last executing test programs: 7.586301171s ago: executing program 6 (id=7997): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10, 0x10) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x2d, 0x2, 0x8}, {0x40, 0xf, 0xff, 0x7}, {0x6, 0x80, 0x8}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x4000003, 0x3, 0x9, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x10000000, 0xc, 0xc1, 0x71000}, {0x0, 0x4, 0x40000055, 0x103}, {0x8, 0x3ff, 0xa, 0x200000b}, {0x2af, 0x8800, 0x0, 0x2}, {0x4000001, 0x2, 0x402800, 0x7}, {0x202, 0xffffffff, 0xfffffffe, 0x99}, {0xce3, 0x44, 0x200004f6, 0x2}, {0x3ff, 0x9, 0x7, 0xb}, {0xffffffff, 0x7fff, 0xf, 0x103}, {0x44, 0x7, 0x93, 0x1ff}, {0x1de, 0xc, 0x7, 0x3}, {0x9, 0x27, 0x8, 0x5}, {0xe, 0x400, 0x3, 0x62ce}, {0x29a71717, 0xfffffffa, 0x0, 0x9}, {0xc, 0x5, 0x1, 0x1}, {0xfffffffd, 0x2000bc3b, 0x4, 0x30001}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x4c}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r4, 0xc0206923, &(0x7f00000001c0)) ioctl$FIONREAD(r3, 0x8040691a, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500dc0f1e80aaaaaaaaaabb0800450300140067fff80902907800000000e0000001d80633ce4d563a0df57432b4a4e0ed5be76635546242fb9bcfb041869ad5b67279a7fb55c1923c518fe490aea2d62cbaed6ae345ee4c2842945ccb1e10b0491fca43046796d08efe83a816ad93f7daa6c96bf4b68d50a41773a01ce3edf2564b1b27afece16672bd2a91ddd8d002fdec77036a4841cc251d07c267a6592a49552e7b4c1a718c"]) open$dir(0x0, 0x2, 0x0) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000080)=0x2) 7.491768997s ago: executing program 6 (id=8002): r0 = socket(0x11, 0x3, 0x3) sendto$unix(r0, &(0x7f0000000280)="b1000501600000001790000007000000045c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYRESHEX]) sysctl$net_inet6_ip6(&(0x7f0000001e40)={0x4, 0x18, 0x29, 0x32}, 0x4, &(0x7f0000001e80), 0x0, 0x0, 0x0) r1 = syz_open_pts() r2 = syz_open_pts() sysctl$net_inet6_ip6(&(0x7f0000000080)={0x4, 0x18, 0x29, 0x1}, 0x4, &(0x7f00000000c0)="c6ca92b430ceac0d54345de5e6aec3ec574208fcda9a8c95cfb88875c7d067d68d4b2c2cc7ba1beff076bb667fb1103b1cefefee51be36236f7c330722e9e8d7437bb973db49d4449f19f8343d0de7e4cfc1b322fbc4dc12e3719a5fc125c68469f03fc05dca385c7abdc6a84e18f3e4657cc711260be7dec641173102c8d1320bf4262b529284c7041964ea5556a205e3644eda5e0287447082e4b1eb388df3698232", &(0x7f0000000180)=0xa3, &(0x7f0000000280)="ebeb850648a1f1681f2e2502dcd3827fdeac549361ac7dd45652790931428b9c20e2f7dafb8fad15193b8c94f331b69ca484606a5e8b93cdf242cb1ede756287a4da9cb7490c3fef427a0fbf05b0761206315c870dea59fb2781418f7f4d45eb81ba50b82f44ada1914b7b286f5d1421f39e0fb508e430b5b1497280478fc274ee26d1e8e84edcc900bef9ee0de1829de5226e44c6e98b4c3283b8e3ecab982c62d19faedc95ad67fa3dfba73a82f1f0236d0766ecc60550066068e1f3e433c935d9a9a1262ed2ecea5554560c4f35ba46fd24fdecf7043c799e044ea7", 0xdd) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x1000000ff}}) sysctl$hw(&(0x7f0000000000)={0x4, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xa}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x2000740e) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929) setuid(0xffffffffffffffff) lstat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff) sysctl$kern(0x0, 0x0, &(0x7f00000003c0)="e15a79c7de1e2c6bf7635a54862902af124413450000a1f515df5a9da4070000006ebb807e7fa1d2498b43", 0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x2, 0x8, 0x2c, 0x64, 0x5, 0x7e, 0x37, 0x0, @multicast1, @rand_addr=0x7, {[@rr={0x7, 0x3, 0x4}]}}, @tcp={{0x3, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xcf, 0x0, 0x9}}}}}}) writev(r1, &(0x7f0000000040)=[{0x0}], 0x1) sysctl$hw(&(0x7f0000000240)={0x6, 0xf}, 0x2, 0x0, 0x0, &(0x7f0000000000), 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) unlink(&(0x7f00000001c0)='./file0\x00') 4.242680898s ago: executing program 0 (id=8059): sysctl$net_inet_tcp(0x0, 0x0, &(0x7f0000000000)="9b1809ffffff", 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x3, 0x0) bind(r0, &(0x7f0000000000), 0x10) 4.095282854s ago: executing program 4 (id=8061): r0 = socket(0x800000018, 0x3, 0x0) (async) openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) fcntl$getflags(r1, 0x1) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4a) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1, 0x0) (async) syz_open_pts() (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xa0) (async) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r3, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) socket$inet(0x2, 0x3, 0xfc) (async) r4 = kqueue() dup2(r4, r2) (async) r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$VNDIOCSET(r5, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000100)='./file0\x00', 0x3fb, 0x0}) setsockopt(r0, 0x1000000000029, 0x1b, &(0x7f0000000000)="c04a1190", 0x4) 3.86373393s ago: executing program 7 (id=8063): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75) close(r0) 3.750971244s ago: executing program 2 (id=8065): mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2000, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @multicast2}, @udp={{0x1, 0x2, 0x8}}}}}}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffffffffffffff08, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@info_request={0xf, 0x0, 0x0, 0x205c, 0x3}}}}}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2810, r0, 0x6c0c) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 3.666536359s ago: executing program 2 (id=8069): r0 = syz_open_pts() r1 = syz_open_pts() syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x3, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) connect$unix(r2, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x5) syz_open_pts() socket(0x18, 0x1, 0x0) socket(0x2, 0x1, 0x0) syz_open_pts() read(r1, &(0x7f0000000140)=""/181, 0xb5) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) setreuid(0xee00, 0x0) r5 = getuid() chown(&(0x7f0000000040)='./file0\x00', r5, 0xffffffffffffffff) chflags(&(0x7f0000000100)='./file0\x00', 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/185, 0xb9}], 0x1) close(r0) 3.665115829s ago: executing program 1 (id=8070): sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f00000001c0)="a8528a", 0x3) 3.664760242s ago: executing program 0 (id=8071): acct(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000080)="cbc2cf57afd763da4b621b232b27f5a6cad175374c5cf90eb275f933dd781d2e4c5960902320c4b6189420172f6aa0c1878b9cb4f15e4655d7b1584d69b744ba7ab2dbc717f0de70fa80df847fd7e4ea381c071dc775041b2997bae2a04bdd07f6172403c531a98266894a16012298a6de1661b0b08051", &(0x7f0000000100)=0x77, &(0x7f0000000140)="95", 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='c\x00') ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) pwritev(r0, &(0x7f0000002740), 0x1000000000000362, 0x3fffe) 3.530867588s ago: executing program 1 (id=8072): kqueue() r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0xbfffffff, 0x6, 0x0, 0xffffd6c8, "e435b3ff00000030c300046291bf9400", 0x543, 0x2}) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$WSMOUSEIO_GCALIBCOORDS(r1, 0x41205725, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f00000000c0)={0x5, 0x80000000, 0x8136, 0x84, 0x3, 0x1, 0x6, 0x10, [{0x7, 0x64e, 0x5, 0x8}, {0x5, 0xd, 0x101, 0x4}, {0x9, 0x0, 0x9, 0x565f}, {0x5, 0x72d, 0x0, 0x4}, {0x3, 0xd, 0x2}, {0x9, 0x5, 0x7, 0xd53}, {0x9, 0x6, 0x72ac}, {0x9, 0x1, 0x3, 0x8}, {0x0, 0x40, 0x10000, 0xcc1}, {0x6b4, 0x8, 0x9, 0x5}, {0x2, 0x1, 0x809, 0x3}, {0x2, 0x4, 0xffff, 0x3ff}, {0x4e, 0x7, 0x6, 0x4}, {0x4, 0x7fffffff, 0x200000f2, 0x800}, {0x9, 0x46, 0x4, 0x80}, {0x0, 0x4, 0x5, 0x5}]}) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x4000000000000008, 0x0, 0x8000000000000}, 0x0, 0x0) kqueue() (async) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0xbfffffff, 0x6, 0x0, 0xffffd6c8, "e435b3ff00000030c300046291bf9400", 0x543, 0x2}) (async) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$WSMOUSEIO_GCALIBCOORDS(r1, 0x41205725, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) (async) socket(0x18, 0x2, 0x0) (async) setsockopt(r2, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f00000000c0)={0x5, 0x80000000, 0x8136, 0x84, 0x3, 0x1, 0x6, 0x10, [{0x7, 0x64e, 0x5, 0x8}, {0x5, 0xd, 0x101, 0x4}, {0x9, 0x0, 0x9, 0x565f}, {0x5, 0x72d, 0x0, 0x4}, {0x3, 0xd, 0x2}, {0x9, 0x5, 0x7, 0xd53}, {0x9, 0x6, 0x72ac}, {0x9, 0x1, 0x3, 0x8}, {0x0, 0x40, 0x10000, 0xcc1}, {0x6b4, 0x8, 0x9, 0x5}, {0x2, 0x1, 0x809, 0x3}, {0x2, 0x4, 0xffff, 0x3ff}, {0x4e, 0x7, 0x6, 0x4}, {0x4, 0x7fffffff, 0x200000f2, 0x800}, {0x9, 0x46, 0x4, 0x80}, {0x0, 0x4, 0x5, 0x5}]}) (async) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x4000000000000008, 0x0, 0x8000000000000}, 0x0, 0x0) (async) 3.530034479s ago: executing program 4 (id=8074): r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$net_inet_ip(&(0x7f0000000280)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, &(0x7f0000001300), 0x4) minherit(&(0x7f0000284000/0x4000)=nil, 0x4000, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0x9, 0x17, 0x3}, {0x80, 0x12, 0xfe, 0x401}, {0x500e, 0x4, 0x5a, 0x4}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x810, r2, 0x0) socket$inet(0x2, 0x2, 0xf9) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r3 = socket(0x24, 0x2, 0x0) sendmmsg(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, 0x10, 0x400) sysctl$kern(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0) open(0x0, 0x615, 0x15) socket(0x800000018, 0x3, 0x0) mmap(&(0x7f00007f7000/0x3000)=nil, 0x3000, 0x0, 0x6810, 0xffffffffffffffff, 0x0) r4 = socket(0x1, 0x1, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1021, 0x0, 0x0) 3.375725177s ago: executing program 1 (id=8075): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETA(r1, 0xc0284457, &(0x7f00000000c0)={0xfffeffff, 0xfffffffb, 0xfefffffc, 0xfffefffc, "0800000000060000000100002a1e0400", 0x5}) ioctl$BIOCSRTIMEOUT(r1, 0x8010426d, &(0x7f0000000000)={0xfffffffffffffffd, 0x3}) ioctl$VNDIOCGET(r1, 0xc4104603, &(0x7f00000009c0)={'\x00', 0x200000, 0xc84e, 0x7}) writev(r0, &(0x7f0000000980)=[{&(0x7f00000002c0)='eEr#h', 0x5}], 0x1) execve(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) 3.374611283s ago: executing program 7 (id=8076): r0 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) ioctl$VT_GETMODE(r0, 0x40087603, &(0x7f0000000280)) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x900, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000480)=ANY=[]) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x14, 0x6, 0x30, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x3, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11, 0xbd, 0x0, 0x1}}}}}}}) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000080)) r2 = fcntl$getown(r0, 0x5) fcntl$lock(r0, 0x9, &(0x7f0000000500)={0x3, 0x2, 0x10000000000000, 0x54, r2}) flock(r0, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x411, 0x50) open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x1a0) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00') symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = open$dir(&(0x7f0000000300)='.\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x3361) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(r4, 0xc4504442, &(0x7f0000000000)={0x32, 0xffffffff, 0x0, 0x4000, "97a2224ff1c14a06ebb178926cc9795a6b47c1d1", 0x1, 0xfffffffe}) r5 = syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000080)={0x2, 0x4, 0xfffbfffe, 0x40000005, "ff14e7130b40000200", 0x2, 0xfffffffe}) ioctl$WSMUXIO_LIST_DEVICES(r4, 0xc1045763, &(0x7f0000000540)={0x5, [{0x1, 0xfffffffd}, {0x3, 0x100}, {0x1, 0x7}, {0xbf11455da7794aef, 0x8}, {0x2, 0x5}, {0x3, 0x5}, {0x3, 0x73894239}, {0x2, 0x5}, {0x2, 0x1}, {0x1, 0x2}, {0x1, 0x7}, {0x3, 0xa6c}, {0x1, 0x10}, {0x1, 0x8}, {0x1, 0x1001}, {0x3, 0x81}, {0x2, 0x401}, {0x3, 0x7}, {0x1, 0x9}, {0x3, 0x800}, {0x1}, {0x1}, {0x3, 0x8000}, {0x1, 0x4}, {0x3, 0x23}, {0x2, 0x5}, {0x1, 0x6}, {0x1}, {0x1, 0x4}, {0x3, 0x8}, {0x2, 0x40000}, {0x3, 0x1}]}) r6 = semget(0x0, 0x1, 0x281) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xcbdf4d1d31039a48, 0xdfc}, 0x10, 0x4000000000000004, 0x0, 0x0, 0x800004, 0x2, 0x1, 0x3}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) semop(r6, &(0x7f0000000000), 0x23) sysctl$ddb(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unveil(0x0, &(0x7f00000001c0)='r\x00') ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x2, 0x4ebfac6bbaf7949) 3.137773484s ago: executing program 5 (id=8077): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x3, 0x8, 0x80000001, 0xa1b0, 0x10001, 0x10, [{0xfffffffc, 0x2890, 0x4, 0x5}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x1, 0xfffffffa, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x4, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0x10000}, {0x6, 0x803, 0x3, 0x7}, {0xd0f5, 0x82, 0x5, 0x9}, {0x6a75, 0x8009, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x7, 0xa, 0x8}, {0x3, 0x7, 0x6, 0x1}, {0x6, 0xfffffffa, 0x60, 0x6}, {0x10008, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30004}]}) sysctl$hw(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="3ebf2da455551bbf7df3133ad39785daef8e2687677cc2df24c05b3ede8e20764ecddeff2443c62977ae1fe67fdf943dc8c8cd4c285c3369fd4e4ad72f0648b326079b9e17b71bc9e7668ee1eb0940c27b6ba950198e955e1fa4", 0x5a) syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc1206949, &(0x7f00000001c0)) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xe9) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9b, 0xffffffffffffffff, 0xfffffffffffffff8, 0x27fffffffffffffc, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0x101, 0x8, 0x80002001, 0x1, 0x10, [{0x1000, 0x0, 0x4, 0x7ff}, {0xfffffffc, 0x4, 0xa, 0x7}, {0x6, 0xf86, 0x300, 0xaf9}, {0x5, 0x0, 0x9}, {0x6, 0xfe, 0xe, 0x7}, {0x9, 0x1, 0xffffffff, 0x9c}, {0x80000cdf, 0xfffffffd, 0x3, 0x6d}, {0x20007, 0x803, 0x14, 0x8000}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x7ffd, 0xc7, 0x7e}, {0x4, 0xfffb, 0x9, 0xaeb}, {0x46ae, 0x40, 0x6, 0x5}, {0xdc, 0x4, 0x5, 0x3ff}, {0x8000, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x7, 0x7}, {0x3, 0x1, 0x4, 0x7e}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x2) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0xffffffff, 0x6, 0x2000000d, 0x3, 0x200002, 0xd87, 0xac, 0x1, 0x0, 0x100000000644, 0x7}) r6 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0xa, 0x7, 0x80010001, 0xfffbffff, 0x80de, 0x10, [{0x0, 0xf, 0x0, 0x70ffd}, {0x7, 0x2, 0x8, 0x4}, {0x10400006, 0xf86, 0x0, 0x40001}, {0x5, 0x800, 0x7, 0x1000000}, {0xfffffff3, 0x7, 0x80e, 0x7}, {0x5, 0x1, 0xffffffff, 0x800009c}, {0x108, 0xffffffff, 0x3, 0x6f}, {0xa, 0x10000803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0xa}, {0x6, 0x8001, 0xc7, 0x8}, {0x4, 0xfffb, 0x2, 0x1}, {0x803, 0x40, 0x8, 0x4}, {0x5, 0x4, 0x2000005, 0x3ff}, {0xffff0354, 0xfffffffa, 0x6226, 0xc}, {0x7, 0x6, 0x7, 0x20000000}, {0x0, 0x1, 0x4, 0x30000}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x7, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x1) setuid(0xffffffffffffffff) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$BIOCGRSIG(r1, 0x40044273, &(0x7f00000001c0)) bind$unix(r0, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) socket$unix(0x1, 0x2, 0x0) 3.137041248s ago: executing program 4 (id=8079): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000280)=[{0x5, 0xd}, {0x7c, 0xf, 0x8, 0x20000007}, {0x6, 0x80, 0xff}]}) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) r1 = semget(0x0, 0x4, 0x208) r2 = getuid() setreuid(0xee00, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$BIOCFLUSH(r0, 0x20004268) setregid(r4, 0xffffffffffffffff) r5 = getuid() setuid(r5) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) sysctl$vfs_ffs(0x0, 0x0, &(0x7f0000000080)="06e6a186cf8257197b8d91e7c56e0abd770a63cab73518977eb4e7f3cf84aa05aa7689c8dbe18896a2e8229d32f6e84c8033909c4b569ec9cc4cf6a445c82559ea205149a66ab99c89e4c319f5ced9ad4f702334eeb646b39b919a8d4fde562ba7135f28c86c751ee09b3028f555ae44a521f306ab76d3ef708e7f40d6e5c7cae35bb7622d953d709d8f83a05b80ff08aeb6f1a2537d113aedf5291a08932a64899b6d9e9be1f561e9fbc452ea18", 0x0, 0x0, 0x0) r6 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) r7 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r7, 0x81206919, &(0x7f0000000100)) ioctl$FIONREAD(r7, 0x8080691a, &(0x7f0000000100)) r8 = getegid() semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000000)={{0x10000, r2, r4, r5, r8, 0x181}, 0x80000001, 0x1, 0x4}) 2.855489354s ago: executing program 0 (id=8080): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x2, 0x3ff, 0xffff, 0x0, 0x1000004, 0x4, 0x4000001, 0x0, 0x0, 0x1, 0xf1e}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x6, 0x100003, 0xfffffff9, 0x0, 0x4, 0xa, 0x1, 0x1, 0x2, 0x4001, 0x7f}) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9c, 0xffffffffffffffff, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x181c, 0xd79b, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) socket$inet(0x2, 0x2, 0x0) 2.855071013s ago: executing program 2 (id=8081): unlink(0x0) r0 = dup(0xffffffffffffffff) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) clock_gettime(0x2, &(0x7f0000000000)) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) r3 = socket(0x0, 0x4000, 0x9) setitimer(0x0, &(0x7f0000000140)={{0x7ffe, 0x500800000000009}, {0xffffffffffffffff, 0x7ffc}}, 0x0) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) r4 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0xffff, 0x10, 0x0, 0x0) kevent(r1, &(0x7f0000000080)=[{{r4}, 0xfffffffffffffffe, 0x10, 0x1, 0x2, 0x8}, {{r2}, 0x7, 0x43, 0x1, 0xffffffff, 0x5}, {{r3}, 0xfffffffffffffffb, 0x70, 0x80000000, 0x3}, {{r2}, 0xfffffffffffffffd, 0x80, 0x40, 0x5, 0x5}], 0x3, &(0x7f0000000240)=[{{r3}, 0xffffffffffffffff, 0x8, 0x2, 0x5, 0xca}, {{r3}, 0xfffffffffffffffb, 0x0, 0x20000000, 0x3, 0x79a}, {{r0}, 0x0, 0xa, 0x10, 0x1, 0xa9fc}], 0x800, &(0x7f0000000180)={0xd63e, 0x6}) writev(0xffffffffffffffff, 0x0, 0x0) kevent(r0, &(0x7f0000000040), 0x0, 0x0, 0x7, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xedc, 0xffffffff80000000}) 2.854405076s ago: executing program 1 (id=8082): setreuid(0x0, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x5) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240), 0xfffffffffffffe0d) getppid() setpgid(r0, r0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) getuid() r1 = socket(0x18, 0x3, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x2}, 0xc) bind$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xa) getuid() semget(0x0, 0x1, 0x281) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x900, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0xc, 0xf8, 0x5, 0xffffffff}, {0x7c, 0x3d, 0x26, 0xb}, {0x6, 0x9, 0x1, 0x10001}]}) mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x1e5f) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x23) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x6, 0x7fff, 0xfb, 0x2, 0x80000003, 0x10001, 0x10, [{0x0, 0xfff, 0x4, 0x70fff}, {0x7, 0x8, 0x8, 0xfffffff8}, {0x8, 0xf86, 0xffffffff, 0x9}, {0x8000001, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x446, 0x6, 0x4, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x9, 0xff06, 0x14, 0x8}, {0x80002, 0x82, 0x5, 0x9}, {0x5, 0x7fff, 0xd1b, 0x88}, {0x1d1, 0x8010001, 0xc, 0x2}, {0x7fd, 0x20000b, 0x8, 0x9}, {0xb8c, 0x4, 0x8, 0x635}, {0x29a71715, 0xfffffffa, 0x1, 0x6}, {0x9, 0x7, 0x5, 0x4}, {0x0, 0x1, 0xffe, 0x30804}]}) sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0x7, 0x0}) 2.524913644s ago: executing program 5 (id=8083): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x10000, 0x0) (async, rerun: 32) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (rerun: 32) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000380)='MN', 0x2}], 0x1) (async, rerun: 64) getpid() (async, rerun: 64) ioctl$TIOCSETA(r0, 0xcd504406, &(0x7f0000000080)={0x0, 0xfffffffd, 0x1000, 0x0, "97a2224faf891c15ebb178926cc9795a6b47c1d1", 0x1000000}) (async) ioctl$TIOCSETA(r0, 0xcd504406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) (async, rerun: 64) ioctl$TIOCSETA(r0, 0xcd504406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "97a2224faf891c15ebb178926cc9795a6b47c1d1"}) (async, rerun: 64) close(r0) (async) r2 = socket(0x2, 0x1, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffffd, 0xca, 0x2, 0x8000000000000001, 0x3}], 0x8, 0x0, 0x8c97, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) r3 = socket(0x18, 0x1, 0x0) (rerun: 64) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) ioctl$FIONREAD(r2, 0x80206910, &(0x7f00000001c0)) 2.522117379s ago: executing program 5 (id=8085): socket(0x24, 0x2, 0x0) (async) openat$pci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, 0x0) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x83, 0x7, 0x7, 0x6}, {0x1, 0x2, 0x5, 0x1}, {0x9e, 0x0, 0x1, 0x86}]}) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f00000000c0)="a2352f8e25cd38a60452647561001a90f9fc9a68dfff8a962ee6b72f258152ea33ef038d523a92b0473febcc690000ff44cd1c6e52", &(0x7f0000000000)=0x35, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 64) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) r1 = socket(0x2, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000440)={&(0x7f00000002c0)=@abs={0x0, 0x0, 0x0}, 0x8, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140800000000000007"], 0x18}, 0x400) (async) r2 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0xa, 0x5, 0x100000000, 0x0, 0x80008000, 0x8000002e, 0x1, 0xffffffff, 0x2f01, 0x2, 0x3, 0xfffffffffffffffe, 0x2, 0x4, 0x4, 0xfffffffffffffff5, 0x100], [0x5, 0x5, 0xfffffffbfffffff8, 0x0, 0x1, 0x80000000, 0x800ee4, 0x0, 0x0, 0x800000047], [0x8, 0x2, 0x100000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x1ffffffffff, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0xfffffffd, 0xfffffffd, 0xffc}, {0x1008, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x40003, 0x1}, {0x6, 0x1, 0x7, 0x2}, {0x0, 0x95b, 0x200, 0xc}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x1, 0x2}}}) r3 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async, rerun: 64) close(0xffffffffffffffff) (rerun: 64) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, 0x0, 0x0) (async, rerun: 32) r4 = socket(0x11, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r6) (async) sendmsg(r5, &(0x7f0000003d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10a51f95f60000000000000001001f00fffbffff"], 0x10}, 0x6) (async) sysctl$vfs_nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getsockname$unix(r4, 0x0, &(0x7f0000000280)) (async, rerun: 32) pwrite(r3, &(0x7f0000000080)="7bad804d5d917af8b348bb00350718d4fe7ae69d3f5785255c01aa68d020af8693420a46bbc9f9", 0x27, 0x1) (async, rerun: 32) kevent(r2, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) (async) poll(&(0x7f0000000140)=[{r2, 0x3}], 0x1, 0x9) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 64) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async, rerun: 64) sysctl$vfs_nfs(&(0x7f00000001c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000300)="e9db2624060590bf5fffd397771fd9a41d76d1b60370122e9ac363079738f5c8960fd2fec238914ecb61415a39eda946f882555a47999769a70dc25e0d909d38df8f36d2fa4ee86ac39059d47ca19dda0512260feec89c6f0029f8e6264da2a2512729b2e2372c315f9709d3a0904467bc5d9a14abf945981e1f1f87738e88b1624551ccf45db43fb6e05bd2fef518b4f1ef52d3dbc287fd97623d3edf", &(0x7f0000000200)=0x9d, &(0x7f0000000480)="7c0eed0323586b9404762dd9b525e0917b5218158dd893639cc8118522d7fd02917ed1b714e4c5bd6dc35fcd8ff23bc7ffa2c0eece800a9cfb95204ae9fb7dd16c5dc8e030c35df4426ae8422ac9a680b62f0c8480197170950333c170bd54debbe5c9c8ecf1fc2e4f1bb7993b183f1966610345adfa2c0ec4b2ff61aacb4c403543ce743da8d7a2d0c3781840955d48e49742200289e84f61ee4f9ac1f4bc3e1328ad4aafcc037f43a40c1da6", 0xad) 1.529048905s ago: executing program 5 (id=8086): syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="e706f2ffff1f", @random="391e7dd7a2d7", [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0x30, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x9, 0x6, "c46dea", 0x6, 0x6, 0x8, @loopback, @mcast2}}}}}}}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc028698b, &(0x7f0000000100)) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000050"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0d197e8c77c8254571518927d2c8ccffffff"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) r1 = socket(0x18, 0x2, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r1, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) 1.528745271s ago: executing program 4 (id=8087): sysctl$net_inet_tcp(0x0, 0x0, &(0x7f0000000000)="9b1809ffffff", 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x3, 0x0) bind(r0, &(0x7f0000000000), 0x10) 1.528113964s ago: executing program 3 (id=8088): r0 = shmget$private(0x0, 0x3000, 0x142, &(0x7f0000ffa000/0x3000)=nil) setsockopt(0xffffffffffffffff, 0x843e, 0xcb3, &(0x7f0000000140)="be", 0x1) getrusage(0x0, &(0x7f0000000200)) r1 = shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x3000) shmdt(r1) 1.527835395s ago: executing program 1 (id=8089): chmod(&(0x7f0000000440)='.\x00', 0x35e) mkdir(&(0x7f0000000040)='./file2\x00', 0x0) r0 = socket(0x18, 0x2, 0x0) close(r0) r1 = socket(0x18, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) fcntl$lock(r2, 0x9, 0x0) ioctl$WSDISPLAYIO_ADDSCREEN(r2, 0x80245753, &(0x7f0000000180)={0x5, './file2/file0\x00', './bus\x00'}) setsockopt(r1, 0x1000000029, 0x37, &(0x7f0000000040)="03000000", 0x4) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) msgget(0x3, 0x1) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) execve(0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="89ffa23f7c252adb0070162e86dd6009000000200610030000000000000037f87ccdc0c4a92cff0000000001ea24802c745e000001004ef2d765ccf50a431e8980a464d1"]) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) ioctl$WSMUXIO_INJECTEVENT(r2, 0x80185760, &(0x7f00000001c0)={0xc, 0x3, {0x10001, 0x200}}) r3 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f00000000c0)=0x8) open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0x0) rename(&(0x7f0000000080)='./file2/file0\x00', &(0x7f0000000000)='./file2\x00') 1.452256346s ago: executing program 3 (id=8090): openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) (async) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r0 = open(&(0x7f0000000140)='./file0\x00', 0x80, 0x6) r1 = kqueue() kevent(r1, &(0x7f0000000200)=[{{r0}, 0xfffffffffffffffe, 0x29, 0x80, 0xffffffffffffffff, 0xc}, {{r0}, 0xfffffffffffffffe, 0x10a, 0x10, 0x4, 0x8000000000000000}], 0x5, 0x0, 0x15, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f000017b000/0x1000)=nil, 0x1000, 0x1) (async) fcntl$getflags(r2, 0x1) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4a) syz_open_pts() open(&(0x7f0000000080)='./file0\x00', 0x0, 0xa0) (async) socket$inet(0x2, 0x3, 0xfc) r4 = kqueue() (async) r5 = socket$inet(0x2, 0x2, 0x0) (async) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x9810, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000300)={0x4, 0x5, 0x4, 0x6, 0x80000000, 0xbbc, 0x5, 0x10, [{0x3, 0x10, 0xb}, {0x10001, 0x2, 0x101, 0xc}, {0x7fff, 0xffffffff, 0x3, 0x8}, {0x80, 0x28, 0x80000001, 0xac}, {0x40800, 0x5, 0x3, 0x7f}, {0x7, 0x3, 0x910c, 0x7}, {0x9, 0x2, 0x10, 0xca9a}, {0x400, 0x3, 0xfffffffb, 0x6b}, {0xfffffffe, 0x5, 0x3, 0x47be}, {0x81, 0x7, 0x2, 0x6}, {0x9, 0x3, 0x9, 0x8000}, {0x1, 0x80000001, 0x5, 0xea1b}, {0x0, 0x6, 0xffc, 0x7}, {0x7, 0x0, 0x9, 0x62}, {0x3, 0x7, 0x1f2, 0x5}, {0x2000000, 0x22, 0x8, 0xfffffff8}]}) r6 = dup(r5) setsockopt$inet_opts(r6, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) (async) dup(r6) (async) sendto(r6, &(0x7f0000000080)="e7920273c94c3c52", 0x8, 0x0, 0x0, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BIOCGRTIMEOUT(r7, 0x4010426e, &(0x7f0000000180)) (async) dup2(r4, r6) (async) r8 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$VNDIOCSET(r8, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000100)='./file0\x00', 0x3fb, 0x0}) 1.44928001s ago: executing program 4 (id=8091): r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000240)='/dev/speaker\x00', &(0x7f0000000340)='/dev/speaker\x00'], &(0x7f0000000600)=[&(0x7f0000000400)='\'^*!(:.(\x00', &(0x7f0000000440)='/dev/speaker\x00', &(0x7f0000000480)='\x00', &(0x7f0000000540)='@g*%:./\\*@-+\x00', &(0x7f00000005c0)='/dev/speaker\x00']) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r1, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)="5149094ff97301febb95c8a84981aff578dee373fade2dd2087c859632297b063ce405f9ff92af3b472dd8b73eb51655bf1e111d769b39b09b231f4745f8118ec9f4bbb19822ee4e156e2765839aeda2efe76e5a151aadd1d02272a3983b743733", 0x61}], 0x2) execve(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x615, 0x0) ioctl$VNDIOCSET(0xffffffffffffffff, 0x40204402, &(0x7f00000001c0)={0x0, 0x0, 0x0}) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, &(0x7f0000000080)="57fe6f55d557ed6e0af49609cf85fb253f0e5904eaba2fd1df2d465f0a93896f31a17dc107e02c9c09e0af82b1751c8d4df05bfe4af0abb80b3dd85019", 0x0, &(0x7f00000001c0)="a8528a43", 0x4) write(0xffffffffffffffff, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) accept(r0, &(0x7f00000000c0)=@in, &(0x7f0000000180)=0xc) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000040)}], 0x1) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x3, &(0x7f0000000140)="118bea625d95de8f92c010baed45ec4bf03ace254b57973bb6de7b1c90301e9d3b5e6fb6ffffffffffffffff76c775a2a4e0556565a830032eef776127fd247103c14ab0a1cea9b4593be484f46a02ea73e910d041c5777bd852e57d3248832b91d06fe47d126022a1654859149e9486306d2f11fb1cc826c42f81b0d114f8af4ceb029a5210bb6947464bf678ba1d64a2013131fedfe60443aa13e015b28a16ea924bf89ad45c006213a6d0e194b9abcb3ddfab0c69b8c280bfc9c11f26026f6231b5e725921be8b0", 0x0, 0x0, 0x0) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) nanosleep(0x0, 0x0) r3 = syz_open_pts() ioctl$TIOCOUTQ(r3, 0x40047473, &(0x7f0000000000)=0x33e282a0) mprotect(&(0x7f0000003000/0x8000)=nil, 0x8000, 0x1) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f0000000040)) 1.443760648s ago: executing program 7 (id=8092): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75) close(r0) 1.431899651s ago: executing program 2 (id=8093): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x801, 0x4000003, 0x8000, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x10000000, 0xc, 0xc3, 0x71000}, {0x7, 0x4, 0x40000055, 0x103}, {0x8, 0x3ff, 0xa, 0x200000b}, {0x2af, 0x8800, 0x23, 0x2}, {0x4000001, 0x2, 0x402800, 0x7}, {0x202, 0xc64, 0xfffffffe, 0x9}, {0xce3, 0x44, 0x200004f6, 0x2}, {0x3ff, 0x9, 0x7, 0xb}, {0x7, 0x7fff, 0xf, 0x103}, {0x44, 0x7, 0x93, 0x1ff}, {0x1de, 0xc, 0x7, 0x3}, {0x9, 0x27, 0x8, 0x5}, {0xe, 0x400, 0x3, 0x2}, {0x29a71717, 0xfffffffa, 0x0, 0x9}, {0xc, 0x5, 0x2, 0x1}, {0xfffffffd, 0x2000bc3b, 0x4, 0x30001}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x4c}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0x802069dc, &(0x7f00000001c0)) 1.303242184s ago: executing program 7 (id=8094): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0xfa) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_emit_ethernet(0x21, &(0x7f00000003c0)=ANY=[@ANYBLOB="d50e7e2249ceaaaaaa9100000000000000b0dcae00f3c2a800"/36]) syz_extract_tcp_res$synack(&(0x7f0000000380), 0x1, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) ioctl$TIOCSETA(r1, 0xc4504448, &(0x7f0000000740)={0x6, 0x0, 0x6, 0x422, "6374224ff1c14649ebb1789280c9795a6b47c1d1", 0x3}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) ioctl$VNDIOCSET(r0, 0xc0284408, &(0x7f0000000240)={0x0, 0x8000000000004, 0x0}) 1.302898421s ago: executing program 3 (id=8095): r0 = socket$inet6(0x18, 0x4, 0x1) bind$inet6(r0, &(0x7f0000000000)={0x18, 0x3, 0x0, 0xc}, 0xc) (async, rerun: 32) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)="cac73ce119f42809f7c30824a593555ffe", 0x11}], 0x1, 0x0, 0x0, 0xd}, 0x0) (async, rerun: 32) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r1 = socket(0x18, 0x1, 0x0) (async) mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x100) (async) r2 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) ioctl$BIOCGETIF(r2, 0x4020426b, &(0x7f00000002c0)={""/16, @ifru_broadaddr=@un=@file={0x0, ""/517}}) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x3, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f000036c000/0x1000)=nil, 0x2}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, 0x80000002}, {&(0x7f000055e000/0x4000)=nil, &(0x7f000032f000/0x2000)=nil, 0xa}, {&(0x7f0000613000/0x2000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f0000251000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x9}, {&(0x7f000043b000/0x1000)=nil, &(0x7f000076c000/0x4000)=nil, 0xffff}, {&(0x7f00000a5000/0x1000)=nil, &(0x7f000079e000/0x4000)=nil, 0xffffffffbffffff9}, {&(0x7f0000576000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5e04}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8}], './file0\x00', 0x3}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x87, 0x8d, 0xa, 0x80000004}, {0x5, 0xfd, 0x3}, {0x6, 0xf9, 0x8, 0x4}]}) (async) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSRSIG(r2, 0x80044272, &(0x7f0000000500)=0x2) (async, rerun: 64) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 64) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) ioctl$FIONREAD(r1, 0xc038694e, &(0x7f00000001c0)) (async) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0x69, &(0x7f0000000180)={{0x18, 0x1, 0x53, 0x3}, {0x18, 0x2, 0x7, 0x3}, 0x0, [0x9, 0x7, 0x9, 0x398, 0x2, 0x1, 0xc, 0x401]}, 0x3c) sysctl$kern(&(0x7f0000000040)={0x1, 0x2}, 0x2, &(0x7f00000000c0)="453fe2", &(0x7f0000000100)=0x3, &(0x7f0000000200)="83a4c76553424479f843e14359fc20ed579a9f88b0bb5751f4c5b06c1120ab0fcad075fb38df071ebdd7f0e7c642d2f786eda1d13a2332ef14c475794a457a70f85f05c2968f97d836c3c0c7b1ded9fc18059c8b3197a45d45a8d0625e7fc22e850279f9da18bf245896d66510281156bec4e30059d7f869559bb54a6df856df41139b9fa9dc3007b5a9123358663ca48285d123269c4e96912e5ca037e9448ef62e013e5908f5275080c7cc92b5f67a38835ba9b8ff3b88", 0xb8) 1.245556645s ago: executing program 2 (id=8096): r0 = socket$unix(0x1, 0x5, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, &(0x7f00000000c0), 0x0, 0x0, 0x0) madvise(&(0x7f0000088000/0x3000)=nil, 0x3000, 0x5) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x8, 0x0, 0x0) readv(r1, &(0x7f0000000200)=[{0x0}], 0x1) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r0, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) close(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfa) ioctl$TIOCFLUSH(r3, 0xc0187009, &(0x7f0000000080)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x200}, 0x0, 0x0, 0xfffffffffffffffb}) r4 = socket(0x18, 0x3, 0x0) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) kqueue() getsockname$inet(r4, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendto$unix(0xffffffffffffffff, &(0x7f00000001c0)="b100", 0x2, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x1, 0x0) 1.041409732s ago: executing program 0 (id=8097): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r2, 0xffff, 0x1005, &(0x7f0000000280), &(0x7f00000002c0)=0x10) bind$unix(r1, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x3, 0x0, 0x6}, {0x7, 0x0, 0x0, 0x20000}, {0x103, 0x0, 0x0, 0x10001}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 1.04109138s ago: executing program 6 (id=8002): r0 = socket(0x11, 0x3, 0x3) sendto$unix(r0, &(0x7f0000000280)="b1000501600000001790000007000000045c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYRESHEX]) sysctl$net_inet6_ip6(&(0x7f0000001e40)={0x4, 0x18, 0x29, 0x32}, 0x4, &(0x7f0000001e80), 0x0, 0x0, 0x0) r1 = syz_open_pts() r2 = syz_open_pts() sysctl$net_inet6_ip6(&(0x7f0000000080)={0x4, 0x18, 0x29, 0x1}, 0x4, &(0x7f00000000c0)="c6ca92b430ceac0d54345de5e6aec3ec574208fcda9a8c95cfb88875c7d067d68d4b2c2cc7ba1beff076bb667fb1103b1cefefee51be36236f7c330722e9e8d7437bb973db49d4449f19f8343d0de7e4cfc1b322fbc4dc12e3719a5fc125c68469f03fc05dca385c7abdc6a84e18f3e4657cc711260be7dec641173102c8d1320bf4262b529284c7041964ea5556a205e3644eda5e0287447082e4b1eb388df3698232", &(0x7f0000000180)=0xa3, &(0x7f0000000280)="ebeb850648a1f1681f2e2502dcd3827fdeac549361ac7dd45652790931428b9c20e2f7dafb8fad15193b8c94f331b69ca484606a5e8b93cdf242cb1ede756287a4da9cb7490c3fef427a0fbf05b0761206315c870dea59fb2781418f7f4d45eb81ba50b82f44ada1914b7b286f5d1421f39e0fb508e430b5b1497280478fc274ee26d1e8e84edcc900bef9ee0de1829de5226e44c6e98b4c3283b8e3ecab982c62d19faedc95ad67fa3dfba73a82f1f0236d0766ecc60550066068e1f3e433c935d9a9a1262ed2ecea5554560c4f35ba46fd24fdecf7043c799e044ea7", 0xdd) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x1000000ff}}) sysctl$hw(&(0x7f0000000000)={0x4, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xa}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x2000740e) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929) setuid(0xffffffffffffffff) lstat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff) sysctl$kern(0x0, 0x0, &(0x7f00000003c0)="e15a79c7de1e2c6bf7635a54862902af124413450000a1f515df5a9da4070000006ebb807e7fa1d2498b43", 0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x2, 0x8, 0x2c, 0x64, 0x5, 0x7e, 0x37, 0x0, @multicast1, @rand_addr=0x7, {[@rr={0x7, 0x3, 0x4}]}}, @tcp={{0x3, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xcf, 0x0, 0x9}}}}}}) writev(r1, &(0x7f0000000040)=[{0x0}], 0x1) sysctl$hw(&(0x7f0000000240)={0x6, 0xf}, 0x2, 0x0, 0x0, &(0x7f0000000000), 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) unlink(&(0x7f00000001c0)='./file0\x00') 1.040823839s ago: executing program 4 (id=8098): r0 = socket$unix(0x1, 0x5, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, &(0x7f00000000c0), 0x0, 0x0, 0x0) madvise(&(0x7f0000088000/0x3000)=nil, 0x3000, 0x5) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x8, 0x0, 0x0) readv(r1, &(0x7f0000000200)=[{0x0}], 0x1) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r0, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) close(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfa) ioctl$TIOCFLUSH(r3, 0xc0187009, &(0x7f0000000080)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x200}, 0x0, 0x0, 0xfffffffffffffffb}) r4 = socket(0x18, 0x3, 0x0) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) kqueue() getsockname$inet(r4, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendto$unix(0xffffffffffffffff, &(0x7f00000001c0)="b100", 0x2, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x1, 0x0) 648.48393ms ago: executing program 5 (id=8099): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0084463, &(0x7f00000000c0)={0x742, 0xffffffff, 0xd, 0x3, "c9f75500000000003b0bca8f00075a6b47c0d100", 0xfffffffd, 0xe07}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x3) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000080), &(0x7f0000000040)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) 648.308064ms ago: executing program 3 (id=8100): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) chmod(&(0x7f0000000040)='.\x00', 0xfc) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000000029, 0x41, &(0x7f0000000280), 0x0) (async) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchdir(r2) (async) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) (async) setsockopt(r3, 0x1000000029, 0xb, &(0x7f0000000180), 0x0) (async) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='r\x00') (async) kqueue() (async) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x3}, 0x4, &(0x7f0000000040)="cc515c91d91baaa98be51436b3f578cbfd8218b9047d876afaec321842a4c1960b1dd4bb83c3124ff86b3b1d9ed7182b", &(0x7f00000000c0)=0x30, &(0x7f0000000100)="38760b598e60fdf09e8484ba9e742e8af13f47679441120c43054690d2c27f956949b7db21106053f12e9b3617c28b019c709ded0cd6aeb92f35bb367b07006bc938", 0x42) (async) recvmmsg(r0, &(0x7f0000005100)={0x0, 0x4}, 0x10, 0x41, 0x0) 647.205731ms ago: executing program 7 (id=8101): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x2}, 0x8) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f00000002c0)={0x2, &(0x7f0000000040)=[{0xd, 0x2, 0xc, 0x2}, {0x0, 0xd, 0xb, 0x5}]}) 467.967567ms ago: executing program 1 (id=8102): r0 = socket(0x1e, 0x3, 0x0) sendmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000), 0xffffffffffffd94}, 0x0) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000040)={0x2, 0x2, 0x9, 0x300000003}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) 466.818028ms ago: executing program 2 (id=8103): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f00004b8000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x7}, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x55}, 0x3, &(0x7f0000000180)="3bf2925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a7622c5788f7a4af1ce34c908cb8c57d076fb138c3b9bd02fb94adfa5ce78730d11c294f53adf325dffdebeba8dde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951d16adff26aa2e48b4", &(0x7f0000000080)=0xa0, &(0x7f0000000240)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa30200000042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe97b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba300000000000000014557f61ad238a7317e73650b8b125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98606e472b70b560f7021f567adf4d", 0xfffffffffffffe9d) readv(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/225, 0xe1}, {&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f0000000200)=""/93, 0x5d}], 0x3) pipe(&(0x7f00000001c0)) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f00004b8000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) nanosleep(&(0x7f0000000040)={0x0, 0x7}, 0x0) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x55}, 0x3, &(0x7f0000000180)="3bf2925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a7622c5788f7a4af1ce34c908cb8c57d076fb138c3b9bd02fb94adfa5ce78730d11c294f53adf325dffdebeba8dde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951d16adff26aa2e48b4", &(0x7f0000000080)=0xa0, &(0x7f0000000240)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa30200000042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe97b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba300000000000000014557f61ad238a7317e73650b8b125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98606e472b70b560f7021f567adf4d", 0xfffffffffffffe9d) (async) readv(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/225, 0xe1}, {&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f0000000200)=""/93, 0x5d}], 0x3) (async) 418.712478ms ago: executing program 6 (id=8104): setreuid(0xee00, 0x0) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 64) r0 = getuid() (async, rerun: 64) r1 = getuid() chown(&(0x7f0000000040)='./file0\x00', r1, 0xffffffffffffffff) setreuid(0xee00, r0) (async) getgroups(0x7, &(0x7f00000002c0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) 417.258442ms ago: executing program 0 (id=8105): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="890704", 0x3) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) (async) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x1a7, 0x4003}, 0x8, 0xd7f, 0x0, 0x0, 0x1ff, 0x4000000000, 0x2, 0xb}) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409}, 0x8) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) (async) r3 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) (async) r4 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r4) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x7fff}, {0x7, 0x4}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r3, 0x0) (async) writev(r2, &(0x7f0000000140)=[{0x0}], 0x1) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r5 = socket(0x2, 0x3, 0x1) setsockopt$inet_opts(r5, 0x0, 0x1, &(0x7f0000000080)="0315f1d8dec5a317a93546ba", 0xc) (async) connect$unix(r5, &(0x7f0000000000), 0x10) (async) sysctl$vfs_fuse(&(0x7f0000000040)={0xa, 0x12, 0x2}, 0x3, &(0x7f00000000c0)="3c5bf5051ad28f8f91c3e2001eef14ff7f17d56320c8b8966de2e8f2df92f1254518b0a6bf378afb1007d2b4125f7bc88a5685a10877f33b984a8f23dc7b340503201955b72a61aacfdf23dbc8924394f623322819c028e7d1d6664feb1fb75736edec2165f4a257ccfaae50a77fd1192b6c66ca8e7b328a2828154e11726085397c2546aaadc74359f41a4d1f3d6079f7620f84929e7fac6bb9b48f08fd", &(0x7f0000000180)=0x9e, &(0x7f00000001c0)="22122c8eff5e51057d604c12a7612f28eea6e38fb4ac32604e344eac8cba17cd8f6cb045e76ca4ec29866e53fdd568640d5890156dcc70770067897b0dbedff94dd15f8c1b0e14c97412850a4b9445f9e3f59cfa35f3da2cb6e91a98f556c2d31de1711a654116e9dfd4b8ed079db6c25432f4bf6816299d6f06558e55f61186c07c5856803544840bda73d7aded08a8cb3b24a4ac0a77f51edda9ae9d5b01e868a4eec7ece6c4a5c954840c94edc03c03093530c69401d006733083236b5633db74ad3a43df8fa6f94c2f0b227641fd7a370acb01670217c0ff98781c3c838e0a5c", 0xe2) (async) sendto(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 161.334214ms ago: executing program 6 (id=8106): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x80007, 0x0, 0x0, 0x0, 0x0, 0x199, 0x7}, 0x85c, 0x4, 0x0, 0x0, 0x80000000003, 0xfffffffffffffffe, 0x5, 0x8000004}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x1f}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x123) execve(&(0x7f0000000700)='./file0/file0\x00', &(0x7f00000008c0)=[&(0x7f0000000780)='#(\xa1\x00', &(0x7f00000007c0)='[-.\x00', &(0x7f0000000800)='/dev/pf\x00', &(0x7f0000000840)='\'\x00', &(0x7f0000000880)='&\x00'], &(0x7f0000000a00)=[&(0x7f0000000900)='/dev/pf\x00', &(0x7f0000000940)='/dev/pf\x00', &(0x7f0000000980)='/dev/pf\x00', &(0x7f00000009c0)='\x00']) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x4, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0xfffffffd, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f4, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1c9, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0xfe, 0x2}, {0x0, 0x0, 0x40, 0x9}, {0x2, 0x0, 0x0, 0x85}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffe53) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000140)='./file0\x00', 0x8}) r2 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) r3 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0xf00, r3) r4 = socket(0x18, 0x3, 0x0) getsockname$unix(r4, &(0x7f00000011c0)=@file={0x0, ""/4103}, &(0x7f0000000000)=0x1009) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x2, 0xf0, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) syz_emit_ethernet(0x409, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) ioctl$TIOCSETA(r2, 0xc4504441, &(0x7f0000000740)={0x9, 0x10, 0x2, 0xc, "aca2224ff1c14649ebb178926cc9795a0000d100", 0x7, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) 161.015198ms ago: executing program 7 (id=8107): r0 = shmget$private(0x0, 0x3000, 0x142, &(0x7f0000ffa000/0x3000)=nil) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2008, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}}) syz_emit_ethernet(0x0, 0x0) r1 = socket(0x11, 0x3, 0x8) fcntl$getown(r1, 0x5) shmctl$SHM_UNLOCK(r0, 0x4) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = kqueue() sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005136000009f050000b10010000000000000cea10500fef96ee6d1efd3357ae302b37b67ca1f2d61db7f4de57804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335d223e7db3008b95665bc6e3211800040000000000fbb770c1f5a8", 0x6f, 0x2, 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x16, 0x3, 0x5fe, 0x80000004, 0x80000003, 0x10001, 0x10, [{0x6, 0x7, 0x4, 0x70fff}, {0x7, 0x8, 0x8, 0x1}, {0x8, 0xf86, 0x3, 0x9}, {0x8000001, 0x804, 0x800b}, {0x401, 0x200726, 0x2800, 0x3}, {0x2, 0x6, 0xffffffff, 0x99}, {0xce1, 0xffffffff, 0x4, 0x2000006d}, {0x6, 0x803, 0x14, 0x100008}, {0x2, 0x82, 0x7, 0x9}, {0x4, 0x7fff, 0xd1b, 0x88}, {0x1ce, 0x4, 0x406, 0x3}, {0x7ff, 0xb, 0x8, 0x9}, {0x400, 0x37, 0x40000008, 0x4}, {0x29a71717, 0xfffefffa, 0x1, 0x6}, {0xc, 0x7, 0x1, 0x1}, {0x0, 0x1, 0x1002, 0x3}]}) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@random="91a6e34d98bb", @random="9f96b0db5822", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @icmp=@time_exceeded={0xb, 0x1, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3, 0x101, 0x1068, 0x0, 0x7, 0x3, 0x5e4, @empty, @multicast1}}}}}}) kevent(r3, &(0x7f0000000000), 0x96, &(0x7f00000003c0), 0xfffb4161, 0x0) ioctl$TIOCSETA(r2, 0xcd504404, &(0x7f0000000580)={0x20000b, 0x2, 0x1, 0x2f, "cd00fd00", 0x40048003, 0x6}) r4 = shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x0) shmdt(r4) 72.087063ms ago: executing program 3 (id=8108): sysctl$net_inet_tcp(0x0, 0x0, &(0x7f0000000000)="9b1809ffffffff", 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x3, 0x0) bind(r0, &(0x7f0000000000), 0x10) 68.191043ms ago: executing program 3 (id=8109): r0 = socket$unix(0x1, 0x5, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) acct(&(0x7f0000000240)='./file0\x00') acct(0x0) getsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f0000000000), &(0x7f0000000040)=0x4) 481.768µs ago: executing program 0 (id=8110): setrlimit(0x4, &(0x7f0000000400)={0x5, 0x200000000062}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) fsync(r0) setrlimit(0x0, &(0x7f0000000100)={0x0, 0x1cc}) r1 = syz_open_pts() open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) flock(r2, 0x1) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000040)={0x32f9c719, 0x0, 0x2, 0x4, "c9b91408388446eeb88ee450d099109a985f689c", 0x8, 0x4}) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000400)=0x1e4) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f00000005c0)={0x1, 0x2, 0x6, 0xfffffff9, "8f73727b6cc01b2120c84e958d24047f24cf4d62", 0x9, 0x9}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @random="00e0300eaaf8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffd, 0x0, 0x0, 0x1, 0x0, @broadcast, @multicast1}, @icmp=@echo_reply={0x0, 0x0, 0x0, 0x64, 0x2}}}}}) 187.167µs ago: executing program 6 (id=8111): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75) close(r0) 0s ago: executing program 5 (id=8112): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x801, 0x4000003, 0x8000, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x10000000, 0xc, 0xc3, 0x71000}, {0x7, 0x4, 0x40000055, 0x103}, {0x8, 0x3ff, 0xa, 0x200000b}, {0x2af, 0x8800, 0x23, 0x2}, {0x4000001, 0x2, 0x402800, 0x7}, {0x202, 0xc64, 0xfffffffe, 0x9}, {0xce3, 0x44, 0x200004f6, 0x2}, {0x3ff, 0x9, 0x7, 0xb}, {0x7, 0x7fff, 0xf, 0x103}, {0x44, 0x7, 0x93, 0x1ff}, {0x1de, 0xc, 0x7, 0x3}, {0x9, 0x27, 0x8, 0x5}, {0xe, 0x400, 0x3, 0x2}, {0x29a71717, 0xfffffffa, 0x0, 0x9}, {0xc, 0x5, 0x2, 0x1}, {0xfffffffd, 0x2000bc3b, 0x4, 0x30001}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x4c}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0x802069dc, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. OpenBSD/amd64 (ci-openbsd-multicore-8.us-central1-b.c.syzkaller.internal) (tty00) login: sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code pckbd_enable: command error pmap_unwire: wiring for pmap 0xfffffd806bd6a300 va 0x200000001000 didn't change! pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error WARNING: thread `nfsio' (185771) exits with status -1 WARNING: thread `nfsio' (26173) exits with status -1 pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx1, error=17 j|E1\:malloc(): allocation too large, type = 6, size = 287762939904 pckbd_enable: command error malloc(): allocation too large, type = 127, size = 1073510800 WARNING: thread `nfsio' (171221) exits with status -1 WARNING: thread `nfsio' (73380) exits with status -1 pckbd_enable: command error pckbd_enable: command error j|E1\:j|E1\:uvn_flush: obj=0xfffffd8065dc52d8, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! $%.)%$ !44%-04 4/ 3%4 #,/#+ &/27!2$ 4/ 52172937113390 $%.)%$ !44%-04 4/ 3%4 #,/#+ &/27!2$ 4/ 52172937113390 #! ) 2.+,&+>):%$ ?!?5+:= 310!$  /*.'6)  : 4(2%!$ .&3)/' (406898) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (121719) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (299450) %8)43 7)4( 34!453 -1 9*<5,9*<5,qȵ ܾ#ko*] pO']jjjj|jj|[gЕp9kˮ$dY|/r+M p`lNx?XJ΁NAetLߪ1QҸx"ݒBG'ti&_U?u^i0eM4HVd(ٺƂ_V;c'Ji$°E[>ux̵A$ uXӛ Bx+OqB*!)j|jjjj|jj  0-!05.7)2%: 7)2).' &/2 0-!0 08&&&&&$806"$6!#00 6! 08200000001000 $)$.'4 #(!.'%!  : 4(2%!$ .&3)/' (371845) %8)43 7)4( 34!453 -1 56.&,53(: /"*=08&&&&&$807#!#2280, /&&3%4=080. %22/2 $52).' 0!'%/54. 56.&,53(:  : #(!.'%3 4/ 0!'% -!9 "% ,/34! 56.&,53(: /"*=08&&&&&$8065$#5238, /&&3%4=080. %22/2 $52).' 0!'%/54. 56.&,53(:  : #(!.'%3 4/ 0!'% -!9 "% ,/34! $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 571282497 3%#/.$3 $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 571282499 3%#/.$3 $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 571282499 3%#/.$3 $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 571282500 3%#/.$3 $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 571282500 3%#/.$3 $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ -9223372036283495352 3%#/.$3 juvn_flush: obj=0xfffffd806e1837b0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! j|E1\:load: 8.73 not a controlling terminal denied attempt to set clock back -9223372032591346556 seconds denied attempt to set clock back 33554436 seconds uvn_flush: obj=0xfffffd80605e5b50, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! malloc(): allocation too large, type = 6, size = 287762939904 malloc(): allocation too large, type = 29, size = 16796513700 uvm_fault(0xfffffd805f2399b0, 0x0, 0, 1) -> e fatal page fault in supervisor mode trap type 6 code 0 rip ffffffff830d9c38 cs 8 rflags 10207 cr2 0 cpl 0 rsp ffff80002a3948d0 gsbase 0xffff8000299edff0 kgsbase 0x0 panic: trap type 6, code=0, pc=ffffffff830d9c38 Starting stack trace... panic(ffffffff833cb830) at panic+0x1d0 kerntrap(ffff80002a394820) at kerntrap+0x30b alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dt_ioctl_record_stop(ffff80000152b000) at dt_ioctl_record_stop+0x108 dtclose(31e5f,81,2000,ffff8000ffffcf98) at dtclose+0x109 spec_close(ffff80002a3949d0) at spec_close+0x466 VOP_CLOSE(fffffd800e1d3880,81,fffffd80097fb3a8,ffff8000ffffcf98) at VOP_CLOSE+0x132 vn_closefile(fffffd806b4514b8,ffff8000ffffcf98) at vn_closefile+0x12b fdrop(fffffd806b4514b8,ffff8000ffffcf98) at fdrop+0x121 closef(fffffd806b4514b8,ffff8000ffffcf98) at closef+0x192 fdfree(ffff8000ffffcf98) at fdfree+0x116 exit1(ffff8000ffffcf98,b,0,1) at exit1+0x576 sys_exit(ffff8000ffffcf98,ffff80002a394d40,ffff80002a394c90) at sys_exit+0x1a syscall(ffff80002a394d40) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7b51680bd630, count: 242 End of stack trace. WARNING: SPL NOT LOWERED ON SYSCALL 40 2126329952 EXIT 0 4 Stopped at savectx+0xae: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND 471720 97729 0 0 0 0 syz-executor * 78113 70286 0 0x2 0 1 syz-executor savectx() at savectx+0xae end of kernel end trace frame: 0x7e337ebd3d10, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd805f2399b0, 0x0, 0, 1) -> e ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x7e337ebd3d10, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80002a382860 rbx 0 rdx 0 rcx 0xffff80003c41f4e8 rax 0x3b r8 0xffff80002a382790 r9 0xffff80002a382458 r10 0x6c5f2bbc6672626c r11 0xc9b71eeff35a2206 r12 0 r13 0 r14 0xffff80003c41f4e8 r15 0 rip 0xffffffff8294e3ee savectx+0xae cs 0x8 rflags 0x46 rsp 0xffff80002a3827e0 ss 0x10 savectx+0xae: movl $0,%gs:0x688 ddb{1}> show proc PROC (syz-executor) tid=78113 pid=70286 tcnt=1 stat=onproc flags process=2 proc=0 runpri=84, usrpri=84, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffff3ca0,0xffff80003c41ed30 process=0xffff8000fffed358 user=0xffff80002a37d000, vmspace=0xfffffd800ec855d8 estcpu=36, cpticks=7, pctcpu=0.1, user=1, sys=5, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 51353 163596 80741 0 2 0 syz-executor 22921 37742 17255 0 2 0 syz-executor 7632 254319 72994 0 2 0 syz-executor 7632 265512 72994 0 3 0x4000080 fsleep syz-executor 7632 324559 72994 0 2 0x4000000 syz-executor 97729 471720 20581 0 7 0 syz-executor 66279 441384 74624 0 2 0 syz-executor 66279 398453 74624 0 3 0x4000080 fsleep syz-executor 66279 250858 74624 0 3 0x4000080 fsleep syz-executor *70286 78113 89047 0 7 0x2 syz-executor 79237 201055 89047 0 2 0x3 syz-executor 20581 215805 89047 0 3 0x82 nanoslp syz-executor 72994 89253 89047 0 3 0x82 nanoslp syz-executor 74624 397789 89047 0 2 0x3 syz-executor 80741 103493 89047 0 3 0x82 nanoslp syz-executor 14058 451172 89047 0 2 0x2 syz-executor 17255 244930 89047 0 3 0x82 nanoslp syz-executor 61092 253532 1 0 3 0x100083 ttyopn getty 89047 28000 93859 0 3 0x82 kqread syz-executor 93859 156777 19219 0 3 0x10008a sigsusp ksh 19219 60508 82432 0 3 0x98 kqread sshd-session 82432 16170 81075 0 3 0x92 kqread sshd-session 81075 481508 1 0 3 0x88 kqread sshd 90732 32440 38605 74 3 0x1100092 bpf pflogd 38605 341022 1 0 3 0x80 sbwait pflogd 2760 85831 5541 73 3 0x1100090 kqread syslogd 5541 3041 1 0 3 0x100082 sbwait syslogd 91965 243828 1 0 3 0x100080 kqread resolvd 21748 22515 23015 77 3 0x100092 kqread dhcpleased 13459 384300 23015 77 3 0x100092 kqread dhcpleased 23015 285486 1 0 3 0x80 kqread dhcpleased 25045 438344 0 0 3 0x14200 bored smr 27309 396051 0 0 2 0x14200 zerothread 72305 175709 0 0 3 0x14200 aiodoned aiodoned 18792 423853 0 0 3 0x14200 syncer update 76330 492213 0 0 3 0x14200 cleaner cleaner 49323 322567 0 0 3 0x14200 reaper reaper 19088 38489 0 0 3 0x14200 pgdaemon pagedaemon 15171 11246 0 0 3 0x14200 bored viomb 27282 167271 0 0 3 0x40014200 acpi0 acpi0 52000 255479 0 0 3 0x40014200 idle1 95834 62651 0 0 3 0x14200 bored softnet1 71807 344947 0 0 2 0x14200 softnet0 89798 299838 0 0 2 0x40014200 systqmp 78769 109358 0 0 3 0x14200 bored systq 45951 40116 0 0 3 0x14200 tmoslp softclockmp 59950 204456 0 0 3 0x40014200 tmoslp softclock 89780 406415 0 0 3 0x40014200 idle0 1 157019 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 22921 (syz-executor) thread 0xffff8000ffffc008 (37742) Process 7632 (syz-executor) thread 0xffff8000ffffd9f8 (324559) Process 70286 (syz-executor) thread 0xffff80003c41f4e8 (78113) Process 14058 (syz-executor) thread 0xffff8000ffff2548 (451172) ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10257 11161K 11753K 166960K 18166 0 pcb 17 16K 18K 166960K 1309 0 rtable 283 20K 20K 166960K 2022 0 pf 54 21K 67490K 166960K 1280 0 ifaddr 44 10K 13K 166960K 707 0 ifgroup 73 3K 3K 166960K 1404 0 sysctl 4 1K 9K 166960K 106 0 counters 78 38K 38K 166960K 1662 0 ioctlops 0 0K 5K 166960K 3394 0 iov 0 0K 28K 166960K 416 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1422 89K 90K 166960K 7472 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 2K 10K 166960K 104 0 VM map 2 1K 1K 166960K 2 0 sem 21 113K 225K 166960K 230 0 dirhash 12 2K 2K 166960K 153 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 244K 166960K 8731 0 sigio 0 0K 0K 166960K 156 0 proc 74 115K 164K 166960K 1860 0 subproc 72 4K 4K 166960K 288 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 1178 0 in_multi 80 6K 7K 166960K 816 0 ether_multi 1 0K 0K 166960K 151 0 mrt 2 0K 0K 166960K 121 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 229 1023K 1023K 166960K 229 0 exec 0 0K 1K 166960K 1770 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 9 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 239 180K 189K 166960K 76068 0 UVM aobj 230 5K 5K 166960K 261 0 pinsyscall 42 84K 101K 166960K 10418 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 3 0K 1K 166960K 601 0 NDP 16 0K 2K 166960K 533 0 temp 89 8660K 8800K 166960K 347513 0 kqueue 13 20K 35K 166960K 1630 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 914 0 911 5 3 2 3 0 8 1 rtentry 176 600 0 506 6 1 5 5 0 8 0 unpcb 144 3975 0 3957 16 14 2 6 0 8 0 syncache 336 7 0 7 2 2 0 1 0 8 0 tcpqe 32 2 0 2 1 1 0 1 0 8 0 tcpcb 736 2166 0 2155 21 19 2 4 0 8 0 arp 136 88 0 68 1 0 1 1 0 8 0 inpcb 328 7479 0 7465 51 49 2 13 0 8 0 nd6 152 103 0 83 2 0 2 2 0 8 0 pkpcb 40 145 0 145 18 17 1 1 0 8 1 kcovpl 48 32 0 24 1 0 1 1 0 8 0 mppekey 1024 4 0 4 2 2 0 1 0 8 0 ppxss 1192 640 0 639 7 6 1 1 0 8 0 pppxif 1504 92 0 91 10 9 1 1 0 8 0 pfstscr 40 34 0 32 4 3 1 1 0 8 0 pffrag 232 43 0 34 1 0 1 1 0 482 0 pffrnode 88 39 0 31 1 0 1 1 0 8 0 pffrent 40 82 0 73 1 0 1 1 0 8 0 pfosfp 40 1431 0 1006 5 0 5 5 0 8 0 pfosfpen 112 1431 0 715 21 0 21 21 0 8 0 pfrktable 1344 8 0 4 2 1 1 1 0 8 0 pfanchor 1288 6 0 1 1 0 1 1 0 8 0 pftag 88 4 0 3 2 1 1 1 0 8 0 pfstitem 24 403 0 301 1 0 1 1 0 8 0 pfstkey 128 448 0 346 5 0 5 5 0 8 0 pfstate 384 424 0 325 16 2 14 14 0 8 0 pfrule 1344 48 0 37 4 3 1 2 0 8 0 rttmr 136 9 0 9 4 4 0 1 0 8 0 art_heap8 4096 8 0 3 8 3 5 8 0 8 0 art_heap4 256 2895 0 2505 52 27 25 29 0 8 0 art_table 40 2903 0 2508 5 0 5 5 0 8 0 art_node 32 583 0 499 1 0 1 1 0 8 0 sysvmsgpl 40 23 0 10 1 0 1 1 0 8 0 semupl 112 9 0 9 6 6 0 1 0 8 0 semapl 112 209 0 190 1 0 1 1 0 8 0 shmpl 112 258 0 31 7 0 7 7 0 8 0 dirhash 1024 114 0 97 3 0 3 3 0 8 0 dino2pl 256 17360 0 15791 99 0 99 99 0 8 0 ffsino 296 17360 0 15791 122 0 122 122 0 8 0 nchpl 144 28184 0 26425 66 0 66 66 0 8 0 rtmask 32 138 0 138 12 11 1 1 0 8 1 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 88272 0 88272 10 9 1 3 0 8 1 percpumem 16 846 0 792 1 0 1 1 0 8 0 pfiaddrpl 120 2 0 0 1 0 1 1 0 8 0 kstatmem 264 942 0 904 3 0 3 3 0 8 0 acpiwqpl 32 2 0 2 1 0 1 1 1 8 1 scsiplug 72 23 0 23 14 14 0 1 0 8 0 scxspl 216 145346 0 145346 25 24 1 8 1 8 1 plimitpl 152 1473 0 1455 1 0 1 1 0 8 0 sigapl 424 8916 0 8869 7 1 6 7 0 8 0 knotepl 120 736 0 0 18 0 18 18 0 8 0 kqueuepl 224 3185 0 3176 26 25 1 5 0 8 0 pipepl 344 751 0 723 9 6 3 9 0 8 0 fdescpl 528 8883 0 8852 3 0 3 3 0 8 0 filepl 160 47652 0 47439 39 26 13 17 0 8 0 lockfpl 104 2611 0 2609 2 1 1 2 0 8 0 lockfspl 48 1036 0 1034 1 0 1 1 0 8 0 sessionpl 144 47 0 38 1 0 1 1 0 8 0 pgrppl 48 152 0 135 1 0 1 1 0 8 0 ucredpl 104 8052 0 8039 1 0 1 1 0 8 0 zombiepl 144 10582 0 10581 4 3 1 1 0 8 0 processpl 1232 8916 0 8869 6 1 5 5 0 8 0 procpl 664 21222 0 21171 7 1 6 7 0 8 1 sosppl 176 57 0 57 13 12 1 1 0 8 1 sockpl 752 12752 0 12717 78 70 8 18 0 8 2 mcl64k 65536 52 0 0 4 1 3 4 0 8 0 mcl16k 16384 36 0 0 3 0 3 3 0 8 0 mcl12k 12288 17 0 0 2 0 2 2 0 8 0 mcl9k 9216 17 0 0 2 0 2 2 0 8 0 mcl8k 8192 18 0 0 3 0 3 3 0 8 0 mcl4k 4096 117 0 0 15 0 15 15 0 8 0 mcl2k2 2112 8 0 0 1 0 1 1 0 8 0 mcl2k 2048 74 0 0 7 0 7 7 0 8 0 mtagpl 96 5 0 0 1 0 1 1 0 8 0 mbufpl 256 1855 0 0 114 0 114 114 0 8 0 bufpl 280 52504 0 46367 439 0 439 439 0 8 0 anonpl 32 14688 0 0 118 0 118 118 0 246 0 amapchunkpl 152 275010 0 274336 121 91 30 42 0 158 1 amappl16 200 20992 0 20950 141 131 10 31 0 8 0 amappl15 192 39 0 39 2 2 0 1 0 8 0 amappl14 184 10 0 9 1 0 1 1 0 8 0 amappl13 176 754 0 753 1 0 1 1 0 8 0 amappl12 168 9395 0 9354 3 0 3 3 0 8 0 amappl11 160 10 0 10 4 4 0 1 0 8 0 amappl10 152 147 0 133 1 0 1 1 0 8 0 amappl9 144 269 0 269 1 1 0 1 0 8 0 amappl8 136 26 0 23 1 0 1 1 0 8 0 amappl7 128 183 0 181 1 0 1 1 0 8 0 amappl6 120 572 0 558 1 0 1 1 0 8 0 amappl5 112 71 0 60 1 0 1 1 0 8 0 amappl4 104 557 0 527 1 0 1 1 0 8 0 amappl3 96 48835 0 48757 4 1 3 3 0 8 0 amappl2 88 8932 0 8855 2 0 2 2 0 8 0 amappl1 80 45086 0 44484 15 1 14 14 0 8 0 amappl 88 73798 0 73641 5 0 5 5 0 92 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 dma65536 65536 2 0 2 2 2 0 1 0 8 0 dma32768 32768 1 0 1 1 1 0 1 0 8 0 dma16384 16384 1 0 1 1 1 0 1 0 8 0 dma4096 4096 2 0 2 2 2 0 1 0 8 0 dma1024 1024 4 0 3 1 0 1 1 0 8 0 dma512 512 2 0 2 2 2 0 1 0 8 0 dma256 256 8 0 8 3 3 0 1 0 8 0 dma128 128 328 0 328 7 7 0 1 0 8 0 dma64 64 9 0 9 4 4 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 20 0 19 1 0 1 1 0 8 0 aobjpl 72 260 0 31 5 0 5 5 0 8 0 uaddrrnd 24 8883 0 8852 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 8883 0 8852 1 0 1 1 0 8 0 vmmpekpl 168 51592 0 51521 4 0 4 4 0 8 0 vmmpepl 168 536800 0 534878 168 70 98 113 0 357 1 vmsppl 488 8882 0 8852 6 1 5 5 0 8 0 rwobjpl 80 125854 0 118765 166 14 152 155 0 8 0 pdppl 4096 17774 0 17704 152 78 74 84 0 8 4 pvpl 32 25447 0 0 203 0 203 203 0 265 0 pmappl 256 8882 0 8852 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 510 0 152 11 0 11 11 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837d6ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 __mp_lock(ffffffff839de8c0) at __mp_lock+0x1a3 softintr_dispatch(2) at softintr_dispatch+0x125 dosoftint(2) at dosoftint+0x54 Xsofttty() at Xsofttty+0x27 __mp_lock(ffffffff839de8c0) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff839de8c0) at __mp_lock+0x192 syscall(ffff80003c45f190) at syscall+0xaf4 end trace frame: 0xffff80003c45f210, count: 0 ddb{0}> trace x86_ipi_db(ffffffff837d6ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 __mp_lock(ffffffff839de8c0) at __mp_lock+0x1a3 softintr_dispatch(2) at softintr_dispatch+0x125 dosoftint(2) at dosoftint+0x54 Xsofttty() at Xsofttty+0x27 __mp_lock(ffffffff839de8c0) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff839de8c0) at __mp_lock+0x192 syscall(ffff80003c45f190) at syscall+0xaf4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x748750712a40, count: -15 ddb{0}> machine ddbcpu 1 Stopped at savectx+0xae: movl $0,%gs:0x688 savectx() at savectx+0xae end of kernel end trace frame: 0x7e337ebd3d10, count: 14 ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x7e337ebd3d10, count: -1