last executing test programs: 10.766503019s ago: executing program 7 (id=1044): setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r0 = syz_open_pts() ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000740)={0x804, 0xbcb, {[0x9, 0x1, 0x5, 0x7, 0x1, 0x6, 0x8, 0x4, 0xa000000000000000, 0x2, 0x2, 0x3, 0x5, 0x1, 0xdf, 0x2, 0x5, 0x80000001], [0x80000001, 0xfffffffffffffffc, 0xe, 0xd83, 0x1, 0xc, 0x4b7a, 0x2fc6476f], [0xffffffffffffff01, 0x5, 0xc, 0xa, 0x5, 0x6e, 0x6], [0xfffffffffffffff8, 0x6, 0x8c, 0x5, 0x400, 0x6], [{0x4, 0x0, 0xfffffff8, 0x800}, {0xc1c8, 0x3, 0x8, 0xdff}, {0x1000, 0x8cd4e02, 0x2b2, 0x8}, {0x0, 0x5, 0x10000, 0xdd}, {0x1, 0x2, 0x3, 0x4}, {0x200, 0x4, 0x9, 0x2}, {0x1, 0xe40b, 0x6, 0xff}, {0x9, 0x401, 0xb, 0x2}], {0x0, 0x8, 0xf7, 0x7}, {0xc1, 0x116dc000, 0x6, 0x510b}}}) close(r0) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x1040978a, 0x5, 0xf7fffbfc, 0x80a19f, "bb08000100f167d910508b000000000000000080", 0x800002, 0x4000002}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) pwrite(0xffffffffffffffff, 0x0, 0x0, 0xd) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000007}, {0x2c, 0xc, 0xd5, 0x4006}, {0x6, 0x9, 0x1, 0xfffffff2}]}) writev(0xffffffffffffff9c, &(0x7f0000000000)=[{&(0x7f0000000200)="a9f6f300800000000000000000000075b5a87d743e0384cbaa00d3c2552e535b", 0x20}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000340)="50041b02003e807447ff00080000000000000000", &(0x7f0000000000)=0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '`\"`', 0x0, 0x0, 0x1, @empty, @local={0xfe, 0x80, '\x00', 0x0}}}}}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) 10.757141582s ago: executing program 7 (id=1049): r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000014c0), 0x800, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000015c0)={0x0, &(0x7f0000001540)}) chdir(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chmod(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) unlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlinkat(r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 10.403292993s ago: executing program 7 (id=1051): r0 = syz_open_pts() setrlimit(0x8, &(0x7f0000000980)={0xb, 0x5c}) r1 = syz_open_pts() close(r1) syz_open_pts() writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000b00)="4e174776daf4fb44dfb5b39f3cb8f5ac2d401d994a15a52f26caa834ce9df3ff35e9d2a884d407d9ebae3b38ae5805a17ab8f19882b28e24d02cb61b5134be54b32d11a981d6d5a8c4dbaf221c1ea2b0cc30fccc4aa43f8de77e214ca7a18d7ed8f1acd1293f6303741c514164d1211d6fd7af98a9eac230efff65a03e862973fcf3fafcad3d6693f485899e091bcee22dfa514dc738f19f6da6c50cd5834e9af3480150350f0134e8a3ffbd44feeb3bd04d14b5a4dc85ca643f8661ad7db1a26cad7e43d2ae9d7338d81849ff51029e60ab732c44223f2e4656c47485783daf1699a46ca263d56edfc8942e19d0d5bdacd7f4892da88d46c95f938483e43ad3ff2a59261cb4c5dfafc76e7764c444870be7da3ba63dfe377e0ef5493d2f8173d654fe9147cab8c3002efd254938ae1fc3ed9a7597104d3e6e305e2e22f70b2ba589e5d8b05ee93ea6ee6f453952a18f2282127b020bbd22d3f1c1839d8bc77ceb5ab0c6a0ca0bbd71a94507008c4e4d96163e6d8d365b3f1c6cdae98aab8f7044c72a49ce45a99efd3e68450b2163bdaa18f5cf12ac9f3500caee88986474f10dd97a37dd73abb8eab9bb944891122ca82d63179118ec9ea96c9f56f80de0f2221c59f556782dc7a484cd3a7b11402eebc9c15588e7b0ebb6254fa63021334f3c027a177c1ec1b5a23108663838b139e1920fd3c337e9d68c8e1e86e3ff0e66921bfd0955f8c31950f5fa468ea4505488e19949cea51a59cf757df75081f53764bf27b2bcfaa659ed50776c2b5b3c58c36d091bd12fe8d8385dcdf3f38c30da96f04f639e91278154eb831cee3f1651c29d188f8dd8b575d14d6e524a01f9efa669f8ec70fe4f9dd88691fe3c9337f4bc09f3fadc45f932881add14a4f38b843668bfc342950f46ed57a58942904c09293660adfc5c697acbb459ba79c97616ebbbc176a5e7556410afed0ba63a149de869a98e12058e92360c066335d50feb1e55ff8d57f51c60bbfbae04281a2a97d6d2b403e018a91dc60a250bc0a4843c22e5c56f92ee7ba5713fc358c1fe0360498e5042506dbd2e5c673ddde986d2a482e3e244e2c56bd1798c4b6385cf3adfb3a7d0a2e5dbc32859d757a8c44046bd0207246bf76b185232e7be7c48522055e2d8ec6bd5fc29ecafb2c5fce4690b52f267d9ac7fa69dc8a1cd8ce7c3c949ddb28a7a7c0b2bd8f1e1e77006002812157c1bc4354353b7653d3fc4d3178e8804dc81a49f2a6e35ceabcdd0ce2dbd070d49bb9a3bc59508fa618540264c53134f71d0de56d390d37d774b85c7814dbbf1930e0f100ce69b0f693af9930c1a599899fd37c481620a2855d1338a966eb600f7983049581ec3003b7c1306ef8422a6025dc38dc3b23438cd96e538afb78a6f18f51c83488ab7a65b2f4f302d24622f5417b4d81c31247b6f60c85bbd92b6703d8dfc1643fc26a8e817fb866ffcb37bd2e5fa745ccf64153e19e2447066c15dfc0d9c261a12a367ad2711d2b9046f3187c35cac53a857cf77818eef9e7ba25c585cf0688996b1cc1eb719fd3496a2ece4013a9de3687d2956bf536fe6d230dcf8af94d075ce4528e7db2dffaa517d9bf6156592da5eac87dbbb3715540cc6ecc40433619ad0c7231f2339fc2a6916ca7b53d76c6aae6d41582e7934b37d2da93fc1337ce8fa112868fa677407979f7d8fab9d9ce9c25b6c5dd78d44940609ff0192eaa7c2d1ffe2afe7cf6f1dcd627309eb930d8f52504c1b1990b8f97b08590ec1200622d2f92190722027c8fbc1b3a578a218e0b104825bb5e9c8faa43b4eea168e59c07195342a5c6b6f96d22f9edae61c0e1cd28e5db4ee7a315c7ee7d2d1d2735169792f1f10ec1d0a5f9bb68c30b0117d3fc3306a71d232d2773d4191174d33ee9bce4dc90f3bda50eea2dceceba99e41d647c50e335c950384073b25d0c7451d624e3af7b6a223d83e21b1e383c95179ab38f79fff3e83f13ff10f7fa21b815cfef3b1df6e9a387f677562a8c5b070095dc3bd77d6e41f1e6535bc093154ff561208760e0ee4163cfdfc5ae033ba3e3ea8c0ebf20fd901689c19ad1b9953e0e1efa12899ac21aaa5d31c0be681a6311416f8a0abaf80b5fd2d24dbac2fa42658a2974cb2d15b40dd0c0cca7929ed18f396f650706d163aa17483ed55c2b489affe7bc16dbd5448f6e3533cd44c22db0fbcca9aeb055ee702dd4cd326370b2f752ce0d3c9d9c8f46ab57f25e92f955f36049db1fcb5f625ccc2e90acf824c345907f66a8b99c10360f6da6c96a8cc254f20bf49bc29d79798e2a413197ae7bfe23dfcefad252fe305ff38830e0aca3ba2ecc664781098e7933e007fadf120f06c8c4f9fa4c610103df6ae239643ffc8d50455c22960fc89d6fb0ad2bb05b519faa00f90db2ff0e254b40822a00a6cf2e2bf9032cdce6154fc0f2dd85390c78ab30deee8d3ce3dd8acb91ab4a431fee6bb409c280354e336ffb19909cfebb508cbe5de1cc0cee97ce06743ef56ff0610910710d8a4e14b8ff35a39b6093b5d6a00eea81eb96bd48a413814007d00605172715ae81e454b98dcfced533e6636ca9de1bcad4ad2d5cd04d040bfdc12ca18bec77d2ceed86a81eee5bdd83407927f912162703a47f4c3ab4f9b8209febf426fd51dedc8849db0472465140b0b78c5408389fd04322857ac3625e6c1b6f3741995472d6b1243edff96f5dcb4cb5aa39ca0603f84e70a54e07d1ca41b1ce675652ea2462ef58daf5e029d2f2fbdb91177f9e3887a37403be377ee64a3511fd2643b4d7778d8f6bd64a3f6ef41651dc338c5f3665cef2df268508a5531f987e870f13a921ec0115c1de24136eb058de811522f189ec89957bfb25ae4aef17b979e8c639e741441cf805bbe658fa356f3a4ee07e115234c21abfe5d23997e1ee789f7878cefb51ae9c4799b12c1da9b2e926c3c265ae52f9ad0e142411499f39540f0f06cf907d4d4e5974be09682675dcb88d3fa29abecef813823ba561430fe4922478dfbaf370221c4423278596e2c58a9769270b6d960d0d46390cd793619887a6d504106747a8746e2b05ca1", 0x881}], 0x1) open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x7) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0xf66c, 0x4, 0x7, 0xfffffffb, "7ad58fdbe07c0000000000e1ffffff00", 0x763c8c17, 0x8e}) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x5, 0x1, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x3effd}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) syz_open_pts() ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000780)=0x3) 8.342425649s ago: executing program 0 (id=1077): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x10000, 0x0) ioctl$TIOCSETA(r0, 0xc0284416, &(0x7f0000000100)={0x2, 0x17, 0x741, 0x4, "97000000ff0008000100e8aed139800a00f57f00", 0x70cb, 0xa}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) poll(&(0x7f00000000c0)=[{r1, 0xae98cd7e8d4e801f}], 0x1, 0x9) select(0x40, &(0x7f0000000300)={0x7, 0x7, 0x2, 0xc0, 0xa, 0x10000, 0x9, 0x101}, 0x0, &(0x7f0000000380)={0x5d4b, 0x2, 0xffff, 0x5, 0x2, 0x2f5, 0xb682, 0xded}, 0x0) fchmod(r0, 0x102) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) sysctl$kern(&(0x7f0000000000)={0x1, 0x3}, 0x2, 0x0, 0x0, &(0x7f0000000040), 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x0, 0x4, 0x0, 0x10}, {{}, 0xfffffffffffffffa, 0xc0, 0x20000000, 0x7fffffffffffffff, 0x46ad}, {{}, 0xfffffffffffffff9, 0x83, 0xf0000000, 0x3, 0x8}, {{}, 0xfffffffffffffffb, 0x20, 0x1, 0xffffffff, 0xc3d}, {{}, 0xfffffffffffffffa, 0x37, 0x20, 0x9, 0x3}, {{}, 0xfffffffffffffffb, 0x2f, 0x40, 0x4, 0x10000}, {{}, 0xfffffffffffffffe, 0x14, 0x10, 0x2000000008, 0x100000005}, {{}, 0xfffffffffffffffb, 0x38, 0x2, 0x1f70, 0x80000000000005}], 0xb19, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xfffffffffffffffe, 0xffffffffffffffff}) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) 7.668370495s ago: executing program 5 (id=1081): r0 = syz_open_pts() mkdir(&(0x7f0000000100)='./file0\x00', 0x51) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) setsockopt(0xffffffffffffffff, 0x29, 0x6c, &(0x7f0000000040), 0x4) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x6b, 0x4, 0x3}], 0x203, 0x0, 0x80000001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000000}) flock(r0, 0x8) flock(r0, 0x3) syz_open_pts() openat$pf(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_open_pts() utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0xa, 0x8}, {0x10001, 0xa6}}) 7.485224279s ago: executing program 3 (id=1082): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x800, 0x800f, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x9}, {0x1000006, 0x0, 0x14, 0x5910}, {0x2000002, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1cc, 0x800, 0x8, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x80000000, 0x6}, {0x1100c, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x5, 0x2a2, 0xffffffffffffffff, 0x0, 0x8000000000000003, 0x80000000000000c, 0x100000001, 0x40}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffe53) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) r2 = msgget$private(0x0, 0x127) msgrcv(r2, 0x0, 0x0, 0x0, 0x3000) msgsnd(r2, &(0x7f00000002c0)={0x1, "b9ebd588d74c6979259b2aa17bc31238489654a787f11d19433ccf4e3f4ecdebd53dd9ee2c54dbee256694ffa5866e8654da3b2b69d7823149cfd6aa4937dba487c12bcf475f90940618bd4c4d4e7e"}, 0x57, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000007}, {0x2c, 0xc, 0xd5, 0x4006}, {0x6, 0x9, 0x1, 0xfffffff2}]}) writev(0xffffffffffffff9c, &(0x7f0000000000)=[{&(0x7f0000000200)="a9f6f300800000000000000000000075b5a87d743e0384cbaa00d3c2552e535b", 0x20}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000340)="50041b02003e807447ff000800000000000000000f", &(0x7f0000000000)=0x15, 0x0, 0x0) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r3 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f0000000600)="d81ad30100060000000100000000", 0xe) r4 = fcntl$dupfd(0xffffffffffffff9c, 0xa, 0xffffffffffffff9c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, r4, 0x0) sysctl$kern(0x0, 0x0, &(0x7f00000009c0)="4ab6bc4f07a71af7f6a13cd58a34090f6fc39238acbdf3eae5c831a36cf0da5b6816adcb57bcc6f63603d533a201bbf4", 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000380)=""/227, 0xe3}], 0x28d) 7.484343079s ago: executing program 0 (id=1083): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xf7ffffffffffffed, 0xffffffffffffffff}) ktrace(&(0x7f0000000100)='./file0\x00', 0x0, 0x400, 0x0) socket(0x6, 0x4, 0xeb) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000280)="4da64509a38ea8ba72bd8ab6570d573113b9a27d0de2e71679f325a637e93f0e16825087000000000000e1edffc1c4af66325940c5c65e8461557dea245d1b345de7d7ccb88e8b8a2428371a19f63ec5a1746a72a8686e4f271187733c05e295c4bd4f7b8d48213eaafbf598f8e35efacf6fd21c53acf2dc02ea74b4d6c9126e94a1696cbccf87acd1de2bbc131bfabc9c236e7810d92703e2c92f26d186e806a536fb8ddc6a707a02feb4389af009b9a1d8603f82085b4e64e819f3bfe933418af77513ff6b68aabea6bb16dd66eefea78ac24c432440e58281676d25775a225c96b4834519a6224b1e10f45bf31b9e10ec970d42", 0xf5}], 0x1, 0xfffffffffffff217) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000940)="7e2fc545c6f4fa07800b52c5c3e4e8633db877462de6763508573b51b3d11ecd65fa4971c286e0f3f4f346c385a8f392951e2f7bd17a2fdc790e9a7ef2a10abfd79f91120e50bce1566f4c", 0x4b}], 0x1) write(r1, &(0x7f0000000140)="42c23acc8d16e88c5ddd5fd619ea959d2654921dbef341", 0x17) unveil(0x0, &(0x7f00000000c0)='W\x00') ftruncate(r0, 0x48001000007) 7.482477959s ago: executing program 5 (id=1084): open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) mknod(&(0x7f0000000280)='./file2\x00', 0x4, 0xd02) r0 = open(&(0x7f0000000080)='./bus\x00', 0x800, 0x10c) readv(r0, &(0x7f0000001f80)=[{&(0x7f0000000f40)=""/4096, 0x1000}], 0x1) open(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80000000000206, 0x81) msgget$private(0x0, 0x480) (async) msgget$private(0x0, 0x480) socket(0x2, 0x3, 0x0) (async) socket(0x2, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) socket(0x18, 0x3, 0x0) (async) r2 = socket(0x18, 0x3, 0x0) socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r3 = socket(0x18, 0x3, 0x0) setitimer(0x0, &(0x7f0000000240)={{0x400, 0x122800000000009}, {0x3}}, 0x0) (async) setitimer(0x0, &(0x7f0000000240)={{0x400, 0x122800000000009}, {0x3}}, 0x0) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) (async) setuid(0xee01) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) rename(&(0x7f0000000140)='./file2/file0\x00', &(0x7f0000000100)='./file2\x00') ioctl$TIOCSETA(r4, 0xc0504417, &(0x7f0000000740)={0x13, 0x0, 0x4, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x0, 0x2}) ioctl$WSDISPLAYIO_ADDSCREEN(r4, 0x80245753, &(0x7f00000000c0)={0x1, './file0\x00', './file0aaaaaaaaa'}) (async) ioctl$WSDISPLAYIO_ADDSCREEN(r4, 0x80245753, &(0x7f00000000c0)={0x1, './file0\x00', './file0aaaaaaaaa'}) ioctl$FIONREAD(r3, 0x81206919, &(0x7f0000000100)) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) (async) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) ioctl$FIONREAD(r2, 0x81206919, &(0x7f0000000100)) (async) ioctl$FIONREAD(r2, 0x81206919, &(0x7f0000000100)) ioctl$FIONREAD(r2, 0x8080691a, 0x0) (async) ioctl$FIONREAD(r2, 0x8080691a, 0x0) 7.288536238s ago: executing program 3 (id=1087): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x1003, 0x4, 0x1, 0x40000007}, {0x7e, 0xc, 0xd5, 0x2000400d}, {0x6, 0x9, 0x1, 0x6}, {0xc, 0xb4, 0x9, 0x3}, {0x10, 0x43, 0x50, 0xf5}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)="441e38002b4c2fac88db1f0b8c8bc6401149aa3d88cc0a387ecffcfcbaf2670fcadaae0d850b264604d552dbf0ed418694f81b67a2", 0x35}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000240)="50041b0200c29e3e807447f80b78a5000000000000c967ec98df1eae34b149d8", &(0x7f0000000000)=0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r3 = getuid() fchown(0xffffffffffffffff, r3, 0xffffffffffffffff) getgroups(0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0]) r5 = geteuid() getgroups(0x8, &(0x7f0000000200)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0]) r7 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r7) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000280)={0x0}, 0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x5, r3, r4, r5, r6, 0x4, 0x2}, 0x7940, 0x10000, r7, r8, 0x100, 0x8000000000000000, 0x4, 0x7}) close(0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047470, &(0x7f0000000000)=0x2) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = socket(0x2, 0x3, 0x0) bind(r9, &(0x7f0000000180)=@in6={0x18, 0x2, 0xa, 0x9}, 0xc) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r2, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x9}, 0x2, &(0x7f0000002480)="71f91eca", &(0x7f0000000080)=0x4, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[]) 7.04223689s ago: executing program 4 (id=1088): sysctl$kern(&(0x7f00000017c0)={0x1, 0x12}, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x7ffffffc, 0xffff63d9, 0x7, 0x2, 0x8, 0x8007f, 0x47, 0x10, [{0x8, 0x10000, 0xfffff115}, {0x0, 0xffffffff, 0x200100, 0xfff}, {0xcd5, 0x4baa, 0x1000005, 0x9}, {0x5, 0x20fe, 0xf, 0x2000100}, {0x4, 0x2000007, 0x5, 0x1}, {0x3893, 0xfffd, 0x8, 0x9}, {0x10004, 0xa00, 0x3, 0xfffffffe}, {0x207, 0xffffffff, 0x228000, 0xffffe2e9}, {0x9, 0x1000, 0xf, 0x8000}, {0x3, 0x1, 0x7, 0x8bfd}, {0x86, 0x0, 0x8a3a0004, 0x20006}, {0x10000, 0x0, 0x4, 0xa6a}, {0x400, 0x0, 0x400009, 0x4}, {0x3, 0x2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x42, 0x7}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6}, 0x10, 0x0, 0x0) 7.040262708s ago: executing program 2 (id=1090): mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x18, 0xc003, 0x3a) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x28, 0x11, 0x3, 0x7}, {0x6, 0x9, 0x1, 0xfffffff2}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000003c0)="16fe1b78f966fd37420dc84587e09c6650bc2700f309ce710638f87148943fd2", 0x20}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000180)="7778434c574e9f19887fcca62900231b000f400095043f0080000000001f00385c046200000817c53fcb7c7d40b539750008007a00", &(0x7f0000000000)=0x35, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[]) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000100)={0x3, &(0x7f00000001c0)=[{0xb, 0x4, 0x0, 0xc14}, {0x0, 0x3}, {0x6, 0xcd, 0x3}]}) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x1, 0x1, 0x0) ioctl$FIONREAD(r2, 0x8020691f, &(0x7f00000001c0)) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x1, 0x1, 0x10, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x3f, 0x1, 0x10, 0x3, 0x6c0d}, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0x80000000, 0x44809e9d, 0xfffffffffbffffff, 0xfffffffefffffffd, 0x2000040000000002, 0x210, 0x9454, 0x9}, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) writev(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000000140)="5bcad69493", 0x5}], 0x1) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r5 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$FIONBIO(r5, 0xc0307004, &(0x7f0000000140)=0x1) 7.037796193s ago: executing program 5 (id=1091): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$TIOCSETA(r0, 0xc444443b, &(0x7f0000000040)={0x8, 0x400, 0xc, 0xf4a, "a20000001a001800003200e1ffffff00", 0x4, 0x6}) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f0000001100), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x0, 0x7fffffff}, {0x18, 0x2, 0x1ff}, 0x1, [0xe025, 0x8000, 0x0, 0x0, 0x80000001, 0xfffffc01, 0xffffa4d6, 0x8000]}, 0x3c) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$TIOCSETA(r0, 0xc444443b, &(0x7f0000000040)={0x8, 0x400, 0xc, 0xf4a, "a20000001a001800003200e1ffffff00", 0x4, 0x6}) (async) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) (async) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f0000001100), 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x0, 0x7fffffff}, {0x18, 0x2, 0x1ff}, 0x1, [0xe025, 0x8000, 0x0, 0x0, 0x80000001, 0xfffffc01, 0xffffa4d6, 0x8000]}, 0x3c) (async) 6.772160787s ago: executing program 3 (id=1092): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1e}, 0x4, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) lseek(r0, 0x7, 0x0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r1, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000007}, {0x2c, 0xc, 0xd5, 0x4006}, {0x6, 0x9, 0x1, 0xfffffff2}]}) writev(0xffffffffffffff9c, &(0x7f0000000000)=[{&(0x7f0000000200)="a9f6f300800000000000000000000075b5a87d743e0384cbaa00d3c2552e535b24f92261761492d60443499a95fde94d91f5696a09ff4fd4700d66a5b24b1d916c25168ab57f1b66", 0x48}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000340)="50041b02003e807447ff000800000000000000000f000000000000003c7c3087de4ada9a933366b344db9d5fea3d710990a98e13b1e268a10337d31196968e11d0af3a01", &(0x7f0000000000)=0x44, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="aa33d1aaaaaaaaaaeeacfaad6c5384c4a047c950d107a3aaaaaabb88481146a0db7fe4b4510143364e179053dfb7407b7e4dc3a9d515c77a943741778aa2e449bee4ed8ca1c03f138114b80c56c280acef3ca29f1ede07b0a65b18bfb372a12d2b5101ef8a9aa391ca9966b16b8c730d"]) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fe, 0x1a, 0x1, 0xfd4, 0x3, 0x80000001, 0x17ffe, 0x10, [{0x0, 0x3, 0x3, 0xa24}, {0xc5c, 0xb, 0x5, 0x1ff}, {0x800008, 0x20f05, 0x1fc, 0x7d2}, {0x7ffffffe, 0x3, 0x3, 0x784c}, {0x3fd, 0xd, 0x1002802, 0x4d8a}, {0x8, 0xff, 0x3, 0xb}, {0x8000008, 0x0, 0x81ea, 0x2d}, {0x2, 0x836, 0x17, 0x3}, {0x2, 0x40087e, 0x5, 0x7}, {0x10001, 0xa74d925a, 0xffff, 0x40000088}, {0x1d9, 0x5, 0x4, 0x412c8391}, {0x3, 0xa, 0x20008, 0x40000010}, {0xb8d, 0x4, 0x8, 0x3}, {0x29a71720, 0x81, 0x200, 0x6}, {0x400002, 0x7, 0xfffffff9, 0x100}, {0x200, 0x8, 0x801002, 0xc}]}) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) ktrace(0x0, 0x4, 0xd27d43220c7df9f, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setitimer(0x1, &(0x7f0000001fc0)={{}, {0x5}}, &(0x7f0000002000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) r4 = socket(0x11, 0x3, 0x0) sendto$unix(r4, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000280)="86d1ed123cc3909104df1acadc1563ae6021626570b76018d62938e091164df1d82c302259eff1db46011c7eba044759e9106c7287040e726e838acc30af5e1dda491cf8cc9d1dba12915907f2fd", 0x4e, 0x0, &(0x7f00000000c0)=@in={0x2, 0x0}, 0xc) write(r2, &(0x7f0000000600)="d81ad30100060000000100000000", 0xe) sysctl$kern(&(0x7f0000000080)={0x1, 0x4e}, 0x0, 0x0, 0x0, &(0x7f0000000040)="f2000000", 0x4) 6.407019364s ago: executing program 4 (id=1093): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000001180)="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", 0x127}], 0x1) execve(0x0, 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0x8020699b, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r2, 0x8020699b, &(0x7f00000001c0)) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x16, 0x80, 0x7}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) 6.132321454s ago: executing program 0 (id=1095): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSPGRP(r1, 0x40047477, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async) setgid(0xffffffffffffffff) (async) setgroups(0x0, 0x0) setreuid(0x0, 0xee01) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x15) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f00000001c0)={&(0x7f0000000000)='./file0\x00', 0x9, &(0x7f0000000180)='./file0\x00', 0x8}) (async) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x1, 0x7}, {0x28, 0x1, 0xfffffffc, "b5453d58c33faa1e25702d6c3f6846ef2e6ecd4410"}, {0xc0, 0x1, 0x2, "021d59b40be9ebecf3d72bb57ed8867b0dfe84d2d127a012d45b7f1143360eba080e6b6df3273457e82db0bca8babafd102a801ddf47847a9d10d4912af5e79a18ae53f05f4414da4a52f92ba361246aa4425a002a8dabe269643731c1d65ccad85571ae31cfefa1ed66d8f2a3720be5a4931ddff047977d5011ee6eda19c230e67f541d9ac61522ef79847d7617f1443448708d4a98001d59869c76020088bad3d177f7494af749aa8971ec37927315"}], 0xf8}, 0x0) 5.923485806s ago: executing program 2 (id=1096): open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x310, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0x1, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0xa, 0x0, 0x0) select(0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x6, 0x8000000000000001}) 5.92073544s ago: executing program 0 (id=1099): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x1, 0x7f, 0x40000007}, {0x7e, 0xc, 0xd5, 0x20004006}, {0x6, 0x9, 0x1, 0xfffffff2}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)="441e38002b4c2fac88db1f0b8c8bc6401149aa3d88cc0a387ecffcfcbaf2670fcadaae0d850b264604d552dbf0ed418694f81b67a2", 0x35}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000240)="50041b000b78a500006cc500", &(0x7f0000000000)=0xc, 0x0, 0x0) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000001940), 0x200, 0x0) r2 = kqueue() r3 = openat$speaker(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r4 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x2, 0x1, 0x34, 0x64, 0x3, 0x6, 0x9d, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0xb, 0x1e, [@local={0xac, 0x14, 0x0}, @loopback]}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x8, 0x3fc, 0x1, 0x9}}}}}) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) r5 = kqueue() kevent(r5, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r6 = socket(0x18, 0x3, 0x50) ioctl$FIONREAD(r6, 0xc018696c, &(0x7f00000001c0)) write(r3, &(0x7f0000001c40)='On', 0x2) kevent(r2, &(0x7f0000002fc0), 0x6, &(0x7f0000003000)=[{{r1}, 0x7fffffffffffffff, 0x9, 0x0, 0x3ff, 0x84}, {{r1}, 0xffffffffffffffff, 0x96, 0x1, 0x5, 0x64}], 0x60b, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) sysctl$vm(&(0x7f00000000c0)={0x2, 0xc}, 0x2, &(0x7f00000001c0)="482f92e4bf2369", &(0x7f0000000240)=0x7, &(0x7f0000000280)="d277826eecd7078a6456ab6308ad8555e613f3424f543be7", 0x18) truncate(&(0x7f0000000080)='./file0\x00', 0x40002ffff) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, 0x0) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[]) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) 5.746948546s ago: executing program 4 (id=1100): pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0xc0) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x80007, 0x0, 0x0, 0x0, 0x0, 0x199, 0x7}, 0x85c, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x1735, 0x8000004}) (async) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd504404, &(0x7f0000000040)={0x20000b, 0x1, 0x1, 0x2, "cd0000008000000000000000001500", 0x40048003, 0x6}) (async) ioctl$SPKRTUNE(r1, 0x20005302, &(0x7f0000000040)={0xa2e5, 0x401}) (async) execve(0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802) r2 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000080)) (async) unveil(0x0, &(0x7f0000000080)='r\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) setreuid(0x0, 0xee01) (async) r3 = getpid() fcntl$setown(r0, 0x6, r3) (async) setreuid(0x0, 0x0) (async) close(r0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x2, 0x1, 0x0) setsockopt(r4, 0x0, 0x4, &(0x7f0000000000)='\v\x00\x00\x00', 0x4) (async) socket(0x18, 0x3, 0x9ef) (async) socketpair(0x6, 0x2, 0x80, &(0x7f0000000040)={0xffffffffffffffff}) fcntl$setown(r5, 0x6, r3) 5.7466064s ago: executing program 6 (id=1101): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)="6af46e01f02ffe82948118cf402bad744bd3e9662752cfeebc0c5cc589f0402a7978ee6723", 0x25}, {0x0}, {0x0}], 0x3) select(0x40, &(0x7f0000000180)={0x80000000, 0x44809e9d, 0xfffffffffbffffff, 0xfffffffefffffffd, 0x2000040000000002, 0x210, 0x9454, 0x9}, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) writev(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000000140)="5bcad69493", 0x5}], 0x1) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r3 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$FIONBIO(r3, 0xc0307004, &(0x7f0000000140)=0x1) execve(0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000001340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "36ea07", 0x38, 0x3a, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@param_prob={0x4, 0x1, 0x0, 0xfc5, {0x2, 0x6, 'Df(', 0x9, 0x2b, 0xa, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}, [@dstopts={0x6}]}}}}}}}) 5.745899926s ago: executing program 2 (id=1102): execve(0x0, 0x0, 0x0) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) mknod(0x0, 0x2000, 0x285b9a) r0 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0xfffffffffffffe8d, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x2, 0x1, 0x34, 0x64, 0x3, 0x6, 0x9d, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0xb, 0x1e, [@local={0xac, 0x14, 0x0}, @loopback]}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x8, 0x3fc, 0x4, 0x9}}}}}) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) socket(0x1, 0x1, 0x0) (async) r2 = socket(0x1, 0x1, 0x0) ioctl$FIONREAD(r2, 0xc020699e, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r2, 0xc020699e, &(0x7f00000001c0)) ioctl$FIONREAD(0xffffffffffffffff, 0x80206919, 0x0) (async) ioctl$FIONREAD(0xffffffffffffffff, 0x80206919, 0x0) poll(0x0, 0x0, 0x0) (async) poll(0x0, 0x0, 0x0) r3 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r3, 0x80206916, &(0x7f00000001c0)) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r4 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r4, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r4, 0x3}) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="64e1629b6174d08850c78fe609e9600d2e0b"]) execve(0x0, 0x0, 0x0) (async) execve(0x0, 0x0, 0x0) 5.745511445s ago: executing program 1 (id=1103): utimensat(0xffffffffffffffff, 0x0, 0x0, 0xba7a68d067423293) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000000080)={0x3, 0x1c}) 5.402359524s ago: executing program 1 (id=1104): r0 = socket(0x18, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000001c0)="cbe50807206a67a2b1137e36", 0xc}], 0x1) (async) ioctl$FIONREAD(r0, 0x8020697a, &(0x7f00000001c0)) (async) sysctl$net_inet6_icmp6(&(0x7f00000022c0)={0x4, 0x18, 0x3a, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) 5.402086407s ago: executing program 1 (id=1105): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x40, 0x40000007}, {0x2c, 0xf, 0x3, 0x9}, {0x6, 0x9, 0x1, 0xfffffff2}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000480)="16fe1b78f966fd37420dc84587e09c6650bc2700f309ce710638f87148943fd2aea3c88fb1a40b40", 0x28}], 0x1) ftruncate(r0, 0x0) sysctl$hw(0x0, 0x3ffffffffffffef9, &(0x7f0000000300)="00231b000f400095043f0080000000001f00385c046200000817c5750008007a00000000a2", &(0x7f0000000000)=0x25, 0x0, 0xffffff15) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) r1 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff08ffffffffaaaaaaaaaabb86dd30"]) ioctl$FIONREAD(r1, 0x80206979, &(0x7f00000000c0)) chroot(&(0x7f0000000040)='./file0/file0/../file0\x00') unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f00000000c0)="5a82c6c242aada7aac929952b552", 0xe) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0xb09, 0x0) 5.09215428s ago: executing program 5 (id=1106): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504", 0x4, 0x8, 0x0, 0x0) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) setrlimit(0x8, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$BIOCSRTIMEOUT(r1, 0x8010426d, &(0x7f0000000000)={0x3, 0x8}) (async) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async) r2 = syz_open_pts() close(r2) (async) r3 = syz_open_pts() ioctl$FIOASYNC(r2, 0x80047469, &(0x7f00000000c0)=0x5) (async) ioctl$WSKBDIO_GETKEYREPEAT(r0, 0x400c5708, &(0x7f0000000100)) (async) write(r2, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) writev(r2, &(0x7f0000000400)=[{0x0}], 0x1) (async, rerun: 32) read(r3, &(0x7f0000000280)=""/217, 0xd9) (async) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x1, 0x7f, 0x40000007}, {0x7e, 0xc, 0xd5, 0x20004006}, {0x6, 0x9, 0x1, 0xfffffff2}]}) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="441e38001149aa3d88cc0a387ecffcfcbaf2670fcadaae0d850b264604d5e60af0ed418694f81b67", 0x28}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000080)="50041b0200c29e3e807447f80b78a5000000000000c967ec98df1eae340749d850fae4f2a3c15254be48945635ce8951b16e4b3c1531c620661a801574ab6edb3b9b1e3ff2f500000000000000", &(0x7f0000000000)=0x50, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (rerun: 64) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async) write(r5, &(0x7f00000008c0)="06d0daa222592d48ece8dcc8b667", 0xe) (async, rerun: 32) mknod(0x0, 0x6000, 0x9) (async, rerun: 32) mknod(0x0, 0x40, 0x0) (async) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c397, 0xffffffffffffffff) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r4, 0x0) 5.091374079s ago: executing program 2 (id=1107): setgid(0xffffffffffffffff) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) (async) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) openat$wskbd(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000001000/0x2000)=nil) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x3000) ioctl$WSKBDIO_GETMAP(r0, 0xc010570d, &(0x7f0000000380)={0x7, &(0x7f0000000300)=[{0x0, 0x8c0, 0xe, 0x7, 0x401}, {0x3, 0x7, 0xe}, {0x19fc, 0xfff7, 0x100, 0x7ff, 0x5}, {0x6e, 0x3, 0x9, 0x8, 0x8}, {0x1, 0x20, 0x8, 0x8, 0x8000}, {0x0, 0x80, 0x7, 0x9, 0x3}, {0x8, 0x7, 0xfffd, 0x8, 0x2}]}) (async) ioctl$WSKBDIO_GETMAP(r0, 0xc010570d, &(0x7f0000000380)={0x7, &(0x7f0000000300)=[{0x0, 0x8c0, 0xe, 0x7, 0x401}, {0x3, 0x7, 0xe}, {0x19fc, 0xfff7, 0x100, 0x7ff, 0x5}, {0x6e, 0x3, 0x9, 0x8, 0x8}, {0x1, 0x20, 0x8, 0x8, 0x8000}, {0x0, 0x80, 0x7, 0x9, 0x3}, {0x8, 0x7, 0xfffd, 0x8, 0x2}]}) minherit(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3) (async) minherit(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x10004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="bf", 0x1}, {&(0x7f0000000800)="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", 0xfffffeb3}, {&(0x7f00000001c0)="062bae13407c52042e62eb6d5297ff69d904f0698442ba3993376dd6806a2c411c98edb65566ed23951cdcb7dc5459ba6f838a564d13209dec66ecaa3c6c7efea869fdd25ccd61ad399b0844172f4d249d7dbccccd72"}], 0x2) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000000)="e29002", 0x3}], 0x1) setgroups(0x0, 0x0) sysctl$net_inet6_ip6(&(0x7f0000001e40)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, &(0x7f0000001f80)="058d50de", 0x4) fchmod(0xffffffffffffffff, 0xf3) getuid() (async) r3 = getuid() lchown(&(0x7f0000000040)='./file0\x00', r3, 0xffffffffffffffff) setuid(0xffffffffffffffff) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0) sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000140)="9214c9cdd07e0ce6ac1b385b15929cbb9cdea339ee66a4ac6d7960f28bba718bf9883b3d000f1f2753f896a2eb7ded6119a90cbf3fe928fafc42f63b2230ecf70b2a7f3803bc463ece7b1ac4c7cf537b89646399f19e71220b43ea40dd4396e65095857380faf6c5f55ceb040fec388e7c7197cee024f9c3f95e269faca4243df71aa7003c4b73556a8e384bba06992aa4d3f838c295ae3f873df6c16d33280f03b492e1abe4f20d10ecaf68ca239c932e00310def2147", &(0x7f00000000c0)=0xb7, &(0x7f0000000200)="7d2a50135611f6c2a3fdfd95fb2a0376ae758fd4e01d1df418b1cfbea9f30b06ba991e97bd4dc33785de17ae1643d0fd0c85701d9679a086e6a8fe1a5750cb2ea8", 0x41) (async) sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000140)="9214c9cdd07e0ce6ac1b385b15929cbb9cdea339ee66a4ac6d7960f28bba718bf9883b3d000f1f2753f896a2eb7ded6119a90cbf3fe928fafc42f63b2230ecf70b2a7f3803bc463ece7b1ac4c7cf537b89646399f19e71220b43ea40dd4396e65095857380faf6c5f55ceb040fec388e7c7197cee024f9c3f95e269faca4243df71aa7003c4b73556a8e384bba06992aa4d3f838c295ae3f873df6c16d33280f03b492e1abe4f20d10ecaf68ca239c932e00310def2147", &(0x7f00000000c0)=0xb7, &(0x7f0000000200)="7d2a50135611f6c2a3fdfd95fb2a0376ae758fd4e01d1df418b1cfbea9f30b06ba991e97bd4dc33785de17ae1643d0fd0c85701d9679a086e6a8fe1a5750cb2ea8", 0x41) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) accept$inet6(r4, &(0x7f0000000000), &(0x7f0000000280)=0xc) rename(&(0x7f00000007c0)='./file0\x00', &(0x7f0000001040)='.\x00') (async) rename(&(0x7f00000007c0)='./file0\x00', &(0x7f0000001040)='.\x00') 5.075919386s ago: executing program 4 (id=1108): r0 = socket(0x2, 0x3, 0x0) setsockopt(r0, 0x0, 0x2, &(0x7f0000000000)="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", 0x199) (async, rerun: 32) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async, rerun: 32) bind(r0, &(0x7f00000001c0)=@in={0x2, 0x2}, 0xc) 4.031298836s ago: executing program 3 (id=1109): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x2c, 0xf, 0x3, 0x7}, {0x6, 0x9, 0x1, 0xfffffff2}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f00000000c0)="000415f3879d9536d8abd92fb415ed674017774945640000000000000000000000000000fe529e47848b737df60a6908cc6fd0f2d2ffc450155d9682ea986548d97f2db0baba7fa378fd260ca0659d0d1b5d8603", &(0x7f0000000000)=0x54, 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) r1 = socket(0x2, 0x3, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r1, &(0x7f0000000000), 0x10) write(r1, &(0x7f0000000080)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0xffea) open(&(0x7f0000000080)='./bus\x00', 0x880, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) r3 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r3) r4 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r4, 0x0) ioctl$VNDIOCSET(r2, 0xc0785101, &(0x7f0000000280)={0x0, 0xa94, 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) socket$inet(0x2, 0x3, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='x\x00') rmdir(&(0x7f0000000080)='./file0\x00') ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f00000002c0)={0x7ff, 0x8018, 0x2000008, 0x103, 0x31c, 0x10081b0, 0x10000, 0x10, [{0x1, 0x2893, 0x4, 0x71002}, {0x7fffffff, 0x9, 0x6, 0xfffffff9}, {0x104, 0x7, 0x3, 0xa}, {0x4, 0x800, 0x0, 0x7}, {0x401, 0x3, 0x2802, 0x7}, {0x7, 0x650, 0x3, 0x99}, {0xce1, 0xfffffffb, 0x4f8, 0x6d}, {0x2, 0x803, 0x14, 0x8}, {0x2, 0x6, 0x5, 0x5}, {0x6a76, 0x8001, 0x9, 0x4}, {0x1cc, 0x7, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0x1, 0x9, 0x0, 0x1}, {0x2, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x1, 0x10010000}, {0x4, 0x1, 0xfff, 0x3}]}) open(&(0x7f0000002740)='./file0\x00', 0x8000, 0x1f6) 2.990745093s ago: executing program 7 (id=1110): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x170, 0x200}, 0x0, 0x0, 0xfffffffffffffffb}) execve(0x0, &(0x7f0000000000)=[&(0x7f0000000100)='///'], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x200, 0x0) sync() ioctl$TIOCMSET(r0, 0x8004746d, &(0x7f0000000180)=0x7fffffff) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010001, 0x3df7dfa285eea5a3, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x800, 0x800f, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x9}, {0x1000006, 0x0, 0x14, 0x5910}, {0x2000002, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1cc, 0x800, 0x8, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x6}, {0x1100c, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30007}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x13b) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$WSKBDIO_SETENCODING(r3, 0x80045710, &(0x7f00000002c0)=0x1000) mkdir(&(0x7f0000000100)='./file0\x00', 0x100) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)=""/168, &(0x7f0000000040)=0xa8) 2.985460898s ago: executing program 6 (id=1111): r0 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) r1 = kqueue() kevent(r1, &(0x7f0000000240)=[{{r0}, 0xffffffffffffffff, 0x19, 0x1, 0x10000, 0x1}], 0xe4a, 0x0, 0x4000a9fa, 0x0) 2.612153048s ago: executing program 5 (id=1112): r0 = socket(0x1, 0x5, 0x0) close(r0) close(0xffffffffffffffff) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x1, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x28, 0x11, 0x3, 0x7}, {0x6, 0x9, 0x1, 0xfffffff2}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f0000000240)="50041b0200c29e3e807447f80b78a5000000000000c967ec98df1eae34b149d850fae4f2", &(0x7f0000000000)=0x24, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r2, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000000c0)={0xa, &(0x7f0000000280)=[{0xc, 0xb3, 0xce, 0x7fff}, {0x4, 0x7, 0x4, 0xfffff001}, {0x1951, 0x6, 0x8, 0x2}, {0x6, 0x7, 0xe9, 0x1}, {0x5, 0x0, 0x80, 0x4}, {0x5, 0x80, 0x8, 0x3}, {0xd2, 0xff, 0xe, 0xffff4732}, {0x8000, 0x5, 0x5, 0x1000}, {0x5, 0xed, 0x7f, 0x7}, {0x4, 0x3, 0xff, 0x1914237d}]}) connect$unix(r1, &(0x7f0000000000), 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r3 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r3, 0xc0106477, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r3}) ioctl$DIOCMAP(r3, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00', r3, 0x3}) open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) write(r0, &(0x7f0000000140)="24bdfa5d1d2873c63e35348295b299ab09dbd0734449c365d05ba166e2fea9aec4", 0x21) 2.611283387s ago: executing program 1 (id=1113): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) (async) r2 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000100), 0x20, 0x0) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r0}) (async) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000040)="6f98aeb9d9bd19ecdf33286c", 0xc) (async) select(0x0, 0x0, &(0x7f0000000340)={0x1, 0x4000000000000000, 0x2, 0x5, 0x8, 0x7c, 0x30886671, 0x3485}, 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f0000000140), 0x96, &(0x7f0000000440), 0xfffb4165, 0x0) (async) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r4, 0xcd50441a, &(0x7f0000000340)={0x3, 0x0, 0x200, 0x3, "18000000003d7a00e53a26e0ffbf86bd00", 0x3, 0xfffffffe}) (async, rerun: 64) ioctl$VMM_IOC_RESETCPU(r0, 0x82405605, &(0x7f00000002c0)={0x4, 0x0, {[0xff, 0xd, 0x4, 0x8, 0xd9a, 0x800000966, 0x6, 0xc, 0xd, 0x200, 0x9, 0x6, 0xfffffffffffffff8, 0x6, 0x6, 0x2, 0x4, 0x7], [0x4, 0xf44d, 0x5, 0x0, 0x6, 0x7ff, 0xfffffffffffffffe, 0x7, 0x6, 0x1], [0xd7, 0x1ff, 0x3, 0x9, 0x13e, 0x1000, 0xd9b], [0x10001, 0xf2, 0xffff, 0xfffffffffffffff9, 0xfffffffffffffffc], [{0xa, 0xdf, 0x0, 0x5}, {0x8, 0x84f, 0x80c2, 0x5}, {0xfff, 0x5, 0x316, 0x1}, {0x0, 0x3, 0x2, 0x8}, {0x7ff, 0x6, 0x8001, 0x8000000000000000}, {0x5, 0x10000, 0x4, 0x3}, {0x6, 0xf6, 0x7fff, 0x8}, {0x1ff, 0x44, 0x4, 0xd96}], {0xfffb, 0x0, 0x0, 0xb857}, {0x0, 0x4, 0xa, 0x118eaf04}}}) (async, rerun: 64) socket(0x2, 0x2, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) r5 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r5, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) (async) r6 = socket(0x18, 0xc003, 0x3a) setsockopt(r6, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0x68, 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 64) r7 = socket(0x18, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x2, r7) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r9, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) (rerun: 64) socket$unix(0x1, 0x5, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x10080, 0x5) 2.302114191s ago: executing program 2 (id=1114): r0 = socket(0x800000018, 0x1, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mquery(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xffffffffffffffff, 0x4) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r1 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x3f, &(0x7f0000000000), 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x33, 0xa2f}, 0x80000002000007, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x5, 0x8000000000000001}) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0x8026d4) open(&(0x7f0000000000)='./bus/\x00', 0x200, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)=',', 0x1}], 0x1, 0x9fa3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x0, 0x0, &(0x7f0000000040)={0x50, 0x0, 0x0, 0x0, 0x56c}, &(0x7f0000000080), &(0x7f00000000c0)) 2.301661994s ago: executing program 4 (id=1115): r0 = open(&(0x7f0000000040)='./file0\x00', 0x20246, 0x181) r1 = getppid() r2 = geteuid() ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x9, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000005}, {0x3, 0x0, 0x6, 0xfff}, {0x1, 0x4baa, 0x803, 0x9}, {0x4, 0xe2, 0x3, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0x5}, {0x9, 0x1000, 0x6, 0x7}, {0x3, 0x1, 0x6, 0x8bff}, {0x0, 0x0, 0x8, 0x9}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x2000401, 0x104, 0x400009, 0xa1}, {0x3, 0x7e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0xffffff90, 0x7}, {0x9bdf, 0x1, 0x2, 0x400}]}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x100) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r4 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) r5 = kqueue() kevent(r5, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) sysctl$hw(&(0x7f0000000140)={0x6, 0x17}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSRTIMEOUT(r3, 0xc0307004, &(0x7f0000000080)={0x2, 0x2000000f}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r6 = socket(0x18, 0x3, 0x0) r7 = socket(0x1, 0x2, 0x0) ioctl$BIOCSDIRFILT(r3, 0x8004427d, &(0x7f0000000240)=0x3) ioctl$FIONREAD(r7, 0xc0106924, &(0x7f00000001c0)) getppid() writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)='#', 0x1}], 0x1) ioctl$FIONREAD(r6, 0x8080691a, &(0x7f0000000100)) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0xffffbffe, 0x0, r8, r2, 0x0, 0x117, 0x1}, 0x4, 0x0, r1, r1, 0x4, 0x10000, 0xfffffffffffffffd, 0xfffffffffeffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r9, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r10 = fcntl$getown(r9, 0x5) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000604, r10) 2.301307085s ago: executing program 6 (id=1116): socket(0x1, 0x3, 0x0) (async) socket(0x1, 0x3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, &(0x7f0000000180)="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", 0xfb, 0x0, 0x0, 0x0) 2.085349514s ago: executing program 6 (id=1117): r0 = getuid() r1 = getgid() lchown(&(0x7f0000000000)='./file0\x00', r0, r1) lchown(&(0x7f0000000040)='./file0\x00', r0, r1) sysctl$hw(&(0x7f0000000080)={0x6, 0x15}, 0x2, &(0x7f00000000c0)="d817c4e4947175a9cfe7db69d6dd5c8421a38cc1f7c4ec073c6dc024c87bad31f58aec413429aaa7544cdbe700fa5fd1e879bded96153bac221dfd85c19a0d3545fe6b4244966b09a332bd5117", &(0x7f0000000140)=0x4d, &(0x7f0000000180)="ad82e877fe2c0460d44ec745e7f6f1cb4b3419016d5d4c43a2c9350dd2eee50206d3154de5f21b68bb9932e4b4d3a90a3f8832d776672600875eb5284fa35ace1e0be9886a37908782b2f4e7842a15d3a00026e4f218c95a7ebdbf287d49254a69297d990782279b2d3f6d8b88a23f155997c91b0d5ba1f1674d390b8deac987a0731ea2ef4d0956ee3f17fa4af53794b58630376db8e600f2b96d27e15d189cad64d064579eb168ae92c2095e3eebe21e290f4f9e5c55a92a0582185390a5caf2", 0xc1) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) chmod(&(0x7f0000000340)='./file0\x00', 0x131) seteuid(r0) minherit(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb9697e553a53dbc2) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x7013, r2, 0x3ff) r4 = fcntl$getown(r2, 0x5) sendto$unix(r3, &(0x7f00000003c0)="2a7641a2d36eed566d2ebe898e8f3d726819c3f07eee7ed21f43fa55a54ef04f767aa80d23f6d8c3d75b460b0007e54484cce4ed9303a00f4c1c88e54476f697d70c82130f7e2797dc4bac02900490bb11d51dbf6d616f78989581165eb83511292872a3f31219d0236a8328e52dbe37287257cb664382a485cf203885107da98d277284bdc07b340fe0f8b5d91e39e161b504d4c389509d087fbd891ef2c126450d4bc333c0d898c7a7f7dc0e27c4ef685858a4c5a7653b6077ddad859e1e92e1158bbc702ce2699d1fa129fb99b66024cf23a86db271cc2ba445c0c2333c81d79febbddfea4d0a0f897a6620ae1672f5", 0xf1, 0x403, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x2}, 0x8) r5 = getgid() ioctl$TIOCSPGRP(r2, 0x40047477, &(0x7f0000000500)) recvmmsg(r2, &(0x7f0000002900)={&(0x7f00000028c0)={&(0x7f0000000540)=@in6, 0xc, &(0x7f0000001840)=[{&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000680)=""/105, 0x69}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/24, 0x18}, {&(0x7f0000001740)=""/201, 0xc9}], 0x6, &(0x7f00000018c0)=""/4096, 0x1000}, 0x4}, 0x10, 0x1000, &(0x7f0000002940)={0xd895, 0x2}) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) r6 = getpid() r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000002980), 0x2, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000029c0)={{0xf0, r0, r5, r0, 0x0, 0x100, 0x6}, 0x7fff, 0x100, r4, r6, 0x7, 0xf7cc, 0x200}) chown(&(0x7f0000002a40)='./file0\x00', r0, 0xffffffffffffffff) r8 = msgget$private(0x0, 0x0) r9 = geteuid() msgctl$IPC_SET(r8, 0x1, &(0x7f0000002a80)={{0x5, r9, r5, r0, r5, 0x2, 0x81}, 0x80000000, 0x1400000000000000, r6, r4, 0xfffffffffffffe01, 0x2, 0x6, 0xfffffffffffffffe}) r10 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000002b00), 0x80, 0x0) ioctl$WSKBDIO_GETENCODINGS(r10, 0xc0105715, &(0x7f0000002b40)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$pf(0xffffffffffffff9c, &(0x7f0000002b80), 0x80, 0x0) ioctl$BIOCSHDRCMPLT(r7, 0x80044275, &(0x7f0000002bc0)=0x9) r11 = shmget$private(0x0, 0xf000, 0x105, &(0x7f0000ff1000/0xf000)=nil) shmctl$IPC_SET(r11, 0x1, &(0x7f0000002c80)={{0x1, r0, 0x0, 0x0, 0x0, 0x11, 0x2}, 0x5, 0x9, r6, r6, 0x8, 0x952, 0x56}) 2.080544792s ago: executing program 3 (id=1118): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async) openat$zero(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket(0x18, 0x2, 0x0) (async) mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x1e5f) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000008, 0x103, 0x80800002, 0x10081b0, 0x10001, 0x10, [{0x0, 0x2893, 0x4, 0x71002}, {0x7fffffff, 0x9, 0x6, 0xfffffff9}, {0x104, 0xf88, 0x3, 0xa}, {0x4, 0x800, 0x0, 0x7}, {0x401, 0x3, 0x2802, 0x7}, {0x21, 0x650, 0x3, 0x99}, {0xce1, 0xfffffffb, 0x4f8, 0x6d}, {0x2, 0x803, 0x14, 0x8}, {0x2, 0x6, 0x5, 0x5}, {0x6a76, 0x8001, 0x6, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x0, 0x1}, {0x29a71716, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x4, 0x65979237}, {0x4, 0x1, 0xfff, 0x2}]}) (async) r0 = open(&(0x7f00000004c0)='./file0\x00', 0x8000, 0x1e6) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x7, 0x0}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async, rerun: 32) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) pwrite(r2, &(0x7f00000000c0)="a7", 0x1, 0x40007) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0xffffffffffffffbc, 0x6, 0x8, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x3, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xbd, 0x0, 0x1}}}}}}}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) 2.080109119s ago: executing program 5 (id=1119): open(&(0x7f0000000000)='./file0\x00', 0x1, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x6b, 0x11, 0x200000000000001}], 0x203, 0x0, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r1 = semget$private(0x0, 0x4, 0x100) semop(r1, &(0x7f00000001c0)=[{0x3, 0x8, 0x1000}, {0x1, 0xb7}, {0x2, 0x8, 0x800}, {0x3, 0x6}, {0x1, 0x9}], 0x5) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000300)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0xe9) select(0x40, &(0x7f0000000300)={0x7, 0x5, 0x2, 0xbf, 0xa, 0x10000, 0x9, 0x101}, &(0x7f0000000340)={0x1, 0x4000000000000000, 0x2, 0x5, 0x8, 0x7c, 0x30886671, 0x3485}, &(0x7f0000000380)={0x9, 0x2, 0xffff, 0x5, 0x2, 0x5, 0xb682, 0xded}, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x4e}, 0x2, &(0x7f00000009c0)="4ab6bc4f07a71af7f6a13cd58a34090f6fc39238acbdf3eae5c831a36cf0da5b6816adcb57bcc6f63603d533a201bbf40cc574b27d5a416ad96588cf66270da9d079a29003171353208309090083ad3a1c36bd464d5c17fff39a27441da9706c9a9af9876710af858cb42bde16f4d277484fa104e76106103d19499ecd2b1baf334efc4994e55ae9d19dccb3bfcf0248338ba112251050565357c7d2b1ce6d05414d12c1731f08630bc443b8518a05ed59a13f8fb08f77b321de05e9abd826108aefde03e213f36ad9515f1aa89c098c6bc583594d99bfa380960121cb070f9dea1f4441be9fa50c7383416a9e60fbea80347a48b721b95c6d266561e1caf747637008b9cfded212c05eb10bab83868cc1ce6a4097e8f9d374006f14ae916d6cdde3fa1ec6d7f385a69b7dc4839e4191d73805040cfdb4610eab6d6a5a7ba797c2762b1e12887e56432d04924f59d7fe7cd012c74adcd152a095a7c641a694f42656cf5b139e819e9a32265b68bf36e3655728c710776f23f6a8cb197b1d5baf55f04ed304d0464b0ff6212bf2235bf6af3dc456df4b1c3ace94a997ea1b1bb6cca978bf38508892c2407fbede51fc12783bfca367b1e27917e2d414ce7d8b8e11b7516250d84e132883522f83b9108c9e69e5b2fcc68bd7fe824d25d0b550977b5d8fc4044d0a45755efd035bee7ba0c519ba09e1de80a701d43c13fe0bdf02f716b4fe763807b3", &(0x7f0000000180)=0x208, &(0x7f0000000240)="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", 0x267) sysctl$net_inet_tcp(&(0x7f0000000200)={0x4, 0x2, 0x6, 0x10}, 0x4, 0x0, 0x0, &(0x7f0000000480), 0x0) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x2c, &(0x7f00000000c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x2000, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}, {"8926"}}}}}}) ioctl$VNDIOCCLR(r2, 0x80384601, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', 0x75e7a547, &(0x7f00000000c0)='./file0\x00', 0x8}) 1.862238132s ago: executing program 1 (id=1120): sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0xa}, 0x4, 0x0, 0x0, &(0x7f0000000000), 0x0) 544.149104ms ago: executing program 4 (id=1121): sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r0 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaa2aa08004806003400640003069d9078ffffffffffffffff070b1eac1400aa7f000001000e009078000b0008000003fc0000000100000009"]) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = socket(0x18, 0x3, 0x3) ioctl$FIONREAD(r2, 0x8020699f, &(0x7f00000001c0)) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) 543.782673ms ago: executing program 2 (id=1122): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x8, 0x42, 0x8}, {0x20, 0xf, 0xff, 0x100007}, {0x6, 0x0, 0x8, 0xfffffffe}]}) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) fcntl$getflags(r1, 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000340)="50041b02003e807447ff000800000000009586b272f7dedb1f0000003c7c3087de4ada9a933366b344db8e13", &(0x7f0000000000)=0x2c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) r2 = kqueue() r3 = kqueue() kevent(r3, 0x0, 0x56, 0x0, 0x7fff, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="db18667c7ead4fb4879ecefe5d86a0626d2eff34a8df34faa2b9f0561e826811bbd9135e425f9f9ed677a563d3a4ccc9a55f9d253efae30f3fc88a2ac901a4ee7aa8c2e9c187a7b608489af2ef33266f3431e4318f41506bbc1b72c46837946bf03601738bda2f2b904843133b4a85c4bf3c83548164666aa300645e57822b05114af6e6fdc84539083ec74932fff09f50945674f2a90fd80ddabe8f0f7afa23fabd38b4f92fd26f6a5bc495492fdb7d01cf967fd2a1ad58e9", 0xb9) close(r2) write(r0, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x10004) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) ioctl$FIOASYNC(r5, 0xc00c7007, &(0x7f00000000c0)) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="bf", 0x1}, {&(0x7f0000000800)="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", 0x13b}, {&(0x7f00000001c0)="062bae13407c52042e62eb6d5297ff69d904f0698442ba3993376dd6806a2c411c98edb65566ed23951cdcb7dc5459ba6f838a564d13209dec66ecaa3c6c7efea869fdd25ccd61ad399b0844172f4d249d7dbccccd72", 0x56}], 0x3) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000000)="e29002", 0x3}], 0x1) 425.762849ms ago: executing program 0 (id=1123): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x20, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a4f47e2d66ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000000018000021fd34b3776665d4cd12c63d34", 0x31}], 0x100000000000008b, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2, 0x1, 0xfd) r4 = dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x1) r6 = dup(r5) r7 = dup2(r4, r6) recvmmsg(r7, &(0x7f00000003c0)={0x0, 0x4}, 0x10, 0x3, 0x0) getsockopt(r2, 0xffff, 0x2, &(0x7f0000000b40)=""/167, &(0x7f0000000c00)=0xa7) ioctl$TIOCSETA(r1, 0xc4504449, &(0x7f0000000740)={0x3, 0x23e5, 0x0, 0xfffffffe, "970000000000000000000000002000", 0x6, 0x4bd3}) r8 = syz_open_pts() close(r8) r9 = syz_open_pts() mknod(&(0x7f00000000c0)='./bus\x00', 0x2, 0xd02) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') ioctl$TIOCSETAF(r9, 0x802c7416, &(0x7f0000000180)={0x9, 0x4, 0xf7fffbfc, 0x5, "c808000100f167d9105871000000000000000080", 0x1, 0x4000002}) writev(r8, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) r10 = socket(0x10, 0x5, 0x0) setsockopt(r10, 0xf5, 0x57, 0x0, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x8004667d, &(0x7f0000000000)={0x0, 0x4b}) r11 = kqueue() fcntl$setown(r11, 0x6, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 424.967094ms ago: executing program 7 (id=1124): r0 = socket(0x2, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) close(r1) r2 = socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) (async) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f0000000000)='v', 0x1) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) (async) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) close(r0) (async) close(r0) r4 = socket(0x2, 0x3, 0x0) close(r4) (async) close(r4) socket(0x18, 0x3, 0x3a) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x7}) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x7}) syz_open_pts() r5 = socket(0x18, 0x3, 0x0) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r5, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) (async) getsockname$inet(r5, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff}], 0x2) sendto$unix(r4, &(0x7f0000000140)="c3127fb42556bdf7960a227821dfe2e97b67a9ce0d8f2ed17053c84a9deecd07d82b09b103da1d58c0104887352bd87427a72ea7c3088321cbcd476a5527df0ce7bf7a3dbbb5ba4c281eae65e5bf6d4ddd61589c03b8b43fba6ccb7364408be0f3000bd4756019636c90d9274232aeca2a320a878378829d824575a818d4a3d80f2d501355dfc27b34f2bb081c16a88e1f995ade06882ee2fbb197d2c16f578c8d87b3d6", 0xa4, 0x1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) write(r0, &(0x7f0000001680)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0x1001c) 423.936193ms ago: executing program 6 (id=1125): syz_emit_ethernet(0x4c6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) (async, rerun: 32) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) (async, rerun: 32) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) r1 = socket(0x18, 0x3, 0x0) setsockopt(r1, 0x1000000029, 0x1a, &(0x7f00000000c0), 0x0) ioctl$TIOCSETA(r0, 0xc4504446, &(0x7f0000000740)={0x8, 0x4, 0x2, 0x4, "a3ae02c1000000000002000ffb7dd5a80b546600", 0x28, 0x4042}) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @random="5fbb8af09d48", [], {@ipv6={0x86dd, {0x6, 0x6, "e22945", 0x14, 0x33, 0x8, @local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="fe00000000ebffffffffffffff00", {[], @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x4, 0x0, 0x4}}}}}}}) 211.048999ms ago: executing program 6 (id=1126): setrlimit(0x8, &(0x7f0000000340)={0x9, 0x4000000000054}) sysctl$vfs_ffs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x4, &(0x7f0000000180)={0x8, 0x2055}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="ed", 0x1) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/187, 0xbb}], 0x1, 0x0}}, 0x10, 0x2040, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)) openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x2b) sysctl$hw(0x0, 0x0, &(0x7f0000000340)="50041b02003e807447ff000800000000000000000f000000000000003c7c3087de4ada9a933366b344db9d5fea3d710990a98e13b1e268a10337d31196968e11d0af3a0180bb310a87b44468c6354a519370cffd", &(0x7f0000000000)=0x54, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) readv(r1, &(0x7f0000000380)=[{0x0}], 0x1) close(r0) setrlimit(0x3, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x80, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x138, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r4) socket(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_pts() syz_open_pts() ioctl$TIOCSETAW(r5, 0x802c7415, 0x0) socket(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 210.615206ms ago: executing program 3 (id=1127): syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2"]) r0 = socket(0x18, 0x2, 0x0) close(r0) mknod(&(0x7f0000000140)='./bus\x00', 0x2000, 0x6d4) open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$FIOASYNC(r1, 0x80047466, &(0x7f0000000200)=0x5) ioctl$TIOCSBRK(r2, 0x2000747b) select(0x40, &(0x7f0000000300)={0x7, 0x7, 0x2, 0xc0, 0xa, 0x10000, 0x9, 0x101}, 0x0, &(0x7f0000000380)={0x5d4b, 0x2, 0xffff, 0x5, 0x5, 0x2, 0xb682, 0xded}, 0x0) r3 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0xa) setrlimit(0x8, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) fcntl$dupfd(r4, 0xa, r4) mknod(0x0, 0x6000, 0x9) mknod(0x0, 0x1ffa, 0x0) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c397, 0xffffffffffffffff) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r4, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='r\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) 209.631057ms ago: executing program 0 (id=1128): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x2, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x9, 0x80000000}) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f0000000200)={0x10, 0x5, [{&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x100000000}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x80000000}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x80000000}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x2}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x3ff}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x100000000000}, {&(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1000}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fee000/0x12000)=nil, 0xfffffffffffffffc}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3}, {&(0x7f0000fef000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3d}, {&(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x5}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, 0x4}, {&(0x7f0000fee000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x9}], './file0\x00', 0x3}) getsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x8) (async) getsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x8) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @rand_addr=0x2}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x49, 0x0) (async) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x49, 0x0) 2.300867ms ago: executing program 7 (id=1129): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) sysctl$net_inet_ah(&(0x7f0000000000)={0x4, 0x2, 0x4, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000d, 0x38) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r1, 0x1}) r2 = shmget$private(0x0, 0x3000, 0x602, &(0x7f0000ffa000/0x3000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x2000) dup2(r1, r1) shmctl$IPC_RMID(r2, 0x0) 0s ago: executing program 1 (id=1130): r0 = socket(0x800000018, 0x2, 0xbc) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000006c0)={0x0, 0xfffffff8, 0xffff, 0xff7ffff8, "ffff0d000300ef010155000000ff00", 0x7, 0x8}) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)="32b1deb509f7481f435c67df4f930c148e92b8aa4e59e86b3eee2195d81ba19b2af590dc7fb9c105ac69f95b328015b349c22ea5d63bbe9c2629579ae869f391d7edb2c4b98f6041115f4d5707e107ad51613a0b5ccf44833f57b28c96b8fed123638bffe6c4ee6316d0a68a2efea55dcf8e9b4b120aedcc", 0x78}], 0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000000)=""/201, 0xc9}], 0x1) setsockopt$sock_int(r0, 0xffff, 0x1000, 0x0, 0x0) ioctl$WSKBDIO_SETBELL(0xffffffffffffffff, 0x80105703, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x3}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error WARNING: thread `nfsio' (489465) exits with status -1 WARNING: thread `nfsio' (521258) exits with status -1 WARNING: thread `nfsio' (429310) exits with status -1 WARNING: thread `nfsio' (125123) exits with status -1 WARNING: thread `nfsio' (185576) exits with status -1 WARNING: thread `nfsio' (511922) exits with status -1 WARNING: thread `nfsio' (159646) exits with status -1 WARNING: thread `nfsio' (251428) exits with status -1 WARNING: thread `nfsio' (32359) exits with status -1 WARNING: thread `nfsio' (69644) exits with status -1 WARNING: thread `nfsio' (15446) exits with status -1 WARNING: thread `nfsio' (8336) exits with status -1 WARNING: thread `nfsio' (131791) exits with status -1 WARNING: thread `nfsio' (268828) exits with status -1 WARNING: thread `nfsio' (500604) exits with status -1 WARNING: thread `nfsio' (517962) exits with status -1 WARNING: thread `nfsio' (471818) exits with status -1 WARNING: thread `nfsio' (53793) exits with status -1 WARNING: thread `nfsio' (447597) exits with status -1 WARNING: thread `nfsio' (145005) exits with status -1 pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 127, size = 1073510800 pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-multicore-5.us-central1-b.c.syzkaller.internal) (tty00) login: pckbd_enable: command error WARNING: thread `nfsio' (200584) exits with status -1 WARNING: thread `nfsio' (18589) exits with status -1 WARNING: thread `nfsio' (81096) exits with status -1 WARNING: thread `nfsio' (192887) exits with status -1 pckbd_enable: command error denied attempt to set clock forward to 7885088468817503279 pckbd_enable: command error vm_create: uvm_map failed: 12 ¹j¼õ¬|ÿ ž¨E1\…: e kernel: page fault trap, code=2 Stopped at sys_shmat+0xe0: movl $0xffffffffffffffff,0(%r14) TID PID UID PRFLAGS PFLAGS CPU COMMAND *147873 19292 0 0 0x4000000 0K syz-executor sys_shmat(ffff8000ffff2548,ffff80003c44fc00,ffff80003c44fb50) at sys_shmat+0xe0 syscall(ffff80003c44fc00) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xab573a7a820, count: 12 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: uvm_fault(0xffffffff838cddc0, 0xffff800001566000, 0, 2) -> e ddb{0}> trace sys_shmat(ffff8000ffff2548,ffff80003c44fc00,ffff80003c44fb50) at sys_shmat+0xe0 syscall(ffff80003c44fc00) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xab573a7a820, count: -3 ddb{0}> show registers rdi 0xffff8000333e6000 rsi 0xdf78 __ALIGN_SIZE+0xcf78 rbp 0xffff80003c44fb20 rbx 0xffff80003c44fc00 rdx 0xffff8000333e6000 rcx 0xdf77 __ALIGN_SIZE+0xcf77 rax 0xffffffff82c7c082 sys_shmat+0xf2 r8 0xffffffffffffffff r9 0 r10 0xfb7c6a286084d61a r11 0x2e835a1769e85140 r12 0xffff8000ffff2548 r13 0xffff800001488000 r14 0xffff800001566000 r15 0xde00 __ALIGN_SIZE+0xce00 rip 0xffffffff82c7c070 sys_shmat+0xe0 cs 0x8 rflags 0x10216 __ALIGN_SIZE+0xf216 rsp 0xffff80003c44fa90 ss 0x10 sys_shmat+0xe0: movl $0xffffffffffffffff,0(%r14) ddb{0}> show proc PROC (syz-executor) tid=147873 pid=19292 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=85, usrpri=85, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffff3770,0xffff8000ffff22c0 process=0xffff80003c41c030 user=0xffff80003c44a000, vmspace=0xfffffd806e2e2400 estcpu=35, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 90898 147060 17048 0 2 0 syz-executor 90898 328691 17048 0 3 0x4000080 fsleep syz-executor 20474 143222 86082 0 2 0 syz-executor 20474 46327 86082 0 2 0x4000000 syz-executor 32781 421176 59298 0 2 0 syz-executor 19292 291836 5140 0 2 0 syz-executor 19292 170383 5140 0 2 0x4000000 syz-executor *19292 147873 5140 0 7 0x4000000 syz-executor 19292 359187 5140 0 3 0x4000080 fsleep syz-executor 43629 23378 98248 0 2 0 syz-executor 43629 442430 98248 0 3 0x4000080 fsleep syz-executor 43629 281242 98248 0 3 0x4000080 fsleep syz-executor 43629 24225 98248 0 3 0x4000080 fsleep syz-executor 5245 303255 71558 0 2 0 syz-executor 5245 99604 71558 0 2 0x4000000 syz-executor 5245 38966 71558 0 2 0x4000000 syz-executor 90759 404834 1 0 3 0x100083 ttyin getty 71558 505671 30179 0 3 0x82 nanoslp syz-executor 5140 2619 30179 0 2 0x3 syz-executor 98248 446744 30179 0 2 0x3 syz-executor 59298 394153 30179 0 3 0x82 nanoslp syz-executor 88142 348515 30179 0 2 0x2 syz-executor 86082 330646 30179 0 3 0x82 nanoslp syz-executor 17048 404824 30179 0 3 0x82 nanoslp syz-executor 32132 317407 30179 0 2 0x3 syz-executor 30179 296533 67687 0 3 0x82 kqread syz-executor 67687 205176 54967 0 3 0x10008a sigsusp ksh 54967 123657 76162 0 3 0x98 kqread sshd-session 76162 397226 96306 0 3 0x92 kqread sshd-session 96306 456110 1 0 3 0x88 kqread sshd 11660 266175 77885 74 3 0x1100092 bpf pflogd 77885 414954 1 0 3 0x80 sbwait pflogd 91627 271169 72914 73 3 0x1100090 kqread syslogd 72914 185190 1 0 3 0x100082 sbwait syslogd 15332 197552 1 0 3 0x100080 kqread resolvd 49583 155836 79123 77 3 0x100092 kqread dhcpleased 61144 69326 79123 77 3 0x100092 kqread dhcpleased 79123 319310 1 0 3 0x80 kqread dhcpleased 38835 312960 0 0 3 0x14200 bored smr 20941 331540 0 0 2 0x14200 zerothread 81624 399952 0 0 3 0x14200 aiodoned aiodoned 84600 169501 0 0 3 0x14200 syncer update 4587 400150 0 0 3 0x14200 cleaner cleaner 79096 405263 0 0 3 0x14200 reaper reaper 1669 152532 0 0 3 0x14200 pgdaemon pagedaemon 93135 469543 0 0 3 0x14200 bored viomb 71608 2800 0 0 3 0x40014200 acpi0 acpi0 22837 454049 0 0 7 0x40014200 idle1 51921 472785 0 0 3 0x14200 bored softnet1 57073 398619 0 0 3 0x14200 bored softnet0 73897 517050 0 0 3 0x14200 bored systqmp 16348 330334 0 0 3 0x14200 bored systq 14640 86807 0 0 3 0x14200 tmoslp softclockmp 33917 310292 0 0 3 0x40014200 tmoslp softclock 28186 436688 0 0 3 0x40014200 idle0 1 230038 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{0}> show all locks Process 20474 (syz-executor) thread 0xffff80003c00d248 (46327) Process 19292 (syz-executor) thread 0xffff8000ffff2548 (147873) Process 5245 (syz-executor) thread 0xffff8000ffffc538 (99604) Process 88142 (syz-executor) thread 0xffff8000ffffd760 (348515) ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10234 11037K 11369K 166960K 13276 0 pcb 17 15K 17K 166960K 491 0 rtable 266 13K 13K 166960K 559 0 pf 40 19K 81K 166960K 156 0 ifaddr 44 8K 8K 166960K 96 0 ifgroup 55 2K 2K 166960K 159 0 sysctl 3 1K 9K 166960K 16 0 counters 70 37K 38K 166960K 318 0 ioctlops 0 0K 4K 166960K 1838 0 iov 0 0K 20K 166960K 112 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1400 88K 89K 166960K 2518 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 6K 6K 166960K 21 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 1K 166960K 46 0 dirhash 51 9K 11K 166960K 246 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 102K 166960K 1283 0 sigio 0 0K 0K 166960K 33 0 proc 74 115K 164K 166960K 717 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 210 0 in_multi 99 7K 7K 166960K 159 0 ether_multi 1 0K 0K 166960K 10 0 mrt 2 0K 0K 166960K 12 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 265 1182K 1182K 166960K 265 0 exec 0 0K 1K 166960K 749 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 4 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 245 151K 166K 166960K 14316 0 UVM aobj 33 14K 14K 166960K 39 0 pinsyscall 43 86K 101K 166960K 2477 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 113 0 NDP 12 0K 2K 166960K 68 0 temp 68 8677K 8752K 166960K 65559 0 kqueue 13 20K 31K 166960K 231 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 257 0 254 5 4 1 5 0 8 0 rtentry 176 161 0 52 6 0 6 6 0 8 0 unpcb 144 1029 0 1011 15 14 1 6 0 8 0 syncache 336 6 0 6 4 3 1 1 0 8 1 tcpqe 32 3 0 3 2 1 1 1 0 8 1 tcpcb 736 310 0 304 3 2 1 2 0 8 0 arp 136 28 0 7 1 0 1 1 0 8 0 ipq 40 3 0 3 3 2 1 1 0 8 1 ipqe 40 9 0 9 3 2 1 1 0 8 1 inpcb 328 1732 0 1721 35 31 4 15 0 8 2 nd6 152 30 0 3 2 0 2 2 0 8 0 pkpcb 40 9 0 9 5 5 0 1 0 8 0 kcovpl 48 9 0 1 1 0 1 1 0 8 0 ppxss 1192 115 0 115 3 2 1 1 0 8 1 pppxif 1504 3 0 3 1 1 0 1 0 8 0 pfstscr 40 3 0 2 1 0 1 1 0 8 0 pffrag 232 12 0 5 1 0 1 1 0 482 0 pffrnode 88 11 0 5 1 0 1 1 0 8 0 pffrent 40 33 0 26 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 3 0 2 2 1 1 1 0 8 0 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 pfanchor: pool(0xffffffff838ea818:pfanchor): page inconsistency: page 0xffff8000ffffffff; at page head addr 0xffff80000150bf90 (p 0xffff800001508000) uvm_fault(0xfffffd806e2e2400, 0x10000004f, 0, 1) -> e kernel: page fault trap, code=0 Faulted in DDB; continuing... ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace sys_shmat(ffff8000ffff2548,ffff80003c44fc00,ffff80003c44fb50) at sys_shmat+0xe0 syscall(ffff80003c44fc00) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xab573a7a820, count: -3 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 acpicpu_idle() at acpicpu_idle+0x457 sched_idle(ffff8000299edff0) at sched_idle+0x391 end trace frame: 0x0, count: 10 ddb{1}> trace x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 acpicpu_idle() at acpicpu_idle+0x457 sched_idle(ffff8000299edff0) at sched_idle+0x391 end trace frame: 0x0, count: -5