last executing test programs: 7.98776948s ago: executing program 4 (id=24): r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000005c0)="b8c2987d164312fcd89c4c3429926e37a813907cbeb5444d15e1561c7aa79ba9f69e09f48e0816cec3e7449ec7bd1e1f8c543731b3", 0x35}], 0x2) execve(0x0, 0x0, 0x0) syz_open_pts() syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@empty, @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @empty, @rand_addr=0x7bfd, @local, @loopback}}}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) rename(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) r3 = socket(0x18, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r4, &(0x7f0000000380)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f7c2f431859f1ba33264a313912f2ba6122fa0c8d04d7759b7647eaef6feaa2b718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4466e0dfa348578a530b590ae1fe2adc1c85", 0x90, 0x100, 0x0, 0x0) setsockopt(r4, 0x1000000029, 0x3, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000000880)={0x0}, 0x10, 0x2842, 0x0) sendmmsg(r5, &(0x7f00000008c0)={&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x8}, 0x10, 0x5) r7 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x6) fcntl$lock(r7, 0x7, &(0x7f0000000140)={0x1, 0x0, 0xeffffffffffdfffb, 0x10012efffffff, 0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x1, 0x37, "6302267c0e16250fd8ab0009be99114377"}, {0xb8, 0xffff, 0x5, "683764d2ac10a2417f284f2cfdf42caeae1a369967c59c0165daae241311724455ef2fea392c2d48f14524c36e5180f9bd1ee2c2a5a4bf3c4345508b4153d5c04b714530789a0e60ca8f446cd2909854e003b1d6e24c6c3818f7523c1cfb547e900d0b9dbc357be931d0ee0d7a269315bb0c55d9c31e6ca27dbfc8859af0d1853dd0f0c06217394080c065c0adbbea4aeb657991b099255eb9eee78dc52356ad47"}, {0xc8, 0xffff, 0x7, "77da0a5c652498c5e91aa8f1d716dd669073b6a8bbbdf75c2d55a2cffaee3734f6c11e5c34d10c13f977fa430fd969e16fd6f2e83a7dac949ef7c4213f326a0dedd1de5f82849becd39509a5fcecf16db333bf0927b195cd0d18b2193fd9bd5ef2244efa5c9bd7f537d12c738a22dd6d506ad8562691f2e07cad00e6cde9e5f3ea4c6d0756edb55b633fa46d46344ad0018baa274b0f4c1156b62d40a75ee5a0875b64ddd08a22a14e6999f6cc507724cb"}], 0x1a8}, 0x400) poll(&(0x7f0000000400)=[{0xffffffffffffffff, 0xa0}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x8}], 0x200000000000007f, 0xa) syz_open_pts() socket(0x2, 0x1, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x8, [{0x0, 0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x3}, {}, {0x0, 0x5f}, {}, {0x2, 0x2}, {}, {}, {0x0, 0x1fd}, {0x3}, {0x2, 0xffc}, {0x0, 0x2}, {}, {0x2, 0x2}, {0x3}, {0x2}, {0x0, 0x7ff}, {0x5, 0xffffffff}, {}, {0x3}, {0x0, 0x400}, {}, {0x2, 0x3}, {0x2, 0xfffffffd}, {}, {0x2}, {}, {0x1, 0xa}, {0x1}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xe) 7.921291169s ago: executing program 7 (id=29): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x4, 0x6, 0x40000007}, {0x24, 0xf, 0x3, 0x4006}, {0x6, 0x9, 0x1, 0xfffffff2}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close(r1) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000695000/0x3000)=nil, &(0x7f000051f000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil}, {&(0x7f0000692000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f00007f5000/0x4000)=nil, 0xe87}, {&(0x7f000062e000/0x1000)=nil, &(0x7f000024c000/0x3000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000604000/0x3000)=nil, 0x8}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f000069b000/0x3000)=nil, 0x4}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00004e6000/0x3000)=nil, 0x40003}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f000072b000/0x2000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x8}], './file0/file0\x00', 0x3}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) r3 = socket(0x2, 0x3, 0x0) r4 = dup(r3) r5 = dup(r4) setsockopt$inet_opts(r5, 0x0, 0x16, &(0x7f0000000080)="fd0cc085", 0x4) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sysctl$net_inet_ipip(&(0x7f0000000400), 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$VNDIOCSET(r2, 0xc0104401, &(0x7f00000001c0)={0x0, 0x0, 0x0}) 7.919150055s ago: executing program 7 (id=31): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) minherit(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, &(0x7f00000003c0), 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) (async) minherit(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) (async) sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, &(0x7f00000003c0), 0x0) (async) 7.876669953s ago: executing program 7 (id=34): mknod(&(0x7f0000000280)='./file0\x00', 0x80, 0x1e5f) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x4c}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) select(0x40, &(0x7f0000000040)={0x2, 0x1000, 0x6, 0x9, 0x9, 0x4, 0x8000000000000000, 0x3}, 0x0, 0x0, 0x0) r2 = socket(0x11, 0x8003, 0x1) getsockopt(r2, 0x11, 0x4, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r3 = socket(0x2, 0x4001, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r3, &(0x7f0000000000), 0x10) close(r3) sendto(r3, &(0x7f00000002c0)="d8dea11be1", 0x5, 0x2, 0x0, 0x0) r4 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pwritev(r4, &(0x7f0000000280)=[{&(0x7f0000000200)="445620728f33d4411b980633196d3f55412b", 0x12}], 0x1, 0x7) execve(0x0, 0x0, 0x0) close(r1) 6.086690382s ago: executing program 3 (id=67): utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x0, 0x6}, {0x6, 0xfffffffffffffde2}}, 0x2) link(0x0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rmdir(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) chflags(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=""/238, 0xee}], 0x1) 6.084846244s ago: executing program 3 (id=70): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f00000001c0), 0x411, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r1, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000001040)="bd", 0x1}], 0x1) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000180)="e3931bea7c68d8b7e5696794567520d2d2d304659f3e0af7d858876c9b5961332577c7d9bafd81262b1113849734b64f5cd1c9e49e1f17e449d96a82810197c326b1d3d3f5a46a3b3304c78c352b221dc052bd2188132b8122ef00d42618b2c70598bda875ac3d0f3e9402d72929c34d087d73991b031a11304b9ce9d66aabdd68ef2c0b8143c78189db085a3e6dc05b6235f58eca75ec75f7ab2f705de89ee39f13276ff87456fc9dd457e1fc0d9a76"}, {&(0x7f00000002c0)="6d1411fe5d53e44fe110041c8ee0cb2c421b7d8cd839a689147eb2387875970963a1db0fa33dda252147b6d051bb6a1419b1938512f88389f3b588fbaa96a6efdbf970b4675145a581d314ae3d10f2e365c4b0be267c2fa4d0a6eaaa797f555af09e1c8b41aa04e5ea33a153f106f8e60a29d7365a91a29331"}, {&(0x7f0000000340)="68601e1431f2f5ef607e86162fcad825d86b27096a2015727953f829f8dc4aa907917af9c9341a3100a20f0824eeb517d3fdfd92a3c4eba24780d8fc7ed6cade40c1c61633e38c70aa3330e548d03e11bc5e3767a4e9d4518904b025"}, {&(0x7f00000005c0)="236df10a16afc190778f"}, {&(0x7f0000000240)="0091"}, {&(0x7f00000003c0)="0430e8a1a6b8d8361f9f1dd4159fdbf0fe3f63b87d08e0338998e36193a53350fcb119506ac3d988d791406a2ec59099445bc247aac562ee7b06ba303ebf3fc6216362439c750ab8c27f9102e0c5eb922e5432d9ac07c9359b99cd897fd9dabd2b6c8a581cbe28f0c259e710ff1e2266d9bbcdf2848bc040a6194f2db594e9a2bb80e280"}, {&(0x7f0000001080)="02680c15f0691b00d52065bee1271518bac36998ecee0d6892e1984c5d9f27ee05deb133dab48c38b00c72c17ffe95f1ba93aebf2b96fafa8c9bad6576310dd216690aa45f9a0e88e9a6016332e1cfe37a9f074597d837fe03b888a0d13164b39cbb46b47d7d878e6e8d271c05c301b99b626e33a705cfcd4a1ec5de0b532cccab93f952372cb33aa4d7c25171b4d139fb26207443ecc766e089bbe8d864ba181ec78b6f0d8a56f33bcd6f4a345484d50ad3737a16d5daa2f9887067438a7147ebca8360f99dff1ba1fc16f22cb989ea0164f2efefeb7fa98ba656c32b4d0304660af27aca97194fde01a5da9f6a1b1c7cd4113bf7151bad033105fee96f1163f9e7302dcddfed0c5f39c5e4835cd7320fdd8e2d5da6396cbb3f357e6f74ac28103e4c5d4d74eab7ff38d17445ce548e404b833306ef63ca49a3f0d88530bdbc6de9377f651641737ae2f69d0493bd4e7c1a4ff4d701edff8ee28c0c8c091829741c33391d56349f5e22ccba92c620c53222d2767e55a360f99597923c1a367a0d938c660ff1afd65fc5188e1225842c6ebb9c1d41ed438737a26965165c5719bad3239e4a0dcb0828a79fefcb65d4654b4eadd4404c9b13517234133409a60ed9bbf978b221f84794039f2028d4020179b1cc84f116828320d1e5b898e592bf0aa081c6048ec66fa8ca090e41342e378dfeee530d6fca6a4b901bf6446343a3f40d147c6abca5b5f15ef44da8aed200dfffa2606c8d1fb42dc29c0880f86690f48e6f900e2392cc9b0f720e2b773de2c3aa0bd6dd264ea8e26bc3299004f644509a3293322511c9a30571e25d10f0fd6287386534fa00e32efac476659265c0b688303f5ef301c320f4a06e33a222d2eddeb41f282abfc680f66e2a5abab525a3e356ad2a0b8d546c6c571690d20bf00ebb53b8fd09ec3c710c2a8ec01ff89a967860fbb850752d2d39069c47e63fd1b8c119bb76810bcec0b14770203018702191022a52c7da09a0798f39d735c3417148eea07e81ef436659e2aa7354a0ae95720404b0a551275ae323566c6a1e8de62b14c5b3ccf5a7f864b2e273fc4c4cfe196efbde64630637bbda4f4bc8384e7668882b51445f9e3e62c538d81af5bdca62609cfd6ca8c1b044b5c9c209e367f5e67d5f7c8dcc1d72f2d39e5c2f7ba4ecb624d56ef6762daa88456293ac21721862d62aa84ed214faa9035a526e74eae593b4064521065f1df3df47d33dc4749e44b68de69860bd03567310e2e0ca3310393c029413e2beff526bb4f9ae48f57127165d9c8dd5d6f75c44dd474d8e78d9453ab9ce3f7d661e67aa2e227e6e74b5e66d38fca64f040fb94692a65f10b3eeecfb3712aa216af18d6bda3741f54b93f407817ff527d39f370bcc540dafd0d5fdaffd912d584f087ee8f4d0f8810e6a319045f1f42c88cac4483ab3c383d86009c95ed37ed41d4f98537e474761989babedae477977b5796cce0f59f1d612096fe03a4d4a8cf4a2dd82ee0cdb1b6f6f97e652b280efc99296fc4eae54c9ed0876ad82ed42fc74e77b0114d28a6608a3db0932453961c1bdc57e8ac6d74f15802dde40e74e04c373eff7ac08246e53ea88f3219364d63422b9fc5f4039ceb9020dd5c4b17864fbcd75649f8720c28edd1c101929e3bbc52ac37bfbb9eff2998fa4bb4982ae5679dc683ea2ed384bf10012aa6fb3ce23ac61e2de0fc1873e24fce625cb2bfe6970f9b0287935c832fd92a30b2362d171a16060b7c594ec67992ee9a1328c0c49943ff74e9b9e5ffebd8c28b6ad077e69c95b320da914c8931787ca2c489567225ac2d0609020f2953c9a7ac540e0de4c95cf960974ae60b8832a9ed53f762183172f08a6a6441c33485af70f5ebc3c8df24e8588f642ac89b0e2749c97f803a749acb6ec69b8cce1af181d3b604ee3eaf5d99a5e74111fd7652112d6e897a93f987c9815c952fe25c67d0859308447ed42263827cfc6fee239b64a24f18d3c258779d782bf6823a1c3a0806d51527d96d6eea014c1ce03c5af4402f17e109f10664d70260fa8da620bfc66ce649854c25123dfc2911062233084b519ef91ba2d40a0402ab14d85fcdc69b3730c638bbb6cc66cc10a5900fb4237cea5a036449071f3cc15b074dde2d8c045463ebf62e341f183d495e82dd8d703c7e184ec84e4883105612f27823c48fdf50229eee56b3214086306ef30a6832896b1d7eb01493e223a7140b6a4ab4c77321f55359ef4234f3ad4fab3f4ec08460af5a18c148b9670377958eec3bbf4e273b98e8c258c710ef5f09f2d3ca542b9e27c0ede2300398d2d18a6bc72b872100fc01e610e5fb9054ba76ebb29102f355d43a67a113b9020a82733aae26e52d19c9cd6717d06b81d762631133111aa394d035a944ff27e52efb5e74c350c698a4e3537b77160ce2bcbfaece7f7f0e239dba6b6b39c1835401a8ccbb57fb50db977d6ad5467ef4ffa9ca06aeb1b3fffea3e772585c88788e22b0c492b1b8ed95f47e7ce83f209ba346fc7cea06677727c7c8fc9ec16dbbfaa3026c2ce341ed8eaae3695530f30466b0f1522b765a7392e23c02e27585664e33c8298cf222d382634b913a85da3a99eda00062d1d3dda351964ac617e33341a9dd6735ab1b27831fcb7fc1ff6dde7c97ee08e2181db42be0ebb4ff5ae7f4f416f851092c27840bc7e235ced2bb8cfd096a1c60674f6e210e64f3740e5268ec1abf1ec8aee716b2645bcffe308038915a89e69e0349350c66d3494da18c6b26e0adfdffdf4e129c775ae523d7e44cb18b063c606239a2e7b6136cce0f709dd6740954dea0dbd6deb920b2bfda0de3e6e67e953ca98b96b57dd6864ea79ef68277d5c088e8ddedf7f5790caa21b9e7529f6eddb4cf1cbd3db50c6f76d9458562a5a7f6fa9037273d84be0271daf67fe9f6dc13724f165a38d049ec74f8050d08696c162a8b34210eca23024b9e2c41dd1a447db99ca656406ccd4ef5738ce9776b38b74e410f6fe1f7c58230e45c024b8ef33bfa03289b6401380a480047f0fed2aad07115ecad938c138aa3461e09357a47575403946a1d66d560f5e366ada0a41d7586bb2c16e14303b84d6350975c896a6a5e076f7b7761be749136e9e74c08f018d2d9b2876c37ffcc0b9668ad5a75faa0d1ba3379a0c43848c753eb7d2f830561f39bf96ab3d3c8098db3fb00f290fae5176fb3cf3cb2e39863c3930ffe7959b943638ea8b08f3b4dae1f0320cde4dae6f3a9f37182d83b22419959af065dedd3a10585a562210887d68ce6384222547666799e6ab4f7f0194c336e5a8192c3976b6dafe1e1b64b1f22f3ed04b6d2601ad7ee7b32d4f64c7b5ec406ba749deed73f727a3c4acee9a57e160f303073d822bdb5b83727aae454439e9056a54deb101f3bf0b746476a8d3b3b14aea1f034d656db997f8fdf9ef5f038ac6c3cfd93d45976e716dd58f80ff6c02e008b40b480575a88cf78878dc9d03096923139f0a005793ef28b32e17073ff15667f2a11e220e08dee6847fcef16f38b5cb442d6f3ccf94e4f3192fa072b82d0e88689af75d942fa1a7918c73c07e01ce72ba1bfb393fe8676239882e1c8f40c346a786ff7bc8ca89b0f93d888ef2a8a2a117be2dac641bc9fe8ddbd5f0a35d61b3a1c9a5e45daa87d6b759dd687572accac5b87231732506d13e5babff34a2755310037f030f704555fb84c99b6c1ea7f7c9c92f8f3a5cc73285e02e6ad18bb6949d36b93a64c3fb7f1572e608ec3ab71e5d86ad2b2e4ecf5bbd5bd663f3a1e8a5d81515d5f358629978033ef7540482d180e066f619b0ca849b2d1da842c8a8986817b5d610fcd27839a97fd8373b9a56bc3f7f2c156ba7ac73e09ceae3c32d2113465eaa33e149303b34d2980cbf004392a0a93080d8e216a7bd2a035250cc0d70baa2b0751635ba616f3effa9220819c940f36210559eb6d7cd114af58777970960c1dcb037a0dd7e21d1428b2eb484d5a8132c16f0404d30f5fe41f57d7d4a00c1cb484f9bb6d64212684a2f5b305ae4f8e9dfa3f455c41237f1b8a82681d6d97409e82daf19d20078e1e73865a15ce9ab97b53cf9fb4e49b05eaa8b9f2b854577396a2f7174f4b6370448006b7c1b737b71c993bf191d909df04fd74fbed943a4ec15c414f91fdbbfef999ad84902d1118cccaff1767dfe2af56d36254ff0f8818de4deccdd19e963e20ae9ad6ff176568aadfeb4c17e67d40161392b3ea1943f6b5b8898de215bb925d6d4e82e8200c448516a3e56aea6e308864a57a92047e00516e918d1df0f971c2d8e19149ce7adff3a1ee7840a4ae26eab018a2bbd241145680b9d4c262eb46b14535fab8a36136118709f5f540b96281133e295a625f3ca2135f5d7c5ccffe76d7aaa48c2786ffd9bdc348ed006e28521783de398f5db557d0f459be75186f870ba76983cf1d5ad49d19412535a2e947127fcab49e2e8275f7fc6aaf48cd13e51532e40424472249d85f96f02d08b28a8a6621f1de5185fce741a95d0776d0565c184198492b5d6603bcbe6387a86be243b0f2c590551159b3cf5477201c7c5628bdd1d18b92811c740a6ff62f918ceb496a0410d283091ee70f933d6f04ddded9bf0499c27426a9aa957f49c7d311d1878bd8d0697159a3baaccd8ceb1e5db5d8acc282a00add61fc7b39d6d0c2d3f5ef536b17cb39c830f37f060beb4cabaa6e69be1e8fca43e5bd4b24ac007cb9e4ed88181bed194be94fab9d09b89de2e34d034262846ce234bfa170b7e82f60339bd47b7b87c1b2073b112eef03f45e12e438057add8e83e66d3adfb72b563d0eef7310da29db2b25d80717290742c70209fdc8081f1f6153e50c013daea8a1333ced07940030fbb74383ccfb21539d65703d6bd0316cef703c3cadfa7086925ad8b435af3f89b9e040f549de6b05c6ef78add6c16059c0651943844912260725102b6636290f2924139b59ab59afe60ce2012bcb58999fa24ae8917c373e19cb53c5aca8c4014582fafa377cf5b6dcbb8f1c1bf5f1824e24a2d214ad6f9a7521282dabc21ac8e91b5eca5cc86d0ef38290c652728d33d4a81c3f86fc893b52bf4d2243c762768ffc6f3b2d4a57a2ca273360603818319e628d35067777e9164798b7a546d084ce50d63cbf61b169e249153d2e39f667b553e5b361c39d2aef0e3b96f3e7bbe1e514a0320d42a262077244da2bc43b5fecb22fde0c67e269d3da4023482a675bc184b332785dfdad1f78ede1692f1b001aa98a8c70cd6949a5a4e95e76fb2df6c4c06485eb2312e00d9df2424804cc9a5e46f9921a7f71545cd96f335264fff2cfb86183f2dd06361b1c58042f8a7d5b490183aa9b86b40c2a707303f30a1cee9686e3f435a8e3078475e3956de5c42177493fa95dbf1561a9207c81e1bc4b02dbf1e3f75934c9ebe0adef09ff3764abd56d25beb07c69f9ea3cec94e725058642cba7bf7ce601570a3c7e41bc064b99202a91ee84f52d798451a30c40d9a971d5590f5ab1f195c5aeeef45b4a4551adf6cadc00039034855fd1ac8044e963bea8b8d2fbcf4d0038d55d67e9a583a1ffd7925fd4de1dbf5c56e4fa5cf618dd87492c6dccd7b4f5c55d20ed9295dc975990712623ea607d6dd0bb5d696cf0f0dd0745caa97b74c1b76c99ecfec94489b1ed21fb443d16794feefd01131c71dfe7b0365e10bb11c2386666c7273b71745146b4b462b1a175a77957f96fa83fcb79129c8540a5bcda4171aabdded42466fc6ec2b391eeb63f75626d2a2944ad6f8e11c84e7977c8c"}, {&(0x7f0000000080)="1ce434342060b67f54578406b6ad10100c"}], 0x1) setrlimit(0x8, &(0x7f0000000480)={0x5, 0x9f}) close(r4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f0000001740), 0xfffffffffffffdff) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x10, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x81}, {0x2c, 0xf, 0x81, 0x4006}, {0x6, 0x9, 0x1}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000200)={0x1, 0x0, 0x4, {[0x8ec, 0x0, 0xfc2b, 0x8000, 0x752, 0x1, 0x9e, 0x5, 0x8, 0x4000002, 0x10, 0x0, 0x6, 0x7, 0x7, 0x3, 0x3, 0x1], [0x8, 0x1, 0x1, 0x15, 0x9, 0xc, 0x8, 0x0, 0x5a19, 0x1], [0x8, 0x5d225aea, 0x100000008, 0x80006, 0x4, 0x44, 0x8], [0x108, 0x524, 0x1, 0x800000000000009, 0xfffffffffffffffe, 0x853], [{0x9, 0x0, 0x1, 0x1}, {0x7, 0x5, 0x9, 0x80000001}, {0x7, 0x201, 0x96, 0x80000000006}, {0xb, 0x9, 0x4d20, 0x1}, {0x2, 0x7fff, 0x39, 0x9e}, {0x6, 0x80000009, 0x4, 0x5}, {0xdc8, 0xb, 0x200, 0x3}, {0x3, 0x1, 0x9, 0x4}], {0x4, 0x7b7, 0xffff, 0x100100000}, {0x8262, 0x2, 0x4, 0x9}}}) dup2(r1, r0) rmdir(&(0x7f0000000140)='./file0\x00') 4.954765809s ago: executing program 4 (id=72): mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) mknod(0x0, 0x2000, 0x1e5f) open(&(0x7f0000000000)='./file0\x00', 0x80, 0x23) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = semget(0x0, 0x1, 0x281) semop(r2, &(0x7f0000000000), 0x23) close(r1) open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x120) chroot(&(0x7f0000000740)='.\x00') mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a) r3 = open(&(0x7f0000000100)='./bus\x00', 0x8000, 0x94) ioctl$WSMUXIO_ADD_DEVICE(r3, 0x80085761, &(0x7f00000001c0)={0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) 4.95411981s ago: executing program 4 (id=73): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x6, 0x2, 0xfffffff9, 0x1, 0xd4, 0xfffffff8, 0xffffffff, 0x2, 0x1, 0x3ffd, 0x10}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$BIOCGETIF(r0, 0x4020426b, &(0x7f0000000000)={""/16, @ifru_dstaddr=@un=@abs}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) r2 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4, 0x0, r2, r2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r3, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r4 = fcntl$getown(r3, 0x5) ktrace(0x0, 0x1, 0x192c, r4) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f0000000080)) r5 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000100)) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4}) setrlimit(0x0, &(0x7f0000000340)={0x9, 0x4}) r6 = syz_open_pts() close(r6) syz_open_pts() writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)="5aeaa37c13ff9814549202a74a2abdbd9e33f6feffad5c9d42ca20c7ba095600000000f2e81cfa993e134951eb2719d6854d25a40e6be3edc6e22a3714baf14a223cbb1709da6edc62f915", 0x4b}, {&(0x7f0000000280)="fbdf80acf555f31b70f4efcd64e85b9cd83d2c5738e601051eb8dc8ef522c1589230d7ae05b0ec39225637525ebc365a181423d4141700e8a9d850e9cddadc3d1fd17a2ed8e81d96f01f9666f34be79474d389cc3848e36970f05dbe32a78d03928a3519ce4980a2ba53648bd11b76d130c188677ab1394135c5db2a6b59b6b888b7d66fb01d9d2304e66b9d8da83bacaf", 0x91}], 0x2) sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180), 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r7 = socket(0x18, 0xc003, 0x3a) setsockopt(r7, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0x66, &(0x7f0000000200)={0xff, 0x1, 0x10, 0x45ae, 0x3549}, 0xc) close(r1) setitimer(0x1, &(0x7f0000000140)={{0xffffffffffffffff, 0x100000010000009}, {0x7ffffffb, 0x4004001000}}, 0x0) 4.952437925s ago: executing program 3 (id=75): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x800}, {}, {0x3, 0x7fff}, {}, {0x2}, {0x2, 0x9}, {0x2}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x6}, {0x3}, {0x2}, {0x0, 0xfffffffc}, {0x1, 0x8}, {0x2, 0xfffffffd}, {0x1, 0x40000000}, {0x0, 0x1}, {}, {}, {0x0, 0x6}, {0x0, 0x9}, {0x2, 0x9}, {}, {0x3, 0x800}, {}, {0x3, 0x2}, {0x2, 0xfffffff0}, {0x0, 0x480}, {0x2, 0x8001}, {0x0, 0x4}]}) (async) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r1 = socket(0x2, 0x4001, 0x0) r2 = dup(r1) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r3) (async) r4 = socket(0x2, 0x4001, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) (async) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1) (async) rename(&(0x7f0000000100)='./file0\x00', 0x0) syz_emit_ethernet(0xe, &(0x7f0000000300)=ANY=[@ANYRES32=r0]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r5 = socket(0x2, 0x4001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) connect$unix(r5, &(0x7f0000000000), 0x10) (async) sendmsg$unix(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') (async) openat(r6, &(0x7f0000000000)='./file0/../file0\x00', 0x80, 0x88) (async) ioctl$WSDISPLAYIO_GETEMULTYPE(r0, 0x80084904, &(0x7f0000000180)={0x400, './file0\x00'}) (async) sysctl$hw(&(0x7f0000000000)={0x4, 0x1f}, 0x3, 0x0, 0x0, 0x0, 0x2) 4.930774172s ago: executing program 4 (id=76): r0 = socket(0x11, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b10005016000009f0500000007000000331c13fecea10500fef96ecfc72fd3357a068da3a5673039d2d236acf20b7804be38164991f7cccf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af630037282112000000720fd38bfbb770c1f5a872c881e2772ec5a10400000000000000361b1257aea8c5d0002012020000000000880d6633c556ae9be371a3f8343712051eeab71d89000407000000800420000000", 0xb1, 0x0, 0x0, 0x0) sendto$unix(r0, &(0x7f00000000c0)="b100050400fe03000000000007000000331c13fecea10500fef96ec0c79f050000e30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421fdff0000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba220f54f4fcf668246c0900e1937c727a4bdb8d000008e371a3f034371205", 0xb1, 0x2, 0x0, 0x0) (async) sendto$unix(r0, &(0x7f00000000c0)="b100050400fe03000000000007000000331c13fecea10500fef96ec0c79f050000e30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421fdff0000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba220f54f4fcf668246c0900e1937c727a4bdb8d000008e371a3f034371205", 0xb1, 0x2, 0x0, 0x0) 4.926515337s ago: executing program 3 (id=78): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0xaaaaaaaaaaaab98, 0x0, [{&(0x7f00006e0000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x400000d3b5}, {&(0x7f0000ca6000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xf}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x8100000000b932}, {&(0x7f0000ec8000/0x4000)=nil, &(0x7f00004ac000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000188000/0x2000)=nil, 0xe2e}, {&(0x7f000060b000/0x2000)=nil, &(0x7f00005ea000/0x3000)=nil, 0x6}, {&(0x7f000025e000/0x4000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x81}, {&(0x7f0000005000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00002d0000/0x4000)=nil, 0x10000000001}, {&(0x7f000069e000/0x2000)=nil, &(0x7f00003f2000/0x2000)=nil, 0x8}, {&(0x7f0000707000/0x4000)=nil, &(0x7f000038f000/0x4000)=nil, 0x812b}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f000005e000/0x1000)=nil, 0x6}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000562000/0x2000)=nil, 0x2}, {&(0x7f000001e000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000039f7}, {&(0x7f0000f20000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x4}], './file0\x00', 0xfffffffe}) r0 = msgget$private(0x0, 0x9) r1 = getuid() r2 = getgid() getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000480)={0x0, 0x0}, 0xc) getgroups(0x2, &(0x7f00000004c0)=[0x0, 0x0]) r6 = msgget$private(0x0, 0x1af) r7 = getppid() msgctl$IPC_SET(r6, 0x1, &(0x7f0000000740)={{0x1, 0x0, 0x0, r1, 0x0, 0x20}, 0x0, 0x1, r3, r3, 0xffffffffffffffff, 0x0, 0xe78, 0x1}) r8 = msgget$private(0x0, 0x127) r9 = getppid() msgctl$IPC_SET(r8, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170}, 0x0, 0x1, 0x800000000000000, r9, 0xffffffffffffffff, 0x0, 0xe78, 0x1}) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000500)={{0x5, r1, r2, r4, r5, 0x40, 0x3}, 0x9, 0x579da0df, r7, r9, 0x1, 0x393a800000, 0x8, 0x3}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000007c0)="6abc0b0f1f8ef281d8783efa7fad213c5319ec3e2dcca2c8aced13456a081841575116dee5f11e9efd5bf52cf191841fcc5a94973e56bb8e12c7b924bb9e3e7648c961d420b30dea0ff4d0090b296c0c2c9a9abd0a41c14bd098618b811d6b3bc5c3a139a31aa5d3b9", 0x63}, {&(0x7f0000000840)="8f3d1ff0a4ce89cc30242a61d957f394b48af576c7e340b49c3d7b3d4460d2cc66959e5763a057474bc381f54eedb5864b79a8a8e3edabe9e182b2d0a2acdd9be48a28336d166cfb199c96a13b1ae9cae2b09f243492f92c2c7c5bcfbb78933c669d2f3ed027e5b1e486eb11b92a4ffc1b5470e89c5d5e186ad210517d20b5b15679860b00e24c567abdebd9e2074ba8", 0x90}], 0x2, 0x0, 0x0, 0x4}, 0x400) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x2b, 0x1001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r10, &(0x7f0000000080)={0x0}, 0x6a, 0x0) close(r10) unveil(0x0, &(0x7f00000000c0)='r\x00') setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r11 = syz_open_pts() close(0xffffffffffffffff) r12 = syz_open_pts() read(r12, &(0x7f0000000140)=""/127, 0x7f) setsockopt(0xffffffffffffffff, 0x616f, 0xd, &(0x7f00000000c0)="6b1458fba1349b5dbd01267b5b4ae9fff5ad5009ca824ef6d2087944fab7ae616b81048cf2ea9e2c657a827d3822e6213504", 0x32) writev(r11, &(0x7f0000000640)=[{&(0x7f0000000680)='\x00', 0x1}, {&(0x7f00000005c0)="c8976c8ebd503b8e66e0140687170f0754ab383a34c27df249be7250c7fd350395d626272ad4d25d95a6699040b405200050243e4df704a117633f39a6060a0ea2fe2caa86318abdb5e6251926cb5ee82c189ea2f7a8ff362a7d1a85f10f5b", 0x5f}], 0x2) ioctl$TIOCSETA(r12, 0x802c7414, &(0x7f0000000000)={0xbfffffff, 0x6, 0x0, 0xffffd6c8, "e435b3ff00000030c300046291bf9400", 0x543, 0x2}) select(0x40, &(0x7f0000000080)={0xc5, 0x5, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) 4.92628684s ago: executing program 4 (id=79): sysctl$hw(&(0x7f0000000040)={0x7, 0x10}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = getpgid(0xffffffffffffffff) r1 = getegid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4000, 0x0, r1, 0x0, 0x0, 0x0, 0x1b}, 0x4, 0x3d3, r0, 0x0, 0x7ffffffffffffffe, 0x9, 0x801, 0xffc}) r2 = socket(0x18, 0x2, 0x0) getsockname(r2, &(0x7f0000000140)=@un=@file={0x0, ""/276}, &(0x7f0000000300)=0x116) close(r2) socket(0x800000018, 0x1, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x8, 0x0) getdents(r3, &(0x7f0000000100)=""/47, 0x2f) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2061, 0x0) 4.875598138s ago: executing program 4 (id=81): r0 = syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x9) r1 = socket(0x2, 0x3, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) write(r1, &(0x7f0000001680)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0x1001c) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000180)=0x9) unveil(0x0, &(0x7f0000000140)='c\x00') 4.857228447s ago: executing program 7 (id=85): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0x8d, 0x2, 0x80000004}, {0x30, 0xfa, 0x3}, {0x16, 0x6, 0x8}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000300)='h\f', 0x2}], 0x1, 0xffffffffffffffaf) sysctl$hw(0x0, 0x64, &(0x7f0000000140)="00041b000f3e80a8985d012c000001c33d0817c53fcb7c7d040000000000000000000000b75256ab0471039f5d00000000000000bb526d2408c32c026983d443f34191967340e7000000000000", &(0x7f0000000000)=0x4d, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$BIOCSHDRCMPLT(r1, 0x80044275, &(0x7f0000000240)=0x7) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x7, 0xfd, 0x6}, {0x2, 0x10, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x40003}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0x1, 0x1}, {0x30, 0xc, 0x7, 0x10}]}) sysctl$hw(0x0, 0x0, &(0x7f00000001c0)="0004849d0f3e8095043fa8985d012c00009351023cde4d22f887ee99c61d2f4b37f1c56ee3de43c912e7ddbabfd7f2303116091287b681e70ca8d7a23f1cfe70d2ed66a7eadff7148b60b080063f86a78e37e605e6ab3e7d258033a7", &(0x7f0000000000)=0x5c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000100)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[]) 4.852754087s ago: executing program 7 (id=87): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f00000000c0)={0x0, 0x7}, 0xffffffffffffffa6, 0x400) utimensat(r0, 0x0, &(0x7f0000000400)={{0x4, 0x1}, {0x5, 0x5}}, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) read(r1, &(0x7f0000000200)=""/95, 0x5f) 3.613910125s ago: executing program 7 (id=88): r0 = syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000240)=0x8) unveil(0x0, &(0x7f00000003c0)='c\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000000080)=""/216, 0xd8, 0x0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x2}, 0x8) dup(0xffffffffffffffff) 3.507104511s ago: executing program 6 (id=98): mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r0 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6d4) r1 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r1, 0x7}], 0x1, 0x3) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000001840)={0x8, 0x1, 0x7, 0xdd1e, "6cc4b524aa1d1e7b1278002d7128604d409f971f", 0xe, 0x53}) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000000c0)=0x8) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r3 = socket(0x800000018, 0x1, 0x0) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) listen(r3, 0x1) r4 = socket(0x18, 0x4001, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendto$inet(r4, &(0x7f0000000000)='f', 0x1, 0x3, 0x0, 0x0) r5 = openat$speaker(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, 0x0, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000000200)={0x3ff, 0x0, 0x1000, 0x9, 0x1, 0xfff, 0x0, 0xf06}, 0x0) sendmsg$unix(r3, &(0x7f0000000640)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000480)}, {&(0x7f0000000500)="472bbb425840", 0x6}, {&(0x7f0000000540)="88cf0cd1e00c477fa08826fc096532ed4cadd1778e46a38cdd3c49fc143ba53510c952fd8a", 0x25}], 0x4}, 0xc) getrlimit(0x2, 0xfffffffffffffffe) poll(0x0, 0x0, 0x0) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000100)) open(&(0x7f0000000040)='./bus\x00', 0x10, 0x10) chmod(&(0x7f0000000040)='.\x00', 0x35e) 2.866575516s ago: executing program 1 (id=103): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100dd2d018000000000005e00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180), 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00') 2.866216929s ago: executing program 1 (id=104): r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x8, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={0x0, r0, 0x3}) r1 = socket(0x18, 0x2, 0x0) close(r1) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) getitimer(0x0, &(0x7f00000000c0)) (async) r2 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000680)=0x8, 0x4) (async) r3 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x5b) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async) r4 = syz_open_pts() close(r4) (async) syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000000)={0xf66d, 0xffffffff, 0xffffff95, 0x5ffffd58, "9d5cff7f1c00606200b00000621300", 0x203fb, 0xe329}) (async) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000040)="3bf45672f6d0b8c1839aa59700ed7f12b36e1e3e78ffffffff6372ab8fdca7b0ac615be98c35", 0x26}, {&(0x7f0000000200)="3eea4e0173254aae4f77c57601000000a8c11f27712470596f49a91246b979caed437fae57b267f6ea4d37b7fdebe991b34ad01e988055c316b2ccf4a5c33cabb1a0e0583f5520bf1b1f0d7aba3511e7c0cbfd39fc5252c2fee6519948752b0447da7355c480a942fc605c70951266913be50e9d8307ed8fe94bde07d841be61c91a8c24cbdc6e82b71e", 0x8a}, {&(0x7f00000009c0)="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", 0x383}], 0x3) fchmod(r3, 0xff) (async) setuid(0xffffffffffffffff) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7}, 0xa, 0x2a2, 0xffffffffffffffff, 0x0, 0x3, 0x40, 0x7, 0x41}) (async) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 2.865658552s ago: executing program 1 (id=105): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf5e, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000003, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x91f, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0x52adeb15, 0x7], [{0x4, 0x0, 0x0, 0x5}, {0xfffc, 0x22, 0x5}, {0x0, 0x0, 0xfffffffb, 0x80}, {0x5, 0x4, 0x5, 0x6}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x2, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x5, 0x100, 0xf, 0xb}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x45, 0x7f, 0x6}}}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="0200001ec66f9ed4030e23f8", 0xc}, {&(0x7f0000000040)="146137728a3122e62ff4af6d88b9620237ceb4c1e64feb16e7fe5d9d0855495ae0015fb761ae929776cd8e0d56bda9e04f6ed66dbf015d4b0c5883bf8adc8a8bf5070088516c1b28fcc8a1bec33b5231e236c15d55a99dc4887bef0c52e353f86e5055dba44a0eacf46ce9dc3f8432be0e51ff014738cb145c1b604143e4b45ed9c2ce3182", 0x85}], 0x2) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffff6, 0x1000100010008, 0xffffffffffffffff}) socketpair(0x10, 0x1, 0x8, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOSETOWN(r1, 0x8004667c, &(0x7f0000000440)=0x9) sysctl$kern(&(0x7f0000000180)={0x1, 0x13}, 0x2, 0x0, 0x0, 0x0, 0x0) r2 = kqueue() mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) ioctl$VNDIOCGET(0xffffffffffffff9c, 0xc4104603, &(0x7f0000000480)={'./bus\x00', 0x7, 0x1, 0x7fa}) r3 = open(&(0x7f0000000080)='./bus\x00', 0x800, 0x10c) preadv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x4, [{0x1, 0x7}, {0x0, 0x2}, {0x2, 0x7fff}, {0x2, 0x1}, {0x3, 0x10000008}, {0x3, 0x4}, {0x3, 0x20000007}, {0x3, 0x4}, {0x0, 0x1}, {0x2, 0xd}, {0x1, 0xffffffc}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0xffffffff}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0xfffffffd}, {0x3, 0xa}, {0x2, 0x100}, {0x1}, {0x3, 0x7}, {}, {0x0, 0x7}, {0x3, 0x9c}, {0x2, 0x204}, {0x2, 0x3}, {0x1, 0xffffffff}, {0x1, 0x3}, {0x2}, {0x3, 0x210000}, {0x3, 0xfffffe01}, {0x0, 0x40}]}) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETA(r4, 0xc0284457, &(0x7f00000000c0)={0x10000002, 0xfffffffb, 0xfeefffff, 0x2, "080054d1000000010000000100000f1e0400", 0xd50, 0x10000}) sysctl$net_inet_esp(&(0x7f00000005c0)={0x4, 0x2, 0x2}, 0x9, 0x0, 0x0, 0x0, 0x1b) kevent(r2, 0x0, 0xfffffffd, &(0x7f0000000040), 0x5, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) open(0x0, 0x80000000000206, 0x4ebfac6bbaf7959) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000040)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) sysctl$kern(&(0x7f0000000040)={0x1, 0x27}, 0x2, 0x0, 0x0, &(0x7f0000000340)="5fba108a5750cb3fb89f87ebabacd95d2315ba18d1e9f651b8095cdf53dbddc676861293f16c989d5f45ebb56a5c6f6790105f2f73c97b7ad46234bfc0f8237960cc42e0050feaab007e200fd989b30e00"/93, 0x5d) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r5, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 1.892942613s ago: executing program 3 (id=108): socket(0x18, 0x3, 0x1) (async) r0 = socket(0x18, 0x3, 0x1) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6d4) (async) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6d4) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x26}, 0x4, &(0x7f0000000140), 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000280)='./bus\x00', 0x100, 0x100) poll(&(0x7f0000000000)=[{r1, 0x7}], 0x1, 0x3) (async) poll(&(0x7f0000000000)=[{r1, 0x7}], 0x1, 0x3) symlinkat(&(0x7f00000007c0)='./bus\x00', r1, &(0x7f0000000800)='./bus\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000b40)="825a4f47c21e02d7eda0f5903abf65b18d7c51050006ccffb40500007e515b7178642408fafd5793776666d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x40d}, 0x40e) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0) ioctl$TIOCSETA(r2, 0xc4504449, &(0x7f0000000740)={0x0, 0x4000, 0x2f00, 0xf, "3901224200", 0x2007, 0x10}) close(r1) getsockopt(r0, 0x29, 0x23, 0x0, 0x0) (async) getsockopt(r0, 0x29, 0x23, 0x0, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x100) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) 1.852315399s ago: executing program 3 (id=111): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x5011, r0, 0x63e1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r1, &(0x7f00000000c0)="c3", 0xffffffed) close(r2) read(r2, &(0x7f0000000400)=""/119, 0xfd4c) 1.802994402s ago: executing program 5 (id=116): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x43) (async) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x43) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000080)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0xd}, 0x4, &(0x7f0000000080), 0x0, 0x0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$TIOCSETA(r1, 0xc444443b, &(0x7f0000000040)={0x7, 0x2f, 0x9, 0xf48, "a200070000000000000000e1ffffff0000000022", 0x7, 0x6}) 1.802701048s ago: executing program 5 (id=117): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@un=@file={0xed1f73171cb3e415, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000000000), 0x10) r1 = socket(0x2, 0x2, 0x0) connect(r0, &(0x7f00000002c0)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0xa) write(r1, 0x0, 0x0) 1.802204915s ago: executing program 5 (id=118): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x40) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) (async) r2 = syz_open_pts() ioctl$TIOCGFLAGS(r2, 0x4004745d, &(0x7f00000000c0)) (async) r3 = syz_open_pts() ioctl$TIOCGFLAGS(r3, 0x4004745d, &(0x7f0000000100)) (async) ioctl$TIOCSTSTAMP(r3, 0x8008745a, &(0x7f0000000140)={0x9, 0x4}) sendmmsg(r0, &(0x7f0000000580)={&(0x7f0000000540)={&(0x7f0000000180)=@in={0x2, 0x2}, 0xc, &(0x7f0000000340)=[{&(0x7f00000001c0)="0571eba469968c189edb5288c59797f048ff0cdad857d58ab4e653f2de3d0d344f9743e641fd883f1bed28edc4945e1d34f52ee2f0a8e97cf85eb532193ea465bcb6f54fb3e97187f4c94e98073e160991ecb7b8109e84a6f738c172d85b773c75751cc7", 0x64}, {&(0x7f0000000240)="a987ca41be99e739d69acaed73df865a86a0ef8b509e047c6a4249af2bb94e2af072831b8b4a6d283a376cec1251c754d09e6780dbf532d070362f5f8fea04be1130608e8e8b3eb99c80bf0238974fb6e1f66d632da37b48", 0x58}, {&(0x7f00000002c0)="67d130ea79171643a3a66be51b953342affba908c6b6101c4ede3203321c1e0f38b0fbbb2d396fe590128f17e978acf100ee91320c2d3fd36fa63dd3c0057968860e540fbd0a6c651ad51b6103c0b230db73402f97c5f16ee1d1d44623c8bd15b1e2c158b2befb566d1fcc3fa7fe8faa33ecaaa70c9df2", 0x77}], 0x3, &(0x7f0000000380)=[{0x20, 0x0, 0x20000000, "904e7bc30a5a14d2cd2fbb8116"}, {0x28, 0xffff, 0x6, "7b4103dff6c78dab356b86bb0a759dceebebc4ad6e"}, {0xc0, 0x1, 0x5, "1e84ebfd46c5575b8713ddd19ac4ba80052abfbe46832df9de376e173d61f6c10c97e94939bf7b9b365172f6470c2608403654288eba763941ab889281e0d17249941b2b2e10c1d60f13950e8e55ff4ababc4e14e5e70af911b8a850bbe34dce90edebb8cf5d555aea5c146edf51ffba75253f5e2c84a8c6bb12eaec8ec989d4c60b731407a1562ffeb5c8d1e417e6fb42a81768c422e344aa0c5076d4c86bc84e20cf447b4abce248a4f1e5"}, {0x80, 0x1, 0x37, "32c65d86c60df84610edd429ebe2ee5b372e19dd11719c22144a73d8da109fe358f1e8a7f6f36016449f31352c6cbbb1b497b6f9aada90a1ad12314cdf02a265020af63aa25d687c0bf81f1344b1b8d7125286b57903ba71b3e208313cf43a4b2ffc59caf87aed9a43cf25"}], 0x188}, 0xffffffff}, 0x10, 0xf) (async) chroot(&(0x7f00000005c0)='./file0\x00') (async) ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000600)={0x80000000, 0x5, 0x2, 0x3, "be39b9562f9635b360e398c33ffed918fd1625f0", 0xe, 0x8c16}) (async) r4 = openat$tty(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) ioctl$TIOCGTSTAMP(r4, 0x4010745b, &(0x7f0000000680)) (async) ioctl$TIOCMSET(r3, 0x8004746d, &(0x7f00000006c0)=0x5) ioctl$TIOCMBIC(r1, 0x8004746b, &(0x7f0000000700)=0x2) (async) ioctl$TIOCFLUSH(r3, 0x80047410, &(0x7f0000000740)=0x8e5a) (async) ioctl$TIOCGETD(r3, 0x4004741a, &(0x7f0000000780)) ioctl$TIOCSTART(r2, 0x2000746e) ioctl$TIOCSWINSZ(r1, 0x80087467, &(0x7f00000007c0)={0x5, 0x1, 0x5, 0x5}) ioctl$TIOCSTART(r3, 0x2000746e) recvfrom$inet6(r0, &(0x7f0000000800)=""/64, 0x40, 0x40, &(0x7f0000000840)={0x18, 0x3, 0x0, 0xaa}, 0xc) ioctl$WSDISPLAYIO_GMODE(r0, 0x4004574b, &(0x7f0000000880)) (async) socket(0x18, 0x3, 0xd) (async) ioctl$TIOCSDTR(r4, 0x20007479) (async) r5 = open$dir(&(0x7f00000008c0)='./file0\x00', 0x100, 0x160) utimensat(r5, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={{0x36, 0x29}, {0x3, 0x9}}, 0x2) (async) socket(0x10, 0x4, 0x1) (async) ioctl$KDSETLED(r0, 0x20004b42, &(0x7f0000000980)=0x6) writev(r5, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="80b91ea8f8f2334f121103d0846a0b9525e3395351dcee61a0ac7b30f421559eb2a25c5cfaffc69d35d1edd1d6dee0369b6e1ce5414bdae6fb001fec0bc2cc19e414a1be4bf9f51bdf223fa436441cf123682713eec956401e2cfb720207d74aeb86495e28733facc2bff05e9972d1840a2b4368eac3c0d55fe94bbcc3aaa1484f84edc69178c534ce83083deb0a95a3fc18291b3b8f0089558e2290dbe391abd3d59097fc01eaa450f7b58308ab3d491d0138c4266e103568d35e98a8b7134cf64b20011c2259a584711c3b9a6ceb451924730e963381", 0xd7}], 0x1) (async) socket(0x6, 0x4, 0x7) 1.801220487s ago: executing program 5 (id=120): r0 = shmget$private(0x0, 0x3000, 0x90, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x2000) r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0x8020699b, &(0x7f00000001c0)) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80, 0x40) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x108) r4 = accept$unix(0xffffffffffffff9c, &(0x7f0000000080)=@file={0x0, ""/504}, &(0x7f0000000280)=0x1fa) poll(&(0x7f00000002c0)=[{r1, 0x2}, {r2, 0x10}, {r3, 0x10}, {r4, 0x4}, {0xffffffffffffff9c, 0x1}], 0x5, 0x82) 1.452756414s ago: executing program 5 (id=121): r0 = socket(0x18, 0x2, 0x0) close(r0) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r1 = socket(0x18, 0x2, 0x0) r2 = dup2(r0, r1) setsockopt(r2, 0x1000000029, 0x23, &(0x7f00000000c0)="b211d7170d816684c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e7aae9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) (async) getdents(r2, 0x0, 0x0) 1.449989714s ago: executing program 5 (id=122): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000007}, {0x2c, 0xf, 0x3, 0x4006}, {0x6, 0x9, 0x1, 0xfffffff2}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) mmap(&(0x7f00002ab000/0x1000)=nil, 0x1000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/240, 0xf0}, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) r4 = socket(0x18, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) close(r5) dup2(r3, r5) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BIOCLOCK(r6, 0x20004276) ioctl$BIOCIMMEDIATE(r0, 0x8010427e, &(0x7f0000000040)=0x800003) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r7 = socket(0x18, 0x3, 0x50) ioctl$FIONREAD(r7, 0x802069a6, &(0x7f00000001c0)) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000580), 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f0000000480)="a2352f75fcb72f258152ea33ef03ebcc5800000d0060754473d45204", &(0x7f0000000000)=0x1c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) fchdir(r8) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe) sysctl$net_inet_udp(&(0x7f0000000040)={0x4, 0x2, 0x11, 0x5}, 0x32, 0x0, 0x0, 0x0, 0xfffffddf) 1.396045418s ago: executing program 0 (id=129): r0 = socket(0x18, 0x3, 0x1) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3, 0x7}, {0x2, 0xff02}, {0x1}, {}, {0x2}, {0x3}, {0x0, 0xaa59}, {0x3, 0xb3d0}, {0x2, 0x1}, {0x3, 0x180}, {0x1, 0x1}, {0x3, 0x80000000}, {0x0, 0x3}, {}, {0x0, 0x6}, {0x1, 0xffffffff}, {0x2, 0x1}, {0x1}, {0x3, 0xfffffffe}, {0x0, 0x7ff}, {0xbb08c0840fa32129, 0x6}, {0x0, 0x1}, {0x1}, {0x0, 0xf208}, {0x2, 0x1000000}, {0x3, 0x1}, {0x0, 0x1ff}, {0x0, 0x200}, {0x2, 0xffffffff}, {0x0, 0x9}, {0x1, 0x5}, {0x3}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) poll(&(0x7f0000000000), 0x200000000000002c, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) r2 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x18, 0x3, 0x7) setsockopt(r3, 0x1000000000029, 0x3e, &(0x7f0000000780)="00000080", 0x4) getsockopt(r3, 0x29, 0x33, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0xc0f8, 0x3, 0x6, 0x8, "26ff6f26f26cc8a22b34b3adf97471a9b433eb88", 0x2, 0x2}) writev(r2, &(0x7f0000000500), 0x0) getsockopt(r0, 0x29, 0x24, 0x0, 0x0) 313.429252ms ago: executing program 0 (id=130): r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x100) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0x101, 0x8, 0x80002001, 0x1, 0x10, [{0x0, 0x7, 0x4, 0x4000001}, {0x7, 0x4, 0xa, 0x7}, {0x6, 0xf86, 0x100, 0xaf9}, {0x5, 0x0, 0x7}, {0x6, 0xff, 0xe, 0x7}, {0x6, 0x1, 0xffffffff, 0x9c}, {0x80000cdf, 0xfffffffd, 0x3, 0x6d}, {0x2000a, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x7ffd, 0xc7, 0x8b}, {0x4, 0xfffb, 0x9, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0xd}, {0x4, 0x7, 0x7}, {0x0, 0x1, 0x20000004, 0x30000}]}) (async) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) (async) r3 = socket(0x18, 0x3, 0x4) ioctl$FIONREAD(r3, 0x81206919, &(0x7f0000000100)) r4 = socket(0x2, 0x2, 0x0) r5 = socket(0x2, 0x400000000002, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1002, &(0x7f0000000140)=0x7, 0x4) (async) setsockopt(r5, 0x0, 0x7, &(0x7f0000000080)='?', 0x1) dup2(r5, r4) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r4, &(0x7f0000000000), 0x10) (async, rerun: 64) r6 = socket(0x2, 0x2, 0x0) (rerun: 64) setsockopt$sock_int(r6, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) (async) connect$unix(r6, &(0x7f0000000000), 0x10) write(r6, 0x0, 0x0) (async, rerun: 64) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000140)={&(0x7f0000000080)=@in6={0x18, 0x1, 0xb, 0x9}, 0xc, &(0x7f00000000c0), 0x0, 0x0}, 0x2}, 0x10, 0x4) (async, rerun: 64) r7 = socket(0x1, 0x5, 0x1) fcntl$setstatus(r7, 0x4, 0x40) shutdown(r7, 0x2) (async) clock_gettime(0xa, 0xfffffffffffffffe) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, &(0x7f0000000140)=0x1) 313.080218ms ago: executing program 0 (id=131): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r0, 0x400c570a, &(0x7f0000000040)) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000080)) r1 = socket(0x6, 0x8005, 0x2) ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}) ioctl$VMM_IOC_TERM(0xffffffffffffffff, 0x80045604, &(0x7f0000000200)={0x9}) setsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f0000000240)={0x0, 0x9}, 0x8) syz_emit_ethernet(0x32, &(0x7f0000000280)={@remote, @remote, [{[{0x88a8, 0x1, 0x0, 0x2}], {0x8100, 0x6, 0x1, 0x4}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @random='-Tcr.[', @empty, @local, @broadcast}}}}) close(r1) socket(0x1, 0x1, 0x10) syz_emit_ethernet(0xf8, &(0x7f00000002c0)={@empty, @local, [{[], {0x8100, 0x2}}], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x2, 0xe6, 0x68, 0x5, 0x2, 0x89, 0x0, @rand_addr=0xfff, @local={0xac, 0x14, 0x0}, {[@end, @noop, @ssrr={0x89, 0xf, 0x9, [@loopback, @rand_addr=0x6, @loopback]}, @end]}}, @generic="26da4739f157c611ad90ec0e53e5428e57356d625e19e5658b3de8362b9d47237e8220817113a3863707e01bb107da7f63101aba1064b6c81983f4f89eaca9e5c12537a4adec99f2d034e56341c0d517f619bc5d01dbdb71f6ff23469886d6f8a0d4b83665e5a7477c6af7aa21dbf6b96119632ffa05cbd4916518b714d0e1d2f5933fb24acb8d9c7422b233d648be1cfb99250b0801ebe9c3eedd53d60cc4781d6961e97e9cff5b69cb7a1d37472311b11b97dfddefc2485fdf71be4f67"}}}}) ftruncate(0xffffffffffffffff, 0x5) r2 = socket$unix(0x1, 0x2, 0x0) recvmsg(r2, &(0x7f0000000740)={&(0x7f0000000480)=@in6, 0xc, 0x0, 0x0, &(0x7f0000000700)=""/56, 0x38}, 0x1) socket$unix(0x1, 0x5, 0x0) close(r0) r3 = socket(0x2, 0x3, 0x0) close(r3) r4 = socket(0x18, 0x2, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0x2}) r5 = accept$inet6(r3, &(0x7f0000000140), &(0x7f00000001c0)=0xc) getsockopt(r5, 0xfffffffa, 0x81, &(0x7f00000004c0)=""/217, &(0x7f00000003c0)=0xd9) r6 = socket(0x18, 0x3, 0x0) connect$unix(r6, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r6, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) semop(0x0, &(0x7f00000000c0)=[{}, {0x4, 0x2ff}], 0x2) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) write(r3, &(0x7f0000001680)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0x1001c) 293.186475ms ago: executing program 6 (id=133): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mknod(&(0x7f0000000140)='./bus\x00', 0x2000, 0x6d4) r1 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) select(0x40, &(0x7f0000000300)={0x7, 0x7, 0x2, 0xc0, 0xa, 0x10000, 0x9, 0x101}, 0x0, &(0x7f0000000380)={0x5d4b, 0x2, 0xffff, 0x5, 0x2, 0x2f5, 0xb682, 0xded}, 0x0) poll(&(0x7f0000000000)=[{r1, 0x10}], 0x1, 0x2) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4000}, 0xa, 0x2a2, 0xffffffffffffffff, 0x0, 0x1, 0x80000000000000f, 0x200, 0x1}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x6) open$dir(&(0x7f0000000300)='.\x00', 0x8, 0x4a) sysctl$hw(&(0x7f0000000080)={0x6, 0x11}, 0x2, 0x0, 0x0, &(0x7f0000000340), 0x0) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f00000001c0)="03000000", 0x4) setsockopt(r2, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb405000000e9ff009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x8) ioctl$TIOCSETA(r0, 0xc4504446, &(0x7f0000000740)={0x8, 0x5, 0x7ffffff, 0x4, "a3ae02c1005fcd6fd85c1afb7dd5a80b546600", 0x28, 0x4042}) 292.747025ms ago: executing program 0 (id=134): r0 = socket(0x1, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r1, 0x808c694e, &(0x7f00000001c0)) close(r0) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, 0x0, 0x0) r2 = dup(0xffffffffffffffff) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000140)="b100050300000400000000b307000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad09000000000000009b67404d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002022fbfe0c2300008abfba0900000008e371a3f8343712051eeab71d1889e000040700000000130000", 0xb1, 0xc, 0x0, 0x0) accept$unix(r2, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) 249.647658ms ago: executing program 0 (id=136): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xe4c, 0x5, 0x6, 0xfffffff2}]}) sysctl$vm(&(0x7f0000000000)={0x2, 0x8}, 0x2, &(0x7f00000000c0), 0x0, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCGHDRCMPLT(r0, 0x40044274, &(0x7f0000000000)) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x18, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_extract_tcp_res(0x0, 0xfffff000, 0x7) poll(&(0x7f0000000100)=[{r0}, {r0, 0x40}], 0x2, 0xb5) syz_extract_tcp_res(0x0, 0x3, 0x81) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000007}, {0x2c, 0xf, 0x3, 0x4004}, {0x6, 0x9, 0x1}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xfffffffffffff7ff, 0x0, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r2 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file2\x00', 0x6, 0x2000003, 0xeffffff9, 0x1, 0x5, 0x8, 0x6, 0x1, 0x2, 0x7, 0x7f}) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x3, 0x2, 0x40009, 0x0, 0x5, 0xd87, 0x8000, 0x1, 0x0, 0x100000000642, 0x3}) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r3 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0xd4, 0x9, 0xffffffff, 0xd7ed, 0x10, [{0xfe5, 0x7, 0x0, 0x71003}, {0x7, 0x4, 0x6, 0x4}, {0x10000006, 0xf86, 0x0, 0x40004}, {0x5, 0x800, 0x7, 0x1000000}, {0x6, 0x3, 0x80e, 0x7}, {0x6, 0x1, 0x0, 0x800009c}, {0x8, 0xffffffff, 0x1003, 0x71}, {0xa, 0x10000803, 0x14, 0x8}, {0x2, 0x81, 0x7ff, 0x9}, {0x6, 0x8001, 0xc7, 0x800000b}, {0x4, 0xfffb, 0x2, 0xaeb}, {0x803, 0x40, 0x8, 0x4}, {0xe0, 0x4, 0x5, 0x3}, {0x1, 0xfffffffa, 0x4, 0x100006}, {0x0, 0x6, 0x7, 0x1ffffffd}, {0x0, 0x1, 0x4, 0x4}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x1e8, 0x100000000, 0x0, 0x2800000000000200, 0x181c, 0x8}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000340)={0x2, &(0x7f0000000000)=[{0x84, 0xab, 0x0, 0x5}, {0x40, 0x4, 0xff, 0x93d}]}) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) sysctl$hw(0x0, 0x5, &(0x7f00000000c0)="8237208e8a962eeeb7242559a7d487806a9f000000000000000000dd958000000000000000", &(0x7f0000000000)=0x25, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 249.432431ms ago: executing program 6 (id=137): r0 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x5010, 0xffffffffffffff9c, 0x100000001) ftruncate(r0, 0x8531) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 166.687408ms ago: executing program 2 (id=139): r0 = semget(0x0, 0x1, 0x281) setgid(0xffffffffffffffff) (async) setgid(0xffffffffffffffff) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) (async) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) msgsnd(0x0, 0x0, 0x8, 0x800) msgctl$IPC_RMID(0x0, 0x0) setgroups(0x0, 0x0) close(0xffffffffffffffff) acct(0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) semctl$GETVAL(r0, 0x1, 0x5, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x119) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1/file0\x00') 166.134321ms ago: executing program 2 (id=140): writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000000), 0x10) connect$unix(r0, &(0x7f0000000000), 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) 165.958904ms ago: executing program 6 (id=141): sysctl$hw(&(0x7f0000000000)={0x6, 0x13}, 0x2, &(0x7f00000005c0)="f1a42138cd18da8b", &(0x7f0000000080)=0x8, 0x0, 0x0) sysctl$hw(&(0x7f0000000040)={0x6, 0xc}, 0x2, &(0x7f00000000c0)="3a76bf350d95cf958c90e7b01e48aec4e7a40ab8682485d08c14d434a23be88da03ffc0ad4081e688c79276cd06da48d18365025", &(0x7f0000000100)=0x34, &(0x7f0000000140)="eb08ca7a26fc59fedc8d706d6b8799217df73cccb7dcddf66a85842018a626b0308b3a5db4dd16f7de79dd17c3073c39a1620c1e75d86a1edaff84e414bc", 0x3e) 165.330617ms ago: executing program 2 (id=142): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x2d, 0x2, 0x10000}, {0x48, 0xf, 0xff, 0x7}, {0x406, 0x80, 0x8, 0xfffffffe}]}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) sysctl$hw(0x0, 0x0, &(0x7f0000000240)="0004849d0f3e8095043fe8985d012c0000935102cbbfb6658c57d3a0e72ecbe62493576591d09fbafbdc8fde5e7bfe1080397500f1e437caa0f0443e8e910ce4ec3fd213cc7a9825", &(0x7f0000000000)=0x48, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) clock_settime(0x100000000000000, &(0x7f0000000000)={0xf61ecc80}) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) 156.621629ms ago: executing program 6 (id=143): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x80000000, 0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xce0c, 0x0, 0x37) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x2, 0x0) close(r1) r2 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) sendmsg$unix(r1, &(0x7f0000002a40)={0x0, 0xffffffffffffff89, 0x0, 0x6e, 0x0, 0x20}, 0x0) 123.969815ms ago: executing program 2 (id=144): sysctl$hw(&(0x7f0000000040)={0x6, 0x14}, 0x2, &(0x7f00000000c0)="f19b0000588482d7", &(0x7f0000000080)=0x8, 0x0, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0) socket(0x11, 0x3, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x6, 0x3, 0xfffffff9, 0x0, 0x0, 0xfffffff8, 0x0, 0xffffffffffffffff, 0x1, 0x4001, 0x10}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x18, 0x3, 0xff) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) r2 = socket(0x2, 0x3, 0x5) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r2, 0xc0206923, &(0x7f0000000100)) r3 = socket(0x6, 0x4000, 0x0) sysctl$hw(&(0x7f0000000040)={0x7, 0x10}, 0x2, &(0x7f00000000c0)="ba8960ce840bc1bcaa", &(0x7f0000000000)=0x9, 0x0, 0xffffffffffffffe9) ioctl$FIONREAD(r3, 0xc028698b, &(0x7f00000001c0)) 123.644263ms ago: executing program 6 (id=145): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x1}, {0x2, 0x9}, {0x0, 0x300}, {0x3, 0x5}, {0x1, 0x11}, {0x2}, {0x0, 0x1}, {0x3, 0x5}, {}, {0x3}, {0x1}, {}, {0x0, 0x7}, {}, {}, {0x3}, {0x2, 0xfffffffd}, {0x1, 0xb4}, {0x2}, {0x6, 0x1fe}, {0x2, 0x2}, {0x0, 0x4}, {0x2, 0x5}, {0x2}, {0x2}, {0x0, 0x5}, {0x0, 0x1}, {0x0, 0x590}, {0x2, 0x80000000}, {0x3, 0x9}, {}, {0x0, 0x4ab60683}]}) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r1 = socket(0x18, 0x3, 0x0) getsockname$inet(r1, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22) r2 = socket(0x800000018, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r3, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) setsockopt(r3, 0x0, 0x69, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x2000007, 0x101, 0x80000001, 0x4, 0x10001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0x9, 0x8000, 0x3}, {0x104, 0xf88, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x5, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0xfffd}, {0x6, 0x803, 0x8, 0x8}, {0x2, 0x5, 0x5, 0x9}, {0x6a75, 0x8009, 0x1000, 0x4}, {0x8, 0x10001, 0xc, 0x3}, {0x408, 0x5, 0x8}, {0x6, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffd, 0x60, 0x6}, {0x1000c, 0x5, 0x9, 0x4}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x5}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r5) select(0x40, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x40000, 0x100, 0x3560000000000, 0x0, 0x80000000000000}, &(0x7f0000000200)={0xcea, 0x20010, 0x80000002, 0x1, 0x1, 0x3, 0x80000000000001, 0xfffffffffffffffe}, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x800, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r8, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r8, 0x0, 0x9, &(0x7f00000000c0), 0x0) ioctl$TIOCSETA(r7, 0xc4504448, &(0x7f0000000740)={0x6, 0x0, 0x0, 0x0, "6374224ff1c14649ebb1789280c9795a6b47c1d1"}) socket(0x18, 0x400000002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000002c0)="673b08f1b8d24e2217f981aa6a78ef1d337eda482e328d93bd3aa24deb3a6c382526b1", 0x23}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) 123.489435ms ago: executing program 2 (id=146): mknod(&(0x7f0000000000)='./bus\x00', 0x80, 0x1) r0 = open(&(0x7f0000000040)='./bus\x00', 0x4, 0x0) ioctl$TIOCEXCL(r0, 0x2000740d) open(&(0x7f0000000080)='./bus\x00', 0x20, 0x12) setregid(0x0, 0x0) 122.896479ms ago: executing program 2 (id=147): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4, 0x8d, 0x2, 0x80000004}, {0x16, 0x6, 0x8}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f0000000140)="00041b000f3e80a8985d012c000001c33d0817c53fcb7c7d040000000000000000000000b75256ab", &(0x7f0000000000)=0x28, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000000)={@random="8f6f77ede655", @broadcast, [], {@generic={0xbad}}}) r1 = syz_open_pts() r2 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pwritev(r2, &(0x7f0000000500)=[{&(0x7f0000000180)="16d9ee311a1fadee42802baedeb9d799d2581deba9926e19111b0987b4bc5c91137a3aab1d2bdfecd4cc7094ec713acb56d3b19dcd2cc4f19cf8af1a91092f07a5934446eb206005e64d53cccd710941c7ab59abd6b914437197747dca0e5642b068510269e8b5bd3b2826292c7a943462b7e1d6b7b53086bee5e09e256276ef48aa3a0e38cc4f4cc5ca42e321fb1141c235eb5b227306c2dbf09f23ec41c4478ad81b5f0cf056a2251b696633c9", 0xae}, {0x0}], 0x2, 0x9) execve(0x0, 0x0, 0x0) close(r1) r3 = syz_open_pts() read(r3, &(0x7f0000000140)=""/134, 0x86) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mkdir(&(0x7f00000000c0)='./file1\x00', 0x94) r4 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r5 = accept$inet6(r4, &(0x7f00000002c0), &(0x7f0000000300)=0xc) setsockopt(r5, 0x8, 0xf, &(0x7f0000000240)="6b1458fba1349b5dbd01267b5b4ae9fff5ad5009ca824ef6d2087944fab7ae616b81048cf2ea9e2c657a827d3822e6213504", 0x32) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000000)={0xbfffffff, 0x6, 0x0, 0xffffd6c8, "e435b3ff00000030c300046291bf9400", 0x543, 0x2}) setrlimit(0x3, &(0x7f0000000040)={0x100000, 0x2}) select(0x40, &(0x7f0000000080)={0x8000c5, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0, 0x0) 91.940547ms ago: executing program 0 (id=136): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xe4c, 0x5, 0x6, 0xfffffff2}]}) sysctl$vm(&(0x7f0000000000)={0x2, 0x8}, 0x2, &(0x7f00000000c0), 0x0, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCGHDRCMPLT(r0, 0x40044274, &(0x7f0000000000)) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x18, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_extract_tcp_res(0x0, 0xfffff000, 0x7) poll(&(0x7f0000000100)=[{r0}, {r0, 0x40}], 0x2, 0xb5) syz_extract_tcp_res(0x0, 0x3, 0x81) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000007}, {0x2c, 0xf, 0x3, 0x4004}, {0x6, 0x9, 0x1}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xfffffffffffff7ff, 0x0, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r2 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file2\x00', 0x6, 0x2000003, 0xeffffff9, 0x1, 0x5, 0x8, 0x6, 0x1, 0x2, 0x7, 0x7f}) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x3, 0x2, 0x40009, 0x0, 0x5, 0xd87, 0x8000, 0x1, 0x0, 0x100000000642, 0x3}) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r3 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0xd4, 0x9, 0xffffffff, 0xd7ed, 0x10, [{0xfe5, 0x7, 0x0, 0x71003}, {0x7, 0x4, 0x6, 0x4}, {0x10000006, 0xf86, 0x0, 0x40004}, {0x5, 0x800, 0x7, 0x1000000}, {0x6, 0x3, 0x80e, 0x7}, {0x6, 0x1, 0x0, 0x800009c}, {0x8, 0xffffffff, 0x1003, 0x71}, {0xa, 0x10000803, 0x14, 0x8}, {0x2, 0x81, 0x7ff, 0x9}, {0x6, 0x8001, 0xc7, 0x800000b}, {0x4, 0xfffb, 0x2, 0xaeb}, {0x803, 0x40, 0x8, 0x4}, {0xe0, 0x4, 0x5, 0x3}, {0x1, 0xfffffffa, 0x4, 0x100006}, {0x0, 0x6, 0x7, 0x1ffffffd}, {0x0, 0x1, 0x4, 0x4}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x1e8, 0x100000000, 0x0, 0x2800000000000200, 0x181c, 0x8}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000340)={0x2, &(0x7f0000000000)=[{0x84, 0xab, 0x0, 0x5}, {0x40, 0x4, 0xff, 0x93d}]}) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) sysctl$hw(0x0, 0x5, &(0x7f00000000c0)="8237208e8a962eeeb7242559a7d487806a9f000000000000000000dd958000000000000000", &(0x7f0000000000)=0x25, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 5.165686ms ago: executing program 1 (id=148): r0 = kqueue() ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3, 0x7, 0x7, 0x6}, {0x2, 0x9, 0x5, 0x1}]}) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) syz_open_pts() r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x8, 0xa, &(0x7f0000000040)="03000000", 0x4) setsockopt(r1, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) kevent(r0, &(0x7f0000000080)=[{{}, 0xfffffffffffffff9, 0x17, 0x11, 0x40000000000, 0xfe54}], 0x29b, 0x0, 0x8009, 0x0) r2 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r2, 0x81406944, &(0x7f0000000100)) ioctl$FIOGETOWN(r0, 0x4004667b, &(0x7f0000000100)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x40d}, 0x17) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r3, 0xc4504449, &(0x7f0000000740)={0x3, 0x80000011, 0x0, 0xfffffffe, "97a2226ff1c17baf1f66786b47c1c200", 0x1000, 0x8}) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='x\x00') 1.25602ms ago: executing program 1 (id=149): mknod(&(0x7f0000000080)='./bus\x00', 0x80, 0x1600) r0 = socket(0x2, 0x3, 0x0) close(r0) setrlimit(0x8, &(0x7f0000000040)={0xa, 0x50}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0xfffff234, 0x78c, 0x9, 0xffffffdd, "23030003be0a00817dd8910bb864d3c3a3c900", 0xffdd, 0x6}) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000380)="31e669649d", 0x5}], 0x1) writev(r2, &(0x7f0000000a80)=[{&(0x7f00000000c0)="dbef5842e5f3e6e87c1ddea3eba85c33798bfd1b575bcd11a420779e2546d7bfaad9bda80401a95b2bad2022478ac54af85578e25062421bd5f7bfbddd4527b85e39e3260b9eab7585a0b5132c6e25b6c6cbd3dde8a8efbd8c5a6cb417c3b3440f348e15d204a94ec139441aa909aa5ec3e87d2bc59b6494a6a170bdb4de1199a1db58519ffdbaf50a3e057da3f3bfca81ff9173ed9ff09cc61d0aa105aa894dafd8d7a3f61e0a430bcc7012e3a72ae20b65521bcbdddf488540cdc8a18972e2e5a6b6cb2c29b61d3873ac93254fa19a20734b431268a9d3d40296921e55ad548ae6b2da667e7149920224e495c65792f624393dd8", 0xf5}, {&(0x7f00000001c0)="9416f397c9915c8abaedfc71021ac2f7aa9c22f7b6329c02d804de49d517000eaeab1f547067373b67e756df596e83caea937984651960102736af46e1", 0x3d}, {&(0x7f0000000240)="70a4ce6e583b9925a5bbe0379ac39a4f9bca97811df42ccf799c4dff7ecb1769cd2d3059c61c4d2307e506e3f92197b455679ad27e374d36c88fe1916c3f43cb6b7a085363068df3e37ec73750102d3e6852474736", 0x55}, {&(0x7f0000000880)="62b8eaaf59b66f5d0d81d2a4ad0143354540981eecdf2b1a30c4e2b6b4b85e7b94be19708f5c086e951080c1d75acb0ba3d7fa09619af458b3f36e43c85ee8837410b4937075c08b71798fb75d6b5101a6cfbfb7b68387f5f0df0c669d0713bd5fac8e6557014596453ac5da55eab694767c6bcc2893a385ee53", 0x7a}], 0x4) r3 = socket(0x18, 0x2, 0x0) close(r3) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000029, 0x32, &(0x7f00000000c0)="b211d7170d816685c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e180e9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) getsockopt(r4, 0xce, 0x1000, &(0x7f0000000200)=""/246, &(0x7f0000000300)=0xf6) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0x2}) r5 = geteuid() getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setreuid(r5, r6) r7 = socket(0x18, 0x3, 0x0) connect$unix(r7, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r7, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) write(r0, &(0x7f0000001680)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f73", 0x2400) open(&(0x7f0000000040)='./bus\x00', 0x248, 0xaf) 0s ago: executing program 1 (id=150): r0 = socket(0x2, 0x3, 0x0) close(r0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4) writev(r1, &(0x7f0000000280)=[{&(0x7f0000001040)="bd", 0x1}], 0x1) write(r1, &(0x7f00000000c0)="c3", 0xffffffed) write(r0, &(0x7f0000001680)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0x1001c) sysctl$kern(&(0x7f00000001c0), 0x2, &(0x7f0000000000)="71f91e3471ac0058bc5a91501dba724b1cca7e7c8316f62e2de8f494a3c4bd8662ed0f4ff67afec37082", &(0x7f0000000140)=0x2a, 0x0, 0x0) r2 = accept$inet(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) connect$inet(r2, &(0x7f0000000180)={0x2, 0x3}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error panic: uvm_fault_unwire_locked: address WnoRtN IiGn :m p NOTp eLdO WaEtRED ON SYSCALL 73 57344 EXIT 0 a db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *350433 11620 0 0 0x4000000 1 syz-executor 109357 11620 0 0 0x4000000 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff833f1eed) at panic+0x1e5 uvm_fault_unwire_locked(fffffd806cb029a0,200000040000,200000044000) at uvm_fault_unwire_locked+0x4ee uvm_fault_wire(fffffd806cb029a0,200000040000,200000051000,3) at uvm_fault_wire+0x12d uvm_vslock_device(ffff80002f3d9248,200000040040,10000,3,ffff80003c427f68) at uvm_vslock_device+0x112 physio(ffffffff822634e0,d02,8000,ffffffff82263d30,ffff80003c428248) at physio+0x257 spec_read(ffff80003c4280a0) at spec_read+0x14b VOP_READ(fffffd8066af1610,ffff80003c428248,0,fffffd80097fd478) at VOP_READ+0x101 vn_read(fffffd806c9247c0,ffff80003c428248,1) at vn_read+0x17b dofilereadv(ffff80002f3d9248,5,ffff80003c428248,1,ffff80003c428300) at dofilereadv+0x25a sys_pread(ffff80002f3d9248,ffff80003c4283b0,ffff80003c428300) at sys_pread+0xae syscall(ffff80003c4283b0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x132c77f28d0, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault_unwire_locked: address not in map ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833f1eed) at panic+0x1e5 uvm_fault_unwire_locked(fffffd806cb029a0,200000040000,200000044000) at uvm_fault_unwire_locked+0x4ee uvm_fault_wire(fffffd806cb029a0,200000040000,200000051000,3) at uvm_fault_wire+0x12d uvm_vslock_device(ffff80002f3d9248,200000040040,10000,3,ffff80003c427f68) at uvm_vslock_device+0x112 physio(ffffffff822634e0,d02,8000,ffffffff82263d30,ffff80003c428248) at physio+0x257 spec_read(ffff80003c4280a0) at spec_read+0x14b VOP_READ(fffffd8066af1610,ffff80003c428248,0,fffffd80097fd478) at VOP_READ+0x101 vn_read(fffffd806c9247c0,ffff80003c428248,1) at vn_read+0x17b dofilereadv(ffff80002f3d9248,5,ffff80003c428248,1,ffff80003c428300) at dofilereadv+0x25a sys_pread(ffff80002f3d9248,ffff80003c4283b0,ffff80003c428300) at sys_pread+0xae syscall(ffff80003c4283b0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x132c77f28d0, count: -13 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c427cb0 rbx 0xffff8000299eee07 rdx 0 rcx 0xffff80002f3d9248 rax 0xffff8000299edff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xd178e9fe27feba79 r11 0xb98b932a4f4509cb r12 0xffff8000299eec08 r13 0 r14 0 r15 0x1 rip 0xffffffff8256d365 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c427ca0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=350433 pid=11620 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=36, usrpri=50, slppri=36, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002f3d82b8,0xffff80002f3d9a20 process=0xffff8000fffe8e90 user=0xffff80003c423000, vmspace=0xfffffd806cb029a0 estcpu=36, cpticks=3, pctcpu=0.0, user=0, sys=3, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 11620 424791 16061 0 2 0 syz-executor *11620 350433 16061 0 7 0x4000000 syz-executor 11620 109357 16061 0 7 0x4000000 syz-executor 11620 172130 16061 0 2 0x4000000 syz-executor 4804 51359 47270 0 3 0x80 fsleep syz-executor 4804 494874 47270 0 3 0x4000080 kqread syz-executor 11886 482893 65540 0 3 0x80 fsleep syz-executor 11886 440462 65540 0 3 0x4000080 ttyin syz-executor 59944 136783 45470 0 3 0x80 fsleep syz-executor 59944 190903 45470 0 3 0x4000080 kqread syz-executor 47270 270507 1359 0 3 0x82 nanoslp syz-executor 84359 432740 56 0 3 0x80 fsleep syz-executor 84359 136041 56 0 3 0x4000080 sbwait syz-executor 54115 366103 40064 0 3 0x80 fsleep syz-executor 54115 466539 40064 0 3 0x4000080 pipewr syz-executor 14035 298520 1359 0 3 0x82 wait syz-executor 45470 146599 1359 0 3 0x82 nanoslp syz-executor 56 462418 1359 0 3 0x82 nanoslp syz-executor 60220 417101 1359 0 3 0x82 wait syz-executor 40064 42242 1359 0 3 0x82 nanoslp syz-executor 65540 79664 1359 0 3 0x82 nanoslp syz-executor 16061 414767 1359 0 3 0x82 nanoslp syz-executor 1359 156380 21048 0 3 0x82 kqread syz-executor 21048 247215 57714 0 3 0x10008a sigsusp ksh 57714 435999 80364 0 3 0x98 kqread sshd-session 80364 86534 33647 0 3 0x92 kqread sshd-session 7028 486429 1 0 3 0x100083 ttyopn getty 33647 325214 1 0 3 0x88 kqread sshd 85186 439970 83958 74 3 0x1100092 bpf pflogd 83958 259958 1 0 3 0x80 sbwait pflogd 83918 48916 83419 73 3 0x1100090 kqread syslogd 83419 372005 1 0 3 0x100082 sbwait syslogd 91641 7233 1 0 3 0x100080 kqread resolvd 54126 219541 94790 77 3 0x100092 kqread dhcpleased 56492 178399 94790 77 3 0x100092 kqread dhcpleased 94790 18904 1 0 3 0x80 kqread dhcpleased 23414 391136 0 0 3 0x14200 bored smr 6745 343049 0 0 3 0x14200 pgzero zerothread 36114 227317 0 0 3 0x14200 aiodoned aiodoned 23173 424362 0 0 3 0x14200 syncer update 74431 516355 0 0 3 0x14200 cleaner cleaner 40004 333762 0 0 3 0x14200 reaper reaper 49318 323596 0 0 3 0x14200 pgdaemon pagedaemon 4101 450888 0 0 3 0x14200 bored viomb 49396 59963 0 0 3 0x40014200 acpi0 acpi0 58698 350821 0 0 3 0x40014200 idle1 92127 490846 0 0 3 0x14200 bored softnet1 75774 207997 0 0 3 0x14200 bored softnet0 74390 349423 0 0 3 0x14200 bored systqmp 88532 314312 0 0 3 0x14200 bored systq 12240 35500 0 0 3 0x14200 tmoslp softclockmp 56620 215386 0 0 3 0x40014200 tmoslp softclock 54595 331065 0 0 3 0x40014200 idle0 1 161772 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 0: exclusive mutex &uvm.fpageqlock r = 0 (0xffffffff839ff3e8) #0 witness_lock+0x5f1 #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 uvm_pmr_freepages+0x1a8 #4 uvm_anfree_list+0x1e5 #5 amap_wiperange_chunk+0x1a8 #6 amap_wiperange+0x4b4 #7 amap_pp_adjref+0x6d0 #8 amap_adjref_anons+0x22d #9 uvm_unmap_detach+0x8a #10 sys_munmap+0x329 #11 syscall+0xbd4 #12 Xsyscall+0x128 Process 11620 (syz-executor) thread 0xffff80002f3d9248 (350433) shared rwlock vmmaplk r = 0 (0xfffffd806cb02aa0) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvm_fault_wire+0x116 #3 uvm_vslock_device+0x112 #4 physio+0x257 #5 spec_read+0x14b #6 VOP_READ+0x101 #7 vn_read+0x17b #8 dofilereadv+0x25a #9 sys_pread+0xae #10 syscall+0xbd4 #11 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8398c4b0) #0 witness_lock+0x5f1 #1 __mp_acquire_count+0x58 #2 sleep_finish+0x2d8 #3 rw_do_enter_read+0x309 #4 uvmfault_lookup+0x122 #5 uvm_fault_check+0x4f #6 uvm_fault+0x106 #7 uvm_fault_wire+0x73 #8 uvm_vslock_device+0x112 #9 physio+0x257 #10 spec_read+0x14b #11 VOP_READ+0x101 #12 vn_read+0x17b #13 dofilereadv+0x25a #14 sys_pread+0xae #15 syscall+0xbd4 #16 Xsyscall+0x128 Process 11620 (syz-executor) thread 0xffff80002f3d9a10 (109357) exclusive rwlock amaplk r = 0 (0xfffffd805edf8370) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 amap_unref+0x3d #3 uvm_unmap_detach+0x8a #4 sys_munmap+0x329 #5 syscall+0xbd4 #6 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10209 11113K 11286K 166960K 11450 0 pcb 18 14K 16K 166960K 124 0 rtable 217 6K 7K 166960K 401 0 pf 35 17K 18K 166960K 52 0 ifaddr 43 7K 7K 166960K 53 0 ifgroup 55 2K 2K 166960K 63 0 sysctl 3 1K 9K 166960K 8 0 counters 68 36K 37K 166960K 74 0 ioctlops 0 0K 4K 166960K 1504 0 iov 0 0K 20K 166960K 73 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1339 84K 84K 166960K 1462 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 9 0K 0K 166960K 11 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 85K 166960K 300 0 sigio 0 0K 0K 166960K 5 0 proc 72 115K 147K 166960K 575 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 17 0 in_multi 99 7K 7K 166960K 116 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 3 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 79 360K 360K 166960K 79 0 exec 0 0K 1K 166960K 395 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 250 168K 168K 166960K 4500 0 UVM aobj 7 4K 4K 166960K 7 0 pinsyscall 43 86K 98K 166960K 1450 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 16 0 NDP 14 0K 1K 166960K 33 0 temp 41 8663K 8730K 166960K 13282 0 kqueue 15 24K 29K 166960K 58 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 42 0 39 1 0 1 1 0 8 0 rtentry 176 123 0 26 6 0 6 6 0 8 0 unpcb 144 109 0 90 1 0 1 1 0 8 0 syncache 336 3 0 3 1 1 0 1 0 8 0 tcpcb 736 71 0 65 4 0 4 4 0 8 3 arp 136 20 0 2 1 0 1 1 0 8 0 inpcb 328 419 0 407 7 0 7 7 0 8 6 nd6 152 27 0 3 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 9 0 1 1 0 1 1 0 8 0 ppxss 1192 2 0 2 1 0 1 1 0 8 1 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 1 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 29 0 0 1 0 1 1 0 8 0 pfstkey 128 30 0 1 1 0 1 1 0 8 0 pfstate 448 30 0 1 4 0 4 4 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 527 0 109 31 0 31 31 0 8 4 art_table 40 528 0 109 5 0 5 5 0 8 0 art_node 32 123 0 36 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 1 1 0 1 1 0 8 0 semapl 112 7 0 0 1 0 1 1 0 8 0 shmpl 112 3 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1829 0 315 95 0 95 95 0 8 0 ffsino 296 1829 0 315 117 0 117 117 0 8 0 nchpl 144 2252 0 550 64 0 64 64 0 8 0 vnodes 216 1973 0 0 110 0 110 110 0 8 0 namei 1024 7319 0 7319 1 0 1 1 0 8 1 percpumem 16 52 0 3 1 0 1 1 0 8 0 vcpupl 3968 1 0 0 1 0 1 1 0 8 0 vmpool 840 1 0 0 1 0 1 1 0 8 0 kstatmem 264 32 0 6 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 13737 0 13737 4 1 3 3 1 8 3 plimitpl 152 52 0 34 1 0 1 1 0 8 0 sigapl 424 606 0 558 6 0 6 6 0 8 0 knotepl 120 519 0 0 16 0 16 16 0 8 0 kqueuepl 224 131 0 120 5 0 5 5 0 8 4 pipepl 344 140 0 109 3 0 3 3 0 8 0 fdescpl 528 590 0 558 3 0 3 3 0 8 0 filepl 160 2927 0 2692 13 0 13 13 0 8 3 lockfpl 104 58 0 56 1 0 1 1 0 8 0 lockfspl 48 26 0 24 1 0 1 1 0 8 0 sessionpl 144 23 0 14 1 0 1 1 0 8 0 pgrppl 48 36 0 19 1 0 1 1 0 8 0 ucredpl 104 357 0 344 1 0 1 1 0 8 0 zombiepl 144 560 0 558 1 0 1 1 0 8 0 processpl 1232 606 0 558 5 0 5 5 0 8 0 procpl 664 845 0 789 6 0 6 6 0 8 0 sockpl 752 571 0 537 11 0 11 11 0 8 7 mcl64k 65536 5 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 133 0 0 17 0 17 17 0 8 0 mcl2k 2048 30 0 0 4 0 4 4 0 8 0 mtagpl 96 10 0 0 1 0 1 1 0 8 0 mbufpl 256 1203 0 0 76 0 76 76 0 8 0 bufpl 280 6009 0 130 420 0 420 420 0 8 0 anonpl 32 11577 0 0 94 0 94 94 0 246 0 amapchunkpl 152 13679 0 13108 27 1 26 26 0 158 1 amappl16 200 2699 0 2670 28 13 15 27 0 8 8 amappl15 192 25 0 25 1 1 0 1 0 8 0 amappl14 184 4 0 4 1 1 0 1 0 8 0 amappl13 176 439 0 438 1 0 1 1 0 8 0 amappl12 168 952 0 909 3 0 3 3 0 8 0 amappl11 160 30 0 29 1 0 1 1 0 8 0 amappl10 152 49 0 35 1 0 1 1 0 8 0 amappl9 144 248 0 248 1 1 0 1 0 8 0 amappl8 136 27 0 25 1 0 1 1 0 8 0 amappl7 128 88 0 87 1 0 1 1 0 8 0 amappl6 120 310 0 297 1 0 1 1 0 8 0 amappl5 112 81 0 70 1 0 1 1 0 8 0 amappl4 104 418 0 389 1 0 1 1 0 8 0 amappl3 96 2198 0 2102 4 1 3 3 0 8 0 amappl2 88 687 0 612 2 0 2 2 0 8 0 amappl1 80 9723 0 9126 15 1 14 15 0 8 1 amappl 88 3734 0 3564 5 0 5 5 0 92 1 uvmvnodes 80 104 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 1 1 1 0 8 1 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 6 0 0 1 0 1 1 0 8 0 uaddrrnd 24 591 0 559 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 591 0 559 1 0 1 1 0 8 0 vmmpekpl 168 6557 0 6515 3 0 3 3 0 8 0 vmmpepl 168 45372 0 43410 106 0 106 106 0 357 15 vmsppl 488 590 0 559 5 0 5 5 0 8 0 rwobjpl 80 15865 0 14832 31 0 31 31 0 8 6 pdppl 4096 1191 0 1119 94 20 74 81 0 8 2 pvpl 32 20288 0 0 164 0 164 164 0 265 0 pmappl 256 591 0 559 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 340 0 23 10 0 10 10 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff8386bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x68 savectx() at savectx+0xae end of kernel end trace frame: 0x13200b38070, count: 10 ddb{0}> trace x86_ipi_db(ffffffff8386bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x68 savectx() at savectx+0xae end of kernel end trace frame: 0x13200b38070, count: -5 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff833f1eed) at panic+0x1e5 uvm_fault_unwire_locked(fffffd806cb029a0,200000040000,200000044000) at uvm_fault_unwire_locked+0x4ee uvm_fault_wire(fffffd806cb029a0,200000040000,200000051000,3) at uvm_fault_wire+0x12d uvm_vslock_device(ffff80002f3d9248,200000040040,10000,3,ffff80003c427f68) at uvm_vslock_device+0x112 physio(ffffffff822634e0,d02,8000,ffffffff82263d30,ffff80003c428248) at physio+0x257 spec_read(ffff80003c4280a0) at spec_read+0x14b VOP_READ(fffffd8066af1610,ffff80003c428248,0,fffffd80097fd478) at VOP_READ+0x101 vn_read(fffffd806c9247c0,ffff80003c428248,1) at vn_read+0x17b dofilereadv(ffff80002f3d9248,5,ffff80003c428248,1,ffff80003c428300) at dofilereadv+0x25a sys_pread(ffff80002f3d9248,ffff80003c4283b0,ffff80003c428300) at sys_pread+0xae syscall(ffff80003c4283b0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x132c77f28d0, count: 2 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833f1eed) at panic+0x1e5 uvm_fault_unwire_locked(fffffd806cb029a0,200000040000,200000044000) at uvm_fault_unwire_locked+0x4ee uvm_fault_wire(fffffd806cb029a0,200000040000,200000051000,3) at uvm_fault_wire+0x12d uvm_vslock_device(ffff80002f3d9248,200000040040,10000,3,ffff80003c427f68) at uvm_vslock_device+0x112 physio(ffffffff822634e0,d02,8000,ffffffff82263d30,ffff80003c428248) at physio+0x257 spec_read(ffff80003c4280a0) at spec_read+0x14b VOP_READ(fffffd8066af1610,ffff80003c428248,0,fffffd80097fd478) at VOP_READ+0x101 vn_read(fffffd806c9247c0,ffff80003c428248,1) at vn_read+0x17b dofilereadv(ffff80002f3d9248,5,ffff80003c428248,1,ffff80003c428300) at dofilereadv+0x25a sys_pread(ffff80002f3d9248,ffff80003c4283b0,ffff80003c428300) at sys_pread+0xae syscall(ffff80003c4283b0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x132c77f28d0, count: -13