last executing test programs: 6.999076245s ago: executing program 1 (id=2): setsid() preadv(0xffffffffffffffff, 0x0, 0xbc4824eb0d320e68, 0x7) r0 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) r1 = syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000080)=0x8) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000040)=0x4) r2 = syz_open_pts() ioctl$TIOCSCTTY(r2, 0x20007461) ioctl$TIOCSTAT(r2, 0x20007465) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x1) 1.08195296s ago: executing program 1 (id=194): r0 = socket(0x2, 0x4001, 0x0) (async) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x11, 0x0, 0x26}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x22}, 0x4, 0x0, 0x0, &(0x7f0000002d00), 0x0) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3, 0xfffffbff}, 0x10) 989.198215ms ago: executing program 1 (id=197): mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x285b9c) r0 = open(&(0x7f0000000080)='./file1\x00', 0x10030, 0x100) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) open$dir(&(0x7f0000000140)='./bus\x00', 0x20, 0x1ae44c217401e030) open(&(0x7f00000000c0)='./file1\x00', 0x40040, 0x20) socket(0x18, 0x2, 0x0) r1 = openat(r0, &(0x7f0000000200)='./file0\x00', 0x40000, 0x100) sendto$inet6(r1, 0x0, 0x0, 0x400, &(0x7f00000001c0)={0x1c, 0x18, 0x3, 0x804, "52ebf85173e75ead79ceb2f0b05fe5dc", 0x4}, 0x1c) readv(r0, &(0x7f00000029c0)=[{&(0x7f0000000300)=""/71, 0x47}], 0x1) 965.961086ms ago: executing program 7 (id=202): utimensat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$DIOCRGETTSTATS(0xffffffffffffffff, 0xc4504440, &(0x7f0000000700)={{'./file0\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x28, 0x8}, 0x0, 0x4d0, 0x0, 0x7, 0xb60, 0x7, 0x400, 0x0, 0xf}) ioctl$TIOCSETA(0xffffffffffffffff, 0xc450444d, &(0x7f0000000740)={0x0, 0x1, 0xfffffffd, 0x3, "97a2224ff1c14649ebb17a926cc9795a6b47c1d1", 0x8, 0x5}) r0 = open(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x615, 0xb6) setitimer(0xd65e6ae8a6fa0354, &(0x7f0000000140)={{0x80007774, 0x100900000000009}, {0x7fffffff, 0x100007fff}}, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xc011, 0xffffffffffffffff, 0x0) r1 = socket(0x18, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) sysctl$vm(&(0x7f0000000000)={0x2, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x3, 0xff) symlink(&(0x7f0000000200)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0\x00') open$dir(&(0x7f0000000940)='./file0\x00', 0x10208, 0x191) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x0, 0xac1400ff}, 0x10) sendto(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in={0x10, 0x2, 0x3}, 0x10) r3 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r3, 0xc0106477, &(0x7f0000000000)={&(0x7f0000000140)='./file0\x00', r3, 0x1}) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="64e1629b6174d08850c78fe609e9600d2e0b"]) execve(0x0, 0x0, 0x0) r4 = socket(0x18, 0x3, 0x40) r5 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) getpeername(r0, &(0x7f0000000000)=@in6, &(0x7f0000000040)=0x1c) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0x0) ioctl$FIONREAD(r4, 0x81206919, &(0x7f0000000100)) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x11}, 0x4, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x3, 0x0, 0x0, 0x2}, 0x8) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 806.38504ms ago: executing program 3 (id=214): r0 = socket(0x24, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, 0x0, './file0\x00'}, 0xa) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x0, 0xac14007f}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) listen(r0, 0x9) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x2, 0x3}, 0x10) 747.514499ms ago: executing program 3 (id=221): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0) r2 = socket(0x1e, 0x3, 0x0) shutdown(r2, 0x2) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b100050160000000170000000700000004f9fffecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c5004a6aef50de1f9100008abfdb09000000ec1d89e000040781e40500010000000600000900000000000000", 0xb1, 0x4, 0x0, 0x0) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6036d2b500383af9fe8000000000000000000000670277e5fefe9fb10000000000000000000000aac8"]) ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105728, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x2, 0xa}, {0x3, 0x3}, {0x6, 0x7}], 0x3}) kevent(0xffffffffffffffff, &(0x7f0000000400)=[{{r1}, 0xfffffffffffffff6, 0xa0, 0x4, 0xfffffffffffffffc, 0x6}, {{r3}, 0xfffffffffffffffc, 0x24, 0x4, 0x2, 0x2000000000000bc6}, {{r2}, 0xfffffffffffffffd, 0x10, 0x10, 0x9, 0xbcd}, {{r0}, 0xfffffffffffffff9, 0x20, 0x4, 0x2, 0x8000}, {{r0}, 0x0, 0x8a, 0x40, 0x2, 0x8001}, {{r0}, 0xffffffffffffffff, 0x65, 0x4, 0x3, 0x3}], 0x0, &(0x7f00000004c0)=[{{r0}, 0xfffffffffffffffa, 0x10, 0x80, 0x7, 0x8}, {{r0}, 0xfffffffffffffffa, 0x18, 0x80, 0xcd4c, 0x4}], 0xfffffffc, &(0x7f0000000500)={0x2, 0x4}) ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f00000000c0)=0x34) pread(r0, &(0x7f0000000600)="e7077b6629e0397383eaeac9193e79db7bbbad786e7bbb921dff532158d0b49a3e7de9f2d8fdefa9e6fddc16bcd369b9fc28dc5e", 0x34, 0x5) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x10004) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x8, 0x48) select(0x40, &(0x7f0000000000)={0x400, 0x4, 0xb72, 0x3480000000000000, 0x5, 0x68, 0xb, 0x6}, &(0x7f0000000040)={0x9, 0xe, 0xffff, 0x200, 0xffffffff, 0x6, 0x7, 0x3}, &(0x7f0000000100)={0x7, 0xc, 0xf, 0x1, 0x4, 0x3, 0x9, 0xebd4}, &(0x7f0000000380)={0x5, 0x3}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 672.411608ms ago: executing program 3 (id=227): r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) kqueue() ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x2, 0xc1, 0x0, 0x9}, {0xffff, 0x9, 0x2, 0x11e}]}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffe, 0x6, 0x2, 0x100200000, 0x200100000004, 0x81, 0xa77, 0xffffffffffffffff, 0x7, 0x3, 0x2, 0x9, 0x3, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0x8, 0x1, 0x4, 0x2, 0x5e, 0x100000000007b98, 0x800, 0x6, 0x2, 0x7fffffffffffffff], [0x20000fffffffe, 0x8000, 0x40000000, 0x6, 0xb, 0x11001, 0x128], [0xc, 0x800001fffffffffb, 0x80000005, 0x4000002, 0xbffffffffffffffa, 0x90000000], [{0x20, 0x10410000, 0x4, 0x7d06}, {0x402, 0x1e, 0x5, 0x20000000000004}, {0xd, 0x0, 0xfffefffb, 0x280}, {0xb, 0x80004, 0x5, 0xffffffffffffffff}, {0x2, 0x2, 0x4, 0xc}, {0x3, 0x2000009, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0xb}, {0xa, 0x104, 0x1, 0x3}], {0x1, 0x8, 0x80000006, 0x3}, {0x4, 0x16, 0x6d1, 0x6}}}) r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x96, &(0x7f00000003c0), 0xfffa4961, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r2, 0xcd604404, &(0x7f00000001c0)={0x1, 0x2, 0x7, 0x2f, "201800", 0xfffffff9, 0x40000002}) 664.884524ms ago: executing program 7 (id=228): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) (async, rerun: 64) syz_emit_ethernet(0xaa, &(0x7f0000000000)={@random="ebdd3b5eb18b", @random="732369119530", [], {@ipv4={0x800, {{0x19, 0x4, 0x2, 0x8, 0x9c, 0x68, 0x8, 0xbd, 0x50, 0x0, @empty, @loopback, {[@generic={0x7, 0xf, "a83b360c83c043ed10c9313efa"}, @lsrr={0x83, 0x1b, 0x1, [@rand_addr=0x5, @loopback, @rand_addr=0xb70, @broadcast, @loopback, @remote={0xac, 0x14, 0x0}]}, @noop, @noop, @timestamp={0x44, 0x14, 0x2, 0x1, 0x7, [{[@remote={0xac, 0x14, 0x0}], 0x40}, {[], 0x9}, {[], 0x70d8}]}, @ra={0x94, 0x4, 0xcd}, @rr={0x7, 0xb, 0x77, [@empty, @loopback]}]}}, @generic="f048090b9f2eec846af2d1d4bbe680ffccf2f032593f597372544ab134b459bd3166e9e907fe9d3bd99b006318c0e37e6f1e8da20387988d"}}}}) (rerun: 64) mlock(&(0x7f00002d0000/0x3000)=nil, 0x3000) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (rerun: 32) 633.227058ms ago: executing program 0 (id=230): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fb, 0x1080, 0x3, 0xfe, 0x4, 0x5, 0x45, 0x10, [{0x3, 0x2, 0x8a, 0x71800}, {0x2, 0xb7fa, 0x8e}, {0x80100006, 0x401, 0x208, 0x200}, {0x4, 0x80ff, 0x200, 0xfffffffb}, {0x10000, 0x3, 0x80000201, 0x7d}, {0x2, 0x7f, 0x14000007, 0x4000f}, {0x8, 0xbffffff9, 0x5, 0x6d}, {0x24002, 0x1, 0xfdf0, 0x4}, {0x0, 0x2, 0x9, 0xc08}, {0x401, 0xfffffffd, 0x8001, 0x4}, {0x800a44f, 0xfff9, 0x166, 0x13}, {0x8, 0x7fff, 0x9, 0xb}, {0x2000df, 0x29, 0x5, 0x3ff}, {0x8, 0xfffffffc, 0x100, 0xffffffbb}, {0xb3, 0x3, 0x26, 0x3}, {0xfffffffd, 0x9975, 0x3, 0x3}]}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) pipe(0x0) (async) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async) r1 = socket$inet6(0x18, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x5, "000000005e0cd2e4f75865590f00", 0x7}, 0x11) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x100) (async) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) (async) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='c\x00') unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') open(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000, 0xbc) (async) setitimer(0x1, &(0x7f0000000140)={{0x80007ff5, 0x100900000000009}, {0xdffffffffffffdfe, 0x8001}}, 0x0) (async, rerun: 32) r2 = socket(0x18, 0x3, 0x0) (async, rerun: 32) r3 = socket(0x18, 0x3, 0x40) ioctl$FIONREAD(r3, 0x81206919, &(0x7f0000000100)) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) 631.117917ms ago: executing program 7 (id=232): kqueue1(0x8) getentropy(&(0x7f0000000180)=""/158, 0x9e) r0 = socket(0x1, 0x2, 0x0) flock(r0, 0x3) r1 = socket$inet(0x2, 0x3, 0xfc) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffb403388398"]) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000000)) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TIOCSETA(r2, 0xc0404469, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x801, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008\x00', 0x2, 0x9}) r3 = socket$inet(0x2, 0x4002, 0x0) getsockopt$sock_timeval(0xffffffffffffff9c, 0xffff, 0x1005, &(0x7f0000000000), &(0x7f0000000340)=0x10) getentropy(&(0x7f00000007c0)=""/118, 0x76) mknod(&(0x7f0000001780)='./file1\x00', 0x2000, 0x58fc) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000780)={0x3, &(0x7f0000000580)=[{0xfff8, 0x62, 0x1, 0xa2}, {0xbe74, 0x7, 0x8, 0xe391}, {0x400, 0x24, 0x8, 0x4}]}) open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d372586474f1) setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f00000000c0)="89144c0129ea94f77ea66ed006e3bc58e261c99a", 0x14) r5 = socket(0x2, 0x8002, 0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) semget(0x2, 0x4, 0x608) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x200000000000c, &(0x7f0000000240), 0x0) getentropy(&(0x7f0000000240)=""/226, 0xe2) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) closefrom(r6) mknod(&(0x7f0000000100)='./file0/../file0\x00', 0x2000, 0xffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[]) r8 = open(&(0x7f0000000080)='./file0\x00', 0x8, 0x10) ioctl$FIONBIO(r8, 0x82907003, &(0x7f0000000040)=0xb2bb) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000380)=""/193, 0xc1}, {&(0x7f0000000480)=""/158, 0x9e}, {&(0x7f0000000700)=""/99, 0x63}, {&(0x7f00000005c0)=""/247, 0xf7}, {&(0x7f00000006c0)=""/59, 0x3b}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x6, 0xc3d) 561.337698ms ago: executing program 0 (id=234): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x42) (async) r1 = geteuid() stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000040)='./file0\x00', r1, r2, 0x0) (async) mknod(&(0x7f0000000140)='./file0\x00', 0x100, 0x6) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xe010, r0, 0x3) (async, rerun: 32) r3 = openat$dri(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x8000, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffff9c, 0xc00864c0, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r3, 0xc01864c1, &(0x7f0000000200)={r4, 0x3, 0xffffffffffffffff, 0x0, 0x4}) r6 = semget$private(0x0, 0x1, 0x10) (async) getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0xc) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000280)={{r7, r2, r1, r2, 0x40, 0xb6e, 0x0, 0x0, 0x1}, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x0, 0xfff}) (async) setgroups(0x3, &(0x7f0000000300)=[r8, r8, r8]) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') (async, rerun: 64) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f00000003c0)={0x0, 0x9, 0x80000000, 0x32334752, 0x2, [0x0, 0x0, 0x0], [0x7, 0x9, 0x1, 0x76], [0x6, 0x1, 0x10, 0x7], [0x6, 0x2, 0x100000000, 0xf5]}) (rerun: 64) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000440)={0x1, 0x4085, 0x4, 0x0, 0x7ff, 0x2, r9}) (async, rerun: 64) fchownat(r5, &(0x7f0000000480)='./file0/file0\x00', r1, r8, 0x4) (async, rerun: 64) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x2000641e) (async, rerun: 64) mkdirat(r5, &(0x7f00000004c0)='./file0\x00', 0x44) (rerun: 64) ioctl$DIOCIGETIFACES(r5, 0xc0284457, &(0x7f0000000540)={'./file0/file0\x00', &(0x7f0000000500)=""/21, 0x4, 0x0, 0x91, 0x6}) (async) socket$inet(0x2, 0x8000, 0x8) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000580)={0x2, 0x7, 0xf, 0x3, 0x0, 0x3, r9}) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000600)={&(0x7f00000005c0)=[0x510f, 0xc, 0xb, 0x10001], 0x4, 0x10004}) (async) mkdir(&(0x7f0000000640)='./file0\x00', 0x66) (async) write$audio(r5, &(0x7f0000000680)="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", 0xfe) (async) accept$unix(r5, &(0x7f0000000780)=@abs, &(0x7f00000007c0)=0x8) (async) ktrace(&(0x7f0000000800)='./file0/file0\x00', 0x4, 0x10, 0x0) (async, rerun: 32) ioctl$DIOCRDELTABLES(r5, 0xc450443e, &(0x7f00000014c0)={{'./file0/file0\x00', './file0/file0\x00', 0x0, 0x8}, &(0x7f0000000840)=[{'./file0\x00', './file0/file0\x00', 0x1, 0xd}, {'./file0/file0\x00', './file0/file1\x00', 0x20, 0x40}, {'./file0/file0\x00', './file0/file0\x00', 0x6f, 0x3}], 0x3, 0x3, 0x4, 0x4, 0x0, 0x7, 0x34}) (rerun: 32) openat$speaker(0xffffffffffffff9c, &(0x7f0000001940), 0x400, 0x0) semctl$GETNCNT(0x0, 0x2, 0x3, &(0x7f0000001980)=""/20) 559.59479ms ago: executing program 7 (id=236): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0x10001, "4be3adce7fa161dc1f32bc09ac2443dc", 0x5}, 0x1c) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0x2, 0x1, 0xa}, {0x1, 0xc9, 0xfe, 0x8}, {0x9b1e, 0x22, 0xf, 0x40203ff}]}) (async) setsid() (async) sysctl$kern(0x0, 0x0, &(0x7f0000000480)="c2a6500034dd09000000000000000800000000019324b9b7bded00191b2331d1f081b61f94fc5e24781904df7ce8f7f22c54ec7059ed5b2d1a24f441978d4f9f1dcfb1c10d327c1adf82717ed9e355c9e68f5cdd", &(0x7f0000000000)=0x54, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) 557.683082ms ago: executing program 2 (id=237): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) chroot(&(0x7f0000000740)='.\x00') ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000300)={0x2, &(0x7f00000000c0)=[{}, {0x1}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000002d00)) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x11, 0x1, &(0x7f0000000140)="b443d4ed", 0x4) sendto$unix(r1, &(0x7f0000000580)="b10005010000009f0500070105000000331c13fecea70500fef96ecfc72fd3357ae30200004e3039d2d236acf20bf404be01000000f7c8cf5f882b297bd8aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abfba0900000008e37193f8343712050500b71d808e5ed405080000fca653181afc9d3f0100"/177, 0xb1, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2000, 0x0, 0x37) 556.818403ms ago: executing program 6 (id=238): pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)="f984a390404d01fb022d0e30", 0xc}], 0x1306, 0x4) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbeffffffffb, 0x0, 0x2, 0x2, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa5, 0x82, 0xce5], [0xb, 0x80000001, 0xfffffffffffffff9, 0x2, 0x0, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xfffffffffffffffb, 0x10fff, 0x4], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffa, 0x4], [{0xdb6e, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x6}, {0x6b7}, {0x0, 0x965, 0xfffffffc, 0x9}], {0x2000, 0x7, 0x5}, {0x29, 0x6, 0xb0, 0x2}}}) r0 = socket(0x2, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x88) fcntl$lock(r2, 0x9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x269000000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000000380)={0x0, 0x2, &(0x7f0000000000)=[0xdb, 0x0], &(0x7f0000000040)=[0x46, 0x7ff, 0x1, 0x6, 0x1, 0xe], &(0x7f0000000340)=[0x0, 0x2]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f00000003c0)={r3, 0x0, 0x7, 0x0, 0xffffffff}) ioctl$FIONREAD(r1, 0xc0206921, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) 549.058939ms ago: executing program 0 (id=239): r0 = socket(0x11, 0x3, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) kevent(0xffffffffffffff9c, &(0x7f0000000000)=[{{}, 0x0, 0x6575ddac2c9040cb, 0x13, 0x10000001, 0xfffffffffffffffe}], 0x0, 0x0, 0x7, 0x0) (async) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) (async) setsockopt(r1, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) (async) unlink(&(0x7f0000000000)='./file0\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="10009087", 0x4}], 0x1) 494.484834ms ago: executing program 2 (id=241): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = kqueue1(0x10004) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x80, 0x26) sysctl$net_inet_etherip(&(0x7f0000000000)={0x4, 0x13, 0x61, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80047476, &(0x7f0000000200)={0x0}) kevent(r1, &(0x7f0000000380)=[{{}, 0xfffffffffffffff6, 0x1, 0x4, 0x100000000, 0xc8}, {{r2}, 0xfffffffffffffffb, 0xb7, 0x2, 0x800c8, 0x5}], 0x1, 0x0, 0x80000000, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x12}, 0x4, 0x0, 0x0, 0x0, 0x0) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMUXIO_LIST_DEVICES(r4, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2}, {0x0, 0xb}, {}, {0x0, 0xd}, {0x0, 0xffffffff}, {0x0, 0x3}, {0x2, 0xfffffffd}, {0x3}, {0x0, 0x1}, {}, {0xfffffffffffffffe, 0x2}, {0x2}, {}, {}, {0x1}, {0x0, 0x800000}, {0x0, 0x5}, {0x4, 0x7b0b}, {0x0, 0x10001}, {0x0, 0x2}, {0x1}, {0x3}, {}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x27fe}, {0x3}, {0x0, 0x4}, {0x0, 0x20}, {0x0, 0x69}, {0x2, 0x6}, {0x2, 0x1ff}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0xb7) select(0x40, &(0x7f0000000000)={0x5, 0x7, 0x0, 0x4, 0x8, 0x2, 0x420c7f19, 0x4}, &(0x7f0000000180)={0x3, 0x6, 0x7ff, 0xa, 0xfffffffffffffff7, 0xfffffffffffffff7, 0x7fffffffffffffff, 0xfffffffffffffff8}, &(0x7f00000001c0)={0x8000, 0x20, 0xe1b, 0x7, 0xbe19, 0x9, 0x3}, &(0x7f0000000200)={0xfffffffffffffffd, 0x37e}) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@local, @remote, [{[{0x88a8, 0x3, 0x1, 0x4}], {0x8100, 0x5, 0x1}}], {@ipv4={0x800, {{0x13, 0x4, 0x0, 0xb, 0x58, 0x65, 0xfff7, 0x0, 0x3, 0x0, @empty, @loopback, {[@end, @ssrr={0x89, 0x3, 0xd}, @ssrr={0x89, 0x1f, 0x1, [@empty, @rand_addr=0x2, @loopback, @multicast2, @multicast2, @rand_addr=0x3, @multicast2]}, @generic={0x44, 0x9, "0e3fe712c98098"}, @generic={0x83, 0x9, "72c54376e6787e"}, @noop, @end]}}, @icmp=@mask_reply={0x12, 0x0, 0x0, 0x1, 0x7, 0x8}}}}}) ioctl$FIONREAD(r5, 0xc0106978, &(0x7f0000000340)) 329.223591ms ago: executing program 3 (id=242): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f00000024c0), 0x100, 0x0) ioctl$VMM_IOC_RESETCPU(r0, 0x82405605, &(0x7f0000000100)={0x6, 0x9, {[0xfffffbfffffffff9, 0x1, 0x2, 0x6, 0x6, 0x7, 0x3, 0xffffffffffffffff, 0x5, 0x8, 0x100000001, 0x8000, 0xffffffffffffffff, 0x200000000002, 0xffffffffffffff93, 0x3, 0xfffffff7fffffffe, 0xed7], [0x0, 0x80000001, 0xfffffffffffffffa, 0x20200001, 0x5e, 0x100400000007998, 0x0, 0x9, 0xb3], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x5, 0x1, 0x7, 0x4000000, 0x2, 0x5], [{0x0, 0x0, 0x0, 0x7d06}, {0x80c, 0x22, 0x4008}, {0x4, 0x3, 0xfffefffe, 0x280}, {0x3, 0x4, 0x1, 0xfffffffffffffffc}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x9, 0x219, 0xfffffff7, 0x4}, {0xe, 0x2, 0x1, 0x4}], {0x1, 0x8, 0x80000006, 0x3}, {0xfffe, 0xbc2, 0x6d5, 0x8000000000006}}}) sysctl$vm(&(0x7f0000000100)={0x2, 0x7}, 0x2, &(0x7f0000000080)="e40306a3ed", &(0x7f0000000040)=0x5, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x96, 0x0, 0xfffb4961, 0x0) ioctl$BIOCSBLEN(0xffffffffffffffff, 0xc0044266, &(0x7f0000000040)=0x8) close(0x3) openat$vmm(0xffffffffffffff9c, &(0x7f00000024c0), 0x100, 0x0) (async) ioctl$VMM_IOC_RESETCPU(r0, 0x82405605, &(0x7f0000000100)={0x6, 0x9, {[0xfffffbfffffffff9, 0x1, 0x2, 0x6, 0x6, 0x7, 0x3, 0xffffffffffffffff, 0x5, 0x8, 0x100000001, 0x8000, 0xffffffffffffffff, 0x200000000002, 0xffffffffffffff93, 0x3, 0xfffffff7fffffffe, 0xed7], [0x0, 0x80000001, 0xfffffffffffffffa, 0x20200001, 0x5e, 0x100400000007998, 0x0, 0x9, 0xb3], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x5, 0x1, 0x7, 0x4000000, 0x2, 0x5], [{0x0, 0x0, 0x0, 0x7d06}, {0x80c, 0x22, 0x4008}, {0x4, 0x3, 0xfffefffe, 0x280}, {0x3, 0x4, 0x1, 0xfffffffffffffffc}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x9, 0x219, 0xfffffff7, 0x4}, {0xe, 0x2, 0x1, 0x4}], {0x1, 0x8, 0x80000006, 0x3}, {0xfffe, 0xbc2, 0x6d5, 0x8000000000006}}}) (async) sysctl$vm(&(0x7f0000000100)={0x2, 0x7}, 0x2, &(0x7f0000000080)="e40306a3ed", &(0x7f0000000040)=0x5, 0x0, 0x0) (async) kqueue() (async) kevent(r1, &(0x7f0000000000), 0x96, 0x0, 0xfffb4961, 0x0) (async) ioctl$BIOCSBLEN(0xffffffffffffffff, 0xc0044266, &(0x7f0000000040)=0x8) (async) close(0x3) (async) 327.555018ms ago: executing program 7 (id=243): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) close(0x3) r2 = socket(0x18, 0x3, 0x6) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r2, 0x80206919, &(0x7f0000000100)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DIOCRGETASTATS(r5, 0xc4504447, &(0x7f0000000600)={{'./bus\x00', './bus\x00', 0x48, 0x2}, 0x0, 0xa0, 0x0, 0x5, 0xe, 0x7, 0x6, 0x54, 0xce6}) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000200)) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCXBEGIN(r6, 0xc0104451, &(0x7f0000000300)={0x0, 0x4, 0x0}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2000, 0x0, 0x37) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x7}, {0x3, 0xff03}, {0x1, 0xd57}, {0x0, 0x2800}, {0x3}, {0x3, 0x1}, {0x0, 0xaa59}, {0x3, 0x5}, {0x1, 0x1}, {0x3, 0x100}, {0x3, 0x1}, {0x3, 0x80000000}, {0x2, 0x3}, {}, {0x1, 0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0xfffffffe}, {0x2, 0x7ff}, {0xbb08c0840fa32129, 0x6}, {0x0, 0x2}, {0x1}, {0x0, 0xf205}, {0x2, 0xffffff}, {0x1, 0x1}, {0x0, 0x1ff}, {0x3, 0x2}, {0x2, 0xffffffff}, {0x0, 0xb}, {0x1, 0x5}, {0x3}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc) openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140), 0x0, 0x2e) setitimer(0x1, &(0x7f00000000c0)={{0xffffffff, 0x11}, {0xd16, 0x2}}, 0x0) getitimer(0x0, &(0x7f00000002c0)) ppoll(&(0x7f0000000100)=[{r4, 0x10}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000380)=ANY=[@ANYBLOB="eab24196b6efffffffffffff8100310086dd605f6ad900480c2900000000000000000002000000800000fe8000000000000000000000000000aa0200907800000003fe8000000000000000000000000000bbff0200000000000000000000000000013a01000000000000c204000000080f93e612526c8f020000fa8efc24879252549650bde57dc35ef45242583d7673f2516313a2c4126e9ce596ef07152b5aff7a97c320ab757215a86ed0930741cef9028c85bab8e4"]) closefrom(r3) 326.840823ms ago: executing program 4 (id=244): openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r0 = socket$inet6(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000140)=0x5, 0x4) (async) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x18, 0x0, 0x316c, "d97e75a32ead482c3fb76b5bb1fa3585", 0x4}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "1b200014010000000600f2450500", 0x62a4}, 0x1c) (async) r1 = socket$inet6(0x18, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000000000000000000000000001", 0x9}, 0x1c) (async) r2 = socket$inet6(0x18, 0x1, 0x6) bind$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x1, 0xfffffff2, '\x00', 0x20009399}, 0x1c) (async) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000100)={0x1, 0x9}, 0x2, &(0x7f00000001c0)="76d5dc6a995cf1b1481bad5ac06d4c8b799f58f893947ec12734fb945c2af52b3d1173910bb667dc701c39d416d416147e8fabc39ce6f6b1ecf8a777e1a608534ada949a50724d52d60412c3d936f0e30d9fef10f92e6a44399fc604359729bc3a14a49fd09fb48a59936a1955b6e1c084a5f83fbf70cbbde8843c27cd05ffbeb4c3a83b9f7dd8090f632758227fdaa2b15fd67d549618a2acf692904fc85554a3b42ea53633a64e28fc069b7df3ee60eb22b9f08b547f89bf55d63be00bfd9568b03e88413d5192918f50223f4ab5867433dc", &(0x7f00000002c0)=0xd3, &(0x7f0000000300)="6809c4c3d4b3441ed6aef3810f9ca2905f3b539134de8eaba7593f5576f7cc5d846267f18df7582a58b9466ddc2d4c7d7b25299443b3c1b7ea624334d6165c63afbf3c841b17ebdfb4b00bdc9a3546b64ddd6db9ab2e6d121b1c8c310e249ff5", 0x60) (async) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r3, 0x1000000000029, 0x9, &(0x7f0000000080), 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0x4, 0xc, 0x2000000000000001, 0x210, 0x6, 0x2}, 0x0, 0x0, 0x0) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) close(0x3) 326.398495ms ago: executing program 6 (id=245): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000000)={0x0, 0x0, 0x0}) 326.060068ms ago: executing program 2 (id=246): r0 = socket(0x1, 0x2, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)=@file={0x0, 0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6a) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DIOCRDELTABLES(r1, 0xc450443e, &(0x7f0000000b80)={{'./file0\x00', './file0\x00', 0x2, 0x2}, 0x0, 0x9, 0x0, 0x5, 0x5, 0x6, 0x2, 0x22, 0x2}) socket$inet(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f00000000c0)='\x00', 0x1) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000240)='\x00\x00\x00\x00', 0x4) 310.493231ms ago: executing program 6 (id=248): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x0, 0x8, 0xd0, 0x6}, {0x1, 0x6, 0x2, 0x40}, {0x9, 0xd1, 0x40, 0x10000}]}) r0 = socket(0x1, 0x3, 0x0) (async) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r1, 0xc1206925, &(0x7f0000000100)) setrlimit(0x8, &(0x7f0000000140)={0xa, 0x5a}) r2 = syz_open_pts() (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r4 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r4, 0x8020691f, &(0x7f00000001c0)) (async) ioctl$BIOCGRSIG(r3, 0x40044273, &(0x7f00000000c0)) (async) close(r2) r5 = syz_open_pts() (async) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000000)={0x7, 0x7ffd, 0xffff0100, 0x7fffffff, "6454f2aa1000", 0x8, 0x4}) pipe2(&(0x7f00000009c0)={0xffffffffffffffff}, 0x4) lseek(r6, 0x40, 0x2) (async) readv(r5, &(0x7f0000000740)=[{&(0x7f0000000180)=""/172, 0xac}], 0x1) (async) unveil(0x0, &(0x7f0000000200)='c\x00') ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) (async) r7 = dup2(r3, r5) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x4, 0x2, 0x9, 0x1, 0x400, 0x0, 0x8e5a, 0x200}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[{}], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0xa, 0x0, r8, 0xe, 0x84c, 0x7, 0x9, 0xc18, 0xb581}) 309.546385ms ago: executing program 6 (id=249): r0 = socket(0x11, 0x3, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000040)={0x1, 0x400000}, 0x10) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x101}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x8) r2 = socket$inet(0x2, 0x3, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @random="aa6d6500", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4, 0x3c, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x8200, 0x0, 0xfffc, {[@sack={0x5, 0x2}, @generic={0x2, 0x2}, @generic={0x8, 0xf, "19335d17ee4df50b1f4c733719"}]}}}}}}}) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000040)="cff5c0566cda6c3f6dfafcd48339a6722a0094af8bc2a22421f359025250123bdbbbbb3b553a30382e30302e774e852e3b0bea187fff03", 0x37}], 0x1) 308.959186ms ago: executing program 3 (id=250): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='r\x00') unveil(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='r\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setgid(r1) setgid(r1) open(&(0x7f0000000080)='./file0\x00', 0x1, 0x8) 308.579454ms ago: executing program 7 (id=251): open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') (async) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x3, 0x101}, {0xfd0, 0x5}}) (async) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x3, 0x101}, {0xfd0, 0x5}}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x40046402, &(0x7f0000000140)) syz_emit_ethernet(0x1000e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0xffffffaa, 0x11, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @mcast2, {[], @udp={{0x3, 0x2, 0xffaa}}}}}}}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0xffffffaa, 0x11, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @mcast2, {[], @udp={{0x3, 0x2, 0xffaa}}}}}}}) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) ktrace(&(0x7f0000000000)='./file0\x00', 0x2, 0x2, 0x0) connect(r0, &(0x7f0000000100)=@in={0x10, 0x2, 0x3, 0x98f}, 0x10) 305.532887ms ago: executing program 4 (id=252): open(&(0x7f0000000880)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18289, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x95) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0xc0104401, &(0x7f0000001700)={0x0, 0x0}) r1 = getsid(0x0) getppid() r2 = getpgid(r1) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000040)={0x2, 0x0, 0x9, 0xf3c, r2}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x76) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20001916, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x1d}, 0x4, &(0x7f00000001c0)="871311a64972b0deb369bcf536af795ac51f05f7362b249200836ce836e5772de4385828adf8d14452f3e03a339e491ae23aa100608c1e25706f4ef278e38b7fe5a41f0debae587d20e45ee4386efd2d7cb0e0e06053ee979130c966908c97be", &(0x7f0000000240)=0x60, &(0x7f0000000280)="826231402cc3c9a4af550ad537d62d2dc6c9731ef398b6493b7ed72b8945c6163eeb968319bddfd4dbc0a55ae09f7d7b346a63fdf6e455faa413cf90cd310a41359e7301210bad8f4cf7fbc39008efd23b6974eeb6f4a190764e23c65c7b0fb9eb5b5b111bc54e6ca53238be130b49a219f637c571eb3e5504244a6b429a2a44af", 0x81) nanosleep(&(0x7f0000001280)={0x5, 0x3}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x119) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) fcntl$getown(r3, 0x5) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00') 305.348527ms ago: executing program 4 (id=253): futimens(0xffffffffffffffff, &(0x7f0000000000)=[{0x10001, 0xfffffffffffffffe}, {0x2, 0x7fffffffffffffff}]) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb08004f1500480067000703039078e0000001e000000201440b1f6767f1d512cdecb49404000607130c7f00000100000000ffffffff7f000001000001000011009078004200060000d00009"]) 302.32499ms ago: executing program 2 (id=254): mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) (async) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) mquery(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x4) (async) mquery(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x4) ioctl$BIOCPROMISC(0xffffffffffffffff, 0x20004269) minherit(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r1 = semget$private(0x0, 0x2, 0x400) semctl$GETVAL(r1, 0x0, 0x5, &(0x7f0000000040)=""/184) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000100)=[0x373c, 0x8, 0x4]) (async) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000100)=[0x373c, 0x8, 0x4]) connect$unix(0xffffffffffffff9c, &(0x7f0000000140)=@file={0x3, 0x0, './file0\x00'}, 0xa) socketpair(0x18, 0x5, 0x2a, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept4(r3, &(0x7f00000001c0)=@in, &(0x7f0000000200)=0x10, 0xc000) shmget$private(0x0, 0x4000, 0x300, &(0x7f0000ffc000/0x4000)=nil) (async) shmget$private(0x0, 0x4000, 0x300, &(0x7f0000ffc000/0x4000)=nil) accept$unix(r4, &(0x7f0000000240)=@abs, &(0x7f0000000280)=0x8) (async) accept$unix(r4, &(0x7f0000000240)=@abs, &(0x7f0000000280)=0x8) r5 = openat$klog(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$LIOCSFD(r5, 0x80046c7f, &(0x7f0000000300)=r4) (async) ioctl$LIOCSFD(r5, 0x80046c7f, &(0x7f0000000300)=r4) openat$pf(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) (async) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) ioctl$DIOCSETIFFLAG(r6, 0xc0284459, &(0x7f0000000440)={'./file0\x00', &(0x7f0000000380)=""/154, 0x5, 0x1, 0x2, 0x8}) (async) ioctl$DIOCSETIFFLAG(r6, 0xc0284459, &(0x7f0000000440)={'./file0\x00', &(0x7f0000000380)=""/154, 0x5, 0x1, 0x2, 0x8}) sendto(r4, &(0x7f0000000480)="49f5a803852f2ed4869b4c1cbbb243fb6aea0a0117b9c984eda7fe6646eb2731c3fde230a3705ed7dd90ea113b3031803280ae4688a0e88dde66c6eec6aab7ea459c3c54e40c6c80f55497b0ace0714c0dfceda0c88484a938cdf0a0636e228f4e3d1656d2aecdd3138a8b315cc256e1764e19968c8ff54364ccfa99e4c7eaf14dbe0f6e6353afe758f62c36ddb8c42015e5e07b9c88518ead1aadcc2d982b0bdfdbd7374c13013430bed94dc744573d25cf379a7e6371de67655b932df16b45a751b505aa77931ac5", 0xc9, 0x9, &(0x7f0000000580)=@in={0x10, 0x2, 0x0, 0x80000001}, 0x10) fcntl$dupfd(r2, 0x0, r2) (async) r7 = fcntl$dupfd(r2, 0x0, r2) r8 = getpid() getresgid(&(0x7f00000005c0), &(0x7f0000000600)=0x0, &(0x7f0000000640)) setsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000680)={r8, 0x0, r9}, 0xc) bind(r7, &(0x7f00000006c0)=@in={0x10, 0x2, 0x1, 0x5418}, 0x10) r10 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x8, 0x0) ioctl$DIOCGETLIMIT(r10, 0xc0084427, &(0x7f0000000740)={0x0, 0x682}) openat$pf(0xffffffffffffff9c, &(0x7f0000000780), 0x400, 0x0) (async) r11 = openat$pf(0xffffffffffffff9c, &(0x7f0000000780), 0x400, 0x0) ioctl$DIOCXROLLBACK(r11, 0xc0104453, &(0x7f0000001000)={0x2, 0xe3, &(0x7f00000007c0)=[{0x1, './file0/file0\x00', 0x81}, {0x1, './file0\x00'}]}) ioctl$DIOCRCLRASTATS(r6, 0xc4504448, &(0x7f0000001180)={{'./file0\x00', './file0/file1\x00', 0x20, 0x37}, &(0x7f0000001040)=[{@multicast1, '\x00', './file0\x00', 0x0, 0x800, 0x0, 0x5, 0x6, 0x20, 0x7}, {@loopback, '\x00', './file0\x00', 0x4, 0x54b0, 0x2, 0x2c, 0x1, 0x80, 0x68}, {@multicast1, '\x00', './file0/file0\x00', 0x0, 0x9, 0x2, 0x8, 0x1, 0xff, 0x2}, {@broadcast, '\x00', './file0/file0\x00', 0x9, 0x6, 0x0, 0xe6, 0xf1, 0x7, 0x9}, {@empty, '\x00', './file0\x00', 0x6, 0x1, 0x0, 0x5c, 0x4f, 0x84, 0x7}], 0x5, 0x5, 0x3, 0x1000, 0x0, 0x765, 0x3c, 0x1}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000001640)={0x1, &(0x7f0000001600)=[{0x6784, 0x4, 0x7f, 0xfffffff7}]}) sendto(r7, &(0x7f0000001680)="5829bdb5b1dbbb03768928afdf4dbe54cc398b7501f93d5d823537fcddd58e24b3dd143275366f", 0x27, 0xa, 0x0, 0x0) 246.414906ms ago: executing program 2 (id=255): ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f0000000000)={&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x1}) sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x308}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x4008}, 0x38, 0x402) r2 = kqueue1(0x0) r3 = fcntl$dupfd(r0, 0xc, r1) ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f00000001c0)=0x1) readv(r2, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000600)=""/251, 0xfb}], 0x2) r4 = socket(0x2, 0x8002, 0x0) r5 = socket(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) setsockopt$sock_int(r5, 0xffff, 0x1, &(0x7f0000000180)=0x81, 0x4) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) setsockopt$sock_int(r6, 0xffff, 0x2000, &(0x7f0000000200)=0x3ff0000, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r5, &(0x7f0000000000), 0x10) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x80008, 0xfffffff9, 0x3, 0x1, 0x44ad, 0x7fffffff, 0x7, 0x2, 0x0, 0xfffffffffffffffe, 0x6}) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x9, 0x2, 0xe9, 0x3, 0xb, 0x4, 0x1, 0x10, [{0x0, 0x80000002, 0x5, 0x80000002}, {0x7, 0xe7, 0x1000002, 0x55df}, {0x10cd1, 0x4baa, 0x9, 0x4}, {0x7, 0x10000, 0x4000000f, 0x8cce}, {0x4, 0x2000008, 0x0, 0x1}, {0x388d, 0xffffffff, 0x85, 0x3}, {0x9, 0xa00, 0x20004, 0x2}, {0x208, 0xfffffffd, 0x5, 0xffffe2e8}, {0x10007, 0x6, 0xa, 0x7ffd}, {0x3f8, 0xfefffffd, 0x1ff, 0x12}, {0x82, 0x0, 0x8a3a0001, 0xfffffff0}, {0x10002, 0xffff, 0x650, 0x200a68}, {0x401, 0x6, 0x6, 0xa5}, {0x6, 0xfffffffe, 0x102}, {0x2, 0x7, 0x200, 0x7}, {0x89be2, 0x1, 0x2, 0x3fc}]}) poll(&(0x7f0000000180)=[{}, {0xffffffffffffffff, 0x4}], 0x2, 0x1ff) r7 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) closefrom(r7) 240.360002ms ago: executing program 6 (id=256): r0 = syz_open_pts() ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f00000000c0)) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x1, 0x5, 0x380, 0x7f, "cdb67152d03a4579f9be11542d1383e9930a156d", 0x80b8, 0x6b62}) ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000080)) (async) ioctl$TIOCSTART(r0, 0x2000746e) (async) r1 = syz_open_pts() ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000040)=0x10) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x3) (async) r2 = open(&(0x7f0000000480)='./file0\x00', 0x100, 0x8) ioctl$BIOCSRTIMEOUT(r2, 0x8010426d, &(0x7f0000000140)={0x2, 0x9}) (async) r3 = syz_open_pts() chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) setuid(0xee01) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) unveil(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='x\x00') (async) symlink(0x0, &(0x7f0000000040)='./file0\x00') (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x1, 0x1, 0x0) socket(0x18, 0x3, 0x0) (async) setsockopt$sock_int(r4, 0xffff, 0x1001, &(0x7f0000000040)=0x20000, 0x4) (async) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCXBEGIN(r5, 0xc0104451, &(0x7f00000000c0)={0x1, 0x408, &(0x7f0000001540)=[{0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8}]}) (async) fcntl$lock(r3, 0x8, &(0x7f00000001c0)={0x1, 0x0, 0x200000000000001c, 0x1000003fd}) (async) fcntl$lock(r3, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x40000000000000, 0x1000300000000}) fcntl$lock(r3, 0x8, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x100000001}) (async) getresuid(&(0x7f0000000100), 0x0, 0x0) 239.483982ms ago: executing program 6 (id=257): open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) (async) r0 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000340)={0x1002, 0x180, {[0xfffffbeffffffff7, 0x0, 0x4787, 0x1002, 0x8001, 0x0, 0x3, 0x9, 0x6, 0x2eff, 0x7, 0x3, 0xfffffffffffbffff, 0x8400000002000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce9], [0x0, 0x7ffffffe, 0x0, 0x100000000, 0x80000000002, 0x9, 0x6, 0x7fffffff, 0x1, 0x4], [0x5, 0x1000409, 0x8, 0xfffffffffffffffc, 0xffffffffffffffff, 0x6, 0x2ba5], [0x6, 0x1, 0xfffffffffffffffc, 0x800000000000000a, 0xfffffffffffffffe, 0x6], [{0x0, 0x8000, 0x9, 0x7d03}, {0xfffc, 0x2, 0x5, 0x100000000}, {0x0, 0xffffffff, 0xfffffffe, 0xc}, {0x3, 0x103, 0x3, 0xffffffffffffefff}, {0x0, 0x2, 0x20007, 0x2}, {0x200, 0x2106, 0xf2, 0x2000000000000000}, {0xb054, 0x0, 0xfffffe01, 0x1}, {0x8, 0xd, 0xffff, 0x2}], {0xc001, 0x25e, 0x28, 0x4000000000000000}, {0x3, 0x6, 0x9, 0xaf3}}}) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000340)={0x1002, 0x180, {[0xfffffbeffffffff7, 0x0, 0x4787, 0x1002, 0x8001, 0x0, 0x3, 0x9, 0x6, 0x2eff, 0x7, 0x3, 0xfffffffffffbffff, 0x8400000002000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce9], [0x0, 0x7ffffffe, 0x0, 0x100000000, 0x80000000002, 0x9, 0x6, 0x7fffffff, 0x1, 0x4], [0x5, 0x1000409, 0x8, 0xfffffffffffffffc, 0xffffffffffffffff, 0x6, 0x2ba5], [0x6, 0x1, 0xfffffffffffffffc, 0x800000000000000a, 0xfffffffffffffffe, 0x6], [{0x0, 0x8000, 0x9, 0x7d03}, {0xfffc, 0x2, 0x5, 0x100000000}, {0x0, 0xffffffff, 0xfffffffe, 0xc}, {0x3, 0x103, 0x3, 0xffffffffffffefff}, {0x0, 0x2, 0x20007, 0x2}, {0x200, 0x2106, 0xf2, 0x2000000000000000}, {0xb054, 0x0, 0xfffffe01, 0x1}, {0x8, 0xd, 0xffff, 0x2}], {0xc001, 0x25e, 0x28, 0x4000000000000000}, {0x3, 0x6, 0x9, 0xaf3}}}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0xc0785101, &(0x7f0000000400)={'tap', 0x0}) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x17}, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0) poll(&(0x7f00000001c0)=[{r0, 0x4}], 0x1, 0x8) socket$inet(0x2, 0x1, 0x0) (async) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r2, 0x7fff) connect$unix(r0, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) syz_emit_ethernet(0x1c7, &(0x7f0000000580)={@broadcast, @remote, [{[], {0x8100, 0x7, 0x1, 0x3}}], {@ipv6={0x86dd, {0x6, 0x6, "b4089b", 0x18d, 0x2f, 0x7f, @mcast1, @local={0xfe, 0x80, '\x00', 0x0}, {[@fragment={0x2c, 0x0, 0xf, 0x1, 0x0, 0x13, 0x65}, @fragment={0x2, 0x0, 0x4e, 0x0, 0x0, 0x1, 0x65}, @fragment={0x6c, 0x0, 0x1, 0x0, 0x0, 0x0, 0x68}, @fragment={0x8fcda86b9db38fc2, 0x0, 0x6, 0x0, 0x0, 0x7, 0x66}, @routing={0x2c, 0x8, 0x0, 0x0, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2]}, @fragment={0x4, 0x0, 0xe, 0x1, 0x0, 0x1a, 0x67}, @dstopts={0x3b, 0x3, '\x00', [@ra={0x5, 0x2, 0x8}, @jumbo, @ra, @enc_lim={0x4, 0x1, 0xfd}, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @routing={0x67, 0x0, 0x0, 0x6c}, @fragment={0x89, 0x0, 0xd, 0x0, 0x0, 0x18, 0x65}], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x9, 0x6, "4ebb70449363a90b8f3c64a20a397be16825e0038b2f5aab1c25b2c9b7660834d90ed68793438c475051e46812ab038c221b16f35db449a050c2fdc388218b1f7dcfb18c5979f4184db8ea238462723ed80e2d0b8b118beb84317473be37929b998d6c0ca57f28812ef43ae3e75fb2f1d409ed2e113c033d9395a7ba774c73812c550b90d009b09367e9143b203be2b13521c69beaf6e35c2438512b3ced494776d3eae301b3e8f9701f14bce768aec24587a9b7de9b092a2f506fddca079849b42032ad828a889f3850d064ca117912795250f4046f64604a53a1eb29"}}}}}}) (async) syz_emit_ethernet(0x1c7, &(0x7f0000000580)={@broadcast, @remote, [{[], {0x8100, 0x7, 0x1, 0x3}}], {@ipv6={0x86dd, {0x6, 0x6, "b4089b", 0x18d, 0x2f, 0x7f, @mcast1, @local={0xfe, 0x80, '\x00', 0x0}, {[@fragment={0x2c, 0x0, 0xf, 0x1, 0x0, 0x13, 0x65}, @fragment={0x2, 0x0, 0x4e, 0x0, 0x0, 0x1, 0x65}, @fragment={0x6c, 0x0, 0x1, 0x0, 0x0, 0x0, 0x68}, @fragment={0x8fcda86b9db38fc2, 0x0, 0x6, 0x0, 0x0, 0x7, 0x66}, @routing={0x2c, 0x8, 0x0, 0x0, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2]}, @fragment={0x4, 0x0, 0xe, 0x1, 0x0, 0x1a, 0x67}, @dstopts={0x3b, 0x3, '\x00', [@ra={0x5, 0x2, 0x8}, @jumbo, @ra, @enc_lim={0x4, 0x1, 0xfd}, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @routing={0x67, 0x0, 0x0, 0x6c}, @fragment={0x89, 0x0, 0xd, 0x0, 0x0, 0x18, 0x65}], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x9, 0x6, "4ebb70449363a90b8f3c64a20a397be16825e0038b2f5aab1c25b2c9b7660834d90ed68793438c475051e46812ab038c221b16f35db449a050c2fdc388218b1f7dcfb18c5979f4184db8ea238462723ed80e2d0b8b118beb84317473be37929b998d6c0ca57f28812ef43ae3e75fb2f1d409ed2e113c033d9395a7ba774c73812c550b90d009b09367e9143b203be2b13521c69beaf6e35c2438512b3ced494776d3eae301b3e8f9701f14bce768aec24587a9b7de9b092a2f506fddca079849b42032ad828a889f3850d064ca117912795250f4046f64604a53a1eb29"}}}}}}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) close(r3) munmap(&(0x7f0000077000/0xc00000)=nil, 0xc00000) 239.236927ms ago: executing program 3 (id=258): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$DIOCSETSYNFLWATS(r0, 0xc0084461, &(0x7f0000000000)={0x29, 0x8bc}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) ioctl$DIOCSETDEBUG(r0, 0xc0044418, &(0x7f0000000040)=0x7fffffff) 238.725323ms ago: executing program 0 (id=259): nanosleep(&(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)) sysctl$kern(&(0x7f0000000080)={0x1, 0x3}, 0x2, &(0x7f00000000c0)="59addd62c5143dececb01e2da9b55f4cb45f010106cd3494fd35e7f378e9bc9a06bd0dbba273aff97e6db60e5ec9171281ae55e90db6e687a03b8dd5ce5ba541de3d21acc2f763945bd2f0933ad7e5095f278a1ae00383a7eca1c96b01d1ab99bcd6c2ded7a569749a973968f2c0c0d0aec84338a840e9b07cab3661e7ed830dafcc32804e1468041ed94b3aa94724e371e5c805c1624c6b81e5bf8a9142162ff683cb04806f0770a48426", &(0x7f0000000180)=0xab, &(0x7f00000001c0)="12a3758f74f547a838a1ae3efebf60df55f10d6ce1407634ccb8f7659a8b2259db63dd411d54eb7829eb0945e75c0d8f19b562969d36c92f6b78c5f1b87135cd545a14e6227008a8f930fe7b5afe37bbec22bb0cfd1803d51b6a3553478bf1a692625dd42a69dee03249a6501ca4f3b8a9517e36de9f52c276ba7301ece20275d9119d4a25e066a543e94c30c5ef2067d44f445cd094969398cbe44c4b4b80c5f90c76646d350cbb8ac4e0edc570e2f25e549ebaa143581add4583874601fc86252cbd0aac4420e05cc6f67000c8463e4e01b02f8732f00a424bf76289a8bc5d", 0xe0) 234.779477ms ago: executing program 5 (id=260): r0 = socket(0x1, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r0, 0xc02069a5, &(0x7f00000001c0)) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) futimes(r1, &(0x7f0000000040)=[{0xff, 0x25}, {0xfffffffffffffff7}]) 158.40131ms ago: executing program 5 (id=261): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) 157.897323ms ago: executing program 5 (id=262): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x5012, 0xffffffffffffffff, 0x0) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ftruncate(r0, 0xc0b) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) (async) r1 = syz_open_pts() close(r1) (async) readv(r0, &(0x7f0000001b00)=[{&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)}, {&(0x7f00000006c0)=""/250, 0xfa}, {&(0x7f00000007c0)=""/3, 0x3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/62, 0x3e}, {&(0x7f0000001a00)=""/33, 0x21}, {&(0x7f0000001a40)=""/89, 0x59}, {&(0x7f0000001ac0)=""/10, 0xa}], 0x9) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x30, 0x7f, 0x2, 0x1}, {0x7, 0xf, 0xd2, 0xa}, {0x891e, 0x4, 0xd5, 0xffff}]}) (async, rerun: 32) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[]) (async, rerun: 32) syz_open_pts() (async) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000540)) (async) ioctl$BIOCSFILDROP(r0, 0x4004426a, 0x0) (async) sysctl$hw(&(0x7f0000000000)={0x6, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) recvmmsg(0xffffffffffffff9c, &(0x7f0000000440)={{&(0x7f0000000180)=@in6, 0x1c, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/71, 0x47}], 0x1, &(0x7f00000003c0)=""/98, 0x62}, 0x4}, 0x38, 0x802, &(0x7f0000000480)={0xd0f, 0x23d9}) (rerun: 64) r3 = socket$inet(0x2, 0x2, 0x0) sendmsg(r3, &(0x7f0000000680)={&(0x7f0000000240)=@un=@abs={0x1, 0x0, 0x3}, 0x8, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000000000000000000014"], 0x180}, 0x4) closefrom(r0) r4 = socket(0x18, 0x3, 0x1) getsockopt(r4, 0x29, 0x68, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3f}, 0x2, &(0x7f0000000500)="71f90200000000000000af6fb1fa62498e5f84cf71b59c7afec37082", &(0x7f0000000000)=0x1c, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x17}, 0x2, &(0x7f0000000100)="a648920ab75842068e2816b665bbd95949dcd7f2faea8d", &(0x7f0000000140)=0x17, &(0x7f0000000280)="00f36b975732bb7fae6efd1b3d0571904f13036f1daedc9e2fceee788599adb11a5cf8d7e40551e86a67bc1923a7d5cdf0bed7d4306f4fcfe27cca76bd12a88b8b40fc1b9faf1095b9c04ce07efdcb2ce7a0caea1294662fbcb0c301216cca131fbbec2582b3c9dd1a3b340a633771671d3e71228960d9e5ee6a62a834b692cadf6b5e5e138462adff072e4131587a93cdc547ac5e25de34f31fa5eb6a99f65d181cff24e188588f2fbeb55406c1e85b1820926aa06f0881b14f15b25bf9c2a0b9469cdd", 0xc4) 157.310549ms ago: executing program 1 (id=263): issetugid() r0 = socket(0x11, 0x3, 0x0) issetugid() sendto$unix(r0, &(0x7f00000000c0)="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", 0xffffffffffffff1c, 0x403, 0x0, 0x0) r1 = syz_open_pts() r2 = socket$inet6(0x18, 0x3, 0x2) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) bind$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x2, "000000000000000000000008068b00", 0x7}, 0x1c) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102"]) poll(0x0, 0x0, 0xffffffff) ioctl$TIOCSCTTY(r1, 0x20007461) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f00000001c0)={0x2df57366, 0xc, 0x800000d, 0x2, "5c9b0008296273ecd8b13d3e40633600", 0xa, 0x8}) ioctl$TIOCGWINSZ(r1, 0x40087468, &(0x7f0000000000)) readv(r1, &(0x7f0000002100)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1) 79.083293ms ago: executing program 4 (id=264): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x28, 0x4c}, 0xc, 0x2a3, 0x0, 0x0, 0x40000003, 0x800000000000013, 0x8000000200, 0x1}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000100)={0x10, 0x5, [{&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x800}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x4000000000000000}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f000035f000/0x4000)=nil, 0x7}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x5}, {&(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0xeb}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xb1}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xffffffffffff0000}], './file0\x00', 0x3, 0x4, 0xfff, 0x0, [0x7, 0x1689d41c, 0x80000001, 0x401, 0x0, 0x9, 0x9, 0x78, 0x9, 0xfffffffd, 0x7, 0x10001, 0x6, 0x6, 0x8001, 0x8, 0x3ff, 0x7, 0x1, 0x0, 0xfffffff7, 0x9, 0x7, 0x280000, 0x4, 0x1, 0x0, 0x2, 0x3, 0x7, 0x0, 0x6, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x8, 0x100, 0xffffff80, 0x2, 0xdae, 0x7ff, 0x1, 0x7fffffff, 0x6, 0x101, 0x0, 0x3, 0x10000000, 0x8, 0x2, 0x5, 0x1, 0x6, 0x6, 0x46af0a69, 0x4a9, 0x80000000, 0x10001, 0x1ff, 0x9, 0x2, 0x7ff, 0xff, 0x3, 0x2, 0x6, 0x6, 0x1, 0xffffffff, 0x6, 0x3, 0x5, 0x7, 0x5, 0x7, 0xfffffffc, 0x2, 0xf8000000, 0x3, 0x4, 0xbbf, 0x6, 0x3, 0x9, 0x1000000, 0x0, 0xd, 0x4, 0xffaf, 0x6, 0x1, 0x9, 0xce, 0x8, 0x8, 0xa94a, 0x0, 0x987, 0x5, 0x6, 0xa9d4, 0xfffffff2, 0x8000, 0x1, 0x6, 0xcc6, 0x400, 0xfffffffd, 0xa19, 0x80, 0x6, 0x88, 0x80000001, 0x4, 0x1, 0x2, 0x9, 0x53f1, 0x1000, 0xfffffffd, 0xffffff25, 0x9, 0xc144, 0x7, 0x3, 0x9, 0x8, 0x470f, 0x1, 0x4, 0x6, 0xffff, 0x2, 0xfffffffc, 0x6, 0x5, 0x4, 0x5, 0x5a9c, 0x4, 0xeb6, 0x5, 0x3, 0x2, 0x2, 0x2, 0x8000, 0x8, 0xaa, 0x8c, 0x38, 0x6, 0x9, 0xb277, 0x400, 0x7, 0x7, 0xd4, 0x7, 0x4, 0x9, 0x75, 0x1ff, 0x1, 0x800, 0x800, 0x3, 0x1ff, 0x401, 0x0, 0x4be, 0x7, 0x1, 0x100, 0x3, 0x2, 0xff, 0x239ed050, 0x7f, 0xff, 0x7, 0x9, 0x3ff, 0x4, 0x5317ce34, 0x0, 0x101, 0x80000000, 0x2, 0x10, 0x2, 0x6, 0x5, 0xb, 0x8, 0x9, 0x40, 0x3, 0x6, 0xffff, 0x0, 0x4, 0x1ff, 0x1ff, 0x16, 0x7, 0x4, 0xffffff01, 0x6, 0x5, 0x2, 0x4, 0x4, 0xffffffff, 0x788, 0x0, 0x6, 0x9, 0x1, 0x6, 0x6, 0x6, 0x6, 0xffff, 0x5310, 0x4, 0xd, 0x9, 0x8001, 0x5, 0x5, 0xfffffff7, 0xa, 0x400, 0x4, 0x5, 0x200, 0x6, 0x5, 0x4, 0x4, 0x3, 0x693, 0x40, 0x8, 0x6, 0x80000000, 0x1d209cda, 0x7, 0x4, 0x7fffffff, 0x63439b01, 0xfffffff8, 0xfffffff8, 0x7, 0x9, 0x9, 0x5, 0xfffff19c, 0x6, 0xed, 0x6, 0xf4d7, 0x9, 0x9, 0xffff, 0xadb, 0x16947a10, 0x3, 0x7, 0x6, 0xc, 0x1, 0x10000, 0x6, 0x9, 0xffff0000, 0x9, 0x9, 0x81, 0x7fffffff, 0x1, 0xda6, 0xf27e, 0x8001, 0xf, 0x0, 0xe7, 0x93c9, 0x3, 0x5, 0x9, 0x1, 0x2, 0x5, 0x4, 0x0, 0xb, 0x2, 0xffffffff, 0x8, 0xffff, 0xdc1c, 0x44cf, 0x6, 0x56, 0x2, 0xe877, 0x5, 0x1, 0x5, 0x1014, 0x1, 0x0, 0x3dd, 0x2, 0xffff5ad4, 0x5, 0x2, 0xc, 0x2, 0xf49, 0x65, 0x3, 0x5, 0xef6, 0x2, 0x719, 0x99bd, 0x6, 0x2d5cc7e1, 0x7fffffff, 0x2, 0x1, 0x9, 0x1ff, 0x3, 0xc263, 0xdc81, 0xda, 0x9, 0x400, 0xaed3, 0x9, 0x1, 0xffffff7f, 0x1400000, 0x3, 0xb0, 0x8001, 0x4800000, 0x5, 0xe12, 0x5c, 0x7, 0x4, 0xffff932b, 0xb65, 0x4f, 0x9, 0x7fffffff, 0x787f, 0x8, 0x200000, 0xf, 0x6, 0x2, 0x7, 0x3a31, 0x0, 0x3, 0xc, 0x101, 0x7fffffff, 0xfffffff7, 0x3, 0x5, 0x7fffffff, 0x9, 0x2, 0x7, 0x5, 0xfffffe00, 0xa88, 0x7eec, 0x8000, 0x0, 0x100, 0x682, 0x36a5, 0x100, 0xd2, 0x81, 0x0, 0x0, 0x2, 0xde, 0xf2d, 0x4, 0x3a1, 0x87ab, 0x4, 0xe, 0x7, 0xffff, 0xc8, 0x7, 0x7, 0xfffffe00, 0x9, 0x8, 0xfffffff7, 0x6e04f75a, 0x0, 0x2, 0x4d, 0x4, 0x10000, 0x8, 0x6, 0x1, 0x8, 0x9, 0x8, 0x80, 0x1, 0x2, 0x1, 0x3, 0x7, 0xcd, 0x6, 0xc6, 0xf3, 0x10, 0x7, 0x27a, 0x7, 0xff28, 0x2, 0xdb9, 0x7, 0x0, 0x10, 0xfff, 0x0, 0x6, 0xe, 0xa6d, 0xfc46, 0x1ff, 0x10000, 0xdee, 0xfffffff9, 0x7d08, 0x4aa, 0x7fffffff, 0x10, 0x6, 0x9, 0x8, 0x4, 0x9, 0x7, 0x10, 0x8, 0x2, 0x5b7, 0x7ff, 0x9d1, 0xfffffffe, 0x5, 0x8, 0x18, 0xff, 0x8, 0x9, 0xfffffffa, 0x1, 0x7fff, 0x6022, 0x401, 0x10000, 0x5, 0xfb3f, 0x2, 0x317b, 0x0, 0x2dd, 0x4, 0x10001, 0x3, 0xd4ef, 0x5, 0x1, 0x10001, 0x9, 0x7, 0xf, 0x1, 0x8, 0x100, 0x5, 0xff, 0x8, 0x80000001, 0x5, 0x4, 0xba]}) execve(0x0, &(0x7f0000000340)=[&(0x7f0000000100)='tap'], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x1000) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc028698a, &(0x7f0000000100)) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffdfff86c7605f6ad9d7083a000000000000000000000000000069471ceef0000000fe800000000000000000007a983b81376e00000000000000"]) ioctl$BIOCSDLT(r1, 0x8004427a, &(0x7f0000000040)=0x7) mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x100) open(&(0x7f0000000300)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7815) r2 = syz_open_pts() fchown(r2, 0x0, 0x0) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400001803c1, 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000040)=[{{r3}, 0xffffffffffffffff, 0x4d, 0x40, 0x7, 0xff}], 0x139, 0x0, 0xffffffff, 0x0) r5 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x10, 0x0, {[0xfffefbfffffffff6, 0x1, 0x2, 0x5, 0x2, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x100000000004, 0x1, 0x3, 0xffffffffffffffff, 0xff, 0x8000000, 0x20000000001000a8, 0x4, 0x6], [0x80000001, 0x80000001, 0xfffffffffffffffb, 0x8000fffffffd, 0x100, 0x3ff, 0xfffffffffffffffa, 0x2, 0x7, 0xffffffffffffffc5], [0x100000101, 0x2, 0x3, 0x6, 0xfffffffffbffefff, 0x11006, 0xfffffffffffffffe], [0x100, 0x8, 0x401, 0x100000000, 0xffffffffffefffff, 0x806], [{0x0, 0x5, 0x0, 0x9}, {0xfffc, 0x0, 0x4e, 0x1}, {0xfffd, 0x100, 0x5bec, 0xc7e}, {0x3, 0x800001, 0xf, 0x80000003}, {0xd, 0xfffffffe, 0x81, 0xa000000}, {0x1, 0x2003, 0x3fffe, 0x9}, {0x0, 0x5, 0x8, 0x8}, {0x0, 0x965, 0x0, 0x3}], {0x1ffc, 0x1000001, 0x10000}, {0x8, 0x280000, 0x8}}}) kevent(r5, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x13, 0x0, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r6, &(0x7f0000000880)=[{&(0x7f0000000180)=""/177, 0xb1}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f0000000340)=""/248, 0xf8}, {&(0x7f0000000440)=""/146, 0x92}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000600)=""/169, 0xa9}, {&(0x7f00000006c0)=""/237, 0xed}, {&(0x7f00000007c0)=""/177, 0xb1}], 0x8, 0x80000001) 78.223468ms ago: executing program 5 (id=265): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x84a8, 0x2, 0x9, 0x2}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x4, 0xfd, 0x9, 0xfffffffe}, {0x2, 0x0, 0x2, 0x5}, {0x15f, 0x0, 0x23, 0xbc2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9) 77.899163ms ago: executing program 0 (id=266): r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f00000000c0)=0x6, 0x1) syz_emit_ethernet(0x10004, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0xc8c8fb6356f239c1, 0x16, 0x0, @rand_addr="fe000000020000ff80d14400002000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x0, 0x0, 0x8}}}}}}}) 77.031965ms ago: executing program 4 (id=267): r0 = syz_open_pts() preadv(r0, &(0x7f0000000180)=[{0x0}], 0x1, 0x785) r1 = msgget$private(0x0, 0x1c8) r2 = socket(0x18, 0x3, 0x0) setsockopt(r2, 0x1000000029, 0x25, &(0x7f0000000000), 0x0) msgsnd(r1, &(0x7f0000000000)={0x1}, 0x8, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0x100, 0x2, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x1, 0x15, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x5}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x1000) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x8, 0x34, 0x0, 0x0, 0x1, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}, {[@lsrr={0x83, 0xb, 0x5, [@empty, @rand_addr=0xfffffffc]}]}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xf4, 0xa7}}}}}}) msgsnd(r1, &(0x7f0000000040)={0x0, "db232dfa65b7b2af25163c94a2b8c996c6d1d929249d6decb15357832202d3efcb02b3f52efc39fe21c8a80a45d49d444c35e234903eef4de3e05a20ef4fda770a010053a2470c8e008201f7be63cb5a5bb96e539adc95521439160d9ec5727ca123ae73d02ea8d3503144f1d280ac9444df467af5e193dc6821abcf3de5a3360e6d8c57b04866f5c39a3ae0b8b3f9cc56"}, 0x99, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) minherit(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3) 58.742777ms ago: executing program 5 (id=268): clock_gettime(0x4, 0xfffffffffffffffe) 6.829971ms ago: executing program 4 (id=269): socket(0x18, 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0xafffe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) close(0x3) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) fcntl$setstatus(r2, 0x4, 0x80) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) unlink(&(0x7f0000000000)='./file0\x00') r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x19813, 0xffffffffffffffff, 0x2) seteuid(0xffffffffffffffff) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x10, 0x2, 0x2, 0x800001}, 0xffffffffffffff8e) sendto$unix(r0, &(0x7f0000000240)="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"/936, 0xad, 0x0, 0x0, 0x0) 2.789259ms ago: executing program 5 (id=270): r0 = socket(0x1, 0x2, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)=@file={0x0, 0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6a) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DIOCRDELTABLES(r1, 0xc450443e, &(0x7f0000000b80)={{'./file0\x00', './file0\x00', 0x2, 0x2}, 0x0, 0x9, 0x0, 0x5, 0x5, 0x6, 0x2, 0x22, 0x2}) socket$inet(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f00000000c0)='\x00', 0x1) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000240)='\x00\x00\x00\x00', 0x4) 601.811µs ago: executing program 0 (id=271): sendmmsg(0xffffffffffffffff, &(0x7f00000006c0)={{&(0x7f0000000000)=@in6={0x1c, 0x18, 0x3, 0xfff, "b6479e81e14e636f1a4d677f8b9af21c", 0x8abb}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000040)="e1db4413899da8af7899b3b38362d1c24889849dca4d0264a57e5a889c5823743b6985f0ff48d4ff865afa147b15e832af72679b63d74ab22e2a825cc1e4b5494c78ee5d0107df42710ccf703391a7b41d1b93209bb5f15ff5d40442f44075a98e5df5ea646e2d560081fecefbaacdbfe5ab9a60508884ee399d2e716099f4e5b630073492fdcc137d73b296d05b578c5b3f3a7575ef7ed78288f791a9726fbceb2cd5015999b1dc7673d588592622e5b640285a9cc25e97", 0xb8}, {&(0x7f00000001c0)="b3b82dc8f81532d27a8d936d13e2dbc423a90bb4ff293eb5e72fc3547cefbcb9fcb2e96a04e0691639dd63b82ae013d2d9dee7fe64c2bad9605ae26973c0755a452918d9a84a81028124f05b42ce468c24a3040263319635bfb6960cce382efba4aac772cdd78b03a2463f3342d5437b2bff51bb5cdff6fc75f74358620884a528a8bcfa56f62715aaf51bc1faa01196c1bd58fe186e6eab8ca98a499e1b67b82cfd25fb24754bd6571cba2b199940866a94e9fd18c9599b644a8eab26f8a55c94034ccd75e8752e9c0dd596ceed12", 0xcf}, {&(0x7f00000002c0)="6623f7e6e192851d3b90481e40b25cff9ba0ffbfa7ad68b50989944f77bcf568632673ffeb6311c5a3793afe665ecffab06f348e83e958a78fbce5ab20fee5e7ad238ca079bf5a614261ace13af683bf47eaee853188e7e8a920e64d2f4d9949fcc0d8c2872a90a74e349e3431bb26588c81dcadf54e86ce4f09c869c20f21f2700c85b067c618e365e64d95743e5d103ea7b4dd10a0abd4de54642ac5abd2be2150ffa8d6b3f54b095f", 0xaa}, {&(0x7f0000000380)="cc42e427cab257d8ad43147825a6c57896f39f2848954813a064bc550d5cc7c8f21a1c5f11dff4b28134295239c138ce1b3b8fcfe743aef9e9a0a51f1fd097f3c923c2b85d39814e499aad1f8e3181f3b9d8aaec7e7de7501192745788c4f8706e80215faf706fd53f938dfd7e0154eeb0e6eda750be1b53c8491ea6697e6953bab136dd0db4d1f5d5c77ff3f97abcfc35597ac87054e028e439e02b7df583d9925f7edb93d9bda7ad52582e55df2093d1c7df17d4462ebfa7fdd66781a36e44c0f70bb9b8ac0498888429582aab1109b9144c7a72371dd54feb492de62a943875c74eba6821b882e1", 0xe9}, {&(0x7f0000000bc0)="78c8295a97e869c53dd1f293f8d06e285b4421e4c15dbc28253168be10915904343f4d84c3aa2ae38c8d6d313907267debe61b1fbec00b78d092174b95c4551897dca253ec951e1ec34375297238cb3621", 0x51}, {&(0x7f0000000500)="73c502029cbfcfb19c30e0d862f413131fc8757d143c307ec441de058197b5261b6294a54275a4fdfa06ae355228d58f312cd8", 0x33}, {&(0x7f0000000540)="de1a61e91ed69b99690c1bae0be8ccc60af1aae5034abf02bfefbd4e9a33", 0x1e}, {&(0x7f0000000580)}], 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="4c000000ffff000001800000d9c90fc5f10e76fa6b0841173cc5a2d279bb4f2dcb8de876741ed3f0d163801694eedb285c0760fbd01b2b39285b322cb79768a94e27a393291170d9b40000003018fe81f9dd64792a3b652d50e0b1fdd3c6d2a05416d54617209b4c379c0631e75301449582a7e8393f1214dee05503f040306b15ddc2d8b904ac470f4c1aba8adc3a8b8945"], 0x4c}}, 0x38, 0x1) r0 = socket$inet(0x2, 0x3, 0x40) sendto$inet(r0, 0x0, 0x0, 0xa, &(0x7f00000002c0)={0x10, 0x2, 0x2, 0xffffffff}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0xa, &(0x7f00000002c0)={0x10, 0x2, 0x2, 0xffffffff}, 0x10) setreuid(0xee00, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) setuid(0xee01) (async) setuid(0xee01) unveil(0x0, &(0x7f0000000300)='c\x00') r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_open_pts() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mprotect(&(0x7f000078a000/0x3000)=nil, 0x3000, 0x4) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x0) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)='./file2\x00') (async) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)='./file2\x00') symlink(&(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$WSMUXIO_INJECTEVENT(r2, 0x80185760, &(0x7f0000000040)={0xa, 0x6, {0xe84, 0x6}}) (async) ioctl$WSMUXIO_INJECTEVENT(r2, 0x80185760, &(0x7f0000000040)={0xa, 0x6, {0xe84, 0x6}}) ioctl$DIOCGETRULESETS(r1, 0xc444443a, &(0x7f0000000740)={0xa, './file0/file0\x00', './file0/file0\x00'}) (async) ioctl$DIOCGETRULESETS(r1, 0xc444443a, &(0x7f0000000740)={0xa, './file0/file0\x00', './file0/file0\x00'}) setresuid(0x0, 0x0, 0xffffffffffffffff) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000014c0), 0x1, 0x0) ioctl$WSKBDIO_GETENCODINGS(r3, 0x8004667d, &(0x7f0000001540)={0x0, 0x0}) getsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) getsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x1, 0x30, 0x64, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, {[@noop, @noop, @ra={0x94, 0x4, 0x6}]}}, @tcp={{0x1, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0xfffe, 0x0, 0xa}}}}}}) 0s ago: executing program 2 (id=272): mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000040), 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)=@in6={0x1c, 0x18, 0x1, 0x3438, "98f4060000000000ca7d325acc8c61fa", 0x52369ecb}, 0x1c, 0x0, 0x0, 0x0}, 0x8) r0 = socket$inet6(0x18, 0x2, 0x0) ioctl$DIOCRDELADDRS(0xffffffffffffffff, 0xc4504444, &(0x7f0000000f00)={{'./file0\x00', './bus\x00', 0x1, 0x2}, 0x0, 0x3, 0x0, 0xda3, 0x8, 0x7, 0x167c, 0x10, 0x1}) connect$inet6(r0, 0x0, 0x0) chdir(&(0x7f0000000400)='./file1\x00') r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x139) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) mquery(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x0, r1, 0x10000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. pckbd_enable: command error panic: uvm_fault_unwire_locked: address not in map Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *475143 64714 0 0 0x4000000 1K syz-executor 513427 64714 0 0 0x4000000 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff8350c56d) at panic+0x1e5 uvm_fault_unwire_locked(fffff7806cf425d0,200000ab0000,200000ab6000) at uvm_fault_unwire_locked+0x4be uvm_fault_wire(fffff7806cf425d0,200000ab0000,200000ac1000,1) at uvm_fault_wire+0x12d uvm_vslock_device(ffff80003939d260,200000ab04c0,10000,1,ffff80003bbc1658) at uvm_vslock_device+0x112 physio(ffffffff824b22a0,d02,0,ffffffff824b2ad0,ffff80003bbc1938) at physio+0x257 spec_write(ffff80003bbc1780) at spec_write+0x11f VOP_WRITE(fffff78062bbacf8,ffff80003bbc1938,5,fffff780097fd750) at VOP_WRITE+0x101 vn_write(fffff7806ce92540,ffff80003bbc1938,0) at vn_write+0x1d3 dofilewritev(ffff80003939d260,8,ffff80003bbc1938,0,ffff80003bbc19f0) at dofilewritev+0x2bd sys_write(ffff80003939d260,ffff80003bbc1aa0,ffff80003bbc19f0) at sys_write+0xa2 syscall(ffff80003bbc1aa0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x72d2912de80, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault_unwire_locked: address not in map ddb{1}> show kasan No such command ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8350c56d) at panic+0x1e5 uvm_fault_unwire_locked(fffff7806cf425d0,200000ab0000,200000ab6000) at uvm_fault_unwire_locked+0x4be uvm_fault_wire(fffff7806cf425d0,200000ab0000,200000ac1000,1) at uvm_fault_wire+0x12d uvm_vslock_device(ffff80003939d260,200000ab04c0,10000,1,ffff80003bbc1658) at uvm_vslock_device+0x112 physio(ffffffff824b22a0,d02,0,ffffffff824b2ad0,ffff80003bbc1938) at physio+0x257 spec_write(ffff80003bbc1780) at spec_write+0x11f VOP_WRITE(fffff78062bbacf8,ffff80003bbc1938,5,fffff780097fd750) at VOP_WRITE+0x101 vn_write(fffff7806ce92540,ffff80003bbc1938,0) at vn_write+0x1d3 dofilewritev(ffff80003939d260,8,ffff80003bbc1938,0,ffff80003bbc19f0) at dofilewritev+0x2bd sys_write(ffff80003939d260,ffff80003bbc1aa0,ffff80003bbc19f0) at sys_write+0xa2 syscall(ffff80003bbc1aa0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x72d2912de80, count: -13 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003bbc13a0 rbx 0xffff80002999ee07 rdx 0 rcx 0xffff80003939d260 rax 0xffff80002999dff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xcd3c8aa01493994c r11 0x479787303704bb r12 0xffff80002999ec08 r13 0 r14 0 r15 0x1 rip 0xffffffff81b74b85 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003bbc1390 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=475143 pid=64714 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=36, usrpri=61, slppri=36, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003939cfc8,0xffff80003939c048 process=0xffff80003c4561d8 user=0xffff80003bbbc000, vmspace=0xfffff7806cf425d0 estcpu=11, cpticks=9, pctcpu=0.8, user=0, sys=9, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 24255 218625 39641 0 2 0 0 syz-executor 57545 301721 90217 0 2 0 0 syz-executor 18590 333233 13304 0 2 0 0 syz-executor 56317 46480 93208 0 2 0 0 syz-executor 56317 331561 93208 0 3 0 0x4000080 fsleep syz-executor 56317 83545 93208 0 2 0 0x4000000 syz-executor 24906 130551 29246 0 2 0 0 syz-executor 24906 129697 29246 0 3 0 0x4000080 fsleep syz-executor 74705 320149 45891 0 3 0 0x80 nanoslp syz-executor 74705 397067 45891 0 3 0 0x4000080 kqpoll syz-executor 74705 484904 45891 0 3 0 0x4000080 fsleep syz-executor 62935 322494 78679 0 2 0 0 syz-executor 62935 257773 78679 0 3 0 0x4000080 fsleep syz-executor 64714 468069 93277 0 2 0 0 syz-executor *64714 475143 93277 0 7 0 0x4000000 syz-executor 64714 513427 93277 0 7 0 0x4000000 syz-executor 78679 450304 93843 0 3 0x2 0x80 nanoslp syz-executor 39641 6391 93843 0 3 0x2 0x80 nanoslp syz-executor 46821 193547 0 0 3 0x14000 0x280 nfsidl nfsio 55355 311292 0 0 3 0x14000 0x280 nfsidl nfsio 23264 269821 0 0 3 0x14000 0x280 nfsidl nfsio 45120 346611 0 0 3 0x14000 0x280 nfsidl nfsio 43805 418580 0 0 3 0x14000 0x280 nfsidl nfsio 97342 182710 0 0 3 0x14000 0x280 nfsidl nfsio 87972 510389 0 0 3 0x14000 0x280 nfsidl nfsio 27545 214120 0 0 3 0x14000 0x280 nfsidl nfsio 76927 384118 0 0 3 0x14000 0x280 nfsidl nfsio 2436 313376 0 0 3 0x14000 0x280 nfsidl nfsio 1599 206531 0 0 3 0x14000 0x280 nfsidl nfsio 9505 117781 0 0 3 0x14000 0x280 nfsidl nfsio 20216 12049 0 0 3 0x14000 0x280 nfsidl nfsio 6533 9520 0 0 3 0x14000 0x280 nfsidl nfsio 31388 141844 0 0 3 0x14000 0x280 nfsidl nfsio 18402 485676 0 0 3 0x14000 0x280 nfsidl nfsio 93713 79372 0 0 3 0x14000 0x280 nfsidl nfsio 18374 486955 0 0 3 0x14000 0x280 nfsidl nfsio 8355 120023 0 0 3 0x14000 0x280 nfsidl nfsio 99483 134804 0 0 3 0x14000 0x280 nfsidl nfsio 93277 60017 93843 0 3 0x2 0x80 nanoslp syz-executor 29246 193370 93843 0 3 0x2 0x80 nanoslp syz-executor 90217 476273 93843 0 3 0x2 0x80 nanoslp syz-executor 13304 486776 93843 0 2 0x2 0 syz-executor 45891 180371 93843 0 3 0x2 0x80 nanoslp syz-executor 93208 421226 93843 0 3 0x2 0x80 nanoslp syz-executor 93843 143544 76963 0 3 0x2 0x80 kqread syz-executor 76963 519175 87592 0 3 0x100002 0x88 sigsusp ksh 87592 391555 44093 0 3 0x10 0x88 kqread sshd-session 44093 95315 86302 0 3 0x12 0x80 kqread sshd-session 67907 150392 1 0 3 0x100003 0x80 ttyin getty 86302 321422 1 0 3 0 0x88 kqread sshd 390 161702 65639 74 3 0x1100012 0x80 bpf pflogd 65639 381591 1 0 3 0 0x80 sbwait pflogd 73536 48651 12203 73 3 0x1100010 0x80 kqread syslogd 12203 64718 1 0 3 0x100002 0x80 sbwait syslogd 76933 394208 1 0 3 0x100000 0x80 kqread resolvd 25604 523085 57520 77 3 0x100012 0x80 kqread dhcpleased 29645 478858 57520 77 3 0x100012 0x80 kqread dhcpleased 57520 4193 1 0 3 0 0x80 kqread dhcpleased 21859 505908 0 0 3 0x14000 0x200 bored smr 52368 217417 0 0 2 0x14000 0x200 zerothread 71732 256353 0 0 3 0x14000 0x200 aiodoned aiodoned 31462 221654 0 0 3 0x14000 0x200 syncer update 90470 381847 0 0 3 0x14000 0x200 cleaner cleaner 2199 313576 0 0 3 0x14000 0x200 reaper reaper 80797 226788 0 0 3 0x14000 0x200 pgdaemon pagedaemon 86148 200836 0 0 3 0x14000 0x200 bored viomb 9904 417136 0 0 3 0x14000 0x40000200 acpi0 acpi0 59805 165683 0 0 3 0x14000 0x40000200 idle1 66950 272957 0 0 3 0x14000 0x200 bored softnet1 62222 136527 0 0 3 0x14000 0x200 bored softnet0 72033 422342 0 0 3 0x14000 0x200 bored systqmp 26426 417255 0 0 3 0x14000 0x200 bored systq 16049 190060 0 0 3 0x14000 0x200 tmoslp softclockmp 57718 142494 0 0 3 0x14000 0x40000200 tmoslp softclock 22301 88932 0 0 3 0x14000 0x40000200 idle0 1 189554 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks CPU 0: exclusive mutex &uvm.fpageqlock r = 0 (0xffffffff839e09c0) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 uvm_pmr_freepages+0x1a8 #3 uvm_anfree+0xe9 #4 amap_wiperange_chunk+0x1a6 #5 amap_pp_adjref+0x6d0 #6 amap_adjref_anons+0x22d #7 uvm_unmap_detach+0x8a #8 sys_munmap+0x329 #9 syscall+0xbd4 #10 Xsyscall+0x128 Process 64714 (syz-executor) thread 0xffff80003939d260 (475143) shared rwlock vmmaplk r = 0 (0xfffff7806cf426d0) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvm_fault_wire+0x116 #3 uvm_vslock_device+0x112 #4 physio+0x257 #5 spec_write+0x11f #6 VOP_WRITE+0x101 #7 vn_write+0x1d3 #8 dofilewritev+0x2bd #9 sys_write+0xa2 #10 syscall+0xbd4 #11 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a22f00) #0 witness_lock+0x5f1 #1 __mp_acquire_count+0x58 #2 sleep_finish+0x2d8 #3 rw_do_enter_read+0x309 #4 uvmfault_lookup+0x122 #5 uvm_fault_check+0x4f #6 uvm_fault+0x106 #7 uvm_fault_wire+0x73 #8 uvm_vslock_device+0x112 #9 physio+0x257 #10 spec_write+0x11f #11 VOP_WRITE+0x101 #12 vn_write+0x1d3 #13 dofilewritev+0x2bd #14 sys_write+0xa2 #15 syscall+0xbd4 #16 Xsyscall+0x128 Process 64714 (syz-executor) thread 0xffff80003939c038 (513427) exclusive rwlock amaplk r = 0 (0xfffff7806556e7c0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 amap_unref+0x3d #3 uvm_unmap_detach+0x8a #4 sys_munmap+0x329 #5 syscall+0xbd4 #6 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11054 12083K 12406K 166960K 12429 0 pcb 18 14K 15K 166960K 120 0 rtable 202 12K 13K 166960K 477 0 pf 36 18K 22K 166960K 84 0 ifaddr 35 6K 7K 166960K 62 0 ifgroup 44 1K 2K 166960K 81 0 sysctl 3 1K 9K 166960K 43 0 counters 66 36K 37K 166960K 94 0 ioctlops 0 0K 4K 166960K 1608 0 iov 0 0K 32K 166960K 25 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1325 83K 84K 166960K 1645 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 6 0 VM map 2 1K 1K 166960K 2 0 sem 11 0K 0K 166960K 17 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 18 65K 85K 166960K 436 0 sigio 0 0K 0K 166960K 3 0 proc 71 115K 164K 166960K 635 0 subproc 72 4K 4K 166960K 90 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 128 0 in_multi 77 5K 7K 166960K 129 0 ether_multi 1 0K 0K 166960K 2 0 mrt 1 0K 0K 166960K 9 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 79 360K 360K 166960K 79 0 exec 0 0K 1K 166960K 420 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 223 152K 175K 166960K 5397 0 UVM aobj 9 2K 2K 166960K 9 0 pinsyscall 43 86K 101K 166960K 1644 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 1 0 NDP 10 0K 2K 166960K 40 0 temp 39 9118K 9182K 166960K 12119 0 kqueue 14 22K 31K 166960K 79 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 57 0 53 1 0 1 1 0 8 0 rtentry 176 139 0 59 6 0 6 6 0 8 0 unpcb 144 151 0 133 2 0 2 2 0 8 1 syncache 336 5 0 5 1 0 1 1 0 8 1 tcpcb 736 73 0 67 1 0 1 1 0 8 0 arp 136 23 0 9 1 0 1 1 0 8 0 inpcb 328 341 0 329 4 0 4 4 0 8 2 nd6 152 32 0 12 1 0 1 1 0 8 0 pkpcb 40 34 0 34 1 0 1 1 0 8 1 kcovpl 48 10 0 2 1 0 1 1 0 8 0 ppxss 1192 8 0 8 1 0 1 1 0 8 1 pffrag 232 3 0 2 1 0 1 1 0 482 0 pffrnode 88 3 0 2 1 0 1 1 0 8 0 pffrent 40 5 0 4 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 4 0 1 1 0 1 1 0 8 0 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfstitem 24 39 0 0 1 0 1 1 0 8 0 pfstkey 128 39 0 0 2 0 2 2 0 8 0 pfstate 448 39 0 0 5 0 5 5 0 8 0 pfrule 1360 23 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 589 0 222 29 0 29 29 0 8 4 art_table 40 590 0 222 5 0 5 5 0 8 0 art_node 32 139 0 67 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 1 1 0 1 1 0 8 0 semapl 72 14 0 5 1 0 1 1 0 8 0 shmpl 112 6 0 0 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 2034 0 564 93 0 93 93 0 8 0 ffsino 296 2034 0 564 114 0 114 114 0 8 0 nchpl 144 2603 0 898 64 0 64 64 0 8 0 rtmask 32 4 0 4 1 0 1 1 0 8 1 vnodes 216 2328 0 0 130 0 130 130 0 8 0 namei 1024 9696 0 9696 2 0 2 2 0 8 2 percpumem 16 63 0 14 1 0 1 1 0 8 0 pfiaddrpl 120 1 0 0 1 0 1 1 0 8 0 kstatmem 264 43 0 20 2 0 2 2 0 8 0 scsiplug 72 2 0 2 1 0 1 1 0 8 1 scxspl 216 8563 0 8563 5 2 3 3 1 8 3 plimitpl 152 56 0 39 1 0 1 1 0 8 0 sigapl 424 769 0 701 8 0 8 8 0 8 0 knotepl 120 294 0 0 9 0 9 9 0 8 0 kqueuepl 224 103 0 92 1 0 1 1 0 8 0 pipepl 344 151 0 124 3 0 3 3 0 8 0 fdescpl 528 733 0 701 3 0 3 3 0 8 0 filepl 160 3392 0 3169 12 0 12 12 0 8 1 lockfpl 104 176 0 174 1 0 1 1 0 8 0 lockfspl 48 50 0 48 1 0 1 1 0 8 0 sessionpl 144 34 0 25 1 0 1 1 0 8 0 pgrppl 48 46 0 29 1 0 1 1 0 8 0 ucredpl 104 366 0 353 1 0 1 1 0 8 0 zombiepl 144 701 0 701 1 0 1 1 0 8 1 processpl 1232 769 0 701 6 0 6 6 0 8 0 procpl 664 1218 0 1142 8 0 8 8 0 8 0 sockpl 752 589 0 555 8 0 8 8 0 8 4 mcl64k 65536 7 0 0 1 0 1 1 0 8 0 mcl16k 16384 8 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 119 0 0 15 0 15 15 0 8 0 mcl2k 2048 19 0 0 3 0 3 3 0 8 0 mextrefs 64 22 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 178 0 0 12 0 12 12 0 8 0 bufpl 272 2801 0 107 180 0 180 180 0 8 0 anonpl 32 8042 0 0 65 0 65 65 0 247 0 amapchunkpl 152 16719 0 16130 28 0 28 28 0 158 5 amappl16 200 2206 0 2107 13 3 10 10 0 8 1 amappl15 192 7 0 7 1 1 0 1 0 8 0 amappl14 184 461 0 460 1 0 1 1 0 8 0 amappl13 176 128 0 116 1 0 1 1 0 8 0 amappl12 168 989 0 960 2 0 2 2 0 8 0 amappl11 160 6 0 6 1 1 0 1 0 8 0 amappl10 152 81 0 67 1 0 1 1 0 8 0 amappl9 144 274 0 274 1 1 0 1 0 8 0 amappl8 136 175 0 172 1 0 1 1 0 8 0 amappl7 128 153 0 140 1 0 1 1 0 8 0 amappl6 120 176 0 174 1 0 1 1 0 8 0 amappl5 112 96 0 85 1 0 1 1 0 8 0 amappl4 104 299 0 279 1 0 1 1 0 8 0 amappl3 96 3347 0 3242 4 0 4 4 0 8 0 amappl2 88 556 0 495 2 0 2 2 0 8 0 amappl1 80 11847 0 11251 14 0 14 14 0 8 1 amappl 88 4596 0 4443 5 0 5 5 0 92 0 uvmvnodes 80 112 0 0 3 0 3 3 0 8 0 dma16384 16384 1 0 1 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 8 0 0 1 0 1 1 0 8 0 uaddrrnd 24 733 0 701 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 733 0 701 1 0 1 1 0 8 0 vmmpekpl 168 7776 0 7736 3 0 3 3 0 8 0 vmmpepl 168 54831 0 52846 90 0 90 90 0 357 0 vmsppl 488 732 0 701 5 0 5 5 0 8 0 rwobjpl 80 18045 0 16938 25 0 25 25 0 8 0 pdppl 4096 1473 0 1402 93 22 71 81 0 8 0 pvpl 32 13688 0 0 111 0 111 111 0 265 0 pmappl 256 732 0 701 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 450 0 25 13 0 13 13 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83950ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_cmp8(fffff7806cf25388,fffff7806cf25388) at __sanitizer_cov_trace_cmp8+0x3f uvm_pageclean(fffff7800820eec8) at uvm_pageclean+0x105 uvm_pagefree(fffff7800820eec8) at uvm_pagefree+0x26 uvm_anfree(fffff780605661a0) at uvm_anfree+0xe9 amap_wipeout(fffff780605cf368) at amap_wipeout+0x1d6 uvm_unmap_detach(ffff80003b7bd640,0) at uvm_unmap_detach+0x8a sys_munmap(ffff80003939c038,ffff80003b7bd780,ffff80003b7bd6d0) at sys_munmap+0x329 syscall(ffff80003b7bd780) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x72d67a07eb0, count: 3 ddb{0}> trace x86_ipi_db(ffffffff83950ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_cmp8(fffff7806cf25388,fffff7806cf25388) at __sanitizer_cov_trace_cmp8+0x3f uvm_pageclean(fffff7800820eec8) at uvm_pageclean+0x105 uvm_pagefree(fffff7800820eec8) at uvm_pagefree+0x26 uvm_anfree(fffff780605661a0) at uvm_anfree+0xe9 amap_wipeout(fffff780605cf368) at amap_wipeout+0x1d6 uvm_unmap_detach(ffff80003b7bd640,0) at uvm_unmap_detach+0x8a sys_munmap(ffff80003939c038,ffff80003b7bd780,ffff80003b7bd6d0) at sys_munmap+0x329 syscall(ffff80003b7bd780) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x72d67a07eb0, count: -12 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff8350c56d) at panic+0x1e5 uvm_fault_unwire_locked(fffff7806cf425d0,200000ab0000,200000ab6000) at uvm_fault_unwire_locked+0x4be uvm_fault_wire(fffff7806cf425d0,200000ab0000,200000ac1000,1) at uvm_fault_wire+0x12d uvm_vslock_device(ffff80003939d260,200000ab04c0,10000,1,ffff80003bbc1658) at uvm_vslock_device+0x112 physio(ffffffff824b22a0,d02,0,ffffffff824b2ad0,ffff80003bbc1938) at physio+0x257 spec_write(ffff80003bbc1780) at spec_write+0x11f VOP_WRITE(fffff78062bbacf8,ffff80003bbc1938,5,fffff780097fd750) at VOP_WRITE+0x101 vn_write(fffff7806ce92540,ffff80003bbc1938,0) at vn_write+0x1d3 dofilewritev(ffff80003939d260,8,ffff80003bbc1938,0,ffff80003bbc19f0) at dofilewritev+0x2bd sys_write(ffff80003939d260,ffff80003bbc1aa0,ffff80003bbc19f0) at sys_write+0xa2 syscall(ffff80003bbc1aa0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x72d2912de80, count: 2 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8350c56d) at panic+0x1e5 uvm_fault_unwire_locked(fffff7806cf425d0,200000ab0000,200000ab6000) at uvm_fault_unwire_locked+0x4be uvm_fault_wire(fffff7806cf425d0,200000ab0000,200000ac1000,1) at uvm_fault_wire+0x12d uvm_vslock_device(ffff80003939d260,200000ab04c0,10000,1,ffff80003bbc1658) at uvm_vslock_device+0x112 physio(ffffffff824b22a0,d02,0,ffffffff824b2ad0,ffff80003bbc1938) at physio+0x257 spec_write(ffff80003bbc1780) at spec_write+0x11f VOP_WRITE(fffff78062bbacf8,ffff80003bbc1938,5,fffff780097fd750) at VOP_WRITE+0x101 vn_write(fffff7806ce92540,ffff80003bbc1938,0) at vn_write+0x1d3 dofilewritev(ffff80003939d260,8,ffff80003bbc1938,0,ffff80003bbc19f0) at dofilewritev+0x2bd sys_write(ffff80003939d260,ffff80003bbc1aa0,ffff80003bbc19f0) at sys_write+0xa2 syscall(ffff80003bbc1aa0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x72d2912de80, count: -13