last executing test programs: 17.530960621s ago: executing program 3 (id=3084): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x11, 0x3, &(0x7f00000001c0)="12000000", 0x4) (async, rerun: 32) r1 = syz_open_pts() (rerun: 32) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xfffffffe, 0x5, "ff14e7130b1e586ca6294000", 0x40, 0x3effc}) (async, rerun: 64) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) (rerun: 64) r2 = syz_open_pts() ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000080)={0x99e, 0x0, 0x37bc8560, 0xc, "721d4a722b2821a45a21f65201d908f882dc09ee", 0xfffffff8, 0x8}) (async, rerun: 64) ioctl$TIOCSTAT(r1, 0x20007465, 0x0) (async, rerun: 64) r3 = getgid() (async, rerun: 64) r4 = msgget$private(0x0, 0xc2) (async, rerun: 64) r5 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r5, 0xffff, 0x1024, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000001c0)=0xc) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000080)={{0xe5, r6, r3, 0x0, 0x0, 0x10, 0x5}, 0xc8d, 0x0, 0xffffffffffffffff, 0x0, 0x54b, 0x3, 0x6, 0x8}) r7 = socket(0x18, 0x2, 0x0) close(r7) (async) r8 = socket(0x800000018, 0x2, 0x0) (async) setsockopt$sock_int(0xffffffffffffff9c, 0xffff, 0x4, &(0x7f0000000240)=0x80, 0x4) ioctl$FIOASYNC(r7, 0x8004667d, &(0x7f0000000100)=0x4) (async) bind$unix(r8, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) connect$unix(r7, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x83, 0x2f, 0x2, 0x4}, {0x5f, 0x8f, 0x9, 0x9}, {0x6, 0x2, 0xa, 0xfff7fffc}]}) (async, rerun: 64) r9 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (rerun: 64) ioctl$BIOCSETIF(r9, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) sysctl$hw(0x0, 0x0, &(0x7f00000003c0)="00231b000f4030632c2dec30c21700400000005c046200000817c575000804b9", &(0x7f0000000000)=0x20, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async, rerun: 32) ioctl$BIOCSETWF(r9, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 32) write(r2, &(0x7f0000000600)="d81a0f0000006b00000100000000", 0x53) (async) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$FIONREAD(r10, 0x80206979, &(0x7f0000000100)) 12.074365996s ago: executing program 3 (id=3185): r0 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x3000) r1 = syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0x60000000, 0x6, 0xfffffff8, 0x2, "eb1f0f6e3cabafea57da44ad3e377c9d1c6d8ec6", 0x1, 0x2}) poll(&(0x7f0000000040)=[{r1, 0x80}], 0x1, 0x0) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x2000) 12.072824214s ago: executing program 3 (id=3187): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000002280)='./file0\x00', 0x40, 0x1e4) open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x10) read(r0, &(0x7f0000000080)=""/157, 0x9d) ioctl$TIOCFLUSH(r0, 0x80047476, &(0x7f0000000000)=0xfffffffb) syz_emit_ethernet(0x10c2, &(0x7f0000001740)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60c7b276108c2e10fe0c11451edd2e6590997348faedc959000000000000000000000086"]) syz_extract_tcp_res(&(0x7f0000000040), 0x3, 0x7b6d) 8.161115108s ago: executing program 2 (id=3239): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0xffffffffffffffff, [{&(0x7f00001d0000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil, 0x8}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4bb6}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00001f5000/0x4000)=nil, 0x6}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f00001cf000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000212000/0x1000)=nil, &(0x7f0000826000/0x1000)=nil, 0x40}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000501000/0x1000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1}, {&(0x7f0000027000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000012e000/0x2000)=nil, 0x9bc0}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000358000/0x2000)=nil}], './file0\x00'}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6c, 0x8e, 0xfc, 0x6}, {0x4, 0xf, 0xfe, 0x4}, {0x6, 0x80, 0x8, 0x5}]}) sysctl$hw(0x0, 0x0, &(0x7f0000000080)="046c47541e4e4e191b02003e8000080000004ada9a933358b37ab0a876021fbe1868750365817f19cc19638851c0ccf7c5000000006b7dede5888ce795dead8d8d174187000000000000000000", &(0x7f0000000000)=0x4d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000540)="d8bd697c06001f000100fd835417", 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) nanosleep(&(0x7f00000025c0), 0x0) 7.699741003s ago: executing program 2 (id=3240): r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000000029, 0x37, &(0x7f0000000000)="8858cd20", 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x3, 0x0) setsockopt(r1, 0x0, 0x2, &(0x7f00000000c0)="63e1303d", 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x28, 0x1, 0x37, "6302267c0e16250fd8ab0009be99114377"}, {0xb8, 0xffff, 0x5, "683764d2ac10a2417f284f2cfdf42caeae1a369967c59c0165daae241311724455ef2fea392c2d48f14524c36e5180f9bd1ee2c2a5a4bf3c4345508b4153d5c04b714530789a0e60ca8f446cd2909854e003b1d6e24c6c3818f7523c1cfb547e900d0b9dbc357be931d0ee0d7a269315bb0c55d9c31e6ca27dbfc8859af0d1853dd0f0c06217394080c065c0adbbea4aeb657991b099255eb9eee78dc52356ad47"}, {0xc8, 0xffff, 0x7, "77da0a5c652498c5e91aa8f1d716dd669073b6a8bbbdf75c2d55a2cffaee3734f6c11e5c34d10c13f977fa430fd969e16fd6f2e83a7dac949ef7c4213f326a0dedd1de5f82849becd39509a5fcecf16db333bf0927b195cd0d18b2193fd9bd5ef2244efa5c9bd7f537d12c738a22dd6d506ad8562691f2e07cad00e6cde9e5f3ea4c6d0756edb55b633fa46d46344ad0018baa274b0f4c1156b62d40a75ee5a0875b64ddd08a22a14e6999f6cc507724cb"}], 0x1a8}, 0x400) poll(&(0x7f0000000400)=[{0xffffffffffffffff, 0xa0}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x8}], 0x200000000000007f, 0xa) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x5710) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r2, 0xcd50441a, &(0x7f0000000180)={0x4, 0x2, 0x2, 0x2f, "181eed82d30000002000040000000000000000e7", 0x1000003, 0x7}) setsockopt$sock_int(r2, 0xffff, 0x80, &(0x7f0000000080)=0x1fc, 0x4) mknod$loop(&(0x7f0000000040)='./bus\x00', 0x40, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 6.10055175s ago: executing program 2 (id=3261): r0 = shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) shmdt(r0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) r5 = accept$unix(0xffffffffffffff9c, &(0x7f0000000100)=@abs, &(0x7f0000000140)=0x8) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x8) ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xc2585601, &(0x7f00000001c0)={0x10, 0xa8, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x9}, {&(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0xffffffffffffffff}, {&(0x7f0000ff8000/0x5000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x8000000000000000}, {&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0x56}, {&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, 0x36be6029}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x6}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x7}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, 0x6}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, 0x231}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fec000/0x4000)=nil, 0x5}, {&(0x7f0000fed000/0x2000)=nil, &(0x7f0000fef000/0x1000)=nil, 0x6}, {&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000fed000/0x3000)=nil}, {&(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x10}, {&(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x40}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fec000/0x1000)=nil, 0x6}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffff}], './file0\x00', 0x7}) r6 = shmget(0x0, 0x10000, 0x2, &(0x7f0000fed000/0x10000)=nil) r7 = getpgrp() shmctl$IPC_SET(r6, 0x1, &(0x7f00000003c0)={{0x8d7, r3, r4, r3, r4, 0x4, 0x7}, 0x0, 0xd235, r7, r2, 0x3, 0xa, 0x100000000}) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x1, 0x10, r5, 0x3) sysctl$machdep(&(0x7f0000000440), 0x2, &(0x7f0000000480)="fcc0fbd8f88534f1536b56a6ed2b677a271b3240b17648e92be2d52242433da74e348fa904f190890f0fd7b90a787a812daf9d2788b2f3db", &(0x7f00000004c0)=0x38, &(0x7f0000000500)="eea6ec15b893a30e021b84f8831f8cce5375742fb387fe4fc93243b605112b69562aeb81756bfca7573c95b3c70cfe614a8236db27d03feee7b51a891d2c130cc5b47833261d00dbe5a0c7e83681b1478a8e0ff31a61937b5c38a77eeabfb58f2912ee7acdecb7a4e3afa0b88a079cc45b5609ba07932eaae647fe37917def341c3c1a567dcd1da20e6bd1041f8a6f1f37ee5bc93cfbc47e979fe4409343a1ed3f5c2ba68e861de13f04bfd354c4c15f94a55b93608df1bc9737c639450e463bf9415c518f6be4dfc39086477901f2187c70c80cab8fa8a08d3097", 0xdb) execve(&(0x7f0000000600)='./file0\x00', &(0x7f00000007c0)=[&(0x7f0000000640)='-!\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='-\\\x00', &(0x7f0000000700)='\x8b@@\x00', &(0x7f0000000740)='{-\x00', &(0x7f0000000780)='{\x00'], &(0x7f0000000940)=[&(0x7f0000000800)='\\(\x90(\x00', &(0x7f0000000840)='*}\x00', &(0x7f0000000880)='*--&@$\x00', &(0x7f00000008c0)='!:)()\x7f\x00', &(0x7f0000000900)='^\\\x9e#\'&\x00']) openat$bpf(0xffffffffffffff9c, &(0x7f0000000980), 0x10000, 0x0) shmat(r6, &(0x7f0000ff6000/0x3000)=nil, 0x1000) sysctl$machdep(&(0x7f00000009c0)={0x7, 0x1}, 0x2, &(0x7f0000000a00)="9c7dec0378da8e3fe9da2446b87f7764522eed97a548780f7120bcc3e944d0a762bc2905d3f667ba7731a4895697f30df373bf6f82adcfbe8dfabdd3fd52eee2001dfff8c4f907bdd373d73c979fa9ab30147d5c7c6348bfb9c1ab7d2445", &(0x7f0000000a80)=0x5e, &(0x7f0000000ac0)="eff3e2bd5da320bd5cb359b51a8d370a1d2456a7f400773c832574cbc55a29288b623d3264da93c46d54ec35be6a0f8e782b019029f9ecbce8348c621fe0ee68bbae5a0155ce0f54e15150c224f7de2e953f4ea7e6027dd74d0d6ad1d71fb30322ffeaa3739516663a98a5e56f8d36e487cd442fa5059e446eceac4d658511a6457e9f556dbde376ce8bb9c2f137608615a655effad772f357835f6b2e8f6186031e96daf524cf4ec05479a7d062433d44d539fa8bd6ca77e918601913f2c18bd56b8264fe0838840e3690d5fc748a115ce18fdb932b", 0xd6) chflags(&(0x7f0000000bc0)='./file0\x00', 0x10000) r8 = msgget$private(0x0, 0x80) msgctl$IPC_SET(r8, 0x1, &(0x7f0000000c00)={{0x10001, r3, r4, r3, r4, 0x2, 0xdc}, 0x0, 0x76, r7, r2, 0x1, 0xf800000000000000, 0xffffffffffffffff, 0xfffffffffffffffb}) close(r5) poll(&(0x7f0000000c80)=[{r1, 0x8}, {0xffffffffffffffff, 0x4}, {r5, 0x4}, {r1, 0x10}], 0x4, 0x200) r9 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000cc0), 0x10000, 0x0) connect$unix(r5, &(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0xa) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x1010, r9, 0x80000000) connect$unix(r5, &(0x7f0000000d40)=@abs={0x0, 0x0, 0x3}, 0x8) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000d80)={0x0}, &(0x7f0000000dc0)=0xc) setpgid(r10, r7) execve(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e80)=[&(0x7f0000000e40)='+-,\x00'], &(0x7f0000000f40)=[&(0x7f0000000ec0)='*}\x00', &(0x7f0000000f00)='^\\\x9e#\'&\x00']) lstat(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)) mknod(&(0x7f0000001040)='./file0\x00', 0x6000, 0x2) 3.841468262s ago: executing program 2 (id=3277): r0 = socket$inet6(0x18, 0x4, 0x9) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000040)={{0x18, 0x3, 0x12, 0xff}, {0x18, 0x2, 0x8f, 0x3}, 0x3, [0x80, 0x9, 0xfff, 0x80000, 0x4174, 0x4, 0x8b, 0x8000]}, 0x3c) sysctl$kern(&(0x7f0000000780)={0x1, 0x5b}, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) r2 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xc) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000180)="188f849d086189d778f93ab0894099d77ec456698d70fc5d6ef408f7fe1ae2c89dfdfcaaad1a6e1437185cdea14cb4815a23fd5706155980bfd24056c30844b7642c1e1886b5370d81c8a79bbcdab587dd9af364417909e9688d7eeffc53206973cf0ed736f9d9b4c6af3b07e01377647faac5ece18c6c110d2e467a4a083256aa4f4cce113536ea5117a4a72efbb8a3dc47d0af65e428dd4cbe6a44fa4732b35f8ecb3eb7827e11301a4d6e16e9f9400064f49c7cb921cc94688504b3fea7131317a273a8c2210a621f03a23548f0eace300b04f9a985e70b5b89", 0xdb) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000480)="44f3d8", 0x3}], 0x1) write(r1, &(0x7f0000000080)="97ddbd0f9211295b2310e02aa92812c20ccc2ddddc8ad1", 0x17) 3.672193563s ago: executing program 2 (id=3278): syz_emit_ethernet(0x36, &(0x7f0000000740)={@local, @random='\x00C\x00', [], {@ipv6={0x86dd, {0x4, 0x6, 'A\a\x00', 0x0, 0x2b, 0x4, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2}}}}) syz_emit_ethernet(0x57, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd66fd412c002133092a818a724aabf75111e18e2967fc6b8dfe8000000000000000000000000000aa06010000000000000001000401080006000000000000000059f402640387c0b55e"]) syz_emit_ethernet(0x36, &(0x7f0000000740)={@local, @random='\x00C\x00', [], {@ipv6={0x86dd, {0x4, 0x6, 'A\a\x00', 0x0, 0x2b, 0x4, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2}}}}) (async) syz_emit_ethernet(0x57, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd66fd412c002133092a818a724aabf75111e18e2967fc6b8dfe8000000000000000000000000000aa06010000000000000001000401080006000000000000000059f402640387c0b55e"]) (async) 3.66921528s ago: executing program 3 (id=3187): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000002280)='./file0\x00', 0x40, 0x1e4) open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x10) read(r0, &(0x7f0000000080)=""/157, 0x9d) ioctl$TIOCFLUSH(r0, 0x80047476, &(0x7f0000000000)=0xfffffffb) syz_emit_ethernet(0x10c2, &(0x7f0000001740)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60c7b276108c2e10fe0c11451edd2e6590997348faedc959000000000000000000000086"]) syz_extract_tcp_res(&(0x7f0000000040), 0x3, 0x7b6d) 3.432003777s ago: executing program 2 (id=3285): syz_open_pts() (async) r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x5, 0x1, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x3effd}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000003, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x91f, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x1, 0x100000003, 0x52adeb15, 0x7], [{0x4, 0x0, 0x0, 0x5}, {0xfffc, 0x22, 0x5}, {0x0, 0x0, 0xfffffffb, 0x80}, {0x5, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x2, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x5, 0x100, 0xf, 0xb}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x45, 0x6d5, 0x6}}}) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) kqueue() (async) r1 = kqueue() kevent(r1, &(0x7f0000000080), 0x1005, 0x0, 0x37, 0x0) acct(0x0) acct(&(0x7f0000000080)='./file0\x00') ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x401, 0x1000, 0x3, 0x4, "b21b8cb269412756d0a2cb55e5dfd42426311aae", 0x1, 0x7fff}) syz_open_pts() (async) syz_open_pts() ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000780)=0x7) 3.305871586s ago: executing program 1 (id=3287): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0xfffffffc}, {0x2, 0x4}, {0x1, 0x8}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0xaa19}, {0x2}, {0x3, 0xffffffff}, {0x2}, {0x2, 0x4}, {}, {0x0, 0x3}, {}, {0x0, 0x6}, {0x2, 0x4}, {0x1, 0x40000001}, {0x2}, {0x0, 0xffffffff}, {0x0, 0x1}, {0x1, 0x5}, {0x2, 0x8}, {0x5, 0xfff}, {0x1}, {}, {0x2, 0x1}, {}, {0x0, 0x7}, {0x2}, {0x0, 0xfffffffd}, {0x2, 0xa}, {0x2, 0x100004}]}) r0 = socket(0x800000018, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x20, 0x4800) r1 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x33, 0xa2f}, 0x80000002000007, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x5, 0x8000000000000001}) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0xfffffffc}, {0x2, 0x4}, {0x1, 0x8}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0xaa19}, {0x2}, {0x3, 0xffffffff}, {0x2}, {0x2, 0x4}, {}, {0x0, 0x3}, {}, {0x0, 0x6}, {0x2, 0x4}, {0x1, 0x40000001}, {0x2}, {0x0, 0xffffffff}, {0x0, 0x1}, {0x1, 0x5}, {0x2, 0x8}, {0x5, 0xfff}, {0x1}, {}, {0x2, 0x1}, {}, {0x0, 0x7}, {0x2}, {0x0, 0xfffffffd}, {0x2, 0xa}, {0x2, 0x100004}]}) (async) socket(0x800000018, 0x1, 0x0) (async) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x20, 0x4800) (async) socket(0x800000018, 0x1, 0x0) (async) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x33, 0xa2f}, 0x80000002000007, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x5, 0x8000000000000001}) (async) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) (async) 3.102649822s ago: executing program 6 (id=3289): mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x800) (async, rerun: 64) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (rerun: 64) openat$wsmouse(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) (async) syz_emit_ethernet(0x0, 0x0) (async, rerun: 32) ioctl$WSKBDIO_GETENCODINGS(0xffffffffffffffff, 0xc0105715, 0x0) (async, rerun: 32) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async, rerun: 32) ioctl$BIOCSFILDROP(r1, 0x80044279, &(0x7f0000000080)=0x2) (async, rerun: 32) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[]) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) link(&(0x7f0000000340)='./bus\x00', &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.088889444s ago: executing program 4 (id=3290): r0 = fcntl$getown(0xffffffffffffffff, 0x5) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, 0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x84, 0x1b}, 0x7297, 0x3d3, r0, 0x0, 0x8000000000000000, 0x9, 0x0, 0xffe}) r2 = socket(0x800000018, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) poll(&(0x7f0000000180)=[{r2, 0x4}, {r2, 0x4}], 0x20000279, 0x100000) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = socket(0x11, 0x3, 0x0) setsockopt(r4, 0x11, 0x3, &(0x7f0000000140)="12000000", 0x4) connect$unix(r4, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xa) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000280)={0x0, 0x7f}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x10, r5, 0x0) r6 = socket(0x800000018, 0x1, 0x0) bind$unix(r6, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) 3.087696938s ago: executing program 7 (id=3292): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = getegid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x3, 0x0, r0, 0x0, 0x0, 0x4c}, 0xc, 0x2a3, 0x0, 0x0, 0x40000006, 0x800000000000013, 0x8000000200, 0x40}) pwritev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000400)="075cb5f59edb0197f578377e33cd9f000000000000000000bf5be62780731998f976ee4bd7522c8a1c42912f071204e2e935f7f5d591edd2e89d760a49cf9bda1a636abece57e0cb467218e4133b00d76a372b3a830fa0d716f723c13c4fded3cc73fb19562b2de52c6a2dd034b0324b64a6268e423ea9eb567aa7e6b4fc08d8feff2095c637daa000"/148, 0xfffffffffffffdb4}, {&(0x7f0000001840)="221ae9cb6291c823e669219b885864d95b9e81e1506dfd6891613a5e0c574ced0fa3a11105c7dfa435baf54daffcc4d5e2588277f93f9dec9e23bba630abdc0a9071efe69157aaac76c3073bc8f6e438471bd230b4ac41a7efe3de804b138619b27c37f8ae5868fc95a9c37ba6d051f7db70907118c743c6da58bb51b9c0bb8ebccca86dab74677000252a694e524232e7e120cb78c6dbf3db772cc4f947d7633d668e7c9d65042788936ef6b55ae465f0c8c1bb6152501fe7fb806500253fcb48c04a43fb6510f33a6c192594a3951e449689f8f665b538771aa684e826015f896eb0ae1b419e1a3791d67836"}, {&(0x7f0000000340)="7cac97023c57cf917acdea96c4992d94e8b9bf8169f542994e4a90956ec62668ab09ce97bb3eeb2009ce488ec2620d1bf6d5033cc4538991ac302e6e7a344ebf53d0f6f87abf4bd3c565c3170ef9c26b1fb22c247c7f1d00c1f63212b3ac6ffa348e7cc09dc29cc72e4f0d3478c28c4c5976e1cc6af108ad6b84522256"}, {&(0x7f00000001c0)="8d39639b42e4ff50a4a083bded98f4f9420645ca3a7a532b42ecd9b0c1412979f196deb4ca494e01ab02bc20e185d116"}, {&(0x7f00000004c0)="d1a85c40c63607444d7e92b63cfb45b06c0cd1eb3f22b6e590b511400be564e259b5d7419cf63a270a8143b76fd25bc52d2c305c9c3405180ffa26906806e20d9342c6009053da8564534006cca6fc8695c256c5aebb0fa8ce9bf8111e5b50780afd56aefbbe5ffa54c394cd353f0b058ea674c584e4484e41c7b92acc8e3a4c0c40a69566c8f08245969a"}, {&(0x7f00000006c0)="8c9c3b17657cbf9542d453766fd84e97bd0821333f8a386e3a3dcf62fbf29fc1e9a466093b6a87584e23e791929992151e5ade5166e5833050eb95"}, {&(0x7f0000000840)="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"}], 0x1, 0x617) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x900}, 0x10, 0x0) 2.896576124s ago: executing program 1 (id=3293): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x2c) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) (async) r2 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x4ebfac6bbaf782c) ioctl$VNDIOCCLR(r2, 0xc0a86b05, &(0x7f0000000200)={0x0, 0x10000, 0x0}) (async) sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) sysctl$hw(&(0x7f0000000000)={0x6, 0x9}, 0x2, &(0x7f00000001c0)="8e84365b469069676d813d99c8bf3c78815d88d114e784e1dbca0b35336f84fea41dd675284b1d89015e3d6db659474382efed3001226a78e235637b9503738c6b00cbebdb22adc6cf6cb832330408b6c9d7410a4444f062f061f9ac1704a0b7f971cb3c875da80cb58a95871a238a4d3d", &(0x7f0000000040)=0x71, &(0x7f0000000280), 0x0) (async) mprotect(&(0x7f0000a7c000/0x2000)=nil, 0x2000, 0x2) (async) ioctl$VMM_IOC_CREATE(r2, 0xc2585601, &(0x7f00000000c0)={0x10, 0x4, [{&(0x7f0000659000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x200007fffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7d}, {&(0x7f0000e63000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x6}, {&(0x7f00003ff000/0xc00000)=nil, &(0x7f00001ac000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x481}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000655000/0x4000)=nil, 0x80000000}, {&(0x7f000032b000/0x2000)=nil, &(0x7f00008c4000/0x4000)=nil, 0xf}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000173000/0x1000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000f44000/0x3000)=nil, 0x51}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f0000257000/0x1000)=nil, &(0x7f0000a6b000/0x1000)=nil, 0x12b}, {&(0x7f000057c000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x3fffc0000000}, {&(0x7f0000116000/0x3000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x4}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffff7ffbffffff7}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001000/0x800000)=nil, 0x6}], './file0\x00', 0x80000001}) (async) pipe2(0x0, 0x10004) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$TIOCSETA(r3, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5}) 2.895918177s ago: executing program 6 (id=3294): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x317, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce0, 0xffffffff, 0x4f8, 0x8000006d}, {0x6, 0x4, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x3, 0x4, 0x1}, {0x0, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) sysctl$hw(&(0x7f0000000100)={0x6, 0xf}, 0x2, 0x0, 0x0, &(0x7f0000000040), 0x0) 2.89450118s ago: executing program 7 (id=3296): setrlimit(0x8, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x8000, 0x2d, 0x43, 0x4}, {0x3, 0xc, 0x2, 0xb}, {0x6, 0x2, 0xa, 0xfffffffc}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{r0}, 0xfffffffffffffffa, 0x21, 0x2, 0x2, 0x6}, {{r0}, 0xfffffffffffffffe, 0x1, 0x2, 0x40, 0x8}], 0x7, &(0x7f0000000180)=[{{r0}, 0xfffffffffffffff8, 0xa1, 0xffff1, 0x6, 0x3}, {{r0}, 0xfffffffffffffffd, 0x2, 0xfffff, 0x3}, {{r0}, 0xffffffffffffffff, 0x0, 0xf00fffff, 0x5, 0x4}, {{r0}, 0xfffffffffffffffb, 0x88, 0x4, 0x4, 0x6}, {{r0}, 0xfffffffffffffffe, 0x0, 0x10, 0x4}, {{r0}, 0xfffffffffffffffc, 0x2, 0x1, 0x6, 0x8}], 0xfffffffb, &(0x7f00000000c0)={0x7, 0x6}) (async) ioctl$BIOCGETIF(r0, 0x4020426b, &(0x7f0000000340)={""/16, @ifru_dstaddr=@in6}) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)="299616cdc141356278f9129c549da2ab4c19bb000b4eafb832536c9018b08f137a1b1d82612dff29621d33aa46d45e89d778cc91fcfebc20dcc10d07c7b0c62f8dbbe87bb1555477", 0x48}], 0x1) (async) sysctl$hw(0x0, 0x0, &(0x7f00000002c0)="00231b000f40b0632c2dec30c21700410000808c602b4ae8e2a159e19be28dc575000804b9a05140af5adad2de48ad5ad3b7f0aad2ba7e67af72ac131e38c01375586d8a4961aa82ab078497760992f9969b11281ca47e75aec8bbf9dd31e6fc26b1dca7fce0c38078e1d33566f1a56e876f6d18", &(0x7f0000000000)=0x74, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x18602, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) (async) munmap(&(0x7f0000019000/0x3000)=nil, 0x3000) (async) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, &(0x7f0000000040), 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x5710) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='.\x00') (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r2 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000062000/0x4000)=nil, 0x4000, 0x0) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a) (async) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r3, 0x80085761, &(0x7f0000000180)={0x2}) (async) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') (async) openat(r2, &(0x7f00000003c0)='./file0\x00', 0x10, 0x29d) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x1, 0x6, 0x8, 0x3}, {0x7f5, 0x6, 0x1, 0x7ff}, {0x8, 0x1c, 0xc5, 0x1}, {0x6, 0x5, 0x3, 0xfffffff5}]}) (async) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 2.583357946s ago: executing program 1 (id=3297): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x5c}) r0 = syz_open_pts() r1 = syz_open_pts() ioctl$TIOCSTOP(r1, 0x2000746f) close(r0) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000180)={0x7fffffff, 0xcacf, 0xfffdff7e, 0x160350d, "04e4ee0d090000deffffffff0fe0ff0405080800", 0x200001, 0x9}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 2.576392533s ago: executing program 6 (id=3298): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f00000002c0), &(0x7f0000000180)=0x4) sysctl$net_inet_esp(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000140)={{0x2, 0x6}, {0x8e0, 0x3ff}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x0, 0x0, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x0, 0x9, 0x8, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0xffff, 0x1, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x1ff, 0x9}, {0x6, 0x0, 0x14, 0x9}, {0x2000002, 0x82, 0x5, 0x6}, {0x3, 0x1008009, 0x1000, 0x4}, {0x1cc, 0x800, 0xc, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x6}, {0x1100c, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x8) unlinkat(r2, &(0x7f0000000300)='./bus\x00', 0x0) preadv(r2, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/94, 0x5e}], 0x1, 0xfffffffffffffff9) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f00000000c0)="eb08d126", 0x4) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) socket(0x18, 0x3, 0x0) r4 = socket(0x1, 0x2, 0x0) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f0000000240), 0x0) syz_open_pts() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r5, 0x4, 0xc0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x8, 0x6, 0x2800000000000000, 0x181e, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) write(r6, &(0x7f00000002c0)="7c84cf179279b50eda5dd1951a661d2e3a20851082c188f8b3d8a063d2025ff0d27a44bc29bdcac27fcb7aaa95cb2007be22c5553cd2f66a1f419a83d4275218a89d7a7803f069d851ff628dd309c40f6e3c932af00cb6219ae6e21d2c28d492cd5404b16dfa627d93b1e8ad2ea49d2344c1a3b234bd6f1c70fd4252844a6e6ab7b8997bc55fa22ce951ee038d289078b95510b0f2473ce1348434f0ec4a885ee84fd08fc50f08ca7991af3f8c322b496466f804c4b700cc9391855bd0ee339196de2b5ec2d8425c711d3f9e051eb055d45c693d7549712f5284a9fbca7d15c5bf1a9c8e3b3c1a43983056782e046c29e3d57082f7743b8bf6d994cd3c26c85609eaa11e6f7bc4", 0xfffffdaf) execve(0x0, 0x0, 0x0) syz_open_pts() ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) r7 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x2010, r7, 0x9) 2.263128432s ago: executing program 3 (id=3299): openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) select(0x40, &(0x7f00000000c0)={0xffffffffffffffff, 0x7, 0x6, 0xc, 0x2, 0x3, 0x8, 0x80000001}, 0x0, 0x0, 0x0) 2.260003892s ago: executing program 4 (id=3300): fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x3b5, 0x801000381210089}) socket$inet(0x2, 0x8002, 0x2) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x1, 0x1, 0x7, 0x101, 0x5, 0x80002001, 0x3, 0x10, [{0x4, 0x3c, 0x6, 0x71800}, {0x23, 0x4, 0x800000, 0x7}, {0xfff, 0x1, 0x8, 0xaf9}, {0x2, 0x0, 0x4f, 0xfffffffe}, {0x1, 0x3, 0x9, 0x7}, {0x2, 0x47fff, 0x10000009, 0x5}, {0x80000cdb, 0xbffffff5, 0xe1, 0x6d}, {0x2000a, 0x803, 0xfdf0, 0x8}, {0x8, 0x83, 0xfffffffd, 0x82}, {0xfffffc00, 0x2, 0x5, 0x3ff}, {0xa44f, 0xfff9, 0x48a, 0xe1}, {0xcb, 0x2, 0x8, 0x6}, {0x2000e0, 0x9, 0x5, 0x3ff}, {0x8, 0x2, 0x6, 0x100006}, {0x6, 0x5, 0x26, 0x1}, {0x81, 0x33, 0x3, 0x2}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000080)=0x10001) r2 = socket(0x18, 0x3, 0x0) setitimer(0x1, &(0x7f0000000140)={{0xffffffffffffffef, 0x10080000000000d}, {0xdb, 0xffffffff}}, 0x0) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f00000000c0)) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) r3 = syz_open_pts() ioctl$TIOCGWINSZ(r3, 0x40087468, &(0x7f0000000040)) 2.216554413s ago: executing program 7 (id=3301): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000440)="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", 0x34e}], 0x1) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x9, "00000000000000000000b9b98d840000008000", 0x11, 0x401}) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x35}, 0x4, &(0x7f0000000080)="741ad85d9f945ecdd7e4ffffffff000063b82792b26cff2414a0dee861bd8acd0000158b318100000000c00600d513a0619527c62715f2717d78444f5b1f758ba1086cbaec45eaa62435dfb84cad60daf6779849932654afd18ea1ecc560a1a8b60fb25168df3c2fa3fe5cb65a33bbd2937fd60a86fae0f61b6d196d85d5df9c2b56f6eb45f81bbb30cb227446a42e7db2928030089049dc81a6935221df0f52430f79179b11c5ca12d402", &(0x7f0000000200)=0xfec1, 0x0, 0xd1ef4960be19f686) 2.212934519s ago: executing program 4 (id=3302): r0 = socket(0x11, 0x3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) getpeername(r0, 0x0, &(0x7f0000000900)) sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x2, 0x102, 0x3}, 0x4, &(0x7f0000000040)="41f851eabafabdf83f06d980a57efe3f6378443bc794ffe8fca39234035118938c5bf8bc", &(0x7f0000000080)=0x24, &(0x7f00000000c0)="720143b194b0f3535f9abe64979200dc3de1d6a5fef1c03a05c0fe63380cdda4942fcd114748c508455518543b48b75913f7926399dd3b30a2fc7b3a2761e9438e6e4db87bc0b060ce547811e51cbbfe07dc25dbf3452b4f72d9574184463a7fe6b03beac3a1e8d1be371683a16824b26fad2368b63fb3f25936dd9e0b54b98c0bd5881526d6", 0x86) bind$inet6(r0, &(0x7f0000000180)={0x18, 0x3, 0x5, 0x7}, 0xc) socketpair(0x2, 0x5, 0x4, &(0x7f00000001c0)) 2.211822377s ago: executing program 5 (id=3303): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x18602, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x1, 0x6, 0x8, 0x3}, {0x7f5, 0x6, 0x1, 0x7ff}, {0x8, 0x1c, 0xc5, 0x1}, {0x6, 0x5, 0x3, 0xfffffff5}]}) ioctl$FIONBIO(r0, 0x20004101, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) 2.046409186s ago: executing program 0 (id=3304): mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2cff) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) 2.044150435s ago: executing program 6 (id=3305): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7829) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)='#!', 0x2}, {&(0x7f00000009c0)="7fc75e19f78eb2c86b680bee6e114857ae57563f079f1fce87ef4e4907f2fa9ad5a4b8b150615955e1f240d9f5bd782895467fb65c1f3a97256c207c0173a0a0d08626c6d4a105e18493f10021961fd5d4ae4f33a628afd87427254212959bbe1b733834d37bcc2b4f7cf49713454df692674ae05e2aae159b3b5b71c3cfe8d744a9eff4b5607c9926e44044fa0c228b19d14c1777850cf8702942ebcfab24bfca9b495b8a080560a73304ab39fc4ef872b55387410d672d40e269fef3a72224242bb798ddc1c03c7b8cdedfe299418470ad855d608efa65f7ab6658ca60536968b65bc02debcb9d58001a01ff4ac7dc8360fbfd1d8b9b81e704fe2f1179e03d6ad6e58acd6a69307f027505586859b9af020b9ec5ca53a7cb9a8d73e203cd6ddc6f66f91533ee83dae4a727ff39a3250aed2818f7339db5ab9f77f2782f477f6ecc9cfc635a96521a995f6d507fed0c3b6ff0646f014743b868ee5a5731a2cd8bc87cdc4e00270bcdc7695d20dc4b76b5714ad0b788bfdaca59af8e90ff720b830ca82699718469aa885d5ff5d2368c3b38615a34ee39ef564d80616baaa60ed97fc7be52197b2b21d1ad7c6c98802bcd3666b4fc90ccdd951f332c0d343d8673407e9dda036bb055dbab3e998d8c1dfceb7bd3cd98dfbbd119eb33cd6a99facd6f4b8c8607d4c85aa800a787900ece8672f5be06f84aa4f30c0e7edfffeb064a58a689d3380d22b046b948e21523f0e18e728431b884617bf24a954a5c826f65dde3cff0f86f9e6eff1d8624fcd465d29c9d6cf488f60649705c19db469bce5929d48f00c6ee43a74b7dc5863cf539badb45613ed381b4fc7d3bf2942c156dd39988e8f321cab2abc4565d6ca0895125e207837c6ecfaefa1b1170501b77211a6e229b3211dea1cd0a33a54c0927075202c30546d309a9d6ca045fd39673061361ff35fb39cfbd83474ea2f78a7f7bbc29b26de601f1f0524614c01108579c9e066a3a2fc8bb1b5989b746715a2ad0eebd20ddc7881806ebb04d6f0d8165d0c6ecdf30334a3105a0125de63ff0f6b2cc1a86c21193ff44f19d93cf52ab4fd969cfce7fc70c58f1d7f8b8477a2df75ebb9ddfe7973b654d051a45acf0053a471c99275046f2f400ed59d22c2f8ce0f21deb3a445dea5d6749d557e8e678663d1c2e5cca57bf254e0663725b63a3221f2f5427f21a9b47d648a57b8e3e677a5f109f6612cba80400b77183945aeee6c46fdf384db246c8954d38373960390d65c08bdc1db66af2a993a24211aaf441810e43861acfd0c68a4144fdacd5948996d4effe2760dc252443353855dfc1a3ae7604c66e36437c882572a2a6d39a570b433905016d0e0dbfb8bca4349c5d7e0d0de9d722c3efa3857509174845e466aedc96e4b94e4bf2c28f49104342430ea0092746131e6c3a87532073c890e5fecf3293d8d9db8dbe20169f190067d3d61d0fd083ca1094eaed110b24c67bb8b46b9e393ab9ea03ecbb29b158de3a7c233632976cf5e825aec619d98c9f97c886ad626877c14b31b3b810497cdf79f446ecb011ec63c3a163195b14e2515a4fa96d77d5defb2a28bdf71c02ee5ea461585bee822498cb50097ff30107cef0dc5d4ca253ae294522e537946bbe5c35359fe0015df8d0a5ad703b1aefbc1e5846c29aaae3d286e0be136dd6be0984e8cbcd437219503cfae19122a17f28cc81f42e7648feecb98f01f6274c7ccf0f465deb7cee4bbc816f3cbc08daca2df450147e997b30850a33a1917090a9af63516decb9b0a09c2b8c58f5c88d94a8e3d9b64a2202095d424dee2abdcfa1c36a531060bbf8e401bfdbcd7e11672a5f2b08be6f75247a0ab393cbb04377c9519520a688a229be160242020ad76c762166609f4dea2212c8a0401a2b4ed877c0cc8f8d7b52c8e92a89554a76a455a319ce8bc9cdb0bb7e91b4701c933b12145c5d7f52ad650b56bc76369076c31262aede64dea974f515d26b8bc050f6d9c52e365ad1cf7a38dd970c13a3892f0dec54a4d49b72bb0e5e284f90cbfc779f8c4b20c27a65f2efd1d5ed2227945c13514d48eb622adde2d92c1ce5ffe24993251382ba68b89e56804b9f005897446083b5304953c2ac08ca6972eb61e650aa1ddbd8e991958ddc014a54daf92bd2b58d5585f8da04c0a8aec7fc08b27c39fdc5e987a57c64c026c9779385ca774f3072479605ab1ca4f4fee66fcde98c36ce0b5ffc8886cb7d5ffc9ccea33651254d8f11977a875565390d78654e34c59a207cba64a96f4056126926e70d7aa17e6f4c4050b18e5cade6a1c20616146b8c446fa380a162e6dd803f48a1485a0aa54636dad81534bd4c9e4610a679224ca0746b40e95a8715db0c620bbb91398669d06664c5fee07f31e3b09fe23ec75b9a7989cccd991b8823cdfbc1ecf1f4e5578c81dea66f6ce8ddc7cdcc0016df1fb15e01b0f2a944be19600771f76dee7ed54a9af3035f18b45bf105a991c1e6902caf1fdfeb65e834c40a009b0f205c9c0140673c331eac2b4070af882a12ee670291bf113e50c51e76daf9ebc2de9ad41eb826926b7cd3f3acbf138307957bf2c3ccff818ef3f0270af0b07f55ac8af16700fb00af10061f46ade406d06f34a7e1cffcf3630566400505d63904bd44fd522ec960931af491435f6fab73d53738712032b7936112495592e8609ed49526d3b7a49aab3f11d70b588bf2db6df89d826e98ccfb7f9dd7e70ab54852a984fab81796d1a089a87138eed4024bd5bc885fe19032f4527a33471a0e39f42db46cb13d9258579667cb43a15eaf31098530f76ce8de5ef91dd1f333834403918ca332130de015d152b9b42e3372fdb7bde5579b79d14dd52e93ed388811bd344b159d1804c4b486d8a4422233502bda1cd33c8e8b87ffae849e1b12469daa51a64a7a53df07fda17ba3004f0616d0c2c0e36843cba84cd335724a2d0ab283602cbf5347812fcae2b69d30d459236bb793da9c84dcd4ea41a694fc48f738e0c99b075c6f2581eb3e0926e9b4cdd341b73a7dfb17175105107eb4b80dd703303e4c8768e468c9bc3e7db73e5478582d8761cbf4df17a122320b8e3607f5599612be1eea1180304683d40210f4821b97876e1e1b34d1fa7b10caff83a114bb0fc6773bf8ab21e1e482af2819e8dd1550099941b021e113fab97d454c82e9fff78b132a762e46c1f392b7697039442abe26dd2c189d53f63a9ce62ec5173aee03363e27b6bdff3ed02e5460769dd86b508590e58e27e4d15ed00efb713de41f4120c0745fbd6c32f66b966165e8df47b38a7157a97c04d1b14160940308c1fe83bf40962e0336cf08658890634fd79c7469f1586f72276d95b3167aa731706843c754941a03c010f2966ce605acd0214bce319d981c8063d1b05c8001e2a090b1dc8b583621a982cdd9042b73cb90df98ac3010536865f6bdad6688a8efd3cd04b779c8ccf0dfc7b12952523b1b0dc5c9cabaa0eee704e435acc3da08e72e87d9dc85c04ce49465146fa10d5ff34c889147ffe85b2a62b443f6cc05ba02487be9e52f6cf855bb8d530c91889dd875c56cf02995990ffa4240916a9e74268197d342209543ae6ff480e30e1e1c9a1986c3c0bf9d0846f0f4914a619c7a85d6cc9805f1422321803b68c59c529ccfec1629c750b8e0489bcb2c143d8995e82de2d8402da36bb75c19a203fa14c2367bbeb640a49831a7d483a437f875c9ec6195d1bf7f8f717337dcf36e58589ddb829b43609b9022a68abfbf773487f84b497b73f219abf177237e054c535dcf08f8715272bff39b02caf656024b4e597e7e143fc56c8357d59830d8734a975d01123f849892154ca8c4c90858bd4e9a3353ee8f65d2160f1368ef223fd3ad8ed6ba703e135a80d864369a759324591a36f67dc6dece67cdc4f41ff3c1ae0a59325a76034bb1244b0ff6debf5e9ac89092310bd72b0e14a71a3f41c515937b93f742191f42613cc915a8ea044ae292c03155294c3bfcb7492928d47741727b84589a27d63246a16405347bf5e50be8d486cfe4a13df1c7e6270a8f5ee47eaec3d913eb09b56d4540beae97b68832c02bfd257ff5f5675a5631e6a4b1f9976f12a158b11a62a50db6554595ac0269c99581fbc3bb03d4fb4d8fd9812b55d89970d792fc05e44ac328f649d5bf65e0576591067b309308eef7d2d1d25bde93ae9d311bf37e301ddbf67f422de4eeeef2c8cd695607d92cac180db9b760743ec2fa6b559fbdc0036b3390773aa07ebfd48f2f666b4cca6c90a181e704737abe9725ab158e29f7ef21d033bab1cd594956fa2d005f2e7c137d152bd6a80712b1d6e39e58fbd692cbfcfbabfe75ed89ef9c62c17f1bf5a402ae215e7abc5aa65741850dbae7714b2457e1acde6ccb44472d7dcdd4840c069e3ef720928787876ea8c14a4b3bd4cbd38bd6e0694a20c883f2d54570e62e2a4ab0f3b0b32e7ac5a74f5a4583e93fb49270a1462578ef139512f5e96ef1b70ca5c92f3791ae5b485506998297248b0cbbb443e95a059569df6e829eba6a3d3388b57a8510ebd9ba7aa38de050bdbcd42b3996cb56760a54535c9bffc7ecb3fdbf8f4f2d5b369c3c478ccd4a69adb6a2694f52a3cd782f94fc360e44e7c991d66cf5e3560f7c87f3db8fdc87a0b9dd0cbe08926c783d06bec81716a4bf5553967a46f76863932417f0a6580c6d85f7c0916026daf5de00c5604b09378ce760a8a9db0f639a20b4c1367e721c32be2e4f24db1257f8f04f7eff72777c8a81c53fb3f11cd5ccd12d794fa05fd843d7cfbe2aea4eedfe52e6214ffe3bf3552366e2df7aa516212f60b44316ea175e8f288f6614c69c9ab7785c576881b06fcf243b6bdc99c91a9dba628e1a6a90104423fdad09ce63b2879466312a8d696639617cd3a1db4d79b8ea1318a3479589c320aa78c874281cc6740b7ba5a1b35f45b2232f826a7d700870a1c466fdf3b0e14e580b76e595c307390506dc0dc80e25b18b9db6de2b24f9ce082e6d0ea141ecaddb9a94eb2c2ccfe1684b4120e303d14ce6fab5da643ed41b996d664931973e86717171c63a964882130ab974c263745e246caa6edf9255533f885bb75fd649a76413dc6c869e3a9e7496c5add9887e889be0c65cf95b6b6a0e15251e8d0ab478b4618324d787992a76d049ce5f377253e33b40152596066497f8339c93ee2cb632dfda25a38b0fb84f51a5d8693254342b3d87724059f55ed09edd753b97e01b48934d897836e5e1018f0ce73e141d4ac13ca52961eb3a0e020ff274d9a43a053407a982459899816d06ede8b87cb7ed6a5b6c782757978b1c5bd5eb249c9ffa4594d0c890f65f1b05b4b94f6be467eef4223aae77441f508e0ca05fa5ed99316c3fe1a03931ba62ae76b00bc80c7e2036911419fb1805895b0cd82271a0bfa6781f918130db49286ff60965101d4a3b4601c19e21703284c99fd803dd6f1a16c773bf4e3b58c1e95076979f9f2868201359f7337b03252e7a03734d4d93668a46a37332d536622a32262ccadee35e4af3fb59ec886aacb11b1d28563be52f32e544621a0a0496ccc5e3026a297a4fd45f0def3ec0c340d1eecec3c20a2761a458064fdf6b30a9735e431659ffbc5c20ce39af235549635f31a2eee42b16e4db75ab8a9327b4d15b5e014ae5c9fd0b1de4aeacbfa474f84ec484f0044648a547547e210913dfd0f4e384dc855bf4c0db65212e9ae32eb0c1aa1f1f4960b008659bfdf09e61fed88681b89a09c5df4e16040e1b2e19f21bce7a51bd46", 0x1000}, {&(0x7f0000000080)="2899fe053d36c28c100401ad8b82b753e3d5fb8a0ff1394bebedd5f3fc16f26ca347bde6576228aa388ba6ad", 0x2c}, {&(0x7f0000000140)="20a5", 0x2}], 0x4) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) ioctl$TIOCSETA(r1, 0xc4504448, &(0x7f0000000740)={0x6, 0xfffffff7, 0x0, 0xc00002, "637447c1d100", 0x8000}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x83, 0x2d, 0x2, 0x8}, {0x64, 0x8f, 0x9, 0x9}, {0x6, 0x2, 0xe, 0xfff7fffc}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) sysctl$hw(0x0, 0x0, &(0x7f0000000340)="00231b000f3a8095043fa89888012c00000817c53fcb7c7be73d557fe7e5179f560ddc7733467d40b54271c9aa0c3ffdaa39750008007a00000000a25ef4fd8a2694e9a6cdfad553b6e7ec064b6bbea0ffff160000000000ad068d3fe5411e69be6c4c3a846963b799e722579ed48ef7400259a5669fb0d3fb80acdfbf3eb80fd6825e08", &(0x7f0000000000)=0x84, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0xfffffffffffffe6d, 0x0}) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[]) setrlimit(0x8, &(0x7f0000000980)) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCGDLTLIST(r3, 0xc010427b, &(0x7f0000000080)={0x0, 0x0}) write(r0, &(0x7f0000000200)="09200200000000000000004504000000e67963913f9b47437b413f30ff7a6a0a", 0x20) r4 = syz_open_pts() ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000000)=0x8) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000803) r5 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0x180) ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000040)=0x8) close(r5) clock_getres(0x2, &(0x7f00000023c0)) execve(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) 2.037345109s ago: executing program 7 (id=3306): r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0/file0\x00', 0x80) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0xffff, 0x3, 0x29, 0xffffffff}, {0x7, 0x40, 0xf, 0x1}, {0xff, 0x8, 0x0, 0xe055}, {0xfff8, 0x4, 0x6, 0x9}]}) chroot(&(0x7f0000000080)='./file0/file0\x00') chmod(&(0x7f00000000c0)='./file1\x00', 0x8) 1.885345889s ago: executing program 4 (id=3307): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x200) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x95, 0xf, 0x47}, {0x7, 0xf1, 0xff, 0x9}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) sysctl$hw(0x0, 0x0, &(0x7f0000000180)="0060054d3d931dc908000000000000002dec30c2", &(0x7f0000000000)=0x14, 0x0, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f0000000600)="d81a0f0000006b00000100000000", 0xe) rename(&(0x7f0000000100)='./file0\x00', 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000140)='./file0/file0\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x8000, 0x1) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.884533941s ago: executing program 5 (id=3308): mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200) kqueue() (async) r0 = kqueue() r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) shmget$private(0x0, 0x3000, 0x602, &(0x7f0000ffa000/0x3000)=nil) (async) r2 = shmget$private(0x0, 0x3000, 0x602, &(0x7f0000ffa000/0x3000)=nil) shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x0) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x0) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x208, 0x0) kevent(r0, &(0x7f0000000000)=[{{r3}, 0xffffffffffffffff, 0xa1, 0xfffff, 0x7, 0x1}], 0x4, 0x0, 0x6, 0x0) (async) kevent(r0, &(0x7f0000000000)=[{{r3}, 0xffffffffffffffff, 0xa1, 0xfffff, 0x7, 0x1}], 0x4, 0x0, 0x6, 0x0) close(r1) 1.878878992s ago: executing program 1 (id=3309): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) r0 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) read(r0, &(0x7f0000000200)=""/174, 0xae) pread(r0, &(0x7f0000000300)="ceb3706d7f7824c3b72b0280ac66e6c3fde2f8224c0174f0d96709d2870f8bf64a062c90b127289378c1ea4b7e7fc7b2730e097adf4cd7f03a6c1373dac55e55f73122a7c483b428d0b41fd6705a04f7a648", 0x52, 0x38) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000140)={0xd, 0x6}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/232, 0xe8}, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) setrlimit(0x0, &(0x7f0000000980)={0x100000000002}) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvfrom$unix(r0, &(0x7f00000003c0)=""/254, 0xfe, 0x1840, 0x0, 0x0) 1.871776848s ago: executing program 0 (id=3310): chmod(0x0, 0x72d4f67175811def) open(&(0x7f0000000000)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79a3) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) chmod(0x0, 0x72d4f67175811def) (async) open(&(0x7f0000000000)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79a3) (async) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) 1.814708145s ago: executing program 7 (id=3311): sysctl$net_inet6_icmp6(&(0x7f0000000040)={0x4, 0x18, 0x3a, 0x3}, 0x4000000000000003, &(0x7f00000000c0)="51e61fc2f7e3414070a902af2e733310376d755c9b97c5dead0b86dd84", &(0x7f0000000000)=0x5, 0x0, 0xffffffffffffff76) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x80047462, 0x0) syz_open_pts() setrlimit(0xe, 0x0) r1 = openat$vmm(0xffffffffffffff9c, 0x0, 0x8, 0x0) ioctl$VMM_IOC_INTR(r1, 0xca605601, 0x0) setrlimit(0x8, 0x0) r2 = syz_open_pts() close(r2) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x2d, 0x2, 0x8}, {0x4c, 0xf, 0x9, 0x7}, {0x6, 0x80, 0x5, 0xfffffffe}]}) sysctl$hw(0x0, 0x0, &(0x7f00000002c0)="50041b02003e80744700000000000000020000000f220000000000003c7c3087de4ada9a933366b304db9d5fea3d714a7c60c6c79f23bf4d5a0990a98e13b1e20000001101803a01", &(0x7f0000000000)=0x48, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0xfffffffffffffe6d, 0x0}) syz_emit_ethernet(0x22, &(0x7f0000001400)=ANY=[]) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x4c}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x2, &(0x7f00000011c0), 0x0, 0x0, 0x0) ioctl$VMM_IOC_INFO(r0, 0xc0185603, &(0x7f0000000100)={0x72, 0x0, &(0x7f0000000080)=""/114}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x45448) sysctl$net_inet_tcp(&(0x7f0000000300)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000001540)="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", &(0x7f00000002c0)=0x210, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) close(r5) r6 = kqueue() kevent(r6, &(0x7f0000000200)=[{{}, 0xfffffffffffffff6, 0x9, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) 1.503375339s ago: executing program 0 (id=3312): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x4}) mprotect(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() sysctl$net_inet_ip(&(0x7f0000000140), 0x4, &(0x7f0000000300)="8045a4fb02e515b251e8d2f1dc5565277a0fdbef1c014e8f036e488b0b66c8b39c5492344dd0ba4999ccf6384e5a50eb1d182000059c7ecd2408914618d4d3f5651b5be6521d9dea48e23a0789e57d545eeb0b1fed1f0ab94ccada8c8b8f04886a5f7ba53444cc69ffe404aec11dfbb0b93cc8067c23edd179722a536c9c56c334cde6ba49c4c14faa03b92d", &(0x7f00000001c0)=0x8c, &(0x7f0000000480)="03d3485a0c4074c569cffb1db4f472ead6244f028bed1e8eea9f149b94a4039321a628bbaea3ff469e767164cfe760d845e077b15847bbddb5a0d1523b68799c6df2de6535da6dbfe6fffa14f4736e5eaec30a1d7c689fb55b76542f11bf86fdbf3d7c38efce38ead7d41e61d0d18c42f46ac03d85c662078af04f6483daeb4cc6b158ba3cc9566ca77f6742c3f5eec54abae6607dd29f25bedd860e184cd7", 0x9f) close(r0) r1 = syz_open_pts() writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xd, 0x8000003, 0x5, "001a3cfcff000b00000000000000f5ff00", 0x10003, 0xc04}) read(r1, &(0x7f0000000200)=""/255, 0xff) r2 = socket(0x18, 0x3, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x80000000000206, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x538, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) ktrace(&(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0xa8, 0x5}, 0x804) 1.502368537s ago: executing program 5 (id=3313): r0 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x8, 0x0, r0, 0x0, 0x0, 0x4, 0x0, 0x77}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xfffffe05, 0x0, 0x0, 0x0, 0x0, 0x1f0, 0x83}, 0xfffffffffffffff8, 0x8000800000045, 0x0, r0, 0x4, 0x2008005, 0xfffffffffffffffc, 0xfffffffffffffffc}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xfffffe05, 0x0, 0x0, 0x0, 0x0, 0x1f0, 0x83}, 0xfffffffffffffff8, 0x8000800000045, 0x0, r0, 0x4, 0x2008005, 0xfffffffffffffffc, 0xfffffffffffffffc}) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x1, 0x0, 0x8, 0x100000008}) (async) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x1, 0x0, 0x8, 0x100000008}) r2 = getuid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000000029, 0x3b, 0x0, 0x0) r5 = semget(0x0, 0x1, 0x281) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0xd}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000672000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d10000/0x1000)=nil, &(0x7f0000693000/0x1000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c0c000/0x2000)=nil, 0x2ff}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r6, 0x0, 0x0, 0x60e) listen(0xffffffffffffffff, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) semop(r5, &(0x7f00000002c0)=[{0x0, 0x7, 0x1800}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x2, 0x0) r7 = semget(0x0, 0x1, 0x281) semop(r7, &(0x7f0000000100), 0x0) semctl$IPC_RMID(r7, 0x0, 0x0) (async) semctl$IPC_RMID(r7, 0x0, 0x0) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000580), &(0x7f0000000140)=0xc) (async) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, r8, r9, 0xffffffffffffffff, 0x0, 0x88, 0x6}, 0x6, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, r8, r9, 0xffffffffffffffff, 0x0, 0x88, 0x6}, 0x6, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023}) fchown(0xffffffffffffffff, r2, r9) (async) fchown(0xffffffffffffffff, r2, r9) socket(0x11, 0x3, 0x0) 882.462188ms ago: executing program 1 (id=3314): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r0 = open(&(0x7f0000000080)='./file0\x00', 0x20, 0x20) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000000c0)='./file0\x00', 0x8}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x16, 0x1, 0x400, 0xffffffff, 0x80000001, 0x17ffe, 0x10, [{0x3, 0x1, 0x3}, {0xc5c, 0xc, 0x3, 0x336058a4}, {0x800008, 0x9, 0x1fa, 0x7d2}, {0x7ffffffe, 0x3, 0x40, 0x784c}, {0x3fd, 0xc, 0x1002802, 0x6}, {0xb, 0xfc, 0x3, 0x8001}, {0x800000a, 0x0, 0x40, 0x2f}, {0x2, 0x836, 0x28000016, 0xffff}, {0x9, 0xf71, 0x24797519, 0x7}, {0x10001, 0xa74d925a, 0x1, 0x40000088}, {0x1, 0x5, 0x4, 0x412c8393}, {0x3, 0x9, 0x20008, 0x40000010}, {0x5, 0x7, 0x8, 0x3}, {0x29a71720, 0x10081, 0x7, 0x5}, {0x400002, 0x7, 0xffdffffd, 0x100}, {0x200, 0x8, 0xf5, 0xa}]}) getdents(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = open(&(0x7f00000002c0)='./file0/file0\x00', 0x18200, 0x0) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffff7fd, 0x0}) ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xc2585601, &(0x7f00000000c0)={0x10, 0x3, [{&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x100000001}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffa}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x8}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x9}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4}, {&(0x7f0000f2f000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xb}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x400}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7ff}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x75c4}, {&(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x283e}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000bfe000/0x400000)=nil, 0x8}, {&(0x7f0000ec1000/0x1000)=nil, &(0x7f0000c75000/0x2000)=nil, 0x6}, {&(0x7f0000d47000/0x1000)=nil, &(0x7f0000f77000/0x1000)=nil, 0x7}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000e22000/0x4000)=nil, 0x81}], './file0\x00', 0x7}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0286988, &(0x7f00000001c0)) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x0) ftruncate(r3, 0x8531) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r4 = socket(0x18, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) close(r5) open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x120) chroot(&(0x7f0000000740)='.\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$WSDISPLAYIO_GETSCREEN(r5, 0xc0245755, &(0x7f0000000380)={0xfb8, './file0\x00', './file0\x00'}) ioctl$WSDISPLAYIO_ADDSCREEN(r0, 0x80245753, &(0x7f0000000000)={0x2, './file0\x00', './file0\x00'}) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) 880.417113ms ago: executing program 6 (id=3315): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x200}, 0x0, 0x0, 0x7}) (async) r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async, rerun: 32) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) (rerun: 32) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x4) (async, rerun: 32) select(0x40, &(0x7f0000000180)={0xfffffffffffffff5, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async, rerun: 32) sysctl$hw(&(0x7f0000000100)={0x6, 0x5}, 0x2, &(0x7f0000000280)="d7e47d138cf0bdc30d6821fe600dee181ae8d5d5f3503530a406ae65ddae77da81945f9acb43ea96527c1b366379d3a13b998d93dd65b19d33ebcc676d8ebdb782f60c78b442c0f5a424f0d1a8336742238bcabcc20f59a23f9f1496832baa632a48eb7581780d230e17d9f77497fcdf7e2563d20680ca8146d0cc381a4e6c0da5c5541f2f90cf04ada8124365af695ec425a66f", &(0x7f00000001c0)=0x94, &(0x7f00000004c0)="399f0d3020122dc9ee403e3d56d87b1ebe54da41b09773e131b0f5c891fe74ee1cc24862359c72d6ec9d8c40e09c5f80975482ad4b947936e88537f67796e37832b9ca830f8db5f51e36999136dd2704c92da9053adcd82189b1293a1636618f7d6f10ccadc5ccbf9547ba33b3dab95a4418300f18ef731525ebef703fae7f126907d8afa06f89c084154f2bfee2cfb8b4924ec502fd6574e33c2ace1afc25899d5a0d7486190951be57c20d07641963e3a763f39c65208041d8f65dc3c442d4131cdd476cfa37df4696c136a367f3e1bb42a9608b9ee2cee9ee9477d6332849aa2b359de0fe5f69607097f636f7f3d3588bef35", 0xf4) open(&(0x7f0000000480)='./file0\x00', 0x0, 0xd6) (async, rerun: 32) ktrace(&(0x7f0000000240)='./file0\x00', 0x4, 0xb1c, 0x0) (rerun: 32) setitimer(0x0, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0x6}}, 0x0) setitimer(0x0, 0x0, &(0x7f0000000080)) (async) getitimer(0x2, &(0x7f00000000c0)) (async) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) (async, rerun: 64) close(r3) (rerun: 64) 663.481576ms ago: executing program 4 (id=3316): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0xdb) chmod(&(0x7f0000000080)='./file0\x00', 0x40) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x3ff}, 0x400, 0x5, 0x0, 0xffffffffffffffff, 0x849, 0x8000000000000000, 0x4, 0xa}) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x13}, 0x4, 0xfffffffffffffffe, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x18, 0x1, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffffa, 0x6b, 0x11, 0x200000000000001, 0x101}], 0x203, 0x0, 0x0, 0x0) close(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = syz_open_pts() ioctl$TIOCGWINSZ(r2, 0x40087468, &(0x7f0000000180)) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000000)="8858cd20", 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)='#!', 0x2}, {&(0x7f0000000540)="93", 0x1}], 0x2) writev(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)="20092819b7b29aca1dfd887641f187c6e367c7ab8148d9e6f9ffffffffffffff13624ef2dfd074610339f36b21de4e3a2726438fe1f286ff4c14f039189452bde8e30d579169841d89e80a", 0x4b}], 0x1) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 662.763711ms ago: executing program 5 (id=3317): sysctl$hw(&(0x7f00000000c0)={0x6, 0x9}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000320000/0x1000)=nil, 0x1000, 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, &(0x7f0000000100), &(0x7f0000000080), 0x0, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) (async) select(0x40, &(0x7f0000000180)={0x1d5d3, 0xf9, 0x3, 0x80000003, 0x4, 0x181c, 0x4, 0x2}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000140)={0xfffffffd, 0x400, 0x4, 0x0, "d76c0b652155cb57000b9034aee9c6d700004f00", 0xfffffffc, 0x401}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x22) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x7fff, 0x7, 0xd4, "00000000000000000000001500", 0x3, 0x1}) (async) sysctl$kern(&(0x7f00000014c0)={0x1, 0x2f}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r3 = socket(0x18, 0x3, 0x0) (async) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0xa, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0xb, {0x3, 0x1}}) (async) setsockopt(r4, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) (async) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000140)={0x9755, 0x1, 0x4, 0x0, "5cee146ff0c311da1bb95816f91d49931314b250", 0x2, 0x4}) (async) r5 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000100)) (async) ioctl$VMM_IOC_INTR(r2, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x2005}) 656.392687ms ago: executing program 3 (id=3318): setitimer(0x2, &(0x7f0000000000)={{0x13f, 0x9}, {0xd, 0x1da}}, &(0x7f0000000040)) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x2, 0x8}, {0x6, 0x1}}) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='c\x00') chroot(&(0x7f0000000180)='./file0\x00') mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x6) utimes(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x0, 0x10}, {0x7, 0x6}}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x22, 0x0) r1 = accept(r0, &(0x7f00000002c0)=@in6, &(0x7f0000000300)=0xc) mkdir(&(0x7f0000000340)='./file0\x00', 0x2) mkdir(&(0x7f0000000380)='./file0\x00', 0x64) truncate(&(0x7f00000003c0)='./file0\x00', 0x4800000000) write(r0, &(0x7f0000000400)="cca7280f6f82987f73b6f2f36ddab3ec1845640663bddede28087bdb9862c6042bea9f5c18a2f763d5b9bf6b519a61506d94ff42a67470f6b7bcf3268856", 0x3e) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000440)="a1d9c0bd087e01f5ad49de11bc0cbb5e5333089165c8fbd4a761498a45e58a", 0x1f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getitimer(0x1, &(0x7f00000004c0)) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) chown(&(0x7f0000000500)='./file0\x00', 0x0, r5) ioctl$LIOCSFD(r3, 0x80046c7f, &(0x7f00000005c0)=r1) execve(&(0x7f0000000600)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000640)='-\'\\\x00', &(0x7f0000000680)='/dev/pf\x00'], &(0x7f0000000800)=[&(0x7f0000000700)='/dev/pf\x00', &(0x7f0000000740)='[\x00', &(0x7f0000000780)='/dev/pf\x00', &(0x7f00000007c0)='/dev/pf\x00']) r6 = socket$unix(0x1, 0x5, 0x0) setgid(r5) lchown(&(0x7f0000000840)='./file0\x00', r4, r5) setegid(r5) setitimer(0x1, &(0x7f0000000880)={{0x1ff, 0x7}, {0xa17e, 0xfffffffffffffe00}}, &(0x7f00000008c0)) getgroups(0x5, &(0x7f0000000900)=[r5, r5, r5, r5, 0xffffffffffffffff]) symlink(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00') select(0x40, &(0x7f00000009c0)={0x7, 0x40, 0xffffffff, 0x5, 0xff, 0xe19, 0x7d5b, 0x80000000}, &(0x7f0000000a00)={0x3ff, 0x1, 0x7, 0x0, 0xf, 0xc40d, 0x7f, 0x6ecc}, &(0x7f0000000a40)={0x3, 0x6, 0x3be, 0x7, 0x100, 0x7ff, 0x4, 0x9}, &(0x7f0000000a80)={0x3, 0x8}) setrlimit(0x8, &(0x7f0000000ac0)={0x7ff, 0x40}) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000b80), 0x250, 0x0) kevent(r0, &(0x7f0000000b00)=[{{r2}, 0xfffffffffffffffd, 0xa8, 0x1, 0x5}, {{}, 0xfffffffffffffff8, 0x32, 0x4, 0x7}, {{r3}, 0xfffffffffffffff9, 0x40, 0x1, 0x9, 0xd}], 0x0, &(0x7f0000000bc0)=[{{r6}, 0x2, 0x18, 0xb0000001, 0x2, 0x1}, {{r6}, 0xfffffffffffffff9, 0x82, 0x0, 0x2e4, 0x8000000000000000}, {{r7}, 0xfffffffffffffffc, 0xe, 0x40000000, 0x2, 0x1}, {{r2}, 0xfffffffffffffffd, 0x24, 0x1, 0x10, 0x8}], 0x200, &(0x7f0000000c40)={0x6, 0x4}) 507.324577ms ago: executing program 0 (id=3319): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000800) 506.414331ms ago: executing program 7 (id=3320): r0 = socket(0x18, 0x4000, 0x0) close(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) close(r0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x6, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0xc, 0x10, [{0x10000000, 0x7, 0x3, 0x71000}, {0x101, 0x8, 0x9}, {0x7, 0x8000b86, 0xffffff7c, 0xb}, {0x73f0, 0xfffffff7, 0x4, 0x1}, {0x403, 0x8, 0x1002800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0xfffffff9, 0x200004f8, 0x10}, {0x6, 0x9, 0x16, 0xb}, {0xffffffff, 0x84, 0x4, 0x3}, {0x4, 0x7, 0x93, 0x1ff}, {0x1e0, 0xffff, 0x7ff, 0x7}, {0x8000009, 0x29, 0x9, 0x5}, {0xb8c, 0x401, 0x80000003, 0x405}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0x9, 0x9, 0x6}, {0xfffffffd, 0x800bc3d, 0x4, 0x30005}]}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0xa, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) r3 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) select(0x40, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x40000, 0x100, 0x3560000000000, 0x0, 0x80000000000000}, &(0x7f0000000200)={0xcea, 0x20010, 0x80000002, 0x1, 0x1, 0x3, 0x80000000000001, 0xfffffffffffffffe}, 0x0, 0x0) ioctl$DIOCMAP(r3, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r3}) open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x18) close(r3) ioctl$TIOCSBRK(r1, 0x2000747b) 499.926063ms ago: executing program 5 (id=3321): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x3, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f00004a1000/0x4000)=nil, 0x400}, {&(0x7f0000695000/0x2000)=nil, &(0x7f00002b1000/0x2000)=nil, 0xe90}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f00000d6000/0x1000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, 0x80000002}, {&(0x7f000055e000/0x4000)=nil, &(0x7f000032f000/0x2000)=nil, 0xa}, {&(0x7f0000613000/0x2000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f0000251000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f00003d1000/0x1000)=nil, 0x9}, {&(0x7f000043b000/0x1000)=nil, &(0x7f000076c000/0x4000)=nil, 0xffff}, {&(0x7f00000a5000/0x1000)=nil, &(0x7f000079e000/0x4000)=nil, 0xffffffffbffffff9}, {&(0x7f0000576000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5e04}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8}], './file0\x00', 0x3}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x18, 0x0, 0xffffffffffffff5a) r0 = socket(0x18, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="7f454c4602df7a2c4ee4975f55011a49b70cb710d18fcf8fd1f9794ffa08bb11bafcdc24ff4c5d0b5c7b1ad1a2ec434c5001", 0x32}], 0x1) recvfrom$inet(r0, &(0x7f00000002c0)=""/159, 0x9f, 0x1000, &(0x7f0000000040)={0x2, 0x0}, 0xc) rmdir(0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x3f}, 0x400000000000009f, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x3}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11"], 0x20, 0x2}, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) 498.388633ms ago: executing program 6 (id=3322): r0 = socket$inet(0x2, 0x1, 0xfd) close(r0) (async) r1 = socket(0x24, 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setsockopt(r0, 0x6, 0x1, &(0x7f00000000c0)="0c9fd079c68cf3965719e3c060d077f47fed66f836ae8da4be5c4b656c3d158b0b5d8cad775a319920b499e356", 0x2d) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="7626d7710200ffffffffffffffe4dd1e", 0x10}], 0x1}, 0x0) sendto$unix(r1, &(0x7f0000000140)="b1000503000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e2739d2d236acf20b7804be38164991f7c8cf5fe2f0ad3ebbc257699a1f139b67", 0x3, 0x0, 0x0, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000003940)='\x00', &(0x7f0000000040)=0x1, 0x0, 0x0) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x201}, 0x0, 0x0, 0x7}) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0) (async) ioctl$KDGKBMODE(r2, 0x40044b06) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket(0x1, 0x4, 0x0) close(r3) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r5, 0x0, 0x0) (async) r6 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r6, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x2012, r4, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r7, &(0x7f0000000280)=[{&(0x7f0000001040)="bd", 0x1}], 0x1) close(r8) (async) select(0x40, &(0x7f0000000080)={0x8, 0x3ff, 0x0, 0x7, 0x0, 0x1, 0x8000000000000000, 0x8}, &(0x7f0000000380)={0xffb, 0x0, 0x8, 0x0, 0x2, 0x4, 0x2}, 0x0, 0x0) socket(0x18, 0x2, 0x0) sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 143.414634ms ago: executing program 0 (id=3323): r0 = socket(0x2, 0x1, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x12, 0x10) ioctl$TIOCCDTR(r1, 0x20007478) setsockopt(r0, 0x0, 0x3, &(0x7f0000000000), 0x0) sysctl$net_inet_divert(&(0x7f0000000140)={0x4, 0x2, 0x102, 0x2}, 0x4, &(0x7f0000000080)="e0ad22868c3c5d3960502d5bab35a53f3ca1b381033cce86edbc6cc09f1a2638f76b7a7edb515a4061ab10a33e71ce2519353093aa6d20e58dd62dc89f689826277e56dd1edbb9890813a8a28b919bf034e27498c2f0bbf20189377982d2ba3ae0efb12d0c83bd969ba9c4961b70f7b3efa0cc66710d6ea4752b8f716b91f334691c9f7ca4426c6ea979540d64af7c2b0dfc06a3", &(0x7f0000000040)=0x94, 0x0, 0x0) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000007}, {0x2c, 0xc, 0xd5, 0x4006}, {0x6, 0x9, 0x1, 0xfffffff2}]}) (async) sysctl$hw(0x0, 0x0, &(0x7f0000000080)="50060000003e807447ff000800000000000000e3cc3499aa4765d4db1103000000d0af3a", &(0x7f0000000000)=0x24, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) sysctl$kern(&(0x7f0000000780)={0x1, 0x5b}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[]) (async) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) flock(r3, 0x0) 142.779841ms ago: executing program 5 (id=3324): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x8000, 0x2d, 0x43, 0x1}, {0x3, 0xc, 0x2, 0xb}, {0x6, 0x2, 0xa, 0xfffffffc}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x3, 0x2}, {0x0, 0xc8}, {0x5, 0x2}, {0x1, 0xff}, {0x2}, {0x3}, {0x3, 0xfffffffd}, {}, {}, {0x0, 0x1ff}, {0x2, 0x8}, {0x3, 0xfffeffff}, {}, {0x0, 0x3}, {0x3, 0x1000}, {0x1, 0xfffffffc}, {0x2}, {}, {}, {0x2}, {0x0, 0x3}, {}, {}, {}, {}, {0x1, 0x57fd}]}) openat$vmm(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="487c0e9a0d68922b299616cdb4007e9a0883b6c40d5be343ecbaf83e69", 0x1d}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaabaaaaaaaaaaaaaaaaaabb080045f4002800670400000690788cd6481f1f8aa926fbd60ee0", @ANYRES32=0x41424344, @ANYRES64=r0, @ANYBLOB="500280009078fffc"]) syz_open_pts() mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r2 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000240), 0x8, 0x0) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f0000000100)="06b5ed000000", &(0x7f00000000c0)=0x6, 0x0, 0x0) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r2, 0x3}) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESHEX=r2]) execve(0x0, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSHDRCMPLT(r3, 0x80044275, &(0x7f0000000200)=0x2b1) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x1, 0x3d, 0x3, 0x3}, {0x20, 0x9, 0x3, 0x11}, {0x1, 0x6, 0x4, 0x8001}, {0x3c56, 0x2, 0x9, 0x8}]}) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) ioctl$TIOCSETA(r4, 0xc148445e, &(0x7f0000000000)={0x5e, 0x2, 0x8, 0xd5, "70da6fc900000000000000000000000000000100", 0x80000000, 0x101}) syz_open_pts() getdents(0xffffffffffffffff, 0x0, 0x0) 1.256246ms ago: executing program 0 (id=3325): r0 = openat$bpf(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xcd50441a, &(0x7f0000000180)={0x3, 0x2, 0x200, 0x2f, "1800e6234f5d7a0000005409456200", 0x3, 0x7}) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x0}, 0x15, 0x0, 0x0, 0x0, 0x0, 0x40e}, 0x801) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x2, 0x2, 0x40000000000000, 0x4}) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) close(r2) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async) ioctl$TIOCSETA(r1, 0xcd50441a, &(0x7f0000000180)={0x3, 0x2, 0x200, 0x2f, "1800e6234f5d7a0000005409456200", 0x3, 0x7}) (async) sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x0}, 0x15, 0x0, 0x0, 0x0, 0x0, 0x40e}, 0x801) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x2, 0x2, 0x40000000000000, 0x4}) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x18, 0x1, 0x0) (async) close(r2) (async) socket(0x18, 0x2, 0x0) (async) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async) 701.434µs ago: executing program 1 (id=3326): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f000069c000/0x3000)=nil, &(0x7f000051f000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x1}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000692000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x100000000000}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0x400000000000000}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000604000/0x3000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000069b000/0x3000)=nil, 0x9f}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x40003}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xac3}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f0000531000/0x2000)=nil, &(0x7f000069c000/0x4000)=nil, 0x2}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x8}, {&(0x7f00006bf000/0x4000)=nil, &(0x7f0000010000/0x3000)=nil, 0x8}], './file0\x00'}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) open(0x0, 0x80000000000206, 0x0) (async) open(0x0, 0x80000000000206, 0x0) getpid() (async) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1001, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1001, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x18, 0x3, 0x0) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="347a727e406699ac74f04e3f6c5ca2813266aee4bf62822e2b5fb5c878", 0x1d}], 0x1, 0x0, 0x0, 0xc0c}, 0x1) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="347a727e406699ac74f04e3f6c5ca2813266aee4bf62822e2b5fb5c878", 0x1d}], 0x1, 0x0, 0x0, 0xc0c}, 0x1) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) (async) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) (async) execve(0x0, 0x0, 0x0) sysctl$hw(0x0, 0x0, &(0x7f0000000200)="a4", &(0x7f00000001c0)=0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) 0s ago: executing program 4 (id=3327): r0 = socket(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_emit_ethernet(0x1000e, &(0x7f0000000340)=ANY=[]) (async, rerun: 64) r1 = socket$inet(0x2, 0x5, 0xf9) write(r1, &(0x7f0000000000)="844dcfb2b3cbd08f479b662d929b858b9bfc80635417899137d259522678478be87eeacf85840bbdbfa7e5f738a09d14a4ae689b6b54076425743c0fb6ea121cbb513ab4789f83d72144204abcaf232a6e52390cbca238e52cbd64069a85b3ce9d1280c02cfe090519b490b580d6c3ad305c3ed1c36cf6c4aeb6c3229852b6af79a6d7bf08bae75293a86fda801ef1cb7badfc43de89bdd314e87a04bec245245e03ed483fd678f84ab6906b31180f10b113ada6e024a801ae10af7b01393129c5e688b9e0c5e2929763e58ffcb938041daa8ba62f3fbab3d087", 0xda) mprotect(&(0x7f00000bb000/0xe000)=nil, 0xe000, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 64) setsockopt(r0, 0x1000000000029, 0xa, 0x0, 0x0) (rerun: 64) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts. uvn_flush: obj=0xfffffd806bd1ad30, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 uvn_flush: obj=0xfffffd806bd1a1f0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error load: 3.54 not a controlling terminal pckbd_enable: command error vm_create: uvm_map failed: 12 pckbd_enable: command error         pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error ¹j¼õ¬|ÿ ž¨E1\…:Á­¶4JH*Í/ ½ßù7·Äªù¥È%ò¤‰f#”¼ïë”ͦ,| Ù¡ú¬á TL&ôŒG6ˆ> OÕÇ8…ûNZüÝ3ü9ñ|ŒÐhƒ3Ó=½Kª\íC‹ü HôÁÚÍÛþÏðM9véeí;@SÚ¦rÚ·ƒ&•exK|p«TWARNING: thread `nfsio' (472352) exits with status -1 WARNING: thread `nfsio' (507927) exits with status -1 WARNING: thread `nfsio' (202820) exits with status -1 WARNING: thread `nfsio' (387144) exits with status -1 WARNING: thread `nfsio' (339974) exits with status -1 WARNING: thread `nfsio' (100682) exits with status -1 WARNING: thread `nfsio' (205809) exits with status -1 WARNING: thread `nfsio' (105245) exits with status -1 WARNING: thread `nfsio' (217880) exits with status -1 WARNING: thread `nfsio' (485187) exits with status -1 WARNING: thread `nfsio' (397144) exits with status -1 WARNING: thread `nfsio' (193906) exits with status -1 WARNING: thread `nfsio' (119311) exits with status -1 WARNING: thread `nfsio' (222554) exits with status -1 WARNING: thread `nfsio' (191171) exits with status -1 WARNING: thread `nfsio' (156831) exits with status -1 WARNING: thread `nfsio' (341315) exits with status -1 WARNING: thread `nfsio' (349047) exits with status -1 WARNING: thread `nfsio' (463928) exits with status -1 WARNING: thread `nfsio' (31612) exits with status -1 pckbd_enable: command error lo0: can't handle af0 pckbd_enable: command error pckbd_enable: command error vm_resetcpu: failed 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2                      OpenBSD/amd64 (ci-openbsd-multicore-0.us-central1-b.c.syzkaller.internal) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error WARNING: thread `nfsio' (456868) exits with status -1 WARNING: thread `nfsio' (221700) exits with status -1 WARNING: thread `nfsio' (123814) exits with status -1 WARNING: thread `nfsio' (292064) exits with status -1 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error uvn_flush: obj=0xfffffd806cac7dd8, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! vm_create: uvm_map failed: 12 OpenBSD/amd64 (Œ<ï=¢U˜†3$ÔdÒø>ßo‘") (tty00) login: vm_create: uvm_map failed: 12 pckbd_enable: command error malloc(): allocation too large, type = 6, size = 206903377920 pckbd_enable: command error uvn_flush: obj=0xfffffd80637f6bb0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error witness: lock order reversal: 1st 0xffff8000299dee30 &cq->cq_mtx (&cq->cq_mtx) 2nd 0xffffffff838bbb28 &sched_lock (&sched_lock) lock order [1] &cq->cq_mtx (&cq->cq_mtx) -> [2] &sched_lock (&sched_lock) #0 mtx_enter+0x95 #1 sleep_setup+0xed #2 msleep_nsec+0x10b #3 dt_ioctl_record_stop+0xbc #4 dtclose+0x109 #5 spec_close+0x466 #6 VOP_CLOSE+0x132 #7 vn_closefile+0x12b #8 fdrop+0x121 #9 closef+0x192 #10 fdfree+0x116 #11 exit1+0x576 #12 sys_exit+0x1a #13 syscall+0xb17 #14 Xsyscall+0x128 lock order [2] &sched_lock (&sched_lock) -> [1] &cq->cq_mtx (&cq->cq_mtx) #0 mtx_enter+0x95 #1 clockintr_cancel+0x2f #2 mi_switch+0x187 #3 sleep_finish+0x2d8 #4 sys_futex+0xb90 #5 syscall+0xbd4 #6 Xsyscall+0x128 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic the kernel did not panic ddb{0}> trace db_enter() at db_enter+0x25 witness_checkorder(ffffffff838bbb28,9,0) at witness_checkorder+0x10d1 mtx_enter(ffffffff838bbb18) at mtx_enter+0x95 sleep_setup(ffff8000299dee80,220,ffffffff834390ae) at sleep_setup+0xed msleep_nsec(ffff8000299dee80,ffff8000299dee20,220,ffffffff834390ae,ffffffffffffffff) at msleep_nsec+0x10b dt_ioctl_record_stop(ffff800000b58000) at dt_ioctl_record_stop+0xbc dtclose(11e5f,81,2000,ffff8000fffefca0) at dtclose+0x109 spec_close(ffff80002ebc4c70) at spec_close+0x466 VOP_CLOSE(fffffd805b5c8bf8,81,fffffd80097fd3a8,ffff8000fffefca0) at VOP_CLOSE+0x132 vn_closefile(fffffd806c914b80,ffff8000fffefca0) at vn_closefile+0x12b fdrop(fffffd806c914b80,ffff8000fffefca0) at fdrop+0x121 closef(fffffd806c914b80,ffff8000fffefca0) at closef+0x192 fdfree(ffff8000fffefca0) at fdfree+0x116 exit1(ffff8000fffefca0,0,0,1) at exit1+0x576 sys_exit(ffff8000fffefca0,ffff80002ebc4fe0,ffff80002ebc4f30) at sys_exit+0x1a syscall(ffff80002ebc4fe0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x71ddae16c980, count: -17 ddb{0}> show registers rdi 0 rsi 0 rbp 0xffff80002ebc4940 rbx 0 rdx 0 rcx 0xffff8000fffefca0 rax 0xffffffff8384dff0 cpu_info_full_primary+0x1ff0 r8 0xffff80002ebc4820 r9 0x8080808080808080 r10 0xf4bbd1e0851f31f1 r11 0xef37489157faaafe r12 0xfffffd8003f52e40 r13 0xfffffd80046fd330 r14 0x3 r15 0xffffffff8341efc7 substchar+0x45f9 rip 0xffffffff82b7b5b5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002ebc4930 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=155058 pid=92572 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff8000fffefca0 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff8000fffefa08,0xffff8000fffef250 process=0xffff80002a3bd358 user=0xffff80002ebc0000, vmspace=0xfffffd800efd5020 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 74438 327971 22708 0 2 0 syz-executor 74438 474146 22708 0 3 0x4000080 fsleep syz-executor 74438 514642 22708 0 3 0x4000080 fsleep syz-executor 90905 399437 49107 0 2 0x10 syz-executor 90905 123149 49107 0 3 0x4000090 fsleep syz-executor 90905 368523 49107 0 3 0x4000090 fsleep syz-executor 90905 355836 49107 0 3 0x4000090 fsleep syz-executor 61945 481210 97040 0 3 0x80 nanoslp syz-executor 61945 232297 97040 0 3 0x4000080 kqsel syz-executor 61945 234628 97040 0 3 0x4000080 fsleep syz-executor 68284 309730 63040 0 2 0 syz-executor 68284 275251 63040 0 3 0x4000080 fifor syz-executor 68284 488391 63040 0 3 0x4000080 fifor syz-executor 68284 195478 63040 0 2 0x4000000 syz-executor 52379 391079 22240 0 2 0x4000000 syz-executor 52379 347884 22240 0 2 0x4000000 syz-executor 52379 511914 22240 0 3 0x4000080 fsleep syz-executor 52379 181399 22240 0 3 0x4000080 fsleep syz-executor 22240 59789 24832 0 3 0x82 nanoslp syz-executor 521 385742 0 0 3 0x14200 acct acct 15806 400034 1 0 3 0x100083 ttyin getty 81700 46601 24832 0 3 0x82 wait syz-executor 97040 386988 24832 0 3 0x82 nanoslp syz-executor 49107 30232 24832 0 3 0x82 nanoslp syz-executor 63040 142043 24832 0 3 0x82 nanoslp syz-executor 22708 95473 24832 0 3 0x82 nanoslp syz-executor 73784 315461 24832 0 3 0x82 nanoslp syz-executor 79328 145255 24832 0 2 0x2 syz-executor 24832 489300 50110 0 3 0x82 kqread syz-executor 50110 262566 82833 0 3 0x10008a sigsusp ksh 82833 115714 43157 0 3 0x98 kqread sshd-session 43157 273366 47398 0 3 0x92 kqread sshd-session 47398 157960 1 0 3 0x88 kqread sshd 95272 162949 26196 74 3 0x1100092 bpf pflogd 26196 194463 1 0 3 0x80 sbwait pflogd 3253 357893 53494 73 3 0x1100090 kqread syslogd 53494 417401 1 0 3 0x100082 sbwait syslogd 39293 459374 1 0 3 0x100080 kqread resolvd 51237 232544 43526 77 3 0x100092 kqread dhcpleased 47820 401501 43526 77 3 0x100092 kqread dhcpleased 43526 500802 1 0 3 0x80 kqread dhcpleased 79671 89039 0 0 3 0x14200 bored smr 55888 141275 0 0 2 0x14200 zerothread 21106 509214 0 0 3 0x14200 aiodoned aiodoned 8371 424429 0 0 3 0x14200 syncer update 47024 130438 0 0 3 0x14200 cleaner cleaner 13588 420824 0 0 2 0x14200 reaper 21698 113308 0 0 3 0x14200 pgdaemon pagedaemon 88039 37672 0 0 3 0x14200 bored viomb 19103 305871 0 0 3 0x40014200 acpi0 acpi0 73077 58676 0 0 7 0x40014200 idle1 33277 357916 0 0 3 0x14200 bored softnet1 79955 258997 0 0 3 0x14200 bored softnet0 46945 413347 0 0 3 0x14200 bored systqmp 60384 518813 0 0 3 0x14200 bored systq 91725 48684 0 0 3 0x14200 tmoslp softclockmp 19986 261150 0 0 3 0x40014200 tmoslp softclock 59281 324095 0 0 3 0x40014200 idle0 1 49549 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex &cq->cq_mtx r = 0 (0xffff8000299dee30) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 clockintr_unbind+0x56 #3 dt_ioctl_record_stop+0xbc #4 dtclose+0x109 #5 spec_close+0x466 #6 VOP_CLOSE+0x132 #7 vn_closefile+0x12b #8 fdrop+0x121 #9 closef+0x192 #10 fdfree+0x116 #11 exit1+0x576 #12 sys_exit+0x1a #13 syscall+0xb17 #14 Xsyscall+0x128 Process 79328 (syz-executor) thread 0xffff8000ffffca68 (145255) exclusive rwlock vmmaplk r = 0 (0xfffffd8062fc4318) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 uvmspace_fork+0x12b #4 process_new+0x577 #5 fork1+0x3f6 #6 syscall+0xb17 #7 Xsyscall+0x128 exclusive rwlock vmmaplk r = 0 (0xfffffd806ec324e0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 uvmspace_fork+0x44 #4 process_new+0x577 #5 fork1+0x3f6 #6 syscall+0xb17 #7 Xsyscall+0x128 Process 13588 (reaper) thread 0xffff8000ffffdc90 (420824) exclusive rwlock kmmaplk r = 0 (0xffffffff83a10988) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 uvm_unmap+0x7d #4 km_free+0x87 #5 uvm_uarea_free+0x4f #6 reaper+0x1ca #7 proc_trampoline+0x10 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10244 11140K 11749K 166960K 17640 0 pcb 19 18K 22K 166960K 1159 0 rtable 234 13K 13K 166960K 1136 0 pf 43 19K 83K 166960K 519 0 ifaddr 36 7K 9K 166960K 240 0 ifgroup 55 2K 3K 166960K 453 0 sysctl 4 1K 9K 166960K 33 0 counters 70 37K 38K 166960K 442 0 ioctlops 0 0K 16K 166960K 2486 0 iov 0 0K 28K 166960K 413 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1622 102K 102K 166960K 6043 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 2K 10K 166960K 61 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 157 0 dirhash 81 14K 15K 166960K 2250 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 240K 166960K 3696 0 sigio 0 0K 0K 166960K 141 0 proc 78 131K 164K 166960K 1208 0 subproc 72 4K 4K 166960K 172 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 468 0 in_multi 65 5K 7K 166960K 321 0 ether_multi 1 0K 0K 166960K 30 0 mrt 2 0K 0K 166960K 32 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 235 1049K 1049K 166960K 235 0 exec 0 0K 1K 166960K 1117 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 7 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 267 165K 191K 166960K 36040 0 UVM aobj 65 28K 30K 166960K 77 0 pinsyscall 43 86K 100K 166960K 5148 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 380 0 NDP 12 0K 1K 166960K 184 0 temp 80 8676K 8788K 166960K 216962 0 kqueue 15 24K 30K 166960K 737 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 420 0 417 5 4 1 3 0 8 0 rtentry 176 316 0 229 6 0 6 6 0 8 0 unpcb 144 2733 0 2710 20 19 1 6 0 8 0 syncache 336 20 0 20 9 9 0 1 0 8 0 tcpqe 32 15 0 15 9 9 0 1 0 8 0 tcpcb 736 1275 0 1269 32 30 2 7 0 8 1 arp 136 54 0 36 1 0 1 1 0 8 0 ipq 40 2 0 2 2 2 0 1 0 8 0 ipqe 40 6 0 6 2 2 0 1 0 8 0 inpcb 328 4764 0 4752 64 62 2 18 0 8 0 ip6q 72 1 0 1 1 1 0 1 0 8 0 ip6af 40 2 0 2 1 1 0 1 0 8 0 nd6 152 70 0 50 2 0 2 2 0 8 0 pkpcb 40 58 0 58 10 10 0 1 0 8 0 kcovpl 48 19 0 11 1 0 1 1 0 8 0 mppekey 1024 5 0 5 5 5 0 1 0 8 0 ppxss 1192 135 0 135 6 5 1 1 0 8 1 pppxif 1504 16 0 16 9 9 0 1 0 8 0 pfstscr 40 11 0 11 6 6 0 1 0 8 0 pffrag 232 26 0 20 1 0 1 1 0 482 0 pffrnode 88 22 0 16 1 0 1 1 0 8 0 pffrent 40 61 0 55 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 50 0 50 4 4 0 1 0 8 0 pfanchor 1288 17 0 14 3 2 1 1 0 8 0 pftag 88 3 0 0 1 0 1 1 0 8 0 pfstitem 24 212 0 155 1 0 1 1 0 8 0 pfstkey 128 230 0 175 3 0 3 3 0 8 0 pfstate 448 219 0 165 10 4 6 9 0 8 0 pfrule 1344 56 0 50 2 1 1 2 0 8 0 rttmr 136 7 0 7 3 3 0 1 0 8 0 art_heap8 4096 4 0 0 4 0 4 4 0 8 0 art_heap4 256 1327 0 986 34 9 25 29 0 8 0 art_table 40 1331 0 986 6 1 5 5 0 8 0 art_node 32 315 0 239 1 0 1 1 0 8 0 sysvmsgpl 40 18 0 9 1 0 1 1 0 8 0 semupl 112 2 0 2 2 2 0 1 0 8 0 semapl 112 146 0 136 1 0 1 1 0 8 0 shmpl 112 58 0 7 2 0 2 2 0 8 0 dirhash 1024 777 0 737 6 0 6 6 0 8 0 dino2pl 256 8532 0 7002 96 0 96 96 0 8 0 ffsino 296 8532 0 7002 119 0 119 119 0 8 0 nchpl 144 13591 0 12951 65 41 24 65 0 8 0 rtmask 32 21 0 21 8 7 1 1 0 8 1 vnodes 216 11562 0 0 643 0 643 643 0 8 0 namei 1024 52559 0 52559 5 4 1 3 0 8 1 percpumem 16 236 0 186 1 0 1 1 0 8 0 vcpupl 3968 13 0 2 2 0 2 2 0 8 0 vmpool 840 16 0 5 2 0 2 2 0 8 0 pfiaddrpl 120 12 0 12 2 2 0 1 0 8 0 kstatmem 264 292 0 264 6 3 3 3 0 8 0 acpiwqpl 32 2 0 2 1 0 1 1 1 8 1 scsiplug 72 9 0 9 8 8 0 1 0 8 0 scxspl 216 79244 0 79244 20 19 1 8 1 8 1 plimitpl 152 1067 0 1049 1 0 1 1 0 8 0 sigapl 424 3977 0 3928 8 2 6 8 0 8 0 knotepl 120 688 0 0 18 0 18 18 0 8 0 kqueuepl 224 1531 0 1485 16 13 3 5 0 8 0 pipepl 344 539 0 512 4 1 3 4 0 8 0 fdescpl 528 3929 0 3897 3 0 3 3 0 8 0 filepl 160 30497 0 30237 59 45 14 30 0 8 0 lockfpl 104 2147 0 2144 7 6 1 2 0 8 0 lockfspl 48 878 0 875 1 0 1 1 0 8 0 sessionpl 144 48 0 39 1 0 1 1 0 8 0 pgrppl 48 98 0 81 1 0 1 1 0 8 0 ucredpl 104 5443 0 5429 1 0 1 1 0 8 0 zombiepl 144 5509 0 5507 2 1 1 1 0 8 0 processpl 1232 3977 0 3928 6 1 5 6 0 8 0 procpl 664 9958 0 9895 9 2 7 8 0 8 0 sosppl 176 28 0 28 7 7 0 1 0 8 0 sockpl 752 8111 0 8072 106 101 5 37 0 8 1 mcl64k 65536 6 0 0 1 0 1 1 0 8 0 mcl16k 16384 5 0 0 1 0 1 1 0 8 0 mcl12k 12288 3 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 122 0 0 16 1 15 16 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 49 0 0 5 0 5 5 0 8 0 mtagpl 96 124 0 0 3 0 3 3 0 8 0 mbufpl 256 1176 0 0 74 0 74 74 0 8 0 bufpl 280 30221 0 24085 439 0 439 439 0 8 0 anonpl 32 20632 0 0 167 0 167 167 0 246 0 amapchunkpl 152 124580 0 123960 82 53 29 38 0 158 1 amappl16 200 13631 0 13365 66 29 37 48 0 8 0 amappl15 192 9 0 9 3 3 0 1 0 8 0 amappl14 184 74 0 74 1 1 0 1 0 8 0 amappl13 176 568 0 566 1 0 1 1 0 8 0 amappl12 168 4403 0 4361 3 0 3 3 0 8 0 amappl11 160 7 0 7 2 2 0 1 0 8 0 amappl10 152 47 0 33 1 0 1 1 0 8 0 amappl9 144 258 0 257 1 0 1 1 0 8 0 amappl8 136 53 0 50 1 0 1 1 0 8 0 amappl7 128 127 0 126 1 0 1 1 0 8 0 amappl6 120 441 0 427 1 0 1 1 0 8 0 amappl5 112 97 0 85 1 0 1 1 0 8 0 amappl4 104 568 0 537 1 0 1 1 0 8 0 amappl3 96 25407 0 25289 5 1 4 4 0 8 0 amappl2 88 763 0 701 2 0 2 2 0 8 0 amappl1 80 27982 0 27393 14 0 14 14 0 8 0 amappl 88 34447 0 34259 5 0 5 5 0 92 0 uvmvnodes 80 215 0 0 5 0 5 5 0 8 0 dma65536 65536 2 0 2 2 2 0 1 0 8 0 dma32768 32768 2 0 2 2 2 0 1 0 8 0 dma4096 4096 4 0 4 3 3 0 1 0 8 0 dma2048 2048 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 2 0 1 0 8 0 dma64 64 7 0 7 2 2 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 76 0 12 2 0 2 2 0 8 0 uaddrrnd 24 3929 0 3897 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 3929 0 3897 1 0 1 1 0 8 0 vmmpekpl 168 32254 0 32203 3 0 3 3 0 8 0 vmmpepl 168 258392 0 256188 160 49 111 125 0 357 2 vmsppl 488 3928 0 3897 7 2 5 5 0 8 0 rwobjpl 80 68031 0 66558 46 7 39 40 0 8 0 pdppl 4096 7898 0 7815 141 56 85 85 0 8 2 pvpl 32 29248 0 0 237 1 236 236 0 265 0 pmappl 256 3944 0 3902 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 454 0 128 10 0 10 10 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 witness_checkorder(ffffffff838bbb28,9,0) at witness_checkorder+0x10d1 mtx_enter(ffffffff838bbb18) at mtx_enter+0x95 sleep_setup(ffff8000299dee80,220,ffffffff834390ae) at sleep_setup+0xed msleep_nsec(ffff8000299dee80,ffff8000299dee20,220,ffffffff834390ae,ffffffffffffffff) at msleep_nsec+0x10b dt_ioctl_record_stop(ffff800000b58000) at dt_ioctl_record_stop+0xbc dtclose(11e5f,81,2000,ffff8000fffefca0) at dtclose+0x109 spec_close(ffff80002ebc4c70) at spec_close+0x466 VOP_CLOSE(fffffd805b5c8bf8,81,fffffd80097fd3a8,ffff8000fffefca0) at VOP_CLOSE+0x132 vn_closefile(fffffd806c914b80,ffff8000fffefca0) at vn_closefile+0x12b fdrop(fffffd806c914b80,ffff8000fffefca0) at fdrop+0x121 closef(fffffd806c914b80,ffff8000fffefca0) at closef+0x192 fdfree(ffff8000fffefca0) at fdfree+0x116 exit1(ffff8000fffefca0,0,0,1) at exit1+0x576 sys_exit(ffff8000fffefca0,ffff80002ebc4fe0,ffff80002ebc4f30) at sys_exit+0x1a syscall(ffff80002ebc4fe0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x71ddae16c980, count: -17 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{1}> trace x86_ipi_db(ffff8000299ddff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x25 mtx_enter(ffff8000299dee20) at mtx_enter+0x375 clockintr_dispatch(ffff80002a21c340) at clockintr_dispatch+0x401 lapic_clockintr(0,0) at lapic_clockintr+0x51 Xresume_lapic_ltimer() at Xresume_lapic_ltimer+0x2a acpicpu_idle() at acpicpu_idle+0x457 sched_idle(ffff8000299ddff0) at sched_idle+0x391 end trace frame: 0x0, count: -10