last executing test programs: 6.186620475s ago: executing program 5 (id=10025): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x87, 0x1, 0xa, 0x80000004}, {0x7, 0xfd, 0x3}, {0x6, 0x1, 0x8, 0x4}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f0000000280)="0004c0840000ddce7500000000a8985d9a5554d3", &(0x7f0000000000)=0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00e0300eaaf808004500001cfffd000000019078ffffffffe00000010000907800640002e7851bf763b7f33035bd8828257da338a2791346306bd616f0c4649db53392e0896c3d28100491c7e8489637cea9cbc563b93c4eccd36c0251f5616d17bb59198aa1ed663bd31778d397a2020a54037e588b08237fdb67135d5672499733b2a0a4b1"]) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) minherit(&(0x7f00007c1000/0x1000)=nil, 0x1000, 0x2) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4, &(0x7f0000000080), 0x0, 0x0, 0x0) 6.021954628s ago: executing program 0 (id=10026): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000940)="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", 0x1ad}], 0x1) ioctl$SPKRTUNE(r0, 0x20005302, &(0x7f0000000180)={0x4, 0x8b49}) unveil(0x0, &(0x7f0000000140)='r\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816a00180630fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e234e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200bd9178000101000000"]) unlink(&(0x7f0000000100)='./file0\x00') link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000940)="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", 0x1ad}], 0x1) (async) ioctl$SPKRTUNE(r0, 0x20005302, &(0x7f0000000180)={0x4, 0x8b49}) (async) unveil(0x0, &(0x7f0000000140)='r\x00') (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) (async) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816a00180630fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e234e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200bd9178000101000000"]) (async) unlink(&(0x7f0000000100)='./file0\x00') (async) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) 6.020879679s ago: executing program 5 (id=10027): mknod(&(0x7f0000000080)='./file0\x00', 0x2950, 0x13d4) ktrace(&(0x7f0000000100)='./file0\x00', 0x1, 0x1212, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000480)="b1b9408fa454c367fedbd4de91ac370c15257424f0cc7278604865783c5ce233d758711f97a978197eaa6c78e322b26eb7107e0f534bc5cb398167c4b1fe394a11e297024df5347272f24378963af800a543425e48d3b9a4b0992d6fb4e97ac9d09494041eb96b037424aa3e00000000001988", &(0x7f0000000080)=0x73, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) getsockopt(r1, 0x3a, 0x8, 0x0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) fchdir(r0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x5012, 0xffffffffffffffff, 0x4) r2 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlinkat(r2, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) setrlimit(0x5, &(0x7f0000000000)={0x40, 0x100000001}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() ioctl$FIOASYNC(r3, 0x80047470, &(0x7f0000000140)=0x2) r5 = socket(0x18, 0x3, 0x1) getsockopt(r5, 0x0, 0x64, 0x0, 0x0) mprotect(&(0x7f000045b000/0x1000)=nil, 0x1000, 0x5) ioctl$TIOCSTOP(r4, 0x2000746f) read(r3, &(0x7f0000000200)=""/162, 0xa2) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) 6.016923829s ago: executing program 0 (id=10030): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x2b, 0x1001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x6a, 0x0) (async) sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x6a, 0x0) close(r1) (async) close(r1) r2 = kqueue() kevent(r2, 0x0, 0x45, 0x0, 0x500, 0xffffffffffffffff) fchflags(r0, 0x0) unveil(0x0, &(0x7f00000000c0)='r\x00') 5.92539205s ago: executing program 0 (id=10032): r0 = shmget(0x3, 0x3000, 0x502, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$WSMOUSEIO_GTYPE(r1, 0x40045720, &(0x7f0000000040)) bind(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x0}, 0xc) ioctl$WSMOUSEIO_GTYPE(r1, 0x40045720, &(0x7f00000000c0)) r2 = syz_open_pts() ioctl$TIOCSETVERAUTH(r2, 0x8004741c, &(0x7f0000000100)=0x40) r3 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$DIOCMAP(r3, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', r1, 0x1}) syz_emit_ethernet(0x24, &(0x7f0000000200)={@remote, @local, [], {@generic={0x3c08, "a3a5c105376436b1197bf563ee60dfcb8bfa8907726b"}}}) r4 = geteuid() getgroups(0x5, &(0x7f0000000280)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) lchown(&(0x7f0000000240)='./file0\x00', r4, r6) r7 = accept$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, ""/23}, &(0x7f0000000300)=0x19) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) sysctl$kern(&(0x7f00000003c0)={0x0}, 0x0, &(0x7f0000000400)="956ea3e95726bb79eb651ddbc8e4131095df234391b4ef7f0f2a22af7c12971e4a6d4d02bf206d2a66b644e75e8f9e81622a4b03f0485bfc2f5af430c1741d8bb022", &(0x7f0000000480)=0x42, &(0x7f00000004c0)="099ba43e4a869bd52de62b607de94e855f365a5a566ac75ab85e1d2126729ffc64224b279852a8fa5e1f89155656857731d1e19c38f0a49fdfd5cab34ffc0f1d521c4e67bc2ecee71b80e33295249736c8d65d6692785013f81fe0dcac51c606048d7cc6513fcaeae82c1758923030653a1ddbff14626a8d93e198c03ca55a53a0ea34b96f61619a728d5de1fdf2d85e635593be9326aa2a024af93353bc8b8cb78351a9008823c2d7", 0xa9) r9 = syz_open_pts() ioctl$TIOCSWINSZ(r9, 0x80087467, &(0x7f0000000580)={0x0, 0xfff9, 0x80, 0x1}) r10 = openat$bpf(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) writev(r9, &(0x7f00000008c0)=[{&(0x7f0000000600)="3b3992735a34889c2e1c5f01fc3cb8a6da39a80924581b99038e24846e393ba5859085737f2852c9026a52e59ef8bfac6fb2728e0c36f27cf5230872b22340e786e98e556833c649ff554221787aa2e9edcdfb345e2d2eee6b4f68cede45a4d343481e50dbad7646e4967bc0eab2dafdcf3892451c0ba23dea21211d8ee2962860f8321164caf76a9b2790727d7e80245ba04cc72179dcd8db178b0f3f82a13aed9a624851dd3a66c9db9ba3754e41fe3e280c4487c984e7ec893003a2022a3d94156e0eb4f6150b09ced5f3bc5a2e", 0xcf}, {&(0x7f0000000700)="3bd947b40e102c7e4825aea526bc9ee6cbf31cea511ca19b720c82bcc9c139e60dc94c16f32a24a81c6c8d7435393aaaf2f46a8da372cd733976a382a04fedd75140e0a2d720ab3066e8235f2b40dec601168dd2f8fa44a1d600604acbd35f3162ab262439cf0c97d9f6cff51e7a265a178f69d41a058c8b032cb544d830679614b004e4455d674ac28f24379a10135484401bbdbdcd6fce79b4d2cf8d00cf72a2", 0xa1}, {&(0x7f00000007c0)="2193d195b8a862ee5ce4987376ddccb8e1cf2416819f07dc68f65eba53897c2c25afc8b848b6e51c7be546a6c7e51ac9743af8642ce166c5fad20ccf379b39f67d193c938feba0856b931a8d8fc87256b0a067cfbcc5273938f313f27b0187040a0e2beaab82458260328552688c18119ef73d44d7da56de0b61d979e6df558678e4fe395baeb2dd0f6aac6da07c2baeb066b882891a5e66d2998fce", 0x9c}, {&(0x7f0000000880)="15b8a5bcc6a68c322f0f58d23f8151c80465ae79212b628a51b9d4", 0x1b}], 0x4) openat$tty(0xffffffffffffff9c, &(0x7f0000000900), 0x400, 0x0) fchown(r7, r8, r5) fchdir(r10) sysctl$kern(&(0x7f0000000940)={0x1, 0x33}, 0x2, &(0x7f0000000980)="de7549bc5ea9983756c15c9353e8ed0d74139155e5213bd36624fe247a57a0229bcb960a018213be34d7f32c8834c347c4eee0ec10bbbc427525040adac030870569b242db261349b7df8a60330b260b993d1b2a1f1348af3c62b0b854799e7b823bcbadd3acd414939ac189ed4aa8be6198eb4604dfcc7e6ea635bb5d2800c6a6bcd2d1198906f5ea7a0ec854175df719f8fc3bc237bd90ed42bf9adcd1fdf3dc4e92b8b12745af959cefe8852b1c89a367affddc1d7c3021c27391ba62e76027e5f90d18c805d714912cc147d908b10d58bb5428fce34ad6700f65d2", &(0x7f0000000a80)=0xdd, &(0x7f0000000ac0)="35a20993e2fa75432b583d2e42a9123dc3e4550065df6cc5240554bc81a8a08401ebba3aea11bcad2da4e1af6f1ef71dbc3b4bd2ec7b91319a623293b433b8e0d344f3010b4674a272bbd71a4a4cbf9cc125ae9a6b572dc4c162f7593d799b", 0x5f) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) r11 = openat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x8, 0x0) ioctl$FIONBIO(r11, 0x8004667e, &(0x7f0000000b80)=0x1) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 5.423221936s ago: executing program 6 (id=10057): open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941) setreuid(0x0, 0xee01) (async) r0 = socket(0x18, 0x1, 0x0) close(r0) (async) socket(0x24, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x29, 0x6c, 0x0, 0x0) (async) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0x69, 0x0, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() close(r1) syz_open_pts() (async) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) readv(r1, &(0x7f0000000780)=[{&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/4097, 0x1001}], 0x2) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='c', 0x1) (async) r2 = msgget$private(0x0, 0xc00) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/190) (async) setsockopt(r0, 0x6, 0x42, &(0x7f00000001c0)="c11c2aea", 0x4) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 5.421300242s ago: executing program 6 (id=10059): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000000)='r\x00') unveil(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000000c0)='c\x00') madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5) open(&(0x7f0000000000)='./file0\x00', 0x80, 0x100) 5.41356018s ago: executing program 6 (id=10061): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = socket$inet(0x2, 0x1, 0x0) poll(&(0x7f0000000240)=[{r1, 0x40}], 0x1, 0xffffffff) unveil(0x0, &(0x7f00000000c0)='x\x00') r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x154) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)='#!', 0x2}, {&(0x7f00000002c0)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c9593ac89e994b85a05915eaffac51de05a87b8b893e09010000d886eafbe03881d25b7b59f701322b3a109a13436e486b0a6e", 0x61}], 0x2) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) mmap(&(0x7f00000aa000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x0) ioctl$VMM_IOC_INTR(r3, 0xc0285602, &(0x7f0000000040)={0x1, 0x0, 0x1}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000740)="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", 0x183) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x6c, 0xfd, 0x1}, {0x1, 0x9, 0x7, 0x4}, {0x6, 0xd0, 0x7, 0x6}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) ioctl$WSDISPLAYIO_ADDSCREEN(0xffffffffffffff9c, 0x80245753, &(0x7f0000000100)={0xfdde957, './bus\x00', './bus\x00'}) open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$KDDISABIO(r2, 0x20004b3d) 5.311089603s ago: executing program 6 (id=10064): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7, 0x2, 0x1, 0xfffffffa}, {0x3c, 0x9, 0x3, 0x4}, {0x1006, 0x8, 0x4, 0x1}]}) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) 5.258658238s ago: executing program 6 (id=10066): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xe, &(0x7f0000000040), 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x6b) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x4, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0xfffffffd, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f4, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) recvmmsg(r1, &(0x7f0000000440)={&(0x7f0000000400)={&(0x7f0000000240)=@in6, 0xc, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/11, 0xb}], 0x1, &(0x7f0000000340)=""/144, 0x90}, 0x2}, 0x10, 0x40, &(0x7f0000000480)={0xfffffffffffffff6, 0x80000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x4}, 0x0) sendmmsg(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x3}, 0x10, 0x0) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r3 = syz_open_pts() ioctl$TIOCSTAT(r3, 0x20007465, 0x0) ioctl$TIOCDRAIN(r3, 0x2000745e) unveil(0x0, &(0x7f0000000000)='x\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0xfe, 0x2}, {0x0, 0x0, 0x40, 0x9}, {0x2, 0x0, 0x0, 0x85}]}) r4 = socket$inet(0x2, 0x0, 0x25) fcntl$setflags(r4, 0x2, 0x0) execve(0x0, &(0x7f00000001c0)=[&(0x7f00000000c0)='/dev/speaker\x00'], 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffe53) 5.253349403s ago: executing program 5 (id=10068): setuid(0xee01) openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x6a8, 0x0) r0 = syz_open_pts() ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000000)=0x5) 5.19628147s ago: executing program 5 (id=10073): r0 = syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, 0x0) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x9) (async, rerun: 64) close(r0) (async, rerun: 64) execve(0x0, 0x0, 0x0) (rerun: 64) ioctl$TIOCDRAIN(r0, 0x2000745e) 4.942835232s ago: executing program 3 (id=10083): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x2d, 0x0, 0x8}, {0x50, 0xf, 0xff, 0x7}, {0x6, 0x80, 0x8}]}) sysctl$hw(0x0, 0x0, &(0x7f0000000280)="00041b000f3e8095043fa8985d012c000001003d0817c53fcb7c7d40b5bf66108039750000007ab791f608f7b2", &(0x7f0000000000)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000440)="2e06b5a54fdc15d0e5ba5cd619e395d842161263a5bcf8d360b109113dd229c0dd47d6ff4f038bc8f40206bf8a1ef55ba04d8d4e4174e29e744d8606170795a2edaf3456112807f6d55fd9c3815257c10e07e8f0be3a7366f8123a42cb43f4302bf6b149e9b9bab6116b11b8ae693250f7fa8080cd8a2fc7c7e4ebf5c106c80fd386c7786c0421183de7b10dbde8040d96f51522423ca8e0f70989e1530cd2eaf7faaad41584384bf407ed7bed944e099fd18b59c86af22bb45fe92b05087191e530bc83a9e0975fc2a0f5988e9ae663b4fe25f69d661eb4ad0842a7be35dbe21e8911da844c7dce8d80f66713e13d96b30d5b4a13fb15282cf2a61a24880049b94a6e46bce752ff3230cd36789c42b37db904fd77060a84ca071839da23ef66bb45a18c9face3b3982d2edef1234405ec89e3ac812208780a2866cf52a8bbbe80b77e07f53d751ea0da7185414c403df8282d22a45b8a5ee7dc9b534106d98bb65aea3af32dea9a7a9881e7fdfbb46801408f1b94018abf7d5816d4e0344ab9dd8a6d43a2503180582f6d553e1a81fe4e8d68fafcd095560e83feda2fcd68d73fc71d7ff20511859f1b895d1a3f42970f1fb4dd61487901de9d5efcb92d63466e92bbe485aaf63988e255cbb607ac7ff9ee30732dd2482be6280b8946e32cf0ec48fc7c89e53c4aecb4af7af69e0dc04dd17405ce02898adf547f851e885964f836ec6b04d77f14d85025e415a01553d6b7e5dd946be3ea735515a624f74e2c09b863881e4412135ecbdd1f1ec73762d2b1bcb0f04f0bd1369f9c374d73fb9cc7465bbdb5e77078870423340ea32c9f49980888427f49eb9d4daf99a87d6d6e44aecd7dfeba2c6f1844b2b537d6de1ba1c8bd90f7ec014b4c84a9bfba26bb92b0d740de1e20c97ec18417a1f3d68fea076ad9aeb884efa6cedf35845dd4bc6eae82e37a2304c76ab6e7467f2d868e76df28b7dbba656b0998da5d54a00e706e8dc0699e961bfe8b6cef550c66eb7e5a40ef12896fb571be1d73d817d17e177f06c0679c784feb85129836c8724bf0c3e6026a3eb831c5335475950287c988059987f9198a074e7d92cdcf6c196d91f9368490b5d5f7033374c27b2aed8732fb84933a8fbe2bcaa68b68eea3400b5b022a2fae01ef3df9bf1ba0739b54faaa56ebe38c40fc6d1d99522c07af188a", 0x34e}], 0x1) ioctl$TIOCSETA(r1, 0xc0504417, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x400003, "000000000000000000000000d89ba2dd00", 0x11, 0x10008}) open(&(0x7f00000000c0)='./file0\x00', 0x20, 0xe0) mquery(&(0x7f0000509000/0x2000)=nil, 0x2000, 0x4, 0x0, r1, 0x800) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) r2 = socket(0x18, 0x2, 0x0) mprotect(&(0x7f000075d000/0x2000)=nil, 0x2000, 0x0) setsockopt(r2, 0x1000000029, 0x4, &(0x7f0000000140)="6744d6e1", 0x4) 4.941450084s ago: executing program 3 (id=10084): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318) r0 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x104) utimensat(r0, &(0x7f0000000100)='./bus\x00', &(0x7f00000000c0)={{0x4, 0x6}, {0x7, 0xe9c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETA(r1, 0x20004101, 0x0) open$dir(&(0x7f0000000000)='./bus\x00', 0x80, 0x1c0) 4.845674028s ago: executing program 3 (id=10085): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x25, 0x9, 0x2}]}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x25, 0x9, 0x2}]}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x7}) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x7}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) socket(0x18, 0x2, 0x0) (async) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x3f, &(0x7f0000000040)="00fb534f", 0x4) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r0, 0x0, 0x0) (async) write(r0, 0x0, 0x0) sysctl$kern(&(0x7f0000000980)={0x1, 0x16}, 0x2, &(0x7f0000000e40)="6c5046c7d66676c7bc7852289e504b4214db8c539e59ca7969d1ee7d2d97312cc2c8b30c273006f43130336fb0fefb0d95c042f876ccb9cb9b15885cb7f528b185fdeaffcde947a60461c0d007085a33301307834b51cc5b2040d604ab5b9e6151cb6cc2fde110e302550dab02adfe22d03acbf98a6d27248bc8665099d2bbaa7ae0442c413237152ceafa2331397065cd6e568b5342c563b9c7a31252fb518fd1e7e87f1f660ce20fbc635cbae96c599bb6657e248e303747dd53bcecf6a9a1ba60e6457dbe8eca321b2be30d262b144f3d94e9", &(0x7f00000009c0)=0xd4, &(0x7f0000000f40)="3e8067e6be72f688ee4052bbee908a3ce5a076b7ccd028d433f209a80ee657b3119700897755d5e184d38f602ca8604b7921fa1b900770bd6a57c30035c1685e58d1a6ea85edaf54c386abf60270b9533dbac3858600526c5e468cc87804017733748beda22a47611b569d783e0d9c884381c409f0257754b97ec872931774e309214fddab5f4a58785b655f4b903f5d33a6e71eb5d8f40cf107ca682e051b688d408dacec6c335edd684a388b715c37976a5a57d4801c375ae1d79410c158e0ffc6246c0f78f467fe030ba47679e7113a09c344130594ade0cf", 0xda) 4.845155013s ago: executing program 3 (id=10086): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)=""/254, 0xfe}], 0x2, 0x0}, 0xffffffff}, 0x10, 0xc3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x6a, 0x0) ioctl$TIOCMBIS(r0, 0x8004746c, &(0x7f0000000000)=0x25) sysctl$kern(&(0x7f00000000c0)={0x1, 0x53}, 0x2, &(0x7f0000000240)="71f90200000000000000af6fb1fa62498e5f84cf71b59c7afec37082", 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) 4.841491922s ago: executing program 3 (id=10087): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0xd, 0x0, 0xffff2cc6}, {0x3, 0xf, 0xff, 0x7}, {0x6, 0x80, 0x8}]}) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2040, 0x0) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f00000000c0)=0x80) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r3 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfa) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_INTR(r4, 0xc0285602, &(0x7f0000000040)={0x1, 0x0, 0x1}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x13, 0x2000007, 0xfd6, 0x8, 0x80000001, 0x17ffe, 0x10, [{0x0, 0x3, 0x0, 0xa24}, {0xc5c, 0xb, 0x8, 0xfffffff9}, {0x800008, 0x20f05, 0x200, 0x9}, {0x7ffffffe, 0x800, 0x3, 0x1}, {0x3fe, 0x7ff, 0x1002802, 0x4d8a}, {0x3, 0x2, 0x3, 0xb4}, {0x8000008, 0x6, 0x81ec, 0x2d}, {0x2, 0x836, 0x1a, 0x6}, {0x2, 0x87d, 0x5, 0x9}, {0x1000004, 0x90, 0xd1b, 0x88}, {0x1c5, 0x5, 0x4, 0x412c8391}, {0x3, 0x6, 0x20004, 0x4000000c}, {0xb8d, 0x4, 0x8, 0x2}, {0x29a71720, 0xffffdffa, 0x1, 0x6}, {0x2, 0x7, 0xfffffff9, 0x100}, {0x0, 0x8, 0x1002, 0xd}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) close(r1) 4.8411453s ago: executing program 3 (id=10088): select(0x40, &(0x7f0000000180)={0x1, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x100008, 0x7}, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x3b, &(0x7f000045f000/0x3000)=nil) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x9, 0x0, 0x0) r2 = syz_open_pts() ioctl$TIOCSETD(r2, 0x8004741b, 0x0) r3 = shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x2000) syz_open_pts() syz_open_pts() getdents(0xffffffffffffffff, 0x0, 0x0) shmdt(r3) rename(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='./file0/file0\x00') mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r4 = kqueue() mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xb, 0x54}) r5 = syz_open_pts() close(r5) syz_open_pts() writev(r5, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) r6 = kqueue() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f00000003c0)={0x8, 0x9, 0xe9, 0x1, "14f7484803ecd9ba7e7f97555edbdc06c29b7791", 0xfff, 0x8}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffefc, 0xfffffffe, {[0xfffffffffffffffd, 0x10000000004ef, 0x5, 0x100000000, 0x0, 0x80000000, 0x400, 0x0, 0x0, 0x2f01, 0x2, 0x3, 0xfffffffffffffffe, 0x1, 0x3, 0x4, 0xfffffffffffffff7, 0x800100], [0x5, 0x5, 0xfffffffffffffff8, 0x3, 0xfffffffffffffffd, 0x80000000, 0x6, 0x0, 0x0, 0x47], [0x8, 0x2, 0xa64, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x6, 0x3}, {0x2, 0x9d1, 0xfffffffe, 0xffc}, {0x1009, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0xfffffffe, 0xd, 0x1}, {0x7ffe, 0xd, 0x40007, 0x1}, {0xfffe, 0xfffffffc, 0x7}, {0x0, 0x95b, 0x200, 0xffff}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x4, 0x2}}}) kevent(r6, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) r7 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) ioctl$BIOCSRTIMEOUT(r7, 0x8010426d, &(0x7f0000000080)={0x100, 0x6}) 1.072704941s ago: executing program 1 (id=10153): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x32, &(0x7f00000000c0)="b211", 0x2) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 1.056246052s ago: executing program 1 (id=10155): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f000000f000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ftruncate(r1, 0x8531) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000784000/0x1000)=nil, 0x1000) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000000)=0x2) 934.639794ms ago: executing program 1 (id=10156): r0 = socket(0x2, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) (async) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) (async) semctl$GETALL(0x0, 0x0, 0x6, 0x0) (async) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) (async) write(r1, 0x0, 0x0) (async) setuid(0xee01) (async) r2 = dup(r0) setsockopt$inet_opts(r2, 0x0, 0x14, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) 915.621668ms ago: executing program 1 (id=10159): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x3}, 0x10, 0x0) 914.68683ms ago: executing program 0 (id=10160): execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r0 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x2, 0x1, 0x34, 0x64, 0x3, 0x6, 0x9d, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0xb, 0x1e, [@local={0xac, 0x14, 0x0}, @loopback]}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x8, 0x3fc, 0x4, 0x9}}}}}) (async) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) r2 = socket(0x2, 0x2, 0x0) (async) syz_emit_ethernet(0x8a, &(0x7f0000000300)={@local, @random="5fbb8af09d7c", [], {@ipv6={0x86dd, {0x6, 0x6, "00ed00", 0x54, 0x33, 0x8, @local={0xfe, 0x80, '\x00', 0x0}, @rand_addr='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', {[@hopopts={0x6, 0x1, '\x00', [@jumbo, @padn={0x1, 0x1, [0x0]}]}, @hopopts={0x64, 0x4, '\x00', [@ra={0x5, 0x2, 0xffc0}, @padn, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn, @generic={0xf6, 0x2, '\x00\x00'}]}], @tcp={{0x2, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x4, 0x0, 0x4}}}}}}}) ioctl$FIONREAD(r2, 0x80206919, &(0x7f00000001c0)) (async) socket(0x2, 0x3, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) socket(0x18, 0x2, 0x0) (async) r3 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) r4 = socket(0x18, 0x3, 0x4) (async) setitimer(0x1, &(0x7f0000000140)={{0x8001, 0x10080000000000a}, {0x1ff, 0xfffffffffffffffe}}, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc444443a, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x0, 0xa4, 0x1, 0xfff}, {0x54, 0xf, 0xff, 0x7}, {0x406, 0x1, 0x8b, 0x4000}]}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100)) 868.30285ms ago: executing program 1 (id=10162): syz_emit_ethernet(0xe4f, &(0x7f00000004c0)=ANY=[@ANYBLOB="e95d373d56e10000000000006002957c48ee5defbc09b0f07b9624b276467f6a0a59f5a00a9398c4b5401065026d2fb9660d8282655aa29f97cad0e81d6e7a1bab020de435e66e68a99b5b5b74f7c1944d7a9dba1540d53472e1535bfa48fbf6a9452fd6e27b642a8dc2add4dc2d8814f721541e9949f31138236045d1aa0760f157ea5fa8be68ccc9da1e1a27bb568031b000112eb2d76aa5ebf8348530d49fd26b344c2b62425e79772125740746a7be1c8d90312f8d673b697b62dc5903c00df91b9935ba57be3c4c016016d9c3bb5422cdf583d05e72b2286f16c5cdf9a94926744e8ff603890db26afce5d0a13fa8a6ef1a8cf2660897518f2f4ea9093ad1a010e2370550b0dad1d84826e7259c73428990fdbff235f5819582e7fab89ea7ae551e23504d3a17a0793309441968fa93f43abca8cb709706fafd3c121c4f5e90002a494a6b3d214b1c101f1297e5152454c8b7ba024f0a7323312540eafc956a57418bc3fd70cd221b1e8b1b62a75a31dc466f54d8a821fe743ee6825a2cee4fbfc6e3e6d21641398db35749afded42cb78acee989b55ea2098e7217fe1aa57a4ca48923745a7ad318130435767370e89e4e2c48658e1a30aa3178a475402de7e381c598fdf069e490ac20d01f3d58d01ac3e98bd47f07847dde27732127f418b7a02f6a8f200bddf0d3d246ec8c9cd8c6ed19a2ca59cafd9b59eedd9ee3eb39dbf020605b7657ef8566981524cc67010d909592d56ca69f3d2f3ed943a846393276cefc39c317004386654f497294ff74333c7d17d2bfa7b1a55ff2a150a65074f5aec36393bda8acbd075b1651f039798818f3b03c92e8bdc993715a8eb79bd7e203821385e11f4a3aa5babc33eaf359144b3bb37807f1d592640b866c004fd2e7d907188de9326477ac163cc03a70d2242086866ae01221aa21d2645be0e210ec713c513251b9fe7d8633ab4c94433562e45f57e63bce2e135c002b1fb8a0be80c99172f351c804865e01"]) (async) sendmsg(0xffffffffffffff9c, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES64], 0x410}, 0x0) (async, rerun: 64) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10180, 0x0) (rerun: 64) semget$private(0x0, 0x2, 0x400) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x13, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x8001}) 863.533088ms ago: executing program 4 (id=10165): openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) openat$vnd(0xffffffffffffff9c, 0x0, 0x351cbc07158fde13, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r0 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0xa, 0x5, 0x100000000, 0x0, 0x80008000, 0x8000002e, 0x1, 0xffffffff, 0x2f01, 0x2, 0x3, 0xfffffffffffffbfa, 0x2, 0x80000001, 0x4, 0xfffffffffffffff5, 0x100], [0x5, 0x5, 0xfffffffbfffffff8, 0x0, 0x1, 0x80000000, 0x800ee4, 0xfffffffffffff800, 0x0, 0x800000047], [0x8, 0x3, 0xb6, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x1ffffffffff, 0x0, 0x7b1, 0xfffffffffffffffe], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0xfffffffd, 0xfffffffd, 0xffc}, {0x1008, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x5, 0xd, 0x40}, {0x7ffe, 0x4002000, 0x40003, 0x1}, {0x6, 0x1, 0x7}, {0x0, 0x95b, 0x200, 0xc}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x1, 0x2}}}) kevent(r0, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) close(r0) r1 = socket(0x20, 0x1, 0x0) listen(r1, 0x1) select(0x40, &(0x7f0000000000)={0x7c, 0x0, 0x0, 0x4, 0x0, 0x98, 0x7b}, 0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) 854.962717ms ago: executing program 0 (id=10166): mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) kevent(0xffffffffffffffff, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r0 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x1b2) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x2) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x3, 0x2f) r2 = dup(r1) setsockopt$inet_opts(r2, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x2, 0x3, 0x0) r4 = dup(r2) dup2(r4, r3) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) setuid(0xffffffffffffffff) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='r\x00') connect$unix(r3, &(0x7f0000000000), 0x10) sendto$inet(r2, &(0x7f00000001c0)="5e1351d18b9da08c", 0x90, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x3) 732.49407ms ago: executing program 1 (id=10168): symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x20ad, 0x6, 0x2000007, 0x101, 0x80000001, 0x6, 0x80, 0x10, [{0x1000000, 0x7, 0x0, 0x71003}, {0xd8, 0x8, 0x8, 0xfffffff9}, {0x0, 0x8, 0x8, 0x8}, {0x8, 0x800, 0x3, 0xfffffffd}, {0xf, 0xf2b, 0x9, 0x6}, {0x40000002, 0x1, 0x8, 0x95}, {0x82ce1, 0x800, 0x9c29, 0x400006d}, {0x3, 0x803, 0x14, 0x6}, {0xffffffff, 0x82, 0x4, 0x400009}, {0x5, 0x7fffffff, 0xd1b, 0x88}, {0x1d0, 0x10001, 0x2c, 0x4}, {0x7fc, 0x9, 0x8, 0x80000000}, {0x81f, 0x4, 0x4, 0xffe}, {0x29a71713, 0xfffffffa, 0x6, 0x3}, {0xc, 0x9, 0x6}, {0x0, 0x3, 0x2}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x20ad, 0x6, 0x2000007, 0x101, 0x80000001, 0x6, 0x80, 0x10, [{0x1000000, 0x7, 0x0, 0x71003}, {0xd8, 0x8, 0x8, 0xfffffff9}, {0x0, 0x8, 0x8, 0x8}, {0x8, 0x800, 0x3, 0xfffffffd}, {0xf, 0xf2b, 0x9, 0x6}, {0x40000002, 0x1, 0x8, 0x95}, {0x82ce1, 0x800, 0x9c29, 0x400006d}, {0x3, 0x803, 0x14, 0x6}, {0xffffffff, 0x82, 0x4, 0x400009}, {0x5, 0x7fffffff, 0xd1b, 0x88}, {0x1d0, 0x10001, 0x2c, 0x4}, {0x7fc, 0x9, 0x8, 0x80000000}, {0x81f, 0x4, 0x4, 0xffe}, {0x29a71713, 0xfffffffa, 0x6, 0x3}, {0xc, 0x9, 0x6}, {0x0, 0x3, 0x2}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0}) fchmod(0xffffffffffffffff, 0xb1a7ae56ec08cc7d) r1 = socket(0x18, 0x3, 0x0) setsockopt(r1, 0x1000000029, 0x32, &(0x7f00000000c0)="b2", 0x1) r2 = socket(0x800000018, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff08ffffffffaaaaaaaaaabb86dd60006f3300383a008a211dd10001000000000000de74f8fffffffffffbff000000000000000000aa02009078000000006000004000003a01feaddbed3a00000000000000000000aa00000000000000000000ffff0f1ab5678f0f"]) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) setsockopt$sock_int(r2, 0xffff, 0x1021, &(0x7f0000000000)=0x5, 0x4) (async) setsockopt$sock_int(r2, 0xffff, 0x1021, &(0x7f0000000000)=0x5, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x8}) nanosleep(&(0x7f0000000240)={0x2, 0x6}, 0x0) syz_open_pts() (async) r3 = syz_open_pts() close(r3) (async) close(r3) syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000380)={0xf66c, 0x8, 0x9, 0x5fffff5f, "9cdc452e307e7f000000000000002f9e68cd3304", 0x400, 0x7ffff196}) writev(r3, &(0x7f0000000280)=[{&(0x7f00000009c0)="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", 0x346}, {&(0x7f0000000080)="62745bb93d02cc2c16fe000000000000000000b14035d8e3a13e849e2233b828055b3b62fdabc73cf646e9d5e7a7468142368dee938fd2405d9008fbe2f503313cd6be3cf5d85ca86352f1d107ccccc419fe5451bff30002860b27e59cd4f068e94b29471197d33b23c0088a556b59638c4a804719b0d4cde9814f84ab17d229aa5392e39393bbf779025fc33d12f6bd44e019bc387fe7e0", 0x98}], 0x2) (async) writev(r3, &(0x7f0000000280)=[{&(0x7f00000009c0)="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", 0x346}, {&(0x7f0000000080)="62745bb93d02cc2c16fe000000000000000000b14035d8e3a13e849e2233b828055b3b62fdabc73cf646e9d5e7a7468142368dee938fd2405d9008fbe2f503313cd6be3cf5d85ca86352f1d107ccccc419fe5451bff30002860b27e59cd4f068e94b29471197d33b23c0088a556b59638c4a804719b0d4cde9814f84ab17d229aa5392e39393bbf779025fc33d12f6bd44e019bc387fe7e0", 0x98}], 0x2) mknod(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20, 0xa) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x2, 0x40, 0x5, 0x9, "7cac0fdfc5a514a0ead1b98492a92cced84b3756", 0x2, 0xffff}) mknodat(r0, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x882) 678.500902ms ago: executing program 0 (id=10169): setsockopt(0xffffffffffffffff, 0x1000000029, 0x1a, &(0x7f0000000080)='\"', 0x1) mprotect(&(0x7f000004f000/0x3000)=nil, 0x3000, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) (async) r0 = socket(0x18, 0x1, 0x0) r1 = syz_open_pts() r2 = syz_open_pts() poll(&(0x7f00000001c0)=[{r1, 0x10}, {r1, 0x10}, {r1, 0x40}, {r2, 0x2}, {r1, 0x2}, {r1, 0x1}, {r1, 0x7}], 0x7, 0x4) (async) getsockopt(r0, 0x29, 0x31, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchdir(r3) setuid(0xee01) (async, rerun: 64) r4 = kqueue() (rerun: 64) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r5 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) (async) kevent(r4, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) (async) socket(0x2, 0x2, 0x0) (async) ioctl$FIONREAD(r2, 0x8020690c, &(0x7f0000000100)) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) r6 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r6, &(0x7f00000004c0)="b96abc05ad7cffa0a0a845315c0d853a14", 0x11) truncate(&(0x7f0000000080)='./file0\x00', 0x7ffffffffff) (async, rerun: 32) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, 0x0) (async, rerun: 32) fchown(r6, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000140), &(0x7f0000000040)=0x14) select(0x0, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x34}, 0x40000096, 0x0, &(0x7f00000000c0), 0x0, 0x0) 678.144252ms ago: executing program 4 (id=10170): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) pwrite(r0, &(0x7f0000000080)="015a", 0x2, 0xffffffff) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x7, 0x7, 0x6}, {0x2, 0x9, 0x5, 0x1}, {0x9e, 0x0, 0x1, 0x86}]}) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="7f37ce0700950c4ece919835853f1a016c542e646100003d965a1564287bafc1d6d531c28c", 0x25}], 0x1) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)="0b92cefda669b9dc7c193ca9cb5eb1fbd8e3288bfe63776c28680b1a8e227912afb14ef7b32c33d3a626269859a266cf3e6e43301dabaa70436d3db6df0c32d359fcc9c7f0055e51b2", 0x49}, {&(0x7f00000001c0)="c653ea73e909cd29c111c6d0d6eaca589f087166b2ea800cb5e1089e49e7d0f6b4dc82f7f0185b", 0x27}, {&(0x7f0000000200)="79b780a06321de404c7e6adcc9a95cfb8c1635a9dd423295e1df861fa53f62ced82244f8cbb6f0ae6c6c17907c7e01d175faccaf7f39bc", 0x37}, {&(0x7f0000000240)="0725741a9bd7cf9e8d5dfa6e1e3b67bd1eb5e49176fff9f9f48afbfa66f970f146e43c1aa3ea80b6b5b539713c8d9ec70842d00654104117a80a1b409f20d019d9a72bbec8cc87995a892dc6462144a0031722650d775d15634823cc5654addb5934c0c099d9ed2166d816b537554738ca7849d64bec7124f8709302b314499a", 0x80}, {&(0x7f00000003c0)="a35fa42171fc7d188b37c0af5b026fe45aebb8c199c7147c8c024bb9a8223b7cef85f8c6ebad41a1041e5def3a4a30a8c86ae97ab91b68943e55423fea1adef6c734097b6f415a00c87683a832fb35acc30f12fc3a89a7e0c4f22e4f2e95f10268ac52384a4241f920f00880d7b22039d52c75f8657830ec28a0af7479ff1298e8238040711e1f3406a2691de316f1f1bc55dac682c8563679ee0d783a752e8f36570b18ac57d138c0a933039b376e3fc83f124d0769d23600619806d67a031e2fbf4fe87cf2c74c6c0df80a7d58c58858985b39ffa173ed954e7003fdf5df39a41862f9a6", 0xe5}], 0x5, 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000002480)="00f6", &(0x7f0000000000)=0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[]) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) r3 = socket$inet6(0x18, 0x3, 0x2) getsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000001700), &(0x7f0000001740)=0x4) syz_emit_ethernet(0x138, &(0x7f0000000040)=ANY=[@ANYRES8=r3]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) fcntl$setown(r4, 0x6, 0x0) r5 = socket(0x2, 0x3, 0x1) connect$unix(r5, &(0x7f0000000000), 0x10) sendto(r5, &(0x7f0000000380)="98edc1cf9d242ff3", 0x8, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x22}, 0x4, 0x0, 0x0, &(0x7f00000004c0)="efc48d57568f6690b8fcd3e6df6d29af5c392f67d9a979274dafc5609434eded823c1be99064e2487135ec296195c53bf13923593fd54204e9eb6d62c959c71e73bba72ce156a32227832261ce55ee9c68d5a9f467dd229667f3596add53e7a13f65c96fba8340a7c65ebfd12401a82a5eb9f36e0aa3eabe0d69bf74db7b69e07f4afbe7f346cf4f42888c301216276380", 0x91) 676.229395ms ago: executing program 4 (id=10171): unveil(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='x\x00') r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x8, 0x61) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x44) unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') 674.351071ms ago: executing program 4 (id=10174): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0, 0x195) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x2, &(0x7f0000000100)="71f9", &(0x7f0000000080)=0x2, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYRES64]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket(0x2, 0x2, 0x0) close(r1) r2 = socket(0x2, 0x3, 0xfe) bind(r2, &(0x7f0000000000), 0x10) setrlimit(0x1, 0x0) syz_emit_ethernet(0x138, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r1, &(0x7f0000000000), 0x10) writev(r1, &(0x7f0000000100)=[{0x0}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x97) pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0xc0) setreuid(0x0, 0xee01) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400001803c1, 0x0) r5 = kqueue() kevent(r5, &(0x7f0000000040)=[{{r4}, 0xffffffffffffffff, 0x4d, 0x40, 0x7, 0xff}], 0x139, 0x0, 0xffffffff, 0x0) r6 = getpid() fcntl$setown(r3, 0x6, r6) setuid(0xee01) close(r3) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file2/file0/file0\x00', 0x96) ioctl$WSDISPLAYIO_GETSCREEN(r0, 0xc0245755, &(0x7f0000000000)={0x6, './file0/file1\x00', './file0/file2\x00'}) unveil(&(0x7f0000000080)='./file2/file0/file0\x00', &(0x7f00000000c0)='r\x00') 594.208578ms ago: executing program 4 (id=10176): mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) r0 = getppid() ktrace(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8, r0) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) r2 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r2) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x7fff}, {0x7, 0x4}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r1, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1008, 0x0, &(0x7f0000000100)) r3 = syz_open_pts() close(r3) syz_open_pts() ioctl$FIOASYNC(r3, 0x80047469, &(0x7f00000000c0)=0x5) writev(r3, &(0x7f0000000140)=[{0x0}], 0x1) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000003, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x91f, 0x8000, 0x40000004, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x100001000000104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0x7, 0x7], [{0x4, 0x0, 0x0, 0x5}, {0xfffc, 0x22, 0x5}, {0x0, 0x0, 0xfffffffb, 0x80}, {0x5, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x2, 0x2000000000000000}, {0x0, 0x9, 0xfffffff9}, {0x5, 0x100, 0xf, 0xb}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x45, 0x6d5, 0x6}}}) setgroups(0x0, 0x0) setgid(0xffffffffffffffff) setuid(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0785101, 0x0) semget(0x0, 0x1, 0x281) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000100)={0x0, 0x0}) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$FIONREAD(r4, 0x4004667f, &(0x7f0000000680)) rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 561.579102ms ago: executing program 4 (id=10180): mknodat(0xffffffffffffff9c, 0x0, 0xc0e99db6de761f86, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) setsockopt(r2, 0x1000000000029, 0xb, 0x0, 0x0) recvmsg(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000080)=""/66, 0x42}, {&(0x7f0000000140)=""/209, 0xd1}], 0x2, 0x0}, 0x40) sendmmsg(r0, &(0x7f0000001440)={0x0}, 0x10, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000f) r3 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x2, 0x101) ioctl$FIONREAD(r3, 0xc0106978, &(0x7f0000000140)) utimensat(r3, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{0x7, 0xdad}, {0x5, 0xe}}, 0x2) r4 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0xb2) setreuid(0xffffffffffffffff, 0xee01) ioctl$TIOCCONS(r4, 0x80047462, &(0x7f0000000180)=0x2e54) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f00000dc000/0x12000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000628000/0x3000)=nil, 0x7ffffffffffffbff}, {&(0x7f00000a3000/0x3000)=nil, &(0x7f0000795000/0x2000)=nil, 0x9}, {&(0x7f00006b5000/0x2000)=nil, &(0x7f0000123000/0x1000)=nil, 0xfffffffffffffffb}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000123000/0x3000)=nil, &(0x7f00003d5000/0x4000)=nil, 0x4}, {&(0x7f00002f3000/0x3000)=nil, &(0x7f000063b000/0x2000)=nil, 0x2}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xfffffffffffffff9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xc8}, {&(0x7f000064b000/0x2000)=nil, &(0x7f00000eb000/0x3000)=nil, 0x9}, {&(0x7f000060b000/0x1000)=nil, &(0x7f00000df000/0x1000)=nil, 0x6}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f000060b000/0x4000)=nil, 0x4}, {&(0x7f0000271000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xfffffffffffffff5}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2003}, {&(0x7f00006b5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xffd}], './file0\x00', 0xfffffffa}) getsockname(r1, &(0x7f0000000400)=@un=@file={0x0, ""/504}, &(0x7f0000000600)=0x1fa) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x1006, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x900, 0x0) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x8, 0x0) r7 = syz_open_pts() poll(&(0x7f00000003c0)=[{r4, 0x138}, {r1, 0x80}, {r4, 0x8}, {r7, 0x80}], 0x4, 0x800) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f00000008c0)={0x54, &(0x7f0000000040)=[{0x6, 0x8, 0x2, 0x10000009}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) r8 = socket(0x18, 0x3, 0x50) ioctl$FIONREAD(r8, 0x8020699f, &(0x7f00000001c0)) syz_extract_tcp_res(&(0x7f0000000080), 0x5, 0x401) 559.817732ms ago: executing program 2 (id=10182): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x3, 0x7) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000080)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, &(0x7f00000011c0)="01000000", 0x4) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0xe}, 0x4, &(0x7f0000000100)="627efba70c4ab72fd640335259fa55731bc5a15b0bc93630b05c7c9909a9625d2d2a8a715b512544662a48b8b02c0fd0b99f62e7455266a711093c0a0e79952f1f600e893b85b2da188efa56f9fa5e04fd3243020c817a1ecdc6e1c285357c9fcce3651396c9ac5bf0aefe26a2b805be0925b06bf3105c6e063e1d58e926a2c9d57c93079b635076f769a1e092f802fd0940936f18c99209a5edfe7455f66f668817c5c4d33392e86e81c7", &(0x7f0000000040)=0xab, &(0x7f00000001c0)="662bdad058e98a41e5f73164c4b20d7335faf8d4d97b7450d43d281f68289ef4a2f73961c15fec54089cc404b578b6870e3b8669077de66a9ffdc0b6cf30f0114c0f2f79f8e1a7c52e24d26e30f0285e11b4878f4f311a2dd1132dce27981518fc0f8f9b04d6f6c9d4325adf7e5969d7cf939449869d31db818a6843917988c3", 0x80) 428.269631ms ago: executing program 2 (id=10184): syz_emit_ethernet(0xaa, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa5fbb8af0dd4886dd66e2294500743308fe8000000000000000000000000000aa0000000000ebffffffffffffff000000060b0000000007000853873ba7011eaf21b220b541a5e09f21767b21760e09c6e45ac954181cba8f2d28bbf723e07e14e234e09797e41e32527f50ccf2f9bffe545c9dbb1dc8b2", @ANYBLOB]) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x9, 0x4, 0x1, 0x3a, 0x66, 0x68, 0x9, 0x7, 0x3b, 0x0, @multicast1, @loopback, {[@rr={0x7, 0xf, 0x0, [@rand_addr=0x2, @local={0xac, 0x14, 0x0}, @broadcast]}]}}, @tcp={{0x1, 0x0, r0, r1, 0x1, 0x0, 0xb, 0x1, 0x0, 0x0, 0x1ff, {[@md5sig={0x13, 0x12, "1617e0bbb8b545408a1fb0639f929c64"}, @mss={0x2, 0x4, 0x2}]}}, {"30267f4b2f6b90cc5ff363f01440743a0ff05ac39c7e"}}}}}}) 427.589954ms ago: executing program 2 (id=10185): truncate(&(0x7f0000000000)='./file0\x00', 0x7) 427.256526ms ago: executing program 2 (id=10186): sysctl$vfs_nfs(&(0x7f0000000100)={0xa, 0x2, 0x3}, 0x3, &(0x7f0000000480)="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", &(0x7f0000000140)=0x1000, &(0x7f0000000180)="ac0f861885982a91cf96a24f337dcf56c22d8d520cdb2e60e2f3dadd64f32310675f4a989df1eb65868fc9e9426c8d067cac0692fb494d6b5e7373390f8cd397226cc5136e95b530617825bb8a84e4dfef18f0d8dac0526d392578b4bd13fcc1464b9c6534d81055d85cc03f97e9a0fa75ae779b975ad71dafe794b562f72805098e0a701a96372a405139ffa021c0f8cd9270d38bc4f4dce24e8b687747f6151e920c34504c337d53b56d863e2087253c84c77f603ee34fb131ec0a8eec1b", 0xbf) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x87, 0x9, 0x5, 0x400}, {0x73, 0xfd, 0x5, 0x6}, {0x6, 0xf9, 0x8, 0x4}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f0000000080)="1a04c0840000ddce7500000000a8985d9a5554d3", &(0x7f0000000000)=0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) 422.503273ms ago: executing program 2 (id=10188): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x18061, 0x0) flock(r0, 0x1) r1 = socket(0x2, 0x3, 0x1) close(r1) r2 = socket(0x2, 0x3, 0x0) setuid(0xee01) clock_settime(0x100000000000000, 0x0) close(r2) close(0xffffffffffffffff) socket(0x18, 0x4003, 0xfa) r3 = accept$inet(r0, &(0x7f0000000040), &(0x7f0000000140)=0xc) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000180)="5a8657a151db76284f3489126bfe94e22c3ccf5e637acaff50227379069346495a31125be2509b99a81fd172ab62c6beb1f8f78972124d8d154f02f6ee4168145edc8bae6c0671628f56998721e645236046260d09e5dba815903958d440f37324111398b7116e007af8743fb9746d4de401b2023e2d47b7ec579859eb25b798822b3b25f0f6fd2a035f159fa0d6c01587", 0x91}, {&(0x7f0000000240)="3227d9e5a4ff6dea66983a90f1063464cd5477b65bb44280a70550d5909ae760e57b5ce7893921cae895c50c0679ebf5f7a95e4a48b9b9098140548ec4f3d541b0c84ab4277635bff08120611f01", 0x4e}, {&(0x7f00000002c0)="a96691f46adacf572109e718e6c390d03dbaedffd05e264af4271bdcc1c3195044fc5df57aa4d34500431340abc7e22cd978f7a7627e479c631bb81381b14c2b024cc9e48ba345c50ddd1d4b6df635575c8c74e2ba85cc3eca6af3d16b8aff4d22aef7dd0cf119110d1bbc496a955a55b763ddc85d0a3bbf425df66d", 0x7c}, {&(0x7f0000000340)="9cdd9569819a208927a0a25491934c110f1a150231475e93c78060d85253aaae6de1be2de39af39e7967b3f2d4ad83b143ab348855da7756a6fb5131d57b2260915aadaac74f8890ac2b6df7bdd9109393fd1d33ccdc0b95876487a504250557fcf5536e56263a61510b26c29f5cddd19bf60ba7d9f0993ae71c52fe209bacc6a5cec98289b217e7bca2ba55a9672263e996f30dc37e37be70cb25d1537ea4f574c31c91864d8523abc800946dad98d42022a0b8a90cf9de726d9441", 0xbc}], 0x4, 0x9b) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x7}) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000000)=0x5fd) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0xfe, 0x2}, {0x0, 0x4, 0x40, 0x9}, {0x2, 0x0, 0x0, 0x85}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffe53) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x18061, 0x0) (async) flock(r0, 0x1) (async) socket(0x2, 0x3, 0x1) (async) close(r1) (async) socket(0x2, 0x3, 0x0) (async) setuid(0xee01) (async) clock_settime(0x100000000000000, 0x0) (async) close(r2) (async) close(0xffffffffffffffff) (async) socket(0x18, 0x4003, 0xfa) (async) accept$inet(r0, &(0x7f0000000040), &(0x7f0000000140)=0xc) (async) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000180)="5a8657a151db76284f3489126bfe94e22c3ccf5e637acaff50227379069346495a31125be2509b99a81fd172ab62c6beb1f8f78972124d8d154f02f6ee4168145edc8bae6c0671628f56998721e645236046260d09e5dba815903958d440f37324111398b7116e007af8743fb9746d4de401b2023e2d47b7ec579859eb25b798822b3b25f0f6fd2a035f159fa0d6c01587", 0x91}, {&(0x7f0000000240)="3227d9e5a4ff6dea66983a90f1063464cd5477b65bb44280a70550d5909ae760e57b5ce7893921cae895c50c0679ebf5f7a95e4a48b9b9098140548ec4f3d541b0c84ab4277635bff08120611f01", 0x4e}, {&(0x7f00000002c0)="a96691f46adacf572109e718e6c390d03dbaedffd05e264af4271bdcc1c3195044fc5df57aa4d34500431340abc7e22cd978f7a7627e479c631bb81381b14c2b024cc9e48ba345c50ddd1d4b6df635575c8c74e2ba85cc3eca6af3d16b8aff4d22aef7dd0cf119110d1bbc496a955a55b763ddc85d0a3bbf425df66d", 0x7c}, {&(0x7f0000000340)="9cdd9569819a208927a0a25491934c110f1a150231475e93c78060d85253aaae6de1be2de39af39e7967b3f2d4ad83b143ab348855da7756a6fb5131d57b2260915aadaac74f8890ac2b6df7bdd9109393fd1d33ccdc0b95876487a504250557fcf5536e56263a61510b26c29f5cddd19bf60ba7d9f0993ae71c52fe209bacc6a5cec98289b217e7bca2ba55a9672263e996f30dc37e37be70cb25d1537ea4f574c31c91864d8523abc800946dad98d42022a0b8a90cf9de726d9441", 0xbc}], 0x4, 0x9b) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x7}) (async) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000000)=0x5fd) (async) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0xfe, 0x2}, {0x0, 0x4, 0x40, 0x9}, {0x2, 0x0, 0x0, 0x85}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffe53) (async) 329.52871ms ago: executing program 2 (id=10190): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x0, 0x1, 0xffef9ff6, 0x2, "4b06a6bc000000000400", 0x0, 0xd}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="944713145761ef4626e1cc7f391f55166f838c5f5b0fe563162b7bfc9e", 0x1d}, {&(0x7f00000000c0)="d6accee1c3c4447919b68f12aed218a2919eb5ccedebf4bb4d9abb9514b0c2038aa1181aa3ad6b41c733bb946599ccb94bf562acbae2137ff769c5e2e2249e62a833b477a7fb6e09", 0x48}], 0x2) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000140)={0xfffffffd, 0x4f, 0x8001, 0x9, "3d2503a7912d8782ffef38ee1750c8e76f0f9270", 0x10, 0x80}) r1 = syz_open_pts() r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000040)='./file0\x00', 0x10, 0x3361) kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x0, 0x4, 0x0, 0x10}, {{}, 0xfffffffffffffffa, 0xc0, 0x20000000, 0x7fffffffffffffff, 0x46ad}, {{}, 0xfffffffffffffff9, 0x83, 0x2, 0x3, 0x8}], 0xb19, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000300)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) ktrace(&(0x7f0000000100)='./file0\x00', 0x1, 0xd00, 0x0) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x57a, 0x8, 0x4, 0x3, "f888e838e099a8d4356d8a98f6712095289dda7c", 0x43, 0x8}) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000080)=0x2) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) kqueue() mknod(0x0, 0x8000, 0x501) r4 = kqueue() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f00000001c0)={0xcec, 0xa, 0x8001, 0x7, "f1334ee152b5fa96e9c0f60c90f9c9fe3c2694b7", 0x1bcc4000, 0x80000000}) kevent(r4, &(0x7f0000000280)=[{{r4}, 0xfffffffffffffffa, 0x1, 0x1, 0xcb12, 0x9}, {{r4}, 0xfffffffffffffffa, 0xc8, 0x1, 0x1, 0x5}], 0x8, 0x0, 0x15, 0x0) 106.605836ms ago: executing program 7 (id=10193): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9b, 0xffffffffffffffff, 0xfffffffffffffff8, 0x27fffffffffffffc, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f00000000c0)=0x401) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$BIOCGRTIMEOUT(r1, 0x4010426e, &(0x7f0000000080)) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0x101, 0x8, 0x80002001, 0x1, 0x10, [{0x0, 0x7, 0x4, 0x4000001}, {0x7, 0x4, 0xa, 0x7}, {0x6, 0xf86, 0x100, 0xaf9}, {0x5, 0x0, 0x7}, {0x6, 0xff, 0xe, 0x7}, {0x6, 0x1, 0xffffffff, 0x9c}, {0x80000cdf, 0xfffffffd, 0x3, 0x6d}, {0x2000a, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x7ffd, 0xc7, 0x8b}, {0x4, 0xfffb, 0x9, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x7, 0x7}, {0x0, 0x1, 0x4, 0x30000}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9b, 0xffffffffffffffff, 0xfffffffffffffff8, 0x27fffffffffffffc, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) kqueue() (async) kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f00000000c0)=0x401) (async) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) (async) ioctl$BIOCGRTIMEOUT(r1, 0x4010426e, &(0x7f0000000080)) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0x101, 0x8, 0x80002001, 0x1, 0x10, [{0x0, 0x7, 0x4, 0x4000001}, {0x7, 0x4, 0xa, 0x7}, {0x6, 0xf86, 0x100, 0xaf9}, {0x5, 0x0, 0x7}, {0x6, 0xff, 0xe, 0x7}, {0x6, 0x1, 0xffffffff, 0x9c}, {0x80000cdf, 0xfffffffd, 0x3, 0x6d}, {0x2000a, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x7ffd, 0xc7, 0x8b}, {0x4, 0xfffb, 0x9, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x7, 0x7}, {0x0, 0x1, 0x4, 0x30000}]}) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) (async) 106.255438ms ago: executing program 7 (id=10194): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="ed", 0x1) (async) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2040, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) recvmmsg(r1, &(0x7f00000009c0)={0x0, 0x800}, 0x10, 0x40, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfa) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0xfd6, 0x8, 0x80000001, 0x17ffe, 0x10, [{0x0, 0x3, 0x4, 0xa24}, {0xc5c, 0xb, 0x8, 0xfffffff9}, {0x800008, 0x20f05, 0x200, 0x9}, {0x7ffffffe, 0x800, 0x3, 0x1}, {0x3fe, 0x7ff, 0x1002802, 0x4d8a}, {0x3, 0x2, 0x3, 0xb4}, {0x8000008, 0xd16e, 0x81ec, 0x2d}, {0x2, 0x836, 0x17, 0x6}, {0x2, 0x87e, 0x5, 0x9}, {0x1000004, 0x90, 0xd1b, 0x88}, {0x1c5, 0x5, 0x4, 0x412c8391}, {0x3, 0x6, 0x20004, 0x4000000c}, {0xb8d, 0x4, 0x8, 0x2}, {0x29a71720, 0xffffdffa, 0x1, 0x6}, {0x2, 0x7, 0xfffffff9, 0x100}, {0x0, 0x8, 0x1002, 0xc}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) readv(r1, &(0x7f0000000380)=[{0x0}], 0x1) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) ioctl$WSMUXIO_INJECTEVENT(r3, 0x80185760, &(0x7f0000000140)) ioctl$VNDIOCCLR(r3, 0x80384601, &(0x7f00000002c0)={&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)='./file1\x00', 0x8}) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) close(r0) 105.538993ms ago: executing program 5 (id=10195): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) connect$unix(r0, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x0}, 0x8) select(0x40, &(0x7f0000000040)={0x0, 0xe63, 0x0, 0x0, 0x0, 0x7fffffff}, &(0x7f0000000080)={0x4000000000000008, 0x0, 0x8000000000000}, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x8) unveil(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='r\x00') (async) unveil(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='r\x00') execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000580)=[&(0x7f0000000300)='%\x00', &(0x7f0000000340)='r\x00', &(0x7f0000000380)='r\x00', &(0x7f00000003c0)='r\x00', &(0x7f0000000400)='+\x00', &(0x7f0000000440)='\\}{K{\x14}\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='-:\x03\x00', &(0x7f0000000500)=']-:@%+%\x00', &(0x7f0000000540)='r\x00']) (async) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000580)=[&(0x7f0000000300)='%\x00', &(0x7f0000000340)='r\x00', &(0x7f0000000380)='r\x00', &(0x7f00000003c0)='r\x00', &(0x7f0000000400)='+\x00', &(0x7f0000000440)='\\}{K{\x14}\x00', &(0x7f0000000480)='r\x00', &(0x7f00000004c0)='-:\x03\x00', &(0x7f0000000500)=']-:@%+%\x00', &(0x7f0000000540)='r\x00']) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44801e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x9, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x0, 0x0, 0x7, 0x5}, {{}, 0xfffffffffffffff8, 0x4f, 0x20000000, 0x7fffffffffffffff, 0x46ad}, {{}, 0xfffffffffffffffc, 0x46, 0xf0000000, 0x8001, 0x8}, {{}, 0xfffffffffffffffc, 0x0, 0x4, 0xfffffffd, 0xc3d}, {{}, 0xfffffffffffffffb, 0x37, 0xf0000000, 0x9, 0x3}, {{}, 0xffffffffffffffff, 0x57, 0x2, 0xe, 0x80}, {{}, 0xfffffffffffffffc, 0x14, 0x10, 0x2, 0x100000002}, {{}, 0xfffffffffffffffd, 0xa1, 0x3, 0x1f70, 0x5}], 0xb19, 0x0) sysctl$hw(0x0, 0x0, &(0x7f00000000c0)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af7e54a8341f3be673a174c3a12223a171ff2ab99d0e0d43f0a6c3948f11658e876ac2126614dcd00fdfe76f1ace1f77da0c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e491010010791840000000000000000081131a6f0b680f72f2b0d9a19e", 0x0, 0x0, 0x0) open(&(0x7f0000000640)='./bus\x00', 0x10000, 0x70) (async) open(&(0x7f0000000640)='./bus\x00', 0x10000, 0x70) socket(0x2, 0x3, 0x0) (async) r3 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r3, 0xc0206921, &(0x7f00000001c0)) r4 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r4, 0xc0206921, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r4, 0xc0206921, &(0x7f00000001c0)) sysctl$net_inet_ip(&(0x7f00000003c0)={0x4, 0x2, 0x0, 0x15}, 0x4, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x22) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x2) (async) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x2) close(r5) (async) close(r5) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a) open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) 105.105004ms ago: executing program 5 (id=10196): kevent(0xffffffffffffffff, 0x0, 0xfffffffa, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffb}) syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="89ffa22f3c25aaaaaaaaaabb86dd60f61900001c0600fe8000000000000000000000000000bb0d000000000d000000080000000313004e221770", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="709b"]) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffa, 0x5, 0x1, 0x3c, 0x6}], 0x1, &(0x7f0000000100), 0x5, 0x0) munlock(&(0x7f00001d1000/0x2000)=nil, 0x2000) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) r1 = socket$inet6(0x18, 0x3, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x7fff, 0x101, 0x80000001, 0x5, 0x10001, 0x10, [{0x3, 0x2890, 0x5, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x409b}, {0xce1, 0xffffffff, 0x4f4, 0x10000}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x6}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10003, 0xc, 0x3}, {0x8, 0xa, 0x8}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0x1000c, 0x5, 0x5, 0x4}, {0x0, 0x1, 0x6, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) open(&(0x7f0000000000)='./file0\x00', 0x20, 0x5) acct(0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11"], 0x20, 0x2}, 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x401}, 0x0) acct(&(0x7f0000000080)='./file0\x00') 1.576502ms ago: executing program 6 (id=10197): pipe(&(0x7f00000001c0)) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x1a7, 0x4003}, 0x8, 0xd7f, 0x0, 0x0, 0x1ff, 0x4000000000, 0x8000002, 0xb}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409}, 0x8) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/225, 0xe1}, {&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f0000000200)=""/93, 0x5d}], 0x3) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6c, 0x9, 0x3, 0x4}]}) pipe(&(0x7f00000001c0)) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) socket(0x18, 0x2, 0x0) (async) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x1a7, 0x4003}, 0x8, 0xd7f, 0x0, 0x0, 0x1ff, 0x4000000000, 0x8000002, 0xb}) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409}, 0x8) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) readv(r0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/225, 0xe1}, {&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f0000000200)=""/93, 0x5d}], 0x3) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6c, 0x9, 0x3, 0x4}]}) (async) 1.238315ms ago: executing program 7 (id=10198): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0x5) 963.442µs ago: executing program 7 (id=10199): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) syz_emit_ethernet(0x56, &(0x7f00000014c0)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x20, 0x3a, 0x0, @rand_addr="0029e2b96300", @local={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x1, 0x0, 0x0, 0x7}], @icmpv6=@mld={0x82, 0x0, 0x0, 0x8, 0x0, @loopback}}}}}}) r0 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r0, 0xc0206923, &(0x7f00000001c0)) r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0x8020690e, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) setuid(0xee01) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) 479.831µs ago: executing program 7 (id=10200): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000140)={0x1, 0x4f4}) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0xa) r1 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x4}, {r1, 0x10}, {r1, 0x20}, {r1, 0x1}], 0x4, 0x7) r2 = kqueue() r3 = accept$inet(r1, 0x0, &(0x7f0000000040)) r4 = semget(0x2, 0x4, 0x475) dup2(r2, r0) semop(r4, &(0x7f0000000080)=[{0x4, 0xffff, 0x800}, {0x2, 0xffff, 0x800}, {0x3, 0x7, 0x1800}, {0x2, 0x9, 0x1800}, {0x0, 0x3, 0x1800}], 0x5) kevent(r2, &(0x7f0000000200)=[{{r3}, 0xfffffffffffffffe, 0x29, 0x80, 0x2, 0x9}, {{r1}, 0xfffffffffffffffe, 0x10a, 0x10, 0x4, 0x8000000000000000}], 0xa, 0x0, 0x15, 0x0) 0s ago: executing program 7 (id=10201): setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x5a}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047466, &(0x7f0000000200)=0x5) read(r1, &(0x7f0000000000)=""/166, 0xa6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) select(0x40, &(0x7f00000000c0)={0x0, 0x3254, 0x4, 0x0, 0x100000000000000, 0x1000006, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x60, 0xfffffffffffffffe, 0x0, 0x0, 0x9, 0x9, 0x1ff, 0xffc}, 0x0) getpeername$unix(r2, &(0x7f0000000140)=@file={0x0, ""/69}, &(0x7f00000001c0)=0x47) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 -!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 127, 3):% = 1073510800 0008: 5.!",% 4/ 3%4 !$$2%33%3 &/2 00081, %22/2=17 0#+"$%.!",%: #/--!.$ %22/2 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error load: 9.24 not a controlling terminal pckbd_enable: command error pckbd_enable: command error pmap_unwire: wiring for pmap 0xfffffd806c0a4000 va 0x200000001000 didn't change! pckbd_enable: command error denied attempt to set clock back 125829033 seconds uvn_flush: obj=0xfffffd807b71e4c8, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error lo0: can't handle af31 WARNING: thread `nfsio' (406454) exits with status -1 WARNING: thread `nfsio' (317355) exits with status -1 WARNING: thread `nfsio' (343717) exits with status -1 WARNING: thread `nfsio' (466313) exits with status -1 WARNING: thread `nfsio' (513353) exits with status -1 WARNING: thread `nfsio' (220341) exits with status -1 WARNING: thread `nfsio' (50777) exits with status -1 WARNING: thread `nfsio' (462516) exits with status -1 WARNING: thread `nfsio' (390427) exits with status -1 WARNING: thread `nfsio' (97701) exits with status -1 WARNING: thread `nfsio' (59336) exits with status -1 WARNING: thread `nfsio' (462138) exits with status -1 WARNING: thread `nfsio' (445015) exits with status -1 WARNING: thread `nfsio' (387266) exits with status -1 WARNING: thread `nfsio' (149707) exits with status -1 WARNING: thread `nfsio' (321733) exits with status -1 WARNING: thread `nfsio' (15820) exits with status -1 WARNING: thread `nfsio' (272342) exits with status -1 WARNING: thread `nfsio' (167989) exits with status -1 WARNING: thread `nfsio' (126625) exits with status -1 denied attempt to set clock back 268435504 seconds                                                              OpenBSD/amd64 (‘Ƚ0õ<¸RÛ¸) (tty00) login: vm_create: uvm_map failed: 12 denied attempt to set clock back 101 seconds vm_create: uvm_map failed: 12 ¹sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code malloc(): allocation too large, type = 6, size = 287762939904 denied attempt to set clock back 4246129901 seconds denied attempt to set clock back 268435574 seconds denied attempt to set clock back 124 seconds uvn_flush: obj=0xfffffd806a509cf0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! malloc(): allocation too large, type = 127, size = 1073510800 denied attempt to set clock back -9223372032591346437 seconds denied attempt to set clock back 4263431418 seconds malloc(): allocation too large, type = 6, size = 287762939904 WARNING: thread `nfsio' (520347) exits with status -1 WARNING: thread `nfsio' (67296) exits with status -1 ¹j¼õ¬|uvn_flush: obj=0xfffffd807b71ebf8, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pppx: unable to set addresses for pppx1, error=17 denied attempt to set clock back -9223372032591346412 seconds denied attempt to set clock back 148 seconds ¹j¼õ¬|ÿ ž¨E1\…:./file0WARNING: thread `nfsio' (47228) exits with status -1 WARNING: thread `nfsio' (160231) exits with status -1 denied attempt to set clock forward to 52172937113390 1%$%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 4263431451 3%#/.$3 -!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 29, 3):% = 16796513700 56.&,53(: /"*=08&&&&&$800"9"$028, /&&3%4=080. %22/2 $52).' 0!'%/54. 56.&,53(:  : #(!.'%3 4/ 0!'% -!9 "% ,/34! denied attempt to set clock forward to 13622315181289262 WARNING: thread `nfsio' (413805) exits with status -1 WARNING: thread `nfsio' (129627) exits with status -1 WARNING: thread `nfsio' (100001) exits with status -1 WARNING: thread `nfsio' (295272) exits with status -1 denied attempt to set clock back 4263431455 seconds pppx: unable to set addresses for pppx1, error=17 malloc(): allocation too large, type = 29, size = 16796513700 load: 8.32 not a controlling terminal denied attempt to set clock forward to 52172937113390 load: 8.32 not a controlling terminal malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 4263431469 seconds sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code malloc(): allocation too large, type = 29, size = 16796513700 îÒ¬J6îÒ¬J6malloc(): allocation too large, type = 29, size = 16796513700            $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 4263431474 3%#/.$3 $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 268435639 3%#/.$3 :X¹jmalloc(): allocation too large, type = 29, size = 16796513700 WARNING: thread `nfsio' (311602) exits with status -1 WARNING: thread `nfsio' (95179) exits with status -1 WARNING: thread `nfsio' (62517) exits with status -1 WARNING: thread `nfsio' (203926) exits with status -1 WARNING: thread `nfsio' (25402) exits with status -1 WARNING: thread `nfsio' (23933) exits with status -1 load: 7.70 not a controlling terminal malloc(): allocation too large, type = 29, size = 16796513700 pppx: unable to set addresses for pppx1, error=17 denied attempt to set clock back 211 seconds malloc(): allocation too large, type = 29, size = 16796513700 vm_create: uvm_map failed: 12 malloc(): allocation too large, type = 29, size = 16796513700 load: 8.86 not a controlling terminal -!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 29, 3):% = 16796513700 denied attempt to set clock back 134217973 seconds uvn_flush: obj=0xfffffd80634c94e0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! malloc(): allocation too large, type = 29, size = 16796513700 uvn_flush: obj=0xfffffd80634c9cb0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! load: 10.12 not a controlling terminal vm_create: uvm_map failed: 12                 uvn_flush: obj=0xfffffd8060df2678, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! malloc(): allocation too large, type = 29, size = 16796513700 ¹j¼õ¬|ÿ ž¨E1\…:€ €€€€€€ ÿÿÿÿ€€€€€€€€€denied attempt to set clock back 125829267 seconds denied attempt to set clock back 4263496338 seconds malloc(): allocation too large, type = 29, size = 16796513700 ¹j             OpenBSD/amd64 (Amnesiac) (tty00) login: denied attempt to set clock back 279 seconds denied attempt to set clock back 4263431574 seconds malloc(): allocation too large, type = 29, size = 16796513700 uvm_fault(0xfffffd8063a19210, 0x0, 0, 1) -> e fatal page fault in supervisor mode trap type 6 code 0 rip ffffffff82001b48 cs 8 rflags 10207 cr2 0 cpl 0 rsp ffff80003c4670f0 gsbase 0xffff8000299edff0 kgsbase 0x0 panic: trap type 6, code=0, pc=ffffffff82001b48 Starting stack trace... panic(ffffffff833c635b) at panic+464 kerntrap(ffff80003c467040) at kerntrap+779 alltraps_kern_meltdown() at alltraps_kern_meltdown+123 dt_ioctl_record_stop(ffff8000016bf000) at dt_ioctl_record_stop+264 dtclose(21e5f,81,2000,ffff8000fffee548) at dtclose+265 spec_close(ffff80003c4671f0) at spec_close+1126 VOP_CLOSE(fffffd806b780470,81,fffffd80097fb618,ffff8000fffee548) at VOP_CLOSE+306 vn_closefile(fffffd806c261ad0,ffff8000fffee548) at vn_closefile+299 fdrop(fffffd806c261ad0,ffff8000fffee548) at fdrop+289 closef(fffffd806c261ad0,ffff8000fffee548) at closef+402 fdfree(ffff8000fffee548) at fdfree+278 exit1(ffff8000fffee548,0,0,1) at exit1+1398 sys_exit(ffff8000fffee548,ffff80003c467560,ffff80003c4674b0) at sys_exit+26 syscall(ffff80003c467560) at syscall+2839 Xsyscall() at Xsyscall+296 end of kernel end trace frame: 0x7b5347d45d10, count: 242 End of stack trace. WARNING: SPL NOT LOWERED ON TRAP EXIT 4 0 Stopped at proc_trampoline+199: movl $0,%gs:1672 TID PID UID PRFLAGS PFLAGS CPU COMMAND 393337 67658 0 0 0 0 syz-executor *449910 67658 0 0 0x4000000 1 syz-executor proc_trampoline() at proc_trampoline+199 end of kernel end trace frame: 0xca2f9404220, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd8063a19210, 0x0, 0, 1) -> e ddb{1}> trace proc_trampoline() at proc_trampoline+199 end of kernel end trace frame: 0xca2f9404220, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 18446603337232881936 rbx 0 rdx 0 rcx 18446603337152255232 rax 42 r8 18446603337232881728 r9 1 r10 3769975948036586667 r11 9952666294387442398 r12 0 r13 0 r14 0 r15 0 rip 18446744071603819719 proc_trampoline+199 cs 8 rflags 582 rsp 18446603337232881808 ss 16 proc_trampoline+199: movl $0,%gs:1672 ddb{1}> show proc PROC (syz-executor) tid=449910 pid=67658 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=50, usrpri=86, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000377ed798,0xffffffff8398f248 process=0xffff80002efd49d8 user=0xffff80003c4cc000, vmspace=0xfffffd8063a195e0 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 67658 393337 21817 0 7 0 syz-executor *67658 449910 21817 0 7 0x4000000 syz-executor 36851 66197 29576 0 3 0x80 nanoslp syz-executor 36851 83196 29576 0 3 0x4000080 kqread syz-executor 36851 499045 29576 0 3 0x4000080 fsleep syz-executor 51216 435977 89971 0 3 0x80 nanoslp syz-executor 51216 160984 89971 0 3 0x4000080 ttyopn syz-executor 51216 179835 89971 0 3 0x4000080 fsleep syz-executor 51216 516997 89971 0 3 0x4000080 fsleep syz-executor 37033 34646 86855 0 3 0x90 nanoslp syz-executor 37033 479541 86855 0 3 0x4000090 kqread syz-executor 37033 497100 86855 0 3 0x4000090 fsleep syz-executor 93125 382494 9717 60929 2 0x10 syz-executor 93125 123842 9717 60929 3 0x4000090 kqsel syz-executor 93125 437080 9717 60929 3 0x4000090 fsleep syz-executor 17352 211387 51207 0 3 0x80 nanoslp syz-executor 17352 225208 51207 0 3 0x4000080 nanoslp syz-executor 17352 95063 51207 0 3 0x4000080 fsleep syz-executor 89971 517008 42734 0 3 0x82 nanoslp syz-executor 8053 104758 1 0 3 0x100083 ttyin getty 51207 147750 42734 0 2 0x2 syz-executor 42334 218783 42734 0 3 0x82 nanoslp syz-executor 9717 523125 42734 0 3 0x82 nanoslp syz-executor 21817 119877 42734 0 3 0x82 nanoslp syz-executor 86855 368335 42734 0 3 0x82 nanoslp syz-executor 22044 323508 42734 0 3 0x82 wait syz-executor 29576 91084 42734 0 3 0x82 nanoslp syz-executor 42734 270490 57550 0 3 0x82 kqread syz-executor 57550 69316 84134 0 3 0x10008a sigsusp ksh 84134 103571 23568 0 3 0x98 kqread sshd-session 23568 486750 55788 0 3 0x92 kqread sshd-session 55788 347127 1 0 3 0x88 kqread sshd 16421 174504 52066 74 3 0x1100092 bpf pflogd 52066 225938 1 0 3 0x80 sbwait pflogd 17422 227207 94082 73 3 0x1100090 kqread syslogd 94082 182632 1 0 3 0x100082 sbwait syslogd 73068 280811 1 0 3 0x100080 kqread resolvd 81911 290981 42984 77 3 0x100092 kqread dhcpleased 77264 284293 42984 77 3 0x100092 kqread dhcpleased 42984 463587 1 0 3 0x80 kqread dhcpleased 21060 396257 0 0 3 0x14200 bored smr 34956 247387 0 0 3 0x14200 pgzero zerothread 87353 22621 0 0 3 0x14200 aiodoned aiodoned 58872 328583 0 0 3 0x14200 syncer update 79656 227239 0 0 3 0x14200 cleaner cleaner 43099 129663 0 0 3 0x14200 reaper reaper 32358 406583 0 0 3 0x14200 pgdaemon pagedaemon 98670 135159 0 0 3 0x14200 bored viomb 81053 42348 0 0 3 0x40014200 acpi0 acpi0 5047 147183 0 0 3 0x40014200 idle1 91756 120029 0 0 3 0x14200 bored softnet1 83652 14293 0 0 3 0x14200 netlock softnet0 64718 435311 0 0 2 0x40014200 systqmp 23965 368383 0 0 3 0x14200 bored systq 41410 276430 0 0 3 0x14200 tmoslp softclockmp 73595 293419 0 0 3 0x40014200 tmoslp softclock 60353 82835 0 0 3 0x40014200 idle0 1 88747 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10276 11132K 12645K 166960K 26514 0 pcb 19 22K 25K 166960K 2686 0 rtable 247 19K 20K 166960K 2510 0 pf 50 20K 67488K 166960K 968 0 ifaddr 39 9K 11K 166960K 576 0 ifgroup 71 3K 3K 166960K 1052 0 sysctl 4 1K 9K 166960K 232 0 counters 74 37K 39K 166960K 1356 0 ioctlops 0 0K 4K 166960K 4337 0 iov 0 0K 28K 166960K 1108 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1538 97K 97K 166960K 12687 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 6K 14K 166960K 84 0 VM map 2 1K 1K 166960K 2 0 sem 35 134K 134K 166960K 559 0 dirhash 12 2K 3K 166960K 204 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 240K 166960K 10916 0 sigio 0 0K 0K 166960K 398 0 proc 74 115K 163K 166960K 2557 0 subproc 72 4K 4K 166960K 354 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 3 0K 0K 166960K 1702 0 in_multi 59 4K 7K 166960K 838 0 ether_multi 2 0K 0K 166960K 158 0 mrt 5 0K 0K 166960K 115 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 277 1235K 1235K 166960K 277 0 exec 0 0K 1K 166960K 2399 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 26 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 273 154K 182K 166960K 99804 0 UVM aobj 188 64K 64K 166960K 196 0 pinsyscall 43 86K 102K 166960K 12774 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 1 0K 1K 166960K 961 0 NDP 15 0K 2K 166960K 444 0 temp 100 8660K 10456K 166960K 495607 0 kqueue 18 25K 34K 166960K 2205 0 SYN cache 2 8K 16K 166960K 3 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 1595 0 1592 16 15 1 5 0 8 0 rtentry 176 745 0 666 6 1 5 6 0 8 0 unpcb 144 7001 0 6981 35 32 3 6 0 8 2 syncache 336 10 0 10 4 4 0 1 0 8 0 tcpqe 32 2 0 2 1 1 0 1 0 8 0 tcpcb 736 4548 0 4541 68 64 4 10 0 8 3 arp 136 119 0 101 1 0 1 1 0 8 0 inpcb 328 13853 0 13835 101 94 7 18 0 8 5 nd6 152 150 0 131 3 1 2 2 0 8 1 pkpcb 40 187 0 187 11 10 1 1 0 8 1 kcovpl 48 39 0 31 1 0 1 1 0 8 0 mppekey 1024 8 0 8 8 8 0 2 0 8 0 ppxss 1192 526 0 526 5 4 1 1 0 8 1 pppxif 1504 44 0 44 11 11 0 1 0 8 0 pfstscr 40 3 0 2 1 0 1 1 0 8 0 pffrag 232 96 0 84 2 1 1 2 0 482 0 pffrnode 88 54 0 43 1 0 1 1 0 8 0 pffrent 40 213 0 201 2 1 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 14 0 12 1 0 1 1 0 8 0 pfanchor 1288 3 0 0 1 0 1 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfstitem 24 626 0 495 2 0 2 2 0 8 0 pfstkey 128 630 0 499 6 1 5 6 0 8 0 pfstate 384 627 0 497 18 3 15 18 0 8 1 pfrule 1344 29 0 22 2 1 1 2 0 8 0 rttmr 136 16 0 16 10 10 0 1 0 8 0 art_heap8 4096 7 0 2 7 2 5 5 0 8 0 art_heap4 256 3412 0 3122 53 30 23 32 0 8 1 art_table 40 3419 0 3124 6 1 5 6 0 8 0 art_node 32 718 0 651 1 0 1 1 0 8 0 sysvmsgpl 40 4 0 3 2 1 1 1 0 8 0 semupl 112 17 0 17 13 13 0 1 0 8 0 semapl 112 532 0 499 1 0 1 1 0 8 0 shmpl 112 158 0 2 5 0 5 5 0 8 0 dirhash 1024 148 0 131 3 0 3 3 0 8 0 dino2pl 256 22110 0 20505 101 0 101 101 0 8 0 ffsino 296 22110 0 20505 124 0 124 124 0 8 0 nchpl 144 36975 0 36299 67 39 28 67 0 8 0 rtmask 32 94 0 94 12 11 1 1 0 8 1 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 135112 0 135112 5 4 1 2 0 8 1 percpumem 16 693 0 641 1 0 1 1 0 8 0 vcpupl 3968 31 0 2 4 0 4 4 0 8 0 vmpool 840 35 0 6 5 1 4 4 0 8 0 pfiaddrpl 120 1 0 0 1 0 1 1 0 8 0 kstatmem 264 730 0 694 4 1 3 3 0 8 0 acpiwqpl 32 7 0 7 1 0 1 1 1 8 1 scsiplug 72 59 0 59 16 15 1 1 0 8 1 scxspl 216 207229 0 207229 17 16 1 4 1 8 1 plimitpl 152 3252 0 3233 1 0 1 1 0 8 0 sigapl 424 11129 0 11081 9 3 6 8 0 8 0 knotepl 120 921 0 0 24 0 24 24 0 8 0 kqueuepl 224 5181 0 5102 38 33 5 5 0 8 0 pipepl 344 1218 0 1190 12 9 3 9 0 8 0 fdescpl 528 11058 0 11026 3 0 3 3 0 8 0 filepl 160 81792 0 81477 68 52 16 22 0 8 2 lockfpl 104 5408 0 5354 15 11 4 4 0 8 2 lockfspl 48 1942 0 1896 3 2 1 2 0 8 0 sessionpl 144 57 0 48 1 0 1 1 0 8 0 pgrppl 48 369 0 352 1 0 1 1 0 8 0 ucredpl 104 14290 0 14275 1 0 1 1 0 8 0 zombiepl 144 12975 0 12973 2 1 1 1 0 8 0 processpl 1232 11129 0 11081 8 3 5 6 0 8 1 procpl 664 29600 0 29540 9 2 7 8 0 8 0 sosppl 176 85 0 85 9 8 1 1 0 8 1 sockpl 752 23053 0 23012 191 181 10 31 0 8 5 mcl64k 65536 30 0 0 3 0 3 3 0 8 0 mcl16k 16384 8 0 0 1 0 1 1 0 8 0 mcl12k 12288 4 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 6 0 0 1 0 1 1 0 8 0 mcl4k 4096 121 0 0 15 0 15 15 0 8 0 mcl2k2 2112 4 0 0 1 0 1 1 0 8 0 mcl2k 2048 113 0 0 9 2 7 9 0 8 0 mtagpl 96 8 0 0 1 0 1 1 0 8 0 mbufpl 256 2631 0 0 154 0 154 154 0 8 0 bufpl 280 77205 0 71068 439 0 439 439 0 8 0 anonpl 32 14702 0 0 118 0 118 118 0 246 0 amapchunkpl 152 385499 0 384857 127 96 31 41 0 158 4 amappl16 200 31620 0 31522 176 157 19 32 0 8 7 amappl15 192 7 0 6 1 0 1 1 0 8 0 amappl14 184 12 0 12 4 4 0 1 0 8 0 amappl13 176 799 0 798 1 0 1 1 0 8 0 amappl12 168 11614 0 11571 3 0 3 3 0 8 0 amappl11 160 111 0 111 3 2 1 1 0 8 1 amappl10 152 53 0 38 1 0 1 1 0 8 0 amappl9 144 249 0 248 3 2 1 1 0 8 0 amappl8 136 30 0 25 1 0 1 1 0 8 0 amappl7 128 202 0 200 1 0 1 1 0 8 0 amappl6 120 659 0 645 1 0 1 1 0 8 0 amappl5 112 90 0 79 1 0 1 1 0 8 0 amappl4 104 622 0 590 1 0 1 1 0 8 0 amappl3 96 63333 0 63222 4 1 3 3 0 8 0 amappl2 88 11082 0 11001 2 0 2 2 0 8 0 amappl1 80 55283 0 54689 15 1 14 14 0 8 0 amappl 88 96675 0 96480 5 0 5 5 0 92 0 uvmvnodes 80 368 0 0 8 0 8 8 0 8 0 dma65536 65536 6 0 6 5 5 0 1 0 8 0 dma32768 32768 3 0 3 3 3 0 1 0 8 0 dma16384 16384 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma2048 2048 1 0 1 1 1 0 1 0 8 0 dma1024 1024 3 0 2 1 0 1 1 0 8 0 dma512 512 3 0 3 3 3 0 1 0 8 0 dma256 256 10 0 10 4 4 0 1 0 8 0 dma128 128 270 0 270 11 11 0 1 0 8 0 dma64 64 12 0 12 7 7 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 20 0 19 1 0 1 1 0 8 0 aobjpl 72 195 0 8 4 0 4 4 0 8 0 uaddrrnd 24 11058 0 11026 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 11058 0 11026 1 0 1 1 0 8 0 vmmpekpl 168 72422 0 72358 4 0 4 4 0 8 0 vmmpepl 168 681505 0 679348 205 96 109 115 0 357 7 vmsppl 488 11057 0 11026 7 2 5 5 0 8 0 rwobjpl 80 160097 0 158496 50 10 40 41 0 8 0 pdppl 4096 22193 0 22093 193 91 102 102 0 8 2 pvpl 32 24499 0 0 195 0 195 195 0 265 0 pmappl 256 11092 0 11032 4 0 4 4 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 648 0 223 14 1 13 13 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+39: addq $8,%rsp x86_ipi_db(ffffffff8387bff0) at x86_ipi_db+39 x86_ipi_handler() at x86_ipi_handler+217 Xresume_lapic_ipi() at Xresume_lapic_ipi+39 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+44 __mp_lock(ffffffff839be580) at __mp_lock+419 softintr_dispatch(2) at softintr_dispatch+293 dosoftint(2) at dosoftint+84 Xsofttty() at Xsofttty+39 __mp_lock(ffffffff839be580) at __mp_lock+402 softintr_dispatch(0) at softintr_dispatch+293 dosoftint(0) at dosoftint+84 Xsoftclock() at Xsoftclock+39 end of kernel end trace frame: 0x710ef1f7bab0, count: 3 ddb{0}> trace x86_ipi_db(ffffffff8387bff0) at x86_ipi_db+39 x86_ipi_handler() at x86_ipi_handler+217 Xresume_lapic_ipi() at Xresume_lapic_ipi+39 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+44 __mp_lock(ffffffff839be580) at __mp_lock+419 softintr_dispatch(2) at softintr_dispatch+293 dosoftint(2) at dosoftint+84 Xsofttty() at Xsofttty+39 __mp_lock(ffffffff839be580) at __mp_lock+402 softintr_dispatch(0) at softintr_dispatch+293 dosoftint(0) at dosoftint+84 Xsoftclock() at Xsoftclock+39 end of kernel end trace frame: 0x710ef1f7bab0, count: -12 ddb{0}> machine ddbcpu 1 Stopped at proc_trampoline+199: movl $0,%gs:1672 proc_trampoline() at proc_trampoline+199 end of kernel end trace frame: 0xca2f9404220, count: 14 ddb{1}> trace proc_trampoline() at proc_trampoline+199 end of kernel end trace frame: 0xca2f9404220, count: -1