last executing test programs: 2.668095622s ago: executing program 5 (id=4246): mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02) open(&(0x7f0000000080)='./bus\x00', 0x20, 0x140) close(0xffffffffffffffff) 2.591734905s ago: executing program 5 (id=4251): mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) select(0x40, &(0x7f0000000040)={0x40007, 0x5, 0x8, 0x8000000000000003, 0x3, 0x1000000000090, 0x15, 0x3}, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r0, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) r1 = kqueue() read(r1, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) ioctl$WSDISPLAYIO_LSFONT(r2, 0xc058574e, &(0x7f0000000140)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7, 0x810, r1, 0x1000) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async) select(0x40, &(0x7f0000000040)={0x40007, 0x5, 0x8, 0x8000000000000003, 0x3, 0x1000000000090, 0x15, 0x3}, 0x0, 0x0, 0x0) (async) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VNDIOCSET(r0, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) (async) kqueue() (async) read(r1, 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) (async) ioctl$WSDISPLAYIO_LSFONT(r2, 0xc058574e, &(0x7f0000000140)) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7, 0x810, r1, 0x1000) (async) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) (async) 2.43345546s ago: executing program 1 (id=4252): kqueue() r0 = socket(0x18, 0x4000, 0x49) getsockopt$sock_int(r0, 0xffff, 0x1007, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x10, 0x1, 0xe8) kqueue() r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket(0x2, 0x1, 0x0) r3 = socket(0x2, 0x400000000002, 0x0) setsockopt(r3, 0x0, 0x23, &(0x7f0000000080)="c5f5d915", 0x4) dup2(r3, r2) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r2, &(0x7f0000000000), 0x10) r4 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r4, &(0x7f0000000000), 0x10) write(r4, 0x0, 0x0) kqueue() ioctl$WSMOUSEIO_SRES(r1, 0x80045721, &(0x7f00000000c0)=0x92) 2.429843507s ago: executing program 1 (id=4255): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x1) ioctl$FIOASYNC(r1, 0x80047460, &(0x7f00000000c0)=0x4) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000380)={0xf66c, 0x9, 0x9, 0x5fffff5f, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0x400, 0x207f}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="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", 0x292}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_linger(r3, 0xffff, 0x1021, 0x0, 0x0) writev(r0, &(0x7f0000000040), 0x0) ioctl$TIOCGETD(r1, 0x4004741a, &(0x7f0000000080)) r4 = open(&(0x7f0000000300)='./file0/file0\x00', 0x200, 0x0) read(r4, &(0x7f0000000380)=""/235, 0xeb) ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000100)={0xa15, 0x6, 0x3, 0x2000400, "2c7f88d112afd4f3bfed0f274ca9576eb663855b", 0x798, 0x10000}) execve(0x0, 0x0, 0x0) 2.160968497s ago: executing program 5 (id=4259): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000040)=0x9) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000200)=[{0x2c, 0x35, 0x3, 0x2000002}, {0x40, 0x1, 0x2, 0x22}, {0x206, 0x4, 0x9, 0x1}]}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[]) setsockopt$sock_int(r0, 0xffff, 0x1021, 0x0, 0x0) accept$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) open(&(0x7f0000000040)='./file0\x00', 0x800, 0x146) 2.159320255s ago: executing program 1 (id=4261): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r1 = getppid() getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000140), &(0x7f0000000180)=0xc) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"]) syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a27f2000f2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"]) getgid() mknod(0x0, 0x1ffa, 0x0) pipe(&(0x7f0000000080)) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) ktrace(&(0x7f0000000100)='./file0\x00', 0x2, 0xa1c, r1) 1.807952495s ago: executing program 2 (id=4263): sysctl$kern(&(0x7f00000000c0)={0x1, 0x2}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) select(0x40, &(0x7f0000000180)={0x4e, 0x44809ea0, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x0, 0x6}, 0x0, 0x0, 0x0) kevent(0xffffffffffffffff, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) kevent(0xffffffffffffffff, 0x0, 0xfffffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffffc, 0x29, 0x0, 0x0, 0x10005}, {{}, 0xfffffffffffffffe, 0x44, 0x20000000, 0x8000000000000001, 0x46ad}, {{}, 0x7ffffffffffffffc, 0x59, 0xf0000000, 0x1, 0x8}, {{}, 0xfffffffffffffffe, 0x20, 0x20, 0x80000000, 0xc3d}, {{}, 0xfffffffffffffffb, 0x0, 0x40000000, 0x9, 0x3f}, {{}, 0xfffffffffffffffd, 0x6, 0x4, 0xff, 0x10000}, {{}, 0xfffffffffffffffd, 0x60, 0x10, 0x2, 0xfff}, {{}, 0xfffffffffffffffc, 0x38, 0x8, 0x100, 0xfffffffffffffffb}], 0xff, 0x0) mprotect(&(0x7f000012d000/0x2000)=nil, 0x2000, 0x1) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) pread(r0, &(0x7f0000000040)="3cd15db7c30016", 0x50cc00, 0x0) sysctl$hw(0x0, 0x0, &(0x7f00000000c0)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af7e54a8341f3be673a174c3a12223a171ff2ab99d0e0d43f0a6c3948f11658e876ac2126614dcd00fdfe76f1ace1f77da0c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e491010010791840000000000000000081131a6f0b680f72f2b0d9a19e", 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637d) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) close(r1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) sysctl$kern(&(0x7f0000000000)={0x1, 0x1}, 0x2, &(0x7f0000000040)="c05b", &(0x7f0000000100)=0x2, &(0x7f0000000140)="2c7b7a8a17667eca98c2110283c8538080616fbe95d12a6c938119a88e458eccbd3ea58dfdecdd36cf74940a2c094ac51d664d18d0aa9114f3edc1fde9", 0x3d) syz_emit_ethernet(0x66, &(0x7f0000000180)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @rand_addr="3bcc3f0600000058132fa13a8be186e3", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x0, 0x2b, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2}}}}}}}) close(r0) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f00000003c0)={0xb, 0x200, 0x9, 0xff, 0x3, 0x40e5, 0x0, 0x10, [{0xb253, 0x8, 0x8, 0x84}, {0x8, 0x6, 0xd, 0x9}, {0x2, 0x2, 0x5, 0x9}, {0x0, 0xb2f, 0x8f, 0x82}, {0xd99c, 0xf461650, 0x1ff, 0x2}, {0x9, 0x5, 0x5}, {0x1, 0xffffffa3, 0x6, 0x1}, {0x9, 0x2, 0x1, 0x6}, {0x401, 0x1, 0x0, 0x8000}, {0x0, 0x5ba3, 0x5, 0x1000}, {0xd1d, 0x1, 0x60, 0x80000000}, {0x0, 0x81, 0x6, 0x1}, {0xfff, 0xe77, 0x6, 0x8}, {0x2, 0xb, 0x4, 0x7}, {0x5, 0x7f, 0xad86, 0x8}, {0x49d, 0x2, 0x0, 0x8a1}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000001c0), &(0x7f0000000080), 0x0, 0x0) 1.589366847s ago: executing program 0 (id=4267): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x7}, 0x85c, 0x8000000000000007, 0x0, 0x0, 0x1, 0x7b, 0x7, 0x4}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x18, 0x0, 0xffffffffffffff5a) r0 = syz_open_pts() syz_open_pts() syz_open_pts() fcntl$lock(r0, 0x9, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x101fffff9}) close(r0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = fcntl$dupfd(r1, 0xa, r1) setsockopt(r2, 0x3, 0x7, &(0x7f0000000140)="c16b8517b357b5946782faa8a447d18c3fa29514b2f2b41b7a01346a955b0ee2baaaa9d9d08d35521cf51b0dde0a84cb456f731c140572d93758b132a231893a3a392aa178071e29d9ce031d27f069d2cf618da0e7973f79218a94bb8558c39666aec96ec303bed92cbef6a7f792317c48787e123b69e78a6d1572898afd8558", 0x80) ioctl$WSMOUSEIO_SETMODE(0xffffffffffffff9c, 0x80045726, &(0x7f00000001c0)) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x3a9, 0x7a, 0xd6, 0xb}, {0x3, 0x2, 0x6, 0x1000}, {0x1, 0x0, 0x3, 0x80}, {0x6, 0x70, 0xf, 0x8}, {0x0, 0x5, 0x4, 0x5}]}) sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd6009000000200600030000000000000037f87ccdc0c4a92cff0000000001ea443d080000000001004e204e22", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='[B']) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) 1.58845213s ago: executing program 1 (id=4268): r0 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_int(r1, 0xffff, 0x1023, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x200, 0x0) ioctl$WSDISPLAYIO_ADDSCREEN(r2, 0x80245753, &(0x7f0000000140)={0x3, './bus\x00', './file0\x00'}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x10, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001600)="258b300ad151140900000000000000f3e8347a217a866229d1633579e2fae94a66b76f8f4cf33cd932e3987039", 0x2d}], 0x1, 0x0, 0x0, 0xb}, 0x403) sysctl$kern(0x0, 0x0, &(0x7f0000000280)="71cb42008037c30caef9efff587d454cadda00800000ff60df80b4c46a006200000000000000000082006963099dd901c8ce28040827d781fa6adc94ad214276f15b9ba9", &(0x7f0000000080)=0x44, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_extract_tcp_res(0x0, 0x4, 0x7) ioctl$TIOCSTAT(r2, 0x20007465, &(0x7f0000000100)) ioctl$PCIOCREAD(r2, 0x20007479, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7, 0x0}, 0x8) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x9, {0x100, 0x10000000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x3, 0x0) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r4, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) r5 = kqueue() mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x64c8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x0) kevent(r5, 0x0, 0xfffffffd, &(0x7f0000000040), 0x5, 0x0) kevent(r5, &(0x7f0000001280)=[{{r5}, 0xffffffffffffffff, 0x61, 0x40000000, 0x9, 0x8}, {{r0}, 0xfffffffffffffff9, 0x0, 0x20000000, 0x7}, {{r5}, 0xfffffffffffffff8, 0x0, 0x2, 0x2, 0xffffffffffffff81}, {{r0}, 0xfffffffffffffffe, 0x7, 0x2, 0x5, 0xfffffffffffffffe}, {{r0}, 0xfffffffffffffffe, 0xc1, 0x0, 0xd76, 0x1}, {{r5}, 0xfffffffffffffffa, 0x42, 0x2, 0xfffffffffffffffa, 0xfffffffffffffff2}], 0x3ff, 0x0, 0x8000800, 0x0) ioctl$VT_ACTIVATE(r2, 0x20007605, &(0x7f0000000180)=0x2) 1.380704028s ago: executing program 7 (id=4271): r0 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x106) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000001140)="8a", 0x1}], 0x1, 0xffff) mkdir(&(0x7f0000000040)='./file1\x00', 0x40) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="70ded9252291", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1, 0x1c, 0x1800, 0x2000, 0xfc}, @udp={{0x0, 0x1, 0x8}}}}}}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) pwrite(0xffffffffffffffff, &(0x7f0000000080)="4af177", 0x3, 0x0) setrlimit(0x1, &(0x7f00000011c0)) mmap(&(0x7f0000389000/0x2000)=nil, 0x2000, 0x3, 0x5012, r0, 0x0) unveil(0x0, 0x0) 1.380062037s ago: executing program 2 (id=4272): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x5, &(0x7f0000000280)=[{0x3d, 0x1, 0x0, 0x1919}, {0x25, 0x0, 0x2, 0x20000009}, {0x40, 0x2, 0x30, 0x7}, {0x87, 0x6, 0xaa, 0x7}, {0x6, 0x4, 0x7, 0x800}]}) write(r0, &(0x7f0000000240)="f01ad3d20cf7eb019beb3bbd0a30", 0xe) ioctl$BIOCSDLT(r0, 0x8004427a, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000040)=0x9, 0x4) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) getsockname$unix(r2, 0x0, &(0x7f00000010c0)) r3 = accept$inet(r2, &(0x7f0000000380), &(0x7f0000000200)=0xb) setsockopt$sock_timeval(r3, 0xffff, 0x1005, &(0x7f0000001980)={0x10000, 0x5}, 0x10) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x200, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x1b}, 0x7297, 0x3d0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x4}) r4 = socket(0x18, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0) close(r4) r5 = socket(0x800000018, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x1, 0x4}], 0x10}, 0x400) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236d", 0x42, 0x404, 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x8, 0x100) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$sock_timeval(r1, 0xffff, 0x1005, &(0x7f0000000000), &(0x7f0000000040)=0x10) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/154, 0x9a}, 0x1040) 1.379571701s ago: executing program 5 (id=4273): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) ioctl$VMM_IOC_RESETCPU(r0, 0x82405605, &(0x7f0000000040)={0x8, 0x80000001, {[0x10, 0x2, 0x5, 0x9, 0x0, 0x8, 0x3ce, 0xfffffffffffffffd, 0x8000, 0x7, 0x5, 0x0, 0xe, 0x6, 0x0, 0x9bc, 0xfffffffffffffffe, 0x10000], [0x76d, 0xd, 0x4590d417, 0xfffffffffffffffd, 0x515, 0x7fffffff, 0x25, 0x4, 0x9, 0xe3], [0x0, 0xfffffffffffffff7, 0x0, 0x5, 0x4, 0x69f553a3, 0x800], [0x0, 0x0, 0xffffffffffffffff, 0x1a75, 0x4, 0xe], [{0x200, 0x0, 0x7, 0xb}, {0x4, 0x6, 0x2a58, 0x6}, {0x8d65, 0x6, 0x800, 0xb}, {0x6, 0x1, 0x6, 0x3}, {0x4, 0x400, 0x9, 0x8000}, {0xb17, 0x8001, 0x4, 0x3}, {0xa, 0xe, 0x3, 0x8}, {0x9, 0xe, 0x1, 0x3}], {0xa6, 0xffff7fff, 0x5, 0x2}, {0x5, 0x8, 0x2743d988, 0x9912}}}) ioctl$VMM_IOC_INFO(r0, 0xc0185603, &(0x7f0000000380)={0xf6, 0x0, &(0x7f0000000280)=""/246}) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f00000003c0)) fchdir(r0) select(0x40, &(0x7f0000000400)={0x967, 0x8, 0x37b, 0x6, 0x4, 0xffffffff, 0x0, 0x1}, &(0x7f0000000440)={0x6, 0x0, 0x7fff, 0x8000000000000001, 0x4, 0x2, 0x7ff, 0x4}, &(0x7f0000000480)={0x9, 0xffffffffffffff7f, 0x9, 0x5, 0xc, 0x5, 0x0, 0xe}, &(0x7f00000004c0)={0x80ff, 0x5}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) ioctl$TIOCGTSTAMP(r2, 0x4010745b, &(0x7f0000000540)) ioctl$VMM_IOC_RUN(r0, 0xc0205602, &(0x7f0000000800)={0x7fff, 0x10001, 0x50, 0x8, &(0x7f0000000580)={{0x2, 0x9, 0x0, 0x8, 0xf8, 0x5}, {[0x7fff, 0x75a8, 0x4, 0x100000001, 0x12000000000, 0x4, 0x5, 0x3, 0xc452, 0x5, 0x4d7, 0x1, 0x1, 0x8, 0x3, 0x2, 0x2, 0xb], [0x2, 0xbe, 0x5, 0x5, 0x5, 0x7, 0x10001, 0x3ff, 0x3, 0x7], [0x4, 0xfffffffffffffb22, 0x1, 0x1, 0x1, 0x7, 0x100], [0x3, 0x6, 0x8, 0x400, 0x8000, 0x6], [{0xf, 0x900, 0x3}, {0x2, 0x161, 0x3, 0xa6}, {0x5, 0xe5, 0x7, 0x1}, {0x1, 0xffff, 0x8, 0x8}, {0x2da7, 0x5, 0x800, 0x1}, {0x7464, 0x0, 0xe0, 0xfffffffffffffffc}, {0xf800, 0x0, 0x6, 0xe}, {0x0, 0x71, 0x7, 0x1afacfbd}], {0x9cc6, 0x5, 0x8, 0xc3}, {0x4, 0x4d, 0xc}}}}) r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000840), 0x10000, 0x0) r4 = accept$unix(r1, &(0x7f0000000880)=@abs, &(0x7f00000008c0)=0x8) connect$unix(r4, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0xa) select(0x40, &(0x7f0000000940)={0x4, 0x32, 0x7, 0xb22, 0xa0f8, 0xa, 0x9, 0x7}, &(0x7f0000000980)={0x4, 0xfff, 0x6, 0x8, 0x8000, 0x6, 0x2, 0xfffffffffffff42e}, &(0x7f00000009c0)={0x2, 0x7fffffff, 0x0, 0x6, 0x0, 0xfffffffffffffff9, 0x0, 0x9d}, &(0x7f0000000a00)={0x1014ad9f, 0x23}) r5 = socket$inet(0x2, 0x3, 0x0) recvfrom$inet(r5, &(0x7f0000000a40)=""/92, 0x5c, 0x1040, 0x0, 0x0) ioctl$BIOCGRTIMEOUT(r1, 0x4010426e, &(0x7f0000000ac0)) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000b00)) r6 = accept$inet(r5, 0x0, &(0x7f0000000b40)) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000b80), 0x100, 0x0) fcntl$dupfd(r2, 0xa, r7) r8 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) dup2(r2, r8) read(r1, &(0x7f0000000c00)=""/124, 0x7c) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000c80)={0x0, 0x0, 0x0}, &(0x7f0000000cc0)=0xc) setreuid(r9, 0x0) connect(r3, &(0x7f0000000d00)=@in={0x2, 0x0}, 0xc) ioctl$BIOCSRTIMEOUT(r8, 0x8010426d, &(0x7f0000000d40)={0x7, 0x3}) ioctl$TIOCNOTTY(r2, 0x20007471) fchown(r2, r9, r10) kevent(r3, &(0x7f0000000d80)=[{{r4}, 0x2, 0x4, 0xfffff, 0x7ff, 0xd}, {{r8}, 0xfffffffffffffffa, 0xd0, 0xfffff, 0xfff, 0x7}, {{r7}, 0xfffffffffffffffa, 0x20, 0xf0000000, 0x5, 0xed38}, {{r0}, 0xfffffffffffffffb, 0x0, 0x40000000, 0x8, 0x7801}, {{r3}, 0xfffffffffffffffd, 0x49, 0x2, 0x7fff, 0x3}, {{r0}, 0xfffffffffffffff9, 0x50, 0x1, 0x0, 0xfc3}, {{r0}, 0xfffffffffffffffa, 0x40, 0x20, 0x1, 0x8}, {{r7}, 0xffffffffffffffff, 0x0, 0xf0000000, 0x7, 0xdc1dc2d}, {{r3}, 0xfffffffffffffffb, 0x0, 0x40000000, 0x7fffffffffffffff, 0x9}], 0xca71021c, &(0x7f0000000f00)=[{{}, 0xfffffffffffffffc, 0x0, 0x40, 0x8000000000000001, 0x5}, {{r1}, 0xfffffffffffffffc, 0x20, 0x20, 0x10000, 0x5}], 0x6, &(0x7f0000000f40)={0x8, 0x1ff}) 1.283988045s ago: executing program 0 (id=4275): write(0xffffffffffffffff, &(0x7f0000000180)="742bda523993d84bd9691018ec1e694c45bcafc0366f094e05f22224cd7dc8bb9016b523e0c3b4d0691a099ae4efb67de846da918bce6b89b0eb63a90708acfb", 0x40) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x80000001, [{0x2}, {0x0, 0xeffffffe}, {}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x8}, {}, {0x0, 0xc8}, {0x5, 0x2}, {}, {0x3}, {}, {0x3}, {}, {}, {0x0, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {}, {}, {0x1, 0xfffffffc}, {0x406e0f656ed361f}, {}, {0x0, 0xfffffffc}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x1}]}) poll(&(0x7f0000000000), 0x200000000000002c, 0x0) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000000)) syz_emit_ethernet(0x3d, &(0x7f0000000080)={@local, @remote, [{[{0x88a8, 0x7, 0x1, 0x200}], {0x8100, 0x5, 0x1, 0x1}}], {@arp={0x806, @generic={0x18, 0x873a, 0x6, 0x3, 0x9, @random="7f8812a7b748", "c98eea", @remote, "0d94418b0d328c0bca39a2f6188ce1db"}}}}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x23, &(0x7f0000000080)}) 1.276740037s ago: executing program 7 (id=4276): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000014c0)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x20, 0x3a, 0x0, @rand_addr="687af6acabb6150f955930e5fedb296f", @rand_addr="fffffffe00000800001a003f00000005", {[@routing={0x4, 0x0, 0x0, 0x7}], @icmpv6=@mld={0x83, 0x0, 0x0, 0xfd1, 0x6, @loopback}}}}}}) kevent(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x3, &(0x7f0000000240)={0x80000000, 0x2}) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x10000000000001b4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) dup2(r3, r2) sendmsg$unix(r2, &(0x7f0000002a40)={0x0, 0xffffffffffffff89, 0x0, 0x6e}, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xd5, 0xc0, 0xfffe, 0x1, 0x407ff, 0xffffffff, 0x4005, 0x1, 0x2, 0x80000, 0xf16}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x4f4, 0xde, 0xfff6, 0x0, 0xb, 0xb, 0x1, 0x1, 0x2, 0x3, 0x4000000000f1a}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCLOCK(r5, 0x20004276) ioctl$BIOCVERSION(r5, 0x4010427e, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYRES64=r5, @ANYBLOB="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"/4096, @ANYRESOCT=r4]) 1.272991646s ago: executing program 2 (id=4277): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) linkat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x4) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) 1.245145852s ago: executing program 2 (id=4278): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000002c0)={0x10, 0xffffffffffffff2c, [{&(0x7f000062c000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4}, {&(0x7f000069d000/0x2000)=nil, &(0x7f000068b000/0x1000)=nil, 0xffffffffffffff7c}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x9}, {&(0x7f0000418000/0x1000)=nil, &(0x7f00004ac000/0x1000)=nil, 0x3}, {&(0x7f000052e000/0x1000)=nil, &(0x7f0000022000/0x1000)=nil, 0x401}, {&(0x7f000042f000/0x2000)=nil, &(0x7f000076e000/0x2000)=nil, 0x4}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x4}, {&(0x7f000041f000/0x3000)=nil, &(0x7f000062c000/0x1000)=nil, 0x5}, {&(0x7f0000420000/0x2000)=nil, &(0x7f0000fed000/0x4000)=nil, 0x1}, {&(0x7f000069e000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f0000002000/0x1000)=nil, &(0x7f0000689000/0x3000)=nil, 0x3}, {&(0x7f0000418000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0xb}, {&(0x7f0000196000/0x3000)=nil, &(0x7f00000a6000/0x3000)=nil, 0xb}, {&(0x7f000006a000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x6}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fed000/0x10000)=nil, 0x1000039fa}, {&(0x7f000042d000/0x3000)=nil, &(0x7f0000239000/0x2000)=nil, 0x7}], './file0\x00'}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) close(r0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="ec682529000000fb7a8c653d77a49036e02013b6d2", 0x15}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="e1635a54862902af124413450000a1f515df5a9d", &(0x7f0000000080)=0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0x0, 0xff, 0x8, 0x6}) 996.723868ms ago: executing program 7 (id=4281): r0 = socket(0x2, 0x2, 0x0) mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x10000000, 0x7, 0x2, 0x71000}, {0x7, 0x8, 0x9, 0xfffffff9}, {0x7, 0x8000b86, 0xffffff7c, 0x9}, {0x9d38, 0x8800, 0x2}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0x1, 0x200004f8, 0x10}, {0x6, 0x80b, 0x14, 0xb}, {0x2, 0x82, 0x4, 0x9}, {0x4, 0x8101, 0x1000d1b, 0x1ff}, {0x1e0, 0x10001, 0x7ff, 0x3}, {0x7ff, 0x9, 0x9, 0x5}, {0xb8c, 0xc3b, 0x3, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x7, 0x6}, {0xfffffffd, 0x9, 0x4, 0x30005}]}) open$dir(&(0x7f0000000140)='.\x00', 0x2, 0x100) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e", &(0x7f0000000080)=0x3, 0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f00000000c0)=0x400, 0x12) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) r2 = socket$inet6(0x18, 0x3, 0xfc) getsockopt$sock_int(r2, 0xffff, 0x1000, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r0, &(0x7f0000000000), 0x10) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r3, &(0x7f0000000000), 0x10) write(r3, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 995.235847ms ago: executing program 3 (id=4282): r0 = socket$inet6(0x18, 0x3, 0x0) getsockopt(r0, 0x29, 0x36, 0x0, 0x0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) setuid(0xee01) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) r3 = msgget(0x1, 0x825) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) r5 = getegid() setgid(r5) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0}, 0xc) r7 = getuid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000180)='./file0\x00', r7, r9) r10 = fcntl$getown(r1, 0x5) r11 = getpgrp() msgctl$IPC_SET(r3, 0x1, &(0x7f00000001c0)={{0x6, r4, r5, r6, r9, 0x154, 0x6}, 0x7fff, 0x2, r10, r11, 0x8, 0xffffffffffffffff, 0x4, 0x7fff}) 903.827758ms ago: executing program 4 (id=4285): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mlock(&(0x7f000017f000/0x4000)=nil, 0x4000) (async) getrusage(0x0, 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f0000068000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000463000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x10000}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00002fc000/0x4000)=nil, 0x2b}, {&(0x7f00002ae000/0x1000)=nil, 0x0, 0xe04}, {&(0x7f0000504000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000181000/0x3000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000066000/0x3000)=nil, 0x3ffffffffffff}, {&(0x7f0000ad4000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x200000001}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000463000/0x3000)=nil}, {0x0, &(0x7f000028b000/0x4000)=nil, 0x7}], './file0\x00'}) (async) ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f0000000140)) r1 = socket(0x11, 0x3, 0x8) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000300)=0x9) close(r1) (async) socket$inet6(0x18, 0x1, 0x7) r2 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x2010, r2, 0x6615) semctl$GETZCNT(0xffffffffffffffff, 0x3, 0x7, &(0x7f0000000200)=""/233) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) 899.197459ms ago: executing program 2 (id=4286): rename(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='.\x00') mknod$loop(&(0x7f0000001480)='./file0\x00', 0xc000, 0x1) r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) ftruncate(r0, 0xb358) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) nanosleep(&(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000100)) lseek(r0, 0x8f8, 0x0) (async) lseek(r0, 0x8f8, 0x0) execve(0x0, 0x0, 0x0) getsockopt(r0, 0x386, 0x10001, &(0x7f0000000080)=""/62, &(0x7f0000000240)=0x3e) recvmsg(r0, &(0x7f0000001440)={&(0x7f0000000000)=@in6, 0xc, &(0x7f0000000340)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f0000000140)=""/186, 0xba}, {&(0x7f00000014c0)=""/94, 0x5e}, {&(0x7f0000000280)=""/140, 0x8c}], 0x6, &(0x7f0000002580)=""/4102, 0x1006}, 0x1800) (async) recvmsg(r0, &(0x7f0000001440)={&(0x7f0000000000)=@in6, 0xc, &(0x7f0000000340)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f0000000140)=""/186, 0xba}, {&(0x7f00000014c0)=""/94, 0x5e}, {&(0x7f0000000280)=""/140, 0x8c}], 0x6, &(0x7f0000002580)=""/4102, 0x1006}, 0x1800) 828.727476ms ago: executing program 3 (id=4287): socket(0x2, 0x2, 0x0) (async) r0 = socket(0x2, 0x2, 0x0) socket(0x1, 0x2, 0x0) (async) r1 = socket(0x1, 0x2, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x802069b0, &(0x7f0000000100)) (async) ioctl$FIONREAD(r0, 0x802069b0, &(0x7f0000000100)) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) r2 = open(&(0x7f0000000100)='./bus\x00', 0x2, 0x8) sysctl$hw(&(0x7f0000000040)={0x6, 0x1}, 0x2, 0x0, 0x0, &(0x7f0000000140), 0x0) (async) sysctl$hw(&(0x7f0000000040)={0x6, 0x1}, 0x2, 0x0, 0x0, &(0x7f0000000140), 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x10, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) r4 = openat$pf(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETA(r4, 0xc4504444, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sysctl$vm_swapencrypt(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VNDIOCSET(r2, 0xc0285108, &(0x7f0000000040)={0x0, 0x7fffffff, 0x0}) 813.676457ms ago: executing program 4 (id=4288): setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r0 = syz_open_pts() close(r0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x32}, 0x2, &(0x7f00000001c0)="6e040000", &(0x7f0000000040)=0x4, &(0x7f0000000000)="03000000", 0x4) r1 = syz_open_pts() munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x733, 0x8, 0x1, 0x5, "d100d5a5010082015f78839a62bfc48d00", 0x3, 0x1ff}) read(r1, &(0x7f00000009c0)=""/4096, 0x1000) 811.408436ms ago: executing program 7 (id=4289): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x1, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x1000}, {0x3}, {}, {0x2, 0x3}, {0x3}, {}, {0x0, 0x7ff}, {0x5}, {}, {0x3}, {0x0, 0x400}, {}, {0x2}, {0x0, 0xfffffffd}, {}, {0x2}, {}, {0x1, 0xa}, {0x1}]}) (async, rerun: 64) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x14, 0x0, 0x37) (rerun: 64) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) dup2(r1, r0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f00000001c0)={0x1d8, &(0x7f0000000140)=[{0xc, 0x9, 0x9, 0xdffffe00}, {0x4, 0xe2, 0x11, 0x21003}, {0x9, 0x1, 0x1, 0x7}]}) r3 = msgget$private(0x0, 0x730) select(0x40, &(0x7f0000000200)={0x1, 0x4, 0xfffffffffffff304, 0x68, 0x6, 0x2, 0x8, 0x2}, &(0x7f00000002c0)={0x32e, 0xb3, 0x10, 0x1, 0x4, 0x8, 0x1b, 0x8000}, &(0x7f0000000300)={0xb07, 0x2, 0x26, 0x8, 0x3, 0x7, 0x5, 0xffffffffffffffff}, &(0x7f0000000340)={0x2, 0x2596}) (async) msgsnd(r3, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0) (async, rerun: 64) msgsnd(r3, 0x0, 0x401, 0xee01) (async, rerun: 64) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x55}) (async, rerun: 64) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async, rerun: 64) r4 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async, rerun: 64) r5 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) (rerun: 64) ioctl$VNDIOCSET(r5, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) r6 = socket(0x18, 0x2, 0x0) setsockopt(r6, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r6, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) r7 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r7, &(0x7f0000001880)=[{&(0x7f0000000780)="6521d31b883995ccf5f0bd900807ffbf966b8bbba6f2eb87ae6ea7816ea66edbd2fad5758dc24a6f0b098fd75d8e4c8c8a5b21a687ec06fcc84cb5a03b1aa70260adf8c98433ac6114969a00da45c838d7a82d0e19990712cb8620d9c3d942a49ac6da551371da4340463a709bc9bd1fedcb1156bb2c0335c5ab8e98f75709942a", 0x81}, {0x0}], 0x2) (async) execve(0x0, 0x0, 0x0) (async) ioctl$VNDIOCSET(r5, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) dup2(r4, r2) rename(&(0x7f0000000380)='./file0\x00', &(0x7f0000000240)='./file0/file0/file0\x00') (async) select(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={0x3ff}, 0x0) 796.270484ms ago: executing program 2 (id=4291): syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r0 = socket$inet(0x2, 0x5, 0xb) setsockopt$inet_opts(r0, 0x0, 0x200000000000a, 0x0, 0x0) (async) r1 = socket(0x2, 0x2, 0x0) connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa) (async) socket$unix(0x1, 0x1, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) select(0x40, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff10, 0x100}, 0x0) (async) getsockopt$sock_timeval(r2, 0xffff, 0x1006, 0x0, 0x0) 795.306672ms ago: executing program 3 (id=4292): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000180)={&(0x7f00000000c0)=[{0x7}, {0x100}], 0x2}) pledge(0x0, &(0x7f00000000c0)='\x00') ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "0100000000b0b9c136000000000000005009005b"}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='%', 0x1}], 0x1, 0x0, 0x0, 0xc2d839217c176b29}, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000000)="71f91e3471ac00f6d56214b1feead43da65f84cf", &(0x7f0000000080)=0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x32, &(0x7f0000000280)=ANY=[]) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) open(&(0x7f0000001800)='./file0\x00', 0x75f493fec6515f78, 0x0) truncate(&(0x7f00000005c0)='./file0/file0\x00', 0x4) r2 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() rename(0x0, 0x0) ioctl$FIOSETOWN(r4, 0x8004667c, &(0x7f0000000580)=0xc010) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIOASYNC(r3, 0x80047470, &(0x7f0000000000)=0x1) readv(r4, &(0x7f0000000440)=[{&(0x7f0000000100)=""/203, 0xcb}, {&(0x7f0000000200)=""/181, 0xb5}, {&(0x7f00000002c0)=""/106, 0x6a}, {&(0x7f0000000340)=""/132, 0x84}, {&(0x7f0000000400)=""/21, 0x15}], 0x5) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x20}, 0x6, &(0x7f0000000080)="0f23ca2c46f958e87c1939c867c99d710339a58f6a04d4d8265bca1a267dc44f9990ac5c85815774b5cff09d33274f43804ec40d461fbba00318e8ca5e5ac5cc354e1331d08a0b9fbd56ba35120c26abc7702426be86cabc56962613b82c8982afb88a74", 0x0, 0x0, 0xd6b564e3a461cd12) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000500), 0xc) mkdir(&(0x7f0000000540)='./file0\x00', 0x4) getegid() 793.671257ms ago: executing program 1 (id=4293): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f00000000c0)="b10005136000009f050000b10010000000000000cea10500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4de57804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335d223e7db3008b95665bc6fc211800b100e4ff0000fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4cd125707000000002002fbfc0c2300008abfba0900000008e37f71a3f8343712051eeab71d89e000040381ecb664000000", 0xb1, 0x2, 0x0, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, 0xc) setreuid(r1, 0x0) (async) setreuid(0x0, 0xffffffffffffffff) select(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x3, 0xe661, 0x2, 0x6, 0x7ffb, 0xffffffffffff8001}, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) (async) sysctl$vm(&(0x7f0000000240)={0x2, 0x8}, 0x2, 0x0, 0x0, &(0x7f0000000040)="5f000001", 0x4) (async) writev(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000900)="446b35e102f2ffeb234bcbbcecc1aea0104305abcb19a952c21be83a5adfdf3862759698ac9ec7742a24452202971f05000000b93b6440f921a0f3900852219e9e3057ea4cc3318e234141df0beecc0ee4e5a9604403ecb6cc3c72dea15ab133fb88c88d2ea8eac33094a0c4f7c1943307", 0x71}], 0x1) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) (async, rerun: 64) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$TIOCSETA(r2, 0xc0205603, &(0x7f0000000040)={0xe74, 0x4, 0x3, 0x80008000, "97f3b45700", 0x2000, 0x8006ec6}) (async, rerun: 32) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) (rerun: 32) r4 = openat$pci(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10}, 0x201) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000001440)={0x0}, 0x10, 0x0) (async, rerun: 64) shutdown(r6, 0x0) (rerun: 64) ioctl$FIONBIO(r4, 0xc0107008, &(0x7f0000000140)=0x102) ioctl$TIOCSETA(r3, 0xcd504404, &(0x7f0000000100)={0x22, 0x235, 0x16, 0xd, "cd000a00000400dfff8d000000000000f3ff00", 0xe91, 0x4}) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 706.52028ms ago: executing program 4 (id=4294): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x8, 0xc2) ftruncate(r0, 0x80002) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f0000000040)=0xc942) truncate(&(0x7f00000001c0)='./file0\x00', 0x30000) 704.605493ms ago: executing program 1 (id=4295): mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) (async, rerun: 64) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x33}, 0x5, 0x0, 0x0, &(0x7f00000001c0)="21007c323fee01c24c68495c241b8efa7ce8c04d13fe4e00fd88ff12d38acc1e1b9749f986f9385e4a908a12a93fe2af746c8fc36c1aefb8e5831d0dc22a4dc5d35ea319f29bd959c4b7d25bcf7d0f7264f138b5f0cfa818dca3a50bbca323f676af51783744b98611bc47c1c0bdf068ab6af6d74e7f7cd0972a8b750910573ac3c225835f6c337d5da9879e97f7a79100"/154, 0x3) (rerun: 64) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) msgget$private(0x0, 0x730) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x100, &(0x7f0000000180)=[{{r0}, 0xffffffffffffffff, 0x13}, {{r0}, 0xffffffffffffffff, 0x62}], 0x6, 0x0) (async) r2 = syz_open_pts() fcntl$lock(r2, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000000}) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) flock(r2, 0x1) (async, rerun: 64) flock(r2, 0x3) (async, rerun: 64) fcntl$lock(r2, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000001}) 704.275731ms ago: executing program 6 (id=4296): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000140)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe3e, 0x0, 0x37) fchmodat(0xffffffffffffff9c, 0x0, 0x50, 0x2) 701.868301ms ago: executing program 3 (id=4297): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105727, &(0x7f00000000c0)={&(0x7f0000000100)=[{0x3, 0x8}, {0x100, 0x5}], 0x2}) (async) setrlimit(0x0, &(0x7f0000000040)={0x2000005469, 0x4}) r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file2\x00', 0x0) (async) ioctl$FIONBIO(r1, 0xc0107008, &(0x7f0000000040)) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffb}) (rerun: 32) r3 = kqueue() (async) r4 = socket(0x18, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) kevent(0xffffffffffffffff, &(0x7f0000000380)=[{{r5}, 0xfffffffffffffffb, 0xd2, 0x40, 0x2ef5, 0x6}], 0x1005, 0x0, 0x8, 0x0) (async) kevent(r3, &(0x7f0000000000), 0x80, 0x0, 0xffffffff, 0x0) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async, rerun: 32) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) (rerun: 32) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="258b34f9d92d15867fdb7b3ea6c26149654d3094b5ab47240700000087f85465688b453d5b6535a805142c2eacb15498a3675a8dd50800ba55a37b93b7130a69b7ad64250ee87ce204c5b3ce33059d40b90b4727c15805c9cb64b128cab23aae1f", 0x61}], 0x1, 0x0, 0x0, 0x2}, 0xe) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000300)="71bb7d6ecfc294315f06a05c42762bd6bcdc602f5460bf17ad25f3df3695c7530d1815777282752c91862873aff57b086f6e66ae89578b5f511d9dce6db8077a597ad221b7", &(0x7f0000000080)=0x45, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x9, 0x9e, 0x6, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x10000000, 0x7, 0x2, 0x6}, {0x7, 0x8, 0x9, 0xfffffff9}, {0x7, 0x8000b86, 0xffffff7c, 0x9}, {0x9d38, 0x5, 0x2}, {0x401, 0x2, 0x27fd, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0x1, 0x200004f8, 0x10}, {0x6, 0x80b, 0x14, 0xb}, {0x2, 0x82, 0x4, 0x9}, {0x4, 0x8, 0x1000d1b, 0x1ff}, {0x1e0, 0x10001, 0x7ff, 0x3}, {0x7ff, 0x9, 0x9, 0x5}, {0xb8c, 0xc3b, 0x3, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x7, 0x6}, {0xfffffffd, 0x9, 0x0, 0x30005}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) mkdir(&(0x7f0000000100)='./file0\x00', 0x49) (async, rerun: 64) setgid(0xffffffffffffffff) (async) setgroups(0x0, 0x0) (async) setuid(0xffffffffffffffff) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='r\x00') syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) (async, rerun: 64) fcntl$setstatus(r1, 0x4, 0x4) (rerun: 64) 605.352201ms ago: executing program 4 (id=4298): syz_emit_ethernet(0x3e, &(0x7f0000000cc0)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "5ce32a", 0x8, 0x89, 0x5, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, {[], @udp={{0x3, 0x1, 0x8}}}}}}}) r0 = socket(0x2, 0x4001, 0x0) r1 = accept$unix(r0, &(0x7f00000001c0)=@abs, &(0x7f0000000200)=0x8) r2 = fcntl$dupfd(r1, 0x2, r0) close(r2) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2f2, 0x0) ioctl$WSDISPLAYIO_GVIDEO(r3, 0x40045744, &(0x7f0000000000)) syz_emit_ethernet(0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="73b9ccc3000000f70004000086dd6000000000093a01fe80000000000000000000000000bdbeb83ca5af9cc9762b752b3400bbff0200000000000000000000000000018284e355429be5bdc9b1b4183bd1a02b651a3e31342041f2f0f0eb7e57f3d28774749e43bea257c19c16962bd55cf0a24ae7cd"]) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$WSKBDIO_SETMODE(r4, 0x80045713, &(0x7f0000000080)) 603.825142ms ago: executing program 7 (id=4299): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) (async) r0 = syz_open_pts() close(r0) (async) r1 = syz_open_pts() (async) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) sysctl$hw(&(0x7f0000000040)={0x6, 0x12}, 0x2, 0x0, 0x0, &(0x7f0000000140), 0x0) setrlimit(0x3, &(0x7f0000000000)={0x7, 0x54}) pipe(&(0x7f00000000c0)) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000280)="b1000501600000000000900d07000000201c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236acf20b7804bef9102f5f0aa71bd638164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282118000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e4b2fff040ff00000000", 0xb1, 0x0, 0x0, 0xfffffc9c) (async) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000500)=0x7) (async) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000040)="6116e89917c9f52e88d1e215fcc96d3ad2c6636cc5d8d16b98ce4e717830946ebe4c242b9c240d", 0x27}, {0x0}, {&(0x7f00000015c0)="7ab12a4dffa97bf4385fe86ddf7beb3e61effaa6454f7f7eaabd74b6cb2026d368e0adc93fb619901d5c044ca05a785e79e107cb078a18a41ca808f0c5b5566fd7a1556a75a9ee5de99b58e3b9644ea024efbc56a58f78651ed82760e396c217bdef35d2fed44d4037484787344d33a93690b01dfb6c8ee8db1d71a01c644959b7380a6146d2daa69f3c366e5de9293554028f3d4338e67fb653644a14c94557", 0xa0}, {&(0x7f0000000300)="2cdf3c11956cfcc520859c7b68", 0xd}, {&(0x7f0000000340)="06eba9b376d69061ce2ddbf8eed3f70463d2aa983465fae9f4ef4a8f89002c9e5f689c2492362693e07e90e6118fb39d7a34d138c80c150f3fd44bed2479228982a0e91cb851397cb09ea99a0f5010328a83851f16186f9d753d0411c1cf7f", 0x5f}], 0x5) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r5 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r5, 0xc0406938, &(0x7f0000000100)) readv(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x2) 602.634903ms ago: executing program 6 (id=4300): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) fchmod(r0, 0xc0) setrlimit(0x8, &(0x7f0000000340)={0x9, 0x4000000000054}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000380)={0x750, 0x7, 0xd, 0xa, "0300", 0x8a, 0x9}) write(r1, &(0x7f0000000240)="c570a4a5bbebc12d2a91854a3269facb1316b1dbefdc29ce59a480cfbf608dea9c620e5c769e41325bb05beb095558da1082977cecf0ae7465d33a476b2bf8d8323faf622b829cdd2def3aebda43f9d65bdedac3153eaa24e781fe6c886078dc1997598181a8a2b44b588cefa7fe886b4990181ebd182952bc83b084eeaf3c75abd47f349f01f6", 0xfead) 600.627148ms ago: executing program 4 (id=4301): ioctl$FIONREAD(0xffffffffffffffff, 0xc0106978, &(0x7f0000000140)) (async) ioctl$FIONREAD(0xffffffffffffffff, 0xc0106978, &(0x7f0000000140)) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCPROMISC(r0, 0x20004269) close(r0) r1 = socket(0x800000018, 0x1, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x2, 0x8, 0xd5, '\x00', 0x8, 0xff}) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"]) sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a27f2000f2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"]) r3 = socket$inet(0x2, 0x3, 0x2) bind$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x2}, 0x8) setsockopt$inet_opts(r3, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) setsockopt(r3, 0x0, 0x66, 0x0, 0x0) ioctl$VMM_IOC_INTR(r2, 0xca605601, &(0x7f0000000040)={0xb, 0x0, 0x200d}) (async) ioctl$VMM_IOC_INTR(r2, 0xca605601, &(0x7f0000000040)={0xb, 0x0, 0x200d}) bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x7}, 0x8) (async) bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x7}, 0x8) r4 = semget$private(0x0, 0x5, 0xa1) semctl$GETALL(r4, 0x0, 0x6, &(0x7f0000000000)=""/201) (async) semctl$GETALL(r4, 0x0, 0x6, &(0x7f0000000000)=""/201) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81aa, 0x10003, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x7, 0x1, 0x8007}, {0xfffffffa, 0x200727, 0x2800, 0x7}, {0x1, 0x3, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x800, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8002, 0xd1b, 0x4}, {0x1c8, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x5}, {0xb8c, 0x87, 0x8, 0x4}, {0x29a71f17, 0xfffffffa, 0x1, 0x6}, {0x501, 0x5, 0x5, 0x10000000}, {0x0, 0x49, 0xfff, 0x30004}]}) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) r6 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r6, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r6, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) ioctl$VNDIOCSET(r5, 0xc0384600, &(0x7f0000000240)={&(0x7f0000000000)='./file0\x00', 0x9, &(0x7f0000000040)='./file0\x00', 0x8}) 330.06097ms ago: executing program 7 (id=4302): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000ffff000001", @ANYRESHEX, @ANYRES32, @ANYRES8=r1], 0x28, 0x408}, 0x0) recvmmsg(r0, &(0x7f0000000040)={0x0, 0x20010000}, 0x10, 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x404) close(r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vmm(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$VMM_IOC_WRITEREGS(r4, 0x82485608, &(0x7f0000000480)={0x8000, 0x1, 0x80, {[0x0, 0xd0b3, 0x3, 0x0, 0x3, 0xb41f, 0xff, 0x2, 0x4, 0x7, 0x12640e9e, 0x8, 0x4, 0x9, 0x3, 0x1, 0x6, 0xa3c], [0x8000000000000000, 0xc, 0x7, 0xffffffffffffffff, 0x6, 0x8001, 0x3, 0xa, 0x8, 0x3], [0x3, 0x10001, 0x4, 0x2, 0x9, 0x9], [0x8, 0x2, 0xed31, 0x5, 0x41bf, 0x6], [{0x4, 0x80, 0x7, 0x8}, {0x4, 0x1, 0xfffffff0, 0x4}, {0x0, 0x6, 0xc, 0xdd1b}, {0x5, 0x101, 0x7fffffff, 0xd9}, {0x3, 0x8, 0x1f74a5e0, 0x200}, {0x0, 0x5, 0x1, 0x4950}, {0x44, 0x3, 0x500000}, {0x2000, 0x9, 0x9, 0x7}], {0x8, 0x970, 0x2400000, 0x5}, {0x5, 0x4, 0x9, 0xfffffffffffffff9}}}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x2, 0xfa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x3, 0x3ff, 0x80000001, 0x38e7, 0x10, [{0x0, 0x3, 0x4, 0xa25}, {0xc5f, 0x7, 0x7, 0xfffffff9}, {0x8, 0x8, 0x4, 0x9}, {0x80000000, 0x800, 0x3, 0x5}, {0x401, 0x7ff, 0x1082805, 0x4d8a}, {0x2, 0x86, 0x2, 0xb4}, {0x4, 0xd16f, 0x4f8, 0x1}, {0x3, 0x803, 0xfffffffe, 0xb}, {0x2, 0x9, 0x6, 0x9}, {0x4, 0x90, 0xd1b, 0x88}, {0x1c7, 0x40000005, 0x2, 0x3}, {0x7fc, 0x6, 0x7, 0x9}, {0xb8c, 0x4, 0x1, 0x2c4}, {0x29a7171a, 0xfffffefa, 0x1, 0x6}, {0xff, 0x5, 0xfffffff9}, {0xfffffffe, 0x1, 0x1002, 0xc}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$VNDIOCSET(r6, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r6, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r7 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r7, 0x80606954, &(0x7f0000000100)) bind(r5, &(0x7f0000000080)=@un=@file={0x41a0805bbded0123, './file0\x00'}, 0x4) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43260c7c59f, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0xfffffffffffffffe}, {0x10000000000000}}, 0x2) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/239, 0xef}], 0x1, 0x0}, 0x40) 327.915902ms ago: executing program 5 (id=4303): chmod(&(0x7f0000000040)='.\x00', 0x29e) setuid(0xee01) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x40) sysctl$kern(&(0x7f00000000c0)={0x1, 0x59}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) r1 = getpgrp() ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x8, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000780)={0x0, 0x0}, &(0x7f00000007c0)=0xc) setreuid(0x0, r4) r5 = getegid() getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) r7 = getuid() chown(&(0x7f0000000040)='./file0\x00', r7, 0xffffffffffffffff) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0xc) r9 = getppid() ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0xb1c, r9) r10 = getuid() r11 = getgid() r12 = getpgrp() r13 = getuid() chown(&(0x7f0000000040)='./file0\x00', r13, 0xffffffffffffffff) getgroups(0x7, &(0x7f00000002c0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) chown(&(0x7f0000000280)='./file0\x00', r13, r14) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0xc) sendmsg$unix(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f00000001c0)=[{&(0x7f0000000100)}, {&(0x7f0000000240)="dbb3f7e9627f7ba22bdcd98242cd9dc1bdaf3ca6de0f848ebd3f6341e5309c270b1deffed4f82e8f3f94b2f622c7e29c2111011ba7c2908a86ca52d7ec785477f0bce411937da717176776359d1eb8417e4e51c088ac18774f77f8ce4a4b3d8b132bc94cac6edc3cc7f6b4b802e4f495df4414fd010d6566250901e37bca4fdb22a05a9793591f870ab42e48b09fca3931cc1f9d86a81c79b1443c7941ce32383ad7a28775782842910624b0eef4e831161765f401e1347e2c51b6f7716d6ba2ee14dc00f03ccc6891482ab9389938d45d742e174344e5cdbc812fe15c88813f747dae97d93b7be838", 0xe9}, {&(0x7f0000000540)="edcad12f06593919767772c83fa0bba210c9e140cd06205669c5af17b3b06c043faec4c3a43b4b148e702f5b63d364dab7728e6398908814a5c5fa2a6f05a53714717ea3281f7526f032d235a220b8f1a02e8d669307334506df8266c27009246bdc57327528d679f174ca7bf925e6109fdeb9d8dd6ce37060be2269d7bda0babd8c577293368213f47be50a7e7fcd278e2f8ae0c4eeb39f04ec7d00d7a73740a11b479bddc5d2adb053cb5b14b2feb24f4a0fa5914ce5050020a7a09a0333fcdb8c99ddb5e752633df54fc1024f5346927c13cb7c0d850149de5d382c629122f5a33677b08c6521", 0xe8}, {&(0x7f0000000140)="7533cdcaa96855532e0bb09d26edee528aa692b25efd5173ce4bc9ae4d7547574de3722678e1ae528fd9a93151e49225fc85753df68461c6fb85d212b74fe6f26b2daf755b703cc1ab3eb2fcd3f5c82a1c8b2d5c0ab376df2d107f1342e8aff2efd2d34aadd659ce32452e7ed94a", 0x6e}], 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="2000000000000000ffff000000000000", @ANYRES64=r7, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="000000002000c8a256db00002d0000000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="000000002000000000000000ffff000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r15, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x400}, 0x4) mkdir(&(0x7f0000000000)='./file1\x00', 0x100) chmod(&(0x7f0000000080)='./file1\x00', 0x80) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') 323.908495ms ago: executing program 3 (id=4304): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 64) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 64) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) (async, rerun: 32) r0 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) (async, rerun: 32) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x11, 0x4, &(0x7f0000000140)="12000000", 0x4) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x5a}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x48, 0x0, 0x37) (async) close(r0) r2 = accept(r1, 0x0, &(0x7f0000000680)) getpeername(r2, &(0x7f00000008c0)=@in6, &(0x7f0000000900)=0xc) (async) rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32) ioctl$WSDISPLAYIO_ADDSCREEN(r0, 0x80245753, &(0x7f0000000200)={0x200000, './file0\x00', './file0aaaaaaaaa'}) (async, rerun: 32) rename(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) chmod(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) open$dir(&(0x7f0000000440)='./file0\x00', 0x2, 0x0) rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') 318.653618ms ago: executing program 0 (id=4305): kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x80000000, 0x3}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000400)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0x40000004}) r0 = socket(0x18, 0x3, 0x17) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x7, 0x1}, 0x8) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) r1 = socket(0x18, 0x2, 0x0) close(r1) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0xfffffffffffffffe}], 0x0, 0x0, 0x0, 0x0) r2 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) writev(r1, &(0x7f0000000300)=[{0x0}], 0x1) setrlimit(0x0, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r4 = kqueue() kevent(r3, &(0x7f0000000480)=[{{r2}, 0xfffffffffffffff9, 0x4, 0x40000000, 0x6, 0x8}, {{r4}, 0xfffffffffffffff8, 0x80, 0x2, 0x7fffffffffffffff, 0x5fe}], 0x4, &(0x7f00000004c0)=[{{r2}, 0xfffffffffffffffe, 0x4, 0xb0000000, 0xc8, 0x6}, {{r0}, 0xfffffffffffffffe, 0x8, 0x40000000, 0xfffffffffffffff9}], 0xfff, &(0x7f0000000500)={0x7, 0x101}) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x8, 0x0) setuid(0xffffffffffffffff) ioctl$FIONREAD(r5, 0x8020697a, &(0x7f0000000100)) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket(0x2, 0x2, 0x0) close(r6) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x0, &(0x7f0000000140)="ea000001000000006e35929163c0dcb416f08b5cc39193ced090abb762afc331d129f8ba7c29325d22e4a1f822bc11ad22b8deab2884a8c8fa9667e018cc987120e2ae84c04887c48a637a467478681fe92d9b9bb30216905b25299e062e0e379dda603504bbab67226d802b378f60d630950d281e1338e4b9d388f458cd3a4c68a9500379aab83b18054842c716b5137b57d4afb1ead40abd776ce76078c7c664fd767e37537a4a410975d3d8", 0xad) syz_emit_ethernet(0x97, &(0x7f0000000340)={@random="c863822f3d94", @empty, [], {@ipv4={0x800, {{0xb, 0x4, 0x0, 0x17, 0x89, 0x66, 0x5, 0x4, 0x33, 0x0, @multicast1, @rand_addr=0x5, {[@timestamp={0x44, 0x18, 0xfd, 0x3, 0xa, [{[], 0x5}, {[@remote={0xac, 0x14, 0x0}], 0x3}, {[@empty], 0x3}]}]}}, @icmp=@generic={0x22, 0xa, 0x0, "842eb9375f0b59b05a141de8e2456406423c0b0d48710e353be5a2cdf5c9e92a12190eea39e4157ba67573a7c78ad84c8ea6cc52de50efaf4a30724b86ebef3c5ca5dff395ca4f6e4513aadd8778ac758e851611cc01c30209"}}}}}) connect$unix(r6, &(0x7f0000000000), 0x10) 278.733158ms ago: executing program 0 (id=4306): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000001b80), 0x40, 0x0) r1 = socket$inet(0x2, 0x3, 0x0) r2 = socket(0x18, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) setsockopt(r2, 0xffff, 0x3b, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000000)="e000000000000000", 0x8) ioctl$WSKBDIO_BELL(r0, 0x20005701) socket(0x20, 0x5, 0x5) r3 = socket(0x18, 0x3, 0x0) socket(0x0, 0x4, 0x2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r4 = socket(0x1, 0x2, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r5 = openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BIOCGSTATS(r5, 0x4008426f, &(0x7f0000000080)) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) r6 = syz_open_pts() ioctl$TIOCSBRK(r6, 0x2000747b) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) 269.656414ms ago: executing program 5 (id=4307): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8017, 0x3, 0x400101, 0x80040001, 0x81ac, 0x10001, 0x10, [{0x0, 0x3, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x8, 0x99}, {0xce1, 0x100, 0x4f8, 0x6d}, {0xd6f8, 0x803, 0x14, 0x8}, {0x2, 0x86, 0x5, 0x5}, {0x6a75, 0x8001, 0xd1b, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x4009, 0x8, 0xd}, {0x20b8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xeffffffa, 0x1, 0x6}, {0xc, 0x5, 0xda3f, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x32, 0xa2f}, 0x80000002000007, 0x7, 0xffffffffffffffff, 0x0, 0x1000000005, 0xe, 0x800}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x2000007, 0x101, 0x80000001, 0x80000801, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x30000}, {0x401, 0x726, 0xe, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0x1, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1, 0x10001, 0xc, 0x3}, {0x7ff, 0x4, 0x8, 0x5}, {0xb8c, 0x4, 0x6, 0x6}, {0x29a71717, 0xfffffffa, 0x4, 0x6}, {0x4, 0x7, 0x6}, {0x0, 0x1, 0x4, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VNDIOCSET(r1, 0xc0104407, &(0x7f00000001c0)={0x0, 0x0, 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8017, 0x3, 0x400101, 0x80040001, 0x81ac, 0x10001, 0x10, [{0x0, 0x3, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x8, 0x99}, {0xce1, 0x100, 0x4f8, 0x6d}, {0xd6f8, 0x803, 0x14, 0x8}, {0x2, 0x86, 0x5, 0x5}, {0x6a75, 0x8001, 0xd1b, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x4009, 0x8, 0xd}, {0x20b8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xeffffffa, 0x1, 0x6}, {0xc, 0x5, 0xda3f, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x32, 0xa2f}, 0x80000002000007, 0x7, 0xffffffffffffffff, 0x0, 0x1000000005, 0xe, 0x800}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async) open(&(0x7f0000000000)='./file0\x00', 0x80, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x2000007, 0x101, 0x80000001, 0x80000801, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x30000}, {0x401, 0x726, 0xe, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0x1, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1, 0x10001, 0xc, 0x3}, {0x7ff, 0x4, 0x8, 0x5}, {0xb8c, 0x4, 0x6, 0x6}, {0x29a71717, 0xfffffffa, 0x4, 0x6}, {0x4, 0x7, 0x6}, {0x0, 0x1, 0x4, 0x30004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) ioctl$VNDIOCSET(r1, 0xc0104407, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) 269.292302ms ago: executing program 4 (id=4308): writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000000c0)="b92e2f", 0x3}], 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) 105.154105ms ago: executing program 0 (id=4309): open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r0 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x1, 0x3) ftruncate(r0, 0x80002) open$dir(&(0x7f00000003c0)='./file0\x00', 0x80, 0x2) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000080)={&(0x7f0000000040), 0x2b}) ioctl$WSMOUSEIO_GETPARAMS(r1, 0x80105727, &(0x7f0000000080)={&(0x7f0000000240)=[{0x23, 0x2}, {0x25, 0xc}], 0x2}) r2 = socket$inet(0x2, 0x3, 0x102) sendmsg(r2, &(0x7f0000000280)={&(0x7f0000000180)=@un=@abs={0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000980)=[{0x10, 0xffff, 0x5}], 0x10}, 0x0) sysctl$net_inet_ip(&(0x7f0000000700)={0x4, 0x2, 0x0, 0x13}, 0x4, &(0x7f0000000740)="a266a695739b2ad2ac644b35a151dab79a0bab4621922718ad6122bab6469be2492faab2acfbae2180044218c5c52348240609a1700192b5207e19bb810a6588d67ccd100c3ed54ad61a00b86a29dead82f62b49cd130b1ecec879afca5afc5f70e855840e696439db9232980e72bd0dc7f2d64ac458f9a42b3327f6c7f5d41064004e07d9e8d31acb8fede0675ca569c78379e5ab0d0b6d7d244033a1168d44b710e794857e37b049acd562a1e9f75a62b0aee6", &(0x7f0000000800)=0xb4, &(0x7f0000000840)="fd82926a5a04550aed8e1be0d3fd094f3fc3c100e1ea6da93aa9726d2c0f4c97c00c0e7acd13fee038", 0x29) r3 = kqueue() readv(r3, &(0x7f0000000680)=[{&(0x7f0000000500)=""/215, 0xd7}, {&(0x7f0000000300)=""/182, 0xb6}, {&(0x7f0000000600)=""/126, 0x7e}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000280)=""/15, 0xf}], 0x5) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x1, 0x0) close(r4) socket$inet(0x18, 0x3, 0x102) sendmsg$unix(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) preadv(0xffffffffffffff9c, &(0x7f0000000200)=[{&(0x7f0000000080)=""/169, 0xa9}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000000400)=""/229, 0xe5}], 0x6, 0x0) 94.75395ms ago: executing program 6 (id=4310): sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, &(0x7f00000000c0)="4afdd534c624ae3a6c8f37953c7b0ff2c91a36ff2d6e46da5c8a68de5753c0bced54f01013efdc5cd19fb6550a38b6e6e79217fbef9c24dc8d8690f2d4199273e6397ddde62eb70780a8fb1de59678f028c02c82a99ba66a3cb1ea1669816ec00d80643a34f27f8d3a3f3bf7292aa88e2dbed5d520753cd80685733e77d0ccc3651a9debc8d7eb09f57af03982a611c036af5a93ca2370221283113767ee70b423f13e46d563a44a96760f47d4896908f4fd8c8b40245c0c57bf38f703eb7681f103ac15b9f6dccb1201b42094989fba2604137f6d82f19ba5e8384a37c875409f7b520166b7ebfe2c", 0xe9) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) syz_emit_ethernet(0x343, &(0x7f00000001c0)={@remote, @empty, [], {@ipv6={0x86dd, {0x7, 0x6, "aa869c", 0x30d, 0x3b, 0x7, @loopback, @mcast2, {[@routing={0x3b, 0xe, 0x0, 0x9, 0x0, [@rand_addr="341074c541ebef4680790d182fc3f95c", @mcast2, @empty, @empty, @mcast1, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2]}, @routing={0x2e, 0xa, 0x0, 0xf, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, @mcast1, @mcast1, @mcast1]}, @hopopts={0x11, 0x1d, '\x00', [@generic={0x8, 0xd4, "ed69b93c7f7ac4943e28193501d979c540116f3526d0ffc7c7e42e4582baa4e69c2a5fd71bd35bb8897de2e30b2185ae983f04f17ce593931437d5f2ec6240d7e59f7816184af36801f6a341518a915bee2a144730450885367a8e6fc5432158b6bbc7e7de3c52f2a5a75041c67f18e764f94e9026c143d480366f44eea738e19234e13e4a812e531f6941e5b3830e1f356f817c033dcceabee87065c8c9c1e63e948bed02d36577684c743409a9e88326e40196ef691d62598e5ac08472e9f5213ce224ff9e8aa28254b6ce978ebbcafc70c874"}, @jumbo={0xc2, 0x4, 0xa000}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0xca}]}, @fragment={0x33, 0x0, 0x80, 0x1, 0x0, 0x9, 0x64}, @hopopts={0x2e, 0x2, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0xffffffff}]}, @dstopts={0x32, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}]}], @udp={{0x3, 0x2, 0x8}, {"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"}}}}}}}) 77.013369ms ago: executing program 0 (id=4311): sysctl$kern(&(0x7f00000000c0)={0x1, 0x14}, 0x2, &(0x7f0000000100)="4ba7841143", &(0x7f0000000040)=0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x22}, 0x4, 0x0, 0x0, &(0x7f0000000100), 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x1}, 0x2, &(0x7f0000000280), &(0x7f0000000040), 0x0, 0x0) 76.367706ms ago: executing program 3 (id=4312): socketpair(0x18, 0x3, 0x6, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000a, &(0x7f0000000340)="01", 0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x3, 0x8, 0x1ff, 0x9, 0x10, [{0x5, 0x9, 0xfffff115, 0x80000001}, {0xfffff666, 0xfffdffff, 0x103, 0xfff}, {0x1, 0x4baa, 0x4, 0x3}, {0x4, 0x8, 0x45c, 0x100}, {0x3, 0xb, 0xf15, 0xd}, {0x788c, 0xffff, 0x8, 0x7}, {0x10004, 0x804, 0x3, 0x9}, {0x9, 0x1, 0x28002, 0xb7}, {0x209, 0x1000, 0x6, 0x7fff}, {0x921, 0xfffffffc, 0x8, 0x800}, {0x0, 0xffffffff, 0x5, 0x7}, {0x9, 0xc7cb, 0x800000}, {0x401, 0x6, 0x9, 0x3ff}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x8, 0x101, 0x3, 0x6}, {0x9be2, 0x2, 0x2, 0x69}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x55}, 0x3, &(0x7f0000000000)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec370824a8876eaed1a9d70b5bc5bbb2f68d6c9", &(0x7f0000000080)=0xffa2, 0x0, 0x37) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) sysctl$hw(&(0x7f0000000080)={0x6, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x36, &(0x7f0000000180)="003dc295", 0x4) pipe(&(0x7f0000000640)={0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0xd4e688a67930cd) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f00000002c0)={0x3, &(0x7f0000000180)=[{0x5c, 0x0, 0x15, 0x8000004e}, {0x8, 0x3, 0xa, 0x3ecf}, {0x1b1, 0x8, 0xc8, 0x14002}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x7f, 0x0, 0x0, 0xbc2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) syz_emit_ethernet(0x82, &(0x7f0000000380)=ANY=[@ANYBLOB="abdf1a1b89b500e0300eaaf8080045000074fffd000000019078ffffffffe000000118d37288fb9ac127e0da88ac700b1279ec97144bc6156d28c0ca54586ae2b38d871db2cf812e39a4e9f9bfcc48fd0230f29096705d5c482fda60bace771cdeec4db3f919d7400366c3943d0471fac65e8d49bd857eb9f0201064952e000000000ba6d51a79e9204bbe6efda829c1e234b8a0f943963198aea07f351e5e644a07d06bd47c9a39ff86de86da954567e9ccdeff3e64f09af5aa80"]) 824.383µs ago: executing program 6 (id=4313): syz_emit_ethernet(0x276, &(0x7f0000000140)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x240, 0x3a, 0x0, @rand_addr="3bcc3f0600000058132fa13a8be186e3", @mcast1, {[@routing={0x89, 0x4, 0x0, 0x0, 0x0, [@empty, @ipv4]}, @fragment={0x35, 0x0, 0xf, 0x1, 0x0, 0x17, 0x66}, @hopopts={0xfe, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x1b}, @enc_lim, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x5}]}, @dstopts={0x61, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x4}]}, @dstopts={0x2c, 0x6, '\x00', [@generic={0x93, 0x32, "57e66e91635b696bd4f9a48b3c15d46eeb1c8c1dcfcf7d31612f448a17de5aeaa436956006e3eb286ba39cb4efab0598c518"}, @pad1]}, @hopopts={0xc, 0x2c, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x3, 0xf5, "c338f7dde4d479c26276536fdcd5b101fb92f147001661a93b88ff5ce7b554e4fd8e2552f3fb3b45f706eef7e8a56594e79e6dcdca47e7a54ddb2061739ffc25d4f7729ef01bbbcb56249b10ba0440ba90ceb6a0da3a50909ec27ca9bc6f464d98bd6a087a11a88450eb35038a06d34b31e725aa8a0eec4f3c049841d20ad6a3b1cf44f42eb1c50c73960f97cd46c418e1f168be9c3c33cbeedd4ee72ed893836d6cac2f0050ad64a1d723cbb2c405da4e7c5326ba9f21e25c4c2eb05fba9586bd00d309832f4473df0886a0f7cfc265075487509f86abddfc4494dee8a2778ad4ed050842eced7eebcb9c6eab670ee977f803f0f9"}, @jumbo={0xc2, 0x4, 0x4693276b}, @generic={0x6, 0x48, "67f4ab8d6f1ac3179a4f21f2d3f147e9b167a62a64a8e5dd0575f1de6f5891e4e05177a9b39a988da52da88d35ced23f4e309c230cbb0f6eebd763e1539f7717265c0c701319c0d6"}, @jumbo={0xc2, 0x4, 0x10000}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x1, [0x0]}]}], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0xfffc, 0x2b, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2}}}}}}}) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x340, 0x8, 0x2, 0x6}]}) 304.851µs ago: executing program 6 (id=4314): setrlimit(0x8, &(0x7f0000000040)={0x7, 0x53}) r0 = syz_open_pts() r1 = socket(0x11, 0x2, 0xb5) sendto$unix(r1, &(0x7f00000000c0)="b10005136000009f0000000000070000001c130500000000fef96ecfc72fd3357ae380b37b6730397804be78164991f7c8cf5f882b295be1aa5b23edeb51e2f0ac3ebbc215000000eeffffff74b0da4f59dd028ea8af630037282102000000720f188bfbb770c1f572c881ea772ec592040000000000ff0c2300008abfba0900000008e371a3f834371b6e90dfb71d89e0462c5e52000080042000"/177, 0xb1, 0x4, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x1f) flock(r2, 0x1d) close(r0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8) close(r0) r3 = syz_open_pts() syz_emit_ethernet(0x4c, &(0x7f0000000dc0)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x9, 0x6, "8f3524", 0x16, 0x3b, 0x4, @empty, @mcast2, {[], @icmpv6=@ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x3}]}}}}}}) ioctl$TIOCMGET(r2, 0x4004746a, &(0x7f0000000180)) ioctl$TIOCSETD(r3, 0x8004745f, &(0x7f0000000080)=0x1d) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x53}) (async) syz_open_pts() (async) socket(0x11, 0x2, 0xb5) (async) sendto$unix(r1, &(0x7f00000000c0)="b10005136000009f0000000000070000001c130500000000fef96ecfc72fd3357ae380b37b6730397804be78164991f7c8cf5f882b295be1aa5b23edeb51e2f0ac3ebbc215000000eeffffff74b0da4f59dd028ea8af630037282102000000720f188bfbb770c1f572c881ea772ec592040000000000ff0c2300008abfba0900000008e371a3f834371b6e90dfb71d89e0462c5e52000080042000"/177, 0xb1, 0x4, 0x0, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x1f) (async) flock(r2, 0x1d) (async) close(r0) (async) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8) (async) close(r0) (async) syz_open_pts() (async) syz_emit_ethernet(0x4c, &(0x7f0000000dc0)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x9, 0x6, "8f3524", 0x16, 0x3b, 0x4, @empty, @mcast2, {[], @icmpv6=@ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x3}]}}}}}}) (async) ioctl$TIOCMGET(r2, 0x4004746a, &(0x7f0000000180)) (async) ioctl$TIOCSETD(r3, 0x8004745f, &(0x7f0000000080)=0x1d) (async) 0s ago: executing program 6 (id=4315): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b100050460000000000000000041", 0xe, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x11, 0x1, &(0x7f0000000240)="00aa4a79", 0x4) sendto$unix(r0, &(0x7f0000000100)="b1000504600000000000000007000000331c13fecea10500fef9ed061ddd1efb7ae320b37b673039d2d236073705ae04be38164991f7b85143222b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907a900000200361b1257aea8c5000020020000000000008abfba090008efffffffffff3512b132ae037503682ce371a300803712051eadb71d89e0", 0xb1, 0x8, 0x0, 0x0) getpeername$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r1 = socket(0x11, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.229' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error fuse: Cannot find fusebuf pckbd_enable: command error OpenBSD/amd64 (r^YeԐp!9\KsjT`XW^/qESЀ4SiӤFkjR~-륢7{ky\_oW6".5/) (tty00) login: &53%: !../4 &).$ &53%"5& OpenBSD/amd64 (r^YeԐp!9\KsjT`XW^/qESЀ4SiӤFkjR~-륢7{ky\_oW6".5/) (tty00) login: K\ @LadהBBdI J /~6JYB'^C1?( E Cbo.@Oa#kOQ+bD-~rr&R{؀1'L-b[F.  x5d OpenBSD/amd64 (^$Q/ ʘ"-fQxb =/6^O]־s*ٞ%Y ) (tty00) login: in6_pcbnotify: Huh? Thought we never got called with mapped! WARNING: thread `nfsio' (485515) exits with status -1 WARNING: thread `nfsio' (422494) exits with status -1 WARNING: thread `nfsio' (180733) exits with status -1 WARNING: thread `nfsio' (230608) exits with status -1 WARNING: thread `nfsio' (435840) exits with status -1 WARNING: thread `nfsio' (356588) exits with status -1 WARNING: thread `nfsio' (326773) exits with status -1 WARNING: thread `nfsio' (115316) exits with status -1 WARNING: thread `nfsio' (88379) exits with status -1 WARNING: thread `nfsio' (31690) exits with status -1 WARNING: thread `nfsio' (200306) exits with status -1 WARNING: thread `nfsio' (48643) exits with status -1 WARNING: thread `nfsio' (58808) exits with status -1 WARNING: thread `nfsio' (18639) exits with status -1 WARNING: thread `nfsio' (455051) exits with status -1 WARNING: thread `nfsio' (375134) exits with status -1 WARNING: thread `nfsio' (445452) exits with status -1 WARNING: thread `nfsio' (257849) exits with status -1 WARNING: thread `nfsio' (450560) exits with status -1 WARNING: thread `nfsio' (137024) exits with status -1 denied attempt to set clock back 4137602195 seconds denied attempt to set clock back -9223372032717175658 seconds denied attempt to set clock back -9223372032591346562 seconds malloc(): allocation too large, type = 127, size = 4762072176 pmap_unwire: wiring for pmap 0xfffffd806b9bbc00 va 0x200000000000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806b9bbc00 va 0x200000001000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806b9bbc00 va 0x200000002000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806b9bbc00 va 0x200000003000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806b9bbc00 va 0x200000004000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806b9bbc00 va 0x200000005000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806b9bbc00 va 0x200000006000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806b9bbc00 va 0x200000007000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806b9bbc00 va 0x200000008000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806b9bbc00 va 0x200000009000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806b9bbc00 va 0x20000000a000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806b9bbc00 va 0x20000000b000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806b9bbc00 va 0x20000000c000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806b9bbc00 va 0x20000000d000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806b9bbc00 va 0x20000000e000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806b9bbc00 va 0x20000000f000 didn't change! pppx: unable to set addresses for pppx1, error=17 fuse: Cannot find fusebuf fuse: Cannot find fusebuf              denied attempt to set clock back 159383608 seconds denied attempt to set clock back 159383608 seconds load: 5.23 not a controlling terminal uvn_flush: obj=0xfffffd805edbfcd8, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! uWAvRmN_IfaNuG:lt SPL NOT( L0OxWERfEfDf OffNd T8R0A6Pb 9EXIdT 120a0 ,0 0x4Stopped at proc_trampoline+0xc7: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND *254321 52541 0 0 0 0 syz-executor proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x77fc1fcc28a0, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu1: uvm_fault(0xfffffd806b9d1200, 0x48, 0, 1) -> e ddb{0}> trace proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x77fc1fcc28a0, count: -1 ddb{0}> show registers rdi 0 rsi 0 rbp 0xffff80002a3c94f0 rbx 0 rdx 0 rcx 0xffff80002a2d6548 rax 0x2a r8 0xffff80002a3c9420 r9 0 r10 0x6cd17054dc936c54 r11 0x2885635a641ffc0d r12 0 r13 0 r14 0 r15 0 rip 0xffffffff81e1e4c7 proc_trampoline+0xc7 cs 0x8 rflags 0x246 rsp 0xffff80002a3c9470 ss 0 proc_trampoline+0xc7: movl $0,%gs:0x688 ddb{0}> show proc PROC (syz-executor) tid=254321 pid=52541 tcnt=1 stat=onproc flags process=0 proc=0 runpri=82, usrpri=82, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a2dc810,0xffffffff839abd00 process=0xffff80003300cec0 user=0xffff80002a3c4000, vmspace=0xfffffd806b9d13e8 estcpu=32, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND *52541 254321 29983 0 7 0 syz-executor 62162 455895 98748 0 2 0 syz-executor 14934 398558 15720 0 2 0 syz-executor 14934 62576 15720 0 2 0x4000000 syz-executor 78519 335262 69027 0 2 0 syz-executor 78519 147433 69027 0 3 0x4000080 fsleep syz-executor 51880 417198 1884 0 2 0 syz-executor 51880 447514 1884 0 2 0x4000000 syz-executor 51880 183860 1884 0 3 0x4000080 fsleep syz-executor 51880 454793 1884 0 3 0x4000080 fsleep syz-executor 95750 320760 97978 0 3 0x80 nanoslp syz-executor 95750 122555 97978 0 3 0x4000080 lockf syz-executor 95750 303807 97978 0 3 0x4000080 lockf syz-executor 95750 420232 97978 0 3 0x4000080 fsleep syz-executor 94022 355702 83843 0 3 0x80 nanoslp syz-executor 94022 500591 83843 0 3 0x4000080 kqsel syz-executor 94022 58075 83843 0 3 0x4000080 fsleep syz-executor 69027 216755 60960 0 3 0x82 nanoslp syz-executor 98748 442868 60960 0 3 0x82 nanoslp syz-executor 42468 367752 1 0 3 0x100083 ttyopn getty 15720 313025 60960 0 2 0x2 syz-executor 54218 454265 0 0 3 0x14200 bored sosplice 1884 504009 60960 0 3 0x82 nanoslp syz-executor 68762 411066 60960 0 3 0x82 nanoslp syz-executor 83843 342479 60960 0 3 0x82 nanoslp syz-executor 97978 144060 60960 0 3 0x82 nanoslp syz-executor 29983 186262 60960 0 3 0x82 nanoslp syz-executor 60960 457858 24771 0 3 0x82 kqread syz-executor 24771 261428 56502 0 3 0x10008a sigsusp ksh 56502 113245 24013 0 3 0x98 kqread sshd-session 24013 171767 51210 0 3 0x92 kqread sshd-session 51210 387801 1 0 3 0x88 kqread sshd 19454 74483 41855 74 3 0x1100092 bpf pflogd 41855 524231 1 0 3 0x80 sbwait pflogd 58771 96862 17458 73 3 0x1100090 kqread syslogd 17458 54791 1 0 3 0x100082 sbwait syslogd 63135 299863 1 0 3 0x100080 kqread resolvd 82179 488957 24362 77 3 0x100092 kqread dhcpleased 47308 293613 24362 77 3 0x100092 kqread dhcpleased 24362 347546 1 0 3 0x80 kqread dhcpleased 59595 35723 0 0 3 0x14200 bored smr 27637 407980 0 0 2 0x14200 zerothread 30813 370328 0 0 3 0x14200 aiodoned aiodoned 92254 37702 0 0 3 0x14200 syncer update 88637 171386 0 0 3 0x14200 cleaner cleaner 47500 33701 0 0 2 0x14200 reaper 28768 472411 0 0 3 0x14200 pgdaemon pagedaemon 49482 86264 0 0 3 0x14200 bored viomb 9811 470263 0 0 3 0x40014200 acpi0 acpi0 54913 502517 0 0 3 0x40014200 idle1 69493 14593 0 0 3 0x14200 bored softnet7 56818 81690 0 0 3 0x14200 bored softnet6 48912 406017 0 0 3 0x14200 bored softnet5 99384 385875 0 0 3 0x14200 bored softnet4 65821 222699 0 0 3 0x14200 bored softnet3 19394 457744 0 0 3 0x14200 bored softnet2 29703 173502 0 0 3 0x14200 bored softnet1 34947 124972 0 0 3 0x14200 bored softnet0 80059 28555 0 0 3 0x14200 bored systqmp 26309 131285 0 0 3 0x14200 bored systq 58702 228838 0 0 3 0x14200 tmoslp softclockmp 73887 407597 0 0 3 0x40014200 tmoslp softclock 60221 246781 0 0 3 0x40014200 idle0 1 91858 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex /syzkaller/managers/multicore/kernel/sys/kern/kern_malloc.c:96 r = 0 (0xffffffff8379a0e8) #0 witness_lock+0x5f1 #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 free+0x9f #4 ip_setmoptions+0xb0c #5 sosetopt+0x118 #6 sys_setsockopt+0x2ba #7 syscall+0xbd4 #8 Xsyscall+0x128 Process 14934 (syz-executor) thread 0xffff80002a2dd270 (62576) exclusive rwlock netlock r = 0 (0xffffffff8378a4b0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sosetopt+0xf2 #3 sys_setsockopt+0x2ba #4 syscall+0xbd4 #5 Xsyscall+0x128 Process 73887 (softclock) thread 0xffff8000ffffecf8 (407597) shared rwlock timeout r = 0 (0xffffffff837f1048) #0 witness_lock+0x5f1 #1 timeout_run+0x115 #2 softclock_thread_run+0xe7 #3 softclock_thread+0x10a #4 proc_trampoline+0x10 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10256 11166K 12365K 166960K 16187 0 pcb 17 22K 36K 166960K 1484 0 rtable 208 13K 13K 166960K 874 0 pf 35 17K 82K 166960K 400 0 ifaddr 37 7K 9K 166960K 245 0 ifgroup 55 2K 2K 166960K 467 0 sysctl 4 1K 9K 166960K 42 0 counters 68 36K 38K 166960K 518 0 ioctlops 0 0K 4K 166960K 2817 0 iov 0 0K 34K 166960K 434 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1470 93K 93K 166960K 5118 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 39 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 1K 166960K 310 0 dirhash 12 2K 3K 166960K 96 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 240K 166960K 4576 0 sigio 0 0K 0K 166960K 68 0 proc 75 131K 164K 166960K 1180 0 subproc 72 4K 4K 166960K 108 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 921 0 in_multi 57 4K 7K 166960K 308 0 ether_multi 1 0K 0K 166960K 32 0 mrt 1 0K 0K 166960K 25 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 253 1129K 1129K 166960K 253 0 exec 0 0K 1K 166960K 986 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 10 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 248 152K 170K 166960K 43403 0 UVM aobj 54 2K 4K 166960K 58 0 pinsyscall 43 86K 102K 166960K 5841 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 286 0 NDP 12 0K 2K 166960K 186 0 temp 80 8652K 8908K 166960K 187589 0 kqueue 14 22K 36K 166960K 904 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 458 0 455 3 2 1 3 0 8 0 rtentry 176 246 0 172 5 0 5 5 0 8 1 unpcb 144 3847 0 3824 21 19 2 6 0 8 1 syncache 336 24 0 24 4 4 0 1 0 8 0 tcpqe 32 6 0 6 4 4 0 1 0 8 0 tcpcb 736 1639 0 1634 26 24 2 10 0 8 0 arp 128 34 0 20 1 0 1 1 0 8 0 inpcb 328 5817 0 5807 62 53 9 18 0 8 7 nd6 144 44 0 32 1 0 1 1 0 8 0 pkpcb 40 74 0 74 6 5 1 1 0 8 1 kcovpl 48 12 0 4 1 0 1 1 0 8 0 mppekey 1024 2 0 2 2 2 0 1 0 8 0 ppxss 1192 183 0 183 3 2 1 1 0 8 1 pppxif 1504 17 0 17 6 6 0 1 0 8 0 pfstscr 40 1 0 1 1 1 0 1 0 8 0 pffrag 232 34 0 22 2 1 1 2 0 482 0 pffrnode 88 32 0 20 1 0 1 1 0 8 0 pffrent 40 59 0 46 1 0 1 1 0 8 0 pfosfp 40 1429 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1429 0 714 21 0 21 21 0 8 0 pfrktable 1344 5 0 5 4 4 0 1 0 8 0 pfstitem 24 272 0 131 1 0 1 1 0 8 0 pfstkey 128 274 0 133 5 0 5 5 0 8 0 pfstate 384 273 0 132 15 0 15 15 0 8 0 pfrule 1344 29 0 20 2 1 1 2 0 8 0 rttmr 136 3 0 3 3 3 0 1 0 8 0 art_heap8 4096 5 0 0 5 0 5 5 0 8 0 art_heap4 256 914 0 612 38 14 24 28 0 8 2 art_table 40 919 0 612 5 0 5 5 0 8 0 art_node 32 246 0 187 1 0 1 1 0 8 0 sysvmsgpl 40 40 0 0 1 0 1 1 0 8 0 semupl 112 2 0 2 2 2 0 1 0 8 0 semapl 112 305 0 295 1 0 1 1 0 8 0 shmpl 112 55 0 4 2 0 2 2 0 8 0 dirhash 1024 74 0 57 3 0 3 3 0 8 0 dino2pl 256 10359 0 8842 96 0 96 96 0 8 0 ffsino 296 10359 0 8842 118 0 118 118 0 8 0 nchpl 144 16674 0 14984 64 0 64 64 0 8 0 rtmask 32 31 0 31 5 4 1 1 0 8 1 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 60099 0 60099 5 4 1 2 0 8 1 percpumem 16 274 0 225 1 0 1 1 0 8 0 kstatmem 264 326 0 298 3 0 3 3 0 8 0 acpiwqpl 32 4 0 4 1 0 1 1 1 8 1 scsiplug 72 23 0 23 6 5 1 1 0 8 1 scxspl 216 122312 0 122312 16 14 2 8 1 8 2 plimitpl 152 1283 0 1266 1 0 1 1 0 8 0 sigapl 424 4867 0 4812 9 2 7 9 0 8 0 knotepl 120 765 0 0 24 1 23 23 0 8 0 kqueuepl 224 2000 0 1989 20 15 5 5 0 8 4 pipepl 344 697 0 670 15 12 3 9 0 8 0 fdescpl 528 4815 0 4783 3 0 3 3 0 8 0 filepl 160 36271 0 36045 40 24 16 19 0 8 4 lockfpl 104 1712 0 1704 2 1 1 2 0 8 0 lockfspl 48 623 0 618 1 0 1 1 0 8 0 sessionpl 144 50 0 41 1 0 1 1 0 8 0 pgrppl 48 188 0 171 1 0 1 1 0 8 0 ucredpl 104 6567 0 6554 1 0 1 1 0 8 0 zombiepl 144 5080 0 5079 1 0 1 1 0 8 0 processpl 1248 4867 0 4812 6 1 5 6 0 8 0 procpl 664 12517 0 12451 10 3 7 8 0 8 0 sosppl 168 33 0 33 7 6 1 1 0 8 1 sockpl 752 10535 0 10498 102 91 11 24 0 8 7 mcl64k 65536 8 0 0 1 0 1 1 0 8 0 mcl16k 16384 3 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 5 0 0 1 0 1 1 0 8 0 mcl4k 4096 126 0 0 16 0 16 16 0 8 0 mcl2k2 2112 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 105 0 0 7 0 7 7 0 8 0 mtagpl 96 13 0 0 1 0 1 1 0 8 0 mbufpl 256 1252 0 0 76 0 76 76 0 8 0 bufpl 280 50496 0 44353 441 1 440 440 0 8 0 anonpl 32 14561 0 0 118 1 117 118 0 246 0 amapchunkpl 152 151545 0 151021 74 39 35 39 0 158 12 amappl16 200 17969 0 17931 118 102 16 32 0 8 5 amappl15 192 8 0 8 2 2 0 1 0 8 0 amappl14 184 199 0 187 1 0 1 1 0 8 0 amappl13 176 5 0 5 1 1 0 1 0 8 0 amappl12 168 5565 0 5534 3 1 2 2 0 8 0 amappl11 160 55 0 39 1 0 1 1 0 8 0 amappl10 152 8 0 8 2 2 0 1 0 8 0 amappl9 144 245 0 245 1 1 0 1 0 8 0 amappl8 136 24 0 21 1 0 1 1 0 8 0 amappl7 128 141 0 128 1 0 1 1 0 8 0 amappl6 120 255 0 251 1 0 1 1 0 8 0 amappl5 112 163 0 153 1 0 1 1 0 8 0 amappl4 104 405 0 383 1 0 1 1 0 8 0 amappl3 96 31245 0 31124 5 1 4 4 0 8 0 amappl2 88 897 0 833 2 0 2 2 0 8 0 amappl1 80 31693 0 31097 17 3 14 15 0 8 0 amappl 88 41703 0 41527 5 0 5 5 0 92 0 dma16384 16384 1 0 1 1 0 1 1 0 8 1 dma8192 8192 2 0 2 2 2 0 1 0 8 0 dma4096 4096 3 0 3 3 3 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 1 0 1 1 1 0 1 0 8 0 dma256 256 10 0 10 2 2 0 1 0 8 0 dma128 128 263 0 263 7 7 0 1 0 8 0 dma64 64 8 0 8 3 3 0 1 0 8 0 dma32 32 8 0 8 2 2 0 1 0 8 0 dma16 16 20 0 19 1 0 1 1 0 8 0 aobjpl 72 57 0 4 1 0 1 1 0 8 0 uaddrrnd 24 4815 0 4783 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 4815 0 4783 1 0 1 1 0 8 0 vmmpekpl 168 40784 0 40742 3 0 3 3 0 8 0 vmmpepl 168 311574 0 309504 142 39 103 117 0 357 0 vmsppl 488 4814 0 4783 5 0 5 5 0 8 0 rwobjpl 80 85732 0 78792 157 7 150 154 0 8 0 pdppl 4096 9638 0 9566 132 60 72 84 0 8 0 pvpl 32 22711 0 0 184 1 183 183 0 265 0 pmappl 256 4814 0 4783 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 426 0 116 10 0 10 10 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x77fc1fcc28a0, count: -1 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x37 comcnputc(800,34) at comcnputc+0x250 cnputc(34) at cnputc+0x67 db_putchar(34) at db_putchar+0x36d kprintf() at kprintf+0x29a5 db_printf(ffffffff8331406f) at db_printf+0x9b fault(ffffffff833d76dd) at fault+0xa7 kpageflttrap(ffff80003c439050,48) at kpageflttrap+0x37d kerntrap(ffff80003c439050) at kerntrap+0x198 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b witness_checkorder(28,9,0) at witness_checkorder+0xb5 end trace frame: 0xffff80003c4391f0, count: 0 ddb{1}> trace x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x37 comcnputc(800,34) at comcnputc+0x250 cnputc(34) at cnputc+0x67 db_putchar(34) at db_putchar+0x36d kprintf() at kprintf+0x29a5 db_printf(ffffffff8331406f) at db_printf+0x9b fault(ffffffff833d76dd) at fault+0xa7 kpageflttrap(ffff80003c439050,48) at kpageflttrap+0x37d kerntrap(ffff80003c439050) at kerntrap+0x198 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b witness_checkorder(28,9,0) at witness_checkorder+0xb5 mtx_enter(18) at mtx_enter+0x4a clockintr_unbind(ffff8000015d9530,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff8000016c5000) at dt_ioctl_record_stop+0xbc dtclose(11e5f,81,2000,ffff80003582aa88) at dtclose+0x109 spec_close(ffff80003c439340) at spec_close+0x466 VOP_CLOSE(fffffd805a2c52d0,81,fffffd80097fb478,ffff80003582aa88) at VOP_CLOSE+0x132 vn_closefile(fffffd80691a6680,ffff80003582aa88) at vn_closefile+0x12b fdrop(fffffd80691a6680,ffff80003582aa88) at fdrop+0x121 closef(fffffd80691a6680,ffff80003582aa88) at closef+0x192 fdfree(ffff80003582aa88) at fdfree+0x116 exit1(ffff80003582aa88,b,0,1) at exit1+0x576 sys_exit(ffff80003582aa88,ffff80003c4396b0,ffff80003c439600) at sys_exit+0x1a syscall(ffff80003c4396b0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7b9cbf88eb10, count: -28