last executing test programs: 1.954465978s ago: executing program 2 (id=1540): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x8000, [{0x3, 0x7}, {0x3}, {0x6, 0xf0000000}, {}, {0x2}, {0x3}, {0x0, 0xaa59}, {0x3, 0xb3d0}, {0x1, 0xffffffff}, {0x3, 0x8}, {0x1, 0x1}, {0x0, 0x5}, {0x2}, {0x2}, {0x0, 0x6}, {0x3, 0xffffffff}, {0x2, 0x1}, {0x3}, {0x3, 0xfffffffe}, {0x0, 0x7ff}, {0xbb08c0840fa32129, 0x6}, {0x0, 0x1}, {0x2}, {0x0, 0xf208}, {0x2, 0xfffffffe}, {0x1, 0x1}, {0x0, 0x1ff}, {0x0, 0x200}, {0x2, 0xffffffff}, {0x0, 0x9}, {0x1, 0x4}, {0x3, 0x9f3}]}) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240), 0x0, 0x0, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000280)={0x1, 0xf}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) r1 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r1, 0x8, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x369000000}) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x2, 0x101) r3 = open(&(0x7f0000000300)='./file0\x00', 0x40, 0x100) dup2(r3, r2) close(r3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write(r1, &(0x7f00000002c0)="93ca891a795e5550ad85fa08916107996ba2e163580ab36d7f467c580bddd4dbe9b655dea9efdf9cc4e9bcfbc714cb86ce01", 0x32) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) 1.813998558s ago: executing program 2 (id=1547): r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x400000000002, 0x0) setsockopt(r1, 0x0, 0x1f, &(0x7f0000000080)="c5", 0x1) dup2(r1, r0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) fcntl$lock(r3, 0x9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x300000003}) close(r2) setsockopt$sock_int(r1, 0xffff, 0x4, &(0x7f0000000380)=0x49, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r0, &(0x7f0000000000), 0x10) r4 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r4, &(0x7f0000000000), 0x10) write(r4, 0x0, 0x0) 1.601180965s ago: executing program 0 (id=1556): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x3, [{&(0x7f00007ab000/0x3000)=nil, &(0x7f0000ec8000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x100000001}, {&(0x7f0000a1c000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000a6b000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8000000000000001}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000ccd000/0x1000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000843000/0x1000)=nil, 0x3}, {&(0x7f000046c000/0x2000)=nil, &(0x7f0000efd000/0x1000)=nil, 0xfffe}, {&(0x7f0000b13000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2000000000000000}, {&(0x7f0000d3d000/0x4000)=nil, &(0x7f0000aff000/0x1000)=nil, 0xfffffffffffffffe}, {&(0x7f0000f6a000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000b19000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x3c}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f00000c6000/0x4000)=nil, &(0x7f0000c5e000/0x4000)=nil}], './file0\x00', 0x81}) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x4c}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x4) clock_getres(0x0, &(0x7f00000000c0)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xe, 0x0, 0x37) r1 = msgget$private(0x0, 0xb) msgctl$IPC_RMID(r1, 0x0) msgsnd(r1, &(0x7f0000002500)=ANY=[], 0x0, 0x0) 1.524056887s ago: executing program 0 (id=1567): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) r1 = syz_open_pts() fcntl$lock(r1, 0x9, &(0x7f00000000c0)={0x0, 0x1, 0xfffffffffffffffc, 0x10002fbffffff}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x4010, r0, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSETA(r2, 0xcd504406, &(0x7f0000000740)={0x0, 0x4, 0x0, 0x4, "9700", 0xfffffffd, 0x8}) ioctl$VMM_IOC_CREATE(r2, 0xc2585601, &(0x7f0000000040)={0x10, 0x80, [{&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x2}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1ff}, {&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x3}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x6}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x9}, {&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x100}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x7}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x6}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x7fffffffffffffff}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil}, {&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x3}], './file0\x00', 0x6}) 1.440758736s ago: executing program 0 (id=1570): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="ed", 0x1) r2 = shmget$private(0x0, 0x1000, 0x402, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x1000) r3 = shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x1800) shmdt(r3) shmdt(r3) sysctl$hw(&(0x7f0000000180)={0x6, 0xe}, 0x2, &(0x7f0000000240), 0x0, 0x0, 0x0) r4 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_RMID(r4, 0x0) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2842, 0x0) close(r1) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r6 = fcntl$dupfd(r5, 0x3, 0xffffffffffffffff) ioctl$WSKBDIO_GETMAP(r6, 0x400474c4, 0x0) execve(0x0, 0x0, 0x0) 1.43931329s ago: executing program 5 (id=1571): select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0x1bd8, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x20000040, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) shmctl$IPC_SET(0x0, 0x1, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x900, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='l', 0x1}], 0x1) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$TIOCSETA(0xffffffffffffff9c, 0x802c7414, &(0x7f0000000500)={0xea6, 0x4, 0x4, 0x3, "ad7154a9c5869a2a23e9152508ca9ab091a1f661", 0x1, 0x9}) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x7, r3, r4, 0x0, 0x0, 0x80}}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000540)="20a0637ab03bf98fb26be3b561a7dd5da2d728ffd37c27a220fd13313d6f01f4f4e2f697bc345086cab6c41f5891a86c182b608d2eac6e09722e03471964", 0x3a) r5 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$VMM_IOC_RUN(r5, 0xc0205602, &(0x7f00000000c0)={0x3, 0x8, 0x1, 0xf, &(0x7f0000000280)={{0x8, 0x82, 0x4, 0xd4, 0xb, 0x4, 0x2b8ab3e4}, {[0x4, 0x2, 0x4, 0x0, 0x8000000000000000, 0x2, 0x4fa, 0x9, 0x6, 0x1, 0x7fffffff, 0xa0000000000, 0x3, 0xacc88a4, 0x4, 0xc, 0x1, 0x6], [0x5, 0x6, 0x9, 0x6, 0x5, 0x9, 0x0, 0x2, 0x206, 0xa8d], [0xffffffffffffffff, 0x30000, 0x7, 0x7, 0x2, 0x0, 0x8], [0x0, 0x1, 0x7fffffffffffffff, 0x0, 0xffffffffffffffff, 0x80000000], [{0x4, 0x5, 0x7fff, 0x1}, {0x80, 0xfffffffe, 0x6, 0x1}, {0x0, 0x667, 0x19c1, 0xeb2}, {0xfffa, 0x80000001, 0xfff, 0x7}, {0x1, 0x0, 0x43, 0x4a8}, {0x9, 0x5135, 0xfe, 0x1}, {0xb6, 0x4, 0x62ecd860, 0x8}, {0x4, 0x0, 0x2}], {0x400, 0x2, 0x1, 0x5}, {0x3, 0x5, 0xff}}}, 0x8, 0x4}) r6 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x1) sysctl$net_inet_udp(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="c9edd234cce540433688fad55bfe3753888b46100000007f623cc289aa49f6f937b755be3b44b6f7424d512f3939c80abac35d8f02461863cb425949a67a821386c518e80c2861b40dc7321133189da8b0c2fa2ef9cb656b258126097075fe29cca92160124df3a52dc9c7d0e0e2c7154ee84bad040af64c73fbb2187825c34889fe1ec8ab94ef1effaa588f0e9f571d4baeba5102389cc22723602905f3d83b4ecd3df8fb098a18883f162dea6a4ac31ff1379c791412cc52a0fbab6c3d1d333b81", 0x464c1be0fc706b59) socket(0x2, 0x3, 0x2f) r7 = dup(r5) setsockopt$inet_opts(r7, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) r8 = socket(0x18, 0x3, 0x3a) getsockopt$sock_int(r8, 0xffff, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet_opts(r8, 0x0, 0x0, &(0x7f0000000200)="1da63d9e0bf6f8d6a16613a68fde421b217e99aae582745e24ca9cf526889d15", 0x20) mprotect(&(0x7f000028c000/0x4000)=nil, 0x4000, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) 1.350956304s ago: executing program 3 (id=1574): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$PCIOCWRITE(r1, 0xc0107008, &(0x7f00000005c0)={{0x10}, 0x1, 0x8003, 0x2}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000140)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) 1.344489179s ago: executing program 3 (id=1576): open(&(0x7f0000000080)='./file0\x00', 0x615, 0x1) r0 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4, 0x0, r0, r0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff}) setpgid(0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r1, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r3 = fcntl$getown(r1, 0x5) close(r2) r4 = getppid() setpgid(0x0, r4) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x40000604, r3) 1.337660818s ago: executing program 5 (id=1577): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r0, 0x80105727, &(0x7f0000000200)={&(0x7f0000000100)=[{0x4, 0xffffff25}, {0x23, 0x7fffffff}, {0x43, 0x42}, {0x82, 0x2}, {0x84, 0x4}, {0xe, 0x8}, {0x81, 0x7}], 0x7}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x0) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async) getppid() r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) setrlimit(0x8, &(0x7f0000000000)={0x42, 0x5e}) (async) r3 = syz_open_pts() (async) mknod(&(0x7f0000000180)='./bus\x00', 0x8, 0x7) open(&(0x7f00000000c0)='./bus\x00', 0x800, 0x86) (async) close(r3) r4 = openat$bpf(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, 0x0) (async) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x3, 0x25, 0x9, 0x1}, {0x84, 0x11, 0x5, 0x4}, {0x9e, 0x1c, 0xff, 0x6}]}) r6 = socket(0x6, 0x4000, 0x2) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, &(0x7f0000000080), 0x0, 0x0, 0x0) (async) getsockname$inet(r6, 0x0, &(0x7f0000000000)=0x54) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100dd2d018000000000005e00"}) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[]) (async) syz_open_pts() 1.328824683s ago: executing program 3 (id=1579): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x3, 0x6, 0x0, 0x3}, {0x20, 0x7d, 0x3}, {0x6, 0x80, 0x1}]}) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRESDEC, @ANYRES32, @ANYRES8, @ANYRES16]) r1 = syz_open_pts() fcntl$lock(r1, 0x9, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaacac8d3af05aaaabb0800450000280066000000069078ffffffffac1400aa4e204e23", @ANYRES8=r0, @ANYRES32=0x41424344, @ANYBLOB="500200029078fffd"]) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, &(0x7f00000000c0), 0x0, 0x0) sysctl$ddb(&(0x7f0000000000)={0x9, 0x3}, 0x2, 0x0, 0x0, &(0x7f00000005c0)="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", 0x15a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r2 = syz_open_pts() setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="890704", 0x3) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000000080)="0315f1d8dec5a317a93546ba", 0xc) connect$unix(r3, &(0x7f0000000000), 0x10) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) syz_open_pts() r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fcntl$lock(r4, 0x9, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x20001fffffffd}) fcntl$lock(r4, 0x8, &(0x7f00000003c0)={0x3, 0x0, 0x3f, 0x200000001}) r5 = socket(0x18, 0xc003, 0x16) setsockopt(r5, 0x29, 0x6c, &(0x7f0000000040), 0x4) 1.320415073s ago: executing program 1 (id=1580): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x40, 0xa4) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setuid(r1) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) linkat(r3, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00', 0x0) setsockopt$sock_int(r3, 0xffff, 0xe78ab66d0d107c89, &(0x7f0000000180)=0x3, 0x4) mknodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x8, 0x5) r4 = accept$unix(r3, &(0x7f0000000200)=@file={0x0, ""/247}, &(0x7f0000000300)=0xf9) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setsockopt$sock_timeval(r4, 0xffff, 0x0, &(0x7f00000003c0)={0x0, 0x89}, 0x10) setrlimit(0x4, &(0x7f0000000400)={0x2e1, 0x80}) ioctl$FIOSETOWN(r4, 0x8004667c, &(0x7f0000000440)=0x5) ioctl$WSDISPLAYIO_GETSCREENTYPE(r3, 0xc028575d, &(0x7f0000000480)={0x1, 0x4, './file0\x00', 0x800, 0x5, 0xdca, 0xffffffff}) r7 = open(&(0x7f00000004c0)='./file0\x00', 0x20000, 0x11) lchown(&(0x7f0000000500)='./file0\x00', r5, r2) faccessat(r7, &(0x7f0000000540)='./file0\x00', 0xab, 0x0) setsockopt$sock_timeval(r7, 0xffff, 0x1005, &(0x7f0000000580)={0x3, 0x4}, 0x10) connect$unix(r3, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x1}, 0x8) ioctl$WSDISPLAYIO_LSFONT(r7, 0xc058574e, &(0x7f0000000600)) getsockname$unix(r4, &(0x7f0000000680)=@file={0x0, ""/93}, &(0x7f0000000700)=0x5f) preadv(r4, &(0x7f0000000840)=[{&(0x7f0000000740)=""/162, 0xa2}, {&(0x7f0000000800)=""/3, 0x3}], 0x2, 0x9) unveil(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='c\x00') getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000900)={0x0}, &(0x7f0000000940)=0xc) r9 = geteuid() setsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000980)={r8, r9, r6}, 0xc) lchown(&(0x7f00000009c0)='./file0\x00', r1, r2) connect$unix(r7, &(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0xa) geteuid() mkdir(&(0x7f0000000a40)='./file0\x00', 0x3d) 1.231014293s ago: executing program 6 (id=1581): setreuid(0x0, 0xee01) (async) setreuid(0x0, 0xee01) setuid(0x0) r0 = shmget$private(0x0, 0x3000, 0x602, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) shmctl$IPC_RMID(r0, 0x0) 1.226190125s ago: executing program 1 (id=1582): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) recvmsg(r0, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) (async) ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4, 0x2, 0xeb0, 0x7deb, 0x7e8}, {0x8000, 0x3, 0xffff, 0x2, 0x1000}, {0xec36, 0xc1a, 0x0, 0x3, 0xd90e}]}) (async) setuid(0xffffffffffffffff) unveil(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='c\x00') 1.224677243s ago: executing program 1 (id=1583): syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @rand_addr=0xffffff}, @icmp=@info_request={0xf, 0x0, 0x0, 0x7}}}}}) r0 = socket(0x2, 0x3, 0x0) (async) r1 = kqueue() (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x0, 0x0}) (async, rerun: 32) ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, &(0x7f00000001c0)) (async, rerun: 32) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0x4, 0x25, 0x3, 0x10}, {0x40, 0x2, 0x1c, 0x1}, {0x9e, 0xf3, 0x0, 0xce}]}) write(r2, &(0x7f0000000080)="d81ad3d20cf7eb4e9b0800bc1a30", 0xe) kevent(r1, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd504406, 0x0) (async) r3 = socket(0x800000018, 0x2, 0x0) sendto(0xffffffffffffffff, 0x0, 0x58, 0x0, &(0x7f0000000080)=@in6={0x18, 0x3, 0x0, 0x1ff}, 0xc) (async) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd504406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) (async) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) ioctl$FIONREAD(r0, 0xc0206921, &(0x7f00000001c0)) (async) r5 = socket(0x2, 0x2, 0x0) (async, rerun: 32) r6 = socket(0x2, 0x2, 0x0) (rerun: 32) ioctl$FIONREAD(r6, 0x8040691a, &(0x7f00000001c0)) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readv(r6, &(0x7f0000000040)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000100)=""/93, 0x5d}, {&(0x7f0000000200)=""/205, 0xcd}], 0x3) (async, rerun: 64) r7 = dup2(r4, r1) (rerun: 64) ioctl$TIOCGTSTAMP(r7, 0x4010745b, &(0x7f00000000c0)) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONREAD(r5, 0x80206913, 0x0) 1.222059352s ago: executing program 1 (id=1585): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0xd4, 0x80010001, 0xffffffff, 0x80ce, 0x10, [{0x0, 0x7, 0x0, 0x71000}, {0x7, 0x4, 0x6, 0x4}, {0x10000006, 0xf86, 0x0, 0x40004}, {0x5, 0x800, 0x7, 0x1000000}, {0x6, 0x10000002, 0x80e, 0x7}, {0x6, 0x1, 0xffffffff, 0x800009f}, {0x8, 0xffffffff, 0x1003, 0x6f}, {0xa, 0x10000803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0xb}, {0x4, 0xfffb, 0x2, 0xaeb}, {0x803, 0x40, 0x8, 0x4}, {0xe0, 0x4, 0x5, 0x3}, {0xffff0354, 0xfffffffa, 0x6, 0x100006}, {0x0, 0x6, 0x7, 0x20000000}, {0x0, 0x1, 0x4, 0x7ff}]}) r0 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x2) bind(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x18, 0x1, 0x9, 0x225}, 0xc) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) r2 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1021, &(0x7f0000000040)=0x9, 0x4) r3 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r3, 0xffff, 0x1024, 0x0, 0x0) seteuid(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r2, &(0x7f0000000000), 0x10) getpeername$unix(r2, &(0x7f0000000080)=@abs, &(0x7f00000000c0)=0x8) ioctl$FIONREAD(r0, 0x8020697f, &(0x7f00000001c0)) fchflags(r0, 0x1) 1.220096034s ago: executing program 6 (id=1586): r0 = msgget(0x0, 0x41) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) (async, rerun: 64) r3 = getegid() (async, rerun: 32) r4 = getuid() (async, rerun: 32) getgroups(0x1, &(0x7f0000000080)=[0x0]) (async) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, 0xc) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x4, r1, r3, r4, r5, 0xa2, 0xf}, 0x5, 0x8, r6, r9, 0x81, 0xd, 0x8001, 0x81}) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000200)={{0x8, r10, r5, r4, r3, 0xc072781d336419e3, 0x800}, 0x3, 0x7fffffffffffffff, 0x3a3340d8}) r11 = socket(0x6, 0x2, 0x0) (async, rerun: 32) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000280)={0xffff, 0x4, 0x0, 0x1, "0f9498e5b6259cdae087947efbfe43e0df4b83e0", 0x1000}) (rerun: 32) getsockopt$sock_int(r11, 0xffff, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async, rerun: 32) chown(&(0x7f0000000340)='./file0\x00', r7, r5) (rerun: 32) r12 = open$dir(&(0x7f0000000380)='./file0\x00', 0x10, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000003c0)={r9, r4, r2}, 0xc) (async, rerun: 64) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000400)={{0x800, r7, r8, r1, r3, 0x20, 0x8}, 0x8, 0x4, r9, r9, 0x7, 0xb1, 0x9, 0x640}) (async, rerun: 64) pledge(&(0x7f0000000480)='\x00', &(0x7f00000004c0)=']$&^])\'[[\x00') (async) write(r12, &(0x7f0000000500)="6c22e0c611e00816d5fbc29eef8fddfdd1cca0f09ee47b9c50b82f262dafc1dc266e6fa19d8695215279ad10a2d7c07b5bdae09213505204fc2f41d23cff8914c7d62afc6a6bb68a81eb0ce7e111be776c863b09e0ae9ccdc0880951de3df6784bb29dadc05d771d28709ea6e2bfa59dffeef3ce2165d9c572ec13a4f7944429e288c5e92f23ab44dca13d6c197e6e0157fb2ef3d596412f6de95bee3e840353b50eeb82e63455f3cf6f5f2f6df93031bf155faa", 0xb4) (async) r13 = semget(0x0, 0x2, 0x6e2) semctl$IPC_SET(r13, 0x0, 0x1, &(0x7f00000005c0)={{0x4, r10, r5, r4, r3, 0x1, 0xbcb1}, 0x2, 0x817, 0x1000}) (async, rerun: 64) msgget(0x1, 0x8) (async, rerun: 64) setreuid(0x0, r1) (async) r14 = getuid() setreuid(r14, r4) (async, rerun: 64) fcntl$getown(r12, 0x5) (rerun: 64) setegid(r3) (async) r15 = getuid() chown(&(0x7f0000000640)='./file0\x00', r15, r3) (async) socket(0x20, 0x8000, 0x3b) ioctl$WSDISPLAYIO_ADDSCREEN(0xffffffffffffffff, 0x80245753, &(0x7f0000000680)={0x5, './file0\x00', './file0\x00'}) 1.124957904s ago: executing program 6 (id=1588): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f0000000100)=0x1) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) setrlimit(0x8, &(0x7f0000000400)={0x7, 0x54}) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)=',', 0x1}], 0x1, 0x9fa3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x0, 0x0, &(0x7f0000000040)={0x50, 0x7, 0x1000}, &(0x7f0000000080)={0x0, 0x581cf2f8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000000c0)) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r2 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) fchmod(r2, 0x80) close(r2) symlink(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file1\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = syz_open_pts() close(r3) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') r4 = syz_open_pts() ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000500)=0x7) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000540)="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", 0x115}], 0x1) sysctl$hw(&(0x7f00000000c0)={0x6, 0x1}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_inet_ip(&(0x7f0000000140)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000000380)="ef335dc1", &(0x7f0000000180)=0x4, 0x0, 0x0) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000002c0), &(0x7f0000000080)=0x1a, 0x0, 0x0) ioctl$BIOCLOCK(r1, 0x20004276) 1.123738633s ago: executing program 4 (id=1590): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) r1 = kqueue() r2 = openat$vmm(0xffffffffffffff9c, &(0x7f00000016c0), 0x200, 0x0) r3 = getpid() r4 = getuid() mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x84000000, 0xffff63de, 0x5, 0x2, 0x8, 0x1, 0x44, 0x10, [{0x5, 0x9, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0xf85, 0xe2, 0xf, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x788c, 0xffff, 0x8, 0x5}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x2006, 0x7fff}, {0x3, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x5, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x4, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffe53) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setregid(0x0, r6) r7 = getppid() getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000001700)={0x0, 0x0}, 0xc) r9 = getegid() getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000001740)={0x0, 0x0, 0x0}, &(0x7f0000001780)=0xc) sendmsg$unix(r0, &(0x7f0000001880)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000001600)=[{&(0x7f0000000140)="07508588becb6f50cd64749af03c7ba38449ac575dad4455e88f2681108b7d112599eaa19f942fab1e1e3810820cdad8213ee6ffcced33acf82d5f8b244bbaad86fdfbcc904e1473ca541a86d91ffbe342988b37251f2fa88161f97cc6f4052d2f944b3cd78460227f7df289e69f2720cfb55f5c939a4505c7212193543de23d99875ef7637b38d40d832d537ec959", 0x8f}, {&(0x7f0000000200)="4ba15e94979248ab683a7a81d44514ac15559739f14bfa4ad9508f1d8af0f622d5ea19747a57f4f3c81121a8a086355d54", 0x31}, {&(0x7f0000000240)="9c74af508767987ab85dd8679d509111d176996754714e0150893588aab62e22024f1b623c5618a3574c65a1dd23ffc09169ad56b0bb81c4dd72b8ede279210a3e414785eb25252f208d860a52b8880dcfcb52d072578551ffa119986db26dff", 0x60}, {&(0x7f00000002c0)="78558bab3183843a7f08fa5d0959a01c7df5600a538b8df4d259074b5ddb1d9414e41de9accfd557044f95ea2e3e1fc01642b0ab8271bcf9aece06071665cab048802f17fc8a2a98c54b00ac5bca6fed8f8d13aadeaef3231c8638e510fe6561038d2865a5ca269e2075120ae3d8097259d235f785f447bd44aed8247e4fb111ab865b6a658e0891358c525d9c1c07c9f96f04e1920685dc6a3cda6c7bffa771559c6fec4f9478372b6e5009b5049595d74d92bca6e43b5dc315cbef483c3d97cd16aef8ffc1c6e78de5840f057af521c5becb7c84ffce4451a163628aed11a5c0e48a002abde8899a", 0xe9}, {&(0x7f00000003c0)="205cf8d6fb793376459103098dc6eebc31629cc58e8cb72911b5976e7759bb31fe1ddf6cad9f88d217413d8a838690ba5dbeee8d1b98028a93fea5ee6e085f4fa9ba6fbb9092d9170d3cd625dd8d0e61597e0c8335b133ed2726f606a5062bb44b6b4d5ad6c990ba940eafc48366ea94dc06e88e25a0102084b6cf31091c522519bdf693c18eb1731f5250249aed05611f57a35d8ddf", 0x96}, {&(0x7f0000000480)="6837df497cd4f85426d0120b284c506f93bd9ddc7163d6bdbe9c85bb8255a309b2d63a3cc7d074b281c6c992e8f1acce8c2eff9622d1cc418a1218c32acc5c162d3d6ca865736086da84e800079030cd45d672fde37cbe0051753ffb154de90674f5f1193bbad8dde2e1046ed10533a0b0f246ddaec2be33940b485d6211ad2ea3696ba6de57ff8ea7fb041900dab9799beb20192e87de344d3942a903b72c2964a6de68a685504cc76b453dd71ac66806b793d1e7296a8deb01f4a6b5b809389ac2e07796151b3025d1ddf58c3784ecc83f8f7358742b31cc54c6b06275c13e19482fcc7ec4f4ee7d23668385ab63ab11aa", 0xf2}, {&(0x7f0000000580)="68af0137520a77de785e42f5aa557330d8", 0x11}, {&(0x7f00000005c0)="18baa03e8b2ec6af61e6ad4f83ea5d1fd719923a3f48da992c83e8dd1ebfa12cac2c13cf2d3352fcd6f2c174ade17218e3ca56bb4e9677f52b4e75a92db4", 0x3e}, {&(0x7f0000000600)="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", 0x1000}], 0x9, &(0x7f00000017c0)=[@rights={0x30, 0xffff, 0x1, [r1, 0xffffffffffffff9c, r0, r0, r0, 0xffffffffffffffff, r2, r0]}, @cred={0x20, 0xffff, 0x0, r3, r4, r6}, @cred={0x20, 0xffff, 0x0, r7, r8, r9}, @cred={0x20, 0xffff, 0x0, 0x0, 0x0, r10}, @rights={0x20, 0xffff, 0x1, [r0, r0, r0, r0]}], 0xb0, 0x4}, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x9) close(r0) sysctl$kern(&(0x7f0000000000)={0x1, 0x40}, 0x2, &(0x7f0000000080), &(0x7f0000000040), 0x0, 0x0) 945.673993ms ago: executing program 4 (id=1591): sysctl$net_inet_ah(&(0x7f0000000000)={0x4, 0x2, 0x33, 0x9f03efac314d462e}, 0x7, 0x0, 0x0, 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x3}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x4}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0xd}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) syz_emit_ethernet(0x22, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffc7a2e4000190787f000001e046a8e60500a59d6c70f9000000000000"]) 924.385529ms ago: executing program 1 (id=1593): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200100000001d, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200029}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x2, r1) close(r2) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x5c, 0x80, 0x17, 0xab1}, {0x3c, 0x1, 0x6, 0x10000}, {0x400e, 0x4, 0x53, 0x80020800}]}) dup(r0) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c500002002000000", 0x8a, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) setsockopt(r3, 0x9, 0x5, &(0x7f00000000c0)="0211694613dc29ce27799b3885acdd636f715ee173bb93efb2c3ea60120df8538a3d6e25ac877dbdd3c038b7cf5d65fe49c5dfa959472cee49ced7c74e1794fb9764a6f008d76754f0fac4a72de01860e49d0a6389b39fd0772eb9a5e52d776a456461cde0ca28793539871b58d8387cab7a91663c729ef6fced74fbd0ae2bd30df66f5dadb9986ec6bb8953694d1064b5b461243f73177d3b925b6fbe9bde8d921c588ea97d3b65827fa6d7d00cc71e50af09d7d1422cc95bbc839dfd87a54022f42cf211e2", 0xc6) r4 = socket(0x18, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r5 = syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xfffffffd, 0xffef9ff6, 0x6, "4b06a6bcff0300dba800000000000800", 0x0, 0xf}) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f00000000c0)={0x0, 0x5, 0x1, 0x2, "9f3a45a4fe2e857f034da7d542fdd21e107814d0", 0x4, 0x400}) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000300)="e7c4a4d86cb242843ec2cbd63a9e170a73cef2a623e23e5eda0501c23699e258b514174ca57079fff349534637a55fadb4a6329962bd40adb295cff85f36d14068f2d1758c71a2ca0965bc17be0180000000000000c46de1961101376492cff60fd9ddb33432677dbe8f9bdcfbbd4d0f258ee907faa79ce1d92e47a8bf0386c448b9b7740cf496f308ce6f7c902b1a5e6a653c1c21ff51e1a39e7c9e75dcf80073e94fff69229679c39a9a951e7db90edca578f9980ddcbc2b1c1bc4d0250a90da413d8ae5561f", 0xc7}], 0x1) syz_open_pts() ioctl$TIOCFLUSH(r5, 0x80047410, &(0x7f0000000080)=0x2) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) 921.36973ms ago: executing program 2 (id=1594): pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="0b68e2a54249c76633e6e7fb84be07881d41db07cb191b88", 0x18}, {&(0x7f0000000040)="c0c862b815d6f3a9e2550db2152383ca409ee0eef3ade9ba9c9b24c1496138b67024ac0275b75050c0fcb9fd557372d780404f754ac4d287dd702d54929de4db32b375241dcfa2f39a2282a23fadfd2ed433bc268b0c4e", 0x57}], 0x2, 0x9) (async) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x481, 0x0) read(r0, &(0x7f0000000140)=""/202, 0xca) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') (async, rerun: 32) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') (async, rerun: 32) r1 = open$dir(&(0x7f0000000340)='./file0\x00', 0x8000, 0xa) link(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00') (async, rerun: 32) linkat(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file0\x00', 0x0) (rerun: 32) connect$unix(r0, &(0x7f0000000480)=@file={0x1, './file0/file0\x00'}, 0x10) (async) getdents(r1, &(0x7f00000004c0)=""/186, 0xba) (async) sendto$unix(r0, &(0x7f0000000580)="4994f9fa07275f5da1a7a3440122f947733674a7df996f032110ada540640811a3cae12e1ae53ccb2b37f07e04a4f00438b3668e3381e14c47ae29712941e5242e8c8becb3252430fb9a6c8083ed024507f79e83856993f8b96ae9fd2dcd03bc8f8abab02b691b0cb7371cd00314340f08a81bef9abc3562af285394f38c5b839e0f497444fb26130de665ae6a9d4fe71966c94e3adc2d656ba517de4bafe3e86c9c5db6daf2da5dae5fa3e1199cd67f5e2bf7892a09dd4827", 0xb9, 0x6, &(0x7f0000000640)=@file={0x0, './file1\x00'}, 0xa) (async) unlink(&(0x7f0000000680)='./file1\x00') (async, rerun: 64) accept(r0, 0x0, &(0x7f00000006c0)) (async, rerun: 64) r2 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r2, &(0x7f0000000cc0)={&(0x7f0000000700)=@file={0x1, './file1\x00'}, 0xa, &(0x7f0000000c40)=[{&(0x7f0000000740)="dfe0675f847a0385f1bb034e4f7d57f3e2bae28644431c6436666627592381215adba69d9caf3dbc6ffd8516e5d8a32a3371bc5b20a21ec69812ca29a5c6bf054a4b97dde646327ec4b1dc38ce3c3b647c11c3cdb56879", 0x57}, {&(0x7f00000007c0)="0843711b16fb46f1c947e88b2954e17b788e2230e2aae0fe2511c74a338b725c8e7aaa290f99e3f02f174ea5e4d7c6b999f1fd9ccb5e3725aa239ba45a8c3e498e8a5277293d2df44e7803768551788f6a5016f72d50523d049c3f152d5b59ccbde62f695576e72390a508377422ccf9e859aa349d0774ef77942d7d008076a449312d56ec7bd2babdf1d13c8d39d739d14470e790bc8cf6821f", 0x9a}, {&(0x7f0000000880)="e2668bd1e22db8a720d03be33fc816834b6bdd7d7ca16e4da970738b07fb89f97684e9676df8c3c11c07e4624055b7630a9c0411de69444ce30e6c108952decb6687ec5832036863beb4ec4fc423e418d1d783a884e62f45eb556cc7f49630da2c78ccd83b956fe4dfa87d34bc15289eed95be347746922cc3a08656d2598c560a83fc60b55a4e67d328e5a31615fffd991aa5dd6fc7f2d7390a0c31143c7c3170c37adebd21f83737debb13ac68a29bf910c3b321820be2133b5bc2523592003f01a3f9855ccd2e4921565238ab47bd484bf388", 0xd4}, {&(0x7f0000000980)="92a90adaafeb28a747bd9711f40f6db71b02b5de8dc67b47e4c9ceb081769699fc035a1d69a1da3dd8eaf0b22baba21e47349da592599ee0facb6c9094af2b553783a5b5e2e4ee0838f20e760ccbd137703bb77120d0eab21ff79d6964008f8c2887c3bf53268371b9c49b4ba869da4d12d414b12440945b6998ab07b23f260eaf089c0bbc32b89619b7d94cdb2eaf6f8625cbbdcb4b6e9ab5cce77b1b27b9ec62c6998b0379ff318dd553fce58d9bc8b4869f4724f2819649c6080812458efe799b45e541c3b834c596ace4cf833686f72185a2e9185b6ffaf621a0b2acfa", 0xdf}, {&(0x7f0000000a80)="48a188c815e1917b941807243d9806280505a3aade5ee7e1ba7a321cb53f780f4846671982dfd330a4d96e331c5978759939f2fd910d7f0d773002f1ab381552286002286ad6d322135c3bd3edbfd729f8a9966c175f8f507a5a0241a3cf6f9972a142d26ecb3c54982977c41881cb1fa6355aeb1c622b05ebf6cfb6006e3fe42a2e054d4eea32959ce69a92577c08fb4181b1246211aa91fe6c9018516b099eca96d0a610683dd0247ce9e0f8cd2f8044804b", 0xb3}, {&(0x7f0000000b40)="e1859556c97d9cfd19f79857c4c6d467103ab64ee913ea7b096aaafbcc5931633b29d965da4fd2e7acc2f3b0d076d14dfdd0b2613a15aef1bc2e8894", 0x3c}, {&(0x7f0000000b80)="d1059d195569b6b37b724d8e4c978048369b73c3fadc471bde3c05317d5e9df1b4ce273ac88f4eb76a5ca6ae5bd7fc3734696add1b2f8c6b1d13a1f4eb5d7d197f79edd682493626f3928381cb4e2e79c27d438755ee23eae26ff40d3b0d6bcb06cfe3e6c77ebedecfd31285bafbcbff179f90f374df5f0fd11991f0c5daee1a2c148748211cc0a3aa2ad6f956218393641fc216df063d6e1b71f5c3b7f5819532b400461d5c312b", 0xa8}], 0x7, 0x0, 0x0, 0x4}, 0x0) (async) openat$vnd(0xffffffffffffff9c, &(0x7f0000000d00), 0x6a1, 0x0) (async) rename(&(0x7f0000000d40)='./file1\x00', &(0x7f0000000d80)='./file1\x00') (async, rerun: 32) ioctl$WSKBDIO_GETDEFAULTBELL(r0, 0x40105706, &(0x7f0000000dc0)) (async, rerun: 32) lstat(&(0x7f0000000e00)='./file1\x00', &(0x7f0000000e40)) ioctl$WSDISPLAYIO_GETSCREENTYPE(r0, 0xc028575d, &(0x7f0000000ec0)={0x1, 0x7f, './file0/file0\x00', 0x7, 0x3, 0x3, 0x7}) (async) rmdir(&(0x7f0000000f00)='./file0\x00') (async) unveil(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)='c\x00') unveil(&(0x7f0000000fc0)='./file0/file0\x00', &(0x7f0000001000)='x\x00') (async) mkdir(&(0x7f0000001040)='.\x00', 0x10) r3 = fcntl$getown(r1, 0x5) ktrace(&(0x7f0000001080)='./file0\x00', 0x2, 0x40000014, r3) (async, rerun: 32) r4 = dup2(r0, r2) (rerun: 32) ioctl$FIOGETOWN(r4, 0x4004667b, &(0x7f00000010c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000001140)=@file={0x0, './file0\x00'}, 0xa) 768.403023ms ago: executing program 7 (id=1595): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) readv(r0, &(0x7f0000001180)=[{0x0}], 0x1) nanosleep(&(0x7f00000025c0)={0x0, 0xffffffff}, &(0x7f0000000000)) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) r1 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) ioctl$FIONREAD(r1, 0x400c745c, &(0x7f0000000080)) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00', 0x9, &(0x7f00000000c0)='./file0\x00', 0x8}) open$dir(&(0x7f0000000280)='./file0\x00', 0x80, 0x106) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x22) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x44, 0x8, 0xa, 0x5}, {0x24, 0x3d, 0x4, 0x1}, {0x406, 0x2, 0x4, 0x8587}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) 767.341851ms ago: executing program 4 (id=1596): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0xe) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) read(r1, &(0x7f0000000200)=""/174, 0xae) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$WSMUXIO_INJECTEVENT(r2, 0x80185760, &(0x7f0000000140)={0x2, 0x40003, {0x0, 0x2006}}) socket$unix(0x1, 0x2, 0x0) (async) sendmsg$unix(r0, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0xe) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) (async) open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) (async) read(r1, &(0x7f0000000200)=""/174, 0xae) (async) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) ioctl$WSMUXIO_INJECTEVENT(r2, 0x80185760, &(0x7f0000000140)={0x2, 0x40003, {0x0, 0x2006}}) (async) 762.39453ms ago: executing program 0 (id=1597): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r0, &(0x7f0000000080)="a4140000000093629991f58f45864573592cc3d9213ae19df7c10090f9ee446e7ec94548a0783bb422742fdb18bb112163d04e27de2802094153819bd0a9f9acfe73de01adfc35f37367d784b6ded6782a6f202015393b6631c859ffaccddc1ad14f76df715e454a45b6937b84397c7c3bed44e8cc00cd372fd2259b05381727f193950aa3d4684d94c98df1164bc9bbb49d6a47024425f5fd7b91a58da3eef996e6d21f99e15fb6804392261e4ec676d16c1c41045a1547a5c5ef9a35eb3ffcf1c993dbd30b704914106a25ada5b6e62f6974ff60417fac0b6386e99461e9c1ff74f6a373d7a3bd20d54fc8f7b6e7d206bf", 0xf2) fsync(r0) close(r0) mprotect(&(0x7f0000735000/0x2000)=nil, 0x2000, 0x4) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) (async) write(r0, &(0x7f0000000080)="a4140000000093629991f58f45864573592cc3d9213ae19df7c10090f9ee446e7ec94548a0783bb422742fdb18bb112163d04e27de2802094153819bd0a9f9acfe73de01adfc35f37367d784b6ded6782a6f202015393b6631c859ffaccddc1ad14f76df715e454a45b6937b84397c7c3bed44e8cc00cd372fd2259b05381727f193950aa3d4684d94c98df1164bc9bbb49d6a47024425f5fd7b91a58da3eef996e6d21f99e15fb6804392261e4ec676d16c1c41045a1547a5c5ef9a35eb3ffcf1c993dbd30b704914106a25ada5b6e62f6974ff60417fac0b6386e99461e9c1ff74f6a373d7a3bd20d54fc8f7b6e7d206bf", 0xf2) (async) fsync(r0) (async) close(r0) (async) mprotect(&(0x7f0000735000/0x2000)=nil, 0x2000, 0x4) (async) 760.987679ms ago: executing program 2 (id=1598): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) r1 = socket$inet(0x2, 0x3, 0x0) close(r1) r2 = kqueue() kevent(r2, &(0x7f0000000180)=[{{r2}, 0xfffffffffffffff9, 0x9, 0x1, 0x8, 0xd}], 0x6, &(0x7f0000000200)=[{{r2}, 0xfffffffffffffff9, 0x2, 0x70365d3ab70b32b8, 0x1}, {{r2}, 0xffffffffffffffff, 0x5a, 0x40, 0x5, 0x3}], 0xfffffff9, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x1, 0x45, 0x26, 0x7}, {0x64, 0x25, 0xc, 0x2}, {0x826, 0x11, 0x0, 0xfffff002}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) 627.683759ms ago: executing program 2 (id=1599): chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) setuid(0xee01) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x8, [{0x3, 0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x3}, {0x1}, {0x0, 0x400005f}, {}, {0x2, 0x200002}, {}, {}, {0x0, 0x1fd}, {0x3, 0x8}, {0x2, 0xffe}, {0x2, 0x1ff}, {}, {0x2, 0x2}, {0x3}, {0x3}, {0x0, 0x7ff}, {0x5, 0xffffffff}, {}, {0x2, 0x4}, {0x0, 0x400}, {}, {0x3, 0x3}, {0x2, 0xfffffffd}, {}, {0x2}, {}, {0x3, 0xa}, {0x3, 0xffffffff}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setitimer(0x1, &(0x7f0000000140)={{0xe, 0x100800000000009}, {0xfffffffffffffff0, 0x10001}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x2}, 0x8) r2 = semget(0x0, 0x1, 0x281) semctl$IPC_STAT(r2, 0x0, 0x2, 0x0) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000080)=""/16) (async) connect$unix(r0, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) 626.751234ms ago: executing program 7 (id=1600): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4801) 620.195227ms ago: executing program 0 (id=1601): sysctl$hw(&(0x7f0000000000)={0x6, 0x14}, 0x2, &(0x7f0000000040)="344ed202430c6d24", &(0x7f0000000180)=0x8, 0x0, 0x0) (async, rerun: 64) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) mquery(&(0x7f00001cf000/0x3000)=nil, 0x3000, 0x4, 0x0, r0, 0x4) 619.829094ms ago: executing program 4 (id=1602): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f000028c000/0x1000)=nil, 0x1000, 0x1, 0x2016, r0, 0x0) (async) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000362000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) ftruncate(r1, 0x8531) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 616.299861ms ago: executing program 2 (id=1603): setrlimit(0x8, &(0x7f0000000000)={0x42, 0xffffffffffffff13}) r0 = syz_open_pts() (async) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000200)={&(0x7f0000000100)='./file0\x00', 0x2, &(0x7f0000000180)='./file0\x00', 0x8}) openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0x20, 0x0) close(r0) r2 = syz_open_pts() (async) ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000140)=0x2) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) (async) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0xc0, 0x1, 0x27, 0x6445}, {0x6, 0x1, 0x53, 0x7}]}) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) select(0x0, 0x0, &(0x7f0000000040)={0xe, 0x101, 0x1000000006, 0x300, 0x9, 0x9, 0x865a, 0xffffffffffff458f}, 0x0, 0x0) (async) ioctl$VMM_IOC_CREATE(r4, 0xc2585601, &(0x7f00000000c0)={0x10, 0x437bfffffffffc, [{&(0x7f0000659000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x200007fffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7d}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x6}, {&(0x7f00003ff000/0xc00000)=nil, &(0x7f00001ac000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x481}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x80000000}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xc}, {&(0x7f0000008000/0x3000)=nil, &(0x7f000074b000/0x1000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000f44000/0x3000)=nil, 0x51}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f0000257000/0x1000)=nil, &(0x7f0000a6b000/0x1000)=nil, 0x12b}, {&(0x7f000057c000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x92f}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x4}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffff7ffbffffff7}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000039f7}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001000/0x800000)=nil, 0x6}], './file0\x00', 0xfffffffe}) (async) ioctl$TIOCSETA(r4, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5}) r5 = accept$inet(r3, &(0x7f0000000280), &(0x7f00000002c0)=0xc) recvmmsg(r5, &(0x7f0000001580)={&(0x7f0000000400)={&(0x7f0000000300)=@in, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/78, 0x4e}, {&(0x7f0000000480)=""/193, 0xc1}], 0x2, &(0x7f0000000580)=""/4096, 0x1000}, 0x6}, 0x10, 0x1801, &(0x7f00000015c0)={0xff, 0x2}) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x8589, 0x5, 0x0, 0x401}, {0xebd0, 0x8, 0x1, 0xe476}, {0x8, 0x8, 0x4, 0x1}, {0xe1, 0xf9, 0xf, 0x1}]}) (async) ioctl$TIOCSTOP(r2, 0x2000746f) (async) poll(&(0x7f00000001c0)=[{r0, 0x2}], 0x1, 0x6) 443.613527ms ago: executing program 7 (id=1604): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x2810, r0, 0x20000000) truncate(&(0x7f0000000080)='./file0\x00', 0x61c5) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x18, 0x3, 0x50) ioctl$FIONREAD(r1, 0x802069b2, &(0x7f00000001c0)) 443.012745ms ago: executing program 5 (id=1605): r0 = syz_open_pts() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) ktrace(&(0x7f0000000140)='./file0\x00', 0x1, 0x200, r1) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x0, 0x1, 0xffef9ff6, 0x2, "4b06a6bcff0300dba800000000000800", 0x0, 0xd}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)="944713145761ef4626e1cc7f391f55166f838c5f5b0fe563162b7bfc9e", 0x1d}, {&(0x7f00000000c0)="d6accee1c3c4447919b68f12aed218a2919eb5ccedebf4bb4d9abb9514b0c2038aa1181aa3ad6b41c733bb946599ccb94bf562acbae2137ff769c5e2e2249e62a833b477a7fb6e09", 0x48}], 0x2) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000080)=0x2) 442.476223ms ago: executing program 4 (id=1606): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x3}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x3e, &(0x7f0000000040)="00fb534f", 0x4) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x400) r2 = socket(0x2, 0x1, 0x0) setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000040)={0xffffffff, 0x6b327957}, 0x8) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x6) mknod(0x0, 0x2000, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x7, 0xfd, 0x6}, {0x2, 0x10, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x40003}]}) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)="0f0000005df20d07155c9c101ed9126c790e00000098025ce127cbfaa606761de162bfa38e8638faa42eea6f1b810e4e65259fd1593d0d310b84c9a58818eed74a52545f037dfeffb338f82284d66ee1a06ce58cfa4ae10fed38bd87d4c89ce3798ff092740a00fcebf0f78ce25a827faf8308496c921ab8f18b0564", 0x7c}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000300)="a2352f75fcb72f258152ea33ef03ebcc5800003af5", &(0x7f0000000000)=0x15, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x10, 0x17b) acct(&(0x7f0000000080)='./file0\x00') socket(0x24, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="e727dc07001f39"]) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="094b00000000aaaaaaaaaabb08004500001c0000000000019078ac1400aae0000037ff00907800050002"]) 441.90769ms ago: executing program 3 (id=1607): mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x10d) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000513000000000006000004", 0xd, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x11, 0x3, 0x8) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x9, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0xf0, 0xfffefffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x100000001, 0x8000, 0x4, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x8, 0x1ffffeffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d0a}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0xfd, 0x0, 0x7}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x6}}}) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r2 = socket(0x18, 0x3, 0x0) r3 = kqueue() kevent(r3, &(0x7f0000000380)=[{{r2}, 0x0, 0x54, 0x8, 0x3, 0x75}, {{r1}, 0xfffffffffffffffd, 0x40, 0x2, 0xa1, 0xcde}, {{r0}, 0xffffffffffffffff, 0xa0, 0x1, 0x2, 0x4}], 0x30, 0x0, 0x57d, 0x0) close(r3) connect$unix(r2, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc0e99db6de761f86, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x4f) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x113) ioctl$VNDIOCSET(r4, 0xc0387200, &(0x7f0000000140)={0x0, 0x3, 0x0}) sendto$unix(r0, &(0x7f0000000000)="b10005016000000416000b00070000000020000010c18125d7f96ecfc73fd38c23781fd6c61a27ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c500002012010000de5000000000000020000000000000000000000000000000000000001f00000000000800", 0xb1, 0x3a3ae0e0de5f5dda, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) r5 = open$dir(&(0x7f0000000300)='.\x00', 0x0, 0x4a) chroot(&(0x7f00000002c0)='./file0/file0\x00') fchmod(r5, 0xff) setuid(0xffffffffffffffff) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f00002e7000/0xb000)=nil, 0xb000, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000000180), 0x0) 306.014493ms ago: executing program 5 (id=1608): r0 = syz_open_pts() sysctl$hw(&(0x7f0000000040)={0x6, 0x19}, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$PCIOCWRITE(r1, 0xc0107008, &(0x7f00000005c0)={{0x10}, 0x1, 0x8003, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setitimer(0x0, &(0x7f0000000000)={{0x10000, 0x80}, {0x9, 0x4}}, 0x0) getitimer(0x0, &(0x7f0000000380)) mkdir(&(0x7f0000000080)='./file0\x00', 0x50) r2 = socket(0x2, 0x2, 0x8) setsockopt(r2, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x7) close(r0) syz_open_pts() (async) sysctl$hw(&(0x7f0000000040)={0x6, 0x19}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) ioctl$PCIOCWRITE(r1, 0xc0107008, &(0x7f00000005c0)={{0x10}, 0x1, 0x8003, 0x2}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) setitimer(0x0, &(0x7f0000000000)={{0x10000, 0x80}, {0x9, 0x4}}, 0x0) (async) getitimer(0x0, &(0x7f0000000380)) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x50) (async) socket(0x2, 0x2, 0x8) (async) setsockopt(r2, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) (async) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x7) (async) close(r0) (async) 305.265536ms ago: executing program 7 (id=1609): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x10001, 0x7, 0x6001, 0xed000000, "7067b1881de9bcfb0c49bd0efab61b1ac3c151a4", 0xff, 0x5}) r1 = syz_open_pts() getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$TIOCCBRK(r1, 0x2000747a) socketpair(0x18, 0x3, 0x2b, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x10001, 0x7, 0x6001, 0xed000000, "7067b1881de9bcfb0c49bd0efab61b1ac3c151a4", 0xff, 0x5}) (async) syz_open_pts() (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) ioctl$TIOCCBRK(r1, 0x2000747a) (async) socketpair(0x18, 0x3, 0x2b, 0x0) (async) 304.447648ms ago: executing program 1 (id=1610): fcntl$setown(0xffffffffffffff9c, 0x6, 0xffffffffffffffff) r0 = dup(0xffffffffffffffff) sendto$unix(r0, &(0x7f0000000000)="fcba4a137e672c2d905d57c4ccfe0ff5ea307655ebddccb256696133387fd537fab1", 0x22, 0x1, 0x0, 0x0) write(r0, &(0x7f0000000040)="c0f8fd44d82c8bd5ea0659d28448a4d428fb3ae1c7711853dced0f40cb2acd04f1bda4533f0990d50056434311c7e19ab8c8fe81d1798f46396ca2951cf47971f39203c6fbf69a0b678c4e7c8bfe99ce7901e1b2ca2bd9e664fbde071f", 0x5d) socketpair(0x6, 0x0, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0x68, &(0x7f0000000100)={{0x18, 0x0, 0x1000, 0xa88000}, {0x18, 0x1, 0xa4, 0x10}, 0x3, [0x0, 0x0, 0xfffffffe, 0x3, 0x1000, 0xd0, 0x7fffffff, 0x9]}, 0x3c) r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) sendmmsg(r3, &(0x7f0000000680)={&(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="c9786b5fea73e8345b9e5013c09a858325256972329cabc471fd7f94ac7dcc4284e8bc4b07ebfd7e4c52d961e0aab7eeff1d0ccca94c8f5fd23e56624914b312cf14a549a41811088c16af88dadeea2da24b95c17ba21154f6cc82c6b30858c712023e9874ea8894e5cf", 0x6a}, {&(0x7f0000000200)="fe0a4750a30cd594739a3a383abae5605d45d028d4f1981538d856134fe8cbc1ecfe91a7f91d7b5757c4a52704e093f72be02be345409304228bd169bdf81ce093f3ba5a0b6d8dd9c789c7f327782944dae3eb01b77f309cb76dc65fa4ade8dfb96c1881cc3f4adb634d44afd7b24f07eb715824b23a2d8018ce5c4bb05a19fda2bda4cd539632421ca592a8ef7df389383a6dbdd5c91a65c4e922558014d997df", 0xa1}, {&(0x7f00000002c0)="18d774371e2c67fb63a500a036792673d675aaab45799e2e3c5d7e7606f8afc4c69bcf9796a8e0eecda6ee200c648245c4e4552eced11770464fb08084c2345c3008d5d6be3734054761c207410a17be00a35a8e79b2063f2642d7b290d50b1e7b6472d1f4c0bf8e97f4c5713f476344fb2d001df5efac98f933b7293989d1a613da4b6a9a807c2b3c4a22ac885e16e483e62cbc228291aa19c285e736347101e39c84d715e96c6b2285f69db20c830194780f22f5bb0238e7ba7bf040d17ef66843cead28b60794d9a58e9baae446fee6c81e51fa03622f109ac336063be1782e0208e3cb53138746ea6331d317d563a512014261953f726354ea", 0xfb}], 0x3, &(0x7f0000000400)=[{0x98, 0xffff, 0x8, "a5ed83881efd9f28c059d400e2c5065de1a5bd30ca45b156674023554256fd9d5d9aa89da121c6fbf6d872b6cf913a30ccb6939ccb0d24ddb12fcd1dbb516b8651e492d2c1ffee8bacc890f348bff393d2555b215d8cc5303c2773d5f63a3d2304bebaef557ed25af4dac76b5ecf720c1168f8d470282d478051c7d74cac54c1ebef5b"}, {0x78, 0x1, 0x0, "7ca20d93dbc4250096b500627a4561cfce77785e2cdf758e40fe46743f7c116e5faacf3cf63926f4a8fa5c260e690c82bc30f43df2cc1bd83511f952e8015907857fca577da4667b993b8b3f1b621f7515a02a6710a492ef17311f27b9c1062a6e9cbcd0"}, {0x48, 0xffff, 0x1, "ebc9cc288867eb8c99c520a292061166ed664071312852d663418a1521f400a4b0632f0ab63593f5c51c3c9dd509a16ea36d"}, {0x70, 0xa85b38b35f14a904, 0x0, "c6934f8d0ab5d27423e22049a91cd4067be2b37a4a33e1a474c00766be2ab1709deaa4843cc7117526eef77755fb58d6b33906b2d11e1a70d86b60623d31f64d2d97208faa5e0206af60d9b75718e1d4aa730b64a7f6a51ec4c4083ba0db01"}, {0x78, 0xffff, 0x1, "4b1cc2d8b24e052f1f396630bbaa663b0b3e57540e87017169c8ed70aaf5546206b70d2d336cf38702aa06a2a051efd9b0200e25481e41f7a74b4329958bc923883303c43d991b14db08de5575007e04a78f0659df55e085cf606f21667cd9969e99fb"}], 0x240}, 0x9}, 0x10, 0x409) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) readv(r4, &(0x7f0000000980)=[{&(0x7f0000000700)=""/104, 0x68}, {&(0x7f0000000780)=""/69, 0x45}, {&(0x7f0000000800)=""/230, 0xe6}, {&(0x7f0000000900)=""/85, 0x55}], 0x4) ioctl$WSDISPLAYIO_SETSCREEN(r3, 0x80045756, &(0x7f00000009c0)=0x3) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000a00), 0x8880, 0x0) r6 = accept$inet6(r5, &(0x7f0000000a40), &(0x7f0000000a80)=0xc) writev(r6, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="10a515a99a0d61dbf01abe7019e26af2312f82fdb016fb582c3beb9a74dacb0d18a5da7559905a0fd8be3ff78a43101d783b31a15e042bd393838b901f2b5b34563254b748ee76d2", 0x48}], 0x1) fchflags(r3, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000b80), 0x8000, 0x0) r8 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000bc0), 0x10, 0x0) ioctl$FIOGETOWN(r8, 0x4004667b, &(0x7f0000000c00)) getrlimit(0x2, &(0x7f0000000c40)) r9 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000c80), 0x80, 0x0) mquery(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0x10, r9, 0x8) r10 = openat$klog(0xffffffffffffff9c, &(0x7f0000000cc0), 0x200, 0x0) pread(r10, &(0x7f0000000d00)="bf0b7df4baf204130a06c915fa6b4d58193ef11b81d20ef90777f85c1f7ef0905d4fe4516c84ee31673d728d5fe828e84e98ce089b897ac35ddede36bbe8cd752428605beebaad3f3e194f98b07a4818ee131f58c6c0892929a2e765d6ee0c6307bcd1ac7c67c4bfd278dabe42ace1f3df181f26f953ac6ed20c65429e6c93f53be684063cb28b86a73d70dfcfa2e94516cdd815e9f977e6007d078ff03716d17af81a3b905724ef05e34944dc249cea32983de98a23972ead9618dc176e286199c26f0fa67db5a48717e42cd524cedbdb18ff49", 0xd4, 0xfffffffffffffffd) r11 = open(&(0x7f0000000e00)='./file0\x00', 0x100, 0x20) ioctl$VNDIOCSET(r5, 0xc0384600, &(0x7f0000000ec0)={&(0x7f0000000e40)='./file0\x00', 0xd8ba, &(0x7f0000000e80)='./file0\x00', 0x8}) ioctl$VNDIOCGET(r3, 0xc4104603, &(0x7f0000000f00)={'./file0\x00', 0x80000000, 0x4, 0x4}) ioctl$WSKBDIO_SETMODE(r5, 0x80045713, &(0x7f0000001340)=0x1) ioctl$VNDIOCSET(r7, 0xc0384600, &(0x7f0000001400)={&(0x7f0000001380)='./file0\x00', 0x8f, &(0x7f00000013c0)='./file0\x00', 0x8}) kevent(r0, &(0x7f0000001500)=[{{r0}, 0xfffffffffffffff9, 0xc2, 0x20000000, 0x80000000}, {{r4}, 0xfffffffffffffff9, 0x9, 0x1, 0x8000, 0x7}, {{r8}, 0xfffffffffffffff9, 0x7c8aa7828e906a77, 0x9ca7a29e55764ff8, 0x100, 0xd}, {{r10}, 0xfffffffffffffffa, 0x41, 0x40, 0x3, 0x3}, {{r10}, 0xfffffffffffffffc, 0x10, 0x2, 0xe, 0x1}, {{}, 0xfffffffffffffffc, 0x13, 0x80000004, 0x800, 0xe337}], 0x0, &(0x7f0000001600)=[{{}, 0xfffffffffffffffa, 0xc9565c2b33949bbd, 0x10, 0x0, 0x7}, {{}, 0x0, 0x80, 0x4, 0x0, 0x1}, {{r1}, 0x0, 0x10, 0x1, 0x8, 0x8}, {{r11}, 0xfffffffffffffff8, 0x82, 0x80000000, 0xb, 0xa5}, {{r8}, 0xfffffffffffffff9, 0x0, 0x0, 0x8, 0x401}, {{r0}, 0xfffffffffffffff8, 0x24, 0x20, 0x4}], 0x8, &(0x7f00000016c0)={0xa4, 0xffffffffffffff93}) 301.593208ms ago: executing program 6 (id=1611): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x3, [{&(0x7f0000d99000/0x4000)=nil, &(0x7f0000ec8000/0x3000)=nil, 0x2}, {&(0x7f0000157000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000002}, {&(0x7f0000a78000/0x4000)=nil, &(0x7f0000ccd000/0x1000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000843000/0x1000)=nil, 0x2e3}, {&(0x7f000046c000/0x2000)=nil, &(0x7f0000efd000/0x1000)=nil, 0xfffe}, {&(0x7f0000b13000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {&(0x7f000075a000/0x2000)=nil, &(0x7f0000aff000/0x1000)=nil, 0x6}, {&(0x7f0000f6a000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f00008cb000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0xfffffffffffffffc}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000a4d000/0x3000)=nil, 0x100000040}, {&(0x7f0000ed3000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xfffffffffffffffe}, {&(0x7f0000999000/0x4000)=nil, &(0x7f00003b5000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f00000c6000/0x4000)=nil, &(0x7f0000c5e000/0x4000)=nil, 0x80000000000003}], './file0\x00', 0x6d}) chflags(0x0, 0x1) (async) chflags(0x0, 0x1) faccessat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x26, 0x0) (async) faccessat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x26, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0x2) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x11b) setgroups(0x0, 0x0) (async) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) setreuid(0xee00, 0x0) getuid() ioctl$TIOCSPGRP(r0, 0x40047477, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x6, 0x7, 0xe5, 0x543, "22f00600000000e714db9b0e13edbe0000037600", 0x4, 0x2}) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r1 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write(r1, &(0x7f0000000100)="8a522c6b8a8460561e290ca762e8d6c739d5dd7f0153b7a50498cb60ab818b16929d3bf742c57351df76ca9ec87e92fa9f010342ace3a6ffcf", 0x39) (async) write(r1, &(0x7f0000000100)="8a522c6b8a8460561e290ca762e8d6c739d5dd7f0153b7a50498cb60ab818b16929d3bf742c57351df76ca9ec87e92fa9f010342ace3a6ffcf", 0x39) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005", 0x3, 0x400, 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) 174.909601ms ago: executing program 6 (id=1612): mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000340)='./file1\x00', 0x200, 0x33) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = syz_open_pts() close(r0) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x0, 0x6, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0x2, 0xffffffff, 0x4f4, 0x9}, {0x6, 0x0, 0x14, 0x8}, {0x1fffffe, 0x82, 0x5, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1ca, 0x803, 0xc, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x6}, {0x1100c, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSKBDIO_SETMAP(r1, 0x8010570e, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x5, 0x0, 0x1, 0x7, 0x8}]}) syz_open_pts() r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$WSKBDIO_SETENCODING(r3, 0x80045710, &(0x7f0000000000)=0x2e8) rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) 174.308702ms ago: executing program 7 (id=1613): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x10180, 0x0) ioctl$WSDISPLAYIO_GETSCREENTYPE(r0, 0xc028575d, &(0x7f0000000040)={0x7, 0x4be, './file0\x00', 0x401, 0x7, 0x8, 0x1}) ioctl$WSDISPLAYIO_GETSCREENTYPE(r0, 0xc028575d, &(0x7f0000000080)={0x4, 0xff, './file0\x00', 0x7, 0x5, 0x8001, 0x800}) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0xac) (async) r1 = getuid() setuid(r1) (async) setuid(r1) (async, rerun: 64) r2 = accept$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000100)) (async, rerun: 64) r3 = fcntl$getown(r0, 0x5) (async) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0xc) setsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000180)={r3, r1, r4}, 0xc) (async) ioctl$WSKBDIO_SETMODE(r0, 0x80045713, &(0x7f00000001c0)) (async, rerun: 32) r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) (rerun: 32) ioctl$VNDIOCCLR(r5, 0x80384601, &(0x7f00000002c0)={&(0x7f0000000240)='./file0\x00', 0x1, &(0x7f0000000280)='./file0\x00', 0x8}) (async) r6 = open$dir(&(0x7f0000000300)='./file0\x00', 0x8, 0x80) renameat(r6, &(0x7f0000000340)='./file0\x00', r5, &(0x7f0000000380)='./file0/../file0\x00') chroot(&(0x7f00000003c0)='./file1\x00') (async) r7 = getgid() lchown(&(0x7f0000000400)='./file0\x00', r1, r7) (async, rerun: 64) ktrace(&(0x7f0000000440)='./file1\x00', 0x1, 0x0, r3) (async, rerun: 64) ioctl$BIOCFLUSH(r5, 0x20004268) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000480), 0x800, 0x0) ioctl$BIOCSDIRFILT(r8, 0x8004427d, &(0x7f00000004c0)=0x1) (async, rerun: 32) ioctl$TIOCSTSTAMP(r5, 0x8008745a, &(0x7f0000000500)={0xc76, 0x101}) (rerun: 32) r9 = geteuid() setuid(r9) mknod(&(0x7f0000000540)='./file1\x00', 0x2, 0x6) ioctl$BIOCFLUSH(r5, 0x20004268) semget(0x1, 0x2, 0x0) (async) chmod(&(0x7f0000000580)='./file0/../file0\x00', 0x62a344a5da94f614) 173.660572ms ago: executing program 5 (id=1614): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4", 0x3}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) socket(0x2, 0x2, 0x0) r2 = dup(r1) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './bus//file0\x00'}, 0xf) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000380)={0x0, 0x7}, 0x10, 0x1842, &(0x7f0000000440)={0x7, 0x3370}) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4) r4 = socket(0x18, 0xc003, 0x3a) setsockopt(r4, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f00000003c0)={0x3, 0x0, 0x10, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x5}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) getgroups(0x7, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) setsockopt(r5, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) unveil(&(0x7f0000000040)='./bus/\x00', &(0x7f0000000080)='c\x00') 172.398557ms ago: executing program 3 (id=1615): r0 = kqueue() r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) fcntl$setflags(r1, 0x2, 0x0) kevent(r0, &(0x7f0000000000)=[{{}, 0xfffffffffffffff6, 0x86, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$net_inet_carp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="a08c0000", 0x4) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) mknod(0x0, 0x2000, 0x5c4a) ioctl$TIOCSETA(r2, 0xc0284414, &(0x7f0000000340)={0x1, 0x3, 0x8, 0x81, "561a8ebd00000000050000000000006e00", 0x10005, 0x2e5e}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='o4', 0x2}], 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) kevent(r0, &(0x7f0000000240)=[{{}, 0xfffffffffffffff6, 0x28, 0x40000000, 0xfd, 0x13fff}], 0xfffffffd, 0x0, 0xfffffff8, 0x0) r3 = open(&(0x7f0000000080)='./file1\x00', 0x200, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x10, r3, 0x0) mprotect(&(0x7f000000e000/0x4000)=nil, 0x4000, 0x3) kevent(r0, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0) 127.185535ms ago: executing program 7 (id=1616): r0 = socket(0x10, 0x8000, 0xff) fcntl$setstatus(r0, 0x4, 0x40) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000005880), 0x10, 0x0) setuid(0xee01) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$BIOCFLUSH(r1, 0x4004426a) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105727, &(0x7f0000000140)={&(0x7f00000001c0)=[{0x7, 0x809710}, {0x5, 0xa6a}], 0x2}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x5c, 0x80, 0x17, 0xab1}, {0x3c, 0x1, 0x6, 0x10000}, {0x400e, 0x4, 0x53, 0x800207fe}]}) sendto$unix(r0, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c500002002000000", 0x8a, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd6000000000383a00fe8000000000000000000000000000aaff020000000000000000000000000001030003e96700000001029078000000006000df"]) r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r4, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x100, 0x8002}, {0x3, 0x1}], 0x2}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x47}, 0x4000000000000003, 0x0, 0x0, 0x0, 0xfffffffffffffeb0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x89, 0x0) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x6, &(0x7f00000005c0)=[{0x9, 0x9, 0x26, 0x5}, {0x8, 0x7, 0xda, 0x352b}, {0x7, 0x7, 0xf8, 0x2010002}, {0x10, 0xe2, 0x7, 0x2}, {0xf, 0x9, 0x0, 0xe}, {0x3f35, 0x5, 0x9c, 0x6}]}) getppid() getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, 0xc) setuid(r6) r7 = socket(0x10, 0x1, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) connect$unix(r8, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) getsockopt$sock_cred(r8, 0xffff, 0x1022, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$FIONREAD(r4, 0x4004667f, &(0x7f0000000200)) setsockopt(r7, 0x1000000000029, 0x9, 0x0, 0x0) shutdown(r0, 0x0) 124.901853ms ago: executing program 4 (id=1617): mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) r0 = socket(0x18, 0x3, 0x1) getsockopt(r0, 0x29, 0x23, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x10d, 0x3, 0xffffffffffff564e}], 0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000180)=[{r1, 0x91cbd8417f6167d9}], 0x1, 0x8) rename(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 124.180545ms ago: executing program 5 (id=1618): mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000002740)='./file0\x00', 0x8000, 0x1f6) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x3, 0x81ac, 0x4, 0x10, [{0x399, 0x7, 0x4, 0x71002}, {0x6, 0xa, 0x8, 0xfffffff9}, {0xcb9, 0xf88, 0x2000, 0x29}, {0x0, 0x2, 0x8007}, {0x401, 0x200727, 0x2800, 0x5}, {0x1, 0x64e, 0x200, 0x99}, {0xce1, 0x8000000, 0x4f8, 0x6d}, {0x3, 0x8, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8, 0xd17, 0x4}, {0x1c6, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x2, 0x7}, {0xb8c, 0x7, 0x8, 0x8}, {0x29a71717, 0xffff7ffa, 0x9, 0x6}, {0xc, 0x5, 0x5, 0x10000000}, {0xfffffffd, 0xfffffffe, 0xffe, 0x20004}]}) open(&(0x7f0000000080)='./file0\x00', 0x800, 0x69) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x7, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x0, [{&(0x7f0000587000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000b7b000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000e0e000/0x4000)=nil, 0x4000000000}, {&(0x7f0000ca2000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000f93000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000c20000/0x4000)=nil, &(0x7f0000eb0000/0x14000)=nil}, {&(0x7f0000ec3000/0x4000)=nil, &(0x7f0000efd000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f0000eb0000/0x2000)=nil, &(0x7f0000a73000/0x3000)=nil, 0x2}, {&(0x7f0000ca4000/0x1000)=nil, &(0x7f0000b7c000/0x2000)=nil, 0x2}, {&(0x7f00008fb000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000a75000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x6}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x100000001}, {&(0x7f0000c64000/0x14000)=nil, &(0x7f00001d0000/0x2000)=nil, 0x9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000407000/0x2000)=nil}, {&(0x7f0000913000/0x2000)=nil, &(0x7f0000c22000/0x2000)=nil}], './file0\x00'}) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x6) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xa}, 0x4, &(0x7f0000001a40), &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f00000037c0)=[{&(0x7f00000027c0)=""/4096, 0x1000}], 0x1) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/165, 0xa5}], 0x1, 0xcf) mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000002740)='./file0\x00', 0x8000, 0x1f6) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x3, 0x81ac, 0x4, 0x10, [{0x399, 0x7, 0x4, 0x71002}, {0x6, 0xa, 0x8, 0xfffffff9}, {0xcb9, 0xf88, 0x2000, 0x29}, {0x0, 0x2, 0x8007}, {0x401, 0x200727, 0x2800, 0x5}, {0x1, 0x64e, 0x200, 0x99}, {0xce1, 0x8000000, 0x4f8, 0x6d}, {0x3, 0x8, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8, 0xd17, 0x4}, {0x1c6, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x2, 0x7}, {0xb8c, 0x7, 0x8, 0x8}, {0x29a71717, 0xffff7ffa, 0x9, 0x6}, {0xc, 0x5, 0x5, 0x10000000}, {0xfffffffd, 0xfffffffe, 0xffe, 0x20004}]}) (async) open(&(0x7f0000000080)='./file0\x00', 0x800, 0x69) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x7, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x0, [{&(0x7f0000587000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000b7b000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000e0e000/0x4000)=nil, 0x4000000000}, {&(0x7f0000ca2000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000f93000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000c20000/0x4000)=nil, &(0x7f0000eb0000/0x14000)=nil}, {&(0x7f0000ec3000/0x4000)=nil, &(0x7f0000efd000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f0000eb0000/0x2000)=nil, &(0x7f0000a73000/0x3000)=nil, 0x2}, {&(0x7f0000ca4000/0x1000)=nil, &(0x7f0000b7c000/0x2000)=nil, 0x2}, {&(0x7f00008fb000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000a75000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x6}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x100000001}, {&(0x7f0000c64000/0x14000)=nil, &(0x7f00001d0000/0x2000)=nil, 0x9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000407000/0x2000)=nil}, {&(0x7f0000913000/0x2000)=nil, &(0x7f0000c22000/0x2000)=nil}], './file0\x00'}) (async) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x6) (async) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xa}, 0x4, &(0x7f0000001a40), &(0x7f0000000100), 0x0, 0x0) (async) readv(r0, &(0x7f00000037c0)=[{&(0x7f00000027c0)=""/4096, 0x1000}], 0x1) (async) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/165, 0xa5}], 0x1, 0xcf) (async) 19.685114ms ago: executing program 0 (id=1619): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x56}) r0 = syz_open_pts() close(r0) syz_open_pts() writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="cff5c05664da486cda974a82003b553a10352e3b00000000000000000000000000000073ac49ac06a9e4e9b65e0324e9bf5e74fd975d0d2cff3462091f394b68266abab26ed0d7a63dbabc2e660a69ef2122a47908e45054de3a637a7c6efc479a8e40b5c5a63577f3870339d67da18a7b4961f761edbb2ac7a867e54b41a1df0e10ff79e80bb5a9e3c9787a1cac9db369496cf3a812f67832035b7ccfbfe47456cc253eaa0bcddc035dcc65dcac1ac0daf400000000000000000067a300", 0xbe}], 0x1) getrlimit(0x1, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 15.835586ms ago: executing program 6 (id=1620): stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @rand_addr="00fe00feffffff0300", @mcast2, {[], @udp={{0x0, 0x2, 0x8}}}}}}}) 0s ago: executing program 3 (id=1621): r0 = socket(0x2, 0x3, 0x0) shutdown(r0, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40a) socket$inet(0x2, 0x8003, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, @multicast2}, @icmp=@echo={0x8, 0x0, 0x0, 0x0, 0x100}}}}}) sysctl$ddb(&(0x7f0000000100)={0x9, 0x1}, 0x2, 0x0, 0x0, &(0x7f0000000080)='\r\x00\x00\x00', 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. pckbd_enable: command error uvn_flush: obj=0xfffffd80610cba70, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error WARNING: thread `nfsio' (157776) exits with status -1 WARNING: thread `nfsio' (476004) exits with status -1 WARNING: thread `nfsio' (307241) exits with status -1 WARNING: thread `nfsio' (117087) exits with status -1 WARNING: thread `nfsio' (106615) exits with status -1 WARNING: thread `nfsio' (266435) exits with status -1 WARNING: thread `nfsio' (458448) exits with status -1 WARNING: thread `nfsio' (338481) exits with status -1 WARNING: thread `nfsio' (509535) exits with status -1 WARNING: thread `nfsio' (252058) exits with status -1 WARNING: thread `nfsio' (426746) exits with status -1 WARNING: thread `nfsio' (239720) exits with status -1 WARNING: thread `nfsio' (228770) exits with status -1 WARNING: thread `nfsio' (451356) exits with status -1 WARNING: thread `nfsio' (77226) exits with status -1 WARNING: thread `nfsio' (465176) exits with status -1 WARNING: thread `nfsio' (183034) exits with status -1 WARNING: thread `nfsio' (182193) exits with status -1 WARNING: thread `nfsio' (459354) exits with status -1 WARNING: thread `nfsio' (60002) exits with status -1 malloc(): allocation too large, type = 127, size = 1073510800 uvn_flush: obj=0xfffffd805ea73720, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! denied attempt to set clock back 1762232227 seconds denied attempt to set clock back 1762232227 seconds denied attempt to set clock back 1190949805 seconds denied attempt to set clock back 1190949805 seconds uvm_fault(0xfffffd805de519b0, 0x20, 0, 1) -> e kernel: page fault trap, code=0 Stopped at mtx_enter_try+0x7b: movl 0x8(%r14),%r15d TID PID UID PRFLAGS PFLAGS CPU COMMAND 417310 43006 0 0 0 0 syz-executor mtx_enter_try(18) at mtx_enter_try+0x7b mtx_enter(18) at mtx_enter+0x62 clockintr_unbind(ffff80000169e430,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff800001468000) at dt_ioctl_record_stop+0xbc dtclose(11e5f,1,2000,ffff800038bfe7f0) at dtclose+0x109 spec_close(ffff80003c406760) at spec_close+0x466 VOP_CLOSE(fffffd805f0c82e0,1,fffffd80097fb3a8,ffff800038bfe7f0) at VOP_CLOSE+0x132 vn_closefile(fffffd806845c890,ffff800038bfe7f0) at vn_closefile+0x12b fdrop(fffffd806845c890,ffff800038bfe7f0) at fdrop+0x121 closef(fffffd806845c890,ffff800038bfe7f0) at closef+0x192 fdfree(ffff800038bfe7f0) at fdfree+0x116 exit1(ffff800038bfe7f0,0,0,1) at exit1+0x576 sys_exit(ffff800038bfe7f0,ffff80003c406ad0,ffff80003c406a20) at sys_exit+0x1a syscall(ffff80003c406ad0) at syscall+0xb17 end trace frame: 0xffff80003c406b50, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd805de519b0, 0x20, 0, 1) -> e ddb{1}> trace mtx_enter_try(18) at mtx_enter_try+0x7b mtx_enter(18) at mtx_enter+0x62 clockintr_unbind(ffff80000169e430,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff800001468000) at dt_ioctl_record_stop+0xbc dtclose(11e5f,1,2000,ffff800038bfe7f0) at dtclose+0x109 spec_close(ffff80003c406760) at spec_close+0x466 VOP_CLOSE(fffffd805f0c82e0,1,fffffd80097fb3a8,ffff800038bfe7f0) at VOP_CLOSE+0x132 vn_closefile(fffffd806845c890,ffff800038bfe7f0) at vn_closefile+0x12b fdrop(fffffd806845c890,ffff800038bfe7f0) at fdrop+0x121 closef(fffffd806845c890,ffff800038bfe7f0) at closef+0x192 fdfree(ffff800038bfe7f0) at fdfree+0x116 exit1(ffff800038bfe7f0,0,0,1) at exit1+0x576 sys_exit(ffff800038bfe7f0,ffff80003c406ad0,ffff80003c406a20) at sys_exit+0x1a syscall(ffff80003c406ad0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76328beeb050, count: -15 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003c4065c0 rbx 0 rdx 0 rcx 0xffff800038bfe7f0 rax 0xffff8000299edf00 r8 0xffffffffffffffff r9 0x1 r10 0xc0b304ec25e1a931 r11 0x653eda60f1bdf42d r12 0x1 r13 0xffff8000299edff0 r14 0x18 r15 0 rip 0xffffffff817915ab mtx_enter_try+0x7b cs 0x8 rflags 0x10297 __ALIGN_SIZE+0xf297 rsp 0xffff80003c406580 ss 0x10 mtx_enter_try+0x7b: movl 0x8(%r14),%r15d ddb{1}> show proc PROC (syz-executor) tid=259700 pid=35628 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff800038bfe7f0 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff800038bfe028,0xffff800038bfed30 process=0xffff80003c465d08 user=0xffff80003c401000, vmspace=0xfffffd805de519b0 estcpu=36, cpticks=4, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 43006 417310 28817 0 7 0 syz-executor 18596 142834 23315 0 2 0 syz-executor 18596 441532 23315 0 2 0x4000000 syz-executor 80916 253039 34280 0 2 0 syz-executor 80916 358698 34280 0 3 0x4000080 fsleep syz-executor 94805 66384 20605 0 2 0 syz-executor 94805 418468 20605 0 2 0x4000000 syz-executor 94805 446760 20605 0 3 0x4000080 fsleep syz-executor 35149 40611 59655 0 3 0x80 nanoslp syz-executor 35149 219195 59655 0 3 0x4000080 lockf syz-executor 35149 521242 59655 0 3 0x4000080 fsleep syz-executor 35149 402947 59655 0 3 0x4000080 fsleep syz-executor 81945 188728 92207 0 3 0x80 nanoslp syz-executor 81945 289995 92207 0 3 0x4000080 kqsel syz-executor 81945 429949 92207 0 3 0x4000080 fsleep syz-executor 81945 161628 92207 0 3 0x4000080 fsleep syz-executor 33463 357312 14151 0 2 0x2 syz-executor 20605 186527 14151 0 2 0x3 syz-executor 23315 308245 14151 0 2 0x2 syz-executor 53465 22558 14151 0 2 0x2 syz-executor 28817 117225 14151 0 3 0x82 nanoslp syz-executor 34280 463747 14151 0 3 0x82 nanoslp syz-executor 92207 234166 14151 0 3 0x82 nanoslp syz-executor 59655 396116 14151 0 2 0x3 syz-executor 14151 491400 53081 0 3 0x82 kqread syz-executor 53081 445701 32925 0 3 0x10008a sigsusp ksh 32925 516211 34133 0 3 0x98 kqread sshd-session 34133 145884 77574 0 3 0x92 kqread sshd-session 48386 301566 1 0 3 0x100083 ttyopn getty 77574 126745 1 0 3 0x88 kqread sshd 86892 415373 5657 74 3 0x1100092 bpf pflogd 5657 33939 1 0 3 0x80 sbwait pflogd 31592 326354 22711 73 3 0x1100090 kqread syslogd 22711 134257 1 0 3 0x100082 sbwait syslogd 25887 65169 1 0 3 0x100080 kqread resolvd 8854 137306 82106 77 3 0x100092 kqread dhcpleased 30574 327494 82106 77 3 0x100092 kqread dhcpleased 82106 3102 1 0 3 0x80 kqread dhcpleased 58883 305574 0 0 3 0x14200 bored smr 5223 268814 0 0 2 0x14200 zerothread 26407 96391 0 0 3 0x14200 aiodoned aiodoned 66590 476469 0 0 3 0x14200 syncer update 94007 437277 0 0 3 0x14200 cleaner cleaner 2603 510752 0 0 2 0x14200 reaper 24635 8930 0 0 3 0x14200 pgdaemon pagedaemon 38162 234164 0 0 3 0x14200 bored viomb 4500 117438 0 0 3 0x40014200 acpi0 acpi0 11169 61795 0 0 3 0x40014200 idle1 1613 377629 0 0 3 0x14200 bored softnet1 30355 220112 0 0 3 0x14200 bored softnet0 2503 170967 0 0 3 0x14200 bored systqmp 31893 175373 0 0 3 0x14200 bored systq 13144 431405 0 0 3 0x14200 tmoslp softclockmp 15806 481401 0 0 3 0x40014200 tmoslp softclock 48024 117917 0 0 3 0x40014200 idle0 1 317865 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 18596 (syz-executor) thread 0xffff800038bff4e8 (441532) Process 94805 (syz-executor) thread 0xffff800038bf42c8 (418468) Process 53465 (syz-executor) thread 0xffff80002a2854d8 (22558) Process 2603 (reaper) thread 0xffff8000ffffdc90 (510752) ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10241 11111K 12632K 166960K 13423 0 pcb 18 15K 17K 166960K 603 0 rtable 197 12K 12K 166960K 921 0 pf 34 17K 67486K 166960K 313 0 ifaddr 37 6K 7K 166960K 216 0 ifgroup 55 2K 3K 166960K 416 0 sysctl 4 1K 9K 166960K 13 0 counters 68 36K 38K 166960K 478 0 ioctlops 0 0K 4K 166960K 1941 0 iov 0 0K 16K 166960K 128 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1496 94K 95K 166960K 2936 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 21 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 86 0 dirhash 12 2K 2K 166960K 57 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 232K 166960K 1832 0 sigio 0 0K 0K 166960K 57 0 proc 72 115K 164K 166960K 818 0 subproc 72 4K 4K 166960K 108 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 244 0 in_multi 64 4K 7K 166960K 252 0 ether_multi 1 0K 0K 166960K 30 0 mrt 1 0K 0K 166960K 19 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 139 625K 625K 166960K 139 0 exec 0 0K 1K 166960K 760 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 254 169K 186K 166960K 18241 0 UVM aobj 41 5K 5K 166960K 45 0 pinsyscall 43 86K 102K 166960K 3122 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 114 0 NDP 12 0K 2K 166960K 134 0 temp 111 8664K 8920K 166960K 92842 0 kqueue 14 22K 32K 166960K 390 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 195 0 192 2 1 1 2 0 8 0 rtentry 176 269 0 201 6 1 5 6 0 8 0 unpcb 144 1171 0 1154 10 9 1 6 0 8 0 syncache 336 10 0 10 3 3 0 1 0 8 0 tcpqe 32 3 4 3 2 2 0 1 0 8 0 tcpcb 736 708 0 700 18 16 2 7 0 8 0 arp 136 31 0 18 1 0 1 1 0 8 0 inpcb 328 2400 0 2386 24 22 2 12 0 8 0 nd6 152 37 0 22 1 0 1 1 0 8 0 pkpcb 40 76 0 76 2 2 0 1 0 8 0 kcovpl 48 12 0 4 1 0 1 1 0 8 0 mppekey 1024 2 0 2 1 1 0 1 0 8 0 ppxss 1192 149 0 149 2 2 0 1 0 8 0 pppxif 1504 75 0 75 3 3 0 1 0 8 0 pffrag 232 14 0 4 1 0 1 1 0 482 0 pffrnode 88 9 0 0 1 0 1 1 0 8 0 pffrent 40 21 0 11 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 2 0 2 2 2 0 1 0 8 0 pfstitem 24 113 0 36 1 0 1 1 0 8 0 pfstkey 128 113 0 36 3 0 3 3 0 8 0 pfstate 384 113 0 36 8 0 8 8 0 8 0 pfrule 1344 22 0 17 2 1 1 2 0 8 0 rttmr 136 3 0 3 3 3 0 1 0 8 0 art_heap8 4096 5 0 0 5 0 5 5 0 8 0 art_heap4 256 1093 0 811 34 16 18 31 0 8 0 art_table 40 1098 0 811 5 0 5 5 0 8 0 art_node 32 269 0 209 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 3 2 2 0 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 79 0 69 1 0 1 1 0 8 0 shmpl 112 42 0 4 2 0 2 2 0 8 0 dirhash 1024 47 0 30 3 0 3 3 0 8 0 dino2pl 256 4988 0 3478 96 0 96 96 0 8 0 ffsino 296 4988 0 3478 118 1 117 118 0 8 0 nchpl 144 7459 0 5751 64 0 64 64 0 8 0 rtmask 32 18 0 18 3 3 0 1 0 8 0 vnodes 216 5834 0 0 325 0 325 325 0 8 0 namei 1024 25828 0 25827 3 2 1 2 0 8 0 percpumem 16 254 0 205 1 0 1 1 0 8 0 kstatmem 264 226 0 196 3 0 3 3 0 8 0 acpiwqpl 32 2 0 2 1 0 1 1 1 8 1 scsiplug 72 11 0 11 4 4 0 1 0 8 0 scxspl 216 54410 0 54410 13 12 1 8 1 8 1 plimitpl 152 398 0 380 1 0 1 1 0 8 0 sigapl 424 2159 0 2111 8 1 7 8 0 8 0 knotepl 120 551 0 0 17 0 17 17 0 8 0 kqueuepl 224 761 0 750 6 5 1 3 0 8 0 pipepl 344 275 0 248 3 0 3 3 0 8 0 fdescpl 528 2122 0 2090 3 0 3 3 0 8 0 filepl 160 14320 0 14092 33 20 13 20 0 8 1 lockfpl 104 822 0 818 2 1 1 2 0 8 0 lockfspl 48 357 0 354 1 0 1 1 0 8 0 sessionpl 144 33 0 24 1 0 1 1 0 8 0 pgrppl 48 67 0 50 1 0 1 1 0 8 0 ucredpl 104 2274 0 2261 1 0 1 1 0 8 0 zombiepl 144 2138 0 2137 2 1 1 1 0 8 0 processpl 1232 2159 0 2111 6 0 6 6 0 8 0 procpl 664 4978 0 4919 8 2 6 8 0 8 0 sosppl 176 8 0 8 3 3 0 1 0 8 0 sockpl 752 3907 0 3873 38 33 5 18 0 8 0 mcl64k 65536 8 0 0 1 0 1 1 0 8 0 mcl16k 16384 6 0 0 1 0 1 1 0 8 0 mcl12k 12288 4 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 8 0 0 1 0 1 1 0 8 0 mcl4k 4096 120 0 0 15 0 15 15 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 30 0 0 4 0 4 4 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 386 0 0 23 0 23 23 0 8 0 bufpl 280 22044 0 15907 439 0 439 439 0 8 0 anonpl 32 17050 0 0 139 1 138 139 0 246 0 amapchunkpl 152 61789 0 61200 47 17 30 37 0 158 5 amappl16 200 9866 0 9827 73 58 15 40 0 8 3 amappl15 192 7 0 7 1 1 0 1 0 8 0 amappl14 184 14 0 14 2 2 0 1 0 8 0 amappl13 176 487 0 485 1 0 1 1 0 8 0 amappl12 168 2533 0 2492 3 0 3 3 0 8 0 amappl11 160 4 0 4 1 1 0 1 0 8 0 amappl10 152 78 0 64 1 0 1 1 0 8 0 amappl9 144 252 0 252 1 1 0 1 0 8 0 amappl8 136 27 0 24 1 0 1 1 0 8 0 amappl7 128 101 0 99 1 0 1 1 0 8 0 amappl6 120 336 0 322 1 0 1 1 0 8 0 amappl5 112 90 0 78 1 0 1 1 0 8 0 amappl4 104 486 0 454 1 0 1 1 0 8 0 amappl3 96 11057 0 10963 4 1 3 3 0 8 0 amappl2 88 2283 0 2207 2 0 2 2 0 8 0 amappl1 80 18804 0 18207 15 1 14 15 0 8 0 amappl 88 17092 0 16917 5 0 5 5 0 92 0 uvmvnodes 80 5834 0 0 120 0 120 120 0 8 0 dma65536 65536 1 0 1 1 1 0 1 0 8 0 dma32768 32768 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma2048 2048 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 257 0 257 3 3 0 1 0 8 0 dma64 64 8 0 8 3 3 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 20 0 19 1 0 1 1 0 8 0 aobjpl 72 44 0 4 1 0 1 1 0 8 0 uaddrrnd 24 2122 0 2090 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 2122 0 2090 1 0 1 1 0 8 0 vmmpekpl 168 16996 0 16947 3 0 3 3 0 8 0 vmmpepl 168 144755 0 142789 135 35 100 118 0 357 1 vmsppl 488 2121 0 2090 6 1 5 5 0 8 0 rwobjpl 80 47126 0 40295 147 3 144 144 0 8 0 pdppl 4096 4251 0 4180 109 38 71 83 0 8 0 pvpl 32 25157 0 0 204 1 203 203 0 265 0 pmappl 256 2121 0 2090 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 326 0 81 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83826ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838c9db8) at __mp_lock+0x192 end trace frame: 0x0, count: 11 ddb{0}> trace x86_ipi_db(ffffffff83826ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838c9db8) at __mp_lock+0x192 end trace frame: 0x0, count: -4 ddb{0}> machine ddbcpu 1 Stopped at mtx_enter_try+0x7b: movl 0x8(%r14),%r15d mtx_enter_try(18) at mtx_enter_try+0x7b mtx_enter(18) at mtx_enter+0x62 clockintr_unbind(ffff80000169e430,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff800001468000) at dt_ioctl_record_stop+0xbc dtclose(11e5f,1,2000,ffff800038bfe7f0) at dtclose+0x109 spec_close(ffff80003c406760) at spec_close+0x466 VOP_CLOSE(fffffd805f0c82e0,1,fffffd80097fb3a8,ffff800038bfe7f0) at VOP_CLOSE+0x132 vn_closefile(fffffd806845c890,ffff800038bfe7f0) at vn_closefile+0x12b fdrop(fffffd806845c890,ffff800038bfe7f0) at fdrop+0x121 closef(fffffd806845c890,ffff800038bfe7f0) at closef+0x192 fdfree(ffff800038bfe7f0) at fdfree+0x116 exit1(ffff800038bfe7f0,0,0,1) at exit1+0x576 sys_exit(ffff800038bfe7f0,ffff80003c406ad0,ffff80003c406a20) at sys_exit+0x1a syscall(ffff80003c406ad0) at syscall+0xb17 end trace frame: 0xffff80003c406b50, count: 0 ddb{1}> trace mtx_enter_try(18) at mtx_enter_try+0x7b mtx_enter(18) at mtx_enter+0x62 clockintr_unbind(ffff80000169e430,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff800001468000) at dt_ioctl_record_stop+0xbc dtclose(11e5f,1,2000,ffff800038bfe7f0) at dtclose+0x109 spec_close(ffff80003c406760) at spec_close+0x466 VOP_CLOSE(fffffd805f0c82e0,1,fffffd80097fb3a8,ffff800038bfe7f0) at VOP_CLOSE+0x132 vn_closefile(fffffd806845c890,ffff800038bfe7f0) at vn_closefile+0x12b fdrop(fffffd806845c890,ffff800038bfe7f0) at fdrop+0x121 closef(fffffd806845c890,ffff800038bfe7f0) at closef+0x192 fdfree(ffff800038bfe7f0) at fdfree+0x116 exit1(ffff800038bfe7f0,0,0,1) at exit1+0x576 sys_exit(ffff800038bfe7f0,ffff80003c406ad0,ffff80003c406a20) at sys_exit+0x1a syscall(ffff80003c406ad0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76328beeb050, count: -15