last executing test programs: 3.676860234s ago: executing program 2 (id=214): setitimer(0x0, &(0x7f0000000280)={{0xffffffff}, {0xffffffff}}, 0x0) getitimer(0x0, &(0x7f00000000c0)) r0 = socket(0x11, 0x3, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) socket(0x2, 0x2, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0xff5c, 0x5, 0x35, 0xffffe9fe}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$hw(&(0x7f0000000000)={0x6, 0x1c}, 0x2, &(0x7f0000000040), &(0x7f0000000140), 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000180)={0x4, 0x2, 0x6, 0x14}, 0x4, 0x0, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_inet_tcp(&(0x7f0000000180)={0x4, 0x2, 0x6, 0x14}, 0x4, &(0x7f00000001c0), &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) ioctl$VNDIOCSET(r1, 0xc0387200, &(0x7f0000000440)={0x0, 0x6, 0x0}) 3.611709709s ago: executing program 2 (id=224): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x2c, 0xfa, 0x7}, {0x73d, 0x0, 0x6, 0x1}]}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) r1 = syz_open_pts() close(r1) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x2, 0x8, 0xd5, "00000000000000000000001500", 0x3, 0xff}) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_INTR(r2, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x2005}) syz_open_pts() ioctl$FIOASYNC(r1, 0x80047469, &(0x7f00000000c0)=0x5) writev(r1, &(0x7f0000001640)=[{&(0x7f00000001c0)="b5046c80a39a8b452fe998a20c699eeca8075fe72e1c7c3b50e18f918780abb540b00fd90ae47400f6360602c5a967f2a84afa825f229ccee0b02af6192d2383e0ff3f9c1bba42feada0d712b5a5031fe936a15f67d43647bb6494efc4248ee4507088da767304795028db9c56017c8c32e05ddef5", 0x75}, {&(0x7f0000001240)="34e9925fbf8f1e78accdde3708e38b35df5d554a9a8809410ac9c5ab946a8543adbf9cc20f30628e07c090ea158e78461dd96eee80dca8ac8435493871ea6d00e99e0a1b29e333898bb91371cc95303cbdbf73668e7f713f4dbfd367814ae38fe819ead45797f19f6ad5817959dcce16bd4999ab258add59c8c9ce093a3e0ab8bc", 0x81}, {&(0x7f0000001400)="f599e68556d0f8c543b7bffd652b5f8a31f63e700b5465cd7417f02e42519daefc4a775f10eee5fff7ad60275a99f9c66ff63c5a415f4139da6a8bd9e931c1cd1a9318362931207d4e3da87b1025d806805e8b45", 0x54}, {&(0x7f00000014c0)="d1668bafd6174791f44e24dd49b28b18c770f2214daf1901eef49bdd2d39ae87008ee12c4c199909788e45e9ca754b6cd97585f0224f9e75f9ad791d3c6cac2167d95f90378d9f0ec6106692be60cf4ea2436bc44651ff18fcf2c11c578ea69ccd37cc13e3d2d105389da8fc58d675a1db4aee5e9541356ddc90a38be1f0e6cccff3695ee0becf74b9d0c47150a56d4f6f0a5884cd0975a8cf8f7983851db307b391e95721102b95a3a023517098e82f768cddab544559a5de1dcb7717e3c4c571ab6031185da7523670e199a15dcba341cca8e975316c0945ba4f7e8b5853a5371ba38afdb690412f7c0d3553ae", 0xee}, {&(0x7f0000001740)="b0b9c9e08471e13084eb9c36a53f30192cb48ae3f9e7e327de7dd3404a891c916bf1d1dec0b0e99e5eec118651117346e3ec2e722e3eab896f9f511ede488792e502e237831f9cce22f637921570cdcbfc1253d1d279948e27d0fdfd3cab493c221b5e3dd865b1c36b13867cf4012fb5777ad1f6369206b27fabe5eedd2080a56cc8178012413b45630bae6d5a391a352e39345497c27b70927fd4942d6caf1b38aece1dd4b37e9f3e3e14190e41d9067c1a6b18e4d98f9b318da538b8fff1078a45ad9e1d421d3075fa7e19158049d0d6a6e120a0", 0xd5}, {&(0x7f00000015c0)="2013305e5fe6e9d54c217536116af34413880b28051a7fabf9927e1f8161fc70dccb5444ecb6623a2c60c335ed1c08a58d64f7ab7f15ecb2161b992a7db0c8d1f276856a59ffe8495d38080dc99fa898c86199acd3e279feaedf1a", 0x5b}], 0x6) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$BIOCSDIRFILT(r3, 0x8004427d, &(0x7f0000000080)=0x6) 3.525183954s ago: executing program 2 (id=228): nanosleep(&(0x7f00000002c0)={0x2, 0xfa}, &(0x7f0000000300)) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) (async) r0 = kqueue() (async) r1 = syz_open_pts() kevent(r0, &(0x7f0000000640)=[{{r1}, 0xffffffffffffffff, 0x3f, 0x40, 0x0, 0x2000000}], 0x6, 0x0, 0xf0, 0x0) syz_open_pts() (async) syz_open_pts() (async) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) (async) close(r2) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) (async, rerun: 32) r3 = socket(0x11, 0x3, 0x0) (rerun: 32) shutdown(r3, 0x2) (async) unveil(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000ac0)='x\x00') 3.471966093s ago: executing program 2 (id=231): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) r0 = socket(0x18, 0x3, 0x0) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) sysctl$net_inet_ip(&(0x7f0000002500)={0x4, 0x2, 0x0, 0x26}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_open_pts() close(r1) (async) r2 = syz_open_pts() ioctl$FIOASYNC(r1, 0x80047469, &(0x7f0000000040)=0xfffffffc) (async) readv(r2, &(0x7f0000000680)=[{&(0x7f0000000380)=""/227, 0xe3}], 0x28d) (async) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)="b962121c72323a1ad3cd405789dce8b0ab0b9ca6393ab0d99ec8", 0x1a}, {&(0x7f0000000100)="e05f5c584860b8df53096f0d9bc0f0f2a9140dd203de6de567a4d29ba3f9463f14e5e8bdded4b78901b53bc0c14b2fa666d8ede1d898aa8539ae3221783ae7960697738e188f93d7f080045b1dc217c0943d1db416b182776c60730f88a76d29825f192176ab516d4a21b8724df4e14f6b4774045113ac91d8", 0x79}, {&(0x7f0000000180)="4c103bce35d630237268da744ec15de26508caccbf37ae7b8e5c2fd04dc11d8f0d53493c75b9f4264c78d61cd5278a0719a493b154f8719f61d7e9b6d827bbc47e4e3b89ff43eae1a3a224fd917f046a700d", 0x52}, {0x0}], 0x4) ioctl$FIONREAD(r0, 0xc0406938, &(0x7f0000000100)) (async) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000440)="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", 0x34e}], 0x1) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = socket(0x2, 0x3, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) setsockopt(r4, 0x0, 0x2, &(0x7f00000000c0)="63e1303d", 0x4) (async) write(r4, &(0x7f0000000100)="f92a9bd300000000000027a03440ee884d9e7a3e", 0x14) ioctl$TIOCSETA(r3, 0xc0504417, &(0x7f0000000740)={0x0, 0x6, 0xfffffffe, 0x2, "0000000000000a0000ff00", 0x2}) (async) setuid(0xee01) (async) faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2, 0x0) 3.391010713s ago: executing program 2 (id=233): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000080)={0x7, 0x3b6e0000, 0xffffffff, 0x7, "0f6b3a747332e64674b02cf8d57e92617f75a3d6", 0x7, 0x4}) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000080)={0x7, 0x3b6e0000, 0xffffffff, 0x7, "0f6b3a747332e64674b02cf8d57e92617f75a3d6", 0x7, 0x4}) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1000501600000040000000007", 0xd, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x0) (async) r0 = socket(0x11, 0x3, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000880)={&(0x7f0000000580)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000005c0)=""/196, 0xc4}], 0x1, 0x0}, 0xfffffffa}, 0x10, 0x40, 0x0) getpeername(r2, &(0x7f0000000080)=@in, &(0x7f00000000c0)=0xc) setsockopt(r0, 0x11, 0x80000000, 0x0, 0x0) (async) setsockopt(r0, 0x11, 0x80000000, 0x0, 0x0) r3 = socket(0x18, 0x2, 0x0) close(r3) (async) close(r3) r4 = socket(0x800000018, 0x1, 0x0) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x7, 0x2, 0xff, 0x802}, {0x40, 0x3, 0x7}, {0x96, 0xf0, 0x80}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000000)={0x0, 0x0}) write(r5, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) pipe(&(0x7f0000000000)={0xffffffffffffffff}) accept(r6, 0x0, 0x0) (async) accept(r6, 0x0, 0x0) ioctl$WSMOUSEIO_SRES(r6, 0x80045721, &(0x7f0000000000)=0xb) (async) ioctl$WSMOUSEIO_SRES(r6, 0x80045721, &(0x7f0000000000)=0xb) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x2, 0xfffffffc}, {0x6, 0x0, 0x0, 0x402}]}) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) (async) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r7, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x5, 0x26, 0x1, 0x8}, {0x2, 0x2, 0x7, 0x5}]}) (async) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x5, 0x26, 0x1, 0x8}, {0x2, 0x2, 0x7, 0x5}]}) 2.736911085s ago: executing program 6 (id=281): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x2, 0x1, 0x0, 0x100000000000000, 0xffffffffffffffff}) open$dir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20200, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) socket$inet(0x18, 0x3, 0x102) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 2.654698724s ago: executing program 6 (id=282): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETA(r0, 0xcd504407, &(0x7f0000000740)={0x5, 0x3, 0x0, 0x0, "ac03000000c14649ebb178926cc9795a6b4700d1", 0x4, 0xfffff7ff}) 2.653128864s ago: executing program 6 (id=284): r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async, rerun: 32) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3}, {}, {}, {}, {}, {0x0, 0x8}, {0x0, 0xaa59}, {}, {0x1, 0xffffffff}, {}, {0x2, 0x4}, {}, {}, {0x0, 0x100}, {0x0, 0x80000001}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x3, 0x20000}, {0x0, 0x2}, {0x0, 0x5}, {0x2, 0x1000}, {0x0, 0x4}, {0x3}, {}, {}, {0x1, 0x1}, {}, {0x0, 0x200}, {0x2}, {0x0, 0xfffffffd}, {0x2, 0xa}, {0x2}]}) (rerun: 32) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x2010, r1, 0x0) (async, rerun: 32) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) (rerun: 32) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2d176f4b8f82c1d09936270286ea75b958983a9f15438392f4d2feb0900000000000ef962", 0xa8269}], 0x1, 0x0) semop(0x0, &(0x7f00000001c0)=[{0x2, 0x9, 0x800}, {0x2, 0x2ff, 0x800}, {0x2, 0x7, 0x800}], 0x1e) (async) write(0xffffffffffffffff, &(0x7f0000000180)="742bda523993d84bd9691018ec1e694c45bcafc0366f094e05f22224cd7dc8bb9016b523e0c3b4d0691a099ae4efb67de846da918bce6b89b0eb63a90708acfb", 0x40) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f00000000c0)={0x23, &(0x7f0000000080)}) chdir(0x0) (async) r4 = socket(0x18, 0x3, 0xfe) (async, rerun: 64) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x8000000000000004, 0x0, 0x40, 0x80000000000000}) (rerun: 64) sysctl$kern(&(0x7f0000000080)={0x1, 0x27}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000300)="f3b5440c2c9b7d01c7fee476de41372ea1", 0x11}], 0x1) (async, rerun: 64) unveil(0x0, &(0x7f0000000180)='r\x00') (rerun: 64) socket(0x18, 0x3, 0x0) (async) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) sendto$inet(r0, 0x0, 0x0, 0x2, &(0x7f0000000040)={0x2, 0x2}, 0xc) 2.609228132s ago: executing program 2 (id=289): r0 = syz_open_pts() mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x40, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xff, 0xfffffffe, 0xfff6, 0x0, 0x5ff, 0xffffffff, 0xfffffffe, 0x1, 0x2, 0x80000, 0xf1a}) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x248f, 0xfffffde2, 0xffff, 0x1, 0x24, 0x6, 0x1, 0x0, 0x0, 0x1, 0x9}) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)="c9", 0x1}], 0x1) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000002c0)=0x8) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x1, 0xa, 0x8001, 0xfff, "b7d5dc8cca60d7f39a0304ee439dd739b984501b", 0x80, 0x200001}) unveil(0x0, &(0x7f0000000080)='W\x00') shutdown(r2, 0x2) 2.3307271s ago: executing program 1 (id=299): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) sysctl$kern(&(0x7f0000000000)={0xa, 0x4}, 0x7, &(0x7f0000000040)="fe747e421f032be37006e10e39246c2df91905f823d85bb54ae3d4a91f541c46502e59a8d054fe7d6a93c0bfec6382b43ee9d7b9df2f9943fc2c25b6bbd6358b2fd20a7cbc9a40301525e116", 0x0, 0x0, 0xfffffffffffffff4) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000380)=[{0x2c, 0x10, 0x2, 0x1}, {0xb1, 0x10, 0x2}, {0x16, 0x7, 0x7f, 0x10400f}]}) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@random="69e1629b6174", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "6b9efb", 0x14, 0x50, 0x0, @rand_addr="cb697a653e2c6f0000005000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x1, 0x2, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x1ff, 0x0, 0x6000}}}}}}}) 2.330495351s ago: executing program 1 (id=300): open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000)) r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x1, 0x0) ftruncate(r1, 0x80002) r2 = open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x8, 0x0) preadv(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x1, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000)) (async) open$dir(&(0x7f00000002c0)='./file0\x00', 0x1, 0x0) (async) ftruncate(r1, 0x80002) (async) open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x8, 0x0) (async) preadv(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x1, 0x0) (async) 2.175600668s ago: executing program 1 (id=302): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xc0284459, &(0x7f0000000400)={0x1755, 0x300000, 0x2000000, 0xfffffd7a, "0800ff0f00000000000000f400", 0x8, 0xfffffffb}) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x4) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000440)={0x0, 0x7, 0x9, {[0x20000008001, 0x0, 0xc759, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x7b, 0x0, 0x8000000000002, 0x0, 0x400, 0xd], [0x6, 0x5, 0x0, 0x0, 0x5, 0x1000, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x2, 0x2], [0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3fffc00000], [0xffffffff, 0x0, 0x0, 0x3, 0x5, 0x2], [{0x2000, 0x0, 0x4}, {0x0, 0xfffffffc, 0x2, 0x1}, {0x7fd, 0xfffffffe, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0xfffffffe, 0x975}, {0x0, 0xa760, 0xc8, 0xffffffffffffffff}, {0x7, 0x5, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x3}, {0x0, 0xfffffffd}], {0x0, 0x0, 0x8}}}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x1000, 0x20000008, {0x0, 0x10000000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_pts() openat$pf(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_emit_ethernet(0x1ee, &(0x7f0000000b80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd606d9efb01b8670000000000010000000000000afffffffefe8000000000000000000000000000aa880c000000000000fe8000000000000000000000000000aafe8000000000bb00000000000000000000ffffac1400aa95a8e3f69261b11bfb779408877c5d94ff0100000000000000000000000000010000000000000000000000000000000104000000000000000c02000900000000ff020000000000000000000000000001ff0009386700000002000005000000003b02000300000000fe8000000000000000000000000000bb3b1b000000000000060004d4c434ce0964f6f448087dccd18f338ee73b9918980cfb6e10485a5374564a79e158b738cb44ef1f505e5fb1a0aa956d67c99527f7b6628136f30ad298f4e60d1133d0e4558287c61c9a8fe2befbc04a14228a66af4a4aeb6055850654dd8bf30a12e2c764e9ee173d0c80bf3db9e1944070c45810cff0101731dc8ba4def1139a8ee215"]) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xcd50441a, &(0x7f00000003c0)={0x2, 0x621, 0x2, 0x2000000, "3d80000006020000040080000000000000000040", 0x3, 0xff}) syz_open_pts() ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x40087468, &(0x7f00000000c0)) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) r4 = semget(0x2, 0x0, 0x8) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0xffffffffffffffff}, 0xe0ffffffffffffff, 0x1000000}) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r6 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r6, 0x8040691a, &(0x7f00000001c0)) 2.175331209s ago: executing program 1 (id=303): sysctl$vfs_ffs(&(0x7f0000000140), 0x3, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x8, 0x44) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x1000, 0x1) sysctl$vfs_ffs(&(0x7f0000000140), 0x3, 0x0, 0x0, 0x0, 0x0) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x8, 0x44) (async) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x1000, 0x1) (async) 2.174700517s ago: executing program 1 (id=304): syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[]) r0 = syz_open_pts() syz_emit_ethernet(0x13e, &(0x7f0000000200)=ANY=[@ANYBLOB="c5acf18735eaaaaaaaaaaabb86dd6000000001082c0000000000000000000000ffffac1400aafe"]) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000007c0)={0x3, 0x0, 0xffefbff6, 0x0, "0000ffffffffff9b752d0200", 0x8, 0x8}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="8269cd28367f22fc85ef3a6eb30547a68400fffb8db76e74c03d6cc2eea2782146294dcbb86fb2c2ccc1624d4a3e35d69a1c9c89b74aacaa51d8dd7c50553dc758a011c338e5fd66064d27e5fbee0a716f9f1dcbf02eaf668240b786e4dbbd5f2fd65b9098", 0x65}, {&(0x7f0000000140)="ddac166fbfdb5b0f08a380d96f87b1b713963996b237e192cd61abb348766933a13a488c7868c0af9cba4d5127bffd534f861e44520da77f6d443060a95e28f34eb5139bb934a5c7ce5fa47c8406066b531b30d0510a", 0x56}], 0x2) write(r0, &(0x7f00000001c0)="ad", 0x1) unveil(0x0, &(0x7f00000002c0)='r\x00') fcntl$getown(0xffffffffffffffff, 0x5) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x1f, 0x29, 0x35}, 0x4, 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) semget(0x1, 0x2, 0x548) 1.842912322s ago: executing program 6 (id=323): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x2, 0x1, 0x0, 0x100000000000000, 0xffffffffffffffff}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) mkdir(&(0x7f0000000100)='./file0\x00', 0xd8) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0xd8) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x8c79) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x157) openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6380) r1 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) select(0x40, &(0x7f00000004c0), &(0x7f0000000080)={0x1ff}, 0x0, 0x0) poll(&(0x7f0000000480)=[{r1, 0x4}], 0x1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0xa) (async) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0xa) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000180)={0x8, 0x1, 0x3, 0x2e3f, 0x8}, 0xc) (async) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000180)={0x8, 0x1, 0x3, 0x2e3f, 0x8}, 0xc) 1.607387466s ago: executing program 6 (id=326): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x6, 0x0, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = socket(0x18, 0x3, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_pts() r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) minherit(&(0x7f00001ce000/0x2000)=nil, 0x2000, 0x3) writev(0xffffffffffffffff, 0x0, 0x0) setuid(0xffffffffffffffff) ioctl$BIOCLOCK(r3, 0x20004276) ioctl$BIOCLOCK(r3, 0x40047477) ioctl$FIONREAD(r2, 0xc1206925, &(0x7f0000000100)) ioctl$TIOCSETA(r0, 0xc1584460, &(0x7f00000000c0)={0x7, 0xffff0691, 0x4, 0x0, "97a2e900", 0x7}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/83, 0x53}, {&(0x7f0000000080)=""/1, 0x1}, {&(0x7f00000000c0)=""/146, 0x92}, {&(0x7f0000000180)=""/43, 0x2b}], 0x4) 1.445364423s ago: executing program 5 (id=338): r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) setreuid(0x0, 0xee01) r1 = semget(0x0, 0x1, 0x281) semop(r1, &(0x7f00000000c0), 0x49) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setregid(0x0, r4) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) lchown(&(0x7f0000000100)='./file0/file0/..\x00', 0x0, r6) chmod(&(0x7f0000000280)='./file0\x00', 0x3a) setreuid(0x0, 0xee01) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') faccessat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x44, 0x1) r7 = geteuid() semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000080)={{0x80, r2, r4, r7}, 0x4, 0x1, 0x3}) execve(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) 1.445081617s ago: executing program 6 (id=339): ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x2}) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0x5d) (async) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x5d) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) socket$inet6(0x18, 0x3, 0x0) (async) r2 = socket$inet6(0x18, 0x3, 0x0) getsockopt(r2, 0x29, 0x2b, 0x0, 0x0) mknod(&(0x7f0000000480)='./file0\x00', 0x6000, 0x400) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setegid(r0) accept$inet6(r2, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async) accept$inet6(r2, &(0x7f0000000140), &(0x7f0000000180)=0xc) symlinkat(&(0x7f00000001c0)='./file0/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000040)='./file0\x00') (async) symlinkat(&(0x7f00000001c0)='./file0/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000040)='./file0\x00') r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) (async) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$BIOCGRTIMEOUT(r5, 0x4010426e, &(0x7f0000000340)) (async) ioctl$BIOCGRTIMEOUT(r5, 0x4010426e, &(0x7f0000000340)) r6 = syz_open_pts() close(r6) r7 = syz_open_pts() ioctl$FIOASYNC(r6, 0x80047466, &(0x7f0000000200)=0x4) (async) ioctl$FIOASYNC(r6, 0x80047466, &(0x7f0000000200)=0x4) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000000)=""/229, 0xe5}], 0x1) write(r7, &(0x7f00000002c0)="ad", 0x1) readlinkat(r4, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffff24) mkdir(&(0x7f0000000380)='./file0/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e) 1.419278756s ago: executing program 5 (id=341): getuid() (async) getuid() chmod(&(0x7f0000000000)='./file0\x00', 0x130) (async) chmod(&(0x7f0000000000)='./file0\x00', 0x130) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) seteuid(r0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) ftruncate(r1, 0x8000) r2 = socket$unix(0x1, 0x2, 0x0) getpeername(r2, &(0x7f0000000100)=@in, &(0x7f0000000140)=0xc) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) (async) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) writev(r3, &(0x7f0000000580)=[{&(0x7f00000001c0)="e63a352ba951480f75ef7562af68d6df795a4c6bf38c2f62c7cee74f443a9bee6018c7af15f2490b8603ef863070df96569da865216b00c1a82396b7ba184480b69f137620dcec74157b6cb9c710fb90ad2cfe69fc776d102fe4", 0x5a}, {&(0x7f0000000240)="1691c93f0ea12e851a6631b8afb49bf46539b1f75ceb869db325854cb9dc34730195baf4472b260a87159ca335cee29b691fdb9689415e647c8fb204ffaa41b9c5762e036389306651aecb91db8d136af5dd59e6d0c4a6f46e70d09f9826e36c01398fa4b2692d5ed124226481987ef7b31c484f4222b9095220511ddeeb80260137d4c8f0", 0x85}, {&(0x7f0000000300)="1507540b4ec9f3e4c94672eeafcd4602ee190d1f4d8e2383a9f305f2db17f1", 0x1f}, {&(0x7f0000000340)="8572dca9aa9ac8b95784070565aac8f4f78f675eff89fbbc259095b59ead8a028c6d24d2b7cd1d7b7cec201e6971efdcd51099c6f614f5cd7c02353c8fd68c0caff2be1ebc39ba17971720ed136e16407d32e6581f9da3d256aec7768cc1a88d8c17", 0x62}, {&(0x7f00000003c0)="1b60ef918b3441e57e0e38f83ac78e58ce4807034af9926a532fd8010d1fdd25a27ad109d2b13790d825509970ac33ae697faad27128befac77759274e533e305ca4e09913ec07811301e47bbce95193592007c66b1a45382240cf509ef0db42cc2d0f1609143322f2b108e4e490c9a7f0fdfc6fdf454604e1230af2efb0067bf4d7", 0x82}, {&(0x7f0000000480)="a7e5296c07b412096ccbb020734cb2dcda3a9bdaa4796bba88aa26983ca22010a02a25e8ac42e15b1da3c5842aa00d7b7fe0541b14ae353c2d382e82618ec281f9d7c551f7e82dba1320da8e7b7f855de9f91d85d909407ec49623d1eb62797a28a06953614fb60c168633346d14fdd24d4c9764b625b56ca748078773834bb0fb326918f10b555afe72c3bcb64f4fa953e357d8c719befb294dbec9aede5da1f35fb3d653f18025a3d6973ee7fb88a9e528576cc49a6514dc66fabf640f57ff6f92bb713588890ba4", 0xc9}], 0x6) ioctl$BIOCGDIRFILT(r1, 0x4004427c, &(0x7f0000000600)) ioctl$TIOCMSET(r2, 0x8004746d, &(0x7f0000000640)=0x9) connect(r2, &(0x7f0000000680)=@in={0x2, 0x0}, 0xc) flock(r1, 0x0) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) getsockname$inet(r4, &(0x7f0000000700), &(0x7f0000000740)=0xc) setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000780)={0x10001, 0x2}, 0x8) (async) setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000780)={0x10001, 0x2}, 0x8) unveil(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='x\x00') recvfrom(r4, &(0x7f0000000840)=""/157, 0x9d, 0x40, 0x0, 0x0) (async) recvfrom(r4, &(0x7f0000000840)=""/157, 0x9d, 0x40, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) (async) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) r5 = socket(0x2, 0x8000, 0x1) recvfrom(r5, &(0x7f0000000900)=""/84, 0x54, 0x0, &(0x7f0000000980)=@un=@abs={0x1, 0x0, 0x1}, 0x8) ioctl$WSDISPLAYIO_GETSCREENTYPE(r4, 0xc028575d, &(0x7f00000009c0)={0xaa, 0x8000, './file0/file0\x00', 0x80, 0x4, 0x9e, 0x7}) socket$inet(0x2, 0x5, 0x8) (async) r6 = socket$inet(0x2, 0x5, 0x8) ioctl$FIONREAD(r6, 0x4004667f, &(0x7f0000000a00)) (async) ioctl$FIONREAD(r6, 0x4004667f, &(0x7f0000000a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000001000)={&(0x7f0000000a80)=@in6, 0xc, &(0x7f0000000e80)=[{&(0x7f0000000ac0)=""/54, 0x36}, {&(0x7f0000000b00)=""/83, 0x53}, {&(0x7f0000000b80)=""/153, 0x99}, {&(0x7f0000000c40)=""/114, 0x72}, {&(0x7f0000000cc0)=""/186, 0xba}, {&(0x7f0000000d80)=""/142, 0x8e}, {&(0x7f0000000e40)=""/29, 0x1d}], 0x7, &(0x7f0000000f00)=""/194, 0xc2}, 0x2) accept$inet(r6, &(0x7f0000001040), &(0x7f0000001080)=0xc) (async) r8 = accept$inet(r6, &(0x7f0000001040), &(0x7f0000001080)=0xc) shutdown(r8, 0x2) socket(0x18, 0x1, 0x8) (async) socket(0x18, 0x1, 0x8) 851.736036ms ago: executing program 3 (id=371): mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, &(0x7f0000000080)=0x8, 0x2) (async) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, &(0x7f0000000080)=0x8, 0x2) open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) (async) r0 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setregid(0x0, r2) (async) setregid(0x0, r2) setegid(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) 780.798951ms ago: executing program 1 (id=372): r0 = syz_open_pts() sendto(0xffffffffffffffff, &(0x7f0000000b00)="252086334301fd71e4424bcd9a1052fa25f8c338b3c4f82b3f78a87a89894fbbc8b81cff6161367ab2ecf84bc7d16d1f9d1f5570ce135b8dece154c34d6800ac67c7c5dae54841360f093f856e5da6a57fb08bb479f897a127acc3d4548d51822b0d79a764c8e6f0db9137705537660c802f4881ffee3481209484ba750bbdbb7b72c660eec635409e34dbddf37051d5adf57c62e07a810928c7d9b9a67a69ad95bfa2c0f5f8be48535e4c960ef85b00c0cb551ecc22f2fbf62b28dc6a5d74703ca8c452d8fc69103d28e32fb1bf00001dd3c9a5dab9fbd0d4fa17733167c2578461f483e00415a1764d9485d7f08da368fcbbe85ce6c5dc3b9b63a90b832d5ddf22080b1a1ce72be804eb901bdb5e1a29a5c5df36160f9afa1f9dac7b48ae136db8f954703152b342495629db930d3f20ae3f409cf3566e0222311547231441ae22354418fa5380927c29ca3fd1cc6dbc71c98880c703330894df27966a38d7b12f91620b9b1429231445e66c9fb97fe62943db57ba1e46babb3a84649b808547cd1417c8384f91efd3c0362637507dc1188de66cece2b5ab284a8813c373d767d6854b8ae10904034673b592242494abf809050e19476ebcf9885c266b13199f4a5346482e02c06c13ff3bb2a471159e7eb88041deff2f2487a1b6359b84a50a479c11d3c4bfbd11465d49957809a61e0822e89b7a7e8cd0e27dbcf13a385a2b3ecd6f2e49bc1c88228317c0797eb0b15c281528d99d3d333c98be7971a10f68a5997ff0ca75ea4d68029d44bcf16950005e3db39084c31322fba6dda2feb76d04c257ebcdfdc3268a32084abe645b64ad4a225928813bbd88744c4da5978cea279c5ebd0864448e4191a93e1bba5df83762d563080cf96b6ee1dff7be5a82370329a43d8e34d132b3070255d1ba1da59d3de32b23c53c7344960d9e26e4b94487f3722eae23f2bfebaeb8e5b969f388f28bfe43228230b1c71bc742e3a750a2249f6dcdf50a2200f36add948c779449e7cb52357db02255f1ce75466f5fec8765dea646761e9e64006495278671329b87aa7c8c55cee884ebff03c3ff259e65c1c918e15ac3d1ea1d798cb54d3af825805c9a912144b247b1ffed7435e9bb5975ae001192eadb65166b497ef632bfe2324a7439eb9a4ae465db3405221376ca45833e41c831fb11a8a7d3976a4666b328e11e3eb1a9395f8a343e8b771b437e6db9643f40536940a9198f27abc0c031af07d274cda25e642ced0cf2ed2e2716f18cd307b5bb4f43c298bd7304fe7b317743c69793fc36f363c84e256a126940dae156dd7ea457b89d0fd5de6a94a02b0d0f743a31e12b879f1244221d911b221a549699584ba544f7ad8766fb628d7ae5fff728ec3bc4de3b77ce781412bf615eff948b840fa0f61527f4ac98ed2105144b4b93292ccac6ae8878599a5ed80920d3355d9559d12ef8a09128e794d1976ec6d83128c87fcb7279a0f7c867da4279c7a5c994e2b1c646ecb292e64b8839c0a1af8611c20e6207cda0e5039c3d067e431e39f8a9ac9041ae71ac0ec8327eed2d1fb9c05501de8f65990dcfc571a481971067facd325ce2a2f5b70928cc9fa683e23edc7d86a5d8679301c9ba2866cb2ff89deab7f0c667c94dc9e4567e27752e40638c79cf713f69755f71bb6b74f3cf2f93955723c1266c130d8ac577178bfd3a7e5fba62df2ce95c7b75f77ec8c76ccd7c9e766f6c1848515fdc7b895385efb89fa652b71426d7a546c07d9a90a35cbd6e78e53ecd9f3332b75c9f412ab850c183e48d22c61b905232a8f8877a", 0x501, 0x404, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100dd2d018000000000005e00"}) open(&(0x7f0000000280)='./file0\x00', 0x8aa0, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000140)) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x29a, 0x0, 0x0, 0x0, 0x4f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0xd, 0xd, 0xfffffffd, 0x0, "52c9595a0800", 0x2000000, 0x5}) getsockopt$sock_int(r2, 0xffff, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f0000000140)={0x101, 0x80000001}, 0x8) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="c5ea33001a5d2268be003fb9f7c1615513b5392c076b163afd44f0a0b24799fc", 0x20}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="71f61e5671ac0058bc5ab2501ddc32bd720294010001000000006ad6ae5cddea13491b9f18cff62b37426f406402ae76b34302798d", &(0x7f0000000080)=0x35, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[]) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffe, 0xfffffffe, "ff0107002015c8a32d00000065c0bdf9c6f04aaf", 0x0, 0x40000}) mknod(&(0x7f0000000000)='./file0\x00', 0x2876, 0x80000001) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KDSETRAD(r2, 0x20004b43) ioctl$TIOCSBRK(r4, 0x2000747b) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x2, "effda15bfd60642cc8f8a6a5b3b87f70882c871b", 0x0, 0x5}) ioctl$TIOCSTAT(r0, 0x20007465, 0x0) 780.575154ms ago: executing program 3 (id=373): setgroups(0x0, 0x0) setgid(0xffffffffffffffff) setreuid(0xee00, 0x0) r0 = getuid() setreuid(0x0, r0) r1 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x6380) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000440)=""/153, 0x99) fchdir(r1) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, &(0x7f0000000100), 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) getsockopt(r3, 0x29, 0x3d, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xa}, 0x4, &(0x7f0000001a40), &(0x7f0000000100), 0x0, 0x0) 780.344035ms ago: executing program 3 (id=374): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000140)="0003520600a5ac28b2166c8d966805a09a2eed0e47bfdca122faa5aff3cdc4e362bca8769916ad37b49ccba01f7a15bf035ab9a865bf9b107000f10b23f75d8d7bf78639eddf", &(0x7f0000000100)=0x46, &(0x7f0000001900), 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000240)) r1 = getuid() chown(&(0x7f0000000100)='./file0\x00', r1, 0xffffffffffffffff) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc) fchown(r0, r1, r2) mkdir(&(0x7f0000000000)='./file1\x00', 0x1a) rename(&(0x7f00000007c0)='./file0\x00', &(0x7f0000001040)='.\x00') 775.402375ms ago: executing program 3 (id=375): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) acct(&(0x7f0000000000)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sysctl$vm(&(0x7f00000000c0)={0x2, 0x7}, 0x2, 0x0, 0x0, &(0x7f0000000100), 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) pread(r0, &(0x7f0000000040)="3cd15db7c30016", 0x50cc00, 0x0) recvfrom$unix(r0, &(0x7f0000000100)=""/144, 0x90, 0x1002, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0xfc) rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') 678.213473ms ago: executing program 3 (id=377): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1005, &(0x7f0000000040)={0x1000, 0x6940000000000000}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x9, 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/11, 0xb) 675.355643ms ago: executing program 3 (id=379): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/51, 0x33}], 0x1) select(0x0, 0x0, 0x0, &(0x7f0000000100)={0xad2d, 0x1c, 0x0, 0x3, 0x1, 0x8000000000000000, 0x1, 0xb}, 0x0) execve(0x0, 0x0, 0x0) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000140)=""/207, 0xcf}, {&(0x7f0000000240)=""/226, 0xe2}, {&(0x7f0000000340)=""/196, 0xc4}, {&(0x7f0000000440)=""/186, 0xba}, {&(0x7f0000000580)=""/160, 0xa0}, {&(0x7f0000000640)=""/116, 0x74}], 0x7) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000540)="19", 0x1}], 0x1) 674.860286ms ago: executing program 0 (id=380): r0 = socket$inet(0x2, 0x1, 0xd5) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000513000000000000000004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa890300000018", 0x62, 0x4, 0x0, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket(0x11, 0x3, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050460", 0x5, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000400)="c645f128d31c32929b0161ef8f479a1b6dfa662816f5fbee4caf1951190d8ec15db8b3c0d0025bdfbea48c59f6346861dfd2c0a052ba8c4f3e4f98ad8454b11414e23fff87ea4139b15fafe2695a63c510592e97076b46753245eaa6135c314236435cb8c9e20aeb0a033f808ef7450a6fb04e51bec2c8149fe5af5a81fb163f2aed5eb0296115ca7a03bd6274dbedfb7e673f052604e76363b92fff213200bfb16cf8fab9cf8b88ae81e633753b0f7e199e2d781efc24db9ea0102a0d14f5438c145a73b1c0c5d5ed04780d5d58394f310311f565cf01dadf1d2d9fee824cd96ba9e49d5fe78adaacefdf53caca27c8e0009fcbd9fb055b66c0014d5215b621d86aa31b95f8bcbb729a2dc34e50976e295ba4c684d144005ba0bb1d4ea2f7bbbb77d4bc9cc9a5c4c90f33998e947afac725f5c870c680984c501e5ce165da6b3fccc9044629537a41688c868f6f42397cb22b0368f38de53bf0efc10cc750b78b12a528a61538ef5dc0479e58c01406c663576332c0c7809a878735a562a9ad6655f19fc62a3bb5e57b81e6c3cbc5a8d122c33aaa1914d105194b91772566ca0aa7adb620d7997d4eee662e2702f8000dcc7350bc5ed84880787bd49c80937cc92914caade396815811fbed1281a712e36b2f963f042b6075cb4d0652f8f2bd75dd61c8e4165ce4a8b7b8483acb7ef2ff983ff0b7dda0d188580885c9631274c2ca5499a89601c5c54f6d6e54049120db72f32e4ac7e610201ee8e37bf6f3426b6696ef8cfa12c47c34dafbd50a2f51a47d3c3e73f4c5568f6aa9b1cda5ccafc9a5a8f80dd28e0c215c043a8f74cf3e8c23abf68a282b4a6f62c10b92bb8e097f6edafe1f9a8629e69ddf7e08a6e3bdb1f13bbc1ea204849e761261ace78171bf7a2328658ea0862427e17e6a0dc3887f26f6445a527a79047d29053a74dfd98b11224b24eb52c630b5fbb5ebdaea7624383fb421674cccc339957a8a58442e4469843c33c649e34bbff809cce28b032c177ad38d75f73666086c7ce928c1d1ff421b58f754cea664322ec1e23ff37024b5e288cccb7ac09ed8b7da7a3b8a305ef793f9c042654e536f8b7dc1d9e12b13ef437295cc729f66d67a7a8249471d3536e5a5ee0f9cd414992c453bb44624457c5bfbbf8ed4f2e2aad4c97e22e39bfa881b9c25fece71456ebd737cf46eadb0687181f4132ef4cc23a956504596a8a8303f41ef47e39de59d25105b2a29b76424345fd0649ae1caa2ba2e2000629f3586aed886c366cd94d20fa0f526e14996b44294eee626ecd74384c2e445790355492b3c6dadcdbbe29103b9757dae5c8cb6148a3eb2d18db61f77087c3c917689ca60e5c95a56a98d0bd8ee3a9e5f0b929bcdb7fcfa47e36ad3f59e6c758ff2591db741fdc82bdcb1e7ee2f48aed193f3c37cc6710b26d4bfafc4a5e7480afd18d16b025f6649c9ae0506dfdc733b98fcd1484f57988be6c7ce4328fe5455aa5528b9f0562b4dcbb161c38cfc2a5c2b8864cc25aa1a70119f629f7e3d2d71bb01a7453f121c737daa9af20e94fc15e3333a79d279c5cf57ca4df487d78f68307804011918f5d9f3443991fe5be165711a9c5e8908d55704bbcd80a0064e6c941efa14c159e2281716a59e90395051061c72c421cc4b19f6373d84dc46c2d6abee3ead50667cf24849db7d1336b4830627003fb66499f83d1da39c967403862eca66b43425c5dcb72b969d80ae5ff94367c4867f87cddff4209f6c84d5bc0f1e85b6c433459d806c0b4c5160ab2ffe0f194f6211937741305adbed29a428885da4150ea1b2c4d1568abb65af80d2be2e3557858c6aac330d03447f903821a28001810e7b16a07bd6a5bfd80f0a895781c2d0fb47664d61b3d31ddeacb5bdfb5c6da3bcc37a79c0d444cd2482be309e9671e32f120b8ddc115661746d4a1f2c74dbc6333915df1422c655cbb560b8ba7c20bb7797e58b953fcabfb41447a2fe9ba700424c99a4a96c9de812bc554d72b21179f6d34f2ed50ac1ea6e1cb31deb4c8f370eea209bbd5e64f5b100d0b46f861460c0a1649571be6bf332ce58cc5c2b3666422efe4836ddda43b3f8c09dbbea53fec58498bfa6a659e5c4be8011fe2fca159c0c42ee9b73c72f3f62abb705a6d3c84ab2196c8a57af8f0e35a524335458458bcfbf613324c15e9462a652841413b9a04d548352877601c3e1ec114848f8963c4fe7c056c018db32ba2f972c341bcf380b755d84e6aa9b5e44859a7cb19f7911f80f912a139ac24d275b8751ef1fea692ecfa04d7f8408720ccac82db667dde68f7955568a165c4051e186b7284623158ad2a0c5dbf10a7dca0ab66310a4daabcdc2325646a18d4bb03ea4ce87ff7326ec670ab649cf3d6650eac709745957b908efc3ac7fa5b4f90318c8001f86090a88aff0f287ac597d889039e5e88b167ad9973d88b6f8fcf18dafbe3e76c895f04a04554df2aa5be4ba462c32d9e567c01f67c1d7bd4bf776fd0fd1181ba18f3769575ce4d3b14b0c86258163f4e48018b12f0bb4d3322da245e9282a5a5498fbf069b79e51c85ef408652c814e7ac8edc512303a7d1e14817241e655b00c7f15c41dc6b5765f856007763fb6b2eae0027ea8f5c98f33fbfb097484a99500018aa57051c285ef88ecf14fe3e4f6052e8c1bf2a0f7d73be9b8f2df89f7630ded6a503cac625ace96ed79738306b9aa549e2c2a4e766b9bca1a8853623726e09f21111a24e62a64803a016e3a003b2bbc37a06527defa16f3bf2581885d7a57896ac595cbd502e11a214422453cdbe5b9431f68c313b9dd780edd414ab506a302ad5f642c7c5275ac103930ae59e6770ae289efadc2ebdabd173a08b9de4453db3a104d3ccc98a8ba142a1bfb1da753b079580415bb49c9634cdc3b95087754a5227c46a1ca1fc665fbfa12455461c097c6f9389f9479947c56b4a52117d44d404d8685b9d69463e2d20283401520c6a98b58b2b93a7ca69fe70bbf7be5897a35921beb324d791e4131a02ea7d802da8bd14906a37584e383ea9244d3f7f8afa57be09f45286dd8ffcba40428d1f0f9493d5111926c7b3500511c109fb72288e35f1389af352007f90f9f22d013d79ff19830a3453881edb1a79688c0291f2695eb0641b3a7630389ff8aeeaf3ec5573e18e31aec55ec5e226c02cada6d82fffb4316bf2e9f04c35b421993a55a5ae04ecf7092ba721ee0c15d4fddfe36585a9df74993a6f69128410e0101112d389c0de429d3f9bc714da1bd2cf21b1ba3b15d392948f69d67a246ecdc16207d938dce7eb9bacf57c31cb7f2abb851bc1cf6b0e2cb4f86923fd479379de1d8fafd3b0d5fb4475c77228cdae0e2d39b5cb7affe12e3b4978cebc7b2250d8c226fc90a93e6c2279f057fa6c1871bc859012d9ad67b3a01a5f43ee2d78b50bec52272c09d6b8e10d9c246815a720d8a5ad8de6f0f0e5b17c609cb009508c75cc651a2028b610809533f681c02028324cc6513d92a97088266cb2709d9a2f6796db62e4eb2b1dea7388be24dbc7cdf14e6124cb2c28f548f7d4624824c9bdf86d09418d69d286e6436993acfdde3967bcbcb3bf90260ea9578e4d79e1bc2cb89de3a6115913e5d7072a10d84e8668f8a5f8b85c106d279f4a8fc9d8c6fe5df712ff7005df47ca1ed5baf7ae0b1232d26cc2620953b2ee2e63722cc702df1225a12373427d83ad27811716cfdecb33f57c01c4ed8761dadf113f51fdca004fbdef143af67285616f970e1554e138f61a29599c46e2d0f2d63f2bfcce4a1bb9a611cbac2c461d0b4da951e89ba398c3171d6996fb20e23f048e76e2629545cf64ea07a9f88fb68c0145142b06be8a1c8434150ccd795a64d3a56cc5eaa4ea3312bfcce409eaa749dacf7eaaeaaf36be6ca716566d4c9925023d0a564e218608107e6d60c96ef13a0e7fbf87c25d469ac7e3df21dfb36b1b21d9957a033de7d06668ea36b2c92320330cdfad28846b14b8bb2fe60f700987f1117d6a4978473553ec824e3c4d9e9ed664a955abff871b0badfb1f6fca00a3ccf8c6073d522cab7d38126076f64abc09c5955038dcd7cce20906b92d11f21ce786fa29aae0beeb45084f8b85bbd9ff1a7ad8542c099cdf617f995f50ca0519f0d96d7849b3aefa5811f282792ede7cafdbab5dc84d74d74eb1e39b173a72c203a6cd5f302f1d66e0a6cd3d57d12c36b4dbf0afa000a373091aa572a9e9adf1d58a03d096291f52eeab30b5b5fbe57ceed40d6721f31696c8a2d2a69161ae57542a135cd8636442aacece326034058a32ae61727be5426ebdce0c4461ca44a2b66f0c7f8122e9cc573d0e0f5a85c3eba055d0274a33662a1d2cca27c95c39bb56afbf403ab2b3c2bb842e14c13a8de3fb79cfa23601463873b5015d6a5532e786aac6f18a75ad7f8804ff78893250f6f7369c62f50b8b946839fbc2009cf4f40398130f41e509905ac5bf280230f7d9141197d2782159a7813dc0ababf2e36949aa34a11b1a6793e250efaf2e989423efbbd10b835bf681671a83fbe63c1cfcd011f87250975f9a78723526089ad79a431abd9d3dfb5302d2f27baac4b9bc0b47f42dee69b04061521d55abf52f5b1d88d39f68c1df2f297c384777a896eecbac0ac0dbb14dbccca8945efeecae6cebf0a612bf0061368b501465c96342730a08b980c407c1b4a758c577f4d4184645f7da9a133e0b3f6df06c39cb88a4faa7911d2bbacc246678d9ea10c41270a6148ac54a99ff71612079c1ea8b615a5f8020f5d00dc3cc1956a6d115dabc6b9f31574622994ec10075635736cf2be45d72d09ca0afa0ecebe1fd5270be9b23cd37f0e3454b93acf9b25b8aabbe981bc8e8ea917bd14acf56ad94137bfce94a81b9cde2ffe0a092357341ed705f793f4c611cb5b30e5da00773c9798b0ae230f816c26562215f385441a38f2b52480ab7cf114d44687decd6a80b228df1569eb8c676204859f8068fb1e0eb7ca6760a494bf6e65be92c70c9874b6ebac0a677038e975758991926250b7e8c2f66295f606082ce0542de1dc817221d41bd9a8f8927e6095930c4bb34bdc20e4811ee821a1bd00bab304c4d5e1e193121ffb76e11d97b9e745dade2bb2f2bac80a225b0c7fa4e9e22130d63b41bef37f44abf66d4922e82685bf3162ad724b3258794f11e55a063c5a3bc388d57a271669154ffdffdc8a0b3fad30706f91eb77a3a1ad4df13d7a0337ffe477fb546799f6ce925ffb462aa33a1e28107da62a560e6522c22185494e47a565e11bd883155f981ca264397a918b819e9346fadb54b8b97e7250bbee564b40658d8bf0752b73d934fd3dbd0a91fcc89d79457d5cbce29f43a07f260bad163746faa6212d09a9b4f0a2e38f7c7e1df4512f23091cf6aa0fcb363d3a08fd9b92068b09d7da3b2380100e9b38b405b333e3110ab099dc81677469ad11c13f7c2e1152c96db27aa3d4139af92ef7f647d0f6b66da4650a8ca86a639cdd44c6a25ab5aaf63b37aab7d40929cc8a0514d228433ef142054f1579d3260ed4bbf46701da7bd839c9ca7f9afeb4706203a76f3beeb968dc3ec4cef364f97611af45b801f498fd0d33f7b8cbab0e959e9124a32f16f77e9773104f0c748b610ba42a8076dfbe7bebb88701d41f16d796e872e334b66c38514bf0081edef3d06d04848b9a505db31b21e63d6af651f15eef420f861001b2439b3115f495c38be6d4c8a6a8be085286b51c8b76475f3d5e560ab7205b9d2fc5f832003d", 0xff0, 0x0, 0x0, 0x20) (async, rerun: 64) openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async, rerun: 64) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6c, 0xdc, 0x4, 0x409}, {0x40, 0xd, 0x20, 0x441}, {0x1ae, 0x0, 0x0, 0xffffff7e}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r2, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe) (async) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x64, 0xdc, 0x4, 0x7}, {0x1, 0xd, 0x0, 0x441}, {0x52, 0x0, 0x0, 0xfffffffe}]}) (async) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) (async, rerun: 32) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) (rerun: 32) setuid(0xee01) r4 = open$dir(&(0x7f0000001640)='./file0\x00', 0x2, 0x0) writev(r4, &(0x7f0000000900)=[{&(0x7f0000000100)="db", 0x1}], 0x1) (async) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x52e5) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x427cc8d9) 632.171633ms ago: executing program 0 (id=382): r0 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x119) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200), 0xfffffffffffffffd}], 0x1) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='c\x00') unveil(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='c\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$WSDISPLAYIO_GETEMULTYPE(r0, 0xc014575e, &(0x7f00000000c0)={0xfff}) r1 = socket(0x2, 0x1, 0x0) socket(0x1, 0x4000, 0x9) bind(r1, &(0x7f0000000000), 0x10) open(&(0x7f0000000080)='./file0\x00', 0x40, 0x119) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200), 0xfffffffffffffffd}], 0x1) (async) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='c\x00') (async) unveil(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='c\x00') (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$WSDISPLAYIO_GETEMULTYPE(r0, 0xc014575e, &(0x7f00000000c0)={0xfff}) (async) socket(0x2, 0x1, 0x0) (async) socket(0x1, 0x4000, 0x9) (async) bind(r1, &(0x7f0000000000), 0x10) (async) 630.663846ms ago: executing program 0 (id=384): bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1f95d27d48731892, 0x0, 0x1}, 0x8) (async) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r0, 0x1000000029, 0xb, &(0x7f0000000000), 0x0) (async) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000000)="9b1809ffffffffffff227f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0x10011, 0x0, 0x0) (async) r1 = semget(0x2, 0x4, 0x3b2) semop(r1, &(0x7f0000000140)=[{0x2, 0x2, 0x1800}, {0x4, 0x6, 0x3000}], 0x2) r2 = semget(0x1, 0x1, 0xa) semctl$SETVAL(r2, 0x1, 0x8, &(0x7f00000000c0)=0x1) (async) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETA(r3, 0x20004101, 0x0) setsockopt$sock_linger(r3, 0xffff, 0x80, &(0x7f0000000080)={0xfffffff8, 0x2}, 0x8) 630.474685ms ago: executing program 0 (id=385): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) link(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='./file1/file0\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') (async) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') 527.84519ms ago: executing program 5 (id=387): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000001c0)={0x0, &(0x7f0000000280)}) (async) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000001c0)={0x0, &(0x7f0000000280)}) write(r0, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = socket(0x18, 0x3, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0x8004667d, &(0x7f0000000140)=0x401) pread(r2, &(0x7f0000000300)="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", 0xfe, 0x5) shutdown(r2, 0x1) (async) shutdown(r2, 0x1) setsockopt(r1, 0x1000000029, 0x28, &(0x7f0000000000)="5ab7776a", 0x4) (async) setsockopt(r1, 0x1000000029, 0x28, &(0x7f0000000000)="5ab7776a", 0x4) r3 = msgget(0x1, 0x2a0) msgctl$IPC_STAT(r3, 0x2, 0x0) (async) msgctl$IPC_STAT(r3, 0x2, 0x0) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000240)=""/170) (async) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000240)=""/170) setsockopt$sock_int(r1, 0xffff, 0x800, &(0x7f0000000180)=0x2, 0x4) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r4, 0xc0104407, &(0x7f0000000000)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r4, 0xc0104407, &(0x7f0000000000)={0x0, 0x0, 0x0}) syz_emit_ethernet(0x98, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='PZ\x00\x00']) (async) syz_emit_ethernet(0x98, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='PZ\x00\x00']) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x1}, 0x8) r5 = socket(0x2, 0x2, 0x0) connect$unix(r5, &(0x7f0000000000), 0x10) sendmsg$unix(r5, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TIOCSETA(r6, 0xc088444f, &(0x7f0000000400)={0x1ffb, 0x72, 0x1000001f, 0x1, "0900014332000000000000000000000000001000", 0xb, 0x1fd195c0}) (async) ioctl$TIOCSETA(r6, 0xc088444f, &(0x7f0000000400)={0x1ffb, 0x72, 0x1000001f, 0x1, "0900014332000000000000000000000000001000", 0xb, 0x1fd195c0}) 527.606776ms ago: executing program 4 (id=388): r0 = semget$private(0x0, 0x0, 0x23) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000000)=[0x1, 0x9, 0x7f, 0x101, 0x8, 0x9, 0x200]) 527.417054ms ago: executing program 0 (id=389): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) r1 = getppid() msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x1, 0x68, r1, r1, 0x0, 0x4}) pipe(&(0x7f0000000400)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r2, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r3 = fcntl$getown(r2, 0x5) r4 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x4000011e, r4) ktrace(&(0x7f0000000200)='./file0\x00', 0x0, 0xc1e, r3) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x10, 0x2, 0x1}, {0xb1, 0x10, 0xe4}, {0x6, 0xa, 0x7f, 0x400f}]}) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r5 = socket(0x18, 0x1, 0x0) setsockopt(r5, 0x1000000000029, 0x3d, &(0x7f0000000040)="00000080", 0x4) getsockopt(r5, 0x29, 0x3d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r0, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe) 494.014408ms ago: executing program 4 (id=390): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x2, 0x4001, 0x0) r4 = fcntl$dupfd(r3, 0x2, r3) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000340)="d33a8a", 0x3}], 0x1) close(r4) r5 = socket(0x2, 0x2, 0x0) connect$unix(r5, &(0x7f0000000000), 0x10) r6 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffffffffffffb, 0x0, 0x2, 0x100000000, 0x0, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x2, 0x4], [0xfffffffffffffffe, 0x0, 0xfffffffffffffffb, 0x20000000, 0x0, 0x924, 0x1fe], [0x100000001, 0x80000000002, 0x0, 0x0, 0x0, 0x11000], [0x100, 0x20000000000, 0x0, 0x100000000, 0xfffffffffffffffe], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0x0, 0x1cf}, {0x3, 0x5, 0x6, 0xffffffffffffffff}, {0xcc8b, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x2000000000000000}, {}, {0x4, 0x965, 0x42cf, 0x8}], {0xe3, 0x5, 0x1}, {0x0, 0x0, 0x0, 0x2}}}) r7 = kqueue() kevent(r7, &(0x7f0000000080), 0xe4a, 0x0, 0x4000a9fa, 0x0) poll(&(0x7f0000000140)=[{r2, 0x27}], 0x1, 0x6) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000240)={'./file0\x00', 0x6, 0x1, 0xf, 0x1, 0xff, 0x0, 0x4, 0x0, 0x0, 0x202, 0x1}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000000)=0xc) r8 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) pwritev(r8, &(0x7f00000015c0)=[{&(0x7f0000000400)="d19e59fb4bfddce54ae4ee20b11e8dfe9b7e0a51e22db1d4bb242d207bb3fd1e99413177e5569dd8059f6c0f14d5bc04cfbfaac60793ccfeccf19e0b1c1e7c1bcbd1b518a4ae48e1013907b4fd38d58ea8690ad451178181c670338843c745f432bf78c29a9ab76d2359a72b52596dba12d6fe8a7e9e590301fca8b071420739becb8a0b4f89ef4ee35dcebb05f893e4dd79d345ef2edffc4823d643caf09ec3f6d7af256c15511d5ec1b6f505ec735b59415d2a00856e9aab8e42dc5a6219fe78717fa0e4e5836b948164e57e391c1373a8f8ab10fe", 0xd6}, {&(0x7f0000000500)="387884f10fa0de83a750c8dca05f4a98279728167cb3fc1ea3650036f1a0e0c06caedaf3741f7d47d39064", 0x2b}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="403487b3cb980e7599c0b502d54256986712d4db8bb6d1ab9c9ac46eb05e9f700f20f68dc0f0b3e85c9029d125c96289e867042c9c59626cf3c8be8f4f85306f8cd8048477", 0x45}], 0x4, 0x3) openat$vnd(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setgroups(0x1, &(0x7f0000000180)=[0x0]) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) 493.343016ms ago: executing program 0 (id=391): mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) r0 = open(&(0x7f0000000200)='./file0\x00', 0x20000, 0x102) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) r3 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x4, 0x1000, r3) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r2, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f00000004c0)={&(0x7f00000001c0)=[{0x47, 0x4}, {0x22, 0x5}], 0x20000112}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) unveil(&(0x7f0000000140)='.\x00', &(0x7f00000000c0)='r\x00') mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) read(r0, &(0x7f00000001c0)=""/24, 0x18) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0xd4e688a67930cd) ioctl$VMM_IOC_CREATE(r4, 0xc2585601, &(0x7f00000002c0)={0x10, 0x7, [{&(0x7f0000009000/0x4000)=nil, &(0x7f0000010000/0x4000)=nil, 0x2}, {&(0x7f0000006000/0x4000)=nil, &(0x7f0000010000/0x2000)=nil, 0xa}, {&(0x7f0000009000/0x3000)=nil, &(0x7f0000001000/0x10000)=nil, 0x90}, {&(0x7f0000012000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil}, {&(0x7f0000000000/0x400000)=nil, &(0x7f000015f000/0x4000)=nil, 0x1}, {&(0x7f00001bc000/0x3000)=nil, &(0x7f000015b000/0x3000)=nil, 0xc}, {&(0x7f000034f000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xc000000000}, {&(0x7f000025c000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x8}, {&(0x7f00002a0000/0x4000)=nil, &(0x7f00003ed000/0x2000)=nil, 0xc}, {&(0x7f00002a5000/0x1000)=nil, &(0x7f0000254000/0x1000)=nil, 0x800}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4}, {&(0x7f00001f3000/0x1000)=nil, &(0x7f00002b6000/0x4000)=nil, 0x6}, {&(0x7f00003ba000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4a6}, {&(0x7f0000048000/0x3000)=nil, &(0x7f0000083000/0x4000)=nil, 0x6}, {&(0x7f000029c000/0x4000)=nil, &(0x7f00003a9000/0x4000)=nil, 0x7fffffff}, {&(0x7f0000ff2000/0xd000)=nil, &(0x7f0000232000/0x3000)=nil, 0x9}], './file0/file0\x00', 0x9}) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000040)='./file0\x00', 0x8}) 491.611827ms ago: executing program 5 (id=392): r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) openat$bpf(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0xcb, 0x2, 0x1, 0x440}, {0x5, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x9766}]}) sysctl$hw(&(0x7f00000000c0)={0x6, 0x12}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r1, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r2 = socket(0x11, 0x3, 0x3) sendto$unix(r2, &(0x7f0000000280)="b1000501600000001600000007000000045c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x0, 0x0, 0x0) listen(r2, 0xfffffffc) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xc8, 0x3, 0x8, 0x440}, {0x4, 0x3, 0x7, 0x6}, {0x2, 0x0, 0xfe, 0x7}]}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) sysctl$net_inet6_ip6(0x0, 0x0, &(0x7f00000000c0)="fb", &(0x7f0000000080)=0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) r5 = getpgid(0x0) fcntl$setown(0xffffffffffffffff, 0x6, r5) fcntl$setown(0xffffffffffffffff, 0x6, r5) ktrace(&(0x7f0000000140)='./file1\x00', 0x1, 0x28, r5) write(r4, &(0x7f0000000600)="d8564b0bf1ff0d95548af9200400", 0xe) mprotect(&(0x7f0000643000/0x1000)=nil, 0x1000, 0x1) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) accept$unix(r0, &(0x7f0000000040)=@file={0x0, ""/77}, &(0x7f00000000c0)=0x4f) openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 401.57891ms ago: executing program 5 (id=395): syz_emit_ethernet(0xd4, &(0x7f00000000c0)=ANY=[@ANYBLOB="73b9d4c3000002000000450088481fb4830ede7f8ca01e19222c11d4f7b89b59e0d245bb6398cedf1198014e40e4f4591eac7ac32647ae62f4a1489737ca80e8d7e31da31b9d346ce01c4a427a10932ccbfbf776d0e722edd02d8e7587ca6c10521f23a6267b9c1cd0fc6fb24d975eb617e885a90a5e142c439b7fd511b716a7e966f642b54607237d7c0364072824bdb7358b9ba8d6eb44795bbf644f8be24feff4cb3aa2e32a2d062e6a6c7c9375592403facdfe54bcd1448f66d30897317cf8b3f6427e255094f31ab625363fc6a2fdc5aa41"]) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) sysctl$vm(&(0x7f0000000400)={0x2, 0x7}, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000080)=0x1, 0x0, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETA(r0, 0xc0284457, &(0x7f00000000c0)={0x200, 0xfffffffe, 0xfeffffff, 0xfffffffc, "080000000000000000010000000000000f1e0400", 0x10000000, 0x800ffff}) syz_emit_ethernet(0x43, &(0x7f0000000040)={@remote, @broadcast, [{[], {0x8100, 0x5, 0x1, 0x1}}], {@arp={0x806, @generic={0x18, 0x80f2, 0x6, 0xd, 0x4, @local, "9b2aa1531bc76e741f05c5d48a", @remote, "effee62b59851edd7d1eb7fc618e22fb"}}}}) 389.191106ms ago: executing program 4 (id=396): mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0xe02) (async) r0 = socket(0x2, 0x1, 0x0) r1 = socket(0x18, 0x3, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x1, 0x2, 0x0) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000140)={0x3a3d, 0x1, 0x7fffffff, 0x20000d2c, "ee12a205000900000000009817c6ce0008004000", 0x7}) (async) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(0xffffffffffffff9c, 0x81206919, 0x0) (async) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) (async) getsockopt(r0, 0x6, 0x3, 0x0, 0x0) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) (async) setuid(0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r3, 0x8000000000000000) (async) syz_emit_ethernet(0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="73b9ccc3000000f70004000086dd6000000000093a01fe00000000000000000000000000bbff02000000000000"]) 351.29501ms ago: executing program 5 (id=397): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x104}, {0xffffffffffffffff, 0x80}], 0x2, 0x9) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) ioctl$TIOCSETA(r1, 0xc4504442, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SPKRTUNE(r0, 0x20005302, &(0x7f0000000000)={0x1, 0x5}) r3 = socket(0x1, 0x5, 0x3) sysctl$vfs_nfs(&(0x7f0000000180), 0x40000114, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xe, 0x0, 0x37) shmget$private(0x0, 0x1000, 0x1, &(0x7f00002c6000/0x1000)=nil) setsockopt$sock_int(r3, 0xffff, 0x1002, &(0x7f0000000000)=0x1007, 0x4) syz_emit_ethernet(0x1066, &(0x7f00000016c0)=ANY=[@ANYBLOB="ffffffffffffe04b1c561ac486dd6036e28210303b00fe8000000000000000000000000000aaff020000000000000000000000000001"]) openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) (async) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x104}, {0xffffffffffffffff, 0x80}], 0x2, 0x9) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) (async) ioctl$TIOCSETA(r1, 0xc4504442, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$SPKRTUNE(r0, 0x20005302, &(0x7f0000000000)={0x1, 0x5}) (async) socket(0x1, 0x5, 0x3) (async) sysctl$vfs_nfs(&(0x7f0000000180), 0x40000114, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xe, 0x0, 0x37) (async) shmget$private(0x0, 0x1000, 0x1, &(0x7f00002c6000/0x1000)=nil) (async) setsockopt$sock_int(r3, 0xffff, 0x1002, &(0x7f0000000000)=0x1007, 0x4) (async) syz_emit_ethernet(0x1066, &(0x7f00000016c0)=ANY=[@ANYBLOB="ffffffffffffe04b1c561ac486dd6036e28210303b00fe8000000000000000000000000000aaff020000000000000000000000000001"]) (async) 351.00468ms ago: executing program 4 (id=398): sysctl$net_inet_tcp(&(0x7f0000000300)={0x4, 0x2, 0x6, 0x2}, 0x4, &(0x7f0000000340), 0x0, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xca, 0x4, 0x1, 0x440}, {0x87, 0x0, 0x0, 0x16a0}, {0x6, 0xd3, 0x0, 0x402}]}) openat$bpf(0xffffffffffffff9c, 0x0, 0x200, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="71f61e5671ac0058bc5ab2501ddc32bd720294010001000000006ad6ae5cddea13491b9f18cff62b37426f406402ae76b34302798d", &(0x7f0000000080)=0x35, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r0, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xe}, 0x4, &(0x7f0000000040)="1d34f880e73498baa2392a5a300e2460db62aae401080339579df65d52fb2954b0062b15501b6f69c300121524c3a8dbd23f143c746087", &(0x7f0000000080)=0x37, &(0x7f00000000c0)="58d1ed1299f3519d8865ae8f120583bafc628eb3228688d872ba62cb880df4f88d295ef14c9e6fa4b5a941f3518fd3a0beae945ea21fa40ba941c0b60f21a3c7721a1f3fc7aa0b1ba965220b60411a3f800b62ec42f9bc06c265c6a383fa0107dab97c923a400f980326438d0f5e1cf47afa8bbedf642c9948f8785cceeea29ac36b48ecf55a6f12d38840a1abd07429b676969e4c1d6afc3c898411e12cccb5a1dde9", 0xa3) 350.792361ms ago: executing program 7 (id=399): recvmmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}, {&(0x7f00000000c0)=""/110, 0x6e}], 0x10000000000002db, 0x0, 0xfffffeff}}, 0x10, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000080)={0x6, 0x2, {0x8001, 0x8001}}) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) (async) open(&(0x7f0000000280)='./file0\x00', 0x80000000000206, 0x0) (async) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000001440)) (async, rerun: 32) sysctl$kern(&(0x7f0000002240), 0x2, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0}, 0x10, 0x0, 0x0) 343.981427ms ago: executing program 4 (id=400): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KDDISABIO(r0, 0x20004b3d) shmget$private(0x0, 0x2000, 0x50, &(0x7f0000001000/0x2000)=nil) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x1) getdents(r1, &(0x7f0000000080)=""/23, 0x17) 240.757865ms ago: executing program 7 (id=401): r0 = socket(0x11, 0x3, 0x0) open(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) munmap(&(0x7f0000077000/0xc00000)=nil, 0xc00000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r1, 0x0) sendto$unix(r0, &(0x7f0000000180)="b10005040000000000000000340000001a5113fecea10500fef96ecfc72fd3357a89583535673039d2d205316326c0828b43beea36acf20b7804be38164991f7c8cf5f882b297b5b23edeb51e2f0ac3ebbc2feb3fda1119b672f4d3360223e7d026ba8af630037a840c4f2bd53eb067e7335a069d7ac434e0c0000000000008904000000000022830cf41bed66f40066ccdcf3e4999d9d20002002c5dbfad800000008e371a3f8340412051e000000000000020000000056d4c4b114000033ec0aa1733c9bf9703edc8622", 0xcb, 0x0, 0x0, 0x0) 240.441508ms ago: executing program 4 (id=402): pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x7, 0x102, 0x80000001, 0x80000001, 0xffff, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0x76, 0xdbb8}, {0x8, 0xf86, 0x0, 0xaf9}, {0x1, 0x2, 0x40000007}, {0x9c7e, 0x7fff, 0xe, 0x7}, {0x7ff, 0x6, 0x3, 0x99}, {0x1ce1, 0x1, 0x4f8, 0x6d}, {0xa, 0x0, 0x7, 0x8}, {0x117, 0x81, 0x1, 0x7}, {0x6, 0x8001, 0xc7, 0x88}, {0x4, 0xf, 0x84b0, 0xaec}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8c, 0x3, 0x5, 0x8}, {0x29a79717, 0xfffffffa, 0x8, 0x6}, {0x7, 0x673, 0x6, 0x6}, {0x2, 0x1, 0x4, 0x30000}]}) execve(0x0, 0x0, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x139}, 0x53b3, 0x8, 0x0, 0x0, 0x0, 0x101000000, 0x10000000000009, 0x8000000000000}) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x682eb13985c518e6, 0x7, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) close(r3) r4 = socket(0x18, 0x4, 0x3) mprotect(&(0x7f000041a000/0x1000)=nil, 0x1000, 0x6) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) connect$unix(r4, &(0x7f00000003c0)=@file={0xc0e044787175d82d, './file0\x00'}, 0xa) sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) renameat(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00') setuid(0xffffffffffffffff) ioctl$BIOCLOCK(r2, 0x20004276) r5 = getuid() chown(&(0x7f0000000180)='./file0\x00', r5, 0xffffffffffffffff) r6 = getuid() setreuid(0x0, r6) setreuid(0x0, r6) ioctl$BIOCFLUSH(r2, 0x20004268) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000540)="19", 0x1}], 0x1) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000240)) sysctl$kern(&(0x7f0000000000)={0x1, 0x16}, 0x2, 0x0, 0x0, &(0x7f0000000280)="ad", 0x1) 239.778003ms ago: executing program 7 (id=403): sysctl$kern(&(0x7f0000000040), 0x1, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='x\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) r1 = socket(0x18, 0x3, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0) r3 = syz_open_pts() ioctl$TIOCSTAT(r3, 0x20007465, 0x0) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f00000002c0)=0x7) ioctl$FIONBIO(r3, 0x8004667e, &(0x7f0000000280)=0x8) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f00000018c0)=0x7) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x10, r2, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) 237.794076ms ago: executing program 7 (id=404): syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="172140030f70aa03aaaaaaaa86dd660cf5b800180601fe8000000000000000000000000000bb0000000000000000000055"]) pledge(0x0, &(0x7f0000002840)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00'/659) pledge(0x0, &(0x7f00000000c0)='\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xa010, r0, 0x10000000000000) connect$unix(0xffffffffffffff9c, &(0x7f0000000040)=@file={0x9675f084340f7a1c, './file0\x00'}, 0xa) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 237.626067ms ago: executing program 7 (id=405): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() r1 = socket(0x800000018, 0x1, 0x0) close(r0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x8000, 0x8) r3 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r3) utimensat(r2, 0x0, &(0x7f0000000100)={{}, {0x0, 0x5}}, 0x2) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r2, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x63) dup(r4) r5 = kqueue() getsockopt(r1, 0x1, 0x10, &(0x7f00000009c0)=""/4096, &(0x7f0000000080)=0x1000) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x4, 0xfffffffffffffff7}) kevent(r5, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) ioctl$FIONBIO(r5, 0x8004667e, &(0x7f0000000040)=0x7) writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) ioctl$TIOCDRAIN(r0, 0x2000745e) 0s ago: executing program 7 (id=406): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r0 = socket(0x2, 0x2, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3}, {0x0, 0x300}, {0x0, 0x4}, {}, {0x2}, {}, {0x3, 0x5}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0xb4}, {0x1}, {}, {}, {0x0, 0x4}, {0x2}, {0x2}, {0x3}, {0x0, 0x5}, {0x0, 0x1}, {}, {0x1, 0x80000000}, {0x1, 0x6}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x4001, 0x0) r2 = dup(r1) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000180)) close(r3) r4 = socket(0x2, 0x2, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) poll(0x0, 0x0, 0x1400) setsockopt$sock_int(r0, 0xffff, 0x1023, &(0x7f0000000040)=0xab9, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error wskbd0: can't attach mux (error=5) panic: uvm_fault_unwire_locked: addWArReNsIsN noGt: iSnP Lm NaOTp LSOtWERarED OtNi nSgY SCstaALcL k7 3tr 4a8c7e4.2.4. EXIT 0 c Stopped at savectx+0xae: movl $0,%gs:0x680 TID PID UID PRFLAGS PFLAGS CPU COMMAND 153064 12491 0 0 0x4000000 0K syz-executor *158875 12491 0 0 0x4000000 1 syz-executor savectx() at savectx+0xae end of kernel end trace frame: 0xae4942d9b50, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu0: uvm_fault_unwire_locked: address not in map ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0xae4942d9b50, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003c5ad1b0 rbx 0 rdx 0xffff800001480480 rcx 0xffff80003c5a67f0 rax 0x37 r8 0xffff80003c5ad0e0 r9 0 r10 0x702fc9cacf63ace0 r11 0x47097f5962b09784 r12 0 r13 0 r14 0xffff80003c5a67f0 r15 0 rip 0xffffffff82eb53ee savectx+0xae cs 0x8 rflags 0x46 rsp 0xffff80003c5ad130 ss 0 savectx+0xae: movl $0,%gs:0x680 ddb{1}> show proc PROC (syz-executor) tid=158875 pid=12491 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c5a7c70,0xffffffff839c80c8 process=0xffff8000ffff04c0 user=0xffff80003c5a8000, vmspace=0xfffffd806bc853b0 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 12491 144335 40156 0 2 0 syz-executor 12491 153064 40156 0 7 0x4000000 syz-executor *12491 158875 40156 0 7 0x4000000 syz-executor 55519 504453 27803 0 2 0x480 syz-executor 55519 362518 27803 0 3 0x4000080 kqpoll syz-executor 55519 474951 27803 0 3 0x4000080 fsleep syz-executor 11836 423749 67172 -1 3 0x90 nanoslp syz-executor 11836 166396 67172 -1 3 0x4000090 piperd syz-executor 11836 222018 67172 -1 3 0x4000090 fsleep syz-executor 73204 10690 62323 0 2 0x480 syz-executor 73204 86542 62323 0 3 0x4000080 fsleep syz-executor 73204 318056 62323 0 3 0x4000080 bell syz-executor 26585 351673 23751 0 2 0x480 syz-executor 26585 455516 23751 0 3 0x4000080 pipewr syz-executor 26585 364517 23751 0 3 0x4000080 fsleep syz-executor 16681 100655 0 0 3 0x14280 nfsidl nfsio 76273 77595 0 0 3 0x14280 nfsidl nfsio 87982 417732 0 0 3 0x14280 nfsidl nfsio 26803 53270 0 0 3 0x14280 nfsidl nfsio 52178 17701 0 0 3 0x14280 nfsidl nfsio 30270 508417 0 0 3 0x14280 nfsidl nfsio 32464 149573 0 0 3 0x14280 nfsidl nfsio 13142 61002 0 0 3 0x14280 nfsidl nfsio 21846 204781 0 0 3 0x14280 nfsidl nfsio 35931 465919 0 0 3 0x14280 nfsidl nfsio 53850 70338 0 0 3 0x14280 nfsidl nfsio 77236 96579 0 0 3 0x14280 nfsidl nfsio 11892 74294 0 0 3 0x14280 nfsidl nfsio 9673 409620 0 0 3 0x14280 nfsidl nfsio 87393 423508 0 0 3 0x14280 nfsidl nfsio 31105 119856 0 0 3 0x14280 nfsidl nfsio 76160 487375 0 0 3 0x14280 nfsidl nfsio 17727 227590 0 0 3 0x14280 nfsidl nfsio 14559 463319 0 0 3 0x14280 nfsidl nfsio 13835 462420 0 0 3 0x14280 nfsidl nfsio 24078 68537 0 0 3 0x14200 bored sosplice 27803 85034 72111 0 2 0x482 syz-executor 75673 163158 72111 0 3 0x82 nanoslp syz-executor 62323 256479 72111 0 2 0x482 syz-executor 67172 31174 72111 0 2 0x482 syz-executor 40156 252294 72111 0 3 0x82 nanoslp syz-executor 39860 332174 72111 0 2 0x482 syz-executor 40595 242393 72111 0 2 0x482 syz-executor 23751 337439 72111 0 2 0x482 syz-executor 72111 366328 58794 0 3 0x82 kqread syz-executor 58794 334034 90460 0 3 0x10008a sigsusp ksh 90460 84597 92947 0 3 0x98 kqread sshd-session 92947 331590 78375 0 3 0x92 kqread sshd-session 3030 259574 1 0 3 0x100083 ttyin getty 78375 33198 1 0 3 0x88 kqread sshd 32259 437369 42999 74 3 0x1100092 bpf pflogd 42999 100456 1 0 3 0x80 sbwait pflogd 35857 351216 86543 73 3 0x1100090 kqread syslogd 86543 40297 1 0 3 0x100082 sbwait syslogd 74199 484228 1 0 3 0x100080 kqread resolvd 6329 414378 36515 77 3 0x100092 kqread dhcpleased 12932 509254 36515 77 3 0x100092 kqread dhcpleased 36515 412795 1 0 3 0x80 kqread dhcpleased 2874 477394 0 0 3 0x14200 bored smr 4836 327457 0 0 3 0x14200 pgzero zerothread 76611 152775 0 0 3 0x14200 aiodoned aiodoned 11548 25044 0 0 3 0x14200 syncer update 8875 517472 0 0 3 0x14200 cleaner cleaner 61052 281906 0 0 3 0x14200 reaper reaper 16475 124620 0 0 3 0x14200 pgdaemon pagedaemon 31100 15859 0 0 3 0x14200 bored viomb 15585 442392 0 0 3 0x40014200 acpi0 acpi0 12577 376516 0 0 3 0x40014200 idle1 32111 77623 0 0 3 0x14200 bored softnet3 19452 112643 0 0 3 0x14200 bored softnet2 38055 42540 0 0 3 0x14200 bored softnet1 63203 143015 0 0 3 0x14200 bored softnet0 40566 452798 0 0 3 0x14200 bored systqmp 24604 241252 0 0 3 0x14200 bored systq 17822 233515 0 0 3 0x14200 tmoslp softclockmp 13479 522718 0 0 2 0x40014200 softclock 32797 487476 0 0 3 0x40014200 idle0 1 294866 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks CPU 1: exclusive mutex &sched_lock r = 0 (0xffffffff839ca2f8) #0 witness_lock+0x5bb #1 mtx_enter_try+0x178 #2 mtx_enter+0x60 #3 wakeup_n+0x54 #4 uvm_pmr_freepages+0x3fd #5 uvm_anfree_list+0x1e3 #6 amap_wiperange_chunk+0x1a8 #7 amap_pp_adjref+0x6f4 #8 amap_adjref_anons+0x22d #9 uvm_unmap_detach+0x8a #10 sys_munmap+0x32f #11 syscall+0xbc6 #12 Xsyscall+0x128 exclusive mutex &uvm.fpageqlock r = 0 (0xffffffff8398c408) #0 witness_lock+0x5bb #1 mtx_enter_try+0x178 #2 mtx_enter+0x60 #3 uvm_pmr_freepages+0x1a8 #4 uvm_anfree_list+0x1e3 #5 amap_wiperange_chunk+0x1a8 #6 amap_pp_adjref+0x6f4 #7 amap_adjref_anons+0x22d #8 uvm_unmap_detach+0x8a #9 sys_munmap+0x32f #10 syscall+0xbc6 #11 Xsyscall+0x128 Process 12491 (syz-executor) thread 0xffff80003c5a7c70 (153064) Process 12491 (syz-executor) thread 0xffff80003c5a67f0 (158875) ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10191 11031K 11301K 166960K 11627 0 pcb 17 14K 16K 166960K 158 0 rtable 190 6K 7K 166960K 372 0 pf 33 17K 22K 166960K 73 0 ifaddr 38 6K 7K 166960K 56 0 ifgroup 51 2K 2K 166960K 75 0 sysctl 2 1K 1K 166960K 2 0 counters 62 36K 37K 166960K 86 0 ioctlops 0 0K 4K 166960K 1530 0 iov 1 1K 16K 166960K 19 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1366 86K 86K 166960K 1699 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 9 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 41 0 dirhash 12 2K 2K 166960K 27 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 93K 166960K 537 0 sigio 0 0K 0K 166960K 4 0 proc 73 103K 140K 166960K 570 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 61 0 in_multi 87 6K 7K 166960K 111 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 61 281K 281K 166960K 61 0 exec 0 0K 1K 166960K 426 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 252 168K 185K 166960K 6399 0 UVM aobj 14 2K 4K 166960K 16 0 pinsyscall 43 86K 102K 166960K 1625 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 31 0 NDP 11 0K 2K 166960K 35 0 temp 76 8692K 8768K 166960K 12598 0 kqueue 14 22K 28K 166960K 86 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 66 0 63 1 0 1 1 0 8 0 rtentry 168 115 0 29 5 0 5 5 0 8 0 unpcb 144 369 0 346 6 0 6 6 0 8 5 syncache 336 5 0 5 2 1 1 1 0 8 1 tcpqe 32 1 0 1 1 0 1 1 0 8 1 tcpcb 808 291 0 285 8 0 8 8 0 8 7 arp 120 18 0 4 1 0 1 1 0 8 0 inpcb 376 680 0 669 22 13 9 22 0 8 7 nd6 136 25 0 3 1 0 1 1 0 8 0 pkpcb 40 2 0 2 1 1 0 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1168 9 0 9 1 0 1 1 0 8 1 pppxif 1480 1 0 1 1 1 0 1 0 8 0 pffrag 232 3 0 0 1 0 1 1 0 482 0 pffrnode 88 3 0 0 1 0 1 1 0 8 0 pffrent 40 3 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfanchor 1288 1 0 0 1 0 1 1 0 8 0 pftag 88 1 0 1 1 1 0 1 0 8 0 pfstitem 24 39 0 1 1 0 1 1 0 8 0 pfstkey 128 39 0 1 2 0 2 2 0 8 0 pfstate 376 39 0 1 4 0 4 4 0 8 0 pfrule 1344 24 0 19 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 491 0 95 29 0 29 29 0 8 1 art_table 32 492 0 95 4 0 4 4 0 8 0 art_node 16 113 0 36 1 0 1 1 0 8 0 sysvmsgpl 40 5 0 0 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 38 0 28 1 0 1 1 0 8 0 shmpl 112 13 0 2 1 0 1 1 0 8 0 dirhash 1024 27 0 10 3 0 3 3 0 8 0 dino2pl 256 2382 0 875 95 0 95 95 0 8 0 ffsino 280 2382 0 875 109 0 109 109 0 8 0 nchpl 144 3150 0 1454 64 0 64 64 0 8 0 rtmask 32 1 0 1 1 0 1 1 0 8 1 uvmvnodes 80 2624 0 0 54 0 54 54 0 8 0 vnodes 216 2624 0 0 146 0 146 146 0 8 0 namei 1024 10287 0 10287 2 1 1 2 0 8 1 percpumem 16 57 0 12 1 0 1 1 0 8 0 kstatmem 264 38 0 16 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 1 0 1 0 8 0 scxspl 216 9414 0 9414 3 2 1 2 1 8 1 plimitpl 152 76 0 59 1 0 1 1 0 8 0 sigapl 424 859 0 788 11 2 9 9 0 8 0 futexpl 64 6453 0 6449 1 0 1 1 0 8 0 knotepl 120 325 0 0 10 0 10 10 0 8 0 kqueuepl 216 219 0 207 5 0 5 5 0 8 4 pipepl 328 192 0 163 3 0 3 3 0 8 0 fdescpl 504 819 0 787 5 0 5 5 0 8 0 filepl 152 4691 0 4453 20 0 20 20 0 8 8 lockfpl 104 143 0 141 1 0 1 1 0 8 0 lockfspl 48 60 0 58 1 0 1 1 0 8 0 sessionpl 144 24 0 15 1 0 1 1 0 8 0 pgrppl 48 34 0 17 1 0 1 1 0 8 0 ucredpl 104 579 0 564 1 0 1 1 0 8 0 zombiepl 144 791 0 788 1 0 1 1 0 8 0 processpl 1176 859 0 788 6 0 6 6 0 8 0 procpl 656 1545 0 1464 9 1 8 8 0 8 0 srpgc 96 2 0 2 1 0 1 1 0 8 1 sosppl 168 13 0 11 1 0 1 1 0 8 0 sockpl 688 1154 0 1117 25 14 11 22 0 8 7 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 128 0 0 16 0 16 16 0 8 0 mcl2k 2048 22 0 0 3 0 3 3 0 8 0 mtagpl 96 8 0 0 1 0 1 1 0 8 0 mbufpl 256 315 0 0 20 0 20 20 0 8 0 bufpl 280 2961 0 129 203 0 203 203 0 8 0 anonpl 24 108017 0 104399 46 0 46 46 0 184 21 amapchunkpl 152 19736 0 19205 27 1 26 27 0 158 5 amappl16 200 1413 0 1369 16 5 11 15 0 8 8 amappl15 192 2 0 2 1 1 0 1 0 8 0 amappl14 184 113 0 101 1 0 1 1 0 8 0 amappl13 176 2 0 2 1 1 0 1 0 8 0 amappl12 168 1489 0 1457 3 1 2 2 0 8 0 amappl11 160 129 0 115 1 0 1 1 0 8 0 amappl10 152 6 0 6 1 1 0 1 0 8 0 amappl9 144 261 0 261 1 1 0 1 0 8 0 amappl8 136 23 0 20 1 0 1 1 0 8 0 amappl7 128 149 0 137 1 0 1 1 0 8 0 amappl6 120 172 0 169 1 0 1 1 0 8 0 amappl5 112 179 0 168 1 0 1 1 0 8 0 amappl4 104 314 0 295 1 0 1 1 0 8 0 amappl3 96 3944 0 3821 4 0 4 4 0 8 0 amappl2 88 637 0 576 2 0 2 2 0 8 0 amappl1 80 10284 0 9678 16 1 15 15 0 8 0 amappl 88 5648 0 5471 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 40 0 40 2 1 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 15 0 2 1 0 1 1 0 8 0 uaddrrnd 24 819 0 787 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 819 0 787 1 0 1 1 0 8 0 vmmpekpl 168 8267 0 8229 2 0 2 2 0 8 0 vmmpepl 168 56367 0 54317 100 1 99 99 0 357 6 vmsppl 456 818 0 787 5 0 5 5 0 8 1 rwobjpl 64 18884 0 15285 59 0 59 59 0 8 0 pdppl 4096 1645 0 1574 97 24 73 85 0 8 2 pvpl 32 14859 0 0 122 2 120 121 0 265 0 pmappl 248 818 0 787 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 288 0 29 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff8385aff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c db_elf_sym_search(ffffffff81341d00,0,ffff800038ccbd80) at db_elf_sym_search+0xbf db_search_symbol(ffffffff81341d00,0,ffff800038ccbdf0) at db_search_symbol+0x52 db_stack_trace_print(ffff800038ccbec0,1,100,ffffffff83384624,ffffffff81342320) at db_stack_trace_print+0x2fe db_stack_dump() at db_stack_dump+0xa5 panic(ffffffff8341f3cd) at panic+0x1d0 uvm_fault_unwire_locked(fffffd806bc853b0,2000002f0000,200000300000) at uvm_fault_unwire_locked+0x4ed uvm_fault_wire(fffffd806bc853b0,2000002f0000,200000301000,1) at uvm_fault_wire+0x12d uvm_vslock_device(ffff80003c5a7c70,2000002f04c0,10000,1,ffff800038ccc180) at uvm_vslock_device+0x112 physio(ffffffff821cc7c0,d02,0,ffffffff821cd020,ffff800038ccc448) at physio+0x277 spec_write(ffff800038ccc2a0) at spec_write+0x120 end trace frame: 0xffff800038ccc310, count: 0 ddb{0}> trace x86_ipi_db(ffffffff8385aff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c db_elf_sym_search(ffffffff81341d00,0,ffff800038ccbd80) at db_elf_sym_search+0xbf db_search_symbol(ffffffff81341d00,0,ffff800038ccbdf0) at db_search_symbol+0x52 db_stack_trace_print(ffff800038ccbec0,1,100,ffffffff83384624,ffffffff81342320) at db_stack_trace_print+0x2fe db_stack_dump() at db_stack_dump+0xa5 panic(ffffffff8341f3cd) at panic+0x1d0 uvm_fault_unwire_locked(fffffd806bc853b0,2000002f0000,200000300000) at uvm_fault_unwire_locked+0x4ed uvm_fault_wire(fffffd806bc853b0,2000002f0000,200000301000,1) at uvm_fault_wire+0x12d uvm_vslock_device(ffff80003c5a7c70,2000002f04c0,10000,1,ffff800038ccc180) at uvm_vslock_device+0x112 physio(ffffffff821cc7c0,d02,0,ffffffff821cd020,ffff800038ccc448) at physio+0x277 spec_write(ffff800038ccc2a0) at spec_write+0x120 VOP_WRITE(fffffd806bc3c958,ffff800038ccc448,5,fffffd807f7d3340) at VOP_WRITE+0x102 vn_write(fffffd805fb19d10,ffff800038ccc448,0) at vn_write+0x1d4 dofilewritev(ffff80003c5a7c70,7,ffff800038ccc448,0,ffff800038ccc500) at dofilewritev+0x23c sys_write(ffff80003c5a7c70,ffff800038ccc5b0,ffff800038ccc500) at sys_write+0xa2 syscall(ffff800038ccc5b0) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xae437746a50, count: -20 ddb{0}> machine ddbcpu 1 Stopped at savectx+0xae: movl $0,%gs:0x680 savectx() at savectx+0xae end of kernel end trace frame: 0xae4942d9b50, count: 14 ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0xae4942d9b50, count: -1