last executing test programs: 6.114796127s ago: executing program 0 (id=1): r0 = syz_open_pts() setsid() (async, rerun: 32) ioctl$TIOCSCTTY(r0, 0x20007461) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x80047476, &(0x7f0000000140)=0x80000a) (async, rerun: 64) syz_emit_ethernet(0x62, &(0x7f0000000080)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "975203", 0x2c, 0x3c, 0x3, @rand_addr="062cbb115fca75ae1edf860e8f8c9704", @mcast2, {[@hopopts={0x0, 0x1, '\x00', [@generic={0x81}, @generic={0x4, 0x5, "b271c70f3a"}]}], @tcp={{0x1, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x20, 0x1e6, 0x0, 0x8001}}}}}}}) (rerun: 64) 5.80339202s ago: executing program 1 (id=9): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@abs={0x3, 0x1, 0x0, 0x0}, 0x8) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) open(&(0x7f0000000040)='./file0\x00', 0x10028, 0x0) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x10028, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) (async) r2 = open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) kevent(r2, &(0x7f0000001240)=[{{r0}, 0xfffffffffffffffc, 0x21, 0x8, 0x2}, {{r2}, 0xfffffffffffffff8, 0x44, 0x40000000, 0x3, 0xfffffffeffffffff}, {{r1}, 0xffffffffffffffff, 0x10, 0x20, 0x10, 0x400}, {{r1}, 0xfffffffffffffffc, 0x2, 0x20, 0x6, 0x4}], 0xb498, &(0x7f00000012c0)=[{{r0}, 0xfffffffffffffffc, 0x40, 0x1, 0x8, 0x4}, {{r1}, 0xfffffffffffffffc, 0x42, 0x1, 0x7fffffff, 0xffffffffffffff81}, {{r0}, 0xfffffffffffffffc, 0x84, 0x10, 0xfffffffffffffa10, 0x7}], 0x3, &(0x7f0000001340)={0x8, 0xa1b5}) mknod(&(0x7f00000001c0)='./file1\x00', 0x2000, 0x285b9a) (async) mknod(&(0x7f00000001c0)='./file1\x00', 0x2000, 0x285b9a) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$VNDIOCCLR(r1, 0x80384601, &(0x7f0000000240)={0x0, 0xa, &(0x7f0000000200)='./file1\x00', 0x8}) sysctl$kern(&(0x7f00000000c0)={0x1, 0xb}, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5901) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5901) kqueue() pselect(0x40, &(0x7f0000000000)={0x9, 0x1, 0x2a50, 0x2, 0x3, 0x9, 0x10, 0x1ff}, &(0x7f0000000040)={0xfffffffffffffff8, 0x6, 0x7, 0x800, 0x8, 0x7ff, 0x4, 0x7}, 0x0, 0x0, 0x0) r3 = accept$unix(r0, &(0x7f0000000180)=@file={0x0, 0x0, ""/4100}, &(0x7f00000011c0)=0x1006) connect(r3, &(0x7f0000001200)=@in6={0x1c, 0x18, 0x0, 0xffff, "4b0b793569265d69ef44659cded65f30", 0x6}, 0x1c) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 5.748859403s ago: executing program 6 (id=7): open$dir(&(0x7f00000000c0)='./file1\x00', 0x8, 0x122) (async) setuid(0xffffffffffffffff) (async) r0 = semget$private(0x0, 0x4, 0x211) semctl$SETVAL(r0, 0x2, 0x8, 0x0) sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x1e, 0x2, 0x3}, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f0000001540)="9b0209c3", &(0x7f00000002c0)=0x4, 0x0, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x12}, 0x4, &(0x7f00000000c0)="86a9bd41e5b868c26784ba743783afbed3fa63dfe1cea587b3f9b77363c47b3710b6f6553accd9778370b63c79b3fae334dc560197c801d0a273f960eb9d52ca81a815cf83c603204d07303f95981907cc4f85e8484a3f7e5e9fbdc5f119fdb6fa05b85a5ebb4357e49a048e04385400b0c9c62c3599cd4914668ff49bbb", &(0x7f0000000140)=0x7e, &(0x7f0000000180)="01c220fa85d79e2b1b27d423f7d5781d81f87b8ebecfe84db2e79ddfeff9a9d9a280337615de0f44852cacab630f5bc6cd6737cf03949ff7f7e08d8c595e63122604001ad3a14aa2f0fab056757de13456b4965ab361495dacf3496cec1f8e48a73d99c586dcb0c1d096aa689d5a5ef7dddeb86229cbd61139c3d50a5c3604fcc6da7db597eec9d70a46dbe05cecb5156cf874d7cbb7d889e75bfb6b1bdcb1951ff746517a2d04f4a374c8f49b76d2b4e234cdb5c5b60220be", 0xb9) 4.589843392s ago: executing program 4 (id=12): sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffe6e) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x27}, 0x4, &(0x7f0000000000)="71f91e3471ac0058bc5a91501d942400b5e1a0757cb9af769c7afec37082", &(0x7f0000000080)=0x306, 0x0, 0x2e) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000880), 0x1, 0x0) (async) r1 = socket(0x2, 0x1, 0x0) close(r0) chmod(0x0, 0x3db) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) (async) listen(r2, 0x5) setsockopt(r2, 0x6, 0x4, &(0x7f0000000040)="d2674561", 0x4) (async) open(&(0x7f0000000080)='./file1\x00', 0x1, 0x1f5) (async) r3 = syz_open_pts() fcntl$lock(r3, 0x8, &(0x7f0000000180)={0x3, 0x1, 0x7, 0x1000300000080}) (async) fcntl$lock(r3, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x2ff, 0x100000001}) fcntl$lock(r3, 0x9, &(0x7f00000001c0)={0x3, 0x0, 0x200009, 0x2ffffffff}) sysctl$kern(&(0x7f0000000140)={0x1, 0x51}, 0x2, &(0x7f0000000280)="ef2bc49bc43b60184711601944e532c22575127af49851d4e46e60055963652ee35e3d3ab96a37b0b7afab1f0e11d177c8b7f8a131a96c2bef164d217b7ed8bcae36bc668af32ce22c408b2b38ef6fead44f4bd8d5b957feb0be4fe4b0f4874e5b4999a86c0af47862ae6baae8008f9112040b98cb4edba12da5072d02ba8550afcc8d628d209739e1d6976bd32a0a75fee408e3aba4d13d9da91ccfe45d78306e0e926c5a9637927795819dc56ea4463edf03c70a1bba5e7782f6decaa7be0a01c1ca49c6bd48a3c168d4cfbdda85e7070f9fc3aa93756253448e38376cf1c934", &(0x7f0000000380)=0xe1, &(0x7f00000003c0)="b08fb8aefa6bb032fcb9af089b32d17a29728e89671cfb131fedb3a4685334c48db92f0b962d74005e4febacde32f1882135e860932846bfe582509bd32715001061e1a039bc9fa1f5472d168acc08a5d0cbbddd0b26cb8b4ff1", 0x5a) (async) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={0x18}], 0x18, 0x2}, 0x0) (async) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f0000000000)={0xfc01, 0x0, 0xe, 0x464a, 0x8}, 0xc) (async) ioctl$SPKRTONE(r0, 0x80085301, &(0x7f0000000040)={0x9, 0x5}) setsockopt(r1, 0x3, 0x8, &(0x7f0000000080)="5c16db502bf4dd480c69bb4836cb5d378c443080f1e32059b39ff85323670861c5716c59e2fe0df9e29a6cdcda9f28679f7953406a9cb65789015fa2cc208666dbbd11b6f672b598e08a85a6ba8c1b5b6e9a3449d9971a6da2c381ccb4d428136f0450325243809d77d0b7b0569cc632232f0090c64c871ff443370c0379b286b82a2dceb0cd700108e2775a1a086d1bb277183d2153e3c9bbc6f105", 0x9c) 3.508074918s ago: executing program 1 (id=14): r0 = socket$inet(0x2, 0x1, 0x0) (async) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) (async) listen(r1, 0x5) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @random="867631fea695", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x30, 0x69, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x8200, 0x0, 0xfffc, {[@generic={0x8, 0x2}, @window={0x3, 0x3, 0x6}]}}}}}}}) (async) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2, 0x1}, 0x10) listen(r0, 0x7ff) r2 = socket(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xac1402aa}, 0x10) (async) r3 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xffffffffffffff81, 0x5, 0x2800000003, 0x7, 0x8001, 0x0, 0x6, 0x7, 0x2, 0x2f00, 0xff, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x3, 0xf, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0xdd3, 0xffff, 0x7b92, 0x6, 0x0, 0xb, 0x9], [0x5ad8, 0x6, 0x100000001, 0x3, 0xffffffffffffffff, 0x872a, 0xfffffffffffffffa], [0xf3, 0x2, 0xfffffffffffffffc, 0x8000000100000000, 0xfffffffffffffffc, 0x3], [{0x200, 0x4, 0x0, 0x7}, {0xfffc, 0x6, 0x5, 0x11}, {0x0, 0x0, 0xfffffffe, 0x81}, {0x3, 0xc33, 0x3, 0xffffffffffffffff}, {0xc000, 0x2, 0x9d, 0xffffffffffffff77}, {0xe55, 0x2006, 0x40000, 0x2000000000000000}, {0x6b7, 0x0, 0x400001, 0x200}, {0x5, 0x4, 0x7, 0x8}], {0x2, 0x6, 0x5, 0xfffffffffffffffd}, {0x21, 0x6, 0x5, 0x4}}}) (async) mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0x6) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0x28180, 0x90) (async) kevent(r3, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) (async) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffff9c, 0x82485608, &(0x7f0000000340)={0x8, 0x1000, 0x3, {[0x4, 0x3, 0x2c0, 0xfff, 0x0, 0x80000001, 0x4, 0xe2b, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1, 0x200, 0x7fffffffffffffff, 0x3, 0x4], [0xffffffffffff443c, 0x2, 0xb9, 0x325, 0x2a, 0x7fff, 0x800, 0x400, 0xffffffff99acb3e7, 0xc], [0x0, 0x6, 0x7, 0x1, 0x3, 0x8, 0x9], [0xd, 0x2, 0x7f, 0x4000000000000, 0x7, 0x80000001], [{0x200, 0x6, 0x0, 0x8}, {0x2, 0x5, 0xf4d5, 0x3}, {0xb, 0x3, 0x5, 0x10}, {0xff, 0x6, 0x8001, 0x3}, {0x1, 0xffffff01, 0x8, 0xfffffffffffffffc}, {0x2be, 0x0, 0x0, 0x8}, {0x5, 0x3, 0x9, 0x7}, {0x9, 0x6, 0x87d0, 0x10000}], {0x200, 0x0, 0xf, 0x8}, {0x3, 0xa7, 0x9, 0x4}}}) 3.388522353s ago: executing program 0 (id=1): r0 = syz_open_pts() setsid() (async, rerun: 32) ioctl$TIOCSCTTY(r0, 0x20007461) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x80047476, &(0x7f0000000140)=0x80000a) (async, rerun: 64) syz_emit_ethernet(0x62, &(0x7f0000000080)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "975203", 0x2c, 0x3c, 0x3, @rand_addr="062cbb115fca75ae1edf860e8f8c9704", @mcast2, {[@hopopts={0x0, 0x1, '\x00', [@generic={0x81}, @generic={0x4, 0x5, "b271c70f3a"}]}], @tcp={{0x1, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x20, 0x1e6, 0x0, 0x8001}}}}}}}) (rerun: 64) 3.384043056s ago: executing program 1 (id=15): r0 = syz_open_pts() readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4081, 0xffffff89}], 0x1) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x80) ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80085761, &(0x7f00000001c0)={0x2}) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f00000001c0)={0x100, 0x8, 0x80000000, 0x4de, "5901fe00000000772b00bcf378598000000300", 0x9, 0x5}) 3.38225106s ago: executing program 3 (id=16): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xfffffffe, 0xfffffffe, {0x5, 0x10000000000002}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x4, 0x0) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$VMM_IOC_CREATE(r1, 0xca605601, &(0x7f00000002c0)={0x10, 0x5, [{&(0x7f000008d000/0x3000)=nil, &(0x7f000079c000/0x1000)=nil, 0x2}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000e4000/0x800000)=nil, 0xfffffffffffffffc}, {&(0x7f00005e9000/0x3000)=nil, &(0x7f0000682000/0x3000)=nil, 0x6}, {&(0x7f0000004000/0x3000)=nil, &(0x7f0000459000/0x4000)=nil, 0x3}, {&(0x7f000065e000/0x3000)=nil, &(0x7f00000f2000/0x4000)=nil, 0xfff}, {&(0x7f0000136000/0x2000)=nil, &(0x7f0000877000/0x3000)=nil, 0x2}, {&(0x7f0000248000/0x3000)=nil, &(0x7f00003a6000/0x3000)=nil, 0x1}, {&(0x7f000059d000/0x3000)=nil, &(0x7f0000811000/0x1000)=nil, 0x1}, {&(0x7f000063f000/0x4000)=nil, &(0x7f00001fc000/0x4000)=nil, 0x401}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0xff}, {&(0x7f00000da000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x21}, {&(0x7f0000634000/0x4000)=nil, &(0x7f000085f000/0x3000)=nil, 0xc}, {&(0x7f0000673000/0x4000)=nil, &(0x7f00006cc000/0x3000)=nil, 0x6}, {&(0x7f00004ff000/0x3000)=nil, &(0x7f0000392000/0x1000)=nil, 0x2}, {&(0x7f0000032000/0x1000)=nil, &(0x7f00004a2000/0x4000)=nil}, {&(0x7f00005f1000/0x4000)=nil, &(0x7f0000166000/0x1000)=nil, 0x52b}], './file0\x00', 0x6, 0x512, 0x3, 0x1, [0x3, 0x1, 0x714, 0xa0e1, 0x8, 0xfff, 0x3a0, 0x1, 0x3, 0x0, 0x4d2, 0x80000000, 0x2, 0x1, 0xd054, 0x7fff, 0x7fff, 0x7, 0x4, 0xf, 0x6, 0x3, 0x6, 0x400, 0x7, 0xe, 0x4, 0x10, 0x9, 0x8, 0x4, 0x1ff, 0x3, 0x101, 0x4, 0x8, 0xfffff83a, 0x0, 0x8001, 0x8, 0xf, 0x800, 0x0, 0xde2, 0x5, 0x1, 0xfffffff7, 0x9ff, 0x7f, 0x1, 0xffff0001, 0x0, 0x8000, 0x1ff, 0x0, 0x1000, 0x2, 0x8, 0x80, 0x6, 0x3, 0x3, 0x7, 0x8, 0x20, 0x4, 0x8, 0x8, 0xe29, 0xfff, 0x2, 0x6, 0xbde, 0x0, 0x7, 0x4076, 0x8, 0x401, 0x6fe, 0x9, 0x40000000, 0xf1d, 0x16ee7a9, 0x2, 0x80000001, 0x4, 0x200, 0x6, 0x0, 0x463b, 0x3, 0x10000, 0x101, 0x9, 0x8, 0xfff, 0x1000, 0x81, 0xfffffff9, 0x1, 0x5, 0x0, 0xc13cd800, 0x3, 0x5, 0xc61, 0x78, 0x0, 0x3, 0x8, 0x8, 0x3, 0x10001, 0xfffffff7, 0x3, 0xffffffff, 0x571, 0x0, 0x9, 0x2, 0x7f, 0x9, 0x0, 0x0, 0xdad, 0x4abb, 0x1, 0x2, 0xcd5, 0x80000001, 0xd44, 0x9, 0x9, 0x28cc, 0x1, 0x0, 0x9, 0x7, 0x3, 0x0, 0x8, 0x7fff, 0x7, 0x7a7d, 0x10000, 0x9, 0x7, 0xf, 0x7, 0xc000, 0x0, 0x8, 0x3, 0x7, 0x4, 0x6a, 0x1000, 0x6, 0x61, 0x7fff, 0x0, 0x4, 0x1800000, 0x0, 0x7ff, 0x7f, 0x10000000, 0x5, 0x7fff, 0x8, 0x100, 0xffffffff, 0x8, 0x0, 0x71, 0x4, 0x40, 0x6, 0x8, 0x0, 0x0, 0x0, 0x3, 0x400, 0x6, 0x1, 0x7, 0x5, 0x6, 0x8, 0x9, 0x7f, 0x4, 0x71, 0x948f, 0x328, 0x9, 0xde, 0xfffffffc, 0x4, 0x2, 0x8, 0x401, 0x7, 0x4, 0x7, 0x1, 0x7fffffff, 0x9, 0x5, 0x401, 0x419, 0x40, 0xa25, 0x0, 0x1, 0x4a9e, 0x9, 0x2, 0xfff, 0x4148, 0x8, 0x57a, 0x9, 0x3, 0x10, 0x3, 0x7, 0x1ff, 0xc, 0x5, 0xffff, 0x2, 0x9, 0x968af7cb, 0x15f, 0x9, 0x10001, 0x1ff, 0x4, 0x1, 0x2, 0x800, 0x100, 0x2, 0x2, 0x8f8, 0x2, 0x5, 0xff, 0x6, 0x9, 0xfffffc00, 0x3, 0x0, 0x1, 0x3, 0x4, 0x3, 0x0, 0x7, 0x6, 0x7, 0x4, 0x10000, 0x6, 0x1, 0x7b, 0x101, 0x5, 0x9, 0x2e, 0x7, 0xe4b4, 0x401, 0x400, 0x10000, 0x2, 0x80008000, 0x200, 0x5, 0xfffffffc, 0x834, 0x800, 0x9, 0xa9, 0x40, 0x1, 0x3e000, 0xd9, 0x200, 0xb, 0x7, 0x0, 0x8, 0x4, 0x0, 0x800, 0x4, 0x8000, 0x3, 0x3, 0xfff, 0x101, 0x0, 0x2, 0x9, 0x200000, 0x7, 0x3cc0, 0x1, 0x0, 0x3, 0x5, 0x40, 0x3, 0x8001, 0x6, 0x3, 0x911, 0x1, 0xffffff7f, 0x0, 0x400, 0xb, 0x0, 0x8, 0x2, 0x6, 0x7fff, 0x4, 0xfffffffb, 0x2, 0x5, 0x65, 0x3, 0x1, 0x5fb, 0x8, 0x4, 0x7, 0xffffffff, 0x8, 0x5, 0x4, 0x6, 0x5, 0x8, 0x10000, 0xf838, 0x6, 0xfff, 0x40, 0x9, 0x3, 0x9, 0x9, 0x2d51, 0x5, 0xfffff484, 0x2, 0x2, 0x1, 0x4, 0x819, 0x0, 0xfffffffc, 0x6a15, 0x401, 0x4, 0x9, 0x8, 0xfad, 0x7481, 0x7ff, 0xfffffc00, 0x5, 0x1, 0x1, 0x9, 0x4, 0x8100, 0x1, 0x0, 0xfffffffe, 0x1, 0xa6ef, 0x2, 0x7, 0x100, 0x8, 0x0, 0x7f4, 0x380000, 0x8, 0x7fffffff, 0x101, 0x2, 0x8, 0x9, 0x9, 0x9, 0x80000001, 0x3, 0x101, 0x10000, 0x7fffffff, 0x0, 0x3, 0x7, 0x0, 0x6, 0x3, 0x0, 0x7, 0x100, 0x0, 0x2, 0xfffffee4, 0xf, 0x6872, 0x6, 0x9, 0x2, 0x7, 0x3, 0x7a, 0xcc46, 0x7, 0x0, 0x412, 0xb202, 0x1, 0x8, 0x6116f764, 0x7, 0x0, 0x7, 0x80, 0x6, 0x2, 0x40c2, 0x1a10, 0xfff, 0x80000001, 0x8, 0x7, 0x8, 0x2, 0x3, 0x9, 0x6, 0x8000, 0x0, 0x7fff, 0x0, 0x3, 0x200, 0x2, 0x7ff, 0xbc74, 0x800, 0x2, 0x0, 0x1, 0x8, 0x4, 0xffffffff, 0xffffffff, 0x7fff, 0x80000000, 0x2, 0x10001, 0x2, 0x0, 0xfff, 0x0, 0x2c5, 0x9, 0x5, 0x7ff, 0x3f2173f8, 0x8, 0x3, 0x4, 0x6fb2, 0x6, 0x4, 0x3, 0xfffffff7, 0x80000001, 0xdab6, 0x6, 0x9, 0xa802, 0x7, 0x48000000, 0x8, 0x8, 0x18ce, 0x6b81, 0x8, 0x9, 0x8, 0x9, 0x4, 0xb, 0x5, 0x7, 0x2, 0x0, 0x6c]}) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) fstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setuid(r2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0xfffffffd, "feff0000000000000000000000000001", 0x101}, 0x1c, 0x0, 0x0, 0x0}, 0x0) 3.380654655s ago: executing program 4 (id=17): r0 = socket(0x18, 0x5, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x4c) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$VMM_IOC_RESETCPU(r1, 0x82405605, &(0x7f0000000340)={0x10001, 0x5, {[0x3, 0xc6, 0x8f5d, 0x7d, 0x1000, 0x7f, 0x8d, 0x3ff, 0x5, 0x8, 0xfffffffffffffffc, 0xe, 0x1, 0x9, 0x0, 0x1, 0xc1d9, 0x2], [0x7, 0x4, 0x952e, 0x2, 0x3, 0x10000, 0xf4, 0x800, 0x3b7, 0x7], [0xffffffff, 0x3ff, 0x223e, 0xfffffffffffffffc, 0x80000001, 0x0, 0x1], [0x6, 0xf6cd, 0x39, 0xfffffffffffffffd, 0x4, 0x2], [{0xe, 0xcb, 0x0, 0x80000000}, {0xa, 0x1ff, 0x8000, 0xb}, {0x200, 0x10000, 0x0, 0x731b}, {0x0, 0xb6, 0x3d, 0x6}, {0xc, 0x4ab1, 0xff, 0x3ff}, {0x5aa, 0x5, 0xfffffff8, 0x8}, {0x1ff, 0x3, 0x400}, {0x2, 0x1, 0x400, 0x4}], {0x7, 0x1, 0x900, 0x21}, {0x1000, 0x1, 0x7, 0x8000}}}) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0x9, '\x00', 0x80000001}, 0x1c) sysctl$vm(&(0x7f0000000080)={0x2, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001880)='\x00\x00\x00\x00', 0x4) mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200) chmod(&(0x7f00000001c0)='./bus\x00', 0x100) setuid(0xee01) open$dir(&(0x7f0000000300)='./bus\x00', 0x200, 0x1df) rename(&(0x7f0000000140)='./bus\x00', &(0x7f0000000040)='./file0\x00') ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) sysctl$net_pipex(&(0x7f0000000180)={0x6, 0x1b, 0x2}, 0x3, &(0x7f0000000040)="ed7e679220e46fcc4c5fbf167dbdc16f23719a9324be3fb9b0a4a40800000092c1d261bcdf6a4c61a4bcadf04284beb0db6e361cf9edfcbaf4c08177d79cb08f", 0x0, 0x0, 0xfffffffffffffea4) 2.209520481s ago: executing program 3 (id=20): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r0, 0x20007461) dup2(r0, 0xffffffffffffffff) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000300)={0x1000, 0x1, 0xdbfffffe, 0xfffe, "ca0890b800", 0x800, 0xfffffffe}) 2.207646136s ago: executing program 4 (id=21): symlink(&(0x7f0000000100)='./bus/\x00', &(0x7f0000000040)='./file1\x00') open(&(0x7f0000000000)='./bus/\x00', 0x8000, 0xfc) ioctl$VMM_IOC_READREGS(0xffffffffffffffff, 0xc0205609, &(0x7f0000000040)={0xffffffff, 0x0, 0x0, {[0x1040000, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1000000000, 0x0, 0x2, 0x0, 0x6, 0x2, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x1], [0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000002], [0x40000000000, 0x0, 0x0, 0x3], [{0x0, 0x0, 0x2000000}, {}, {0x2}, {}, {0x0, 0xffffffff}, {0x0, 0xfffffffe, 0x0, 0x5}, {0x0, 0x2, 0x1}], {0x0, 0x8, 0x0, 0x4}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000a, &(0x7f0000000000)="83", 0x1) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='~', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.207168159s ago: executing program 5 (id=22): r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x4e, 0x2100009, 0x5c0, 0x1, 0x3, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x6, 0x71001}, {0x9, 0x80, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x203, 0x3, 0x99}, {0xce1, 0x15, 0x4f8, 0xa}, {0x5, 0x300, 0x57, 0x2}, {0x0, 0x100, 0x7, 0x8}, {0x8007, 0x8001, 0xfffffffd, 0x10000103}, {0x1cc, 0x10001, 0xfa, 0x1}, {0x5b9a, 0x0, 0xfffffffd, 0x1}, {0x7, 0x5, 0x200008, 0xb}, {0x29a71717, 0x80, 0x0, 0xc377}, {0x0, 0x3ff, 0x69}, {0x8000, 0x40, 0xe0, 0x30000}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x800, 0x0}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x17, 0xdf60, 0xfffffffffffffffe, 0x7f, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x6], [0xfffffffffffffffe, 0x80000001, 0x1, 0x20000001, 0x5e, 0x7, 0x80000000000001fe, 0x4, 0x0, 0x1], [0x100000003, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xd, 0x8], [{0x0, 0x0, 0xfffffffe, 0x8000000000007d06}, {0xfffc, 0x22, 0x5}, {0x4, 0x3, 0x80, 0x80}, {0x3, 0x4, 0x9, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9, 0x8}, {0x0, 0x100, 0x1, 0x4}], {0x7f, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x1}}}) kqueue() pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000340)={0x40, 0x2, {[0xfffffbfffffffff9, 0x0, 0x5, 0xc, 0x6, 0x0, 0x80000000, 0xfffffffffffffffe, 0xfffffffffffffff8, 0x7fedd050, 0x12, 0xa, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0xfffffffffffffffa, 0x100], [0x5304, 0x80000001, 0xfffffffffffffffd, 0x9e33, 0x5e, 0x60000000000000, 0x10000001fe, 0x3, 0x0, 0x9467], [0x5, 0x0, 0x2, 0x5, 0xe, 0x10ffc, 0xffffffff00000000], [0x100, 0xffd9, 0x6, 0x100020000, 0xfffffffffffffffa, 0x100], [{0x1000, 0x4, 0xfffffffc, 0x7d02}, {0xff, 0x402, 0x5}, {0x4, 0x0, 0xfefffffe, 0x80}, {0x3, 0x5, 0x6, 0xffffffffffffffff}, {0x0, 0x2, 0x4000009, 0xfffffffffffffffb}, {0x0, 0x28291c58, 0x9, 0x2000000000000004}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xfffc, 0x100, 0x0, 0x8}], {0x9, 0x5, 0x800, 0x2}, {0xfffe, 0x80000000, 0x8, 0x4}}}) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) r4 = kqueue() syz_open_pts() kevent(r4, &(0x7f0000000000), 0x95, &(0x7f0000000540), 0xfffa4961, 0x0) ioctl$TIOCSETA(r3, 0xcd604404, &(0x7f00000005c0)={0x1080ff68, 0x2, 0x80c, 0xa, "74de6800", 0x5, 0xdb60}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x1, 0x3, 0xffff, 0x8ee, 0xcb1, 0x72c, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000000c0)={0x0, 0x2, 0x5, 0x7, 0x8, 0x4, r5}) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$DIOCRDELADDRS(r6, 0xc4504444, &(0x7f0000000340)={{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x9, 0x6}, 0x0, 0x6, 0x0, 0xfffffffc, 0x4, 0x2, 0xfffffffe, 0x10, 0x80c8}) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$net_inet_tcp(&(0x7f0000000300)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000001540)="9b0209c3eb987ab7fe4189c99e805e6e84d356960798a69242e3303eac3846528d050712f838130efce33f523ba44706983a3bce4ed2c723e4c005d86d65f5f6915b0227390ed95bd9dc6d4dc7e149d4d6d06a3f23616e773302d9cae75e39a5a11e32e0e6ebd635450b2eba540af7f2aa5dbfbdd900a0dad2b74fd0acd76b5c567049ef436dbea0d7562f52950fa5ef6e84c513252ddd8680a944d5c2bd02adc7f1fe850c00000000000000062ab475cca257352828a76e5334be562995e894238b96ca5d4d3e670feac9b4e8aa9bef19525cb6f7e8570b2a374f1400041ed45bb7ad3fe963cb9a8bd949ee0fc6dbceb7d956015947b3e88aa810f8ed7cca10ff010000000000001345daa49507756f49775275ca390b94e85d5a95b8bdacb9429c25483a9275d0da3b561c6adc3c141f26a88016dd6b436218bdbdc9ac0a623855e941dc1872fcb045e0d9df1ecc6357ee21e2b0802cb60eec6add5e94723235f06715e7eecc3e0760c70e1dd7873e27142bbae1a7e44de453a073fe3426f334b80f043ba9136d57c799353d46dd81439b111a511a288bee5dfb2e353e3bb073e3342273216b07e49ca4df0fd2dbe9a8eb377010ee678aad0bd8e9fb7d82693a096344671843a1f20823d0bef9177103145eb54a2612b0ff237c6e505ff5f5ba932954d7ff630fdb791f833a1da5af0704f687e196f4f7859e071fc98111cc9024f790ce16ceaa7d0104e39789d910", &(0x7f00000002c0)=0x210, 0x0, 0x0) 2.034112681s ago: executing program 3 (id=24): readv(0xffffffffffffffff, 0x0, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) (async) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000), 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x21) open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) setgroups(0x0, 0x0) (async) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0x49}], 0x1) (async) r2 = openat$audioctl(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$AUDIO_GETPOS_ctl(r2, 0x40104123, &(0x7f0000000140)) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x8, 0x0) 2.012656895s ago: executing program 4 (id=25): select(0x40, &(0x7f0000000180)={0x35, 0x2, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="8fce1bfa18b423ec280137b188f835254420c4756153d60adfc5909310fcd1ebd7168bf1784d082d08a690048754993d6d9a2f3192262ee5b8f79f96a03fbb", 0x3f) (async, rerun: 64) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) (rerun: 64) r1 = syz_open_pts() close(r1) (async) syz_open_pts() (async, rerun: 64) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x38a}) (rerun: 64) r2 = syz_open_pts() close(r2) (async) ioctl$VT_RELDISP(0xffffffffffffff9c, 0x20007604, 0x0) (async) r3 = syz_open_pts() (async) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="cc69696ef3c976ebd721d757288004c0cc645ccac9616560bb20e269ba4a9e7e77ff93b4d1701446a1924304e2301f75b3419b22a81325f86cb8ad2fa1ee18ccc255c4bb7d099a0c193101ba6e7c1c6ad07c2a03082d5c2247169ca8622e5095840e6ce038e3062c75461e4a2bf1ce681fff08354f91ffbfa6007093d5fda7bf9b8fda2fa1eded6c0c88f6e6cfb87d2604", 0x91}], 0x1) read(r3, &(0x7f0000000500)=""/251, 0xfb) (async, rerun: 64) syz_emit_ethernet(0x0, 0x0) (async, rerun: 64) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) (async, rerun: 32) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) (async, rerun: 32) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x209, 0xfffffffd, 0x5, 0x1, 0x100, 0x10, 0x80000000, 0x1, 0x0, 0x101, 0x6}) (async) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x100637d) (async) r4 = open(&(0x7f0000000800)='./file1\x00', 0x80, 0x2b) sendto$unix(r4, &(0x7f0000000000)="cc7a7148b9240515f09b7c259425022df1efbb4171a6e8943293b124284ff5fbb43c4d71a9ca48b53a8f3aaa86a112e9f21794f20619e4baad125c7097db7957c8a30da94a9a260cf56a", 0x4a, 0x4, 0x0, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) r5 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0x1c, 0x18, 0x2, 0x2000005, "0a070000001ef47fff00ffffffffff00", 0x9}, 0x1c) ioctl$WSDISPLAYIO_USEFONT(r4, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x206, 0x8, 0x3, 0x0, 0x8000004a, 0x2, 0x80000000, 0x1, 0x1, 0x9, 0x840000000000a4c2}) (async) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) (async) r6 = openat$pci(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FIONBIO(r6, 0xc0107008, &(0x7f0000000040)=0x3) 2.005995598s ago: executing program 5 (id=26): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$DIOCRGETTSTATS(0xffffffffffffffff, 0xc4504440, 0x0) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000ac0)={{0x4, './file0\x00', [{[@v4, @v6=@empty], [0x5, 0xffed], 0x5}, {[@v6=@rand_addr="caea2e245e33fb23b8362c7c3000", @v4=@rand_addr=0xa], [0x6, 0x3ff], 0x49}], {{0x4, 0x80, 0x6, 0xfff}, 0x6, 0x0, 0x80, 0x8, 0x401, 0x6, 0x2}, {{0x9, 0xfd, 0xff, 0xb07}, 0xba, 0x3, 0x40000004, 0xff, 0xfb, 0xfc, 0x6}, @v4=@multicast1, 0x3, 0x1, 0x80004, 0x7, 0x100, [[0x5, 0xd], [0x1, 0x3fe]], [[0x80007], [0x0, 0x1ff]], 0x9, [0x20000007, 0x1], 0x1, 0x31, 0x66, 0x2, 0x20, 0x1, 0x88, 0x2, 0x2, 0x6, 0x3, 0xfffc, "02ac"}}) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0xffffdff0, 0x8020000000000001}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xcd60441a, &(0x7f0000000140)={0x8, 0x100, 0x8001, 0x403, "200000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7}) 1.999103724s ago: executing program 6 (id=7): open$dir(&(0x7f00000000c0)='./file1\x00', 0x8, 0x122) (async) setuid(0xffffffffffffffff) (async) r0 = semget$private(0x0, 0x4, 0x211) semctl$SETVAL(r0, 0x2, 0x8, 0x0) sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x1e, 0x2, 0x3}, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f0000001540)="9b0209c3", &(0x7f00000002c0)=0x4, 0x0, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x12}, 0x4, &(0x7f00000000c0)="86a9bd41e5b868c26784ba743783afbed3fa63dfe1cea587b3f9b77363c47b3710b6f6553accd9778370b63c79b3fae334dc560197c801d0a273f960eb9d52ca81a815cf83c603204d07303f95981907cc4f85e8484a3f7e5e9fbdc5f119fdb6fa05b85a5ebb4357e49a048e04385400b0c9c62c3599cd4914668ff49bbb", &(0x7f0000000140)=0x7e, &(0x7f0000000180)="01c220fa85d79e2b1b27d423f7d5781d81f87b8ebecfe84db2e79ddfeff9a9d9a280337615de0f44852cacab630f5bc6cd6737cf03949ff7f7e08d8c595e63122604001ad3a14aa2f0fab056757de13456b4965ab361495dacf3496cec1f8e48a73d99c586dcb0c1d096aa689d5a5ef7dddeb86229cbd61139c3d50a5c3604fcc6da7db597eec9d70a46dbe05cecb5156cf874d7cbb7d889e75bfb6b1bdcb1951ff746517a2d04f4a374c8f49b76d2b4e234cdb5c5b60220be", 0xb9) 1.566999016s ago: executing program 0 (id=28): r0 = kqueue() pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) poll(&(0x7f0000000180)=[{r1, 0xa9e6aac0282a6fec}], 0x1, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) select(0xfffffffffffffe91, &(0x7f0000000040)={0x2, 0xc, 0x4008, 0x1, 0x5, 0x4, 0x200, 0x3fffffffffd}, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x140) ioctl$VNDIOCSET(r2, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$VNDIOCCLR(r3, 0x80106468, &(0x7f00000000c0)={0x0, 0x1feb, 0x0}) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000080)=0x7) closefrom(r0) 1.564389843s ago: executing program 1 (id=29): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="82604f3cfa06f727dbeacaa7adf0e5f605b0fa6ac4d286ae6cf2ebc3edf4afbbd4f62ee9d3c19f39ff2c67a2c3373d592b3fac1c275d2271640e", 0x3a}, {&(0x7f0000000080)="2e40535fd5a2893fd544a91f8ed7d0d523b1882761fc1fc3694a4e2833eb64b6546e86b455f3f2d75d65987781004280", 0x30}, {&(0x7f00000000c0)="d5287acea2ec72bb2962f2e66f46702a454099c04330ce8bb86ef2637e1968949c94b9f5d00f5eca34060de046ec469a58f0933d12fecb7754df8e00d9497ce6596fb51cd18d24e3fa6863dfd6719ab5712513c41cdc2773dd1c006b5479c513e01ce3e1dae05712668ed33de6dc6fa1d04d8a90fafb5ae810c4", 0x7a}, {&(0x7f0000000140)="9d35a839ee81e40caa81ac91ad3fa5ec5edbfad1d9e79150f012cc81c42f7ca6a7bfe80b2faf449da89aa63b3868009aebd4c66f15898e9801617406a8007c646ffdff4b5ef8322cfe3dc923e70718634ec33375a99d3e96c2d767114a065559c8db218ecc67c73a6abaf78739fc210b46345ed5a3ee05aa4997b40b3d92326d25dde09a494e485d7c755c5dd7a8f442c6bc5abf4bb6e99eede1b782dd9989c3be4703e68d92781f3bd75616a54d6d15b1739e9c72aa12", 0xb7}, {&(0x7f0000000200)="3a9086428907d2f4bbf7fba5ac9aaf52938e55ab0d7ded9ba21edb4d9abbad69c7d4138ecc0d2de36727cdee980224f0aa7d70dc1ed43d569363153f062cf450d86b25ab17e37f87b7ef2675df5ea327f70bcdea15", 0x55}, {&(0x7f0000000280)="9e148c93dadea4", 0x7}, {&(0x7f00000002c0)="0aa311bbda8fa3b9c7735e10add4d0c9173011fa7126d50280784b556dad10ea9d14e360c6eb2c5d02ad76d8454adaae909644cd9e2056ed30f9af99c942f23204740ac9eeaccfb0a165fb0bb4cd815a5f83ef5127035e81dd0962cd319196e251e0", 0x62}], 0x7) (async) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) (rerun: 32) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f0000000400)={0xdcf, 0x3, {0x7, 0x2}}) (async) ioctl$WSDISPLAYIO_DELFONT(r1, 0x8058574f, &(0x7f0000000440)={'./file0\x00', 0x6, 0x2, 0x2, 0x0, 0x7e83b032, 0x0, 0x0, 0x2, 0x2, 0x3, 0x5}) (async) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x3000) (async, rerun: 32) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f00000004c0)) (async, rerun: 32) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000500), 0x10, 0x0) ioctl$WSDISPLAYIO_GVIDEO(r2, 0x40045744, &(0x7f0000000540)) (async) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000580), 0x80, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x8, 0x0) ioctl$DIOCMAP(r4, 0xc0106477, &(0x7f0000000640)={&(0x7f0000000600)='./file0\x00', r1}) setitimer(0x2, &(0x7f0000000680)={{0x4}, {0x1, 0x4}}, &(0x7f00000006c0)) r5 = open(&(0x7f0000000700)='./file0\x00', 0x0, 0x1) ioctl$VMM_IOC_RUN(r5, 0xc0285602, &(0x7f00000009c0)={0x9, 0x8, {0x6, 0x6}, 0x1, &(0x7f0000000740)={{0xf9, 0x4, 0x1, 0x7, 0x6, 0x2, 0xb9e, 0x9}, {[0x7, 0x1, 0x80000000, 0x0, 0x80000000, 0x5, 0xb, 0x1, 0x7, 0x1, 0x6, 0x8, 0x5, 0xf2, 0x200, 0x4, 0x8, 0xa1], [0x100, 0x6, 0x3, 0xff, 0x7fff, 0x7, 0xfffffffffffffff9, 0x6, 0x8, 0x4], [0x60, 0x7, 0x19, 0x7, 0x80000000, 0xd66, 0x1], [0x1, 0x4, 0x5, 0x5, 0x1, 0x6], [{0xf860, 0x8, 0x0, 0x9}, {0x40, 0x5, 0xfffffff1, 0x40}, {0x645, 0x1000, 0x4, 0x9}, {0x0, 0x9, 0xb, 0x9}, {0x9, 0x0, 0xa, 0x37c}, {0x3, 0x6, 0x9, 0x9}, {0x85, 0x0, 0x23c, 0x9}, {0x14, 0x504, 0x1, 0xfffffffffffff94b}], {0x9, 0x9, 0x6, 0x9}, {0xfff6, 0xb, 0x3}}, 0x4}, 0xe, 0x1}) (async) writev(r0, &(0x7f0000000d80)=[{&(0x7f0000000a00)="db14ebfb269620c3d7f8f158a92595cb168144ddef82a93d8dfc41a581691a59b3c8d291cd444b6abf79720ed9af9d35da6c8932044cb5e466fb6aac1ed536bde50cab3e54bc62a47fd6a023ad855b996c880e8b200829514fce3ef255b012afc5e1b32470f8922b7dfcb684a183108a5276", 0x72}, {&(0x7f0000000a80)="9c0ea8aca03e25fee832ad3f79496c209be56c749b161d478e6ebdc7ebc345f035d75684c9a733f9c01485a635794f389cd80f94562d15c3ba5c259e8fba44a2528f3f28ecc92f2a527865d5b873f42afef63d439eb00b57cf862b2160ebe131cb71043a5035c73e6ede550e86664bffd1cda4057d0944afd6da10e6847840ffe46136880a89f34e83c38fedec30c0656b7882c9c9d661625b5e2394a5fc43bf08eb08df08e4809f27aa800460560257370a01207cc432f11b9453823c539588b7e6a65198c367b8624575131ef0ef6efd94582a82f1ad0fdec480245ca881d911", 0xe1}, {&(0x7f0000000b80)="8653183865fd1e024fb7c1cda21b3fff4cde75de54c4653f08cdf42980739d88877b4bac03bc0a692411eec6475a72dfa3d3f5", 0x33}, {&(0x7f0000000bc0)="b57d5336f4beb68d8beaf13d339f132dab7ad876e4b795350d36d06a1fa0aad94fc564b64ec5370905cab9d8695e73b0428fbbb7689fb66ef9d34e4b94396601255517467bb5f7ff50040fa9361da96692dfe5e95a9277114d0d3291e1477a59122105a147ce1c73c39fcf4743442fd2ad48503397011850cc7d6f577486c9e8b8b2245bd53565f9", 0x88}, {&(0x7f0000000c80)="b305c1c72e59318bc91cd954dc680e0648e799a62a0fe4439c30e9eb603adb67f46a4f583096", 0x26}, {&(0x7f0000000cc0)="3c57100396cbe1d5745fea12bf12dcdcf6ab39f7a6c9fc2f21299450a0951058ce18f9d57b6c25dffd3dce31149f472ca64377e0a83c41f15fdff9ae772e11999b3974eb3217fb9555fa49389677f356163a7b2bc16d494ff1cb0f2a6ec228928ab1205a0d628a15ebb8fbad9934896497ece0e784db74c3c0cfb3599e317989274758638702803e79ed", 0x8a}], 0x6) (async) ioctl$FIONBIO(r3, 0x8004667e, &(0x7f0000000e00)=0x3) (async) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000e40)={0x0, 0x0}, 0xc) (async, rerun: 64) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0xc) (rerun: 64) fchown(r3, r6, r7) (async) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000ec0), 0x10000, 0x0) mquery(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, r8, 0x4) (async) mknod(&(0x7f0000000f00)='./file0\x00', 0x40, 0x3) ioctl$WSDISPLAYIO_SBURNER(r4, 0x800c5751, &(0x7f0000000f40)={0x101, 0x6}) (async) setsockopt$sock_timeval(r4, 0xffff, 0x1006, &(0x7f0000000f80)={0x3, 0x2}, 0x10) ioctl$KDDISABIO(r5, 0x20004b3d) r9 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000fc0), 0x1, 0x0) ioctl$WSDISPLAYIO_USEFONT(r9, 0x80585750, &(0x7f0000001000)={'./file0\x00', 0x0, 0x1000, 0x5, 0x0, 0x7c5824e5, 0x10000, 0xa, 0x0, 0x0, 0xcbd2, 0x80000000000000}) (async, rerun: 32) ioctl$VMM_IOC_TERM(r5, 0x80045604, &(0x7f0000001080)={0x40}) (rerun: 32) 1.563681862s ago: executing program 5 (id=30): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) sysctl$net_pipex(&(0x7f0000000c00)={0x4, 0x23, 0x1}, 0x3, 0x0, 0x0, &(0x7f0000000d80)="86919a91", 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DIOCKILLSTATES(r1, 0x0, &(0x7f0000000180)={{0x26, 0xfffd}, 0x0, '\x00', 0x40, {@any={'\x00', 0x0, 0x4, 0xf}, [0x1000, 0x3ff], 0x3, 0x5d9db7cd1906055, 0xffb8}, {@any={'\x00', 0x0, 0x6, 0xbc}, [0x8001, 0x81], 0x1, 0x1, 0x9}, './file0\x00', './file0\x00', 0xa4d, 0xf}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0xe9, 0x2, 0xa, 0x3, 0xa, 0x10, [{0x10001004, 0x80000002, 0x5, 0x80000002}, {0xe9, 0xe8, 0x1000002, 0x2}, {0x4000cd5, 0x4baa, 0x4, 0x4}, {0x7, 0x100000ff, 0xf, 0x88ce}, {0x4, 0x200000a, 0x1, 0x10}, {0x388d, 0xfffffffb, 0x85, 0x5}, {0x10000, 0xa00, 0x20003, 0xffffffff}, {0x207, 0xfffffffd, 0x5}, {0x7, 0x1000, 0x7, 0x7ffd}, {0x8003, 0xfffffffd, 0x1ff, 0x12}, {0x82, 0x0, 0x8a3a0004, 0xfffffff4}, {0x2, 0xfffffffe, 0x0, 0xa68}, {0x401, 0xc, 0x400809, 0xa5}, {0x6, 0x6, 0x102, 0x4}, {0x2, 0x1000000, 0x81, 0x7}, {0x89be2, 0x1, 0x2, 0x5}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r1, 0x80d04466, &(0x7f0000000140)={0x9, 0xa525, 0x4, 0x127492, "08e50000000000000100", 0x20004118, 0x6}) ftruncate(r0, 0x852c) r2 = socket(0x2, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x2, 0x7, '\x00', 0x4000fd}, 0x1c, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIOASYNC(0xffffffffffffffff, 0x8004667d, &(0x7f0000000080)=0x1ca4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r4 = fcntl$dupfd(r3, 0x3, r3) ioctl$FIONREAD(r4, 0x800c745b, &(0x7f0000000080)) r5 = socket(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xac1402aa}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xac1402aa}, 0x10) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x18, 0x1, 0x2, "04f5173e85cfcf1a51369a1f373c7dcd", 0x4000}, 0x1c) setrlimit(0x1, &(0x7f0000000240)={0xfffffffffffffffe, 0x1ff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r6 = openat$dri(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) 1.562374427s ago: executing program 6 (id=31): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000040)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x8, 0x80, 0x8, 0x98, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2efe, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x3, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x7fffffff, 0xfffffffffffffff9, 0x525, 0x5e, 0x200000000207b98, 0x80000000000001fe, 0x7, 0x0, 0x9], [0x52e375c0, 0x8000, 0x3ffffffe, 0x1, 0xb, 0x11000, 0xffffffff00000002], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x8000100000000, 0xfffffffffffffffe, 0x1], [{0x4, 0x0, 0x0, 0x6}, {0x1, 0x22, 0x5, 0x6}, {0x4, 0x0, 0xf7fffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x9, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000002}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0xffff1174, 0x407, 0x3}, {0xfbfe, 0x2, 0x6d5, 0x4}}}) r0 = kqueue() kevent(r0, &(0x7f0000000640)=[{{}, 0xfffffffffffffff6, 0x81, 0x80000000, 0x5, 0x101}], 0xffffffcb, &(0x7f0000000740), 0xa, 0x0) syz_open_pts() r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000002880)={0x0, 0x6, 0x7, 0x6, "d67c709e069fe852ac512bcbbb7e23d61bac263b", 0x0, 0xc9}) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000002f40)={0x9, 0x8, 0xb, 0xd313, "d01dd281c986595fb6dc7d98f10582149badffc1", 0x0, 0xa6c}) ioctl$TIOCCLRVERAUTH(r1, 0x2000741d) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sysctl$kern(&(0x7f0000002280)={0x1, 0x3b}, 0x2, &(0x7f00000022c0)="6db560064ce1fc60e43065a3f9b00db044ce48eee211a21f10adc0acedf1e922766a1ff210e22f2b9cb090000e8889530b5bf81fbb683e67c939dbfc214ed39b7856c82eb48c4bdf11c1cdbb46f688cc5922883e0718bd648e2b85c013798e81f2c73329212efa39591963fedad8bcb7f9412effd08eb699aa5a692574b0ae766fc3f549fbb82dbe", &(0x7f0000002380)=0x88, &(0x7f00000023c0), 0x0) r3 = socket$inet(0x18, 0x3, 0x102) sendmsg(r3, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x8, "000000000000000000000000b2fd0001", 0x101}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="638802000000339afe51f6f2efa24a85abdd612dd68e59adfecf9323100084410a8591426ee03e", 0x6}, {&(0x7f0000000680)="a2", 0xfdac}], 0x2e, 0x0}, 0x402) ioctl$FIONREAD(0xffffffffffffffff, 0x8080691a, &(0x7f0000000100)) ioctl$DIOCGETLIMIT(r2, 0xc0084427, &(0x7f0000000000)={0x5, 0x800}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x38a}) r4 = syz_open_pts() ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x88000148, {[0x43, 0x40, 0x6, 0x6, 0x20000000003, 0x40000a, 0x6, 0x40000004000, 0x6, 0x2, 0x1, 0x91c, 0x8, 0x2000180, 0x1ddba705, 0xffffffff, 0x76, 0xfffffffffffffff9], [0x5438b950, 0x5, 0x1004, 0x5, 0x1, 0x1, 0x9, 0x2, 0xffffffffffffffff, 0x2], [0x6, 0x7, 0xb, 0x8000000008, 0x6, 0x400008000000210, 0x1000002], [0x100000000, 0x10801, 0x0, 0x8, 0x3], [{0x0, 0x7, 0xfffffbfb, 0x80000000005}, {0xfffe, 0x925, 0x44, 0xc76}, {0x2, 0x7fffffff, 0x4, 0xcd}, {0xb, 0xfffffbff, 0x3, 0x40}, {0x4, 0x0, 0x2, 0x8}, {0x5f, 0x4, 0x0, 0x7}, {0xe1, 0xffffff81, 0x0, 0x1}, {0x6, 0x10000, 0x8001, 0x5}], {0x6121, 0x0, 0x401, 0x8}, {0xfffe, 0xffffbfc0, 0x5, 0x4}}}) close(r4) syz_open_pts() ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000040)={0x2b789, 0x5, 0xfffffbfc, 0xffffffff, "bb08000602090801b7cd0d8c000040b4d0be6700", 0x9, 0x2}) writev(r4, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000000)={0x10, 0x6, [{&(0x7f00000a7000/0x1000)=nil, &(0x7f00000a9000/0x2000)=nil, 0xb4e}, {&(0x7f00000a8000/0x2000)=nil, &(0x7f00000a9000/0x1000)=nil, 0x3}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xa7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x46}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f00000aa000/0x2000)=nil}, {&(0x7f00000aa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x40}, {&(0x7f00000ab000/0x3000)=nil, &(0x7f00000a9000/0x4000)=nil, 0x9}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f00000a9000/0x1000)=nil, 0x6}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff0000/0xd000)=nil, 0x3}, {&(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x2}, {&(0x7f00000a8000/0x4000)=nil, &(0x7f0000ff2000/0x4000)=nil, 0x7fffffffffffffff}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f0000546000/0x2000)=nil, 0x2}, {&(0x7f00000a8000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x8}, {&(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x7fffffffffffffff}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff2000/0x3000)=nil, 0x2}], './file0\x00', 0xff, 0xff, 0x9, 0x6, [0x6, 0x3ff, 0x0, 0x3, 0xd8e, 0xab, 0x4, 0xb, 0xc, 0x1, 0x80000000, 0x2, 0x4, 0xdfc, 0x80000000, 0x7, 0x1000, 0x6, 0x9, 0xdd, 0x3e49, 0x2, 0x5, 0x4, 0x1, 0xabe, 0x7, 0xf4, 0xb574, 0x5, 0x6, 0x4, 0x609, 0x1000, 0x9, 0xfffffff4, 0x5f0a, 0x7, 0xb2, 0x6, 0xffff, 0xc, 0x988, 0x100, 0x4, 0xfffffffa, 0xd, 0x800, 0x9, 0x8, 0x4, 0x2, 0x6, 0x8, 0x4, 0x4, 0x9, 0x322a9f40, 0x8, 0x3, 0x7, 0x3ff, 0x200, 0x9, 0x1, 0x9, 0x5, 0xf, 0xd12, 0x7, 0x7, 0x800, 0xe, 0xffff, 0x3, 0x4, 0x9, 0x4, 0xfffffffc, 0x5f22, 0x7f, 0xf, 0x7, 0x7, 0xb54, 0x7, 0x1, 0x3ad67fcc, 0x6, 0xcd68, 0x7, 0x821c, 0x0, 0x6, 0x4, 0x80000001, 0x0, 0x1, 0x10000, 0x101, 0x101, 0x39b, 0x1000, 0xe, 0x5, 0x12, 0x1, 0x39c7, 0x5, 0x8, 0x9, 0x4, 0x3, 0x3, 0x7fffffff, 0x7, 0x10, 0x9, 0x5, 0x8, 0x2, 0xffffffff, 0x857c, 0x3, 0x8, 0x100, 0x7b, 0x0, 0x7ff, 0x1000, 0x1, 0x3ff, 0x10001, 0x0, 0x9, 0x8001, 0x2, 0x98, 0x0, 0x81, 0x10001, 0x480000, 0x2, 0x8, 0x7ff, 0xfffffffd, 0x2, 0x7, 0x7, 0x0, 0x5, 0x5, 0x1, 0x3, 0x80, 0x4, 0x614, 0x9, 0x8000, 0x80000001, 0x7, 0x2, 0x80, 0x40000000, 0x0, 0x3, 0x2, 0x9, 0x3, 0xc20a000, 0x5, 0x3, 0x2, 0x5, 0x10001, 0x5, 0x1, 0xfffff001, 0xfffffff8, 0x7d, 0xdf1, 0x31d, 0x2, 0x101, 0x9, 0x92, 0x1124cd92, 0x10001, 0x80000000, 0xc, 0x46, 0x77b5, 0x6, 0x4, 0x4, 0x80000001, 0x10, 0x401, 0x2, 0x7, 0x100, 0xa5, 0x4, 0x6, 0x5, 0x7, 0xff, 0x2, 0x9, 0x3, 0x1e60, 0x8, 0x1, 0x7, 0x7, 0x5, 0xe6f, 0x10, 0x2, 0x8aa1, 0x3, 0x9, 0x3, 0x101, 0x6, 0x9, 0xb, 0x5, 0xc, 0x9, 0xfffffffb, 0x75e, 0x2, 0x8, 0xffff, 0x0, 0x1, 0x8, 0xfffffff9, 0xb40, 0x2, 0xffffffff, 0x402, 0x3, 0x10, 0x6, 0x9, 0x5, 0x8, 0x0, 0x9da0, 0xfffffffa, 0xf, 0x3, 0x5, 0x8d8, 0xd, 0x80000000, 0x7, 0x9, 0x5, 0x7, 0x15, 0x4, 0x354f534d, 0x9, 0x0, 0x2, 0x3, 0x6, 0x8, 0x4, 0x6, 0x7fffffff, 0x4, 0x2, 0x0, 0x2, 0x8, 0x200, 0x0, 0x200, 0x7fff, 0xaa, 0x6e89, 0x5, 0x8, 0x6a, 0x8, 0x1, 0x7, 0x401, 0x2, 0xfffffffa, 0x7, 0x6, 0x7, 0x94ff, 0x227, 0x97, 0xffffffc6, 0x8, 0x9, 0x500000, 0xfffffffb, 0x8, 0x1000, 0x356, 0x2, 0x8001, 0x4, 0x2, 0x8, 0xa1bb, 0x5, 0x8, 0x3427, 0x8, 0x9, 0x400, 0x101, 0x81, 0xffff, 0xfff, 0x0, 0x3ff, 0x0, 0xfff, 0x3, 0xfff, 0x1, 0x7f, 0x0, 0x3f, 0x0, 0x0, 0x401, 0x1, 0x2, 0x9798, 0x5, 0x70b9, 0x7, 0x0, 0x7, 0xa883, 0x0, 0x7, 0x20, 0x9, 0x3, 0x9, 0x1, 0x1, 0x8be, 0x6, 0x3, 0x9968, 0x8, 0x6, 0x8000, 0xcabe, 0x0, 0x5, 0xb, 0x0, 0x8, 0x1, 0x40, 0x9b, 0x7, 0x9, 0x100, 0x7fffffff, 0x81, 0x4, 0x9a, 0xfffffff9, 0x5, 0x4e, 0x5, 0x9, 0x7, 0x200, 0xeca, 0xffff, 0x547, 0x4, 0x8000, 0x7fff, 0x4, 0x200, 0x0, 0x5, 0x6, 0x4, 0x9, 0x7ff, 0xe0b, 0x7, 0x4, 0x8000, 0x1, 0xfffffffc, 0x4800000, 0x3ff, 0x1, 0x8, 0x40, 0x2, 0x7, 0xd9a7, 0x8, 0xf, 0xfffffffa, 0xffff41f1, 0x5, 0x83ae, 0xfffffe00, 0x4, 0x5fa1, 0x8f13, 0xff, 0x200, 0xb, 0x4000000, 0x9, 0x3, 0x7fffffff, 0xfffffe00, 0xa, 0x0, 0xefd, 0x7, 0x8, 0xfffffc00, 0x6, 0x8, 0xceb, 0xf, 0xfffff000, 0x80, 0x10, 0x3, 0x3f55a287, 0x1ff, 0x4, 0x4, 0x6, 0xc000, 0x8000, 0xc, 0x8, 0xc, 0xfff, 0x651, 0x4, 0x4, 0x2, 0x4, 0xfffffffb, 0xffff0000, 0x9, 0x2, 0x7, 0x7, 0x5, 0xff8, 0x6, 0x80000001, 0x1, 0x2, 0x400, 0xe, 0xcb197ee, 0x10, 0x9, 0x1, 0x4, 0x2, 0xd5e, 0x7, 0x3f2c4953, 0x0, 0x3ff, 0x0, 0x2, 0x6, 0xcf8, 0x41, 0x6, 0x80000001, 0x1, 0xc, 0x5fab, 0x12, 0x4, 0x7fff, 0x8, 0xf, 0x4, 0x0, 0x8, 0x5, 0x0, 0xfffffff8, 0x9, 0xfffffbff, 0x2, 0xf77, 0x1, 0x1ff]}) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0xffffdff0, 0x8020000000000001}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r2, 0xcd60441a, &(0x7f0000000140)={0x8, 0x100, 0x8001, 0x403, "200000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7}) socket$inet(0x2, 0x4, 0x6a) 1.445134392s ago: executing program 0 (id=33): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0xfff) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x2, 0xffffaf35, 0x7f, 0x3, 0x84000001, 0x7fbefffd, 0x3, 0x10000000000003ad, [{0x10000000, 0x5, 0x3, 0x3f}, {0xffffff73, 0xfffffffa, 0x100001, 0x3}, {0xc7, 0x7, 0x6, 0x9}, {0x7, 0x46, 0xfffffff6, 0x200}, {0xac2, 0xa, 0x1002, 0x5}, {0x24020002, 0x8, 0x7, 0x89}, {0x9, 0xdf61, 0x9, 0x14}, {0x6, 0x11, 0x5, 0x6b}, {0xd1, 0x4, 0x40000003, 0xb}, {0x0, 0x3, 0x400, 0x1ff}, {0x1e6, 0x2500fff9, 0x10927c, 0x4}, {0x3, 0x25, 0x19, 0x2d0b}, {0xfffffffe, 0x2, 0x80002004, 0x408}, {0x2, 0x8, 0x0, 0x200}, {0x7ffe, 0x1, 0x8, 0x5}, {0xfffffffd, 0xfffffffd, 0x0, 0x8}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = semget(0x0, 0x1, 0x281) semop(r0, &(0x7f0000000000)=[{0x0, 0x400, 0x1000}, {0x0, 0xc, 0x1800}], 0x64) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$DIOCCLRSTATUS(r1, 0xc0284416, &(0x7f00000000c0)={'./file0\x00', &(0x7f0000000000)=""/18, 0x40000, 0x530, 0xcc0a, 0x301}) (async) unveil(0x0, &(0x7f0000002740)='c\x00') 1.444490867s ago: executing program 1 (id=34): sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000280)="f4dedccca4", &(0x7f0000000200)=0x5, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53}) sysctl$kern(&(0x7f0000000380)={0x1, 0x27}, 0x2, &(0x7f00000003c0)="35deda08f750fa736200b192f8a7ea66284952a47ab3a4b9f10d5c10044f87cf6c79d1ee7d809e632922e1b2d26c9d9421b1c2af14d56fd95b243a76b1d0992070002fa08e4adf6d03ae0594b461aef766849499134b1b65602d720a1826643fe2997c9dfc875116684234f017b44ee3828c27b27425062b7c27b009cd8905689f04813a142c5f28ca11e37dd4c4d996a5572182913e55c849c59a2b4726a05abd382f6bb769566e9d81804a7857d3bbd68482d417471f51d5667e8dcf46d0f9c649f2bfac826807dbc72e76cb19fe655275111e58", &(0x7f00000004c0)=0xd5, &(0x7f0000000500)="f34b0212a14f6422b34ef43cf039427c36d0fd4ee7ec788d7b7048fca326b4f95010dd37e044b92817ec5969c4788440b1ca697ca8f05c9cbdfdd005962a6949056e3807f3dc03ed7ee88c14d472372cf674fd3c26ee256a6d22d94cb162a3ea8b1fbd8c5ec429b2883a61fd8cf5023df3feb5964f4d398e0860992691fc0d4ba4d562d7bb884dbf40e463d68d4899bf74660e07e2c9e580794bc89ff369f9ebc8b951edf334ff05a2b7d0d7584d119ae8e3e5f44e113f9199e6aa8d4c3625b398041582cf355bb7ce6c9d7f728b06062c06ad6786de77e32c0dc580cc1bc13cb1c7be795bdc5ebbb1d04221989d", 0xee) (async) syz_emit_ethernet(0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff94ea09066dbd86dd60db83440008110000000000000009000000000000000000ff0200000000000000089078"]) (async) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f00000001c0)={{0xdb, './file0\x00', [{[@v6=@local={0xfe, 0x80, '\x00', 0x0}, @v6=@local={0xfe, 0x80, '\x00', 0x0}], [0x0, 0x3], 0xff7f, 0x2}, {[@v6=@ipv4, @v6=@empty], [0x0, 0x8], 0x4}], {{0x4732, 0xc, 0x2, 0x80000000}, 0x3, 0xff, 0xffff, 0x2, 0x3077, 0x7, 0x2}, {{0x6, 0x8, 0x7, 0x400}, 0xb87, 0xb10, 0x7ff, 0x206, 0xfffc, 0x1, 0x9a}, @v6=@mcast2, 0x6, 0x4, 0x280000, 0x7fff, 0x1c64, [[0xf], [0x6, 0x9]], [[0x2, 0x8], [0x5]], 0x1, [0xffffffff, 0x1], 0x2, 0x18, 0x50, 0x2, 0x4, 0xfb, 0xb, 0x26, 0xc, 0xe2, 0x4, 0x6687, "998f"}}) (async) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r0 = socket(0x18, 0x3, 0x85) ioctl$FIONREAD(r0, 0xc1206951, &(0x7f00000001c0)) r1 = syz_open_pts() close(r1) kill(0xffffffffffffffff, 0x14) (async) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x1000f66d, 0xe8, 0x7, 0x5ffff75f, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0xe0, 0x10}) (async) writev(r1, &(0x7f0000000300)=[{&(0x7f00000009c0)="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", 0x45c}, {&(0x7f0000000000)="6c7097e67370b0d1d2f2d14aa76001aa8aca19e46740f48f02fbcab38a05c9f89057ca349d6c487b0c525b4fa0b7a2ffa18fe92c4af63318cb0af69baf9f", 0x3e}, {&(0x7f0000000080)="a6ac218c36f9", 0x6}, {&(0x7f00000000c0)="c12fa9fbf4017270fecf1f84137b3427d61328002ac2f42e27f13d01b6d765dbd1771e01fd0127d72866b9a926da95b97f549434177f2ca65fd76ac1a2a5b75855093139f8265e6f786067aba43062e7b05faa44bd331b2f32820e2b44715a30f97b5db82b7f86f357db084389a7e5d9adb085d77b26d1f6f6ec3b494b5d52be9787a5a90002a217aaad6b2714914d868acd4e4a9fe60521d58ba166e0b0c0a1405d8d295f864c2d5488d6508dc4ca6b1c8336aa8801e6ffede30d3164870a762b0087f4c788", 0xc6}, {&(0x7f00000001c0)="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", 0xfd}, {&(0x7f00000002c0)="be8f69dbb7349259bb52736e07aea000ddda62fd7c88d3011a83cd48d3676598dc9c85105c0e8a5e4f2df424", 0x2c}], 0x6) 1.442750727s ago: executing program 2 (id=13): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) (async) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0x1000) (async) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6) (async) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x80, 0x163) writev(r1, &(0x7f00000000c0), 0x0) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000000040)="7086965a", &(0x7f0000000100)=0x4, &(0x7f0000000140), 0x0) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040), &(0x7f00000000c0)=0xc) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) ioctl$WSDISPLAYIO_WSMOUSED(r0, 0x80185758, &(0x7f0000000000)={0x1f, 0x1, {0xa, 0x1}}) fcntl$lock(r2, 0x9, &(0x7f0000000100)={0x2, 0x1, 0x7, 0xeb}) 1.44257699s ago: executing program 7 (id=35): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x1, [{0x1, 0x7ff}, {}, {0x3, 0x7fff}, {0x1, 0xe}, {}, {0x2, 0x9}, {0x2, 0x1}, {0x3, 0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x10000000}, {0x0, 0x4006}, {0x3, 0x2}, {0x3}, {0x0, 0x20}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x7}, {0x1, 0x1}, {0x2}, {0x3, 0xfffffffe}, {}, {0x0, 0x7}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x10000}, {0x2, 0xfffffffe}, {0x1}, {0x2, 0xfffffffc}, {0x1}, {0x2, 0x8001}, {0x0, 0x8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3442, 0x0, 0x37) 1.059967588s ago: executing program 2 (id=36): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x1c5) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x3, 0xffffaf35, 0x7f, 0x5, 0xa2, 0x3, 0x5, 0x10, [{0x10000000, 0x40, 0x3, 0x3}, {0xfffffff3, 0xfffffffe, 0xfff, 0x2}, {0x20006, 0x8000b86, 0xa, 0x9}, {0xa, 0x200, 0x5, 0x6}, {0x42, 0x9, 0x3, 0x800007}, {0x20002, 0x8, 0x8, 0xd}, {0x4cdf, 0xdf61, 0x200004f8, 0x66}, {0x8, 0xf, 0xa43, 0x8d}, {0xfffffffa, 0x8e2b5, 0x40000003, 0x6}, {0x4, 0x2d1, 0x400008, 0x3}, {0x1e0, 0x400fff9, 0x927c, 0x4}, {0x1016, 0x1, 0x45b, 0x2d09}, {0x3, 0x1ff, 0x90000001, 0x408}, {0x29a71718, 0x4, 0x3, 0x2579}, {0x0, 0xf8f, 0xdda}, {0x1, 0x4, 0xf77b, 0x8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket(0x2, 0x3, 0x2f) closefrom(r1) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) r2 = socket(0x18, 0x2, 0x0) close(0xffffffffffffffff) sendmmsg(r2, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x3, 0x7, "ff010000000000000000000000000001", 0x6}, 0x1c, 0x0, 0x0, 0x0}}, 0xfffffffffffffee0, 0x2) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1d2e, &(0x7f0000000140)=[{0x4a, 0x6, 0x77, 0x4}, {0x5, 0xb, 0x81, 0xe}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.059475745s ago: executing program 3 (id=37): sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, 0x0, 0x0) 1.0589718s ago: executing program 7 (id=38): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = socket(0x11, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002980)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x7f}, 0x38, 0x0, &(0x7f00000005c0)={0xcd, 0x998}) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='r\x00') ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0x1, 0x2, 0x100200000, 0x6, 0x7fffffffffffffff, 0xdf60, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0x0, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0x7, 0x201fffff, 0x7f, 0x108000000007b96, 0x800, 0x9, 0x0, 0xfffffffffffffffe], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0x9, 0x90000000], [{0x0, 0x4, 0x0, 0x80000000007d06}, {0x9, 0x22, 0x5}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x4, 0x5, 0xfffffffffffffffc}, {0x8, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0xb}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x8, 0x80000006, 0x3}, {0xfffe, 0x6, 0x6d5, 0x8}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x2, 0x0) r2 = syz_open_pts() openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) fcntl$setown(r2, 0x6, 0x0) ioctl$FIONREAD(r1, 0x80206916, &(0x7f00000001c0)) kqueue1(0x0) 900.202599ms ago: executing program 0 (id=33): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0xfff) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x2, 0xffffaf35, 0x7f, 0x3, 0x84000001, 0x7fbefffd, 0x3, 0x10000000000003ad, [{0x10000000, 0x5, 0x3, 0x3f}, {0xffffff73, 0xfffffffa, 0x100001, 0x3}, {0xc7, 0x7, 0x6, 0x9}, {0x7, 0x46, 0xfffffff6, 0x200}, {0xac2, 0xa, 0x1002, 0x5}, {0x24020002, 0x8, 0x7, 0x89}, {0x9, 0xdf61, 0x9, 0x14}, {0x6, 0x11, 0x5, 0x6b}, {0xd1, 0x4, 0x40000003, 0xb}, {0x0, 0x3, 0x400, 0x1ff}, {0x1e6, 0x2500fff9, 0x10927c, 0x4}, {0x3, 0x25, 0x19, 0x2d0b}, {0xfffffffe, 0x2, 0x80002004, 0x408}, {0x2, 0x8, 0x0, 0x200}, {0x7ffe, 0x1, 0x8, 0x5}, {0xfffffffd, 0xfffffffd, 0x0, 0x8}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = semget(0x0, 0x1, 0x281) semop(r0, &(0x7f0000000000)=[{0x0, 0x400, 0x1000}, {0x0, 0xc, 0x1800}], 0x64) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$DIOCCLRSTATUS(r1, 0xc0284416, &(0x7f00000000c0)={'./file0\x00', &(0x7f0000000000)=""/18, 0x40000, 0x530, 0xcc0a, 0x301}) (async) unveil(0x0, &(0x7f0000002740)='c\x00') 888.917511ms ago: executing program 2 (id=39): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x81, 0x80, 0x1, 0x3}]}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, &(0x7f00000001c0)={0x0, 0x800, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) r1 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) setitimer(0x0, &(0x7f0000000000)={{0x12, 0x1}, {0x9, 0x4}}, 0x0) mprotect(&(0x7f0000644000/0x3000)=nil, 0x3000, 0x4) ioctl$VNDIOCSET(r1, 0xc0285108, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) sysctl$vfs_fuse(&(0x7f0000000080)={0xa, 0x12, 0x3}, 0x2, 0x0, 0x0, &(0x7f00000003c0)="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", 0xd8) 883.899245ms ago: executing program 3 (id=40): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1) r1 = socket$inet(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x0, 0x90468af4}, 0x10) ioctl$DIOCNATLOOK(r0, 0xc0504417, &(0x7f0000000140)={@v4, @v6=@loopback, @v6=@mcast2, @v6=@mcast1, 0x2, 0x9, 0xfff, 0xb, 0x1000, 0x7, 0x18, 0x6, 0x3}) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000280)={{0x0, './bus\x00', [{[@v4=@rand_addr=0xfffffffd, @v6=@local={0xfe, 0x80, '\x00', 0x0}], [0x8, 0xfd2], 0x5, 0x2}, {[@v6=@empty, @v4=@multicast1], [0x774, 0x4], 0x1, 0x2}], {{0x9, 0x9, 0x6, 0xff}, 0x6, 0xfff, 0x1, 0x493, 0xaa12, 0x5e, 0x1}, {{0x3, 0x3, 0xb, 0x9}, 0xb, 0x5, 0xffff7c4b, 0x83, 0x1, 0x8, 0x7}, @v4=@loopback, 0x5, 0x3, 0x3, 0x4, 0x9, [[0xffffffff, 0x5], [0x9, 0x8486]], [[0x3, 0x10000], [0x69682552, 0x9]], 0x1, [0x0, 0x5], 0x4efb, 0x1a, 0x8, 0x0, 0xde, 0x8, 0x7, 0x3, 0x5, 0xc9, 0x21, 0x9, "b484"}}) r2 = syz_open_pts() r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r4 = getpid() fcntl$setown(r3, 0x6, r4) close(r2) pledge(0x0, &(0x7f00000000c0)='\x00') pledge(0x0, &(0x7f0000000040)='\x00') r5 = syz_open_pts() r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$DIOCKILLSTATES(r6, 0x0, &(0x7f0000000140)={{0x13ac, 0x6, 0x2}, 0x1a, '\x00', 0x3dcb, {@table={'./bus\x00'}, [0x1ff0, 0x1e1], 0x7f, 0x2, 0x81}, {@addrmask={@v4, @v6=@rand_addr="bd96ccf60d0f7b3b9f484361cbb07845", 0x0, 0x0, 0xf4}, [0x6, 0x3], 0x1, 0x1, 0xe3f9}, './bus\x00', './bus\x00', 0x1, 0x1}) ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000040)={0x42b788, 0x7ffffff7, 0x97e, 0x6b1dbfc8, "0800000602090801b7cdde6f09167da039a800", 0xd, 0x8}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x9010, 0xffffffffffffffff, 0x0) close(r2) ioctl$WSDISPLAYIO_ADDSCREEN(r7, 0x80245753, &(0x7f00000000c0)={0x5, './bus\x00', './bus\x00'}) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) 883.215263ms ago: executing program 4 (id=25): select(0x40, &(0x7f0000000180)={0x35, 0x2, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="8fce1bfa18b423ec280137b188f835254420c4756153d60adfc5909310fcd1ebd7168bf1784d082d08a690048754993d6d9a2f3192262ee5b8f79f96a03fbb", 0x3f) (async, rerun: 64) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) (rerun: 64) r1 = syz_open_pts() close(r1) (async) syz_open_pts() (async, rerun: 64) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x38a}) (rerun: 64) r2 = syz_open_pts() close(r2) (async) ioctl$VT_RELDISP(0xffffffffffffff9c, 0x20007604, 0x0) (async) r3 = syz_open_pts() (async) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="cc69696ef3c976ebd721d757288004c0cc645ccac9616560bb20e269ba4a9e7e77ff93b4d1701446a1924304e2301f75b3419b22a81325f86cb8ad2fa1ee18ccc255c4bb7d099a0c193101ba6e7c1c6ad07c2a03082d5c2247169ca8622e5095840e6ce038e3062c75461e4a2bf1ce681fff08354f91ffbfa6007093d5fda7bf9b8fda2fa1eded6c0c88f6e6cfb87d2604", 0x91}], 0x1) read(r3, &(0x7f0000000500)=""/251, 0xfb) (async, rerun: 64) syz_emit_ethernet(0x0, 0x0) (async, rerun: 64) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) (async, rerun: 32) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) (async, rerun: 32) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x209, 0xfffffffd, 0x5, 0x1, 0x100, 0x10, 0x80000000, 0x1, 0x0, 0x101, 0x6}) (async) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x100637d) (async) r4 = open(&(0x7f0000000800)='./file1\x00', 0x80, 0x2b) sendto$unix(r4, &(0x7f0000000000)="cc7a7148b9240515f09b7c259425022df1efbb4171a6e8943293b124284ff5fbb43c4d71a9ca48b53a8f3aaa86a112e9f21794f20619e4baad125c7097db7957c8a30da94a9a260cf56a", 0x4a, 0x4, 0x0, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) r5 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0x1c, 0x18, 0x2, 0x2000005, "0a070000001ef47fff00ffffffffff00", 0x9}, 0x1c) ioctl$WSDISPLAYIO_USEFONT(r4, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x206, 0x8, 0x3, 0x0, 0x8000004a, 0x2, 0x80000000, 0x1, 0x1, 0x9, 0x840000000000a4c2}) (async) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) (async) r6 = openat$pci(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FIONBIO(r6, 0xc0107008, &(0x7f0000000040)=0x3) 882.984102ms ago: executing program 7 (id=41): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) r0 = socket(0x18, 0x1, 0x0) r1 = msgget(0x3, 0x280) msgrcv(r1, &(0x7f0000000000)={0x0, ""/228}, 0xec, 0x0, 0x1000) msgrcv(r1, 0x0, 0x0, 0x1, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x1, 0x8002, 0x1) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) closefrom(r3) socketpair$unix(0x1, 0x2, 0x0, 0x0) msgsnd(r1, &(0x7f0000000f80)=ANY=[@ANYRES32], 0xe2, 0x0) getsockopt(r0, 0x29, 0x35, 0x0, 0x0) socket(0x18, 0x1, 0x0) r4 = socket(0x2, 0x2, 0x0) closefrom(r4) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0) 566.537916ms ago: executing program 2 (id=42): r0 = socket$inet(0x2, 0x1, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x3) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x2000000fff, 0x1, 0x2000000000000004}, 0x0, 0x0, 0x0) closefrom(r1) listen(r0, 0x8) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0x5) getsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}}) 565.578731ms ago: executing program 5 (id=43): munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) sysctl$kern(&(0x7f00000000c0)={0x1, 0x5}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0xff61) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mquery(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffff9c, 0x50) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f0000000000), &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 563.831858ms ago: executing program 6 (id=44): ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f00000001c0)={{0xdb, './file0\x00', [{[@v6=@local={0xfe, 0x80, '\x00', 0x0}, @v6=@ipv4={'\x00', '\xff\xff', @multicast1}], [0x0, 0x3], 0xff7f, 0x2}, {[@v4=@multicast1, @v6=@empty], [0x0, 0x8], 0x4}], {{0x4732, 0xf, 0x2, 0x80000000}, 0x3, 0xff, 0xffff, 0x2, 0x3077, 0x7, 0x2}, {{0x6, 0x8, 0xf, 0x401}, 0xb87, 0xb10, 0x7ff, 0x6, 0x0, 0x1, 0xfa}, @v6=@mcast2, 0x6, 0x4, 0x280000, 0x2, 0x1c64, [[0x0, 0x6], [0x2, 0x8]], [[0x2, 0x8], [0x9]], 0x1, [0xffffffff, 0x1], 0x2, 0x18, 0x50, 0x2, 0x4, 0x0, 0x9, 0x26, 0xc, 0xe2, 0x4, 0x6687, "998f"}}) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x18, 0x3, 0x85) ioctl$FIONREAD(r0, 0xc1206949, &(0x7f00000001c0)) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$BIOCGRSIG(r1, 0x40047477, &(0x7f0000000100)) 562.112487ms ago: executing program 7 (id=45): r0 = openat$dri(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x8, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffff9c, 0xc06864b8, &(0x7f0000000080)={0x0, 0x6, 0x81, 0x36314742, 0x2, [0x0, 0x0, 0x0], [0x5, 0x10000, 0x9, 0x4], [0x7f, 0x9735, 0x10], [0xc, 0x7, 0x9, 0x7fff]}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000100)={0x0, 0x9ad8, 0x5, 0x35315241, 0x0, [0x0, 0x0], [0x2000, 0x60000, 0x65, 0xee0e], [0x8, 0x64, 0x7f], [0xb, 0x1, 0x2, 0x80000000]}) r4 = socket$inet(0x2, 0x3, 0x2) getsockopt(r4, 0x0, 0x1d, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffff9c, 0xc00464b4, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0x0, 0x7, 0x20203252, 0x3, [r1, r2, r3, r5], [0x9, 0x80000000, 0x9, 0x2], [0x80000000, 0x8, 0xfffffff7, 0x3], [0x3ff, 0x4, 0xfffffffffffffffc, 0x9]}) kevent(0xffffffffffffffff, 0x0, 0x138, 0x0, 0xffffffff, 0x0) 349.965291ms ago: executing program 0 (id=33): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0xfff) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x2, 0xffffaf35, 0x7f, 0x3, 0x84000001, 0x7fbefffd, 0x3, 0x10000000000003ad, [{0x10000000, 0x5, 0x3, 0x3f}, {0xffffff73, 0xfffffffa, 0x100001, 0x3}, {0xc7, 0x7, 0x6, 0x9}, {0x7, 0x46, 0xfffffff6, 0x200}, {0xac2, 0xa, 0x1002, 0x5}, {0x24020002, 0x8, 0x7, 0x89}, {0x9, 0xdf61, 0x9, 0x14}, {0x6, 0x11, 0x5, 0x6b}, {0xd1, 0x4, 0x40000003, 0xb}, {0x0, 0x3, 0x400, 0x1ff}, {0x1e6, 0x2500fff9, 0x10927c, 0x4}, {0x3, 0x25, 0x19, 0x2d0b}, {0xfffffffe, 0x2, 0x80002004, 0x408}, {0x2, 0x8, 0x0, 0x200}, {0x7ffe, 0x1, 0x8, 0x5}, {0xfffffffd, 0xfffffffd, 0x0, 0x8}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = semget(0x0, 0x1, 0x281) semop(r0, &(0x7f0000000000)=[{0x0, 0x400, 0x1000}, {0x0, 0xc, 0x1800}], 0x64) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$DIOCCLRSTATUS(r1, 0xc0284416, &(0x7f00000000c0)={'./file0\x00', &(0x7f0000000000)=""/18, 0x40000, 0x530, 0xcc0a, 0x301}) (async) unveil(0x0, &(0x7f0000002740)='c\x00') 325.769329ms ago: executing program 1 (id=34): sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000280)="f4dedccca4", &(0x7f0000000200)=0x5, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53}) sysctl$kern(&(0x7f0000000380)={0x1, 0x27}, 0x2, &(0x7f00000003c0)="35deda08f750fa736200b192f8a7ea66284952a47ab3a4b9f10d5c10044f87cf6c79d1ee7d809e632922e1b2d26c9d9421b1c2af14d56fd95b243a76b1d0992070002fa08e4adf6d03ae0594b461aef766849499134b1b65602d720a1826643fe2997c9dfc875116684234f017b44ee3828c27b27425062b7c27b009cd8905689f04813a142c5f28ca11e37dd4c4d996a5572182913e55c849c59a2b4726a05abd382f6bb769566e9d81804a7857d3bbd68482d417471f51d5667e8dcf46d0f9c649f2bfac826807dbc72e76cb19fe655275111e58", &(0x7f00000004c0)=0xd5, &(0x7f0000000500)="f34b0212a14f6422b34ef43cf039427c36d0fd4ee7ec788d7b7048fca326b4f95010dd37e044b92817ec5969c4788440b1ca697ca8f05c9cbdfdd005962a6949056e3807f3dc03ed7ee88c14d472372cf674fd3c26ee256a6d22d94cb162a3ea8b1fbd8c5ec429b2883a61fd8cf5023df3feb5964f4d398e0860992691fc0d4ba4d562d7bb884dbf40e463d68d4899bf74660e07e2c9e580794bc89ff369f9ebc8b951edf334ff05a2b7d0d7584d119ae8e3e5f44e113f9199e6aa8d4c3625b398041582cf355bb7ce6c9d7f728b06062c06ad6786de77e32c0dc580cc1bc13cb1c7be795bdc5ebbb1d04221989d", 0xee) (async) syz_emit_ethernet(0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff94ea09066dbd86dd60db83440008110000000000000009000000000000000000ff0200000000000000089078"]) (async) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f00000001c0)={{0xdb, './file0\x00', [{[@v6=@local={0xfe, 0x80, '\x00', 0x0}, @v6=@local={0xfe, 0x80, '\x00', 0x0}], [0x0, 0x3], 0xff7f, 0x2}, {[@v6=@ipv4, @v6=@empty], [0x0, 0x8], 0x4}], {{0x4732, 0xc, 0x2, 0x80000000}, 0x3, 0xff, 0xffff, 0x2, 0x3077, 0x7, 0x2}, {{0x6, 0x8, 0x7, 0x400}, 0xb87, 0xb10, 0x7ff, 0x206, 0xfffc, 0x1, 0x9a}, @v6=@mcast2, 0x6, 0x4, 0x280000, 0x7fff, 0x1c64, [[0xf], [0x6, 0x9]], [[0x2, 0x8], [0x5]], 0x1, [0xffffffff, 0x1], 0x2, 0x18, 0x50, 0x2, 0x4, 0xfb, 0xb, 0x26, 0xc, 0xe2, 0x4, 0x6687, "998f"}}) (async) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r0 = socket(0x18, 0x3, 0x85) ioctl$FIONREAD(r0, 0xc1206951, &(0x7f00000001c0)) r1 = syz_open_pts() close(r1) kill(0xffffffffffffffff, 0x14) (async) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x1000f66d, 0xe8, 0x7, 0x5ffff75f, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0xe0, 0x10}) (async) writev(r1, &(0x7f0000000300)=[{&(0x7f00000009c0)="3f6cb77a99aff311229e7063e519c24224e2da09b63578448a8e3dca079065e0c8fd8bc6fbe11ba32e3807a5dcaa3e521b8448e8e9b11850426c56099b44197be61c585fd8f8f5442f344b8fdde059250135577375b4a3dd2e6db798c7b247ce5dc499bccb78ad98fa355737c767facc865471469ec89dd23c635c083012d61eb0751a7623581037d5a2455e7f811625e5296e5c6dd0dfa1f1f2db096da4b6e8002b1472ea1dc579f8cd3647dc3ff8442673e9f9d3bda36fe7651df4eccac5a9deb4f23d10e1a02808ffdc45538b598eb955f6668ec6482994e1bfdd390e942f69c6dbb3a1810ff05ac7a0554826fb2a0c34b670d02a0f960ae784dd7b5e32059d00451f122eb15309db4e8a07139ffdd54bca4edebea1ef8a8fb28f276a1f17764c31707ad3de64dffcc693a1d687871b8cc4826fb76fc1960647b528ae344f82ed421221c910469b2f331812fcf153da5a7e1ab683d82941597be4798f61dc51dc67bdbdf812e1c6124740168e2d5b80e9ce943271b8b5202290834174ad76fdb794e39ea48200e99ac4f2070ed821cf53c68071ee53f021d3fe62044cacab5298b4a770d98318ed77f3765f2bd6a9da457cbc6f3cdecc8d4f6e5c769a97775eb5978718ee9d8eb330be65c233a87ea4cefdf62d3655c67c96842c4296c4c2d789287d58615a0ace66043f43c9d32ec8b2935bee11b74a5031f7836d438161e82f40864fc436025b90ed466f6fb73f32d92b2dd1047f1be3fbbfac2026b5bfeca81182cb8f97d585a869a1617589e9c14c2a769b04c4a326494e35c56fef8d3846ce81f38a2e76c92a07dfc85d5a3ee455b631f482dd99c78fd8f4156e6531bf91d418c9aa95fbc7b2bd60fe3cd186bf2b5f1ef2363c000003dd4fd07b6ef6580cb0ca754d15e7ed28c76c2d7fc7c9fb459f7e94b7f4c46d3fa46036218ae13d27b29e78673383246c63db435e72aee1aa0b2a5c13b6b186a510bb28a6fa336e740247341cd5d802e48735c371671ecccffc354fb6c0d9f10f39ef77985159f3bf45214f3e792a68c2f404ae58bca9ec45e5954d37024bfda96f72e4f9b2d459dd247d79b38ab0178679d3c26588a8d5d2281444f3331e687985d911341895f425173b0f722c871bc04112387ab46f15e30f9f4913b82cb74485a3b0f5a5f2af9c00cbf7abf51e6bc69e965bc19afcc1efb69fab0220385d4d078229fb63f83e2975c960a5d6e7741619df07b46c3a7c89e0b3d66a991f8a7a42e4cb1d5448d2f09bd9f2d19b1c9936977e2557038a821c8f2081e50fabed35ddf01b61cf49b63d58c147a5fd8ff4a058b65c2875653bbc0b0005000000dcbbcafcdf235644d6f2559ed5f965995f65e1fe3d9790251c7c85419f9a73f91ea2467ee12e5fb79b4dcd3b0972212431ad6a5113e9cfa3ef3282463f57a5b431bac3c71dd4499320eca8defee403e14651e0e09530e94db798330a200806638ee0592fc88bb6b8f451dd53ab0338ab56668480aa1f648041d3709de4c3fde4c05b8478db903836f49edef1882a4142a77f0948264b3b518c68968c7dba22fe89f3fe92", 0x45c}, {&(0x7f0000000000)="6c7097e67370b0d1d2f2d14aa76001aa8aca19e46740f48f02fbcab38a05c9f89057ca349d6c487b0c525b4fa0b7a2ffa18fe92c4af63318cb0af69baf9f", 0x3e}, {&(0x7f0000000080)="a6ac218c36f9", 0x6}, {&(0x7f00000000c0)="c12fa9fbf4017270fecf1f84137b3427d61328002ac2f42e27f13d01b6d765dbd1771e01fd0127d72866b9a926da95b97f549434177f2ca65fd76ac1a2a5b75855093139f8265e6f786067aba43062e7b05faa44bd331b2f32820e2b44715a30f97b5db82b7f86f357db084389a7e5d9adb085d77b26d1f6f6ec3b494b5d52be9787a5a90002a217aaad6b2714914d868acd4e4a9fe60521d58ba166e0b0c0a1405d8d295f864c2d5488d6508dc4ca6b1c8336aa8801e6ffede30d3164870a762b0087f4c788", 0xc6}, {&(0x7f00000001c0)="9ed96fd6a26e8774fb351986559f3a6f5abe92730566a02c229e9d9a00a8075d34e2048662fcdcd98b578c1e66889e4d7820936397da7b209d7ca06d9860698602b22edea0275c4206279fc8da60cf3c79fc7d5914399bfccaa3804097b24b01f7e1a7d460771cfcdc7fb1211f2ba824e3270b6e6cbb35ea81883928f9e12852370ac58bcdf33104fb71822128157cfce14cb13ee241133c3eb7d6886fd5951415b26ace14463d2fe2848affdb4cbf4d81564d1b4f4e34703488845494b554f467276b2c247ebba75cad30c21218dded1da594374397c7f516ff04133c84e74742580f25197fdb7502ab04fbe0bf6b160e4bbf99b422964b224b2321c9", 0xfd}, {&(0x7f00000002c0)="be8f69dbb7349259bb52736e07aea000ddda62fd7c88d3011a83cd48d3676598dc9c85105c0e8a5e4f2df424", 0x2c}], 0x6) 325.511406ms ago: executing program 2 (id=46): sysctl$hw(&(0x7f0000000280)={0x6, 0x11}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffb0, 0x67, 0x0, 0x0, 0x11, 0x0, @empty=0x23, @rand_addr=0xac14ffff}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}}}}}) 325.16145ms ago: executing program 5 (id=47): r0 = socket(0x2, 0x3, 0x2) setuid(0xee01) sysctl$kern(&(0x7f0000000100)={0x1, 0x53}, 0x2, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x2) r1 = socket$inet(0x2, 0x1, 0x40) sendto$inet(r1, 0x0, 0x0, 0xa, &(0x7f00000002c0)={0x10, 0x2, 0x2, 0xffffffff}, 0x10) 324.347627ms ago: executing program 6 (id=48): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x800, 0x83) setuid(0xffffffffffffffff) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$VNDIOCSET(r1, 0x44946472, &(0x7f0000000140)={0x0, 0x567, 0x0}) unveil(&(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0)='c\x00') unveil(&(0x7f0000004540)='./file0\x00', &(0x7f0000004580)='r\x00') ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000080)=0x1ff) 321.651491ms ago: executing program 7 (id=49): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f00000005c0)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000040)=0x80000001) 14.528517ms ago: executing program 2 (id=50): ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(0xffffffffffffffff, 0x400c570a, &(0x7f0000000000)) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000080)) openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$DIOCRDELADDRS(r1, 0xc4504444, &(0x7f0000000280)={{'./file0\x00', './file0\x00', 0x10, 0xe}, &(0x7f0000000100)=[{@broadcast, '\x00', './file0\x00', 0x800, 0x6, 0x18, 0xc, 0xb7, 0x7, 0x7}, {@broadcast, '\x00', './file0\x00', 0x0, 0x200, 0x2, 0x5, 0x1, 0x7, 0x81}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x73, 0x2, 0x0, 0xba, 0xd3, 0x3, 0x1}, {@multicast2, '\x00', './file0\x00', 0x1, 0x1e6, 0x0, 0x7c, 0x7, 0x9, 0xcd}, {@empty, '\x00', './file0\x00', 0x6, 0x4, 0x1a, 0xff, 0x7f, 0x3, 0xfe}, {@multicast2, '\x00', './file0\x00', 0x73, 0x8, 0xc, 0x9, 0x2, 0x7, 0x9}, {@rand_addr=0x800, '\x00', './file0\x00', 0xbd, 0x8, 0x18, 0x4, 0x7, 0x88, 0x35}], 0x101, 0x7, 0x7c, 0x1000, 0x5, 0x0, 0x5e, 0xf}) ioctl$DIOCRCLRASTATS(r1, 0xc4504448, &(0x7f0000000940)={{'./file0\x00', './file0\x00', 0x10, 0xa}, &(0x7f0000000700)=[{@rand_addr=0x9, '\x00', './file0\x00', 0x300, 0x2, 0x2, 0xc, 0x6, 0x4, 0x2}, {@loopback, '\x00', './file0\x00', 0x6, 0xffff, 0x18, 0xf8, 0x8, 0x5d, 0x6}, {@loopback, '\x00', './file0\x00', 0x1, 0xfff7, 0x18, 0x6, 0xfe, 0x7, 0x2}, {@broadcast, '\x00', './file1\x00', 0x2, 0xa, 0x2, 0x4, 0x0, 0x8, 0x9}, {@multicast2, '\x00', './file0\x00', 0x2, 0x2c4, 0x1a, 0x6, 0x9, 0x7, 0x81}, {@loopback, '\x00', './file0\x00', 0x5, 0x3, 0xe8e321b009296af1, 0x7f, 0x80, 0x8e, 0x7}, {@empty, '\x00', './file0\x00', 0x448, 0x1000, 0x0, 0x8, 0x6, 0x53}, {@broadcast, '\x00', './file0\x00', 0xfffffff8, 0x5, 0x0, 0x10, 0x3b, 0x60, 0x9}, {@loopback, '\x00', './file0\x00', 0x3, 0x81, 0x2, 0xed, 0x0, 0x5, 0x8}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0xef, 0xad1f, 0x18, 0x2, 0x10, 0x9, 0xd}], 0xfffffff9, 0xa, 0x48a7a3fc, 0x4, 0x4, 0x0, 0x64, 0x6}) (async) ioctl$DIOCRCLRASTATS(r1, 0xc4504448, &(0x7f0000000940)={{'./file0\x00', './file0\x00', 0x10, 0xa}, &(0x7f0000000700)=[{@rand_addr=0x9, '\x00', './file0\x00', 0x300, 0x2, 0x2, 0xc, 0x6, 0x4, 0x2}, {@loopback, '\x00', './file0\x00', 0x6, 0xffff, 0x18, 0xf8, 0x8, 0x5d, 0x6}, {@loopback, '\x00', './file0\x00', 0x1, 0xfff7, 0x18, 0x6, 0xfe, 0x7, 0x2}, {@broadcast, '\x00', './file1\x00', 0x2, 0xa, 0x2, 0x4, 0x0, 0x8, 0x9}, {@multicast2, '\x00', './file0\x00', 0x2, 0x2c4, 0x1a, 0x6, 0x9, 0x7, 0x81}, {@loopback, '\x00', './file0\x00', 0x5, 0x3, 0xe8e321b009296af1, 0x7f, 0x80, 0x8e, 0x7}, {@empty, '\x00', './file0\x00', 0x448, 0x1000, 0x0, 0x8, 0x6, 0x53}, {@broadcast, '\x00', './file0\x00', 0xfffffff8, 0x5, 0x0, 0x10, 0x3b, 0x60, 0x9}, {@loopback, '\x00', './file0\x00', 0x3, 0x81, 0x2, 0xed, 0x0, 0x5, 0x8}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0xef, 0xad1f, 0x18, 0x2, 0x10, 0x9, 0xd}], 0xfffffff9, 0xa, 0x48a7a3fc, 0x4, 0x4, 0x0, 0x64, 0x6}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r2, &(0x7f0000000e00)=""/227, 0xe3, 0x1, &(0x7f0000000f00)=@in={0x10, 0x2, 0x0, 0x6}, 0x10) chroot(&(0x7f0000000f40)='./file0\x00') ioctl$DIOCSETHOSTID(r1, 0xc0044456, &(0x7f0000000f80)=0x4) socket$inet(0x2, 0x1000, 0xf) (async) socket$inet(0x2, 0x1000, 0xf) mknod(&(0x7f0000000fc0)='./file1\x00', 0xc000, 0x1) (async) mknod(&(0x7f0000000fc0)='./file1\x00', 0xc000, 0x1) chroot(&(0x7f0000001000)='./file1\x00') sendto$unix(r3, &(0x7f0000001040)="6ec6270d93a29787c7604b5aef462fb64ecedf8001c09e7b0e2694f09131aa04853df9259ae83bb4391ac637babf1be60651c2e753c71d5e6dcc448f8b483940f03b3ca3815cfa77acd29765f9920ef70265cf05a59171c0e9985fbca7f61443ee988a32dd625f343eb8e62e7b85aadcab184572ab48162065c0b749f083af4bf2534dbda6ec857d350abadfb10ca357f403ddfef2038454dee1e0e6a6c03fede9a3d84e76a19977fe1aa6687fef2bbb0cbd835f4836feb3d2aef7ab7ef65833c5e914f5a9bfe8d1ffba6ad8c3c95dae8f8381ede24db74dfbee5daec3057c467071a3ac2f3a4d7b0bd13f536e", 0xed, 0x0, &(0x7f0000001140)=@file={0x20, 0x0, './file1\x00'}, 0xa) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000001180), 0x20000, 0x0) ioctl$BIOCGFILDROP(r4, 0x40044278, &(0x7f00000011c0)) (async) ioctl$BIOCGFILDROP(r4, 0x40044278, &(0x7f00000011c0)) ioctl$DIOCKILLSTATES(r1, 0x0, &(0x7f0000001200)={{0x3, 0x8, 0x1}, 0x2, '\x00', 0x0, {@any={'\x00', 0x0, 0x27eccf219e6e70de, 0x1}, [0x6, 0x2], 0x7, 0x0, 0xfc00}, {@addrmask={@v4=@loopback, @v6=@rand_addr="ee0373de80bffb0f5e4d5dc23413fb98", 0x0, 0x0, 0xb}, [0xd94c, 0x5], 0x0, 0x6, 0x1000}, './file0\x00', './file1/file0\x00', 0x6, 0x1}) ioctl$BIOCGBLEN(r4, 0x40044266, &(0x7f0000001300)) r5 = syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000001340)={0x2, 0x0, 0xff, 0xff8000, "0dd6a82b2fd8b49908fac1f5a8883ee7e4b5a618", 0xa, 0xfffffffe}) r6 = dup3(r5, r0, 0x4) kqueue1(0x10000) (async) r7 = kqueue1(0x10000) ppoll(&(0x7f0000001380)=[{r0, 0x20}, {r6, 0x1}, {r7, 0x80}], 0x3, &(0x7f00000013c0)={0x4, 0xe}, &(0x7f0000001400)={0x9}) accept$inet(r6, &(0x7f0000001440), &(0x7f0000001480)=0x10) (async) r8 = accept$inet(r6, &(0x7f0000001440), &(0x7f0000001480)=0x10) sendmmsg(r8, &(0x7f0000001740)={{&(0x7f00000014c0)=@in6={0x1c, 0x18, 0x1, 0x100, "76b73e369d420fc62a2746ea331fae77", 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001500)="32530b9c0483197536c561cc0c2fcc9b975f33340b7cd4e503330b34939b92ae51e6d60ce9694c11ab6020ba78dad5d87f6333fee1c5ba2188572b5625bdc85f4d03605f97aed9bbd2d798bb65141cba5edb562f0e6c918b4dd849449f6e42398cbfdcfb6fa3c083ad45efc462b4890b157e75d9f5e365cdf7fee0805cb4c1bf8f160d2e6927b9980701d26d908bc809d4cc3fb62e26508fc49a6c789da047efe57dc2ffcdb73f63af8e70a894d4eb7be2c41e1de2dc0a57ae2583604533b0d2b7f95f60895241a00287f9df5847e934ce809e665b12215c22", 0xd9}], 0x1, &(0x7f0000001640)=[{0xe8, 0xffff, 0x8, "0527bbcdcf63b880d97b4e48d48c900ec177f384026fc66a1d9164cde2fa5ac380b5a96a4815b7cd05571cf39026e7f79da5240238b5c0dca2fecab637828d387536f717cda475e5385fe1fdf5481fe9931cab3cbb2ad577c783d6127fa0c1ca7fd5b4ed8b39b860abcd21dd274afd4b5580855abbbb1bf0a559a6e1c8b7cd433a87f43904b5592f7d8bb143e2b2497b11f6fde001db774549001c4cfb8c39df96efef5f8fd5d2489a44d110eedf86e5e8ac4681c993a0b2db548ebaf56cb682ec83bca4b11d4d55be3d9572bb7266934fef9c4751bf04c3307ccc19"}], 0xe8}}, 0x38, 0x8) getsockname$unix(r3, &(0x7f0000001780)=@file={0x0, 0x0, ""/247}, &(0x7f0000001880)=0xf9) ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f00000018c0)={0x5, 0xb, 0xfffffff9, 0x1, "97b99a7918b9e1888d8657d4411b6495d3513b00", 0x8001, 0xfffffeff}) (async) ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f00000018c0)={0x5, 0xb, 0xfffffff9, 0x1, "97b99a7918b9e1888d8657d4411b6495d3513b00", 0x8001, 0xfffffeff}) unveil(&(0x7f0000001900)='./file1/file0\x00', &(0x7f0000001940)='w\x00') rmdir(&(0x7f0000001980)='./file1/file0\x00') (async) rmdir(&(0x7f0000001980)='./file1/file0\x00') ioctl$FIOGETOWN(r8, 0x4004667b, &(0x7f00000019c0)) (async) ioctl$FIOGETOWN(r8, 0x4004667b, &(0x7f00000019c0)) 12.719197ms ago: executing program 3 (id=51): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) ftruncate(r0, 0x8531) (async) ioctl$DIOCGETRULE(0xffffffffffffffff, 0xcd604407, &(0x7f00000002c0)={0xa, 0x36ce, 0x6, './file0\x00', './file0\x00', 0x0, "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"}) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) (async) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) ioctl$VMM_IOC_CREATE(r0, 0xca605601, &(0x7f0000001040)={0x10, 0x487, [{&(0x7f0000001000/0x2000)=nil, &(0x7f0000001000/0x3000)=nil}, {&(0x7f0000002000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, 0x9af}, {&(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x3000)=nil, 0x4}, {&(0x7f0000000000/0x4000)=nil, &(0x7f0000004000/0x3000)=nil, 0x6}, {&(0x7f0000004000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, 0x1e6}, {&(0x7f0000003000/0x1000)=nil, &(0x7f0000006000/0x1000)=nil, 0x7}, {&(0x7f0000003000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, 0x5}, {&(0x7f0000001000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, 0x1}, {&(0x7f0000007000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x200}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, 0x4}, {&(0x7f0000005000/0x3000)=nil, &(0x7f0000005000/0x3000)=nil, 0x6}, {&(0x7f0000000000/0x4000)=nil, &(0x7f0000004000/0x3000)=nil, 0x3d}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x2}, {&(0x7f0000003000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002000/0x3000)=nil, 0x9}, {&(0x7f0000004000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x7ff}], './file0/file0\x00', 0x6, 0x6, 0x3, 0x2, [0x10000, 0x401, 0x9, 0x8, 0x80000000, 0x3, 0x8, 0x3ff, 0x3ff, 0xfffffffd, 0x2, 0x4, 0x515, 0x3, 0x7fffffff, 0x5, 0xfffffffd, 0x2ac8, 0x5, 0x5, 0x2, 0xff, 0x7, 0x7e551bfe, 0xfff, 0x1, 0xff, 0x32, 0x7, 0x6, 0x2, 0x2, 0x8, 0xf, 0x8, 0xffffffff, 0x7, 0x3, 0x3640, 0xfffffff9, 0x0, 0x265, 0x8, 0x0, 0xe646, 0x63b, 0x65b3, 0x9, 0x7, 0x0, 0x3, 0x9, 0x2, 0x0, 0x7, 0x8, 0x800, 0x3, 0x8, 0x10, 0x6, 0x5, 0x5, 0x8, 0xac, 0x7, 0x100, 0x2, 0xffffff7f, 0x1ab, 0x5, 0x4, 0x6, 0xe, 0x6, 0xbed, 0x2c00000, 0xfff, 0x5, 0x400, 0x5, 0x8, 0xd22a, 0x5, 0x3, 0x86f1, 0xff1, 0xfffffffa, 0x101, 0xa0b, 0x1000, 0xffffffff, 0x9, 0x9, 0x3, 0x7, 0x6, 0x8, 0xd, 0x4, 0x10000, 0xfffffffa, 0xc35, 0x9, 0x4, 0x4, 0x13, 0x1ff, 0x80000000, 0x9, 0x9, 0xef, 0x9, 0xe, 0x8, 0xda5e, 0x0, 0x7, 0x7, 0x1, 0x6, 0x2, 0xa, 0x0, 0x5, 0x4, 0x40, 0x9, 0xffffffff, 0x5, 0x7, 0x7, 0x0, 0x584, 0x6, 0xfffffffe, 0x1ff, 0x10001, 0x24000, 0x29d42452, 0xe, 0x7, 0x9, 0x962, 0x5, 0x5, 0x7fffffff, 0x3ff, 0x1, 0x54cb59ac, 0x3, 0xf, 0x7fffffff, 0x9, 0x4, 0x4, 0x8, 0x3, 0xd2f, 0x1000, 0x8, 0x4, 0x7, 0x10, 0x40, 0x5, 0x10, 0x9, 0x6, 0x80, 0x7, 0x80, 0x5, 0x9, 0xed7, 0x8, 0x7, 0x401, 0x2, 0x40, 0x3, 0x9, 0x8, 0x0, 0x6, 0xfff, 0x1c7, 0xf, 0x6, 0x7, 0x4, 0x1ff, 0x5a5, 0x9, 0x0, 0x10000, 0x7, 0x7ff, 0x95, 0x0, 0x2, 0xffff, 0x11333aaa, 0x203e, 0x80000001, 0xd, 0x2, 0x6, 0x7, 0x7, 0x6, 0x1, 0xfffffc01, 0x7, 0x9, 0x1, 0x4, 0x7, 0x1, 0x101, 0x8, 0x0, 0x3, 0x8, 0x6, 0x4, 0xa, 0x5, 0x9, 0x101, 0x5d779f14, 0x0, 0x8000, 0x3, 0x13, 0x7, 0x8001, 0x9, 0x7, 0x3, 0xc0, 0x1, 0x6, 0xffff, 0x6, 0x6, 0x6, 0x10001, 0xfffff000, 0x7, 0xe5c, 0x6, 0x4, 0xfffffffb, 0x100, 0x400, 0xd40d, 0x8, 0x6, 0x0, 0x1, 0x6343, 0x4, 0x3, 0x8, 0x2, 0x5, 0x3, 0xfffffffc, 0x401, 0x595c, 0xe9, 0x8, 0x4, 0x3, 0x9, 0x1, 0x6, 0x0, 0x6, 0x1, 0x8, 0x80000000, 0xfffffffb, 0x9, 0x401, 0x7, 0x5, 0x42, 0x532, 0xda5, 0x2, 0x1ff, 0x7fffffff, 0x679, 0x0, 0x0, 0x6, 0x0, 0x98e, 0xffffff01, 0x1, 0x2, 0x8, 0x9, 0x6, 0x3, 0x4, 0x2a41, 0x7, 0x3, 0x2, 0xd, 0x5, 0x2, 0x1, 0x9, 0x9, 0x56b, 0x0, 0x1, 0x3, 0x1, 0x3, 0xffff, 0x4, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1000000, 0x101, 0xb, 0x6, 0x6, 0x63, 0xffffd0ff, 0x1, 0x8edc24c, 0x80000001, 0xe, 0xabf, 0x95a, 0x5, 0xfff, 0xe36b, 0x9, 0xffffffff, 0x3c, 0x4, 0x648, 0x8001, 0x9, 0x4, 0xfffffffd, 0x5, 0x0, 0xa0b, 0x1, 0xe, 0x81, 0x6, 0x0, 0x1ff, 0xfff, 0x4, 0x7fffffff, 0x16cb, 0xd, 0x3, 0x6, 0x9, 0x4, 0x9, 0xcf, 0x5, 0x9, 0x5, 0x3b35488c, 0x0, 0x9, 0xef4, 0x4, 0x81, 0x8001, 0x7, 0x4b470b3c, 0x3, 0x2, 0x2, 0xfe0, 0x3, 0x0, 0x6, 0x401, 0x8, 0xf8, 0xde69, 0x0, 0x5, 0xf, 0x3, 0x2, 0xe0000000, 0x1, 0x7, 0x10000, 0x9, 0x18000000, 0x0, 0x5, 0x3, 0x6, 0xfffffffc, 0x941a, 0xd, 0x8, 0x0, 0x200, 0x8, 0x7ff, 0x3a, 0x0, 0x8, 0x3, 0xcfa, 0x101, 0x7b, 0x0, 0x7f, 0x0, 0x2, 0x8, 0x5, 0x7, 0x800, 0xa0, 0x10, 0x5, 0x40, 0x1694, 0x0, 0xf134, 0x6, 0x1, 0xff, 0x5, 0x0, 0x400, 0x80000001, 0x1, 0xfffffff6, 0x0, 0x7fffffff, 0x0, 0xcf, 0x0, 0x6, 0xc, 0x4, 0xfffffffc, 0xfff, 0x0, 0x7, 0x6, 0x4, 0x7, 0x8, 0x3, 0x2, 0x8, 0x4, 0x6, 0xa57, 0x68c, 0x1000, 0x6, 0x200, 0x9, 0x401, 0xa4, 0x4, 0x9, 0x7, 0x0, 0x80, 0x7, 0x3, 0x1, 0x9, 0x7, 0x17a8, 0x6, 0x5, 0x2, 0x2, 0x80, 0x4, 0x2, 0x100, 0x6, 0x8, 0xf, 0x5, 0x8, 0xa0, 0x7fffffff, 0x7ff, 0x19, 0xffffffff, 0x7]}) (async) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) 9.580874ms ago: executing program 4 (id=25): select(0x40, &(0x7f0000000180)={0x35, 0x2, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="8fce1bfa18b423ec280137b188f835254420c4756153d60adfc5909310fcd1ebd7168bf1784d082d08a690048754993d6d9a2f3192262ee5b8f79f96a03fbb", 0x3f) (async, rerun: 64) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) (rerun: 64) r1 = syz_open_pts() close(r1) (async) syz_open_pts() (async, rerun: 64) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x38a}) (rerun: 64) r2 = syz_open_pts() close(r2) (async) ioctl$VT_RELDISP(0xffffffffffffff9c, 0x20007604, 0x0) (async) r3 = syz_open_pts() (async) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="cc69696ef3c976ebd721d757288004c0cc645ccac9616560bb20e269ba4a9e7e77ff93b4d1701446a1924304e2301f75b3419b22a81325f86cb8ad2fa1ee18ccc255c4bb7d099a0c193101ba6e7c1c6ad07c2a03082d5c2247169ca8622e5095840e6ce038e3062c75461e4a2bf1ce681fff08354f91ffbfa6007093d5fda7bf9b8fda2fa1eded6c0c88f6e6cfb87d2604", 0x91}], 0x1) read(r3, &(0x7f0000000500)=""/251, 0xfb) (async, rerun: 64) syz_emit_ethernet(0x0, 0x0) (async, rerun: 64) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) (async, rerun: 32) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) (async, rerun: 32) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x209, 0xfffffffd, 0x5, 0x1, 0x100, 0x10, 0x80000000, 0x1, 0x0, 0x101, 0x6}) (async) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x100637d) (async) r4 = open(&(0x7f0000000800)='./file1\x00', 0x80, 0x2b) sendto$unix(r4, &(0x7f0000000000)="cc7a7148b9240515f09b7c259425022df1efbb4171a6e8943293b124284ff5fbb43c4d71a9ca48b53a8f3aaa86a112e9f21794f20619e4baad125c7097db7957c8a30da94a9a260cf56a", 0x4a, 0x4, 0x0, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) r5 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0x1c, 0x18, 0x2, 0x2000005, "0a070000001ef47fff00ffffffffff00", 0x9}, 0x1c) ioctl$WSDISPLAYIO_USEFONT(r4, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x206, 0x8, 0x3, 0x0, 0x8000004a, 0x2, 0x80000000, 0x1, 0x1, 0x9, 0x840000000000a4c2}) (async) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) (async) r6 = openat$pci(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FIONBIO(r6, 0xc0107008, &(0x7f0000000040)=0x3) 9.357348ms ago: executing program 5 (id=52): socket$inet(0x2, 0x2, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x400000000, 0x4787, 0x1002, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x5, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0x0, 0x2, 0xffff, 0x7b98, 0x6, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x3, 0x40000000, 0x0, 0xffffffffffffffff, 0x872a, 0xfffffffffffffffa], [0x100, 0x20000000000, 0xffffffffffffffff, 0x8000000100000000, 0xfffffffffffffffe, 0x3], [{0x0, 0x4, 0x0, 0x7d0a}, {0x0, 0x2, 0x5, 0x10}, {0x0, 0x75d, 0xfffffffe, 0x81}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x4, 0x8}, {0x0, 0x2006, 0x40000, 0x2000000000000000}, {0x6b7, 0x0, 0x400001, 0x200}, {0x8, 0x965, 0x0, 0x8}], {0x2, 0x6, 0x8}, {0x21, 0x6, 0x100000b0, 0x2}}}) r0 = kqueue() r1 = kqueue() kevent(r1, &(0x7f0000000080)=[{{}, 0xfffffffffffffff6, 0x19, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}], 0x3, 0x0, 0x0, 0x0) kevent(r1, &(0x7f0000000000)=[{{}, 0xfffffffffffffff6, 0x4, 0xe00fffe0, 0x100, 0x13fff}], 0x5, 0x0, 0x5, 0x0) kevent(r0, &(0x7f0000000000), 0x96, 0x0, 0xfffa4961, 0x0) 6.095707ms ago: executing program 6 (id=53): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x24, 0x2, 0x6) getsockopt$sock_int(r0, 0xffff, 0x1021, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_int(r1, 0xffff, 0x20, &(0x7f00000001c0), &(0x7f0000000200)=0x4) unlink(&(0x7f0000000300)='.\x00') 0s ago: executing program 7 (id=54): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100dd2d018000000000005e00", 0x0, 0x5}) sysctl$kern(&(0x7f0000000040)={0x1, 0x59}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) symlink(&(0x7f0000000900)='.\x00', &(0x7f0000000240)='./file0\x00') open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000001180)="678314c7", 0x4) getresgid(&(0x7f0000000040), 0x0, 0x0) syz_emit_ethernet(0x20ca, &(0x7f0000004300)=ANY=[@ANYBLOB="aaaaaaaaaaaaca5979d5217e86dd6000000820942b00fe80000000000000000000003a0000bbfe8000000000000000000000000000aa3c00f301660000002b"]) gettimeofday(0x0, &(0x7f0000000180)) sysctl$kern(&(0x7f0000000000)={0x1, 0x33}, 0x2, &(0x7f0000000080)="480d92f3d931eeda1e3c914f5992d3d05e243bf7b671d9d6564de518c4c77890b81657f0822d022d7a80f92f6a165c32cad356bc0325f4084f387ee02ad3490d72c618428261c2038db61f11c51740e1ff465c3d8177bc778d6f", &(0x7f0000000100)=0x5a, &(0x7f0000000140)="b9f3e05aa42d660f401a57f8579dd6d5f0232edbe2d08b249144b3cd3a57c7843ad3a9f7a9e71602a6a28815e7369adf31e41e213c415821c5571189c6f3bb7cc87381146fceb713ce3ac44f3f17ebbea0d58d34fec8a6977393c1abc79e5d473dd323901996db8f9ba9339c78dcef3cfef2e7bafb555be79b6dc309e048a12aa16e86e72702e93e2ced2f7682aa14afa80504a11e565b5470dcc7bb993c51e042fca93b21323fe48dcbfcf5783514b995a16482141476f9", 0xb8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error uvm_fault(0xffffffff839bd678, 0xffff80000000424c, 0, 1) -> e kernel: page fault trap, code=0 Stopped at wsmouseopen+0x78: movzbl 0x24c(%r14),%r12d TID PID UID PRFLAGS PFLAGS CPU COMMAND *116858 10130 0 0 0x4000000 0 syz-executor wsmouseopen(4400,1,2000,ffff80002a7d27f0) at wsmouseopen+0x78 spec_open(ffff80002a7f5148) at spec_open+0x2d6 VOP_OPEN(fffffd006fb63878,1,fffffd0007ffd618,ffff80002a7d27f0) at VOP_OPEN+0x82 vn_open(ffff80002a7f53a0,1,0) at vn_open+0x7a5 doopenat(ffff80002a7d27f0,ffffff9c,200000000040,0,0,0,2529779ad1f2008a) at doopenat+0x352 sys_openat(ffff80002a7d27f0,ffff80002a7f5640,ffff80002a7f5590) at sys_openat+0x58 syscall(ffff80002a7f5640) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdbeb5831a40, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff839bd678, 0xffff80000000424c, 0, 1) -> e ddb> show kasan No such command ddb> trace wsmouseopen(4400,1,2000,ffff80002a7d27f0) at wsmouseopen+0x78 spec_open(ffff80002a7f5148) at spec_open+0x2d6 VOP_OPEN(fffffd006fb63878,1,fffffd0007ffd618,ffff80002a7d27f0) at VOP_OPEN+0x82 vn_open(ffff80002a7f53a0,1,0) at vn_open+0x7a5 doopenat(ffff80002a7d27f0,ffffff9c,200000000040,0,0,0,2529779ad1f2008a) at doopenat+0x352 sys_openat(ffff80002a7d27f0,ffff80002a7f5640,ffff80002a7f5590) at sys_openat+0x58 syscall(ffff80002a7f5640) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdbeb5831a40, count: -8 ddb> show registers rdi 0 rsi 0x2 rbp 0xffff80002a7f50c0 rbx 0xffff80002a7d27f0 rdx 0 rcx 0 rax 0xffff80000002e310 r8 0x100 r9 0xfffffd0007ffd618 r10 0x87cb57dd2199df3e r11 0x6968cd6e1322e9c r12 0x2 r13 0 r14 0xffff800000004000 r15 0x1 rip 0xffffffff82ff8dd8 wsmouseopen+0x78 cs 0x8 rflags 0x10286 __ALIGN_SIZE+0xf286 rsp 0xffff80002a7f5080 ss 0x10 wsmouseopen+0x78: movzbl 0x24c(%r14),%r12d ddb> show proc PROC (syz-executor) tid=116858 pid=10130 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a7d2fb8,0xffff80002a7d3260 process=0xffff800045ff9b18 user=0xffff80002a7f0000, vmspace=0xfffffd006d1bb8b0 estcpu=0, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 27693 369154 46286 0 2 0 0 syz-executor 32733 370041 45274 0 2 0 0 syz-executor 34464 31699 73025 0 2 0 0 syz-executor 31410 458320 31430 0 2 0 0 syz-executor 31410 201221 31430 0 3 0 0x4000080 fsleep syz-executor 31410 522568 31430 0 3 0 0x4000080 fsleep syz-executor 87160 83424 88944 0 2 0 0 syz-executor 10130 480716 79965 0 2 0 0 syz-executor *10130 116858 79965 0 7 0 0x4000000 syz-executor 28445 26915 22678 0 2 0x2 0 syz-executor 31430 70511 22678 0 2 0x2 0xc80 syz-executor 77610 123771 22678 0 3 0x2 0x80 piperd syz-executor 79965 479823 22678 0 2 0x2 0xc80 syz-executor 45274 445438 22678 0 3 0x2 0x80 nanoslp syz-executor 46286 251944 22678 0 3 0x2 0x80 nanoslp syz-executor 73025 177475 22678 0 2 0x2 0xc80 syz-executor 88944 162816 22678 0 2 0x2 0xc80 syz-executor 22678 482419 4501 0 2 0x2 0 syz-executor 4501 429278 8221 0 3 0x100002 0x88 sigsusp ksh 8221 203734 21738 0 3 0x10 0x88 kqread sshd-session 21738 444063 59816 0 3 0x12 0x80 kqread sshd-session 89702 188469 1 0 3 0x100003 0x80 ttyin getty 59816 50026 1 0 3 0 0x88 kqread sshd 94566 165571 10087 73 3 0x1100010 0x80 kqread syslogd 10087 384792 1 0 3 0x100002 0x80 sbwait syslogd 17520 495619 1 0 3 0x100000 0x80 kqread resolvd 43879 251061 97743 77 3 0x100012 0x80 kqread dhcpleased 85946 436289 97743 77 3 0x100012 0x80 kqread dhcpleased 97743 249864 1 0 3 0 0x80 kqread dhcpleased 39907 490701 0 0 3 0x14000 0x200 bored smr 40462 319830 0 0 2 0x14000 0x200 zerothread 74689 76288 0 0 3 0x14000 0x200 aiodoned aiodoned 2055 515521 0 0 3 0x14000 0x200 syncer update 27160 161943 0 0 3 0x14000 0x200 cleaner cleaner 14665 333014 0 0 3 0x14000 0x200 reaper reaper 35764 92775 0 0 3 0x14000 0x200 pgdaemon pagedaemon 97205 7855 0 0 3 0x14000 0x200 bored viomb 54101 55010 0 0 3 0x14000 0x40000200 acpi0 acpi0 45811 5187 0 0 2 0x14000 0x200 softnet0 83130 323049 0 0 3 0x14000 0x200 smrbar systqmp 28233 390054 0 0 3 0x14000 0x200 bored systq 64221 31563 0 0 3 0x14000 0x40000200 tmoslp softclock 87553 72331 0 0 3 0x14000 0x40000200 idle0 1 76615 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11033 12101K 12175K 166960K 12191 0 pcb 17 12K 12K 166960K 25 0 rtable 216 6K 8K 166960K 639 0 pf 28 12K 16K 166960K 68 0 ifaddr 38 6K 7K 166960K 84 0 ifgroup 46 2K 2K 166960K 90 0 sysctl 1 1K 9K 166960K 5 0 counters 32 17K 17K 166960K 44 0 ioctlops 0 0K 4K 166960K 45 0 iov 0 0K 1K 166960K 3 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1293 81K 81K 166960K 1482 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 7 0 VM map 2 1K 1K 166960K 2 0 sem 5 0K 0K 166960K 7 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 16 57K 93K 166960K 331 0 sigio 0 0K 0K 166960K 1 0 proc 59 59K 91K 166960K 755 0 subproc 67 4K 4K 166960K 157 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 5 0 in_multi 88 5K 6K 166960K 198 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 3 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 85 387K 387K 166960K 85 0 exec 0 0K 1K 166960K 485 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 186 158K 166K 166960K 4113 0 UVM aobj 4 2K 2K 166960K 4 0 pinsyscall 37 74K 94K 166960K 1662 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 1 0 NDP 14 0K 2K 166960K 56 0 temp 33 9106K 9170K 166960K 4820 0 kqueue 14 22K 22K 166960K 33 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 56 0 53 1 0 1 1 0 8 0 rtentry 136 210 0 111 4 0 4 4 0 8 0 unpcb 144 56 0 41 1 0 1 1 0 8 0 syncache 336 6 0 6 1 0 1 1 0 8 1 tcpcb 736 26 0 22 1 0 1 1 0 8 0 arp 96 36 0 20 1 0 1 1 0 8 0 inpcb 328 134 0 127 2 0 2 2 0 8 1 nd6 112 51 0 30 1 0 1 1 0 8 0 kcovpl 48 17 0 10 1 0 1 1 0 8 0 ppxss 1072 2 0 2 1 0 1 1 0 8 1 pfrktable 1344 7 0 7 1 0 1 1 0 8 1 pfanchor 1288 3 0 3 1 0 1 1 0 8 1 pftag 88 1 0 1 1 0 1 1 0 8 1 pfrule 1360 2 0 2 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 851 0 396 31 0 31 31 0 8 2 art_table 40 852 0 396 6 0 6 6 0 8 0 art_node 32 210 0 119 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 1 1 0 1 1 0 8 1 semapl 72 5 0 2 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1673 0 192 93 0 93 93 0 8 0 ffsino 256 1673 0 192 93 0 93 93 0 8 0 nchpl 144 1947 0 222 65 0 65 65 0 8 0 vnodes 216 1859 0 0 104 0 104 104 0 8 0 namei 1024 7650 0 7650 2 0 2 2 0 8 2 pfiaddrpl 120 2 0 2 1 0 1 1 0 8 1 kstatmem 264 45 0 24 2 0 2 2 0 8 0 scxspl 216 6521 0 6521 3 0 3 3 1 8 3 plimitpl 152 304 0 288 1 0 1 1 0 8 0 sigapl 424 605 0 564 6 0 6 6 0 8 0 knotepl 120 3531 0 3482 2 0 2 2 0 8 0 kqueuepl 184 43 0 32 1 0 1 1 0 8 0 pipepl 304 155 0 128 3 0 3 3 0 8 0 fdescpl 448 592 0 564 5 0 5 5 0 8 1 filepl 120 2214 0 2015 8 0 8 8 0 8 0 lockfpl 104 26 0 24 1 0 1 1 0 8 0 lockfspl 48 13 0 11 1 0 1 1 0 8 0 sessionpl 144 99 0 91 1 0 1 1 0 8 0 pgrppl 48 117 0 101 1 0 1 1 0 8 0 ucredpl 104 195 0 184 1 0 1 1 0 8 0 zombiepl 144 564 0 564 1 0 1 1 0 8 1 processpl 1152 605 0 564 4 0 4 4 0 8 0 procpl 664 720 0 676 6 0 6 6 0 8 1 sockpl 552 247 0 222 3 0 3 3 0 8 1 mcl64k 65536 1 0 1 1 0 1 1 0 8 1 mcl16k 16384 1 0 1 1 0 1 1 0 8 1 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 4 0 4 1 0 1 1 0 8 1 mcl4k 4096 2555 0 2498 14 0 14 14 0 8 6 mcl2k 2048 451 0 451 1 0 1 1 0 8 1 mextrefs 64 80 0 79 1 0 1 1 0 8 0 mtagpl 96 4 0 4 1 0 1 1 0 8 1 mbufpl 256 5478 0 5338 10 0 10 10 0 8 0 bufpl 272 2305 0 102 147 0 147 147 0 8 0 anonpl 24 96437 0 93652 21 0 21 21 0 187 1 amapchunkpl 152 11214 0 10857 21 0 21 21 0 158 6 amappl16 200 1366 0 1349 4 0 4 4 0 8 2 amappl15 192 7 0 7 1 0 1 1 0 8 1 amappl14 184 526 0 525 1 0 1 1 0 8 0 amappl13 176 131 0 121 1 0 1 1 0 8 0 amappl12 168 874 0 849 2 0 2 2 0 8 0 amappl11 160 5 0 5 1 0 1 1 0 8 1 amappl10 152 55 0 45 1 0 1 1 0 8 0 amappl9 144 275 0 275 1 0 1 1 0 8 1 amappl8 136 145 0 144 1 0 1 1 0 8 0 amappl7 128 159 0 148 1 0 1 1 0 8 0 amappl6 120 321 0 320 1 0 1 1 0 8 0 amappl5 112 93 0 86 1 0 1 1 0 8 0 amappl4 104 296 0 280 1 0 1 1 0 8 0 amappl3 96 2058 0 1991 3 0 3 3 0 8 0 amappl2 88 668 0 603 2 0 2 2 0 8 0 amappl1 80 11514 0 10975 13 0 13 13 0 8 0 amappl 88 3261 0 3138 4 0 4 4 0 92 0 uvmvnodes 80 97 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 1 0 1 1 0 1 1 0 8 1 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 592 0 564 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 592 0 564 1 0 1 1 0 8 0 vmmpekpl 168 6498 0 6450 3 0 3 3 0 8 0 vmmpepl 168 46875 0 45221 82 0 82 82 0 357 7 vmsppl 368 591 0 564 4 0 4 4 0 8 1 rwobjpl 40 16230 0 15350 11 0 11 11 0 8 1 pdppl 4096 1190 0 1128 106 38 68 80 0 8 6 pvpl 32 256116 0 248843 78 0 78 78 0 265 7 pmappl 216 591 0 564 3 0 3 3 0 8 1 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 520 0 38 14 0 14 14 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace wsmouseopen(4400,1,2000,ffff80002a7d27f0) at wsmouseopen+0x78 spec_open(ffff80002a7f5148) at spec_open+0x2d6 VOP_OPEN(fffffd006fb63878,1,fffffd0007ffd618,ffff80002a7d27f0) at VOP_OPEN+0x82 vn_open(ffff80002a7f53a0,1,0) at vn_open+0x7a5 doopenat(ffff80002a7d27f0,ffffff9c,200000000040,0,0,0,2529779ad1f2008a) at doopenat+0x352 sys_openat(ffff80002a7d27f0,ffff80002a7f5640,ffff80002a7f5590) at sys_openat+0x58 syscall(ffff80002a7f5640) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdbeb5831a40, count: -8 ddb> machine ddbcpu 1 No such command ddb> trace wsmouseopen(4400,1,2000,ffff80002a7d27f0) at wsmouseopen+0x78 spec_open(ffff80002a7f5148) at spec_open+0x2d6 VOP_OPEN(fffffd006fb63878,1,fffffd0007ffd618,ffff80002a7d27f0) at VOP_OPEN+0x82 vn_open(ffff80002a7f53a0,1,0) at vn_open+0x7a5 doopenat(ffff80002a7d27f0,ffffff9c,200000000040,0,0,0,2529779ad1f2008a) at doopenat+0x352 sys_openat(ffff80002a7d27f0,ffff80002a7f5640,ffff80002a7f5590) at sys_openat+0x58 syscall(ffff80002a7f5640) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdbeb5831a40, count: -8