last executing test programs: 1.648134963s ago: executing program 2 (id=112): sysctl$hw(&(0x7f0000000000)={0x6, 0x9}, 0x2, &(0x7f0000000200)="520557b09f6fdb1cf1ab7fedadf0c240594c7e77e8c4b2372815b7f6af7e3727a439f54bbe04d3080000000ed1e9c609ab3c1984ea842d7ce861cc441f310ef6e299bbd90411502fb708fbd7977409b62059deaef404e4a188e43be7ddf9b49b2ab6dfee884643fd6f156f69cf2c3401896224a74b546ea6650129a9e85ef3a49304970f400376dcf401dc1cf8ed638e4e64d6ac9010124258c31f9ddf643c174dcdebbd9be9b661ca28ac131e184295a0d192139381393469077bb4030029cf1649d9c404c58f3037dc213646b12c6d3368c081b595c888d1f4659dbe24cca3f2a46d2b9e7dba92eb66133de38b184adf6837f1854278aeb7708ec0aed1010000006f1c9248376abe1c4383defb7321c68e06d8cf04aed52cf945d08ce2af02684f92595037cdd8583d60fd990d82ecfb1c68490000000000000000000c855eb9be75a206875bd76b95eb9855a133a059e65ecc5144d109ebc9a9e74f55b564398158398ef7ac09e5b273e36f971a921ec8b33918c806699d3ada550b8228732d63d94e748e836ce4e0f63e1d70b150c0c2f3", 0x0, 0x0, 0x0) 1.647541338s ago: executing program 2 (id=114): r0 = socket$inet(0x2, 0x2, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) close(r1) (async) close(r1) getsockname(r1, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000180)='\x00', 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000000)="176b7f9ba6de831f79b841198173dc3e25c2e616a82e48519d93ad0390933c8c6755c66e4497687d0013e8755678c521077608bcd7b06da1fd42c262a718e77fdc5858c23c", 0x45) 1.647040136s ago: executing program 2 (id=116): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) (async) r1 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) (async) setreuid(0xee00, 0x0) (async) r2 = getuid() setreuid(r2, r2) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x20000000200005f}) r3 = syz_open_pts() close(r3) syz_open_pts() ioctl$FIOASYNC(r3, 0x80047469, &(0x7f00000000c0)=0x5) (async) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="8e5b9d745cde6b33c48319c8a067bc2c4e7b8019dea8e38b42bcf76cf6ba876c4dde44d7725458ae05b87e25477870d1f8c99ddc7174b5028b3d5a5ddb85e6bac8599817c299095c20f13e48b5ac3d25e1b0c3613240ed5ed034923595274d9d887eb571e35543288617b359e5649bbddc", 0x71}], 0x1) r4 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa0000aaaaaa080048ed4c67f7640003069d9078ffffffffffffffff070b1effffffff00000010000e009078000b0008000003ff0000000100000009"]) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) (async) r5 = kqueue() kevent(r5, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) ioctl$FIONREAD(r1, 0x80206982, &(0x7f00000001c0)) r6 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r6, 0xc0406938, &(0x7f0000000100)) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x402, 0x0) (async) fchmod(r0, 0x121) (async) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x115) ioctl$TIOCSETAW(r7, 0x802c7415, &(0x7f0000000140)={0xffffffff, 0x0, 0xfffffff0, 0x1, "8b030003000100787d902b56d864d3c3a3f4d3c9"}) (async) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$BIOCSRTIMEOUT(r8, 0x8010426d, &(0x7f0000000040)={0x2925, 0x7fffffff}) 1.387329795s ago: executing program 0 (id=123): setitimer(0x0, &(0x7f0000000000)={{0x0, 0x8000000000008000}, {0x1, 0x9}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x5, 0xc0fa, 0x3, 0x6, "fa3924cefebc6bb389bf485f3ebe56053315dc20", 0x800, 0x7ffd}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x3, &(0x7f0000000440)="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", &(0x7f0000000080), &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x8, 0x1}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x2, &(0x7f0000000000)={0x60000000, 0x60000000}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)) 1.38049897s ago: executing program 0 (id=125): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) sysctl$hw(&(0x7f0000000000)={0x6, 0x3}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) r1 = getpid() ktrace(&(0x7f00000001c0)='./file0\x00', 0x1, 0x40000534, r1) recvmmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x2}, 0x10, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x74, 0xdc, 0x2, 0x407}, {0x3, 0x8f, 0xff}, {0x1ae, 0x3, 0x4, 0xfffffffe}]}) syz_emit_ethernet(0x17a, &(0x7f00000001c0)=ANY=[]) ioctl$WSDISPLAYIO_LDFONT(r2, 0x8058574d, &(0x7f0000000140)={'./file0\x00', 0x1, 0x6, 0x5, 0x1, 0x0, 0xfffffccf, 0x2, 0x2, 0x0, 0xf, 0x5}) sysctl$kern(&(0x7f0000000600), 0x2, &(0x7f0000000740)="c3eef61d26c0980db7cbd02750e591815809b6520cb96aa29ad2bc1b3b990352c0fecebd225bd22f51e564bbfee30d85915944efb26491ac642102e7e33d0361135178661c51aae83a5a2936c61b7814f90f572bc3d16091bd195170fbae287629c5d9802b22732c666d63c936377f64bbf14948bd85f46ac21e02b7e42b51117ed91b9680834ebefa474336031e8afe2a6627998054bf4539212749af5e7daa26ff64a4efa451ad38120d4961cbedfbd83447fb795c090cf39c540d09cb708062e116c8bbaf024a5ecc4b7ed95323a9cad57f818ef38979b13b6c74e61d8c13953621b1896ab593dee333d569931edb44158ef9437201a8e1", &(0x7f0000000640)=0xf9, &(0x7f0000000680)="cabaf9223caf6ba926b6a50388c85b99d1afa88c9e1538b2361d84aca1a310840d6976d6a84551705d0d364b7c06f44677622fe941c05429b1a56dd042da929c6ba2585a541075701b1310ad3e7ac97bc3b2770620fbac3b2b44b6ca0ad27b0f7033e5173d52373d77daee", 0x6b) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x10, 0x0, 0x0) sysctl$kern(&(0x7f00000005c0)={0x1, 0x5}, 0x2, &(0x7f00000004c0)="1a0fd9b6305759418420ac07df305ab32613a92ae389a8e4569017fbb887a5adc553f044bf24f740df8f60e07011ca78a56d12351cd497deb089acc9632c95ddfcc9d09c53cea0376fce22d6e8c72dd9586735e3d9f0709c381792495c548651aad9d7801e9b322f69d95181b7a0babebf64b072dbfb21bd56911be22299acfd3bfda53d0100b0", 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000000080)={0x0}, 0x6a, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x18000) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xbe4, 0x7f, 0x1, 0x3f}]}) dup2(r5, r0) r7 = socket$inet(0x2, 0x8001, 0x0) getsockopt(r7, 0x6, 0x1, 0x0, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = getpid() fcntl$setown(r8, 0x6, r9) bind$unix(r8, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r8, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) connect$unix(r10, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) close(r8) 1.3353823s ago: executing program 7 (id=128): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0xd741, 0x3, 0xe, 0x324}, {0x0, 0x6, 0x2, 0x7ff}, {0xadc, 0x5f, 0xc}, {0x4, 0x99, 0xe, 0xfffffffe}, {0x3, 0x8}]}) socket(0x2, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) setgroups(0xffffffffffffffd2, 0x0) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = kqueue() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) kevent(r1, &(0x7f0000000140)=[{{r2}, 0xfffffffffffffffe, 0x2c5d36d679bbffbf}], 0xe4a, 0x0, 0xa9fa, 0x0) kevent(r1, 0x0, 0x0, &(0x7f00000001c0), 0x9, 0x0) sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, &(0x7f00000000c0)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af7e54a8341f3be673a174c3a12223a171ff2ab99d0e0d43f0a6c3948f11658e876ac2126614dcd00fdfe76f1ace1f77da0c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e491010010791840000000000000000081131a6f0b680f72f2b0d9a19e570400"/151, &(0x7f0000000180)=0x97, &(0x7f00000001c0), 0x4) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup2(r3, r4) r5 = kqueue() kevent(r5, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x80206919, &(0x7f00000001c0)) r6 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r6, 0x8040691a, &(0x7f00000001c0)) 1.334368147s ago: executing program 0 (id=131): r0 = socket$inet(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setitimer(0x2, &(0x7f0000000140)={{0x0, 0x40000000003}, {0xffffffff}}, 0x0) close(r0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x1}, {0x4, 0xe2, 0xf, 0x100}, {0x3, 0x7, 0xf15, 0x4}, {0x788c, 0xffff, 0x8, 0x9}, {0x4, 0x800, 0x3, 0x9}, {0x9, 0x9, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0x3, 0xfffffffc, 0x800, 0x8bfd}, {0x0, 0x0, 0xa, 0x7}, {0x3, 0xc7cb, 0x800000, 0xa6a}, {0x401, 0x6, 0x9, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48b}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x2, 0x2, 0x69}]}) sysctl$vm(&(0x7f0000000040)={0x6, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000400)='\n', 0x1}], 0x1) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)="7930133b447a41901d561002d02c79845aedb754e2ddab8cbe7b47c0264852410a", 0x21}], 0x1) 1.270791533s ago: executing program 0 (id=133): r0 = socket$inet6(0x18, 0x8000, 0x7a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x69, &(0x7f0000000000)={{0x18, 0x2, 0x7, 0x9}, {0x18, 0x2, 0x6, 0xe}, 0x1, [0xc, 0x4, 0x0, 0xff, 0x5b1, 0x3, 0xb42b, 0xffffffff]}, 0x3c) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0xb8e8dabee249e28c, 0x0) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000080)={0x6, 0x1, 0x0, 0x2, "adc1ae49a790a9370dbe5b37a45490d6a367aac2", 0x4, 0x95}) r2 = getpid() fcntl$setown(r0, 0x6, r2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000000c0)={0x7, 0x1, 0x7, 0xef9f, 0x4}, 0xc) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/34, 0x22}, {&(0x7f0000000140)=""/8, 0x8}], 0x2) ktrace(&(0x7f00000001c0)='./file0\x00', 0x1, 0x30, r2) r3 = socket(0x6, 0x2, 0x9) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) poll(&(0x7f0000000240)=[{r0, 0x100}, {r3, 0x4}, {r4, 0x2}, {0xffffffffffffff9c, 0x4}], 0x4, 0xfffffff5) r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) ioctl$WSDISPLAYIO_LDFONT(r5, 0x8058574d, &(0x7f00000002c0)={'./file0\x00', 0x3, 0x67, 0xb5a5, 0x1, 0x10001, 0x4, 0x1000, 0x2, 0x2, 0x2, 0x7}) ktrace(&(0x7f0000000340)='./file0\x00', 0x2, 0x8, r2) setrlimit(0x2, &(0x7f0000000380)={0x60000000, 0x60000000}) r6 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) ioctl$WSMOUSEIO_GCALIBCOORDS(r6, 0x41205725, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) r7 = getuid() fchownat(r3, &(0x7f0000000540)='./file0\x00', r7, 0xffffffffffffffff, 0x4) r8 = socket$inet6(0x18, 0x7, 0x2) getsockname$inet6(r8, &(0x7f0000000580), &(0x7f00000005c0)=0xc) r9 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000600), 0x10000, 0x0) ioctl$BIOCVERSION(r9, 0x40044271, &(0x7f0000000640)) close(r5) r10 = semget(0x3, 0x1, 0x82) semctl$GETVAL(r10, 0x1, 0x5, &(0x7f0000000680)=""/4096) openat$pci(0xffffffffffffff9c, &(0x7f0000001680), 0x2, 0x0) ioctl$TIOCSWINSZ(r1, 0x80087467, &(0x7f00000016c0)={0x5800, 0xceb, 0x4, 0x1}) listen(r0, 0xbd6) 1.189999002s ago: executing program 2 (id=138): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x20, 0x0) r1 = socket$inet(0x2, 0x3, 0x8) r2 = socket(0x2, 0x2, 0x0) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0x2a, 0x0, 0x0) dup2(r1, r2) sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r2, &(0x7f0000000000), 0x10) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000240)='./file0\x00', 0x2, &(0x7f0000000180)='./file0\x00', 0x8}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x14}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="c4993ffc", 0x4) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="8faa02ede655ffffffffffff86dd605f6ad900403a0000000000000000000000000000000000fe8000000000000000000000000000aa02009078000010006006c33e005230cf904c51cb1d000000fe8000000000000080000000000000aaff02000000000000000000000000000188010000000000000103000000040103"]) 1.16547713s ago: executing program 0 (id=142): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) (async, rerun: 64) r1 = syz_open_pts() (rerun: 64) execve(0x0, &(0x7f00000001c0)=[&(0x7f00000000c0)='/dev/speaker\x00'], 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x50, 0x0, 0x37) (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000080)={0x27ffc, 0x4007fff, 0x8000083, 0x5773c550, "142e28a47e7ce2dbe73100ffffff0d1300", 0x9, 0x80000080}) (async) openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async, rerun: 64) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="a3369c632fa93e98eff4d52dd9b8401fe7872e537ce84839257e36dca1", 0x1d}], 0x1) (async, rerun: 64) openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) 1.077463456s ago: executing program 0 (id=145): setrlimit(0x7, &(0x7f0000000980)={0xac35, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() writev(r0, &(0x7f0000000280)=[{&(0x7f0000000b00)="ff0959d8635a8c34aa68d3c020df9236b504ff", 0x13}], 0x1) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/201, 0xc9}], 0x1) r2 = socket(0x2, 0x400000000002, 0x0) getsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x8) setsockopt(r2, 0x0, 0x3, &(0x7f0000000000), 0x0) 1.00543273s ago: executing program 2 (id=147): r0 = socket(0x11, 0x3, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) sysctl$net_inet6_ip6(&(0x7f0000000080)={0x4, 0x18, 0x29, 0x35}, 0x4, &(0x7f00000000c0), 0x0, 0x0, 0x0) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x402}]}) (async) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="c528909e4ddde0fdff1c582f979dcf93e00110c2c7787a4a438ba75da1929ed3", 0x20}], 0x1) (async) sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="a61223d8903009c2165d00000000ffff000000000000c55f80a5a3a037bf36989bef068261426c26f655f754e41f005b440f3032e889b490de7c529f8b44b0b01c0d3e6619", &(0x7f0000000080)=0x45, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) (rerun: 64) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) (async) r5 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r5, 0x80206916, &(0x7f00000001c0)) (async) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) (async) write(r2, &(0x7f00000001c0)="d8564b0bf1ff0795548af9200400", 0xe) (async) write(r1, &(0x7f0000000340), 0xd4e688a67930cd) (async) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000100)={'./file0\x00', 0x8, 0x5, 0x8, 0x1, 0x0, 0x3, 0xadc, 0x0, 0x2, 0x8001, 0xfffffffffffffffd}) (async) sendto$unix(r0, &(0x7f0000000480)="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", 0x1c6, 0x4, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x14}, 0x2, &(0x7f0000000100)="4ba7841143", &(0x7f0000000040)=0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) sysctl$kern(&(0x7f0000000100)={0x1, 0x5a}, 0x2, 0x0, 0x0, &(0x7f00000011c0)="13108a5b", 0x4) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, 0x0) (async) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000700)="57b6f97b9c7041c775c523fb72160950a4cb05664a39ee47de92c1835d81b6aeae0a519458e7c35d2b714b4f02489dc529afd4f787ba10bc9e1157cec38894790ef36fc17e803f7e0e3b0400166f21c8cf424e30017c5fa611988021198bc5d1f1480784bbec725be8aaeb9b1106be967ee5468657967aa259812a74fe9a9b0f20145c4aefa87c430e0a6d5402bf", 0x8e}], 0x1}, 0x0) (async) ioctl$TIOCSETA(r6, 0xc0504417, &(0x7f0000000740)={0x0, 0x401, 0x1000000, 0x2, "80000000dbff070000008000", 0x7, 0xffffc000}) 826.595537ms ago: executing program 1 (id=163): r0 = syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000006c0)=0x9) (async) r1 = syz_open_pts() ioctl$FIONBIO(r1, 0x8004667e, 0x0) (async) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (async) close(r2) (async) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) (async) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f00000018c0)=0x7) (async) syz_open_pts() (async) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0xb, 0x2}, 0x3, &(0x7f0000000000)="9f477226c40fac3ce88f7d6d1e3de80241d5aa9b77452c672240bdca46f644d34929d09415f14deca3ebcc1e65812ec8a03988", 0x0, 0x0, 0xfffffffffffffefa) (async) socket(0x1, 0x5, 0x9) 736.169881ms ago: executing program 1 (id=166): ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0xaa, 0x0, 0x0, {[0x1, 0x0, 0xffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000000000], [0x9, 0x0, 0x0, 0xfffffffffffffffd], [0x0, 0x5, 0x200000000], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8], [{}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x1000}, {0x0, 0xfffffffd, 0xc8, 0x7ffffffffffffffe}, {0x0, 0x5}, {}, {0x0, 0xfffffffd}], {0x4, 0x0, 0x8}, {0x0, 0x0, 0x6}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000140)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmmsg(r0, &(0x7f0000000840)={&(0x7f0000000800)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="be0370cfb8524f19d9e14b9a4337d1c65af8a445320049c93cdde0231025b98f07b989d1d7e828c20abedb863bf16ec92c001b6bd135ffdde9a7cc5d41b87fc5ba70a03c27e7564233c932", 0x4b}, {&(0x7f00000000c0)="a7270286ab001fc30a09abbc2073be05", 0x10}, {&(0x7f0000000380)="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", 0xff}, {&(0x7f0000000480)="95f2aa77d0d8d8f10f7cf960f30f4a49a679146efd95b4a5e29740163291ea49ff217201b7bd5db83f0a40a1eb9ee23fd2b158a5afda95f4f2c69bac9633f2669c2426b538c9bdf108d3673b0bd7a25021db36cbd3e6ab3588cf9fd65563f6780560c0b5631c06e2ac55245ff3c0a50e476816177265a21d08da61b48a389e0dabef160d436f9db63a55bc87c8257da54ffb047235e00dbe48755dfc7d79f48ebd52b706d5843a4aa8e444d7790948ba7be60e18d97a6788dfbdb85ec5d6b815a729f275", 0xc4}], 0x4, &(0x7f00000005c0)=[{0xe8, 0x1, 0x7, "016370a11ea47096e1c696146eced748531705e346737db21ed4ac5e158b1bc3c361f8fb38c7af8988d754378222f3fe6c618ca9dcd5df8bf5f205605a9d86bbf6953b73b3aeb9fb0134368967ac981b218ea1d678bc713be1d4050a4332ad551a35214fea5e89bbfaf78a065b5c3e1e67b9089ad8780de2b1036ec2af1cdff2855f2f3060f4e931b00dc6c13a34a62743eedfef4df529280484c4e1a4f26808b53a3c4d337c477eb92a4d732f65f4c8a906b8837abacb3f8b61518295972800683f4d62f4c4cd0ed1adf56282bee6edca938b4b38ac"}, {0xc0, 0x1, 0x7, "da5ac41a64b2a765aab6c4f91138610638894bef2b5cea91a0920b246e83ab12b64398bf387c7a70ec426985117f0e37198a5a4652d40e60e9529faf7c43f013325f02a4fffccbb54ceb9237d1ec93958bbcfd3ab3f0120c0abae3b8642a37285918b1030c23ed9086f2a5b44b4ccaf01ad9dc1680c557abfe3a3306cde5bad3e42eecca5eec6bee437b77745fb0f1f153880c77b59d98e6bba8888a114d5bf6bcfc2ec92bc8164b03"}, {0x20, 0xffff, 0x6, "38e6f9aea96ebad085"}, {0x58, 0xffff, 0x101, "9bf6738f3b6729273cf30a91348688f9cc381211a5c67a01ab675d0fafbe06260ee7b687fdc4258ef5852cb2b6d5e139e90039250f08c8015e5e32e3e1d7547db9451446"}], 0x220}, 0x3ff}, 0x10, 0x404) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 733.014446ms ago: executing program 1 (id=168): select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000221000/0x2000)=nil, 0x2000, 0x1) r0 = socket(0x2, 0x3, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0xaaaaaaaaaaaad77, 0x0, [{&(0x7f0000ca1000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000b7b000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000e0e000/0x4000)=nil, 0x4000000000}, {&(0x7f0000ca2000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000f93000/0x2000)=nil}, {&(0x7f0000c20000/0x4000)=nil, &(0x7f0000eb0000/0x14000)=nil}, {&(0x7f0000ec3000/0x4000)=nil, &(0x7f0000efd000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f0000eb0000/0x2000)=nil, &(0x7f0000a73000/0x3000)=nil, 0x2}, {&(0x7f0000ca4000/0x1000)=nil, &(0x7f0000b7c000/0x2000)=nil, 0x6}, {&(0x7f00008fb000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000a75000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x3}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x100000001}, {&(0x7f0000c64000/0x14000)=nil, &(0x7f0000888000/0x1000)=nil, 0x9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil}, {&(0x7f0000913000/0x2000)=nil, &(0x7f0000c22000/0x2000)=nil}], './file0\x00'}) r1 = socket(0x18, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x80206980, &(0x7f00000001c0)) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500001c000000000011907800000400ffffffef1200907800000001"]) r3 = kqueue() ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x7ff, [{&(0x7f00004be000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000009000/0xa000)=nil, &(0x7f00001c8000/0x2000)=nil}, {&(0x7f0000365000/0x3000)=nil, &(0x7f0000067000/0x1000)=nil, 0x1fffffffe}, {&(0x7f0000164000/0x3000)=nil, &(0x7f000052c000/0x1000)=nil}, {&(0x7f0000605000/0xa000)=nil, &(0x7f0000ff1000/0x1000)=nil}, {&(0x7f00004f6000/0x2000)=nil, &(0x7f0000093000/0x1000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000159000/0x4000)=nil, 0xfcaa}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000604000/0x3000)=nil, 0x2}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f000002f000/0x2000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000406000/0x4000)=nil, 0x8}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f000037e000/0x2000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f000055f000/0x2000)=nil}, {&(0x7f00001b2000/0x3000)=nil, &(0x7f00003e4000/0x3000)=nil, 0x54}], './file0\x00', 0x8000000}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) munmap(&(0x7f0000001000/0x400000)=nil, 0x400000) kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = open(&(0x7f00000002c0)='./file1/file0\x00', 0x8000, 0x1a0) sysctl$vm(&(0x7f0000001640)={0x2, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000140)={'./file1/file0\x00', 0x258c, 0xc0, 0xfff6, 0x1, 0x8, 0xffffffff, 0x1, 0x1, 0x0, 0x80000, 0xf1a}) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x80, 0xfffffdde, 0xffff, 0x1, 0xfffffff3, 0xd, 0x4000001, 0x0, 0x0, 0x1, 0xf1e}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) chdir(&(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) setreuid(0xee00, 0x0) getuid() 732.803321ms ago: executing program 4 (id=169): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000000140)='\x00\x00 \x00', 0x4) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendto(r0, &(0x7f0000000180)="e6ae7c8d5538e35e58abca2e970b4d2ae8c06df754610e76b6cb7b8053ed3cd786c874d28e87ce04cb32de4cc43302aca86a04b264f0da161f7963381b969269ea04ca6e35c18303ee52b787cd203aacb0eb9b15e82fd49beb057c8e61fc587a7ec83d2e56b83440b706e640ae72058366de8c2e792b6c560e811721fae45772764ff0fff2805cb98b9b2aed4989c5543aead417195927755c50f8269ed55f6185923b9e228a0caeec37c98c0b1043a14488f6abab8d2641b85f3d08f65e017338fee36c00fd8b22d183758199abc2e2f743230b11e7c6f773e837edb66272434cb4f275fda1d8", 0xe7, 0xc, &(0x7f0000000080)=@in6={0x18, 0x0, 0x7, 0x3}, 0xc) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) sendsyslog(&(0x7f0000000000)="db642c", 0x3, 0x22) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000000140)='\x00\x00 \x00', 0x4) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r2 = socket(0x18, 0x3, 0x3a) setsockopt(r2, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x1}, 0xc) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1ff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) close(r3) r4 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r4, 0x1000000000029, 0xa, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FIONREAD(r5, 0x4004667f, &(0x7f00000000c0)) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x2d}, 0x4, &(0x7f0000000140)="3998a035daa227d1ce40394f044ed95480393e74f486aff61a92312cb952b89c09f24ddb00000000008fb1463d8635bf0f8e2f68a22421d45dcf5b7f5bdf7b47", &(0x7f0000000100)=0x53, 0x0, 0x0) r6 = open(&(0x7f0000000340)='./file0\x00', 0x10, 0x2a) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4811, r6, 0x0) 665.058875ms ago: executing program 1 (id=173): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x1e, 0x3, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@random="91a6e34dd8bb", @remote, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x3, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @broadcast, @rand_addr, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}]}}, @icmp=@timestamp={0xd, 0x0, 0x0, 0x0, 0x200, 0x6, 0x1000}}}}}) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000513000000000000000004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41002000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407", 0xa9, 0x0, 0x0, 0x0) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501600000000000000007000000330002000000000000f96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236de351e2f0ac3ebbc257699a5f139b672f4d335d223e7d026ba8af6300372821", 0x61, 0x0, 0x0, 0x0) (async) r1 = socket(0x11, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) getpeername$unix(r0, 0x0, &(0x7f0000000100)) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) (async) mquery(&(0x7f00001cf000/0x3000)=nil, 0x3000, 0x4, 0x0, r2, 0x4) 632.051697ms ago: executing program 1 (id=174): mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x202) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) setreuid(0x0, 0xee01) (async) r0 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f00000001c0)={&(0x7f00000000c0)='./file0\x00', 0x5, 0x0}) 631.037806ms ago: executing program 4 (id=176): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') mkdir(&(0x7f0000000740)='./file0/file1\x00', 0x0) chroot(&(0x7f0000000100)='./file0/file1\x00') unveil(&(0x7f0000000140)='./file0/file1/file0\x00', &(0x7f00000001c0)='W\x00') mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) mprotect(&(0x7f0000681000/0x3000)=nil, 0x3000, 0x0) r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000), 0x10) shutdown(r0, 0x2) (async) shutdown(r0, 0x2) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) 597.90666ms ago: executing program 5 (id=177): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000040)={'./file0\x00', 0x5, 0xbd4, 0x65d22eaa, 0x1, 0x10, 0x9, 0x7, 0x2, 0x1, 0x9, 0x71}) 586.21762ms ago: executing program 1 (id=179): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) fchown(r0, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000400)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x34, 0xff, 0x2e, 0x1}, {0x2006, 0xfd, 0xdd, 0xfffff001}]}) socket$inet(0x2, 0x1, 0x0) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x100000000, {[0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20], [0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7fffffffffffffff], [0x0, 0x2], [0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x100], [{}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x800000000000}, {}, {}, {0x4000}, {0x0, 0x0, 0x72}, {0x0, 0x3}], {0x0, 0x6}}}) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0) kevent(r2, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) lchown(0x0, 0x0, r4) chdir(&(0x7f0000000240)='./file0\x00') setreuid(0x0, 0xee01) rename(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='.\x00') syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @random="d001896db62f", [], {@ipv6={0x86dd, {0x2, 0x6, "ac81d8", 0x0, 0x89, 0xac, @remote={0xfe, 0x80, '\x00', 0x0}, @loopback}}}}) getdents(0xffffffffffffffff, &(0x7f0000001180)=""/4106, 0xfffffffffffffd64) 581.937265ms ago: executing program 5 (id=181): mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) r0 = semget$private(0x0, 0x4, 0x28) semop(r0, &(0x7f00000001c0)=[{0x1, 0xc, 0x1c00}, {0x0, 0x8, 0x1000}, {0x3, 0x7, 0x1000}, {0x0, 0x7, 0x3000}, {0x0, 0x1dc, 0x800}, {0x3}, {0x2, 0x8001, 0x1800}, {0x0, 0x3}, {0x2, 0x4, 0x1000}], 0x9) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000040)=""/148) semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000100)=0x5) semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000140)=0x80) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000380)=""/244) sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x18, 0x102, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) getsockname$unix(r1, 0x0, &(0x7f0000001200)) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x710, 0x0) 471.951827ms ago: executing program 6 (id=183): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setuid(0xffffffffffffffff) ioctl$BIOCLOCK(r0, 0x20004276) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) fchmod(r1, 0x101) syz_emit_ethernet(0x138, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2, @ANYRES32=r0]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x3, 0x1) connect$unix(r3, &(0x7f0000000000), 0x10) write(r3, &(0x7f00000006c0)="39f2ff56576a8d0039805206d1e60761fbe5e269", 0x14) r4 = getpid() setpgid(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r4, 0x0, 0x5, 0x0, 0x3, 0x200000000000000}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r5, 0x80047476, &(0x7f0000000180)={0x0, 0x0}) r7 = fcntl$getown(r5, 0x5) r8 = getppid() pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r9, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) fcntl$setown(r6, 0x6, r7) setpgid(0x0, r8) ioctl$BIOCGRSIG(r0, 0x40044273, &(0x7f0000000080)) sysctl$net_inet_ip(&(0x7f0000000100)={0x4, 0x2, 0x0, 0x11}, 0x4, 0x0, 0x0, 0x0, 0x0) 471.687466ms ago: executing program 7 (id=184): r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = kqueue() syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000000102c00200000008000000000000000000000000000000000000800001a003f0000000504000007"]) kevent(r1, &(0x7f00000004c0)=[{{r1}, 0xffffffffffffffff, 0xc3, 0x20000000, 0x100000000, 0x7fffffffffffffff}, {{r0}, 0xffffffffffffffff, 0x6, 0x80, 0x942, 0x169}], 0x30, 0x0, 0x57d, 0x0) 469.639429ms ago: executing program 5 (id=185): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x2, 0xe, 0x401}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="c528", 0x2}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000240)="a61223e590df9438a33009c2165d5b77369c3aa91b99850000478340847f74c5b9f046bdf7b0288c81f3973100", &(0x7f0000000080)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r3, &(0x7f0000000300)="d842e2c57805000000000000006e", 0xe) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x6, r1, r2}, 0x4}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x3, &(0x7f0000000040)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x87, 0x0, 0x27) 394.718904ms ago: executing program 7 (id=187): recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/528}, 0x212, 0x0, 0x0, 0x0}, 0xfffffffd}, 0x10, 0x0, 0x0) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setrlimit(0x8, &(0x7f00000000c0)={0x9, 0xfffffffffffffffa}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000ac0)={0x8, 0x585, 0xfffffff8, 0x200499, "d88c630344a8f9883d2488d11454020900", 0x1fc, 0x10000000}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000380)="7e746376ecb3f4b7c3b9648dde9d8c13de18b9e215c4a9cac7034ab89ebf86868d83590bbbc0d90ba99e59ac2ac3a2812db4a42c910ec132c100ff7f737c911d105ade6f74489113b68abf53fec3be6aeb96d1dd0b41272e9a67087a7fbcf181a77e72520b7622324acd62aee319cf3e29c7534ed4beb03e67ea8902030d8222e539564932f2040000000000003e8baddb5ec102383f95df148f2944152806cfcb731235c9b66b30ab00daec0ec87a189a8d240141070000008de968692f4a942984cd03000000000000000b17e13cd9b51d0900000000000000005dee44094817f0371f5dbed0a1360ec95a7ca9c35fc7a4b4053392eb7600f107f3c4337737a7040ea2322bb3d97fb26b218f86637f46c1f649194828bf85b1b5b3504eb7595c53cace06191b6ef66778617ea9c2500ac0fb51a8acd0a28900775565e90a8948d4e135bfa9443ec80e200809736e36f1d2e6fa70a18a645e191e81307c4247050fa07b160471f7d67efa0573046f92e7fe688a048af645668782b094e610876461dc7435dfb23e4275fabb9d24e24ce323f21527f027c6e818c045ea2a9586fd7105e89570d8c33a8455b1d62781d6563c7a2ad57df0f649ce8bc440e8c26693b45319867472884620e65344b01d2eb8eee502324af03719f08a077ee9d57ceae9510c0158899b4d44322006e94fbc6319aa9ed42caf4a1ead787952832b97057a4611a83d721cc389a134bacfc1253f157052ae6b56dfe53c018d74b21085537a7c00d29411a83460a50b4cd94d26542a626f87eceac528b523c3cf047b70b6699c456b9a4d90a2f3b0968809", 0x24e}], 0x1) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCVERSION(r2, 0x8010427e, &(0x7f00000001c0)) ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f0000000700)=0x4) write(0xffffffffffffffff, &(0x7f0000000740)="d397b8ad769b094481cf99346fa393ef9d370b582356690a644ad1e2d3dac47e446b9081cfe58f61c566e2578b874e2b3d64b39cb5caba9b57986933033bc55bf3336084aea6927678c08bf842c62227646ca2ff3ac670112ae4b919f71078c2970a0d94b616fb2819fb9692c2d88dc2674fe3beb97227687a65c872845884236e7c4bf92c0b705667a9faa73b42", 0x8e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000000080)={0x0}, 0x10, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$VMM_IOC_RUN(r4, 0xc0205602, &(0x7f00000000c0)={0x6, 0x9, 0xf2, 0x81, &(0x7f0000000480)={{0x6, 0xf, 0xa3, 0x0, 0x9, 0x81, 0x400}, {[0x8000, 0x175, 0x7fffffffffffffff, 0x8, 0x8, 0x7, 0x6, 0xffffffffffffffff, 0x6, 0x3, 0x401, 0xb1b, 0x7f, 0x7, 0x8, 0x5, 0xde], [0x3, 0x5, 0x0, 0x4, 0x1, 0x6, 0x9, 0x1, 0x100, 0x4], [0x5, 0x9, 0x300000000000000, 0x7, 0xf8, 0x9, 0x8], [0x646f48c8, 0x2, 0x4, 0x6, 0x7fff, 0x8], [{0xb482, 0x4, 0xffff, 0x8}, {0x200, 0x3, 0xfffffffc, 0x1c70}, {0x2, 0xb302, 0x4, 0x7}, {0xfff7, 0x6, 0x7}, {0xf, 0x3, 0x3, 0xfffffffffffff801}, {0x0, 0x73f, 0x6}, {0x5, 0x3, 0xd, 0x5}, {0x10, 0x7f, 0x6, 0x2}], {0x5c8f, 0x4, 0x7ed, 0x100000001}, {0x9, 0x0, 0x101, 0x7ff}}}, 0x0, 0x4}) ioctl$BIOCPROMISC(r4, 0x20004269) 393.994886ms ago: executing program 4 (id=188): r0 = shmget$private(0x0, 0x1000, 0x404, &(0x7f0000ffe000/0x1000)=nil) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x2000) shmctl$SHM_LOCK(r0, 0x3) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000040)) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000080)=0x7) lseek(0xffffffffffffffff, 0x6, 0x0) close(r1) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r2 = geteuid() chown(&(0x7f00000000c0)='./file0\x00', r2, 0x0) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='r\x00') r3 = shmget$private(0x0, 0x1000, 0x42, &(0x7f0000ffc000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmget$private(0x0, 0x1000, 0x240, &(0x7f0000fff000/0x1000)=nil) r4 = accept(r1, &(0x7f0000000180)=@in6, &(0x7f00000001c0)=0xc) r5 = semget(0x1, 0x0, 0x106) semop(r5, &(0x7f0000000200)=[{0x0, 0xff, 0x1800}, {0x3, 0xe93, 0x2000}], 0x2) shmget(0x3, 0x4000, 0x540, &(0x7f0000ffc000/0x4000)=nil) setuid(r2) select(0x40, &(0x7f0000000240)={0x1, 0x100000000, 0x6, 0x6, 0x1, 0x5, 0xffffffffffffffff, 0x1}, &(0x7f0000000280)={0x2, 0x4, 0xf, 0x8, 0x9, 0x4, 0x200, 0x7d}, &(0x7f00000002c0)={0x5, 0x0, 0x7, 0xa, 0x4f55, 0x80000001, 0xa00, 0xab6}, &(0x7f0000000300)={0x68, 0x7fffffffffffffff}) mkdir(&(0x7f0000000340)='./file0\x00', 0x49) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmctl$IPC_RMID(r3, 0x0) fcntl$getflags(r4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000380)="ee384a3e904d1e4abc33dd89f0c3bb0aba1e8bb6c126a49588e22664ae42e90521bc5c972365ec3d0929d9861c36666daa02ed8f0d01639c302150fd8a0341c2c6bb6a1d", 0x44}, {&(0x7f0000000400)="c1ac9c875045fe3959b26ec9df109f689d497eadf77da143d75689550301622af5243afbb08ec27a56b3defd894c2adf158627c634c53e67705463e2e7610edc74b87ebe9a09b1157224af95e86d8d52e74492e3274f146ab3813af321c1e5c5d34381f409d523fc359943cee5ee698f67a995698ec4f0eaec671bb247360f1039c9c836db600b2a06452c5669df4ea4da352cc9c053918afd09043ecc672e6fcf40c99dad5a977905b0", 0xaa}, {&(0x7f00000004c0)="704c0a8188234fe066aa9f1852369bd44edca82dec2702aa2c06670586b100705f6c65bbe56bdbceb6eaeded991b9975ecd979099c3dec2cced0ca19df488cc806213491c999b7d033b71ec3ba580f0c5273f61696633bfb92f519a67fdaa4aec2b63aca38cf323635a0b6b8c4c208af1460ee1ccc21ca9b2e78eae1cfdac0590b4b62ba696a1cc14be911d6e1ec2c241ea8050a766a656e9893865d01dc66a45aa8", 0xa2}, {&(0x7f0000000580)="b02576be11381a2d4254a8c14ee13cc8745742cbfa57ec1ee5fa89ef1aa13f", 0x1f}, {&(0x7f00000005c0)="6567159f241eaf4660cda21c5b0592ac2efa44127ecc591f89c987b41d2ebcd4bca58fee9ea74dde95227a2b67b3a09d2f0d9a11802c69057d59ac9e41a91082cf259c32d3bfd56d9f3b03e4fd8a", 0x4e}], 0x5) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 393.686497ms ago: executing program 6 (id=189): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000700)="9b9b6d4c", 0x4}, {&(0x7f00000002c0)="968ce1c69d9498126527e1ad5174636898ad874ffb39b42f574f4f4cbc90acc1eb117d7e3bf3d52de5d57a7f", 0x2c}], 0x2) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d357e382526b1573271aeabc1b761eaf1616bf6932da7386d53", 0x2f}], 0x1) execve(0x0, 0x0, 0x0) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) (async, rerun: 32) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async, rerun: 32) mprotect(&(0x7f0000719000/0x4000)=nil, 0x4000, 0x1) write(r0, &(0x7f0000000080)="df1df9a90e0ebd3ae0ead1e9d73378a152933dcffa8b5391b4c731b637b190ed844dc8a317f1def80235d1be1ebfd791bc52fbbf9911393def9dd4904d4c2d338f1f8e48cdf2401d5c8edbe44531366d6aa12bfd1aa89a24990154cc2bb8a552110b38ea306565f79b406939c4b626c0cbb9edd476f6ae46c3fd4cc6", 0x7c) (async) ioctl$BIOCGFILDROP(r1, 0x40044278, &(0x7f0000000040)) (async, rerun: 32) setsockopt(0xffffffffffffffff, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e7130", 0xd) (async, rerun: 32) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) (async) mquery(&(0x7f0000ff1000/0xe000)=nil, 0xe000, 0x1, 0x0, 0xffffffffffffffff, 0x4) (async) dup2(r1, r1) (async, rerun: 32) r3 = socket(0x2, 0x2, 0x0) (rerun: 32) r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='j', 0x1}], 0x1, 0x800) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e", &(0x7f0000000080)=0x3, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) ioctl$WSMOUSEIO_SETPARAMS(r4, 0x80105728, &(0x7f0000000080)={0x0}) (async) fcntl$setstatus(r3, 0x4, 0x3cb594a00ea88fde) connect$unix(r3, &(0x7f0000000000), 0x10) 336.965668ms ago: executing program 4 (id=191): mknod(&(0x7f0000000000)='./bus\x00', 0x6000, 0x406) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x26, 0x4799}, {0x86, 0x4}], 0x2}) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) truncate(&(0x7f0000000100)='./bus\x00', 0xffff) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='c\x00') open$dir(&(0x7f00000000c0)='./file2/file0\x00', 0x662, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) r2 = socket(0x18, 0x2, 0x0) socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x10, &(0x7f0000000000)=0xe, 0x2) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000080)={&(0x7f0000000300)=[{0x44, 0x7}], 0x1}) ioctl$WSMOUSEIO_GETPARAMS(r1, 0x80105727, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x100, 0xffffffff}], 0x1}) faccessat(r0, &(0x7f0000000040)='./bus\x00', 0x8, 0x0) 335.678108ms ago: executing program 6 (id=192): mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x504) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1, 0x83) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETA(r1, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) (async) r2 = accept$unix(r1, &(0x7f0000000400)=@file={0x0, ""/4088}, &(0x7f0000000180)=0xffa) sendto(r2, &(0x7f00000001c0)="1351c065081318637f17e7d90a8b3a011ed1a9d2ee652715bf7387384598694e87172bdf51cb2381b82f1811cfc88fd864f629e95ebef32f7b8cbb44f739613e912dec794627dd87c8e9273c5de9ef7e42c123a8334146a90ce5b9c0c4f316e262b918a126efd1f94ce5ca7c73", 0x6d, 0x0, &(0x7f0000000240)=@in6={0x18, 0x3, 0x7fffffff}, 0xc) (async, rerun: 64) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) (rerun: 64) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f00000001c0)={0x4, &(0x7f0000000100)=[{0x4935, 0x2, 0x5, 0x8}, {0x0, 0xa, 0x2, 0xfffffffa}, {0x0, 0x9, 0x3}, {0x4, 0x6, 0xfc, 0x800}]}) (async) r4 = socket(0x1e, 0x3, 0x0) (async) r5 = socket$inet(0x2, 0x8003, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 64) setsockopt(r5, 0x0, 0x1e, &(0x7f0000000340)="15337ac0", 0x4) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r4, 0x80606954, &(0x7f00000001c0)) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xffffffff, 0xfffffffc, 0x3, 0xffffff80, "0120002d29497f07af80d6df356bbb612c0800", 0x3, 0x3}) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x2c}, 0x3, &(0x7f0000000180)="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", &(0x7f0000000080)=0xaa, &(0x7f00000007c0)="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", 0xffffff33) (async) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f00000000c0)=0x7) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000080)=0x3ff) (async) execve(0x0, 0x0, 0x0) (async, rerun: 64) syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd6036ea0700383a00fe8000000000000000000000aaff020000000000000000000000000001"]) (async, rerun: 64) acct(&(0x7f0000000100)='./bus\x00') 326.158955ms ago: executing program 4 (id=194): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000260000/0x12000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000417000/0x3000)=nil, 0xfffffffffffffffc}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00002b1000/0x2000)=nil, 0xb93a}, {&(0x7f00001da000/0x4000)=nil, &(0x7f000003f000/0x2000)=nil, 0xfffffffffffffffd}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x2000000000009}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f000055e000/0x4000)=nil, &(0x7f00000bf000/0x3000)=nil, 0x8}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f00004de000/0x2000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000632000/0x4000)=nil}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x5}, {&(0x7f0000383000/0x2000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x4}, {&(0x7f000069c000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffffd}, {&(0x7f0000169000/0x4000)=nil, &(0x7f0000635000/0x800000)=nil, 0x1000039f7}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x74}], './file0\x00', 0xfffffffc}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$PCIOCWRITE(r0, 0xc00c7007, &(0x7f00000005c0)={{0x0, 0x9}, 0x0, 0x0, 0x9}) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0xc0286988, &(0x7f00000001c0)) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000260000/0x12000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000417000/0x3000)=nil, 0xfffffffffffffffc}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00002b1000/0x2000)=nil, 0xb93a}, {&(0x7f00001da000/0x4000)=nil, &(0x7f000003f000/0x2000)=nil, 0xfffffffffffffffd}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x2000000000009}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f000055e000/0x4000)=nil, &(0x7f00000bf000/0x3000)=nil, 0x8}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f00004de000/0x2000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000632000/0x4000)=nil}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x5}, {&(0x7f0000383000/0x2000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x4}, {&(0x7f000069c000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffffd}, {&(0x7f0000169000/0x4000)=nil, &(0x7f0000635000/0x800000)=nil, 0x1000039f7}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x74}], './file0\x00', 0xfffffffc}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) ioctl$PCIOCWRITE(r0, 0xc00c7007, &(0x7f00000005c0)={{0x0, 0x9}, 0x0, 0x0, 0x9}) (async) socket(0x2, 0x1, 0x0) (async) ioctl$FIONREAD(r1, 0xc0286988, &(0x7f00000001c0)) (async) 325.704045ms ago: executing program 5 (id=195): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) (async) r0 = kqueue() r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) r2 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r2) r3 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) (async) kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x40, 0x100) (async) r5 = getppid() msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x1, 0x68, r5, r5, 0x0, 0x4, 0x1}) (async) pipe(&(0x7f0000000400)={0xffffffffffffffff}) fcntl$setown(r6, 0x6, r5) (async) ioctl$WSKBDIO_GETMAP(r6, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) (async) ioctl$WSDISPLAYIO_ADDSCREEN(r6, 0x80245753, &(0x7f0000000040)={0x3, './file0\x00', './file0\x00'}) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xff, 0x0, 0xfff6, 0x0, 0x7ff, 0xffffffff, 0xfffffffe, 0x1, 0x2, 0x80000, 0xf1a}) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x248f, 0xfffffde2, 0xffff, 0x1, 0x24, 0xf, 0x1, 0x0, 0x0, 0x1, 0xf1a}) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) r7 = semget$private(0x0, 0x4, 0x1) semop(r7, &(0x7f00000017c0)=[{0x0, 0x7, 0x1000}, {0x2, 0x7, 0x1000}, {0x0, 0x7, 0x1000}, {0x1, 0x20ff, 0x1000}], 0x4) 286.845485ms ago: executing program 4 (id=196): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x53}) r0 = syz_open_pts() r1 = syz_open_pts() syz_open_pts() madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1) close(r0) syz_open_pts() execve(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000c80)=[&(0x7f0000000440)=',.', &(0x7f0000000680)='$^F\x9d[\n\x00', &(0x7f00000008c0)='(%\x00', &(0x7f0000000900)='@a:}!]-[\x00'], &(0x7f0000001480)=[&(0x7f0000000cc0)='{\x00', &(0x7f00000014c0)=')-!^X/#&+{]\x00', &(0x7f0000001340)='^\x00', &(0x7f0000001380), &(0x7f00000013c0)='^}\x00', &(0x7f0000001400)=',)&\x00', &(0x7f0000001440)='{\x00']) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) r2 = openat$speaker(0xffffffffffffff9c, 0x0, 0x782, 0x0) ioctl$SPKRTUNE(r2, 0x20005302, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$VMM_IOC_CREATE(r3, 0xc2585601, &(0x7f00000000c0)={0x10, 0x200, [{&(0x7f000017c000/0x2000)=nil, &(0x7f00000c0000/0x2000)=nil, 0x200007fffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0xfffffffbfffffffc}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00002b1000/0x2000)=nil, 0x7ffe}, {&(0x7f0000318000/0x2000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x2000000000009}, {&(0x7f000027f000/0x1000)=nil, &(0x7f0000095000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f000055e000/0x4000)=nil, &(0x7f00000bf000/0x3000)=nil, 0x8}, {&(0x7f00003d7000/0x4000)=nil, &(0x7f00004de000/0x2000)=nil, 0x8000000000403}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000055e000/0x2000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000632000/0x4000)=nil, 0xfffffffffbfffffe}, {&(0x7f0000196000/0x4000)=nil, &(0x7f00007fe000/0x800000)=nil, 0xed}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x5}, {&(0x7f0000691000/0x2000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00007a3000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f0000169000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000039f7}, {&(0x7f000027e000/0x2000)=nil, &(0x7f00000f4000/0x4000)=nil, 0x2000000000}], './bus\x00', 0xfffffffc}) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) open$dir(&(0x7f00000000c0)='./file2/file0\x00', 0x662, 0x0) ioctl$TIOCSETA(r3, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffd, 0x54d1, "52c9795a6b476ed1000000000000000000000008", 0x2000000, 0x5}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x7) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') 286.565506ms ago: executing program 3 (id=197): r0 = socket(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10, 0x0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f00000006c0)={0x7, 0x81, 0xc, {[0x1, 0x401, 0x4, 0x2, 0x1, 0xb, 0x6, 0x8, 0xc00000, 0x100000000000009, 0x8000000000000001, 0x80, 0x9, 0x800, 0x1, 0xf7, 0xfff, 0xf], [0x0, 0x8, 0x9c6, 0x100000000, 0x1, 0x100000000, 0x4145, 0xd, 0x5, 0xc], [0x2e, 0x7, 0xb, 0x3, 0x80000000, 0x374, 0x8], [0x6, 0x3000000080, 0x8, 0x40000000000f7b, 0x5, 0xe], [{0x8, 0x101, 0x9, 0x3ff}, {0xf2, 0x3, 0x40, 0x8}, {0x5e, 0xa, 0x5, 0x7fff}, {0x2, 0x4, 0x758, 0x4}, {0x8, 0x8800, 0x20005, 0x400000000000}, {0x9, 0x0, 0xee7f, 0x9}, {0x1008, 0xa88, 0x80000000, 0x4}, {0x8, 0x9b8, 0x3, 0x10000}], {0x703, 0x8, 0x9, 0x3}, {0x2, 0x10001, 0xa, 0x7ffc}}}) sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)="79040f91f15da040473675618dcd42b074", 0x11) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) (async) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) socket$inet(0x2, 0x3, 0x4) (async) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="8907040000", 0x5) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x2, 0x0}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x2, 0x0}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCCLR(r3, 0xc0a86b04, &(0x7f0000000200)={0x0, 0x10000, 0x0}) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, 0x0) clock_getres(0x3, &(0x7f0000000000)) ioctl$TIOCSETA(r1, 0xcd504404, &(0x7f0000000080)={0x1fff, 0x2, 0x9, 0x0, "cd002200002181baab4c8c6d09b975390a000004", 0x7fff, 0x8}) (async) ioctl$TIOCSETA(r1, 0xcd504404, &(0x7f0000000080)={0x1fff, 0x2, 0x9, 0x0, "cd002200002181baab4c8c6d09b975390a000004", 0x7fff, 0x8}) 286.295066ms ago: executing program 3 (id=198): sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="b10005016000009f05000e00070000000018", 0x12, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000004c0), 0x8, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000400)={0x1, &(0x7f0000000340)=[{0xfff9, 0x9b, 0x1, 0x31}]}) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) r1 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x3) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x11b) msgget(0x2, 0x400) write(r1, &(0x7f0000000200)="005a2d4b0878fb52908c164c7e431fe659af816aeed5b682c76f16528169a3c518978e3e4f1282", 0x27) ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000040)=0x7d) ioctl$TIOCCONS(r2, 0x80047462, &(0x7f00000000c0)) ioctl$FIONREAD(r1, 0x81206919, &(0x7f0000000100)) setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000001900)="2cb304c7", 0x4) fcntl$lock(r3, 0x0, &(0x7f0000000640)={0x3, 0x0, 0x5, 0x2}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x2, &(0x7f0000000100)="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", &(0x7f0000000080)=0xfe, 0x0, 0x0) 286.079551ms ago: executing program 7 (id=199): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) socket(0x18, 0x3, 0x0) r1 = syz_open_pts() fcntl$dupfd(r0, 0xa, r1) setuid(0xee01) ioctl$FIONREAD(r0, 0xc1126939, &(0x7f0000000000)) 217.95807ms ago: executing program 6 (id=200): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x23, 0x10, 0x6, 0x1}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x23, 0x10, 0x6, 0x1}]}) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000000c0)="b92e", 0x2}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000180)='\x00', 0x181) r0 = syz_open_pts() setuid(0xee01) fchflags(r0, 0x1) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) renameat(r1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000100)='./file0/file0\x00') 217.575009ms ago: executing program 3 (id=201): r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x48) open(&(0x7f0000000040)='./file0\x00', 0x80, 0x0) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x0) r2 = accept(r1, &(0x7f0000000080)=@in6, &(0x7f00000000c0)=0xc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x8000) openat$tty(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0) (async) r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0) ioctl$FIONBIO(r3, 0x8004667e, &(0x7f0000000140)=0x82eb) ioctl$BIOCVERSION(r1, 0x40044271, &(0x7f0000000180)) openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) (async) r4 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$WSDISPLAYIO_LSFONT(r4, 0xc058574e, &(0x7f0000000200)) bind$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xa) getpid() flock(r4, 0x4) (async) flock(r4, 0x4) fchmod(r0, 0x40) sysctl$vm_swapencrypt(&(0x7f00000002c0)={0x2, 0x5, 0x2}, 0x3, &(0x7f0000000300)="7237dd9ebd626aa09d7e6c7a3e5385c32304eedeabe41323be5faf57c57644f8a4b4a9c9793f65ee190e070a8639fbb852a2478b64aab6c4710d5da498be9b8404597bd8dd9fec39afb70be501ce2a6debb7bf77e8", &(0x7f0000000380)=0x55, &(0x7f00000003c0)="a396ff9c259b27b5439fbee73c2d47eb80784feba36cd535b72d0f28c6a6f191091541ac2403cb4a6db6f581e7451b2e92e613f3dee05f5e82575ba62ae83683e3d956d675419fc598c2917039655c4d9cd0b2de55298cd84958102841ceded6a2ea8c1abd8ffd5c1ce85e1cb10e7d884fd6a837da3eea1e0b5523dcc8d824220121a0acf7f213d0a138cecc140e8326ef162ea2841bc6fcb0dd2307167d7a38919e16bcf7f093e73d74c2ee6d0138d5f9e339466768580096d700582a87d616f2b3c06d05e081683997e192505fc853619ffe50160646167e60b36f153ad2fa82faee1044ca28e94f85eef59942192ac3bc885a8dc2", 0xf6) (async) sysctl$vm_swapencrypt(&(0x7f00000002c0)={0x2, 0x5, 0x2}, 0x3, &(0x7f0000000300)="7237dd9ebd626aa09d7e6c7a3e5385c32304eedeabe41323be5faf57c57644f8a4b4a9c9793f65ee190e070a8639fbb852a2478b64aab6c4710d5da498be9b8404597bd8dd9fec39afb70be501ce2a6debb7bf77e8", &(0x7f0000000380)=0x55, &(0x7f00000003c0)="a396ff9c259b27b5439fbee73c2d47eb80784feba36cd535b72d0f28c6a6f191091541ac2403cb4a6db6f581e7451b2e92e613f3dee05f5e82575ba62ae83683e3d956d675419fc598c2917039655c4d9cd0b2de55298cd84958102841ceded6a2ea8c1abd8ffd5c1ce85e1cb10e7d884fd6a837da3eea1e0b5523dcc8d824220121a0acf7f213d0a138cecc140e8326ef162ea2841bc6fcb0dd2307167d7a38919e16bcf7f093e73d74c2ee6d0138d5f9e339466768580096d700582a87d616f2b3c06d05e081683997e192505fc853619ffe50160646167e60b36f153ad2fa82faee1044ca28e94f85eef59942192ac3bc885a8dc2", 0xf6) sysctl$kern(&(0x7f00000004c0)={0x1, 0x50}, 0x2, &(0x7f0000000500)="302baec9fdac5abd588b154f267c651d659f59398b981dd18b88c7b5c0509ac80ee8e0f4cdbe9f93779fce8371007c4e4cefa86e33318e20a7bcf3c8d1a00fcc37167a3183dd78f199be39ff787fd2c47605602d6123f643f58c0fcd34aee3e964b1ce038a82ad487b23cf6833f810ad3803f19ce243e80202d3dbfd45480bd230f0c53bc1c6c07bb77ff83b0286c8eae92ea644808b0a40b188fff745e8927cad189aac486b9571686a9b07c2801b8cec340211812c3115c235ba30084642d3bc8d66ab27da9a0c52", &(0x7f0000000600)=0xc9, &(0x7f0000000640)="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", 0xfb) ioctl$FIONREAD(r4, 0x4004667f, &(0x7f0000000740)) (async) ioctl$FIONREAD(r4, 0x4004667f, &(0x7f0000000740)) ioctl$VMM_IOC_INFO(r0, 0xc0185603, &(0x7f0000000800)={0x73, 0x0, &(0x7f0000000780)=""/115}) (async) ioctl$VMM_IOC_INFO(r0, 0xc0185603, &(0x7f0000000800)={0x73, 0x0, &(0x7f0000000780)=""/115}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000880)={0x0, 0x0}, &(0x7f00000008c0)=0xc) r7 = getgid() lchown(&(0x7f0000000840)='./file0\x00', r6, r7) sysctl$kern(&(0x7f0000000900)={0x1, 0x14}, 0x2, &(0x7f0000000940)="07c86579caea5534689ffba531eb66e3cbe7567222e5d737e2d8aeb1745fb5f45a482b2e54d0f1c7477b12c5421de449aead7a0a1b01fe9e5d5891e3daec04966ee6d514768d9d72a7ca614d736f1b6cb3c5048f05ae86844a88466003e152f92dedc37ed14fc2c08c88081d4db69372e8f31dc992898cb0e8", &(0x7f00000009c0)=0x79, &(0x7f0000000a00)="22f97853b17a25275c76d6144e1497525b26f64c575beb4c8cc128401308615553831311e2d6115d2260444ae0a7a1ee050bdb891a59e1f0f612367cea14fe8ff946e668", 0x44) connect$unix(r1, &(0x7f0000000a80)=@abs={0x0, 0x0, 0x3}, 0x8) (async) connect$unix(r1, &(0x7f0000000a80)=@abs={0x0, 0x0, 0x3}, 0x8) ktrace(&(0x7f0000000ac0)='./file0\x00', 0x4, 0x100, r5) chmod(&(0x7f0000000b00)='./file0\x00', 0x20) kqueue() (async) r8 = kqueue() preadv(r8, &(0x7f0000000e40)=[{&(0x7f0000000b40)=""/239, 0xef}, {&(0x7f0000000c40)=""/10, 0xa}, {&(0x7f0000000c80)=""/148, 0x94}, {&(0x7f0000000d40)=""/142, 0x8e}, {&(0x7f0000000e00)=""/32, 0x20}], 0x5, 0x8) (async) preadv(r8, &(0x7f0000000e40)=[{&(0x7f0000000b40)=""/239, 0xef}, {&(0x7f0000000c40)=""/10, 0xa}, {&(0x7f0000000c80)=""/148, 0x94}, {&(0x7f0000000d40)=""/142, 0x8e}, {&(0x7f0000000e00)=""/32, 0x20}], 0x5, 0x8) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000ec0)) acct(&(0x7f0000000f00)='./file1\x00') poll(&(0x7f0000000f40)=[{r1, 0x100}, {r2, 0x80}, {r1, 0x100}, {r0, 0x8}, {}], 0x5, 0x3) accept$unix(r2, 0x0, &(0x7f0000000f80)) 216.947065ms ago: executing program 3 (id=202): sysctl$net_pipex(&(0x7f00000001c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, &(0x7f0000000000), 0x0) 196.44494ms ago: executing program 5 (id=203): syz_emit_ethernet(0x3e, &(0x7f0000000080)={@random="91a6e34dd8bb", @remote, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x3, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @broadcast, @rand_addr, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}]}}, @icmp=@timestamp={0xd, 0x0, 0x0, 0x0, 0x200, 0x6, 0x1000}}}}}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000513000000000000000004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41002000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407", 0xa9, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501600000000000000007000000330002000000000000f96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236de351e2f0ac3ebbc257699a5f139b672f4d335d223e7d026ba8af6300372821", 0x61, 0x0, 0x0, 0x0) (async) r0 = socket(0x11, 0x3, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x9, 0x6, "165215", 0x8, 0x61, 0x4, @empty, @loopback, {[], @udp={{0x2, 0x2, 0x8}}}}}}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f00000000c0)=0x916e, 0x4) 195.829208ms ago: executing program 2 (id=204): sysctl$hw(&(0x7f0000000040)={0x7, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f00000006c0)={0x7, 0x81, 0xc, {[0x1, 0x401, 0x4, 0x2, 0x1, 0xb, 0x6, 0x8, 0xc00000, 0x100000000000009, 0x8000000000000001, 0x80, 0x9, 0x800, 0x1, 0xf7, 0xfff, 0xf], [0x0, 0x8, 0x9c6, 0x100000000, 0x1, 0x100000000, 0x4145, 0xd, 0x5, 0xc], [0x2e, 0x7, 0xb, 0x3, 0x80000000, 0x374, 0x8], [0x6, 0x3000000080, 0x8, 0x40000000000f7b, 0x5, 0xe], [{0x8, 0x101, 0x9, 0x3ff}, {0xf2, 0x3, 0x40, 0x8}, {0x5e, 0xa, 0x5, 0x7fff}, {0x2, 0x4, 0x758, 0x4}, {0x8, 0x8800, 0x20005, 0x400000000000}, {0x9, 0x0, 0xee7f, 0x9}, {0x1008, 0xa88, 0x80000000, 0x4}, {0x8, 0x9b8, 0x3, 0x10000}], {0x703, 0x8, 0x9, 0x3}, {0x2, 0x10001, 0xa, 0x7ffc}}}) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, 0x0) clock_getres(0x3, &(0x7f0000000000)) ioctl$TIOCSETA(r0, 0xcd504404, &(0x7f0000000080)={0x1fff, 0x2, 0x9, 0x0, "cd002200002181baab4c8c6d09b975390a000004", 0x7fff, 0x8}) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x17) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x10005, 0x0}) lseek(r1, 0xb, 0x0) close(r1) execve(0x0, 0x0, 0x0) ioctl$WSKBDIO_SETBACKLIGHT(0xffffffffffffffff, 0x800c5712, &(0x7f0000000100)={0x5, 0xf7b, 0xfffffffe}) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1f95d27d48731892, 0x0, 0x1}, 0x8) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000000)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0x10011, 0x0, 0x0) 195.607588ms ago: executing program 7 (id=205): r0 = socket(0x18, 0x3, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r1, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@in, &(0x7f0000000140)=0xc) setsockopt(r2, 0x0, 0x9, &(0x7f0000000200)="0feec8ca5c8d9500c43aecdd169ba52add9c78b81467092ec6063003699f376b26bdc4f0ddff2642349cf31d8dcaabb261fa5a3c73e08cc7fb4f3b844b3dfea34faf8c", 0x43) ftruncate(r1, 0x79c8) openat(r1, &(0x7f0000000040)='./file0\x00', 0x80, 0x0) r3 = socket(0x2, 0x1, 0x0) r4 = dup(r3) listen(r4, 0x0) accept(r4, 0x0, 0x0) shutdown(r3, 0x1) writev(0xffffffffffffffff, &(0x7f0000001480)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) r5 = msgget$private(0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r6 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) r7 = kqueue() kevent(r7, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) setuid(0xee01) r8 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r8, 0x8020690c, &(0x7f00000001c0)) msgsnd(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="78e1e6be9edac3b812a61ce9647eb430d1e33d4ff2c705792df72fdbeb63ada6aa4fce915ac0bac54a65e4c23518cfe17ac6f5eefa889b87ede849625e5dfd98aac47eb0283ed9a25567"], 0xa, 0x0) openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0) ioctl$FIONREAD(r0, 0x80047308, &(0x7f0000000100)) 195.047855ms ago: executing program 3 (id=206): mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x10000) writev(0xffffffffffffffff, &(0x7f0000000700), 0x10c6) r1 = getppid() wait4(r1, 0x0, 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x2, 0x4, 0x1, 0x3}, {0xd, 0x5, 0xf8}, {0xd9f6, 0x52, 0x9, 0xfffffffd}, {0x4, 0x7, 0x7, 0x1}, {0x1, 0x5, 0xfc, 0x1}, {0x3, 0x6, 0xfa, 0x1ff}]}) 194.865403ms ago: executing program 6 (id=207): setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) socket(0x18, 0x3, 0x0) close(0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000443000/0x3000)=nil, 0x3000, 0x1) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000240)=ANY=[], 0x401, 0x0) msgsnd(r1, &(0x7f0000000040)={0x2}, 0x8, 0x0) msgrcv(r1, 0x0, 0x0, 0x3, 0x1000) msgsnd(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000"], 0x3b, 0x800) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') setreuid(0xee00, 0x0) r2 = getuid() mkdir(&(0x7f0000000100)='./file0\x00', 0x8) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000180)='./file1\x00', 0x0) setreuid(0x0, r2) unveil(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='r\x00') unveil(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='r\x00') ioctl$FIOASYNC(r0, 0x80047469, &(0x7f0000000040)=0xfffffffc) write(r0, &(0x7f00000003c0), 0x0) socket(0x1, 0x2, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) getpid() open(&(0x7f0000001800)='./file0\x00', 0x75f493fec6515f78, 0x0) 1.016897ms ago: executing program 5 (id=208): syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff00020000004600002c0000000000069078000000000a334e204e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"]) socket$inet(0x2, 0x5, 0x0) r0 = socket(0x1, 0x2, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x0) r2 = getpid() fcntl$setown(r1, 0x6, r2) close(r1) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000040)="ed", 0x1) recvmmsg(r4, &(0x7f0000000880)={&(0x7f0000000580)={0x0, 0x38, &(0x7f0000000ac0)=[{&(0x7f00000005c0)=""/196, 0xc4}], 0x57, 0x0}}, 0x10, 0x42, 0x0) recvfrom(r4, 0x0, 0x0, 0x484, 0x0, 0x0) getpeername$inet(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) shmget(0x0, 0x3000, 0x8, &(0x7f000042a000/0x3000)=nil) ioctl$BIOCSETF(0xffffffffffffff9c, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x10, 0xb, 0x1}, {0xb1, 0x10, 0x2, 0xffff}, {0x16, 0x7, 0x7f, 0x10}]}) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082441265a8c1dc5538dd", &(0x7f0000000080)=0x25, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$BIOCGSTATS(r6, 0x4008426f, &(0x7f0000000180)) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[]) madvise(&(0x7f00000ba000/0x2000)=nil, 0x2000, 0x2) r7 = semget(0x2, 0x4, 0x3b2) semctl$GETNCNT(r7, 0x2, 0x3, &(0x7f0000000200)=""/92) semop(r7, &(0x7f0000000640)=[{0x3, 0x0, 0x800}, {0x0, 0x6e1, 0x1800}], 0x2) 622.635µs ago: executing program 3 (id=209): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r0 = socket(0x18, 0x3, 0x0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000), 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r2 = socket(0x18, 0x1, 0x0) close(r2) ftruncate(r2, 0x2) r3 = syz_open_pts() ioctl$TIOCSTOP(r3, 0x2000746f) write(r3, &(0x7f0000000040)="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", 0x201) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000480)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18, 0xffffffffffffff8b}], 0x10000000000002b8, 0x0) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff}], 0x2) r4 = socket(0x18, 0x2, 0x0) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000500)="0b1d432c55e66141f176b6b8116d6ac1f205d3e0e5dc4daffa05b7534aca647b397c6a5c650bd08c16", 0x29}, {&(0x7f0000000280)="cfdefd6e95e09add251a1343ce2672d7d5b90b4f3a10e94e660cb93863e0258a8bec6c8e3666822bbc2138c9d31ed02368cff6602fce4de14eb11c8f3f6109239145de9e4759615b26276141f3020f3a30f83e0a5caa96d8634a7a2c16e84e78a3663bb0e545003c", 0x68}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) (async) socket(0x18, 0x3, 0x0) (async) socket(0x18, 0x2, 0x0) (async) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000), 0x0) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) socket(0x18, 0x1, 0x0) (async) close(r2) (async) ftruncate(r2, 0x2) (async) syz_open_pts() (async) ioctl$TIOCSTOP(r3, 0x2000746f) (async) write(r3, &(0x7f0000000040)="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", 0x201) (async) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000480)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18, 0xffffffffffffff8b}], 0x10000000000002b8, 0x0) (async) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) (async) semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff}], 0x2) (async) socket(0x18, 0x2, 0x0) (async) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000500)="0b1d432c55e66141f176b6b8116d6ac1f205d3e0e5dc4daffa05b7534aca647b397c6a5c650bd08c16", 0x29}, {&(0x7f0000000280)="cfdefd6e95e09add251a1343ce2672d7d5b90b4f3a10e94e660cb93863e0258a8bec6c8e3666822bbc2138c9d31ed02368cff6602fce4de14eb11c8f3f6109239145de9e4759615b26276141f3020f3a30f83e0a5caa96d8634a7a2c16e84e78a3663bb0e545003c", 0x68}], 0x2) (async) 260.036µs ago: executing program 7 (id=210): sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x5, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r1 = socket(0x1, 0x2, 0x0) (async) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x41, &(0x7f0000000000), 0x4) getsockopt$sock_cred(r1, 0xffff, 0x1022, 0x0, 0x0) (async) r3 = syz_open_pts() read(r3, &(0x7f00000000c0)=""/60, 0x3c) (async) unveil(0x0, &(0x7f0000000140)='W\x00') (async) syz_open_pts() (async) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xff) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x1}, 0x2, 0x0, 0x0, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) 0s ago: executing program 6 (id=211): setrlimit(0x8, &(0x7f0000000580)={0x100000000000a, 0x56}) setrlimit(0x1, &(0x7f0000000040)={0x9, 0x1}) r0 = syz_open_pts() syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000380)={0x7fffffff, 0x7bed, 0x1, 0xffffff8c, "18590000ff7f0d00000400", 0x1, 0x4}) ioctl$TIOCSTAT(r0, 0x20007465, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffff7fff020085820269bb96aa20a9876df3bdb217db781c58678e8891936558112719838c0bcc15ea167f93a437ed64afa22c3bd1da52440edc0c4042cf2197d480fee69404d032fc7b5777cc89bb344ac184ee9900"]) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x5f}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$FIOASYNC(r1, 0x80047470, &(0x7f0000000140)=0x2) ioctl$FIOASYNC(r1, 0x80047460, &(0x7f00000000c0)=0x4) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000140)={0xc, 0x8, 0x0, 0x400479d, "bb5091a89600", 0x2, 0xffffffff}) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): OpenBSD/amd64 (ci-openbsd-multicore-2.us-central1-b.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts. login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error panic: kernel diagnostic assertion "va >= entry->start" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_fault.c", line 1739 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *413278 32168 0 0 0x4000000 1 syz-executor 131565 56589 0 0x2 0x1 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff83441226) at panic+0x1e5 __assert(ffffffff833eb2b9,ffffffff8337ea02,6cb,ffffffff83338c86) at __assert+0x29 uvm_fault_unwire_locked(fffffd806bec73a8,400000000000,400000003000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_wire(fffffd806bec73a8,400000000000,400000011000,3) at uvm_fault_wire+0x12d sysctl_vslock(400000000100,ff0a) at sysctl_vslock+0x109 kern_sysctl_dirs(49,ffff80003acdada8,3,400000000100,ffff80003acdadd8,0,2b23daa0aa92affc,3) at kern_sysctl_dirs+0x266 kern_sysctl(ffff80003acdada4,4,400000000100,ffff80003acdadd8,0,37,e494cbab343a4a8b) at kern_sysctl+0x12d sys_sysctl(ffff8000ffffcce0,ffff80003acdaf10,ffff80003acdae60) at sys_sysctl+0x425 syscall(ffff80003acdaf10) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xed8b296e590, count: 4 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "va >= entry->start" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_fault.c", line 1739 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff83441226) at panic+0x1e5 __assert(ffffffff833eb2b9,ffffffff8337ea02,6cb,ffffffff83338c86) at __assert+0x29 uvm_fault_unwire_locked(fffffd806bec73a8,400000000000,400000003000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_wire(fffffd806bec73a8,400000000000,400000011000,3) at uvm_fault_wire+0x12d sysctl_vslock(400000000100,ff0a) at sysctl_vslock+0x109 kern_sysctl_dirs(49,ffff80003acdada8,3,400000000100,ffff80003acdadd8,0,2b23daa0aa92affc,3) at kern_sysctl_dirs+0x266 kern_sysctl(ffff80003acdada4,4,400000000100,ffff80003acdadd8,0,37,e494cbab343a4a8b) at kern_sysctl+0x12d sys_sysctl(ffff8000ffffcce0,ffff80003acdaf10,ffff80003acdae60) at sys_sysctl+0x425 syscall(ffff80003acdaf10) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xed8b296e590, count: -11 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003acda910 rbx 0xffff800029a9cdc7 rdx 0 rcx 0xffff8000ffffcce0 rax 0xffff800029a9bff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xfedaf60a2c164c60 r11 0x44a10b686f9a3019 r12 0xffff800029a9cbc8 r13 0 r14 0 r15 0x1 rip 0xffffffff81a8dbe5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003acda900 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=413278 pid=32168 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffffca50,0xffff8000ffffc540 process=0xffff8000ffff2050 user=0xffff80003acd5000, vmspace=0xfffffd806bec73a8 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 43905 335398 62144 0 2 0 syz-executor 32168 199082 67681 0 2 0 syz-executor *32168 413278 67681 0 7 0x4000000 syz-executor 32168 120195 67681 0 3 0x4000080 fsleep syz-executor 32168 433489 67681 0 3 0x4000000 vmmaplk syz-executor 4844 391850 76470 0 2 0 syz-executor 4844 512297 76470 0 3 0x4000000 smrbar syz-executor 4844 129701 76470 0 3 0x4000080 sbwait syz-executor 37326 64669 43756 0 3 0x80 nanoslp syz-executor 37326 341776 43756 0 3 0x4000080 ttyin syz-executor 37326 174984 43756 0 3 0x4000080 fsleep syz-executor 37326 340977 43756 0 3 0x4000080 fsleep syz-executor 70900 23068 56589 0 2 0x480 syz-executor 70900 269433 56589 0 3 0x4000080 ttyin syz-executor 70900 303686 56589 0 3 0x4000080 fsleep syz-executor 99517 451448 50004 0 3 0x90 nanoslp syz-executor 99517 203141 50004 0 3 0x4000090 kqread syz-executor 99517 492345 50004 0 3 0x4000090 fsleep syz-executor 41042 312821 0 0 3 0x14200 acct acct 76024 316989 0 0 3 0x14200 bored sosplice 67681 308347 24781 0 3 0x82 nanoslp syz-executor 62144 195132 24781 0 2 0x482 syz-executor 76470 135440 24781 0 3 0x82 nanoslp syz-executor 56589 131565 24781 0 7 0x3 syz-executor 72711 508125 24781 0 2 0x482 syz-executor 43756 125264 24781 0 3 0x82 nanoslp syz-executor 50004 333308 24781 0 2 0x482 syz-executor 53997 508952 24781 0 2 0x482 syz-executor 24781 378375 32325 0 3 0x82 kqread syz-executor 32325 211508 48181 0 3 0x10008a sigsusp ksh 48181 331943 28694 0 3 0x98 kqread sshd-session 28694 472101 6750 0 3 0x92 kqread sshd-session 52206 38227 1 0 3 0x100083 ttyin getty 6750 353811 1 0 3 0x88 kqread sshd 11051 320680 77661 74 3 0x1100092 bpf pflogd 77661 370091 1 0 3 0x80 sbwait pflogd 38558 130789 78660 73 3 0x1100090 kqread syslogd 78660 302249 1 0 3 0x100082 sbwait syslogd 96059 9184 1 0 3 0x100080 kqread resolvd 65175 9049 62802 77 3 0x100092 kqread dhcpleased 95820 123961 62802 77 3 0x100092 kqread dhcpleased 62802 154338 1 0 3 0x80 kqread dhcpleased 17219 174457 0 0 2 0x40014200 smr 52476 267292 0 0 2 0x14200 zerothread 27351 230323 0 0 3 0x14200 aiodoned aiodoned 47406 195660 0 0 3 0x14200 syncer update 78549 88626 0 0 3 0x14200 cleaner cleaner 23684 107289 0 0 3 0x14200 reaper reaper 85373 501087 0 0 3 0x14200 pgdaemon pagedaemon 71755 466954 0 0 3 0x14200 bored viomb 46026 458269 0 0 3 0x40014200 acpi0 acpi0 36630 38402 0 0 3 0x40014200 idle1 18486 413066 0 0 3 0x14200 bored softnet3 42390 84618 0 0 3 0x14200 bored softnet2 445 73084 0 0 3 0x14200 bored softnet1 85720 364974 0 0 3 0x14200 bored softnet0 21306 77050 0 0 3 0x14200 bored systqmp 14924 367271 0 0 3 0x14200 bored systq 73660 303324 0 0 3 0x14200 tmoslp softclockmp 7330 416862 0 0 3 0x40014200 tmoslp softclock 66645 133547 0 0 3 0x40014200 idle0 1 517734 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 32168 (syz-executor) thread 0xffff8000ffffcce0 (413278) exclusive rwlock amaplk r = 0 (0xfffffd805db79560) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 uvm_map_lock_entry+0x51 #3 uvm_fault_unwire_locked+0x253 #4 uvm_fault_wire+0x12d #5 sysctl_vslock+0x109 #6 kern_sysctl_dirs+0x266 #7 kern_sysctl+0x12d #8 sys_sysctl+0x425 #9 syscall+0xbc6 #10 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8395d9a8) #0 witness_lock+0x5bb #1 __mp_acquire_count+0x58 #2 mi_switch+0x4b7 #3 sleep_finish+0x24f #4 rw_do_enter_write+0x1de #5 uvm_map_lock_entry+0x51 #6 uvm_fault_unwire_locked+0x253 #7 uvm_fault_wire+0x12d #8 sysctl_vslock+0x109 #9 kern_sysctl_dirs+0x266 #10 kern_sysctl+0x12d #11 sys_sysctl+0x425 #12 syscall+0xbc6 #13 Xsyscall+0x128 shared rwlock vmmaplk r = 0 (0xfffffd806bec74a8) #0 witness_lock+0x5bb #1 rw_do_enter_read+0x3af #2 uvm_fault_wire+0x116 #3 sysctl_vslock+0x109 #4 kern_sysctl_dirs+0x266 #5 kern_sysctl+0x12d #6 sys_sysctl+0x425 #7 syscall+0xbc6 #8 Xsyscall+0x128 exclusive rwlock sysctllk r = 0 (0xffffffff83818578) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 sysctl_vslock+0x45 #3 kern_sysctl_dirs+0x266 #4 kern_sysctl+0x12d #5 sys_sysctl+0x425 #6 syscall+0xbc6 #7 Xsyscall+0x128 Process 4844 (syz-executor) thread 0xffff8000ffff4cf8 (512297) exclusive rwlock clonelk r = 0 (0xffffffff83867148) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 if_clone_destroy+0x67 #3 tun_dev_close+0x1dc #4 spec_close+0x412 #5 VOP_CLOSE+0x133 #6 vn_closefile+0x12b #7 fdrop+0x126 #8 closef+0x192 #9 syscall+0xbc6 #10 Xsyscall+0x128 Process 4844 (syz-executor) thread 0xffff8000ffff4f88 (129701) exclusive rwlock sbufrcv r = 0 (0xffff80000144d3c0) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 sblock+0xb7 #3 soreceive+0x28e #4 recvit+0x40a #5 sys_recvmmsg+0x3d3 #6 syscall+0xbc6 #7 Xsyscall+0x128 Process 37326 (syz-executor) thread 0xffff8000ffff67d0 (341776) exclusive rrwlock inode r = 0 (0xfffffd806de44970) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 spec_open+0x305 #6 VOP_OPEN+0x8b #7 vn_open+0x708 #8 vndioctl+0xcb1 #9 VOP_IOCTL+0xac #10 vn_ioctl+0xf8 #11 sys_ioctl+0x5c3 #12 syscall+0xbc6 #13 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10228 11101K 11396K 166960K 11817 0 pcb 18 14K 15K 166960K 66 0 rtable 210 6K 7K 166960K 379 0 pf 41 18K 22K 166960K 70 0 ifaddr 41 6K 7K 166960K 54 0 ifgroup 64 2K 2K 166960K 74 0 sysctl 3 1K 1K 166960K 3 0 counters 68 36K 36K 166960K 78 0 ioctlops 0 0K 4K 166960K 1504 0 iov 1 4K 24K 166960K 13 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1407 88K 89K 166960K 1649 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 7 0 VM map 2 1K 1K 166960K 2 0 sem 11 0K 0K 166960K 16 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 89K 166960K 341 0 sigio 1 0K 0K 166960K 9 0 proc 72 91K 128K 166960K 555 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 28 0 in_multi 87 6K 7K 166960K 102 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 211 943K 943K 166960K 211 0 exec 0 0K 1K 166960K 402 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 240 73K 73K 166960K 4701 0 UVM aobj 11 2K 2K 166960K 13 0 pinsyscall 43 86K 105K 166960K 1462 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 15 0 NDP 14 0K 2K 166960K 35 0 temp 38 8679K 8754K 166960K 8482 0 kqueue 14 22K 30K 166960K 60 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 45 0 42 1 0 1 1 0 8 0 rtentry 160 113 0 17 5 0 5 5 0 8 0 unpcb 144 158 0 136 2 0 2 2 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 808 51 0 46 1 0 1 1 0 8 0 arp 120 18 0 4 1 0 1 1 0 8 0 inpcb 376 305 0 296 8 0 8 8 0 8 6 nd6 136 24 0 3 1 0 1 1 0 8 0 pkpcb 40 5 0 5 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1168 5 0 5 1 0 1 1 0 8 1 pfstscr 40 2 0 2 1 0 1 1 0 8 1 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 2 0 1 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 1 0 1 1 0 1 1 0 8 1 pftag 88 2 0 2 1 0 1 1 0 8 1 pfstitem 24 29 0 0 1 0 1 1 0 8 0 pfstkey 128 31 0 2 1 0 1 1 0 8 0 pfstate 376 29 0 1 3 0 3 3 0 8 0 pfrule 1344 25 0 19 2 0 2 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 465 0 60 29 0 29 29 0 8 1 art_table 32 466 0 60 4 0 4 4 0 8 0 art_node 16 112 0 26 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 1 1 0 1 1 0 8 0 semapl 112 13 0 4 1 0 1 1 0 8 0 shmpl 112 10 0 2 1 0 1 1 0 8 0 dirhash 1024 21 0 4 3 0 3 3 0 8 0 dino2pl 256 1938 0 428 95 0 95 95 0 8 0 ffsino 280 1938 0 428 109 0 109 109 0 8 0 nchpl 144 2410 0 722 63 0 63 63 0 8 0 uvmvnodes 80 2251 0 0 46 0 46 46 0 8 0 vnodes 216 2251 0 0 126 0 126 126 0 8 0 namei 1024 7860 0 7860 1 0 1 1 0 8 1 percpumem 16 53 0 5 1 0 1 1 0 8 0 kstatmem 264 38 0 10 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 7520 0 7520 3 2 1 2 1 8 1 plimitpl 152 54 0 36 1 0 1 1 0 8 0 sigapl 424 654 0 602 7 0 7 7 0 8 1 futexpl 64 3426 0 3421 1 0 1 1 0 8 0 knotepl 120 315 0 0 10 0 10 10 0 8 0 kqueuepl 216 81 0 71 1 0 1 1 0 8 0 pipepl 328 130 0 103 3 0 3 3 0 8 0 fdescpl 504 634 0 602 5 0 5 5 0 8 0 filepl 152 2950 0 2720 15 0 15 15 0 8 5 lockfpl 104 54 0 51 1 0 1 1 0 8 0 lockfspl 48 27 0 24 1 0 1 1 0 8 0 sessionpl 144 22 0 13 1 0 1 1 0 8 0 pgrppl 48 33 0 16 1 0 1 1 0 8 0 ucredpl 104 396 0 381 1 0 1 1 0 8 0 zombiepl 144 604 0 602 1 0 1 1 0 8 0 processpl 1176 654 0 602 6 1 5 5 0 8 0 procpl 656 1002 0 938 6 0 6 6 0 8 0 srpgc 96 2 0 2 1 0 1 1 0 8 1 sosppl 168 3 0 3 1 0 1 1 0 8 1 sockpl 688 517 0 483 10 0 10 10 0 8 6 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 113 0 0 15 0 15 15 0 8 0 mcl2k 2048 19 0 0 3 0 3 3 0 8 0 mtagpl 96 13 0 0 1 0 1 1 0 8 0 mbufpl 256 155 0 0 10 0 10 10 0 8 0 bufpl 280 2682 0 128 183 0 183 183 0 8 0 anonpl 24 119063 0 115586 34 1 33 33 0 184 9 amapchunkpl 152 14559 0 14023 24 0 24 24 0 158 2 amappl16 200 2252 0 2220 5 3 2 5 0 8 0 amappl15 192 6 0 5 1 0 1 1 0 8 0 amappl14 184 131 0 119 1 0 1 1 0 8 0 amappl13 176 46 0 46 1 1 0 1 0 8 0 amappl12 168 1296 0 1265 3 1 2 2 0 8 0 amappl11 160 51 0 36 1 0 1 1 0 8 0 amappl10 152 5 0 5 1 1 0 1 0 8 0 amappl9 144 245 0 245 1 1 0 1 0 8 0 amappl8 136 22 0 20 1 0 1 1 0 8 0 amappl7 128 133 0 121 1 0 1 1 0 8 0 amappl6 120 191 0 188 1 0 1 1 0 8 0 amappl5 112 127 0 118 1 0 1 1 0 8 0 amappl4 104 327 0 307 1 0 1 1 0 8 0 amappl3 96 2620 0 2498 4 0 4 4 0 8 0 amappl2 88 652 0 591 2 0 2 2 0 8 0 amappl1 80 8465 0 7898 15 1 14 14 0 8 2 amappl 88 4306 0 4122 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 12 0 2 1 0 1 1 0 8 0 uaddrrnd 24 634 0 602 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 634 0 602 1 0 1 1 0 8 0 vmmpekpl 168 6775 0 6742 3 0 3 3 0 8 1 vmmpepl 168 44659 0 42734 86 0 86 86 0 357 1 vmsppl 456 633 0 602 5 0 5 5 0 8 1 rwobjpl 64 17282 0 14076 52 0 52 52 0 8 0 pdppl 4096 1276 0 1204 106 34 72 84 0 8 0 pvpl 32 12229 0 0 100 1 99 99 0 265 0 pmappl 248 633 0 602 3 0 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 276 0 36 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837f6ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff8395d7a0) at __mp_lock+0x192 ktrsysret(ffff80002a3919b8,5b,0,ffff80002a4383e0) at ktrsysret+0xe1 syscall(ffff80002a438490) at syscall+0xa43 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x74ae65651940, count: 8 ddb{0}> trace x86_ipi_db(ffffffff837f6ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff8395d7a0) at __mp_lock+0x192 ktrsysret(ffff80002a3919b8,5b,0,ffff80002a4383e0) at ktrsysret+0xe1 syscall(ffff80002a438490) at syscall+0xa43 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x74ae65651940, count: -7 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff83441226) at panic+0x1e5 __assert(ffffffff833eb2b9,ffffffff8337ea02,6cb,ffffffff83338c86) at __assert+0x29 uvm_fault_unwire_locked(fffffd806bec73a8,400000000000,400000003000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_wire(fffffd806bec73a8,400000000000,400000011000,3) at uvm_fault_wire+0x12d sysctl_vslock(400000000100,ff0a) at sysctl_vslock+0x109 kern_sysctl_dirs(49,ffff80003acdada8,3,400000000100,ffff80003acdadd8,0,2b23daa0aa92affc,3) at kern_sysctl_dirs+0x266 kern_sysctl(ffff80003acdada4,4,400000000100,ffff80003acdadd8,0,37,e494cbab343a4a8b) at kern_sysctl+0x12d sys_sysctl(ffff8000ffffcce0,ffff80003acdaf10,ffff80003acdae60) at sys_sysctl+0x425 syscall(ffff80003acdaf10) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xed8b296e590, count: 4 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff83441226) at panic+0x1e5 __assert(ffffffff833eb2b9,ffffffff8337ea02,6cb,ffffffff83338c86) at __assert+0x29 uvm_fault_unwire_locked(fffffd806bec73a8,400000000000,400000003000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_wire(fffffd806bec73a8,400000000000,400000011000,3) at uvm_fault_wire+0x12d sysctl_vslock(400000000100,ff0a) at sysctl_vslock+0x109 kern_sysctl_dirs(49,ffff80003acdada8,3,400000000100,ffff80003acdadd8,0,2b23daa0aa92affc,3) at kern_sysctl_dirs+0x266 kern_sysctl(ffff80003acdada4,4,400000000100,ffff80003acdadd8,0,37,e494cbab343a4a8b) at kern_sysctl+0x12d sys_sysctl(ffff8000ffffcce0,ffff80003acdaf10,ffff80003acdae60) at sys_sysctl+0x425 syscall(ffff80003acdaf10) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xed8b296e590, count: -11