last executing test programs: 10.051058348s ago: executing program 1 (id=3842): setpgid(0x0, 0xffffffffffffffff) r0 = syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000008c0)=0x9) mknod(0x0, 0x80, 0xfffffffa) poll(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) execve(0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x9) unveil(0x0, &(0x7f0000004300)='W\x00') ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "fccdb8", 0x28, 0x62, 0x40, @ipv4={'\x00', '\xff\xff', @loopback}, @remote={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}}}}) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = socket(0x10, 0x4, 0x0) setgroups(0x75, 0xfffffffffffffffe) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) r3 = syz_open_pts() syz_open_pts() getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xc) setegid(r4) syz_open_pts() fcntl$lock(r3, 0x9, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x101fffff9}) close(r3) setitimer(0x2, &(0x7f0000000140)={{0x1, 0x100800000000009}, {0x80fffffffe, 0x8be9}}, 0x0) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000000029, 0x28, &(0x7f0000000100), 0x0) ioctl$FIONREAD(r1, 0x81206919, &(0x7f0000000100)) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 5.55450818s ago: executing program 3 (id=3968): rename(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket(0x20, 0x4000, 0x4) socket(0x10, 0x4000, 0x3) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000c80)=@un=@file={0x0, ""/4103}, 0x1009, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/149, 0x95}, {&(0x7f0000000380)=""/49, 0x31}], 0x2, &(0x7f0000000400)=""/13, 0xd}, 0x40) getrusage(0x0, &(0x7f0000000040)) r1 = getpid() r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x1, 0x1000) getrusage(0xffffffffffffffff, &(0x7f0000000480)) setgroups(0x0, 0x0) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, 0x0) setgid(0xffffffffffffffff) setuid(0xffffffffffffffff) unveil(0x0, &(0x7f0000000140)='c\x00') ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r1) wait4(r1, 0x0, 0x2, &(0x7f0000000200)) write(0xffffffffffffffff, &(0x7f0000000100)="172fe719c036cb2c03fcee0de027d83e1a1088f0b9742bccf908196876f74a53f3aaee3a9681ab5b6181348ea72968ba9dc4e73d694e912adc71fb1e165efa356b17d98f8226e5831ed535598c96f0c27bb17d0c6b6522524190a3621ac25f91e41ce2eaf25a33ec8e11fc90a6c2eb632639b6d25d6778544f861bf9d4b1622acef18a4af2b808ad17f538d679d58b20cd56e70b906e1819856e024056a5f029826a7bb7eb88bc4ff8624de1ff18cadf34276e6d86f49bfda1a5f68f60375eb7f725", 0xc2) 5.554215595s ago: executing program 3 (id=3969): mknod(&(0x7f0000000280)='./file0\x00', 0x8, 0x20000103) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sysctl$net_inet_ip(&(0x7f0000000240)={0x4, 0x2, 0x0, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') mknod$loop(&(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) poll(&(0x7f00000000c0)=[{r0, 0xae98cd7e8d4e801f}], 0x1, 0x9) write(r0, &(0x7f00000002c0)="aa", 0x1) 5.46077327s ago: executing program 3 (id=3975): readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x6, 0x1000004, 0x7, 0x545, "22f006000000009ba340c3000000000000007600", 0x3, 0xf}) r0 = socket(0x1e, 0x3, 0x0) sendmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="7626d77102000000000000000000dd1e", 0x10}], 0x1}, 0x0) link(0x0, &(0x7f0000000080)='.\x00') sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0xd}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000672000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d10000/0x1000)=nil, &(0x7f0000693000/0x1000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c0c000/0x2000)=nil, 0x2ff}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00'}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0206923, &(0x7f00000001c0)) r2 = shmget$private(0x0, 0x1000, 0xe8, &(0x7f0000401000/0x1000)=nil) r3 = geteuid() r4 = getgid() setregid(0x0, r4) r5 = geteuid() r6 = shmget$private(0x0, 0x4000, 0x211, &(0x7f0000321000/0x4000)=nil) shmctl$IPC_STAT(r6, 0x2, 0x0) r7 = getuid() fchown(0xffffffffffffffff, r7, 0x0) r8 = getgid() r9 = getuid() seteuid(r9) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0xfffffffe, 0x0, 0x0, r9, r8, 0x41, 0x14f}, 0x200, 0x7, 0x0, 0x0, 0xff, 0x4, 0x7}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r11 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x1000, r11, 0x0, 0x0, 0x100000000, 0x0, 0xffffffffffffffff}) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000140)={{0x5, r3, r4, r5, r8, 0x1, 0x900}, 0x80000000, 0x1, r10, r11, 0xe0e, 0x1000, 0x5}) r12 = accept(r0, 0x0, &(0x7f00000001c0)) getsockopt$SO_PEERCRED(r12, 0xffff, 0x1022, &(0x7f0000000280), 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 5.408997296s ago: executing program 3 (id=3978): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x100, 0x29) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x2}, 0xc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) (async, rerun: 32) r2 = socket(0x2, 0x3, 0x0) (rerun: 32) close(r2) (async) r3 = socket(0x2, 0x3, 0x0) (async) r4 = syz_open_pts() ioctl$TIOCSTAT(r4, 0x20007465, 0x0) (async) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0xe8, 0x0) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) (async) ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000000)=0x7) execve(0x0, 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3}, {}, {0x2}, {}, {}, {0x3}, {0x3, 0xaa59}, {}, {0x1, 0xffffffff}, {}, {0x2, 0x4}, {}, {0x0, 0xfffffffe}, {}, {0x0, 0x7}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x3}, {0x0, 0x2}, {0x0, 0x7ff}, {0xbb08c0840fa32129, 0xfffffffe}, {}, {0x2}, {}, {0x2}, {0x2, 0x1}, {}, {0x0, 0x200}, {0x2, 0xffffffff}, {0x0, 0xfffffffd}, {0x3, 0x8}, {0x3}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) close(r3) socket(0x18, 0xc003, 0x3a) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x7}) (async, rerun: 64) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async, rerun: 64) setsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) (async) write(r2, &(0x7f00000005c0)="04bdfa5d1d2873c63e3534d33498b64fadcb823ea1aa44c43050006123339a59d631b9b6835bf4bbbb00346f731573d8d508753f95b768543dbe030000000000000000000000000000fcc025b9023cd431bc30c7f2206d615db9df5944d54b95a7f7f8670c1866adf56c7a631568f1bff98256cc1692fad7941ecc28a90fcdb86d7b88e347eb67b5cfd2aed521059a36d3a1afceac69ae7ce17469d3980f189052062a4c799644fb5487000000000000000000", 0x1004d) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async, rerun: 32) ioctl$BIOCSDLT(r1, 0x8004427a, &(0x7f0000000040)=0x1) (rerun: 32) 4.90564285s ago: executing program 1 (id=3990): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x800, 0x1f) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) dup2(r1, r0) syz_emit_ethernet(0x7e, &(0x7f0000000580)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "0500", 0x48, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xffffffff, {0x0, 0x6, "06c33e", 0x4, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, [@hopopts={0x88, 0x1, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x5}]}]}}}}}}}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x800, 0x1f) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) dup2(r1, r0) (async) syz_emit_ethernet(0x7e, &(0x7f0000000580)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "0500", 0x48, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0xffffffff, {0x0, 0x6, "06c33e", 0x4, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, [@hopopts={0x88, 0x1, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x5}]}]}}}}}}}) (async) 4.804959738s ago: executing program 1 (id=3992): readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x6, 0x1000004, 0x7, 0x545, "22f006000000009ba340c3000000000000007600", 0x3, 0xf}) link(0x0, &(0x7f0000000080)='.\x00') sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504001904000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 4.804239844s ago: executing program 1 (id=3994): setrlimit(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = socket(0x18, 0x3, 0x0) getsockopt(r1, 0x29, 0x69, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) setrlimit(0x3, &(0x7f0000000080)={0x7, 0x100000}) setrlimit(0x2, &(0x7f0000000100)={0x60000000, 0x60000000}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x11, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2, 0xfa) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f00000001c0)={0x0, 0x0}) close(r5) syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @random="cd2f2918c2c8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x31, 0x34, 0x66, 0x0, 0x0, 0x6, 0x0, @multicast1, @multicast2}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x2, 0x0, 0xfffd, {[@window={0x3, 0x3, 0x1}, @generic={0x3, 0x4, "2793"}, @window={0x3, 0x3, 0x9}]}}}}}}}) socket(0x2, 0x4000, 0x66) write(r3, &(0x7f0000000340), 0xd4e688a67930cd) close(r4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 2.235854658s ago: executing program 0 (id=4062): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0xffffffff, 0x2, 0x820351a, "090e4de6d30aa692318c7e0002f9ffffff00", 0xb1a, 0x4000000}) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504446, &(0x7f00000000c0)={0x2, 0xc00000, 0x4, 0xfffffffe, "97a2e900", 0x1}) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68) unlink(&(0x7f0000000100)='./file0\x00') mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x2810, r0, 0x20000000) close(r0) unveil(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000340)='r\x00') sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffef1) r1 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000140)) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000180)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$vfs_nfs(&(0x7f0000000040)={0xa, 0x2, 0x1f6f489b5e1afa8d}, 0x40000000000002a3, &(0x7f0000000200)="814c0a2761534c22fbcd75a21c88a68f1edc757782cae848dc7f43c70cea6280b79a97b42b993eeb66fb9f0344891376ade2ef6a03abfe5035673e0702d69c08fa4a6828", 0x0, 0x0, 0xffffffffffffff5b) 2.233345011s ago: executing program 0 (id=4066): r0 = msgget$private(0x0, 0x730) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) r1 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) ktrace(&(0x7f0000000240)='./file0\x00', 0x4, 0xd08, r1) msgsnd(r0, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0) msgsnd(r0, 0x0, 0x401, 0xee01) 1.787491267s ago: executing program 0 (id=4074): mknod(&(0x7f0000000180)='./file0\x00', 0x100, 0x2) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) (async) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="1e000000", &(0x7f0000000100)=0x4, &(0x7f0000001900), 0xffffffffffffffcc) (async) r0 = syz_open_pts() (async, rerun: 32) readlink(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/68, 0x44) (rerun: 32) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000100)=0x1) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000800)="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", 0x132}, {&(0x7f0000000000)="a8563b0fb805f8a102f75ebadce97616fca06e484c9a73a2571d5d3ac7c6ff08bcacf507473bd0b1c3796cbc", 0x2c}, {&(0x7f0000000540)="e28340d1b7001e867b5ab8b78211e9e137eca84cbe30e63ffc93c540858509a29d70d944118aa637b85451230904a190e45ae848f8e2350946b9b16c7046b45cbf73bdd75b83ac7abcf97a6de1a2720de33f62df029ecd1d3a31260ac78cfe273222df7d6f81f2ed585276c7d5082786b0fc1013d2717d92e1e2810acdc54b88b6b00696521e3a1b6f4ebcccfc2bb94aae2fb61cea2ea864c28e03287b3b8ab9cc8c1970541c54e25e7f69e4accbe14c6f85b78424e7e6c8ae0466c7de", 0xbd}, {&(0x7f0000000380)="ef48c6601f1aa7b2c6e7806bacff64a82752e5c62fcecc437f0b8ac2afac87e510eefec1cf23c71c8fda0752ea8ef4befe2c8ae72e5632e625167123de81abd6cbc8af3531951decedd6824d56db00b8e2d38f0ff5949bf0907c746c05fe28abff5783f9077fb61662e49ca3dd963fbc77ab75838bd52286313d0734bda086db0e6bba01b776cfe59078df723dd1b30a72cfbec8538c40e3f6ed477eb7bf2b6aceefc3d34f56", 0xa6}], 0x4) (async, rerun: 64) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)="11", 0x1}], 0x1) (rerun: 64) msgrcv(0x0, &(0x7f0000000280)={0x0, ""/245}, 0xfffffffffffffd0e, 0x1, 0x1000) (async, rerun: 64) r1 = socket(0x18, 0x5, 0x0) (rerun: 64) fcntl$lock(r1, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) (async) connect$unix(0xffffffffffffff9c, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0xa) (async) writev(r0, &(0x7f00000004c0), 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) r3 = socket(0x2, 0x4001, 0x0) (rerun: 64) r4 = dup(r3) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) sysctl$hw(&(0x7f00000000c0)={0x6, 0x14}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000002c0), &(0x7f0000000080)=0x1a, 0x0, 0x0) (async) close(r5) (async) socket(0x2, 0x4001, 0x0) r6 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000780), 0x20, 0x0) ioctl$VMM_IOC_TERM(r6, 0x80045604, &(0x7f00000007c0)={0x8}) (async, rerun: 64) ioctl$VMM_IOC_TERM(0xffffffffffffffff, 0x80045604, &(0x7f0000000140)={0xa}) (async, rerun: 64) setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) (async) poll(&(0x7f0000000100)=[{r6, 0x1c8}], 0x1, 0x400) 1.510360267s ago: executing program 5 (id=4086): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7c, 0xd, 0x60, 0x4}, {0x28, 0x4, 0x4, 0x6}, {0x806, 0x6, 0x10, 0x4}]}) sysctl$kern(0x0, 0x0, &(0x7f00000003c0)="71f91e3471ac0058095f4377bc5a91501d94a34b8e5f84cf71b59c7afec370827c9521d5", &(0x7f0000000080)=0x24, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x14}, 0x4, &(0x7f0000000400), &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[]) sysctl$vfs_ffs(&(0x7f00000000c0)={0x4, 0x1, 0x7}, 0x4, 0x0, 0x0, 0x0, 0x87) 1.509175102s ago: executing program 7 (id=4088): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000003, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x91f, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0x52adeb15, 0x7], [{0x4, 0x0, 0x0, 0x5}, {0xfffc, 0x22, 0x5}, {0x0, 0x0, 0xfffffffb, 0x80}, {0x5, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x2, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x5, 0x100, 0xf, 0xb}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x45, 0x6d5, 0x6}}}) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffff6, 0x1000100010008, 0xffffffffffffffff}) (async) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffff6, 0x1000100010008, 0xffffffffffffffff}) r0 = kqueue() kevent(r0, 0x0, 0xfffffffd, &(0x7f0000000040), 0x5, 0x0) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0) r2 = socket(0x2, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000180)={&(0x7f0000000340)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x22}, 0x0) (async) sendmsg$unix(r2, &(0x7f0000000180)={&(0x7f0000000340)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x22}, 0x0) ioctl$TIOCSETA(r1, 0xc4504449, &(0x7f0000000740)={0x0, 0x4000, 0x2f00, 0xf, "3901224200", 0x2007, 0x10}) (async) ioctl$TIOCSETA(r1, 0xc4504449, &(0x7f0000000740)={0x0, 0x4000, 0x2f00, 0xf, "3901224200", 0x2007, 0x10}) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaa68aaaa0000000000000800450000300000000000019078ac1400bbe00000010c009078000000004500007d0000000000060000e000000100000000"]) mknod(&(0x7f00000000c0)='./bus\x00', 0x2006, 0x4f4b) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) socket(0x18, 0x2, 0x0) (async) r3 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r3, 0xc1206925, &(0x7f0000000100)) (async) ioctl$FIONREAD(r3, 0xc1206925, &(0x7f0000000100)) chmod(&(0x7f0000000040)='.\x00', 0x35e) ioctl$TIOCMGET(0xffffffffffffffff, 0x4004746a, &(0x7f0000000140)) setrlimit(0x8, &(0x7f0000000980)={0x46, 0x56}) syz_open_pts() (async) r4 = syz_open_pts() close(r4) syz_open_pts() (async) syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000000)={0x800007ff, 0x1bc5, 0x2010003, 0x200499, "084880fa87f4ffbcda0988d11554e90d6602ff07", 0xe6, 0xffffffbf}) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000580)="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", 0x169}], 0x1) setuid(0xee01) mkdir(&(0x7f0000000000)='./file0\x00', 0x6) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x2, 0x0) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) 1.306369544s ago: executing program 5 (id=4092): r0 = socket(0x18, 0x3, 0x0) bind(r0, &(0x7f0000000140)=@in={0x2, 0x3}, 0xc) (async) bind(r0, &(0x7f0000000140)=@in={0x2, 0x3}, 0xc) recvmsg(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=""/228, 0xe4}, 0x1c02) (async) recvmsg(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=""/228, 0xe4}, 0x1c02) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x0, 0x510, 0x0) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x0, 0x510, 0x0) setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000080)=0x4, 0x4) setsockopt(r0, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4) (async) setsockopt(r0, 0x1000000029, 0x24, &(0x7f0000000000)="5ab7776a", 0x4) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x30, 0x37, 0x0, @rand_addr="8fd8b0e5602493ff1f88b029e0ad0c35", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c32e", 0x6, 0x6, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @loopback}}}}}}}) 1.306254131s ago: executing program 7 (id=4093): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7c, 0xe, 0x60, 0x4}, {0x2c, 0x2, 0x4, 0x6}, {0x6, 0x6, 0x10, 0x5}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="1ca14d34600001264a284bc16366bab863ef65ad", 0x14}], 0x1}, 0x5) sysctl$kern(0x0, 0x0, &(0x7f0000000400)="71f91e3471ac0058095f4377bc5a91501d94a34b8e5f84cf71b59c7afec370827c9521d5e43e5c51e6a79336d201e9b900a3798188261fcf54d9b835068a50d03975a4cc8d9350e4", &(0x7f0000000080)=0x48, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000080)="d81ad3d20cf7eb4e9b0800bc1a30", 0xe) r1 = socket(0x800000018, 0x1, 0x0) close(0xffffffffffffffff) listen(r1, 0x1) 1.18204571s ago: executing program 6 (id=4094): setuid(0xee01) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x4400) mprotect(&(0x7f0000019000/0x2000)=nil, 0x2000, 0x2) (async) open$dir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x501, 0x100) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffff6, 0x1000100010008, 0xffffffffffffffff}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000140)={0x0, 0x0}) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000340)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x0, 0xfffffffffffffff9, 0x1002, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x9, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x2, 0x4, 0x7b98, 0x9, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x11000, 0xfffffffffffffffe], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8000000100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x5, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5, 0x2}, {0x0, 0x0, 0xfffffffe, 0x81}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x40, 0x8}, {0xffff, 0x2003, 0x40000, 0x2000000000000000}, {0x6b7}, {0x0, 0x965, 0x0, 0x8}], {0x2000, 0x6, 0x5}, {0x29, 0x8, 0xb0, 0x2}}}) (async) r2 = kqueue() (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x39) ioctl$VNDIOCSET(r3, 0xc0104407, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) kevent(r2, &(0x7f0000000000), 0xe4a, 0x0, 0x8000, 0x0) 1.181190752s ago: executing program 7 (id=4095): execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) (async) r0 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa2aaaaaaaaa08004806003400640003069d90780000002cffffffff070b1effffffff00000010004c379e122e6dd931306e5100420e009078000b78"]) semget(0x2, 0x1, 0xb41) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x30}, 0x2, &(0x7f0000000080)="86023cfa83d008446736da29cfb19146cddb50abccb5d07de36511862235686d9ebcbb9edbb19fd4e063976e", &(0x7f0000000100)=0x2c, &(0x7f0000000140)="cc82b84418139f813b8235322ca1157c2ea04540c2455dd3a70695780f", 0x1d) (async) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000000)) 1.043216756s ago: executing program 5 (id=4097): setitimer(0x1, &(0x7f0000000040)={{0x1, 0x2}, {0x0, 0xe}}, 0x0) r0 = socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) pwritev(r1, &(0x7f0000000580)=[{&(0x7f0000000200)="63c39468818f1b3866ef3f34cf04cc547c39021ba025c44966ca0fd3fcb369abaab3aa767e61719362fd584fa709dfda311f5959e031650667ffcf80f4217dbea563702e2a0dea53727c022d7ecc57ecb22119c7da4c928c72cf3f9dd387f93b0703665eab579ef00f247b0cf0e98fa82efbf709981ee0c8bbc62521c9c8f2c251ab5c07a12e5c29b52d82ee2b07a06f4c", 0x91}, {&(0x7f0000000600)="2774b6ed82e0415c14b97cd04cc480f1b889a8902fde8d6af971c7d57c5c68249b9eb6a0db084816109267cec6c3052349a59c09afdafa3a18006d4ec36dc22c5545f65eeac1f95a589e3dcc5098c9851e25562880779025ce327be5f7b7a4c800652d", 0x63}], 0x2, 0x9fa6) unveil(0x0, &(0x7f0000000400)='r\x00') sysctl$kern(&(0x7f0000000200)={0x1, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$vfs_ffs(&(0x7f0000000000)={0x4, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$vfs_ffs(&(0x7f00000000c0)={0xa, 0x1, 0x10}, 0x3, &(0x7f0000000100)="a36c1624bad7380800dc93c6acc0c7500ef27178be89042d7be7f57c1b07676729a061a36e967d2b8dce3899e4281832d0ec7d78e1f774e5d5df694fdd2db8ad1eaf7e1c110189d39618e9987e67009e94868682ce05303b354b2126b74ddd5c31ea09d82d75adc4364399aa2a07f9cd5a7acb186dbf58282d5afb4cd7d1282f3e21dfb63cbbb1b63b7a9998", &(0x7f00000001c0)=0x8c, &(0x7f0000000440)="215d7a1105a27bcb8d9202692bb6d6d6b0cfcbad2b40a5c58da6c4109211cfcc351317eaf1613589f63ce653f87d1a265665f7ee3680bc4b8d32e6b652eb73c8317417973615715ec808fad3e0f09dcb738f484e2f2fa1f38651d8e6ae6dd27bd9e14e0bb8d2847c55755017f53c1e203e90a657de12be905f151dfad9086feba3ac21b1b52305c8c6d3aed0ae8a269c205c23f333605a5f7cbcb8ec33793488fa0efaf0f6cf6ca2479eb7c27d62df354018482bc10d5a38ab8eef294da44990b529caceaa984f3d1898b79c3fcd63f14bf94dc2bc280e3f092fbc50cb3f5ddc8dfc3072c70dc6", 0xe7) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x3, 0x201}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8}, 0xc) 1.03949569s ago: executing program 7 (id=4099): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x7, 0x0, 0xe, 0x5}, {0x6, 0xa, 0x5, 0x70}]}) write(0xffffffffffffffff, 0x0, 0x0) socket(0x18, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) socket(0x2, 0x3, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r2, 0x80206910, &(0x7f00000001c0)) mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x4) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x8, 0x7, 0xdf60, 0x1, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0x3, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d06}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x1, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0xfffffffd, 0x8}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x6}}}) r3 = kqueue() kevent(r3, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) 1.029160071s ago: executing program 6 (id=4100): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xffffffff, 0xfffffffc, 0x3, 0xffffff80, "0120002d29497f07af80d6df356bbb612c0800", 0x3, 0x3}) sysctl$kern(&(0x7f0000000040)={0x1, 0x2c}, 0x3, &(0x7f0000000180)="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", &(0x7f0000000080)=0xaa, &(0x7f00000007c0)="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", 0xffffff33) listen(0xffffffffffffffff, 0x3) r0 = syz_open_pts() ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f0000000000)=0x8e) 1.026726989s ago: executing program 4 (id=4101): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000140)={0x5, 0x81, 0x40000800, 0x10080000, "d76c1f46000000ef1f0160fbf520000002000f00", 0xfffffffa, 0xb}) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x59}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000640)='./file0\x00', 0x2, 0x22) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x7, 0xec2, 0xfff6, 0x1, 0x7fe, 0x4000800, 0x3b, 0x1, 0x1, 0xd7, 0x6}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) close(r1) 1.026523937s ago: executing program 6 (id=4102): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7c, 0xe, 0x60, 0x4}, {0x2c, 0x2, 0x4, 0x6}, {0x6, 0x6, 0x10, 0x5}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="1ca107d9ab09cee364e35177d9b8fe924d34c20d0eaabbc95dbaf468607c75ffa3dbc80cee9a95be67c298551471e315c979d2ecec626fd32fb0ae95ebad7b495a87ecf5", 0x44}], 0x1, 0x0, 0x0, 0x400}, 0x5) sysctl$kern(0x0, 0x0, &(0x7f0000000400)="71f91e3471ac0058095f4377bc5a91501da34b8e5f84cf71b59c7afec370827c9521d5e43e5c51e6a7937e4ac348d83136d2011fcf549350e400000000", &(0x7f0000000080)=0x3d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_emit_ethernet(0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="3672fcbcc21469ef1c08e5dff5385927f351c5909fbf14000baf000000"]) 893.806001ms ago: executing program 5 (id=4103): socket(0x800000018, 0x3, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x60}) r0 = syz_open_pts() close(r0) syz_open_pts() writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="20c92c", 0xfd39}], 0x1) r1 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffefc, 0xfffffffe, {[0xfffffffffffffffc, 0x10000000004ef, 0x5, 0x100000000, 0x0, 0x80000000, 0x400, 0x0, 0x0, 0x2f01, 0x2, 0x3, 0xfffffffffffffffe, 0x1, 0x4, 0x4, 0xfffffffffffffff7, 0x100], [0x5, 0x5, 0xfffffffffffffff8, 0x3, 0x1, 0x80000000, 0x6, 0x0, 0x0, 0x47], [0x8, 0x2, 0xa64, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x6, 0x3}, {0x2, 0x9d1, 0xfffffffe, 0xffc}, {0x1009, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0xfffffffe, 0xd, 0x1}, {0x7ffe, 0xd, 0x40007, 0x1}, {0xfffe, 0xfffffffc, 0x7}, {0x0, 0x95b, 0x200, 0xc}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x4, 0x2}}}) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x9, 0x1, 0x6, 0x7, "d196b6fb8987245b4c37dadb32980c2e7d736231", 0x498, 0x6}) kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) execve(0x0, &(0x7f0000000200)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00', &(0x7f0000000100)='*!\x00', &(0x7f0000000140)='.@\x00'], 0x0) r2 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaabaaaaaaaaaaaaaaaaaa08004806003400640003069d9078ffffffffffffffff070b1e000000007f000001000e009078000b0008000003fc0000000100000009"]) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) r3 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)='#', 0x1}], 0x1) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000000)={0x32, 0x3, 0xe, 0x0, "5a07390f72b7d559644da49db28c5b2e296fc93b", 0x10, 0x1}) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$FIONREAD(r2, 0x80206913, &(0x7f00000001c0)) 893.611805ms ago: executing program 2 (id=4104): syz_open_pts() r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000040)) 881.10018ms ago: executing program 2 (id=4105): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x5, &(0x7f00000000c0)=[{0x7c, 0xf, 0x60, 0x4}, {0x2c, 0x2, 0x4, 0x6}, {0x6, 0x6, 0xe, 0x5}, {0x4, 0x9, 0xb3, 0x2}, {0x4, 0x3, 0x0, 0x80000000}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f0000000400)="71f91e3471ac0058095f4377bc5a91501da34b8e5f84cf71b59c7afe", &(0x7f0000000080)=0x1c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) pipe(&(0x7f0000000140)) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000200)=ANY=[]) 880.841969ms ago: executing program 2 (id=4106): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETMODE(r1, 0x80045713, &(0x7f0000000400)) ioctl$KDSETLED(r0, 0x20004b42, &(0x7f0000000080)=0x7) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x4400) r2 = open$dir(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x101) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x0) r4 = accept(r3, &(0x7f0000000340)=@in, &(0x7f0000000380)=0xc) write(r4, &(0x7f0000000180)="000ae01880a48b6528e3a2e07a6360de87b0dde7f41b817e63c1f7448e95216e203bfe289528fd4df76827c712b2503c8b12ad287d44adee6b6b6d98418ecffec4d308cb6b5a5b4cb722f064202ed2717293c66f520938021ee8949e76fec540487164b213b306fa9fc49754a1fef5b4adf2f3c131", 0x75) r5 = socket(0x18, 0x3, 0x1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r6 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r5, 0x80286987, &(0x7f0000000100)) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r7, 0x0) fchmodat(r7, &(0x7f00000004c0)='./file0\x00', 0x184, 0x2) r8 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) pwritev(r8, &(0x7f0000000380)=[{&(0x7f0000000000)="6e36312176a768d8d60000000000000000000000003fcfacb361632b", 0x1c}], 0x1, 0x9) r9 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r10 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r10, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r9, 0x80146940, &(0x7f0000000100)) execve(0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@empty, @remote, [], {@arp={0x806, @generic={0x1e, 0x817d, 0x6, 0x8, 0x8, @empty, "606d038ceb35631c", @remote, "76831dae0a2ef054754753a438c8725d"}}}}) ioctl$FIONREAD(r2, 0x4004667f, 0x0) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="e33a176ed024000000ffffff7f350006817d06000003000000000000ffffffffffff66907ba5335a9b339dbbfe8eef20e0c6a853c9956a3a8cf8a31f0e11178626a94aaec8ec85871f0e853d86ef66d92eac9f1af0b9a4764f244b3c5249a75aa10f287de70e916e72f60314135ac2be9813e344107c58753c536546a0c8164a11a4f0e7"]) 879.419805ms ago: executing program 6 (id=4107): sysctl$kern(&(0x7f0000000000)={0x1, 0x16}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100051300000000000000", 0xb, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20420, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x25, 0xfd, 0x6}, {0x40, 0x10, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x3}]}) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) sysctl$hw(0x0, 0x0, &(0x7f00000002c0)="00040000003e187f8637b4149e293d0817c53fcb7c7d40c8acbe42f83ad2ef6e5cc15c10802975d4e48972691bf44f99222b5f066682e507957d82cf8ef1d5987e2d5d7e0af246aa9d4b77c0ce40f7cdff17e16a", &(0x7f0000000000)=0x54, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1, 0x30, 0x2, 0x0, 0x0, 0x67, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @icmp=@time_exceeded={0xb, 0x0, 0x0, 0x0, 0x83, 0x0, {0x5, 0x4, 0x1, 0x1, 0x3, 0x62, 0x101, 0x1, 0x1, 0x2, @empty, @remote={0xac, 0x14, 0x0}}}}}}}) sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001080), 0x4) 879.260754ms ago: executing program 4 (id=4108): readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x6, 0x1000004, 0x7, 0x545, "22f006000000009ba340c3000000000000007600", 0x3, 0xf}) link(0x0, &(0x7f0000000080)='.\x00') sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004001900000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 668.751145ms ago: executing program 0 (id=4109): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0xb}, 0x2, 0x0, 0x0, &(0x7f0000000140), 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4, &(0x7f0000000080), 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000700)='\x00\x00/z', 0x4}, {&(0x7f00000002c0)="968ce1c69d9498126527e1ad5174636898ad874ffb39b42f574f4f4cbc90acc1eb117d7e3bf3d52de5d57a7f2ec5c0d23a134ee65c5f70eee9f43f9c71342063cfdf9eb60982d3ed95723da70920bd1c6331d3e4e1891e80699e9058b7a39ae56ffa1c545b3dfa90cd36699a984bdaedff8dbf3d11d74e26036a", 0x7a}], 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000500)="670100000000000000f1b8d24e2217f981aa6a78ef1d357e382526b1616bf6932da7386d53c21ffd9037dcb8253c71b25cc4a113e83bfdc87b83dade35a400af2781f9a079d7dd4f6a483047274a1795a6980492ebcbe8c1aa188311d5ed0d597d521cef829ccd01f8a44b627559d73440d8be993d2c3da69715bb977e2e", 0x7e}], 0x1) execve(0x0, 0x0, 0x0) 454.294261ms ago: executing program 2 (id=4110): sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f0000001740), 0xfffffffffffffdff) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x54) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4) r0 = socket(0x24, 0x2, 0x0) setsockopt(r0, 0x6, 0x42, 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x38e0d, 0x100) getrusage(0x0, 0x0) 443.478439ms ago: executing program 0 (id=4111): r0 = getpid() mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xc, 0x1000000000002a2, 0x0, 0x0, 0x7, 0x80000000000000f, 0x3, 0x44}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x3, 0x0, 0xffbeffffffffbffe, 0xff, r0}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f00007dd000/0x1000)=nil, 0x1000, 0x5) r1 = socket(0x18, 0x1, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x0}, 0x8, 0x0}, 0x0) (async) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x4400) (async) r2 = open$dir(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x101) ioctl$FIONREAD(r2, 0x4004667f, 0x0) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe5, 0x0, 0x0, 0x0, 0x0, 0x1a3, 0x4003}, 0x8, 0xd7f, 0x0, 0x0, 0x1ff, 0x4000000000, 0xfffffffffffffffc, 0xb}) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000100)={0x10, 0xffffff01}) r4 = socket(0x18, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r5 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/136, 0x88}], 0x1) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r6 = socket(0x18, 0x2, 0x0) setsockopt(r6, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) (async) sendto(r6, &(0x7f0000000140)="c22aa2363f769f5181febfd321964aea63a801aa4d979978cfffdfe55a6815588c79f0c6c3402296b89d4e9712197e64563e292df62a0b3efdefdbed9382b804e73b3099ada1136fc512172e33778a47fcd90df0f7455cbc", 0x58, 0x1, &(0x7f00000001c0)=@un=@abs={0x0, 0x0, 0x3}, 0x8) (async) execve(0x0, 0x0, 0x0) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 442.169831ms ago: executing program 4 (id=4112): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6d4) r0 = open(&(0x7f0000000100)='./bus\x00', 0x200, 0x4d) ioctl$FIOASYNC(r0, 0x80047470, &(0x7f00000000c0)=0x5) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$BIOCSRTIMEOUT(r1, 0x8010426d, &(0x7f0000000140)={0x3, 0xc5a}) ioctl$WSKBDIO_SETENCODING(r0, 0x80045710, &(0x7f0000000040)=0x80000000) select(0x40, &(0x7f0000000300)={0x7, 0x5, 0x2, 0xbf, 0xa, 0x10000, 0x9, 0x101}, &(0x7f0000000340)={0x1, 0x4000000000000000, 0x2, 0x5, 0x8, 0x7c, 0x30886671, 0x3485}, &(0x7f0000000380)={0x9, 0x2, 0xffff, 0x5, 0x2, 0x5, 0xb682, 0xded}, 0x0) ioctl$WSDISPLAYIO_LSFONT(r0, 0xc058574e, &(0x7f0000000180)) 441.655457ms ago: executing program 7 (id=4113): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) (async) r1 = socket(0x800000018, 0x1, 0x0) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$VMM_IOC_INFO(r2, 0xc0185603, &(0x7f0000000240)={0x4c, 0x0, &(0x7f00000001c0)=""/76}) (async) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) (async, rerun: 32) sysctl$net_inet_ip(&(0x7f0000000200)={0x4, 0x2, 0x0, 0x5}, 0x4, 0x0, 0x0, &(0x7f00000001c0), 0x0) (rerun: 32) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x48e}, 0x3, 0x8000, 0x0, 0x0, 0x5, 0xb000000200004000, 0xe72b, 0x4}) (async) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) writev(r3, &(0x7f00000000c0)=[{&(0x7f00000002c0)="23213391", 0x4}], 0x1) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1000, &(0x7f0000000000)=0x10000, 0x4) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) (async) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) ioctl$VMM_IOC_RUN(r5, 0xc0205602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async, rerun: 32) symlinkat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') (async, rerun: 32) readlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x20001fffffffd}) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4c, 0x5, 0x26, 0x6}, {0x60, 0xe, 0x45, 0x2}, {0x209e, 0x9, 0x3, 0x2}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94100e4ac63c90dd", &(0x7f0000000080)=0x15, 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 32) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) 440.897422ms ago: executing program 4 (id=4114): r0 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) r1 = getppid() (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x4, @broadcast}, @icmp=@time_exceeded={0xb, 0x1, 0x0, 0x0, 0xb, 0x0, {0x5, 0x4, 0x1, 0x2, 0x2, 0x68, 0x1, 0xed, 0x11, 0x61a, @broadcast}}}}}}) (async) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x3, 0x1, 0xb, 0xfffffffffffffffb, r1}) (async) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x2, 0xf0}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) (async) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r3 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000000)=0x10000, 0x4) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x4004}, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x204000000000, 0x6, 0x25}) (async) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) sysctl$kern(&(0x7f0000000000), 0x6, 0x0, 0x0, 0x0, 0x0) (async) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x1204, r1) 332.41519ms ago: executing program 2 (id=4115): chflags(&(0x7f0000001280)='.\x00', 0x1) r0 = shmget$private(0x0, 0x4000, 0x211, &(0x7f0000321000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, 0x0) r1 = getuid() fchown(0xffffffffffffffff, r1, 0x0) r2 = getgid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0xfffffffe, 0x0, 0x0, r1, r2, 0x41, 0x14f}, 0x200, 0x7, 0x0, 0x0, 0xff, 0x4, 0x7}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() fcntl$setown(r3, 0x6, r4) r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) r6 = getpgid(0x0) fcntl$setown(0xffffffffffffffff, 0x6, r6) fcntl$setown(r5, 0x6, r6) r7 = getuid() r8 = getgid() r9 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) r10 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0) dup(r9) r11 = kqueue() kevent(r11, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r12 = socket$inet(0x2, 0x1, 0x1) socket$inet(0x2, 0x4000, 0x5) r13 = socket(0x10, 0x1, 0xff) r14 = open(&(0x7f0000000500)='./file0\x00', 0x80, 0x20) openat$wsmouse(0xffffffffffffff9c, &(0x7f00000001c0), 0x64c614851dcfa72f, 0x0) r15 = accept$unix(0xffffffffffffffff, &(0x7f0000000580)=@file={0x0, ""/251}, &(0x7f0000000680)=0xfd) r16 = fcntl$getown(0xffffffffffffff9c, 0x5) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) sendmsg$unix(r13, &(0x7f0000000840)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f00000002c0)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="d8351b34a9fa440162807ad768b222b87e6fedfc8333bf884a974ce2eee4d2a52a4583d5fac7b3224fc1ff7a2030d38d37c04ea7cd1badaec5051df271ebcf73f51746c2a6c5cfb62244a6720b8b085497ef98df78342ed925b5652ba2c70631a779c715be2ccb7f4c30a04cfcb62b534cf3cb8984b9a714744059e034ea76", 0x7f}, {&(0x7f0000000100)="a3d7badc566cc5aeff66eb43c9e7536e76b288fa6717116f508a09314a5d214f8ab46675199b6455079b7f1c0f9080111cd55d8c4e3264a784cf9ccaa72f3b94ed4a7568a1c0039694d47f38156534e44b29c5523a898c5555892bf18e23", 0x5e}, {&(0x7f0000000380)="6889db7af6815339eecd0d8f3a4e59be7804dc6cc3d4ebad1eae64fa697dd1aac1cae6cdebf73504fbac65ab2bab335c5e7329a50f469307ebb41177a4b293f46563b31386e0051619db1d964f1d79f299fac7a74cf8cd3bd56a21c69bc96b502a0c89aca77d7f43f76260881130061bd5d3f9d3231f22854283902e83871df164692715ed6ca678f1e7bd9bd9f2a6ceffaeb0059a3b691a7234f0", 0x9b}, {&(0x7f0000000240)="65218d10657c7165b6013684dfb96ca0f27ae3fdfad7d011a690eb9a08b1cac7fa7b1095c8a131fc280d5bf740ab435c940ec6e24c577a7cf39e32602d302a73c477bcab7d7f64f0a201f189891157efaaa65ef2a3c516ef50835db20d1f16bd629b3e03bfa1317da87fbd7e49c657fb595fada925b5194b7b", 0x79}], 0x5, &(0x7f0000000c80)=ANY=[@ANYBLOB="20000000ffff000200000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002800000000000000ffff000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="000000002000000000000000ffff000001000000", @ANYRES32, @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="5800000000000000ffe8a46b1a382f81f64c2e6d6cceff00", @ANYRES16=r6, @ANYRES16=r4, @ANYRES32=0xffffffffffffff9c, @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r16, @ANYRES32=r15, @ANYRES16=r12, @ANYRES32=r16, @ANYRES32, @ANYRES32=r17, @ANYBLOB="d6485d000000002e692b67"], 0x100, 0x40c}, 0xb) 271.45943ms ago: executing program 6 (id=4116): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e61) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8016, 0x2000007, 0x101, 0x80000005, 0x81ac, 0x10001, 0x10, [{0x0, 0x9, 0x0, 0x71002}, {0x2, 0x9, 0x8, 0xfffffff7}, {0x100, 0x81, 0x0, 0xd}, {0x4, 0x800, 0x8007, 0x7}, {0x83ff, 0x200727, 0x7, 0x7}, {0x1, 0x650, 0x400003, 0x7}, {0xce1, 0xffffffff, 0x4, 0x6c}, {0xd, 0x800, 0x14, 0x8}, {0x2, 0x4082, 0x8000005, 0x1005}, {0x6a75, 0x8001, 0xa94, 0x4}, {0x1cb, 0x10001, 0x0, 0x3}, {0x8, 0x9, 0x8, 0x8000002}, {0xb8d, 0x555981a6, 0xa3, 0x4}, {0x29a71717, 0xfffffff6, 0x7fffffff, 0x6}, {0x8, 0x2000005, 0x5, 0x10000000}, {0x0, 0x2, 0x1002, 0x30004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendto$inet6(r0, &(0x7f00000002c0)="9a80515b1cc9a881aa1056d004a2cca3cccd2227bb63710fda7dc2f6910c83a5758bf8719ac058e2c03b8f5ca73881234cc95d050c19c9c9a0790814fe63620be823eb9252e7728d8aea6c129d8a4a91a16534763e637114e82390bccbdbf9c2201ee1311d85ea0783546a314d21b84dbc6c473f186ef276c01b487bdb79bc247cf935b22bb48d8d7ef3e6dc2485a9439ba0cdf4f0b7e2ffb9fbd466d8b1b70c66d72f6793e33ffe32b108d655cf267f6085ceafb4e0e36ff8ec6d5f773815ab5ab2b980e42a87c50335996f8c87c3109b95aeca90e619d3da65201653c2fa9816231d", 0xe3, 0xc, 0x0, 0x1d) (async) clock_getres(0x3, &(0x7f0000000000)) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @random="d0b5049f6b63", [], {@ipv6={0x86dd, {0x0, 0x6, "36ea07", 0x38, 0x3a, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "5adf00", 0x0, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr}, @mcast1, [@fragment={0x89, 0x0, 0x0, 0x0, 0x0, 0x3, 0x67}]}}}}}}}) socket(0x1e, 0x4, 0x6) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='c\x00') 271.341896ms ago: executing program 4 (id=4117): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETA(r0, 0xc0284457, &(0x7f00000000c0)={0x9, 0xfffffffb, 0xfefffffc, 0x7fffffff, "0800000000060000000100002a370400", 0xee, 0x9}) 271.127996ms ago: executing program 4 (id=4118): kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x0, 0x8, 0x3}], 0x1000000, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) r1 = syz_open_pts() ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000000)=0x5) close(r1) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) socketpair(0x10, 0x3, 0x2b, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tty(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r7 = socket$inet6(0x18, 0x4, 0x7) r8 = syz_open_pts() ioctl$TIOCSETAF(r8, 0x802c7416, &(0x7f0000000040)={0x32f9c719, 0x0, 0x2, 0x4, "c9b91408388446eeb88ee450d099109a985f689c", 0x8, 0x4}) ioctl$FIOASYNC(r7, 0x8004667d, &(0x7f0000000200)=0x3) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = socket(0x2, 0x2, 0x0) close(r9) r10 = socket(0x6, 0x4000, 0xac) bind(r10, &(0x7f0000000000), 0x10) connect$unix(r10, &(0x7f0000000000), 0x10) connect$unix(r9, &(0x7f0000000000), 0x10) r11 = socket(0x2, 0x2, 0x0) bind(r11, &(0x7f0000000000), 0x10) connect$unix(r11, &(0x7f0000000000), 0x10) ioctl$TIOCSETAW(r8, 0x802c7415, &(0x7f00000005c0)={0x1, 0x2, 0x6, 0xfffffff9, "8f73727b6cc01b2120c84e958d24047f24cf4d62", 0x9, 0x9}) poll(&(0x7f0000000140)=[{r0, 0x100}, {r2, 0x100}, {0xffffffffffffffff, 0x80}, {r5, 0x80}, {r3, 0x2}, {r4, 0x10}, {r6, 0x20}, {r7, 0x2}, {r8, 0x4}], 0x9, 0x9) recvfrom(r0, &(0x7f0000000600)=""/4096, 0x1000, 0x2, &(0x7f00000001c0)=@in={0x2, 0x0}, 0xc) 270.951244ms ago: executing program 0 (id=4119): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x7c, 0xe, 0x60, 0x4}, {0x6, 0x6, 0x10, 0x5}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="6dc10016", 0x4}], 0x1) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)=""/239, 0xef}], 0x1, 0x0}, 0x1042) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000800)="19a3a2272cfe18431e0d6885ed65071d510fa950ba25e4a1a5756a8743f4bb52c2692caa128894a7e584b9f41c6d9d4509af74a8c4acc336623b874eab7697205ba0806a7cf938360630766e57fc76f3214e93cbb7a2c5e7d2e6b689bfb1a84cbb582d2dde9e6be4fa75b29cc4032dc9fe4e3978d9cd3d1c8bb3dba5ad91a4783f89b8ebbcd55af7f80992216bf5fca664fa1dfce579f0dbdfe17aba515219daa3213f87b60a7652fcc2ce4952d5ec9c560ded67bffdc53ab66a6f90f9fc935560d95446f2391b5d471afac0aba49cb2b54d83abd7b65b0935acdcf33e5f621359e6d775f7", 0xe5}, {&(0x7f00000003c0)="5ee045902458fba3cfb82b45f6d21e03e79ecb0a9b2098f6cf99508e61213e9e5338e7eb6db8e2f794be470e84ba6b8079f5e49140e5b34a6015427fb0017b4bbb2131dc9e9f8a541aacad5dedaf4c12cbd299720af7e9510b04fabcdc01bbbd774db37b616b9c7dbe006e12d22dde3e7a04145bcc766e84164945f56eafd70ebd752054b57062f4d9ebd1f2a09f3871ed797d2a834f1815faf1e584c85ae85e4388e5dfdcb05dfb12ab5b9b98b0d137e0a3cabdb413a59c003ba33f5253208ceb6dac55159a4d240f011ef126902960cb519799743ad01b8fcf774bd41638e0", 0xe0}], 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900)={0x100000000000000}, &(0x7f0000000440)) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close(0xffffffffffffffff) socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x8, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r2 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d3725864749b) ioctl$BIOCSETIF(r2, 0x80084904, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETIF(r2, 0x40384900, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r2, 0x80184902, &(0x7f00000000c0)={0x3, '.\x00'}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) fcntl$setown(r3, 0x6, 0x0) fcntl$setown(r3, 0x6, 0x0) syz_emit_ethernet(0x138, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket(0x2, 0x2, 0x0) 270.519752ms ago: executing program 2 (id=4120): mknod(&(0x7f0000000340)='./file0\x00', 0x8000, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) r0 = open(&(0x7f0000000080)='./file0\x00', 0x100, 0x29) execve(0x0, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000480)={'tap', 0x0}) r2 = dup(r1) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$WSKBDIO_SETBACKLIGHT(r3, 0x800c5712, 0x0) r4 = syz_open_pts() ioctl$TIOCSTOP(r4, 0x2000746f) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000200), 0x14}, {&(0x7f0000000900)=""/237, 0xed}, {&(0x7f0000000a00)=""/176, 0xb0}], 0x3) ioctl$BIOCSHDRCMPLT(r2, 0x80044275, &(0x7f00000000c0)=0x4) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, &(0x7f0000000140)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x4400) r5 = open(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x185) ioctl$FIOSETOWN(r5, 0x80047476, &(0x7f0000000000)=0x7) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59ccc313a6ef97d384be07afec37082232985c0de8bca6dbdc9764b261d12ce6847ca135d87ad00b62193d26d71940884cbf81ad478e80f75323a", &(0x7f0000000080)=0x50, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$hw(&(0x7f00000003c0)={0x6, 0xb}, 0x2, &(0x7f0000000400)="f3ac65ac4bb6c62f3bda270ac26a19d9ecafd0e637ab90bd8372885db1bced60599561313fc1", &(0x7f0000000440)=0x26, &(0x7f0000000800)="32cbbd39037fe2c24f066cc9e774455cf480a918ef791d976775f42974d270f8e91754f57913b6b330e81f41bfa35318573d9fda6cd485c1693b8f44db8c708a577718b069dbb64fecd0e443ff1ecde7fb584a9ac9dd0d370240cb6b397d8c86f0772a71e833416f701263429320de320adfc1f86120e7962394e6bee9e229950710eb4a5e37e90599363567a6dea3d70240bb34341751875e544f4265740aa3af82b985a6a1796e54bd5835559e23ef6b4232d270f49b0dc6d4700bec677a6f6bbc0079dd8333535ff172d2b87da4f661009ed1392b78ef6fe8ffbcaccd7a09e6764d9c", 0xe4) sysctl$net_inet_divert(&(0x7f0000000380)={0x4, 0x2, 0x102, 0x1}, 0x4, &(0x7f00000005c0)="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", &(0x7f0000000140)=0x85099f60, 0x0, 0x46) ioctl$BIOCGSTATS(r1, 0x4008426f, 0x0) setuid(0xee01) r6 = socket(0x2, 0x2, 0x0) r7 = socket(0x24, 0x2, 0x6) setsockopt(r7, 0x6, 0x0, 0x0, 0x2300) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r6, 0x80206980, &(0x7f00000001c0)) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) 261.611078ms ago: executing program 5 (id=4121): openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, 0xa4) nanosleep(&(0x7f0000000000)={0x8000000000007ffc, 0x7}, 0x0) sysctl$kern(&(0x7f0000000080)={0x1, 0x51}, 0x2, &(0x7f00000000c0)="0dc0a59c8169b03da0a46e63e7cd45b6097d351669dda8091b0580b833237ee371bc0976ea5950d2d2310d004c28c0e6ce52ceab5e2a96db4c98b3d82ff1df58f55c3b39c736e020", &(0x7f0000000140)=0x48, &(0x7f0000000180)="8d34243a1368197e43f8a645f9fbdb5c940ae1931ed80f603c41c8483a32b9ae0de7522f160070", 0x27) 261.372431ms ago: executing program 7 (id=4122): mmap(&(0x7f00002f2000/0xf000)=nil, 0xf000, 0x4, 0x4011, 0xffffffffffffff9c, 0x1) getppid() pipe(&(0x7f00000001c0)={0xffffffffffffffff}) fcntl$getown(r0, 0x5) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) getuid() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000400)='./bus\x00', 0x8000, 0x0}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f0000000100)=0x7) readv(r3, &(0x7f0000002680)=[{0x0}], 0x1) mmap(&(0x7f00002f2000/0xf000)=nil, 0xf000, 0x4, 0x4011, 0xffffffffffffff9c, 0x1) (async) getppid() (async) pipe(&(0x7f00000001c0)) (async) fcntl$getown(r0, 0x5) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) getuid() (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) (async) openat$vnd(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) (async) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000400)='./bus\x00', 0x8000, 0x0}) (async) pipe2(&(0x7f00000000c0), 0x4) (async) ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f0000000100)=0x7) (async) readv(r3, &(0x7f0000002680)=[{0x0}], 0x1) (async) 1.922709ms ago: executing program 3 (id=4123): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7c, 0xe, 0x60, 0x4}, {0x2c, 0x2, 0x4, 0x6}, {0x6, 0x6, 0x10, 0x5}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="1ca107d9ab09cee364e35177d9b8fe924d34c20d0eaabbc95dbaf468607c75ffa3dbc80cee9a95be67c298551471e315c979d2ecec626fd32fb0ae95ebad7b495a87ecf5", 0x44}], 0x1, 0x0, 0x0, 0x400}, 0x5) sysctl$kern(0x0, 0x0, &(0x7f0000000400)="71f91e3471ac0058095f4377bc5a91501da34b8e5f84cf71b59c7afec370827c9521d5e43e5c51e6a7937e4ac348d83136d2011fcf549350e400000000", &(0x7f0000000080)=0x3d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_emit_ethernet(0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="3672fcbcc21469ef1c08e5dff5385927f351c5909fbf14000baf000000"]) 1.30163ms ago: executing program 1 (id=4124): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7c, 0xe, 0x60, 0x4}, {0x2c, 0x2, 0x4, 0x6}, {0x6, 0x6, 0x10, 0x5}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000140)={0x0, 0x101, 0x5, 0x5, "fea207686c82c2027a3e6ada625864291573766e", 0x4, 0x6fc}) sysctl$kern(0x0, 0x0, &(0x7f0000000400)="71f91e3471ac0058095f4377bc5a91501da34b8e5f84cf71b59c7afe", &(0x7f0000000080)=0x1c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000200)=ANY=[]) 1.135185ms ago: executing program 6 (id=4125): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000), 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) open(&(0x7f0000000040)='./bus\x00', 0x200, 0x1a1) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='./file0\x00') 453.56µs ago: executing program 5 (id=4126): r0 = socket(0x2, 0x3, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802) setreuid(0xee00, 0x0) r1 = getuid() setuid(r1) chown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) mknod(&(0x7f00000001c0)='./file1\x00', 0x2000, 0x285b9a) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='c\x00') r2 = open(&(0x7f0000000800)='./file0\x00', 0x800, 0x10) kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x0, 0x0, 0x4000000, 0x8}, {{}, 0xfffffffffffffffa, 0xc0, 0x20000000, 0x7fffffffffffffff, 0x46ad}, {{}, 0xfffffffffffffff9, 0x1, 0xf0000000, 0x1, 0x8}, {{}, 0xfffffffffffffffc, 0x20, 0x4, 0x1fffffffd, 0xc3d}, {{}, 0xfffffffffffffffb, 0x37, 0xf0000000, 0x9, 0x3}, {{}, 0xffffffffffffffff, 0x6, 0x2, 0xe, 0x10000}, {{}, 0xffffffffffffffff, 0x14, 0x10, 0x2, 0x100000001}, {{}, 0x0, 0x80, 0x1, 0x1f70, 0x5}], 0x9, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)=""/62, 0x3e}], 0x1) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x3) r3 = msgget$private(0x0, 0x400) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) lchown(&(0x7f0000000080)='./file0\x00', 0x0, r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r10}}) r11 = getppid() pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setstatus(r12, 0x4, 0xc0) r13 = getpid() fcntl$setown(r12, 0x6, r13) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000200)={{0x3, r4, r7, r1, r10, 0x9, 0x5}, 0x8, 0xc, r11, r13, 0x6, 0x8, 0x200, 0xd}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x2) setsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000180)={r9, r4, r10}, 0xc) 144.59µs ago: executing program 3 (id=4127): r0 = socket$inet(0x18, 0x3, 0x102) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000180)="0366514f290d67a34341fd1d551dcd3b7b701ceed22e533786bc25e16c47607c41dfd6fe87865f802fe7c1023ce431c289fe8a543f71e08a49e41f3dea1c0010922d6d7d1f48b72fa0", 0x49) r2 = dup(r0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000513000000000000000004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41002", 0x62, 0x0, 0x0, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setuid(0xffffffffffffffff) ioctl$BIOCLOCK(r3, 0x20004276) ioctl$BIOCGSTATS(r3, 0x2000427e, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x11, 0x3, 0x0) sendto$unix(r4, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) getsockopt(r2, 0x107, 0x663, 0x0, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x5, 0xa000000000000}, {0x4, 0x8000}}) socket(0x6, 0x2, 0x6) accept$inet6(r2, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r5 = socket$inet6(0x18, 0x4, 0x32) r6 = getgid() r7 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r7, &(0x7f0000001b80)=[{&(0x7f00000005c0)="63d866", 0x3}], 0x1) execve(0x0, 0x0, 0x0) close(r7) getgroups(0x5, &(0x7f0000000100)=[0x0, r6, r6, r6, r6]) sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) setsockopt(r5, 0x4, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=4128): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xf7ffffffffffffed, 0xffffffffffffffff}) ftruncate(r0, 0x40000000007) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0x7, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d06}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7b, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d3, 0x6}}}) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000340)={&(0x7f0000000300), 0x2b}) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x80, 0x50) preadv(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x20, 0x0) socket(0x18, 0x4000, 0xf6) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x2011, r0, 0x3086) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error uvn_flush: obj=0xfffffd805edd9290, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 WARNING: thread `nfsio' (472677) exits with status -1 WARNING: thread `nfsio' (139809) exits with status -1 WARNING: thread `nfsio' (69938) exits with status -1 pckbd_enable: command error pckbd_enable: command error WARNING: thread `nfsio' (193518) exits with status -1 pckbd_enable: command error malloc(): allocation too large, type = 127, size = 7181888240 pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 denied attempt to set clock back 24 seconds pppx: unable to set addresses for pppx1, error=17 vnd0: sloppy read from proc 99575 (syz-executor): blkno 0 bcount 181 pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx1, error=17 lo0: can't handle af0 lo0: can't handle af0 uvn_flush: obj=0xfffffd800e0c13d0, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! pppx: unable to set addresses for pppx1, error=17 WARNING: thread `nfsio' (178115) exits with status -1 WARNING: thread `nfsio' (97224) exits with status -1 WARNING: thread `nfsio' (175675) exits with status -1 WARNING: thread `nfsio' (300612) exits with status -1 WARNING: thread `nfsio' (65091) exits with status -1 WARNING: thread `nfsio' (150492) exits with status -1 WARNING: thread `nfsio' (260189) exits with status -1 WARNING: thread `nfsio' (326913) exits with status -1 WARNING: thread `nfsio' (135240) exits with status -1 WARNING: thread `nfsio' (429208) exits with status -1 WARNING: thread `nfsio' (60677) exits with status -1 WARNING: thread `nfsio' (249172) exits with status -1 WARNING: thread `nfsio' (267696) exits with status -1 WARNING: thread `nfsio' (385462) exits with status -1 WARNING: thread `nfsio' (326398) exits with status -1 WARNING: thread `nfsio' (325891) exits with status -1 WARNING: thread `nfsio' (36530) exits with status -1 WARNING: thread `nfsio' (363510) exits with status -1 WARNING: thread `nfsio' (471685) exits with status -1 WARNING: thread `nfsio' (105984) exits with status -1 malloc(): allocation too large, type = 127, size = 7181888240 denied attempt to set clock back 3837708424 seconds 0008: 5.!",% 4/ 3%4 !$$2%33%3 &/2 00081, %22/2=17 $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 4263431070 3%#/.$3 $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 31457156 3%#/.$3 $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 23068552 3%#/.$3 uvn_flush: obj=0xfffffd806e0dc910, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code denied attempt to set clock forward to 52172937113390 uvn_flush: obj=0xfffffd800e0c13d0, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! uvm_fault(0xfffffd800b027b70, 0x0, 0, 1) -> e fatal page fault in supervisor mode trap type 6 code 0 rip ffffffff831def38 cs 8 rflags 10207 cr2 0 cpl 0 rsp ffff80002b44af60 gsbase 0xffff8000299edff0 kgsbase 0x0 panic: trap type 6, code=0, pc=ffffffff831def38 Starting stack trace... panic(ffffffff833a4594) at panic+0x1d0 kerntrap(ffff80002b44aeb0) at kerntrap+0x30b alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dt_ioctl_record_stop(ffff8000016b5000) at dt_ioctl_record_stop+0x108 dtclose(11e5f,81,2000,ffff800030fda2c0) at dtclose+0x109 spec_close(ffff80002b44b060) at spec_close+0x466 VOP_CLOSE(fffffd8067694d88,81,fffffd80097fb6e8,ffff800030fda2c0) at VOP_CLOSE+0x132 vn_closefile(fffffd805f6d7768,ffff800030fda2c0) at vn_closefile+0x12b fdrop(fffffd805f6d7768,ffff800030fda2c0) at fdrop+0x121 closef(fffffd805f6d7768,ffff800030fda2c0) at closef+0x192 fdfree(ffff800030fda2c0) at fdfree+0x116 exit1(ffff800030fda2c0,0,0,1) at exit1+0x576 sys_exit(ffff800030fda2c0,ffff80002b44b3d0,ffff80002b44b320) at sys_exit+0x1a syscall(ffff80002b44b3d0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x78fa95713d10, count: 242 End of stack trace. WARNING: SPL NOT LOWERED ON SYSCALL 71 64 EXIT 0 4 Stopped at savectx+0xae: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND *170075 83472 0 0 0x4000000 1 syz-executor 9047 93876 0 0x2 0x1 0 syz-executor savectx() at savectx+0xae end of kernel end trace frame: 0xeb54db58c30, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd800b027b70, 0x0, 0, 1) -> e ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0xeb54db58c30, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80002a366cd0 rbx 0 rdx 0xffff80000147d740 rcx 0xffff800030fda7f0 rax 0x33 r8 0xffff80002a366c00 r9 0x1 r10 0xa4300cbfecfa7287 r11 0xbb94188f32b59109 r12 0 r13 0 r14 0xffff800030fda7f0 r15 0 rip 0xffffffff82ec33ee savectx+0xae cs 0x8 rflags 0x46 rsp 0xffff80002a366c50 ss 0x10 savectx+0xae: movl $0,%gs:0x688 ddb{1}> show proc PROC (syz-executor) tid=170075 pid=83472 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=86, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800030fdb780,0xffff800030fda2d0 process=0xffff80002b427050 user=0xffff80002a361000, vmspace=0xfffffd800b027988 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 56743 156826 56478 0 3 0 kmmaplk syz-executor 46430 265912 1824 0 2 0 syz-executor 46430 318959 1824 0 3 0x4000000 kmmaplk syz-executor 94174 410029 78247 0 2 0 syz-executor 68595 136382 71359 0 2 0 syz-executor 68595 449186 71359 0 3 0x4000080 fsleep syz-executor 22406 352437 93876 0 2 0 syz-executor 22406 133925 93876 0 3 0x4000080 fsleep syz-executor 5173 359580 34856 0 2 0 syz-executor 5173 243298 34856 0 3 0x4000080 fsleep syz-executor 5173 247261 34856 0 2 0x4000000 syz-executor 83472 383218 50521 0 2 0 syz-executor *83472 170075 50521 0 7 0x4000000 syz-executor 83472 440629 50521 0 3 0x4000080 fsleep syz-executor 83472 80876 50521 0 3 0x4000080 fsleep syz-executor 93876 9047 82831 0 7 0x3 syz-executor 1824 398954 82831 0 3 0x82 nanoslp syz-executor 78247 467630 82831 0 2 0x3 syz-executor 20986 303830 82831 0 2 0x3 syz-executor 34856 410237 82831 0 2 0x3 syz-executor 50521 173486 82831 0 2 0x3 syz-executor 71359 355480 82831 0 2 0x3 syz-executor 78546 100888 47673 0 3 0x82 sbwait sshd-session 56478 295980 82831 0 3 0x82 nanoslp syz-executor 98387 196678 0 0 3 0x14200 bored sosplice 82831 320365 98999 0 3 0x82 kqread syz-executor 98999 485632 96005 0 3 0x10008a sigsusp ksh 96005 295390 46344 0 3 0x98 kqread sshd-session 46344 121445 47673 0 3 0x92 kqread sshd-session 75728 426492 1 0 3 0x100083 ttyin getty 47673 23835 1 0 3 0x88 kqread sshd 74578 317259 33528 74 3 0x1100092 bpf pflogd 33528 488792 1 0 3 0x80 sbwait pflogd 76567 349377 55193 73 3 0x1100090 kqread syslogd 55193 232163 1 0 3 0x100082 sbwait syslogd 46582 234073 1 0 3 0x100080 kqread resolvd 40321 100254 77005 77 3 0x100092 kqread dhcpleased 71784 225448 77005 77 3 0x100092 kqread dhcpleased 77005 477159 1 0 3 0x80 kqread dhcpleased 42746 220522 0 0 3 0x14200 bored smr 64404 391766 0 0 2 0x14200 zerothread 20801 19510 0 0 3 0x14200 aiodoned aiodoned 72635 500642 0 0 3 0x14200 syncer update 57548 206543 0 0 3 0x14200 cleaner cleaner 13086 66246 0 0 3 0x14200 reaper reaper 39532 32899 0 0 3 0x14200 pgdaemon pagedaemon 86867 476363 0 0 3 0x14200 bored viomb 68637 271829 0 0 3 0x40014200 acpi0 acpi0 36904 333950 0 0 3 0x40014200 idle1 13261 79365 0 0 3 0x14200 bored softnet1 57017 515298 0 0 3 0x14200 netlock softnet0 64306 456639 0 0 2 0x40014200 systqmp 26978 346132 0 0 3 0x14200 bored systq 62251 14658 0 0 3 0x14200 tmoslp softclockmp 70302 427949 0 0 3 0x40014200 tmoslp softclock 89391 333124 0 0 3 0x40014200 idle0 1 262464 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 22406 (syz-executor) thread 0xffff80002b450d30 (352437) exclusive rwlock vmmaplk r = 0 (0xfffffd806b9c6300) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x3c6 #7 recall_trap+0x8 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10253 11231K 12853K 166960K 19700 0 pcb 17 18K 20K 166960K 823 0 rtable 261 16K 16K 166960K 1103 0 pf 38 18K 21K 166960K 402 0 ifaddr 43 9K 9K 166960K 304 0 ifgroup 60 2K 2K 166960K 533 0 sysctl 4 1K 9K 166960K 50 0 counters 70 37K 38K 166960K 564 0 ioctlops 0 0K 4K 166960K 2132 0 iov 0 0K 28K 166960K 332 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1537 97K 97K 166960K 5757 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 616K 624K 166960K 72 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 220 0 dirhash 12 2K 2K 166960K 117 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 240K 166960K 4642 0 sigio 1 0K 0K 166960K 145 0 proc 72 115K 164K 166960K 1377 0 subproc 72 4K 4K 166960K 248 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 500 0 in_multi 81 6K 7K 166960K 450 0 ether_multi 1 0K 0K 166960K 30 0 mrt 1 0K 0K 166960K 24 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 235 1049K 1049K 166960K 235 0 exec 0 0K 1K 166960K 1325 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 75 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 265 180K 209K 166960K 41662 0 UVM aobj 154 6K 6K 166960K 161 0 pinsyscall 45 90K 104K 166960K 6186 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 201 0 NDP 13 0K 2K 166960K 226 0 temp 91 8656K 8912K 166960K 180218 0 kqueue 14 22K 35K 166960K 779 0 SYN cache 2 8K 16K 166960K 3 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 418 0 414 3 2 1 2 0 8 0 rtentry 176 383 0 292 5 0 5 5 0 8 0 unpcb 144 2725 0 2705 23 21 2 6 0 8 1 syncache 336 16 0 16 8 8 0 1 0 8 0 tcpqe 32 5 0 5 4 4 0 1 0 8 0 tcpcb 736 1804 0 1796 43 36 7 10 0 8 6 arp 136 43 0 26 1 0 1 1 0 8 0 ipq 40 2 0 2 1 0 1 1 0 8 1 ipqe 40 6 0 6 1 0 1 1 0 8 1 inpcb 328 5166 0 5151 64 56 8 13 0 8 5 nd6 152 72 0 57 1 0 1 1 0 8 0 pkpcb 40 26 0 26 7 6 1 1 0 8 1 kcovpl 48 27 0 19 1 0 1 1 0 8 0 mppekey 1024 2 0 2 2 2 0 1 0 8 0 ppxss 1192 185 0 184 2 1 1 1 0 8 0 pppxif 1504 29 0 29 5 5 0 1 0 8 0 pffrag 232 36 0 29 1 0 1 1 0 482 0 pffrnode 88 13 0 8 1 0 1 1 0 8 0 pffrent 40 80 0 73 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 203 0 135 1 0 1 1 0 8 0 pfstkey 128 203 0 136 3 0 3 3 0 8 0 pfstate 384 202 0 135 9 0 9 9 0 8 0 pfrule 1344 29 0 24 2 1 1 2 0 8 0 rttmr 136 6 0 6 5 5 0 1 0 8 0 art_heap8 4096 5 0 1 5 1 4 4 0 8 0 art_heap4 256 1727 0 1331 46 19 27 32 0 8 0 art_table 40 1732 0 1332 6 1 5 6 0 8 0 art_node 32 368 0 291 1 0 1 1 0 8 0 sysvmsgpl 40 10 0 1 1 0 1 1 0 8 0 semupl 112 2 0 2 2 2 0 1 0 8 0 semapl 112 211 0 201 1 0 1 1 0 8 0 shmpl 112 158 0 7 5 0 5 5 0 8 0 dirhash 1024 89 0 72 3 0 3 3 0 8 0 dino2pl 256 9685 0 8130 98 0 98 98 0 8 0 ffsino 296 9685 0 8130 121 1 120 120 0 8 0 nchpl 144 15460 0 13729 65 0 65 65 0 8 0 rtmask 32 26 0 26 7 6 1 1 0 8 1 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 56505 0 56505 5 4 1 1 0 8 1 percpumem 16 297 0 247 1 0 1 1 0 8 0 kstatmem 264 342 0 314 8 5 3 3 0 8 1 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 scsiplug 72 41 0 41 7 6 1 1 0 8 1 scxspl 216 98619 0 98619 15 14 1 8 1 8 1 plimitpl 152 1041 0 1023 1 0 1 1 0 8 0 sigapl 424 4871 0 4821 10 3 7 9 0 8 0 knotepl 120 644 0 0 17 0 17 17 0 8 0 kqueuepl 224 1778 0 1768 21 16 5 5 0 8 4 pipepl 344 687 0 656 15 12 3 9 0 8 0 fdescpl 528 4816 0 4783 3 0 3 3 0 8 0 filepl 160 31996 0 31762 57 41 16 20 0 8 2 lockfpl 104 3550 0 3546 5 3 2 2 0 8 1 lockfspl 48 1443 0 1439 1 0 1 1 0 8 0 sessionpl 144 51 0 41 1 0 1 1 0 8 0 pgrppl 48 120 0 102 1 0 1 1 0 8 0 ucredpl 104 4845 0 4831 1 0 1 1 0 8 0 zombiepl 144 5717 0 5716 3 2 1 1 0 8 0 processpl 1232 4871 0 4821 7 1 6 6 0 8 0 procpl 664 11801 0 11743 8 0 8 8 0 8 0 sosppl 168 31 0 31 8 8 0 1 0 8 0 sockpl 752 8526 0 8487 106 94 12 27 0 8 6 mcl64k 65536 27 0 0 3 0 3 3 0 8 0 mcl16k 16384 14 0 0 2 0 2 2 0 8 0 mcl12k 12288 4 0 0 1 0 1 1 0 8 0 mcl9k 9216 6 0 0 1 0 1 1 0 8 0 mcl8k 8192 8 0 0 1 0 1 1 0 8 0 mcl4k 4096 126 0 0 16 0 16 16 0 8 0 mcl2k2 2112 4 0 0 1 0 1 1 0 8 0 mcl2k 2048 48 0 0 6 0 6 6 0 8 0 mtagpl 96 6 0 0 1 0 1 1 0 8 0 mbufpl 256 630 0 0 35 0 35 35 0 8 0 bufpl 280 44220 0 38077 440 0 440 440 0 8 0 anonpl 32 14937 0 0 120 0 120 120 0 246 0 amapchunkpl 152 143453 0 142821 79 47 32 37 0 158 4 amappl16 200 13798 0 13723 131 114 17 30 0 8 8 amappl15 192 8 0 8 1 1 0 1 0 8 0 amappl14 184 176 0 163 1 0 1 1 0 8 0 amappl13 176 7 0 7 1 1 0 1 0 8 0 amappl12 168 5773 0 5740 3 1 2 2 0 8 0 amappl11 160 55 0 41 1 0 1 1 0 8 0 amappl10 152 4 0 4 1 1 0 1 0 8 0 amappl9 144 254 0 254 2 1 1 1 0 8 1 amappl8 136 26 0 23 1 0 1 1 0 8 0 amappl7 128 174 0 161 1 0 1 1 0 8 0 amappl6 120 376 0 371 1 0 1 1 0 8 0 amappl5 112 200 0 190 1 0 1 1 0 8 0 amappl4 104 358 0 337 1 0 1 1 0 8 0 amappl3 96 26115 0 26010 6 3 3 4 0 8 0 amappl2 88 5181 0 5090 3 0 3 3 0 8 0 amappl1 80 29592 0 28903 16 0 16 16 0 8 0 amappl 88 39898 0 39716 5 0 5 5 0 92 0 dma65536 65536 2 0 2 2 2 0 1 0 8 0 dma16384 16384 1 0 1 1 0 1 1 0 8 1 dma8192 8192 1 0 1 1 1 0 1 0 8 0 dma4096 4096 2 0 2 2 2 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 8 0 8 3 3 0 1 0 8 0 dma128 128 282 0 282 7 6 1 1 0 8 1 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 160 0 7 3 0 3 3 0 8 0 uaddrrnd 24 4816 0 4783 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 4816 0 4783 1 0 1 1 0 8 0 vmmpekpl 168 35062 0 34998 4 0 4 4 0 8 0 vmmpepl 168 300541 0 298253 157 40 117 122 0 357 4 vmsppl 488 4815 0 4783 5 0 5 5 0 8 0 rwobjpl 80 79283 0 72098 162 7 155 157 0 8 0 pdppl 4096 9640 0 9566 134 60 74 84 0 8 0 pvpl 32 22578 0 0 182 1 181 181 0 265 0 pmappl 256 4815 0 4783 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 420 0 138 9 0 9 9 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837d7ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83988bd0) at __mp_lock+0x192 softintr_dispatch(2) at softintr_dispatch+0x125 dosoftint(2) at dosoftint+0x54 Xsofttty() at Xsofttty+0x27 __mp_lock(ffffffff83988bd0) at __mp_lock+0x190 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff83988bd0) at __mp_lock+0x192 ktrsyscall(ffff8000fffee018,b,20,ffff80003c427350) at ktrsyscall+0x2c7 syscall(ffff80003c427350) at syscall+0x304 end trace frame: 0xffff80003c4273d0, count: 0 ddb{0}> trace x86_ipi_db(ffffffff837d7ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83988bd0) at __mp_lock+0x192 softintr_dispatch(2) at softintr_dispatch+0x125 dosoftint(2) at dosoftint+0x54 Xsofttty() at Xsofttty+0x27 __mp_lock(ffffffff83988bd0) at __mp_lock+0x190 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff83988bd0) at __mp_lock+0x192 ktrsyscall(ffff8000fffee018,b,20,ffff80003c427350) at ktrsyscall+0x2c7 syscall(ffff80003c427350) at syscall+0x304 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x74bccccdbd10, count: -15 ddb{0}> machine ddbcpu 1 Stopped at savectx+0xae: movl $0,%gs:0x688 savectx() at savectx+0xae end of kernel end trace frame: 0xeb54db58c30, count: 14 ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0xeb54db58c30, count: -1