last executing test programs: 7.941729888s ago: executing program 1 (id=205): open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) r0 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x803, &(0x7f0000000340)={0x800, 0xffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setuid(0xffffffffffffffff) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x3, [{&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ae2000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xfffffffffffffff1}, {&(0x7f0000e5f000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000e64000/0x7000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x5fb6}, {&(0x7f0000b25000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000ab2000/0x4000)=nil, 0x1000000000000000}, {&(0x7f0000f56000/0x1000)=nil, &(0x7f00008fb000/0x2000)=nil, 0x3}, {&(0x7f0000e4c000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f0000de6000/0x4000)=nil, &(0x7f0000862000/0x2000)=nil}, {&(0x7f0000b6c000/0x1000)=nil, &(0x7f0000aff000/0x1000)=nil, 0x1000000000000000}, {&(0x7f0000f6a000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil, 0x1}, {&(0x7f0000dad000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x9}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000daa000/0x2000)=nil, 0x84}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff3000/0xd000)=nil, 0x8}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f000094f000/0x2000)=nil, 0x5}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000c5e000/0x4000)=nil, 0x7}], './file0\x00', 0x6d}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r1, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r2 = socket(0x18, 0x2, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setitimer(0x0, &(0x7f0000000040)={{0x7ffd}, {0x7fff, 0xf4240}}, 0x0) getsockname(r2, 0x0, &(0x7f00000001c0)) 6.200193118s ago: executing program 4 (id=228): open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setrlimit(0x3, &(0x7f0000000000)={0x100000, 0x100000}) truncate(&(0x7f00000000c0)='./file0\x00', 0x8001) truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd) 6.194001464s ago: executing program 4 (id=229): getrusage(0x0, &(0x7f0000000000)) getrusage(0xffffffffffffffff, &(0x7f00000000c0)) getrusage(0xffffffffffffffff, &(0x7f0000000180)) getrusage(0x0, &(0x7f0000000240)) sysctl$kern(&(0x7f0000000300)={0x1, 0x15}, 0x2, &(0x7f0000000340)="4220b6c8290cead33a4d8b4819c59e0e9961260382da4910fd7bb1103ba1d506adfda6b452932d490f219ae470628b", &(0x7f0000000380)=0x2f, &(0x7f00000003c0)="ae931aba222216264be553f0b5e392ba95070537479aa892acd95c7b51cd69743e3bcd8e57ca1c6d821242ae0f19b28c17d869e7d2114eadd9e9851b29f09a8005cd370479728be7b2b252b99a1da8f0e18507702d218e3061a417c45387e09a38ce83f262069710af56cdb274ce24067b7435a928dc5ae4b5c764c3bf5184e37d23f1d4b658", 0x86) r0 = getpgid(0x0) wait4(r0, 0x0, 0x0, &(0x7f0000000480)) syz_emit_ethernet(0x50a, &(0x7f0000000540)={@remote, @random="4da46b7bebd9", [{[], {0x8100, 0x1, 0x0, 0x4}}], {@ipv6={0x86dd, {0x7, 0x6, "cec244", 0x4d0, 0x20, 0x3, @remote={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x63, 0x2, '\x00', [@ra={0x5, 0x2, 0xfff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0x4}]}, @hopopts={0x2c, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @generic={0x4, 0x1b, "315dbf398c30f2368821dfb0a3154485796c4886b5b3a445c5e243"}]}, @hopopts={0x3a, 0x4, '\x00', [@ra={0x5, 0x2, 0xff}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0xa}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x6}, @pad1, @ra={0x5, 0x2, 0xa}, @enc_lim={0x4, 0x1, 0xf9}]}, @routing={0x1, 0x4, 0x0, 0x5, 0x0, [@rand_addr="ab7637d89d8112614df904acf717dec0", @mcast1]}, @routing={0x50, 0xc, 0x0, 0xba, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, @empty]}, @dstopts={0x88, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @pad1]}, @dstopts={0x37, 0x24, '\x00', [@pad1, @generic={0x7, 0x79, "fb6dfb6d740a1f0c1527ceecd32c25dc98b2170689179e92e18f6c47be5fa3e559482ad8f7a6b92e27af39990ddaca79221298f2aeafa08432da029e5d8f8ae5dfadc22405e1804a4724ff1580cba830bb0cf4a58940e207e6d131464269aa66ca429678cd222f58b3bad4cfce7842535f446923f5c437d330"}, @generic={0x3a, 0x27, "9674b545118ffe4b2617c227b7daeec0d5fcecbd5aaa8151bbd94cad61c771c89a6f19759b688d"}, @generic={0xc4, 0x78, "97e3022f7baadb2d887a87ac9ac5ed65d16d93c9282c6e6883bed3f48270130fc363ed50fc06f9dbb547efcdf5472bb890c1ef1002f3a3e1fc5240b92ef7fb7e870ff91c8ae44d206e289a47a06c71092bf55b582a20b730f4085b21ca7f50799165ded665041db3576115a2ed9b85ec09c5660cf6b0d480"}, @enc_lim={0x4, 0x1, 0x4}, @enc_lim]}, @dstopts={0x5f, 0x20, '\x00', [@generic={0x8, 0xea, "de3cb1b0428feec8bafc8e9a9ef8524aa4b1f3dbebefe1fc2ab2e16139b6ff8291b7a5b60c1b34f09855944b863790119c7115c98b9eaf74d99349ea455bb940640762248d170649d31cec382bc97372aca8171d1a1ae30e82ae0fd4ce417714dedef592e2e4ef438a5ef3cffbe3dc1dbc675a17fd09d9cd49cc3de2c42d7ce70f7c98ed717a6bd3cd04de8d3e2da9d9e412fceb587b6bf9f397612bcddbfab03ef6e490d45510c751804b408217685311f360bf878a365a84f80baaaca8ee6576b5220c3918b9b9f0e8bf9a31b5d5757d6268ef59e98e0712e98b3ab4ddc4a5406aeca6ca8076080ffc"}, @jumbo={0xc2, 0x4, 0x2f8a}, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x8}]}, @routing={0x88, 0xc, 0x0, 0x5, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @mcast1, @rand_addr="695eda9ce6226a32511059d4bc4f86bd", @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2]}, @routing={0x61, 0x6, 0x0, 0x9, 0x0, [@mcast1, @local={0xfe, 0x80, '\x00', 0x0}, @mcast1]}], @generic="4b1299fb66a14ed2691e2ec9f21dde454687ad6cb2161bca9fc41df437be19fbec8b1f03eb4c2a50ec59759e10d7f0e2000e4e469cb8be1202a0472f3f4dff12809f2d477394472b5840f8f7ff54135cc4c2a97d70c692ea8f2b96672ced7ed5d0cf5795dacd27d23f44c2f33ea39420576c80f8612cca765b99eafb2ce9e1eaf5f58f3b316663e2fe80b74472965336e348ec356687213cafbbb31ca1c8e538e050b9eb60e26abc5ad85830fc087c350259fda8bd235805623d4213340eaba1"}}}}}) getpgid(r0) r1 = open(&(0x7f0000000a80)='./file0\x00', 0x1, 0x21f) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r3 = getpgrp() getpgid(r3) r4 = getppid() fcntl$setown(r2, 0x6, r4) r5 = msgget(0x2, 0x40) r6 = geteuid() r7 = getegid() r8 = getuid() r9 = getegid() getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000b00)={0x0}, &(0x7f0000000b40)=0xc) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000b80)={{0x96f, r6, r7, r8, r9, 0x2, 0x5}, 0x12, 0xd18, r4, r10, 0xa5b, 0x6, 0x7, 0xfd}) setgroups(0x1, &(0x7f0000000c00)=[r7]) getpgid(r3) r11 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000c40), 0x8, 0x0) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000c80)={0x7, 0x5, 0x10000, 0xff, "209e019e31ec8ad63235a3b718725623fd330d1a", 0xe2, 0x7}) setrlimit(0x3, &(0x7f0000000cc0)={0x8, 0xa37}) r12 = accept$unix(r1, &(0x7f0000000d00)=@file={0x0, ""/4097}, &(0x7f0000001d40)=0x1003) r13 = dup2(r11, r12) dup2(r13, r13) 5.024737141s ago: executing program 4 (id=239): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) clock_settime(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x9}) r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x404) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) close(r2) r4 = socket(0x18, 0x1, 0x0) r5 = socket(0x18, 0x1, 0x0) setsockopt(r5, 0x1000000029, 0x35, &(0x7f0000000040)="03000000", 0x4) dup2(r5, r4) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) execve(0x0, 0x0, 0x0) 4.929593605s ago: executing program 4 (id=246): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x92, 0x0) (async) r1 = socket(0x18, 0x1, 0x0) readv(r1, &(0x7f0000001700)=[{&(0x7f0000000100)=""/202, 0xca}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000300)=""/245, 0xf5}, {&(0x7f0000000400)=""/60, 0x3c}, {&(0x7f0000001480)=""/141, 0x8d}, {&(0x7f0000001540)=""/147, 0x93}, {&(0x7f0000001600)=""/196, 0xc4}], 0x9) (async) setsockopt(r1, 0x1000000029, 0x23, &(0x7f0000000040)="03", 0x1) setsockopt$sock_int(r1, 0xffff, 0x1003, &(0x7f00000017c0)=0x7, 0x4) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x3, 0x7, 0xf0, 0x5}, {0xc0, 0xf, 0x2, 0xa}, {0x2, 0x8, 0x1, 0x6}, {0x2, 0x9f, 0x3c, 0x8}]}) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="b10005010000009f0500070007000000331c13fecea10500fef96ecfc72fd3357ae30200004e3039d2d236acf20bf404be01000000f7c8cf5f882b", 0x3b, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, @empty, @multicast1}}}}}}) (async) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0x2, 0xfd, 0x8, 0x6, '\x00', 0x0, 0xffffff00}) (async, rerun: 32) syz_open_pts() (async, rerun: 32) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x6, 0x1, 0x5, 0x8}, {0x6, 0x7, 0xfd, 0xc000000}, {0xb, 0x1, 0x40, 0x3}, {0x800, 0x0, 0x1, 0x1}, {0x7f, 0xfb, 0x8c, 0xd}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) 4.901134396s ago: executing program 4 (id=248): ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504447, &(0x7f0000000000)={0x4, 0x8, 0x7fff, 0xfffffffe, "cd002200000400", 0x8000, 0x1003}) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x17, 0xdf60, 0xfffffffffffffffe, 0x80, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x6], [0xfffffffffffffffe, 0x80000001, 0x1, 0x20000001, 0x5e, 0x7, 0x80000000000001fe, 0x0, 0x0, 0x1], [0x100000003, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xd, 0x8], [{0x0, 0x0, 0x0, 0x8000000000007d06}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x9, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0x1, 0x4}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x1}}}) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) accept$unix(r0, 0x0, 0x0) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSKBDIO_GETENCODINGS(r3, 0xc0105715, &(0x7f0000000000)) socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r3, 0xc050756a, &(0x7f00000000c0)) 4.899340971s ago: executing program 1 (id=249): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x7}, {}, {0x3}, {0x3}, {}, {0x2}, {0x0, 0xaa59}, {}, {0x1, 0xffffffff}, {}, {0x2, 0x4}, {}, {}, {}, {0x0, 0x80000001}, {0x2, 0xffffffff}, {0x3, 0x3}, {0x3, 0x7218}, {0x0, 0x2}, {0x0, 0x7ff}, {0x2}, {}, {0x3}, {}, {}, {0x2, 0x80001}, {}, {0x0, 0x200}, {0x2}, {0x2, 0x2}, {0x2, 0xa}, {0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x14, 0x0, 0x37) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x5a}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37) r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$PCIOCGETROM(r0, 0xc0107005, &(0x7f00000001c0)={{}, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 4.759903962s ago: executing program 4 (id=251): r0 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x3b5, 0x1000381210089}) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x20, 0x20) setitimer(0x0, 0x0, 0xffffffffffffffff) sysctl$vm(&(0x7f0000000140)={0x2, 0x8}, 0x2, 0x0, 0x0, &(0x7f0000000000)="0000001b", 0x4) open(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000080)={0x2, 0x22135293ed6a9a1e, 0x3, 0x369000000, 0xffffffffffffffff}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r2 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x4001, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) close(r5) r6 = socket(0x2, 0x2, 0x0) connect$unix(r6, &(0x7f0000000000), 0x10) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040), 0x4) r7 = syz_open_pts() ioctl$TIOCSTAT(r7, 0x20007465, 0x0) execve(0x0, 0x0, 0x0) ioctl$TIOCSETD(r7, 0x8004741b, &(0x7f0000000180)=0x5) unveil(0x0, &(0x7f0000004300)='W\x00') setsockopt(r2, 0xf014, 0x6, &(0x7f00000000c0)="478a1b5d0d9c238223c2c89450b595d06f5bde4eeb5a627547f577136534933e55cc190d45e9ce5ebc18ef69139065173f4400395bf4c0329d72d91a3ab9c3ab255a5192cd0b92c7916074b697d9ac4528db0b947078b3bf178ba91672d627f3c6ed635a53634f4fda89140a37a459c96986b860d8ee2450d4e1a502e3565943025047d051740fe4c138ef45c84b83c35941b91ab714ff", 0x97) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040)=0xab8, 0x4) fcntl$lock(r1, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x3b5, 0x1000381210089}) 4.748177735s ago: executing program 1 (id=253): r0 = socket(0x18, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt(r1, 0x0, 0x23, 0x0, 0x0) r2 = socket(0x18, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000100)="b1000501000000ae05000701070000000000000000000500fef96ecfc72fd3357ae30200004e30ffd2d236acf20bf404be01000000f7c8cf5f882b297be1aa050400ce94e2f0ad3ebbc23de4411f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300000100be1f25a2e791505c47f8343712cc11ffffffffffffffffffffffffff800000ed007f62b60be8b90000000000000000", 0xb1, 0x8, 0x0, 0x0) r4 = dup2(r0, r2) setsockopt(r2, 0x1, 0x81, &(0x7f00000000c0)="b211d7170d816684c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e7aae9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) r5 = socket(0x1, 0x1, 0x1) setsockopt$sock_int(r5, 0xffff, 0x1021, 0x0, 0x0) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)={{0x10001, 0x0, r8, 0x0, 0x0, 0x81}, 0x20000000000}) sendmsg$unix(r4, &(0x7f0000000680)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000040)=[@cred={0x20, 0xffff, 0x0, 0xffffffffffffffff, r6, r8}], 0x20, 0x8}, 0x400) 4.746440588s ago: executing program 1 (id=254): setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x3, 0x4, 0x108a38, 0x4000003, "07160a009cef01098b748200"}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="d9eb42b2c64926f45303ccb10c994e927696b9ffc9533e47da99ee9475814c967c26d804d830fc247f22b7a8b46622f388c2923eb028416e51d637132d1c39bfefe2c798ac3278c5e923e5e1270a215d427ab33ab8c6a4debec72773624f8e0cd05841dc67b311591e0bca4f1ff2faa7318443daac67d19c1b40a5f340c23dd1269ba9f7f837bd6e98475c2b3c5395cc659df53d22352ff834de0fd3d547c563ee531f95a85a897fd2d60000286631b7d3ac2e11880ea7d2fd", 0xb9}], 0x1) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) dup2(r1, r2) r3 = dup2(r1, r0) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000080)={0xffffffff, 0x1, 0xf, 0x7ff, "2cf9892af9a590e4cb52e88608007673f99e5fd7", 0x6, 0xa8}) poll(&(0x7f0000000000)=[{r3, 0x40}], 0x1, 0x0) 4.735074529s ago: executing program 1 (id=256): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00006ac000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x10000}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1ff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {0x0, &(0x7f00006ae000/0x2000)=nil}], './file0\x00'}) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) pwrite(r0, &(0x7f0000000200)="ddd20d29a7401f3796129e95c1e54ee286c96b4fefb5e09dc1bc9d9f95a846492aacd960a07525b301a8e4c709224a1c93e42658ef6950566a40de2d3cfacba7736e1365587db6c11e23", 0x4a, 0x7) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b10005010000", 0x6, 0x408, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f00000000c0)="b100050160000004000000000700000012df8106cfa10500fef96ecfc73fd3357ae36caa0416fa4f376b36acf00b7804be301e4991f7c8cf5f3fc303ebe1aa5323edeb51e2f0ca3ebbc257169ed0d44a699a1f133ea7acb5d602000d7d026ba8af6300371c2102000000720fd38bfbb770c1f5a8aec872ea772ec58904000000008d9800361b1257aba8c500002012010000de5000"/177, 0xb1, 0x0, 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00006ac000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x10000}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1ff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {0x0, &(0x7f00006ae000/0x2000)=nil}], './file0\x00'}) (async) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) (async) pwrite(r0, &(0x7f0000000200)="ddd20d29a7401f3796129e95c1e54ee286c96b4fefb5e09dc1bc9d9f95a846492aacd960a07525b301a8e4c709224a1c93e42658ef6950566a40de2d3cfacba7736e1365587db6c11e23", 0x4a, 0x7) (async) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b10005010000", 0x6, 0x408, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) socket(0x11, 0x3, 0x0) (async) sendto$unix(r1, &(0x7f00000000c0)="b100050160000004000000000700000012df8106cfa10500fef96ecfc73fd3357ae36caa0416fa4f376b36acf00b7804be301e4991f7c8cf5f3fc303ebe1aa5323edeb51e2f0ca3ebbc257169ed0d44a699a1f133ea7acb5d602000d7d026ba8af6300371c2102000000720fd38bfbb770c1f5a8aec872ea772ec58904000000008d9800361b1257aba8c500002012010000de5000"/177, 0xb1, 0x0, 0x0, 0x0) (async) 4.691885749s ago: executing program 1 (id=258): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000000c0)={0x4, &(0x7f0000000100)=[{0x4c, 0x28, 0x9, 0x801002}, {0x5, 0x5, 0xf, 0x1}, {0x206, 0x2, 0x9, 0x9}, {0x6, 0x2, 0x2, 0x9bb}]}) (async) setrlimit(0x4, &(0x7f0000000980)={0xb, 0x54}) (async) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000180)={0x7fffffff, 0xcacf, 0xfffdff7e, 0x160350d, "04e4ee0d090000deffffffff0fe0ff0405080800", 0x200001, 0x9}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 1.196924088s ago: executing program 0 (id=369): open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) r0 = msgget$private(0x0, 0x543) msgsnd(r0, &(0x7f0000000d00)=ANY=[], 0x401, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/200) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) r1 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0xc02069b6, &(0x7f0000000100)) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000340)) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) ioctl$WSKBDIO_SETENCODING(r3, 0x80045710, &(0x7f00000003c0)=0xf) truncate(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400) select(0x40, &(0x7f0000000180)={0xffffffffffffffed, 0x44809e9d, 0xffffffffffffffff, 0x21, 0x2000000000000000, 0x380, 0x2, 0xd}, 0x0, 0x0, 0x0) setuid(0xffffffffffffffff) sync() link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') select(0x40, &(0x7f0000000540)={0x6, 0x3, 0x9, 0xfffffffffffffffc, 0x44afc4c7, 0xce09, 0x7fffffffffffffff, 0xc}, 0x0, &(0x7f00000005c0)={0x8000000000000000, 0x1, 0x4, 0x40, 0x3, 0x7, 0x85, 0x5}, 0x0) unlink(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setrlimit(0x0, &(0x7f0000000380)={0x3, 0x475c8}) 1.117123754s ago: executing program 7 (id=375): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f00000000c0)=""/179, 0xb3}, {&(0x7f00000002c0)=""/229, 0xe5}], 0x3, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0xfffffffffffffffc) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 1.020121846s ago: executing program 7 (id=378): mknod(&(0x7f00000004c0)='./file0\x00', 0x6000, 0xe02) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x710, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x108, 0xffff, 0x1, "4533b6f5b07b1dda4a50a9e4a1ae2f08e0b755d3493ce0b59088d2ab879d112ac30096f76bf7f0a372c66a7cdbdce8c381e30f9f5eec2f7744df29451ea5fd807f2873fd2e710bbc9d90f3494545689e5a593dae7eeb1e81f243cf988ecb99d36383117a98c0147be780dc6454119e03b317c54bc6a56de1b54e8ff4bd8c15d7c442d5a1f8d3a74b08796f1d4a1eeec7cdd00177db3c71de3be925c5af7d0055c177748b8398a97e9665ed2f3215461e69c7734e6f0fc115017d9a7b855d0b33937fe11704f47ccf1473f75f0482fae056d564359ccf09582676dc59282507a82fa748999148602c2c58c99ba73020283a"}, {0xa8, 0x1, 0x2, "a6ac8609c7117ea039a8078b744546d924971a9ce5e30475e91c6642193701a2a465839b1cb586baf61ae3b38dadd4ad526cdcb1b18df30ec210a1150eccfe16583866e0f2b0d9f14172e0811e08e0af889103f37681ba721bd5f0424eef0b02df14968280e22ba85484d61da4aa6b31a9e6e0de036340c67a68c7202fab1852986b9d6cb324f400"/145}, {0xa0, 0x1, 0x2, "33a08ead46fe910e4b975e8071b5bbeb59f532d890bf7bff31f08e44dd2a18cb328c530a3eb6ff8103ff9d9c2ea5a3767e9ff9147bb4684127ba1f97591b10b50ee8578a23af609a8d0e9e15a10482ab526408337b98a0a788129e8b3763d75860f1fc9aa967c07bd93206d7285398d5376bb282aa86253cd9e116e7238ab466e228de81235c7c831e"}], 0x250}, 0xfffffff6}, 0x10, 0x1) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$TIOCSETA(r1, 0xc4504447, &(0x7f0000000000)={0x2, 0x8, 0x2, 0xfffffffe, "cd002200002181baab4c8c6d09b975390a000004", 0x8000, 0x3}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x1e, 0x2, 0x1}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00002e4000/0x1000)=nil, &(0x7f000051f000/0x4000)=nil, 0x1}, {&(0x7f0000695000/0x2000)=nil, &(0x7f00005fd000/0x2000)=nil, 0x7fff}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000604000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x8}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x793d}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil}, {&(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil}, {&(0x7f0000692000/0x4000)=nil, &(0x7f0000604000/0x3000)=nil}, {&(0x7f000069c000/0x4000)=nil, &(0x7f000069b000/0x3000)=nil, 0x8}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000690000/0x1000)=nil, 0x40003}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f000068f000/0x2000)=nil, &(0x7f000069c000/0x4000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0xfffffffffffffffe}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x3c}], './file0\x00'}) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f00000000c0)={0x0, 0x10005, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000001540)=ANY=[]) syz_emit_ethernet(0xf8, &(0x7f00000003c0)={@random="5e388daa1ddf", @local, [], {@generic={0x8130, "b287cf36837906c35e1ec8252c1474d44d82303617819355cdfb2424c9ff8f5cc6953262b6f98201659bd3f87cc86c2d260f53f7a007d037de25c025b274265881795e5f609cd7b219dba4487c9235911d90c45350dd4e08e5b965a416b37b60e7b4cb48470a520f6b35876ba451c11ece57266c188b5e98e1a453e11a913a6e67482c52223afdea582e5f221c4f9877e842c04fdda8d32f2b6b9346f4669ddab4f52e43fa300fc3dd419fa042b9db9e265f94606c6d009cdfd3e41d80757512fe86d912e02109084f6a7c64998bb2ed7bbd09e240c2371989fd6a4a6e061f84f813269229fa239aa674"}}}) recvfrom$unix(r0, &(0x7f0000000300)=""/142, 0x8e, 0x40, &(0x7f0000000080)=@abs={0x0, 0x0, 0x3}, 0x8) 1.017995196s ago: executing program 0 (id=379): r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$PCIOCWRITE(r0, 0xc00c7007, &(0x7f00000005c0)={{}, 0x1, 0x8003, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) poll(0x0, 0x0, 0x40007) r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PCIOCWRITE(r1, 0xc00c7007, &(0x7f00000005c0)={{}, 0x1, 0x0, 0x2}) ioctl$PCIOCWRITE(r1, 0xc00c7007, &(0x7f00000005c0)={{}, 0x2, 0x800002}) execve(0x0, 0x0, 0x0) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTAT(r3, 0x20007465, &(0x7f0000000240)) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r4 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x0, 0x9, 0x0, 0x71002}, {0x2, 0x9, 0x8, 0xfffffff7}, {0x100, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007, 0x7}, {0x401, 0x200727, 0x7, 0x7}, {0x1, 0x650, 0x3, 0x7}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0xfff, 0x7ff, 0x14, 0x8}, {0x2, 0x82, 0x8000005, 0x5}, {0x6a75, 0x8001, 0xa94, 0x4}, {0x1cc, 0x10001, 0x0, 0x3}, {0x8, 0x9, 0x8, 0x8000002}, {0xb8c, 0x555981a8, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0xffffffff, 0x6}, {0xc, 0x2000005, 0x5, 0x10000000}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0xb}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) setsockopt(r2, 0x1000000029, 0xc, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 756.825855ms ago: executing program 6 (id=382): setsockopt(0xffffffffffffffff, 0x1000000029, 0x32, &(0x7f00000000c0)="b211d7170d816685c8e360", 0xb) setrlimit(0x8, &(0x7f0000000180)={0xa, 0x8000}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000100)={0x80978e, 0x5, 0xef7fff00, 0x80a19a, "bf08000100f1675910812cc900", 0xc, 0x100}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4, 0x800000, {[0xfffffffffffffffb, 0x2, 0x4, 0xfffffffffffffff9, 0x0, 0x0, 0x319, 0x0, 0x0, 0x2f01, 0x3, 0x3, 0x1, 0xca90, 0x800000, 0x0, 0x1, 0x100], [0x8, 0x0, 0xfffffffffffffffa, 0x1ffffffe, 0x0, 0x7b98, 0x9, 0x1, 0x800000000000000, 0x1ff], [0x3, 0x2, 0x9, 0x10000, 0x83, 0x11000, 0x9], [0xff, 0x2, 0x2, 0x100000001, 0xfffffffffffffffe], [{0x6, 0x9, 0xbf9, 0x9}, {0x8, 0x2, 0x1ff, 0xffff}, {0x0, 0x0, 0x2000080, 0x80}, {0x3, 0x5, 0x46, 0xfffffffffffffffe}, {0xcc8b, 0x4, 0xffffffc0, 0x48}, {0xd, 0x400, 0x0, 0x2000000000000000}, {0x0, 0x0, 0x7fff, 0xc99}, {0x5, 0x963, 0x5, 0x8}], {0x0, 0x5, 0x1, 0x400000000000}, {0x0, 0x0, 0x0, 0x4}}}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x3ac01742d6dc1689, 0x17) r1 = getpid() r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)='n', 0x1}, {&(0x7f0000000280)='.', 0x1}], 0x2) setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) setuid(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x1, &(0x7f0000000240)={0xff, 0xd1e}) getrlimit(0x3, &(0x7f0000000040)) utimes(0x0, &(0x7f00000000c0)={{0x40a9, 0xd}, {0xacc3, 0xffffffffffffffff}}) 756.489026ms ago: executing program 7 (id=383): close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r0 = socket(0x18, 0x2, 0x0) pipe2(&(0x7f0000000140), 0x10008) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000300)={0x0, 0xffff2c61}, 0x8) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0x5) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x60}) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x60}) sysctl$kern(&(0x7f0000000180)={0x1, 0x27}, 0x2, &(0x7f00000001c0)="1fde6be8ce02561fdc9a53a347be981e2fda3fdb28de6000b62dd2f30d31b1c1b9d26b269c679c85fe1328d64479af58f3a54bfe498531af6834df77574481792de3dff55ac7f3ab4da0fc91793fc69284281650eff321addd260dcd26232f0043fae0a31c6e6885203ec8bf090264588fb993cf555c5854546dd5fe0c3482d637a37280a80b0b70173c05a13b24c47066fe558a31bc21a702272a4ca1bd0afb19a3f16ddc1a4f5ffe79fde8f451069363119d073295c0f92ee929", &(0x7f0000000280)=0xbb, &(0x7f00000002c0)="dd90f0abc437", 0x6) syz_open_pts() (async) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8d, "08ed95990000000000000000ffffffffffffffe6", 0x4000000, 0x20000}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000380)=""/32, 0x20}], 0x1) r3 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000)) 686.942155ms ago: executing program 7 (id=384): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000002c0)={0x3, &(0x7f0000000180)=[{0x4, 0x1, 0x0, 0x810c}, {0x1, 0x6, 0xa, 0x5}, {0x16, 0x8, 0x7, 0x73}]}) write(r0, &(0x7f0000000080)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000480)={0x1, &(0x7f0000000280)=[{0x2d, 0x3, 0x2, 0x2}]}) 686.575684ms ago: executing program 7 (id=385): symlink(&(0x7f0000000900)='.\x00', &(0x7f0000000240)='./file0\x00') getitimer(0x1, 0xfffffffffffffffe) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') unveil(&(0x7f0000000040)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) 684.122206ms ago: executing program 5 (id=387): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0xfffffffe, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0xd, 0xfffffff9}, {0x8, 0x8000b86, 0xffffbf7d, 0x9}, {0x1002, 0x8800, 0x7}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0x6, 0xd8, 0x99}, {0xcdf, 0x1, 0x200004f8, 0x10}, {0x6, 0x80b, 0x14, 0xb}, {0x8, 0x82, 0x50, 0x9}, {0x4, 0x3, 0xd1b, 0x88}, {0x1e0, 0x10001, 0xc, 0x3}, {0x7ff, 0xf, 0x9, 0x5}, {0xb8c, 0xc3a, 0x6, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x7, 0x6, 0x5}, {0xfffffffd, 0x2000009, 0x40004, 0x30005}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) fchmod(r1, 0x1b7) setuid(0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r2 = socket(0x18, 0x1, 0x0) close(r2) socket(0x24, 0x2, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0284457, &(0x7f0000000280)={0x1, 0xffffffff, 0xfeffffff, 0x9, "080014e8eaed00", 0x10000000, 0x9}) setsockopt(r2, 0x6, 0x41, &(0x7f0000000280), 0x1c) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSETA(r3, 0xcd504406, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, "97a2224faf891c15ebb178926cc9795a6b47c1d1", 0x1000000}) ioctl$TIOCSETA(r3, 0xcd504406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) sendmsg(r4, &(0x7f0000000340)={&(0x7f0000000000)=@in={0x2, 0x1}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000380)="21e692a1ca8354c879c1685e1ca63b2e40a1a9dbb93903e74e97771aa0e2098a9c3adea0a7e35028a8b904f7cb33fc07995cb3d465b2307bcc6f3d4aae64ffdb433883b0f050bc99e45a333964e357ae091c4482f286b892a27d1e4501afb1c9fb418b765195a6d9ef24d295fba3774b8680518d786d7e8194ae855b945d1200a486ddc47b19714cb55b88f0a0b0fe33f8eb69923408f13e8f773c9aed99fa75dac02e598b8660dfc9956b8db4766ddc90f7ad264008973c043ca3df82635d8f67d8456436b2286486fd980a003875e65fc35e0db5549e719cba7ece50610e18802e1462e8a4d61b93a6fab5d503efb2f0ed", 0xf2}, {&(0x7f0000000100)="5867794939891b24d538ba203a3b16ad4ae272cb401c79fd836cd7e7d74e62777faa5a01fe152b7a6b6a238d98fae05e899bf8a331ec723426f306aa47c1e90ced928a5c5d78e1893109249396b963c2b199ff18bcefc2623d51731cd458d4acbd75f6ed8def89b324b1eb4292e1ab67", 0x70}, {&(0x7f0000000180)="5c7f58464f2e4264bd3c38f54b1dc0ebd092d96acb83cdd6c24ac35f8260b8849abec99b5d2eca57242c3dbd71ee6f38a1343b4e5d8f40fd695ed55a3ed7", 0x3e}], 0x3, &(0x7f0000000200)=[{0xa0, 0x1, 0x5fd19644, "34a518038b5f1c70f6840c374cf4f0d82bbd4d5cbcf04105de0d148f9a42edc5e8c123cb5207f793a09473eaa7b79c7529aee194b3023d05f8343f086c2ad3288a64714656a6ebe0ba2a31931b9ba9a287e0a2953a77c871da14ceb69dc95b2a80d1c9b02a7e5503b1d7958582d6f1349402aaa7c327c02ed38c791665f0c14438223c2b8dd2e30784e6060e"}, {0x80, 0xffff, 0x9, "2c7c91ee2870504e288e6d34cae5c5dba1dd6cc7233942fe23f65f100254b3a8f7c5163e20b3477119dc5fbec67db9a71e5ac4c4f6eeb12c8ca880bf17059a0d8e7ec0e459c27b3fadaadfae9dc91785fec058bf7538812f5b4eb836c29e65fc468ce6779868181711b7d72f4bde87"}], 0x120}, 0x4) sysctl$net_inet_ipcomp(&(0x7f0000000040)={0x4, 0x2, 0x6c, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) 628.034612ms ago: executing program 6 (id=389): mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) (async) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f0000000080)={0x10, 0x9, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x100}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x80}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x1}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x5}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x9}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x3}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x8000}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x7000)=nil, 0x2}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x200000000}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f0000ff2000/0xd000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0xffffffffffff8000}, {&(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x400}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff3000/0x4000)=nil, 0x5}], './file1\x00', 0x100}) (async) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) 623.941311ms ago: executing program 7 (id=390): select(0x10, &(0x7f0000000000)={0x10001, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc088444f, 0x0) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0xe}, 0x7297, 0x4, 0xffffffffffffffff, 0x0, 0x10000000008000, 0x6, 0x1, 0xd8f}) r1 = socket(0x18, 0x2, 0x0) close(r1) r2 = socket(0x800000018, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffff29, &(0x7f0000000100)=""/108, 0x64}, 0x80003f8a}, 0x10, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000080)={0x0}, 0x10, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r4 = socket(0x800000018, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r5 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) select(0x40, &(0x7f0000000000)={0xf, 0x4f, 0x9, 0x9, 0x100000000000, 0x2, 0x4, 0x99c}, 0x0, 0x0, 0x0) ftruncate(r5, 0x10000) 623.052352ms ago: executing program 2 (id=391): openat$pci(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0) kevent(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x2000007, 0x101, 0x80000001, 0x4, 0x2, 0x10, [{0x0, 0x7, 0x4, 0x71003}, {0x5d60, 0x8, 0x8, 0xfffffff9}, {0xb7, 0x6, 0x0, 0x8}, {0x1, 0x7fe, 0x3}, {0xa, 0x40f27, 0x1, 0x4}, {0x2, 0x6, 0x3, 0x99}, {0x80ce1, 0x1, 0x3, 0x400006d}, {0x6, 0x803, 0x14, 0x8}, {0xffffffff, 0x82, 0x1, 0x9}, {0x20000004, 0x8001, 0xd3b, 0x88}, {0x1d0, 0x10001, 0x2c, 0x975e616}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8a, 0x4, 0x6, 0xfff}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x8, 0xf}, {0x0, 0x0, 0x4, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x2, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400e}]}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="e15a93ade8fdf79411d132e8b8aec16c058579c7de1e2c6bf763cc2f3fee5a9da4074a3b454c096c07911cdce2e8d249", &(0x7f0000000080)=0x30, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) setsockopt$inet_opts(r0, 0x0, 0x14, &(0x7f00000001c0)="02000000", 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6d030012000816f500000000000000000000000000000000000000000000000000000000000010"]) 622.828133ms ago: executing program 2 (id=392): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f00000003c0), 0x0) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f00000003c0), 0x0) r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) r1 = shmget$private(0x0, 0x2000, 0x88, &(0x7f00001bc000/0x2000)=nil) shmat(r1, &(0x7f00000e6000/0x4000)=nil, 0x1000) (async) shmat(r1, &(0x7f00000e6000/0x4000)=nil, 0x1000) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0)="9876d692a3ef9c7ab923a2f0", 0xc) (async) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0)="9876d692a3ef9c7ab923a2f0", 0xc) write(r0, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0xfc7e) 621.186168ms ago: executing program 5 (id=394): syz_emit_ethernet(0x2e, &(0x7f00000002c0)=ANY=[@ANYBLOB="b3cba0638f07467bd4566cbcc69c6dc15ca15257b81d384710b704bf02c4e476132572ef234cadc8f104a5ea9e3cbe96063ec2b34d314e230d53a207e3654863086c87a2c10ceb1e8f6471b1a09a7fad90af757eaaaa2e69ab0660de590dbb9ae318835cfde5cad3d2ea0f0f8a4a25caa2b1f0ff93f70826f9f9835ba7d8"]) setuid(0xffffffffffffffff) ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xc2585601, &(0x7f00000000c0)={0x10, 0x21ac00000, [{&(0x7f0000f36000/0x4000)=nil, &(0x7f0000685000/0x3000)=nil}, {&(0x7f0000ccb000/0x2000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0x7}, {&(0x7f0000672000/0x3000)=nil, &(0x7f00004ed000/0x800000)=nil, 0x7fffffff}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x2}, {&(0x7f0000775000/0x3000)=nil, &(0x7f000068e000/0x12000)=nil, 0x8000000000000001}, {&(0x7f000005b000/0x2000)=nil, &(0x7f00005b7000/0xf000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil}, {&(0x7f00004f6000/0x4000)=nil, &(0x7f0000018000/0x1000)=nil, 0x20000002}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00006ed000/0x1000)=nil}, {&(0x7f0000e90000/0x2000)=nil, &(0x7f000069d000/0x4000)=nil, 0x800000002fe}, {&(0x7f000000e000/0x4000)=nil, &(0x7f000069c000/0x2000)=nil, 0x7fffffff}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil, 0x101}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00002f6000/0x3000)=nil, &(0x7f000010e000/0x1000)=nil, 0x8000000000000001}], './bus/file0\x00'}) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = socket(0x11, 0x4000, 0x0) syz_extract_tcp_res(&(0x7f0000000340), 0x6, 0xa) r1 = semget(0x0, 0x0, 0x4) semctl$GETALL(r1, 0x0, 0x6, &(0x7f0000000000)) pipe(&(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8000000000000000, 0xffffffffffffffff}) r2 = socket(0x18, 0x3, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r3 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) fcntl$lock(r3, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$lock(r4, 0x9, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x100000401}) sendto$unix(r0, &(0x7f0000000000)="b1000501600000041600000007000000087c156610c18125d7f96ecfc73fd3d89815a9c61d3952ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c500002012010000de5000000000000000000000000000000000000000000000000000001f00000000000000", 0xb1, 0x2, 0x0, 0xfffffffffffffe63) 522.568031ms ago: executing program 5 (id=395): r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x100, 0x8) r2 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r2) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x7ff, 0x417}, {0x3, 0x7}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r1, 0x0) writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) r3 = getpid() open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r3) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) setreuid(0xee00, 0x0) select(0x40, &(0x7f0000000040)={0x2, 0x81, 0x7, 0x8, 0xffffffffffffffa5, 0x5, 0x3, 0xaeb3}, &(0x7f0000000080)={0x1, 0x7, 0x0, 0x1, 0x6, 0x6, 0x0, 0x4}, &(0x7f00000000c0)={0x2, 0xac1e, 0x4, 0x89b7, 0x0, 0x7c, 0x85, 0x64}, &(0x7f0000000100)={0x0, 0x86c4}) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x100, 0x8) (async) getpid() (async) ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r2) (async) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x7ff, 0x417}, {0x3, 0x7}}, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r1, 0x0) (async) writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) (async) getpid() (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) setgroups(0x0, 0x0) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r3) (async) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) (async) setreuid(0xee00, 0x0) (async) select(0x40, &(0x7f0000000040)={0x2, 0x81, 0x7, 0x8, 0xffffffffffffffa5, 0x5, 0x3, 0xaeb3}, &(0x7f0000000080)={0x1, 0x7, 0x0, 0x1, 0x6, 0x6, 0x0, 0x4}, &(0x7f00000000c0)={0x2, 0xac1e, 0x4, 0x89b7, 0x0, 0x7c, 0x85, 0x64}, &(0x7f0000000100)={0x0, 0x86c4}) (async) 522.183162ms ago: executing program 5 (id=396): sysctl$kern(&(0x7f0000000040)={0xa, 0x41}, 0x2, 0x0, 0x0, 0x0, 0x0) 521.333927ms ago: executing program 2 (id=398): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000001c0)={0xf66a, 0xfffffffb, 0xcfd, 0x5fffff47, "9cdc4500307e8be5444d6b08fc5f6ce6015fdd04", 0x40000007, 0x5}) writev(r0, &(0x7f0000000300)=[{&(0x7f00000020c0)="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", 0x9ef}], 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6006250000082b000000000000d903c13ef05b862dadd7b8ff"]) sysctl$kern(&(0x7f0000000000)={0x1, 0x8}, 0x2, &(0x7f0000000200)="03945dbe0b0d4e7830d675a761e18831c1ac7d7d6de7d6142b7c73cba145681e1c031f6d7b390bb8383b72bdf098e5e4130b071f734281a3fcc200591be671091cfe28e1859a4d1c130d1ce5005ca8422d2a10d54736ebdb0f972d49ea8e4ec6642a276c6086f08a7728283fd9100b67d4716392d6b1634983a1caa22edb62c2b6dd35d6de4039b6bc65689d64a85f61287eedce4e2bd47f66d449c527618de788151f3e2a2d47d2568e9a825aad76516bef68e08ecd3bc49f1453c47c3d3a35977b508aba16b3d390a2b7a11309380f9b5432e45a031c01db68d2", &(0x7f0000000040)=0xdb, &(0x7f0000000080)="9e2567a0", 0x4) 516.231311ms ago: executing program 6 (id=399): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) r0 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x181) fchmodat(r0, &(0x7f0000000280)='\x00', 0x140, 0x6) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x3a) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x3, [{&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ec8000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000dad000/0x2000)=nil, 0x2}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2100000004}, {&(0x7f00009a6000/0x2000)=nil, &(0x7f000033e000/0x4000)=nil}, {&(0x7f00007c9000/0x1000)=nil, &(0x7f0000843000/0x1000)=nil, 0x6}, {&(0x7f000046c000/0x2000)=nil, &(0x7f0000f68000/0x2000)=nil, 0xfffe}, {&(0x7f0000a34000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x4}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000aff000/0x1000)=nil, 0xb8}, {&(0x7f000053f000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil, 0x2}, {&(0x7f0000400000/0xc00000)=nil, &(0x7f0000709000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x3c}, {&(0x7f0000bfd000/0x4000)=nil, &(0x7f0000ce8000/0x1000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fd8000/0x4000)=nil, 0x6}, {&(0x7f00000c6000/0x4000)=nil, &(0x7f0000c86000/0x3000)=nil}], './file0\x00', 0x6d}) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x16, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000180)="ac2740c6d63124acd7d21972817267b5ab7037a43a29d21f9ddfa7cc2a9c202dbc7765095d5315a53a318705639f0b1400049f29f71c31238df64bf6b32f43ac81f08132062d7621991e9cf881ad439e3be48e738487c5ed9d7b9a66b3f8042aa9c8e9d9d8c793192280a72a4bf7dbce4627f7a2c6202be2a701aa406abe3dc5bccc5ea46816de894a7bf9a77f6ff46ea6b3ef089e6cb6285da4c9450f2910c1018db944226ba44f67c1739caf839c53fbe112f28569ce977de80e4780c6b9b1e118", 0xc2, 0x5, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f0000000140)="53183374", 0xffffffba) unveil(0x0, &(0x7f0000000300)='r\x00') 383.226063ms ago: executing program 5 (id=401): select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x1, 0x0, 0x564, 0xffffffffffffffff, 0x8000000000000000, 0x0, 0x1}, 0x0, 0x0, 0x0) open(0x0, 0x80000000000206, 0x4ebfac6bbaf7864) acct(&(0x7f0000000080)='./file0\x00') sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="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", 0x111) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x1, 0x0, 0x564, 0xffffffffffffffff, 0x8000000000000000, 0x0, 0x1}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x2, 0xc001, 0x0) r0 = socket(0x1e, 0x3, 0x0) ioctl$FIONREAD(r0, 0x801169ac, &(0x7f00000001c0)) acct(&(0x7f0000000080)='./file0\x00') syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="ed", 0x1) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000780)=0xa) setuid(0xffffffffffffffff) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd6, 0x1b}, 0xf297, 0x3d3, 0x0, 0x0, 0x8000000000000000, 0x9, 0x3, 0x7f}) r3 = socket(0x800000018, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) recvmmsg(r2, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2842, 0x0) recvmmsg(r2, &(0x7f00000008c0)={0x0, 0xb}, 0x10, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x8) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r4 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0xfffffffe, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0xd, 0xfffffff9}, {0x8, 0x8000b86, 0xffffbf7d, 0x9}, {0x1002, 0x8800, 0x7}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0x6, 0xd8, 0x99}, {0xcdf, 0x1, 0x200004f8, 0x10}, {0x6, 0x80b, 0x14, 0xb}, {0x8, 0x82, 0x50, 0x9}, {0x4, 0x3, 0xd1b, 0x88}, {0x1e0, 0x10001, 0xc, 0x3}, {0x7ff, 0xf, 0x9, 0x5}, {0xb8c, 0xc3a, 0x6, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x7, 0x6, 0x5}, {0xfffffffd, 0x2000009, 0x40004, 0x30005}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) 382.866945ms ago: executing program 5 (id=402): setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1002, &(0x7f00000000c0)=0x72c, 0x4) (async) r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) (async) setuid(0xffffffffffffffff) (async) r1 = syz_open_pts() writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="9ef7a40691164964284b3db012012319ffa2484b928df6353a1ebc3578a9ffd790d3892a1428bd793806c3854cae1f637214125d4ac072c121631692c265b3d9af7810a46fecc8dd90e844de828c387565537d4686554dcdadcebc28c17e746a27081340aa8f8ce1a64f72c98bf70e35aca6e7a1c8e22425aae51e0bd6fdbc71d54ba355bf1e537e74278ce7c8d7f4e7088f941eb212dd7765738f75e4fc572db40103e15bf125dc47f99ce92b519e00aaf8ac042099cf26fb24e3", 0xbb}, {&(0x7f0000000100)="91d6902281c40449d2", 0x9}, {&(0x7f0000000300)="24254dfd93adfe0145d13feb8308b11242", 0x11}, {&(0x7f0000000340)="5e2ac9297f35747cdbd8d596478c5a88e26f9cb5f30bf911d48743b74d9aeda307eb8281181af616848f2232f09e0dc0495a126baeef8431505de03b606a8738766752f136c78b3adfd444bc25796de88245ac0ed9d5a26648d545858a34bb732ad70d20be30ba1d9f3dc3ea5cf465f0dc6f89721038e1ae1a40d9ed635589136d6cd63306ab8510f46ef1da4ef7b33e48faf9cf3bd9c16b15afca3e731ef9ef57ea0640", 0xa4}], 0x4) r2 = openat$pf(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TIOCSETA(r2, 0xc0014462, 0x0) setuid(0xee01) (async) acct(0x0) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0x24, &(0x7f00000001c0), 0x0) (async) r4 = socket(0x2, 0x3, 0x80) (async) r5 = socket(0x18, 0x3, 0x3a) setsockopt(r5, 0x1000000029, 0x1a, &(0x7f0000000000)='N\x00\x00\x00', 0x4) (async) sysctl$hw(&(0x7f0000000000)={0x6, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) setsockopt(r4, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000800, 0x10040000000001}}) setsockopt(r4, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x2, 0x8013ea, 0xfff6, 0x0, 0x9, 0x28, 0xc, 0x2, 0x0, 0xff, 0x4004000000000f15}) (async) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x8) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r6 = syz_open_pts() close(r6) (async) r7 = syz_open_pts() (async) r8 = socket(0x11, 0x8003, 0x0) getsockopt(r8, 0x11, 0x8, 0x0, 0x0) ioctl$TIOCSETA(r7, 0x802c7414, &(0x7f0000000000)={0x6134, 0x78, 0x9, 0x1fffff5f, "9cdc452efcc57f2f002f4c0000002f9a68cd3304", 0x400, 0x7}) (async) writev(r6, &(0x7f0000000140)=[{&(0x7f00000009c0)="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", 0x342}], 0x1) (async) sysctl$hw(&(0x7f0000000280)={0x6, 0x2}, 0x2, &(0x7f0000001a80)="d102d85c7400098feea2d5e6576263710ebb31c773c0a2f293f5e0e19860b3", &(0x7f00000002c0)=0x1f, &(0x7f0000000340), 0x0) 249.436028ms ago: executing program 3 (id=403): r0 = socket(0x18, 0x2, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xd, 0x8000003, 0x5, "001a3cfcf6c07c79eb000000e7ffffff000b00", 0x544, 0xc04}) r3 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x4ef, 0x5, 0x100000000, 0x0, 0x80000000, 0x8000002e, 0x0, 0x0, 0x2f01, 0x1, 0x3, 0xfffffffffffffffe, 0x1, 0x4, 0x4, 0xfffffffffffffff7, 0x100], [0x5, 0x5, 0xfffffffffffffff8, 0x3, 0x1, 0x80000000, 0x6, 0x0, 0x0, 0x47], [0x8, 0x2, 0xa64, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0xfffffffd, 0xfffffffe, 0xffc}, {0x1008, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0xfffffffd, 0xd, 0x1}, {0x7ffe, 0xd, 0x40007, 0x1}, {0xfffe, 0x0, 0x7}, {0x0, 0x95b, 0x200, 0xc}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x4, 0x2}}}) kevent(r3, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) close(r0) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0xfffffffffffffffe}], 0x0, 0x0, 0x0, 0x0) r4 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r5 = socket(0x18, 0x3, 0x0) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r5, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) writev(r0, &(0x7f0000000780)=[{0x0}], 0x1) r6 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r6, 0x80105727, &(0x7f00000001c0)={&(0x7f0000000000)=[{0x24, 0x6}, {0x6, 0xec3}], 0x2}) 246.590322ms ago: executing program 2 (id=404): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0xb55, 0x1, 0x10, [{0x0, 0x9, 0x0, 0x71002}, {0x2, 0x9, 0x8, 0xfffffff7}, {0xd, 0x9, 0x0, 0x9}, {0x1, 0x800, 0x8007, 0x7}, {0x401, 0x200727, 0x7, 0x7}, {0x1, 0x650, 0x3, 0x7}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0xfff, 0x7ff, 0x1, 0x8}, {0x2, 0x82, 0x8000005, 0x5}, {0x6a75, 0x8001, 0xa94, 0x4}, {0x1c8, 0x10001, 0x0, 0x3}, {0x8, 0xd5, 0x8, 0x8000002}, {0xb89, 0x555981a8, 0x8, 0x112b}, {0x29a71717, 0x8, 0xffffffff, 0x6}, {0xc, 0x2000005, 0x5, 0x848}, {0x0, 0x1, 0x80, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7, 0x8017, 0x7fffffff, 0xb31, 0x1, 0x81ac, 0x10011, 0x10, [{0x0, 0x0, 0x2, 0x71002}, {0x6, 0xc, 0x8, 0x7f}, {0x100, 0x9, 0x400, 0x4009}, {0x1, 0x5, 0x2}, {0x404, 0x1, 0x2800, 0x401}, {0x6, 0xfffffffd, 0x3, 0x3}, {0x2, 0x401, 0x4f7, 0x6c}, {0x6, 0x803, 0x10000014, 0x8}, {0x2, 0x7f, 0x5, 0x5}, {0x140, 0x8001, 0x6, 0x4}, {0x90, 0x7ffc, 0xc, 0x7f}, {0x2008, 0x9, 0x604, 0x2}, {0xb8c, 0x7, 0x8, 0xf}, {0x29a7171f, 0xfffffffa, 0x80000000, 0x80000001}, {0x7, 0x5, 0x9, 0x8}, {0x0, 0x3, 0xffff7fff, 0x88b0}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x2a) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r3, 0x0, 0x64, &(0x7f0000000040)="010008001367d11dc5cf9e6a35208aeaf48cdff66e5cfd13", 0x18) setsockopt$sock_linger(r3, 0xffff, 0x80, &(0x7f0000000000)={0x0, 0x5c}, 0x8) getsockopt(r3, 0x0, 0x6a, 0x0, 0x0) 246.281653ms ago: executing program 6 (id=405): setegid(0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) symlink(&(0x7f0000000280)='./bus\x00', 0x0) r0 = shmget$private(0x0, 0x2000, 0x10, &(0x7f000040e000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{0x52, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x16c, 0x9dcd}, 0xcc3, 0x6a07, 0x0, 0xffffffffffffffff, 0x2, 0xad4, 0x1}) setuid(0xffffffffffffffff) shmat(r0, &(0x7f00002b2000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f000036a000/0x4000)=nil, 0x3000) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000004c0)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x4}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x50, 0x0, 0x37) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pwritev(r1, 0x0, 0x0, 0x116a) r2 = socket$inet(0x2, 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) getpid() mprotect(&(0x7f000064e000/0x3000)=nil, 0x3000, 0x1) r3 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000380)=@abs={0x1, 0x0, 0x1}, 0x8) sendto$unix(r3, 0x0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x13, &(0x7f0000000080), 0x0) sysctl$net_mpls(&(0x7f0000002280)={0x4, 0x21, 0x3}, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x2, 0xc, 0x100000001}) ioctl$TIOCSETA(r1, 0xc0014462, &(0x7f0000000000)={0x2, 0x5, 0x81, 0xffefffff, "e4cf0bd176040016008000000100", 0x9, 0xb}) r4 = socket(0x1, 0x8000, 0x1) sendto$unix(r4, &(0x7f0000000040)="b1000516000000ae050007010700b1000008000000000500fef9e5e2ec5dd3357ae30200004e30ffecb92819f20bf404be01000000f7c8cf5f882b297de1aa050400ce9462f0ad3ebbc257e4411f139b672f335c22db830c032bfa896443c32118210000720fd38bfb21399ba0c125191b1257aea8c500001602fbfe0c2300000100be1f25a2e791505c47f8343712cc11fffffffffffffc00"/177, 0xb1, 0x0, 0x0, 0xfffffffffffffe48) acct(0x0) ioctl$BIOCGETIF(r1, 0x4020426b, &(0x7f00000001c0)={""/16, @ifru_addr=@un=@file={0x0, ""/247}}) ktrace(&(0x7f0000000140)='./bus\x00', 0x41ecf3848c59a689, 0x4000000c, 0x0) 245.6595ms ago: executing program 3 (id=406): setrlimit(0x8, &(0x7f0000000980)={0x8, 0x56}) r0 = syz_open_pts() close(r0) (async) syz_open_pts() (async) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f00000003c0)={0x40978b, 0x10001, 0x7, 0x800033, "3b08000100f167c99e3bb0c69d73230100040c00", 0x200, 0x81}) (async) write(0xffffffffffffffff, &(0x7f00000002c0)="7c84cf179279b50eda5dd1951a661d2e3a20851082c188f8b3d8a063d2025ff0d27a44bc29bdcac27fcb7aaa95cb2007be22c5553cd2f66a1f419a83d4275218a89d", 0x42) (async) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) (async) syz_open_pts() (async) syz_open_pts() (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = semget(0x0, 0x1, 0x281) (async) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$VMM_IOC_CREATE(r2, 0xc2585601, &(0x7f0000000400)={0x10, 0xfffffffffffffffe, [{&(0x7f0000ac6000/0x1000)=nil, &(0x7f00008c5000/0x1000)=nil, 0x5fa}, {&(0x7f0000084000/0x1000)=nil, &(0x7f00004d5000/0x1000)=nil, 0x100}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xe137}, {&(0x7f00005d5000/0x4000)=nil, &(0x7f00002ad000/0x1000)=nil, 0x5}, {&(0x7f0000561000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000114000/0x1000)=nil, &(0x7f000093e000/0x2000)=nil, 0x1}, {&(0x7f0000715000/0x2000)=nil, &(0x7f0000403000/0x3000)=nil, 0x1}, {&(0x7f00008b0000/0x4000)=nil, &(0x7f0000449000/0x2000)=nil}, {&(0x7f0000281000/0x1000)=nil, &(0x7f0000925000/0x3000)=nil, 0x9}, {&(0x7f00008b8000/0x1000)=nil, &(0x7f000062c000/0x4000)=nil, 0xf1}, {&(0x7f00002e9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x6}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00003ae000/0x2000)=nil, 0x8}, {&(0x7f0000791000/0x1000)=nil, &(0x7f00007d4000/0x2000)=nil, 0x5}, {&(0x7f0000a6b000/0x1000)=nil, &(0x7f000009a000/0x1000)=nil, 0xe77f}, {&(0x7f0000b49000/0x3000)=nil, &(0x7f0000a7e000/0x1000)=nil, 0x4}, {&(0x7f0000523000/0x400000)=nil, &(0x7f000027f000/0x2000)=nil, 0xfffffffffffffff9}], './file0\x00', 0xd9b}) (async) setgroups(0x0, 0x0) (async) setgid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3, 0x2812, r3, 0x0) (async) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2, 0x10, r3, 0x0) (async) semctl$SETALL(r1, 0x0, 0x9, &(0x7f00000000c0)) (async) ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000001c0)=0x1) 208.620057ms ago: executing program 3 (id=407): sysctl$hw(&(0x7f0000000600)={0x6, 0x8}, 0x2, &(0x7f00000005c0)="ae99445a020017cf86270971b6568eb5e6170000386b", &(0x7f0000000180)=0x16, &(0x7f00000008c0), 0x0) setitimer(0x1, &(0x7f0000000140)={{0x401, 0x8}, {0x0, 0xb}}, 0x0) r0 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0xaa, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) sysctl$hw(&(0x7f0000000000)={0x6, 0x14}, 0x2, &(0x7f0000000040)="49fed2709707fc22e497806b079353023f3755f5defff095eef67f1cc475395d2caa2972de1b4e938e974c99af888d00b2c33b9544b66cf6b19afc8e57560e6d4a1f738aed671b379383fb43171acb71b955f660c3199641a2e6c427a9c00ac6711e35a2fdf88365a0bda4c7b30d90803bf730", &(0x7f00000000c0)=0x73, &(0x7f0000000100)="c1b432d6b332f74c1939ba32a93372339ecf8da8a16161c1ef9ded121440f3b307413250c91e5ffe0d6d7a5b61d0f1e3fda2b408df3485a32c76cefe63062edbb46a3724e884695e0e79b1385949e64569ccec55aebf3e793c9024042d4e", 0x5e) 207.957841ms ago: executing program 6 (id=408): r0 = socket(0x11, 0x3, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x2}, 0x8) r1 = socket(0x11, 0x3, 0x0) sysctl$kern(&(0x7f0000000180)={0x1, 0x26}, 0x2, &(0x7f00000001c0)="ba89a865d4", &(0x7f0000000280)=0x5, &(0x7f0000000300), 0x0) (async) sendto$unix(r1, &(0x7f0000000140)="b10005016000009f0500070005000000331c13fecea10500fef96ecfc72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd38bfbb770c1f5a872c881ea6e2ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab71d89e0000407000000e011200000", 0xb1, 0x0, 0x0, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b40)="8215c9ec3d1e6ed7eda0f59047bf65b18d7c51f78b06ccff666914ee000000009dd52840fafd3493857d65d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x8}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$TIOCSETA(r2, 0xc4504443, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "9706004ff1c14649eb0700000100040a0047c1d1", 0x0, 0x9}) clock_settime(0x100000000000000, &(0x7f0000001400)={0xe4bec882, 0x9}) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}}, 0x3, 0x0, 0x0) kevent(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, &(0x7f0000000240)={0x80000000, 0x2}) (async) r3 = socket(0x2, 0x2, 0x0) (async) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) (async) r5 = dup2(r4, r3) r6 = socket$inet(0x2, 0x1, 0x0) dup2(r5, r6) setsockopt$inet_opts(r6, 0x0, 0x200000000000a, &(0x7f0000000000), 0x0) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x1, [{0x1, 0x7ff}, {0x2, 0x3}, {0x1, 0x7fff}, {0x1, 0xd}, {0x3}, {0x0, 0x9}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x9}, {0x3, 0x6000000}, {0x3, 0x2}, {0x3, 0x4}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x8}, {0x3, 0x8}, {0x1, 0xfffffffd}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x800}, {0x3}, {0x1}, {0x2, 0xfffffffd}, {0x3, 0x10001}, {0x3, 0x8001}, {0x0, 0x40}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r7, &(0x7f0000000480)=""/225, 0xe1, 0x840, &(0x7f0000000580)=@abs={0x0, 0x0, 0x3}, 0x8) (async) open(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x100) (async) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) sendmmsg(r7, &(0x7f0000000080)={0x0}, 0x6a, 0x0) 207.638049ms ago: executing program 3 (id=409): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2, 0x7ff}, {}, {0x3, 0x7fff}, {0x1, 0xd}, {}, {0x0, 0x9}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x10000000}, {0x0, 0x6}, {0x3, 0x2}, {0x3}, {0x0, 0x20}, {0x0, 0x5}, {0x0, 0x1}, {0x1, 0x7}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x800}, {0x3}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x2, 0x8001}, {0x0, 0x40}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) 196.169763ms ago: executing program 6 (id=410): r0 = kqueue() kevent(r0, &(0x7f0000000000)=[{{r0}, 0xfffffffffffffffa, 0x23, 0x20000008, 0x3c, 0x9}, {{r0}, 0xfffffffffffffffc, 0xe4, 0x40000000, 0x9, 0xffffffffffffffff}], 0x1, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffff9, 0x1, 0x1, 0x0, 0xb0}], 0x5, 0x0) kevent(r0, &(0x7f0000000180)=[{{r0}, 0xfffffffffffffffa, 0x96, 0x2, 0x6, 0x8}, {{r0}, 0xffffffffffffffff, 0x1, 0x80, 0x9, 0x6}], 0x2, &(0x7f0000000240), 0x2, &(0x7f0000000080)={0x1, 0xf}) r1 = open(0x0, 0x615, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r2 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f0000000200)=0xb4e2) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r2}) close(r2) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1) r4 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r4, 0xc0206921, &(0x7f00000001c0)) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r6 = fcntl$dupfd(r5, 0x3, 0xffffffffffffffff) r7 = dup2(r6, r5) ioctl$FIONREAD(r7, 0xc0206921, &(0x7f00000001c0)) r8 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r8, 0xc0206921, &(0x7f00000001c0)) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) 195.483259ms ago: executing program 0 (id=411): open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0x319}], 0x1, 0x0, 0x4a0}, 0xee1918aaadf8bcd6) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0xa}, 0x10, 0x1, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0xa}, 0x10, 0x1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x6, &(0x7f0000000580), 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x80) select(0x40, &(0x7f0000000180)={0xfffffffffffffffe, 0x44809e9a, 0xfd8d, 0x1, 0x2000000000000000, 0x181c, 0x4, 0x9}, 0x0, 0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x8) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, 0x0) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, 0x0) 194.563946ms ago: executing program 3 (id=412): r0 = socket(0x11, 0x3, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x80010001, 0x10, [{0x0, 0x7, 0x40000004, 0x71002}, {0x6, 0xa, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x2, 0x8007}, {0x401, 0x6fb, 0x2800, 0x7}, {0x1, 0x650, 0xfffffffe, 0x99}, {0xce1, 0x0, 0x4f8, 0x6d}, {0x6, 0x7, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0xd17, 0x4}, {0x1cc, 0x10001, 0xc, 0x5}, {0x8, 0x9, 0x8, 0x7}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000000)) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x54}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendto$unix(r0, &(0x7f00000000c0)="b1000503000004000500000007000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be3816499104000000882b297be1aa0500000051e2f0ad09000000000000009b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba3500000008e371a3f8343712051eeab71d1889e000"/177, 0xb1, 0x0, 0x0, 0xffffff61) socket(0x11, 0x3, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x80010001, 0x10, [{0x0, 0x7, 0x40000004, 0x71002}, {0x6, 0xa, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x2, 0x8007}, {0x401, 0x6fb, 0x2800, 0x7}, {0x1, 0x650, 0xfffffffe, 0x99}, {0xce1, 0x0, 0x4f8, 0x6d}, {0x6, 0x7, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0xd17, 0x4}, {0x1cc, 0x10001, 0xc, 0x5}, {0x8, 0x9, 0x8, 0x7}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000000)) (async) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x54}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) sendto$unix(r0, &(0x7f00000000c0)="b1000503000004000500000007000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be3816499104000000882b297be1aa0500000051e2f0ad09000000000000009b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba3500000008e371a3f8343712051eeab71d1889e000"/177, 0xb1, 0x0, 0x0, 0xffffff61) (async) 30.974831ms ago: executing program 0 (id=413): setuid(0xffffffffffffffff) (async) r0 = shmget$private(0x0, 0x1000, 0x26d, &(0x7f000007e000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x6000, 0x1194) (async) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 11.640463ms ago: executing program 0 (id=414): pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$VT_WAITACTIVE(r0, 0x20007606, &(0x7f0000000080)=0xff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) (async) close(r2) r3 = socket(0x2, 0x2, 0x0) bind(r3, &(0x7f0000000000), 0x10) connect$unix(r3, &(0x7f0000000000), 0x10) (async) connect$unix(r3, &(0x7f0000000000), 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) syz_open_pts() (async) r4 = syz_open_pts() close(r4) syz_open_pts() (async) r5 = syz_open_pts() ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000100)={0x6009789, 0xfffffff7, 0xfffffff8, 0x82a19f, "bb081aab003721e7beae04c48d895f99ccf200", 0x5, 0x8}) socket(0x18, 0x2, 0x0) writev(r4, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) ioctl$TIOCSETAW(r4, 0x802c7415, &(0x7f0000000000)={0x8, 0x100d828, 0x407, 0xffffff7e, "16a236a700000000e879457c00438c0f00", 0x8002, 0x7f}) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xfffffffffffffffb, 0x1, 0x8000000000006, 0x181f, 0x7, 0xfff}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xfffffffffffffffb, 0x1, 0x8000000000006, 0x181f, 0x7, 0xfff}, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x49, 0x840, 0x0, 0x0) getppid() (async) r6 = getppid() msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x140, 0x100}, 0x0, 0x0, r6, 0x0, 0x1}) ioctl$WSKBDIO_GETMAP(r0, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) (async) ioctl$WSKBDIO_GETMAP(r0, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) fcntl$setown(r0, 0x6, r6) syz_emit_ethernet(0x5a, &(0x7f0000000280)={@broadcast, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x4c, 0x1, 0x2000, 0x4, 0x0, 0x0, @rand_addr, @remote={0xac, 0x14, 0x0}, {[@rr={0x7, 0xb, 0xb7, [@remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}]}, @noop]}}, @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x7, 0x0, 0xf3}, {"1dcb75f94188532b148ce9b9ef8fc615fa65005f071b1fbc"}}}}}}) 10.054079ms ago: executing program 2 (id=415): mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200) r0 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000001180)) setsockopt(0xffffffffffffffff, 0x1000000029, 0x31, &(0x7f0000000000)="eb8430", 0x3) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000000}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x4001, 0x0) r2 = fcntl$dupfd(r1, 0x2, r1) close(r2) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) r4 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r6 = getppid() msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x1, 0xfffa, r6, r6, 0x0, 0x1}) pipe(&(0x7f0000000400)={0xffffffffffffffff}) fcntl$setown(r7, 0x6, r6) ioctl$WSKBDIO_GETMAP(r7, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) ioctl$WSMUXIO_ADD_DEVICE(r5, 0x80085761, &(0x7f0000000080)={0x1, 0xffffffff}) r8 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r8, 0x6e}], 0x1, 0x0) r9 = socket(0x18, 0x1, 0x0) listen(r9, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x1fffffff, 0x5e, 0x7b98, 0x80000000000001fe], [0x100000001, 0x8000, 0x40000000, 0xfffffffffffffffd, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d06}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x7, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x6}}}) setrlimit(0x8, &(0x7f0000000180)={0xa, 0x8000}) r10 = syz_open_pts() close(r10) syz_open_pts() 9.640301ms ago: executing program 3 (id=416): recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}}, 0x3, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0x3205, 0x44809e9a, 0x7fffffffffffffff, 0xe, 0x2000000000000000, 0x181c, 0xdc, 0x6}, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) ioctl$BIOCSRTIMEOUT(r2, 0xc0307006, &(0x7f0000000080)={0x10000000001, 0x10}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket(0x18, 0x1, 0x0) (async) r4 = socket(0x18, 0x1, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1006, 0x0, 0x0) readv(r1, &(0x7f0000000bc0)=[{&(0x7f00000005c0)=""/145, 0x91}, {&(0x7f0000000700)=""/246, 0xf6}, {&(0x7f0000000800)=""/221, 0xdd}, {&(0x7f0000000900)=""/197, 0xc5}, {&(0x7f0000000ac0)=""/227, 0xe3}, {&(0x7f0000000a00)=""/98, 0x62}], 0x6) (async) readv(r1, &(0x7f0000000bc0)=[{&(0x7f00000005c0)=""/145, 0x91}, {&(0x7f0000000700)=""/246, 0xf6}, {&(0x7f0000000800)=""/221, 0xdd}, {&(0x7f0000000900)=""/197, 0xc5}, {&(0x7f0000000ac0)=""/227, 0xe3}, {&(0x7f0000000a00)=""/98, 0x62}], 0x6) setsockopt(r4, 0x1000000000029, 0xb, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) getsockopt(r4, 0x29, 0xa, 0x0, 0x0) (async) getsockopt(r4, 0x29, 0xa, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket(0x2, 0x3, 0x3) (async) r6 = socket(0x2, 0x3, 0x3) sysctl$ddb(&(0x7f00000003c0)={0x9, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$ddb(&(0x7f00000003c0)={0x9, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$lock(r7, 0x9, &(0x7f00000003c0)={0x1, 0x0, 0x7fffffffffffffff, 0x1ffffffff}) setsockopt$inet_opts(r6, 0x0, 0x200000000000a, &(0x7f00000000c0)="b5", 0x1) (async) setsockopt$inet_opts(r6, 0x0, 0x200000000000a, &(0x7f00000000c0)="b5", 0x1) connect$unix(r6, &(0x7f0000000000), 0x10) writev(r6, &(0x7f0000000a80)=[{0x0}], 0x1) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/248, 0xf8}], 0x1, 0x0}, 0x1002) (async) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/248, 0xf8}], 0x1, 0x0}, 0x1002) 1.143874ms ago: executing program 2 (id=417): chdir(&(0x7f0000000040)='./file0/file0/../../file0\x00') sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaab2aaaa450080fc00ffff040000009b1af16b6b0bc6bcdbd541f1444cf9cf631d2bee1db32a91f33105002f8f435699fc9612c17a40fa5570272b1bd315b76a8076ec02f03682064afdb9a43d69508655c1940c4dbb6ba97b0c50b9f9c330d4268678a8de90c4e98e5ce3be3ce4e45b5b12d4a8c8865a1f39ba8380a59c"]) chdir(&(0x7f0000000040)='./file0/file0/../../file0\x00') (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaab2aaaa450080fc00ffff040000009b1af16b6b0bc6bcdbd541f1444cf9cf631d2bee1db32a91f33105002f8f435699fc9612c17a40fa5570272b1bd315b76a8076ec02f03682064afdb9a43d69508655c1940c4dbb6ba97b0c50b9f9c330d4268678a8de90c4e98e5ce3be3ce4e45b5b12d4a8c8865a1f39ba8380a59c"]) (async) 0s ago: executing program 0 (id=418): pipe(&(0x7f00000001c0)) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) open(&(0x7f0000000200)='./file0\x00', 0x80, 0x3) (async) open(&(0x7f0000000200)='./file0\x00', 0x80, 0x3) ktrace(&(0x7f00000000c0)='./file0\x00', 0x4, 0x116, 0x0) (async) ktrace(&(0x7f00000000c0)='./file0\x00', 0x4, 0x116, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x3, 0x7, 0x5, 0x7f}, {0x84, 0x81, 0xc, 0x9}, {0x816, 0x8, 0x14, 0x180}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="7bcb42008037c3faadf9efff587d3d72d1c876915474aa5bdb2f9708950205b7ffffff00000000000080c40900775b493512d8e131fdb48cfc35500baba053c14d9eb4f8c81981aa69ff6e70491e60729e58041e6527fc9ea4b731c2a60b26bdaa8a4793818b0508060c0aa1aa83ba0079f8be4426fd48af6788413137095c314c5566f2000000", &(0x7f0000000080)=0x87, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100100086dd60000100008036ff780420000000140000010000000800000186009078047f07006de4af901100c50000ff010000da1628e0b2a8fe06896076ec3c044d027a9ebe29e95a127e1bf5e7ab5eec92412cf2543a"]) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0x401, 0x3, 0x1ffffffffffffffc, 0x181c, 0x8, 0x10000000009}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0x401, 0x3, 0x1ffffffffffffffc, 0x181c, 0x8, 0x10000000009}, 0x0, 0x0, 0x0) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x2}, 0x4, &(0x7f0000000180), 0x0, 0x0, 0x0) kqueue() (async) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20, 0x62) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(r3, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x103, 0x138, 0x8000, 0x1, 0x912, 0x8, 0x8000003a, 0x2, 0x0, 0xfffffffffffffe, 0x3}) r4 = open$dir(&(0x7f0000000300)='.\x00', 0x8, 0x4a) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) (async) setgroups(0x0, 0x0) fchmod(r4, 0xf3) setuid(0xffffffffffffffff) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='c\x00') (async) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='c\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx1, error=17 panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/main/kernel/sys/kern/kern_synch.c", line 953 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND db_enter() at db_enter+0x25 panic(ffffffff83339f31) at panic+0x1cf __assert(ffffffff83377c99,ffffffff833d3431,3b9,ffffffff833aca2e) at __assert+0x29 refcnt_finalize(ffff800031d2f0b0,ffffffff8332f88d) at refcnt_finalize+0x1c8 pppx_if_destroy(205b9a,ffff800031d2f0a8) at pppx_if_destroy+0x3d pppxclose(205b9a,1,2000,ffff80002a80b4f0) at pppxclose+0xa0 spec_close(ffff80003a952c80) at spec_close+0x417 VOP_CLOSE(fffffd806a1f0c10,1,fffffd8007bfb478,ffff80002a80b4f0) at VOP_CLOSE+0x129 vn_closefile(fffffd80698a44c8,ffff80002a80b4f0) at vn_closefile+0x11d fdrop(fffffd80698a44c8,ffff80002a80b4f0) at fdrop+0x121 closef(fffffd80698a44c8,ffff80002a80b4f0) at closef+0x190 fdfree(ffff80002a80b4f0) at fdfree+0x115 exit1(ffff80002a80b4f0,b,0,1) at exit1+0x576 sys_exit(ffff80002a80b4f0,ffff80003a952fe0,ffff80003a952f30) at sys_exit+0x1a end trace frame: 0xffff80003a952fd0, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/main/kernel/sys/kern/kern_synch.c", line 953 ddb> trace db_enter() at db_enter+0x25 panic(ffffffff83339f31) at panic+0x1cf __assert(ffffffff83377c99,ffffffff833d3431,3b9,ffffffff833aca2e) at __assert+0x29 refcnt_finalize(ffff800031d2f0b0,ffffffff8332f88d) at refcnt_finalize+0x1c8 pppx_if_destroy(205b9a,ffff800031d2f0a8) at pppx_if_destroy+0x3d pppxclose(205b9a,1,2000,ffff80002a80b4f0) at pppxclose+0xa0 spec_close(ffff80003a952c80) at spec_close+0x417 VOP_CLOSE(fffffd806a1f0c10,1,fffffd8007bfb478,ffff80002a80b4f0) at VOP_CLOSE+0x129 vn_closefile(fffffd80698a44c8,ffff80002a80b4f0) at vn_closefile+0x11d fdrop(fffffd80698a44c8,ffff80002a80b4f0) at fdrop+0x121 closef(fffffd80698a44c8,ffff80002a80b4f0) at closef+0x190 fdfree(ffff80002a80b4f0) at fdfree+0x115 exit1(ffff80002a80b4f0,b,0,1) at exit1+0x576 sys_exit(ffff80002a80b4f0,ffff80003a952fe0,ffff80003a952f30) at sys_exit+0x1a syscall(ffff80003a952fe0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x77e578bcca90, count: -16 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80003a952a60 rbx 0 rdx 0 rcx 0 rax 0xffff80002a80b4f0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xff71635b5ef4b1cd r11 0x9a80a879c2b918ec r12 0 r13 0 r14 0 r15 0x1 rip 0xffffffff81e889d5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003a952a50 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=368514 pid=11856 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80002a80b4f0 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff800031d2ba30,0xffff800031d2a818 process=0xffff8000ffff31a8 user=0xffff80003a94e000, vmspace=0xfffffd806ba55a20 estcpu=36, cpticks=8, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 31760 442113 19927 0 2 0 syz-executor 31760 184569 19927 0 3 0x4000000 smrbar syz-executor 31760 150630 19927 0 3 0x4000080 fsleep syz-executor 55431 243156 59368 -1 2 0xc90 syz-executor 55431 8677 59368 -1 3 0x4000090 fsleep syz-executor 55431 48260 59368 -1 3 0x4000090 fsleep syz-executor 55431 475225 59368 -1 3 0x4000090 fsleep syz-executor 45109 68990 2782 0 3 0x80 nanoslp syz-executor 45109 266957 2782 0 3 0x4000080 kqread syz-executor 45109 250207 2782 0 3 0x4000080 kqread syz-executor 45109 202741 2782 0 3 0x4000080 fsleep syz-executor 45109 119178 2782 0 3 0x4000080 fsleep syz-executor 69142 235596 72873 0 2 0xc80 syz-executor 69142 167418 72873 0 3 0x4000080 kqread syz-executor 69142 52469 72873 0 3 0x4000080 fsleep syz-executor 55725 271197 24913 0 2 0xc82 syz-executor 90152 35851 0 0 3 0x14280 nfsidl nfsio 60528 109478 0 0 3 0x14280 nfsidl nfsio 49881 462829 0 0 3 0x14280 nfsidl nfsio 68746 220413 0 0 3 0x14280 nfsidl nfsio 74044 494105 0 0 3 0x14280 nfsidl nfsio 98352 8602 0 0 3 0x14280 nfsidl nfsio 80385 508771 0 0 3 0x14280 nfsidl nfsio 92997 272106 0 0 3 0x14280 nfsidl nfsio 95327 475706 0 0 3 0x14280 nfsidl nfsio 90261 132818 0 0 3 0x14280 nfsidl nfsio 75785 397139 0 0 3 0x14280 nfsidl nfsio 78357 153168 0 0 3 0x14280 nfsidl nfsio 72059 339375 0 0 3 0x14280 nfsidl nfsio 73275 164012 0 0 3 0x14280 nfsidl nfsio 72515 319527 0 0 3 0x14280 nfsidl nfsio 19393 371940 0 0 3 0x14280 nfsidl nfsio 2721 96728 0 0 3 0x14280 nfsidl nfsio 86809 79169 0 0 3 0x14280 nfsidl nfsio 3600 37280 0 0 3 0x14280 nfsidl nfsio 13409 106708 0 0 3 0x14280 nfsidl nfsio 24193 439625 0 0 3 0x14200 bored sosplice 72873 118922 24913 0 2 0xc82 syz-executor 2782 10718 24913 0 2 0xc82 syz-executor 40723 24873 24913 0 3 0x82 wait syz-executor 42287 304250 24913 0 2 0xc82 syz-executor 19927 446606 24913 0 2 0xc82 syz-executor 21825 278825 24913 0 3 0x82 wait syz-executor 59368 423072 24913 0 2 0xc82 syz-executor 24913 321240 2892 0 3 0x82 kqread syz-executor 2892 176304 59886 0 3 0x10008a sigsusp ksh 59886 118540 65515 0 3 0x98 kqread sshd-session 65515 267185 77966 0 3 0x92 kqread sshd-session 8942 102960 1 0 3 0x100083 ttyin getty 77966 264054 1 0 3 0x88 kqread sshd 52491 80003 84509 73 3 0x1100090 kqread syslogd 84509 348098 1 0 3 0x100082 sbwait syslogd 7939 24409 1 0 3 0x100080 kqread resolvd 51865 252208 9687 77 3 0x100092 kqread dhcpleased 83953 356263 9687 77 3 0x100092 kqread dhcpleased 9687 312922 1 0 3 0x80 kqread dhcpleased 60778 136762 0 0 3 0x14200 bored smr 69646 277762 0 0 2 0x14200 zerothread 48515 335238 0 0 3 0x14200 aiodoned aiodoned 30993 209468 0 0 3 0x14200 syncer update 43191 172083 0 0 3 0x14200 cleaner cleaner 65156 331748 0 0 3 0x14200 reaper reaper 47110 27150 0 0 3 0x14200 pgdaemon pagedaemon 27140 29772 0 0 3 0x14200 bored viomb 83143 150228 0 0 3 0x40014200 acpi0 acpi0 71351 409826 0 0 3 0x14200 bored softnet7 47146 126618 0 0 3 0x14200 bored softnet6 17582 79614 0 0 3 0x14200 bored softnet5 58154 359625 0 0 3 0x14200 bored softnet4 35959 246573 0 0 3 0x14200 bored softnet3 71536 294683 0 0 3 0x14200 bored softnet2 81573 389697 0 0 3 0x14200 bored softnet1 13424 305791 0 0 3 0x14200 bored softnet0 4673 171230 0 0 3 0x14200 bored systqmp 78795 489752 0 0 3 0x14200 bored systq 79264 471914 0 0 2 0x40014200 softclock 72889 20875 0 0 3 0x40014200 idle0 1 413577 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10197 11060K 11285K 166960K 12153 0 pcb 19 14K 16K 166960K 234 0 rtable 197 6K 7K 166960K 357 0 pf 41 15K 131087K 166960K 86 0 ifaddr 45 7K 8K 166960K 80 0 ifgroup 61 2K 2K 166960K 121 0 sysctl 3 1K 9K 166960K 14 0 counters 37 18K 18K 166960K 63 0 ioctlops 0 0K 4K 166960K 228 0 iov 0 0K 16K 166960K 98 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1408 89K 89K 166960K 2023 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 7 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 19 0 dirhash 12 2K 2K 166960K 24 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 97K 166960K 567 0 sigio 0 0K 0K 166960K 9 0 proc 60 59K 124K 166960K 526 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 3 0K 0K 166960K 40 0 in_multi 90 6K 7K 166960K 130 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 91 413K 413K 166960K 91 0 exec 0 0K 1K 166960K 388 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 261 144K 158K 166960K 6630 0 UVM aobj 79 3K 3K 166960K 80 0 pinsyscall 39 78K 96K 166960K 1620 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 33 0 NDP 14 0K 1K 166960K 49 0 temp 55 8638K 8716K 166960K 20557 0 kqueue 19 30K 32K 166960K 98 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 71 0 68 1 0 1 1 0 8 0 rtentry 136 127 0 41 4 0 4 4 0 8 0 unpcb 144 458 0 435 6 0 6 6 0 8 5 syncache 336 5 0 5 2 1 1 1 0 8 1 tcpcb 736 156 0 149 5 0 5 5 0 8 4 arp 88 15 0 2 1 0 1 1 0 8 0 ipq 40 1 0 0 1 0 1 1 0 8 0 ipqe 40 2 0 1 1 0 1 1 0 8 0 inpcb 328 669 0 651 8 1 7 7 0 8 5 ip6q 72 7 0 2 1 0 1 1 0 8 0 ip6af 40 10 0 4 1 0 1 1 0 8 0 nd6 104 21 0 6 1 0 1 1 0 8 0 pkpcb 40 4 0 4 2 1 1 1 0 8 1 kcovpl 48 9 0 1 1 0 1 1 0 8 0 ppxss 1072 19 0 16 1 0 1 1 0 8 0 pppxif 1384 10 0 8 1 0 1 1 0 8 0 pfstscr 40 1 0 1 1 0 1 1 0 8 1 pfstitem 24 5 0 0 1 0 1 1 0 8 0 pfstkey 128 74 0 70 1 0 1 1 0 8 0 pfstate 384 38 0 35 1 0 1 1 0 8 0 pfrule 1344 1 0 1 1 1 0 1 0 8 0 rttmr 136 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 589 0 185 30 0 30 30 0 8 4 art_table 40 591 0 185 5 0 5 5 0 8 0 art_node 32 127 0 51 1 0 1 1 0 8 0 sysvmsgpl 40 48 0 44 1 0 1 1 0 8 0 semapl 112 17 0 7 1 0 1 1 0 8 0 shmpl 112 77 0 1 3 0 3 3 0 8 0 dirhash 1024 25 0 8 3 0 3 3 0 8 0 dino2pl 256 2555 0 1053 95 0 95 95 0 8 0 ffsino 256 2555 0 1053 95 0 95 95 0 8 0 nchpl 144 3295 0 1607 63 0 63 63 0 8 0 uvmvnodes 80 2970 0 0 61 0 61 61 0 8 0 vnodes 216 2970 0 0 165 0 165 165 0 8 0 namei 1024 10671 0 10671 2 1 1 2 0 8 1 kstatmem 264 62 0 34 2 0 2 2 0 8 0 scsiplug 72 3 0 3 1 0 1 1 0 8 1 scxspl 216 13916 0 13916 15 7 8 8 1 8 8 plimitpl 152 142 0 124 1 0 1 1 0 8 0 sigapl 424 869 0 798 9 0 9 9 0 8 0 knotepl 120 34880 0 34595 17 7 10 10 0 8 1 kqueuepl 184 162 0 143 1 0 1 1 0 8 0 pipepl 304 147 0 119 3 0 3 3 0 8 0 fdescpl 448 827 0 797 5 0 5 5 0 8 1 filepl 120 5125 0 4882 12 0 12 12 0 8 4 lockfpl 104 261 0 259 1 0 1 1 0 8 0 lockfspl 48 121 0 119 1 0 1 1 0 8 0 sessionpl 144 23 0 15 1 0 1 1 0 8 0 pgrppl 48 38 0 22 1 0 1 1 0 8 0 ucredpl 104 1110 0 1096 1 0 1 1 0 8 0 zombiepl 144 802 0 798 1 0 1 1 0 8 0 processpl 1152 869 0 798 6 0 6 6 0 8 0 procpl 664 1574 0 1492 9 1 8 8 0 8 0 sosppl 168 8 0 8 1 0 1 1 0 8 1 sockpl 552 1214 0 1170 13 3 10 12 0 8 6 mcl64k 65536 107 0 107 2 1 1 1 0 8 1 mcl9k 9216 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 6 0 6 2 1 1 1 0 8 1 mcl4k 4096 2996 0 2944 13 5 8 13 0 8 1 mcl2k 2048 859 0 847 4 0 4 4 0 8 1 mtagpl 96 8 0 4 2 1 1 1 0 8 0 mbufpl 256 8935 0 8728 23 0 23 23 0 8 4 bufpl 280 6153 0 129 431 0 431 431 0 8 0 anonpl 24 144261 0 140440 47 3 44 44 0 187 16 amapchunkpl 152 21562 0 20959 31 0 31 31 0 158 7 amappl16 200 2393 0 2359 21 11 10 14 0 8 7 amappl15 192 5 0 5 1 1 0 1 0 8 0 amappl14 184 106 0 96 1 0 1 1 0 8 0 amappl13 176 23 0 23 1 1 0 1 0 8 0 amappl12 168 1455 0 1425 3 1 2 3 0 8 0 amappl11 160 43 0 33 1 0 1 1 0 8 0 amappl10 152 26 0 26 1 1 0 1 0 8 0 amappl9 144 252 0 252 1 1 0 1 0 8 0 amappl8 136 33 0 31 1 0 1 1 0 8 0 amappl7 128 100 0 89 1 0 1 1 0 8 0 amappl6 120 181 0 178 1 0 1 1 0 8 0 amappl5 112 119 0 112 1 0 1 1 0 8 0 amappl4 104 276 0 259 1 0 1 1 0 8 0 amappl3 96 4043 0 3918 4 0 4 4 0 8 0 amappl2 88 631 0 575 2 0 2 2 0 8 0 amappl1 80 9940 0 9388 13 0 13 13 0 8 1 amappl 88 5898 0 5700 5 0 5 5 0 92 0 dma32768 32768 1 0 1 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 1 0 1 1 0 1 1 0 8 1 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 79 0 1 2 0 2 2 0 8 0 uaddrrnd 24 827 0 797 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 827 0 797 1 0 1 1 0 8 0 vmmpekpl 168 7881 0 7841 2 0 2 2 0 8 0 vmmpepl 168 57279 0 55335 92 0 92 92 0 357 7 vmsppl 368 826 0 797 4 0 4 4 0 8 1 rwobjpl 40 20173 0 16226 40 0 40 40 0 8 0 pdppl 4096 1660 0 1594 108 40 68 82 0 8 2 pvpl 32 373859 0 364507 122 0 122 122 0 265 33 pmappl 216 826 0 797 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 400 0 51 10 0 10 10 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff83339f31) at panic+0x1cf __assert(ffffffff83377c99,ffffffff833d3431,3b9,ffffffff833aca2e) at __assert+0x29 refcnt_finalize(ffff800031d2f0b0,ffffffff8332f88d) at refcnt_finalize+0x1c8 pppx_if_destroy(205b9a,ffff800031d2f0a8) at pppx_if_destroy+0x3d pppxclose(205b9a,1,2000,ffff80002a80b4f0) at pppxclose+0xa0 spec_close(ffff80003a952c80) at spec_close+0x417 VOP_CLOSE(fffffd806a1f0c10,1,fffffd8007bfb478,ffff80002a80b4f0) at VOP_CLOSE+0x129 vn_closefile(fffffd80698a44c8,ffff80002a80b4f0) at vn_closefile+0x11d fdrop(fffffd80698a44c8,ffff80002a80b4f0) at fdrop+0x121 closef(fffffd80698a44c8,ffff80002a80b4f0) at closef+0x190 fdfree(ffff80002a80b4f0) at fdfree+0x115 exit1(ffff80002a80b4f0,b,0,1) at exit1+0x576 sys_exit(ffff80002a80b4f0,ffff80003a952fe0,ffff80003a952f30) at sys_exit+0x1a syscall(ffff80003a952fe0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x77e578bcca90, count: -16 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff83339f31) at panic+0x1cf __assert(ffffffff83377c99,ffffffff833d3431,3b9,ffffffff833aca2e) at __assert+0x29 refcnt_finalize(ffff800031d2f0b0,ffffffff8332f88d) at refcnt_finalize+0x1c8 pppx_if_destroy(205b9a,ffff800031d2f0a8) at pppx_if_destroy+0x3d pppxclose(205b9a,1,2000,ffff80002a80b4f0) at pppxclose+0xa0 spec_close(ffff80003a952c80) at spec_close+0x417 VOP_CLOSE(fffffd806a1f0c10,1,fffffd8007bfb478,ffff80002a80b4f0) at VOP_CLOSE+0x129 vn_closefile(fffffd80698a44c8,ffff80002a80b4f0) at vn_closefile+0x11d fdrop(fffffd80698a44c8,ffff80002a80b4f0) at fdrop+0x121 closef(fffffd80698a44c8,ffff80002a80b4f0) at closef+0x190 fdfree(ffff80002a80b4f0) at fdfree+0x115 exit1(ffff80002a80b4f0,b,0,1) at exit1+0x576 sys_exit(ffff80002a80b4f0,ffff80003a952fe0,ffff80003a952f30) at sys_exit+0x1a syscall(ffff80003a952fe0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x77e578bcca90, count: -16