last executing test programs: 7.461535888s ago: executing program 4 (id=3082): r0 = syz_open_pts() ioctl$TIOCNOTTY(r0, 0x20007471) r1 = fcntl$dupfd(r0, 0xa, r0) ioctl$TIOCSCTTY(r1, 0x20007461) r2 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSTSTAMP(r3, 0x8008745a, &(0x7f0000000080)={0x7fff, 0x9}) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000100)='/dev/tty\x00', &(0x7f0000000140)='\xf4:)(\'\'}#*\\]#\xc1+\xab^\x00', &(0x7f0000000180)='/dev/diskmap\x00', &(0x7f00000001c0)='/dev/diskmap\x00'], &(0x7f0000000300)=[&(0x7f0000000240)='-,*\x00', &(0x7f0000000280)='/dev/diskmap\x00', &(0x7f00000002c0)='/dev/diskmap\x00']) ioctl$TIOCSTART(r1, 0x2000746e) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$VMM_IOC_CREATE(r4, 0xc2585601, &(0x7f0000000380)={0x10, 0xc8b, [{&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x8000000000000001}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x8}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x9bfd}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x7445}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5057c387}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x8000000000000000}, {&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff2000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x5}, {&(0x7f00003fe000/0xc00000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2}, {&(0x7f00005e7000/0x11000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0xff}, {&(0x7f0000bf5000/0x4000)=nil, &(0x7f0000aa9000/0x3000)=nil, 0xe}, {&(0x7f0000d9c000/0x1000)=nil, &(0x7f000093e000/0x2000)=nil, 0x8000000000000001}, {&(0x7f00009bd000/0x3000)=nil, &(0x7f0000937000/0x1000)=nil, 0x5d}, {&(0x7f000080a000/0x4000)=nil, &(0x7f0000ded000/0x2000)=nil, 0x1000}], './file0\x00', 0x6}) ioctl$TIOCSTART(r0, 0x2000746e) r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000580), 0x8000, 0x0) r6 = openat$vmm(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) r7 = openat$pci(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$PCIOCWRITE(r7, 0xc0107003, &(0x7f0000000640)={{0x5, 0x7, 0x6}, 0xa27d, 0x3, 0xffffffff}) ioctl$BIOCGFILDROP(r1, 0x40044278, &(0x7f0000000680)) r8 = dup2(r0, r3) ioctl$TIOCDRAIN(r8, 0x2000745e) openat$diskmap(0xffffffffffffff9c, &(0x7f00000006c0), 0x200, 0x0) utimes(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={{0x9, 0xbfb}, {0xfffffffffffffff9, 0x3}}) ioctl$BIOCPROMISC(r8, 0x20004269) flock(r2, 0x5) lseek(r6, 0x5, 0x2) ioctl$FIONREAD(r5, 0x4004667f, &(0x7f0000000780)) syz_emit_ethernet(0xea, &(0x7f00000007c0)={@empty, @remote, [], {@generic={0x660, "2cb05e176cb3ba3979f1fb2ffeb9d4d1ca934d367a50958ad66f1b202b6d608dce5dc0e2616521e8c902e55748f929e9e23ba0b47e7c4040697c0e42ff2460cd287fc89888da61ccd67558e302673e8bdf7b54c287070eb80407359dc9547b0e7617ddfc3ea23b10d37dcaa84acfc85efcfaa4f4fe00a62b998b9964d3ed89154cb4a7ebc0a9b585d81ca0c7f216325fbcbd51d1e17bf448e90010805e7cf6b89e00d71ceaf33aa64103484a81c25009ef5f79459276828779d2931ffae5e37ddd4ffc90e41cf8208eec8392cdc5e347c8141752fd27816f13a0f0e1"}}}) write(r1, &(0x7f00000008c0)='I', 0x1) ioctl$TIOCMSET(r0, 0x8004746d, &(0x7f0000000900)=0xff) ioctl$VT_WAITACTIVE(r8, 0x20007606, &(0x7f0000000940)=0x9) openat$bpf(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) 5.94509744s ago: executing program 1 (id=3091): r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xb) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000900), 0x20, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000009c0)={0x1, &(0x7f0000000940)=[{0x5dc, 0x8, 0x1, 0x1}]}) openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x300000003}) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r2, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000080)={0x18237, 0xffffffffeffff866}) 5.936108647s ago: executing program 1 (id=3094): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) pwritev(r0, &(0x7f0000000440)=[{&(0x7f0000000100)="da170ff5b453e94576e586b195bbe0355ef410e68104ae08cbeda4880a8bca84af7cb97e2870c4e7ba366d1873c0a38bbdeb00618417d8798c0849a470c43a4935df428dbd74148790314cb9c18979f3301f63b00339342196", 0x59}, {&(0x7f0000000180)="30b3cfe61616ad87e40075ac1d2cec2e0968f5bb5a13a668b2753f9bd3b4f86b82809b78f659cede071e42551128566b27c40893df2f195a57fddb8d713edbc2b482c15a3da39bbc32c0ea1d90723d7b05122e43d61325dd493a9b5812d5684970a0ae3e649b35046c5dccf9e8edae0e9e09ea685572d168dc2d29085e7679da615ab708967efe0332fff2a010fda30711eb8b", 0x93}, {&(0x7f0000000240)="304a87c320a5a28b231900121a48bea1ac9d66949ff20d538488ca39898f850eef53cfb48308a73396091cebf519b324c8292c867fd6b96e5cb4f2601e22039f00f64b94230248b6386dbbbb7f7bee9d7ad41fca5666ca7e17278b621b018d5840c864c966a289d5c6b0b72c4fafb78585b948a851f3aae422bb599a24448055", 0x80}, {&(0x7f00000002c0)="cf002e168489904bebc6470c9c6874728e0c2f4eacda35de718212ee77df38eee7970de0a43df1f2b84135496a3a724f7e3e84508f154e798c8df477e7cc24af6a3998be17b3e162186a1981d65efc5541a78dc5c9d295d1431223a6ccf1a3b73c34f8dc6f18f7d561ca6a103002ad090c72189f87c77b3f93", 0x79}, {&(0x7f0000000340)="f31eab1389fc65aeb4b5ad0c83458085f63fedcf8bd01ce50eb07f3f97c161bb0efa8f554941947c53422689204c0b0ab0bc36b4b95699bc33f404", 0x3b}, {&(0x7f0000000380)="f69a0f87768f8f1e50c31a465ef971f80db607bdea4c45c51d44c63ef48fd59b69fd74ba2ee883f8ba9425aca55babbbf5189d4ef51b4d0edd8810875b6b9862ada3c86c06bef7b01de04e6d2d46231fd4c03ad358d53eb7bb65849dfc50ee7683320cfdec8c4b07993897514af918bbb8f130049dac036f283e2d5dff7b6bac7154ac1a3dac83a0d4e0", 0x8a}], 0x6, 0x7) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r1 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) recvfrom$unix(0xffffffffffffffff, &(0x7f00000000c0)=""/83, 0x53, 0x841, 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000240)) r2 = semget(0x2, 0x4, 0x684) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0}, 0xc) r4 = getgid() lchown(&(0x7f0000000280)='./file0\x00', r3, r4) semop(r2, &(0x7f0000000380)=[{0x2, 0x8, 0x1c00}, {0x0, 0xffff}, {0x4, 0xf0d, 0x1800}, {0x2, 0x3}], 0x4) fsync(r1) r5 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) acct(&(0x7f00000000c0)='./file1\x00') close(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 3.839796447s ago: executing program 1 (id=3127): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000080)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0x2, 0x2800000000000000, 0x181c, 0x3, 0x1}, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000780)={&(0x7f00000002c0)={&(0x7f0000000100)=@in6={0x18, 0x3, 0xc08, 0x1}, 0xc, 0x0, 0x0, 0x0, 0x260}, 0x96}, 0x10, 0x2) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000100)={0xfffffffffffffffb, 0x2}, 0x10) r1 = kqueue() sysctl$vm(&(0x7f0000000000)={0x2, 0x9}, 0x2, &(0x7f0000000240)="f3a51b0001a0f5dd400bef853dcb954de9763cf68246a32fb3a9b785e121ae240db1755863f407a4752f7610cabf21096afd4bc96e31", 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000200)=@file={0x0, './file1\x00'}, 0xa, 0x0}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x9c, 0x4000}, 0x100000000006, 0x861, 0x0, 0x0, 0x80000000000000, 0xffffffff, 0x6, 0xfffffffffffffffd}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0xfc, {0x1, 0x10000000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ftruncate(r4, 0x8531) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f00000001c0)={0x0, &(0x7f0000000100)}) r5 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) socket(0x18, 0x3, 0x0) r6 = dup2(r1, 0xffffffffffffffff) kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000000c0)=[{{}, 0xfffffffffffffffa, 0xb79d1a392c917579, 0x1, 0x1}, {{r6}, 0xfffffffffffffffc, 0xa, 0x1, 0x7, 0xfffffffffffffffa}], 0x15, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0xffffffff, 0xffffffff, 0xfff7, 0x0, 0x802, 0x22, 0x2, 0x0, 0x0, 0x2, 0xff}) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) sysctl$hw(&(0x7f0000000040)={0x7, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3.770771604s ago: executing program 7 (id=3129): open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r0 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x1, 0x3) ftruncate(r0, 0x80002) (async) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240), 0x0, 0x0, 0x0) (async, rerun: 64) setuid(0xffffffffffffffff) (async, rerun: 64) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{}, {0x1}, {0x6, 0x0, 0x0, 0xff}]}) pipe(&(0x7f0000000000)) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) (async) r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x80, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x1, 0x0) 3.662588359s ago: executing program 1 (id=3132): r0 = socket$inet(0x2, 0x8000, 0x2) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)="f9a188d84741d90a08911cbfe2dc0855a583cab36b0d1ce1448e26b9a079ab88e7f1b0d48476b9f57fef591c4adc1ae0d0d2cef41ad1f638b5e1eaf90d1d3e2d9a577a1de6bf016c4c5c34a0e789bfb058771a5ec2c6c925bdbfa4184b1bff661b5cee17eaada90ad93e81a7ece068c82171fe87f27d6cc65b065cab3dce580506cfc52e743b177ea8eb6e5f466ec911c3267b284e8d3b2a5d8627ff2ba2cb7eae55ec32d415b5de6069b0f6e6bad6072c8241ba3f8309b72668247edf6173009ec6c33dd17635de77282c0d85bcc4709bab1cf981c99480f07f962e20633a28d4eb4c9520b0560d0774ccf0c1df63795b95690d48d9b246", 0xf8) sysctl$net_inet_tcp(&(0x7f0000000100)={0x4, 0x2, 0x6, 0x2}, 0x4, &(0x7f0000000140)="6ca7db870a4bd7e01d5276e6e5da56dbc562296c41ff24eac4841d94bd8e7e3fe00dda4f7934c874d4e772a350", &(0x7f0000000180)=0x2d, &(0x7f00000001c0)="365af1134dff5de51295be304ca9229290dc29636cbbc79d265c74410143c4cb031050d531288e2cb9d8603577cc9505dcaee7569874d91f265757b1", 0x3c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000240)={'./file0\x00', 0x1, 0x6, 0x400, 0x0, 0x1, 0x3c30, 0x2, 0x1, 0x1, 0x5, 0x8}) (async) flock(r1, 0x8) ioctl$WSMUXIO_REMOVE_DEVICE(r1, 0x80085762, &(0x7f00000002c0)={0x3, 0xc43}) (async) syz_emit_ethernet(0x2bb, &(0x7f0000000300)={@broadcast, @broadcast, [{[], {0x8100, 0x2}}], {@ipv6={0x86dd, {0x0, 0x6, "9564ad", 0x281, 0x62, 0x9, @remote={0xfe, 0x80, '\x00', 0x0}, @loopback, {[@hopopts={0x2f, 0x10, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0x5, 0x6b, "28344b1e33355bd20ead4a2002f5698c3aa03e98755413bf6ef6d1d82bff705ffb4db6b49d5858a8e302c876cf3562e5a4924071dd49a23ebe2ca6928c7a5cfc80731e06bb1147d5e332d9ba33e337556de38a1c0b0cdd1a58664ee77009c12e05b941800012f9902ce4bf"}, @enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x1}]}, @dstopts={0xff, 0x3, '\x00', [@pad1, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x7a82}, @jumbo={0xc2, 0x4, 0x2}, @pad1]}, @fragment={0x3a, 0x0, 0x8, 0x0, 0x0, 0x4, 0x65}, @fragment={0x50, 0x0, 0x1, 0x1, 0x0, 0x8, 0x68}, @routing={0x37, 0x2, 0x0, 0x8, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}]}, @routing={0x11, 0x10, 0x0, 0x6, 0x0, [@mcast2, @mcast1, @rand_addr="51df7eabb73651905ed5915dc0f48722", @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, @mcast1, @rand_addr="89f39b09eef888f0a96b394a36da57a6", @mcast1, @empty]}, @fragment={0x64, 0x0, 0xc0, 0x0, 0x0, 0x4, 0x65}, @routing={0x2f, 0x14, 0x0, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, @mcast1, @mcast1, @empty, @local={0xfe, 0x80, '\x00', 0x0}]}], @icmpv6=@echo_reply={0x81, 0x0, 0x0, 0x7, 0x2, "72c4f5599415ec3c229aff5a2ad5dd85a590bc3343eff0e5c536c9c98bf3739b70e0511a6de34905bdc23b783977834b87fc14f8d8b40a52405e70484570bfb5cba8b07e413cda54811defd805d948802c9fc47177dd407ebcdfaa49ec4d8e86fc"}}}}}}) (async) ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0xc014575e, &(0x7f00000005c0)={0x8, './file0\x00'}) poll(&(0x7f0000000600)=[{r2, 0x20}, {r0, 0x20}], 0x2, 0x5) (async) r3 = accept$inet(r2, &(0x7f0000000640), &(0x7f0000000680)=0xc) ioctl$KDMKTONE(0xffffffffffffffff, 0x20004b08, &(0x7f00000006c0)=0x1000) (async) sysctl$net_inet_tcp(&(0x7f0000000700)={0x4, 0x2, 0x6, 0xc}, 0x4, &(0x7f0000000740)="f6592e859830f9d7e4c65bc74869c6440550ff26ba5f5e1d146dc8d4fec13ff4c932cffde1902f4d2d3ed6138e0272a3250939885d714cdc7f656caeae25a08ee303625adb4bd3c10969a7006cdb14eb763604bd6d5d34a492f4e815ec557c13dced99cd7237977ae68244758c6b28c978d1e1b5db703774781b43d2374fbfbe4bed653854d0849c3b497fa3b90b4e511b9e73", &(0x7f0000000800)=0x93, &(0x7f0000000840)="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", 0x1000) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001840), 0x200, 0x0) kevent(0xffffffffffffffff, &(0x7f0000001880)=[{{r3}, 0xfffffffffffffff8, 0x42, 0x10, 0x8, 0x1}, {{r4}, 0xfffffffffffffff9, 0x46, 0xf0000000, 0x8, 0xc2de}, {{r3}, 0xfffffffffffffffc, 0xa0, 0x200ffffc, 0x3, 0x2}, {{r2}, 0xfffffffffffffffc, 0x20, 0x40, 0x80000001, 0x2}, {{r0}, 0xfffffffffffffffb, 0xec, 0x20, 0x2, 0xffffffffffffffff}, {{r2}, 0xfffffffffffffffe, 0x16, 0x0, 0x2, 0x2}, {{r3}, 0xfffffffffffffffd, 0x88, 0x80, 0xe, 0x9}, {{r2}, 0xfffffffffffffffb, 0x0, 0x2, 0x4, 0x1}, {{r0}, 0xffffffffffffffff, 0x88, 0x80, 0xe10, 0x71}, {{r1}, 0xfffffffffffffffb, 0x4, 0x4, 0xb, 0xffffffffffff2dae}], 0x3, &(0x7f00000019c0)=[{{r0}, 0xfffffffffffffff9, 0x1, 0x1, 0x1, 0x2}], 0x3ff, &(0x7f0000001a00)={0xf5af, 0x49}) (async) r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000001a40), 0x2, 0x0) (async) r6 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000001a80), 0x8, 0x0) ioctl$WSDISPLAYIO_GETSCREEN(r6, 0xc0245755, &(0x7f0000001ac0)={0x3, './file0\x00', './file0\x00'}) (async) connect$unix(r4, &(0x7f0000001b00)=@abs={0x1, 0x0, 0x3}, 0x8) (async) ioctl$WSDISPLAYIO_DELFONT(r1, 0x8058574f, &(0x7f0000001b40)={'./file0\x00', 0x0, 0x9, 0x2, 0x0, 0x1, 0x80000000, 0x97, 0x0, 0x1, 0x2, 0x5}) (async) ioctl$WSDISPLAYIO_ADDSCREEN(r6, 0x80245753, &(0x7f0000001bc0)={0x25cc, './file0\x00', './file0\x00'}) (async) ioctl$KDENABIO(r1, 0x20004b3c) (async) fcntl$setflags(r0, 0x2, 0x1) ioctl$VT_WAITACTIVE(r1, 0x20007606, &(0x7f0000001c00)=0x5) sysctl$net_inet_tcp(&(0x7f0000001c40)={0x4, 0x2, 0x6, 0x14}, 0x4, &(0x7f0000001c80)="d3995d4d366017f4a8cb833dd7cc6e64059d022536c0703a34dfe7d854cadb6876a5e588f5966fbb42d17f6d151336c3dc254616e05707c78cdfd0ed053a71c21a0122b2e69889d1463e2b3a16acc9e97074310187a821838e7cc29c70c66f06890d397b7aa40f6b8453a6bfb44842b431ba927e4b28abf48d00768687dd1ae5f410fde33420030c3815d03193a0478ba703", &(0x7f0000001d40)=0x92, &(0x7f0000001d80)="d35472ab766d0307e056a1c20fa54f5a8033aba8560f27a9ce707f388c4a34f3c95e5874dd1e1171ea17fdd28f7b2bea9e98c6dda0a8b775bd86b6536d95edb74e2ee1416b07f11988528ff54284402df73e77af9e611a0ce775887f6c813758d2e29adf2fdbc5df439a40e02eede2b5ecd26d427e846d7266d03eb353f52f925a", 0x81) msgget$private(0x0, 0x0) (async) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001e40)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$unix(0x1, 0x2, 0x0) kevent(r4, &(0x7f0000001e80)=[{{r8}, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x1}, {{r7}, 0xffffffffffffffff, 0x98, 0x10, 0x1, 0xffffffffffffffee}, {{r2}, 0xfffffffffffffff8, 0x0, 0x2, 0x1, 0x4}], 0x19, &(0x7f0000001f40)=[{{r6}, 0xfffffffffffffffa, 0x4c, 0x81, 0x7fffffff, 0x7f}, {{r0}, 0xfffffffffffffff9, 0x4, 0x4, 0x3, 0x9}, {{r9}, 0xfffffffffffffffd, 0x44, 0x2, 0x0, 0x3}, {{r5}, 0xfffffffffffffff9, 0x1e, 0x2, 0x0, 0x8d}, {{}, 0xfffffffffffffffc, 0x55, 0xfffff, 0x1, 0xff}, {{r6}, 0xfffffffffffffff8, 0x0, 0x1, 0xf, 0x8000000000000001}, {{r4}, 0xfffffffffffffff8, 0x0, 0x20000000, 0x5, 0xa3ff}, {{r7}, 0xfffffffffffffffb, 0x80, 0x1, 0x7, 0x68}], 0xffffffbe, &(0x7f0000002040)={0x8, 0x7}) 3.661901184s ago: executing program 7 (id=3134): r0 = shmget$private(0x0, 0x3000, 0xc, &(0x7f0000ffa000/0x3000)=nil) r1 = getgid() r2 = geteuid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x5, 0x0, r1, r2, r5, 0x20, 0x5}, 0x5389, 0x7, r6, r8, 0x7, 0xffea, 0x9}) r10 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) setsockopt$sock_timeval(r10, 0xffff, 0x1005, &(0x7f0000000200)={0xfffffffffffffa4c, 0x5}, 0x10) ktrace(&(0x7f0000000240)='./file0\x00', 0x4, 0x2800, r3) r11 = accept(r10, &(0x7f0000000280)=@un=@file={0x0, ""/254}, &(0x7f0000000380)=0x100) r12 = fcntl$dupfd(r11, 0xa, 0xffffffffffffff9c) r13 = socket(0x1, 0x0, 0x3) r14 = kqueue() r15 = socket$inet(0x2, 0x8000, 0x16) kevent(r14, &(0x7f00000003c0)=[{{r11}, 0xfffffffffffffffd, 0x80, 0xfffff, 0x400}, {{r15}, 0xfffffffffffffffc, 0x2, 0x20, 0xbe6, 0x3}, {{r12}, 0xfffffffffffffffb, 0x4e, 0x2, 0xf, 0x7fff}], 0xfffff000, &(0x7f0000000440)=[{{r13}, 0xfffffffffffffffa, 0x40, 0x1, 0x1, 0x6}, {{r13}, 0xfffffffffffffff8, 0x40, 0x4, 0xd, 0x401}, {{r10}, 0xfffffffffffffffd, 0x0, 0xf0000000, 0x9, 0xccf3}, {{r11}, 0xfffffffffffffff9, 0x1, 0x4, 0x2775de80, 0x4}], 0x7, &(0x7f00000004c0)={0x8, 0x7}) shmctl$IPC_RMID(r0, 0x0) r16 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000500), 0x10006, 0x0) close(r10) openat$bpf(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0) getsockopt$sock_cred(r16, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) r19 = getuid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000600)={{0x1000, r19, r9, r4, r18, 0xc0, 0x5}, 0x2f34, 0x3, r8, r17, 0xa8, 0xfff, 0x8}) r20 = semget$private(0x0, 0x0, 0x500) getsockopt$SO_PEERCRED(r16, 0xffff, 0x1022, &(0x7f0000000680)={0x0, 0x0}, 0xc) semctl$IPC_SET(r20, 0x0, 0x1, &(0x7f00000006c0)={{0x9, r19, r5, r21, r1, 0xa0, 0xea6}, 0x1, 0x9, 0xf5c6}) shmat(r0, &(0x7f0000ff8000/0x4000)=nil, 0x7023fece6f88370c) r22 = open$dir(&(0x7f0000000740)='./file0\x00', 0x20, 0x0) r23 = getuid() fchownat(r22, &(0x7f0000000780)='./file0\x00', r23, r7, 0x0) 3.660024156s ago: executing program 1 (id=3137): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) (async) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000002c0)={0x0, &(0x7f0000000240)}) (async) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0800480000240000000000019078ffffffffdfffffff440c074200000002000000061e0090781ef0"]) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) setgroups(0x0, 0x0) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0) setreuid(0xee00, 0x0) (async) ktrace(&(0x7f0000000140)='./file0\x00', 0x0, 0x610, 0x0) (async) sendmsg(r0, &(0x7f0000000880)={&(0x7f0000000300)=@in={0x2, 0x3}, 0xc, &(0x7f0000000400)=[{&(0x7f0000000340)="58066641622057717008dab22d3a3645824aedd146e715fe8557e29ba822a62ae5665d3d65ac0b1c4819400b81c0b761882fc6bc5b87893df4b0dc1d3758b146af041aaf09ac0c0ea2e685d24c4d382fb9ea05fa15c3976ba8f510117e26734e39d843427063ea71049651e7d19e39516dcd8fac95e84bfb7c614915ab4b36ecf21885c6815f6025d595b3adaf5308691d3f5adbcc40c8d727dd8169ca049318fb38ebc01276b77c2abed6e0d80f58fedd548bf383", 0xb5}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x410}, 0x0) (async) r2 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) (async) r3 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r3) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='c\x00') setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000440)="fe4ed8e7125ee27944709f1a7d3174a68707d3f1a5333d98ecca73c9686cfe8e80e46d4d761153e63835b87f845ecdf050490af0551bde100e3dd2591317cdec5819a3cc27efa63c49274bf2a3a83bc0f85168a666504395d2b1d04fe33ad15b4db1ae0267df11933b68e424919dc10cb4d2ac9a190c91fb605517ff5f1211e83749115dfd3688ac8f7c536a1bb666038ca885fa9ff072850ef75ac010a32e355518b96dcb6e5f9e69a9045db07dadd8343da74cf55367fc539ce8c083aae144b56318dd8c1937bd1ac6db5ea6753427c2b92c19a3b34f3c8fc58c3462d17c5ac7a55f5a6cad17", 0xe7) (async) ioctl$VT_RELDISP(r1, 0x20007604, &(0x7f0000000540)) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) open$dir(&(0x7f0000000180)='./bus\x00', 0x10000, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$BIOCGBLEN(r0, 0x40044266, &(0x7f0000000200)) ioctl$TIOCSETA(r4, 0x20004102, 0x0) 3.554203197s ago: executing program 1 (id=3139): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) fchown(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) execve(0x0, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x1b, 0x8000000004, 0x4, 0x0, 0x1f2f196, 0xfffffffffffffff9, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) sysctl$hw(&(0x7f0000000040)={0x7, 0x12}, 0x2, &(0x7f0000001240)="02fc3200", 0x0, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x909a394771d11041, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x17}, 0x2, &(0x7f0000000180)="c9bcad00cd3f06de3ea1e3f0bea5fa135e6cab0d96e332bb920cfc6b376038eeca47ebac4e91ce26228205bbfd2dc0801aa16bf1fec34adebf247b1f4e479c6a80", &(0x7f0000000200)=0x41, &(0x7f0000000240)="86e5fa0db945710692d1815ec0a98cda0260e72bd888c1a661df605063cf0827f85902afa0683f51efbaf302413d70246164da4f15c605172beee4624b935bf10fb11a28ad2b41f52b2308f7ae14007286ce8fd5d90ade1316fb319ed0178ed6c6da78fa8b59675f164a8c2da9f921560a8908a829612cc837a6bfb252deb199010082e5be2f7d637930541387ec", 0x8e) ioctl$TIOCSETA(r2, 0xc028445a, &(0x7f00000007c0)={0x0, 0x1, 0x6c692eb0, 0x65b, "97a2b7581c6cc9795a6b47c1d100", 0xfffffffc}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x80606954, &(0x7f0000000100)) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) r4 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) ioctl$DIOCMAP(r4, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r3, 0x2}) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54}) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000000029, 0xb, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) setsockopt(r5, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sysctl$kern(&(0x7f0000000100)={0x1, 0x1a}, 0x2, 0x0, 0x0, 0x0, 0x0) 2.67874028s ago: executing program 7 (id=3154): sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000180), 0x0, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$WSKBDIO_SETENCODING(r0, 0x80045710, &(0x7f0000000240)=0x300) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0xc02069a5, &(0x7f00000001c0)) select(0x40, &(0x7f0000000000)={0x8, 0x200000009, 0x0, 0x6c0a, 0xffffffffffffff3b, 0xff, 0x4, 0x4}, &(0x7f0000000040)={0x7, 0x4, 0x7, 0x3, 0x3, 0xbe, 0x2, 0xb0}, &(0x7f0000000080)={0x2, 0x9, 0x5, 0x2, 0x10001, 0xfffffffffffffff8, 0x7, 0x7246}, &(0x7f0000000100)={0x0, 0x9}) 2.678419712s ago: executing program 7 (id=3155): sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa6585f5121e188e238a435bf223e0ccaa74d6e6b85b6cfeed70357ef201f97842b1068dca3155", 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) msgsnd(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000000000000dab3815a921605babc906fb065bc65c7cea5ef177c2e4d9fe7a610870b5e9e9eeb06f61f5293a743aaa549efbe59d4e4be19a1ebebe9bc6b9d8b6820620c109f170440cac022d9788afd56107bc5d640c4134f139fb0afca4ea220b30ba135d7c3a538a4f672f91a32455e7f781f008d27bead0ffd1098c93651c96f881a90a6ac7070bbab47b5568a8bbd4795729b8d249eb80963cd14fe03c5f4b5b7c99cf716bd1eb495e7775045a0b20c5d5900b6481c1799549cefc989b5ecf974b10f1df49805f3d2179ba5560c473427d0478f9403a3c265ba892daad531f8fba9da7587540d502d7a496a31b8628c82241e4ae95905323c17d70a2106d3d6047369a769dc87ab790116458509c2b36da3c820947b0b2a85bc93ab0c009eaac6eb16778ddbac53c0f78484cf99da8aa0cc7984877634a886c46791337385a9a1afe6230b1b15fe750e5ea83a23ed374110fd3f7b28b25170cfb0e6d9e05ece6f6b48cd4b9b73ce1bc8be2f1397bbb1d838942d77a0f8a729db63f5a97328a723afeb579acfe6aa5ca38afc10722f71d5350b52dd47d038a948f6ac97c30b921f5d23af4697ca561d87b2a43a28806f2abc4e29ff51d41b7b8bc0cb3a3aec3779a236eccb5bb41ea76631e08e7460b6ef2fc22c39cb19d93c6e5e041a888901c5015987719574b1ee9402c1707bbc97fc96bdc8b56cfaf95b1db44bb32391993a046f3b1fc73eb8d15c674108b0b3642fa7e98fd7ff0c5994ae3793b413295a52c18a4d4deb2f17fc02800aa53937c2514586e7b79819adbfa17c1e1eeac5deea61a879df89cd7ff75df60ca8fc18f4250f206b7e1e8254058092bec27e44df22104bd7f3fc824568768a6c764991c38bd53217733ab3f0fc6868a5d6241fc71077d780346dbf4a3ad01f0e9bf263e600f893aa713bbbd193180f27877993927ee6d423741d12905b82c080a9eed48758f59ee7c295aa6a06cd5100475bdc8b11609311cf37f5ca8d74a6f31098b965577a2f5eaa796ab22f3f30673257e3e9d17fd56e9ca986c521f2c4e98fd7cf1f74618e7e252a9ed77e0393058664317360998ed385d3208fe0d36ef9eb6630eff33bbbb75837609255c025f0f7f5a927153fc4dd27dcf2de7130548da0fb47502a99501e51f0ae95d185302ae0d631326c2cbb0e3cc5e94728080badd78176480308ab91d2e5bc0a96cf6817137cd21d688eb68a4705c9fb561bc518c88432b282ea30df52ff270801fb22966c15f357afa14cc0f21f8d73e780ed373fb0afc0948afc5ff66816450fa1625281209b0596e61b9ec5863a31dff2c04a4a75b0d5a27c254f4b266e83600b699a6108bc44f2a1c2e9833563c632c5fd6598020cb5c4a68e0bb2c7de1ea6f16a5067383fdd1442d2ca2e9123c755b93c40d962c9b81fdcd1b2b66de2300e179e5cad9b6aee7d9710d515f080bc5f31a7cd2e07d45b30afc38d255aee9b1ba19ea833d89eaa91292786130c5507f986a1b46558ac9957d86bfea841b62f4dcf346e1529fc0d528420c1b4c5a19c29d347a0a59c6e2ec92af4707a36be4564dc53bfd1691bb14c7244cb59109d8d66fd1170c8c6e002c4511e8d89545e5eaa8daf792b"], 0x481, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x100000000000000, 0xffffffffffffffff}) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, &(0x7f00000000c0)={0x0, 0x1ff}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r1, &(0x7f00000006c0)="bb89a7c6987c105e04e75dd7", 0xc) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xa}, 0x4, &(0x7f0000001a40), &(0x7f0000000100), 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) r3 = socket(0x6, 0x2, 0x1) setsockopt(r3, 0x0, 0x7, &(0x7f0000000080)='?\x00\x00\x00', 0x4) dup2(r3, r2) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r2, &(0x7f0000000000), 0x10) r4 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r4, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x0}, 0x8) write(r4, 0x0, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) 2.558586893s ago: executing program 7 (id=3157): r0 = syz_open_pts() readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/1, 0x1}], 0x1) ftruncate(r0, 0x6) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0x80, 0x0, 0xfbfffffe, 0x5, "d76c1f46000000ef1f0160fbff2000404b00", 0x800}) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000100)={0x9, 0x0, 0x4bd, 0xffff, "d8cd0ef2f05da04aa5bb534bb7425a42ff25e368", 0x7, 0xee8c}) 1.493436196s ago: executing program 0 (id=3163): r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/240, 0xf0}], 0x1, 0xf66) r1 = semget(0x0, 0x1, 0x281) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) syz_open_pts() semctl$GETVAL(r1, 0x3, 0x5, 0x0) execve(0x0, 0x0, 0x0) 1.374595062s ago: executing program 5 (id=3169): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x80) sysctl$hw(&(0x7f0000005580)={0x6, 0x13}, 0x2, &(0x7f00000055c0), 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2a) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000), 0x0) ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f0000000100)={0xfffc, 0xd, 0x8, 0x7}) 1.218219989s ago: executing program 7 (id=3171): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xfffffffffffffffd}) sysctl$kern(&(0x7f0000001780)={0x1, 0xa}, 0x2, &(0x7f00000017c0)="8a10eccd", &(0x7f0000001880)=0x4, &(0x7f00000018c0)="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", 0x100) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) ioctl$TIOCSETA(0xffffffffffffffff, 0xc450443c, &(0x7f00000000c0)={0x2f, 0x220, 0x7fffffff, 0x9, "c9f7d04675d201000000b8ecff000000002f00", 0x0, 0x7}) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x2010, r5, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001040)="bd", 0x1}], 0x1) write(r3, &(0x7f00000009c0)="664f79cf9a7f", 0x6) close(r4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xfffffffffffffffd}) (async) sysctl$kern(&(0x7f0000001780)={0x1, 0xa}, 0x2, &(0x7f00000017c0)="8a10eccd", &(0x7f0000001880)=0x4, &(0x7f00000018c0)="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", 0x100) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0xc450443c, &(0x7f00000000c0)={0x2f, 0x220, 0x7fffffff, 0x9, "c9f7d04675d201000000b8ecff000000002f00", 0x0, 0x7}) (async) socket(0x18, 0x3, 0x0) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) (async) pipe2(&(0x7f0000000100), 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x2010, r5, 0x0) (async) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001040)="bd", 0x1}], 0x1) (async) write(r3, &(0x7f00000009c0)="664f79cf9a7f", 0x6) (async) close(r4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) 1.217776467s ago: executing program 5 (id=3173): r0 = kqueue() mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x205b9b) r1 = syz_open_pts() readv(r1, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/1, 0x1}], 0x1) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000080)={0x80, 0x0, 0xfbffdffe, 0x5, "d76c1f46000000ef1f0160fbff2000404b00", 0x800}) syz_open_pts() ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000040)={0x9, 0x0, 0x4bc, 0x6, "d8cd0ef2f05d804aa5bb534bb7425a42ff25e368", 0x7, 0xee8c}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x0) r3 = kqueue() kevent(r3, &(0x7f0000000300)=[{{r2}, 0xfffffffffffffffe, 0x11}], 0x7, 0x0, 0x0, 0x0) kevent(r3, 0x0, 0x0, &(0x7f0000000200), 0x3b, 0x0) kevent(r0, &(0x7f0000000140), 0xe4a, 0x0, 0xa9fa, 0x0) 1.080883091s ago: executing program 3 (id=3177): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="2f40b1657c4e2d47bd7036", 0xb}], 0x1) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x3, 0x2, 0x2, 0x2}, {0x8, 0x40, 0x7, 0xfffffff8}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x3, 0x2, 0x2, 0x2}, {0x8, 0x40, 0x7, 0xfffffff8}]}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="258b30a493a1c4", 0x7}], 0x1, 0x0, 0x0, 0xc2d839217c176b2d}, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="00000000820000000000000000d51a61494f6efc2c360fd5e532150eb35aa3a44dc1311e32414069d5031b04ce", &(0x7f0000000080)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) sysctl$net_inet_ip(&(0x7f0000000200)={0x4, 0x2, 0x0, 0xe}, 0x4, 0x0, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) (async) execve(0x0, 0x0, 0x0) r2 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@in6, &(0x7f00000000c0)=0xc) accept$inet(r2, 0x0, &(0x7f0000000100)) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffff9c, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x8, 0xb, 0x2, 0x2}, {0x6, 0xff, 0xe4, 0xfc}, {0x1004, 0x2, 0x83, 0x400f}]}) (async) ioctl$BIOCSETF(0xffffffffffffff9c, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x8, 0xb, 0x2, 0x2}, {0x6, 0xff, 0xe4, 0xfc}, {0x1004, 0x2, 0x83, 0x400f}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="258bbd4ef14140639e020b2ac35b53f7e709787f8e18259cd52ee6bcbde7d7ea6791d91fad72ecfa61", 0x5d}], 0x1}, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="f58ac4d51a61494f6efc2c36688b841dd6510fd5e53215b1b35aa3a44dc1311e32414069d5031b04cec07087748a4cbdaa1cbc934c51a54426dbb1593c8acb8c04ecbecd90ed160336d12e29", &(0x7f0000000080)=0x4c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x4e, &(0x7f0000000880)=ANY=[]) shutdown(0xffffffffffffffff, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd) write(r4, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) write(r4, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) open(&(0x7f0000000180)='./file0\x00', 0x615, 0x20) (async) open(&(0x7f0000000180)='./file0\x00', 0x615, 0x20) open(&(0x7f0000000300)='./file0\x00', 0x8000, 0x0) 968.863528ms ago: executing program 4 (id=3180): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x0) 968.649974ms ago: executing program 3 (id=3181): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000240)={0x4, 0x2, 0x0, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$VNDIOCSET(r0, 0x41946465, 0x0) 910.95974ms ago: executing program 4 (id=3182): r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) r1 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0) clock_gettime(0x0, &(0x7f0000000280)) 910.781161ms ago: executing program 3 (id=3183): getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r0) r1 = open$dir(&(0x7f0000000300)='.\x00', 0x10, 0x4a) kqueue() sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) readlinkat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)=""/73, 0x49) fchownat(r1, &(0x7f00000003c0)='./file0\x00', r0, 0xffffffffffffffff, 0x6) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x400, 0x2, 0x20000000002, 0x8001, 0x0, 0x400, 0xffffffffffffffff, 0x4, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000001, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x2, 0x0, 0x7b98, 0x200, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x11000, 0xfffffffffffffffe], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffe, 0x4], [{0x400, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x8}, {0x0, 0x0, 0xfffffffe, 0x80}, {0xc51b, 0x4b72, 0x3, 0xffffffffffffffff}, {0x4, 0x2, 0x0, 0x20000000004}, {0x0, 0x2004, 0x40000, 0x2000000000000000}, {0x6b7}, {0x0, 0x965, 0x0, 0x9}], {0x800, 0x6, 0x7}, {0x8000, 0x6, 0xb0, 0x200000000002}}}) 903.425306ms ago: executing program 4 (id=3185): setreuid(0xee00, 0x0) r0 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) r1 = getuid() fchown(r0, r1, 0xffffffffffffffff) setreuid(0x0, r1) seteuid(r1) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 812.375863ms ago: executing program 6 (id=3186): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x45d48) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f0000000000)) sysctl$ddb(&(0x7f0000000000)={0x9, 0x6}, 0x2, 0x0, 0x0, &(0x7f0000001080), 0x0) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000000029, 0x3d, &(0x7f0000000040)="00000080", 0x4) getsockopt(r1, 0x29, 0x33, 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x4, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x288f, 0x4, 0x71002}, {0x6, 0x6, 0x8, 0xfffffff9}, {0xff, 0xf88, 0x0, 0x2000009}, {0x4, 0x100800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x45b7, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x3, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) chmod(&(0x7f0000000040)='.\x00', 0x35e) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc028698d, &(0x7f00000001c0)) r3 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd787c8504538099f}, 0x0, 0x0, r3}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r4, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r5 = syz_open_pts() sysctl$ddb(&(0x7f00000002c0)={0x9, 0x8}, 0x2, &(0x7f0000000300)="2109dc39e9f3eb1e2569eb73eb3e7893a397151b8ee5bbd3daffc5aaa074595cb9148854608370527c23b8c6a1ae7a6812cb3e9c28ec20a4ba72397d5cebbe12bed2cff3fb53440142b602cb674bbd3753d860f0ac58a621da13791b95de07415fd909d513d74cbfc82a44f4600498b889c0a91b52edb30b95c37caab1418289776f9aceab8ff647691275ea5ecbb1868fad9e5cac65f3", &(0x7f00000003c0)=0x97, &(0x7f0000000400)="5535203b3dda97b8d2dd63f0b09009f870386fa21131f6ac979395b9d6d8d657ca8b8625086271f28ac35ffd0801905026b392c404d1076f6ae977e43817f2a361da87c2cc85187b8b0bbd522084336f63876d66c8f97ced48f2160284cbcdeee203548f0fa5cef97fbd037997a3da98", 0x70) close(r5) syz_open_pts() utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={{0x5}, {0x80, 0x325c}}) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) mknod(&(0x7f0000000280)='./bus\x00', 0xc000, 0x1e5f) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0xd, 0x101, 0x80000004, 0x80000001, 0x10001, 0x10, [{0x0, 0x1, 0x4, 0x71000}, {0x7, 0x8, 0x8, 0x9}, {0x8, 0xd86, 0x7, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x0, 0x2800, 0x5}, {0x2, 0x0, 0x1003, 0x99}, {0xce1, 0x3, 0x6, 0x24000000}, {0x6, 0xfff, 0x80000014, 0x8}, {0x6, 0x9, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1ce, 0xffff, 0x9, 0x3}, {0x7ff, 0x5, 0x408, 0x9}, {0xb8c, 0x4, 0xf, 0x4}, {0x29a71717, 0xfffffffa, 0x4, 0x6}, {0xc, 0x7, 0x5}, {0x0, 0x1, 0x6000000, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x1010, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r6, 0x41406474, &(0x7f0000000500)={0x0, 0x0, 0x0}) 812.273502ms ago: executing program 3 (id=3187): poll(0x0, 0x0, 0x1000) poll(0x0, 0x0, 0x1000) (async) 795.908855ms ago: executing program 4 (id=3188): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = dup(r0) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000040)='./file1\x00', r0, 0x2}) close(r0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0) 694.604951ms ago: executing program 6 (id=3190): r0 = socket(0x2, 0x1, 0x0) shutdown(r0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) select(0x40, &(0x7f00000001c0)={0x9, 0x3, 0x1, 0x3, 0x53, 0x9, 0x286, 0x80}, &(0x7f0000000200)={0xe, 0x400, 0xfffffffffffffffe, 0x8000000000000001, 0xf, 0x9, 0x0, 0x9}, &(0x7f0000000280)={0xc6a, 0x1, 0x7, 0x3, 0xb057, 0x4, 0x101, 0x6}, &(0x7f00000002c0)={0x8, 0x1}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = dup2(r0, r0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0xfffe, 0x0, 0x4}, {0x1, 0x0, 0x0, 0x1}, {0x80, 0x0, 0x0, 0x101}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000c68000/0x4000)=nil, &(0x7f0000260000/0x12000)=nil, 0x7}, {&(0x7f00005eb000/0x1000)=nil, &(0x7f00007aa000/0x5000)=nil, 0x7}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000507000/0x3000)=nil, 0x20000005}, {&(0x7f0000318000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f00000d4000/0x2000)=nil, &(0x7f0000188000/0x2000)=nil, 0x2000000000009}, {&(0x7f000027f000/0x1000)=nil, &(0x7f0000095000/0x3000)=nil}, {&(0x7f000055d000/0x4000)=nil, &(0x7f0000eee000/0x4000)=nil, 0x4}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00004de000/0x2000)=nil, 0x4}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000243000/0x4000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x51}, {&(0x7f00004f7000/0x9000)=nil, &(0x7f00000e1000/0x1000)=nil, 0x8000000011}, {&(0x7f0000008000/0x3000)=nil, &(0x7f00001c0000/0x4000)=nil, 0x5}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000042000/0x3000)=nil, 0xfffffffffffffffb}, {&(0x7f0000334000/0x1000)=nil, &(0x7f000053a000/0x1000)=nil, 0x6}, {&(0x7f0000b39000/0x2000)=nil, &(0x7f0000022000/0x2000)=nil, 0x1000039f7}, {&(0x7f0000652000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x500ffffffe}], './bus\x00', 0x3ff}) r2 = socket(0x1, 0x2, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) sysctl$kern(&(0x7f0000000180)={0x1, 0x52}, 0x2, &(0x7f0000000300)="98500e710cba898844", &(0x7f0000000140)=0xfe47, 0x0, 0x0) sysctl$kern(&(0x7f0000000440)={0x1, 0x49}, 0x2, &(0x7f00000009c0), &(0x7f0000000a40), &(0x7f0000000c00), 0x0) openat$pf(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r3 = openat$vnd(0xffffffffffffff9c, 0x0, 0x10, 0x0) open$dir(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8040, 0x390) ioctl$VNDIOCGET(r3, 0x41946472, &(0x7f0000000480)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffff, 0x8000, 0x575}) lseek(0xffffffffffffffff, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6608816a00180630fe8000000000000000000000000000bbf68000000000000000000000000000aa4e234e20", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB="600200bd90780087038304"]) sendmsg$unix(0xffffffffffffffff, 0x0, 0x400) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r2, 0xc0286988, &(0x7f00000001c0)) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x3}, 0x8) ioctl$TIOCSETA(r4, 0xcd504404, &(0x7f0000000180)={0x2, 0x2, 0x5, 0x0, "cded2108002578ba7db28c9d6fb975310a000004", 0x7ff, 0x9}) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/91}, 0x63, 0x2, 0x800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) 694.238045ms ago: executing program 4 (id=3191): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000616000/0x3000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x6}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0x2}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000445000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000069b000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x80000}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f000069e000/0x2000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00'}) select(0x40, &(0x7f0000000180)={0x3205, 0x44809e9a, 0x7fffffffffffffff, 0xe, 0x2000000000000000, 0x181c, 0xdc, 0x6}, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmmsg(r2, &(0x7f0000000000)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/25, 0xfffffec6}, 0xfffffffd}, 0x15, 0x2000, 0x0) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSETA(r4, 0xc0284459, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0xfffffffffffffee2) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000300)="c0bcab6f948f9c793d3353029ee978150c5d3d8fa484563b2d122d07cc72148e0639e5924b0d36ea541bb88f18d9273b9bb31ecce8ce953f92949ca56480863fc2487691", 0x44}], 0x1) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r6 = fcntl$dupfd(r5, 0x3, 0xffffffffffffffff) ioctl$WSKBDIO_GETMAP(r6, 0x80047476, &(0x7f0000000340)={0x0, 0x0}) 680.839263ms ago: executing program 6 (id=3192): sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0x8020560a, &(0x7f00000002c0)={0x10, 0x0, [{&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000fef000/0x4000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil}, {&(0x7f000078e000/0x4000)=nil, &(0x7f00002b6000/0x3000)=nil}, {&(0x7f00005bd000/0x4000)=nil, &(0x7f0000fee000/0x3000)=nil}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f00001be000/0x3000)=nil, 0x4}, {&(0x7f0000328000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f000075b000/0x3000)=nil}, {&(0x7f0000787000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x10}, {&(0x7f0000760000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil}, {&(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0xb2bf}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fef000/0x1000)=nil}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f000011a000/0x3000)=nil}, {&(0x7f0000ff5000/0x4000)=nil, &(0x7f00005e9000/0x10000)=nil, 0xfffffffffffffffc}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f000075c000/0x3000)=nil}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil}], './file0\x00'}) sysctl$net_inet_icmp(&(0x7f0000000040), 0x4, 0x0, 0x0, 0x0, 0xfd28) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r0, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22) r1 = syz_open_pts() r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FIOGETOWN(0xffffffffffffffff, 0x4004667b, &(0x7f0000000140)) ioctl$BIOCGRSIG(r2, 0x40044273, &(0x7f0000000180)) ioctl$TIOCNOTTY(r2, 0x20007471) setrlimit(0x8, &(0x7f00000001c0)={0xfe, 0x9}) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000200)={0x2, 0x7, 0xc4, 0x0, "9d6bcd0381692cbe11c67514b656e09e058d2321", 0x0, 0x1c5}) ioctl$KDMKTONE(r2, 0x20004b08, &(0x7f0000000240)=0x4) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000280)={0x3, 0xa19}) execve(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000480)=[&(0x7f0000000300)='/dev/pf\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='^\\\x00', &(0x7f0000000440)='/dev/pf\x00'], &(0x7f0000000540)=[&(0x7f00000004c0)='/dev/pf\x00', &(0x7f0000000500)='/dev/wskbd\x00']) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000580), 0x20, 0x0) ioctl$WSDISPLAYIO_SVIDEO(r3, 0x80045745, &(0x7f00000005c0)=0x1) sysctl$net_inet_etherip(&(0x7f0000000600)={0x4, 0x2, 0x61, 0x1}, 0x4, &(0x7f0000000640)="340e8927ba25ada041ffbdcd8b06c1806404e1b85b4bd4548756d750aa79dbb41dbf6deda31f12bbcf95c22a3b5e656c8ccb016cf501751dd1f6f48dae55ce105815955b55fcf764ca45b7adbb0e374c543464345a743986c0714b15f6b5fec067", 0xffffffffffffffff, &(0x7f0000000740)="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", 0xfa) pread(0xffffffffffffffff, &(0x7f0000000840)="3eb060c71a3fb69ed0f116b53ab1cbd4ef91e96636603ae601ef1d36d4500d90aa1675480cbeb8caa333c7d8ce2089", 0x2f, 0x5) ioctl$WSKBDIO_SETMODE(0xffffffffffffffff, 0x80045713, &(0x7f0000000880)) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f00000008c0)={0x8, 0x6, 0xd7, 0x9, "81da553b6b7a2edfa7df58b5f4e2c55e5368fd06", 0x2, 0xfffffff7}) flock(r3, 0x6) ioctl$VT_SETMODE(r3, 0x80087602, &(0x7f0000000900)={0x1, 0xa4, 0x2, 0xd, 0x4}) ioctl$WSKBDIO_SETENCODING(r2, 0x80045710, &(0x7f0000000940)=0xee72) r4 = socket(0x800000018, 0x1, 0x0) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000100)={0x2, 0x5, 0x2}, 0x3, &(0x7f0000000140)="f889f8ded990d0b509810be4249f2543aef513432fee97cc8661f945aed80331ce196666cced48415231f2d7e358e7b6ee45bed29bb9ad224a3a9ab231c1e124111d48e0", &(0x7f00000001c0)=0x44, &(0x7f0000000240)="fe", 0x1) 600.252884ms ago: executing program 5 (id=3194): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0}) (async) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="8b11384532d7148c61d483aa9f5c731ad55c", 0x12}], 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2000, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$TIOCCDTR(r1, 0x20007478) nanosleep(&(0x7f00000025c0), &(0x7f0000001180)) execve(0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x908, 0x0) ioctl$WSKBDIO_BELL(r2, 0x20005701) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x6012, 0xffffffffffffffff, 0x0) sysctl$hw(&(0x7f0000000000)={0x6, 0x5}, 0x2, &(0x7f0000000540)="cac98a5501", &(0x7f0000000080)=0x5, &(0x7f0000000100), 0x0) socket(0x18, 0x2, 0x0) (async) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0x40, 0x0, 0x0) (async) setsockopt(r3, 0x1000000000029, 0x40, 0x0, 0x0) kqueue() (async) r4 = kqueue() syz_open_pts() (async) r5 = syz_open_pts() syz_open_pts() r6 = kqueue() syz_open_pts() kevent(r6, &(0x7f00000001c0)=[{{}, 0xfffffffffffffffb, 0x0, 0x20, 0x2, 0x1}, {{r5}, 0xfffffffffffffffe, 0x5d, 0x10, 0xb, 0xe93}, {{}, 0xfffffffffffffff9, 0xbfe7f146e349ee4f, 0xf0000000, 0xf39, 0x8001}, {{r5}, 0xfffffffffffffffe, 0x2, 0x1, 0x7, 0x4bd5}, {{r5}, 0xfffffffffffffffa, 0x43, 0x1, 0x0, 0x40}], 0xd3, 0x0, 0x3, 0x0) kevent(r4, &(0x7f0000000380), 0xe4a, 0x0, 0xa9fa, 0x0) mprotect(&(0x7f00003dd000/0x3000)=nil, 0x3000, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) minherit(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) (async) minherit(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x7}, {}, {0x3}, {0x3}, {}, {0x3}, {0x0, 0x3}, {}, {0x1, 0xffffffff}, {0x3}, {0x2, 0x4}, {}, {}, {}, {0x0, 0x80000001}, {0x2, 0xffffffff}, {0x2, 0x3}, {0x3, 0x7218}, {0x0, 0x2}, {0x0, 0x7ff}, {0x1}, {}, {0x3}, {}, {}, {0x2, 0x80001}, {}, {0x0, 0x200}, {0x2}, {0x0, 0x2}, {0x2, 0xa}, {0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x14, 0x0, 0x37) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1, 0x0, 0x37) msgget$private(0x0, 0x4a0) 600.071081ms ago: executing program 0 (id=3195): r0 = open(&(0x7f0000000240)='./file0\x00', 0x200, 0x0) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x100000001}) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) r1 = open(&(0x7f00000003c0)='./file0\x00', 0x200, 0x0) r2 = getppid() r3 = socket$inet(0x2, 0x1, 0x0) setsockopt(r3, 0x0, 0x6, 0x0, 0x58) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x100000001, r2}) ioctl$TIOCOUTQ(r1, 0x40047473, &(0x7f0000000040)=0x4) 599.823015ms ago: executing program 6 (id=3196): r0 = socket(0x2, 0x400000000002, 0x0) setsockopt(r0, 0x0, 0x21, &(0x7f0000000140), 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="0800eb50ca35282e0f307c59bf3ff1af38c5bbc13a452637ff4a575c285e5c47f67d6007128d02000000000000008e88460fe82cbef3c2aa800cd0257e855777e4f267660a09afbd", 0x0, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCVERSION(r1, 0x8010427e, &(0x7f00000001c0)) getitimer(0x0, &(0x7f0000001240)) socket(0x2, 0x400000000002, 0x0) (async) setsockopt(r0, 0x0, 0x21, &(0x7f0000000140), 0x0) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="0800eb50ca35282e0f307c59bf3ff1af38c5bbc13a452637ff4a575c285e5c47f67d6007128d02000000000000008e88460fe82cbef3c2aa800cd0257e855777e4f267660a09afbd", 0x0, 0x0, 0x0) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$BIOCVERSION(r1, 0x8010427e, &(0x7f00000001c0)) (async) getitimer(0x0, &(0x7f0000001240)) (async) 530.160793ms ago: executing program 0 (id=3197): accept(0xffffffffffffffff, &(0x7f0000000240)=@un=@abs, 0xffffffffffffffff) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f0000001740), 0xfffffffffffffdff) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) r0 = open(&(0x7f0000000480)='./bus\x00', 0x10000, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/29, 0x1d}], 0x1) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x0, 0x8, 0x8002, 0x1, "00005d31eb99d7000000010000000000014000"}) mknod(0x0, 0x6000, 0x412dff) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000440)={0x0, 0x44e3d84c, 0x0}) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setuid(0xffffffffffffffff) unveil(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080)='c\x00') preadv(r1, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000000)=""/18, 0x12}], 0x4, 0x0) r2 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000200)) setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) socket$unix(0x1, 0x5, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) socket(0x18, 0x2, 0x0) socket$inet(0x2, 0x3, 0xf) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x8}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) ioctl$WSMUXIO_ADD_DEVICE(0xffffffffffffffff, 0x80085761, &(0x7f0000000040)={0x3, 0x9}) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r3 = syz_open_pts() close(r3) syz_open_pts() 529.78076ms ago: executing program 5 (id=3199): r0 = socket$inet(0x2, 0x1, 0x0) socketpair(0x2, 0x3, 0x21, &(0x7f0000000040)) setsockopt$inet_opts(r0, 0x0, 0x13, &(0x7f0000000040), 0x0) mquery(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, r0, 0x8000000000000000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x1}, 0xc) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x1}, 0xc) 529.549507ms ago: executing program 6 (id=3200): mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0x100e04) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0xb1, 0x9}, 0x0, 0x0, 0x0) (async) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x40, 0x100) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000340)={'./file0\x00', 0x258f, 0x400c4, 0xfff6, 0x1, 0x9, 0xffffffff, 0xffffffff, 0x1, 0x2, 0x1, 0x4}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) (async) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x248f, 0xced, 0x8, 0x0, 0x21, 0x10, 0x51, 0x1, 0x0, 0x40000000007fffe, 0x4c11}) (async) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) (async) shmget$private(0x0, 0x1000, 0x222, &(0x7f00006fb000/0x1000)=nil) (async) select(0x40, &(0x7f0000000280)={0x200, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x100000001, 0x1fb, 0x8000}, 0x0, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x1, 0x10, 0xe4, 0x7}]}) r2 = open$dir(&(0x7f0000000300)='.\x00', 0x0, 0x4a) fchmod(r2, 0xff) (async) setuid(0xffffffffffffffff) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket(0x2, 0x2, 0x0) close(r3) sysctl$net_inet_ip(&(0x7f0000000100)={0x4, 0x2, 0x0, 0x1d}, 0x4, &(0x7f0000000140)="6a62c3070a8ac4278096a2d741b92aad905fe3321d", &(0x7f0000000180)=0x15, &(0x7f00000001c0)="a8563b03f39e6f5aaf971b60ddb2d251f3d42d1ec551559b747bc2925868fad1d8e5e280c1cdfbd758623816e2e362ad50e0523b8477fe83169ea0b9a5b3d704d5e7995e66fc3e88b2baf53e5b6c7d94d0997505a2c051a78e316acafd7ea72ab098364ad299ac3cb467764698d4ef6633d9457d5b893f751f0ae0072157e52ca248", 0x82) 470.249883ms ago: executing program 2 (id=3201): bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x7, 0x3}, 0x1) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x81, 0x7d, 0x2, 0xa}, {0x2, 0x16, 0xe4, 0x2}, {0x16, 0xff, 0x87, 0x9}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCPROMISC(r1, 0x20004269) ioctl$BIOCPROMISC(r1, 0x20004269) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) r2 = socket(0x2, 0x1, 0x0) select(0x40, &(0x7f0000000140)={0x8, 0x8000003ff, 0x1, 0x0, 0x2, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x0) listen(r2, 0x8) shutdown(r2, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket(0x18, 0x5, 0x3) unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00') bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x7, 0x3}, 0x1) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x81, 0x7d, 0x2, 0xa}, {0x2, 0x16, 0xe4, 0x2}, {0x16, 0xff, 0x87, 0x9}]}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async) ioctl$BIOCPROMISC(r1, 0x20004269) (async) ioctl$BIOCPROMISC(r1, 0x20004269) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) (async) socket(0x2, 0x1, 0x0) (async) select(0x40, &(0x7f0000000140)={0x8, 0x8000003ff, 0x1, 0x0, 0x2, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x0) (async) listen(r2, 0x8) (async) shutdown(r2, 0x2) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) socket(0x18, 0x5, 0x3) (async) unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00') (async) 470.030032ms ago: executing program 5 (id=3202): r0 = socket(0x11, 0x3, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x0, 0xcf, 0xd, 0x203519, "1bb7e60ab87aa57800000000d0d200000000fd00"}) ioctl$TIOCSTOP(r1, 0x2000746f) writev(r1, &(0x7f0000000240)=[{&(0x7f0000001080)="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", 0x695}, {&(0x7f00000009c0)="06a047434632570c5dc7219b10779a09e3d791c17a9f237adb5f869554515042180c023c6423f32d967ba6a5ca98b4b7ef4c087ea5b46a524245550236b02d22593baf6f71cd47b4d26385e8175a284a4aa6861a3f153d0c3ca687c1459018bdda570df86fd0a6cab142a7755d3b1153d20b209404fd6c0a07", 0x79}], 0x2) socket(0x11, 0x3, 0x8) close(r0) 469.666911ms ago: executing program 6 (id=3203): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x401, 0x0) msgsnd(r0, 0x0, 0x401, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/19}, 0x1b, 0x1, 0x1000) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$unix(0x1, 0x5, 0x0, 0x0) setrlimit(0x8, 0x0) r1 = syz_open_pts() close(r1) ioctl$TIOCSETA(r1, 0x802c7414, 0x0) msgsnd(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000000000005c8dc5855dbc2625796d6584861f9fa73918758a064d3581f62611bae3c8572d40cbb8cb8f9185786e755a927876d6f1fae7c324ac5c3e0fe222aca38b3f61a684c4ca3087b0f67d635b61035957a508aa8fd4147e31deab6e59fbd547b1e5f45d1c1688370da2fd5459bc6237da2b8174bcd7a02708cde8c41cae5fa0eaf8bec0df63f91a331fc66b5d48e5b6d3bb1b44d6ec3419f0c81295ccf7cb41a9e501b1129a4814c7c35abebb61047d8a0529eea90c359bc8dc5116a3eebdf701dbb9ecda77735af954e228e0aaf116a294c3cac1d348e8fd7a84a5d904000000813f7bb3000000000000f2e75f93551fb789321286c2403e72ffdd6e55b589f1e0db5617819ffe9db34730a39c7755c66dcd5fd07014"], 0xf4, 0x0) writev(r1, 0x0, 0x0) setrlimit(0x8, 0x0) r2 = syz_open_pts() syz_emit_ethernet(0x6e, 0x0) lstat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) close(r2) r3 = syz_open_pts() readv(r3, &(0x7f0000000680), 0x0) writev(r2, &(0x7f0000001880)=[{&(0x7f0000000100)="33f57cbd9b7a3dce024abd0a4458ebe67b96abcc9815f01b7384118224bac83dd8e2f9bac9fcf5581b498f230fc2c56937691faa0a6fbc6ec7d970f3e70feb02fcbb032f1cd7719778b73a00610bbc2cda7a2357f162165a18ec7a8361d61e5f202c9c6839ada531b7f39a0c", 0x6c}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="0076f965e5368d8a2ce261ea", 0xc}], 0x3) mknod(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0xfe) r4 = open(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000, 0x132) ioctl$VNDIOCSET(r4, 0x81946466, &(0x7f0000000040)={0x0, 0x29, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) minherit(&(0x7f00003bd000/0x3000)=nil, 0x3000, 0x3) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000af7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00004f8000/0x1000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000690000/0x4000)=nil}, {&(0x7f0000987000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xffffffffffffffc}, {&(0x7f00004f3000/0xa000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x9}, {&(0x7f0000690000/0x4000)=nil, &(0x7f0000168000/0x2000)=nil}, {&(0x7f0000021000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000a96000/0x3000)=nil, 0x100000000}, {&(0x7f00004f6000/0x4000)=nil, &(0x7f000071b000/0x3000)=nil}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x6}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f00002e1000/0xc00000)=nil, 0x14b}, {&(0x7f000095d000/0xd000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x2}, {&(0x7f00004f6000/0x2000)=nil, &(0x7f00009a6000/0x1000)=nil, 0x8}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ead000/0x1000)=nil}], './file0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000700)='./file1\x00') mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) 468.847498ms ago: executing program 0 (id=3204): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) (async) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000000c0)='+$\\\x00', &(0x7f0000000100)='^\x00', &(0x7f0000000140)='#\x00', &(0x7f0000000180)=':^\x00', &(0x7f00000001c0)='#(\'/-:)\'/\x00', &(0x7f0000000200)='\x9a\x00'], &(0x7f0000000280)) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) ktrace(0x0, 0x1, 0x10, 0xffffffffffffffff) (async) select(0x40, &(0x7f0000000000)={0x7fffffffffffffff, 0x5, 0x5, 0x7, 0x1d0b, 0x3, 0xb29, 0x3}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (async) r1 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r1, 0xc0307004, &(0x7f0000000140)=0x4) (async) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 213.897871ms ago: executing program 0 (id=3205): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETA(r0, 0xc0284457, &(0x7f0000000280)={0x8, 0xfffffffe, 0xfeffffff, 0x9, "080014000000000000010000000100000f1eeaed", 0x10000000, 0x9}) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0x80206919, &(0x7f00000001c0)) 213.029214ms ago: executing program 0 (id=3206): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0xfffe, 0x0, 0x4}, {0x1, 0x0, 0x0, 0x1}, {0x80, 0x0, 0x0, 0x101}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) openat$pf(0xffffffffffffff9c, 0x0, 0x200, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCGETIF(r0, 0x4020426b, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00070100000000", 0xc) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r3 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff) sysctl$hw(&(0x7f0000000180)={0x6, 0xd}, 0x2, &(0x7f0000000280)="d10f33767b39e2800881fb6050f62bb9b38ed1bc811755a08df5925ae7054ec9a4bd3bd435aef5118ffa8b485faa213723d4b892c036b11634b96586dc681b473a499c813958155fce380a19223b089bf57947be921c20f7447d883c14c03f1a6753f4b0c6ea7210c5f4576b8dd369e33648dbf319aea9db061a46c06b825f73e126967443b69820cc18d34fff5180768500b551eabb4805bb", &(0x7f0000000200)=0x99, &(0x7f0000000340)="3323a9745d7c538c38fdc4e410f0d00d4db4da4300514ee5e2854f0cb3daa33371b33e57e3fbf77ec0d672f13bf6ec66bd2127d97454af25169843d68839e188082956a5fe2093621dd410bc", 0x4c) ioctl$FIONREAD(r3, 0x200074c4, 0x0) open(0x0, 0x200, 0x6) syz_emit_ethernet(0x3b, 0x0) semctl$GETZCNT(0x0, 0x1, 0x7, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, 0x0) r4 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) setitimer(0x1, &(0x7f0000000140)={{0x9, 0x9}, {0xfffffffefffffff8, 0xfff8}}, 0x0) r5 = socket(0x18, 0x3, 0x0) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000100)) socket(0x10, 0x2, 0x0) 211.66319ms ago: executing program 2 (id=3207): pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) socket$unix(0x1, 0x2, 0x0) fchflags(r0, 0x0) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x80, 0x0) ioctl$FIONREAD(r2, 0xc0206921, &(0x7f0000000380)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/193, 0xfffffdf0}], 0x1) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) r3 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ff9000/0x4000)=nil) setuid(0xffffffffffffffff) setrlimit(0x8, &(0x7f0000000980)={0x3, 0x5f}) r4 = syz_open_pts() close(r4) syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000080)={0x5, 0xa3cc, 0xfffffffb, 0xfffff18d, "142e28a47e7c757fbfe9b7e280b1c9a4000c00", 0x1002, 0x1}) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000002280)="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", 0x147}], 0x1) shmctl$IPC_STAT(r3, 0x2, 0x0) shmctl$IPC_RMID(r3, 0x0) sysctl$net_inet6_ip6(&(0x7f00000020c0)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, &(0x7f00000021c0), 0x0) r5 = kqueue() kevent(r5, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r6 = open(&(0x7f0000000300)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x10, 0x81ac, 0x80000001, 0x10, [{0x8, 0x10001, 0x4, 0x71002}, {0x1000006, 0x376f, 0x8, 0xfffffff9}, {0x100, 0xf86, 0x20000, 0x8}, {0x5, 0x800, 0x106, 0x10000}, {0x6, 0x200727, 0x8000, 0x7}, {0x1, 0x650, 0x3, 0x98}, {0x6, 0xfffffffb, 0x4f8, 0x80000000}, {0x3, 0x800, 0x14, 0x8}, {0x2, 0x10000005, 0x4, 0x20000009}, {0x800, 0x8001, 0x80000000, 0x4}, {0x8, 0xfffe, 0x2, 0x85}, {0x7, 0xa, 0xffffffff, 0x6f506dcb}, {0x711, 0x1, 0x8, 0x8}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0xc, 0x2, 0x5, 0x10004000}, {0x80, 0x2, 0x825, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r6, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r6, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r7 = open(&(0x7f0000000080)='./file1\x00', 0x280, 0x5b) ioctl$VNDIOCSET(r7, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r7, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 210.503498ms ago: executing program 5 (id=3208): r0 = socket$inet(0x2, 0x8003, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1007, &(0x7f0000000100)=0x9, 0x4) r1 = syz_open_pts() syz_open_pts() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOASYNC(r2, 0x40047477, &(0x7f0000002d00)) ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0x8010426d, &(0x7f0000000300)={0x9, 0x800}) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000140)="b1000502000000000000000001010000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896443a42121000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x404, 0x0, 0x0) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0xf, 0x3, 0xfffffffe, 0xfffffff6, "ff0107002015c8a32d00000065c0bdf9c6f04aaf", 0x9, 0x40000}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fcntl$lock(r4, 0x9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20001fffffffd}) fcntl$lock(r4, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0x3f, 0x200000001}) ioctl$WSMUXIO_INJECTEVENT(r4, 0x80185760, &(0x7f0000000140)={0x9, 0x8001, {0x401, 0x636d}}) ioctl$TIOCSTAT(r1, 0x20007465, 0x0) r5 = open(&(0x7f0000000240)='./file0\x00', 0x200, 0x0) fcntl$lock(r5, 0x8, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x100000001}) r6 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) r7 = open(&(0x7f00000003c0)='./file0\x00', 0x200, 0x0) fcntl$lock(r7, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000000000080045f8001c0000000000ff9078e0000002000013000800907800000100"]) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='r\x00') r8 = socket(0x18, 0x2, 0x0) setsockopt(r8, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) setsockopt(r8, 0x1000000000029, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r9, 0xffff, 0x10, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BIOCPROMISC(r6, 0x20004269) open$dir(&(0x7f0000000000)='.\x00', 0x20, 0x0) 5.498569ms ago: executing program 2 (id=3209): sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x12, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) setreuid(0xee00, 0x0) r0 = getuid() setreuid(0x0, r0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r1, 0x802069b5, &(0x7f00000001c0)) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@random="d9546af63341", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@parameter_prob={0xc, 0x2, 0x0, 0x8, 0x0, 0x0, {0x5, 0x4, 0x0, 0x1b, 0xfffc, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @remote={0xac, 0x14, 0x0}}}}}}}) 1.200812ms ago: executing program 2 (id=3210): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x40) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) fcntl$dupfd(r0, 0x0, r0) sendsyslog(&(0x7f0000000100)="acb78831", 0x4, 0x24) 1.027615ms ago: executing program 2 (id=3211): r0 = socket$inet(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00aa6600000000", 0x8) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) r2 = syz_open_pts() r3 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r3, &(0x7f0000001580)=[{&(0x7f0000001700)="986ae492b155a482d7c1550ff0c8c25a5b1bbe20ce6d009182217ef7486695287ec7116d65a94807d01fa52f0f0d3fa9c1569a2b1ad06d28bbf28c7c1fee2df0e067f1d17d1f1c4cc3ed843029678faf4875b94801032c90dbec198af50feddac8d4556ce24d6417feda1fae2caa38916087f5265beb75ccbbc4073366986d78e7e8532d0c39639dc5ad4f673a04deef00800000b5dc4c71122ba426f7aacd3399da75a5fb382a53d317ae9fab904f0c5a3c7ed448302c02de7893e87cf474672b", 0xc1}, {0x0}], 0x2) execve(0x0, 0x0, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffc, 0x10002ffffffff}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x0, 0xffff63de, 0x5, 0x2, 0x8, 0x8, 0x40, 0x10, [{0x5, 0x400, 0xfffff115, 0x3}, {0x8, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x8}, {0x88, 0x80000e2, 0xf, 0x100}, {0x6, 0x7, 0xf14, 0xe8a5}, {0x788c, 0xffff, 0x8}, {0x4000004, 0xf8bd, 0x1, 0x3}, {0x9, 0xc, 0x28001, 0xffffe2e9}, {0x2000007, 0x1000, 0xb, 0x77ff}, {0x3, 0xfffffffc, 0x6, 0x8bfd}, {0x0, 0x9, 0x8, 0x6}, {0x1010000, 0x0, 0x800000, 0xa6a}, {0x401, 0x82, 0x9, 0x4}, {0x80000000, 0x106e2, 0x2, 0x6f5fc48e}, {0x4, 0x101, 0x3, 0x9}, {0x4, 0xfffffffd, 0x2, 0x4}]}) 827.83µs ago: executing program 3 (id=3212): mknod(&(0x7f0000000080)='./file0\x00', 0x4, 0xea0cfb00) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close(r0) select(0xffffffffffffff87, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VMM_IOC_INTR(r0, 0x800c5606, &(0x7f00000001c0)={0x4, 0xa8}) select(0x40, &(0x7f0000000000)={0x3, 0x100000000, 0x0, 0x2, 0xde, 0x9, 0x1, 0x3}, &(0x7f00000000c0)={0x1, 0x101, 0x2, 0x5, 0x200, 0x9, 0x3a7a, 0x7}, &(0x7f0000000100)={0x0, 0x6, 0x8, 0x6, 0x43, 0x3, 0x79a1, 0x11}, &(0x7f0000000140)={0x54}) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x408) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xa) setuid(0xee01) utimes(&(0x7f0000000080)='./file0\x00', 0x0) dup(r0) 313.788µs ago: executing program 2 (id=3213): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000300)="b1000501000000050000000107000000331c13fecea70500fef96ecfc72fd3357ae30200004e30ffd2d236acf20bf404be01000000f7c8cf5f882b297be1aa050400ce9409000000bbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abfba09a214cc8adfbfba11ce0000080ce37193f834370b0000000009000500"/177, 0xb1, 0x2, 0x0, 0x0) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r1, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22) r2 = socket(0x800000018, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) 0s ago: executing program 3 (id=3214): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mknod(&(0x7f0000000000)='./file0\x00', 0x2060, 0xcd5331e3) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 WARNING: thread `nfsio' (100118) exits with status -1 WARNING: thread `nfsio' (242895) exits with status -1 WARNING: thread `nfsio' (235625) exits with status -1 WARNING: thread `nfsio' (434537) exits with status -1 WARNING: thread `nfsio' (392796) exits with status -1 WARNING: thread `nfsio' (465754) exits with status -1 WARNING: thread `nfsio' (475940) exits with status -1 WARNING: thread `nfsio' (288760) exits with status -1 WARNING: thread `nfsio' (166671) exits with status -1 WARNING: thread `nfsio' (168102) exits with status -1 WARNING: thread `nfsio' (340682) exits with status -1 WARNING: thread `nfsio' (337863) exits with status -1 WARNING: thread `nfsio' (265081) exits with status -1 WARNING: thread `nfsio' (164642) exits with status -1 WARNING: thread `nfsio' (222387) exits with status -1 WARNING: thread `nfsio' (342129) exits with status -1 WARNING: thread `nfsio' (437179) exits with status -1 WARNING: thread `nfsio' (373779) exits with status -1 WARNING: thread `nfsio' (469179) exits with status -1 WARNING: thread `nfsio' (425148) exits with status -1 denied attempt to set clock forward to 52172937113390 pckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) login: pckbd_enable: command error malloc(): allocation too large, type = 127, size = 4762072176  OpenBSD/amd64 (Amnesiac) (tty00) login: pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code pckbd_enable: command error in6_pcbnotify: Huh? Thought we never got called with mapped! pckbd_enable: command error uvn_flush: obj=0xfffffd8063d26000, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pckbd_enable: command error $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 1754908833 3%#/.$3 $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 1754908833 3%#/.$3 &53%: !../4 &).$ &53%"5& OpenBSD/amd64 (Amnesiac) (tty00) login: pckbd_enable: command error Cpckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error ELFI ]Wj ')yO$L]^"w\{ѢSLPwGF!pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) login: panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 951 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 452022 96047 0 0x14000 0x200 0 reaper db_enter() at db_enter+0x25 panic(ffffffff8336fab4) at panic+0x1e5 __assert(ffffffff833b1b85,ffffffff833c156d,3b7,ffffffff833eae06) at __assert+0x29 refcnt_finalize(ffff80003c4b7520,ffffffff833687e9) at refcnt_finalize+0x1db pppx_if_destroy(205b9a,ffff80003c4b7518) at pppx_if_destroy+0x3d pppxclose(205b9a,2,2000,ffff80003c4467f0) at pppxclose+0xa0 spec_close(ffff80003c4e5590) at spec_close+0x417 VOP_CLOSE(fffffd80671f3cb0,2,fffffd80097fb5b0,ffff80003c4467f0) at VOP_CLOSE+0x132 vn_closefile(fffffd806b9fead0,ffff80003c4467f0) at vn_closefile+0x12b fdrop(fffffd806b9fead0,ffff80003c4467f0) at fdrop+0x121 closef(fffffd806b9fead0,ffff80003c4467f0) at closef+0x192 fdfree(ffff80003c4467f0) at fdfree+0x116 exit1(ffff80003c4467f0,0,0,1) at exit1+0x576 sys_exit(ffff80003c4467f0,ffff80003c4e5900,ffff80003c4e5850) at sys_exit+0x1a end trace frame: 0xffff80003c4e58f0, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 951 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8336fab4) at panic+0x1e5 __assert(ffffffff833b1b85,ffffffff833c156d,3b7,ffffffff833eae06) at __assert+0x29 refcnt_finalize(ffff80003c4b7520,ffffffff833687e9) at refcnt_finalize+0x1db pppx_if_destroy(205b9a,ffff80003c4b7518) at pppx_if_destroy+0x3d pppxclose(205b9a,2,2000,ffff80003c4467f0) at pppxclose+0xa0 spec_close(ffff80003c4e5590) at spec_close+0x417 VOP_CLOSE(fffffd80671f3cb0,2,fffffd80097fb5b0,ffff80003c4467f0) at VOP_CLOSE+0x132 vn_closefile(fffffd806b9fead0,ffff80003c4467f0) at vn_closefile+0x12b fdrop(fffffd806b9fead0,ffff80003c4467f0) at fdrop+0x121 closef(fffffd806b9fead0,ffff80003c4467f0) at closef+0x192 fdfree(ffff80003c4467f0) at fdfree+0x116 exit1(ffff80003c4467f0,0,0,1) at exit1+0x576 sys_exit(ffff80003c4467f0,ffff80003c4e5900,ffff80003c4e5850) at sys_exit+0x1a syscall(ffff80003c4e5900) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x75e8d264dd10, count: -16 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c4e5360 rbx 0xffff8000299eeddf rdx 0 rcx 0xffff80003c4467f0 rax 0xffff8000299edff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x619c11079da780dc r11 0xa7438b27cff75962 r12 0xffff8000299eebe0 r13 0 r14 0 r15 0x1 rip 0xffffffff81715f45 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c4e5350 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=518250 pid=73445 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=84, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80003c4467f0 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80003c4f3a28,0xffff800033808fc0 process=0xffff80002a2c2bf8 user=0xffff80003c4e0000, vmspace=0xfffffd805be98d90 estcpu=34, cpticks=8, pctcpu=0.7, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 33203 478719 37374 0 2 0 syz-executor 33203 205385 37374 0 3 0x4000000 smrbar syz-executor 47651 478337 62502 0 3 0x80 nanoslp syz-executor 47651 468762 62502 0 3 0x4000080 lockf syz-executor 47651 1061 62502 0 3 0x4000080 fsleep syz-executor 13373 248727 84147 0 3 0x80 nanoslp syz-executor 13373 389492 84147 0 3 0x4000080 lockf syz-executor 13373 301947 84147 0 3 0x4000080 fsleep syz-executor 15775 474759 1 0 3 0x80 nanoslp init 41239 173965 17428 0 3 0x3000 suspend syz-executor 41239 510816 17428 0 3 0x4081000 biowait syz-executor 41239 71901 17428 0 3 0x4081000 fltagain2 syz-executor 38377 104133 46199 0 4 0x82000 syz-executor 38377 99392 46199 0 3 0x4082000 biowait syz-executor 38377 41842 46199 0 3 0x4082000 inode syz-executor 38377 70966 46199 0 3 0x4082000 inode syz-executor 38377 264864 46199 0 3 0x4002000 suspend syz-executor 37374 469636 96842 0 3 0x82 nanoslp syz-executor 79620 278873 0 0 3 0x14200 acct acct 46199 414686 96842 0 3 0x82 wait syz-executor 62502 305199 96842 0 3 0x82 nanoslp syz-executor 84147 384450 96842 0 3 0x82 nanoslp syz-executor 17428 347943 96842 0 3 0x82 nanoslp syz-executor 15455 405990 96842 0 3 0x2 biowait syz-executor 162 206330 96842 0 2 0x3 syz-executor 95330 1313 0 0 3 0x14200 bored sosplice 2368 289643 96842 0 2 0x3 syz-executor 96842 35486 36273 0 3 0x82 kqread syz-executor 36273 147809 98100 0 3 0x10008a sigsusp ksh 98100 305109 79568 0 3 0x98 kqread sshd-session 79568 510326 29124 0 3 0x92 kqread sshd-session 29124 434688 1 0 3 0x88 kqread sshd 78379 509874 58814 74 3 0x1100092 bpf pflogd 58814 300764 1 0 3 0x80 sbwait pflogd 95242 272804 34067 73 3 0x1100090 kqread syslogd 34067 103069 1 0 3 0x100082 sbwait syslogd 45255 162542 1 0 3 0x100080 kqread resolvd 85159 150397 14787 77 3 0x100092 kqread dhcpleased 37104 293024 14787 77 3 0x100092 kqread dhcpleased 14787 188333 1 0 3 0x80 kqread dhcpleased 42976 407400 0 0 3 0x14200 bored smr 63675 443265 0 0 3 0x14200 pgzero zerothread 21649 262609 0 0 3 0x14200 aiodoned aiodoned 76643 9219 0 0 3 0x14200 syncer update 23966 191633 0 0 3 0x14200 cleaner cleaner 96047 452022 0 0 7 0x14200 reaper 33813 209260 0 0 3 0x14200 pgdaemon pagedaemon 4043 194309 0 0 3 0x14200 bored viomb 63156 15933 0 0 3 0x40014200 acpi0 acpi0 76893 82405 0 0 3 0x40014200 idle1 69129 37486 0 0 3 0x14200 bored softnet7 87081 328382 0 0 3 0x14200 bored softnet6 7300 523988 0 0 3 0x14200 bored softnet5 592 391112 0 0 3 0x14200 bored softnet4 55431 102082 0 0 3 0x14200 bored softnet3 38576 32745 0 0 3 0x14200 bored softnet2 60024 113500 0 0 3 0x14200 bored softnet1 79947 407764 0 0 3 0x14200 bored softnet0 20074 483902 0 0 3 0x14200 bored systqmp 94746 118196 0 0 3 0x14200 bored systq 59045 103370 0 0 3 0x14200 tmoslp softclockmp 13111 186655 0 0 3 0x40014200 tmoslp softclock 61388 472851 0 0 3 0x40014200 idle0 1 429773 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 41239 (syz-executor) thread 0xffff800033808a80 (510816) exclusive rrwlock inode r = 0 (0xfffffd806ea0bd90) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x242 #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 Process 38377 (syz-executor) thread 0xffff80003c4f2fc8 (99392) exclusive rrwlock inode r = 0 (0xfffffd8069d7f208) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x242 #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 Process 38377 (syz-executor) thread 0xffff800033809248 (70966) exclusive rrwlock inode r = 0 (0xfffffd806e09dc30) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 Process 15455 (syz-executor) thread 0xffff80003c4474e8 (405990) exclusive rrwlock inode r = 0 (0xfffffd80677a9a30) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd8069d7f580) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 Process 96047 (reaper) thread 0xffff8000ffffc2a0 (452022) exclusive rwlock kmmaplk r = 0 (0xffffffff8392cfa8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 uvm_unmap+0x7d #4 km_free+0x87 #5 uvm_uarea_free+0x4f #6 reaper+0x1aa #7 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10255 11054K 12421K 166960K 14320 0 pcb 19 15K 31K 166960K 1190 0 rtable 186 13K 13K 166960K 983 0 pf 40 18K 82K 166960K 373 0 ifaddr 38 7K 9K 166960K 243 0 ifgroup 64 2K 3K 166960K 440 0 sysctl 4 1K 9K 166960K 25 0 counters 74 37K 38K 166960K 482 0 ioctlops 0 0K 4K 166960K 2152 0 iov 0 0K 16K 166960K 189 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1484 93K 94K 166960K 3853 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 9K 166960K 36 0 VM map 2 1K 1K 166960K 2 0 sem 13 29K 45K 166960K 104 0 dirhash 12 2K 2K 166960K 90 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 232K 166960K 3519 0 sigio 0 0K 0K 166960K 119 0 proc 65 115K 179K 166960K 1182 0 subproc 72 4K 4K 166960K 166 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 3 0K 0K 166960K 543 0 in_multi 70 5K 7K 166960K 337 0 ether_multi 2 0K 0K 166960K 38 0 mrt 1 0K 0K 166960K 14 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 241 1076K 1076K 166960K 241 0 exec 0 0K 1K 166960K 1278 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 35 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 265 160K 182K 166960K 33069 0 UVM aobj 81 3K 3K 166960K 92 0 pinsyscall 41 82K 104K 166960K 4871 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 254 0 NDP 14 0K 2K 166960K 178 0 temp 119 8652K 8908K 166960K 186597 0 kqueue 14 22K 35K 166960K 745 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 483 0 479 7 6 1 3 0 8 0 rtentry 176 302 0 240 5 0 5 5 0 8 0 unpcb 144 2319 0 2295 14 11 3 5 0 8 2 syncache 336 7 0 7 4 3 1 1 0 8 1 tcpcb 736 1451 0 1447 26 22 4 7 0 8 3 arp 128 31 0 24 1 0 1 1 0 8 0 inpcb 328 4369 0 4357 36 31 5 7 0 8 4 nd6 144 46 0 34 1 0 1 1 0 8 0 pkpcb 40 28 0 28 7 7 0 1 0 8 0 kcovpl 48 18 0 10 1 0 1 1 0 8 0 ppxss 1192 160 0 159 6 5 1 1 0 8 0 pppxif 1504 20 0 19 8 7 1 1 0 8 0 pffrag 232 84 0 78 1 0 1 1 0 482 0 pffrnode 88 83 0 77 1 0 1 1 0 8 0 pffrent 40 163 0 157 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 5 0 5 3 3 0 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfstitem 24 32 0 23 1 0 1 1 0 8 0 pfstkey 128 32 0 23 1 0 1 1 0 8 0 pfstate 384 32 0 23 3 1 2 3 0 8 0 pfrule 1344 29 0 23 2 1 1 2 0 8 0 rttmr 136 3 0 3 2 2 0 1 0 8 0 art_heap8 4096 4 0 1 4 1 3 3 0 8 0 art_heap4 256 1256 0 933 42 21 21 30 0 8 0 art_table 40 1260 0 934 5 0 5 5 0 8 0 art_node 32 295 0 242 1 0 1 1 0 8 0 sysvmsgpl 40 43 0 10 2 1 1 1 0 8 0 semapl 112 97 0 86 1 0 1 1 0 8 0 shmpl 112 89 0 11 3 0 3 3 0 8 0 dirhash 1024 69 0 52 3 0 3 3 0 8 0 dino2pl 256 8021 0 6488 97 1 96 96 0 8 0 ffsino 296 8021 0 6488 119 0 119 119 0 8 0 nchpl 144 12920 0 12305 64 38 26 64 0 8 0 rtmask 32 32 0 32 8 7 1 1 0 8 1 uvmvnodes 80 9221 0 0 189 0 189 189 0 8 0 vnodes 216 9221 0 0 513 0 513 513 0 8 0 namei 1024 48071 0 48069 8 5 3 3 0 8 2 percpumem 16 256 0 204 1 0 1 1 0 8 0 kstatmem 264 290 0 256 4 1 3 3 0 8 0 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 scsiplug 72 16 0 16 7 6 1 1 0 8 1 scxspl 216 109320 0 109317 17 16 1 8 1 8 0 plimitpl 152 934 0 916 1 0 1 1 0 8 0 sigapl 424 3824 0 3769 9 2 7 9 0 8 0 knotepl 120 845 0 0 25 0 25 25 0 8 0 kqueuepl 224 1590 0 1579 16 15 1 5 0 8 0 pipepl 344 486 0 458 9 6 3 9 0 8 0 fdescpl 528 3773 0 3742 3 0 3 3 0 8 0 filepl 160 26117 0 25873 30 18 12 18 0 8 0 lockfpl 104 1839 0 1831 3 2 1 2 0 8 0 lockfspl 48 581 0 576 1 0 1 1 0 8 0 sessionpl 144 38 0 30 1 0 1 1 0 8 0 pgrppl 48 86 0 70 1 0 1 1 0 8 0 ucredpl 104 4185 0 4171 1 0 1 1 0 8 0 zombiepl 144 5068 0 5065 2 1 1 1 0 8 0 processpl 1248 3824 0 3769 6 1 5 6 0 8 0 procpl 664 9567 0 9501 8 1 7 8 0 8 0 sosppl 168 27 0 27 7 6 1 1 0 8 1 sockpl 752 7530 0 7490 44 34 10 14 0 8 6 mcl64k 65536 6 0 0 1 0 1 1 0 8 0 mcl16k 16384 11 0 0 2 0 2 2 0 8 0 mcl12k 12288 3 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 6 0 0 1 0 1 1 0 8 0 mcl4k 4096 110 0 0 14 0 14 14 0 8 0 mcl2k 2048 102 0 0 9 0 9 9 0 8 0 mtagpl 96 5 0 0 1 0 1 1 0 8 0 mbufpl 256 5402 0 0 338 0 338 338 0 8 0 bufpl 280 47364 0 41221 440 0 440 440 0 8 0 anonpl 32 14773 0 0 119 0 119 119 0 246 0 amapchunkpl 152 117763 0 117029 86 51 35 38 0 158 4 amappl16 200 14827 0 14430 89 68 21 27 0 8 0 amappl15 192 9 0 9 1 1 0 1 0 8 0 amappl14 184 140 0 129 1 0 1 1 0 8 0 amappl13 176 3 0 3 1 1 0 1 0 8 0 amappl12 168 4576 0 4546 4 2 2 3 0 8 0 amappl11 160 52 0 37 1 0 1 1 0 8 0 amappl10 152 6 0 6 2 2 0 1 0 8 0 amappl9 144 295 0 295 1 1 0 1 0 8 0 amappl8 136 25 0 22 1 0 1 1 0 8 0 amappl7 128 132 0 120 1 0 1 1 0 8 0 amappl6 120 305 0 301 1 0 1 1 0 8 0 amappl5 112 169 0 158 1 0 1 1 0 8 0 amappl4 104 319 0 301 1 0 1 1 0 8 0 amappl3 96 23886 0 23763 4 0 4 4 0 8 0 amappl2 88 813 0 751 2 0 2 2 0 8 0 amappl1 80 22865 0 22284 16 2 14 15 0 8 0 amappl 88 31602 0 31410 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 264 0 264 9 9 0 1 0 8 0 dma64 64 8 0 8 3 3 0 1 0 8 0 dma32 32 9 0 9 2 2 0 1 0 8 0 dma16 16 21 0 20 1 0 1 1 0 8 0 aobjpl 72 91 0 11 2 0 2 2 0 8 0 uaddrrnd 24 3773 0 3742 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 3773 0 3742 1 0 1 1 0 8 0 vmmpekpl 168 29741 0 29684 4 0 4 4 0 8 0 vmmpepl 168 240833 0 238447 137 31 106 113 0 357 0 vmsppl 488 3772 0 3742 8 3 5 5 0 8 0 rwobjpl 80 71579 0 60960 219 2 217 217 0 8 0 pdppl 4096 7554 0 7484 136 64 72 84 0 8 2 pvpl 32 24637 0 0 199 0 199 199 0 265 0 pmappl 256 3772 0 3742 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 691 0 119 17 0 17 17 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff8386bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83938498) at __mp_lock+0x192 intr_handler(ffff80002a268650,ffff800000079a80) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc mtx_enter(ffffffff837c8440) at mtx_enter+0x4a msleep_nsec(ffffffff837c8478,ffffffff837c8440,4,ffffffff833851f8,ffffffffffffffff) at msleep_nsec+0x2d3 reaper(ffff8000ffffc2a0) at reaper+0x13b end trace frame: 0x0, count: 5 ddb{0}> trace x86_ipi_db(ffffffff8386bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83938498) at __mp_lock+0x192 intr_handler(ffff80002a268650,ffff800000079a80) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc mtx_enter(ffffffff837c8440) at mtx_enter+0x4a msleep_nsec(ffffffff837c8478,ffffffff837c8440,4,ffffffff833851f8,ffffffffffffffff) at msleep_nsec+0x2d3 reaper(ffff8000ffffc2a0) at reaper+0x13b end trace frame: 0x0, count: -10 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff8336fab4) at panic+0x1e5 __assert(ffffffff833b1b85,ffffffff833c156d,3b7,ffffffff833eae06) at __assert+0x29 refcnt_finalize(ffff80003c4b7520,ffffffff833687e9) at refcnt_finalize+0x1db pppx_if_destroy(205b9a,ffff80003c4b7518) at pppx_if_destroy+0x3d pppxclose(205b9a,2,2000,ffff80003c4467f0) at pppxclose+0xa0 spec_close(ffff80003c4e5590) at spec_close+0x417 VOP_CLOSE(fffffd80671f3cb0,2,fffffd80097fb5b0,ffff80003c4467f0) at VOP_CLOSE+0x132 vn_closefile(fffffd806b9fead0,ffff80003c4467f0) at vn_closefile+0x12b fdrop(fffffd806b9fead0,ffff80003c4467f0) at fdrop+0x121 closef(fffffd806b9fead0,ffff80003c4467f0) at closef+0x192 fdfree(ffff80003c4467f0) at fdfree+0x116 exit1(ffff80003c4467f0,0,0,1) at exit1+0x576 sys_exit(ffff80003c4467f0,ffff80003c4e5900,ffff80003c4e5850) at sys_exit+0x1a end trace frame: 0xffff80003c4e58f0, count: 0 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8336fab4) at panic+0x1e5 __assert(ffffffff833b1b85,ffffffff833c156d,3b7,ffffffff833eae06) at __assert+0x29 refcnt_finalize(ffff80003c4b7520,ffffffff833687e9) at refcnt_finalize+0x1db pppx_if_destroy(205b9a,ffff80003c4b7518) at pppx_if_destroy+0x3d pppxclose(205b9a,2,2000,ffff80003c4467f0) at pppxclose+0xa0 spec_close(ffff80003c4e5590) at spec_close+0x417 VOP_CLOSE(fffffd80671f3cb0,2,fffffd80097fb5b0,ffff80003c4467f0) at VOP_CLOSE+0x132 vn_closefile(fffffd806b9fead0,ffff80003c4467f0) at vn_closefile+0x12b fdrop(fffffd806b9fead0,ffff80003c4467f0) at fdrop+0x121 closef(fffffd806b9fead0,ffff80003c4467f0) at closef+0x192 fdfree(ffff80003c4467f0) at fdfree+0x116 exit1(ffff80003c4467f0,0,0,1) at exit1+0x576 sys_exit(ffff80003c4467f0,ffff80003c4e5900,ffff80003c4e5850) at sys_exit+0x1a syscall(ffff80003c4e5900) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x75e8d264dd10, count: -16