2, 0x9, 0x8, 0x34}, {0x4, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007, 0x7}, {0x401, 0x200724, 0x7, 0x7}, {0x1, 0x650, 0x3, 0x7}, {0xce1, 0x400, 0x4f8, 0x6d}, {0xfff, 0x7ff, 0x401, 0x8}, {0x40002, 0x82, 0x8000005, 0x5}, {0x6a75, 0xff000000, 0xa94, 0x4}, {0x1cf, 0x10001, 0x0, 0x3}, {0x8, 0x9, 0x8, 0x8000002}, {0xb89, 0x555981aa, 0x70e, 0x112b}, {0x29a71717, 0x9, 0xfffffffd, 0x6}, {0xc, 0x2000002, 0x0, 0x848}, {0x0, 0x1, 0x1002, 0x30000}]}) (async) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) (async) syz_open_pts() (async) close(r0) (async) openat$vnd(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) (async) ioctl$VNDIOCGET(r1, 0x80106468, &(0x7f00000003c0)={'./file0/file0\x00', 0x6c1, 0x3, 0xfffffffffffffff4}) (async) syz_open_pts() (async) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000180)={0x1040978a, 0xfe, 0xf7fffc00, 0x80a19f, "bb080300b2a47bbc8756da043f57000000000080", 0x0, 0x4}) (async) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) (async) accept$inet6(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) shmget$private(0x0, 0xc00000, 0xc6, &(0x7f00003fd000/0xc00000)=nil) (async) bind$inet6(r3, &(0x7f00000000c0)={0x18, 0x2, 0x401, 0x2}, 0xc) (async) 215.031611ms ago: executing program 4 (id=4289): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="6dc1", 0x2}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet(0x2, 0x3, 0x102) (async) r1 = socket(0x800000018, 0x2, 0x0) sendto(0xffffffffffffffff, 0x0, 0x58, 0x0, &(0x7f0000000080)=@in6={0x18, 0x3, 0x0, 0x1ff}, 0xc) (async) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) (async) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x2010, r2, 0x81) (async) r3 = socket(0x11, 0x3, 0x0) sysctl$vfs_nfs(&(0x7f00000010c0)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f0000000100)={&(0x7f0000000180)={&(0x7f0000000480)=@un=@file={0x0, ""/520}, 0x20a, 0x0, 0x0, 0x0}}, 0x10, 0x2, 0x0) (async) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 214.577502ms ago: executing program 3 (id=4290): ktrace(0x0, 0x1, 0xd27d43220c7df9f, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) chroot(0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2d176f4b8f82c1d09936270286ea75b958983a9f15438392f4d2feb0900000000000ef962", 0xa8269}], 0x1, 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x3c) ftruncate(r3, 0x84002) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/49, 0x31}], 0x1, 0xd16c) r4 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x80, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x402, 0x0) writev(r5, &(0x7f0000001500)=[{&(0x7f0000000140)="5bcad694936da07097df82bb6ef861c67422c6c01d2505d474194e22a74cbf1ca1548c8532ca323aa1217b3957c835c39ab29eea95fbc3192e750527b9b6e56ec61857e23a7fd0a79f7c71b9b1bfb624ecce1e1d865bbf275c08f4b4d05cc8e7ea27a6de7f0369448a", 0x69}, {&(0x7f0000000040)="3b58369a7b93bce41622325e443e9ac79f053b97eacb3362bbb333d0517d351895bbdf843c01feebd5874359f9d39f77c651660a29c6cc01225dec4cb9", 0x3d}, {&(0x7f0000000200)="5c4b2fe29f71dba30120debbc5e892b6564bc144a3c8b24c20a73ab97a681f46b0e85e7f260ec510b6fd05a6ca55ad93656a0ac2fa6aca4faeb230e814fc7b7ed7f35d325781fe5b8a02958e42fb", 0x4e}, {&(0x7f0000000280)="a5b6de876286af7e384a0822321805b44950f6e0edf2988774f0509c187e451115b72775c930d483c06df8176dd567511a55f724072d79150d7f7b6e3ab9f2772250da51995190c00db3ab132c9c40a6d47cce494b0a28b8c8ef73b246d0268684205050059ee46ddd24e4204355123f12966b0e6a3cbbef17975e3e308596f4be24427048a15c947c2e8dc638151e9cf1b85f762da1493d40531f888ff2a456a50d08e947fb60c18e", 0xa9}, {&(0x7f0000000380)="54e6138e31839a51015f8b1052ec25737d464f8a008e5ad25f8b992049b5d2422170d2d91a81aa5f6c8c306b2c611c88344eaadc34f9e93c1e32ba9968f86d1a1843447f937483f45a740e3ae143b7126738901237eefb08e9f20315360eb74dc0052ba18039494c27d21d8e01f3b90184f88d277a096d1ce5c167b2d696979d5b34209a9e9beaf2a703d1f6fefac4c039142bb326501991d6a5180f11d099a9e43fe0ab2e07bfa16af034ca3fde5b4b8f9d56f2668ba0ba186a28ab1fc43dd0ba3a85f6e34c073a77ab", 0xca}, {&(0x7f0000000480)="686f840c96cdf8acb655cd164a8b3df5fcb702854a539e0668f446338fbc228dd0c67afc6e50e9e790117f494ab736158f1af4eca35a91d4018e226bf69df9", 0x3f}, {&(0x7f0000001580)="a7a71f5a4d8e455b0df9d90c6e16b08d31a3ca34e7e8bb0dd90b3c053bd534de2fbd096683c21cfb0d7050a8c80a802c9517065a102e49d32541091181b5d16f4113cec38d3e8ee6f506a96cb5380edac4aedb96cc8d5a799264cdddeea0e18405a23b3dd5b1db1880ab075337310673c2af1714453c01a260569feae94c4e1adabb004d74d6ed22f390952a0fb153ae1f19a157cd835f3379bbe986610d8e21271a6f6c1548008d6494529f425d6b8eadb0f29c9b7061564e004c9bad0ac1d06b4c2f3dd1685fd644ec5db122efd0bd83472c570ab9643670f5fd6ca478580246d7f39d6fcea0fc63baa343cdb730dc1ca80112a7aac7d5ea1a72287ae125062d07d8d3c1de1371c1e8337d406a1d78d3639637f2abcd75e0a4ed9830b187f92f8d38466374aef323f8a72dbe9b4b627f79fb4ab9a34bacedb1c6f5b5d0f3c828f5d9946753fa9eb939d03b951b06d2cecc2420afb3b10c2c4491a9fa100a6d655ecf244b9ecf7be9643de75f99004d10350d689ef13a0f662a873b4c216d24a57d497f0db35719e6a4d6325e6c41a88ee8f5e2912ce8545a84a3cc180aba3ca1232fd86684d11f38a45d69bfab5ab5f344a8705fce498486f1bccda9af7951501562c833330dbc8b6e9beb3697fd69d43d432e37962899eb709f84023b80a7639b563d27a362487551a12c746319c2f27aa1327bcb19309ab9ac09cf6d", 0x1fe}], 0x7) close(r5) preadv(r4, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x1, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x8d, 0x4, 0x80000004}, {0x61, 0xfd, 0x52, 0x6}, {0x6, 0x8, 0x8, 0x3}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) r7 = socket(0x2, 0x400000000002, 0x0) setsockopt(r7, 0x0, 0x3, &(0x7f0000000600), 0x0) sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, 0x0, 0x0, &(0x7f00000002c0), 0x0) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x87, 0x8a, 0x2, 0x80000004}, {0x30, 0xfd, 0x3, 0x59}, {0x6, 0xf9, 0x8}]}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100000000, 0x6, 0x5, 0xdf60, 0xfffffffffffffffe, 0x67569535, 0x2f01, 0x4, 0x3, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0xf, 0x8000, 0x5b, 0x1, 0x1fe, 0x9, 0x0, 0x2], [0x120000001, 0x2, 0x3, 0x0, 0xb, 0xffffffff, 0xffffffff00000000], [0x100, 0x5, 0x7ffffffffffffffe, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x20000004, 0x0, 0x2}, {0xfffc, 0x2, 0x5}, {0x4, 0x2, 0xffffffff, 0x80}, {0x3, 0x5, 0x4, 0xfffffffffffffffe}, {0x6, 0x2, 0x1000, 0x8}, {0x0, 0x2003, 0xa8d, 0x2000000000000000}, {}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x5, 0x5}, {0x4, 0x80000000, 0x6d5, 0x2}}}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) 4.485196ms ago: executing program 1 (id=4291): select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0x0, 0x1, 0x2000000000000000, 0x1818, 0x8, 0x9}, 0x0, 0x0, 0x0) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r0 = socket(0x1, 0x2, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r1 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x8625, "0100012d29fb000700000000098002005e00"}) close(r1) syz_emit_ethernet(0x42, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaa8daaaaaaaaaaaa08004806003400640003069d9078ffffffffdfffffff070b1eac1400aa7f000001000e009078000b0008000003fc0000000100000009cae7d606fb9637787b039ddeaf37a935f7790ea84a750fbc2ce634bf954da8e1ccbb80ebf498a8f02bd98bd7a03940336f30a93f"]) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r3 = socket(0x18, 0x3, 0x50) r4 = socket(0x18, 0x1, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x400, &(0x7f0000000080)=@in6={0x18, 0x2, 0xffffff81, 0x7ff}, 0xc) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) setsockopt$sock_int(r4, 0xffff, 0x1, &(0x7f0000000000)=0xffffc5db, 0x4) getsockname(r4, 0x0, &(0x7f0000000140)) setuid(0xffffffffffffffff) ioctl$FIONREAD(r3, 0x802069c1, &(0x7f00000001c0)) r5 = kqueue() mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802) r6 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) ioctl$FIONREAD(r6, 0x400c745c, &(0x7f0000000080)) kevent(r5, &(0x7f00000000c0), 0x200008, &(0x7f00000001c0), 0x1, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0xcf6d, 0x73, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100000000, 0x6, 0x5, 0xdf62, 0xfffffffffffffffe, 0x9, 0x2f01, 0x4, 0x6, 0xde9, 0x0, 0x4, 0x1, 0x2, 0xfffffffffffffffa], [0xfffffffffffffffe, 0x80000001, 0x10, 0x7ffe, 0x5b, 0x1, 0x1fe, 0x0, 0x0, 0x100000008000005], [0x4000000006, 0x1, 0x0, 0x800, 0xd, 0x200, 0xffffffff00000000], [0x100, 0x40000000005, 0x7fffffffffffffff, 0x100000000, 0xfffffffffffffffe, 0x800000000000008], [{0x345, 0x5, 0x0, 0x7d0a}, {0xfffc, 0x2, 0x5}, {0x5, 0x2, 0x3, 0x80}, {0x3, 0x5, 0x4, 0xffffffffffffffff}, {0x6, 0x2, 0x41000, 0x8}, {0x0, 0x2007, 0x9, 0x2000000000000004}, {0x0, 0x0, 0xff, 0x1}, {0x0, 0x100, 0x0, 0x8}], {0x5, 0x5, 0x5}, {0x5, 0x80000000, 0x6d5, 0x2}}}) socket$inet(0x2, 0x2, 0x0) socket(0x2, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setuid(0xee01) socket(0x18, 0x2, 0x0) 858.14µs ago: executing program 3 (id=4292): open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x4001, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="1817f50000000001"]) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) setsockopt(r1, 0x6, 0x4, &(0x7f0000000040)="fb9f0f7d", 0x4) r2 = fcntl$dupfd(r0, 0x2, r0) close(r2) r3 = socket(0x26, 0x2, 0x0) writev(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)="c67c8a0b19234a599de7a52d5a39e3ae26dd211b6686dda2b949cc18d7e59e8f1c5c6267dcdd673a0e05e5b9a1a36737ab9e24cdfa3689f072637ef54be3e1b5b3d1a13bc261ef25f9092b5161cb3c78967e20c328aaf8786e860f3e624c12379f4df4d37de89fea00c08e", 0x6b}, {&(0x7f0000000140)="db93c420ada7cd01cb6a78bd705b2bdf86c7f07823c29bfa2d0c6cb8eaee694f3d831434c28b8cee143397282ef5ed488bfc5b63b60a408dd184c0d0ddb3315861dd3113100f222a3534fd11b53a02d5bd5a0e2e4390570abd9af3ea34e0cfd0a9957e430b066a61697d8a1fdc7df7b3ef0eb1706cbd51b2c364ce4328f66a3a1249e29e3711cab64b77e8ba0ac1341675e4368245e7e2ec7ed051cd2b3e", 0x9e}, {&(0x7f0000000200)="31178ea9a53245527fbe2f7b653470a2773f0d1672ebe9d5b9e9bcb93b86c87c8f7b1d52b1f206326fcf8f2c102b85c412d1e85014638fc62987a58e4055b4cd27fd21b06b6ccd47acf030fa5371ec0bbff10e34c177ba86e6fd3d8d36910b9f071c02d2c43094218e26b4c9ff0e8c33ddd172d1e5cb1b2329542adf9846fd8d0f922b1602aeb03fb817c66cf3cf653a25090c27a1d3565db42fbe70b609fe77be2eb9c7900f0c3a26650dba1bf948da6aafd533", 0xb4}, {&(0x7f00000002c0)="87cb7b032b931a2524aa39915cf4d6a5f0eff45a02936dafa21fdf6ae808aa736f3de5046a504e1978c723c7d9393ea31ecc53a9ee9d4b30d7e33879d324048587109cbfd176e9c12580834dcb8d071b7585d6e3a0228cda85bff9758ccf65bda1f26f2a5658c07763c2cc0a1cf769467def19c9aa44acc091b585fa3ba800a4f5557bbe54da425032153be775f2d185a275aee2a6e849f71f94a388", 0x9c}, {&(0x7f0000000380)="b627e494955e548d549b329d132a9b47555c3f2fc956641b2f9bbb637f69aea197ce30940c6d6aa276c3df7cf63fcb1c540c968dd21f2b7b28b240e13466d9639dd539c24318cdbe0cded1a42ad04f4bcccfcc3b3efdd3021c36160c238c4479aef73ae7f4ddd6b9d4dc9f8a5d7c0140f407ff88eb5f5673a0ec14225d53f7ee04b25ca7df496be3ab33b754a1f574", 0x8f}, {&(0x7f0000000440)="066613f95899da15d42ad9d119c71027de9c305c1ff5ad0d09f64989f54f3ab9852151f9d34ca71c33afc7de2398c5b568700ac470f2356f0402047bf731cf3a2b114ca74d0cb085143239c76da92daa4c3342c0147fbe0a7354bc0b055e4b1bde0f868089f0b834699881cf57de5055f343d9203ae3fe2837224d2e600ee235e5130ffb92c430ccda3fb38515841d0e45fce905dd2c98bf16d9b6315cb5d3069ebfc11c99f0", 0xa6}, {&(0x7f0000000500)="c8cd0ba35be27e933b1b1375df4950b062929fd3a6ab4ac669bd9789bacacccfe0d8eb4709d2b2cc0ac8758edfa1235318dfe8bdd89a3d1eeeb0f3eb62edb2ae115c43481c641e5c2a6884a55400b07f3f395f01a72dbdca2314d318d11dd03cc37b43c9cb5574d6c5d7c902571098448df16ae12601378dec574b5668d017bddf2a88b292d60635894ce514f9715156c40cbbb4c9", 0x95}, {&(0x7f00000005c0)="c3729e312094544f6eeb0d266aa10c20307c9df6668477a9dc0c720611c7f9fdf521df0c4457a242ed27e1108be65bb79de1fc694a1639b8b6630fd67354d52cd7e3fcac1469bd22adaf1c931db0d4a50f6967bb0a28f299e55caaef5b010d280fa62db19dbe4e4410155e3100aa29825c139b5fe9237cc37c3ebfdc28fd582c75e2045d6dffddf339905b2f8acd8fde5cc71125dd56fc69e30a73329c6611e296612d90be7a5d87d282", 0xaa}], 0x8) shutdown(r3, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000080), 0x4) select(0x40, &(0x7f0000000000)={0x1b, 0x5, 0x4, 0x8, 0x0, 0x8, 0x200, 0xfffffffffffffffc}, 0x0, 0x0, 0x0) sysctl$hw(&(0x7f0000003200)={0x6, 0x11}, 0x2, &(0x7f0000003240), 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=4293): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() sendmsg$unix(0xffffffffffffff9c, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000500)="370dc7cc4e61858942", 0x9}], 0x1, 0x0, 0x0, 0x406}, 0x8) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$TIOCSETA(r1, 0xc450443c, &(0x7f00000000c0)={0x72f, 0x1, 0x9, 0x3, "c9f7d2462f0000023beeca8f00875a6e80f775d2", 0x2}) close(r0) r2 = syz_open_pts() ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000480)={0x2df57363, 0x1bc, 0xd, 0xfffffffd, "0a6400b72860147bccc7020000060000008700", 0x3, 0x9}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="a77fae3754946cc86437a371ca22895bb4e5482352ca4bb3ef52c13a62b8904668184965225c6de0bfd75b0b4160e4c61faca3e5e70ecb1ff36aa3bb5559986eeea14a3b4aac9b8040d717e60ef1d720b0cb779c434da9a6464ea2b25e4b8e533bf65ca7", 0x64}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. WARNING: thread `nfsio' (480111) exits with status -1 WARNING: thread `nfsio' (303652) exits with status -1 WARNING: thread `nfsio' (233989) exits with status -1 WARNING: thread `nfsio' (404589) exits with status -1         WARNING: thread `nfsio' (490208) exits with status -1 WARNING: thread `nfsio' (411710) exits with status -1 WARNING: thread `nfsio' (52769) exits with status -1 WARNING: thread `nfsio' (113848) exits with status -1 uvn_flush: obj=0xfffffd805fb56128, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! load: 3.99 not a controlling terminal malloc(): allocation too large, type = 6, size = 287762939904 load: 4.64 not a controlling terminal sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code malloc(): allocation too large, type = 6, size = 287762939904 WARNING: thread `nfsio' (369919) exits with status -1 WARNING: thread `nfsio' (397471) exits with status -1 WARNING: thread `nfsio' (485567) exits with status -1 WARNING: thread `nfsio' (209969) exits with status -1 pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx2, error=17 j|E1\:uvn_flush: obj=0xfffffd80758cf798, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! 0008: 5.!",% 4/ 3%4 !$$2%33%3 &/2 00081, %22/2=17                      j|E1\:./file0malloc(): allocation too large, type = 29, size = 16796513700 malloc(): allocation too large, type = 29, size = 16796513700 $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 2147483687 3%#/.$3 `ךq"lmalloc(): allocation too large, type = 29, size = 16796513700 pppx: unable to set addresses for pppx1, error=17 pmap_unwire: wiring for pmap 0xfffffd806c16c000 va 0x200000001000 didn't change! malloc(): allocation too large, type = 29, size = 16796513700 malloc(): allocation too large, type = 29, size = 16796513700 pppx: unable to set addresses for pppx1, error=17 denied attempt to set clock back 2147483709 seconds uvm_fault(0xffffffff8389b3d8, 0xffff8000013f8000, 0, 1) -> e kernel: page fault trap, code=0 Stopped at memcpy+0x19: repe movsq (%rsi),%es:(%rdi) TID PID UID PRFLAGS PFLAGS CPU COMMAND 397103 7333 0 0 0 0 syz-executor * 15266 7333 0 0 0x4000000 1K syz-executor memcpy() at memcpy+0x19 rtm_msg1(14,ffff80002a3b3fb8) at rtm_msg1+0x306 rtm_addr(14,ffff8000013f7f00) at rtm_addr+0xb9 in6_update_ifa(ffff800000afd800,ffff80002a3b43d0,ffff8000013f7f00) at in6_update_ifa+0x199a in6_ioctl_change_ifaddr(8080691a,ffff80002a3b43d0,ffff800000afd800) at in6_ioctl_change_ifaddr+0x64e ifioctl(ffff800010fd0bd0,8080691a,ffff80002a3b43d0,ffff8000fffead20) at ifioctl+0x16d2 sys_ioctl(ffff8000fffead20,ffff80002a3b45b0,ffff80002a3b4500) at sys_ioctl+0x674 syscall(ffff80002a3b45b0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x838bbc1630, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xffffffff8389b3d8, 0xffff8000013f8000, 0, 1) -> e ddb{1}> trace memcpy() at memcpy+0x19 rtm_msg1(14,ffff80002a3b3fb8) at rtm_msg1+0x306 rtm_addr(14,ffff8000013f7f00) at rtm_addr+0xb9 in6_update_ifa(ffff800000afd800,ffff80002a3b43d0,ffff8000013f7f00) at in6_update_ifa+0x199a in6_ioctl_change_ifaddr(8080691a,ffff80002a3b43d0,ffff800000afd800) at in6_ioctl_change_ifaddr+0x64e ifioctl(ffff800010fd0bd0,8080691a,ffff80002a3b43d0,ffff8000fffead20) at ifioctl+0x16d2 sys_ioctl(ffff8000fffead20,ffff80002a3b45b0,ffff80002a3b4500) at sys_ioctl+0x674 syscall(ffff80002a3b45b0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x838bbc1630, count: -9 ddb{1}> show registers rdi 0xfffffd806d097948 rsi 0xffff8000013f8000 rbp 0xffff80002a3b3f30 rbx 0xfffffd8059c2df00 rdx 0xea rcx 0xc rax 0x7d806bc9f948 r8 0x2 r9 0x8080808080808080 r10 0x992d7403bb0d4ef7 r11 0xfffffd806d0978c0 r12 0xea r13 0xea r14 0xc0 r15 0xfffffd8059c2df00 rip 0xffffffff81e1b0c9 memcpy+0x19 cs 0x8 rflags 0x10206 __ALIGN_SIZE+0xf206 rsp 0xffff80002a3b3e78 ss 0x10 memcpy+0x19: repe movsq (%rsi),%es:(%rdi) ddb{1}> show proc PROC (syz-executor) tid=15266 pid=7333 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000fffeb4e8,0xffff8000fffeb260 process=0xffff80003c454e98 user=0xffff80002a3af000, vmspace=0xfffffd805a3663f8 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 80558 274812 84644 0 2 0 syz-executor 7333 397103 84272 0 7 0 syz-executor * 7333 15266 84272 0 7 0x4000000 syz-executor 26171 139709 2097 0 2 0 syz-executor 26171 411222 2097 0 3 0x4000080 netcon syz-executor 94823 389348 35016 0 2 0 syz-executor 94823 38276 35016 0 3 0x4000080 fsleep syz-executor 94823 193483 35016 0 3 0x4000080 fsleep syz-executor 4400 472588 66084 0 3 0x80 nanoslp syz-executor 4400 332087 66084 0 3 0x4000080 kqpoll syz-executor 4400 122042 66084 0 3 0x4000080 fsleep syz-executor 84644 170245 13989 0 3 0x82 nanoslp syz-executor 35016 248435 13989 0 3 0x82 nanoslp syz-executor 39684 419140 13989 0 3 0x82 nanoslp syz-executor 84272 438213 13989 0 3 0x82 nanoslp syz-executor 2097 285174 13989 0 3 0x82 nanoslp syz-executor 66084 2739 13989 0 3 0x82 nanoslp syz-executor 14757 256359 13989 0 3 0x82 piperd syz-executor 16160 250450 13989 0 3 0x82 nanoslp syz-executor 13989 494730 20387 0 2 0x2 syz-executor 20387 309263 80324 0 3 0x10008a sigsusp ksh 80324 103583 20061 0 3 0x98 kqread sshd-session 20061 12887 26594 0 3 0x92 kqread sshd-session 54556 328612 1 0 3 0x100083 ttyopn getty 26594 412220 1 0 3 0x88 kqread sshd 95280 105436 35440 74 3 0x1100092 bpf pflogd 35440 376589 1 0 3 0x80 sbwait pflogd 66413 160199 21686 73 3 0x1100090 kqread syslogd 21686 398095 1 0 3 0x100082 sbwait syslogd 13597 336140 1 0 3 0x100080 kqread resolvd 65614 215843 0 0 3 0x14200 bored smr 97824 307076 0 0 2 0x14200 zerothread 21136 81634 0 0 3 0x14200 aiodoned aiodoned 62051 86088 0 0 3 0x14200 syncer update 61289 270891 0 0 3 0x14200 cleaner cleaner 62985 298772 0 0 3 0x14200 reaper reaper 69791 340283 0 0 3 0x14200 pgdaemon pagedaemon 65681 95554 0 0 3 0x14200 bored viomb 12915 310822 0 0 3 0x40014200 acpi0 acpi0 44795 34870 0 0 3 0x40014200 idle1 21982 60809 0 0 3 0x14200 bored softnet1 96922 272991 0 0 3 0x14200 bored softnet0 77115 482143 0 0 3 0x14200 smrbar systqmp 17257 354084 0 0 3 0x14200 bored systq 11229 312918 0 0 3 0x14200 tmoslp softclockmp 95465 360445 0 0 3 0x40014200 tmoslp softclock 79862 85377 0 0 3 0x40014200 idle0 1 391160 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 7333 (syz-executor) thread 0xffff8000fffead20 (15266) exclusive rwlock netlock r = 0 (0xffffffff838223e0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 in6_ioctl_change_ifaddr+0x10b #3 ifioctl+0x16d2 #4 sys_ioctl+0x674 #5 syscall+0xbd4 #6 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 1 (0xffffffff8389d228) #0 witness_lock+0x5f1 #1 ifioctl+0x47f #2 sys_ioctl+0x674 #3 syscall+0xbd4 #4 Xsyscall+0x128 Process 77115 (systqmp) thread 0xffff8000ffffe000 (482143) shared rwlock systqmp r = 0 (0xffffffff838448b8) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10234 11057K 12496K 166960K 14561 0 pcb 20 18K 20K 166960K 999 0 rtable 230 15K 15K 166960K 1525 0 pf 45 20K 83K 166960K 630 0 ifaddr 39 8K 9K 166960K 338 0 ifgroup 57 2K 3K 166960K 637 0 sysctl 4 1K 9K 166960K 102 0 counters 70 37K 38K 166960K 802 0 ioctlops 0 0K 4K 166960K 2954 0 iov 0 0K 28K 166960K 371 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1485 93K 94K 166960K 5232 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 36 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 1K 166960K 179 0 dirhash 12 2K 2K 166960K 66 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 240K 166960K 4705 0 sigio 0 0K 0K 166960K 208 0 proc 67 83K 164K 166960K 1596 0 subproc 72 4K 4K 166960K 208 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 838 0 in_multi 70 5K 7K 166960K 499 0 ether_multi 1 0K 0K 166960K 63 0 mrt 1 0K 0K 166960K 53 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 253 1129K 1129K 166960K 253 0 exec 0 0K 1K 166960K 1495 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 7 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 221 143K 176K 166960K 43980 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 36 72K 102K 166960K 6222 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 429 0 NDP 13 0K 2K 166960K 242 0 temp 99 8660K 8788K 166960K 203522 0 kqueue 7 12K 32K 166960K 931 0 SYN cache 2 8K 16K 166960K 3 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 576 0 575 4 3 1 3 0 8 0 rtentry 176 447 0 368 6 1 5 6 0 8 0 unpcb 144 3893 0 3880 25 24 1 10 0 8 0 syncache 336 15 0 15 7 7 0 1 0 8 0 tcpqe 32 2 8 2 2 2 0 1 0 8 0 tcpcb 736 1942 0 1931 36 34 2 7 0 8 1 arp 136 65 0 50 1 0 1 1 0 8 0 inpcb 328 5838 0 5822 45 41 4 13 0 8 2 nd6 152 83 0 67 1 0 1 1 0 8 0 pkpcb 40 45 0 45 6 6 0 1 0 8 0 kcovpl 48 23 0 15 1 0 1 1 0 8 0 mppekey 1024 33 0 33 1 1 0 1 0 8 0 ppxss 1192 285 0 284 4 3 1 1 0 8 0 pppxif 1504 117 0 117 6 5 1 1 0 8 1 pfstscr 40 4 0 4 3 3 0 1 0 8 0 pffrag 232 64 0 50 2 0 2 2 0 482 0 pffrnode 88 57 0 44 1 0 1 1 0 8 0 pffrent 40 154 0 140 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 4 0 3 2 1 1 1 0 8 0 pfanchor 1288 3 0 0 1 0 1 1 0 8 0 pftag 88 3 0 1 1 0 1 1 0 8 0 pfstitem 24 308 0 211 1 0 1 1 0 8 0 pfstkey 128 434 0 337 4 0 4 4 0 8 0 pfstate 384 371 0 276 17 6 11 17 0 8 0 pfrule 1344 57 0 51 2 1 1 2 0 8 0 rttmr 136 10 0 10 6 5 1 1 0 8 1 art_heap8 4096 6 0 1 6 1 5 6 0 8 0 art_heap4 256 2045 0 1690 40 17 23 31 0 8 0 art_table 40 2051 0 1691 5 0 5 5 0 8 0 art_node 32 442 0 373 1 0 1 1 0 8 0 sysvmsgpl 40 12 0 6 1 0 1 1 0 8 0 semupl 112 4 0 4 3 3 0 1 0 8 0 semapl 112 160 0 150 1 0 1 1 0 8 0 dirhash 1024 53 0 36 3 0 3 3 0 8 0 dino2pl 256 10687 0 9120 99 0 99 99 0 8 0 ffsino 296 10687 0 9120 122 1 121 121 0 8 0 nchpl 144 17019 0 15279 65 0 65 65 0 8 0 rtmask 32 43 0 43 7 6 1 1 0 8 1 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 65108 0 65108 11 10 1 4 0 8 1 percpumem 16 416 0 366 1 0 1 1 0 8 0 kstatmem 264 390 0 360 4 1 3 3 0 8 0 acpiwqpl 32 3 0 3 1 0 1 1 1 8 1 scsiplug 72 26 0 26 6 5 1 1 0 8 1 scxspl 216 116171 0 116171 13 11 2 8 1 8 2 plimitpl 152 1506 0 1489 1 0 1 1 0 8 0 sigapl 424 4972 0 4928 8 1 7 7 0 8 0 knotepl 120 792 0 0 23 0 23 23 0 8 0 kqueuepl 224 1908 0 1900 16 13 3 5 0 8 2 pipepl 344 621 0 594 9 6 3 6 0 8 0 fdescpl 528 4936 0 4908 3 0 3 3 0 8 0 filepl 160 37380 0 37163 50 37 13 23 0 8 0 lockfpl 104 1914 0 1910 2 1 1 2 0 8 0 lockfspl 48 710 0 706 1 0 1 1 0 8 0 sessionpl 144 45 0 37 1 0 1 1 0 8 0 pgrppl 48 131 0 115 1 0 1 1 0 8 0 ucredpl 104 7274 0 7263 1 0 1 1 0 8 0 zombiepl 144 5796 0 5794 3 2 1 1 0 8 0 processpl 1232 4972 0 4928 7 3 4 6 0 8 0 procpl 664 12135 0 12085 8 2 6 7 0 8 0 sosppl 176 36 0 36 6 6 0 1 0 8 0 sockpl 752 10624 0 10594 94 87 7 29 0 8 4 mcl64k 65536 25 0 0 4 0 4 4 0 8 0 mcl16k 16384 19 0 0 3 0 3 3 0 8 0 mcl12k 12288 7 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 17 0 0 3 0 3 3 0 8 0 mcl4k 4096 115 0 0 15 1 14 15 0 8 0 mcl2k2 2112 3 0 0 1 0 1 1 0 8 0 mcl2k 2048 87 0 0 9 0 9 9 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 1865 0 0 115 1 114 114 0 8 0 bufpl 280 52000 0 45863 439 0 439 439 0 8 0 anonpl 32 15530 0 0 125 0 125 125 0 246 0 amapchunkpl 152 152656 0 152118 67 33 34 35 0 158 10 amappl16 200 18508 0 18380 113 92 21 39 0 8 5 amappl15 192 10 0 10 1 1 0 1 0 8 0 amappl14 184 11 0 11 4 3 1 1 0 8 1 amappl13 176 618 0 617 1 0 1 1 0 8 0 amappl12 168 5410 0 5375 4 2 2 3 0 8 0 amappl11 160 10 0 9 1 0 1 1 0 8 0 amappl10 152 62 0 54 1 0 1 1 0 8 0 amappl9 144 246 0 246 1 1 0 1 0 8 0 amappl8 136 33 0 29 1 0 1 1 0 8 0 amappl7 128 156 0 155 1 0 1 1 0 8 0 amappl6 120 470 0 459 1 0 1 1 0 8 0 amappl5 112 87 0 79 1 0 1 1 0 8 0 amappl4 104 546 0 519 1 0 1 1 0 8 0 amappl3 96 27215 0 27132 4 1 3 3 0 8 0 amappl2 88 5055 0 4997 2 0 2 2 0 8 0 amappl1 80 31014 0 30515 15 2 13 14 0 8 0 amappl 88 42217 0 42055 6 1 5 5 0 92 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 dma65536 65536 3 0 3 2 2 0 1 0 8 0 dma8192 8192 3 0 3 3 3 0 1 0 8 0 dma4096 4096 2 0 2 2 2 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 1 0 1 1 1 0 1 0 8 0 dma256 256 8 0 8 3 2 1 1 0 8 1 dma128 128 259 0 259 5 4 1 1 0 8 1 dma64 64 9 0 9 3 3 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 4936 0 4908 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 4936 0 4908 1 0 1 1 0 8 0 vmmpekpl 168 34216 0 34156 4 0 4 4 0 8 0 vmmpepl 168 315515 0 313720 157 55 102 119 0 357 5 vmsppl 488 4935 0 4908 6 1 5 5 0 8 0 rwobjpl 80 86428 0 79604 161 13 148 156 0 8 0 pdppl 4096 9880 0 9816 121 53 68 84 0 8 4 pvpl 32 24737 0 0 200 1 199 199 0 265 0 pmappl 256 4935 0 4908 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 488 0 135 11 0 11 11 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83877ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff8389d020) at __mp_lock+0x199 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x70d540c82b00, count: 8 ddb{0}> trace x86_ipi_db(ffffffff83877ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff8389d020) at __mp_lock+0x199 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x70d540c82b00, count: -7 ddb{0}> machine ddbcpu 1 Stopped at memcpy+0x19: repe movsq (%rsi),%es:(%rdi) memcpy() at memcpy+0x19 rtm_msg1(14,ffff80002a3b3fb8) at rtm_msg1+0x306 rtm_addr(14,ffff8000013f7f00) at rtm_addr+0xb9 in6_update_ifa(ffff800000afd800,ffff80002a3b43d0,ffff8000013f7f00) at in6_update_ifa+0x199a in6_ioctl_change_ifaddr(8080691a,ffff80002a3b43d0,ffff800000afd800) at in6_ioctl_change_ifaddr+0x64e ifioctl(ffff800010fd0bd0,8080691a,ffff80002a3b43d0,ffff8000fffead20) at ifioctl+0x16d2 sys_ioctl(ffff8000fffead20,ffff80002a3b45b0,ffff80002a3b4500) at sys_ioctl+0x674 syscall(ffff80002a3b45b0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x838bbc1630, count: 6 ddb{1}> trace memcpy() at memcpy+0x19 rtm_msg1(14,ffff80002a3b3fb8) at rtm_msg1+0x306 rtm_addr(14,ffff8000013f7f00) at rtm_addr+0xb9 in6_update_ifa(ffff800000afd800,ffff80002a3b43d0,ffff8000013f7f00) at in6_update_ifa+0x199a in6_ioctl_change_ifaddr(8080691a,ffff80002a3b43d0,ffff800000afd800) at in6_ioctl_change_ifaddr+0x64e ifioctl(ffff800010fd0bd0,8080691a,ffff80002a3b43d0,ffff8000fffead20) at ifioctl+0x16d2 sys_ioctl(ffff8000fffead20,ffff80002a3b45b0,ffff80002a3b4500) at sys_ioctl+0x674 syscall(ffff80002a3b45b0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x838bbc1630, count: -9